Release v3.6.62

demos/provider-mock/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @prosopo/provider-mock
 
+## 2.8.126
+### Patch Changes
+
+- Updated dependencies [44fe294]
+  - @prosopo/provider@4.15.4
+
 ## 2.8.125
 ### Patch Changes
 

demos/provider-mock/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@prosopo/provider-mock",
-	"version": "2.8.125",
+	"version": "2.8.126",
 	"author": "PROSOPO LIMITED <info@prosopo.io>",
 	"license": "Apache-2.0",
 	"type": "module",
@@ -32,7 +32,7 @@
 		"@prosopo/database": "3.15.12",
 		"@prosopo/dotenv": "3.0.49",
 		"@prosopo/locale": "3.2.6",
-		"@prosopo/provider": "4.15.3",
+		"@prosopo/provider": "4.15.4",
 		"@prosopo/types": "4.9.8",
 		"@prosopo/types-database": "4.11.11",
 		"cors": "2.8.5",

dev/scripts/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @prosopo/scripts
 
+## 3.1.126
+### Patch Changes
+
+- Updated dependencies [44fe294]
+  - @prosopo/provider@4.15.4
+  - @prosopo/cli@3.6.62
+
 ## 3.1.125
 ### Patch Changes
 

dev/scripts/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@prosopo/scripts",
-	"version": "3.1.125",
+	"version": "3.1.126",
 	"description": "Dev scripts for working with prosopo packages",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
@@ -31,15 +31,15 @@
 		"@iarna/toml": "2.2.5",
 		"@polkadot/util": "13.5.7",
 		"@polkadot/util-crypto": "13.5.7",
-		"@prosopo/cli": "3.6.61",
+		"@prosopo/cli": "3.6.62",
 		"@prosopo/common": "3.1.45",
 		"@prosopo/logger": "2.0.3",
 		"@prosopo/datasets": "3.1.50",
 		"@prosopo/dotenv": "3.0.49",
 		"@prosopo/env": "3.6.12",
 		"@prosopo/keyring": "2.9.56",
 		"@prosopo/locale": "3.2.6",
-		"@prosopo/provider": "4.15.3",
+		"@prosopo/provider": "4.15.4",
 		"@prosopo/types": "4.9.8",
 		"@prosopo/types-env": "2.10.11",
 		"@prosopo/util": "3.3.4",

docker/images/provider/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@prosopo/provider-docker",
-	"version": "3.6.61",
+	"version": "3.6.62",
 	"engines": {
 		"node": "^24",
 		"npm": "^11"

package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@prosopo/captcha",
 	"packageManager": "npm@11.0.0",
-	"version": "3.6.61",
+	"version": "3.6.62",
 	"author": "Prosopo",
 	"type": "module",
 	"repository": {

packages/cli/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @prosopo/cli
 
+## 3.6.62
+### Patch Changes
+
+- Updated dependencies [44fe294]
+  - @prosopo/provider@4.15.4
+
 ## 3.6.61
 ### Patch Changes
 

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@prosopo/cli",
-	"version": "3.6.61",
+	"version": "3.6.62",
 	"description": "CLI for Prosopo Provider",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
@@ -39,7 +39,7 @@
 		"@prosopo/env": "3.6.12",
 		"@prosopo/keyring": "2.9.56",
 		"@prosopo/locale": "3.2.6",
-		"@prosopo/provider": "4.15.3",
+		"@prosopo/provider": "4.15.4",
 		"@prosopo/types": "4.9.8",
 		"@prosopo/util": "3.3.4",
 		"@prosopo/workspace": "3.1.20",

packages/provider/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @prosopo/provider
 
+## 4.15.4
+### Patch Changes
+
+- 44fe294: feat(provider): support `deferToVerify: true` on Restrict rules — serve the challenge, fail at verify
+
+  Extends `findHardBlockPolicy` in `captchaManager.ts` so that a Restrict rule with `deferToVerify: true` is treated as a hard-block at verify time.
+
+  Behaviour:
+
+  - **Frictionless**: the Restrict rule fires as normal — the client is served the configured `captchaType` and `solvedImagesCount` (e.g. `image` / 8 rounds). Compute burden of the challenge is imposed on the caller.
+  - **Verify**: `checkForHardBlock` matches the same rule and marks the commitment `Disapproved` with `ACCESS_POLICY_BLOCK`, so the dApp's `verify()` returns `{verified: false}` regardless of whether the client's solution was correct.
+
+  Motivation: PROXY_POOL_TLS_NARROW targets solving-farm-backed residential proxy pools that solve image captchas at ~100% (they use human solvers), so we can't stop them by demanding correctness — only by wasting their compute. The existing Restrict/image/8-rounds shape imposes the cost but still lets them through if they solve. Layering `deferToVerify: true` closes that loop: they burn 8 image rounds per session AND fail verify.
+
+  Test coverage updated in `captchaManager.unit.test.ts`:
+
+  - Restrict + deferToVerify → returns the policy (new behaviour).
+  - Restrict without deferToVerify → returns undefined (routing rule, unchanged).
+  - All existing Block cases (Block+deferToVerify, Block+no-captchaType, Block+captchaType-without-defer) continue to behave as before.
+
 ## 4.15.3
 ### Patch Changes
 

packages/provider/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@prosopo/provider",
-	"version": "4.15.3",
+	"version": "4.15.4",
 	"author": "PROSOPO LIMITED <info@prosopo.io>",
 	"license": "Apache-2.0",
 	"type": "module",