@zaplier/sdk 1.0.7 → 1.0.9

package/dist/index.cjs

@@ -5650,7 +5650,9 @@ async function collectFingerprint(options = {}) {
             platform: (browser?.platform || "unknown").toLowerCase(),
             // PRIORITY 5: Device type (critical for differentiation, ultra-stable)
             deviceType,
-            // PRIORITY 6: Enhanced screen resolution buckets with 2024 display trends
+            // PRIORITY 6: Enhanced screen resolution with exact dimensions for mobile differentiation
+            // For mobile devices, we NEED exact dimensions to differentiate between similar models (S22 vs A54)
+            // For desktop, bucketing is sufficient as hardware varies more
             screen: screen
                 ? (() => {
                     // Use enhanced screen buckets for modern display landscape
@@ -5745,6 +5747,19 @@ async function collectFingerprint(options = {}) {
                             return "enhanced"; // Slightly enhanced DPI
                         return "standard"; // Standard 1x displays
                     };
+                    // CRITICAL: Do NOT include exact dimensions in stableCoreVector for mobile!
+                    // Reason: Screen dimensions change when:
+                    // - Chrome address bar appears/disappears (scroll behavior)
+                    // - Virtual keyboard opens/closes
+                    // - Screen rotates (portrait ↔ landscape)
+                    // - Browser zoom changes
+                    // These changes would cause stableCoreHash to change, breaking visitor identification
+                    //
+                    // INSTEAD: Use ONLY stable screen characteristics (bucket, aspect, density)
+                    // For device differentiation (S22 vs A54), use:
+                    // - screenFrame (bezel measurements)
+                    // - Combination of bucket + hardware + display
+                    // - Vector similarity in IdentityResolver
                     return {
                         bucket: getScreenBucket(width),
                         aspectClass: getAspectRatioClass(width, height),
@@ -5761,6 +5776,11 @@ async function collectFingerprint(options = {}) {
                                     : width >= 768
                                         ? "tablet"
                                         : "mobile",
+                        // ❌ REMOVED: exact dimensions (causes instability on mobile)
+                        // Device differentiation is now handled by:
+                        // 1. screenFrame (bezel measurements - stable)
+                        // 2. hardware + display combination
+                        // 3. Vector similarity in IdentityResolver
                     };
                 })()
                 : {
@@ -5889,7 +5909,18 @@ async function collectFingerprint(options = {}) {
                         : "none",
                 };
             })(),
-            // PRIORITY 8: Enhanced color and display capabilities bucketing
+            // PRIORITY 8: Screen frame (bezel measurements) for mobile device differentiation
+            // CRITICAL: This is STABLE across page loads and provides device-specific fingerprint
+            // Samsung S22 vs A54 have different screen frames despite similar resolutions
+            screenFrame: deviceSignals$1?.screenFrame
+                ? {
+                    top: deviceSignals$1.screenFrame.top || 0,
+                    right: deviceSignals$1.screenFrame.right || 0,
+                    bottom: deviceSignals$1.screenFrame.bottom || 0,
+                    left: deviceSignals$1.screenFrame.left || 0,
+                }
+                : undefined,
+            // PRIORITY 9: Enhanced color and display capabilities bucketing
             display: (() => {
                 const depth = deviceSignals$1.colorDepth;
                 const gamut = deviceSignals$1.colorGamut;
@@ -5981,10 +6012,29 @@ async function collectFingerprint(options = {}) {
         // - Exact hardware values (use buckets)
         // Generate ultra-stable hash with additional collision resistance
         const stableCoreHash = hashStableCore(coreVector, opts.debug);
-        // CRITICAL: Generate enhanced fingerprint hash combining unstable + stable components
-        // This prevents collisions by adding stable entropy to the fingerprint hash
+        // CRITICAL: Generate enhanced fingerprint hash combining STABLE components only
+        // Filter out unstable components that change between requests (canvas, webgl, audio)
+        // These components can vary due to GPU state, rendering context, permissions, etc.
+        const unstableComponentKeys = [
+            "canvas",
+            "webgl",
+            "audio", // Visual/audio fingerprints (vary with context)
+            "mathFingerprint",
+            "fontPreferences",
+            "enhancedFonts", // Measurement-based (can timeout/vary)
+            "dateTimeLocale",
+            "accessibilityEnhanced", // Locale/accessibility (can change)
+            "domBlockers",
+            "pluginsEnhanced", // Privacy tools detection (can change)
+        ];
+        const stableComponentValues = {};
+        for (const [key, value] of Object.entries(componentValues)) {
+            if (!unstableComponentKeys.includes(key)) {
+                stableComponentValues[key] = value;
+            }
+        }
         const enhancedComponentValues = {
-            ...componentValues, // Unstable components (canvas, webgl, audio, etc.)
+            ...stableComponentValues, // STABLE components only (screen, browser, system, etc.)
             _stableCore: coreVector, // + Ultra-stable components (ua, platform, deviceType, etc.)
             // REMOVED: _hourlyEntropy - was causing visitor ID instability (same user = different IDs)
         };