@prosopo/provider 5.2.1 → 5.3.1

package/dist/api/captcha/trafficFilterRequestTime.d.ts

@@ -1,5 +1,5 @@
 import type { Logger } from "@prosopo/logger";
-import { CaptchaType, type IPInfoResponse, type ITrafficFilter } from "@prosopo/types";
+import { CaptchaType, type IPInfoResponse, type IPuzzleSettings, type ITrafficFilter } from "@prosopo/types";
 import type { ClientRecord } from "@prosopo/types-database";
 import type { Response } from "express";
 import type { FrictionlessManager } from "../../tasks/frictionless/frictionlessTasks.js";
@@ -12,6 +12,7 @@ export type RequestTimeTrafficVerdict = {
     powDifficulty?: number;
     solvedImagesCount?: number;
     puzzleTolerance?: number;
+    puzzleSettings?: IPuzzleSettings;
     sourceCategories: ResolvedChallengePolicy["sourceCategories"];
 };
 export declare const applyTrafficFilterAtRequestTime: (ipInfo: IPInfoResponse | undefined, trafficFilter: Partial<ITrafficFilter> | undefined, logger?: Logger) => RequestTimeTrafficVerdict;

package/dist/api/captcha/trafficFilterRequestTime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trafficFilterRequestTime.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/trafficFilterRequestTime.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EACN,WAAW,EAEX,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EACN,KAAK,uBAAuB,EAG5B,MAAM,wCAAwC,CAAC;AAEhD,MAAM,MAAM,yBAAyB,GAClC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IACA,IAAI,EAAE,WAAW,CAAC;IAGlB,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;CAC7D,CAAC;AAeL,eAAO,MAAM,+BAA+B,WACnC,cAAc,GAAG,SAAS,iBACnB,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,WACzC,MAAM,KACb,yBAgCF,CAAC;AAEF,MAAM,MAAM,gCAAgC,GACzC;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEzC,MAAM,MAAM,8BAA8B,GAAG;IAC5C,OAAO,EAAE,yBAAyB,CAAC;IACnC,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,YAAY,EAAE,YAAY,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CACf,CAAC;AAWF,eAAO,MAAM,+BAA+B,UACpC,8BAA8B,OAChC,QAAQ,KACX,OAAO,CAAC,gCAAgC,CAyD1C,CAAC"}
+{"version":3,"file":"trafficFilterRequestTime.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/trafficFilterRequestTime.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EACN,WAAW,EAEX,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EACN,KAAK,uBAAuB,EAG5B,MAAM,wCAAwC,CAAC;AAEhD,MAAM,MAAM,yBAAyB,GAClC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IACA,IAAI,EAAE,WAAW,CAAC;IAGlB,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IAKzB,cAAc,CAAC,EAAE,eAAe,CAAC;IACjC,gBAAgB,EAAE,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;CAC7D,CAAC;AAeL,eAAO,MAAM,+BAA+B,WACnC,cAAc,GAAG,SAAS,iBACnB,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,WACzC,MAAM,KACb,yBAiCF,CAAC;AAEF,MAAM,MAAM,gCAAgC,GACzC;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEzC,MAAM,MAAM,8BAA8B,GAAG;IAC5C,OAAO,EAAE,yBAAyB,CAAC;IACnC,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,YAAY,EAAE,YAAY,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CACf,CAAC;AAWF,eAAO,MAAM,+BAA+B,UACpC,8BAA8B,OAChC,QAAQ,KACX,OAAO,CAAC,gCAAgC,CAyD1C,CAAC"}

package/dist/api/captcha/trafficFilterRequestTime.js

@@ -34,6 +34,7 @@ var applyTrafficFilterAtRequestTime = (ipInfo, trafficFilter, logger) => {
 		powDifficulty: resolved.powDifficulty,
 		solvedImagesCount: resolved.solvedImagesCount,
 		puzzleTolerance: resolved.puzzleTolerance,
+		puzzleSettings: resolved.puzzleSettings,
 		sourceCategories: resolved.sourceCategories
 	};
 };

