httpcloak 1.6.7 → 1.6.8-beta.1

package/lib/index.d.ts

@@ -245,6 +245,10 @@ export interface SessionOptions {
   withoutCookieJar?: boolean;
   /** Disable ETag / If-Modified-Since handling for the lifetime of the session (default: false) */
   withoutConditionalCache?: boolean;
+  /** Full strip: drop ALL sec-ch-ua client hints (including the always-on trio) for the lifetime of the session (default: false) */
+  withoutClientHints?: boolean;
+  /** High-entropy strip: keep the always-on trio but drop only the Accept-CH high-entropy hints for the lifetime of the session (default: false) */
+  withoutHighEntropyClientHints?: boolean;
   /** Skip the ECH (Encrypted Client Hello) HTTPS RR lookup. Saves ~15-20ms on first connect (default: false) */
   disableEch?: boolean;
   /** Disable HTTP/3 racing while keeping H1/H2 auto-negotiation. Reachable indirectly via httpVersion: "h2" but the explicit flag is cleaner (default: false) */
@@ -315,6 +319,22 @@ export interface RequestOptions {
    */
   disableConditionalCache?: boolean;
 
+  /**
+   * Per-request full strip of sec-ch-ua client hints. When true, ALL client
+   * hints are dropped for this request, including the always-on trio
+   * (sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform). One-off only; the
+   * session-wide setting is untouched.
+   */
+  disableClientHints?: boolean;
+
+  /**
+   * Per-request high-entropy strip. When true, this request keeps the
+   * always-on trio but drops only the high-entropy Accept-CH hints
+   * (e.g. sec-ch-ua-platform-version, -arch, -model, -bitness,
+   * -full-version-list). One-off only; the session-wide setting is untouched.
+   */
+  disableHighEntropyClientHints?: boolean;
+
   /**
    * AbortSignal for cancelling an in-flight request. Honored by the async
    * methods (get, post, put, patch, delete, head, options, request). When
@@ -512,6 +532,28 @@ export class Session {
   /** Read the session's current conditional-cache state. */
   getConditionalCache(): boolean;
 
+  /**
+   * Toggle the session's client-hints handling at runtime (full strip).
+   * When disabled, the session drops ALL sec-ch-ua client hints, including
+   * the always-on trio (sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform).
+   * The change takes effect on the next request and persists until set again.
+   */
+  setClientHints(enabled: boolean): void;
+
+  /** Read the session's current client-hints state. */
+  getClientHints(): boolean;
+
+  /**
+   * Toggle the session's high-entropy client-hints handling at runtime.
+   * When disabled, the session keeps the always-on trio but drops only the
+   * high-entropy Accept-CH hints (e.g. sec-ch-ua-platform-version, -arch,
+   * -model, -bitness, -full-version-list). Takes effect on the next request.
+   */
+  setHighEntropyClientHints(enabled: boolean): void;
+
+  /** Read the session's current high-entropy client-hints state. */
+  getHighEntropyClientHints(): boolean;
+
   /**
    * Toggle the session's redirect-following policy at runtime. The change
    * takes effect on the next request and persists until set again.

package/lib/index.js

@@ -889,6 +889,10 @@ function getLib() {
       httpcloak_session_touch: nativeLibHandle.func("httpcloak_session_touch", "void", ["int64"]),
       httpcloak_session_set_conditional_cache: nativeLibHandle.func("httpcloak_session_set_conditional_cache", "void", ["int64", "int"]),
       httpcloak_session_get_conditional_cache: nativeLibHandle.func("httpcloak_session_get_conditional_cache", "int", ["int64"]),
+      httpcloak_session_set_client_hints: nativeLibHandle.func("httpcloak_session_set_client_hints", "void", ["int64", "int"]),
+      httpcloak_session_get_client_hints: nativeLibHandle.func("httpcloak_session_get_client_hints", "int", ["int64"]),
+      httpcloak_session_set_high_entropy_client_hints: nativeLibHandle.func("httpcloak_session_set_high_entropy_client_hints", "void", ["int64", "int"]),
+      httpcloak_session_get_high_entropy_client_hints: nativeLibHandle.func("httpcloak_session_get_high_entropy_client_hints", "int", ["int64"]),
       httpcloak_session_set_follow_redirects: nativeLibHandle.func("httpcloak_session_set_follow_redirects", "void", ["int64", "int"]),
       httpcloak_session_get_follow_redirects: nativeLibHandle.func("httpcloak_session_get_follow_redirects", "int", ["int64"]),
       httpcloak_session_set_max_redirects: nativeLibHandle.func("httpcloak_session_set_max_redirects", "void", ["int64", "int"]),
@@ -1476,6 +1480,8 @@ class Session {
       switchProtocol = null,
       withoutCookieJar = false,
       withoutConditionalCache = false,
+      withoutClientHints = false,
+      withoutHighEntropyClientHints = false,
       disableEch = false,
       disableHttp3 = false,
       ja3 = null,
@@ -1558,6 +1564,14 @@ class Session {
     if (withoutConditionalCache) {
       config.without_conditional_cache = true;
     }
+    // Full strip: drop ALL sec-ch-ua client hints, including the always-on trio.
+    if (withoutClientHints) {
+      config.without_client_hints = true;
+    }
+    // High-entropy strip: keep the always-on trio, drop only the Accept-CH hints.
+    if (withoutHighEntropyClientHints) {
+      config.without_high_entropy_client_hints = true;
+    }
     if (disableEch) {
       config.disable_ech = true;
     }
@@ -1727,7 +1741,7 @@ class Session {
    * @returns {Response} Response object
    */
   getSync(url, options = {}) {
-    const { headers = null, params = null, cookies = null, auth = null, fetchMode = null, allowRedirects = null, disableConditionalCache = false } = options;
+    const { headers = null, params = null, cookies = null, auth = null, fetchMode = null, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false } = options;
 
