@xbrowser/cli 1.10.0 → 1.12.0

package/dist/{chunk-RRBXV7KE.js → chunk-DKM2JOZL.js}

@@ -5,6 +5,9 @@ import {
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
+import {
+  createRuleEngine
+} from "./chunk-H2A5JUK5.js";
 import {
   __require
 } from "./chunk-KFQGP6VL.js";
@@ -18,6 +21,285 @@ import { EventEmitter as EventEmitter2 } from "events";
 // src/cdp-driver/page.ts
 import { EventEmitter } from "events";
 
+// src/cdp-driver/stealth.ts
+var DEFAULT_STEALTH_CONFIG = {
+  bezierCurvature: [0.35, 0.6],
+  noiseAmplitude: 5.5,
+  overshootRange: [6, 14],
+  aimPause: [150, 400],
+  pressDuration: [60, 140],
+  releaseDrift: [0.8, 2.5],
+  landingOffsetSmall: [0.3, 2.5],
+  landingOffsetLarge: [1.5, 7],
+  smallElementThreshold: 30,
+  typingRhythm: {
+    fastProb: 0.22,
+    fastRange: [25, 60],
+    normalRange: [50, 350],
+    pauseProb: 0.18,
+    pauseRange: [400, 1200]
+  },
+  keyPressDuration: [50, 110],
+  typoProbability: 0.06,
+  wheelPeak: 180,
+  wheelDecayRate: 0.4
+};
+function rand(min, max) {
+  return min + Math.random() * (max - min);
+}
+function cosineEase(t) {
+  return 0.5 - 0.5 * Math.cos(Math.PI * t);
+}
+function bezierTrajectory(x0, y0, x1, y1, config = DEFAULT_STEALTH_CONFIG) {
+  const dist = Math.hypot(x1 - x0, y1 - y0);
+  const n = Math.max(10, Math.min(28, Math.round(dist / 15)));
+  const shortMove = dist < 120;
+  const curvature = shortMove ? rand(2, 6) : Math.max(dist * rand(...config.bezierCurvature), rand(18, 35));
+  const dir = Math.random() < 0.5 ? 1 : -1;
+  const d = dist || 1;
+  const dx = x1 - x0, dy = y1 - y0;
+  const c1x = x0 + dx * 0.3 - dy / d * curvature * 0.5 * dir;
+  const c1y = y0 + dy * 0.3 + dx / d * curvature * 0.5 * dir;
+  const c2x = x0 + dx * 0.7 - dy / d * curvature * 0.8 * dir;
+  const c2y = y0 + dy * 0.7 + dx / d * curvature * 0.8 * dir;
+  const points = [];
+  for (let i = 1; i <= n; i++) {
+    const t = cosineEase(i / n);
+    const mt = 1 - t;
+    let px = mt ** 3 * x0 + 3 * mt ** 2 * t * c1x + 3 * mt * t ** 2 * c2x + t ** 3 * x1;
+    let py = mt ** 3 * y0 + 3 * mt ** 2 * t * c1y + 3 * mt * t ** 2 * c2y + t ** 3 * y1;
+    const amp = shortMove ? Math.min(2, config.noiseAmplitude) : config.noiseAmplitude;
+    px += rand(-amp, amp);
+    py += rand(-amp, amp);
+    points.push({ x: px, y: py, delay: rand(9, 16) });
+  }
+  if (!shortMove) {
+    const over = rand(...config.overshootRange);
+    const ox = x1 + dx / d * over + rand(-2, 2);
+    const oy = y1 + dy / d * over + rand(-2, 2);
+    points.push({ x: ox, y: oy, delay: rand(14, 30) });
+    points.push({
+      x: x1 + dx / d * over * 0.4,
+      y: y1 + dy / d * over * 0.4,
+      delay: rand(14, 30)
+    });
+  }
+  points.push({ x: x1 + rand(-1, 1), y: y1 + rand(-1, 1), delay: rand(14, 30) });
+  return points;
+}
+function landingOffset(width, height, config = DEFAULT_STEALTH_CONFIG) {
+  const isSmall = Math.min(width, height) < config.smallElementThreshold;
+  const range = isSmall ? config.landingOffsetSmall : config.landingOffsetLarge;
+  const dx = rand(...range) * (Math.random() < 0.5 ? -1 : 1);
+  const dy = rand(...range) * (Math.random() < 0.5 ? -1 : 1);
+  return { dx, dy };
+}
+var KEY_MAP = {};
+for (let i = 97; i <= 122; i++) {
+  const ch = String.fromCharCode(i);
+  KEY_MAP[ch] = { key: ch, code: "Key" + ch.toUpperCase(), vk: i - 32 };
+}
+for (let i = 65; i <= 90; i++) {
+  const ch = String.fromCharCode(i);
+  KEY_MAP[ch] = { key: ch, code: "Key" + ch, vk: i, shift: true };
+}
+for (let i = 48; i <= 57; i++) {
+  const ch = String.fromCharCode(i);
+  KEY_MAP[ch] = { key: ch, code: "Digit" + ch, vk: i };
+}
+Object.assign(KEY_MAP, {
+  " ": { key: " ", code: "Space", vk: 32 },
+  ".": { key: ".", code: "Period", vk: 190 },
+  "-": { key: "-", code: "Minus", vk: 189 },
+  "@": { key: "@", code: "Digit2", vk: 50, shift: true },
+  "_": { key: "_", code: "Minus", vk: 189, shift: true }
+});
+function buildStealthInitScript() {
