@browsercore/testing 0.1.0

package/dist/fingerprint/ja4.js

@@ -0,0 +1,325 @@
+/**
+ * JA4 TLS fingerprint (docs/TEST-SUITE.md, Category 4).
+ *
+ * JA4 is a multi-part fingerprint family that captures significantly more signal
+ * than JA3. We compute the standard four-part TLS fingerprint:
+ *
+ *   JA4_a   connection prefix  — transport, TLS version, SNI flag, cipher count,
+ *                                extension count, ALPN code.
+ *   JA4_b   cipher-suite hash  — sorted non-GREASE cipher suites, SHA-256,
+ *                                first 12 hex chars.
+ *   JA4_c   extension hash      — sorted non-GREASE extensions (excluding SNI +
+ *                                ALPN), SHA-256, first 12 hex chars.
+ *   JA4_f   raw-fields hash    — TLS version, ciphers, extensions, supported
+ *                                groups, EC point formats, SHA-256, first 12 hex.
+ *
+ * The concatenated `JA4_a_JA4_b_JA4_c_JA4_f` string is the canonical JA4 tag.
+ *
+ * JA4H (the HTTP-layer sibling) is computed separately by {@link computeJa4h}
+ * from method/version/headers/cookies — it is the HTTP analogue used by the
+ * reference provider to fingerprint a captured request.
+ *
+ * Reference: https://github.com/FoxIO-LLC/JA4
+ */
+import { createHash } from "node:crypto";
+/** Reasons a ClientHello cannot be parsed into a JA4 input. */
+export class Ja4ParseError extends Error {
+    kind = "Ja4ParseError";
+    constructor(message) {
+        super(message);
+        this.name = "Ja4ParseError";
+    }
+}
+/** GREASE values per RFC 8701 — these are reserved and must be ignored. */
+const GREASE_VALUES = new Set([
+    0x0a0a, 0x1a1a, 0x2a2a, 0x3a3a, 0x4a4a, 0x5a5a, 0x6a6a, 0x7a7a,
+    0x8a8a, 0x9a9a, 0xaaaa, 0xbaba, 0xcaca, 0xdada, 0xeaea, 0xfafa,
+]);
+/** TLS extension type numbers we special-case when parsing. */
+const EXT_SNI = 0x0000;
+const EXT_SUPPORTED_GROUPS = 0x000a;
+const EXT_EC_POINT_FORMATS = 0x000b;
+const EXT_ALPN = 0x0010;
+const EXT_SUPPORTED_VERSIONS = 0x002b;
+/** TLS protocol-version codes → human-readable version string. */
+const TLS_VERSIONS = new Map([
+    [0x0304, "13"],
+    [0x0303, "12"],
+    [0x0302, "11"],
+    [0x0301, "10"],
+    [0x0300, "09"],
+]);
+/** Read a big-endian uint16 at `offset` in `buf` (unchecked — caller bounds). */
+function uint16(buf, offset) {
+    return (buf[offset] << 8) | buf[offset + 1];
+}
+/** Read a 24-bit big-endian integer at `offset` in `buf`. */
+function uint24(buf, offset) {
+    return (buf[offset] << 16) | (buf[offset + 1] << 8) | buf[offset + 2];
+}
+/** Format a number as a 4-char lowercase hex string (`0x1a2b` → `"1a2b"`). */
+function hex4(value) {
+    return value.toString(16).padStart(4, "0");
+}
+/** First 12 hex chars of the SHA-256 digest of `input`. */
+function sha256First12(input) {
+    return createHash("sha256").update(input).digest("hex").slice(0, 12);
+}
+/**
+ * Parse a TLS ClientHello (either wrapped in a TLS record or bare) into the
+ * fields JA4 needs. Throws {@link Ja4ParseError} on malformed input.
+ */
+export function parseJa4ClientHello(clientHello) {
+    let pos;
+    let handshakeLen;
+    if (clientHello.length === 0) {
+        throw new Ja4ParseError("ClientHello is empty");
+    }
+    // TLS record wrapper: ContentType handshake (0x16) + version(2) + length(2).
+    if (clientHello[0] === 0x16) {
+        if (clientHello.length < 5) {
+            throw new Ja4ParseError("TLS record too short");
+        }
+        pos = 5;
+        if (clientHello[pos] !== 0x01) {
+            throw new Ja4ParseError(`Expected ClientHello (0x01) at record+0, got 0x${clientHello[pos]?.toString(16)}`);
+        }
+        handshakeLen = uint24(clientHello, pos + 1);
+        pos += 4;
+        const available = clientHello.length - pos;
+        if (handshakeLen > available) {
+            throw new Ja4ParseError(`Handshake length ${handshakeLen} exceeds available ${available} bytes`);
+        }
+    }
+    else if (clientHello[0] === 0x01) {
+        // Bare handshake.
