nlcurl 0.6.0 → 0.8.0

package/dist/fingerprints/extensions.d.ts

@@ -1,143 +1,128 @@
 /**
- * Builds the SNI (Server Name Indication) extension payload for the given
- * hostname, encoded as a TLS `HostName` name list structure per RFC 6066.
+ * Build Server Name Indication extension data.
  *
- * @param {string} hostname - The ASCII server name to advertise.
- * @returns {Buffer} Encoded SNI extension data.
+ * @param {string} hostname - Target server hostname.
+ * @returns {Buffer} Encoded SNI extension payload.
  */
 export declare function sniData(hostname: string): Buffer;
 /**
- * Builds the `supported_versions` extension payload listing the given TLS
- * version codes in the order provided.
+ * Build supported_versions extension data.
  *
- * @param {number[]} versions - Ordered TLS version codes (e.g. `[0x0304, 0x0303]`).
- * @returns {Buffer} Encoded supported_versions extension data.
+ * @param {number[]} versions - TLS version code points.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function supportedVersionsData(versions: number[]): Buffer;
 /**
- * Builds the `supported_groups` extension payload listing the given named
- * group codes (elliptic curves and finite-field groups).
+ * Build supported_groups (named curves) extension data.
  *
- * @param {number[]} groups - Ordered named group codes (e.g. `[0x001d, 0x0017]`).
- * @returns {Buffer} Encoded supported_groups extension data.
+ * @param {number[]} groups - Named group code points.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function supportedGroupsData(groups: number[]): Buffer;
 /**
- * Builds the `ec_point_formats` extension payload specifying the supported
- * EC point encoding formats.
+ * Build ec_point_formats extension data.
  *
- * @param {number[]} formats - EC point format codes (e.g. `[0]` for uncompressed).
- * @returns {Buffer} Encoded ec_point_formats extension data.
+ * @param {number[]} formats - EC point format identifiers.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function ecPointFormatsData(formats: number[]): Buffer;
 /**
- * Builds the `signature_algorithms` extension payload listing the supported
- * signature scheme codes in the order provided.
+ * Build signature_algorithms extension data.
  *
- * @param {number[]} algs - Ordered signature scheme codes (e.g. `[0x0403, 0x0804]`).
- * @returns {Buffer} Encoded signature_algorithms extension data.
+ * @param {number[]} algs - Signature algorithm code points.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function signatureAlgorithmsData(algs: number[]): Buffer;
 /**
- * Builds the ALPN (Application-Layer Protocol Negotiation) extension payload
- * advertising the given protocol name strings in preference order.
+ * Build Application-Layer Protocol Negotiation extension data.
  *
- * @param {string[]} protocols - Protocol names in preference order (e.g. `['h2', 'http/1.1']`).
- * @returns {Buffer} Encoded ALPN extension data.
+ * @param {string[]} protocols - ALPN protocol identifier strings.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function alpnData(protocols: string[]): Buffer;
 /**
- * Builds the `compress_certificate` extension payload listing the supported
- * certificate compression algorithm codes (RFC 8879).
+ * Build compress_certificate extension data.
  *
- * @param {number[]} algorithms - Compression algorithm codes (e.g. `[2]` for brotli).
- * @returns {Buffer} Encoded compress_certificate extension data.
+ * @param {number[]} algorithms - Certificate compression algorithm identifiers.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function compressCertData(algorithms: number[]): Buffer;
 /**
- * Builds the `psk_key_exchange_modes` extension payload specifying the
- * supported PSK key exchange mode codes.
+ * Build psk_key_exchange_modes extension data.
  *
- * @param {number[]} modes - PSK key exchange mode codes (e.g. `[1]` for psk_dhe_ke).
- * @returns {Buffer} Encoded psk_key_exchange_modes extension data.
+ * @param {number[]} modes - PSK key exchange mode identifiers.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function pskKeyExchangeModesData(modes: number[]): Buffer;
 /**
- * Returns an empty buffer as a placeholder for the `key_share` extension.