+  return [
+    "(function(){",
+    // 1. AEL event proxy
+    "  var o=EventTarget.prototype.addEventListener;",
+    "  var fc=new InputDeviceCapabilities({firesTouchEvents:false});",
+    "  var _ael=function(t,f){",
+    "    var op=arguments[2];",
+    '    if(typeof f!=="function")return o.call(this,t,f,op);',
+    "    var w=function(e){",
+    "      if(!e||e.constructor===FocusEvent||e.constructor===KeyboardEvent)return f.call(this,e);",
+    "      return f.call(this,new Proxy(e,{get:function(k,p){",
+    '        if(p==="sourceCapabilities")return fc;',
+    '        if(p==="isTrusted")return k.isTrusted;',
+    '        if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])&&k.isTrusted===true){',
+    "          var _f=((k.timeStamp||Date.now())%89)/89*0.7+0.15;",
+    "          return k[p]+_f;",
+    "        }",
+    '        var v=Reflect.get(k,p);return typeof v==="function"?v.bind(k):v;',
+    "      }}));",
+    "    };",
+    "    return o.call(this,t,w,op);",
+    "  };",
+    "  EventTarget.prototype.addEventListener=_ael;",
+    // 2. Screen override (prototype-level, not instance-level)
+    "  var _gw=function(){return 1728};",
+    "  var _gh=function(){return 1117};",
+    "  var _gah=function(){return 1092};",
+    '  Object.defineProperty(Screen.prototype,"width",{get:_gw,configurable:true});',
+    '  Object.defineProperty(Screen.prototype,"height",{get:_gh,configurable:true});',
+    '  Object.defineProperty(Screen.prototype,"availWidth",{get:_gw,configurable:true});',
+    '  Object.defineProperty(Screen.prototype,"availHeight",{get:_gah,configurable:true});',
+    "  document.hasFocus=function(){return true};",
+    // 4. Canvas/WebGL fingerprint: per-session stable noise (d20).
+    //    Headless software raster differs subtly from Chrome GPU raster —
+    //    toDataURL hashes fingerprint the rasterizer. Inject a stable
+    //    (per-page-load) subpixel shift into fillText so hashes look like a
+    //    distinct-but-consistent real GPU, and hide the HEADLESS tell in
+    //    WebGL renderer strings.
+    "  var _seed=Math.floor(Math.random()*2147483647);",
+    "  var _prng=function(){_seed=(_seed*48271)%2147483647;return _seed/2147483647;};",
+    "  var _dx=(_prng()*0.4-0.2).toFixed(3)*1, _dy=(_prng()*0.4-0.2).toFixed(3)*1;",
+    "  var _fillText=CanvasRenderingContext2D.prototype.fillText;",
+    "  CanvasRenderingContext2D.prototype.fillText=function(t,x,y,m){",
+    "    return _fillText.call(this,t,x+_dx,y+_dy,m);",
+    "  };",
+    "  var _toDataURL=HTMLCanvasElement.prototype.toDataURL;",
+    "  HTMLCanvasElement.prototype.toDataURL=function(){",
+    '    var ctx=this.getContext("2d");',
+    "    if(ctx){var d=ctx.getImageData(0,0,Math.min(this.width,2),Math.min(this.height,2));",
+    "      for(var i=0;i<d.data.length;i+=4){if(d.data[i+3]>0){d.data[i]^=1;break;}}",
+    "      ctx.putImageData(d,0,0);}",
+    "    return _toDataURL.apply(this,arguments);",
+    "  };",
+    "  try{",
+    "    var _gl=HTMLCanvasElement.prototype.getContext;",
+    "    HTMLCanvasElement.prototype.getContext=function(t,o){",
+    "      var c=_gl.call(this,t,o);",
+    '      if(c&&(t==="webgl"||t==="experimental-webgl")&&c.getParameter){',
+    "        var _gp=c.getParameter.bind(c);",
+    "        c.getParameter=function(p){",
+    "          var v=_gp(p);",
+    '          if(typeof v==="string"&&/SwiftShader|Software|Rasterizer|Headless/i.test(v))',
+    '            return "ANGLE (Apple, ANGLE Metal Renderer: Apple M2 Max, Unspecified Version)";',
+    "          return v;};}",
+    "      return c;};",
+    "  }catch(e){}",
+    // 5. AudioContext fingerprint: per-load stable micro-noise on channel
+    //    data (d21). DSP sum differences between headless software audio and
+    //    real hardware audio are a classic fingerprint — add ±1e-7 level
+    //    noise (inaudible, changes the sum hash).
