@xbrowser/cli 1.11.0 → 1.12.0

package/dist/{chunk-JEDP4PJW.js → chunk-OVW2UEWN.js}

@@ -130,8 +130,8 @@ function buildStealthInitScript() {
     "      if(!e||e.constructor===FocusEvent||e.constructor===KeyboardEvent)return f.call(this,e);",
     "      return f.call(this,new Proxy(e,{get:function(k,p){",
     '        if(p==="sourceCapabilities")return fc;',
-    '        if(p==="isTrusted")return true;',
-    '        if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isFinite(k[p])){',
+    '        if(p==="isTrusted")return k.isTrusted;',
+    '        if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])&&k.isTrusted===true){',
     "          var _f=((k.timeStamp||Date.now())%89)/89*0.7+0.15;",
     "          return k[p]+_f;",
     "        }",
@@ -150,6 +150,126 @@ function buildStealthInitScript() {
     '  Object.defineProperty(Screen.prototype,"availWidth",{get:_gw,configurable:true});',
     '  Object.defineProperty(Screen.prototype,"availHeight",{get:_gah,configurable:true});',
     "  document.hasFocus=function(){return true};",
+    // 4. Canvas/WebGL fingerprint: per-session stable noise (d20).
+    //    Headless software raster differs subtly from Chrome GPU raster —
+    //    toDataURL hashes fingerprint the rasterizer. Inject a stable
+    //    (per-page-load) subpixel shift into fillText so hashes look like a
+    //    distinct-but-consistent real GPU, and hide the HEADLESS tell in
+    //    WebGL renderer strings.
+    "  var _seed=Math.floor(Math.random()*2147483647);",
+    "  var _prng=function(){_seed=(_seed*48271)%2147483647;return _seed/2147483647;};",
+    "  var _dx=(_prng()*0.4-0.2).toFixed(3)*1, _dy=(_prng()*0.4-0.2).toFixed(3)*1;",
+    "  var _fillText=CanvasRenderingContext2D.prototype.fillText;",
+    "  CanvasRenderingContext2D.prototype.fillText=function(t,x,y,m){",
+    "    return _fillText.call(this,t,x+_dx,y+_dy,m);",
+    "  };",
+    "  var _toDataURL=HTMLCanvasElement.prototype.toDataURL;",
+    "  HTMLCanvasElement.prototype.toDataURL=function(){",
+    '    var ctx=this.getContext("2d");',
+    "    if(ctx){var d=ctx.getImageData(0,0,Math.min(this.width,2),Math.min(this.height,2));",
+    "      for(var i=0;i<d.data.length;i+=4){if(d.data[i+3]>0){d.data[i]^=1;break;}}",
+    "      ctx.putImageData(d,0,0);}",
+    "    return _toDataURL.apply(this,arguments);",
+    "  };",
+    "  try{",
+    "    var _gl=HTMLCanvasElement.prototype.getContext;",
+    "    HTMLCanvasElement.prototype.getContext=function(t,o){",
+    "      var c=_gl.call(this,t,o);",
+    '      if(c&&(t==="webgl"||t==="experimental-webgl")&&c.getParameter){',
+    "        var _gp=c.getParameter.bind(c);",
+    "        c.getParameter=function(p){",
+    "          var v=_gp(p);",
+    '          if(typeof v==="string"&&/SwiftShader|Software|Rasterizer|Headless/i.test(v))',
+    '            return "ANGLE (Apple, ANGLE Metal Renderer: Apple M2 Max, Unspecified Version)";',
+    "          return v;};}",
+    "      return c;};",
+    "  }catch(e){}",
+    // 5. AudioContext fingerprint: per-load stable micro-noise on channel
+    //    data (d21). DSP sum differences between headless software audio and
+    //    real hardware audio are a classic fingerprint — add ±1e-7 level
+    //    noise (inaudible, changes the sum hash).
+    "  try{",
+    "    var _gcd=AudioBuffer.prototype.getChannelData;",
+    "    AudioBuffer.prototype.getChannelData=function(ch){",
+    "      var d=_gcd.call(this,ch);",
+    '      var key="__xb_audio_"+ch;',
+    "      if(!this[key]){",
+    "        this[key]=true;",
+    "        for(var i=0;i<d.length;i+=997){d[i]=d[i]+(_prng()-0.5)*2e-7;}",
+    "      }",
+    "      return d;",
+    "    };",
+    "    var _gffd=AnalyserNode.prototype.getFloatFrequencyData;",
+    "    AnalyserNode.prototype.getFloatFrequencyData=function(arr){",
+    "      _gffd.call(this,arr);",
+    "      for(var i=0;i<arr.length;i+=31){arr[i]=arr[i]+(_prng()-0.5)*0.01;}",
+    "    };",
+    "    var _gfbd=AnalyserNode.prototype.getByteFrequencyData;",
+    "    AnalyserNode.prototype.getByteFrequencyData=function(arr){",
+    "      _gfbd.call(this,arr);",
+    "      for(var i=0;i<arr.length;i+=31){arr[i]=(arr[i]+((_prng()*3)|0))&255;}",
+    "    };",
+    "  }catch(e){}",
+    // 3b. Font metrics + speechSynthesis + battery (d22): headless tells
+    "  try{",
+    "    var _mt=CanvasRenderingContext2D.prototype.measureText;",
+    '    var _tmw=Object.getOwnPropertyDescriptor(TextMetrics.prototype,"width");',
+    "    CanvasRenderingContext2D.prototype.measureText=function(t){",
+    "      var m=_mt.call(this,t);",
+    '      try{Object.defineProperty(m,"width",{get:function(){return _tmw.get.call(m)+_dx*0.01;},configurable:true});}catch(e){}',
+    "      return m;",
+    "    };",
+    "  }catch(e){}",
+    "  try{",
+    '    var _fakeVoices=["Alex","Daniel","Karen","Moira","Ralph","Samantha","Ting-Ting","Mei-Jia","Sinji","Yunda"];',
+    "    var _sv=speechSynthesis.getVoices.bind(speechSynthesis);",
+    "    speechSynthesis.getVoices=function(){",
+    "      var real=_sv();",
+    "      if(real&&real.length)return real;",
+    '      return _fakeVoices.map(function(n,i){return {name:n,lang:i<2?"en-US":i<6?"en-GB":"zh-TW",localService:true,default:i===0,voiceURI:n};});',
+    "    };",
+    "  }catch(e){}",
+    "  try{",
+    "    var _gb=navigator.getBattery.bind(navigator);",
+    "    navigator.getBattery=function(){",
+    "      return _gb().then(function(b){",
+    '        Object.defineProperty(b,"charging",{get:function(){return true;},configurable:true});',
+    "        return b;});",
+    "    };",
+    "  }catch(e){}",
+    // 3c. WebRTC local IP leak guard (d23): headless STUN candidates can
+    //     expose host IPs; mDNS-only candidates are the modern Chrome default.
