nlcurl 0.1.0

package/dist/tls/node-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-engine.d.ts","sourceRoot":"","sources":["../../src/tls/node-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAqB,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AA2F/D,qBAAa,aAAc,YAAW,UAAU;IACxC,OAAO,CACX,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC;CAgGtB"}

package/dist/tls/node-engine.js

@@ -0,0 +1,190 @@
+/**
+ * Standard TLS engine.
+ *
+ * Uses Node.js built-in `node:tls` module with maximum configuration
+ * from browser profiles.  This engine controls:
+ *   - Cipher suite order (via the `ciphers` option)
+ *   - Named groups / ECDH curves (via `ecdhCurve`)
+ *   - Signature algorithms (via `sigalgs`)
+ *   - ALPN protocols
+ *   - Min/max protocol version
+ *   - Session tickets, SNI
+ *
+ * Limitations: `node:tls` does not expose extension ordering, GREASE
+ * injection, or padding extension control.  For full JA3 fingerprint
+ * matching use the Stealth engine instead.
+ */
+import * as tls from 'node:tls';
+import { CipherSuite, NamedGroup, SignatureScheme } from './constants.js';
+import { TLSError } from '../core/errors.js';
+// ---- Cipher suite name mapping ----
+const CIPHER_NAME = new Map([
+    // TLS 1.3 (Node handles these via `ciphersuites` option)
+    [CipherSuite.TLS_AES_128_GCM_SHA256, 'TLS_AES_128_GCM_SHA256'],
+    [CipherSuite.TLS_AES_256_GCM_SHA384, 'TLS_AES_256_GCM_SHA384'],
+    [CipherSuite.TLS_CHACHA20_POLY1305_SHA256, 'TLS_CHACHA20_POLY1305_SHA256'],
+    // TLS 1.2
+    [CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, 'ECDHE-ECDSA-AES128-GCM-SHA256'],
+    [CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, 'ECDHE-RSA-AES128-GCM-SHA256'],
+    [CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, 'ECDHE-ECDSA-AES256-GCM-SHA384'],
+    [CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, 'ECDHE-RSA-AES256-GCM-SHA384'],
+    [CipherSuite.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, 'ECDHE-ECDSA-CHACHA20-POLY1305'],
+    [CipherSuite.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, 'ECDHE-RSA-CHACHA20-POLY1305'],
+    [CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, 'ECDHE-RSA-AES128-SHA'],
+    [CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, 'ECDHE-RSA-AES256-SHA'],
+    [CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256, 'AES128-GCM-SHA256'],
+    [CipherSuite.TLS_RSA_WITH_AES_256_GCM_SHA384, 'AES256-GCM-SHA384'],
+    [CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA, 'AES128-SHA'],
+    [CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA, 'AES256-SHA'],
+    [CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, 'ECDHE-ECDSA-AES256-SHA'],
+    [CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, 'ECDHE-ECDSA-AES128-SHA'],
+    [CipherSuite.TLS_RSA_WITH_AES_256_CBC_SHA, 'AES256-SHA'],
+    [CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA, 'AES128-SHA'],
+]);
+const GROUP_NAME = new Map([
+    [NamedGroup.X25519, 'X25519'],
+    [NamedGroup.SECP256R1, 'P-256'],