package/dist/api/captcha/trafficFilterRequestTime.js.map

@@ -1 +1 @@
-{"version":3,"file":"trafficFilterRequestTime.js","sourceRoot":"","sources":["../../../src/api/captcha/trafficFilterRequestTime.ts"],"names":[],"mappings":"AAeA,OAAO,EACN,WAAW,GAIX,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAEN,kBAAkB,EAClB,sBAAsB,GACtB,MAAM,wCAAwC,CAAC;AA4BhD,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC9C,MAAkC,EAClC,aAAkD,EAClD,MAAe,EACa,EAAE;IAC9B,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAO5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEvC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnB,GAAG,EAAE,4CAA4C;QACjD,IAAI,EAAE;YACL,UAAU,EAAE,QAAQ,CAAC,gBAAgB;YACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,eAAe,EAAE,QAAQ,CAAC,eAAe;SACzC;KACD,CAAC,CAAC,CAAC;IAEJ,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;KAC3C,CAAC;AACH,CAAC,CAAC;AA0BF,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,EACnD,KAAqC,EACrC,GAAa,EAC+B,EAAE;IAC9C,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEvD,MAAM,UAAU,GAAG;QAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,WAAW;KAC1B,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,WAAwB,EAAQ,EAAE;QACtD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB;gBAC1B,WAAW;gBACX,UAAU,EAAE,OAAO,CAAC,gBAAgB;aACpC;SACD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,QAAoD,CAAC;IACzD,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QAC/C,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/B,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC3D,GAAG,UAAU;YACb,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC3C,CAAC,CAAC,IAAI,CAAC,GAAG,CACR,OAAO,CAAC,iBAAiB,EACzB,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAC1C;gBACF,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc;SAC7C,CAAC,CAAC;IACJ,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,GAAG,EAAE,CAAC;QACpD,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC;YACzD,GAAG,UAAU;YACb,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI;gBAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;aACpC,CAAC;SACF,CAAC,CAAC;IACJ,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACvD,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxD,CAAC;IAOD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC"}
+{"version":3,"file":"trafficFilterRequestTime.js","sourceRoot":"","sources":["../../../src/api/captcha/trafficFilterRequestTime.ts"],"names":[],"mappings":"AAeA,OAAO,EACN,WAAW,GAKX,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAEN,kBAAkB,EAClB,sBAAsB,GACtB,MAAM,wCAAwC,CAAC;AAiChD,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC9C,MAAkC,EAClC,aAAkD,EAClD,MAAe,EACa,EAAE;IAC9B,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAO5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEvC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnB,GAAG,EAAE,4CAA4C;QACjD,IAAI,EAAE;YACL,UAAU,EAAE,QAAQ,CAAC,gBAAgB;YACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,eAAe,EAAE,QAAQ,CAAC,eAAe;SACzC;KACD,CAAC,CAAC,CAAC;IAEJ,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;KAC3C,CAAC;AACH,CAAC,CAAC;AA0BF,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,EACnD,KAAqC,EACrC,GAAa,EAC+B,EAAE;IAC9C,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEvD,MAAM,UAAU,GAAG;QAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,WAAW;KAC1B,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,WAAwB,EAAQ,EAAE;QACtD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB;gBAC1B,WAAW;gBACX,UAAU,EAAE,OAAO,CAAC,gBAAgB;aACpC;SACD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,QAAoD,CAAC;IACzD,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QAC/C,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/B,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC3D,GAAG,UAAU;YACb,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC3C,CAAC,CAAC,IAAI,CAAC,GAAG,CACR,OAAO,CAAC,iBAAiB,EACzB,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAC1C;gBACF,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc;SAC7C,CAAC,CAAC;IACJ,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,GAAG,EAAE,CAAC;QACpD,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC;YACzD,GAAG,UAAU;YACb,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI;gBAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;aACpC,CAAC;SACF,CAAC,CAAC;IACJ,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACvD,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxD,CAAC;IAOD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC"}

package/dist/api/ja4.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ja4.d.ts","sourceRoot":"","sources":["../../src/api/ja4.ts"],"names":[],"mappings":"AA8EA,qBAAa,aAAc,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI3B;AAoBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAyMjD"}
+{"version":3,"file":"ja4.d.ts","sourceRoot":"","sources":["../../src/api/ja4.ts"],"names":[],"mappings":"AAkCA,qBAAa,aAAc,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI3B;AAQD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMjD"}

