@prosopo/provider 5.19.2 → 5.19.4

package/dist/tests/unit/utils/mobileSignals.unit.test.js

@@ -0,0 +1,161 @@
+import { describe, expect, it } from "vitest";
+import { deriveMobileVerdict, } from "../../../utils/mobileSignals.js";
+const IPHONE_UA = "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1";
+const PIXEL_UA = "Mozilla/5.0 (Linux; Android 14; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36";
+const WINDOWS_CHROME_UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36";
+const MAC_UA = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15";
+const LINUX_FIREFOX_UA = "Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0";
+const androidChromeHints = {
+    "sec-ch-ua-mobile": "?1",
+    "sec-ch-ua-platform": '"Android"',
+};
+const windowsChromeHints = {
+    "sec-ch-ua-mobile": "?0",
+    "sec-ch-ua-platform": '"Windows"',
+};
+describe("deriveMobileVerdict", () => {
+    describe("device, not network", () => {
+        it("reads a phone on home Wi-Fi as mobile", () => {
+            expect(deriveMobileVerdict({
+                userAgent: IPHONE_UA,
+                carrierNetwork: false,
+                tcpMss: 1460,
+            }).isMobile).toBe(true);
+        });
+        it("does not read a tethered laptop as mobile", () => {
+            expect(deriveMobileVerdict({
+                userAgent: WINDOWS_CHROME_UA,
+                headers: windowsChromeHints,
+                carrierNetwork: true,
+                tcpMss: 1400,
+            }).isMobile).toBe(false);
+        });
+        it("does not read a touchscreen laptop as mobile", () => {
+            expect(deriveMobileVerdict({
+                userAgent: WINDOWS_CHROME_UA,
+                headers: windowsChromeHints,
+                deviceCapability: "mobile",
+                touchEventCount: 40,
+            }).isMobile).toBe(false);
+        });
+    });
+    describe("platform declarations", () => {
+        it("accepts a mobile UA alone, since WebKit sends no client hints", () => {
+            expect(deriveMobileVerdict({ userAgent: IPHONE_UA }).isMobile).toBe(true);
+        });
+        it("accepts the client hints alone, with no UA at all", () => {
+            expect(deriveMobileVerdict({ headers: androidChromeHints }).isMobile).toBe(true);
+        });
+        it("reads the platform hint case- and quote-insensitively", () => {
+            expect(deriveMobileVerdict({
+                headers: { "sec-ch-ua-platform": "iOS" },
+            }).evidence).toContain("clientHintPlatformMobile");
+        });
+        it("rejects a mobile UA the client hints contradict", () => {
+            expect(deriveMobileVerdict({
+                userAgent: PIXEL_UA,
+                headers: windowsChromeHints,
+            }).isMobile).toBe(false);
+        });
+        it("accepts a desktop UA the client hints contradict", () => {
+            expect(deriveMobileVerdict({
+                userAgent: WINDOWS_CHROME_UA,
+                headers: androidChromeHints,
+            }).isMobile).toBe(true);
+        });
+        it.each([
+            ["Windows Chrome", WINDOWS_CHROME_UA],
+            ["Mac Safari", MAC_UA],
+            ["Linux Firefox", LINUX_FIREFOX_UA],
+        ])("does not read %s as mobile", (_name, userAgent) => {
+            expect(deriveMobileVerdict({ userAgent }).isMobile).toBe(false);
+        });
+    });
+    describe("corroborating signals", () => {
+        it("does not let the carrier bit alone decide", () => {
+            expect(deriveMobileVerdict({ carrierNetwork: true }).isMobile).toBe(false);
+        });
+        it("does not let a tunnelled MSS alone decide", () => {
+            expect(deriveMobileVerdict({ tcpMss: 1348 }).isMobile).toBe(false);
