@browsercore/testing 0.1.3 → 0.2.0

package/dist/reference/reference.js

@@ -1,5 +1,5 @@
 /**
- * Pluggable layered reference provider.
+ * Pluggable layered reference provider — facade + factory.
  *
  * The reference implementation is the source of truth for what a given browser
  * profile SHOULD produce on the wire. Three backends are wrapped behind one
@@ -17,129 +17,19 @@
  * primary then secondary; fingerprint is derived from the captured bytes; the
  * node-reference oracle is exposed for primitive-layer comparisons.
  *
- * See docs/TEST-SUITE.md (Cat 3, 4, 14) for how references feed comparison.
+ * The providers and dump helpers live in their own modules; this file owns the
+ * facade + factory dispatch. See docs/TEST-SUITE.md (Cat 3, 4, 14).
  */
-import { execFile } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import { dirname, join } from "node:path";
-import { promisify } from "node:util";
-import { computeJa3 } from "../fingerprint/ja3.js";
-import { computeJa4Fingerprint } from "../fingerprint/ja4.js";
-import { loadCaptureMeta } from "../golden/golden.js";
-import { TestingError } from "../errors.js";
-const execFileAsync = promisify(execFile);
-const here = dirname(fileURLToPath(import.meta.url));
-const packageRoot = join(here, "..", "..");
-const defaultCapturesDir = join(packageRoot, "captures");
-/** Raised when a reference provider cannot capture or fingerprint a profile. */
-export class ReferenceError extends TestingError {
-    constructor(message, options) {
-        super(message, options);
-        this.name = "ReferenceError";
-    }
-}
-/**
- * PRIMARY provider — shells out to curl-impersonate.
- *
- * `capture()` invokes the curl-impersonate binary against `url`, impersonating
- * `profile`, and returns the raw bytes it observed on the wire. The binary
- * must be on PATH (or in `command`); if it is missing, the call throws
- * {@link ReferenceError} so the facade can fall back to the secondary.
- */
-export class CurlImpersonateProvider {
-    kind = { kind: "curl-impersonate" };
-    command;
-    extraArgs;
-    constructor(options) {
-        this.command = options?.command ?? "curl-impersonate";
-        this.extraArgs = options?.extraArgs ?? [];
-    }
-    availableProfiles() {
-        // curl-impersonate ships these browser impersonation targets.
-        return [
-            "chrome-140",
-            "chrome-139",
-            "firefox-135",
-            "firefox-128",
-            "safari-18",
-            "edge-140",
-        ];
-    }
-    async capture(profile, url) {
-        const profileFlag = `--${String(profile)}`;
-        const args = [profileFlag, "--dump-traffic", ...this.extraArgs, url];
-        let stdout;
-        let stderr;
-        try {
-            const out = await execFileAsync(this.command, args, {
-                timeout: 30_000,
-                maxBuffer: 64 * 1024 * 1024,
-            });
-            stdout = out.stdout;
-            stderr = out.stderr;
-        }
-        catch (e) {
-            const cause = e instanceof Error ? e : new Error(String(e));
-            throw new ReferenceError(`curl-impersonate capture for ${String(profile)} failed: ${cause.message}`, { cause });
-        }
-        void stderr;
-        const bytes = parseDumpOutput(stdout);
-        return {
-            id: `${profile}/tls/client_hello`,
-            source: profileToSource(profile),
-            protocol: "tls",
-            bytes,
-            description: `curl-impersonate capture for ${String(profile)}`,
-        };
-    }
-    async fingerprint(profile) {
-        const capture = await this.capture(profile, "https://example.com");
-        return fingerprintFromTlsCapture(capture);
-    }
-}
-/**
- * SECONDARY provider — loads pre-recorded captures from the `captures/` dir.
- *
- * `capture()` resolves a stored capture for the profile; `fingerprint()`
- * derives a {@link Fingerprint} from the captured bytes (only TLS
- * ClientHellos are fingerprinted — other protocols return a stub).
- */
-export class RealBrowserCaptureProvider {
-    kind = { kind: "real-browser" };
-    capturesDir;
-    constructor(options) {
-        this.capturesDir = options?.capturesDir ?? defaultCapturesDir;
-    }
-    availableProfiles() {
-        // Discovery is driven by the captures manifest (captures/manifest.ts).
-        return [
-            "chrome-140",
-            "firefox-128",
-        ];
-    }
-    async capture(profile, _url) {
-        void _url;
-        const manifest = await import("../captures/manifest.js");
-        const entry = manifest.captures.find((c) => c.meta.profile === profile);
-        if (entry === undefined) {
-            throw new ReferenceError(`No pre-recorded capture for profile ${String(profile)}`);
-        }
-        return {
-            id: `${profile}/tls/client_hello`,
-            source: profileToSource(profile),
-            protocol: entry.meta.protocol,
-            bytes: entry.bytes,
-            description: entry.meta.description,
-        };
-    }
-    async fingerprint(profile) {
-        const capture = await this.capture(profile, "https://example.com");
-        if (capture.protocol !== "tls") {
-            throw new ReferenceError(`fingerprint() only supports TLS captures; got ${capture.protocol}`);
-        }
-        return fingerprintFromTlsCapture(capture);
-    }
-}
+import { CurlImpersonateProvider } from "./curl-provider.js";
+import { RealBrowserCaptureProvider } from "./browser-provider.js";
+import { ReferenceError } from "./reference-errors.js";
+import { assertNever } from "../utils.js";
+// Re-export so existing import sites (`from "./reference.js"`) keep resolving
+// after the providers and helpers moved into focused modules.
