@webdecoy/fcaptcha 1.42.0 → 1.44.0

package/engine.js

@@ -266,7 +266,7 @@ function detectVisionAI(signals) {
         category: 'vision_ai', score: 0.8, confidence: 0.7,
         reason: 'PoW completed impossibly fast'
       });
-    } else if (pow.duration > expectedMax * 3) {
+    } else if (pow.duration > expectedMax * 10) {
       detections.push({
         category: 'vision_ai', score: 0.6, confidence: 0.5,
         reason: 'PoW timing suggests external processing'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webdecoy/fcaptcha",
-  "version": "1.42.0",
+  "version": "1.44.0",
   "description": "Open source CAPTCHA with PoW, bot detection, and Vision AI protection",
   "main": "index.js",
   "exports": {
@@ -15,7 +15,7 @@
     "test:clientip": "node clientip.test.js",
     "test:limits": "node limits.test.js",
     "test:detection": "node detection.test.js",
-    "test": "node version.test.js && node config.test.js && node clientip.test.js && node limits.test.js && node detection.test.js && node inputforensics.test.js && node interactionmode.test.js && node exemptions.test.js && node webbotauth.test.js && node siteverify.test.js && node redis-state.test.js && node index.test.js && node --test admission.test.js suspicion.test.js security.test.js corroboration.test.js device-rate.test.js keyboard-exemption.test.js experimental.test.js identity.test.js",
+    "test": "node version.test.js && node config.test.js && node clientip.test.js && node limits.test.js && node detection.test.js && node inputforensics.test.js && node interactionmode.test.js && node exemptions.test.js && node webbotauth.test.js && node siteverify.test.js && node redis-state.test.js && node index.test.js && node --test admission.test.js suspicion.test.js security.test.js corroboration.test.js device-rate.test.js keyboard-exemption.test.js experimental.test.js identity.test.js cadence.test.js",
     "test:siteverify": "node siteverify.test.js",
     "test:forensics": "node inputforensics.test.js",
     "test:suspicion": "node --test suspicion.test.js"

package/server.js

@@ -1041,7 +1041,9 @@ async function start() {
   if (SHARED_STATE) await SHARED_STATE.connect();
   const host = SECRET_KEY === require('./config').INSECURE_DEFAULT_SECRET ? '127.0.0.1' : '0.0.0.0';
   const server = app.listen(PORT, host, () => {
-    console.log(`FCaptcha server running on port ${server.address().port}`);
+    const addr = server.address();
+    const port = addr ? addr.port : PORT;
+    console.log(`FCaptcha server running on port ${port}`);
     console.log(`Trusted proxies: ${PROXY_TRUST.describe()}`);
     console.log(`Site keys: ${SITE_KEYS.describe()}`);
     console.log(`Shared state: ${SHARED_STATE ? 'Redis (PoW)' : 'in-memory'}`);