+    [NamedGroup.SECP384R1, 'P-384'],
+    [NamedGroup.SECP521R1, 'P-521'],
+    [NamedGroup.X448, 'X448'],
+    [NamedGroup.FFDHE2048, 'ffdhe2048'],
+    [NamedGroup.FFDHE3072, 'ffdhe3072'],
+]);
+const SIGALG_NAME = new Map([
+    [SignatureScheme.ECDSA_SECP256R1_SHA256, 'ecdsa_secp256r1_sha256'],
+    [SignatureScheme.ECDSA_SECP384R1_SHA384, 'ecdsa_secp384r1_sha384'],
+    [SignatureScheme.ECDSA_SECP521R1_SHA512, 'ecdsa_secp521r1_sha512'],
+    [SignatureScheme.RSA_PSS_RSAE_SHA256, 'rsa_pss_rsae_sha256'],
+    [SignatureScheme.RSA_PSS_RSAE_SHA384, 'rsa_pss_rsae_sha384'],
+    [SignatureScheme.RSA_PSS_RSAE_SHA512, 'rsa_pss_rsae_sha512'],
+    [SignatureScheme.RSA_PKCS1_SHA256, 'rsa_pkcs1_sha256'],
+    [SignatureScheme.RSA_PKCS1_SHA384, 'rsa_pkcs1_sha384'],
+    [SignatureScheme.RSA_PKCS1_SHA512, 'rsa_pkcs1_sha512'],
+    [SignatureScheme.RSA_PSS_PSS_SHA256, 'rsa_pss_pss_sha256'],
+    [SignatureScheme.RSA_PSS_PSS_SHA384, 'rsa_pss_pss_sha384'],
+    [SignatureScheme.RSA_PSS_PSS_SHA512, 'rsa_pss_pss_sha512'],
+]);
+// ---- Helpers ----
+function buildCipherString(suites) {
+    const tls13 = [];
+    const tls12 = [];
+    for (const s of suites) {
+        const name = CIPHER_NAME.get(s);
+        if (!name)
+            continue;
+        if (name.startsWith('TLS_')) {
+            tls13.push(name);
+        }
+        else {
+            tls12.push(name);
+        }
+    }
+    return {
+        ciphers: tls12.join(':'),
+        ciphersuites: tls13.join(':'),
+    };
+}
+function buildEcdhCurve(groups) {
+    return groups
+        .map((g) => GROUP_NAME.get(g))
+        .filter((n) => n !== undefined)
+        .join(':');
+}
+function buildSigalgs(algs) {
+    return algs
+        .map((a) => SIGALG_NAME.get(a))
+        .filter((n) => n !== undefined)
+        .join(':');
+}
+// ---- Engine implementation ----
+export class NodeTLSEngine {
+    async connect(options, profile) {
+        return new Promise((resolve, reject) => {
+            const tlsOpts = {
+                host: options.host,
+                port: options.port,
+                servername: options.servername ?? options.host,
+                rejectUnauthorized: !options.insecure,
+                ALPNProtocols: options.alpnProtocols,
+                minVersion: 'TLSv1.2',
+                maxVersion: 'TLSv1.3',
+            };
+            // Apply profile overrides
+            if (profile) {
+                const { ciphers, ciphersuites } = buildCipherString(profile.tls.cipherSuites);
+                tlsOpts.ciphers = ciphers;
+                // ciphersuites is an undocumented but supported option in Node
+                tlsOpts['cipherSuites'] = ciphersuites;
+                tlsOpts.ecdhCurve = buildEcdhCurve(profile.tls.supportedGroups);
+                tlsOpts.sigalgs = buildSigalgs(profile.tls.signatureAlgorithms);
+                tlsOpts.ALPNProtocols = profile.tls.alpnProtocols;
+            }
+            // If a pre-connected socket is provided (e.g. from proxy tunnel),
+            // use it as the underlying transport.