+    "  try{",
+    "    var _gcd=AudioBuffer.prototype.getChannelData;",
+    "    AudioBuffer.prototype.getChannelData=function(ch){",
+    "      var d=_gcd.call(this,ch);",
+    '      var key="__xb_audio_"+ch;',
+    "      if(!this[key]){",
+    "        this[key]=true;",
+    "        for(var i=0;i<d.length;i+=997){d[i]=d[i]+(_prng()-0.5)*2e-7;}",
+    "      }",
+    "      return d;",
+    "    };",
+    "    var _gffd=AnalyserNode.prototype.getFloatFrequencyData;",
+    "    AnalyserNode.prototype.getFloatFrequencyData=function(arr){",
+    "      _gffd.call(this,arr);",
+    "      for(var i=0;i<arr.length;i+=31){arr[i]=arr[i]+(_prng()-0.5)*0.01;}",
+    "    };",
+    "    var _gfbd=AnalyserNode.prototype.getByteFrequencyData;",
+    "    AnalyserNode.prototype.getByteFrequencyData=function(arr){",
+    "      _gfbd.call(this,arr);",
+    "      for(var i=0;i<arr.length;i+=31){arr[i]=(arr[i]+((_prng()*3)|0))&255;}",
+    "    };",
+    "  }catch(e){}",
+    // 3b. Font metrics + speechSynthesis + battery (d22): headless tells
+    "  try{",
+    "    var _mt=CanvasRenderingContext2D.prototype.measureText;",
+    '    var _tmw=Object.getOwnPropertyDescriptor(TextMetrics.prototype,"width");',
+    "    CanvasRenderingContext2D.prototype.measureText=function(t){",
+    "      var m=_mt.call(this,t);",
+    '      try{Object.defineProperty(m,"width",{get:function(){return _tmw.get.call(m)+_dx*0.01;},configurable:true});}catch(e){}',
+    "      return m;",
+    "    };",
+    "  }catch(e){}",
+    "  try{",
+    '    var _fakeVoices=["Alex","Daniel","Karen","Moira","Ralph","Samantha","Ting-Ting","Mei-Jia","Sinji","Yunda"];',
+    "    var _sv=speechSynthesis.getVoices.bind(speechSynthesis);",
+    "    speechSynthesis.getVoices=function(){",
+    "      var real=_sv();",
+    "      if(real&&real.length)return real;",
+    '      return _fakeVoices.map(function(n,i){return {name:n,lang:i<2?"en-US":i<6?"en-GB":"zh-TW",localService:true,default:i===0,voiceURI:n};});',
+    "    };",
+    "  }catch(e){}",
+    "  try{",
+    "    var _gb=navigator.getBattery.bind(navigator);",
+    "    navigator.getBattery=function(){",
+    "      return _gb().then(function(b){",
+    '        Object.defineProperty(b,"charging",{get:function(){return true;},configurable:true});',
+    "        return b;});",
+    "    };",
+    "  }catch(e){}",
+    // 3c. WebRTC local IP leak guard (d23): headless STUN candidates can
+    //     expose host IPs; mDNS-only candidates are the modern Chrome default.
+    "  try{",
+    "    var _oc=RTCPeerConnection.prototype.createOffer;",
+    "    RTCPeerConnection.prototype.createOffer=function(){",
+    "      var p=_oc.apply(this,arguments);",
+    "      var self=this;",
+    "      return p.then(function(offer){",
+    '        offer.sdp=offer.sdp.split(String.fromCharCode(10)).filter(function(l){return l.indexOf("typ host")<0}).join(String.fromCharCode(10));',
+    "        return offer;});",
+    "    };",
+    "  }catch(e){}",
+    // 3d. Chrome object depth (d24): automation fakes usually only set
+    //     window.chrome = {}; deep checks hit app.run/runtime/csi/loadTimes.
+    "  try{",
+    "    if(window.chrome){",
+    '      if(!window.chrome.app||!window.chrome.app.run)window.chrome.app={run:function(){},load:function(){},getDetails:function(){return null},InstallState:{DISABLED:"disabled",INSTALLED:"installed",NOT_INSTALLED:"not_installed"},RunningState:{CANNOT_RUN:"cannot_run",READY_TO_RUN:"ready_to_run",RUNNING:"running"}};',
+    '      if(!window.chrome.runtime)window.chrome.runtime={OnInstalledReason:{CHROME_UPDATE:"chrome_update",INSTALL:"install",UPDATE:"update"},PlatformOs:{ANDROID:"android",CROS:"cros",LINUX:"linux",MAC:"mac",OPENBSD:"openbsd",WIN:"win"},connect:function(){},sendMessage:function(){},id:undefined};',
+    "      if(!window.chrome.csi)window.chrome.csi=function(){return{};}",
+    "      if(!window.chrome.loadTimes)window.chrome.loadTimes=function(){return{};}",
+    "    }",
+    "  }catch(e){}",
+    // 3e. Font availability patch (d25): headless Chromium misses some system
+    //     fonts (e.g. Menlo on macOS) that real Chrome has. Register a FontFace
+    //     aliasing the missing font to a local() equivalent so offsetWidth-based
+    //     font probing sees the same availability as the faked environment.
