@apifuse/provider-sdk 2.2.0-beta.4 → 2.2.0-beta.40

package/dist/stateful-signing.d.ts

@@ -0,0 +1,18 @@
+export declare const STATEFUL_SIGNATURE_HEADER = "x-apifuse-stateful-signature";
+export declare const STATEFUL_TIMESTAMP_HEADER = "x-apifuse-stateful-timestamp";
+export declare const STATEFUL_NONCE_HEADER = "x-apifuse-stateful-nonce";
+export type StatefulSigningInput = {
+    readonly secret: string;
+    readonly timestamp: string;
+    readonly rawBody: string;
+    readonly method: string;
+    readonly path: string;
+    readonly nonce: string;
+};
+export declare function signStatefulRequestBody(input: StatefulSigningInput): string;
+export declare function verifyStatefulRequestSignature(input: StatefulSigningInput & {
+    readonly signature: string;
+}): boolean;
+export declare function statefulSignedHeaders(input: Omit<StatefulSigningInput, "nonce"> & {
+    readonly nonce?: string;
+}): Record<string, string>;

package/dist/stateful-signing.js

@@ -0,0 +1,27 @@
+import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
+export const STATEFUL_SIGNATURE_HEADER = "x-apifuse-stateful-signature";
+export const STATEFUL_TIMESTAMP_HEADER = "x-apifuse-stateful-timestamp";
+export const STATEFUL_NONCE_HEADER = "x-apifuse-stateful-nonce";
+export function signStatefulRequestBody(input) {
+    return `v1=${createHmac("sha256", input.secret)
+        .update(`v1:${input.method.toUpperCase()}:${input.path}:${input.timestamp}:${input.nonce}.${input.rawBody}`)
+        .digest("hex")}`;
+}
+export function verifyStatefulRequestSignature(input) {
+    return safeEqualAscii(input.signature, signStatefulRequestBody(input));
+}
+export function statefulSignedHeaders(input) {
+    const nonce = input.nonce ?? randomUUID();
+    return {
+        [STATEFUL_SIGNATURE_HEADER]: signStatefulRequestBody({ ...input, nonce }),
+        [STATEFUL_TIMESTAMP_HEADER]: input.timestamp,
+        [STATEFUL_NONCE_HEADER]: nonce,
+    };
+}
+function safeEqualAscii(actual, expected) {
+    const actualBytes = Buffer.from(actual);
+    const expectedBytes = Buffer.from(expected);
+    if (actualBytes.byteLength !== expectedBytes.byteLength)
+        return false;
+    return timingSafeEqual(actualBytes, expectedBytes);
+}

package/dist/stealth/profiles.js

@@ -57,7 +57,7 @@ const FIREFOX_H2_SETTINGS = {
     MAX_HEADER_LIST_SIZE: 65536,
 };
 const SAFARI_H2_SETTINGS = {
-    HEADER_TABLE_SIZE: 4096,
+    // Safari 17 also sends a connection-level WINDOW_UPDATE increment of 10485760.
     ENABLE_PUSH: 0,
     INITIAL_WINDOW_SIZE: 4194304,
     MAX_CONCURRENT_STREAMS: 100,
@@ -162,8 +162,8 @@ const STEALTH_PROFILES = {
     }),
     "firefox-132": createProfile("firefox-132", {
         platform: "macos",
-        version: "132.0",
-        userAgent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.0) Gecko/20100101 Firefox/132.0",
+        version: "133.0",
+        userAgent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0",
         tlsClientIdentifier: "firefox_132",
         ja3: FIREFOX_JA3,
         h2Settings: FIREFOX_H2_SETTINGS,
@@ -178,6 +178,15 @@ const STEALTH_PROFILES = {
         h2Settings: SAFARI_H2_SETTINGS,
         headerOrder: SAFARI_HEADER_ORDER,
     }),
+    "safari-17": createProfile("safari-17", {
+        platform: "macos",
+        version: "17.0",
+        userAgent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15",
+        tlsClientIdentifier: "safari_17_0",
+        ja3: SAFARI_JA3,
+        h2Settings: SAFARI_H2_SETTINGS,
+        headerOrder: SAFARI_HEADER_ORDER,
+    }),
     "safari-15": createProfile("safari-15", {
         platform: "macos",
         version: "15.6.1",
@@ -198,8 +207,8 @@ const STEALTH_PROFILES = {
     }),
     "ios-safari-18": createProfile("ios-safari-18", {
         platform: "ios",
-        version: "18.0",
-        userAgent: "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1",
+        version: "18.1.1",
+        userAgent: "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1",
         tlsClientIdentifier: "safari_ios_18_0",
         ja3: SAFARI_JA3,
         h2Settings: SAFARI_H2_SETTINGS,
@@ -207,8 +216,8 @@ const STEALTH_PROFILES = {
     }),
     "ios-safari-17": createProfile("ios-safari-17", {
         platform: "ios",
-        version: "17.0",
-        userAgent: "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1",
+        version: "17.2",
+        userAgent: "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1",
         tlsClientIdentifier: "safari_ios_17_0",
         ja3: SAFARI_JA3,
         h2Settings: SAFARI_H2_SETTINGS,

