@apmantza/greedysearch-pi 2.1.4 → 2.1.5

package/extractors/common.mjs

@@ -129,7 +129,18 @@ export async function getOrOpenTab(tabPrefix) {
 		"Target.createTarget",
 		'{"url":"about:blank"}',
 	]);
-	const { targetId } = JSON.parse(raw);
+	let createdTarget;
+	try {
+		createdTarget = JSON.parse(raw);
+	} catch (error) {
+		throw new Error(
+			`Target.createTarget returned invalid JSON: ${error.message}`,
+		);
+	}
+	const { targetId } = createdTarget;
+	if (!targetId) {
+		throw new Error("Target.createTarget did not return a targetId");
+	}
 	await cdp(["list"]); // refresh cache
 	const tid = targetId.slice(0, 8);
 	// Inject stealth patches for anti-detection coverage (both headless + visible).
@@ -221,40 +232,62 @@ export async function injectHeadlessStealth(tab) {
   try { delete window._phantom; } catch(_) {}
   try { delete window.Buffer; } catch(_) {}
 
-  // Real Chrome without automation does not expose a useful webdriver value.
-  // A literal false value is itself a common stealth tell; prefer undefined and
-  // make the descriptor configurable like native browser properties.
-  Object.defineProperty(navigator, 'webdriver', { get: () => undefined, configurable: true });
+  // Real Chrome without automation should not expose navigator.webdriver at all.
+  // A literal false or an own-property getter returning undefined is itself a
+  // common stealth tell; remove both instance and prototype properties when the
+  // descriptor is configurable (as it is with --disable-blink-features).
+  try { delete navigator.webdriver; } catch(_) {}
+  try { delete Navigator.prototype.webdriver; } catch(_) {}
   Object.defineProperty(navigator, 'vendor', { get: () => 'Google Inc.', configurable: true });
   Object.defineProperty(navigator, 'platform', { get: () => 'Win32', configurable: true });
   Object.defineProperty(navigator, 'maxTouchPoints', { get: () => 0, configurable: true });
   Object.defineProperty(navigator, 'pdfViewerEnabled', { get: () => true, configurable: true });
+  Object.defineProperty(navigator, 'productSub', { get: () => '20030107', configurable: true });
+  Object.defineProperty(navigator, 'product', { get: () => 'Gecko', configurable: true });
+  var __greedyMimeTypes = null;
+  function __makeMimeTypes() {
+    var pdf = { type: 'application/pdf', suffixes: 'pdf', description: 'Portable Document Format', enabledPlugin: null };
+    var textPdf = { type: 'text/pdf', suffixes: 'pdf', description: 'Portable Document Format', enabledPlugin: null };
+    try { Object.setPrototypeOf(pdf, MimeType.prototype); } catch(_) {}
+    try { Object.setPrototypeOf(textPdf, MimeType.prototype); } catch(_) {}
+    var m = [pdf, textPdf];
+    try { Object.setPrototypeOf(m, MimeTypeArray.prototype); } catch(_) {}
+    m.item = function item(i) { return this[i] || null; };
+    m.namedItem = function namedItem(name) { return Array.prototype.find.call(this, function(x) { return x && x.type === name; }) || null; };
+    return m;
+  }
   Object.defineProperty(navigator, 'plugins', {
     get: () => {
-      var p = [
-        { name: 'Chrome PDF Plugin', filename: 'internal-pdf-viewer', description: 'Portable Document Format' },
-        { name: 'Chrome PDF Viewer', filename: 'mhjfbmdgcfjbbpaeojofohoefgiehjai', description: '' },
-        { name: 'Native Client', filename: 'internal-nacl-plugin', description: '' },
-      ];
-      p.length = 3;
+      __greedyMimeTypes = __greedyMimeTypes || __makeMimeTypes();
+      var plugin0 = { name: 'Chrome PDF Plugin', filename: 'internal-pdf-viewer', description: 'Portable Document Format' };
+      var plugin1 = { name: 'Chrome PDF Viewer', filename: 'mhjfbmdgcfjbbpaeojofohoefgiehjai', description: '' };
+      var plugin2 = { name: 'Native Client', filename: 'internal-nacl-plugin', description: '' };
+      try { Object.setPrototypeOf(plugin0, Plugin.prototype); } catch(_) {}
+      try { Object.setPrototypeOf(plugin1, Plugin.prototype); } catch(_) {}
+      try { Object.setPrototypeOf(plugin2, Plugin.prototype); } catch(_) {}
+      var p = [plugin0, plugin1, plugin2];
+      p.item = function item(i) { return this[i] || null; };
