@f5-sales-demo/xcsh 19.98.7 → 19.98.9

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "19.98.7",
+	"version": "19.98.9",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -57,13 +57,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@mozilla/readability": "^0.6",
-		"@f5-sales-demo/xcsh-stats": "19.98.7",
-		"@f5-sales-demo/pi-agent-core": "19.98.7",
-		"@f5-sales-demo/pi-ai": "19.98.7",
-		"@f5-sales-demo/pi-natives": "19.98.7",
-		"@f5-sales-demo/pi-resource-management": "19.98.7",
-		"@f5-sales-demo/pi-tui": "19.98.7",
-		"@f5-sales-demo/pi-utils": "19.98.7",
+		"@f5-sales-demo/xcsh-stats": "19.98.9",
+		"@f5-sales-demo/pi-agent-core": "19.98.9",
+		"@f5-sales-demo/pi-ai": "19.98.9",
+		"@f5-sales-demo/pi-natives": "19.98.9",
+		"@f5-sales-demo/pi-resource-management": "19.98.9",
+		"@f5-sales-demo/pi-tui": "19.98.9",
+		"@f5-sales-demo/pi-utils": "19.98.9",
 		"@sinclair/typebox": "^0.34",
 		"@xterm/headless": "^6.0",
 		"ajv": "^8.20",
@@ -74,7 +74,7 @@
 		"linkedom": "^0.18",
 		"lru-cache": "11.5.2",
 		"markit-ai": "0.5.3",
-		"puppeteer": "^24.37",
+		"puppeteer": "^25.3",
 		"yaml": "2.9.0",
 		"zod": "4.4.3"
 	},

package/src/internal-urls/build-info.generated.ts

@@ -17,17 +17,17 @@ export interface BuildInfo {
 }
 
 export const BUILD_INFO: BuildInfo = {
-	"version": "19.98.7",
-	"commit": "0a7dd046f51c31f5c15b62cf4fb7a2b77f179d4e",
-	"shortCommit": "0a7dd04",
+	"version": "19.98.9",
+	"commit": "f920b739147c8af141a54972d353e0522a276fcc",
+	"shortCommit": "f920b73",
 	"branch": "main",
-	"tag": "v19.98.7",
-	"commitDate": "2026-07-28T11:57:17Z",
-	"buildDate": "2026-07-28T12:27:02.779Z",
+	"tag": "v19.98.9",
+	"commitDate": "2026-07-28T14:28:13Z",
+	"buildDate": "2026-07-28T15:05:19.433Z",
 	"dirty": true,
 	"prNumber": "",
 	"repoUrl": "https://github.com/f5-sales-demo/xcsh",
 	"repoSlug": "f5-sales-demo/xcsh",
-	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/0a7dd046f51c31f5c15b62cf4fb7a2b77f179d4e",
-	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v19.98.7"
+	"commitUrl": "https://github.com/f5-sales-demo/xcsh/commit/f920b739147c8af141a54972d353e0522a276fcc",
+	"releaseUrl": "https://github.com/f5-sales-demo/xcsh/releases/tag/v19.98.9"
 };

