@browsercore/testing 0.1.0

package/dist/categories/regression.js

@@ -0,0 +1,28 @@
+/**
+ * Test Categories 16–17 — Regression Tests, Performance Benchmarks.
+ *
+ * See docs/TEST-SUITE.md for the full acceptance criteria of each category.
+ */
+import { describe, it } from "vitest";
+import { TestCategory } from "../types.js";
+export const CATEGORY_ID_REGRESSION = TestCategory.Regression;
+export const CATEGORY_ID_BENCHMARKS = TestCategory.PerformanceBenchmarks;
+describe(CATEGORY_ID_REGRESSION, () => {
+    it.todo("every discovered issue ships a permanent regression test");
+    it.todo("regression test records serialized packets");
+    it.todo("regression test records expected parser output");
+    it.todo("regression test records expected state transitions");
+    it.todo("regression test records expected network behavior");
+    it.todo("previously fixed issues do not reappear unnoticed");
+});
+describe(CATEGORY_ID_BENCHMARKS, () => {
+    it.todo("measure handshake latency");
+    it.todo("measure requests per second");
+    it.todo("measure memory usage");
+    it.todo("measure CPU usage");
+    it.todo("measure packet allocation");
+    it.todo("measure TLS throughput");
+    it.todo("measure HTTP/2 throughput");
+    it.todo("benchmarks are tracked over time to identify regressions");
+});
+//# sourceMappingURL=regression.js.map

package/dist/categories/regression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regression.js","sourceRoot":"","sources":["../../src/categories/regression.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC,UAAU,CAAC;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC,qBAAqB,CAAC;AAEzE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACpE,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACtD,EAAE,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC1D,EAAE,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAC9D,EAAE,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC7D,EAAE,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrC,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACvC,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7B,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAClC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrC,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC"}

package/dist/categories/session.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Test Categories 11–12 — Session Resumption, Connection Reuse.
+ *
+ * See docs/TEST-SUITE.md for the full acceptance criteria of each category.
+ */
+export declare const CATEGORY_ID_SESSION: "session-resumption";
+export declare const CATEGORY_ID_REUSE: "connection-reuse";
+//# sourceMappingURL=session.d.ts.map

package/dist/categories/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/categories/session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,eAAO,MAAM,mBAAmB,sBAAiC,CAAC;AAClE,eAAO,MAAM,iBAAiB,oBAA+B,CAAC"}

package/dist/categories/session.js

@@ -0,0 +1,23 @@
+/**
+ * Test Categories 11–12 — Session Resumption, Connection Reuse.
+ *
+ * See docs/TEST-SUITE.md for the full acceptance criteria of each category.
+ */
+import { describe, it } from "vitest";
+import { TestCategory } from "../types.js";
+export const CATEGORY_ID_SESSION = TestCategory.SessionResumption;
+export const CATEGORY_ID_REUSE = TestCategory.ConnectionReuse;
+describe(CATEGORY_ID_SESSION, () => {
+    it.todo("TLS session tickets");
+    it.todo("session cache");
+    it.todo("resumed handshake");
+    it.todo("ticket expiration");
+});
+describe(CATEGORY_ID_REUSE, () => {
+    it.todo("Keep-Alive");
+    it.todo("HTTP/2 multiplexing");
+    it.todo("connection pooling");
+    it.todo("idle timeout");
+    it.todo("maximum streams");
+});
+//# sourceMappingURL=session.js.map

package/dist/categories/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/categories/session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,iBAAiB,CAAC;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC,eAAe,CAAC;AAE9D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/B,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzB,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7B,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtB,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/B,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC9B,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxB,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC"}

package/dist/categories/tls.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Test Categories 2–4 — TLS Serialization, Browser Profile Comparison,
+ * TLS Fingerprint.
+ *
+ * See docs/TEST-SUITE.md for the full acceptance criteria of each category.
+ */
+export declare const CATEGORY_ID_TLS: "tls-serialization";
+export declare const CATEGORY_ID_PROFILE: "browser-profile-comparison";
+export declare const CATEGORY_ID_FINGERPRINT: "tls-fingerprint";
+//# sourceMappingURL=tls.d.ts.map

package/dist/categories/tls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls.d.ts","sourceRoot":"","sources":["../../src/categories/tls.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,eAAO,MAAM,eAAe,qBAAgC,CAAC;AAC7D,eAAO,MAAM,mBAAmB,8BAAwC,CAAC;AACzE,eAAO,MAAM,uBAAuB,mBAA8B,CAAC"}

