@zaplier/sdk 1.0.6 → 1.0.8

package/dist/sdk.js

@@ -157,8 +157,12 @@
         h1 = x64Add(h1, h2);
         h2 = x64Add(h2, h1);
         // Convert to hex string
-        const hex1 = h1[0].toString(16).padStart(8, "0") + h1[1].toString(16).padStart(8, "0");
-        const hex2 = h2[0].toString(16).padStart(8, "0") + h2[1].toString(16).padStart(8, "0");
+        // CRITICAL: Use >>> 0 to convert to unsigned 32-bit integer before converting to hex
+        // This prevents negative numbers from generating hashes with minus signs (e.g., "-6b43973f")
+        const hex1 = (h1[0] >>> 0).toString(16).padStart(8, "0") +
+            (h1[1] >>> 0).toString(16).padStart(8, "0");
+        const hex2 = (h2[0] >>> 0).toString(16).padStart(8, "0") +
+            (h2[1] >>> 0).toString(16).padStart(8, "0");
         return hex1 + hex2;
     }
     /**
@@ -5979,10 +5983,29 @@
             // - Exact hardware values (use buckets)
             // Generate ultra-stable hash with additional collision resistance
             const stableCoreHash = hashStableCore(coreVector, opts.debug);
-            // CRITICAL: Generate enhanced fingerprint hash combining unstable + stable components
-            // This prevents collisions by adding stable entropy to the fingerprint hash
+            // CRITICAL: Generate enhanced fingerprint hash combining STABLE components only
+            // Filter out unstable components that change between requests (canvas, webgl, audio)
+            // These components can vary due to GPU state, rendering context, permissions, etc.
+            const unstableComponentKeys = [
+                "canvas",
+                "webgl",
+                "audio", // Visual/audio fingerprints (vary with context)
+                "mathFingerprint",
+                "fontPreferences",
+                "enhancedFonts", // Measurement-based (can timeout/vary)
+                "dateTimeLocale",
+                "accessibilityEnhanced", // Locale/accessibility (can change)
+                "domBlockers",
+                "pluginsEnhanced", // Privacy tools detection (can change)
+            ];
+            const stableComponentValues = {};
+            for (const [key, value] of Object.entries(componentValues)) {
+                if (!unstableComponentKeys.includes(key)) {
+                    stableComponentValues[key] = value;
+                }
+            }
             const enhancedComponentValues = {
-                ...componentValues, // Unstable components (canvas, webgl, audio, etc.)
+                ...stableComponentValues, // STABLE components only (screen, browser, system, etc.)
                 _stableCore: coreVector, // + Ultra-stable components (ua, platform, deviceType, etc.)
                 // REMOVED: _hourlyEntropy - was causing visitor ID instability (same user = different IDs)
             };