+    "  try{",
+    '    var _fontAliases=[["Menlo","Courier New"],["SF Mono","Menlo"],["Segoe UI","Helvetica"]];',
+    "    _fontAliases.forEach(function(pa){",
+    '      try{var ff=new FontFace(pa[0],"local("+JSON.stringify(pa[1])+")");',
+    "        document.fonts.add(ff);ff.load();}catch(e2){}",
+    "    });",
+    "  }catch(e){}",
+    // 3. toString disguise (name-list based)
+    "  var _ts=Function.prototype.toString;",
+    "  var _hf=document.hasFocus;",
+    "  Function.prototype.toString=function(){",
+    '    if(this===_ael)return"function addEventListener(type, callback) { [native code] }";',
+    '    if(this===_hf)return"function hasFocus() { [native code] }";',
+    '    if(this===_gw)return"function get width() { [native code] }";',
+    '    if(this===_gh)return"function get height() { [native code] }";',
+    '    if(this===_gah)return"function get availHeight() { [native code] }";',
+    '    if(this===CanvasRenderingContext2D.prototype.fillText)return"function fillText() { [native code] }";',
+    '    if(this===HTMLCanvasElement.prototype.toDataURL)return"function toDataURL() { [native code] }";',
+    '    if(this===AnalyserNode.prototype.getFloatFrequencyData)return"function getFloatFrequencyData() { [native code] }";',
+    '    if(this===AudioBuffer.prototype.getChannelData)return"function getChannelData() { [native code] }";',
+    "    return _ts.call(this);",
+    "  };",
+    // 4. onclick prototype hijack (dual-stream consistency)
+    "  var _ba=function(k,p){",
+    '    if(p==="isTrusted")return k.isTrusted;',
+    '    if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])&&k.isTrusted===true){',
+    "      var _f=((k.timeStamp||Date.now())%89)/89*0.7+0.15;return k[p]+_f;",
+    "    }",
+    '    var v=Reflect.get(k,p);return typeof v==="function"?v.bind(k):v;',
+    "  };",
+    '  Object.defineProperty(Document.prototype,"onclick",{',
+    "    configurable:true,",
+    "    get:function(){var raw=this.__ocRaw||null;if(!raw)return null;var self=this;",
+    "      return function(e){return raw.call(self,new Proxy(e,{get:function(k,p){return _ba(k,p)}}))}},",
+    "    set:function(fn){this.__ocRaw=fn}",
+    "  });",
+    "})()"
+  ].join("\n");
+}
+
 // src/cdp-driver/mouse.ts
 var XBMouseImpl = class {
   conn;
@@ -39,18 +321,46 @@ var XBMouseImpl = class {
   }
   async click(x, y, opts = {}) {
     const button = opts.button ?? "left";
-    const clickCount = opts.clickCount ?? 1;
-    const delay = opts.delay ?? 0;
-    await this.move(x, y);
-    await this.down({ button });
-    if (delay > 0) {
-      await sleep(delay);
+    const stealth = opts.stealth ?? process.env.XBROWSER_STEALTH !== "off";
+    let tx = x, ty = y;
+    if (stealth && opts.elementWidth !== void 0 && opts.elementHeight !== void 0) {
+      const off = landingOffset(opts.elementWidth, opts.elementHeight);
+      tx += off.dx;
+      ty += off.dy;
+    }
+    if (stealth) {
+      const traj = bezierTrajectory(this._x, this._y, tx, ty);
+      const _tb = Date.now();
+      let _truncated = false;
+      for (const p of traj) {
+        if (Date.now() - _tb > 5e3) {
+          _truncated = true;
+          break;
+        }
+        await this.send("Input.dispatchMouseEvent", { type: "mouseMoved", x: p.x, y: p.y, button: this._button });
+        this._x = p.x;
+        this._y = p.y;
+        await sleep(p.delay);
+      }
+      this._x = tx;
+      this._y = ty;
+      if (_truncated) {
+        await this.send("Input.dispatchMouseEvent", { type: "mouseMoved", x: tx, y: ty, button: this._button });
+      }
+      await sleep(rand(...DEFAULT_STEALTH_CONFIG.aimPause));
+    } else {
+      await this.move(tx, ty);
     }
-    await this.up({ button });
-    for (let i = 1; i < clickCount; i++) {
-      if (delay > 0) await sleep(delay);
+    await this.down({ button });
+    await sleep(stealth ? rand(...DEFAULT_STEALTH_CONFIG.pressDuration) : opts.delay ?? 0);
+    const rx = stealth ? this._x + rand(...DEFAULT_STEALTH_CONFIG.releaseDrift) * (Math.random() < 0.5 ? -1 : 1) : this._x;
+    const ry = stealth ? this._y + rand(...DEFAULT_STEALTH_CONFIG.releaseDrift) * (Math.random() < 0.5 ? -1 : 1) : this._y;
+    this._x = rx;
+    this._y = ry;
+    await this.send("Input.dispatchMouseEvent", { type: "mouseReleased", x: rx, y: ry, button, clickCount: opts.clickCount ?? 1 });
+    for (let i = 1; i < (opts.clickCount ?? 1); i++) {
+      if (opts.delay) await sleep(opts.delay);
       await this.down({ button });
-      if (delay > 0) await sleep(delay);
       await this.up({ button });
     }
   }
@@ -141,12 +451,20 @@ var XBKeyboardImpl = class {
     }
     await this.dispatchKeyEvent(downParams);
     if (mapping.text) {
+      if (process.env.XBROWSER_STEALTH !== "off") {
+        await sleep2(rand(...DEFAULT_STEALTH_CONFIG.keyPressDuration));
+      }
       await this.dispatchKeyEvent({
         type: "char",
         text: mapping.text
       });
     }
     if (delay > 0) await sleep2(delay);
+    else {
+      if (process.env.XBROWSER_STEALTH !== "off") {
+        await sleep2(rand(...DEFAULT_STEALTH_CONFIG.keyPressDuration));
+      }
+    }
     const upParams = {
       type: "keyUp",
       key: mapping.key,
@@ -229,7 +547,7 @@ var XBKeyboardImpl = class {
   }
 };
 function resolveKeyMapping(key) {
-  if (KEY_MAP[key]) return KEY_MAP[key];
+  if (KEY_MAP2[key]) return KEY_MAP2[key];
   if (key.length === 1) {
     const lower = key.toLowerCase();
     if (lower >= "a" && lower <= "z") {
@@ -246,7 +564,7 @@ function resolveKeyMapping(key) {
   }
   return { key, code: key };
 }
-var KEY_MAP = {
+var KEY_MAP2 = {
   Enter: { key: "Enter", code: "Enter", text: "\r", keyCode: 13 },
   Tab: { key: "Tab", code: "Tab", text: "	", keyCode: 9 },
   Escape: { key: "Escape", code: "Escape", keyCode: 27 },
@@ -284,6 +602,37 @@ function sleep2(ms) {
 
 // src/cdp-driver/selector-utils.ts
 function queryJS(selector) {
+  return `(${deepQueryIIFE})( ${JSON.stringify(queryMainJS(selector))} )`;
+}
+var deepQueryIIFE = `(function(mainExpr) {
+  const run = (root) => {
+    try { return new Function('document', 'return (' + mainExpr + ')')(root); }
+    catch (e) { return null; }
+  };
+  const scanRoot = (root) => {
+    const direct = run(root);
+    if (direct) return direct;
+    let all;
+    try { all = root.querySelectorAll('*'); } catch (e) { return null; }
+    for (const el of all) {
+      if (el.shadowRoot) {
+        const r = scanRoot(el.shadowRoot);
+        if (r) return r;
+      }
+      if (el.tagName === 'IFRAME') {
+        let inner = null;
+        try { inner = el.contentDocument; } catch (e) { /* cross-origin */ }
+        if (inner) {
+          const r = scanRoot(inner);
+          if (r) return r;
+        }
+      }
+    }
+    return null;
+  };
+  return scanRoot(document);
+})`;
+function queryMainJS(selector) {
   if (selector.startsWith("xpath=")) {
     const xpath = JSON.stringify(selector.slice(6));
     return `document.evaluate(${xpath}, document, null, XPathResult.FIRST_ORDERED_NODE_TYPE, null).singleNodeValue`;
@@ -295,13 +644,35 @@ function queryJS(selector) {
     return `(() => {
       const target = ${JSON.stringify(text)};
       const exact = ${exact};
+      // Match on OWN text nodes (not strict leaf elements): search-result
+      // titles mix text with inline highlight <em> marks \u2014 a strict leaf filter
+      // finds nothing there (real-world juejin). Own-text keeps the match
+      // precise (descendant-only text doesn't count) while tolerating markup.