package/dist/categories/tls.js

@@ -0,0 +1,48 @@
+/**
+ * Test Categories 2–4 — TLS Serialization, Browser Profile Comparison,
+ * TLS Fingerprint.
+ *
+ * See docs/TEST-SUITE.md for the full acceptance criteria of each category.
+ */
+import { describe, it } from "vitest";
+import { TestCategory } from "../types.js";
+export const CATEGORY_ID_TLS = TestCategory.TlsSerialization;
+export const CATEGORY_ID_PROFILE = TestCategory.BrowserProfileComparison;
+export const CATEGORY_ID_FINGERPRINT = TestCategory.TlsFingerprint;
+describe(CATEGORY_ID_TLS, () => {
+    it.todo("ClientHello serialization");
+    it.todo("ServerHello parsing");
+    it.todo("extension parsing");
+    it.todo("record fragmentation");
+    it.todo("Finished message generation");
+    it.todo("alert handling");
+    it.todo("key schedule generation");
+    it.todo("session resumption");
+});
+describe(CATEGORY_ID_PROFILE, () => {
+    it.todo("ClientHello: TLS version matches profile");
+    it.todo("ClientHello: cipher suite list + ordering matches profile");
+    it.todo("ClientHello: extension ordering matches profile");
+    it.todo("ClientHello: supported groups match profile");
+    it.todo("ClientHello: key shares match profile");
+    it.todo("ClientHello: signature algorithms match profile");
+    it.todo("ClientHello: ALPN list matches profile");
+    it.todo("ClientHello: GREASE values match profile");
+    it.todo("ClientHello: session ID length matches profile");
+    it.todo("ClientHello: compression methods match profile");
+    it.todo("ClientHello: PSK extension matches profile");
+    it.todo("ClientHello: padding extension matches profile");
+    it.todo("ClientHello: SNI extension matches profile");
+    it.todo("ClientHello: record version matches profile");
+    it.todo("ClientHello: record fragmentation matches profile");
+});
+describe(CATEGORY_ID_FINGERPRINT, () => {
+    it.todo("JA3 fingerprint matches configured profile");
+    it.todo("JA4 fingerprint matches configured profile (where applicable)");
+    it.todo("ALPN negotiation matches configured profile");
+    it.todo("negotiated cipher suite matches configured profile");
+    it.todo("negotiated protocol version matches configured profile");
+    it.todo("supported signature algorithms match configured profile");
+    it.todo("supported elliptic curves match configured profile");
+});
+//# sourceMappingURL=tls.js.map

package/dist/categories/tls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls.js","sourceRoot":"","sources":["../../src/categories/tls.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,gBAAgB,CAAC;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,wBAAwB,CAAC;AACzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC,cAAc,CAAC;AAEnE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrC,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/B,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7B,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChC,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACvC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1B,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACnC,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACpD,EAAE,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACrE,EAAE,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC3D,EAAE,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACvD,EAAE,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACjD,EAAE,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC3D,EAAE,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAClD,EAAE,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACpD,EAAE,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC1D,EAAE,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC1D,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACtD,EAAE,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC1D,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACtD,EAAE,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACvD,EAAE,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACtD,EAAE,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACzE,EAAE,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACvD,EAAE,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAC9D,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAClE,EAAE,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACnE,EAAE,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC"}

package/dist/categories/transport.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Test Category 1 — TCP Transport.
+ *
+ * Verify transport layer behaves correctly. See docs/TEST-SUITE.md
+ * ("Test Category 1 — TCP Transport") for full acceptance criteria.
+ */
+export declare const CATEGORY_ID: "tcp-transport";
+//# sourceMappingURL=transport.d.ts.map

package/dist/categories/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/categories/transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,eAAO,MAAM,WAAW,iBAA4B,CAAC"}

package/dist/categories/transport.js

@@ -0,0 +1,22 @@
+/**
+ * Test Category 1 — TCP Transport.
+ *
+ * Verify transport layer behaves correctly. See docs/TEST-SUITE.md
+ * ("Test Category 1 — TCP Transport") for full acceptance criteria.
+ */
+import { describe, it } from "vitest";
+import { TestCategory } from "../types.js";
+export const CATEGORY_ID = TestCategory.TcpTransport;
+describe(CATEGORY_ID, () => {
+    it.todo("TCP connection establishment");
+    it.todo("connection timeout handling");
+    it.todo("read buffering");
+    it.todo("partial packet handling");
+    it.todo("large packet handling");
+    it.todo("connection reuse");
+    it.todo("graceful shutdown");
+    it.todo("unexpected disconnect handling");
+    it.todo("IPv4 support");
+    it.todo("IPv6 support");
+});
+//# sourceMappingURL=transport.js.map