+export { CurlImpersonateProvider } from "./curl-provider.js";
+export { RealBrowserCaptureProvider } from "./browser-provider.js";
+export { ReferenceError, DumpParseError } from "./reference-errors.js";
+export { parseDumpOutput, fingerprintFromTlsCapture, cipherSuiteName } from "./dump.js";
 /**
  * Facade wrapping the node-reference oracle + primary (curl-impersonate) and
  * secondary (real-browser) providers behind a single {@link ReferenceProvider}.
@@ -172,8 +62,9 @@ export class ReferenceProviderFacade {
         const out = [];
         for (const p of [...this.primary.availableProfiles(), ...this.secondary.availableProfiles()]) {
             const key = String(p);
-            if (seen.has(key))
+            if (seen.has(key)) {
                 continue;
+            }
             seen.add(key);
             out.push(p);
         }
@@ -221,103 +112,48 @@ import * as nodeOracle from "./node-reference.js";
 export function createReferenceProvider(kind, options) {
     switch (kind.kind) {
         case "curl-impersonate":
-            return new CurlImpersonateProvider(options);
+            return new CurlImpersonateProvider(toCurlOptions(options));
         case "real-browser":
-            return new RealBrowserCaptureProvider(options);
+            return new RealBrowserCaptureProvider(toBrowserOptions(options));
+        default:
+            // Exhaustiveness guaranteed by the union — unreachable unless a new
+            // provider kind is added without a handler.
+            return assertNever(kind);
     }
 }
 /**
- * Construct the full {@link ReferenceProviderFacade} wrapping both providers
- * plus the node-reference oracle. This is the recommended entry point for
- * tests that want primary→secondary fallback.
- */
-export function createReferenceFacade(options) {
-    return new ReferenceProviderFacade(options);
-}
-/** Map a {@link ProfileId} to its {@link CaptureSource} tag. */
-function profileToSource(profile) {
-    const p = String(profile);
-    if (p.startsWith("firefox"))
-        return "firefox-135";
-    if (p.startsWith("safari"))
-        return "safari-18";
-    if (p.startsWith("edge"))
-        return "edge-140";
-    return "chrome-140";
-}
-/**
- * Parse curl-impersonate `--dump-traffic` output into raw bytes.
+ * Narrow the shared options union to the curl-impersonate shape.
  *
- * The dump format is a hex dump with one line per record; we extract the hex
- * payload between the markers. For now we assume the body is a contiguous hex
- * block — adjust the parser if curl-impersonate's format differs.
+ * Copies only the fields the curl provider reads, so passing a
+ * browser-options object does not leak `capturesDir` into a place that ignores
+ * it. No `as` cast: the result is built field-by-field from validated reads.
  */
-function parseDumpOutput(stdout) {
-    // Find the hex body — everything after the ">>> traffic <<<" marker.
-    const marker = ">>> traffic <<<";
-    const idx = stdout.indexOf(marker);
-    const body = idx === -1 ? stdout : stdout.slice(idx + marker.length);
-    const hex = body.replace(/[^0-9a-fA-F]/g, "");
-    if (hex.length === 0) {
-        throw new ReferenceError("curl-impersonate dump produced no hex bytes");
-    }
-    if (hex.length % 2 !== 0) {
-        throw new ReferenceError(`curl-impersonate dump produced odd-length hex (${hex.length})`);
+function toCurlOptions(options) {
+    if (options === undefined || !("command" in options) || options.command === undefined) {
+        return undefined;
     }
-    const bytes = new Uint8Array(hex.length / 2);
-    for (let i = 0; i < bytes.length; i++) {
-        bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-    }
-    return bytes;
+    return options.extraArgs === undefined
+        ? { command: options.command }
+        : { command: options.command, extraArgs: options.extraArgs };
 }
 /**
- * Derive a {@link Fingerprint} from a TLS ClientHello capture.
+ * Narrow the shared options union to the real-browser shape.
  *
- * Computes JA3 + JA4 from the raw bytes and reads the per-extension metadata
- * (supported groups, signature algorithms, ALPN) from the sidecar
- * `.meta.json` when available.
+ * Copies only the fields the browser provider reads. `command` is `undefined`
+ * on `RealBrowserOptions` by construction, so it is not copied.
  */
-function fingerprintFromTlsCapture(capture) {
-    const ja3 = computeJa3(capture.bytes);
-    const ja4 = computeJa4Fingerprint(capture.bytes);
-    // Read the sidecar meta for richer fields (signature algorithms, ALPN,
-    // supported curves). Fall back to empty arrays if missing.