package/src/tools/browser-stealth.ts

@@ -0,0 +1,127 @@
+/**
+ * Assembles the stealth init script injected into every page.
+ *
+ * Split out of `browser.ts` so the bundle can be built and asserted without a
+ * `BrowserTool` instance — see `test/browser/stealth-bundle.test.ts` (CI) and
+ * `test/e2e/stealth-surfaces.e2e.test.ts` (local, real Chrome).
+ */
+
+import stealthTamperingScript from "./puppeteer/00_stealth_tampering.txt" with { type: "text" };
+import stealthActivityScript from "./puppeteer/01_stealth_activity.txt" with { type: "text" };
+import stealthHairlineScript from "./puppeteer/02_stealth_hairline.txt" with { type: "text" };
+import stealthBotdScript from "./puppeteer/03_stealth_botd.txt" with { type: "text" };
+import stealthIframeScript from "./puppeteer/04_stealth_iframe.txt" with { type: "text" };
+import stealthWebglScript from "./puppeteer/05_stealth_webgl.txt" with { type: "text" };
+import stealthScreenScript from "./puppeteer/06_stealth_screen.txt" with { type: "text" };
+import stealthFontsScript from "./puppeteer/07_stealth_fonts.txt" with { type: "text" };
+import stealthAudioScript from "./puppeteer/08_stealth_audio.txt" with { type: "text" };
+import stealthLocaleScript from "./puppeteer/09_stealth_locale.txt" with { type: "text" };
+import stealthPluginsScript from "./puppeteer/10_stealth_plugins.txt" with { type: "text" };
+import stealthHardwareScript from "./puppeteer/11_stealth_hardware.txt" with { type: "text" };
+import stealthCodecsScript from "./puppeteer/12_stealth_codecs.txt" with { type: "text" };
+
+/**
+ * The injected surfaces, in load order. Order is load-bearing: `tampering` must
+ * run first so later scripts' patched functions are already covered by its
+ * `Function.prototype.toString` shim.
+ *
+ * There is deliberately no `worker` surface. It rewrote every Worker to a `blob:`
+ * URL to inject a prelude, which broke relative-URL workers outright and any
+ * worker under `worker-src 'self'`, while its prelude was dead code — it called
+ * `Object_defineProperty`, a page-realm binding a worker realm does not inherit.
+ * Chrome already propagates the page's CDP user-agent override into workers,
+ * including the brand list, so nothing was lost by removing it. See #2560 and
+ * test/e2e/stealth-workers.e2e.test.ts.
+ */
+export const STEALTH_SCRIPTS: ReadonlyArray<{ readonly name: string; readonly source: string }> = [
+	{ name: "tampering", source: stealthTamperingScript },
+	{ name: "activity", source: stealthActivityScript },
+	{ name: "hairline", source: stealthHairlineScript },
+	{ name: "botd", source: stealthBotdScript },
+	{ name: "iframe", source: stealthIframeScript },
+	{ name: "webgl", source: stealthWebglScript },
+	{ name: "screen", source: stealthScreenScript },
+	{ name: "fonts", source: stealthFontsScript },
+	{ name: "audio", source: stealthAudioScript },
+	{ name: "locale", source: stealthLocaleScript },
+	{ name: "plugins", source: stealthPluginsScript },
+	{ name: "hardware", source: stealthHardwareScript },
+	{ name: "codecs", source: stealthCodecsScript },
+];
+
+export type StealthBundleOptions = {
+	/**
+	 * Name of a global to collect per-script failures into, as
+	 * `[{ name, message }]`. Omit in production: each script is wrapped in its
+	 * own try/catch so one failure cannot take down the rest, but recording those
+	 * failures means writing a `window.<name>` that a detection script could look
+	 * for — which would defeat the point of the bundle. Tests pass a name so a
+	 * silently-broken script is assertable instead of invisible.
+	 */
+	readonly errorSink?: string;
+};
+
+/** Wraps one script so a failure cannot stop the scripts after it. */
+function wrapScript(script: { name: string; source: string }, errorSink: string | undefined): string {
+	const record = errorSink
+		? `(globalThis[${JSON.stringify(errorSink)}] ||= []).push({ name: ${JSON.stringify(script.name)}, message: String(e && e.message || e) });`
+		: "";
+	return `
+		try {
+			${script.source};
+		} catch (e) { ${record} }
+	`;
+}
+
+/**
+ * Builds the full init script.
+ *
+ * Caches pristine builtins up front so the surfaces can still reach unpatched
+ * references after earlier surfaces have replaced the page's own.
+ *
+ * The cache is taken from the CURRENT realm, not a detached iframe. This script
+ * is injected via `Page.addScriptToEvaluateOnNewDocument`, which runs before any
+ * page script — and before any DOM at all: at that point `document.readyState`
+ * is `"loading"` and `document.head`, `document.body` and
+ * `document.documentElement` are all null. An earlier version created a helper
+ * iframe and appended it to `document.head`, which threw on that first statement
+ * outside every per-surface guard, so all fourteen surfaces silently never ran.
+ * Because nothing else has executed yet, `globalThis`'s builtins are themselves
+ * still pristine, which is exactly what the iframe was there to provide.
+ */
+export function buildStealthBundle(options: StealthBundleOptions = {}): string {
+	const joint = STEALTH_SCRIPTS.map(script => wrapScript(script, options.errorSink)).join(";\n");
+
+	return `(() => {
+			// Native function cache — this script runs first, so the current realm's
+			// builtins have not been touched yet.
+			const nativeWindow = globalThis;
+
+			// Cache pristine native functions
+			const Function_toString = nativeWindow.Function.prototype.toString;
+			const Object_getOwnPropertyDescriptor = nativeWindow.Object.getOwnPropertyDescriptor;
+			const Object_getOwnPropertyDescriptors = nativeWindow.Object.getOwnPropertyDescriptors;
+			const Object_getPrototypeOf = nativeWindow.Object.getPrototypeOf;
+			const Object_defineProperty = nativeWindow.Object.defineProperty;
+			const Object_getOwnPropertyDescriptorOriginal = nativeWindow.Object.getOwnPropertyDescriptor;
+			const Object_create = nativeWindow.Object.create;
+			const Object_keys = nativeWindow.Object.keys;
+			const Object_getOwnPropertyNames = nativeWindow.Object.getOwnPropertyNames;
+			const Object_entries = nativeWindow.Object.entries;
+			const Object_setPrototypeOf = nativeWindow.Object.setPrototypeOf;
+			const Object_assign = nativeWindow.Object.assign;
+			const Window_setTimeout = nativeWindow.setTimeout;
+			const Math_random = nativeWindow.Math.random;
+			const Math_floor = nativeWindow.Math.floor;
+			const Math_max = nativeWindow.Math.max;
+			const Math_min = nativeWindow.Math.min;
+			const Window_Event = nativeWindow.Event;
+			const Promise_resolve = nativeWindow.Promise.resolve.bind(nativeWindow.Promise);
+			const Window_Blob = nativeWindow.Blob;
+			const Window_Proxy = nativeWindow.Proxy;
+			const Intl_DateTimeFormat = nativeWindow.Intl.DateTimeFormat;
+			const Date_constructor = nativeWindow.Date;
+
+			${joint}
+		})();`;
+}