package/dist/categories/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/categories/transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,YAAY,CAAC;AAErD,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACxC,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACvC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1B,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACnC,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5B,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7B,EAAE,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC1C,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxB,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Typed errors for @browsercore/testing.
+ */
+/** Base class for every testing error. */
+export declare class TestingError extends Error {
+    readonly kind: "TestingError";
+    readonly cause: Error | undefined;
+    constructor(message: string, options?: {
+        cause?: Error;
+    });
+}
+/** Actual bytes diverged from a golden capture. */
+export declare class GoldenMismatchError extends Error {
+    readonly kind: "GoldenMismatchError";
+    readonly captureId: string;
+    readonly divergenceByteIndex: number;
+    readonly cause: Error | undefined;
+    constructor(captureId: string, divergenceByteIndex: number, options?: {
+        cause?: Error;
+    });
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,0CAA0C;AAC1C,qBAAa,YAAa,SAAQ,KAAK;IACnC,SAAgB,IAAI,EAAG,cAAc,CAAU;IAC/C,SAAyB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;gBAEtC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAK3D;AAED,mDAAmD;AACnD,qBAAa,mBAAoB,SAAQ,KAAK;IAC1C,SAAgB,IAAI,EAAG,qBAAqB,CAAU;IACtD,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,mBAAmB,EAAE,MAAM,CAAC;IAC5C,SAAyB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;gBAG9C,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,MAAM,EAC3B,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAWlC"}

package/dist/errors.js

@@ -0,0 +1,28 @@
+/**
+ * Typed errors for @browsercore/testing.
+ */
+/** Base class for every testing error. */
+export class TestingError extends Error {
+    kind = "TestingError";
+    cause;
+    constructor(message, options) {
+        super(message, options);
+        this.name = new.target.name;
+        this.cause = options?.cause;
+    }
+}
+/** Actual bytes diverged from a golden capture. */
+export class GoldenMismatchError extends Error {
+    kind = "GoldenMismatchError";
+    captureId;
+    divergenceByteIndex;
+    cause;
+    constructor(captureId, divergenceByteIndex, options) {
+        super(`Golden capture ${captureId} diverges at byte ${divergenceByteIndex}`, options);
+        this.name = "GoldenMismatchError";
+        this.captureId = captureId;
+        this.divergenceByteIndex = divergenceByteIndex;
+        this.cause = options?.cause;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,0CAA0C;AAC1C,MAAM,OAAO,YAAa,SAAQ,KAAK;IACnB,IAAI,GAAG,cAAuB,CAAC;IACtB,KAAK,CAAoB;IAElD,YAAY,OAAe,EAAE,OAA2B;QACpD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAChC,CAAC;CACJ;AAED,mDAAmD;AACnD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC1B,IAAI,GAAG,qBAA8B,CAAC;IACtC,SAAS,CAAS;IAClB,mBAAmB,CAAS;IACnB,KAAK,CAAoB;IAElD,YACI,SAAiB,EACjB,mBAA2B,EAC3B,OAA2B;QAE3B,KAAK,CACD,kBAAkB,SAAS,qBAAqB,mBAAmB,EAAE,EACrE,OAAO,CACV,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAChC,CAAC;CACJ"}

package/dist/fingerprint/index.d.ts

@@ -0,0 +1,5 @@
+/** Barrel for fingerprint computation (JA3 / JA4). */
+export { computeJa3, parseClientHello, Ja3ParseError } from "./ja3.js";
+export type { Ja3Segments } from "./ja3.js";
+export { computeJa4 } from "./ja4.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/fingerprint/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACvE,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC"}

package/dist/fingerprint/index.js

@@ -0,0 +1,4 @@
+/** Barrel for fingerprint computation (JA3 / JA4). */
+export { computeJa3, parseClientHello, Ja3ParseError } from "./ja3.js";
+export { computeJa4 } from "./ja4.js";
+//# sourceMappingURL=index.js.map

package/dist/fingerprint/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC"}