+        });
+        it.each([1300, 1348, 1400, 1430])("counts MSS %i as tunnelled", (tcpMss) => {
+            expect(deriveMobileVerdict({ tcpMss }).evidence).toContain("tunnelledMss");
+        });
+        it("scores the carrier bit and a tunnelled MSS once between them", () => {
+            const both = deriveMobileVerdict({ carrierNetwork: true, tcpMss: 1400 });
+            const one = deriveMobileVerdict({ carrierNetwork: true });
+            expect(both.score).toBe(one.score);
+            expect(both.evidence).toEqual(["carrierNetwork+tunnelledMss"]);
+        });
+        it("does not let the two network signals plus a webView decide", () => {
+            expect(deriveMobileVerdict({
+                carrierNetwork: true,
+                tcpMss: 1400,
+                webView: true,
+            }).isMobile).toBe(false);
+        });
+        it.each([1452, 1460, 0])("does not count MSS %i as tunnelled", (tcpMss) => {
+            expect(deriveMobileVerdict({ tcpMss }).evidence).not.toContain("tunnelledMss");
+        });
+        it("lets touch evidence carry a UA-less client", () => {
+            expect(deriveMobileVerdict({
+                deviceCapability: "mobile",
+                touchEventCount: 12,
+            }).isMobile).toBe(true);
+        });
+        it("rejects a mobile UA that reports no touch support", () => {
+            expect(deriveMobileVerdict({
+                userAgent: PIXEL_UA,
+                deviceCapability: "desktop",
+            }).isMobile).toBe(false);
+        });
+        it("ignores a zero touch-event count", () => {
+            expect(deriveMobileVerdict({ touchEventCount: 0 }).evidence).not.toContain("touchEvents");
+        });
+    });
+    it("reads nothing as not mobile", () => {
+        const verdict = deriveMobileVerdict({});
+        expect(verdict.isMobile).toBe(false);
+        expect(verdict.score).toBe(0);
+        expect(verdict.evidence).toEqual([]);
+    });
+    describe("corroboration", () => {
+        it("is not corroborated by a User-Agent alone", () => {
+            const verdict = deriveMobileVerdict({ userAgent: IPHONE_UA });
+            expect(verdict.isMobile).toBe(true);
+            expect(verdict.corroborated).toBe(false);
+        });
+        it("is not corroborated by the client hints alone", () => {
+            const verdict = deriveMobileVerdict({ headers: androidChromeHints });
+            expect(verdict.isMobile).toBe(true);
+            expect(verdict.corroborated).toBe(false);
+        });
+        it.each([
+            ["a carrier network", { carrierNetwork: true }],
+            ["a tunnelled MSS", { tcpMss: 1400 }],
+            ["an in-app browser", { webView: true }],
+            ["touch support", { deviceCapability: "mobile" }],
+            ["touch events", { touchEventCount: 9 }],
+        ])("is corroborated by %s", (_name, extra) => {
+            const verdict = deriveMobileVerdict({
+                userAgent: IPHONE_UA,
+                ...extra,
+            });
+            expect(verdict.isMobile).toBe(true);
+            expect(verdict.corroborated).toBe(true);
+        });
+        it("is not corroborated by a signal that says desktop", () => {
+            expect(deriveMobileVerdict({
+                userAgent: IPHONE_UA,
+                deviceCapability: "desktop",
+            }).corroborated).toBe(false);
+        });
+    });
+    it("ignores empty header values", () => {
+        expect(deriveMobileVerdict({
+            userAgent: IPHONE_UA,
+            headers: { "sec-ch-ua-mobile": "", "sec-ch-ua-platform": "" },
+        }).evidence).toEqual(["userAgentMobile"]);
+    });
+});
+//# sourceMappingURL=mobileSignals.unit.test.js.map

