@browsercore/testing 0.1.3 → 0.2.1

package/dist/e2e/sink-server.js

@@ -0,0 +1,292 @@
+/**
+ * E2E TLS sink server for live handshake verification.
+ *
+ * Performs a **real** TLS 1.3 handshake against the `@browsercore/tls` client
+ * stack and returns the raw ClientHello bytes it saw on the wire — captured
+ * *before* Node's `tls` module parses them. This is the missing test oracle:
+ * every other TLS test in the stack runs against an in-process fixture; the
+ * sink exercises the full stack end-to-end over a real TCP socket.
+ *
+ * ## Two-socket tap
+ *
+ * Node's `tls` module parses the ClientHello before user code can see it, so
+ * the sink uses a two-socket tap (plan §2.3, Approach A):
+ *
+ * 1. A raw `node:net` server accepts the connection and pauses the socket.
+ * 2. It buffers the first bytes (the ClientHello TLS record) by reading until
+ *    the record length is satisfied.
+ * 3. It unshifts the buffer back onto the socket and wraps the socket in a
+ *    `tls.TLSSocket` (server-side) with a freshly generated self-signed
+ *    ECDSA P-256 cert.
+ * 4. The handshake completes; the captured bytes + parsed inspection are
+ *    returned via {@link TlsSinkServer.waitForHandshake}.
+ *
+ * The sink is single-shot by design: {@link TlsSinkServer.waitForHandshake}
+ * resolves on the first completed handshake. Tests create a fresh sink per
+ * case (ephemeral port, `maxConnections: 1`).
+ */
+import { createServer } from "node:net";
+import { createSecureContext, TLSSocket } from "node:tls";
+import { generateSelfSignedCert } from "./cert-gen.js";
+/**
+ * Lightweight TLS 1.3 sink server.
+ *
+ * Not a general-purpose TLS server — it exists only to confirm a real
+ * handshake completes and to return the wire bytes it saw. All assertions
+ * live in the *test*; the sink just reports.
+ */
+export class TlsSinkServer {
+    server;
+    ctx;
+    state = { state: "idle" };
+    waiters = [];
+    failers = [];
+    /** Host the sink listens on (always 127.0.0.1). */
+    host;
+    /** Ephemeral port the sink listens on. */
+    port;
+    /** ALPN protocols the sink negotiates (empty = no ALPN negotiation). */
+    alpnProtocols;
+    constructor(server, ctx, host, port, alpnProtocols) {
+        this.server = server;
+        this.ctx = ctx;
+        this.host = host;
+        this.port = port;
+        this.alpnProtocols = alpnProtocols;
+    }
+    /**
+     * Start listening on an ephemeral port on 127.0.0.1.
+     *
+     * The returned sink is ready to accept one connection. The self-signed
+     * cert is generated at call time (throwaway — valid for 1 day).
+     *
+     * @param opts Optional configuration — ALPN protocols the sink should
+     *   negotiate (chooses the first client-offered protocol that matches).
+     */
+    static start(opts = {}) {
+        const { certDer, keyPem } = generateSelfSignedCert(["localhost"], ["127.0.0.1"], 1);
+        const ctx = createSecureContext({
+            key: keyPem,
+            cert: derToPem(certDer, "CERTIFICATE"),
+        });
+        return new Promise((resolve, reject) => {
+            const server = createServer({ allowHalfOpen: false });
+            server.maxConnections = 1;
+            server.on("error", (err) => {
+                // If we haven't finished constructing the sink, reject start.
+                reject(err);
+            });
+            server.listen(0, "127.0.0.1", () => {
+                const addr = server.address();
+                if (addr === null || typeof addr === "string") {
+                    reject(new Error("sink server did not bind to an ephemeral port"));
+                    return;
+                }
+                const sink = new TlsSinkServer(server, ctx, addr.address, addr.port, opts.alpnProtocols ?? []);
+                sink.attach();
+                resolve(sink);
+            });
+        });
+    }
+    /** Wire up the server's connection handler. Must be called once. */
+    attach() {
+        this.server.on("connection", (socket) => this.onConnection(socket));
+    }
+    /**
+     * Handle an incoming TCP connection: buffer the ClientHello, then hand the
+     * socket to a server-side TLSSocket for a real handshake.
+     */
+    onConnection(rawSocket) {
+        // Guard: only one handshake per sink.
+        if (this.state.state !== "idle") {
+            rawSocket.destroy();
+            return;
+        }
+        const startedAt = Date.now();
+        this.state = { state: "capturing", startedAt };
+        const chunks = [];
+        let totalBuffered = 0;
+        // Pause the socket so data accumulates in Node's internal buffer and we
+        // can read it deterministically before the TLSSocket consumes it.
+        rawSocket.pause();
+        /**
+         * Read chunks until we have at least one complete TLS record. A TLS
+         * record is 5 header bytes + `length` bytes of fragment. The
+         * ClientHello typically arrives in a single segment, but we loop to be
+         * robust to fragmentation.
+         */
+        const tryCapture = () => {
+            if (totalBuffered < 5)
+                return null;
+            const recordLen = 5 + ((chunks[0][3] << 8) | chunks[0][4]);
+            if (totalBuffered < recordLen)
+                return null;
+            // Concatenate the buffered chunks and slice to the record boundary.
+            const flat = flattenChunks(chunks, totalBuffered);
+            return flat.subarray(0, recordLen);
+        };
+        const onData = (chunk) => {
+            chunks.push(chunk);
+            totalBuffered += chunk.length;
+            const capture = tryCapture();
+            if (capture !== null) {
+                rawSocket.removeListener("data", onData);
+                this.onClientHello(rawSocket, capture, startedAt);
+            }
+        };
+        rawSocket.on("data", onData);
+        rawSocket.on("error", (err) => this.fail(err));
+        rawSocket.on("close", () => {
+            // If we closed before completing the handshake, fail any waiter.