package/dist/fingerprint/ja3.d.ts

@@ -0,0 +1,36 @@
+/**
+ * JA3 / JA4 TLS fingerprinting (docs/TEST-SUITE.md, Category 4).
+ *
+ * JA3 (https://github.com/salesforce/ja3) hashes the decimal representation of
+ * a ClientHello's selectable fields. Format string:
+ *
+ *   SSLVersion,CipherSuites,Extensions,SupportedGroups,EllipticCurvePointFormats
+ *
+ * each field is a dash-joined list of integers; the whole string is MD5-hashed
+ * to produce the JA3 digest. This implementation parses the ClientHello out of
+ * its TLS record wrapper.
+ */
+/** Reasons a ClientHello cannot be parsed into a JA3 input. */
+export declare class Ja3ParseError extends Error {
+    readonly kind: "Ja3ParseError";
+    constructor(message: string);
+}
+/**
+ * Parse a TLS ClientHello from a TLS record (or handshake) buffer and return
+ * the dash-jojoined JA3 input segments plus the final MD5 digest.
+ *
+ * Accepts either a full TLS record (record type 0x16) or a bare handshake
+ * (handshake type 0x01).
+ */
+export declare function computeJa3(clientHello: Uint8Array): string;
+/** JA3 input segments (for inspection/testing). */
+export interface Ja3Segments {
+    readonly version: string;
+    readonly ciphers: string;
+    readonly extensions: string;
+    readonly supportedGroups: string;
+    readonly ecPointFormats: string;
+}
+/** Parse a ClientHello into its five JA3 segments. */
+export declare function parseClientHello(clientHello: Uint8Array): Ja3Segments;
+//# sourceMappingURL=ja3.d.ts.map

package/dist/fingerprint/ja3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ja3.d.ts","sourceRoot":"","sources":["../../src/fingerprint/ja3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,+DAA+D;AAC/D,qBAAa,aAAc,SAAQ,KAAK;IACpC,SAAgB,IAAI,EAAG,eAAe,CAAU;gBACpC,OAAO,EAAE,MAAM;CAI9B;AAOD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,CAM1D;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACnC;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,UAAU,GAAG,WAAW,CAgGrE"}