package/dist/tests/unit/utils/mobileSignals.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobileSignals.unit.test.js","sourceRoot":"","sources":["../../../../src/tests/unit/utils/mobileSignals.unit.test.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAEN,mBAAmB,GACnB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,SAAS,GACd,yIAAyI,CAAC;AAC3I,MAAM,QAAQ,GACb,uHAAuH,CAAC;AACzH,MAAM,iBAAiB,GACtB,iHAAiH,CAAC;AACnH,MAAM,MAAM,GACX,uHAAuH,CAAC;AACzH,MAAM,gBAAgB,GACrB,wEAAwE,CAAC;AAE1E,MAAM,kBAAkB,GAAmB;IAC1C,kBAAkB,EAAE,IAAI;IACxB,oBAAoB,EAAE,WAAW;CACjC,CAAC;AACF,MAAM,kBAAkB,GAAmB;IAC1C,kBAAkB,EAAE,IAAI;IACxB,oBAAoB,EAAE,WAAW;CACjC,CAAC;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAChD,MAAM,CACL,mBAAmB,CAAC;gBACnB,SAAS,EAAE,SAAS;gBACpB,cAAc,EAAE,KAAK;gBACrB,MAAM,EAAE,IAAI;aACZ,CAAC,CAAC,QAAQ,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACpD,MAAM,CACL,mBAAmB,CAAC;gBACnB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,kBAAkB;gBAC3B,cAAc,EAAE,IAAI;gBACpB,MAAM,EAAE,IAAI;aACZ,CAAC,CAAC,QAAQ,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACvD,MAAM,CACL,mBAAmB,CAAC;gBACnB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,kBAAkB;gBAC3B,gBAAgB,EAAE,QAAQ;gBAC1B,eAAe,EAAE,EAAE;aACnB,CAAC,CAAC,QAAQ,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACxE,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC5D,MAAM,CACL,mBAAmB,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAC7D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAChE,MAAM,CACL,mBAAmB,CAAC;gBACnB,OAAO,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;aACxC,CAAC,CAAC,QAAQ,CACX,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YAC1D,MAAM,CACL,mBAAmB,CAAC;gBACnB,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,kBAAkB;aAC3B,CAAC,CAAC,QAAQ,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC3D,MAAM,CACL,mBAAmB,CAAC;gBACnB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,kBAAkB;aAC3B,CAAC,CAAC,QAAQ,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,IAAI,CAAC;YACP,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;YACrC,CAAC,YAAY,EAAE,MAAM,CAAC;YACtB,CAAC,eAAe,EAAE,gBAAgB,CAAC;SACnC,CAAC,CAAC,4BAA4B,EAAE,CAAC,KAAa,EAAE,SAAiB,EAAE,EAAE;YACrE,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,mBAAmB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAClE,KAAK,CACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAChC,4BAA4B,EAC5B,CAAC,MAAc,EAAE,EAAE;YAClB,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,CACzD,cAAc,CACd,CAAC;QACH,CAAC,CACD,CAAC;QAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACvE,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEnC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACrE,MAAM,CACL,mBAAmB,CAAC;gBACnB,cAAc,EAAE,IAAI;gBACpB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;aACb,CAAC,CAAC,QAAQ,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CACvB,oCAAoC,EACpC,CAAC,MAAc,EAAE,EAAE;YAClB,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAC7D,cAAc,CACd,CAAC;QACH,CAAC,CACD,CAAC;QAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACrD,MAAM,CACL,mBAAmB,CAAC;gBACnB,gBAAgB,EAAE,QAAQ;gBAC1B,eAAe,EAAE,EAAE;aACnB,CAAC,CAAC,QAAQ,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC5D,MAAM,CACL,mBAAmB,CAAC;gBACnB,SAAS,EAAE,QAAQ;gBACnB,gBAAgB,EAAE,SAAS;aAC3B,CAAC,CAAC,QAAQ,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC3C,MAAM,CACL,mBAAmB,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CACpD,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACtC,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACxD,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,IAAI,CAAC;YACP,CAAC,mBAAmB,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACrC,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxC,CAAC,eAAe,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;YACjD,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;SACxC,CAAC,CACD,uBAAuB,EACvB,CAAC,KAAa,EAAE,KAA6B,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,mBAAmB,CAAC;gBACnC,SAAS,EAAE,SAAS;gBACpB,GAAG,KAAK;aACR,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,CACD,CAAC;QAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC5D,MAAM,CACL,mBAAmB,CAAC;gBACnB,SAAS,EAAE,SAAS;gBACpB,gBAAgB,EAAE,SAAS;aAC3B,CAAC,CAAC,YAAY,CACf,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACtC,MAAM,CACL,mBAAmB,CAAC;YACnB,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE;SAC7D,CAAC,CAAC,QAAQ,CACX,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/utils/devicePlatform.d.ts

