perimeterx-js-core 0.31.0 → 0.32.1

package/lib/cjs/config/ConfigurationBase.js

@@ -123,6 +123,7 @@ var ConfigurationBase = /** @class */ (function () {
             // @ts-ignore
             delete activeConfig[key];
         }
+        // Runtime filtering ensures only supported configs remain
         return activeConfig;
     };
     ConfigurationBase.prototype.getStaticConfig = function () {

package/lib/cjs/config/params/CreateHumanSecurityConfigurationParams.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/cjs/config/params/index.js

@@ -19,3 +19,4 @@ __exportStar(require("./AllConfigurationParams.js"), exports);
 __exportStar(require("./CoreConfigurationParams.js"), exports);
 __exportStar(require("./RemoteConfigurationParams.js"), exports);
 __exportStar(require("./StaticConfigurationParams.js"), exports);
+__exportStar(require("./CreateHumanSecurityConfigurationParams.js"), exports);

package/lib/cjs/context/DefaultContext.js

@@ -150,6 +150,7 @@ var DefaultContext = /** @class */ (function () {
         var vidValue = this.requestData.cookies[utils_1.PXVID_COOKIE_NAME];
         if ((0, utils_1.isValidUuid)(vidValue)) {
             this.vid = vidValue;
+            this.vidSource = utils_1.VidSource.VID_COOKIE;
         }
         var pxhdCookie = this.requestData.cookies[utils_1.PXHD_COOKIE_NAME];
         if (pxhdCookie) {

package/lib/cjs/utils/constants.js

@@ -15,4 +15,4 @@ exports.PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 exports.EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 exports.URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 exports.REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-exports.CORE_MODULE_VERSION = 'JS Core 0.31.0';
+exports.CORE_MODULE_VERSION = 'JS Core 0.32.1';

package/lib/esm/config/ConfigurationBase.js

@@ -117,6 +117,7 @@ export class ConfigurationBase {
             // @ts-ignore
             delete activeConfig[key];
         }
+        // Runtime filtering ensures only supported configs remain
         return activeConfig;
     }
     getStaticConfig() {

package/lib/esm/config/params/CreateHumanSecurityConfigurationParams.js

@@ -0,0 +1 @@
+export {};

package/lib/esm/config/params/index.js

@@ -3,3 +3,4 @@ export * from './AllConfigurationParams.js';
 export * from './CoreConfigurationParams.js';
 export * from './RemoteConfigurationParams.js';
 export * from './StaticConfigurationParams.js';
+export * from './CreateHumanSecurityConfigurationParams.js';

package/lib/esm/context/DefaultContext.js

@@ -3,7 +3,7 @@ import { PXHDSource } from '../pxhd/index.js';
 import { TokenOrigin, TokenParseResult } from '../risk_token/index.js';
 import { RiskApiCallResult } from '../risk_api/index.js';
 import { COOKIE_HEADER_NAME, toReadonlyHeaders, USER_AGENT_HEADER_NAME, } from '../http/index.js';
-import { isValidUuid, PXHD_COOKIE_NAME, PXVID_COOKIE_NAME, StringSplitCookieParser, X_PX_AUTHORIZATION_HEADER_NAME, } from '../utils/index.js';
+import { isValidUuid, PXHD_COOKIE_NAME, PXVID_COOKIE_NAME, StringSplitCookieParser, VidSource, X_PX_AUTHORIZATION_HEADER_NAME, } from '../utils/index.js';
 import { Action } from '../action/index.js';
 import { DefaultLogger, X_PX_ENFORCER_LOG_HEADER } from '../logger/index.js';
 /**
@@ -152,6 +152,7 @@ export class DefaultContext {
         const vidValue = this.requestData.cookies[PXVID_COOKIE_NAME];
         if (isValidUuid(vidValue)) {
             this.vid = vidValue;
+            this.vidSource = VidSource.VID_COOKIE;
         }
         const pxhdCookie = this.requestData.cookies[PXHD_COOKIE_NAME];
         if (pxhdCookie) {

package/lib/esm/utils/constants.js

@@ -12,4 +12,4 @@ export const PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 export const EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 export const URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 export const REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-export const CORE_MODULE_VERSION = 'JS Core 0.31.0';
+export const CORE_MODULE_VERSION = 'JS Core 0.32.1';

package/lib/types/activities/HttpActivityClient.d.ts

@@ -7,15 +7,15 @@ import { ILogger } from '../logger';
 /**
  * The HttpActivityClient is responsible for sending async activities to the backend via HTTP.
  */
-export declare class HttpActivityClient<Req, Res, Added, Removed> implements IActivityClient<Req, Res> {
-    protected readonly config: IConfiguration<Req, Res, Added, Removed>;
+export declare class HttpActivityClient<Req, Res, Supported extends string, Added> implements IActivityClient<Req, Res> {
+    protected readonly config: IConfiguration<Req, Res, Supported, Added>;
     protected readonly httpClient: IHttpClient;
     /**
      * Creates an instance of HttpActivityClient.
      * @param config
      * @param httpClient
      */
-    constructor(config: IConfiguration<Req, Res, Added, Removed>, httpClient: IHttpClient);
+    constructor(config: IConfiguration<Req, Res, Supported, Added>, httpClient: IHttpClient);
     /**
      * Creates and sends all necessary async activities to the backend.
      * @param context - The context containing the request (and possibly response).