+        if (clientHello.length < 4) {
+            throw new Ja4ParseError("Bare ClientHello too short");
+        }
+        handshakeLen = uint24(clientHello, 1);
+        pos = 4;
+        const available = clientHello.length - pos;
+        if (handshakeLen > available) {
+            throw new Ja4ParseError(`Handshake length ${handshakeLen} exceeds available ${available} bytes`);
+        }
+    }
+    else {
+        throw new Ja4ParseError(`Not a TLS record or ClientHello (first byte 0x${clientHello[0]?.toString(16)})`);
+    }
+    const end = pos + handshakeLen;
+    if (pos + 2 > end) {
+        throw new Ja4ParseError("ClientHello too short for version");
+    }
+    // client_version(2)
+    const versionCode = uint16(clientHello, pos);
+    pos += 2;
+    // random(32)
+    pos += 32;
+    if (pos > end) {
+        throw new Ja4ParseError("ClientHello truncated before session id");
+    }
+    // session_id(variable)
+    const sessionIdLen = clientHello[pos];
+    pos += 1 + sessionIdLen;
+    if (pos + 2 > end) {
+        throw new Ja4ParseError("ClientHello truncated before cipher suites");
+    }
+    // cipher_suites(variable)
+    const cipherSuitesLen = uint16(clientHello, pos);
+    pos += 2;
+    if (pos + cipherSuitesLen > end) {
+        throw new Ja4ParseError("ClientHello truncated in cipher suites");
+    }
+    const cipherSuites = [];
+    for (let i = 0; i + 1 < cipherSuitesLen; i += 2) {
+        const suite = uint16(clientHello, pos + i);
+        if (!GREASE_VALUES.has(suite)) {
+            cipherSuites.push(suite);
+        }
+    }
+    pos += cipherSuitesLen;
+    if (pos + 1 > end) {
+        throw new Ja4ParseError("ClientHello truncated before compression methods");
+    }
+    // compression_methods(variable)
+    const compLen = clientHello[pos];
+    pos += 1 + compLen;
+    if (pos + 2 > end) {
+        // No extensions present.
+        return {
+            tlsVersion: TLS_VERSIONS.get(versionCode) ?? versionCode.toString(16).padStart(2, "0"),
+            sniPresent: false,
+            cipherSuites,
+            extensions: [],
+            supportedGroups: [],
+            ecPointFormats: [],
+            alpnRaw: "",
+        };
+    }
+    // extensions(variable)
+    const extensionsLen = uint16(clientHello, pos);
+    pos += 2;
+    const extensionsEnd = pos + extensionsLen;
+    const extensions = [];
+    let sniPresent = false;
+    const supportedGroups = [];
+    const ecPointFormats = [];
+    let alpnRaw = "";
+    while (pos + 4 <= extensionsEnd) {
+        const extType = uint16(clientHello, pos);
+        const extLen = uint16(clientHello, pos + 2);
+        pos += 4;
+        if (!GREASE_VALUES.has(extType)) {
+            extensions.push(extType);
+        }
+        switch (extType) {
+            case EXT_SNI:
+                sniPresent = true;
+                break;
+            case EXT_SUPPORTED_GROUPS:
+                if (extLen >= 4) {
+                    const listLen = uint16(clientHello, pos);
+                    for (let i = 0; i + 1 < listLen; i += 2) {
+                        const group = uint16(clientHello, pos + 2 + i);
+                        if (!GREASE_VALUES.has(group)) {
+                            supportedGroups.push(group);
+                        }
+                    }
+                }
+                break;
+            case EXT_EC_POINT_FORMATS:
+                if (extLen >= 1) {
+                    const listLen = clientHello[pos];
+                    for (let i = 0; i < listLen; i++) {
+                        ecPointFormats.push(clientHello[pos + 1 + i]);
+                    }
+                }
+                break;
+            case EXT_ALPN:
+                if (extLen >= 2) {
+                    const listLen = uint16(clientHello, pos);
+                    let cursor = pos + 2;
+                    const protocols = [];
+                    const listEnd = cursor + listLen;
+                    while (cursor < listEnd) {
+                        const protoLen = clientHello[cursor];
+                        cursor += 1;
+                        protocols.push(new TextDecoder().decode(clientHello.subarray(cursor, cursor + protoLen)));
+                        cursor += protoLen;
+                    }
+                    alpnRaw = protocols.join(",");
+                }
+                break;
+            case EXT_SUPPORTED_VERSIONS:
+                // JA4 uses the highest supported version from this extension.
+                break;
+            default:
+                break;
+        }
+        pos += extLen;
+    }
+    return {
+        tlsVersion: TLS_VERSIONS.get(versionCode) ?? versionCode.toString(16).padStart(2, "0"),
+        sniPresent,
+        cipherSuites,
+        extensions,
+        supportedGroups,
+        ecPointFormats,
+        alpnRaw,
+    };
+}
+/** ALPN code: first char of first ALPN + first char of last ALPN, or "00". */
+function alpnCode(alpnRaw) {
+    if (alpnRaw.length === 0) {
+        return "00";
+    }
+    const protocols = alpnRaw.split(",");
+    const first = protocols[0] ?? "";
+    const last = protocols[protocols.length - 1] ?? "";
+    const a = first.length > 0 ? first[0] : "0";
+    const b = last.length > 0 ? last[0] : "0";
+    return `${a}${b}`.toLowerCase();
+}
+/**
+ * Compute the canonical JA4 tag (`JA4_a_JA4_b_JA4_c_JA4_f`) from a ClientHello.