- * The actual key share data is computed and injected at ClientHello build time
- * by the handshake engine, which needs the private keys to complete the DH.
+ * Build a key_share extension placeholder (populated later during handshake).
  *
- * @param {number[]} groups - Named group codes for which key shares will be generated.
- * @returns {Buffer} Empty placeholder buffer.
+ * @param {number[]} groups - Named groups to reserve key share entries for.
+ * @returns {Buffer} Empty buffer placeholder.
  */
-export declare function keySharePlaceholder(groups: number[]): Buffer;
+export declare function keySharePlaceholder(_groups: number[]): Buffer;
 /**
- * Builds the `status_request` extension payload requesting OCSP stapling
- * from the server (RFC 6066 §8).
+ * Build status_request (OCSP stapling) extension data.
  *
- * @returns {Buffer} Encoded status_request extension data.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function statusRequestData(): Buffer;
 /**
- * Returns an empty buffer for the `session_ticket` extension, signalling
- * that the client supports TLS session tickets but has none to present.
+ * Build an empty session_ticket extension.
  *
- * @returns {Buffer} Empty session_ticket extension payload.
+ * @returns {Buffer} Empty buffer for session ticket extension.
  */
 export declare function sessionTicketData(): Buffer;
 /**
- * Returns an empty buffer for the `extended_master_secret` extension (RFC 7627),
- * which signals support for the extended master secret computation.
+ * Build an empty extended_master_secret extension.
  *
- * @returns {Buffer} Empty extended_master_secret extension payload.
+ * @returns {Buffer} Empty buffer signaling extended master secret support.
  */
 export declare function extendedMasterSecretData(): Buffer;
 /**
- * Builds the `renegotiation_info` extension payload with an empty renegotiated
- * connection field, indicating that this is an initial TLS handshake (RFC 5746).
+ * Build renegotiation_info extension data.
  *
- * @returns {Buffer} Encoded renegotiation_info extension data (`[0x00]`).
+ * @returns {Buffer} Encoded renegotiation info with zero-length field.
  */
 export declare function renegotiationInfoData(): Buffer;
 /**
- * Returns an empty buffer for the `signed_certificate_timestamp` extension
- * (RFC 6962), signalling SCT support without providing any timestamps.
+ * Build an empty signed_certificate_timestamp extension.
  *
- * @returns {Buffer} Empty SCT extension payload.
+ * @returns {Buffer} Empty buffer requesting SCT data.
  */
 export declare function sctData(): Buffer;
 /**
- * Builds the `record_size_limit` extension payload (RFC 8449) specifying the
- * maximum plaintext record size the client is willing to receive.
+ * Build record_size_limit extension data.
  *
- * @param {number} limit - Maximum record size in bytes (typically 16384 for browsers).
- * @returns {Buffer} Encoded record_size_limit extension data.
+ * @param {number} limit - Maximum record fragment size.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function recordSizeLimitData(limit: number): Buffer;
 /**
- * Builds the `delegated_credentials` extension payload (RFC 9345) listing
- * the signature algorithms acceptable for use with delegated credentials.
+ * Build delegated_credentials extension data.
  *
- * @param {number[]} sigAlgs - Signature algorithm codes acceptable for delegated credentials.
- * @returns {Buffer} Encoded delegated_credentials extension data.
+ * @param {number[]} sigAlgs - Signature algorithm code points accepted for delegated credentials.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function delegatedCredentialsData(sigAlgs: number[]): Buffer;
 /**
- * Builds the `application_settings` (ALPS) extension payload for the given
- * protocol names, a Chrome-specific extension that negotiates application-level
- * settings over TLS.
+ * Build application_settings (ALPS) extension data.
  *
- * @param {string[]} protocols - ALPN protocol names to include in the ALPS extension.
- * @returns {Buffer} Encoded application_settings extension data.
+ * @param {string[]} protocols - Protocol identifier strings for application settings.
+ * @returns {Buffer} Encoded extension payload.