+            if (this.state.state !== "done") {
+                this.fail(new Error("socket closed before handshake completed"));
+            }
+        });
+        // Resume flow so the data handler fires.
+        rawSocket.resume();
+    }
+    /**
+     * We have the raw ClientHello. Unshift it back onto the socket and wrap
+     * the socket in a server-side TLSSocket to complete the handshake.
+     */
+    onClientHello(rawSocket, capture, startedAt) {
+        // Wrap the raw socket in a TLSSocket BEFORE unshifting. The TLSSocket
+        // attaches its own `data` listener on construction; only after that
+        // listener is in place does unshift deliver the captured bytes straight
+        // into the TLS layer. Unshifting first leaves the bytes buffered with
+        // no listener to consume them, so the handshake never starts.
+        const tlsSocket = new TLSSocket(rawSocket, {
+            isServer: true,
+            secureContext: this.ctx,
+            // Request but do not require a client cert — keeps the sink simple.
+            requestCert: false,
+            ALPNProtocols: this.alpnProtocols.length > 0 ? this.alpnProtocols : undefined,
+        });
+        // Now push the captured bytes back; the TLSSocket reads them as its
+        // first input and begins the handshake.
+        rawSocket.unshift(capture);
+        const clientHello = {
+            raw: capture,
+            receivedAt: Date.now(),
+        };
+        this.state = { state: "handshaking", capture: clientHello, startedAt };
+        tlsSocket.on("secure", () => {
+            // The secure event fires once the handshake is verified.
+            const result = {
+                clientHello,
+                protocolVersion: tlsSocket.getProtocol() ?? "unknown",
+                cipherSuite: tlsSocket.getCipher().name,
+                alpnProtocol: narrowServerName(tlsSocket.alpnProtocol),
+                serverName: narrowServerName(tlsSocket.servername),
+                handshakeDurationMs: Date.now() - startedAt,
+            };
+            this.done(result);
+            // Close the connection after reporting — single-shot sink.
+            tlsSocket.end();
+        });
+        tlsSocket.on("error", (err) => {
+            // Distinguish handshake rejection from transport errors.
+            this.fail(new Error(`TLS handshake failed: ${err.message}`, { cause: err }));
+        });
+    }
+    /** Transition to the done state and resolve any waiters. */
+    done(result) {
+        if (this.state.state === "done")
+            return;
+        this.state = { state: "done", result };
+        const w = this.waiters;
+        this.waiters = [];
+        this.failers = [];
+        for (const resolve of w)
+            resolve(result);
+    }
+    /** Transition to the failed state and reject any waiters. */
+    fail(error) {
+        if (this.state.state === "done")
+            return;
+        this.state = { state: "failed", error };
+        const f = this.failers;
+        this.failers = [];
+        this.waiters = [];
+        for (const reject of f)
+            reject(error);
+    }
+    /**
+     * Resolve once a ClientHello has been captured and the handshake completed.
+     *
+     * @param timeoutMs Max wait in milliseconds (default 5000). The sink is
+     *   single-shot — only the first handshake resolves this promise.
+     * @throws {Error} on timeout or handshake failure.
+     */
+    waitForHandshake(timeoutMs = 5000) {
+        if (this.state.state === "done") {
+            return Promise.resolve(this.state.result);
+        }
+        if (this.state.state === "failed") {
+            return Promise.reject(this.state.error);
+        }
+        return new Promise((resolve, reject) => {
+            let timer;
+            this.waiters.push((result) => {
+                if (timer !== undefined)
+                    clearTimeout(timer);
+                resolve(result);
+            });
+            this.failers.push((err) => {
+                if (timer !== undefined)
+                    clearTimeout(timer);
+                reject(err);
+            });
+            timer = setTimeout(() => {
+                this.fail(new Error(`waitForHandshake timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+        });
+    }
+    /** Stop the server. Resolves once the underlying socket is closed. */
+    stop() {
+        // Reject any pending waiters so callers don't hang.
+        this.fail(new Error("sink server stopped"));
+        return new Promise((resolve, reject) => {
+            this.server.close((err) => {
+                if (err !== undefined)
+                    reject(err);
+                else
+                    resolve();
+            });
+        });
+    }
+}
+// --- Byte helpers -------------------------------------------------------
+/** Concatenate an array of chunks into a single buffer of `total` bytes. */
+function flattenChunks(chunks, total) {
+    const out = new Uint8Array(total);
+    let o = 0;
+    for (const c of chunks) {
+        out.set(c, o);
+        o += c.length;
+    }
+    return out;
+}
+/**
+ * Coerce Node's `TLSSocket.servername` (`string | false | null`) to
+ * `string | null`. `false` means SNI was requested but not matched; `null`
+ * means no SNI was sent. Both map to "no usable servername" here.
+ */
+function narrowServerName(value) {
+    return typeof value === "string" ? value : null;
+}
+/**
+ * Convert a DER-encoded object to PEM (base64 with 64-char lines + headers).
+ * Used to feed the self-signed cert into `tls.createSecureContext`, which
+ * expects PEM for the `cert` option.
+ */
+function derToPem(der, label) {
+    const b64 = Buffer.from(der).toString("base64");
+    const lines = [`-----BEGIN ${label}-----`];
+    for (let i = 0; i < b64.length; i += 64) {
+        lines.push(b64.slice(i, i + 64));
+    }
+    lines.push(`-----END ${label}-----`);
+    return lines.join("\n");
+}
+//# sourceMappingURL=sink-server.js.map