package/dist/fingerprint/ja3.js

@@ -0,0 +1,141 @@
+/**
+ * JA3 / JA4 TLS fingerprinting (docs/TEST-SUITE.md, Category 4).
+ *
+ * JA3 (https://github.com/salesforce/ja3) hashes the decimal representation of
+ * a ClientHello's selectable fields. Format string:
+ *
+ *   SSLVersion,CipherSuites,Extensions,SupportedGroups,EllipticCurvePointFormats
+ *
+ * each field is a dash-joined list of integers; the whole string is MD5-hashed
+ * to produce the JA3 digest. This implementation parses the ClientHello out of
+ * its TLS record wrapper.
+ */
+import { createHash } from "node:crypto";
+/** Reasons a ClientHello cannot be parsed into a JA3 input. */
+export class Ja3ParseError extends Error {
+    kind = "Ja3ParseError";
+    constructor(message) {
+        super(message);
+        this.name = "Ja3ParseError";
+    }
+}
+/** Read a big-endian uint16 at `offset` in `buf`. */
+function uint16(buf, offset) {
+    return (buf[offset] << 8) | buf[offset + 1];
+}
+/**
+ * Parse a TLS ClientHello from a TLS record (or handshake) buffer and return
+ * the dash-jojoined JA3 input segments plus the final MD5 digest.
+ *
+ * Accepts either a full TLS record (record type 0x16) or a bare handshake
+ * (handshake type 0x01).
+ */
+export function computeJa3(clientHello) {
+    const s = parseClientHello(clientHello);
+    const ja3String = [s.version, s.ciphers, s.extensions, s.supportedGroups, s.ecPointFormats].join(",");
+    return createHash("md5").update(ja3String).digest("hex");
+}
+/** Parse a ClientHello into its five JA3 segments. */
+export function parseClientHello(clientHello) {
+    let pos;
+    let handshakeLen;
+    // Detect TLS record wrapper (ContentType handshake = 0x16).
+    if (clientHello[0] === 0x16) {
+        if (clientHello.length < 5) {
+            throw new Ja3ParseError("TLS record too short");
+        }
+        // offset 3..4 = record length; handshake starts at 5
+        pos = 5;
+        if (clientHello[pos] !== 0x01) {
+            throw new Ja3ParseError(`Expected ClientHello (0x01) at record+0, got 0x${clientHello[pos]?.toString(16)}`);
+        }
+        handshakeLen = readInt24(clientHello, pos + 1);
+        pos += 4; // handshake type(1) + length(3)
+        const available = clientHello.length - pos;
+        if (handshakeLen > available) {
+            throw new Ja3ParseError(`Handshake length ${handshakeLen} exceeds available ${available} bytes`);
+        }
+    }
+    else if (clientHello[0] === 0x01) {
+        handshakeLen = readInt24(clientHello, 1);
+        pos = 4;
+        const available = clientHello.length - pos;
+        if (handshakeLen > available) {
+            throw new Ja3ParseError(`Handshake length ${handshakeLen} exceeds available ${available} bytes`);
+        }
+    }
+    else {
+        throw new Ja3ParseError(`Not a TLS record or ClientHello (first byte 0x${clientHello[0]?.toString(16)})`);
+    }
+    const end = pos + handshakeLen;
+    // client_version(2)
+    const version = uint16(clientHello, pos);
+    pos += 2;
+    // random(32)
+    pos += 32;
+    // session_id(variable)
+    const sessionIdLen = clientHello[pos];
+    pos += 1 + sessionIdLen;
+    // cipher_suites(variable)
+    const cipherSuitesLen = uint16(clientHello, pos);
+    pos += 2;
+    const ciphers = readUint16List(clientHello, pos, cipherSuitesLen);
+    pos += cipherSuitesLen;
+    // compression_methods(variable)
+    const compLen = clientHello[pos];
+    pos += 1 + compLen;
+    // extensions(variable)
+    if (pos + 2 > end) {
+        // No extensions present.
+        return {
+            version: String(version),
+            ciphers: ciphers.join("-"),
+            extensions: "",
+            supportedGroups: "",
+            ecPointFormats: "",
+        };
+    }
+    const extensionsLen = uint16(clientHello, pos);
+    pos += 2;
+    const extensionsEnd = pos + extensionsLen;
+    const extensionTypes = [];
+    const supportedGroups = [];
+    const ecPointFormats = [];
+    while (pos + 4 <= extensionsEnd) {
+        const extType = uint16(clientHello, pos);
+        const extLen = uint16(clientHello, pos + 2);
+        pos += 4;
+        extensionTypes.push(extType);
+        if (extType === 0x000a && extLen >= 4) {
+            // supported_groups(10): list of uint16 group ids
+            const listLen = uint16(clientHello, pos);
+            supportedGroups.push(...readUint16List(clientHello, pos + 2, listLen));
+        }
+        else if (extType === 0x000b && extLen >= 1) {
+            // ec_point_formats(11): list of uint8 formats
+            const listLen = clientHello[pos];
+            for (let i = 0; i < listLen; i++) {
+                ecPointFormats.push(clientHello[pos + 1 + i]);
+            }
+        }
+        pos += extLen;
+    }
+    return {
+        version: String(version),
+        ciphers: ciphers.join("-"),
+        extensions: extensionTypes.join("-"),
+        supportedGroups: supportedGroups.join("-"),
+        ecPointFormats: ecPointFormats.join("-"),
+    };
+}
+function readInt24(buf, offset) {
+    return (buf[offset] << 16) | (buf[offset + 1] << 8) | buf[offset + 2];
+}
+function readUint16List(buf, offset, byteLen) {
+    const out = [];
+    for (let i = 0; i + 1 < byteLen; i += 2) {
+        out.push((buf[offset + i] << 8) | buf[offset + i + 1]);
+    }
+    return out;
+}
+//# sourceMappingURL=ja3.js.map