+            if (options.socket) {
+                tlsOpts.socket = options.socket;
+            }
+            // Timeout
+            const timeoutMs = options.timeout ?? 30_000;
+            const socket = tls.connect(tlsOpts);
+            let settled = false;
+            let timer;
+            if (timeoutMs > 0) {
+                timer = setTimeout(() => {
+                    if (!settled) {
+                        settled = true;
+                        socket.destroy();
+                        reject(new TLSError('TLS handshake timed out'));
+                    }
+                }, timeoutMs);
+            }
+            // AbortSignal support
+            if (options.signal) {
+                const onAbort = () => {
+                    if (!settled) {
+                        settled = true;
+                        if (timer)
+                            clearTimeout(timer);
+                        socket.destroy();
+                        reject(new TLSError('TLS connection aborted'));
+                    }
+                };
+                if (options.signal.aborted) {
+                    onAbort();
+                    return;
+                }
+                options.signal.addEventListener('abort', onAbort, { once: true });
+            }
+            socket.once('secureConnect', () => {
+                if (settled)
+                    return;
+                settled = true;
+                if (timer)
+                    clearTimeout(timer);
+                const cipher = socket.getCipher();
+                const proto = socket.getProtocol();
+                const connectionInfo = {
+                    version: proto ?? 'unknown',
+                    alpnProtocol: socket.alpnProtocol || null,
+                    cipher: cipher?.name ?? 'unknown',
+                };
+                const tlsSocket = Object.assign(socket, {
+                    connectionInfo,
+                    destroyTLS() {
+                        socket.destroy();
+                    },
+                });
+                resolve(tlsSocket);
+            });
+            socket.once('error', (err) => {
+                if (settled)
+                    return;
+                settled = true;
+                if (timer)
+                    clearTimeout(timer);
+                reject(new TLSError(err.message));
+            });
+        });
+    }
+}
+//# sourceMappingURL=node-engine.js.map

package/dist/tls/node-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-engine.js","sourceRoot":"","sources":["../../src/tls/node-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAKhC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,sCAAsC;AAEtC,MAAM,WAAW,GAAgC,IAAI,GAAG,CAAC;IACvD,yDAAyD;IACzD,CAAC,WAAW,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAC9D,CAAC,WAAW,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAC9D,CAAC,WAAW,CAAC,4BAA4B,EAAE,8BAA8B,CAAC;IAC1E,UAAU;IACV,CAAC,WAAW,CAAC,uCAAuC,EAAE,+BAA+B,CAAC;IACtF,CAAC,WAAW,CAAC,qCAAqC,EAAE,6BAA6B,CAAC;IAClF,CAAC,WAAW,CAAC,uCAAuC,EAAE,+BAA+B,CAAC;IACtF,CAAC,WAAW,CAAC,qCAAqC,EAAE,6BAA6B,CAAC;IAClF,CAAC,WAAW,CAAC,6CAA6C,EAAE,+BAA+B,CAAC;IAC5F,CAAC,WAAW,CAAC,2CAA2C,EAAE,6BAA6B,CAAC;IACxF,CAAC,WAAW,CAAC,kCAAkC,EAAE,sBAAsB,CAAC;IACxE,CAAC,WAAW,CAAC,kCAAkC,EAAE,sBAAsB,CAAC;IACxE,CAAC,WAAW,CAAC,+BAA+B,EAAE,mBAAmB,CAAC;IAClE,CAAC,WAAW,CAAC,+BAA+B,EAAE,mBAAmB,CAAC;IAClE,CAAC,WAAW,CAAC,4BAA4B,EAAE,YAAY,CAAC;IACxD,CAAC,WAAW,CAAC,4BAA4B,EAAE,YAAY,CAAC;IACxD,CAAC,WAAW,CAAC,oCAAoC,EAAE,wBAAwB,CAAC;IAC5E,CAAC,WAAW,CAAC,oCAAoC,EAAE,wBAAwB,CAAC;IAC5E,CAAC,WAAW,CAAC,4BAA4B,EAAE,YAAY,CAAC;IACxD,CAAC,WAAW,CAAC,4BAA4B,EAAE,YAAY,CAAC;CACzD,CAAC,CAAC;AAEH,MAAM,UAAU,GAAgC,IAAI,GAAG,CAAC;IACtD,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC7B,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC;IAC/B,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC;IAC/B,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC;IAC/B,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;IACzB,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC;IACnC,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAgC,IAAI,GAAG,CAAC;IACvD,CAAC,eAAe,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClE,CAAC,eAAe,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClE,CAAC,eAAe,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClE,CAAC,eAAe,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;IAC5D,CAAC,eAAe,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;IAC5D,CAAC,eAAe,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;IAC5D,CAAC,eAAe,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACtD,CAAC,eAAe,