+ *
+ * This is the string form used by the public API (index.ts) and the reference
+ * provider. Use {@link computeJa4Fingerprint} when you need the parts.
+ */
+export function computeJa4(clientHello) {
+    return computeJa4Fingerprint(clientHello).tag;
+}
+/**
+ * Compute the four-part JA4 TLS fingerprint from a ClientHello buffer.
+ *
+ * Returns the individual parts plus the canonical `JA4_a_JA4_b_JA4_c_JA4_f`
+ * tag. The caller can use any part — comparison is typically done against the
+ * full tag or against JA4_a (the connection prefix) for grouping.
+ */
+export function computeJa4Fingerprint(clientHello) {
+    const hello = parseJa4ClientHello(clientHello);
+    // JA4_a: t{ciphers:02d}{exts:02d}{sni_flag}{version}{alpn}
+    const sniFlag = hello.sniPresent ? "d" : "i";
+    const a = `t${hello.cipherSuites.length.toString().padStart(2, "0")}${hello.extensions.length
+        .toString()
+        .padStart(2, "0")}${sniFlag}${hello.tlsVersion}${alpnCode(hello.alpnRaw)}`;
+    // JA4_b: sorted cipher suites, 4-char hex, SHA-256, first 12 hex.
+    const sortedCiphers = [...hello.cipherSuites].sort((x, y) => x - y).map(hex4).join("");
+    const b = sortedCiphers.length > 0 ? sha256First12(sortedCiphers) : "000000000000";
+    // JA4_c: sorted extensions (excluding SNI=0, ALPN=16), 4-char hex.
+    const filteredExts = hello.extensions
+        .filter((e) => e !== EXT_SNI && e !== EXT_ALPN)
+        .sort((x, y) => x - y)
+        .map(hex4)
+        .join("");
+    const c = filteredExts.length > 0 ? sha256First12(filteredExts) : "000000000000";
+    // JA4_f: raw fields — version, ciphers, extensions, supported groups, ec.
+    const raw = [
+        hex4(clientHello.length > 1 ? uint16(clientHello, 0) : 0),
+        hello.cipherSuites.map(hex4).join(""),
+        hello.extensions.map(hex4).join(""),
+        hello.supportedGroups.map(hex4).join(""),
+        hello.ecPointFormats.map(hex4).join(""),
+    ].join("");
+    const f = sha256First12(raw);
+    return { a, b, c, f, tag: `${a}_${b}_${c}_${f}` };
+}
+/**
+ * Compute the four-part JA4H HTTP fingerprint from a captured request.
+ *
+ * Format: `JA4H_a_JA4H_b_JA4H_c_JA4H_d` where:
+ * - JA4H_a: `{method:02s}{version}{has_cookies:d}{has_referer:d}{header_count:02d}{lang_prefix}`
+ * - JA4H_b: sorted cookie name=value pairs, SHA-256, first 12 hex.
+ * - JA4H_c: sorted cookie names, SHA-256, first 12 hex.
+ * - JA4H_d: sorted header names (excluding cookie), SHA-256, first 12 hex.
+ */
+export function computeJa4h(request) {
+    const methodCode = request.method.slice(0, 2).toLowerCase();
+    const versionCode = request.httpVersion === "1.1"
+        ? "11"
+        : request.httpVersion === "2"
+            ? "02"
+            : request.httpVersion === "3"
+                ? "03"
+                : "00";
+    const hasCookies = request.cookies.length > 0 ? "c" : "n";
+    const hasReferer = request.headerNames.some((h) => h === "referer") ? "r" : "n";
+    const headerCount = request.headerNames.length.toString().padStart(2, "0");
+    const langPrefix = (request.acceptLanguage ?? "").slice(0, 4).padEnd(4, "0").toLowerCase();
+    const a = `${methodCode}${versionCode}${hasCookies}${hasReferer}${headerCount}${langPrefix}`;
+    const sortedCookies = [...request.cookies].sort().join(",");
+    const b = sortedCookies.length > 0 ? sha256First12(sortedCookies) : "000000000000";
+    const sortedCookieNames = [...request.cookies]
+        .map((c) => c.split("=")[0] ?? "")
+        .filter((n) => n.length > 0)
+        .sort()
+        .join(",");
+    const c = sortedCookieNames.length > 0 ? sha256First12(sortedCookieNames) : "000000000000";
+    const sortedHeaders = [...request.headerNames]
+        .filter((h) => h !== "cookie")
+        .sort()
+        .join(",");
+    const d = sortedHeaders.length > 0 ? sha256First12(sortedHeaders) : "000000000000";
+    return { a, b, c, d, tag: `${a}_${b}_${c}_${d}` };
+}
+//# sourceMappingURL=ja4.js.map

package/dist/fingerprint/ja4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ja4.js","sourceRoot":"","sources":["../../src/fingerprint/ja4.