package/dist/e2e/sink-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sink-server.js","sourceRoot":"","sources":["../../src/e2e/sink-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAsB,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAkCvD;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACL,MAAM,CAAS;IACf,GAAG,CAAgB;IAC5B,KAAK,GAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC1C,OAAO,GAA6C,EAAE,CAAC;IACvD,OAAO,GAAgC,EAAE,CAAC;IAElD,mDAAmD;IACnC,IAAI,CAAS;IAC7B,0CAA0C;IAC1B,IAAI,CAAS;IAE7B,wEAAwE;IACvD,aAAa,CAAoB;IAElD,YACI,MAAc,EACd,GAAkB,EAClB,IAAY,EACZ,IAAY,EACZ,aAAgC;QAEhC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACvC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,GAAmD,EAAE;QAClE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,mBAAmB,CAAC;YAC5B,GAAG,EAAE,MAAM;YACX,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;SACzC,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;YAE1B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,8DAA8D;gBAC9D,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;gBAC/F,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,oEAAoE;IAC5D,MAAM;QACV,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,SAAiB;QAClC,sCAAsC;QACtC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC9B,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAE/C,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,wEAAwE;QACxE,kEAAkE;QAClE,SAAS,CAAC,KAAK,EAAE,CAAC;QAElB;;;;;WAKG;QACH,MAAM,UAAU,GAAG,GAAsB,EAAE;YACvC,IAAI,aAAa,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC,CAAC;YAC/D,IAAI,aAAa,GAAG,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC3C,oEAAoE;YACpE,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAE,EAAE;YACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC;YAC9B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACnB,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACtD,CAAC;QACL,CAAC,CAAC;QAEF,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,iEAAiE;YACjE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;YACrE,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,yCAAyC;QACzC,SAAS,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,SAAiB,EAAE,OAAmB,EAAE,SAAiB;QAC3E,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,SAAS,EAAE;YACvC,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,IAAI,CAAC,GAAG;YACvB,oEAAoE;YACpE,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;SAChF,CAAC,CAAC;QAEH,oEAAoE;QACpE,wCAAwC;QACxC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3B,MAAM,WAAW,GAAuB;YACpC,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACzB,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAEvE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,yDAAyD;YACzD,MAAM,MAAM,GAAoB;gBAC5B,WAAW;gBACX,eAAe,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS;gBACrD,WAAW,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI;gBACvC,YAAY,EAAE,gBAAgB,CAAC,SAAS,CAAC,YAAY,CAAC;gBACtD,UAAU,EAAE,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC;gBAClD,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aAC9C,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,2DAA2D;YAC3D,SAAS,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,yDAAyD;YACzD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACP,CAAC;IAED,4DAA4D;IACpD,IAAI,CAAC,MAAuB;QAChC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO;QACxC,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,OAAO,IAAI,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,6DAA6D;IACrD,IAAI,CAAC,KAAY;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO;QACxC,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,SAAS,GAAG,IAAI;QAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,KAAiC,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACzB,IAAI,KAAK,KAAK,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC7C,OAAO,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtB,IAAI,KAAK,KAAK,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,SAAS,IAAI,CAAC,CAAC,CAAC;YAC5E,CAAC,EAAE,SAAS,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,sEAAsE;IACtE,IAAI;QACA,oDAAoD;QACpD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtB,IAAI,GAAG,KAAK,SAAS;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAC9B,OAAO,EAAE,CAAC;YACnB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAED,2EAA2E;AAE3E,4EAA4E;AAC5E,SAAS,aAAa,CAAC,MAA6B,EAAE,KAAa;IAC/D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACd,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAA4B;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,GAAe,EAAE,KAAa;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAa,CAAC,cAAc,KAAK,OAAO,CAAC,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/e2e/traffic-server.d.ts