package/src/tools/browser-user-agent.ts

@@ -0,0 +1,111 @@
+/**
+ * Derives the stealth user-agent override from whichever Chrome puppeteer bundles.
+ *
+ * Split out of `browser.ts` so it can be asserted without launching a browser:
+ * every field here is a pure function of the raw user-agent string and the
+ * browser version, and the output changes whenever puppeteer's bundled Chrome
+ * changes major version. See `test/browser/user-agent-override.test.ts`.
+ */
+
+const STEALTH_ACCEPT_LANGUAGE = "en-US,en";
+
+export type UserAgentOverride = {
+	userAgent: string;
+	platform: string;
+	acceptLanguage: string;
+	userAgentMetadata: {
+		brands: Array<{ brand: string; version: string }>;
+		fullVersion: string;
+		platform: string;
+		platformVersion: string;
+		architecture: string;
+		model: string;
+		mobile: boolean;
+	};
+};
+
+/**
+ * Chromium's GREASE permutation table, indexed by `majorVersion % 6`.
+ * Mirrors `GenerateBrandVersionList` in
+ * components/embedder_support/user_agent_utils.cc — Chrome shuffles the brand
+ * list per version so that servers cannot hardcode its ordering, and a client
+ * that emits a fixed order is detectable for that reason alone.
+ */
+const BRAND_ORDERS: ReadonlyArray<readonly [number, number, number]> = [
+	[0, 1, 2],
+	[0, 2, 1],
+	[1, 0, 2],
+	[1, 2, 0],
+	[2, 0, 1],
+	[2, 1, 0],
+];
+
+/** The escape characters Chromium permutes into the greased brand name. */
+const GREASE_ESCAPE_CHARS = [" ", " ", ";"] as const;
+
+/** Builds the three-entry brand list for a Chrome major version. */
+function buildBrands(majorVersion: number): Array<{ brand: string; version: string }> {
+	const order = BRAND_ORDERS[majorVersion % BRAND_ORDERS.length] ?? BRAND_ORDERS[0];
+	const greasedBrand = `${GREASE_ESCAPE_CHARS[order[0]]}Not${GREASE_ESCAPE_CHARS[order[1]]}A${GREASE_ESCAPE_CHARS[order[2]]}Brand`;
+	const brands: Array<{ brand: string; version: string }> = [];
+	brands[order[0]] = { brand: greasedBrand, version: "99" };
+	brands[order[1]] = { brand: "Chromium", version: String(majorVersion) };
+	brands[order[2]] = { brand: "Google Chrome", version: String(majorVersion) };
+	return brands;
+}
+
+/**
+ * @param rawUserAgent the browser's own user-agent string, e.g. from `browser.userAgent()`
+ * @param browserVersion the browser version string, e.g. from `browser.version()`;
+ *   used only when the user agent carries no `Chrome/<version>` token
+ */
+export function deriveUserAgentOverride(rawUserAgent: string, browserVersion: string): UserAgentOverride {
+	let userAgent = rawUserAgent.replace("HeadlessChrome/", "Chrome/");
+	if (userAgent.includes("Linux") && !userAgent.includes("Android")) {
+		userAgent = userAgent.replace(/\(([^)]+)\)/, "(Windows NT 10.0; Win64; x64)");
+	}
+
+	const uaVersionMatch = userAgent.match(/Chrome\/([\d|.]+)/);
+	const fallbackVersionMatch = uaVersionMatch ?? browserVersion.match(/\/([\d|.]+)/);
+	const uaVersion = fallbackVersionMatch?.[1] ?? "0";
+	const majorVersion = Number.parseInt(uaVersion.split(".")[0] ?? "0", 10) || 0;
+	const isAndroid = userAgent.includes("Android");
+	const platform = userAgent.includes("Mac OS X")
+		? "MacIntel"
+		: isAndroid
+			? "Android"
+			: userAgent.includes("Linux")
+				? "Linux"
+				: "Win32";
+	const platformFull = userAgent.includes("Mac OS X")
+		? "Mac OS X"
+		: isAndroid
+			? "Android"
+			: userAgent.includes("Linux")
+				? "Linux"
+				: "Windows";
+	const platformVersion = userAgent.includes("Mac OS X ")
+		? (userAgent.match(/Mac OS X ([^)]+)/)?.[1] ?? "")
+		: userAgent.includes("Android ")
+			? (userAgent.match(/Android ([^;]+)/)?.[1] ?? "")
+			: userAgent.includes("Windows ")
+				? (userAgent.match(/Windows .*?([\d|.]+);?/)?.[1] ?? "")
+				: "";
+	const architecture = isAndroid ? "" : "x86";
+	const model = isAndroid ? (userAgent.match(/Android.*?;\s([^)]+)/)?.[1] ?? "") : "";
+
+	return {
+		userAgent,
+		platform,
+		acceptLanguage: STEALTH_ACCEPT_LANGUAGE,
+		userAgentMetadata: {
+			brands: buildBrands(majorVersion),
+			fullVersion: uaVersion,
+			platform: platformFull,
+			platformVersion,
+			architecture,
+			model,
+			mobile: isAndroid,
+		},
+	};
+}