+      p.namedItem = function namedItem(name) { return Array.prototype.find.call(this, function(x) { return x && x.name === name; }) || null; };
+      p.refresh = function refresh() {};
+      try { Object.setPrototypeOf(p, PluginArray.prototype); } catch(_) {}
+      try {
+        __greedyMimeTypes[0].enabledPlugin = p[0];
+        __greedyMimeTypes[1].enabledPlugin = p[0];
+      } catch(_) {}
       return p;
     },
+    configurable: true,
   });
   Object.defineProperty(navigator, 'mimeTypes', {
     get: () => {
-      var m = [
-        { type: 'application/pdf', suffixes: 'pdf', description: 'Portable Document Format', enabledPlugin: null },
-        { type: 'text/pdf', suffixes: 'pdf', description: 'Portable Document Format', enabledPlugin: null },
-      ];
-      m.item = function(i) { return m[i] || null; };
-      m.namedItem = function(name) { return m.find(function(x) { return x.type === name; }) || null; };
-      return m;
+      __greedyMimeTypes = __greedyMimeTypes || __makeMimeTypes();
+      return __greedyMimeTypes;
     },
     configurable: true,
   });
   Object.defineProperty(navigator, 'languages', { get: () => ['en-US', 'en'], configurable: true });
   try {
-    Object.defineProperty(navigator, 'connection', { get: () => ({ effectiveType: '4g', rtt: 50, downlink: 10, saveData: false }), configurable: true });
+    Object.defineProperty(navigator, 'connection', { get: () => ({ effectiveType: '4g', rtt: 50, downlink: 10, downlinkMax: Infinity, saveData: false }), configurable: true });
   } catch(_) {}
   if (!navigator.mediaDevices) {
     Object.defineProperty(navigator, 'mediaDevices', {
@@ -270,6 +303,18 @@ export async function injectHeadlessStealth(tab) {
       configurable: true,
     });
   }
+  // ── Missing platform APIs (headless often lacks these) ─
+  try {
+    if (!navigator.share) {
+      navigator.share = function() { return Promise.reject(new Error('NotAllowedError')); };
+    }
+  } catch(_) {}
+  try {
+    if (!navigator.contentIndex) {
+      Object.defineProperty(navigator, 'contentIndex', { get: () => ({ add: function() {}, delete: function() {}, getAll: function() { return Promise.resolve([]); } }), configurable: true });
+    }
+  } catch(_) {}
+
   if (!window.chrome) {
     window.chrome = {
       app: { isInstalled: false, InstallState: {}, RunningState: {} },
@@ -277,8 +322,8 @@ export async function injectHeadlessStealth(tab) {
         OnInstalledReason: {}, OnRestartRequiredReason: {}, PlatformArch: {}, PlatformNaclArch: {}, PlatformOs: {}, RequestUpdateCheckStatus: {},
         connect: () => ({}), sendMessage: () => {}, onMessage: { addListener: () => {} }
       },
-      loadTimes: () => ({}),
-      csi: () => ({}),
+      loadTimes: function() { return { requestTime: 0, startLoadTime: Date.now() - 5000, commitLoadTime: Date.now() - 3000, finishDocumentLoadTime: Date.now() - 2000, finishLoadTime: Date.now() - 1000, firstPaintTime: Date.now() - 800, navigationType: 'Other', wasFetchedViaSpdy: true, wasNpnNegotiated: true, npnNegotiatedProtocol: 'h2', wasAlternateProtocolAvailable: false, connectionInfo: 'http/2' }; },
+      csi: function() { var t = Date.now(); return { onloadT: t - 2000, startE: t - 5000, pageT: 'back', tran: 2 }; },
     };
   }
   var __greedyNativeFns = [];
@@ -299,6 +344,19 @@ export async function injectHeadlessStealth(tab) {
       return getParam.call(this, p);
     });
   } catch(_) {}
+  // ── WebGL readPixels noise ──────────────────────────
+  // CreepJS and other fingerprinters draw content with WebGL and read back the
+  // rendered pixels. Adding subtle noise breaks rendering-based fingerprinting.
+  try {
+    var origReadPixels = WebGLRenderingContext.prototype.readPixels;
+    WebGLRenderingContext.prototype.readPixels = __markNative(function readPixels(x, y, width, height, format, type, pixels) {
+      var result = origReadPixels.call(this, x, y, width, height, format, type, pixels);
+      if (pixels && pixels.length > 0) {
+        pixels[0] ^= 1;
+      }
+      return result;
+    });
+  } catch(_) {}
   Object.defineProperty(navigator, 'hardwareConcurrency', { get: () => 8, configurable: true });
   Object.defineProperty(navigator, 'deviceMemory', { get: () => 8, configurable: true });
 