package/lib/types/activities/HttpBatchedActivityClient.d.ts

@@ -10,14 +10,14 @@ import { ILogger } from '../logger';
  * This class uses setTimeout and clearTimeout for managing the timeout for sending activities. It also exposes the stop()
  * method to stop the timer and prevent further activity sending, which should be called on shutdown.
  */
-export declare class HttpBatchedActivityClient<Req, Res, Added, Removed> extends HttpActivityClient<Req, Res, Added, Removed> {
+export declare class HttpBatchedActivityClient<Req, Res, Supported extends string, Added> extends HttpActivityClient<Req, Res, Supported, Added> {
     private readonly batchSize;
     private readonly timeoutMs;
     private readonly maxBufferSize;
     private buffer;
     private timeoutId;
     private shouldKill;
-    constructor(config: IConfiguration<Req, Res, Added, Removed>, httpClient: IHttpClient);
+    constructor(config: IConfiguration<Req, Res, Supported, Added>, httpClient: IHttpClient);
     stop(): void;
     protected postActivities(activities: AsyncActivity[], logger: ILogger): Promise<boolean>;
     protected addToBuffer(activities: AsyncActivity[]): void;

package/lib/types/activities/utils.d.ts

@@ -12,7 +12,7 @@ import { CustomParameters, ResponseCustomParameters } from '../custom_parameters
  * @param context - The request context.
  * @returns {AsyncActivity} - The complete async activity payload.
  */
-export declare const createAsyncActivity: <Req, Res, Added, Removed>(activityType: ActivityType, config: IConfiguration<Req, Res, Added, Removed>, context: ReadonlyContext<Req, Res>) => AsyncActivity;
+export declare const createAsyncActivity: <Req, Res, Supported extends string, Added>(activityType: ActivityType, config: IConfiguration<Req, Res, Supported, Added>, context: ReadonlyContext<Req, Res>) => AsyncActivity;
 /**
  * Creates activity details based on the provided parameters.
  * @param activityType - The activity type to create.
@@ -20,12 +20,12 @@ export declare const createAsyncActivity: <Req, Res, Added, Removed>(activityTyp
  * @param context - The request context.
  * @returns {AsyncActivityDetails} - The activity details.
  */
-export declare const createActivityDetails: <Req, Res, Added, Removed>(activityType: ActivityType, config: IConfiguration<Req, Res, Added, Removed>, context: ReadonlyContext<Req, Res>) => AsyncActivityDetails;
+export declare const createActivityDetails: <Req, Res, Supported extends string, Added>(activityType: ActivityType, config: IConfiguration<Req, Res, Supported, Added>, context: ReadonlyContext<Req, Res>) => AsyncActivityDetails;
 export declare const createAsyncActivityCommonDetails: <Req, Res>(context: ReadonlyContext<Req, Res>) => AsyncActivityCommonDetails;
-export declare const createCommonActivityDetails: <Req, Res, Added, Removed>(config: IConfiguration<Req, Res, Added, Removed>, context: ReadonlyContext<Req, Res>) => CommonActivityDetails;
+export declare const createCommonActivityDetails: <Req, Res, Supported extends string, Added>(config: IConfiguration<Req, Res, Supported, Added>, context: ReadonlyContext<Req, Res>) => CommonActivityDetails;
 export declare const addRootContextDataToDetails: <Req, Res>(details: CommonActivityDetails, context: ReadonlyContext<Req, Res>) => void;
 export declare function redactCookieSecret(secret: string): string;
-export declare const addConfigDataToDetails: <Req, Res, Added, Removed>(details: CommonActivityDetails, config: IConfiguration<Req, Res, Added, Removed>) => void;
+export declare const addConfigDataToDetails: <Req, Res, Supported extends string, Added>(details: CommonActivityDetails, config: IConfiguration<Req, Res, Supported, Added>) => void;
 export declare const addCustomParametersToDetails: (details: CommonActivityDetails, customParameters: CustomParameters | null, responseCustomParameters: ResponseCustomParameters | null) => void;
 export declare const addProductDataToDetails: (details: CommonActivityDetails, productData: DeepReadonly<ProductData>) => void;
 export declare const addTlsDataToDetails: (details: CommonActivityDetails, tlsData: DeepReadonly<TlsData>) => void;
@@ -36,5 +36,5 @@ export declare const addRiskApiDataToAsyncActivityCommonDetails: <Req, Res>(deta
 export declare const addResponseDataToAsyncActivityCommonDetails: <Req, Res>(details: AsyncActivityCommonDetails, context: ReadonlyContext<Req, Res>) => void;
 export declare const createPageRequestedActivityDetails: <Req, Res>(context: ReadonlyContext<Req, Res>) => PageRequestedActivityDetails;
 export declare const createBlockActivityDetails: <Req, Res>(context: ReadonlyContext<Req, Res>) => BlockActivityDetails;
-export declare const createAdditionalS2SActivityDetails: <Req, Res, Added, Removed>({ ciSendRawUsernameOnAdditionalS2SActivity }: IConfiguration<Req, Res, Added, Removed>, { productData }: ReadonlyContext<Req, Res>) => AdditionalS2SActivityDetails;
+export declare const createAdditionalS2SActivityDetails: <Req, Res, Supported extends string, Added>({ ciSendRawUsernameOnAdditionalS2SActivity }: IConfiguration<Req, Res, Supported, Added>, { productData }: ReadonlyContext<Req, Res>) => AdditionalS2SActivityDetails;
 export declare const toHeaderEntryArray: (headers: Record<string, string[]>) => HeaderEntry[];

package/lib/types/additional_activity_handler/AdditionalActivityHandler.d.ts

@@ -1,3 +1,3 @@
 import { ReadonlyContext } from '../context';
 import { ActiveConfigurationParams } from '../config';
-export type AdditionalActivityHandler<Req, Res, Added, Removed> = (config: ActiveConfigurationParams<Req, Res, Added, Removed>, context: ReadonlyContext<Req, Res>, request: Req) => void | Promise<void>;
+export type AdditionalActivityHandler<Req, Res, Supported extends string, Added> = (config: ActiveConfigurationParams<Req, Res, Supported, Added>, context: ReadonlyContext<Req, Res>, request: Req) => void | Promise<void>;

package/lib/types/additional_activity_handler/AdditionalActivityHandlerUtils.d.ts