package/src/tools/browser.ts

@@ -27,22 +27,10 @@ import browserDescription from "../prompts/tools/browser.md" with { type: "text"
 import type { ToolSession } from "../sdk";
 import { resizeImage } from "../utils/image-resize";
 import { htmlToBasicMarkdown } from "../web/scrapers/types";
+import { buildStealthBundle } from "./browser-stealth";
+import { deriveUserAgentOverride, type UserAgentOverride } from "./browser-user-agent";
 import type { OutputMeta } from "./output-meta";
 import { expandPath, resolveToCwd } from "./path-utils";
-import stealthTamperingScript from "./puppeteer/00_stealth_tampering.txt" with { type: "text" };
-import stealthActivityScript from "./puppeteer/01_stealth_activity.txt" with { type: "text" };
-import stealthHairlineScript from "./puppeteer/02_stealth_hairline.txt" with { type: "text" };
-import stealthBotdScript from "./puppeteer/03_stealth_botd.txt" with { type: "text" };
-import stealthIframeScript from "./puppeteer/04_stealth_iframe.txt" with { type: "text" };
-import stealthWebglScript from "./puppeteer/05_stealth_webgl.txt" with { type: "text" };
-import stealthScreenScript from "./puppeteer/06_stealth_screen.txt" with { type: "text" };
-import stealthFontsScript from "./puppeteer/07_stealth_fonts.txt" with { type: "text" };
-import stealthAudioScript from "./puppeteer/08_stealth_audio.txt" with { type: "text" };
-import stealthLocaleScript from "./puppeteer/09_stealth_locale.txt" with { type: "text" };
-import stealthPluginsScript from "./puppeteer/10_stealth_plugins.txt" with { type: "text" };
-import stealthHardwareScript from "./puppeteer/11_stealth_hardware.txt" with { type: "text" };
-import stealthCodecsScript from "./puppeteer/12_stealth_codecs.txt" with { type: "text" };
-import stealthWorkerScript from "./puppeteer/13_stealth_worker.txt" with { type: "text" };
 import { formatScreenshot } from "./render-utils";
 import { ToolAbortError, ToolError, throwIfAborted } from "./tool-errors";
 import { toolResult } from "./tool-result";
@@ -99,8 +87,16 @@ export function pickCoDrivePage(pages: { url(): string }[]): number {
 }
 