package/dist/stream-evidence.d.ts

@@ -0,0 +1,74 @@
+import { type JsonValue } from "./contract-json.js";
+import type { HttpStreamResponse } from "./types.js";
+export declare const STREAM_PREVIEW_BYTES = 4096;
+export declare const STREAM_FINALIZE_TIMEOUT_MS = 30000;
+declare const STREAM_EVIDENCE_HEADER_NAMES: readonly ["content-disposition", "content-length", "content-type"];
+type StreamEvidenceHeaderName = (typeof STREAM_EVIDENCE_HEADER_NAMES)[number];
+export type StreamEvidenceHeaders = Partial<Record<StreamEvidenceHeaderName, string>>;
+export interface StreamEvidenceRequest {
+    ordinal: number;
+    method: string;
+    path: string;
+}
+declare const STREAM_EVIDENCE_REDACTION_REASONS: readonly ["high-entropy-token", "malformed-json", "pem-private-key", "sanitized-preview-too-large", "sanitizer-output-invalid", "sensitive-delimited-column", "textual-xml", "truncated-form", "truncated-json", "undecodable-text"];
+export type StreamEvidenceRedactionReason = (typeof STREAM_EVIDENCE_REDACTION_REASONS)[number];
+export interface StreamEvidenceRecord {
+    __apifuse_stream__: true;
+    status: number;
+    ok: boolean;
+    headers: StreamEvidenceHeaders;
+    body_sha256: string;
+    body_bytes: number;
+    body_preview_base64: string;
+    request?: StreamEvidenceRequest;
+    preview_sanitized?: true;
+    preview_redaction_reason?: StreamEvidenceRedactionReason;
+}
+export type StreamEvidenceReplayResponse = HttpStreamResponse & {
+    evidence_only: true;
+    body_sha256: string;
+    body_bytes: number;
+    preview_sanitized?: true;
+    preview_redaction_reason?: StreamEvidenceRedactionReason;
+};
+export interface StreamEvidenceCapture {
+    response: HttpStreamResponse;
+    getEvidence(): Promise<StreamEvidenceRecord>;
+}
+export type StreamCaptureGroupItem = {
+    kind: "stream";
+    evidence: StreamEvidenceRecord;
+} | {
+    kind: "response";
+    value: JsonValue;
+};
+export interface StreamCaptureGroup {
+    items: StreamCaptureGroupItem[];
+}
+export interface StreamCaptureEnvelope {
+    __apifuse_capture__: true;
+    items: StreamCaptureGroupItem[];
+}
+export type StreamEvidenceCaptureOptions = {
+    requestUrl: string;
+    sanitizeFixture?: (value: JsonValue) => JsonValue;
+    request?: StreamEvidenceRequest;
+    finalizeTimeoutMs?: number;
+};
+export declare function parseStreamEvidenceRecord(value: unknown): StreamEvidenceRecord;
+export declare function isStreamEvidenceRecord(value: unknown): value is StreamEvidenceRecord;
+export declare function findStreamEvidenceRecord(value: unknown): StreamEvidenceRecord | undefined;
+/**
+ * Selects every stream captured by the latest recording invocation, in stream call order.
+ * Evidence without request ordinals uses the legacy latest-record-only behavior.
+ */
+export declare function findStreamEvidenceRecords(value: unknown): StreamEvidenceRecord[];
+/** Returns a tagged latest mixed response group used by evidence-only snapshot replay. */
+export declare function findStreamCaptureGroup(value: unknown): StreamCaptureGroup | undefined;
+/** Creates a discriminated invocation envelope so ordinary arrays cannot mimic capture timelines. */
+export declare function createStreamCaptureEnvelope(items: StreamCaptureGroupItem[]): StreamCaptureEnvelope;
+export declare function isStreamEvidenceReplayResponse(response: HttpStreamResponse): response is StreamEvidenceReplayResponse;
+export declare function captureStreamEvidence(response: HttpStreamResponse, options: StreamEvidenceCaptureOptions): StreamEvidenceCapture;
+export declare function replayStreamEvidence(evidence: StreamEvidenceRecord): StreamEvidenceReplayResponse;
+export declare function hasStreamEvidenceMarker(value: unknown): boolean;
+export {};