-    let alpn = [];
-    let signatureAlgorithms = [];
-    let ellipticCurves = [];
-    try {
-        const meta = loadCaptureMeta(capture.id);
-        if (meta.protocol === "tls") {
-            // CaptureMeta doesn't carry ALPN/sigAlgs/curves yet; this is a
-            // placeholder for when the sidecar schema is extended.
-            void meta;
-            void alpn;
-            void signatureAlgorithms;
-            void ellipticCurves;
-        }
-    }
-    catch {
-        // Sidecar missing or unparseable — leave richer fields empty.
+function toBrowserOptions(options) {
+    if (options === undefined || !("capturesDir" in options) || options.capturesDir === undefined) {
+        return undefined;
     }
-    return {
-        ja3,
-        ja4: ja4.tag,
-        alpn,
-        cipherSuite: cipherSuiteName(ja4.tag),
-        protocolVersion: ja4.tag.slice(5, 7) || "unknown",
-        signatureAlgorithms,
-        ellipticCurves,
-    };
+    return { capturesDir: options.capturesDir };
 }
 /**
- * Extract a human-readable cipher-suite name from a JA4 tag.
- *
- * JA4 doesn't directly encode the negotiated cipher; this is a placeholder
- * that returns the JA4_a segment for inspection. Real cipher-suite resolution
- * requires parsing the ServerHello, which is out of scope for the capture.
+ * Construct the full {@link ReferenceProviderFacade} wrapping both providers
+ * plus the node-reference oracle. This is the recommended entry point for
+ * tests that want primary→secondary fallback.
  */
-function cipherSuiteName(ja4Tag) {
-    const a = ja4Tag.split("_")[0] ?? "";
-    return a.length > 0 ? a : "unknown";
+export function createReferenceFacade(options) {
+    return new ReferenceProviderFacade(options);
 }
 //# sourceMappingURL=reference.js.map

package/dist/reference/reference.js.map

@@ -1 +1 @@
-{"version":3,"file":"reference.js","sourceRoot":"","sources":["../../src/reference/reference.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3C,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AA+CzD,gFAAgF;AAChF,MAAM,OAAO,cAAe,SAAQ,YAAY;IAC5C,YAAY,OAAe,EAAE,OAA2B;QACpD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IACjC,CAAC;CACJ;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IAChB,IAAI,GAA0B,EAAE,IAAI,EAAE,kBAAkB,EAAW,CAAC;IACpE,OAAO,CAAS;IAChB,SAAS,CAAoB;IAE7C,YAAY,OAAgC;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,iBAAiB;QACb,8DAA8D;QAC9D,OAAO;YACH,YAAyB;YACzB,YAAyB;YACzB,aAA0B;YAC1B,aAA0B;YAC1B,WAAwB;YACxB,UAAuB;SAC1B,CAAC;IACN,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAkB,EAAE,GAAW;QACzC,MAAM,WAAW,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACrE,IAAI,MAAc,CAAC;QACnB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;gBAChD,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC9B,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpB,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,MAAM,IAAI,cAAc,CACpB,gCAAgC,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,EAC1E,EAAE,KAAK,EAAE,CACZ,CAAC;QACN,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO;YACH,EAAE,EAAE,GAAG,OAAO,mBAA0C;YACxD,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC;YAChC,QAAQ,EAAE,KAAK;YACf,KAAK;YACL,WAAW,EAAE,gCAAgC,MAAM,CAAC,OAAO,CAAC,EAAE;SACjE,CAAC;IACN,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAkB;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACnE,OAAO,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;CACJ;AAED;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IACnB,IAAI,GAA0B,EAAE,IAAI,EAAE,cAAc,EAAW,CAAC;IAChE,WAAW,CAAS;IAEpC,YAAY,OAA4B;QACpC,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,kBAAkB,CAAC;IAClE,CAAC;IAED,iBAAiB;QACb,uEAAuE;QACvE,OAAO;YACH,YAAyB;YACzB,aAA0B;SAC7B,CAAC;IACN,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAkB,EAAE,IAAY;QAC1C,KAAK,IAAI,CAAC;QACV,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACxE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CACpB,uCAAuC,MAAM,CAAC,OAAO,CAAC,EAAE,CAC3D,CAAC;QACN,CAAC;QACD,OAAO;YACH,EAAE,EAAE,GAAG,OAAO,mBAA0C;YACxD,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC;YAChC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;SACtC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAkB;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,cAAc,CACpB,iDAAiD,OAAO,CAAC,QAAQ,EAAE,CACtE,CAAC;QACN,CAAC;QACD,OAAO,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;CACJ;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAuB;IAChB,IAAI,GAA0B,EAAE,IAAI,EAAE,kBAAkB,EAAW,CAAC;IACnE,OAAO,CAA0B;IACjC,SAAS,CAA6B;IAEvD,YAAY,OAAgC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,IAAI,UAAU;QACV,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,iBAAiB;QACb,wDAAwD;QACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,GAAG,GAAgB,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;YAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAkB,EAAE,GAAW;QACzC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACvF,+DAA+D;YAC/D,IAAI,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACpB,MAAM,cAAc,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACtG,MAAM,IAAI,cAAc,CACpB,8BAA8B,