+    "  try{",
+    "    var _oc=RTCPeerConnection.prototype.createOffer;",
+    "    RTCPeerConnection.prototype.createOffer=function(){",
+    "      var p=_oc.apply(this,arguments);",
+    "      var self=this;",
+    "      return p.then(function(offer){",
+    '        offer.sdp=offer.sdp.split(String.fromCharCode(10)).filter(function(l){return l.indexOf("typ host")<0}).join(String.fromCharCode(10));',
+    "        return offer;});",
+    "    };",
+    "  }catch(e){}",
+    // 3d. Chrome object depth (d24): automation fakes usually only set
+    //     window.chrome = {}; deep checks hit app.run/runtime/csi/loadTimes.
+    "  try{",
+    "    if(window.chrome){",
+    '      if(!window.chrome.app||!window.chrome.app.run)window.chrome.app={run:function(){},load:function(){},getDetails:function(){return null},InstallState:{DISABLED:"disabled",INSTALLED:"installed",NOT_INSTALLED:"not_installed"},RunningState:{CANNOT_RUN:"cannot_run",READY_TO_RUN:"ready_to_run",RUNNING:"running"}};',
+    '      if(!window.chrome.runtime)window.chrome.runtime={OnInstalledReason:{CHROME_UPDATE:"chrome_update",INSTALL:"install",UPDATE:"update"},PlatformOs:{ANDROID:"android",CROS:"cros",LINUX:"linux",MAC:"mac",OPENBSD:"openbsd",WIN:"win"},connect:function(){},sendMessage:function(){},id:undefined};',
+    "      if(!window.chrome.csi)window.chrome.csi=function(){return{};}",
+    "      if(!window.chrome.loadTimes)window.chrome.loadTimes=function(){return{};}",
+    "    }",
+    "  }catch(e){}",
+    // 3e. Font availability patch (d25): headless Chromium misses some system
+    //     fonts (e.g. Menlo on macOS) that real Chrome has. Register a FontFace
+    //     aliasing the missing font to a local() equivalent so offsetWidth-based
+    //     font probing sees the same availability as the faked environment.
+    "  try{",
+    '    var _fontAliases=[["Menlo","Courier New"],["SF Mono","Menlo"],["Segoe UI","Helvetica"]];',
+    "    _fontAliases.forEach(function(pa){",
+    '      try{var ff=new FontFace(pa[0],"local("+JSON.stringify(pa[1])+")");',
+    "        document.fonts.add(ff);ff.load();}catch(e2){}",
+    "    });",
+    "  }catch(e){}",
     // 3. toString disguise (name-list based)
     "  var _ts=Function.prototype.toString;",
     "  var _hf=document.hasFocus;",
@@ -159,12 +279,16 @@ function buildStealthInitScript() {
     '    if(this===_gw)return"function get width() { [native code] }";',
     '    if(this===_gh)return"function get height() { [native code] }";',
     '    if(this===_gah)return"function get availHeight() { [native code] }";',
+    '    if(this===CanvasRenderingContext2D.prototype.fillText)return"function fillText() { [native code] }";',
+    '    if(this===HTMLCanvasElement.prototype.toDataURL)return"function toDataURL() { [native code] }";',
+    '    if(this===AnalyserNode.prototype.getFloatFrequencyData)return"function getFloatFrequencyData() { [native code] }";',
+    '    if(this===AudioBuffer.prototype.getChannelData)return"function getChannelData() { [native code] }";',
     "    return _ts.call(this);",
     "  };",
     // 4. onclick prototype hijack (dual-stream consistency)
     "  var _ba=function(k,p){",
-    '    if(p==="isTrusted")return true;',
-    '    if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isFinite(k[p])){',
+    '    if(p==="isTrusted")return k.isTrusted;',
+    '    if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])&&k.isTrusted===true){',
     "      var _f=((k.timeStamp||Date.now())%89)/89*0.7+0.15;return k[p]+_f;",
     "    }",
     '    var v=Reflect.get(k,p);return typeof v==="function"?v.bind(k):v;',
@@ -200,7 +324,7 @@ var XBMouseImpl = class {
   }
   async click(x, y, opts = {}) {
     const button = opts.button ?? "left";
-    const stealth = opts.stealth ?? true;
+    const stealth = opts.stealth ?? process.env.XBROWSER_STEALTH !== "off";
     let tx = x, ty = y;
     if (stealth && opts.elementWidth !== void 0 && opts.elementHeight !== void 0) {
       const off = landingOffset(opts.elementWidth, opts.elementHeight);
@@ -209,12 +333,23 @@ var XBMouseImpl = class {
     }
     if (stealth) {
       const traj = bezierTrajectory(this._x, this._y, tx, ty);
+      const _tb = Date.now();
+      let _truncated = false;
       for (const p of traj) {
+        if (Date.now() - _tb > 5e3) {
+          _truncated = true;
+          break;
+        }
         await this.send("Input.dispatchMouseEvent", { type: "mouseMoved", x: p.x, y: p.y, button: this._button });
         this._x = p.x;
         this._y = p.y;
         await sleep(p.delay);
       }
+      this._x = tx;
+      this._y = ty;
+      if (_truncated) {
+        await this.send("Input.dispatchMouseEvent", { type: "mouseMoved", x: tx, y: ty, button: this._button });
+      }
       await sleep(rand(...DEFAULT_STEALTH_CONFIG.aimPause));
     } else {
       await this.move(tx, ty);
@@ -319,12 +454,20 @@ var XBKeyboardImpl = class {
     }
     await this.dispatchKeyEvent(downParams);
     if (mapping.text) {
+      if (process.env.XBROWSER_STEALTH !== "off") {
+        await sleep2(rand(...DEFAULT_STEALTH_CONFIG.keyPressDuration));
+      }
       await this.dispatchKeyEvent({
         type: "char",