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACtD,CAAC,eAAe,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACtD,CAAC,eAAe,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;IAC1D,CAAC,eAAe,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;IAC1D,CAAC,eAAe,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;CAC3D,CAAC,CAAC;AAEH,oBAAoB;AAEpB,SAAS,iBAAiB,CAAC,MAAgB;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAgB;IACtC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,kCAAkC;AAElC,MAAM,OAAO,aAAa;IACxB,KAAK,CAAC,OAAO,CACX,OAA0B,EAC1B,OAAwB;QAExB,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,OAAO,GAA0B;gBACrC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI;gBAC9C,kBAAkB,EAAE,CAAC,OAAO,CAAC,QAAQ;gBACrC,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,SAAS;aACtB,CAAC;YAEF,0BAA0B;YAC1B,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9E,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC1B,+DAA+D;gBAC9D,OAAmC,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;gBACpE,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBAChE,OAAO,CAAC,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAChE,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YACpD,CAAC;YAED,kEAAkE;YAClE,sCAAsC;YACtC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAoB,CAAC;YAChD,CAAC;YAED,UAAU;YACV,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;YAE5C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEpC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,KAAgD,CAAC;YAErD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM,CAAC,OAAO,EAAE,CAAC;wBACjB,MAAM,CAAC,IAAI,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;YAED,sBAAsB;YACtB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,GAAG,IAAI,CAAC;wBACf,IAAI,KAAK;4BAAE,YAAY,CAAC,KAAK,CAAC,CAAC;wBAC/B,MAAM,CAAC,OAAO,EAAE,CAAC;wBACjB,MAAM,CAAC,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC,CAAC;gBACF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC3B,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;gBAChC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAE/B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBAEnC,MAAM,cAAc,GAAsB;oBACxC,OAAO,EAAE,KAAK,IAAI,SAAS;oBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;oBACzC,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,SAAS;iBAClC,CAAC;gBAEF,MAAM,SAAS,GAAc,MAAM,CAAC,MAAM,CAAC,MAA2B,EAAE;oBACtE,cAAc;oBACd,UAAU;wBACR,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,CAAC;iBACF,CAAc,CAAC;gBAEhB,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAClC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,MAAM,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/tls/stealth/client-hello.d.ts

@@ -0,0 +1,38 @@
+/**
+ * ClientHello builder.
+ *
+ * Constructs a TLS ClientHello message byte-by-byte, giving full
+ * control over extension ordering, GREASE placement, cipher suite
+ * order, and every other field that contributes to the JA3 fingerprint.
+ *
+ * The output is a complete TLS record (record header + handshake
+ * header + ClientHello body) ready to send over a TCP socket.
+ */
+import type { BrowserProfile } from '../../fingerprints/types.js';
+export interface KeyShareEntry {
+    group: number;
+    publicKey: Buffer;
+    privateKey: Buffer;
+}
+/**
+ * Generate a key share for the given named group.
+ */
+export declare function generateKeyShare(group: number): KeyShareEntry;
+export interface ClientHelloResult {
+    /** Complete TLS record bytes to send. */
+    record: Buffer;
+    /** Generated key shares for use in key exchange. */
+    keyShares: KeyShareEntry[];
+    /** The client_random value (32 bytes). */
+    clientRandom: Buffer;
+    /** Session ID (may be empty or 32 bytes). */
+    sessionId: Buffer;
+    /** The raw ClientHello handshake message (without record header) for
+     *  transcript hashing. */
+    handshakeMessage: Buffer;
+}
+/**
+ * Build a complete ClientHello record from a browser profile.
+ */
+export declare function buildClientHello(profile: BrowserProfile, hostname: string): ClientHelloResult;
+//# sourceMappingURL=client-hello.d.ts.map

package/dist/tls/stealth/client-hello.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-hello.d.ts","sourceRoot":"","sources":["../../../src/tls/stealth/client-hello.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,6BAA6B,CAAC;AAWnF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAgC7D;AAsBD,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB;8BAC0B;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,MAAM,GACf,iBAAiB,CA+FnB"}

package/dist/tls/stealth/client-hello.js

@@ -0,0 +1,197 @@
+/**
+ * ClientHello builder.