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,CAAC,OAAO,wBAAwB,cAAc,CAAC,OAAO,GAAG,EAChI,EAAE,KAAK,EAAE,cAAc,EAAE,CAC5B,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAkB;QAChC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACpB,MAAM,cAAc,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACtG,MAAM,IAAI,cAAc,CACpB,gCAAgC,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,CAAC,OAAO,wBAAwB,cAAc,CAAC,OAAO,GAAG,EAClI,EAAE,KAAK,EAAE,cAAc,EAAE,CAC5B,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AAED;;;;GAIG;AACH,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAElD,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CACnC,IAA2B,EAC3B,OAAqD;IAErD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,kBAAkB;YACnB,OAAO,IAAI,uBAAuB,CAAC,OAA6C,CAAC,CAAC;QACtF,KAAK,cAAc;YACf,OAAO,IAAI,0BAA0B,CAAC,OAAyC,CAAC,CAAC;IACzF,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgC;IAClE,OAAO,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,gEAAgE;AAChE,SAAS,eAAe,CAAC,OAAkB;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,aAAa,CAAC;IAClD,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC;IAC/C,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5C,OAAO,YAAY,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,MAAc;IACnC,qEAAqE;IACrE,MAAM,MAAM,GAAG,iBAAiB,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,cAAc,CAAC,6CAA6C,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,cAAc,CACpB,kDAAkD,GAAG,CAAC,MAAM,GAAG,CAClE,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,OAAsB;IACrD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEjD,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,IAAI,GAAsB,EAAE,CAAC;IACjC,IAAI,mBAAmB,GAAsB,EAAE,CAAC;IAChD,IAAI,cAAc,GAAsB,EAAE,CAAC;IAC3C,IAAI,CAAC;QACD,MAAM,IAAI,GAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC1B,+DAA+D;YAC/D,uDAAuD;YACvD,KAAK,IAAI,CAAC;YACV,KAAK,IAAI,CAAC;YACV,KAAK,mBAAmB,CAAC;YACzB,KAAK,cAAc,CAAC;QACxB,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,8DAA8D;IAClE,CAAC;IAED,OAAO;QACH,GAAG;QACH,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI;QACJ,WAAW,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QACrC,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS;QACjD,mBAAmB;QACnB,cAAc;KACjB,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,MAAc;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxC,CAAC"}
+{"version":3,"file":"reference.js","sourceRoot":"","sources":["../../src/reference/reference.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH,OAAO,EAAE,uBAAuB,EAA+B,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAA2B,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,8EAA8E;AAC9E,8DAA8D;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAaxF;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAuB;IAChB,IAAI,GAA0B,EAAE,IAAI,EAAE,kBAAkB,EAAW,CAAC;IACnE,OAAO,CAA0B;IACjC,SAAS,CAA6B;IAEvD,YAAY,OAAgC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,IAAI,UAAU;QACV,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,iBAAiB;QACb,wDAAwD;QACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,GAAG,GAAgB,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;YAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChB,SAAS;YACb,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAkB,EAAE,GAAW;QACzC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACvF,+DAA+D;YAC/D,IAAI,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACpB,MAAM,cAAc,GAChB,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACnF,MAAM,IAAI,cAAc,CACpB,8BAA8B,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,CAAC,OAAO,wBAAwB,cAAc,CAAC,OAAO,GAAG,EAChI,EAAE,KAAK,EAAE,cAAc,EAAE,CAC5B,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAkB;QAChC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACpB,MAAM,cAAc,GAChB,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACnF,MAAM,IAAI,cAAc,CACpB,gCAAgC,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,CAAC,OAAO,wBAAwB,cAAc,CAAC,OAAO,GAAG,EAClI,EAAE,KAAK,EAAE,cAAc,EAAE,CAC5B,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AAED;;;;GAIG;AACH,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAElD,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CACnC,IAA2B,EAC3B,OAAqD;IAErD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,kBAAkB;YACnB,OAAO,IAAI,uBAAuB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,KAAK,cAAc;YACf,OAAO,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE;YACI,oEAAoE;YACpE,4CAA4C;YAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAClB,OAAgE;IAEhE,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpF,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS;QAClC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;QAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACrB,OAAgE;IAEhE,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5F,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgC;IAClE,OAAO,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC"}

package/dist/rfc/rfcTests.d.ts

@@ -1,14 +1,52 @@
 /**
  * RFC compliance test suites.
  *
- * Each function runs a focused compliance check and returns a {@link TestResult}.
- * Stubbed until the underlying protocol stacks exist.