package/dist/fingerprint/ja3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ja3.js","sourceRoot":"","sources":["../../src/fingerprint/ja3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,+DAA+D;AAC/D,MAAM,OAAO,aAAc,SAAQ,KAAK;IACpB,IAAI,GAAG,eAAwB,CAAC;IAChD,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAChC,CAAC;CACJ;AAED,qDAAqD;AACrD,SAAS,MAAM,CAAC,GAAe,EAAE,MAAc;IAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,WAAuB;IAC9C,MAAM,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAC5F,GAAG,CACN,CAAC;IACF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAWD,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,WAAuB;IACpD,IAAI,GAAW,CAAC;IAChB,IAAI,YAAoB,CAAC;IAEzB,4DAA4D;IAC5D,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;QACpD,CAAC;QACD,qDAAqD;QACrD,GAAG,GAAG,CAAC,CAAC;QACR,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CAAC,kDAAkD,WAAW,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,YAAY,GAAG,SAAS,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAC/C,GAAG,IAAI,CAAC,CAAC,CAAC,gCAAgC;QAC1C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC;QAC3C,IAAI,YAAY,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CAAC,oBAAoB,YAAY,sBAAsB,SAAS,QAAQ,CAAC,CAAC;QACrG,CAAC;IACL,CAAC;SAAM,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,YAAY,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzC,GAAG,GAAG,CAAC,CAAC;QACR,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC;QAC3C,IAAI,YAAY,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CAAC,oBAAoB,YAAY,sBAAsB,SAAS,QAAQ,CAAC,CAAC;QACrG,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,aAAa,CAAC,iDAAiD,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,GAAG,YAAY,CAAC;IAE/B,oBAAoB;IACpB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACzC,GAAG,IAAI,CAAC,CAAC;IACT,aAAa;IACb,GAAG,IAAI,EAAE,CAAC;IACV,uBAAuB;IACvB,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAE,CAAC;IACvC,GAAG,IAAI,CAAC,GAAG,YAAY,CAAC;IACxB,0BAA0B;IAC1B,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACjD,GAAG,IAAI,CAAC,CAAC;IACT,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAClE,GAAG,IAAI,eAAe,CAAC;IACvB,gCAAgC;IAChC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAE,CAAC;IAClC,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC;IACnB,uBAAuB;IACvB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,yBAAyB;QACzB,OAAO;YACH,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;YACxB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1B,UAAU,EAAE,EAAE;YACd,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;SACrB,CAAC;IACN,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/C,GAAG,IAAI,CAAC,CAAC;IACT,MAAM,aAAa,GAAG,GAAG,GAAG,aAAa,CAAC;IAE1C,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,OAAO,GAAG,GAAG,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAC5C,GAAG,IAAI,CAAC,CAAC;QACT,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE7B,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YACpC,iDAAiD;YACjD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACzC,eAAe,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC;aAAM,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAC3C,8CAA8C;YAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAE,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;YACnD,CAAC;QACL,CAAC;QAED,GAAG,IAAI,MAAM,CAAC;IAClB,CAAC;IAED,OAAO;QACH,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1B,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QACpC,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1C,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;KAC3C,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,MAAc;IAC9C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,GAAe,EAAE,MAAc,EAAE,OAAe;IACpE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/fingerprint/ja4.d.ts