 /**
- * Lazy-import puppeteer from a safe CWD so cosmiconfig doesn't choke
- * on malformed package.json files in the user's project tree.
+ * Lazy-import puppeteer from a safe CWD so its config loader doesn't choke on
+ * malformed package.json files in the user's project tree.
+ *
+ * Puppeteer 25 swapped cosmiconfig for lilconfig, so the original rationale no
+ * longer names the right library. Retained deliberately rather than removed:
+ * importing puppeteer 25 from a directory containing a deliberately malformed
+ * package.json was verified to succeed, but that only exercises import-time
+ * loading — whether `launch()` reads config lazily was not established, so
+ * dropping the guard would be an unverified behaviour change for a demo-critical
+ * path. It costs one chdir.
  */
 let puppeteerModule: typeof Puppeteer | undefined;
 async function loadPuppeteer(): Promise<typeof Puppeteer> {
@@ -123,7 +119,8 @@ const STEALTH_IGNORE_DEFAULT_ARGS = [
 	"--disable-default-apps",
 	"--disable-component-extensions-with-background-pages",
 ];
-const STEALTH_ACCEPT_LANGUAGE = "en-US,en";
+/** Kept in step with the locale profile in puppeteer/09_stealth_locale.txt. */
+const STEALTH_TIMEZONE = "America/New_York";
 const PUPPETEER_SOURCE_URL_SUFFIX = "//# sourceURL=__puppeteer_evaluation_script__";
 const INTERACTIVE_AX_ROLES = new Set([
 	"button",
@@ -153,21 +150,6 @@ type PuppeteerCdpClient = {
 	send: (method: string, params?: Record<string, unknown>) => Promise<unknown>;
 };
 
-type UserAgentOverride = {
-	userAgent: string;
-	platform: string;
-	acceptLanguage: string;
-	userAgentMetadata: {
-		brands: Array<{ brand: string; version: string }>;
-		fullVersion: string;
-		platform: string;
-		platformVersion: string;
-		architecture: string;
-		model: string;
-		mobile: boolean;
-	};
-};
-
 function resolvePageClient(page: Page): PuppeteerCdpClient | null {
 	const pageWithClient = page as Page & {
 		_client?: (() => PuppeteerCdpClient) | PuppeteerCdpClient;
@@ -539,7 +521,7 @@ export class BrowserTool implements AgentTool<typeof browserSchema, BrowserToolD
 		if (this.#page && !this.#page.isClosed()) {
 			return this.#page;
 		}
-		if (!this.#browser?.isConnected()) {
+		if (!this.#browser?.connected) {
 			return this.#resetBrowser(params);
 		}
 		// co-drive: reuse the human's current tab when attached, else a fresh page
@@ -698,9 +680,33 @@ export class BrowserTool implements AgentTool<typeof browserSchema, BrowserToolD
 	async #applyStealthPatches(page: Page): Promise<void> {
 		this.#patchSourceUrl(page);
 		await this.#applyUserAgentOverride(page);
+		await this.#applyTimezoneOverride(page);
 		await this.#injectStealthScripts(page);
 	}
 
+	/**
+	 * Overrides the timezone through CDP rather than in the injected scripts.
+	 *
+	 * Chrome recomputes Date, Intl, getTimezoneOffset and the zone name from the
+	 * overridden zone, so they all agree. Patching them in page script cannot
+	 * achieve that: the previous attempt rewrote only the displayed zone NAME and
+	 * forced its zone into every Intl.DateTimeFormat call, which overrode a
+	 * caller's explicit `timeZone` and corrupted formatted output (see
+	 * 09_stealth_locale.txt).
+	 */
+	async #applyTimezoneOverride(page: Page): Promise<void> {
+		const client = resolvePageClient(page);
+		if (!client) return;
+		try {
+			await client.send("Emulation.setTimezoneOverride", { timezoneId: STEALTH_TIMEZONE });
+		} catch (error) {
+			// A rejected zone id must not take the rest of the stealth setup down.
+			logger.debug("Failed to apply timezone override", {
+				error: error instanceof Error ? error.message : String(error),
+			});
+		}
+	}
+
 	async #applyUserAgentOverride(page: Page): Promise<void> {
 		const client = resolvePageClient(page);
 		if (!client) return;
@@ -711,71 +717,8 @@ export class BrowserTool implements AgentTool<typeof browserSchema, BrowserToolD
 