  */
 export declare function applicationSettingsData(protocols: string[]): Buffer;
 /**
- * Builds a synthetic Encrypted Client Hello (ECH) GREASE extension payload
- * (draft-ietf-tls-esni). This does not perform real ECH; it emits a
- * deterministic fake payload that matches the extension structure browsers send
- * when the server does not advertise real ECH support.
+ * Build an Encrypted Client Hello GREASE extension.
  *
- * @returns {Buffer} Encoded ECH GREASE extension data.
+ * @returns {Buffer} Deterministic ECH GREASE payload for fingerprint consistency.
  */
 export declare function echGreaseData(): Buffer;
+/**
+ * Build a padding extension of the specified length.
+ *
+ * @param {number} paddingLength - Number of zero bytes to include.
+ * @returns {Buffer} Zero-filled buffer of the requested length.
+ */
+export declare function paddingData(paddingLength: number): Buffer;
 //# sourceMappingURL=extensions.d.ts.map

package/dist/fingerprints/extensions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../../src/fingerprints/extensions.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAShD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAKhE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAK5D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAK5D;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAK9D;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAcpD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAK7D;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAK/D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAM1C;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAKlE;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAcnE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAgBtC"}
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../../src/fingerprints/extensions.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAShD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAKhE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAK5D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAK5D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAK9D;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAcpD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAK7D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAK/D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAM1C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED;;;;GAIG;AACH,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAKlE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAcnE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAgBtC;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEzD"}

package/dist/fingerprints/extensions.js

@@ -1,10 +1,9 @@
 import { BufferWriter } from "../utils/buffer-writer.js";
 /**
- * Builds the SNI (Server Name Indication) extension payload for the given
- * hostname, encoded as a TLS `HostName` name list structure per RFC 6066.
+ * Build Server Name Indication extension data.
  *
- * @param {string} hostname - The ASCII server name to advertise.
- * @returns {Buffer} Encoded SNI extension data.
+ * @param {string} hostname - Target server hostname.
+ * @returns {Buffer} Encoded SNI extension payload.
  */
 export function sniData(hostname) {
     const host = Buffer.from(hostname, "ascii");
@@ -17,11 +16,10 @@ export function sniData(hostname) {
     return w.toBuffer();
 }
 /**
- * Builds the `supported_versions` extension payload listing the given TLS
- * version codes in the order provided.
+ * Build supported_versions extension data.
  *
- * @param {number[]} versions - Ordered TLS version codes (e.g. `[0x0304, 0x0303]`).
- * @returns {Buffer} Encoded supported_versions extension data.
+ * @param {number[]} versions - TLS version code points.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function supportedVersionsData(versions) {
     const w = new BufferWriter(1 + versions.length * 2);
@@ -31,11 +29,10 @@ export function supportedVersionsData(versions) {
     return w.toBuffer();
 }
 /**
- * Builds the `supported_groups` extension payload listing the given named
- * group codes (elliptic curves and finite-field groups).
+ * Build supported_groups (named curves) extension data.
  *
- * @param {number[]} groups - Ordered named group codes (e.g. `[0x001d, 0x0017]`).
- * @returns {Buffer} Encoded supported_groups extension data.
+ * @param {number[]} groups - Named group code points.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function supportedGroupsData(groups) {
     const w = new BufferWriter(2 + groups.length * 2);
@@ -45,11 +42,10 @@ export function supportedGroupsData(groups) {
     return w.toBuffer();
 }
 /**
- * Builds the `ec_point_formats` extension payload specifying the supported
- * EC point encoding formats.
+ * Build ec_point_formats extension data.
  *
- * @param {number[]} formats - EC point format codes (e.g. `[0]` for uncompressed).
- * @returns {Buffer} Encoded ec_point_formats extension data.
+ * @param {number[]} formats - EC point format identifiers.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function ecPointFormatsData(formats) {
     const w = new BufferWriter(1 + formats.length);
@@ -59,11 +55,10 @@ export function ecPointFormatsData(formats) {
     return w.toBuffer();
 }
 /**
- * Builds the `signature_algorithms` extension payload listing the supported
- * signature scheme codes in the order provided.