@@ -7,5 +7,5 @@ export declare namespace AdditionalActivityHandlerUtils {
      * @param context - The request context.
      * @returns {Promise<void>} - A promise that resolves when the additional activity handler is complete.
      */
-    const invokeAdditionalActivityHandler: <Req, Res, Added, Removed>(config: IConfiguration<Req, Res, Added, Removed>, context: ReadonlyContext<Req, Res>) => Promise<void>;
+    const invokeAdditionalActivityHandler: <Req, Res, Supported extends string, Added>(config: IConfiguration<Req, Res, Supported, Added>, context: ReadonlyContext<Req, Res>) => Promise<void>;
 }

package/lib/types/blocker/MobileBlocker.d.ts

@@ -3,11 +3,11 @@ import { ReadonlyContext } from '../context';
 import { IBase64Utils } from '../utils';
 import { IConditionalBlocker } from '../blocker';
 import { BlockerBase } from './BlockerBase';
-export declare class MobileBlocker<Req, Res, Added, Removed> extends BlockerBase<Req, Res> implements IConditionalBlocker<Req, Res> {
-    protected readonly config: IConfiguration<Req, Res, Added, Removed>;
+export declare class MobileBlocker<Req, Res, Supported extends string, Added> extends BlockerBase<Req, Res> implements IConditionalBlocker<Req, Res> {
+    protected readonly config: IConfiguration<Req, Res, Supported, Added>;
     protected readonly base64Utils: IBase64Utils;
     protected readonly template: string;
-    constructor(config: IConfiguration<Req, Res, Added, Removed>, base64Utils: IBase64Utils, template: string);
+    constructor(config: IConfiguration<Req, Res, Supported, Added>, base64Utils: IBase64Utils, template: string);
     shouldBlock(context: ReadonlyContext<Req, Res>): boolean;
     protected createBlockBody(context: ReadonlyContext<Req, Res>): string;
 }

package/lib/types/blocker/utils.d.ts

@@ -16,4 +16,4 @@ export declare const renderHtml: (htmlTemplate: string, blockData?: BlockData) =
  * @param base64Utils - The base64 utility functions.
  * @returns {BlockData} - The block data object.
  */
-export declare const createBlockData: <Req, Res, Added, Removed>(config: IConfiguration<Req, Res, Added, Removed>, context: ReadonlyContext<Req, Res>, base64Utils: IBase64Utils) => BlockData;
+export declare const createBlockData: <Req, Res, Supported extends string, Added>(config: IConfiguration<Req, Res, Supported, Added>, context: ReadonlyContext<Req, Res>, base64Utils: IBase64Utils) => BlockData;