 	async #resolveUserAgentOverride(page: Page): Promise<UserAgentOverride> {
 		if (this.#userAgentOverride) return this.#userAgentOverride;
-		const rawUserAgent = await page.browser().userAgent();
-		let userAgent = rawUserAgent.replace("HeadlessChrome/", "Chrome/");
-		if (userAgent.includes("Linux") && !userAgent.includes("Android")) {
-			userAgent = userAgent.replace(/\(([^)]+)\)/, "(Windows NT 10.0; Win64; x64)");
-		}
-
-		const uaVersionMatch = userAgent.match(/Chrome\/([\d|.]+)/);
-		const fallbackVersionMatch = uaVersionMatch ?? (await page.browser().version()).match(/\/([\d|.]+)/);
-		const uaVersion = fallbackVersionMatch?.[1] ?? "0";
-		const majorVersion = Number.parseInt(uaVersion.split(".")[0] ?? "0", 10) || 0;
-		const isAndroid = userAgent.includes("Android");
-		const platform = userAgent.includes("Mac OS X")
-			? "MacIntel"
-			: isAndroid
-				? "Android"
-				: userAgent.includes("Linux")
-					? "Linux"
-					: "Win32";
-		const platformFull = userAgent.includes("Mac OS X")
-			? "Mac OS X"
-			: isAndroid
-				? "Android"
-				: userAgent.includes("Linux")
-					? "Linux"
-					: "Windows";
-		const platformVersion = userAgent.includes("Mac OS X ")
-			? (userAgent.match(/Mac OS X ([^)]+)/)?.[1] ?? "")
-			: userAgent.includes("Android ")
-				? (userAgent.match(/Android ([^;]+)/)?.[1] ?? "")
-				: userAgent.includes("Windows ")
-					? (userAgent.match(/Windows .*?([\d|.]+);?/)?.[1] ?? "")
-					: "";
-		const architecture = isAndroid ? "" : "x86";
-		const model = isAndroid ? (userAgent.match(/Android.*?;\s([^)]+)/)?.[1] ?? "") : "";
-
-		const brandOrders = [
-			[0, 1, 2],
-			[0, 2, 1],
-			[1, 0, 2],
-			[1, 2, 0],
-			[2, 0, 1],
-			[2, 1, 0],
-		];
-		const order = brandOrders[majorVersion % brandOrders.length] ?? brandOrders[0];
-		const escapedChars = [" ", " ", ";"];
-		const greaseyBrand = `${escapedChars[order[0]]}Not${escapedChars[order[1]]}A${escapedChars[order[2]]}Brand`;
-		const brands: { brand: string; version: string }[] = [];
-		brands[order[0]] = { brand: greaseyBrand, version: "99" };
-		brands[order[1]] = { brand: "Chromium", version: String(majorVersion) };
-		brands[order[2]] = { brand: "Google Chrome", version: String(majorVersion) };
-
-		this.#userAgentOverride = {
-			userAgent,
-			platform,
-			acceptLanguage: STEALTH_ACCEPT_LANGUAGE,
-			userAgentMetadata: {
-				brands,
-				fullVersion: uaVersion,
-				platform: platformFull,
-				platformVersion,
-				architecture,
-				model,
-				mobile: isAndroid,
-			},
-		};
+		const browser = page.browser();
+		this.#userAgentOverride = deriveUserAgentOverride(await browser.userAgent(), await browser.version());
 		return this.#userAgentOverride;
 	}
 
@@ -877,70 +820,7 @@ export class BrowserTool implements AgentTool<typeof browserSchema, BrowserToolD
 
 	/** Injects stealth scripts that cover common puppeteer detection surfaces. */
 	async #injectStealthScripts(page: Page): Promise<void> {
-		const scripts = [
-			stealthTamperingScript,
-			stealthActivityScript,
-			stealthHairlineScript,
-			stealthBotdScript,
-			stealthIframeScript,
-			stealthWebglScript,
-			stealthScreenScript,
-			stealthFontsScript,
-			stealthAudioScript,
-			stealthLocaleScript,
-			stealthPluginsScript,
-			stealthHardwareScript,
-			stealthCodecsScript,
-			stealthWorkerScript,
-		];
-
-		const joint = scripts
-			.map(
-				script => `
-		try {
-			${script};
-		} catch (e) {}
-	`,
-			)
-			.join(";\n");
-
-		await page.evaluateOnNewDocument(`(() => {
-				// Native function cache - captured before any tampering
-				const iframe = document.createElement("iframe");
-				iframe.style.display = "none";
-				document.head.appendChild(iframe);
-				const nativeWindow = iframe.contentWindow;
-				if (!nativeWindow) return;
-
-				// Cache pristine native functions
-				const Function_toString = nativeWindow.Function.prototype.toString;
-				const Object_getOwnPropertyDescriptor = nativeWindow.Object.getOwnPropertyDescriptor;
-				const Object_getOwnPropertyDescriptors = nativeWindow.Object.getOwnPropertyDescriptors;
-				const Object_getPrototypeOf = nativeWindow.Object.getPrototypeOf;
-				const Object_defineProperty = nativeWindow.Object.defineProperty;
-				const Object_getOwnPropertyDescriptorOriginal = nativeWindow.Object.getOwnPropertyDescriptor;
-				const Object_create = nativeWindow.Object.create;
-				const Object_keys = nativeWindow.Object.keys;
-				const Object_getOwnPropertyNames = nativeWindow.Object.getOwnPropertyNames;
-				const Object_entries = nativeWindow.Object.entries;
-				const Object_setPrototypeOf = nativeWindow.Object.setPrototypeOf;
-				const Object_assign = nativeWindow.Object.assign;
-				const Window_setTimeout = nativeWindow.setTimeout;
-				const Math_random = nativeWindow.Math.random;
-				const Math_floor = nativeWindow.Math.floor;
-				const Math_max = nativeWindow.Math.max;
-				const Math_min = nativeWindow.Math.min;
-				const Window_Event = nativeWindow.Event;
-				const Promise_resolve = nativeWindow.Promise.resolve.bind(nativeWindow.Promise);
-				const Window_Blob = nativeWindow.Blob;
-				const Window_Proxy = nativeWindow.Proxy;
-				const Intl_DateTimeFormat = nativeWindow.Intl.DateTimeFormat;
-				const Date_constructor = nativeWindow.Date;
-
-				
-				${joint}
-
-				document.head.removeChild(iframe);})();`);
+		await page.evaluateOnNewDocument(buildStealthBundle());
 	}
 