+ *
+ * Constructs a TLS ClientHello message byte-by-byte, giving full
+ * control over extension ordering, GREASE placement, cipher suite
+ * order, and every other field that contributes to the JA3 fingerprint.
+ *
+ * The output is a complete TLS record (record header + handshake
+ * header + ClientHello body) ready to send over a TCP socket.
+ */
+import { randomBytes, createECDH, generateKeyPairSync } from 'node:crypto';
+import { BufferWriter } from '../../utils/buffer-writer.js';
+import { RecordType, HandshakeType, ExtensionType, GREASE_VALUES, NamedGroup, } from '../constants.js';
+// ---- GREASE ----
+/** Pick a random GREASE value. */
+function randomGrease() {
+    return GREASE_VALUES[Math.floor(Math.random() * GREASE_VALUES.length)];
+}
+/**
+ * Generate a key share for the given named group.
+ */
+export function generateKeyShare(group) {
+    switch (group) {
+        case NamedGroup.X25519: {
+            const kp = generateKeyPairSync('x25519');
+            const pub = kp.publicKey.export({ type: 'spki', format: 'der' });
+            const priv = kp.privateKey.export({ type: 'pkcs8', format: 'der' });
+            // X25519 public key is the last 32 bytes of the SPKI DER
+            const publicKey = Buffer.from(pub.subarray(pub.length - 32));
+            // X25519 private key is the last 32 bytes of the PKCS8 DER
+            const privateKey = Buffer.from(priv.subarray(priv.length - 32));
+            return { group, publicKey, privateKey };
+        }
+        case NamedGroup.SECP256R1:
+        case NamedGroup.SECP384R1:
+        case NamedGroup.SECP521R1: {
+            const curveName = group === NamedGroup.SECP256R1
+                ? 'prime256v1'
+                : group === NamedGroup.SECP384R1
+                    ? 'secp384r1'
+                    : 'secp521r1';
+            const ecdh = createECDH(curveName);
+            ecdh.generateKeys();
+            return {
+                group,
+                publicKey: Buffer.from(ecdh.getPublicKey()),
+                privateKey: Buffer.from(ecdh.getPrivateKey()),
+            };
+        }
+        default:
+            throw new Error(`Unsupported key share group: 0x${group.toString(16)}`);
+    }
+}
+// ---- Key share extension data builder ----
+function buildKeyShareExtensionData(keyShares) {
+    const w = new BufferWriter(256);
+    // client_shares length placeholder
+    const lenReserve = w.reserve(2);
+    const startPos = w.position;
+    for (const ks of keyShares) {
+        w.writeUInt16(ks.group);
+        w.writeUInt16(ks.publicKey.length);
+        w.writeBytes(ks.publicKey);
+    }
+    w.patchUInt16(lenReserve, w.position - startPos);
+    return w.toBuffer();
+}
+/**
+ * Build a complete ClientHello record from a browser profile.