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,+DAA+D;AAC/D,MAAM,OAAO,aAAc,SAAQ,KAAK;IACpB,IAAI,GAAG,eAAwB,CAAC;IAChD,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAChC,CAAC;CACJ;AAuCD,2EAA2E;AAC3E,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IAC/C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CACjE,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,OAAO,GAAG,MAAM,CAAC;AACvB,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC,kEAAkE;AAClE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAiB;IACzC,CAAC,MAAM,EAAE,IAAI,CAAC;IACd,CAAC,MAAM,EAAE,IAAI,CAAC;IACd,CAAC,MAAM,EAAE,IAAI,CAAC;IACd,CAAC,MAAM,EAAE,IAAI,CAAC;IACd,CAAC,MAAM,EAAE,IAAI,CAAC;CACjB,CAAC,CAAC;AAEH,iFAAiF;AACjF,SAAS,MAAM,CAAC,GAAe,EAAE,MAAc;IAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;AAClD,CAAC;AAED,6DAA6D;AAC7D,SAAS,MAAM,CAAC,GAAe,EAAE,MAAc;IAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAC9E,SAAS,IAAI,CAAC,KAAa;IACvB,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,2DAA2D;AAC3D,SAAS,aAAa,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAuB;IACvD,IAAI,GAAW,CAAC;IAChB,IAAI,YAAoB,CAAC;IAEzB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACpD,CAAC;IAED,6EAA6E;IAC7E,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;QACpD,CAAC;QACD,GAAG,GAAG,CAAC,CAAC;QACR,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CACnB,kDAAkD,WAAW,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CACrF,CAAC;QACN,CAAC;QACD,YAAY,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAC5C,GAAG,IAAI,CAAC,CAAC;QACT,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC;QAC3C,IAAI,YAAY,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CACnB,oBAAoB,YAAY,sBAAsB,SAAS,QAAQ,CAC1E,CAAC;QACN,CAAC;IACL,CAAC;SAAM,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,kBAAkB;QAClB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;QAC1D,CAAC;QACD,YAAY,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACtC,GAAG,GAAG,CAAC,CAAC;QACR,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC;QAC3C,IAAI,YAAY,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CACnB,oBAAoB,YAAY,sBAAsB,SAAS,QAAQ,CAC1E,CAAC;QACN,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,aAAa,CACnB,iDAAiD,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,CACnF,CAAC;IACN,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,GAAG,YAAY,CAAC;IAC/B,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,aAAa,CAAC,mCAAmC,CAAC,CAAC;IACjE,CAAC;IAED,oBAAoB;IACpB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7C,GAAG,IAAI,CAAC,CAAC;IACT,aAAa;IACb,GAAG,IAAI,EAAE,CAAC;IACV,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;QACZ,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACvE,CAAC;IACD,uBAAuB;IACvB,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAE,CAAC;IACvC,GAAG,IAAI,CAAC,GAAG,YAAY,CAAC;IACxB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IAC1E,CAAC;IACD,0BAA0B;IAC1B,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACjD,GAAG,IAAI,CAAC,CAAC;IACT,IAAI,GAAG,GAAG,eAAe,GAAG,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IACL,CAAC;IACD,GAAG,IAAI,eAAe,CAAC;IACvB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,aAAa,CAAC,kDAAkD,CAAC,CAAC;IAChF,CAAC;IACD,gCAAgC;IAChC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAE,CAAC;IAClC,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC;IACnB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,yBAAyB;QACzB,OAAO;YACH,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;YACtF,UAAU,EAAE,KAAK;YACjB,YAAY;YACZ,UAAU,EAAE,EAAE;YACd,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,OAAO,EAAE,EAAE;SACd,CAAC;IACN,CAAC;IACD,uBAAuB;IACvB,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/C,GAAG,IAAI,CAAC,CAAC;IACT,MAAM,aAAa,GAAG,GAAG,GAAG,aAAa,CAAC;IAE1C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,OAAO,GAAG,GAAG,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAC5C,GAAG,IAAI,CAAC,CAAC;QAET,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAED,QAAQ,OAAO,EAAE,CAAC;YACd,KAAK,OAAO;gBACR,UAAU,GAAG,IAAI,CAAC;gBAClB,MAAM;YACV,KAAK,oBAAoB;gBACrB,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;oBACd,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;4BAC5B,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBAChC,CAAC;oBACL,CAAC;gBACL,CAAC;gBACD,MAAM;YACV,KAAK,oBAAoB;gBACrB,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;oBACd,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAE,CAAC;oBAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;wBAC/B,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;oBACnD,CAAC;gBACL,CAAC;gBACD,MAAM;YACV,KAAK,QAAQ;gBACT,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;oBACd,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBACzC,IAAI,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;oBACrB,MAAM,SAAS,GAAa,EAAE,CAAC;oBAC/B,MAAM,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;oBACjC,OAAO,MAAM,GAAG,OAAO,EAAE,CAAC;wBACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAE,CAAC;wBACtC,MAAM,IAAI,CAAC,CAAC;wBACZ,SAAS,CAAC,IAAI,CACV,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,CAC5E,CAAC;wBACF,MAAM,IAAI,QAAQ,CAAC;oBACvB,CAAC;oBACD,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,MAAM;YACV,KAAK,sBAAsB;gBACvB,8DAA8D;gBAC9D,MAAM;YACV;gBACI,MAAM;QACd,CAAC;QAED,GAAG,IAAI,MAAM,CAAC;IAClB,CAAC;IAED,OAAO;QACH,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QACtF,UAAU;QACV,YAAY;QACZ,UAAU;QACV,eAAe;QACf,cAAc;QACd,OAAO;KACV,CAAC;AACN,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,OAAe;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