         text: mapping.text
       });
     }
     if (delay > 0) await sleep2(delay);
+    else {
+      if (process.env.XBROWSER_STEALTH !== "off") {
+        await sleep2(rand(...DEFAULT_STEALTH_CONFIG.keyPressDuration));
+      }
+    }
     const upParams = {
       type: "keyUp",
       key: mapping.key,
@@ -2034,6 +2177,10 @@ Last error: ${lastError.message}` : "";
       this.sessionId
     );
   }
+  /** 覆盖 User-Agent（headless 环境对抗 UA 检测的标配能力） */
+  async setUserAgent(userAgent) {
+    await this._setUserAgent(userAgent);
+  }
   /** Internal: set extra HTTP headers */
   async _setExtraHTTPHeaders(headers) {
     await this.setExtraHTTPHeaders(headers);
@@ -3163,534 +3310,259 @@ var XBBrowserImpl = class {
 // src/cdp-driver/connection.ts
 import { EventEmitter as EventEmitter4 } from "events";
 import { WebSocket } from "ws";
-var CDPConnection = class extends EventEmitter4 {
-  ws;
-  nextId = 1;
-  pending = /* @__PURE__ */ new Map();
-  closed = false;
-  closeReason = null;
-  /** Default session ID for flat session protocol (Target.attachToTarget) */
-  defaultSessionId;
-  constructor(wsOrUrl, sessionId) {
-    super();
-    this.setMaxListeners(0);
-    this.defaultSessionId = sessionId;
-    if (typeof wsOrUrl === "string") {
-      const wsOptions = /^wss:\/\/\d+\.\d+\.\d+\.\d+/.test(wsOrUrl) ? { rejectUnauthorized: false } : void 0;
-      this.ws = new WebSocket(wsOrUrl, wsOptions);
-    } else {
-      this.ws = wsOrUrl;
+
+// src/cdp-interceptor/rules/shared.ts
+var PLAYWRIGHT_INTERNAL_MARKERS = [
+  "__commonJS",
+  "module.exports",
+  "__require",
+  "__toESM",
+  "inject_utils"
+];
+function isPlaywrightInternal(code) {
+  return PLAYWRIGHT_INTERNAL_MARKERS.some((marker) => code.includes(marker));
+}
+function extractUserCode(ctx) {
+  if (ctx.method === "Runtime.evaluate") {
+    const expr = ctx.params.expression;
+    if (typeof expr === "string") {
+      if (isPlaywrightInternal(expr)) return null;
+      return expr;
     }
-    this.bindWebSocket();
-    this.startKeepalive();
   }
-  /** Send periodic WS pings to prevent idle-timeout disconnects (e.g. CF's 100s).
-   *  Also detects dead connections: if a pong isn't received within 10s of a
-   *  ping, the connection is considered dead and forcibly closed. */
-  keepaliveTimer = null;
-  pongTimer = null;
-  startKeepalive() {
-    this.ws.on("pong", () => {
-      if (this.pongTimer) {
-        clearTimeout(this.pongTimer);
-        this.pongTimer = null;
-      }
-    });
-    this.keepaliveTimer = setInterval(() => {
-      if (this.ws.readyState === WebSocket.OPEN) {
-        if (!this.pongTimer) {
-          this.pongTimer = setTimeout(() => {
-            if (!this.closed) {
-              this.closed = true;
-              this.closeReason = "keepalive timeout (no pong in 10s)";
-              try {
-                this.ws.terminate();
-              } catch {
-              }
-              for (const [, pending] of this.pending) {
-                clearTimeout(pending.timeout);
-                pending.reject(new Error("Connection dead: keepalive timeout"));
-              }
-              this.pending.clear();
-              this.emit("disconnect");
-            }
-          }, 1e4);
-        }
-        this.ws.ping?.();
-      } else if (this.closed) {
-        if (this.keepaliveTimer) clearInterval(this.keepaliveTimer);
-        this.keepaliveTimer = null;
-      }
-    }, 3e4);
+  if (ctx.method === "Runtime.callFunctionOn") {
+    const decl = ctx.params.functionDeclaration;
+    if (typeof decl === "string" && decl.includes("utilityScript.evaluate")) {
+      return extractAllStrings(ctx.params.arguments);
+    }
+    if (typeof decl === "string") return decl;
   }
-  /** Wait for the connection to be fully open */
-  async ready() {
-    if (this.ws.readyState === WebSocket.OPEN) return;
-    if (this.ws.readyState === WebSocket.CLOSED || this.ws.readyState === WebSocket.CLOSING) {
-      throw new Error(`WebSocket already closed: ${this.closeReason ?? "unknown"}`);
+  return null;
+}
+function extractAllStrings(rawArgs) {
+  if (!Array.isArray(rawArgs)) return null;
+  const strings = [];
+  for (const arg of rawArgs) {
+    if (arg && typeof arg === "object" && "value" in arg) {
+      const val = arg.value;
+      if (typeof val === "string" && val.length > 5 && !["true", "false"].includes(val)) {
+        strings.push(val);
+      }
     }
-    return new Promise((resolve, reject) => {
-      const onOpen = () => {
-        this.ws.off("error", onError);
-        resolve();
-      };
-      const onError = (err) => {
-        this.ws.off("open", onOpen);
-        reject(err);
-      };
-      this.ws.once("open", onOpen);
-      this.ws.once("error", onError);
-    });
   }
-  /** Is the underlying WebSocket alive? */
-  get isOpen() {
-    return !this.closed && this.ws.readyState === WebSocket.OPEN;
+  return strings.length > 0 ? strings.join("\n") : null;
+}
+
+// src/cdp-interceptor/rules/dom-mutation.ts
+var DOM_PATTERNS = [
+  // ── P0: Value/Checked (bypasses React onChange) ────────────
+  { pattern: /\.value\s*=\s*(?!["'\s]*$)/, name: ".value =", severity: "danger", action: "pass", errorCode: -32001, suggestion: "Use page.fill(selector, value) which dispatches proper input/change events." },