     url = addParamsToUrl(url, params);
     let mergedHeaders = this._mergeHeaders(headers);
@@ -1750,6 +1764,12 @@ class Session {
     if (disableConditionalCache) {
       reqOptions.disable_conditional_cache = true;
     }
+    if (disableClientHints) {
+      reqOptions.disable_client_hints = true;
+    }
+    if (disableHighEntropyClientHints) {
+      reqOptions.disable_high_entropy_client_hints = true;
+    }
     const optionsJson = Object.keys(reqOptions).length > 0 ? JSON.stringify(reqOptions) : null;
 
     const startTime = Date.now();
@@ -1779,7 +1799,7 @@ class Session {
    * @returns {Response} Response object
    */
   postSync(url, options = {}) {
-    let { body = null, json = null, data = null, files = null, headers = null, params = null, cookies = null, auth = null, fetchMode = null, allowRedirects = null, disableConditionalCache = false } = options;
+    let { body = null, json = null, data = null, files = null, headers = null, params = null, cookies = null, auth = null, fetchMode = null, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false } = options;
 
     url = addParamsToUrl(url, params);
     let mergedHeaders = this._mergeHeaders(headers);
@@ -1830,6 +1850,12 @@ class Session {
     if (disableConditionalCache) {
       reqOptions.disable_conditional_cache = true;
     }
+    if (disableClientHints) {
+      reqOptions.disable_client_hints = true;
+    }
+    if (disableHighEntropyClientHints) {
+      reqOptions.disable_high_entropy_client_hints = true;
+    }
     const optionsJson = Object.keys(reqOptions).length > 0 ? JSON.stringify(reqOptions) : null;
 
     const bodyPtr = bodyBuffer || Buffer.alloc(0);
@@ -1854,7 +1880,7 @@ class Session {
    * @returns {Response} Response object
    */
   requestSync(method, url, options = {}) {
-    let { body = null, json = null, data = null, files = null, headers = null, params = null, cookies = null, auth = null, timeout = null, fetchMode = null, allowRedirects = null, disableConditionalCache = false } = options;
+    let { body = null, json = null, data = null, files = null, headers = null, params = null, cookies = null, auth = null, timeout = null, fetchMode = null, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false } = options;
 
     url = addParamsToUrl(url, params);
     let mergedHeaders = this._mergeHeaders(headers);
@@ -1899,6 +1925,8 @@ class Session {
     if (fetchMode) requestConfig.fetch_mode = fetchMode;
     if (allowRedirects !== null && allowRedirects !== undefined) requestConfig.follow_redirects = !!allowRedirects;
     if (disableConditionalCache) requestConfig.disable_conditional_cache = true;
+    if (disableClientHints) requestConfig.disable_client_hints = true;
+    if (disableHighEntropyClientHints) requestConfig.disable_high_entropy_client_hints = true;
 
     const bodyPtr = bodyBuffer || Buffer.alloc(0);
     const bodyLen = bodyBuffer ? bodyBuffer.length : 0;
@@ -1929,7 +1957,7 @@ class Session {
    * @returns {Promise<Response>} Response object
    */
   get(url, options = {}) {
-    const { headers = null, params = null, cookies = null, auth = null, fetchMode = null, timeout = null, allowRedirects = null, disableConditionalCache = false, signal = null } = options;
+    const { headers = null, params = null, cookies = null, auth = null, fetchMode = null, timeout = null, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false, signal = null } = options;
 
     url = addParamsToUrl(url, params);
     let mergedHeaders = this._mergeHeaders(headers);
@@ -1958,6 +1986,12 @@ class Session {
     if (disableConditionalCache) {
       reqOptions.disable_conditional_cache = true;
     }
+    if (disableClientHints) {
+      reqOptions.disable_client_hints = true;
+    }
+    if (disableHighEntropyClientHints) {
+      reqOptions.disable_high_entropy_client_hints = true;
+    }
     const optionsJson = Object.keys(reqOptions).length > 0 ? JSON.stringify(reqOptions) : null;
 