 	async execute(

package/src/tools/puppeteer/00_stealth_tampering.txt

@@ -58,6 +58,3 @@ Object.getOwnPropertyDescriptor = function (obj, prop) {
 
   return descriptor;
 };
-
-// Cleanup
-document.head.removeChild(iframe);

package/src/tools/puppeteer/03_stealth_botd.txt

@@ -372,6 +372,18 @@ if (navigator.permissions?.query) {
 			}
 			return originalQuery.call(this, parameters);
 		};
+		// Mask the replacement, or String(navigator.permissions.query) hands a
+		// detector this function's source where Chrome reports native code. The
+		// tampering surface masks every function it patches, but this one is
+		// replaced here, after that surface has already run.
+		// Binding the cached native toString to the ORIGINAL query reproduces
+		// Chrome's exact output, same idiom as 04_stealth_iframe / 13_stealth_worker.
+		Object_defineProperty(navigator.permissions.query, "toString", {
+			value: Function_toString.bind(originalQuery),
+			writable: false,
+			configurable: true,
+			enumerable: false,
+		});
 	}
 }
 

package/src/tools/puppeteer/04_stealth_iframe.txt

@@ -23,24 +23,34 @@ const addContentWindowProxy = (iframe) => {
 	}
 };
 
+// The native accessor, captured from the prototype so the shim below can hand
+// off to it. Without this the shim has nothing to delegate to.
+const nativeSrcdocDescriptor = Object_getOwnPropertyDescriptor(HTMLIFrameElement.prototype, "srcdoc");
+
 const handleIframeCreation = (target, thisArg, args) => {
 	const iframe = target.apply(thisArg, args);
-	const originalIframe = iframe;
-	const originalSrcdoc = originalIframe.srcdoc;
 
+	// A one-shot shim: install the contentWindow proxy on the first srcdoc
+	// assignment, then step aside so the element behaves natively.
+	//
+	// It must step aside by DELETING itself. An earlier version redefined srcdoc
+	// as a non-writable data property and then assigned through the same element,
+	// so the write silently failed against its own frozen property and the native
+	// setter was never reached: srcdoc stayed "", the attribute was never set, and
+	// every dynamically created srcdoc iframe loaded empty.
 	Object_defineProperty(iframe, "srcdoc", {
 		configurable: true,
 		get() {
-			return originalSrcdoc;
+			return nativeSrcdocDescriptor?.get ? nativeSrcdocDescriptor.get.call(this) : "";
 		},
 		set(newValue) {
 			addContentWindowProxy(this);
-			Object_defineProperty(iframe, "srcdoc", {
-				configurable: false,
-				writable: false,
-				value: originalSrcdoc,
-			});
-			originalIframe.srcdoc = newValue;
+			delete iframe.srcdoc;
+			if (nativeSrcdocDescriptor?.set) {
+				nativeSrcdocDescriptor.set.call(iframe, newValue);
+			} else {
+				iframe.setAttribute("srcdoc", newValue);
+			}
 		},
 	});
 

package/src/tools/puppeteer/09_stealth_locale.txt

@@ -1,7 +1,6 @@
 // Define a consistent locale profile
 const locale = "en-US";
 const languages = ["en-US", "en"];
-const timezone = "America/New_York";
 
 // Override navigator language properties
 Object_defineProperty(navigator, "language", {
@@ -15,32 +14,22 @@ Object_defineProperty(navigator, "languages", {
   enumerable: true,
 });
 