@@ -1,6 +1,6 @@
 import type { ITrafficFilter, RoutingMachinePlatform, TrafficCategoryPolicies } from "@prosopo/types";
-export declare const derivePlatform: (userAgent: string, webView: boolean, ipInfo?: {
-    isMobile?: boolean;
-}) => RoutingMachinePlatform;
+import { type MobileSignals } from "./mobileSignals.js";
+export type PlatformSignals = Omit<MobileSignals, "userAgent" | "webView">;
+export declare const derivePlatform: (userAgent: string, webView: boolean, signals?: PlatformSignals) => RoutingMachinePlatform;
 export declare const deriveTrafficPolicies: (trafficFilter: Partial<ITrafficFilter> | undefined) => TrafficCategoryPolicies | undefined;
 //# sourceMappingURL=devicePlatform.d.ts.map

package/dist/utils/devicePlatform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devicePlatform.d.ts","sourceRoot":"","sources":["../../src/utils/devicePlatform.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACX,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,MAAM,gBAAgB,CAAC;AAcxB,eAAO,MAAM,cAAc,cACf,MAAM,WACR,OAAO,WACP;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,KAC7B,sBAOD,CAAC;AA0BH,eAAO,MAAM,qBAAqB,kBAClB,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,KAChD,uBAAuB,GAAG,SAY5B,CAAC"}
+{"version":3,"file":"devicePlatform.d.ts","sourceRoot":"","sources":["../../src/utils/devicePlatform.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACX,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,KAAK,aAAa,EAAuB,MAAM,oBAAoB,CAAC;AAQ7E,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;AAQ3E,eAAO,MAAM,cAAc,cACf,MAAM,WACR,OAAO,YACP,eAAe,KACtB,sBAID,CAAC;AA0BH,eAAO,MAAM,qBAAqB,kBAClB,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,KAChD,uBAAuB,GAAG,SAY5B,CAAC"}

package/dist/utils/devicePlatform.js

@@ -1,16 +1,20 @@
+import { deriveMobileVerdict } from "./mobileSignals.js";
 //#region src/utils/devicePlatform.ts
 var APPLE_UA_REGEX = /iPhone|iPad|iPod|Macintosh|Mac OS X/i;
-var MOBILE_UA_REGEX = /Mobile|Android|iPhone|iPad|iPod|Opera Mini|IEMobile/i;
 /**
 * Derive platform flags from server-visible signals. `isWebView` is supplied
 * by the caller because that bit only comes from the encrypted bot-detection
-* payload, not request headers. `isMobile` prefers IPInfo's network-classified
-* mobile bit when present and falls back to UA parsing otherwise.
+* payload, not request headers. `isMobile` is a weighed verdict over whatever
+* signals the caller can supply — see `deriveMobileVerdict`.
 */
-var derivePlatform = (userAgent, webView, ipInfo) => ({
+var derivePlatform = (userAgent, webView, signals = {}) => ({
 	isApple: APPLE_UA_REGEX.test(userAgent),
 	isWebView: webView,
-	isMobile: typeof ipInfo?.isMobile === "boolean" ? ipInfo.isMobile : MOBILE_UA_REGEX.test(userAgent)
+	isMobile: deriveMobileVerdict({
+		...signals,
+		userAgent,
+		webView
+	}).isMobile
 });
 var TRAFFIC_FILTER_CATEGORIES = [
 	"vpn",