     // Register async request with callback manager
@@ -1978,7 +2012,7 @@ class Session {
    * @returns {Promise<Response>} Response object
    */
   post(url, options = {}) {
-    let { body = null, json = null, data = null, files = null, headers = null, params = null, cookies = null, auth = null, fetchMode = null, timeout = null, allowRedirects = null, disableConditionalCache = false, signal = null } = options;
+    let { body = null, json = null, data = null, files = null, headers = null, params = null, cookies = null, auth = null, fetchMode = null, timeout = null, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false, signal = null } = options;
 
     url = addParamsToUrl(url, params);
     let mergedHeaders = this._mergeHeaders(headers);
@@ -2044,6 +2078,12 @@ class Session {
     if (disableConditionalCache) {
       reqOptions.disable_conditional_cache = true;
     }
+    if (disableClientHints) {
+      reqOptions.disable_client_hints = true;
+    }
+    if (disableHighEntropyClientHints) {
+      reqOptions.disable_high_entropy_client_hints = true;
+    }
     if (bodyEncoding) {
       reqOptions.body_encoding = bodyEncoding;
     }
@@ -2068,7 +2108,7 @@ class Session {
    * @returns {Promise<Response>} Response object
    */
   request(method, url, options = {}) {
-    let { body = null, json = null, data = null, files = null, headers = null, params = null, cookies = null, auth = null, timeout = null, fetchMode = null, allowRedirects = null, disableConditionalCache = false, signal = null } = options;
+    let { body = null, json = null, data = null, files = null, headers = null, params = null, cookies = null, auth = null, timeout = null, fetchMode = null, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false, signal = null } = options;
 
     url = addParamsToUrl(url, params);
     let mergedHeaders = this._mergeHeaders(headers);
@@ -2126,6 +2166,8 @@ class Session {
     if (fetchMode) requestConfig.fetch_mode = fetchMode;
     if (allowRedirects !== null && allowRedirects !== undefined) requestConfig.follow_redirects = !!allowRedirects;
     if (disableConditionalCache) requestConfig.disable_conditional_cache = true;
+    if (disableClientHints) requestConfig.disable_client_hints = true;
+    if (disableHighEntropyClientHints) requestConfig.disable_high_entropy_client_hints = true;
 
     // Register async request with callback manager
     const manager = getAsyncManager();
@@ -2359,6 +2401,44 @@ class Session {
     return this._lib.httpcloak_session_get_conditional_cache(this._handle) !== 0;
   }
 
+  /**
+   * Toggle the session's client-hints handling at runtime (full strip).
+   * When disabled, the session drops ALL sec-ch-ua client hints, including
+   * the always-on trio (sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform).
+   * The change takes effect on the next request and persists until set again.
+   * @param {boolean} enabled
+   */
+  setClientHints(enabled) {
+    this._lib.httpcloak_session_set_client_hints(this._handle, enabled ? 1 : 0);
+  }
+
+  /**
+   * Return the session's current client-hints state.
+   * @returns {boolean}
+   */
+  getClientHints() {
+    return this._lib.httpcloak_session_get_client_hints(this._handle) !== 0;
+  }
+
+  /**
+   * Toggle the session's high-entropy client-hints handling at runtime.
+   * When disabled, the session keeps the always-on trio but drops only the
+   * high-entropy Accept-CH hints (e.g. sec-ch-ua-platform-version, -arch,
+   * -model, -bitness, -full-version-list). Takes effect on the next request.
+   * @param {boolean} enabled
+   */
+  setHighEntropyClientHints(enabled) {
+    this._lib.httpcloak_session_set_high_entropy_client_hints(this._handle, enabled ? 1 : 0);
+  }
+
+  /**
+   * Return the session's current high-entropy client-hints state.
+   * @returns {boolean}
+   */
+  getHighEntropyClientHints() {
+    return this._lib.httpcloak_session_get_high_entropy_client_hints(this._handle) !== 0;
+  }
+
   /**
    * Toggle the session's redirect-following policy at runtime. The change
    * takes effect on the next request and persists until set again.
@@ -2689,7 +2769,7 @@ class Session {
    *   stream.close();
    */
   getStream(url, options = {}) {
-    const { params, headers, cookies, timeout, allowRedirects = null, disableConditionalCache = false } = options;
+    const { params, headers, cookies, timeout, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false } = options;
 