package/lib/types/config/ConfigurationBase.d.ts

@@ -14,12 +14,12 @@ import { CustomSnippetFunction } from '../snippet_injection';
 /**
  * Base class for the enforcer configuration.
  */
-export declare abstract class ConfigurationBase<Req, Res, Added, Removed extends string> implements IConfiguration<Req, Res, Added, Removed> {
-    protected configParams: RequiredAllConfigurationParams<Req, Res, Added, Removed>;
-    protected readonly staticConfigParams: StaticConfigurationParams<Req, Res, Added, Removed>;
-    protected remoteConfigData?: RemoteConfigData<Req, Res, Added, Removed>;
-    protected readonly defaultConfigParams: RequiredAllConfigurationParams<Req, Res, Added, Removed>;
-    protected readonly removedParams: Record<Removed, undefined>;
+export declare abstract class ConfigurationBase<Req, Res, Supported extends string, Added> implements IConfiguration<Req, Res, Supported, Added> {
+    protected configParams: RequiredAllConfigurationParams<Req, Res, Supported, Added>;
+    protected readonly staticConfigParams: StaticConfigurationParams<Req, Res, Supported, Added>;
+    protected remoteConfigData?: RemoteConfigData<Req, Res, Supported, Added>;
+    protected readonly defaultConfigParams: RequiredAllConfigurationParams<Req, Res, Supported, Added>;
+    protected readonly removedParams: Record<Exclude<keyof CoreConfigurationParams<Req, Res, Supported, Added>, Supported>, undefined>;
     private internalLogger;
     /**
      * Returns the module version of the enforcer.
@@ -40,18 +40,18 @@ export declare abstract class ConfigurationBase<Req, Res, Added, Removed extends
      * @param removedParams - A map of all removed (unsupported) configuration parameters set to undefined. This parameter can be generated automatically by your IDE.
      * @protected
      */
-    protected constructor(params: StaticConfigurationParams<Req, Res, Added, Removed>, defaultParams: Required<Added> & Partial<CoreConfigurationParams<Req, Res, Added, Removed>>, removedParams: Record<Removed, undefined>);
-    protected createActiveConfiguration(params: AllConfigurationParams<Req, Res, Added, Removed>, defaultParams: RequiredAllConfigurationParams<Req, Res, Added, Removed>): RequiredAllConfigurationParams<Req, Res, Added, Removed>;
-    protected throwIfMissingRequiredField(params: AllConfigurationParams<Req, Res, Added, Removed>): void;
-    protected getValidConfigValue<K extends keyof RequiredAllConfigurationParams<Req, Res, Added, Removed>, V extends RequiredAllConfigurationParams<Req, Res, Added, Removed>[K]>(params: AllConfigurationParams<Req, Res, Added, Removed>, defaultParams: RequiredAllConfigurationParams<Req, Res, Added, Removed>, key: K): V;
-    protected isValidConfigValue(params: AllConfigurationParams<Req, Res, Added, Removed>, defaultParams: RequiredAllConfigurationParams<Req, Res, Added, Removed>, key: keyof RequiredAllConfigurationParams<Req, Res, Added, Removed>): boolean;
-    protected getDefaultConfigurationValue<K extends keyof RequiredAllConfigurationParams<Req, Res, Added, Removed>, V extends RequiredAllConfigurationParams<Req, Res, Added, Removed>[K]>(params: AllConfigurationParams<Req, Res, Added, Removed>, defaultParams: RequiredAllConfigurationParams<Req, Res, Added, Removed>, key: K): V;
-    protected normalizeConfigurationValue<K extends keyof RequiredAllConfigurationParams<Req, Res, Added, Removed>, V extends RequiredAllConfigurationParams<Req, Res, Added, Removed>[K]>(params: AllConfigurationParams<Req, Res, Added, Removed>, key: K): V;
-    protected createInternalLogger(params: RequiredAllConfigurationParams<Req, Res, Added, Removed>): ILogger;
-    setRemoteConfigData(remoteConfigData: RemoteConfigData<Req, Res, Added, Removed>): void;
-    getActiveConfig(): ActiveConfigurationParams<Req, Res, Added, Removed>;
-    getStaticConfig(): StaticConfigurationParams<Req, Res, Added, Removed>;
-    getRemoteConfig(): RemoteConfigurationParams<Req, Res, Added, Removed>;
+    protected constructor(params: StaticConfigurationParams<Req, Res, Supported, Added>, defaultParams: Required<Added> & Partial<CoreConfigurationParams<Req, Res, Supported, Added>>, removedParams: Record<Exclude<keyof CoreConfigurationParams<Req, Res, Supported, Added>, Supported>, undefined>);
+    protected createActiveConfiguration(params: AllConfigurationParams<Req, Res, Supported, Added>, defaultParams: RequiredAllConfigurationParams<Req, Res, Supported, Added>): RequiredAllConfigurationParams<Req, Res, Supported, Added>;
+    protected throwIfMissingRequiredField(params: AllConfigurationParams<Req, Res, Supported, Added>): void;
+    protected getValidConfigValue<K extends keyof RequiredAllConfigurationParams<Req, Res, Supported, Added>, V extends RequiredAllConfigurationParams<Req, Res, Supported, Added>[K]>(params: AllConfigurationParams<Req, Res, Supported, Added>, defaultParams: RequiredAllConfigurationParams<Req, Res, Supported, Added>, key: K): V;
+    protected isValidConfigValue(params: AllConfigurationParams<Req, Res, Supported, Added>, defaultParams: RequiredAllConfigurationParams<Req, Res, Supported, Added>, key: keyof RequiredAllConfigurationParams<Req, Res, Supported, Added>): boolean;
+    protected getDefaultConfigurationValue<K extends keyof RequiredAllConfigurationParams<Req, Res, Supported, Added>, V extends RequiredAllConfigurationParams<Req, Res, Supported, Added>[K]>(params: AllConfigurationParams<Req, Res, Supported, Added>, defaultParams: RequiredAllConfigurationParams<Req, Res, Supported, Added>, key: K): V;
+    protected normalizeConfigurationValue<K extends keyof RequiredAllConfigurationParams<Req, Res, Supported, Added>, V extends RequiredAllConfigurationParams<Req, Res, Supported, Added>[K]>(params: AllConfigurationParams<Req, Res, Supported, Added>, key: K): V;
+    protected createInternalLogger(params: RequiredAllConfigurationParams<Req, Res, Supported, Added>): ILogger;
+    setRemoteConfigData(remoteConfigData: RemoteConfigData<Req, Res, Supported, Added>): void;
+    getActiveConfig(): ActiveConfigurationParams<Req, Res, Supported, Added>;
+    getStaticConfig(): StaticConfigurationParams<Req, Res, Supported, Added>;
+    getRemoteConfig(): RemoteConfigurationParams<Req, Res, Supported, Added>;
     get moduleVersion(): string;
     get logger(): ILogger;
     get appId(): string;
@@ -105,9 +105,9 @@ export declare abstract class ConfigurationBase<Req, Res, Added, Removed extends
     get extractGraphQLKeywords(): ExtractGraphQLKeywordsFunction | null;
     get sensitiveGraphqlOperationNames(): Array<string | RegExp>;
     get sensitiveGraphqlOperationTypes(): string[];
-    get enrichCustomParameters(): CustomParametersFunction<Req, Res, Added, Removed> | null;
-    get enrichResponseCustomParameters(): ResponseCustomParametersFunction<Req, Res, Added, Removed> | null;
-    get additionalActivityHandler(): AdditionalActivityHandler<Req, Res, Added, Removed> | null;
+    get enrichCustomParameters(): CustomParametersFunction<Req, Res, Supported, Added> | null;
+    get enrichResponseCustomParameters(): ResponseCustomParametersFunction<Req, Res, Supported, Added> | null;
+    get additionalActivityHandler(): AdditionalActivityHandler<Req, Res, Supported, Added> | null;
     get altBackendCaptchaUrl(): string;
     get corsSupportEnabled(): boolean;
     get corsCustomPreflightHandler(): CustomPreflightHandler<Req> | null;
@@ -142,7 +142,7 @@ export declare abstract class ConfigurationBase<Req, Res, Added, Removed extends
     get securedPxhdEnabled(): boolean;
     get tokenVersion(): `${TokenVersion}`;
     get snippetInjectionEnabled(): boolean;
-    get createCustomSnippet(): CustomSnippetFunction<Req, Res, Added, Removed> | null;
+    get createCustomSnippet(): CustomSnippetFunction<Req, Res, Supported, Added> | null;
     get dataEnrichmentHeaderName(): string;
     get enableBlockedUrlOnCaptchaBlockPage(): boolean;
     get awaitAsyncHttpRequests(): boolean;