+  { pattern: /\.checked\s*=\s*(?:true|false)/, name: ".checked =", severity: "danger", action: "pass", errorCode: -32001, suggestion: "Use page.check(selector) or page.uncheck(selector)." },
+  { pattern: /\.indeterminate\s*=\s*true/, name: ".indeterminate =", severity: "warn", action: "pass", errorCode: -32021, suggestion: "No human can set indeterminate state \u2014 remove this call." },
+  { pattern: /\.valueAsDate\s*=/, name: ".valueAsDate =", severity: "warn", action: "pass", errorCode: -32022, suggestion: "Use page.fill() with formatted date string instead." },
+  { pattern: /\.valueAsNumber\s*=/, name: ".valueAsNumber =", severity: "warn", action: "pass", errorCode: -32022, suggestion: "Use page.fill() with numeric string instead." },
+  // ── P1: Select/Option (bypasses React onChange on select) ─
+  { pattern: /\.selectedIndex\s*=\s*\d+/, name: ".selectedIndex =", severity: "danger", action: "pass", errorCode: -32003, suggestion: "Use page.selectOption(selector, value)." },
+  { pattern: /(?:options|children)\s*\[[^\]]*\]\s*\.\s*selected\s*=\s*(?:true|false)/, name: "options[N].selected =", severity: "danger", action: "pass", errorCode: -32003, suggestion: "Use page.selectOption(selector, value)." },
+  { pattern: /\.value\s*=\s*["'][^"']*["']\s*[;)]?\s*$/, name: "selectElement.value =", severity: "warn", action: "pass", errorCode: -32023, suggestion: "For select elements, use page.selectOption(selector, value)." },
+  // ── P2: Content properties (bypasses virtual DOM diffing) ──
+  { pattern: /\.innerHTML\s*=/, name: ".innerHTML =", severity: "info", action: "pass", errorCode: -32007, suggestion: ".innerHTML bypasses React/Vue diffing. Use component state or page.setContent()." },
+  { pattern: /\.outerHTML\s*=/, name: ".outerHTML =", severity: "info", action: "pass", errorCode: -32007, suggestion: "outerHTML replacement destroys React fiber tree. Use page.setContent()." },
+  { pattern: /\.innerText\s*=/, name: ".innerText =", severity: "warn", action: "pass", errorCode: -32024, suggestion: "Framework components should be updated via state, not innerText." },
+  { pattern: /\.textContent\s*=/, name: ".textContent =", severity: "warn", action: "pass", errorCode: -32024, suggestion: "textContent bypasses React/Vue diffing. Use component state instead." },
+  { pattern: /\.outerText\s*=/, name: ".outerText =", severity: "warn", action: "pass", errorCode: -32024, suggestion: "Non-standard property \u2014 use proper framework update methods." },
+  { pattern: /nodeValue\s*=/, name: "node.nodeValue =", severity: "info", action: "pass", errorCode: -32025, suggestion: "Direct text node mutation. Use textContent instead if needed." },
+  // ── P3: Style properties ──────────────────────────────────
+  { pattern: /\.style\s*=\s*["']/, name: ".style = (string override)", severity: "info", action: "pass", errorCode: -32008, suggestion: 'Setting style as a string overwrites CSSStyleDeclaration. Use element.style.prop = "value".' },
+  { pattern: /\.style\.cssText\s*=/, name: ".style.cssText =", severity: "info", action: "pass", errorCode: -32008, suggestion: "style.cssText replacement destroys inline styles \u2014 use individual property set." },
+  { pattern: /\.style\.setProperty\s*\(/, name: ".style.setProperty()", severity: "info", action: "pass", errorCode: -32008, suggestion: "Direct style property set bypasses CSS transitions." },
+  { pattern: /\.style\.removeProperty\s*\(/, name: ".style.removeProperty()", severity: "info", action: "pass", errorCode: -32026, suggestion: "Style removal without user interaction is suspicious." },
+  { pattern: /\.style\.animation\s*=/, name: ".style.animation =", severity: "info", action: "pass", errorCode: -32027, suggestion: "Forcing animation state via CDP is detectable." },
+  { pattern: /\.style\.transition\s*=/, name: ".style.transition =", severity: "info", action: "pass", errorCode: -32027, suggestion: "Manipulating CSS transitions is rare in normal browsing." },
+  // ── P4: Class/Attribute properties ────────────────────────
+  { pattern: /\.className\s*=/, name: ".className =", severity: "info", action: "pass", errorCode: -32009, suggestion: "Use component state or a Playwright locator instead." },
+  { pattern: /\.classList\.add\s*\(/, name: ".classList.add()", severity: "info", action: "pass", errorCode: -32009, suggestion: "classList manipulation via CDP bypasses framework state tracking." },
+  { pattern: /\.classList\.remove\s*\(/, name: ".classList.remove()", severity: "info", action: "pass", errorCode: -32009, suggestion: "Use component state or attribute selectors instead." },
+  { pattern: /\.classList\.toggle\s*\(/, name: ".classList.toggle()", severity: "info", action: "pass", errorCode: -32009, suggestion: "Toggle without user interaction is detectable." },
+  { pattern: /\.classList\.replace\s*\(/, name: ".classList.replace()", severity: "info", action: "pass", errorCode: -32028, suggestion: "Rare operation \u2014 likely automated." },
+  // ── P5: Attribute manipulation ────────────────────────────