+ * Each function runs a focused compliance check against the in-repo golden
+ * captures and the @browsercore/profiles definitions, and returns a
+ * {@link TestResult}. The checks are deterministic and need no live network:
+ *
+ * - TLS  (RFC 8446) — parse the golden ClientHello for the active profile,
+ *   validate cipher order / extensions / GREASE / signature algorithms /
+ *   supported versions against the profile definition via
+ *   {@link validateProfileAgainstCapture}.
+ * - HTTP/2 (RFC 9113) — parse the golden SETTINGS frame and verify the
+ *   settings values match the profile's {@link Http2Profile.settings}.
+ * - HTTP/1.1 (RFC 9110) — verify the profile's header order and default
+ *   headers form a valid HTTP/1.1 request block (no duplicate pseudo-headers,
+ *   required Host header present, header names lowercase).
  */
+import { type ProfileId } from "@browsercore/profiles";
 import type { TestCaseId, TestResult } from "../types.js";
-/** Run the TLS 1.3 (RFC 8446) compliance checks. */
-export declare function runTlsCompliance(_id?: TestCaseId): TestResult;
-/** Run the HTTP/2 (RFC 9113) compliance checks. */
-export declare function runHttp2Compliance(_id?: TestCaseId): TestResult;
-/** Run the HTTP/1.1 (RFC 9110) compliance checks. */
-export declare function runHttp1Compliance(_id?: TestCaseId): TestResult;
+/**
+ * Run the TLS 1.3 (RFC 8446) compliance checks against the chrome-140
+ * golden capture. Validates cipher order, extension order, GREASE handling,
+ * and supported groups against the chrome-140 profile definition.
+ *
+ * Returns a {@link TestResult} that aggregates the per-field diffs reported
+ * by {@link validateProfileAgainstCapture}.
+ */
+export declare function runTlsCompliance(id?: TestCaseId, profileId?: ProfileId): TestResult;
+/**
+ * Run the HTTP/2 (RFC 9113) compliance checks against the chrome-140
+ * golden SETTINGS capture. Verifies each SETTINGS value matches the
+ * profile's {@link Http2Profile.settings}.
+ *
+ * SETTINGS frame ids (RFC 9113 §6.5.1):
+ *   1 = HEADER_TABLE_SIZE
+ *   2 = ENABLE_PUSH
+ *   3 = MAX_CONCURRENT_STREAMS
+ *   4 = INITIAL_WINDOW_SIZE
+ *   5 = MAX_FRAME_SIZE
+ */
+export declare function runHttp2Compliance(id?: TestCaseId, profileId?: ProfileId): TestResult;
+/**
+ * Run the HTTP/1.1 (RFC 9110) compliance checks against the chrome-140
+ * profile's header configuration. Verifies:
+ *
+ * 1. The `Host` header is present (required by RFC 9110 §7.2).
+ * 2. Header names are lowercase (HTTP/2 requires this; HTTP/1.1 convention).
+ * 3. No duplicate header names in the default set.
+ * 4. The header order list matches the default headers' key set.
+ */
+export declare function runHttp1Compliance(id?: TestCaseId, profileId?: ProfileId): TestResult;
 //# sourceMappingURL=rfcTests.d.ts.map

package/dist/rfc/rfcTests.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rfcTests.d.ts","sourceRoot":"","sources":["../../src/rfc/rfcTests.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1D,oDAAoD;AACpD,wBAAgB,gBAAgB,CAC5B,GAAG,GAAE,UAAiC,GACvC,UAAU,CAGZ;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAC9B,GAAG,GAAE,UAAmC,GACzC,UAAU,CAGZ;AAED,qDAAqD;AACrD,wBAAgB,kBAAkB,CAC9B,GAAG,GAAE,UAAmC,GACzC,UAAU,CAGZ"}
+{"version":3,"file":"rfcTests.d.ts","sourceRoot":"","sources":["../../src/rfc/rfcTests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAA6C,KAAK,SAAS,EAAmB,MAAM,uBAAuB,CAAC;AACnH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAyF1D;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC5B,EAAE,GAAE,UAA+B,EACnC,SAAS,GAAE,SAAqC,GACjD,UAAU,CAeZ;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAC9B,EAAE,GAAE,UAAiC,EACrC,SAAS,GAAE,SAAqC,GACjD,UAAU,CAyCZ;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,EAAE,GAAE,UAAiC,EACrC,SAAS,GAAE,SAAqC,GACjD,UAAU,CA0DZ"}

package/dist/rfc/rfcTests.js

@@ -1,22 +1,209 @@
 /**
  * RFC compliance test suites.
  *
- * Each function runs a focused compliance check and returns a {@link TestResult}.
- * Stubbed until the underlying protocol stacks exist.
+ * Each function runs a focused compliance check against the in-repo golden
+ * captures and the @browsercore/profiles definitions, and returns a
+ * {@link TestResult}. The checks are deterministic and need no live network:
+ *
+ * - TLS  (RFC 8446) — parse the golden ClientHello for the active profile,
+ *   validate cipher order / extensions / GREASE / signature algorithms /
+ *   supported versions against the profile definition via
+ *   {@link validateProfileAgainstCapture}.