@@ -0,0 +1,48 @@
+/**
+ * E2E traffic server for Bug 6 (AES-128-GCM record decryption) regression.
+ *
+ * Extends the sink-server pattern: performs a **real** TLS 1.3 handshake
+ * against the @browsercore/tls client stack, then serves an encrypted HTTP
+ * response. The client must decrypt the full server flight (handshake +
+ * application data) — if AEAD key derivation, nonce construction, or record
+ * parsing is wrong, decryption fails and the fetch throws.
+ *
+ * This is the deterministic, network-free reproduction for Bug 6: the same
+ * TLS code path that fails against example.com fails here, but without a
+ * network dependency.
+ */
+/** Result of a completed handshake against the traffic server. */
+export interface TrafficResult {
+    /** Negotiated protocol version, e.g. "TLSv1.3". */
+    readonly protocolVersion: string;
+    /** Negotiated cipher suite. */
+    readonly cipherSuite: string;
+    /** ALPN protocol negotiated, or null. */
+    readonly alpnProtocol: string | null;
+    /** Wall-clock handshake duration in milliseconds. */
+    readonly handshakeDurationMs: number;
+}
+/**
+ * Single-shot TLS 1.3 traffic server. Performs a real handshake, then sends
+ * an encrypted HTTP response the client must decrypt.
+ */
+export declare class TrafficServer {
+    private readonly server;
+    private readonly ctx;
+    private state;
+    private waiters;
+    private failers;
+    readonly host: string;
+    readonly port: number;
+    private constructor();
+    /** Start listening on an ephemeral port on 127.0.0.1. */
+    static start(): Promise<TrafficServer>;
+    private attach;
+    private onConnection;
+    private done;
+    private fail;
+    /** Resolve once handshake completes. */
+    waitForHandshake(timeoutMs?: number): Promise<TrafficResult>;
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=traffic-server.d.ts.map