package/dist/api/ja4.js

@@ -1,38 +1,13 @@
-import { createHash } from "node:crypto";
+import { createRequire } from "node:module";
 //#region src/api/ja4.ts
-var RECORD_HEADER_LENGTH = 5;
-var HANDSHAKE_HEADER_LENGTH = 4;
-var HANDSHAKE_RECORD_TYPE = 22;
-var HANDSHAKE_MESSAGE_TYPE = 1;
-var EXT_SERVER_NAME = 0;
-var EXT_SIGNATURE_ALGORITHMS = 13;
-var EXT_ALPN = 16;
-var EXT_SUPPORTED_VERSIONS = 43;
-function isGrease(id) {
-	return (id & 3855) === 2570 && id >> 8 === (id & 255);
-}
-function hash12(input) {
-	return createHash("sha256").update(input).digest("hex").slice(0, 12);
-}
-function formatIdList(ids) {
-	return ids.map((id) => id.toString(16).padStart(4, "0")).join(",");
-}
-function alpnChar(b) {
-	if (b >= 48 && b <= 57 || b >= 65 && b <= 90 || b >= 97 && b <= 122) return String.fromCharCode(b);
-	return b.toString(16).padStart(2, "0");
-}
-function alpnFirstLast(protocol) {
-	return [protocol.length > 0 ? alpnChar(protocol.readUInt8(0)) : "0", protocol.length > 1 ? alpnChar(protocol.readUInt8(protocol.length - 1)) : "0"];
-}
-function tlsVersionStr(version) {
-	switch (version) {
-		case 769: return "10";
-		case 770: return "11";
-		case 771: return "12";
-		case 772: return "13";
-		default: return "00";
+var req = createRequire(import.meta.url);
+var nativeCalculateJa4 = (() => {
+	try {
+		return req("@prosopo/native-ja4");
+	} catch {
+		return req("./index.linux-x64-gnu.node");
 	}
-}
+})().calculateJa4;
 var Ja4ParseError = class extends Error {
 	constructor(message) {
 		super(message);
@@ -42,123 +17,15 @@ var Ja4ParseError = class extends Error {
 /**
 * Compute a JA4 TLS fingerprint from raw ClientHello bytes.
 *
-* Expects the full TLS record:
-*   5-byte record header  (content_type + version + record_len)
-*   4-byte handshake header (msg_type + msg_len)
-*   ClientHello body
-*
-* Throws Ja4ParseError for structural failures in the TLS record or handshake
-* header (wrong record type, wrong message type, declared lengths exceeding the
-* buffer, odd cipher-suite length).
-*
-* Extension-level malformation (truncated extension body, malformed ALPN
-* entries) is handled defensively: parsing stops at the first bad entry and
-* a fingerprint is produced from whatever was successfully parsed. This matches
-* the Rust reference implementation and avoids turning extension parse errors
-* into connection-fingerprinting failures.
+* Delegates to the Rust implementation in @prosopo/native-ja4. Structural
+* TLS parse failures are rethrown as Ja4ParseError.
 */
 function calculateJa4(data) {
-	let offset = 0;
-	if (data.length < RECORD_HEADER_LENGTH + HANDSHAKE_HEADER_LENGTH) throw new Ja4ParseError("ClientHello too short");
-	const recordType = data.readUInt8(offset);
-	offset += 1;
-	if (recordType !== HANDSHAKE_RECORD_TYPE) throw new Ja4ParseError(`Invalid record type: 0x${recordType.toString(16)}`);
-	offset += 2;
-	const recordLen = data.readUInt16BE(offset);
-	offset += 2;
-	if (data.length < RECORD_HEADER_LENGTH + recordLen) throw new Ja4ParseError("Record length exceeds buffer");
-	data = data.subarray(0, RECORD_HEADER_LENGTH + recordLen);
-	if (data.length < RECORD_HEADER_LENGTH + HANDSHAKE_HEADER_LENGTH) throw new Ja4ParseError("Record too short for handshake header");
-	const msgType = data.readUInt8(offset);
-	offset += 1;
-	if (msgType !== HANDSHAKE_MESSAGE_TYPE) throw new Ja4ParseError(`Not a ClientHello: handshake type 0x${msgType.toString(16)}`);
-	const msgLen = data.readUIntBE(offset, 3);
-	offset += 3;
-	if (data.length - offset < msgLen) throw new Ja4ParseError("Handshake message length exceeds record");
-	data = data.subarray(0, offset + msgLen);
-	if (data.length - offset < 35) throw new Ja4ParseError("ClientHello body too short");
-	let clientVersion = data.readUInt16BE(offset);
-	offset += 2;
-	offset += 32;
-	const sessionIdLen = data.readUInt8(offset);
-	offset += 1;
-	if (data.length - offset < sessionIdLen) throw new Ja4ParseError("Truncated at session ID");
-	offset += sessionIdLen;
-	if (data.length - offset < 2) throw new Ja4ParseError("Truncated at cipher suites length");
-	const cipherSuitesLen = data.readUInt16BE(offset);
-	offset += 2;
-	if (data.length - offset < cipherSuitesLen) throw new Ja4ParseError("Truncated at cipher suites");
-	if (cipherSuitesLen % 2 !== 0) throw new Ja4ParseError("Cipher suites length is not a multiple of 2");
-	const cipherSuites = [];
-	for (let i = 0; i < cipherSuitesLen; i += 2) cipherSuites.push(data.readUInt16BE(offset + i));
-	offset += cipherSuitesLen;
-	if (data.length - offset < 1) throw new Ja4ParseError("Truncated at compression methods");
-	const compressionLen = data.readUInt8(offset);
-	offset += 1;
-	if (data.length - offset < compressionLen) throw new Ja4ParseError("Truncated at compression methods data");
-	offset += compressionLen;
-	if (data.length - offset < 2) throw new Ja4ParseError("Truncated at extensions length");
-	const extensionsLen = data.readUInt16BE(offset);
-	offset += 2;
-	if (data.length - offset < extensionsLen) throw new Ja4ParseError("Truncated at extensions");
-	const extIds = [];
-	const sigAlgorithms = [];
-	const alpnProtocols = [];
-	let extOffset = offset;
-	const extEnd = offset + extensionsLen;
-	while (extOffset + 4 <= extEnd) {
-		const extId = data.readUInt16BE(extOffset);
-		extOffset += 2;
-		const extLen = data.readUInt16BE(extOffset);
-		extOffset += 2;
-		if (extOffset + extLen > extEnd) break;
-		const extData = data.subarray(extOffset, extOffset + extLen);
-		extOffset += extLen;
-		extIds.push(extId);
-		if (extId === EXT_SUPPORTED_VERSIONS) {
-			if (extData.length >= 1) {
-				const listLen = extData.readUInt8(0);
-				let best = 0;
-				for (let i = 1; i + 1 < extData.length && i + 1 <= listLen; i += 2) {
-					const v = extData.readUInt16BE(i);
-					if (!isGrease(v) && v > best) best = v;
-				}
-				if (best > 0) clientVersion = best;
-			}
-		} else if (extId === EXT_SIGNATURE_ALGORITHMS) {
-			if (extData.length >= 2) {
-				const algLen = extData.readUInt16BE(0);
-				for (let i = 2; i + 1 < extData.length && i + 1 < algLen + 2; i += 2) {
-					const alg = extData.readUInt16BE(i);
-					if (!isGrease(alg)) sigAlgorithms.push(alg);
-				}
-			}
-		} else if (extId === EXT_ALPN) {
-			if (extData.length >= 2) {
-				const listLen = extData.readUInt16BE(0);
-				const listEnd = Math.min(extData.length, 2 + listLen);
-				let alpnOff = 2;
-				while (alpnOff < listEnd) {
-					const protoLen = extData.readUInt8(alpnOff);
-					alpnOff += 1;
-					if (alpnOff + protoLen > listEnd) break;
-					alpnProtocols.push(extData.subarray(alpnOff, alpnOff + protoLen));
-					alpnOff += protoLen;
-				}
-			}
-		}
+	try {
+		return nativeCalculateJa4(data);
+	} catch (err) {
+		throw new Ja4ParseError(err instanceof Error ? err.message : String(err));
 	}
-	const versionStr = tlsVersionStr(clientVersion);
-	const sni = extIds.includes(EXT_SERVER_NAME) ? "d" : "i";
-	const firstAlpn = alpnProtocols[0];
-	const [alpnFirst, alpnLast] = firstAlpn ? alpnFirstLast(firstAlpn) : ["0", "0"];
-	const nonGreaseCiphers = cipherSuites.filter((c) => !isGrease(c));
-	const nonGreaseExts = extIds.filter((e) => !isGrease(e));
-	const firstChunk = `t${versionStr}${sni}${Math.min(99, nonGreaseCiphers.length).toString().padStart(2, "0")}${Math.min(99, nonGreaseExts.length).toString().padStart(2, "0")}${alpnFirst}${alpnLast}`;
-	const cipherHash = hash12(formatIdList([...nonGreaseCiphers].sort((a, b) => a - b)));
-	const extStr = formatIdList([...nonGreaseExts.filter((e) => e !== EXT_SERVER_NAME && e !== EXT_ALPN)].sort((a, b) => a - b));
-	const sigAlgStr = formatIdList(sigAlgorithms);
-	return `${firstChunk}_${cipherHash}_${hash12(sigAlgStr.length > 0 ? `${extStr}_${sigAlgStr}` : extStr)}`;
 }
 //#endregion
 export { Ja4ParseError, calculateJa4 };