+ * Build signature_algorithms extension data.
  *
- * @param {number[]} algs - Ordered signature scheme codes (e.g. `[0x0403, 0x0804]`).
- * @returns {Buffer} Encoded signature_algorithms extension data.
+ * @param {number[]} algs - Signature algorithm code points.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function signatureAlgorithmsData(algs) {
     const w = new BufferWriter(2 + algs.length * 2);
@@ -73,11 +68,10 @@ export function signatureAlgorithmsData(algs) {
     return w.toBuffer();
 }
 /**
- * Builds the ALPN (Application-Layer Protocol Negotiation) extension payload
- * advertising the given protocol name strings in preference order.
+ * Build Application-Layer Protocol Negotiation extension data.
  *
- * @param {string[]} protocols - Protocol names in preference order (e.g. `['h2', 'http/1.1']`).
- * @returns {Buffer} Encoded ALPN extension data.
+ * @param {string[]} protocols - ALPN protocol identifier strings.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function alpnData(protocols) {
     let totalLen = 0;
@@ -95,11 +89,10 @@ export function alpnData(protocols) {
     return w.toBuffer();
 }
 /**
- * Builds the `compress_certificate` extension payload listing the supported
- * certificate compression algorithm codes (RFC 8879).
+ * Build compress_certificate extension data.
  *
- * @param {number[]} algorithms - Compression algorithm codes (e.g. `[2]` for brotli).
- * @returns {Buffer} Encoded compress_certificate extension data.
+ * @param {number[]} algorithms - Certificate compression algorithm identifiers.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function compressCertData(algorithms) {
     const w = new BufferWriter(1 + algorithms.length * 2);
@@ -109,11 +102,10 @@ export function compressCertData(algorithms) {
     return w.toBuffer();
 }
 /**
- * Builds the `psk_key_exchange_modes` extension payload specifying the
- * supported PSK key exchange mode codes.
+ * Build psk_key_exchange_modes extension data.
  *
- * @param {number[]} modes - PSK key exchange mode codes (e.g. `[1]` for psk_dhe_ke).
- * @returns {Buffer} Encoded psk_key_exchange_modes extension data.
+ * @param {number[]} modes - PSK key exchange mode identifiers.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function pskKeyExchangeModesData(modes) {
     const w = new BufferWriter(1 + modes.length);
@@ -123,21 +115,18 @@ export function pskKeyExchangeModesData(modes) {
     return w.toBuffer();
 }
 /**
- * Returns an empty buffer as a placeholder for the `key_share` extension.
- * The actual key share data is computed and injected at ClientHello build time
- * by the handshake engine, which needs the private keys to complete the DH.
+ * Build a key_share extension placeholder (populated later during handshake).
  *
- * @param {number[]} groups - Named group codes for which key shares will be generated.
- * @returns {Buffer} Empty placeholder buffer.
+ * @param {number[]} groups - Named groups to reserve key share entries for.
+ * @returns {Buffer} Empty buffer placeholder.
  */
-export function keySharePlaceholder(groups) {
+export function keySharePlaceholder(_groups) {
     return Buffer.alloc(0);
 }
 /**
- * Builds the `status_request` extension payload requesting OCSP stapling
- * from the server (RFC 6066 §8).
+ * Build status_request (OCSP stapling) extension data.
  *
- * @returns {Buffer} Encoded status_request extension data.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function statusRequestData() {
     const w = new BufferWriter(5);
@@ -147,47 +136,42 @@ export function statusRequestData() {
     return w.toBuffer();
 }
 /**
- * Returns an empty buffer for the `session_ticket` extension, signalling
- * that the client supports TLS session tickets but has none to present.
+ * Build an empty session_ticket extension.
  *
- * @returns {Buffer} Empty session_ticket extension payload.
+ * @returns {Buffer} Empty buffer for session ticket extension.
  */
 export function sessionTicketData() {
     return Buffer.alloc(0);
 }
 /**
- * Returns an empty buffer for the `extended_master_secret` extension (RFC 7627),
- * which signals support for the extended master secret computation.