package/dist/e2e/traffic-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traffic-server.d.ts","sourceRoot":"","sources":["../../src/e2e/traffic-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAgBH,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,+BAA+B;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,qDAAqD;IACrD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACxC;AAQD;;;GAGG;AACH,qBAAa,aAAa;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,OAAO,CAA8C;IAC7D,OAAO,CAAC,OAAO,CAAmC;IAElD,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,IAAI,EAAE,MAAM,CAAC;IAE7B,OAAO,eAKN;IAED,yDAAyD;IACzD,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC,CAsBrC;IAED,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,YAAY;IA0CpB,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,IAAI;IASZ,wCAAwC;IACxC,gBAAgB,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CASzD;IAED,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAKpB;CACJ"}

package/dist/e2e/traffic-server.js

@@ -0,0 +1,162 @@
+/**
+ * E2E traffic server for Bug 6 (AES-128-GCM record decryption) regression.
+ *
+ * Extends the sink-server pattern: performs a **real** TLS 1.3 handshake
+ * against the @browsercore/tls client stack, then serves an encrypted HTTP
+ * response. The client must decrypt the full server flight (handshake +
+ * application data) — if AEAD key derivation, nonce construction, or record
+ * parsing is wrong, decryption fails and the fetch throws.
+ *
+ * This is the deterministic, network-free reproduction for Bug 6: the same
+ * TLS code path that fails against example.com fails here, but without a
+ * network dependency.
+ */
+import { createServer } from "node:net";
+import { createSecureContext, TLSSocket } from "node:tls";
+import { generateSelfSignedCert } from "./cert-gen.js";
+/** HTTP response the server sends after a successful handshake. */
+const HTTP_RESPONSE = [
+    "HTTP/1.1 200 OK",
+    "Content-Type: text/plain",
+    "X-Traffic-Gate: bug6",
+    "Content-Length: 19",
+    "",
+    "TRAFFIC_GATE_OK_BUG6",
+].join("\r\n");
+/**
+ * Single-shot TLS 1.3 traffic server. Performs a real handshake, then sends
+ * an encrypted HTTP response the client must decrypt.
+ */
+export class TrafficServer {
+    server;
+    ctx;
+    state = { state: "idle" };
+    waiters = [];
+    failers = [];
+    host;
+    port;
+    constructor(server, ctx, host, port) {
+        this.server = server;
+        this.ctx = ctx;
+        this.host = host;
+        this.port = port;
+    }
+    /** Start listening on an ephemeral port on 127.0.0.1. */
+    static start() {
+        const { certDer, keyPem } = generateSelfSignedCert(["localhost"], ["127.0.0.1"], 1);
+        const ctx = createSecureContext({
+            key: keyPem,
+            cert: derToPem(certDer, "CERTIFICATE"),
+        });
+        return new Promise((resolve, reject) => {
+            const server = createServer({ allowHalfOpen: false });
+            server.maxConnections = 1;
+            server.on("error", reject);
+            server.listen(0, "127.0.0.1", () => {
+                const addr = server.address();
+                if (addr === null || typeof addr === "string") {
+                    reject(new Error("traffic server did not bind"));
+                    return;
+                }
+                const traffic = new TrafficServer(server, ctx, addr.address, addr.port);
+                traffic.attach();
+                resolve(traffic);
+            });
+        });
+    }
+    attach() {
+        this.server.on("connection", (socket) => this.onConnection(socket));
+    }
+    onConnection(rawSocket) {
+        if (this.state.state !== "idle") {
+            rawSocket.destroy();
+            return;
+        }
+        const startedAt = Date.now();
+        this.state = { state: "handshaking", startedAt };
+        const tlsSocket = new TLSSocket(rawSocket, {
+            isServer: true,
+            secureContext: this.ctx,
+            requestCert: false,
+            ALPNProtocols: ["h2", "http/1.1"],
+        });
+        tlsSocket.on("secure", () => {
+            // Handshake completed. Now send the encrypted HTTP response.
+            // The client must decrypt this to read the body — this is what
+            // exercises the Bug 6 path.
+            tlsSocket.write(HTTP_RESPONSE, () => {
+                const result = {
+                    protocolVersion: tlsSocket.getProtocol() ?? "unknown",
+                    cipherSuite: tlsSocket.getCipher().name,
+                    alpnProtocol: narrowServerName(tlsSocket.alpnProtocol),
+                    handshakeDurationMs: Date.now() - startedAt,
+                };
+                this.done(result);
+            });
+        });
+        tlsSocket.on("error", (err) => {
+            this.fail(new Error(`TLS handshake failed: ${err.message}`, { cause: err }));
+        });
+        tlsSocket.on("close", () => {
+            if (this.state.state !== "done") {
+                this.fail(new Error("socket closed before handshake completed"));
+            }
+        });
+    }
+    done(result) {
+        if (this.state.state === "done")
+            return;
+        this.state = { state: "done", result };
+        const w = this.waiters;
+        this.waiters = [];
+        this.failers = [];
+        for (const resolve of w)
+            resolve(result);
+    }
+    fail(error) {
+        if (this.state.state === "done")
+            return;
+        this.state = { state: "failed", error };
+        const f = this.failers;
+        this.failers = [];
+        this.waiters = [];
+        for (const reject of f)
+            reject(error);
+    }
+    /** Resolve once handshake completes. */
+    waitForHandshake(timeoutMs = 5000) {
+        if (this.state.state === "done")
+            return Promise.resolve(this.state.result);
+        if (this.state.state === "failed")
+            return Promise.reject(this.state.error);
+        return new Promise((resolve, reject) => {
+            let timer;
+            this.waiters.push((r) => { if (timer)
+                clearTimeout(timer); resolve(r); });
+            this.failers.push((e) => { if (timer)
+                clearTimeout(timer); reject(e); });
+            timer = setTimeout(() => this.fail(new Error("waitForHandshake timed out")), timeoutMs);
+        });
+    }
+    stop() {
+        this.fail(new Error("traffic server stopped"));
+        return new Promise((resolve, reject) => {
+            this.server.close((err) => { if (err)
+                reject(err);
+            else
+                resolve(); });
+        });
+    }
+}
+function narrowServerName(value) {
+    return typeof value === "string" ? value : null;
+}
+function derToPem(der, label) {
+    const b64 = Buffer.from(der).toString("base64");
+    const lines = [`-----BEGIN ${label}-----`];
+    for (let i = 0; i < b64.length; i += 64)
+        lines.push(b64.slice(i, i + 64));
+    lines.push(`-----END ${label}-----`);
+    return lines.join("\n");
+}
+//# sourceMappingURL=traffic-server.js.map