package/dist/api/ja4.js.map

@@ -1 +1 @@
-{"version":3,"file":"ja4.js","sourceRoot":"","sources":["../../src/api/ja4.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAItC,SAAS,QAAQ,CAAC,EAAU;IAC3B,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,MAAM,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,GAAa;IAClC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC;AAGD,SAAS,QAAQ,CAAC,CAAS;IAC1B,IACC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;QACxB,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;QACxB,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EACvB,CAAC;QACF,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAID,SAAS,aAAa,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1E,MAAM,IAAI,GACT,QAAQ,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,GAAG,CAAC;IACR,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACrC,QAAQ,OAAO,EAAE,CAAC;QACjB,KAAK,MAAM;YACV,OAAO,IAAI,CAAC;QACb,KAAK,MAAM;YACV,OAAO,IAAI,CAAC;QACb,KAAK,MAAM;YACV,OAAO,IAAI,CAAC;QACb,KAAK,MAAM;YACV,OAAO,IAAI,CAAC;QACb;YACC,OAAO,IAAI,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACvC,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC7B,CAAC;CACD;AAoBD,MAAM,UAAU,YAAY,CAAC,IAAY;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,GAAG,uBAAuB,EAAE,CAAC;QAClE,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,CAAC;IAClD,CAAC;IAGD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,CAAC,CAAC;IACZ,IAAI,UAAU,KAAK,qBAAqB,EAAE,CAAC;QAC1C,MAAM,IAAI,aAAa,CACtB,0BAA0B,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CACnD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,CAAC;IACZ,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,CAAC,CAAC;IAEZ,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,GAAG,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,aAAa,CAAC,8BAA8B,CAAC,CAAC;IACzD,CAAC;IAGD,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAG1D,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,GAAG,uBAAuB,EAAE,CAAC;QAClE,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;IAClE,CAAC;IAGD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,CAAC,CAAC;IACZ,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;QACxC,MAAM,IAAI,aAAa,CACtB,uCAAuC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAC7D,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,IAAI,CAAC,CAAC;IACZ,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACpE,CAAC;IAGD,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAGzC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,CAAC,CAAC;IACZ,MAAM,IAAI,EAAE,CAAC;IAEb,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,CAAC,CAAC;IACZ,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE,CAAC;QACzC,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,YAAY,CAAC;IAEvB,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,CAAC,CAAC;IAEZ,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,eAAe,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,eAAe,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,eAAe,CAAC;IAE1B,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,CAAC,CAAC;IACZ,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,cAAc,EAAE,CAAC;QAC3C,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,cAAc,CAAC;IAEzB,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,CAAC,CAAC;IAEZ,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,aAAa,EAAE,CAAC;QAC1C,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,SAAS,GAAG,MAAM,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC;IAEtC,OAAO,SAAS,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC3C,SAAS,IAAI,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC5C,SAAS,IAAI,CAAC,CAAC;QACf,IAAI,SAAS,GAAG,MAAM,GAAG,MAAM;YAAE,MAAM;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;QAC7D,SAAS,IAAI,MAAM,CAAC;QAEpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnB,IAAI,KAAK,KAAK,sBAAsB,EAAE,CAAC;YAGtC,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACrC,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpE,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAClC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI;wBAAE,IAAI,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,IAAI,GAAG,CAAC;oBAAE,aAAa,GAAG,IAAI,CAAC;YACpC,CAAC;QACF,CAAC;aAAM,IAAI,KAAK,KAAK,wBAAwB,EAAE,CAAC;YAE/C,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAGvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtE,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC;YACF,CAAC;QACF,CAAC;aAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAI/B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;gBACtD,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,OAAO,OAAO,GAAG,OAAO,EAAE,CAAC;oBAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC5C,OAAO,IAAI,CAAC,CAAC;oBACb,IAAI,OAAO,GAAG,QAAQ,GAAG,OAAO;wBAAE,MAAM;oBACxC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC;oBAClE,OAAO,IAAI,QAAQ,CAAC;gBACrB,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAGD,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAIhD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACzD,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,SAAS;QACtC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC;QAC1B,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEd,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,gBAAgB,CAAC,MAAM,CAAC;SACvD,QAAQ,EAAE;SACV,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC;SACjD,QAAQ,EAAE;SACV,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEnB,MAAM,UAAU,GAAG,IAAI,UAAU,GAAG,GAAG,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC;IAG1F,MAAM,aAAa,GAAG,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;IAIvD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,eAAe,IAAI,CAAC,KAAK,QAAQ,CAC9C,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAErC,OAAO,GAAG,UAAU,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;AACjD,CAAC"}
+{"version":3,"file":"ja4.js","sourceRoot":"","sources":["../../src/api/ja4.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAU5C,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3C,MAAM,eAAe,GAAoB,CAAC,GAAG,EAAE;IAC9C,IAAI,CAAC;QACJ,OAAO,GAAG,CAAC,qBAAqB,CAAoB,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,CAAC,4BAA4B,CAAoB,CAAC;IAC7D,CAAC;AACF,CAAC,CAAC,EAAE,CAAC;AACL,MAAM,kBAAkB,GAAG,eAAe,CAAC,YAAY,CAAC;AAExD,MAAM,OAAO,aAAc,SAAQ,KAAK;IACvC,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC7B,CAAC;CACD;AAQD,MAAM,UAAU,YAAY,CAAC,IAAY;IACxC,IAAI,CAAC;QACJ,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;AACF,CAAC"}