+  { pattern: /\.setAttribute\s*\(/, name: ".setAttribute()", severity: "info", action: "pass", errorCode: -32010, suggestion: "setAttribute bypasses framework attribute tracking. Use component state." },
+  { pattern: /\.removeAttribute\s*\(/, name: ".removeAttribute()", severity: "info", action: "pass", errorCode: -32010, suggestion: "Attribute removal without user interaction is suspicious." },
+  { pattern: /\.toggleAttribute\s*\(/, name: ".toggleAttribute()", severity: "info", action: "pass", errorCode: -32029, suggestion: "Attribute toggling via CDP is detectable." },
+  { pattern: /\.dataset\.\w+\s*=/, name: ".dataset.* =", severity: "info", action: "pass", errorCode: -32030, suggestion: "dataset mutations via evaluate bypass native mutation observers." },
+  // ── P6: Focus/Selection properties ────────────────────────
+  { pattern: /\.selectionStart\s*=/, name: ".selectionStart =", severity: "info", action: "pass", errorCode: -32011, suggestion: "Setting cursor position without focus is detectable." },
+  { pattern: /\.selectionEnd\s*=/, name: ".selectionEnd =", severity: "info", action: "pass", errorCode: -32011, suggestion: "Selection range manipulation without user input is suspicious." },
+  { pattern: /\.selectionDirection\s*=/, name: ".selectionDirection =", severity: "info", action: "pass", errorCode: -32031, suggestion: "Selection direction changes normally via mouse drag." },
+  // ── P7: Boolean properties ────────────────────────────────
+  { pattern: /\.disabled\s*=/, name: ".disabled =", severity: "info", action: "pass", errorCode: -32012, suggestion: "Disabling elements via CDP mid-interaction is detectable." },
+  { pattern: /\.readOnly\s*=/, name: ".readOnly =", severity: "info", action: "pass", errorCode: -32032, suggestion: "readOnly changes without user action." },
+  { pattern: /\.hidden\s*=/, name: ".hidden =", severity: "info", action: "pass", errorCode: -32012, suggestion: "Hiding elements is a common scraper tactic \u2014 detectable." },
+  { pattern: /\.required\s*=/, name: ".required =", severity: "info", action: "pass", errorCode: -32032, suggestion: "Validation constraint changes mid-session." },
+  { pattern: /\.multiple\s*=/, name: ".multiple =", severity: "info", action: "pass", errorCode: -32032, suggestion: "Multiple attribute toggle is rare in normal browsing." },
+  { pattern: /\.autofocus\s*=/, name: ".autofocus =", severity: "info", action: "pass", errorCode: -32032, suggestion: "autofocus changes mid-session are suspicious." },
+  // ── P8: Frame/Navigation properties ───────────────────────
+  { pattern: /\.src\s*=/, name: ".src = (on img/iframe/script)", severity: "info", action: "pass", errorCode: -32013, suggestion: "Changing src via CDP bypasses user interaction. Use page.click() on the element." },
+  { pattern: /\.href\s*=/, name: ".href =", severity: "info", action: "pass", errorCode: -32033, suggestion: "Changing anchor href via evaluate \u2014 use page.click() instead." },
+  { pattern: /\.action\s*=/, name: "form.action =", severity: "info", action: "pass", errorCode: -32034, suggestion: "Changing form action URL is highly suspicious." },
+  { pattern: /\.method\s*=/, name: "form.method =", severity: "info", action: "pass", errorCode: -32034, suggestion: "Form method changes without user interaction." },
+  { pattern: /\.target\s*=/, name: "link/area.target =", severity: "info", action: "pass", errorCode: -32034, suggestion: "Link target manipulation via CDP." },
+  // ── P9: Media properties ──────────────────────────────────
+  { pattern: /\.currentTime\s*=/, name: "media.currentTime = (seeking)", severity: "info", action: "pass", errorCode: -32014, suggestion: "Video seeking without user interaction \u2014 common scraper pattern." },
+  { pattern: /\.playbackRate\s*=/, name: "media.playbackRate =", severity: "info", action: "pass", errorCode: -32014, suggestion: "Changing playback speed is detectable automation signal." },
+  { pattern: /\.volume\s*=/, name: "media.volume =", severity: "info", action: "pass", errorCode: -32035, suggestion: "Volume setting via evaluate is suspicious." },
+  { pattern: /\.muted\s*=/, name: "media.muted =", severity: "info", action: "pass", errorCode: -32035, suggestion: "Muting media without user click is suspicious." },
+  // ── P10: Element geometry ─────────────────────────────────
+  { pattern: /\.scrollTop\s*=/, name: ".scrollTop =", severity: "info", action: "pass", errorCode: -32015, suggestion: "Programmatic scroll without user gesture. Use page.mouse.wheel()." },
+  { pattern: /\.scrollLeft\s*=/, name: ".scrollLeft =", severity: "info", action: "pass", errorCode: -32015, suggestion: "Horizontal scroll without user gesture." },
+  { pattern: /\.scrollTo\s*\(/, name: ".scrollTo()", severity: "info", action: "pass", errorCode: -32015, suggestion: "ScrollTo bypasses user scroll detection." },
+  { pattern: /\.scrollBy\s*\(/, name: ".scrollBy()", severity: "info", action: "pass", errorCode: -32015, suggestion: "ScrollBy without user gesture." },
+  { pattern: /\.scrollIntoView\s*\(/, name: ".scrollIntoView()", severity: "info", action: "pass", errorCode: -32015, suggestion: "scrollIntoView is a common bot pattern. Let Playwright handle scrolling." },
+  // ── P11: Shadow DOM ───────────────────────────────────────