package/dist/e2e/traffic-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traffic-server.js","sourceRoot":"","sources":["../../src/e2e/traffic-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAsB,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,mEAAmE;AACnE,MAAM,aAAa,GAAG;IAClB,iBAAiB;IACjB,0BAA0B;IAC1B,sBAAsB;IACtB,oBAAoB;IACpB,EAAE;IACF,sBAAsB;CACzB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAoBf;;;GAGG;AACH,MAAM,OAAO,aAAa;IACL,MAAM,CAAS;IACf,GAAG,CAAgB;IAC5B,KAAK,GAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC1C,OAAO,GAA2C,EAAE,CAAC;IACrD,OAAO,GAAgC,EAAE,CAAC;IAElC,IAAI,CAAS;IACb,IAAI,CAAS;IAE7B,YAAoB,MAAc,EAAE,GAAkB,EAAE,IAAY,EAAE,IAAY;QAC9E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAC,KAAK;QACR,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,mBAAmB,CAAC;YAC5B,GAAG,EAAE,MAAM;YACX,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;SACzC,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;YAC1B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;oBACjD,OAAO;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxE,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,MAAM;QACV,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,YAAY,CAAC,SAAiB;QAClC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC9B,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;QAEjD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,SAAS,EAAE;YACvC,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,IAAI,CAAC,GAAG;YACvB,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC;SACpC,CAAC,CAAC;QAEH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,6DAA6D;YAC7D,+DAA+D;YAC/D,4BAA4B;YAC5B,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE;gBAChC,MAAM,MAAM,GAAkB;oBAC1B,eAAe,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS;oBACrD,WAAW,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI;oBACvC,YAAY,EAAE,gBAAgB,CAAC,SAAS,CAAC,YAAY,CAAC;oBACtD,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAC9C,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;YACrE,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,IAAI,CAAC,MAAqB;QAC9B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO;QACxC,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,OAAO,IAAI,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEO,IAAI,CAAC,KAAY;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO;QACxC,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,wCAAwC;IACxC,gBAAgB,CAAC,SAAS,GAAG,IAAI;QAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,KAAiC,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;IACP,CAAC;IAED,IAAI;QACA,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAAM,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAED,SAAS,gBAAgB,CAAC,KAA4B;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAe,EAAE,KAAa;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,cAAc,KAAK,OAAO,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,0CAA0C;AAC1C,qBAAa,YAAa,SAAQ,KAAK;IACnC,SAAgB,IAAI,EAAG,cAAc,CAAU;IAC/C,SAAyB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;gBAEtC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAK3D;AAED,mDAAmD;AACnD,qBAAa,mBAAoB,SAAQ,KAAK;IAC1C,SAAgB,IAAI,EAAG,qBAAqB,CAAU;IACtD,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,mBAAmB,EAAE,MAAM,CAAC;IAC5C,SAAyB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;gBAG9C,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,MAAM,EAC3B,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAWlC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,0CAA0C;AAC1C,qBAAa,YAAa,SAAQ,KAAK;IACnC,SAAgB,IAAI,EAAG,cAAc,CAAU;IAC/C,SAAyB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IAElD,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,EAIvD;CACJ;AAED,mDAAmD;AACnD,qBAAa,mBAAoB,SAAQ,KAAK;IAC1C,SAAgB,IAAI,EAAG,qBAAqB,CAAU;IACtD,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,mBAAmB,EAAE,MAAM,CAAC;IAC5C,SAAyB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IAElD,YACI,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,MAAM,EAC3B,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,EAU9B;CACJ"}