,WAAuB;IAC9C,OAAO,qBAAqB,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAuB;IACzD,MAAM,KAAK,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAE/C,2DAA2D;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM;SACxF,QAAQ,EAAE;SACV,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAE/E,kEAAkE;IAClE,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IAEnF,mEAAmE;IACnE,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,CAAC;SAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACrB,GAAG,CAAC,IAAI,CAAC;SACT,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IAEjF,0EAA0E;IAC1E,MAAM,GAAG,GAAG;QACR,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KAC1C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAE7B,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACtD,CAAC;AAmBD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,WAAW,GACb,OAAO,CAAC,WAAW,KAAK,KAAK;QACzB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,OAAO,CAAC,WAAW,KAAK,GAAG;YAC3B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,OAAO,CAAC,WAAW,KAAK,GAAG;gBAC3B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC;IACnB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAChF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAE3F,MAAM,CAAC,GAAG,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;IAE7F,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IAEnF,MAAM,iBAAiB,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IAE3F,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;SACzC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC;SAC7B,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IAEnF,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACtD,CAAC"}

package/dist/golden/golden.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Golden packet capture loading + comparison.
+ *
+ * Captures live on disk as a `.bin` (raw wire bytes) plus a `.meta.json`
+ * sidecar describing the capture and listing the byte ranges that are
+ * intentionally randomized by the protocol spec (ephemeral keys, nonces,
+ * GREASE, client_random). Those ranges MUST be masked before comparison —
+ * that is the core mechanism behind Category 14 (packet capture comparison).
+ *
+ * CaptureId format: a path-like triple `${profile}/${protocol}/${record}`
+ * (e.g. `chrome-140/tls/client_hello`) that maps directly onto the
+ * `captures/<profile>/<protocol>/<record>.{bin,meta.json}` layout.
+ */
+import type { CaptureId, CaptureMeta, ComparisonResult, ComparisonResultWithIgnore, GoldenCapture } from "../types.js";
+/**
+ * Load a golden capture by id.
+ *
+ * Reads `<captureId>.bin` and its sibling `.meta.json` from the captures
+ * directory, validates the sidecar, and returns a typed {@link GoldenCapture}.
+ * Throws {@link TestingError} when the id is malformed, the files are
+ * missing, or the sidecar fails validation.
+ */
+export declare function loadGolden(captureId: CaptureId): GoldenCapture;
+/** Load the {@link CaptureMeta} sidecar for a capture. */
+export declare function loadCaptureMeta(captureId: CaptureId): CaptureMeta;
+/**
+ * Compare actual bytes against a golden capture. Real byte comparison —
+ * throws {@link GoldenMismatchError} when they diverge.
+ *
+ * Uses a strict byte comparison (no randomized-field masking). For the
+ * tolerant comparison used by Category 14, see
+ * {@link compareAgainstGoldenWithIgnore}.
+ */
+export declare function compareAgainstGolden(actual: Uint8Array, captureId: CaptureId): ComparisonResult;
+/**
+ * Compare actual bytes against a golden capture while masking the byte ranges
+ * the protocol intentionally randomizes (ephemeral keys, nonces, GREASE,
+ * client_random). This is the Category 14 tolerant comparison.
+ *
+ * Returns a {@link ComparisonResultWithIgnore} that reports which ranges were
+ * masked. Throws {@link GoldenMismatchError} only when bytes OUTSIDE the
+ * masked ranges diverge.
+ */
+export declare function compareAgainstGoldenWithIgnore(actual: Uint8Array, captureId: CaptureId): ComparisonResultWithIgnore;
+//# sourceMappingURL=golden.d.ts.map

package/dist/golden/golden.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"golden.d.ts","sourceRoot":"","sources":["../../src/golden/golden.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EACR,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,0BAA0B,EAC1B,aAAa,EAEhB,MAAM,aAAa,CAAC;AA6HrB;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,SAAS,GAAG,aAAa,CA2B9D;AAYD,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,WAAW,CAUjE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,gBAAgB,CAa/F;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC1C,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,SAAS,GACrB,0BAA0B,CAe5B"}

package/dist/golden/golden.js

@@ -0,0 +1,216 @@
+/**
+ * Golden packet capture loading + comparison.
