fix: send tls_info.alpn, align signed-agent directories, document trustedJA4Headers - #53
Merged
Merged
Conversation
…stedJA4Headers - tls_info.alpn_protocols was ignored by the detection service, which reads alpn. Add alpn; the old name is deprecated and sent as alpn. - DEFAULT_SIGNED_AGENT_DIRECTORIES dropped operator.openai.com (no longer resolves) and now matches the platform's list: ChatGPT, Google Agent and WebDecoyBot. - trustedJA4Headers is documented as it behaves: the JA4 is read but the built-in table is empty, so it does not change the score. - README: await captcha.verifyToken().
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Found while auditing the public docs against the code.
tls_info.alpnand ignoredalpn_protocols, the name the SDK documented. The SDK now hasalpn. The old name is deprecated and still accepted, and is sent on the wire asalpn. A new test (tls-info-wire.test.ts) pins the field name.operator.openai.com, which no longer resolves. The default list now matches the platform's: ChatGPT, Google Agent and WebDecoyBot. The docs examples now spread...DEFAULT_SIGNED_AGENT_DIRECTORIES, because passingdirectoriesreplaces the defaults.trustedJA4Headers: documented as it actually behaves. The JA4 is read, but the built-in table is empty, so it doesn't change the score. A test fails if that changes without the docs being updated. The README's TLS wording is also corrected.await captcha.verifyToken().Build 8/8, tests 9/9 tasks (@webdecoy/node 495 tests), lint, typecheck and edge check all pass. The CHANGELOG has an Unreleased entry.