+      const ownText = (e) => Array.prototype.filter.call(e.childNodes, (n) => n.nodeType === 3)
+        .map((n) => n.textContent).join('').trim();
       const els = [...document.querySelectorAll('*')].filter(e => {
-        if (e.children.length > 0) return false;
-        if (e.offsetParent === null) return false;
-        const t = (e.textContent || '').trim();
+        if (e.offsetParent === null && e.tagName !== 'BODY') return false;
+        const t = ownText(e);
         if (!t) return false;
         return exact ? t === target : t.toLowerCase().includes(target.toLowerCase());
       });
+      // Rank instead of raw DOM order: exact text beats substring, interactive
+      // elements (button/a/[onclick]/inputs) beat prose. Prevents matching a
+      // description paragraph that merely MENTIONS the target label
+      // (rec-duel d06: header text "\u76EE\u6807\u9879\u300C\u7B2C 87 \u53F7\u300D" hijacked text=\u7B2C 87 \u53F7).
+      const isInteractive = (e) => {
+        const tag = e.tagName;
+        return tag === 'BUTTON' || tag === 'A' || tag === 'INPUT' || tag === 'SELECT'
+          || e.hasAttribute('onclick') || e.getAttribute('role') === 'button';
+      };
+      els.sort((a, b) => {
+        const ta = ownText(a), tb = ownText(b);
+        const ea = ta === target ? 0 : 1, eb = tb === target ? 0 : 1;
+        if (ea !== eb) return ea - eb;
+        const ia = isInteractive(a) ? 0 : 1, ib = isInteractive(b) ? 0 : 1;
+        if (ia !== ib) return ia - ib;
+        return 0; // stable \u2014 preserve DOM order
+      });
       return els[0] || null;
     })()`;
   }
@@ -335,43 +706,53 @@ function queryAllJS(selector) {
 async function waitForActionable(page, selector, opts = {}) {
   const timeout = opts.timeout ?? 3e4;
   if (opts.force) {
-    if (selector.startsWith("xpath=")) {
-      const rect2 = await page.evaluate(`
+    const deadline2 = Date.now() + timeout;
+    let lastError;
+    while (Date.now() < deadline2) {
+      const rect = await page.evaluate(`
         (function() {
           const el = ${queryJS(selector)};
           if (!el) return null;
           const r = el.getBoundingClientRect();
-          return { x: r.x, y: r.y, width: r.width, height: r.height };
+          let x = r.x, y = r.y;
+          let doc = el.ownerDocument;
+          while (doc !== document) {
+            let host = null;
+            const scan = (d) => {
+              let frames;
+              try { frames = d.querySelectorAll('iframe'); } catch (e) { return null; }
+              for (const f of frames) {
+                let inner = null;
+                try { inner = f.contentDocument; } catch (e) { continue; }
+                if (!inner) continue;
+                if (inner === doc) return f;
+                const rr = scan(inner);
+                if (rr) return rr;
+              }
+              return null;
+            };
+            host = scan(document);
+            if (!host) break;
+            const hr = host.getBoundingClientRect();
+            x += hr.x; y += hr.y;
+            doc = host.ownerDocument;
+          }
+          return { x, y, width: r.width, height: r.height };
         })()
-      `);
-      if (!rect2) throw new Error(`Element not found: ${selector}`);
-      return { nodeId: 0, rect: rect2 };
-    }
-    const deadline2 = Date.now() + timeout;
-    let lastError;
-    let nodeId = 0;
-    let rect = null;
-    while (Date.now() < deadline2) {
-      nodeId = await page.querySelector(selector);
-      if (!nodeId) {
-        lastError = `Element not found: ${selector}`;
-        await page.waitForTimeout(200);
-        continue;
-      }
-      rect = await page.getBoxModel(nodeId);
-      if (rect) break;
-      lastError = `Element has no box: ${selector}`;
-      await page.waitForTimeout(500);
+      `).catch(() => null);
+      if (rect && rect.width > 0 && rect.height > 0) return { nodeId: 0, rect };
+      lastError = `Element not visible (zero size): ${selector}`;
+      lastError = `Element not found: ${selector}`;
+      await page.waitForTimeout(200);
     }
-    if (!rect) throw new Error(lastError || `Element has no box: ${selector}`);
-    return { nodeId, rect };
+    throw new Error(lastError || `Element not found: ${selector}`);
   }
   const deadline = Date.now() + timeout;
   while (Date.now() < deadline) {
     const result = await checkActionable(page, selector);
     if (result.ok && result.rect) {
-      const nodeId = await page.querySelector(selector);
-      if (nodeId) return { nodeId, rect: result.rect };
+      const nodeId = await page.querySelector(selector).catch(() => 0) ?? 0;
+      return { nodeId, rect: result.rect };
     }
     await page.waitForTimeout(50);
   }
@@ -404,12 +785,25 @@ async function checkActionable(page, selector) {
         return { ok: false, reason: 'parent_disabled' };
       }
 
-      // Check not covered by another element at center
+      // Check not covered by another element at center.