+ *
+ * Captures live on disk as a `.bin` (raw wire bytes) plus a `.meta.json`
+ * sidecar describing the capture and listing the byte ranges that are
+ * intentionally randomized by the protocol spec (ephemeral keys, nonces,
+ * GREASE, client_random). Those ranges MUST be masked before comparison —
+ * that is the core mechanism behind Category 14 (packet capture comparison).
+ *
+ * CaptureId format: a path-like triple `${profile}/${protocol}/${record}`
+ * (e.g. `chrome-140/tls/client_hello`) that maps directly onto the
+ * `captures/<profile>/<protocol>/<record>.{bin,meta.json}` layout.
+ */
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+import { compareBytes, compareBytesWithIgnore } from "../utils.js";
+import { GoldenMismatchError, TestingError } from "../errors.js";
+const here = dirname(fileURLToPath(import.meta.url));
+// src/golden -> package root -> captures/
+const capturesDir = join(here, "..", "..", "captures");
+/** Parse a CaptureId of the form `${profile}/${protocol}/${record}`. */
+function parseCaptureId(captureId) {
+    const EXPECTED_FORMAT = "${profile}/${protocol}/${record}";
+    const parts = captureId.split("/");
+    if (parts.length !== 3) {
+        throw new TestingError(`Malformed CaptureId "${captureId}" — expected ${EXPECTED_FORMAT}`);
+    }
+    const [profile, protocol, record] = parts;
+    if (profile === undefined || protocol === undefined || record === undefined) {
+        throw new TestingError(`Malformed CaptureId "${captureId}" — expected ${EXPECTED_FORMAT}`);
+    }
+    return { profile, protocol, record };
+}
+/** Validate unknown JSON data as a {@link CaptureMeta} (no zod dep here). */
+function parseCaptureMeta(raw, captureId) {
+    if (typeof raw !== "object" || raw === null) {
+        throw new TestingError(`Capture meta for ${captureId} is not an object`);
+    }
+    const obj = raw;
+    const source = obj.source;
+    if (source !== "curl-impersonate" && source !== "real-browser") {
+        throw new TestingError(`Capture meta for ${captureId} has invalid source: ${String(source)}`);
+    }
+    const protocol = obj.protocol;
+    if (protocol !== "tls" && protocol !== "http2" && protocol !== "http1" && protocol !== "tcp") {
+        throw new TestingError(`Capture meta for ${captureId} has invalid protocol: ${String(protocol)}`);
+    }
+    const record = obj.record;
+    if (record !== "client_hello" &&
+        record !== "settings" &&
+        record !== "headers" &&
+        record !== "server_hello") {
+        throw new TestingError(`Capture meta for ${captureId} has invalid record: ${String(record)}`);
+    }
+    const description = obj.description;
+    if (typeof description !== "string") {
+        throw new TestingError(`Capture meta for ${captureId} has non-string description`);
+    }
+    const createdAt = obj.createdAt;
+    if (typeof createdAt !== "string") {
+        throw new TestingError(`Capture meta for ${captureId} has non-string createdAt`);
+    }
+    const randomizedFields = parseRandomizedFields(obj.randomizedFields, captureId);
+    return {
+        source,
+        profile: obj.profile,
+        protocol,
+        record,
+        description,
+        randomizedFields,
+        createdAt,
+    };
+}
+/** Validate unknown data as a list of {@link RandomizedField}. */
+function parseRandomizedFields(raw, captureId) {
+    if (!Array.isArray(raw)) {
+        throw new TestingError(`Capture meta for ${captureId} has non-array randomizedFields`);
+    }
+    return raw.map((item, i) => {
+        if (typeof item !== "object" || item === null) {
+            throw new TestingError(`Capture meta for ${captureId} randomizedFields[${i}] is not an object`);
+        }
+        const obj = item;
+        const byteOffset = obj.byteOffset;
+        if (typeof byteOffset !== "number" || byteOffset < 0) {
+            throw new TestingError(`Capture meta for ${captureId} randomizedFields[${i}].byteOffset invalid`);
+        }
+        const length = obj.length;
+        if (typeof length !== "number" || length < 0) {
+            throw new TestingError(`Capture meta for ${captureId} randomizedFields[${i}].length invalid`);
+        }
+        const reason = obj.reason;
+        if (reason !== "ephemeral_key" && reason !== "nonce" && reason !== "grease" && reason !== "random") {
+            throw new TestingError(`Capture meta for ${captureId} randomizedFields[${i}].reason invalid: ${String(reason)}`);
+        }
+        return { byteOffset, length, reason };
+    });
+}
+/** Resolve a CaptureId to its on-disk `.bin` + `.meta.json` paths. */
+function resolveCapturePaths(captureId) {
+    const { profile, protocol, record } = parseCaptureId(captureId);
+    const base = join(capturesDir, profile, protocol, record);
+    return { binPath: `${base}.bin`, metaPath: `${base}.meta.json` };
+}
+/**
+ * Load a golden capture by id.