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,0CAA0C;AAC1C,MAAM,OAAO,YAAa,SAAQ,KAAK;IACnB,IAAI,GAAG,cAAuB,CAAC;IACtB,KAAK,CAAoB;IAElD,YAAY,OAAe,EAAE,OAA2B;QACpD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAChC,CAAC;CACJ;AAED,mDAAmD;AACnD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC1B,IAAI,GAAG,qBAA8B,CAAC;IACtC,SAAS,CAAS;IAClB,mBAAmB,CAAS;IACnB,KAAK,CAAoB;IAElD,YACI,SAAiB,EACjB,mBAA2B,EAC3B,OAA2B;QAE3B,KAAK,CACD,kBAAkB,SAAS,qBAAqB,mBAAmB,EAAE,EACrE,OAAO,CACV,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAChC,CAAC;CACJ"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,0CAA0C;AAC1C,MAAM,OAAO,YAAa,SAAQ,KAAK;IACnB,IAAI,GAAG,cAAuB,CAAC;IACtB,KAAK,CAAoB;IAElD,YAAY,OAAe,EAAE,OAA2B;QACpD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAChC,CAAC;CACJ;AAED,mDAAmD;AACnD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC1B,IAAI,GAAG,qBAA8B,CAAC;IACtC,SAAS,CAAS;IAClB,mBAAmB,CAAS;IACnB,KAAK,CAAoB;IAElD,YACI,SAAiB,EACjB,mBAA2B,EAC3B,OAA2B;QAE3B,KAAK,CACD,kBAAkB,SAAS,qBAAqB,mBAAmB,EAAE,EACrE,OAAO,CACV,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAChC,CAAC;CACJ"}

package/dist/fingerprint/index.d.ts

@@ -1,5 +1,8 @@
-/** Barrel for fingerprint computation (JA3 / JA4). */
+/** Barrel for fingerprint computation (JA3 / JA4 / JA4H). */
 export { computeJa3, parseClientHello, Ja3ParseError } from "./ja3.js";
 export type { Ja3Segments } from "./ja3.js";
-export { computeJa4 } from "./ja4.js";
+export { computeJa4, computeJa4Fingerprint, Ja4ParseError } from "./ja4.js";
+export type { Ja4ClientHello, Ja4Fingerprint } from "./ja4.js";
+export { computeJa4h } from "./ja4h.js";
+export type { Ja4hFingerprint, Ja4hRequest } from "./ja4h.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/fingerprint/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACvE,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACvE,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC5E,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/fingerprint/index.js