+ * - HTTP/2 (RFC 9113) — parse the golden SETTINGS frame and verify the
+ *   settings values match the profile's {@link Http2Profile.settings}.
+ * - HTTP/1.1 (RFC 9110) — verify the profile's header order and default
+ *   headers form a valid HTTP/1.1 request block (no duplicate pseudo-headers,
+ *   required Host header present, header names lowercase).
+ */
+import { getProfile, validateProfileAgainstCapture } from "@browsercore/profiles";
+import { parseClientHello } from "../fingerprint/index.js";
+import { loadGolden } from "../golden/golden.js";
+/** Split a dash-joined numeric string into an integer array. */
+function parts(s) {
+    return s.length === 0 ? [] : s.split("-").map((n) => Math.trunc(Number(n)));
+}
+/** Parse a golden TLS ClientHello capture into a {@link TlsCapture}. */
+function parseTlsCapture(bytes) {
+    const segs = parseClientHello(bytes);
+    // GREASE detection: the capture advertises GREASE iff its cipher list
+    // contains a GREASE-pattern value (0x?a?a in 0x0a0a..0xfafa).
+    const ciphers = parts(segs.ciphers);
+    const grease = ciphers.some((c) => c >= 0x0a0a && (c >> 8) === (c & 0xff));
+    return {
+        cipherSuites: ciphers,
+        extensionTypes: parts(segs.extensions),
+        supportedVersions: [],
+        keyShareGroups: parts(segs.supportedGroups),
+        signatureAlgorithms: [],
+        grease,
+    };
+}
+/**
+ * Parse a raw HTTP/2 SETTINGS frame payload (6 bytes per setting: 2-byte id +
+ * 4-byte value) into a map of setting id → value.
+ */
+function parseHttp2Settings(payload) {
+    const settings = new Map();
+    for (let i = 0; i + 5 < payload.length; i += 6) {
+        const b0 = payload[i] ?? 0;
+        const b1 = payload[i + 1] ?? 0;
+        const b2 = payload[i + 2] ?? 0;
+        const b3 = payload[i + 3] ?? 0;
+        const b4 = payload[i + 4] ?? 0;
+        const b5 = payload[i + 5] ?? 0;
+        const id = (b0 << 8) | b1;
+        const value = (b2 << 24) | (b3 << 16) | (b4 << 8) | b5;
+        settings.set(id, value >>> 0); // unsigned
+    }
+    return settings;
+}
+/** HTTP/2 SETTINGS frame type id (RFC 9113 §6.5). */
+const HTTP2_FRAME_TYPE_SETTINGS = 0x4;
+/** HTTP/2 frame header size: 3-byte length + 1-byte type + 1-byte flags + 4-byte stream id. */
+const HTTP2_FRAME_HEADER_SIZE = 9;
+/** Strip the frame header (9 bytes) and return the settings payload. */
+function settingsPayload(captureBytes) {
+    // A bare SETTINGS frame has no TLS record wrapper — it starts with the
+    // 9-byte HTTP/2 frame header. Byte layout:
+    //   [0..2] payload length (24 bits)
+    //   [3]    frame type
+    //   [4]    flags
+    //   [5..8] stream id (31 bits, top bit reserved)
+    // Validate the frame type before slicing.
+    if (captureBytes.length < HTTP2_FRAME_HEADER_SIZE) {
+        return captureBytes;
+    }
+    const frameType = captureBytes[3];
+    if (frameType !== HTTP2_FRAME_TYPE_SETTINGS) {
+        // Not a SETTINGS frame at byte 3 — return the raw bytes for the caller
+        // to surface as a compliance failure.
+        return captureBytes;
+    }
+    return captureBytes.slice(HTTP2_FRAME_HEADER_SIZE);
+}
+/**
+ * Build a {@link TestResult} from a validation outcome.
+ * `actual` / `expected` carry the parsed capture values for diagnostics.
+ * Omits `diff` entirely when there is nothing to report (exactOptionalPropertyTypes).
+ */
+function result(id, pass, actual, expected, diff) {
+    return diff === undefined ? { id, pass, actual, expected } : { id, pass, actual, expected, diff };
+}
+/**
+ * Run the TLS 1.3 (RFC 8446) compliance checks against the chrome-140
+ * golden capture. Validates cipher order, extension order, GREASE handling,
+ * and supported groups against the chrome-140 profile definition.
+ *
+ * Returns a {@link TestResult} that aggregates the per-field diffs reported
+ * by {@link validateProfileAgainstCapture}.
+ */
+export function runTlsCompliance(id = "tls_rfc", profileId = "chrome-140") {
+    const profile = getProfile(profileId);
+    const capture = loadGolden(`${profileId}/tls/client_hello`);
+    const tlsCapture = parseTlsCapture(capture.bytes);
+    const validation = validateProfileAgainstCapture(profile, tlsCapture);
+    return result(id, validation.ok, tlsCapture, "profile matches golden capture", validation.ok
+        ? undefined
+        : validation.diffs.map((d) => `${d.path}: ${String(d.a)} vs ${String(d.b)}`).join("; "));
+}
+/**
+ * Run the HTTP/2 (RFC 9113) compliance checks against the chrome-140
+ * golden SETTINGS capture. Verifies each SETTINGS value matches the
+ * profile's {@link Http2Profile.settings}.