+  { pattern: /\.shadowRoot\s*=/, name: ".shadowRoot = (override)", severity: "info", action: "pass", errorCode: -32036, suggestion: "ShadowRoot is read-only \u2014 this set attempt is detectable." },
+  // ── P12: Force reflow / layout thrashing ──────────────────
+  { pattern: /\.offsetHeight\b(?!\s*===?\s*)/, name: ".offsetHeight read (forced reflow)", severity: "warn", action: "pass", errorCode: -32016, suggestion: "Reading offsetHeight triggers forced reflow \u2014 anti-crawlers detect this as layout probing." },
+  { pattern: /\.offsetWidth\b(?!\s*===?\s*)/, name: ".offsetWidth read (forced reflow)", severity: "warn", action: "pass", errorCode: -32016, suggestion: "Reading offsetWidth triggers forced reflow \u2014 detectable." },
+  { pattern: /getBoundingClientRect\s*\(/, name: "getBoundingClientRect()", severity: "warn", action: "pass", errorCode: -32037, suggestion: "getBoundingClientRect triggers reflow. Minimize calls." },
+  { pattern: /getComputedStyle\s*\(/, name: "getComputedStyle()", severity: "info", action: "pass", errorCode: -32038, suggestion: "getComputedStyle can trigger style recalculation." },
+  { pattern: /\.clientHeight\b/, name: ".clientHeight read", severity: "info", action: "pass", errorCode: -32038, suggestion: "clientHeight read triggers layout." },
+  { pattern: /\.clientWidth\b/, name: ".clientWidth read", severity: "info", action: "pass", errorCode: -32038, suggestion: "clientWidth read triggers layout." }
+];
+var domMutationRule = {
+  id: "dom-mutation",
+  name: "DOM Property Mutation Detection (50+ setters)",
+  priority: 10,
+  canHandle(ctx) {
+    return ctx.method === "Runtime.evaluate" || ctx.method === "Runtime.callFunctionOn";
+  },
+  evaluate(ctx) {
+    const userCode = extractUserCode(ctx);
+    if (!userCode) return null;
+    for (const p of DOM_PATTERNS) {
+      if (p.pattern.test(userCode)) {
+        return {
+          ruleId: "dom-mutation",
+          action: p.action,
+          severity: p.severity,
+          reason: `Direct DOM property setter: "${p.name}". This bypasses framework event systems and is detectable as automation.`,
+          suggestion: p.suggestion,
+          errorCode: p.errorCode,
+          errorMessage: p.severity === "danger" ? `[CDP Firewall] ${p.name} blocked \u2014 bypasses framework reactivity` : `[CDP Firewall] ${p.name} detected \u2014 use proper interaction API`
+        };
+      }
+    }
+    return null;
   }
-  /**
-   * Send a CDP command and await its response.
-   *
-   * @param method — CDP domain.method (e.g. "Page.navigate")
-   * @param params — method parameters
-   * @param sessionId — optional flat session ID for sub-targets
-   * @param timeoutMs — response timeout (default: 30s)
-   * @returns the `result` field from the CDP response
-   */
-  async send(method, params, sessionId, timeoutMs = 3e4) {
-    if (this.closed) {
-      throw new Error(`CDP connection closed: ${this.closeReason ?? "unknown"}`);
+};
+
+// src/cdp-interceptor/rules/mouse-trajectory.ts
+var TRACKER_KEY = "mouse-trajectory-tracker";
+var MAX_SAMPLES = 200;
+var MIN_SAMPLES_FOR_ANALYSIS = 5;
+var mouseTrajectoryRule = {
+  id: "mouse-trajectory",
+  name: "Mouse Trajectory Analysis",
+  priority: 20,
+  canHandle(ctx) {
+    return ctx.method === "Input.dispatchMouseEvent";
+  },
+  evaluate(ctx) {
+    const type = ctx.params.type;
+    const x = ctx.params.x;
+    const y = ctx.params.y;
+    if (typeof x !== "number" || typeof y !== "number") return null;
+    let tracker = ctx.sessionState.get(TRACKER_KEY);
+    if (!tracker) {
+      tracker = { samples: [], lastMouseDownAt: 0, isDragging: false };
+      ctx.sessionState.set(TRACKER_KEY, tracker);
     }
-    if (!this.isOpen) {
-      throw new Error(`CDP connection not open (state: ${this.ws.readyState})`);
+    if (type === "mousePressed") {
+      const priorResult = analyzeTrajectory(tracker.samples);
+      tracker.lastMouseDownAt = Date.now();
+      tracker.isDragging = true;
+      tracker.samples = [];
+      return priorResult;
     }
-    const id = this.nextId++;
-    const sid = sessionId ?? this.defaultSessionId;
-    const message = { id, method };
-    if (params !== void 0) message.params = params;
-    if (sid !== void 0) message.sessionId = sid;
-    return new Promise((resolve, reject) => {
-      const timeout = setTimeout(() => {
-        this.pending.delete(id);
-        reject(new Error(`CDP timeout: ${method} (${timeoutMs}ms)`));
-      }, timeoutMs);
-      this.pending.set(id, {
-        resolve: (v) => {
-          clearTimeout(timeout);
-          this.pending.delete(id);
-          resolve(v);
-        },
-        reject: (err) => {
-          clearTimeout(timeout);
-          this.pending.delete(id);
-          reject(err);
-        },
-        method,
-        timeout
-      });
-      const data = JSON.stringify(message);
-      try {
-        this.ws.send(data);
-      } catch (err) {
-        clearTimeout(timeout);
-        this.pending.delete(id);
-        reject(new Error(`CDP send failed: ${method} \u2014 ${err instanceof Error ? err.message : String(err)}`));
-      }
-    });
-  }
-  /**
-   * Subscribe to a CDP event.