package/dist/cjs/api/captcha/getPuzzleCaptchaChallenge.cjs

@@ -2,6 +2,7 @@ const require_validateAddress = require("../validateAddress.cjs");
 const require_compositeIpAddress = require("../../compositeIpAddress.cjs");
 const require_metrics = require("../metrics.cjs");
 const require_blacklistRequestInspector = require("../blacklistRequestInspector.cjs");
+const require_puzzleRenderer = require("../../tasks/puzzle/puzzleRenderer.cjs");
 const require_tasks = require("../../tasks/tasks.cjs");
 const require_apiToggleMaintenanceModeEndpoint = require("../admin/apiToggleMaintenanceModeEndpoint.cjs");
 const require_normalizeRequestIp = require("../../utils/normalizeRequestIp.cjs");
@@ -37,7 +38,7 @@ var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (
 				sessionId
 			}
 		}));
-		return res.json(require_maintenanceModeResponses.buildPuzzleMaintenanceResponse(user, dapp));
+		return res.json(await require_maintenanceModeResponses.buildPuzzleMaintenanceResponse(user, dapp));
 	}
 	const tasks = new require_tasks.Tasks(env, req.logger);
 	try {
@@ -80,6 +81,8 @@ var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (
 		}));
 		const trafficVerdict = require_trafficFilterRequestTime.applyTrafficFilterAtRequestTime(req.ipInfo, clientSettings.settings?.trafficFilter, req.logger);
 		const tolerance = (trafficVerdict.kind === "challenge" ? trafficVerdict.puzzleTolerance : void 0) ?? clientSettings?.settings?.puzzleTolerance;
+		const trafficPuzzleSettings = trafficVerdict.kind === "challenge" ? trafficVerdict.puzzleSettings : void 0;
+		const effectivePuzzleSettings = require_puzzleRenderer.resolvePuzzleRenderSettings(clientSettings?.settings?.puzzle, trafficPuzzleSettings);
 		const challenge = await tasks.puzzleCaptchaManager.getPuzzleCaptchaChallenge(user, dapp, origin, tolerance);
 		if (validSessionId && simdReadings) await tasks.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(validSessionId, simdReadings, _prosopo_types.SimdReadingsStage.challenge).catch((updateErr) => {
 			req.logger.warn(() => ({
@@ -92,14 +95,18 @@ var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (
 			userAccount: user,
 			dappAccount: dapp
 		}, challenge.targetX, challenge.targetY, challenge.originX, challenge.originY, challenge.tolerance, challenge.providerSignature, require_compositeIpAddress.getCompositeIpAddress(normalizedIp), (0, _prosopo_util.flatten)(req.headers), req.ja4, validSessionId, req.ipInfo);
+		const images = await require_puzzleRenderer.renderPuzzleImages({
+			targetX: challenge.targetX,
+			targetY: challenge.targetY
+		}, effectivePuzzleSettings);
 		const getPuzzleCaptchaResponse = {
 			[_prosopo_types.ApiParams.status]: "ok",
 			[_prosopo_types.ApiParams.challenge]: challenge.challenge,
-			[_prosopo_types.ApiParams.targetX]: challenge.targetX,
-			[_prosopo_types.ApiParams.targetY]: challenge.targetY,
+			[_prosopo_types.ApiParams.background]: images.background,
+			[_prosopo_types.ApiParams.piece]: images.piece,
+			[_prosopo_types.ApiParams.pieceSize]: images.pieceSize,
 			[_prosopo_types.ApiParams.originX]: challenge.originX,
 			[_prosopo_types.ApiParams.originY]: challenge.originY,
-			[_prosopo_types.ApiParams.tolerance]: challenge.tolerance,
 			[_prosopo_types.ApiParams.timestamp]: challenge.requestedAtTimestamp.toString(),
 			[_prosopo_types.ApiParams.signature]: { [_prosopo_types.ApiParams.provider]: { [_prosopo_types.ApiParams.challenge]: challenge.providerSignature } }
 		};

package/dist/cjs/api/captcha/maintenanceModeResponses.cjs

@@ -1,3 +1,4 @@
+const require_puzzleRenderer = require("../../tasks/puzzle/puzzleRenderer.cjs");
 let _prosopo_types = require("@prosopo/types");
 let node_crypto = require("node:crypto");
 //#region src/api/captcha/maintenanceModeResponses.ts
@@ -30,16 +31,20 @@ var buildImageMaintenanceResponse = () => ({
 	[_prosopo_types.ApiParams.timestamp]: Date.now().toString(),
 	[_prosopo_types.ApiParams.signature]: { [_prosopo_types.ApiParams.provider]: { [_prosopo_types.ApiParams.requestHash]: "" } }
 });
-var buildPuzzleMaintenanceResponse = (user, dapp) => {
+var buildPuzzleMaintenanceResponse = async (user, dapp) => {
 	const timestamp = Date.now();
+	const images = await require_puzzleRenderer.renderPuzzleImages({
+		targetX: 200,
+		targetY: 100
+	});
 	return {
 		[_prosopo_types.ApiParams.status]: "ok",
 		[_prosopo_types.ApiParams.challenge]: buildChallenge(user, dapp),
-		[_prosopo_types.ApiParams.targetX]: 100,
-		[_prosopo_types.ApiParams.targetY]: 100,
-		[_prosopo_types.ApiParams.originX]: 0,
-		[_prosopo_types.ApiParams.originY]: 0,
-		[_prosopo_types.ApiParams.tolerance]: 1e3,
+		[_prosopo_types.ApiParams.background]: images.background,
+		[_prosopo_types.ApiParams.piece]: images.piece,
+		[_prosopo_types.ApiParams.pieceSize]: images.pieceSize,
+		[_prosopo_types.ApiParams.originX]: 60,
+		[_prosopo_types.ApiParams.originY]: 100,
 		[_prosopo_types.ApiParams.timestamp]: timestamp.toString(),
 		[_prosopo_types.ApiParams.signature]: { [_prosopo_types.ApiParams.provider]: { [_prosopo_types.ApiParams.challenge]: "" } }
 	};