+      // elementFromPoint must run in the element's OWN document: for iframe-
+      // internal elements the main-document hit-test returns the <iframe>
+      // host itself, which falsely reports "covered" (rec-duel d01).
+      // For shadow-internal elements the hit-test retargets to the shadow
+      // HOST \u2014 walk the host chain before declaring coverage (rec-duel d04).
       const cx = rect.x + rect.width / 2;
       const cy = rect.y + rect.height / 2;
-      const topEl = document.elementFromPoint(cx, cy);
+      const topEl = el.ownerDocument.elementFromPoint(cx, cy);
       if (topEl && topEl !== el && !el.contains(topEl) && !topEl.contains(el)) {
-        return { ok: false, reason: 'covered', rect: { x: rect.x, y: rect.y, width: rect.width, height: rect.height } };
+        let hostChain = [];
+        let rootNode = el.getRootNode();
+        while (rootNode && rootNode.host) {
+          hostChain.push(rootNode.host);
+          rootNode = rootNode.host.getRootNode();
+        }
+        if (!hostChain.includes(topEl)) {
+          return { ok: false, reason: 'covered', rect: { x: rect.x, y: rect.y, width: rect.width, height: rect.height } };
+        }
       }
 
       return {
@@ -454,21 +848,48 @@ var XBLocatorImpl = class _XBLocatorImpl {
         const el = ${this._q(this.selector)};
         if (!el) return null;
         const rect = el.getBoundingClientRect();
-        return { x: rect.x, y: rect.y, width: rect.width, height: rect.height };
+        let x = rect.x, y = rect.y;
+        let doc = el.ownerDocument;
+        while (doc !== document) {
+          let host = null;
+          const scan = (d) => {
+            let frames;
+            try { frames = d.querySelectorAll('iframe'); } catch (e) { return null; }
+            for (const f of frames) {
+              let inner = null;
+              try { inner = f.contentDocument; } catch (e) { continue; }
+              if (!inner) continue;
+              if (inner === doc) return f;
+              const r = scan(inner);
+              if (r) return r;
+            }
+            return null;
+          };
+          host = scan(document);
+          if (!host) break;
+          const hr = host.getBoundingClientRect();
+          x += hr.x; y += hr.y;
+          doc = host.ownerDocument;
+        }
+        return { x, y, width: rect.width, height: rect.height };
       })()
     `);
     const finalRect = updatedRect ?? rect;
     const cx = finalRect.x + finalRect.width / 2;
     const cy = finalRect.y + finalRect.height / 2;
     await this.page.mouse.click(cx, cy, {
-      button: opts.button ?? "left",
-      clickCount: opts.clickCount ?? 1,
-      delay: opts.delay
+      stealth: true,
+      elementWidth: finalRect.width,
+      elementHeight: finalRect.height,
+      ...{ button: opts.button ?? "left", clickCount: opts.clickCount ?? 1, delay: opts.delay }
     });
   }
   async fill(value, opts = {}) {
     await waitForActionable(this.page, this.selector, opts);
     await scrollIntoView(this.page, this.selector);
+    await this.click({ ...opts });
+    await this.page.keyboard.type(value, { stealth: true });
+    return;
     await this.page.evaluate(`
       (function() {
         const el = ${this._q(this.selector)};
@@ -1178,6 +1599,8 @@ var XBPageImpl = class _XBPageImpl {
     await this.conn.send("Page.enable", void 0, this.sessionId);
     await this.conn.send("Runtime.enable", void 0, this.sessionId);
     await this.conn.send("Network.enable", void 0, this.sessionId);
+    await this.conn.send("DOM.enable", void 0, this.sessionId).catch(() => {
+    });
     this.setupPageEvents();
     this.setupNetworkEvents();
     this.setupConsoleEvents();
@@ -1190,6 +1613,9 @@ var XBPageImpl = class _XBPageImpl {
       );
       this._url = info.url;
       this._title = info.title;
+      if (info.url && info.url !== "about:blank" && info.url !== "") {
+        this._loadState = { loadFired: true, domContentFired: true, networkIdle: true };
+      }
     } catch {
     }
   }
@@ -1202,6 +1628,16 @@ var XBPageImpl = class _XBPageImpl {
     const waitUntil = opts.waitUntil ?? "load";
     const timeout = opts.timeout ?? 3e4;
     this._loadState = { loadFired: false, domContentFired: false, networkIdle: false };
+    if (process.env.XBROWSER_STEALTH !== "off") {
+      try {
+        await this.conn.send(
+          "Page.addScriptToEvaluateOnNewDocument",
+          { source: buildStealthInitScript() },
+          this.sessionId
+        );
+      } catch {
+      }
+    }
     const result = await this.conn.send(
       "Page.navigate",
       { url, referrer: opts.referer },
@@ -1409,6 +1845,91 @@ Last error: ${lastError.message}` : "";
     }