-   *
-   * @param event — full event name (e.g. "Page.frameNavigated")
-   * @param handler — called with the event params
-   * @param sessionId — optional session filter
-   */
-  on(event, handler) {
-    return super.on(event, handler);
-  }
-  once(event, handler) {
-    return super.once(event, handler);
-  }
-  /** Remove an event listener */
-  off(event, handler) {
-    super.off(event, handler);
-    return this;
-  }
-  /**
-   * Subscribe to a CDP event for a specific session.
-   * Returns an unsubscribe function.
-   */
-  subscribe(event, sessionId, handler) {
-    const wrapper = (params, sid) => {
-      if (sid === sessionId || !sessionId && !sid) handler(params);
-    };
-    this.on(event, wrapper);
-    return () => this.off(event, wrapper);
-  }
-  /** Close the WebSocket */
-  async close() {
-    if (this.closed) return;
-    this.closed = true;
-    this.closeReason = "closed by caller";
-    if (this.keepaliveTimer) {
-      clearInterval(this.keepaliveTimer);
-      this.keepaliveTimer = null;
-    }
-    if (this.pongTimer) {
-      clearTimeout(this.pongTimer);
-      this.pongTimer = null;
+    if (type === "mouseReleased") {
+      tracker.isDragging = false;
+      const result = analyzeTrajectory(tracker.samples);
+      tracker.samples = [];
+      return result;
     }
-    for (const [id, pending] of this.pending) {
-      clearTimeout(pending.timeout);
-      pending.reject(new Error(`Connection closed: ${pending.method}`));
-      this.pending.delete(id);
+    if (type === "mouseMoved") {
+      const now = Date.now();
+      const prevSample = tracker.samples[tracker.samples.length - 1];
+      const distanceTraveled = prevSample ? prevSample.distanceTraveled + distance(prevSample.x, prevSample.y, x, y) : 0;
+      const sample = { x, y, timestamp: now, distanceTraveled };
+      tracker.samples.push(sample);
+      if (tracker.samples.length > MAX_SAMPLES) {
+        tracker.samples.shift();
+      }
+      return null;
     }
-    if (this.ws.readyState === WebSocket.OPEN || this.ws.readyState === WebSocket.CONNECTING) {
-      this.ws.close(1e3, "normal closure");
+    if (type === "mouseReleased" && tracker.samples.length < MIN_SAMPLES_FOR_ANALYSIS) {
+      tracker.samples = [];
+      return null;
     }
+    return null;
   }
-  /** Set the default session ID for flat protocol */
-  setDefaultSessionId(sid) {
-    this.defaultSessionId = sid;
+};
+function analyzeTrajectory(samples) {
+  if (samples.length < MIN_SAMPLES_FOR_ANALYSIS) return null;
+  const issues = [];
+  const startX = samples[0].x;
+  const startY = samples[0].y;
+  const endX = samples[samples.length - 1].x;
+  const endY = samples[samples.length - 1].y;
+  const lineLength = distance(startX, startY, endX, endY);
+  const collinearityResult = checkCollinearity(samples, startX, startY, endX, endY, lineLength);
+  if (collinearityResult) {
+    issues.push(collinearityResult);
   }
-  // ── Private ─────────────────────────────────────────────────
-  bindWebSocket() {
-    this.ws.on("message", (raw) => {
-      let msg;
-      try {
-        msg = JSON.parse(raw.toString());
-      } catch {
-        return;
-      }
-      if (msg.id !== void 0) {
-        const pending = this.pending.get(msg.id);
-        if (!pending) return;
-        if (msg.error) {
-          pending.reject(new CDPProtocolError(msg.error.code, msg.error.message, pending.method));
-        } else {
-          pending.resolve(msg.result ?? {});
-        }
-        return;
-      }
-      if (msg.method) {
-        this.emit(msg.method, msg.params ?? {}, msg.sessionId);
-        this.emit("*", msg.method, msg.params ?? {}, msg.sessionId);
-      }
-    });
-    this.ws.on("close", (code, reason) => {
-      if (this.closed) return;
-      this.closed = true;
-      this.closeReason = `WebSocket closed: ${code} ${reason?.toString() ?? ""}`.trim();
-      if (this.keepaliveTimer) {
-        clearInterval(this.keepaliveTimer);
-        this.keepaliveTimer = null;
-      }
-      for (const [id, pending] of this.pending) {
-        clearTimeout(pending.timeout);
-        pending.reject(new Error(`Connection closed: ${pending.method}`));
-        this.pending.delete(id);
-      }
-      this.emit("disconnect");
-    });
-    this.ws.on("error", (err) => {
-      if (this.closed) return;
-      this.emit("ws-error", err);
-    });
+  const velocityResult = checkConstantVelocity(samples);
+  if (velocityResult) {
+    issues.push(velocityResult);
   }
-};
-var CDPProtocolError = class extends Error {
-  code;
-  method;
-  data;
-  constructor(code, message, method, data) {
-    super(`CDP error [${code}] in ${method}: ${message}`);
-    this.name = "CDPProtocolError";
-    this.code = code;
-    this.method = method;
-    this.data = data;
+  const jitterResult = checkJitter(samples);
+  if (jitterResult) {
+    issues.push(jitterResult);
   }
-};
+  if (issues.length === 0) return null;
+  const stopX = samples[samples.length - 1].x;
+  const stopY = samples[samples.length - 1].y;
+  return {
+    ruleId: "mouse-trajectory",
+    action: "pass",
+    severity: "danger",
+    reason: `Suspicious mouse trajectory: ${issues.join("; ")}`,
+    suggestion: `This mouse movement appears automated (straight line A\u2192B, no natural variation).