+ * Build an empty extended_master_secret extension.
  *
- * @returns {Buffer} Empty extended_master_secret extension payload.
+ * @returns {Buffer} Empty buffer signaling extended master secret support.
  */
 export function extendedMasterSecretData() {
     return Buffer.alloc(0);
 }
 /**
- * Builds the `renegotiation_info` extension payload with an empty renegotiated
- * connection field, indicating that this is an initial TLS handshake (RFC 5746).
+ * Build renegotiation_info extension data.
  *
- * @returns {Buffer} Encoded renegotiation_info extension data (`[0x00]`).
+ * @returns {Buffer} Encoded renegotiation info with zero-length field.
  */
 export function renegotiationInfoData() {
     return Buffer.from([0]);
 }
 /**
- * Returns an empty buffer for the `signed_certificate_timestamp` extension
- * (RFC 6962), signalling SCT support without providing any timestamps.
+ * Build an empty signed_certificate_timestamp extension.
  *
- * @returns {Buffer} Empty SCT extension payload.
+ * @returns {Buffer} Empty buffer requesting SCT data.
  */
 export function sctData() {
     return Buffer.alloc(0);
 }
 /**
- * Builds the `record_size_limit` extension payload (RFC 8449) specifying the
- * maximum plaintext record size the client is willing to receive.
+ * Build record_size_limit extension data.
  *
- * @param {number} limit - Maximum record size in bytes (typically 16384 for browsers).
- * @returns {Buffer} Encoded record_size_limit extension data.
+ * @param {number} limit - Maximum record fragment size.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function recordSizeLimitData(limit) {
     const w = new BufferWriter(2);
@@ -195,11 +179,10 @@ export function recordSizeLimitData(limit) {
     return w.toBuffer();
 }
 /**
- * Builds the `delegated_credentials` extension payload (RFC 9345) listing
- * the signature algorithms acceptable for use with delegated credentials.
+ * Build delegated_credentials extension data.
  *
- * @param {number[]} sigAlgs - Signature algorithm codes acceptable for delegated credentials.
- * @returns {Buffer} Encoded delegated_credentials extension data.
+ * @param {number[]} sigAlgs - Signature algorithm code points accepted for delegated credentials.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function delegatedCredentialsData(sigAlgs) {
     const w = new BufferWriter(2 + sigAlgs.length * 2);
@@ -209,12 +192,10 @@ export function delegatedCredentialsData(sigAlgs) {
     return w.toBuffer();
 }
 /**
- * Builds the `application_settings` (ALPS) extension payload for the given
- * protocol names, a Chrome-specific extension that negotiates application-level
- * settings over TLS.
+ * Build application_settings (ALPS) extension data.
  *
- * @param {string[]} protocols - ALPN protocol names to include in the ALPS extension.
- * @returns {Buffer} Encoded application_settings extension data.
+ * @param {string[]} protocols - Protocol identifier strings for application settings.
+ * @returns {Buffer} Encoded extension payload.
  */
 export function applicationSettingsData(protocols) {
     let totalLen = 0;
@@ -232,12 +213,9 @@ export function applicationSettingsData(protocols) {
     return w.toBuffer();
 }
 /**
- * Builds a synthetic Encrypted Client Hello (ECH) GREASE extension payload
- * (draft-ietf-tls-esni). This does not perform real ECH; it emits a
- * deterministic fake payload that matches the extension structure browsers send
- * when the server does not advertise real ECH support.
+ * Build an Encrypted Client Hello GREASE extension.
  *
- * @returns {Buffer} Encoded ECH GREASE extension data.
+ * @returns {Buffer} Deterministic ECH GREASE payload for fingerprint consistency.
  */
 export function echGreaseData() {
     const w = new BufferWriter(8 + 32);
@@ -258,4 +236,13 @@ export function echGreaseData() {
     w.writeBytes(payload);
     return w.toBuffer();
 }
+/**
+ * Build a padding extension of the specified length.
+ *
+ * @param {number} paddingLength - Number of zero bytes to include.