package/lib/types/config/IConfiguration.d.ts

@@ -10,7 +10,7 @@ import { ExtractGraphQLKeywordsFunction } from '../graphql';
 import { TokenVersion } from '../risk_token';
 import { CustomSnippetFunction } from '../snippet_injection';
 import { RemoteConfigData } from './remote_config';
-export interface IConfiguration<Req, Res, Added, Removed> {
+export interface IConfiguration<Req, Res, Supported extends string, Added> {
     /**
      * The application ID.
      */
@@ -246,15 +246,15 @@ export interface IConfiguration<Req, Res, Added, Removed> {
     /**
      * A function returning CustomParameters that will be added to the enforcer activities.
      */
-    readonly enrichCustomParameters: CustomParametersFunction<Req, Res, Added, Removed> | null;
+    readonly enrichCustomParameters: CustomParametersFunction<Req, Res, Supported, Added> | null;
     /**
      * A function returning ResponseCustomParameters that will be added to the enforcer activities.
      */
-    readonly enrichResponseCustomParameters: ResponseCustomParametersFunction<Req, Res, Added, Removed> | null;
+    readonly enrichResponseCustomParameters: ResponseCustomParametersFunction<Req, Res, Supported, Added> | null;
     /**
      * A function that will be called after the asynchronous activities are sent to the backend.
      */
-    readonly additionalActivityHandler: AdditionalActivityHandler<Req, Res, Added, Removed> | null;
+    readonly additionalActivityHandler: AdditionalActivityHandler<Req, Res, Supported, Added> | null;
     /**
      * Whether cors support feature should be enabled.
      */
@@ -387,7 +387,7 @@ export interface IConfiguration<Req, Res, Added, Removed> {
     /**
      * A custom function that returns a string representing the snippet to be injected.
      */
-    readonly createCustomSnippet: CustomSnippetFunction<Req, Res, Added, Removed> | null;
+    readonly createCustomSnippet: CustomSnippetFunction<Req, Res, Supported, Added> | null;
     /**
      * Whether to include the request url in captcha block page
      */
@@ -411,17 +411,17 @@ export interface IConfiguration<Req, Res, Added, Removed> {
     /**
      * Returns an object representation of the current configuration.
      */
-    getActiveConfig(): ActiveConfigurationParams<Req, Res, Added, Removed>;
+    getActiveConfig(): ActiveConfigurationParams<Req, Res, Supported, Added>;
     /**
      * Returns an object representation of the static configuration.
      */
-    getStaticConfig(): StaticConfigurationParams<Req, Res, Added, Removed>;
+    getStaticConfig(): StaticConfigurationParams<Req, Res, Supported, Added>;
     /**
      * Returns an object representation of the remote configuration.
      */
-    getRemoteConfig(): RemoteConfigurationParams<Req, Res, Added, Removed>;
+    getRemoteConfig(): RemoteConfigurationParams<Req, Res, Supported, Added>;
     /**
      * Sets the remote configuration data.
      */
-    setRemoteConfigData(remoteConfigData: RemoteConfigData<Req, Res, Added, Removed>): void;
+    setRemoteConfigData(remoteConfigData: RemoteConfigData<Req, Res, Supported, Added>): void;
 }

package/lib/types/config/defaults/DefaultConfigurationParams.d.ts

@@ -1,2 +1,2 @@
 import { CoreConfigurationParams } from '../params';
-export declare const defaultConfigurationParams: <Req, Res, Added, Removed>() => Required<CoreConfigurationParams<Req, Res, Added, Removed>>;
+export declare const defaultConfigurationParams: <Req, Res, Supported extends string, Added>() => Required<CoreConfigurationParams<Req, Res, Supported, Added>>;

package/lib/types/config/params/ActiveConfigurationParams.d.ts

@@ -1,2 +1,8 @@
-import { RequiredAllConfigurationParams } from './AllConfigurationParams';
-export type ActiveConfigurationParams<Req, Res, Added, Removed> = [Removed] extends [never] ? RequiredAllConfigurationParams<Req, Res, Added, Removed> : Removed extends string ? Omit<RequiredAllConfigurationParams<Req, Res, Added, Removed>, Removed> : never;
+import { CoreConfigurationParams, CoreConfigurationParamsKeys } from './CoreConfigurationParams';
+/**
+ * Active configuration parameters representing the runtime-filtered configuration.
+ * Only includes the supported subset of core configurations plus added configurations.
+ */
+export type ActiveConfigurationParams<Req, Res, Supported extends string, Added> = [Supported] extends [
+    CoreConfigurationParamsKeys
+] ? Required<Added> & Required<Pick<CoreConfigurationParams<Req, Res, string, Added>, Supported>> : never;

package/lib/types/config/params/AllConfigurationParams.d.ts

@@ -1,4 +1,7 @@
 import { CoreConfigurationParams } from './CoreConfigurationParams';
-export type AllConfigurationParams<Req, Res, Added, Removed> = Added & CoreConfigurationParams<Req, Res, Added, Removed>;
-export type RequiredAllConfigurationParams<Req, Res, Added, Removed> = Required<Added> & Required<CoreConfigurationParams<Req, Res, Added, Removed>>;
-export type CreateHumanSecurityConfigurationParams<Req, Res, Added, Removed> = [Removed] extends [never] ? Added & CoreConfigurationParams<Req, Res, Added, Removed> : Removed extends keyof CoreConfigurationParams<Req, Res, Added, Removed> ? Added & Omit<CoreConfigurationParams<Req, Res, Added, Removed>, Removed> : never;
+/**
+ * Combined configuration parameters (Added + Core) with optional fields.
+ * Used for input parameters where not all fields are required.
+ */
+export type AllConfigurationParams<Req, Res, Supported extends string, Added> = Added & CoreConfigurationParams<Req, Res, Supported, Added>;
+export type RequiredAllConfigurationParams<Req, Res, Supported extends string, Added> = Required<Added> & Required<CoreConfigurationParams<Req, Res, Supported, Added>>;