-// Override Intl.DateTimeFormat for timezone consistency
-const OriginalDateTimeFormat = Intl_DateTimeFormat;
-Intl.DateTimeFormat = class extends OriginalDateTimeFormat {
-  constructor(locales, options) {
-    const mergedOptions = { ...options, timeZone: timezone };
-    super(locales, mergedOptions);
-  }
-  resolvedOptions() {
-    const options = super.resolvedOptions();
-    options.timeZone = timezone;
-    return options;
-  }
-};
-
-// Ensure Date timezone is consistent
-const originalDateConstructor = Date_constructor;
-const originalToString = originalDateConstructor.prototype.toString;
-const originalToTimeString = originalDateConstructor.prototype.toTimeString;
-
-Date.prototype.toString = function () {
-  return originalToString
-    .call(this)
-    .replace(/\(.*\)$/, "(Eastern Standard Time)");
-};
-Date.prototype.toTimeString = function () {
-  return originalToTimeString
-    .call(this)
-    .replace(/\(.*\)$/, "(Eastern Standard Time)");
-};
+// Timezone is NOT spoofed here.
+//
+// It is applied through CDP Emulation.setTimezoneOverride in browser.ts, which
+// shifts the clock itself: Date, Intl, getTimezoneOffset and the zone name all
+// agree, because Chrome computes them from the overridden zone.
+//
+// Two earlier attempts in this file were worse than nothing:
+//
+//   1. Wrapping Intl.DateTimeFormat and forcing `timeZone` into every options
+//      object overrode the CALLER's explicit zone, so
+//      `new Intl.DateTimeFormat("en-US", { timeZone: "UTC" })` silently formatted
+//      in New York — 08:00 where the page asked for 12:00. That corrupts data a
+//      page displays or submits, which is far worse than a fingerprinting tell.
+//
+//   2. Rewriting Date.prototype.toString/toTimeString only replaced the zone
+//      NAME, never the numeric offset, and hardcoded "Eastern Standard Time" —
+//      so in July it claimed EST while getTimezoneOffset still returned 240
+//      (EDT). Self-contradictory, and a detector comparing the two sees it
+//      immediately.

package/src/tools/puppeteer/13_stealth_worker.txt

@@ -1,74 +0,0 @@
-const patchWorkerConstructor = (name, OriginalWorker) => {
-	if (typeof OriginalWorker !== "function") return;
-
-	const buildWrappedUrl = (scriptURL, options) => {
-		const ua = navigator.userAgent;
-		const platform = navigator.platform;
-		const uaData = navigator.userAgentData && typeof navigator.userAgentData.toJSON === "function"
-			? navigator.userAgentData.toJSON()
-			: navigator.userAgentData;
-
-		const preludeLines = [
-			"try {",
-			`const ua = ${JSON.stringify(ua)};`,
-			`const platform = ${JSON.stringify(platform)};`,
-			"Object_defineProperty(self.navigator, 'userAgent', { get: () => ua, configurable: true });",
-			"Object_defineProperty(self.navigator, 'platform', { get: () => platform, configurable: true });",
-		];
-
-		if (uaData) {
-			preludeLines.push(`const uaData = ${JSON.stringify(uaData)};`);
-			preludeLines.push(
-				"Object_defineProperty(self.navigator, 'userAgentData', { get: () => uaData, configurable: true });",
-			);
-		}
-
-		preludeLines.push("} catch (e) {};");
-		const prelude = preludeLines.join("\n");
-		const importLine = options?.type === "module"
-			? `import ${JSON.stringify(String(scriptURL))};`
-			: `importScripts(${JSON.stringify(String(scriptURL))});`;
-		const blob = new Window_Blob([prelude, "\n", importLine], { type: "application/javascript" });
-		const url = URL.createObjectURL(blob);
-		return url;
-	};
-
-	const handler = {
-		construct(target, args) {
-			try {
-				const scriptURL = args?.[0];
-				const options = args?.[1];
-				if (!scriptURL) {
-					return new target(...(args || []));
-				}
-				const wrappedUrl = buildWrappedUrl(scriptURL, options);
-				const worker = new target(wrappedUrl, options);
-				URL.revokeObjectURL(wrappedUrl);
-				return worker;
-			} catch {
-				return new target(...(args || []));
-			}
-		},
-		apply(target, thisArg, args) {
-			return Reflect.apply(target, thisArg, args || []);
-		},
-	};
-
-	const proxied = new Window_Proxy(OriginalWorker, handler);
-	Object_defineProperty(window, name, {
-		value: proxied,
-		writable: true,
-		configurable: true,
-	});
-	Object_defineProperty(window[name], "toString", {
-		value: Function_toString.bind(OriginalWorker),
-		writable: false,
-		configurable: true,
-		enumerable: false,
-	});
-};
-
-try {
-	patchWorkerConstructor("Worker", window.Worker);
-	patchWorkerConstructor("SharedWorker", window.SharedWorker);
-} catch {}