+ *
+ * SETTINGS frame ids (RFC 9113 §6.5.1):
+ *   1 = HEADER_TABLE_SIZE
+ *   2 = ENABLE_PUSH
+ *   3 = MAX_CONCURRENT_STREAMS
+ *   4 = INITIAL_WINDOW_SIZE
+ *   5 = MAX_FRAME_SIZE
+ */
+export function runHttp2Compliance(id = "http2_rfc", profileId = "chrome-140") {
+    const profile = getProfile(profileId);
+    const capture = loadGolden(`${profileId}/http2/settings`);
+    const payload = settingsPayload(capture.bytes);
+    const settings = parseHttp2Settings(payload);
+    // RFC 9113 §6.5.1 setting ids.
+    const SETTING_MAX_CONCURRENT_STREAMS = 3;
+    const SETTING_INITIAL_WINDOW_SIZE = 4;
+    const SETTING_MAX_FRAME_SIZE = 5;
+    const expected = profile.http2.settings;
+    const checks = [
+        {
+            name: "MAX_CONCURRENT_STREAMS",
+            ok: settings.get(SETTING_MAX_CONCURRENT_STREAMS) === expected.maxConcurrentStreams,
+        },
+        {
+            name: "INITIAL_WINDOW_SIZE",
+            ok: settings.get(SETTING_INITIAL_WINDOW_SIZE) === expected.initialWindowSize,
+        },
+        {
+            name: "MAX_FRAME_SIZE",
+            ok: settings.get(SETTING_MAX_FRAME_SIZE) === expected.maxFrameSize,
+        },
+    ];
+    const failed = checks.filter((c) => !c.ok);
+    return result(id, failed.length === 0, Object.fromEntries(settings), {
+        maxConcurrentStreams: expected.maxConcurrentStreams,
+        initialWindowSize: expected.initialWindowSize,
+        maxFrameSize: expected.maxFrameSize,
+    }, failed.length === 0
+        ? undefined
+        : `Mismatched settings: ${failed.map((f) => f.name).join(", ")}`);
+}
+/**
+ * Run the HTTP/1.1 (RFC 9110) compliance checks against the chrome-140
+ * profile's header configuration. Verifies:
+ *
+ * 1. The `Host` header is present (required by RFC 9110 §7.2).
+ * 2. Header names are lowercase (HTTP/2 requires this; HTTP/1.1 convention).
+ * 3. No duplicate header names in the default set.
+ * 4. The header order list matches the default headers' key set.
  */
-/** Run the TLS 1.3 (RFC 8446) compliance checks. */
-export function runTlsCompliance(_id = "tls_rfc") {
-    void _id;
-    throw new Error("not implemented — see PLAN.md");
-}
-/** Run the HTTP/2 (RFC 9113) compliance checks. */
-export function runHttp2Compliance(_id = "http2_rfc") {
-    void _id;
-    throw new Error("not implemented — see PLAN.md");
-}
-/** Run the HTTP/1.1 (RFC 9110) compliance checks. */
-export function runHttp1Compliance(_id = "http1_rfc") {
-    void _id;
-    throw new Error("not implemented — see PLAN.md");
+export function runHttp1Compliance(id = "http1_rfc", profileId = "chrome-140") {
+    const profile = getProfile(profileId);
+    const headers = profile.http1.defaultHeaders;
+    const headerOrder = profile.http1.headerOrder;
+    const issues = [];
+    // 1. Host header required (RFC 9110 §7.2). The Host header is set
+    // dynamically per-request (it depends on the target URL), so it appears
+    // in headerOrder but not in defaultHeaders. Check headerOrder for it.
+    const hasHost = headerOrder.some((h) => h.toLowerCase() === "host") ||
+        "host" in headers ||
+        "Host" in headers;
+    if (!hasHost) {
+        issues.push("missing required Host header");
+    }
+    // 2. Header names must be lowercase.
+    const nonLowercase = headerOrder.filter((h) => h !== h.toLowerCase());
+    if (nonLowercase.length > 0) {
+        issues.push(`non-lowercase header names: ${nonLowercase.join(", ")}`);
+    }
+    // 3. No duplicate header names in the default set.
+    const seen = new Set();
+    const duplicates = [];
+    for (const key of Object.keys(headers)) {
+        const lower = key.toLowerCase();
+        if (seen.has(lower)) {
+            duplicates.push(key);
+        }
+        seen.add(lower);
+    }
+    if (duplicates.length > 0) {
+        issues.push(`duplicate header names: ${duplicates.join(", ")}`);
+    }
+    // 4. Header order list should include every default header key.