package/lib/types/config/params/CoreConfigurationParams.d.ts

@@ -50,14 +50,14 @@ export type TokenV3ConfigurationParamsOnly = {
 /**
  * The configuration parameters relevant to the snippet injection feature.
  */
-export type SnippetInjectionParamsOnly<Req, Res, Added, Removed> = {
+export type SnippetInjectionParamsOnly<Req, Res, Supported extends string, Added> = {
     px_snippet_injection_enabled?: boolean;
-    px_create_custom_snippet?: CustomSnippetFunction<Req, Res, Added, Removed> | null;
+    px_create_custom_snippet?: CustomSnippetFunction<Req, Res, Supported, Added> | null;
 };
 /**
  * The configuration parameters that can be set via either the static or remote configuration.
  */
-export type CommonConfigurationParams<Req, Res, Added, Removed> = TokenV3ConfigurationParamsOnly & BatchedActivitiesConfigParamsOnly & SnippetInjectionParamsOnly<Req, Res, Added, Removed> & {
+export type CommonConfigurationParams<Req, Res, Supported extends string, Added> = TokenV3ConfigurationParamsOnly & BatchedActivitiesConfigParamsOnly & SnippetInjectionParamsOnly<Req, Res, Supported, Added> & {
     px_s2s_timeout?: number;
     px_async_timeout?: number;
     px_backend_url?: string;
@@ -121,9 +121,9 @@ export type CommonConfigurationParams<Req, Res, Added, Removed> = TokenV3Configu
     px_url_decode_reserved_characters?: boolean;
     px_secured_pxhd_enabled?: boolean;
     px_data_enrichment_header_name?: string;
-    px_additional_activity_handler?: AdditionalActivityHandler<Req, Res, Added, Removed> | null;
-    px_enrich_custom_parameters?: CustomParametersFunction<Req, Res, Added, Removed> | null;
-    px_enrich_response_custom_parameters?: ResponseCustomParametersFunction<Req, Res, Added, Removed> | null;
+    px_additional_activity_handler?: AdditionalActivityHandler<Req, Res, Supported, Added> | null;
+    px_enrich_custom_parameters?: CustomParametersFunction<Req, Res, Supported, Added> | null;
+    px_enrich_response_custom_parameters?: ResponseCustomParametersFunction<Req, Res, Supported, Added> | null;
     px_login_successful_custom_callback?: CustomLoginSuccessfulCallback<Res> | null;
     px_cors_custom_preflight_handler?: CustomPreflightHandler<Req> | null;
     px_cors_create_custom_block_response_headers?: CustomBlockResponseHeadersHandler<Req> | null;
@@ -136,4 +136,21 @@ export type CommonConfigurationParams<Req, Res, Added, Removed> = TokenV3Configu
 /**
  * All configuration parameters supported by JS Core.
  */
-export type CoreConfigurationParams<Req, Res, Added, Removed> = StaticConfigurationParamsOnly & RemoteConfigurationParamsOnly & CommonConfigurationParams<Req, Res, Added, Removed>;
+export type CoreConfigurationParams<Req, Res, Supported extends string, Added> = StaticConfigurationParamsOnly & RemoteConfigurationParamsOnly & CommonConfigurationParams<Req, Res, Supported, Added>;
+export type CoreConfigurationParamsKeys = keyof CoreConfigurationParams<any, any, any, any>;
+/**
+ * Utility type to validate that enforcer-supported configurations are valid core configuration keys.
+ * This provides compile-time type safety to ensure wrapper libraries only reference existing core configs.
+ *
+ * @template T - Union of core configuration parameter keys to validate
+ * @example
+ * ```typescript
+ * // In wrapper library:
+ * export type SupportedCoreConfigs = ValidateSupportedConfigurations<
+ *     | 'px_app_id'
+ *     | 'px_auth_token'
+ *     | 'px_blocking_score'
+ * >;
+ * ```
+ */
+export type ValidateSupportedConfigurations<T extends CoreConfigurationParamsKeys> = T;

package/lib/types/config/params/CreateHumanSecurityConfigurationParams.d.ts

@@ -0,0 +1,2 @@
+import { CoreConfigurationParamsKeys, CoreConfigurationParams } from './CoreConfigurationParams';
+export type CreateHumanSecurityConfigurationParams<Req, Res, Supported extends CoreConfigurationParamsKeys, Added> = Added & Pick<CoreConfigurationParams<Req, Res, Supported, Added>, Supported>;

package/lib/types/config/params/RemoteConfigurationParams.d.ts

@@ -1,5 +1,6 @@
 import { CoreConfigurationParams, StaticConfigurationParamsOnly } from './CoreConfigurationParams';
 /**
- * All configurations that can be set via the remote configurations, taking into account any added or removed configurations.
+ * All core configurations that can be set via the remote configurations.
+ * Note: Only core configs can be set remotely, not wrapper-specific Added configs.
  */
-export type RemoteConfigurationParams<Req, Res, Added, Removed> = Omit<CoreConfigurationParams<Req, Res, Added, Removed>, keyof StaticConfigurationParamsOnly>;
+export type RemoteConfigurationParams<Req, Res, Supported extends string, Added> = Omit<CoreConfigurationParams<Req, Res, Supported, Added>, keyof StaticConfigurationParamsOnly>;