package/dist/utils/devicePlatform.js.map

@@ -1 +1 @@
-{"version":3,"file":"devicePlatform.js","sourceRoot":"","sources":["../../src/utils/devicePlatform.ts"],"names":[],"mappings":"AAuBA,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAC9D,MAAM,eAAe,GAAG,sDAAsD,CAAC;AAQ/E,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,SAAiB,EACjB,OAAgB,EAChB,MAA+B,EACN,EAAE,CAAC,CAAC;IAC7B,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;IACvC,SAAS,EAAE,OAAO;IAClB,QAAQ,EACP,OAAO,MAAM,EAAE,QAAQ,KAAK,SAAS;QACpC,CAAC,CAAC,MAAM,CAAC,QAAQ;QACjB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;CACnC,CAAC,CAAC;AAKH,MAAM,yBAAyB,GAAG;IACjC,KAAK;IACL,OAAO;IACP,KAAK;IACL,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,SAAS;CACqD,CAAC;AAYhE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,aAAkD,EACZ,EAAE;IACxC,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,QAAQ,IAAI,yBAAyB,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;YAC5B,GAAG,GAAG,IAAI,CAAC;QACZ,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC,CAAC"}
+{"version":3,"file":"devicePlatform.js","sourceRoot":"","sources":["../../src/utils/devicePlatform.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAsB,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAK7E,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAW9D,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,SAAiB,EACjB,OAAgB,EAChB,UAA2B,EAAE,EACJ,EAAE,CAAC,CAAC;IAC7B,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;IACvC,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,mBAAmB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ;CAC1E,CAAC,CAAC;AAKH,MAAM,yBAAyB,GAAG;IACjC,KAAK;IACL,OAAO;IACP,KAAK;IACL,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,SAAS;CACqD,CAAC;AAYhE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,aAAkD,EACZ,EAAE;IACxC,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,QAAQ,IAAI,yBAAyB,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;YAC5B,GAAG,GAAG,IAAI,CAAC;QACZ,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC,CAAC"}

package/dist/utils/mobileSignals.d.ts

@@ -0,0 +1,32 @@
+import type { RequestHeaders } from "@prosopo/types";
+export interface MobileSignals {
+    userAgent?: string;
+    headers?: RequestHeaders;
+    carrierNetwork?: boolean;
+    tcpMss?: number;
+    webView?: boolean;
+    deviceCapability?: string;
+    touchEventCount?: number;
+}
+export interface MobileVerdict {
+    isMobile: boolean;
+    corroborated: boolean;
+    score: number;
+    evidence: string[];
+}
+export declare const MOBILE_SIGNAL_WEIGHTS: {
+    readonly userAgentMobile: 3;
+    readonly userAgentDesktop: -3;
+    readonly clientHintMobile: 3;
+    readonly clientHintNotMobile: -3;
+    readonly clientHintPlatformMobile: 3;
+    readonly clientHintPlatformDesktop: -3;
+    readonly touchCapability: 2;
+    readonly pointerCapability: -3;
+    readonly touchEvents: 2;
+    readonly webView: 1;
+    readonly network: 1;
+};
+export declare const MOBILE_SCORE_THRESHOLD = 3;
+export declare const deriveMobileVerdict: (signals: MobileSignals) => MobileVerdict;
+//# sourceMappingURL=mobileSignals.d.ts.map

package/dist/utils/mobileSignals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobileSignals.d.ts","sourceRoot":"","sources":["../../src/utils/mobileSignals.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMrD,MAAM,WAAW,aAAa;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAElB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IAEd,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAeD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;CAexB,CAAC;AAEX,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAUxC,eAAO,MAAM,mBAAmB,YAAa,aAAa,KAAG,aAiF5D,CAAC"}