package/dist/cjs/api/captcha/submitPoWCaptchaSolution.cjs

@@ -1,4 +1,5 @@
 const require_validateAddress = require("../validateAddress.cjs");
+const require_puzzleRenderer = require("../../tasks/puzzle/puzzleRenderer.cjs");
 const require_tasks = require("../../tasks/tasks.cjs");
 const require_apiToggleMaintenanceModeEndpoint = require("../admin/apiToggleMaintenanceModeEndpoint.cjs");
 const require_devicePlatform = require("../../utils/devicePlatform.cjs");
@@ -130,11 +131,12 @@ var buildEscalation = async (tasks, result, challenge, handshakeTiming) => {
 	const originSession = await tasks.db.getSessionRecordBySessionId(powRecord.sessionId);
 	if (!originSession) return void 0;
 	const routed = result.routingOutput;
+	const escalatedType = require_puzzleRenderer.downgradePuzzleIfUnavailable(routed.captchaType);
 	const selectionReason = routed.reason ?? originSession.reason;
-	const newSession = await tasks.frictionlessManager.createSession(originSession.token, originSession.score, originSession.threshold, originSession.scoreComponents, originSession.ipAddress, routed.captchaType, originSession.siteKey ?? powRecord.dappAccount, routed.captchaType === _prosopo_types.CaptchaType.image ? routed.solvedImagesCount ?? originSession.solvedImagesCount : void 0, void 0, originSession.userSitekeyIpHash, originSession.webView, originSession.iFrame, originSession.decryptedHeadHash, selectionReason, void 0, void 0, originSession.ipInfo, originSession.headers, originSession.mode, originSession.simdReadings, originSession.entropyMathRandomFingerprint, originSession.entropyCryptoFingerprint, originSession.entropyWallClockOffsetMs, originSession.entropyMathRandomFirst, originSession.bundleId, originSession.currentUrl, handshakeTiming?.tcpToChelloUs, handshakeTiming?.chelloToHandshakeUs, true, originSession.iframeUrl, originSession.isProtect, originSession.sessionId, originSession.g, void 0, originSession.i, originSession.sw, originSession.md, originSession.bn, originSession.fs);
+	const newSession = await tasks.frictionlessManager.createSession(originSession.token, originSession.score, originSession.threshold, originSession.scoreComponents, originSession.ipAddress, escalatedType, originSession.siteKey ?? powRecord.dappAccount, escalatedType === _prosopo_types.CaptchaType.image ? routed.solvedImagesCount ?? originSession.solvedImagesCount : void 0, void 0, originSession.userSitekeyIpHash, originSession.webView, originSession.iFrame, originSession.decryptedHeadHash, selectionReason, void 0, void 0, originSession.ipInfo, originSession.headers, originSession.mode, originSession.simdReadings, originSession.entropyMathRandomFingerprint, originSession.entropyCryptoFingerprint, originSession.entropyWallClockOffsetMs, originSession.entropyMathRandomFirst, originSession.bundleId, originSession.currentUrl, handshakeTiming?.tcpToChelloUs, handshakeTiming?.chelloToHandshakeUs, true, originSession.iframeUrl, originSession.isProtect, originSession.sessionId, originSession.g, void 0, originSession.i, originSession.sw, originSession.md, originSession.bn, originSession.fs);
 	if (tasks.writeQueue) await tasks.writeQueue.cacheSessionEscalation(powRecord.sessionId, newSession.sessionId);
 	return {
-		captchaType: routed.captchaType,
+		captchaType: escalatedType,
 		sessionId: newSession.sessionId
 	};
 };

package/dist/cjs/api/captcha/trafficFilterRequestTime.cjs

@@ -35,6 +35,7 @@ var applyTrafficFilterAtRequestTime = (ipInfo, trafficFilter, logger) => {
 		powDifficulty: resolved.powDifficulty,
 		solvedImagesCount: resolved.solvedImagesCount,
 		puzzleTolerance: resolved.puzzleTolerance,
+		puzzleSettings: resolved.puzzleSettings,
 		sourceCategories: resolved.sourceCategories
 	};
 };