@@ -306,7 +364,7 @@ export async function injectHeadlessStealth(tab) {
   // Headless rendering engines produce slightly different canvas output
   // than headed Chrome. Subtle noise breaks hash-based fingerprinting.
   try {
-    var __canvasNoise = ((Date.now() % 997) + Math.floor(Math.random() * 997)) & 1;
+    var __canvasNoise = ((Date.now() & 0xFF) | 1);
     var origFill = CanvasRenderingContext2D.prototype.fillText;
     CanvasRenderingContext2D.prototype.fillText = __markNative(function fillText() {
       this.globalAlpha = 0.9995;
@@ -325,15 +383,39 @@ export async function injectHeadlessStealth(tab) {
     HTMLCanvasElement.prototype.toDataURL = __markNative(function toDataURL() {
       var ctx = this.getContext('2d');
       if (ctx) {
-        // Add 1px noise pixel in corner (invisible but changes hash)
-        var imgData = ctx.getImageData(0, 0, 1, 1);
-        if (imgData) imgData.data[0] ^= __canvasNoise;
-        ctx.putImageData(imgData, 0, 0);
+        // Spread noise across canvas to break hash-based fingerprinting.
+        // Uses a deterministic pattern so it's consistent per page load
+        // but varies between sessions.
+        var w = this.width, h = this.height;
+        if (w > 0 && h > 0) {
+          var imgData = ctx.getImageData(0, 0, Math.min(w, 4), Math.min(h, 4));
+          if (imgData && imgData.data) {
+            for (var __i = 0; __i < imgData.data.length; __i += 4) {
+              imgData.data[__i] ^= (__canvasNoise + __i) & 0xFF;
+            }
+            ctx.putImageData(imgData, 0, 0);
+          }
+        }
       }
       return origToDataURL.apply(this, arguments);
     });
   } catch(_) {}
 
+  // ── AudioContext fingerprint noise ────────────────────
+  // Headless Chrome's AudioContext produces slightly different output.
+  // Subtle noise breaks audio-based fingerprinting.
+  try {
+    var __audioSeed = ((Date.now() & 0x1F) | 1);
+    var origGetChannelData = AudioBuffer.prototype.getChannelData;
+    AudioBuffer.prototype.getChannelData = __markNative(function getChannelData(channel) {
+      var data = origGetChannelData.call(this, channel);
+      for (var __i = 0; __i < data.length; __i += 64) {
+        data[__i] *= 0.99999;
+      }
+      return data;
+    });
+  } catch(_) {}
+
   // ── window outer dimensions ──────────────────────────
   // outerWidth/Height = 0 in headless — a well-known bot signal.
   // Mirror innerWidth/Height (set by --window-size flag) so the ratio is sane.
@@ -343,9 +425,15 @@ export async function injectHeadlessStealth(tab) {
   } catch(_) {}
 
   // ── screen properties ─────────────────────────────────
+  // Headless Chrome often reports an 800x600 screen even when the viewport is
+  // 1920x1080. Keep screen metrics internally consistent with our launch flags.
   try {
-    if (!screen.colorDepth) Object.defineProperty(screen, 'colorDepth', { get: () => 24, configurable: true });
-    if (!screen.pixelDepth) Object.defineProperty(screen, 'pixelDepth', { get: () => 24, configurable: true });
+    Object.defineProperty(screen, 'width', { get: () => 1920, configurable: true });
+    Object.defineProperty(screen, 'height', { get: () => 1080, configurable: true });
+    Object.defineProperty(screen, 'availWidth', { get: () => 1920, configurable: true });
+    Object.defineProperty(screen, 'availHeight', { get: () => 1040, configurable: true });
+    Object.defineProperty(screen, 'colorDepth', { get: () => 24, configurable: true });
+    Object.defineProperty(screen, 'pixelDepth', { get: () => 24, configurable: true });
   } catch(_) {}
 
   // ── navigator.userAgentData (UA Client Hints) ─────────

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@apmantza/greedysearch-pi",
-	"version": "2.1.4",
+	"version": "2.1.5",
 	"description": "Headless multi-engine AI search (Perplexity, Google AI, ChatGPT, Gemini) via browser automation. NO API KEYS needed. Grounded all-engine search fetches sources by default, with optional configurable synthesis and deep research.",
 	"type": "module",
 	"keywords": [
@@ -21,6 +21,11 @@
 		"test:bash": "./test.sh",
 		"test:bash:quick": "./test.sh quick",
 		"test:bash:smoke": "./test.sh smoke",
+		"stealth-check": "node scripts/stealth-check.mjs",
+		"stealth:check": "node scripts/stealth-check.mjs",
+		"stealth:strict": "node scripts/stealth-check.mjs --strict",
+		"stealth:diff": "node scripts/stealth-check.mjs --diff",
+		"stealth:baseline": "node scripts/stealth-check.mjs --diff",
 		"lint": "node scripts/lint.mjs",
 		"check:lockfile": "node scripts/check-lockfile.mjs",
 		"changelog:check": "node scripts/changelog-release.mjs --check",