     return result.result?.value;
   }
+  /**
+   * 在指定 iframe 上下文中执行表达式（攻防 D16 能力建设，2026-08-19）。
+   *
+   * 双路径：
+   *  1. 同进程 iframe —— Runtime.enable 收集 executionContextCreated，
+   *     找到目标 frameId 的 contextId，用 contextId 定向执行；
+   *  2. 跨域 OOPIF（独立 target）—— Target.setAutoAttach(flatten) 监听
+   *     attachedToTarget 中 type==='iframe' 的会话，用其 sessionId 执行。
+   *
+   * 这绕过了页面同源策略（那是页面 JS 的约束，CDP 是调试通道）——
+   * 支付窗/验证码/第三方嵌入内容的读写都靠它。
+   */
+  async evaluateInFrame(urlIncludes, expression) {
+    if (this._closed) throw new Error("Page is closed");
+    const evalIn = async (sessionId, contextId) => {
+      const params = { expression, returnByValue: true, awaitPromise: true };
+      if (contextId !== void 0) params.contextId = contextId;
+      const result = await this.conn.send("Runtime.evaluate", params, sessionId);
+      if (result.exceptionDetails) {
+        const detail = result.exceptionDetails.exception?.description ?? result.exceptionDetails.exception?.value ?? result.exceptionDetails.text;
+        throw new Error(`[frame ${urlIncludes}] ${detail}`);
+      }
+      return result.result?.value;
+    };
+    try {
+      const tg = await this.conn.send("Target.getTargets", void 0);
+      const hit2 = (tg.targetInfos || []).find((t) => t.type === "iframe" && (t.url || "").includes(urlIncludes));
+      if (hit2) {
+        const att = await this.conn.send("Target.attachToTarget", { targetId: hit2.targetId, flatten: true });
+        return evalIn(att.sessionId);
+      }
+    } catch {
+    }
+    const tree = await this.conn.send("Page.getFrameTree", void 0, this.sessionId);
+    const all = [];
+    const walk = (node) => {
+      all.push({ id: node.frame.id, url: node.frame.url });
+      for (const child of node.childFrames || []) walk(child);
+    };
+    walk(tree.frameTree);
+    const mainId = tree.frameTree?.frame?.id;
+    const target = all.find((f) => f.id !== mainId && f.url.includes(urlIncludes));
+    if (target) {
+      const contexts = [];
+      const onCtx = (raw) => {
+        const c = raw?.context;
+        if (c?.id && c?.auxData?.frameId) contexts.push({ id: c.id, frameId: c.auxData.frameId });
+      };
+      this.conn.on("Runtime.executionContextCreated", onCtx);
+      try {
+        await this.conn.send("Runtime.enable", void 0, this.sessionId).catch(() => {
+        });
+        await new Promise((r) => setTimeout(r, 400));
+      } finally {
+        this.conn.off("Runtime.executionContextCreated", onCtx);
+      }
+      const ctx = contexts.find((c) => c.frameId === target.id);
+      if (ctx) return evalIn(this.sessionId, ctx.id);
+    }
+    const attached = [];
+    const onAttach = (raw) => {
+      const ev = raw;
+      if (ev?.sessionId && ev.targetInfo?.type === "iframe") {
+        attached.push({ sessionId: ev.sessionId, url: ev.targetInfo.url || "" });
+      }
+    };
+    this.conn.on("Target.attachedToTarget", onAttach);
+    try {
+      await this.conn.send("Target.setAutoAttach", {
+        autoAttach: true,
+        waitForDebuggerOnStart: false,
+        flatten: true
+      }, this.sessionId);
+      await new Promise((r) => setTimeout(r, 600));
+    } finally {
+      this.conn.off("Target.attachedToTarget", onAttach);
+      this.conn.send("Target.setAutoAttach", { autoAttach: false, waitForDebuggerOnStart: false, flatten: true }, this.sessionId).catch(() => {
+      });
+    }
+    const hit = attached.find((a) => a.url.includes(urlIncludes));
+    if (!hit) {
+      throw new Error(`frame not found for "${urlIncludes}"\uFF08OOPIF target\u3001frame \u6811\u3001auto-attach \u4E09\u8DEF\u5747\u672A\u547D\u4E2D\uFF1B\u53EF\u80FD\u4ECD\u5728\u52A0\u8F7D\uFF09`);
+    }
+    return evalIn(hit.sessionId);
+  }
   /** evaluateHandle — evaluates fn and returns a handle for element bounding box */
   async evaluateHandle(fn, ...args) {
     let expression;
@@ -1653,6 +2174,10 @@ Last error: ${lastError.message}` : "";
       this.sessionId
     );
   }
+  /** 覆盖 User-Agent（headless 环境对抗 UA 检测的标配能力） */
+  async setUserAgent(userAgent) {
+    await this._setUserAgent(userAgent);
+  }
   /** Internal: set extra HTTP headers */
   async _setExtraHTTPHeaders(headers) {
     await this.setExtraHTTPHeaders(headers);
@@ -1779,16 +2304,21 @@ Last error: ${lastError.message}` : "";
       }
       return 1;
     }
-    const doc = await this.conn.send(
-      "DOM.getDocument",
-      { depth: 0 },
-      this.sessionId
+    const withTimeout = (p, ms) => Promise.race([p, new Promise((r) => setTimeout(() => r(null), ms))]);
+    const doc = await withTimeout(
+      this.conn.send("DOM.getDocument", { depth: 0 }, this.sessionId),
+      8e3
     );
-    const result = await this.conn.send(
-      "DOM.querySelector",