package/dist/utils/mobileSignals.js

@@ -0,0 +1,68 @@
+//#region src/utils/mobileSignals.ts
+var MOBILE_UA_REGEX = /Mobile|Android|iPhone|iPad|iPod|Opera Mini|IEMobile/i;
+var DESKTOP_UA_REGEX = /Windows NT|Macintosh|X11|CrOS/i;
+var MOBILE_PLATFORM_HINTS = ["android", "ios"];
+var DESKTOP_PLATFORM_HINTS = [
+	"windows",
+	"macos",
+	"linux",
+	"chrome os"
+];
+var TUNNELLED_MSS_MIN = 1300;
+var TUNNELLED_MSS_MAX = 1430;
+var MOBILE_SIGNAL_WEIGHTS = {
+	userAgentMobile: 3,
+	userAgentDesktop: -3,
+	clientHintMobile: 3,
+	clientHintNotMobile: -3,
+	clientHintPlatformMobile: 3,
+	clientHintPlatformDesktop: -3,
+	touchCapability: 2,
+	pointerCapability: -3,
+	touchEvents: 2,
+	webView: 1,
+	network: 1
+};
+var readHeader = (headers, name) => {
+	const value = headers?.[name];
+	return typeof value === "string" && value !== "" ? value : void 0;
+};
+var deriveMobileVerdict = (signals) => {
+	let score = 0;
+	let corroborated = false;
+	const evidence = [];
+	const vote = (name, evidenceName = name) => {
+		score += MOBILE_SIGNAL_WEIGHTS[name];
+		evidence.push(evidenceName);
+	};
+	const voteCorroborating = (name, evidenceName = name) => {
+		vote(name, evidenceName);
+		corroborated = true;
+	};
+	const userAgent = signals.userAgent ?? "";
+	if (MOBILE_UA_REGEX.test(userAgent)) vote("userAgentMobile");
+	else if (DESKTOP_UA_REGEX.test(userAgent)) vote("userAgentDesktop");
+	const mobileHint = readHeader(signals.headers, "sec-ch-ua-mobile");
+	if (mobileHint === "?1") vote("clientHintMobile");
+	else if (mobileHint === "?0") vote("clientHintNotMobile");
+	const platformHint = readHeader(signals.headers, "sec-ch-ua-platform")?.replaceAll("\"", "").toLowerCase();
+	if (platformHint !== void 0) {
+		if (MOBILE_PLATFORM_HINTS.includes(platformHint)) vote("clientHintPlatformMobile");
+		else if (DESKTOP_PLATFORM_HINTS.includes(platformHint)) vote("clientHintPlatformDesktop");
+	}
+	if (signals.deviceCapability === "mobile") voteCorroborating("touchCapability");
+	else if (signals.deviceCapability === "desktop") vote("pointerCapability");
+	if (signals.touchEventCount !== void 0 && signals.touchEventCount > 0) voteCorroborating("touchEvents");
+	if (signals.webView === true) voteCorroborating("webView");
+	const onCarrier = signals.carrierNetwork === true;
+	const tunnelled = signals.tcpMss !== void 0 && signals.tcpMss >= TUNNELLED_MSS_MIN && signals.tcpMss <= TUNNELLED_MSS_MAX;
+	if (onCarrier || tunnelled) voteCorroborating("network", onCarrier && tunnelled ? "carrierNetwork+tunnelledMss" : onCarrier ? "carrierNetwork" : "tunnelledMss");
+	return {
+		isMobile: score >= 3,
+		corroborated,
+		score,
+		evidence
+	};
+};
+//#endregion
+export { MOBILE_SIGNAL_WEIGHTS, deriveMobileVerdict };

