@webcrawlerapi/stealth 1.0.0 → 1.0.1

package/README.md

@@ -30,6 +30,7 @@ The two functions you normally need are:
 | `matchMedia` pointer / hover | normalized |
 | `window.outerWidth` / `outerHeight` | corrected to inner + chrome |
 | `Error.prepareStackTrace` | installed if absent |
+| `User-Agent` header + `navigator.userAgent` (`HeadlessChrome` token) | read from `browser.userAgent()` and `HeadlessChrome` → `Chrome` via `page.setUserAgent`; never hardcoded, so the version always matches the real engine. Skip with `fixUserAgent: false`, or pass `userAgent` |
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webcrawlerapi/stealth",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Zero-dependency stealth layer for Puppeteer / CDP browsers (works with launch() and connect()).",
   "main": "stealth.js",
   "types": "stealth.d.ts",

package/stealth.d.ts

@@ -19,6 +19,10 @@ export interface StealthOptions {
   userDataDir?: string;
   /** Launch only: extra chrome args. */
   args?: string[];
+  /** Explicit User-Agent for the page. Default: browser UA with "HeadlessChrome" replaced by "Chrome". */
+  userAgent?: string;
+  /** Set to false to skip the User-Agent fix. Default true. */
+  fixUserAgent?: boolean;
   /** newPage only: origin for overridePermissions. */
   origin?: string;
   /** newPage only: permissions to grant. */
@@ -47,6 +51,7 @@ export declare const UA: string;
 export declare function buildInitScript(cfg?: StealthOptions): void;
 export declare function buildSource(opts?: StealthOptions): string;
 export declare function installStealth(page: PageLike, opts?: StealthOptions): Promise<PageLike>;
+export declare function fixUserAgent(page: PageLike, opts?: StealthOptions): Promise<PageLike>;
 export declare function injectNow(page: PageLike, opts?: StealthOptions): Promise<PageLike>;
 export declare function installOopifHook(browser: BrowserLike, opts?: StealthOptions): BrowserLike;
 export declare function newPage(browser: BrowserLike, opts?: StealthOptions): Promise<PageLike>;

package/stealth.js

@@ -21,7 +21,7 @@ const UA =
   'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 ' +
   '(KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36';
 
-const VERSION = '1.0.0';
+const VERSION = '1.0.1';
 
 const DEFAULT_RENDERER =
   'ANGLE (Intel, Intel(R) UHD Graphics 630 (0x00003E9B) Direct3D11 vs_5_0 ps_5_0, D3D11)';
@@ -352,10 +352,43 @@ async function installStealth(page, opts) {
   opts = opts || {};
   const cfg = resolveConfig(opts);
   await page.evaluateOnNewDocument(buildInitScript, cfg);
+  await fixUserAgent(page, opts);
   try { page[INSTALLED] = true; } catch (_) {}
   return page;
 }
 
+/**
+ * Headless Chrome announces itself as "HeadlessChrome/<ver>" in both the
+ * `User-Agent` request header and navigator.userAgent. The header is set by the
+ * network stack, so the in-page patches can't touch it; it has to go through
+ * the CDP UA override (page.setUserAgent).
+ *
+ * The UA is read from the running browser (browser.userAgent()) instead of
+ * being hardcoded, so the Chrome version always matches the real engine and
+ * never goes stale when the bundled Chrome is upgraded.
+ *
+ *   opts.userAgent       explicit UA, used as is
+ *   opts.fixUserAgent    set to false to skip
+ *
+ * No-op when the browser UA has no "HeadlessChrome" token (headful, connect()).
+ */
+async function fixUserAgent(page, opts) {
+  opts = opts || {};
+  if (opts.fixUserAgent === false || typeof page.setUserAgent !== 'function') return page;
+  try {
+    let ua = opts.userAgent;
+    if (!ua) {
+      const browser = typeof page.browser === 'function' ? page.browser() : null;
+      if (!browser || typeof browser.userAgent !== 'function') return page;
+      const current = await browser.userAgent();
+      if (!/HeadlessChrome/.test(current)) return page;
+      ua = current.replace('HeadlessChrome', 'Chrome');
+    }
+    await page.setUserAgent(ua);
+  } catch (_) {}
+  return page;
+}
+
 /**
  * Also inject the bootstrap into documents that are ALREADY loaded (useful when
  * you attach with connect() to a page that is already on the target URL).
@@ -468,6 +501,7 @@ module.exports = {
   buildInitScript,
   buildSource,
   installStealth,
+  fixUserAgent,
   injectNow,
   installOopifHook,
   newPage,