+ * @returns {Buffer} Zero-filled buffer of the requested length.
+ */
+export function paddingData(paddingLength) {
+    return Buffer.alloc(Math.max(0, paddingLength));
+}
 //# sourceMappingURL=extensions.js.map

package/dist/fingerprints/extensions.js.map

@@ -1 +1 @@
-{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../../src/fingerprints/extensions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGzD;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAkB;IACtD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAgB;IAClD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAiB;IAClD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,SAAmB;IAC1C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAoB;IACnD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAe;IACrD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAgB;IAClD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACjB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAiB;IACxD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAmB;IACzD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1D,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/D,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../../src/fingerprints/extensions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAkB;IACtD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAgB;IAClD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAiB;IAClD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,SAAmB;IAC1C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAoB;IACnD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAe;IACrD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAiB;IACnD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACjB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAiB;IACxD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAmB;IACzD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1D,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/D,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,aAAqB;IAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/fingerprints/ja3.d.ts

@@ -1,48 +1,30 @@
 import type { TLSProfile } from "./types.js";
 /**
- * Computes the JA3 string representation of a TLS profile. The string is a
- * comma-separated tuple of `version`, cipher codes, extension type codes,
- * supported-group codes, and EC point format codes, all encoded as
- * dash-separated decimal lists (GREASE values filtered out).
+ * Generate a JA3 fingerprint string from a TLS profile.
  *
- * @param {TLSProfile} profile - The TLS profile to fingerprint.
- * @returns {string} The JA3 fingerprint string.
- *
- * @example
- * const str = ja3String(chromeLatest.tls);
- * // => "771,4865-4866-...,0-23-...,29-23-24,0"
+ * @param {TLSProfile} profile - TLS profile to fingerprint.
+ * @returns {string} Comma-separated JA3 string of version, ciphers, extensions, groups, and point formats.
  */
 export declare function ja3String(profile: TLSProfile): string;
 /**
- * Computes the MD5 hash of the JA3 string for the given TLS profile.
- * The resulting 32-character hex digest is the canonical JA3 fingerprint
- * used in network monitoring and fingerprinting detection.
- *
- * @param {TLSProfile} profile - The TLS profile to fingerprint.
- * @returns {string} The 32-character lowercase hex JA3 MD5 hash.
+ * Compute the MD5 hash of the JA3 fingerprint string.
  *
- * @example
- * const hash = ja3Hash(chromeLatest.tls);
- * // => "cd08e31494f9531f560d64c695473da9"
+ * @param {TLSProfile} profile - TLS profile to fingerprint.
+ * @returns {string} Hex-encoded MD5 digest.
  */
 export declare function ja3Hash(profile: TLSProfile): string;
 /**
- * Computes the JA3N (normalised) string for a TLS profile. Unlike
- * {@link ja3String}, all numeric lists are sorted before joining, which
- * makes the fingerprint order-independent and useful for comparing profiles
- * that advertise the same capabilities in different orders.
+ * Generate a normalized JA3 fingerprint string with sorted components.
  *
- * @param {TLSProfile} profile - The TLS profile to fingerprint.
- * @returns {string} The JA3N fingerprint string with sorted field lists.
+ * @param {TLSProfile} profile - TLS profile to fingerprint.
+ * @returns {string} Comma-separated JA3n string with sorted ciphers, extensions, and groups.
  */
 export declare function ja3nString(profile: TLSProfile): string;
 /**
- * Computes the MD5 hash of the JA3N (normalised) string for the given TLS
- * profile. JA3N hashes are order-independent, making them suitable for
- * grouping profiles by capability set regardless of advertisement order.
+ * Compute the MD5 hash of the normalized JA3 fingerprint string.
  *
- * @param {TLSProfile} profile - The TLS profile to fingerprint.
- * @returns {string} The 32-character lowercase hex JA3N MD5 hash.
+ * @param {TLSProfile} profile - TLS profile to fingerprint.
+ * @returns {string} Hex-encoded MD5 digest.