package/lib/types/config/params/StaticConfigurationParams.d.ts

@@ -1,6 +1,8 @@
-import { RemoteConfigurationParamsOnly } from './CoreConfigurationParams';
-import { CreateHumanSecurityConfigurationParams } from './AllConfigurationParams';
+import { CoreConfigurationParamsKeys, RemoteConfigurationParamsOnly } from './CoreConfigurationParams';
+import { CreateHumanSecurityConfigurationParams } from './CreateHumanSecurityConfigurationParams';
 /**
  * All configurations that can be set via the static configurations, taking into account any added or removed configurations.
  */
-export type StaticConfigurationParams<Req, Res, Added = {}, Removed = never> = Omit<CreateHumanSecurityConfigurationParams<Req, Res, Added, Removed>, keyof RemoteConfigurationParamsOnly>;
+export type StaticConfigurationParams<Req, Res, Supported extends string, Added> = [Supported] extends [
+    CoreConfigurationParamsKeys
+] ? Omit<CreateHumanSecurityConfigurationParams<Req, Res, Supported, Added>, keyof RemoteConfigurationParamsOnly> : never;

package/lib/types/config/params/index.d.ts

@@ -3,3 +3,4 @@ export * from './AllConfigurationParams';
 export * from './CoreConfigurationParams';
 export * from './RemoteConfigurationParams';
 export * from './StaticConfigurationParams';
+export * from './CreateHumanSecurityConfigurationParams';

package/lib/types/config/remote_config/RemoteConfigUtils.d.ts

@@ -4,6 +4,6 @@ import { RemoteConfigurationParams } from '../params';
 import { RemoteConfigData } from './model';
 export declare namespace RemoteConfigUtils {
     const isRemoteConfigUpdateRequest: <Req>(request: IIncomingRequest<Req>) => boolean;
-    const prepareRemoteConfigParams: <Req, Res, Added, Removed>({ version, configValue }: RemoteConfigData<Req, Res, Added, Removed>, logger: ILogger) => RemoteConfigurationParams<Req, Res, Added, Removed>;
+    const prepareRemoteConfigParams: <Req, Res, Supported extends string, Added>({ version, configValue }: RemoteConfigData<Req, Res, Supported, Added>, logger: ILogger) => RemoteConfigurationParams<Req, Res, Supported, Added>;
     const mergeStringRegexConfigurationValues: (stringFields: Array<string | RegExp> | undefined, regexFields: string[] | undefined, logger: ILogger) => Array<string | RegExp>;
 }

package/lib/types/config/remote_config/manager/DefaultRemoteConfigManager.d.ts

@@ -4,20 +4,20 @@ import { RemoteConfigData } from '../model';
 import { IRemoteConfigServiceClient } from '../service_client';
 import { IRemoteConfigStorageClient } from '../storage_client';
 import { IRemoteConfigManager } from './IRemoteConfigManager';
-export type DefaultRemoteConfigManagerOptions<Req, Res, Added, Removed> = {
-    serviceClient: IRemoteConfigServiceClient<Req, Res, Added, Removed>;
-    storageClient: IRemoteConfigStorageClient<Req, Res, Added, Removed>;
+export type DefaultRemoteConfigManagerOptions<Req, Res, Supported extends string, Added> = {
+    serviceClient: IRemoteConfigServiceClient<Req, Res, Supported, Added>;
+    storageClient: IRemoteConfigStorageClient<Req, Res, Supported, Added>;
 };
-export declare class DefaultRemoteConfigManager<Req, Res, Added, Removed> implements IRemoteConfigManager<Req, Res> {
-    protected readonly config: IConfiguration<Req, Res, Added, Removed>;
-    protected serviceClient: IRemoteConfigServiceClient<Req, Res, Added, Removed>;
-    protected storageClient: IRemoteConfigStorageClient<Req, Res, Added, Removed>;
-    constructor(config: IConfiguration<Req, Res, Added, Removed>, options: DefaultRemoteConfigManagerOptions<Req, Res, Added, Removed>);
+export declare class DefaultRemoteConfigManager<Req, Res, Supported extends string, Added> implements IRemoteConfigManager<Req, Res> {
+    protected readonly config: IConfiguration<Req, Res, Supported, Added>;
+    protected serviceClient: IRemoteConfigServiceClient<Req, Res, Supported, Added>;
+    protected storageClient: IRemoteConfigStorageClient<Req, Res, Supported, Added>;
+    constructor(config: IConfiguration<Req, Res, Supported, Added>, options: DefaultRemoteConfigManagerOptions<Req, Res, Supported, Added>);
     loadRemoteConfig(): Promise<void>;
-    protected loadRemoteConfigData(): Promise<RemoteConfigData<Req, Res, Added, Removed> | null>;
+    protected loadRemoteConfigData(): Promise<RemoteConfigData<Req, Res, Supported, Added> | null>;
     protected isValidRemoteConfigId(remoteConfigId: string): boolean;
     shouldUpdateRemoteConfig(context: IContext<Req, Res>): boolean;
     updateRemoteConfig(context: ReadonlyContext<Req, Res>): Promise<void>;
-    protected fetchRemoteConfigData(desiredVersion: number, context: ReadonlyContext<Req, Res>): Promise<RemoteConfigData<Req, Res, Added, Removed> | null>;
+    protected fetchRemoteConfigData(desiredVersion: number, context: ReadonlyContext<Req, Res>): Promise<RemoteConfigData<Req, Res, Supported, Added> | null>;
     protected sleepBetweenFetchAttempts(ms: number): Promise<void>;
 }

package/lib/types/config/remote_config/model/RemoteConfigData.d.ts

@@ -1,7 +1,7 @@
 import { RemoteConfigurationParams } from '../../params';
-export type RemoteConfigData<Req, Res, Added, Removed> = {
+export type RemoteConfigData<Req, Res, Supported extends string, Added> = {
     id: string;
-    configValue: RemoteConfigurationParams<Req, Res, Added, Removed>;
+    configValue: RemoteConfigurationParams<Req, Res, Supported, Added>;
     lastUpdated: number;
     version: number;
 };

package/lib/types/config/remote_config/service_client/HttpRemoteConfigServiceClient.d.ts