     // Add params to URL
     if (params) {
@@ -2722,6 +2802,12 @@ class Session {
     if (disableConditionalCache) {
       reqOptions.disable_conditional_cache = true;
     }
+    if (disableClientHints) {
+      reqOptions.disable_client_hints = true;
+    }
+    if (disableHighEntropyClientHints) {
+      reqOptions.disable_high_entropy_client_hints = true;
+    }
     const optionsJson = Object.keys(reqOptions).length > 0 ? JSON.stringify(reqOptions) : null;
 
     // Start stream
@@ -2761,7 +2847,7 @@ class Session {
    * @returns {StreamResponse} - Streaming response for chunked reading
    */
   postStream(url, options = {}) {
-    const { body: bodyOpt, json: jsonBody, form, params, headers, cookies, timeout, allowRedirects = null, disableConditionalCache = false } = options;
+    const { body: bodyOpt, json: jsonBody, form, params, headers, cookies, timeout, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false } = options;
 
     // Add params to URL
     if (params) {
@@ -2807,6 +2893,12 @@ class Session {
     if (disableConditionalCache) {
       reqOptions.disable_conditional_cache = true;
     }
+    if (disableClientHints) {
+      reqOptions.disable_client_hints = true;
+    }
+    if (disableHighEntropyClientHints) {
+      reqOptions.disable_high_entropy_client_hints = true;
+    }
     const optionsJson = Object.keys(reqOptions).length > 0 ? JSON.stringify(reqOptions) : null;
 
     // Start stream
@@ -2845,7 +2937,7 @@ class Session {
    * @returns {StreamResponse} - Streaming response for chunked reading
    */
   requestStream(method, url, options = {}) {
-    const { body, params, headers, cookies, timeout, allowRedirects = null, disableConditionalCache = false } = options;
+    const { body, params, headers, cookies, timeout, allowRedirects = null, disableConditionalCache = false, disableClientHints = false, disableHighEntropyClientHints = false } = options;
 
     // Add params to URL
     if (params) {
@@ -2884,6 +2976,12 @@ class Session {
     if (disableConditionalCache) {
       requestConfig.disable_conditional_cache = true;
     }
+    if (disableClientHints) {
+      requestConfig.disable_client_hints = true;
+    }
+    if (disableHighEntropyClientHints) {
+      requestConfig.disable_high_entropy_client_hints = true;
+    }
 
     // Start stream
     const streamHandle = this._lib.httpcloak_stream_request(this._handle, JSON.stringify(requestConfig));

package/npm/darwin-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@httpcloak/darwin-arm64",
-  "version": "1.6.7",
+  "version": "1.6.8-beta.1",
   "description": "HTTPCloak native binary for darwin arm64",
   "os": [
     "darwin"

package/npm/darwin-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@httpcloak/darwin-x64",
-  "version": "1.6.7",
+  "version": "1.6.8-beta.1",
   "description": "HTTPCloak native binary for darwin x64",
   "os": [
     "darwin"

package/npm/linux-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@httpcloak/linux-arm64",
-  "version": "1.6.7",
+  "version": "1.6.8-beta.1",
   "description": "HTTPCloak native binary for linux arm64",
   "os": [
     "linux"

package/npm/linux-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@httpcloak/linux-x64",
-  "version": "1.6.7",
+  "version": "1.6.8-beta.1",
   "description": "HTTPCloak native binary for linux x64",
   "os": [
     "linux"

package/npm/win32-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@httpcloak/win32-x64",
-  "version": "1.6.7",
+  "version": "1.6.8-beta.1",
   "description": "HTTPCloak native binary for win32 x64",
   "os": [
     "win32"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "httpcloak",
-  "version": "1.6.7",
+  "version": "1.6.8-beta.1",
   "description": "Browser fingerprint emulation HTTP client with HTTP/1.1, HTTP/2, and HTTP/3 support",
   "main": "lib/index.js",
   "module": "lib/index.mjs",
@@ -49,11 +49,11 @@
     "koffi": "^2.9.0"
   },
   "optionalDependencies": {
-    "@httpcloak/darwin-arm64": "1.6.7",
-    "@httpcloak/darwin-x64": "1.6.7",
-    "@httpcloak/linux-arm64": "1.6.7",
-    "@httpcloak/linux-x64": "1.6.7",
-    "@httpcloak/win32-x64": "1.6.7"
+    "@httpcloak/darwin-arm64": "1.6.8-beta.1",
+    "@httpcloak/darwin-x64": "1.6.8-beta.1",
+    "@httpcloak/linux-arm64": "1.6.8-beta.1",
+    "@httpcloak/linux-x64": "1.6.8-beta.1",
+    "@httpcloak/win32-x64": "1.6.8-beta.1"
   },
   "devDependencies": {
     "@types/node": "^25.1.0",