@@ -0,0 +1,109 @@
+/**
+ * JA4 TLS fingerprint (docs/TEST-SUITE.md, Category 4).
+ *
+ * JA4 is a multi-part fingerprint family that captures significantly more signal
+ * than JA3. We compute the standard four-part TLS fingerprint:
+ *
+ *   JA4_a   connection prefix  — transport, TLS version, SNI flag, cipher count,
+ *                                extension count, ALPN code.
+ *   JA4_b   cipher-suite hash  — sorted non-GREASE cipher suites, SHA-256,
+ *                                first 12 hex chars.
+ *   JA4_c   extension hash      — sorted non-GREASE extensions (excluding SNI +
+ *                                ALPN), SHA-256, first 12 hex chars.
+ *   JA4_f   raw-fields hash    — TLS version, ciphers, extensions, supported
+ *                                groups, EC point formats, SHA-256, first 12 hex.
+ *
+ * The concatenated `JA4_a_JA4_b_JA4_c_JA4_f` string is the canonical JA4 tag.
+ *
+ * JA4H (the HTTP-layer sibling) is computed separately by {@link computeJa4h}
+ * from method/version/headers/cookies — it is the HTTP analogue used by the
+ * reference provider to fingerprint a captured request.
+ *
+ * Reference: https://github.com/FoxIO-LLC/JA4
+ */
+/** Reasons a ClientHello cannot be parsed into a JA4 input. */
+export declare class Ja4ParseError extends Error {
+    readonly kind: "Ja4ParseError";
+    constructor(message: string);
+}
+/**
+ * Parsed fields from a ClientHello relevant to JA4.
+ *
+ * `cipherSuites` and `extensions` are the raw (non-GREASE) numeric values;
+ * `supportedGroups` and `ecPointFormats` are the raw values from their
+ * respective extensions; `alpnRaw` is the raw ALPN protocol string list.
+ */
+export interface Ja4ClientHello {
+    readonly tlsVersion: string;
+    readonly sniPresent: boolean;
+    readonly cipherSuites: readonly number[];
+    readonly extensions: readonly number[];
+    readonly supportedGroups: readonly number[];
+    readonly ecPointFormats: readonly number[];
+    readonly alpnRaw: string;
+}
+/** The four computed JA4 parts. */
+export interface Ja4Fingerprint {
+    readonly a: string;
+    readonly b: string;
+    readonly c: string;
+    readonly f: string;
+    /** Canonical `JA4_a_JA4_b_JA4_c_JA4_f` tag. */
+    readonly tag: string;
+}
+/** The three computed JA4H parts. */
+export interface Ja4hFingerprint {
+    readonly a: string;
+    readonly b: string;
+    readonly c: string;
+    readonly d: string;
+    /** Canonical `JA4H_a_JA4H_b_JA4H_c_JA4H_d` tag. */
+    readonly tag: string;
+}
+/**
+ * Parse a TLS ClientHello (either wrapped in a TLS record or bare) into the
+ * fields JA4 needs. Throws {@link Ja4ParseError} on malformed input.
+ */
+export declare function parseJa4ClientHello(clientHello: Uint8Array): Ja4ClientHello;
+/**
+ * Compute the canonical JA4 tag (`JA4_a_JA4_b_JA4_c_JA4_f`) from a ClientHello.
+ *
+ * This is the string form used by the public API (index.ts) and the reference
+ * provider. Use {@link computeJa4Fingerprint} when you need the parts.
+ */
+export declare function computeJa4(clientHello: Uint8Array): string;
+/**
+ * Compute the four-part JA4 TLS fingerprint from a ClientHello buffer.
+ *
+ * Returns the individual parts plus the canonical `JA4_a_JA4_b_JA4_c_JA4_f`
+ * tag. The caller can use any part — comparison is typically done against the
+ * full tag or against JA4_a (the connection prefix) for grouping.
+ */
+export declare function computeJa4Fingerprint(clientHello: Uint8Array): Ja4Fingerprint;
+/**
+ * HTTP request fields needed to compute a JA4H fingerprint.
+ *
+ * Only the parts JA4H inspects are required — method, HTTP version, header
+ * names (in order), cookies, and the Accept-Language prefix.
+ */
+export interface Ja4hRequest {
+    readonly method: "GET" | "POST" | "HEAD" | "PUT" | "DELETE" | "OPTIONS" | "PATCH";
+    readonly httpVersion: "1.1" | "2" | "3";
+    /** Header names in the order they are serialized (lowercased). */
+    readonly headerNames: readonly string[];
+    /** Cookie name=value pairs (as they appear in the Cookie header). */
+    readonly cookies: readonly string[];
+    /** The Accept-Language header value (only its 4-char prefix is used). */
+    readonly acceptLanguage?: string;
+}
+/**
+ * Compute the four-part JA4H HTTP fingerprint from a captured request.
+ *
+ * Format: `JA4H_a_JA4H_b_JA4H_c_JA4H_d` where:
+ * - JA4H_a: `{method:02s}{version}{has_cookies:d}{has_referer:d}{header_count:02d}{lang_prefix}`
+ * - JA4H_b: sorted cookie name=value pairs, SHA-256, first 12 hex.
+ * - JA4H_c: sorted cookie names, SHA-256, first 12 hex.
+ * - JA4H_d: sorted header names (excluding cookie), SHA-256, first 12 hex.
+ */
+export declare function computeJa4h(request: Ja4hRequest): Ja4hFingerprint;
+//# sourceMappingURL=ja4.d.ts.map

package/dist/fingerprint/ja4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ja4.d.ts","sourceRoot":"","sources":["../../src/fingerprint/ja4.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,+DAA+D;AAC/D,qBAAa,aAAc,SAAQ,KAAK;IACpC,SAAgB,IAAI,EAAG,eAAe,CAAU;gBACpC,OAAO,EAAE,MAAM;CAI9B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAED,mCAAmC;AACnC,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACxB;AAED,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACxB;AA4CD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,UAAU,GAAG,cAAc,CAgL3E;AAeD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,UAAU,GAAG,cAAc,CAgC7E;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;IAClF,QAAQ,CAAC,WAAW,EAAE,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC;IACxC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,yEAAyE;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,eAAe,CAkCjE"}