@@ -2,11 +2,11 @@ import { IHttpClient, IIncomingResponse, IOutgoingRequest } from '../../../http'
 import { IConfiguration } from '../../IConfiguration';
 import { RemoteConfigData, RemoteConfigNotifyRequestPayload } from '../model';
 import { IRemoteConfigServiceClient } from './IRemoteConfigServiceClient';
-export declare class HttpRemoteConfigServiceClient<Req, Res, Added, Removed> implements IRemoteConfigServiceClient<Req, Res, Added, Removed> {
-    protected readonly config: IConfiguration<Req, Res, Added, Removed>;
+export declare class HttpRemoteConfigServiceClient<Req, Res, Supported extends string, Added> implements IRemoteConfigServiceClient<Req, Res, Supported, Added> {
+    protected readonly config: IConfiguration<Req, Res, Supported, Added>;
     protected readonly httpClient: IHttpClient;
-    constructor(config: IConfiguration<Req, Res, Added, Removed>, httpClient: IHttpClient);
-    fetch(_updateRequestData: RemoteConfigNotifyRequestPayload): Promise<RemoteConfigData<Req, Res, Added, Removed>>;
+    constructor(config: IConfiguration<Req, Res, Supported, Added>, httpClient: IHttpClient);
+    fetch(_updateRequestData: RemoteConfigNotifyRequestPayload): Promise<RemoteConfigData<Req, Res, Supported, Added>>;
     protected createFetchRemoteConfigRequest(): IOutgoingRequest;
-    protected extractConfigFromResponse(response: IIncomingResponse): Promise<RemoteConfigData<Req, Res, Added, Removed>>;
+    protected extractConfigFromResponse(response: IIncomingResponse): Promise<RemoteConfigData<Req, Res, Supported, Added>>;
 }

package/lib/types/config/remote_config/service_client/IRemoteConfigServiceClient.d.ts

@@ -1,5 +1,5 @@
 import { AsyncOrSync } from 'ts-essentials';
 import { RemoteConfigData, RemoteConfigNotifyRequestPayload } from '../model';
-export interface IRemoteConfigServiceClient<Req, Res, Added, Removed> {
-    fetch(updateRequestData: RemoteConfigNotifyRequestPayload): AsyncOrSync<RemoteConfigData<Req, Res, Added, Removed>>;
+export interface IRemoteConfigServiceClient<Req, Res, Supported extends string, Added> {
+    fetch(updateRequestData: RemoteConfigNotifyRequestPayload): AsyncOrSync<RemoteConfigData<Req, Res, Supported, Added>>;
 }

package/lib/types/config/remote_config/storage_client/IRemoteConfigStorageClient.d.ts

@@ -1,6 +1,6 @@
 import { AsyncOrSync } from 'ts-essentials';
 import { RemoteConfigData } from '../model';
-export interface IRemoteConfigStorageClient<Req, Res, Added, Removed> {
-    load(): AsyncOrSync<RemoteConfigData<Req, Res, Added, Removed> | null>;
-    save(remoteConfigData: RemoteConfigData<Req, Res, Added, Removed>): AsyncOrSync<void>;
+export interface IRemoteConfigStorageClient<Req, Res, Supported extends string, Added> {
+    load(): AsyncOrSync<RemoteConfigData<Req, Res, Supported, Added> | null>;
+    save(remoteConfigData: RemoteConfigData<Req, Res, Supported, Added>): AsyncOrSync<void>;
 }

package/lib/types/config/remote_config/update_parser/DefaultNotifyRemoteConfigUpdateParser.d.ts

@@ -11,10 +11,10 @@ export type DefaultNotifyRemoteConfigUpdateParserOptions = {
     hmacUtils?: never;
     timestampHmacHeaderValidator: ITimestampHmacHeaderValidator;
 };
-export declare class DefaultNotifyRemoteConfigUpdateParser<Req, Res, Added, Removed> implements IRemoteConfigUpdateParser<Req, Res> {
-    protected readonly config: IConfiguration<Req, Res, Added, Removed>;
+export declare class DefaultNotifyRemoteConfigUpdateParser<Req, Res, Supported extends string, Added> implements IRemoteConfigUpdateParser<Req, Res> {
+    protected readonly config: IConfiguration<Req, Res, Supported, Added>;
     protected readonly timestampHmacHeaderValidator: ITimestampHmacHeaderValidator;
-    constructor(config: IConfiguration<Req, Res, Added, Removed>, options: DefaultNotifyRemoteConfigUpdateParserOptions);
+    constructor(config: IConfiguration<Req, Res, Supported, Added>, options: DefaultNotifyRemoteConfigUpdateParserOptions);
     isUpdateRequest({ requestData: { request } }: ReadonlyContext<Req, Res>): Promise<boolean>;
     parseUpdate(context: ReadonlyContext<Req, Res>): Promise<RemoteConfigUpdateData>;
     protected isNotifyRequestValid(context: ReadonlyContext<Req, Res>): Promise<boolean>;