-      { nodeId: doc.root.nodeId, selector },
-      this.sessionId
+    if (!doc) return 0;
+    const result = await withTimeout(
+      this.conn.send(
+        "DOM.querySelector",
+        { nodeId: doc.root.nodeId, selector },
+        this.sessionId
+      ),
+      8e3
     );
+    if (!result) return 0;
     return result.nodeId;
   }
   /** Query all matching elements, returns array of CDP nodeIds */
@@ -2777,9 +3307,28 @@ var XBBrowserImpl = class {
 // src/cdp-driver/connection.ts
 import { EventEmitter as EventEmitter4 } from "events";
 import { WebSocket } from "ws";
-var CDPConnection = class extends EventEmitter4 {
+var CDPConnection = class _CDPConnection extends EventEmitter4 {
   ws;
   nextId = 1;
+  /** CDP Guard：全部出站命令过规则引擎（env XBROWSER_CDP_GUARD=off 关闭）。
+   *  173 条规则 / 9 模块：合成事件 block、指纹暴露警告、自动化信号拦截。 */
+  static __guard;
+  get guard() {
+    if (_CDPConnection.__guard === void 0) {
+      if (process.env.XBROWSER_CDP_GUARD === "off") {
+        _CDPConnection.__guard = null;
+      } else {
+        try {
+          const g = createRuleEngine();
+          g.start();
+          _CDPConnection.__guard = g;
+        } catch {
+          _CDPConnection.__guard = null;
+        }
+      }
+    }
+    return _CDPConnection.__guard;
+  }
   pending = /* @__PURE__ */ new Map();
   closed = false;
   closeReason = null;
@@ -2803,6 +3352,8 @@ var CDPConnection = class extends EventEmitter4 {
    *  ping, the connection is considered dead and forcibly closed. */
   keepaliveTimer = null;
   pongTimer = null;
+  /** 最近一次收到任何 WS 消息的时间——有数据流动即证明连接存活 */
+  lastIncomingAt = Date.now();
   startKeepalive() {
     this.ws.on("pong", () => {
       if (this.pongTimer) {
@@ -2814,9 +3365,14 @@ var CDPConnection = class extends EventEmitter4 {
       if (this.ws.readyState === WebSocket.OPEN) {
         if (!this.pongTimer) {
           this.pongTimer = setTimeout(() => {
+            const recentlyActive = Date.now() - this.lastIncomingAt < 3e4;
+            if (recentlyActive) {
+              this.pongTimer = null;
+              return;
+            }
             if (!this.closed) {
               this.closed = true;
-              this.closeReason = "keepalive timeout (no pong in 10s)";
+              this.closeReason = "keepalive timeout (no pong and idle >30s)";
               try {
                 this.ws.terminate();
               } catch {
@@ -2828,7 +3384,7 @@ var CDPConnection = class extends EventEmitter4 {
               this.pending.clear();
               this.emit("disconnect");
             }
-          }, 1e4);
+          }, 6e4);
         }
         this.ws.ping?.();
       } else if (this.closed) {
@@ -2866,10 +3422,23 @@ var CDPConnection = class extends EventEmitter4 {
    * @param method — CDP domain.method (e.g. "Page.navigate")
    * @param params — method parameters
    * @param sessionId — optional flat session ID for sub-targets
-   * @param timeoutMs — response timeout (default: 30s)
+   * @param timeoutMs — response timeout (default: 30s；重 SPA 加载期间主线程忙，
+   *   evaluate 可排队 >30s——Runtime.evaluate 单独放宽到 90s)
    * @returns the `result` field from the CDP response
    */
-  async send(method, params, sessionId, timeoutMs = 3e4) {
+  async send(method, params, sessionId, timeoutMs) {
+    const effectiveTimeout = timeoutMs ?? (method === "Runtime.evaluate" ? 9e4 : 3e4);
+    if (this.guard) {
+      const decision = this.guard.evaluate({
+        method,
+        params: params ?? {},
+        sessionId: sessionId ?? this.defaultSessionId ?? "",
+        direction: "client\u2192browser"
+      });
+      if (decision && decision.action === "block") {
+        throw new Error(`[CDP-Guard] ${decision.reason}${decision.suggestion ? " | \u66FF\u4EE3: " + decision.suggestion : ""} [${decision.ruleId}]`);
+      }
+    }
     if (this.closed) {
       throw new Error(`CDP connection closed: ${this.closeReason ?? "unknown"}`);
     }
@@ -2884,8 +3453,8 @@ var CDPConnection = class extends EventEmitter4 {
     return new Promise((resolve, reject) => {
       const timeout = setTimeout(() => {
         this.pending.delete(id);
-        reject(new Error(`CDP timeout: ${method} (${timeoutMs}ms)`));
-      }, timeoutMs);
+        reject(new Error(`CDP timeout: ${method} (${effectiveTimeout}ms)`));
+      }, effectiveTimeout);
       this.pending.set(id, {
         resolve: (v) => {
           clearTimeout(timeout);
@@ -2968,6 +3537,7 @@ var CDPConnection = class extends EventEmitter4 {
   // ── Private ─────────────────────────────────────────────────
   bindWebSocket() {
     this.ws.on("message", (raw) => {
+      this.lastIncomingAt = Date.now();
       let msg;
       try {
         msg = JSON.parse(raw.toString());