/**
 * TLS fingerprint spoofing — Chrome JA3 cipher suite ordering.
 *
 * Node.js TLS doesn't expose JA3 hash control directly, but ordering
 * cipher suites to match Chrome's TLS ClientHello reduces fingerprint
 * detectability vs the default OpenSSL order.
 *
 * For full JA3 bypass, pair with the browser-stealth engine (Camoufox).
 */
import { Agent as HttpsAgent } from 'node:https';
export declare const CHROME_CIPHERS: string;
export declare const CHROME_CURVES = "X25519:P-256:P-384";
export interface TlsFingerprintOptions {
    rejectUnauthorized?: boolean;
    keepAlive?: boolean;
    keepAliveMsecs?: number;
    maxSockets?: number;
}
/**
 * Returns an HTTPS agent configured with Chrome-like TLS settings.
 * Drop-in replacement for the default agent in fetch/got/axios.
 */
export declare function createChromeTlsAgent(opts?: TlsFingerprintOptions): HttpsAgent;
/**
 * Probe a host and return its JA3-relevant TLS parameters.
 * Useful for verifying that the fingerprint changed vs default.
 */
export declare function probeTlsFingerprint(host: string, port?: number): Promise<{
    protocol: string;
    cipher: string;
    authorized: boolean;
    subjectCN: string | null;
}>;
/**
 * Node.js fetch dispatcher options with Chrome TLS agent.
 * Pass as the `dispatcher` option to undici or as `agent` to node-fetch.
 */
export declare const chromeTlsAgent: HttpsAgent;
export declare const CHROME_TLS_HEADERS: {
    'Accept-Encoding': string;
    'Accept-Language': string;
    'sec-ch-ua': string;
    'sec-ch-ua-mobile': string;
    'sec-ch-ua-platform': string;
    'Sec-Fetch-Dest': string;
    'Sec-Fetch-Mode': string;
    'Sec-Fetch-Site': string;
    'Sec-Fetch-User': string;
    'Upgrade-Insecure-Requests': string;
};