+ */
+export function buildClientHello(profile, hostname) {
+    const tlsProfile = profile.tls;
+    // Generate cryptographic material
+    const clientRandom = randomBytes(32);
+    const sessionId = tlsProfile.randomSessionId ? randomBytes(32) : Buffer.alloc(0);
+    const keyShares = tlsProfile.keyShareGroups.map(generateKeyShare);
+    // Pick GREASE values (reuse same value per category for consistency)
+    const greaseCipher = tlsProfile.grease ? randomGrease() : 0;
+    const greaseExt = tlsProfile.grease ? randomGrease() : 0;
+    const greaseGroup = tlsProfile.grease ? randomGrease() : 0;
+    const greaseVersion = tlsProfile.grease ? randomGrease() : 0;
+    // ---- Build ClientHello body ----
+    const body = new BufferWriter(4096);
+    // client_version
+    body.writeUInt16(tlsProfile.clientVersion);
+    // random (32 bytes)
+    body.writeBytes(clientRandom);
+    // session_id
+    body.writeUInt8(sessionId.length);
+    if (sessionId.length > 0)
+        body.writeBytes(sessionId);
+    // cipher_suites
+    const ciphers = tlsProfile.grease
+        ? [greaseCipher, ...tlsProfile.cipherSuites]
+        : [...tlsProfile.cipherSuites];
+    body.writeUInt16(ciphers.length * 2);
+    for (const c of ciphers)
+        body.writeUInt16(c);
+    // compression_methods
+    body.writeUInt8(tlsProfile.compressionMethods.length);
+    for (const m of tlsProfile.compressionMethods)
+        body.writeUInt8(m);
+    // ---- Extensions ----
+    const extWriter = new BufferWriter(4096);
+    // If GREASE is enabled, prepend a GREASE extension
+    if (tlsProfile.grease) {
+        extWriter.writeUInt16(greaseExt);
+        extWriter.writeUInt16(1);
+        extWriter.writeUInt8(0);
+    }
+    // Write each extension from the profile in exact order
+    for (const extDef of tlsProfile.extensions) {
+        writeExtension(extWriter, extDef, hostname, keyShares, tlsProfile, {
+            greaseGroup,
+            greaseVersion,
+        });
+    }
+    // If GREASE is enabled, append a GREASE extension at end
+    if (tlsProfile.grease) {
+        const lastGrease = randomGrease();
+        extWriter.writeUInt16(lastGrease);
+        extWriter.writeUInt16(1);
+        extWriter.writeUInt8(0);
+    }
+    const extBytes = extWriter.toBuffer();
+    body.writeUInt16(extBytes.length);
+    body.writeBytes(extBytes);
+    const clientHelloBody = body.toBuffer();
+    // ---- Wrap in handshake header ----
+    const handshake = new BufferWriter(4 + clientHelloBody.length);
+    handshake.writeUInt8(HandshakeType.CLIENT_HELLO);
+    handshake.writeUInt24(clientHelloBody.length);
+    handshake.writeBytes(clientHelloBody);
+    const handshakeMessage = handshake.toBuffer();
+    // ---- Wrap in record ----
+    const record = new BufferWriter(5 + handshakeMessage.length);
+    record.writeUInt8(RecordType.HANDSHAKE);
+    record.writeUInt16(tlsProfile.recordVersion);
+    record.writeUInt16(handshakeMessage.length);
+    record.writeBytes(handshakeMessage);
+    return {
+        record: record.toBuffer(),
+        keyShares,
+        clientRandom,
+        sessionId,
+        handshakeMessage,
+    };
+}
+// ---- Extension writer ----
+function writeExtension(w, extDef, hostname, keyShares, tlsProfile, grease) {
+    // Special handling for key_share -- inject actual key material
+    if (extDef.type === ExtensionType.KEY_SHARE) {
+        const data = buildKeyShareExtensionData(keyShares);
+        w.writeUInt16(ExtensionType.KEY_SHARE);
+        w.writeUInt16(data.length);
+        w.writeBytes(data);
+        return;
+    }
+    // Special handling for supported_groups with GREASE
+    if (extDef.type === ExtensionType.SUPPORTED_GROUPS && tlsProfile.grease) {
+        const groups = [grease.greaseGroup, ...tlsProfile.supportedGroups];
+        const inner = new BufferWriter(2 + groups.length * 2);
+        inner.writeUInt16(groups.length * 2);
+        for (const g of groups)
+            inner.writeUInt16(g);
+        const data = inner.toBuffer();
+        w.writeUInt16(ExtensionType.SUPPORTED_GROUPS);
+        w.writeUInt16(data.length);
+        w.writeBytes(data);
+        return;
+    }
+    // Special handling for supported_versions with GREASE
+    if (extDef.type === ExtensionType.SUPPORTED_VERSIONS && tlsProfile.grease) {
+        const versions = [grease.greaseVersion, ...tlsProfile.supportedVersions];
+        const inner = new BufferWriter(1 + versions.length * 2);
+        inner.writeUInt8(versions.length * 2);
+        for (const v of versions)
+            inner.writeUInt16(v);
+        const data = inner.toBuffer();
+        w.writeUInt16(ExtensionType.SUPPORTED_VERSIONS);
+        w.writeUInt16(data.length);
+        w.writeBytes(data);
+        return;
+    }
+    // General case
+    w.writeUInt16(extDef.type);
+    if (extDef.data) {
+        const data = extDef.data(hostname);
+        w.writeUInt16(data.length);
+        if (data.length > 0)
+            w.writeBytes(data);
+    }
+    else {
+        w.writeUInt16(0);