+ *
+ * Reads `<captureId>.bin` and its sibling `.meta.json` from the captures
+ * directory, validates the sidecar, and returns a typed {@link GoldenCapture}.
+ * Throws {@link TestingError} when the id is malformed, the files are
+ * missing, or the sidecar fails validation.
+ */
+export function loadGolden(captureId) {
+    const { binPath, metaPath } = resolveCapturePaths(captureId);
+    let bytes;
+    try {
+        bytes = readFileSync(binPath);
+    }
+    catch (e) {
+        const cause = e instanceof Error ? e : new Error(String(e));
+        throw new TestingError(`Failed to read capture bytes at ${binPath}`, { cause });
+    }
+    let meta;
+    try {
+        meta = JSON.parse(readFileSync(metaPath, "utf8"));
+    }
+    catch (e) {
+        const cause = e instanceof Error ? e : new Error(String(e));
+        throw new TestingError(`Failed to read/parse capture meta at ${metaPath}`, { cause });
+    }
+    const parsed = parseCaptureMeta(meta, captureId);
+    return {
+        id: captureId,
+        source: parsed.source === "curl-impersonate" ? parseSource(parsed.profile) : "chrome-140",
+        protocol: parsed.protocol,
+        bytes,
+        description: parsed.description,
+    };
+}
+/** Derive a {@link CaptureSource} from a profile id (best-effort). */
+function parseSource(profile) {
+    const p = String(profile);
+    if (p.startsWith("chrome"))
+        return "chrome-140";
+    if (p.startsWith("firefox"))
+        return "firefox-135";
+    if (p.startsWith("safari"))
+        return "safari-18";
+    if (p.startsWith("edge"))
+        return "edge-140";
+    return "chrome-140";
+}
+/** Load the {@link CaptureMeta} sidecar for a capture. */
+export function loadCaptureMeta(captureId) {
+    const { metaPath } = resolveCapturePaths(captureId);
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(metaPath, "utf8"));
+    }
+    catch (e) {
+        const cause = e instanceof Error ? e : new Error(String(e));
+        throw new TestingError(`Failed to read/parse capture meta at ${metaPath}`, { cause });
+    }
+    return parseCaptureMeta(raw, captureId);
+}
+/**
+ * Compare actual bytes against a golden capture. Real byte comparison —
+ * throws {@link GoldenMismatchError} when they diverge.
+ *
+ * Uses a strict byte comparison (no randomized-field masking). For the
+ * tolerant comparison used by Category 14, see
+ * {@link compareAgainstGoldenWithIgnore}.
+ */
+export function compareAgainstGolden(actual, captureId) {
+    let expected;
+    try {
+        expected = loadGolden(captureId).bytes;
+    }
+    catch (e) {
+        const cause = e instanceof Error ? e : new Error(String(e));
+        throw new TestingError(`Failed to load golden ${captureId}`, { cause });
+    }
+    const result = compareBytes(actual, expected);
+    if (!result.matches) {
+        throw new GoldenMismatchError(captureId, result.divergenceByteIndex ?? actual.length);
+    }
+    return result;
+}
+/**
+ * Compare actual bytes against a golden capture while masking the byte ranges
+ * the protocol intentionally randomizes (ephemeral keys, nonces, GREASE,
+ * client_random). This is the Category 14 tolerant comparison.
+ *
+ * Returns a {@link ComparisonResultWithIgnore} that reports which ranges were
+ * masked. Throws {@link GoldenMismatchError} only when bytes OUTSIDE the
+ * masked ranges diverge.
+ */
+export function compareAgainstGoldenWithIgnore(actual, captureId) {
+    let expected;
+    let meta;
+    try {
+        expected = loadGolden(captureId).bytes;
+        meta = loadCaptureMeta(captureId);
+    }
+    catch (e) {
+        const cause = e instanceof Error ? e : new Error(String(e));
+        throw new TestingError(`Failed to load golden ${captureId}`, { cause });
+    }
+    const result = compareBytesWithIgnore(actual, expected, meta.randomizedFields);
+    if (!result.matches) {
+        throw new GoldenMismatchError(captureId, result.divergenceByteIndex ?? actual.length);
+    }
+    return result;
+}
+//# sourceMappingURL=golden.js.map

package/dist/golden/golden.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"golden.js","sourceRoot":"","sources":["../../src/golden/golden.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAS1C,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjE,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,0CAA0C;AAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAEvD,wEAAwE;AACxE,SAAS,cAAc,CAAC,SAAoB;IAKxC,MAAM,eAAe,GAAG,kCAAkC,CAAC;IAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CAClB,wBAAwB,SAAS,gBAAgB,eAAe,EAAE,CACrE,CAAC;IACN,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAC1C,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1E,MAAM,IAAI,YAAY,CAClB,wBAAwB,SAAS,gBAAgB,eAAe,EAAE,CACrE,CAAC;IACN,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,GAAY,EAAE,SAAiB;IACrD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CAAC,oBAAoB,SAAS,mBAAmB,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAE3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,MAAM,KAAK,kBAAkB,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC7D,MAAM,IAAI,YAAY,CAClB,oBAAoB,SAAS,wBAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC3F,MAAM,IAAI,YAAY,CAClB,oBAAoB,SAAS,0BAA0B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC5E,CAAC;IACN,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IACI,MAAM,KAAK,cAAc;QACzB,