package/dist/cjs/api/ja4.cjs

@@ -1,38 +1,12 @@
-let node_crypto = require("node:crypto");
 //#region src/api/ja4.ts
-var RECORD_HEADER_LENGTH = 5;
-var HANDSHAKE_HEADER_LENGTH = 4;
-var HANDSHAKE_RECORD_TYPE = 22;
-var HANDSHAKE_MESSAGE_TYPE = 1;
-var EXT_SERVER_NAME = 0;
-var EXT_SIGNATURE_ALGORITHMS = 13;
-var EXT_ALPN = 16;
-var EXT_SUPPORTED_VERSIONS = 43;
-function isGrease(id) {
-	return (id & 3855) === 2570 && id >> 8 === (id & 255);
-}
-function hash12(input) {
-	return (0, node_crypto.createHash)("sha256").update(input).digest("hex").slice(0, 12);
-}
-function formatIdList(ids) {
-	return ids.map((id) => id.toString(16).padStart(4, "0")).join(",");
-}
-function alpnChar(b) {
-	if (b >= 48 && b <= 57 || b >= 65 && b <= 90 || b >= 97 && b <= 122) return String.fromCharCode(b);
-	return b.toString(16).padStart(2, "0");
-}
-function alpnFirstLast(protocol) {
-	return [protocol.length > 0 ? alpnChar(protocol.readUInt8(0)) : "0", protocol.length > 1 ? alpnChar(protocol.readUInt8(protocol.length - 1)) : "0"];
-}
-function tlsVersionStr(version) {
-	switch (version) {
-		case 769: return "10";
-		case 770: return "11";
-		case 771: return "12";
-		case 772: return "13";
-		default: return "00";
+var req = (0, require("node:module").createRequire)(require("url").pathToFileURL(__filename).href);
+var nativeCalculateJa4 = (() => {
+	try {
+		return req("@prosopo/native-ja4");
+	} catch {
+		return req("./index.linux-x64-gnu.node");
 	}
-}
+})().calculateJa4;
 var Ja4ParseError = class extends Error {
 	constructor(message) {
 		super(message);
@@ -42,123 +16,15 @@ var Ja4ParseError = class extends Error {
 /**
 * Compute a JA4 TLS fingerprint from raw ClientHello bytes.
 *
-* Expects the full TLS record:
-*   5-byte record header  (content_type + version + record_len)
-*   4-byte handshake header (msg_type + msg_len)
-*   ClientHello body
-*
-* Throws Ja4ParseError for structural failures in the TLS record or handshake
-* header (wrong record type, wrong message type, declared lengths exceeding the
-* buffer, odd cipher-suite length).
-*
-* Extension-level malformation (truncated extension body, malformed ALPN
-* entries) is handled defensively: parsing stops at the first bad entry and
-* a fingerprint is produced from whatever was successfully parsed. This matches
-* the Rust reference implementation and avoids turning extension parse errors
-* into connection-fingerprinting failures.
+* Delegates to the Rust implementation in @prosopo/native-ja4. Structural
+* TLS parse failures are rethrown as Ja4ParseError.
 */
 function calculateJa4(data) {
-	let offset = 0;
-	if (data.length < RECORD_HEADER_LENGTH + HANDSHAKE_HEADER_LENGTH) throw new Ja4ParseError("ClientHello too short");
-	const recordType = data.readUInt8(offset);
-	offset += 1;
-	if (recordType !== HANDSHAKE_RECORD_TYPE) throw new Ja4ParseError(`Invalid record type: 0x${recordType.toString(16)}`);
-	offset += 2;
-	const recordLen = data.readUInt16BE(offset);
-	offset += 2;
-	if (data.length < RECORD_HEADER_LENGTH + recordLen) throw new Ja4ParseError("Record length exceeds buffer");
-	data = data.subarray(0, RECORD_HEADER_LENGTH + recordLen);
-	if (data.length < RECORD_HEADER_LENGTH + HANDSHAKE_HEADER_LENGTH) throw new Ja4ParseError("Record too short for handshake header");
-	const msgType = data.readUInt8(offset);
-	offset += 1;
-	if (msgType !== HANDSHAKE_MESSAGE_TYPE) throw new Ja4ParseError(`Not a ClientHello: handshake type 0x${msgType.toString(16)}`);
-	const msgLen = data.readUIntBE(offset, 3);
-	offset += 3;
-	if (data.length - offset < msgLen) throw new Ja4ParseError("Handshake message length exceeds record");
-	data = data.subarray(0, offset + msgLen);
-	if (data.length - offset < 35) throw new Ja4ParseError("ClientHello body too short");
-	let clientVersion = data.readUInt16BE(offset);
-	offset += 2;
-	offset += 32;
-	const sessionIdLen = data.readUInt8(offset);
-	offset += 1;
-	if (data.length - offset < sessionIdLen) throw new Ja4ParseError("Truncated at session ID");
-	offset += sessionIdLen;
-	if (data.length - offset < 2) throw new Ja4ParseError("Truncated at cipher suites length");
-	const cipherSuitesLen = data.readUInt16BE(offset);
-	offset += 2;
-	if (data.length - offset < cipherSuitesLen) throw new Ja4ParseError("Truncated at cipher suites");
-	if (cipherSuitesLen % 2 !== 0) throw new Ja4ParseError("Cipher suites length is not a multiple of 2");
-	const cipherSuites = [];
-	for (let i = 0; i < cipherSuitesLen; i += 2) cipherSuites.push(data.readUInt16BE(offset + i));
-	offset += cipherSuitesLen;
-	if (data.length - offset < 1) throw new Ja4ParseError("Truncated at compression methods");
-	const compressionLen = data.readUInt8(offset);
-	offset += 1;
-	if (data.length - offset < compressionLen) throw new Ja4ParseError("Truncated at compression methods data");
-	offset += compressionLen;
-	if (data.length - offset < 2) throw new Ja4ParseError("Truncated at extensions length");
-	const extensionsLen = data.readUInt16BE(offset);
-	offset += 2;
-	if (data.length - offset < extensionsLen) throw new Ja4ParseError("Truncated at extensions");
-	const extIds = [];
-	const sigAlgorithms = [];
-	const alpnProtocols = [];
-	let extOffset = offset;
-	const extEnd = offset + extensionsLen;
-	while (extOffset + 4 <= extEnd) {
-		const extId = data.readUInt16BE(extOffset);
-		extOffset += 2;
-		const extLen = data.readUInt16BE(extOffset);
-		extOffset += 2;
-		if (extOffset + extLen > extEnd) break;
-		const extData = data.subarray(extOffset, extOffset + extLen);
-		extOffset += extLen;
-		extIds.push(extId);
-		if (extId === EXT_SUPPORTED_VERSIONS) {
-			if (extData.length >= 1) {
-				const listLen = extData.readUInt8(0);
-				let best = 0;
-				for (let i = 1; i + 1 < extData.length && i + 1 <= listLen; i += 2) {
-					const v = extData.readUInt16BE(i);
-					if (!isGrease(v) && v > best) best = v;
-				}
-				if (best > 0) clientVersion = best;
-			}
-		} else if (extId === EXT_SIGNATURE_ALGORITHMS) {
-			if (extData.length >= 2) {
-				const algLen = extData.readUInt16BE(0);
-				for (let i = 2; i + 1 < extData.length && i + 1 < algLen + 2; i += 2) {
-					const alg = extData.readUInt16BE(i);
-					if (!isGrease(alg)) sigAlgorithms.push(alg);
-				}
-			}
-		} else if (extId === EXT_ALPN) {
-			if (extData.length >= 2) {
-				const listLen = extData.readUInt16BE(0);
-				const listEnd = Math.min(extData.length, 2 + listLen);
-				let alpnOff = 2;
-				while (alpnOff < listEnd) {
-					const protoLen = extData.readUInt8(alpnOff);
-					alpnOff += 1;
-					if (alpnOff + protoLen > listEnd) break;
-					alpnProtocols.push(extData.subarray(alpnOff, alpnOff + protoLen));
-					alpnOff += protoLen;
-				}
-			}
-		}
+	try {
+		return nativeCalculateJa4(data);
+	} catch (err) {
+		throw new Ja4ParseError(err instanceof Error ? err.message : String(err));
 	}
-	const versionStr = tlsVersionStr(clientVersion);
-	const sni = extIds.includes(EXT_SERVER_NAME) ? "d" : "i";
-	const firstAlpn = alpnProtocols[0];
-	const [alpnFirst, alpnLast] = firstAlpn ? alpnFirstLast(firstAlpn) : ["0", "0"];
-	const nonGreaseCiphers = cipherSuites.filter((c) => !isGrease(c));
-	const nonGreaseExts = extIds.filter((e) => !isGrease(e));
-	const firstChunk = `t${versionStr}${sni}${Math.min(99, nonGreaseCiphers.length).toString().padStart(2, "0")}${Math.min(99, nonGreaseExts.length).toString().padStart(2, "0")}${alpnFirst}${alpnLast}`;
-	const cipherHash = hash12(formatIdList([...nonGreaseCiphers].sort((a, b) => a - b)));
-	const extStr = formatIdList([...nonGreaseExts.filter((e) => e !== EXT_SERVER_NAME && e !== EXT_ALPN)].sort((a, b) => a - b));
-	const sigAlgStr = formatIdList(sigAlgorithms);
-	return `${firstChunk}_${cipherHash}_${hash12(sigAlgStr.length > 0 ? `${extStr}_${sigAlgStr}` : extStr)}`;
 }
 //#endregion
 exports.Ja4ParseError = Ja4ParseError;