+    }
+}
+//# sourceMappingURL=client-hello.js.map

package/dist/tls/stealth/client-hello.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-hello.js","sourceRoot":"","sources":["../../../src/tls/stealth/client-hello.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EACL,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,EACb,UAAU,GACX,MAAM,iBAAiB,CAAC;AAGzB,mBAAmB;AAEnB,kCAAkC;AAClC,SAAS,YAAY;IACnB,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAE,CAAC;AAC1E,CAAC;AAUD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,yDAAyD;YACzD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7D,2DAA2D;YAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;QACD,KAAK,UAAU,CAAC,SAAS,CAAC;QAC1B,KAAK,UAAU,CAAC,SAAS,CAAC;QAC1B,KAAK,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1B,MAAM,SAAS,GACb,KAAK,KAAK,UAAU,CAAC,SAAS;gBAC5B,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,SAAS;oBAC9B,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,WAAW,CAAC;YACpB,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;gBACL,KAAK;gBACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;aAC9C,CAAC;QACJ,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,6CAA6C;AAE7C,SAAS,0BAA0B,CAAC,SAA0B;IAC5D,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,mCAAmC;IACnC,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IAE5B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAkBD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAuB,EACvB,QAAgB;IAEhB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;IAE/B,kCAAkC;IAClC,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAElE,qEAAqE;IACrE,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7D,mCAAmC;IAEnC,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IAEpC,iBAAiB;IACjB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAE3C,oBAAoB;IACpB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAE9B,aAAa;IACb,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAErD,gBAAgB;IAChB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM;QAC/B,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAE7C,sBAAsB;IACtB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,kBAAkB;QAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAElE,uBAAuB;IAEvB,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IAEzC,mDAAmD;IACnD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACzB,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,uDAAuD;IACvD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC3C,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE;YACjE,WAAW;YACX,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;QAClC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAClC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACzB,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;IACtC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE1B,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAExC,qCAAqC;IAErC,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC/D,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IACjD,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACtC,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;IAE9C,2BAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAEpC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;QACzB,SAAS;QACT,YAAY;QACZ,SAAS;QACT,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,6BAA6B;AAE7B,SAAS,cAAc,CACrB,CAAe,EACf,MAAuB,EACvB,QAAgB,EAChB,SAA0B,EAC1B,UAA4D,EAC5D,MAAsD;IAEtD,+DAA+D;IAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,oDAAoD;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,gBAAgB,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC9C,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,sDAAsD;IACtD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,kBAAkB,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAChD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,eAAe;IACf,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/tls/stealth/engine.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Stealth TLS engine.
+ *
+ * Implements ITLSEngine using raw TCP sockets and manual TLS 1.3
+ * handshake construction.  This gives 100% control over the
+ * ClientHello bytes, enabling perfect JA3 fingerprint matching.
+ *
+ * After the handshake completes, wraps the raw socket in a Duplex
+ * stream that transparently encrypts/decrypts application data.
+ */
+import type { ITLSEngine, TLSConnectOptions, TLSSocket } from '../types.js';
+import type { BrowserProfile } from '../../fingerprints/types.js';
+export declare class StealthTLSEngine implements ITLSEngine {
+    connect(options: TLSConnectOptions, profile?: BrowserProfile): Promise<TLSSocket>;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/tls/stealth/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/tls/stealth/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAqB,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAyJlE,qBAAa,gBAAiB,YAAW,UAAU;IAC3C,OAAO,CACX,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC;CA2BtB"}