package/dist/utils/mobileSignals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobileSignals.js","sourceRoot":"","sources":["../../src/utils/mobileSignals.ts"],"names":[],"mappings":"AA2CA,MAAM,eAAe,GAAG,sDAAsD,CAAC;AAC/E,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAG1D,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACjD,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAI1E,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAG/B,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,eAAe,EAAE,CAAC;IAClB,gBAAgB,EAAE,CAAC,CAAC;IACpB,gBAAgB,EAAE,CAAC;IACnB,mBAAmB,EAAE,CAAC,CAAC;IACvB,wBAAwB,EAAE,CAAC;IAC3B,yBAAyB,EAAE,CAAC,CAAC;IAC7B,eAAe,EAAE,CAAC;IAClB,iBAAiB,EAAE,CAAC,CAAC;IACrB,WAAW,EAAE,CAAC;IACd,OAAO,EAAE,CAAC;IAIV,OAAO,EAAE,CAAC;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,MAAM,UAAU,GAAG,CAClB,OAAmC,EACnC,IAAY,EACS,EAAE;IACvB,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAsB,EAAiB,EAAE;IAC5E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,CACZ,IAAwC,EACxC,eAAuB,IAAI,EACpB,EAAE;QACT,KAAK,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,CACzB,IAAwC,EACxC,eAAuB,IAAI,EACpB,EAAE;QACT,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzB,YAAY,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzB,CAAC;SAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACnE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC;QACrE,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;SACpB,WAAW,EAAE,CAAC;IAChB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC3C,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IACtC,CAAC;SAAM,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnD,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC1E,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9B,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IAClD,MAAM,SAAS,GACd,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,OAAO,CAAC,MAAM,IAAI,iBAAiB;QACnC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC;IACrC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC5B,iBAAiB,CAChB,SAAS,EACT,SAAS,IAAI,SAAS;YACrB,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,SAAS;gBACV,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,cAAc,CAClB,CAAC;IACH,CAAC;IAED,OAAO;QACN,QAAQ,EAAE,KAAK,IAAI,sBAAsB;QACzC,YAAY;QACZ,KAAK;QACL,QAAQ;KACR,CAAC;AACH,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prosopo/provider",
-  "version": "5.19.2",
+  "version": "5.19.4",
   "author": "PROSOPO LIMITED <info@prosopo.io>",
   "license": "Apache-2.0",
   "type": "module",
@@ -10,30 +10,30 @@
   "dependencies": {
     "@noble/hashes": "2.4.0",
     "@polkadot/util": "14.0.3",
-    "@prosopo/api": "4.7.2",
-    "@prosopo/api-express-router": "3.2.8",
+    "@prosopo/api": "4.7.3",
+    "@prosopo/api-express-router": "3.2.9",
     "@prosopo/api-route": "2.6.64",
     "@prosopo/audio-assets": "0.2.1",
-    "@prosopo/captcha-severity": "1.3.0",
-    "@prosopo/common": "3.2.2",
-    "@prosopo/database": "4.2.6",
-    "@prosopo/datasets": "3.2.7",
-    "@prosopo/env": "3.6.76",
+    "@prosopo/captcha-severity": "1.3.2",
+    "@prosopo/common": "3.2.3",
+    "@prosopo/database": "4.2.7",
+    "@prosopo/datasets": "3.2.8",
+    "@prosopo/env": "3.6.77",
     "@prosopo/icon-order-assets": "0.2.1",
-    "@prosopo/ipinfo": "0.4.20",
-    "@prosopo/keyring": "2.10.7",
-    "@prosopo/load-balancer": "2.11.11",
-    "@prosopo/locale": "3.11.0",
+    "@prosopo/ipinfo": "0.4.21",
+    "@prosopo/keyring": "2.10.8",
+    "@prosopo/load-balancer": "2.11.12",
+    "@prosopo/locale": "3.11.1",
     "@prosopo/logger": "2.1.4",
     "@prosopo/native-ja4": "0.0.8",
     "@prosopo/native-merkle": "0.0.7",
     "@prosopo/native-puzzle": "0.1.2",
     "@prosopo/puzzle-assets": "0.2.2",
     "@prosopo/redis-client": "1.0.41",
-    "@prosopo/types": "5.16.2",
-    "@prosopo/types-database": "5.10.5",
-    "@prosopo/types-env": "2.11.22",
-    "@prosopo/user-access-policy": "3.15.3",
+    "@prosopo/types": "5.16.3",
+    "@prosopo/types-database": "5.10.6",
+    "@prosopo/types-env": "2.11.23",
+    "@prosopo/user-access-policy": "3.15.4",
     "@prosopo/util": "3.3.15",
     "@prosopo/util-crypto": "13.6.0",
     "@prosopo/web-bot-auth": "0.1.3",
@@ -50,7 +50,7 @@
   },
   "devDependencies": {
     "@noble/curves": "2.4.0",
-    "@prosopo/config": "3.4.4",
+    "@prosopo/config": "3.4.5",
     "@types/cors": "2.8.19",
     "@types/express": "4.17.25",
     "@types/node": "22.5.5",