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,cAAc,EAC3B,CAAC;QACC,MAAM,IAAI,YAAY,CAClB,oBAAoB,SAAS,wBAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;IACN,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACpC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,YAAY,CAAC,oBAAoB,SAAS,6BAA6B,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAChC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CAAC,oBAAoB,SAAS,2BAA2B,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAEhF,OAAO;QACH,MAAM;QACN,OAAO,EAAE,GAAG,CAAC,OAAiC;QAC9C,QAAQ;QACR,MAAM;QACN,WAAW;QACX,gBAAgB;QAChB,SAAS;KACZ,CAAC;AACN,CAAC;AAED,kEAAkE;AAClE,SAAS,qBAAqB,CAAC,GAAY,EAAE,SAAiB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,oBAAoB,SAAS,iCAAiC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,YAAY,CAClB,oBAAoB,SAAS,qBAAqB,CAAC,oBAAoB,CAC1E,CAAC;QACN,CAAC;QACD,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,YAAY,CAClB,oBAAoB,SAAS,qBAAqB,CAAC,sBAAsB,CAC5E,CAAC;QACN,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAClB,oBAAoB,SAAS,qBAAqB,CAAC,kBAAkB,CACxE,CAAC;QACN,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjG,MAAM,IAAI,YAAY,CAClB,oBAAoB,SAAS,qBAAqB,CAAC,qBAAqB,MAAM,CAAC,MAAM,CAAC,EAAE,CAC3F,CAAC;QACN,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,sEAAsE;AACtE,SAAS,mBAAmB,CAAC,SAAoB;IAI7C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,SAAoB;IAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAE7D,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACD,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,YAAY,CAAC,mCAAmC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;IACjE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,YAAY,CAAC,wCAAwC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjD,OAAO;QACH,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY;QACzF,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;KAClC,CAAC;AACN,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,OAA+B;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC;IAChD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,aAAa,CAAC;IAClD,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC;IAC/C,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5C,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,SAAoB;IAChD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,YAAY,CAAC,wCAAwC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAkB,EAAE,SAAoB;IACzE,IAAI,QAAoB,CAAC;IACzB,IAAI,CAAC;QACD,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,YAAY,CAAC,yBAAyB,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAC1C,MAAkB,EAClB,SAAoB;IAEpB,IAAI,QAAoB,CAAC;IACzB,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACD,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;QACvC,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,YAAY,CAAC,yBAAyB,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @browsercore/testing — public API surface.
+ *
+ * Protocol verification: RFC compliance tests, browser golden packet captures,
+ * integration tests, and benchmarking.
+ */
+export { loadGolden, compareAgainstGolden } from "./golden/golden.js";
+export { runTlsCompliance, runHttp2Compliance, runHttp1Compliance } from "./rfc/rfcTests.js";
+export { benchmarkTlsHandshake, benchmarkHttp2Request } from "./bench/bench.js";
+export { GoldenMismatchError, TestingError } from "./errors.js";
+export type { BenchStats, CaptureId, CaptureProtocol, CaptureSource, ComparisonResult, GoldenCapture, TestCase, TestCaseId, TestResult, } from "./types.js";
+export { assertNever, bytesToHex, compareBytes, createId } from "./utils.js";
+export { TestCategory } from "./types.js";
+export type { SpecTestCase, TestCategoryId, TestRun, TestStatus } from "./types.js";
+export * as categories from "./categories/index.js";
+export { compareBytesWithIgnore } from "./utils.js";
+export type { CaptureMeta, ComparisonResultWithIgnore, RandomizedField } from "./types.js";
+export { captures, type CaptureEntry } from "./captures/manifest.js";
+export { createReferenceProvider, CurlImpersonateProvider, RealBrowserCaptureProvider, } from "./reference/reference.js";
+export type { CurlImpersonateOptions, Fingerprint, RealBrowserOptions, ReferenceProvider, ReferenceProviderKind, } from "./reference/reference.js";
+export { computeJa3, computeJa4, Ja3ParseError, parseClientHello } from "./fingerprint/index.js";
+export type { Ja3Segments } from "./fingerprint/index.js";
+export { nodeCrypto, nodeDns, nodeZlib, nodeHttp, toError, compareBytesOutcome, } from "./reference/node-reference.js";
+export type { CompareOutcome, HashAlgorithm } from "./reference/node-reference.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhE,YAAY,EACR,UAAU,EACV,SAAS,EACT,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,UAAU,EACV,UAAU,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG7E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAC;AAGpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGrE,OAAO,EACH,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,GAC7B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACR,sBAAsB,EACtB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,GACxB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjG,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAI1D,OAAO,EACH,UAAU,EACV,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,mBAAmB,GACtB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC"}