@@ -1,4 +1,5 @@
-/** Barrel for fingerprint computation (JA3 / JA4). */
+/** Barrel for fingerprint computation (JA3 / JA4 / JA4H). */
 export { computeJa3, parseClientHello, Ja3ParseError } from "./ja3.js";
-export { computeJa4 } from "./ja4.js";
+export { computeJa4, computeJa4Fingerprint, Ja4ParseError } from "./ja4.js";
+export { computeJa4h } from "./ja4h.js";
 //# sourceMappingURL=index.js.map

package/dist/fingerprint/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE5E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/fingerprint/ja3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ja3.d.ts","sourceRoot":"","sources":["../../src/fingerprint/ja3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,+DAA+D;AAC/D,qBAAa,aAAc,SAAQ,KAAK;IACpC,SAAgB,IAAI,EAAG,eAAe,CAAU;gBACpC,OAAO,EAAE,MAAM;CAI9B;AAOD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,CAM1D;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACnC;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,UAAU,GAAG,WAAW,CAgGrE"}
+{"version":3,"file":"ja3.d.ts","sourceRoot":"","sources":["../../src/fingerprint/ja3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,+DAA+D;AAC/D,qBAAa,aAAc,SAAQ,KAAK;IACpC,SAAgB,IAAI,EAAG,eAAe,CAAU;IAChD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACJ;AAYD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,CAM1D;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACnC;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,UAAU,GAAG,WAAW,CA6GrE"}

package/dist/fingerprint/ja3.js

@@ -21,7 +21,12 @@ export class Ja3ParseError extends Error {
 }
 /** Read a big-endian uint16 at `offset` in `buf`. */
 function uint16(buf, offset) {
-    return (buf[offset] << 8) | buf[offset + 1];
+    const hi = buf[offset];
+    const lo = buf[offset + 1];
+    if (hi === undefined || lo === undefined) {
+        throw new Ja3ParseError(`uint16 read out of bounds at offset ${offset}`);
+    }
+    return (hi << 8) | lo;
 }
 /**
  * Parse a TLS ClientHello from a TLS record (or handshake) buffer and return
@@ -75,6 +80,9 @@ export function parseClientHello(clientHello) {
     pos += 32;
     // session_id(variable)
     const sessionIdLen = clientHello[pos];
+    if (sessionIdLen === undefined) {
+        throw new Ja3ParseError("ClientHello truncated at session id length");
+    }
     pos += 1 + sessionIdLen;
     // cipher_suites(variable)
     const cipherSuitesLen = uint16(clientHello, pos);
@@ -83,6 +91,9 @@ export function parseClientHello(clientHello) {
     pos += cipherSuitesLen;
     // compression_methods(variable)
     const compLen = clientHello[pos];
+    if (compLen === undefined) {
+        throw new Ja3ParseError("ClientHello truncated at compression methods length");
+    }
     pos += 1 + compLen;
     // extensions(variable)
     if (pos + 2 > end) {
@@ -114,8 +125,15 @@ export function parseClientHello(clientHello) {
         else if (extType === 0x000b && extLen >= 1) {
             // ec_point_formats(11): list of uint8 formats
             const listLen = clientHello[pos];
+            if (listLen === undefined) {
+                throw new Ja3ParseError("ClientHello truncated at ec_point_formats length");
+            }
             for (let i = 0; i < listLen; i++) {
-                ecPointFormats.push(clientHello[pos + 1 + i]);
+                const fmt = clientHello[pos + 1 + i];
+                if (fmt === undefined) {
+                    throw new Ja3ParseError("ClientHello truncated in ec_point_formats list");
+                }
+                ecPointFormats.push(fmt);
             }
         }
         pos += extLen;
@@ -129,12 +147,23 @@ export function parseClientHello(clientHello) {
     };
 }
 function readInt24(buf, offset) {
-    return (buf[offset] << 16) | (buf[offset + 1] << 8) | buf[offset + 2];
+    const hi = buf[offset];
+    const mid = buf[offset + 1];
+    const lo = buf[offset + 2];
+    if (hi === undefined || mid === undefined || lo === undefined) {
+        throw new Ja3ParseError(`readInt24 out of bounds at offset ${offset}`);
+    }
+    return (hi << 16) | (mid << 8) | lo;
 }
 function readUint16List(buf, offset, byteLen) {
     const out = [];
     for (let i = 0; i + 1 < byteLen; i += 2) {
-        out.push((buf[offset + i] << 8) | buf[offset + i + 1]);
+        const hi = buf[offset + i];
+        const lo = buf[offset + i + 1];
+        if (hi === undefined || lo === undefined) {
+            throw new Ja3ParseError(`readUint16List out of bounds at offset ${offset + i}`);
+        }
+        out.push((hi << 8) | lo);
     }
     return out;
 }