+    const orderSet = new Set(headerOrder.map((h) => h.toLowerCase()));
+    const headersKeySet = new Set(Object.keys(headers).map((k) => k.toLowerCase()));
+    const missingInOrder = [];
+    for (const key of headersKeySet) {
+        if (!orderSet.has(key)) {
+            missingInOrder.push(key);
+        }
+    }
+    if (missingInOrder.length > 0) {
+        issues.push(`headers not in headerOrder: ${missingInOrder.join(", ")}`);
+    }
+    return result(id, issues.length === 0, { headerOrder, defaultHeaders: Object.keys(headers) }, "RFC 9110 compliant HTTP/1.1 request", issues.length === 0 ? undefined : issues.join("; "));
 }
 //# sourceMappingURL=rfcTests.js.map

package/dist/rfc/rfcTests.js.map

@@ -1 +1 @@
-{"version":3,"file":"rfcTests.js","sourceRoot":"","sources":["../../src/rfc/rfcTests.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,oDAAoD;AACpD,MAAM,UAAU,gBAAgB,CAC5B,MAAmB,SAAmB;IAEtC,KAAK,GAAG,CAAC;IACT,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACrD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,kBAAkB,CAC9B,MAAmB,WAAqB;IAExC,KAAK,GAAG,CAAC;IACT,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACrD,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,kBAAkB,CAC9B,MAAmB,WAAqB;IAExC,KAAK,GAAG,CAAC;IACT,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"rfcTests.js","sourceRoot":"","sources":["../../src/rfc/rfcTests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,6BAA6B,EAAmC,MAAM,uBAAuB,CAAC;AAEnH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,gEAAgE;AAChE,SAAS,KAAK,CAAC,CAAS;IACpB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,wEAAwE;AACxE,SAAS,eAAe,CAAC,KAAiB;IACtC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAErC,sEAAsE;IACtE,8DAA8D;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAE3E,OAAO;QACH,YAAY,EAAE,OAAO;QACrB,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,iBAAiB,EAAE,EAAE;QACrB,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;QAC3C,mBAAmB,EAAE,EAAE;QACvB,MAAM;KACT,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAmB;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW;IAC9C,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,qDAAqD;AACrD,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,+FAA+F;AAC/F,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAElC,wEAAwE;AACxE,SAAS,eAAe,CAAC,YAAwB;IAC7C,uEAAuE;IACvE,2CAA2C;IAC3C,oCAAoC;IACpC,sBAAsB;IACtB,iBAAiB;IACjB,iDAAiD;IACjD,0CAA0C;IAC1C,IAAI,YAAY,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAChD,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,SAAS,KAAK,yBAAyB,EAAE,CAAC;QAC1C,uEAAuE;QACvE,sCAAsC;QACtC,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CACX,EAAc,EACd,IAAa,EACb,MAAe,EACf,QAAiB,EACjB,IAAa;IAEb,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACtG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC5B,EAAE,GAAe,SAAkB,EACnC,SAAS,GAAc,YAAyB;IAEhD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,SAAS,mBAA4B,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,6BAA6B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEtE,OAAO,MAAM,CACT,EAAE,EACF,UAAU,CAAC,EAAE,EACb,UAAU,EACV,gCAAgC,EAChC,UAAU,CAAC,EAAE;QACT,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9F,CAAC;AACN,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAC9B,EAAE,GAAe,WAAoB,EACrC,SAAS,GAAc,YAAyB;IAEhD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,SAAS,iBAA0B,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE7C,+BAA+B;IAC/B,MAAM,8BAA8B,GAAG,CAAC,CAAC;IACzC,MAAM,2BAA2B,GAAG,CAAC,CAAC;IACtC,MAAM,sBAAsB,GAAG,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxC,MAAM,MAAM,GAA2D;QACnE;YACI,IAAI,EAAE,wBAAwB;YAC9B,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,KAAK,QAAQ,CAAC,oBAAoB;SACrF;QACD;YACI,IAAI,EAAE,qBAAqB;YAC3B,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,2BAA2B,CAAC,KAAK,QAAQ,CAAC,iBAAiB;SAC/E;QACD;YACI,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,QAAQ,CAAC,YAAY;SACrE;KACJ,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,MAAM,CACT,EAAE,EACF,MAAM,CAAC,MAAM,KAAK,CAAC,EACnB,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAC5B;QACI,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,YAAY,EAAE,QAAQ,CAAC,YAAY;KACtC,EACD,MAAM,CAAC,MAAM,KAAK,CAAC;QACf,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,wBAAwB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAC9B,EAAE,GAAe,WAAoB,EACrC,SAAS,GAAc,YAAyB;IAEhD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;IAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;IAE9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,kEAAkE;IAClE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,OAAO,GACT,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;QACnD,MAAM,IAAI,OAAO;QACjB,MAAM,IAAI,OAAO,CAAC;IACtB,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAChD,CAAC;IAED,qCAAqC;IACrC,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,+BAA+B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,mDAAmD;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,2BAA2B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACL,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,+BAA+B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,MAAM,CACT,EAAE,EACF,MAAM,CAAC,MAAM,KAAK,CAAC,EACnB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EACrD,qCAAqC,EACrC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CACtD,CAAC;AACN,CAAC"}