package/dist/cjs/tasks/dnsEvent/enrichDnsEvent.cjs

@@ -45,18 +45,24 @@ var extraIpInfosFromEnrichedDnsEvent = (enriched) => {
 *   - resolver / peer classified `isAbuser`
 *   - client IP is a consumer ISP but resolver is datacenter (compound)
 *
-* When `trafficFilter` is supplied, the datacenter and abuser contributions
-* are gated on the same rules `checkTrafficFilter` uses for the client IP.
-* A category counts here whenever the operator has configured any policy
-* for it (block or challenge) — either intent signals suspicion.
+* When `trafficFilter` is supplied, the datacenter contribution is gated
+* on operator-policy-aware shielding, *not* on the strict per-IP precedence
+* chain the client-IP path uses. DNS resolvers are legitimately often on
+* datacenter ranges (Google/Cloudflare/consumer-VPN DNS), so signal
+* counting has to consider the operator's stance:
 *
-*   - datacenter category must be configured; IPs whose
-*     `providerType === "isp"` short-circuit; named allowlist skips
-*   - abuser category defaults to configured, with the score threshold
-*   - cross-category suppression: VPN / proxy / Tor / crawler IPs that also
-*     carry `isDatacenter=true` are NOT counted as datacenter when the
-*     operator hasn't configured that more specific category — mirrors
-*     the `datacenterSuppressedByCategory` rule in evaluateIpInfo.
+*   - datacenter category must be configured; `providerType === "isp"`
+*     short-circuits; `datacenterNameAllowlist` skips; `datacenterNameDenylist`
+*     forces the signal through (denylist wins over all other exemptions)
+*   - a higher-precedence flag the operator has left **unconfigured** (VPN,
+*     proxy, Tor, crawler) on the same resolver IP shields the datacenter
+*     signal — the flag "explains" the DC status and the operator has said
+*     they don't care about that category. Flags that are configured (block
+*     or challenge) do *not* shield, because the operator is treating that
+*     category as suspicious in its own right.
+*   - abuser is not shielded by any other category: its signal counts
+*     whenever the abuser category is configured and the score meets the
+*     threshold.
 *
 * `pathValid` is a protocol signal, not a category — it always contributes
 * regardless of trafficFilter. When `trafficFilter` is omitted, all

package/dist/cjs/tasks/frictionless/frictionlessTasks.cjs

@@ -4,6 +4,7 @@ const require_dnsEventUrl = require("../../api/dnsEventUrl.cjs");
 const require_lang = require("../../rules/lang.cjs");
 const require_captchaManager = require("../captchaManager.cjs");
 const require_getBotScore = require("../detection/getBotScore.cjs");
+const require_puzzleRenderer = require("../puzzle/puzzleRenderer.cjs");
 const require_routingMachine = require("./routingMachine.cjs");
 let _prosopo_types = require("@prosopo/types");
 let uuid = require("uuid");
@@ -177,7 +178,7 @@ var FrictionlessManager = class extends require_captchaManager.CaptchaManager {
 			powDifficulty: captchaType === _prosopo_types.CaptchaType.pow ? effectiveParams.powDifficulty : void 0
 		};
 		const routed = this.routingContext ? await require_routingMachine.applyRouter(this.decisionMachineRunner, this.usageCounters, baseline, this.routingContext, this.logger) : baseline;
-		const finalCaptchaType = routed.captchaType;
+		const finalCaptchaType = require_puzzleRenderer.downgradePuzzleIfUnavailable(routed.captchaType, this.logger);
 		const finalSolvedImagesCount = finalCaptchaType === _prosopo_types.CaptchaType.image ? routed.solvedImagesCount ?? effectiveParams.solvedImagesCount : void 0;
 		const finalPowDifficulty = finalCaptchaType === _prosopo_types.CaptchaType.pow ? routed.powDifficulty ?? effectiveParams.powDifficulty : void 0;
 		const blocked = finalCaptchaType === _prosopo_types.CaptchaType.image ? effectiveParams.blocked : void 0;