  */
 export declare function ja3nHash(profile: TLSProfile): string;
 //# sourceMappingURL=ja3.d.ts.map

package/dist/fingerprints/ja3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ja3.d.ts","sourceRoot":"","sources":["../../src/fingerprints/ja3.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAY7C;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAQrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAEnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CActD;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAEpD"}
+{"version":3,"file":"ja3.d.ts","sourceRoot":"","sources":["../../src/fingerprints/ja3.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAY7C;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAQrD;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAEnD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CActD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAEpD"}

package/dist/fingerprints/ja3.js

@@ -8,17 +8,10 @@ function filterGrease(values) {
     return values.filter((v) => !isGrease(v));
 }
 /**
- * Computes the JA3 string representation of a TLS profile. The string is a
- * comma-separated tuple of `version`, cipher codes, extension type codes,
- * supported-group codes, and EC point format codes, all encoded as
- * dash-separated decimal lists (GREASE values filtered out).
+ * Generate a JA3 fingerprint string from a TLS profile.
  *
- * @param {TLSProfile} profile - The TLS profile to fingerprint.
- * @returns {string} The JA3 fingerprint string.
- *
- * @example
- * const str = ja3String(chromeLatest.tls);
- * // => "771,4865-4866-...,0-23-...,29-23-24,0"
+ * @param {TLSProfile} profile - TLS profile to fingerprint.
+ * @returns {string} Comma-separated JA3 string of version, ciphers, extensions, groups, and point formats.
  */
 export function ja3String(profile) {
     const version = profile.clientVersion;
@@ -29,28 +22,19 @@ export function ja3String(profile) {
     return `${version},${ciphers},${extensions},${groups},${formats}`;
 }
 /**
- * Computes the MD5 hash of the JA3 string for the given TLS profile.
- * The resulting 32-character hex digest is the canonical JA3 fingerprint
- * used in network monitoring and fingerprinting detection.
- *
- * @param {TLSProfile} profile - The TLS profile to fingerprint.
- * @returns {string} The 32-character lowercase hex JA3 MD5 hash.
+ * Compute the MD5 hash of the JA3 fingerprint string.
  *
- * @example
- * const hash = ja3Hash(chromeLatest.tls);
- * // => "cd08e31494f9531f560d64c695473da9"
+ * @param {TLSProfile} profile - TLS profile to fingerprint.
+ * @returns {string} Hex-encoded MD5 digest.
  */
 export function ja3Hash(profile) {
     return createHash("md5").update(ja3String(profile)).digest("hex");
 }
 /**
- * Computes the JA3N (normalised) string for a TLS profile. Unlike
- * {@link ja3String}, all numeric lists are sorted before joining, which
- * makes the fingerprint order-independent and useful for comparing profiles
- * that advertise the same capabilities in different orders.
+ * Generate a normalized JA3 fingerprint string with sorted components.
  *
- * @param {TLSProfile} profile - The TLS profile to fingerprint.
- * @returns {string} The JA3N fingerprint string with sorted field lists.
+ * @param {TLSProfile} profile - TLS profile to fingerprint.
+ * @returns {string} Comma-separated JA3n string with sorted ciphers, extensions, and groups.
  */
 export function ja3nString(profile) {
     const version = profile.clientVersion;
@@ -67,12 +51,10 @@ export function ja3nString(profile) {
     return `${version},${ciphers},${extensions},${groups},${formats}`;
 }
 /**
- * Computes the MD5 hash of the JA3N (normalised) string for the given TLS
- * profile. JA3N hashes are order-independent, making them suitable for
- * grouping profiles by capability set regardless of advertisement order.
+ * Compute the MD5 hash of the normalized JA3 fingerprint string.
  *
- * @param {TLSProfile} profile - The TLS profile to fingerprint.
- * @returns {string} The 32-character lowercase hex JA3N MD5 hash.
+ * @param {TLSProfile} profile - TLS profile to fingerprint.
+ * @returns {string} Hex-encoded MD5 digest.
  */
 export function ja3nHash(profile) {
     return createHash("md5").update(ja3nString(profile)).digest("hex");