+  Use a humanized mouse API that generates:
+  - Bezier curves instead of straight lines
+  - Random acceleration/deceleration
+  - 1-3px micro-jitter per sample
 
-// src/cdp-driver/index.ts
-async function launch(options = {}) {
-  let wsEndpoint;
-  let childProcess;
-  let tmpDir;
-  if (options.cdpEndpoint) {
-    wsEndpoint = await connectToCDP(options.cdpEndpoint);
-  } else {
-    const result = await launchChrome({
-      executablePath: options.executablePath,
-      headless: options.headless,
-      args: options.args,
-      userDataDir: options.userDataDir,
-      timeout: options.timeout,
-      env: options.env
-    });
-    wsEndpoint = result.wsEndpoint;
-    childProcess = result.process;
-    tmpDir = result.tmpDir;
-  }
-  const conn = new CDPConnection(wsEndpoint);
-  await conn.ready();
-  const httpEndpoint = options.cdpEndpoint && !options.cdpEndpoint.startsWith("ws") ? options.cdpEndpoint : void 0;
-  const browser = new XBBrowserImpl(conn, childProcess, tmpDir, httpEndpoint);
-  return { browser, wsEndpoint };
+  Example: The 'faker' or 'ghost-cursor' libraries generate realistic mouse paths.
+  Target was: (${Math.round(startX)}, ${Math.round(startY)}) \u2192 (${Math.round(stopX)}, ${Math.round(stopY)})`,
+    errorCode: -32002,
+    errorMessage: "[CDP Firewall] Automated mouse trajectory blocked \u2014 appears non-human"
+  };
 }
-
-// src/cdp-interceptor/proxy.ts
-import { WebSocketServer, WebSocket as WebSocket2 } from "ws";
-
-// src/cdp-interceptor/rules/shared.ts
-var PLAYWRIGHT_INTERNAL_MARKERS = [
-  "__commonJS",
-  "module.exports",
-  "__require",
-  "__toESM",
-  "inject_utils"
-];
-function isPlaywrightInternal(code) {
-  return PLAYWRIGHT_INTERNAL_MARKERS.some((marker) => code.includes(marker));
+function distance(x1, y1, x2, y2) {
+  return Math.sqrt((x2 - x1) ** 2 + (y2 - y1) ** 2);
 }
-function extractUserCode(ctx) {
-  if (ctx.method === "Runtime.evaluate") {
-    const expr = ctx.params.expression;
-    if (typeof expr === "string") {
-      if (isPlaywrightInternal(expr)) return null;
-      return expr;
-    }
+function checkCollinearity(samples, x1, y1, x2, y2, lineLength) {
+  if (lineLength < 5) return null;
+  let maxDeviation = 0;
+  const dx = x2 - x1;
+  const dy = y2 - y1;
+  for (let i = 1; i < samples.length - 1; i++) {
+    const { x, y } = samples[i];
+    const cross = Math.abs(dy * x - dx * y + x2 * y1 - y2 * x1);
+    const dev = cross / lineLength;
+    if (dev > maxDeviation) maxDeviation = dev;
   }
-  if (ctx.method === "Runtime.callFunctionOn") {
-    const decl = ctx.params.functionDeclaration;
-    if (typeof decl === "string" && decl.includes("utilityScript.evaluate")) {
-      return extractAllStrings(ctx.params.arguments);
-    }
-    if (typeof decl === "string") return decl;
-  }
-  return null;
-}
-function extractAllStrings(rawArgs) {
-  if (!Array.isArray(rawArgs)) return null;
-  const strings = [];
-  for (const arg of rawArgs) {
-    if (arg && typeof arg === "object" && "value" in arg) {
-      const val = arg.value;
-      if (typeof val === "string" && val.length > 5 && !["true", "false"].includes(val)) {
-        strings.push(val);
-      }
-    }
-  }
-  return strings.length > 0 ? strings.join("\n") : null;
-}
-
-// src/cdp-interceptor/rules/dom-mutation.ts
-var DOM_PATTERNS = [
-  // ── P0: Value/Checked (bypasses React onChange) ────────────
-  { pattern: /\.value\s*=\s*(?!["'\s]*$)/, name: ".value =", severity: "danger", action: "block", errorCode: -32001, suggestion: "Use page.fill(selector, value) which dispatches proper input/change events." },
-  { pattern: /\.checked\s*=\s*(?:true|false)/, name: ".checked =", severity: "danger", action: "block", errorCode: -32001, suggestion: "Use page.check(selector) or page.uncheck(selector)." },
-  { pattern: /\.indeterminate\s*=\s*true/, name: ".indeterminate =", severity: "warn", action: "block", errorCode: -32021, suggestion: "No human can set indeterminate state \u2014 remove this call." },
-  { pattern: /\.valueAsDate\s*=/, name: ".valueAsDate =", severity: "warn", action: "block", errorCode: -32022, suggestion: "Use page.fill() with formatted date string instead." },
-  { pattern: /\.valueAsNumber\s*=/, name: ".valueAsNumber =", severity: "warn", action: "block", errorCode: -32022, suggestion: "Use page.fill() with numeric string instead." },
-  // ── P1: Select/Option (bypasses React onChange on select) ─
-  { pattern: /\.selectedIndex\s*=\s*\d+/, name: ".selectedIndex =", severity: "danger", action: "block", errorCode: -32003, suggestion: "Use page.selectOption(selector, value)." },
-  { pattern: /(?:options|children)\s*\[[^\]]*\]\s*\.\s*selected\s*=\s*(?:true|false)/, name: "options[N].selected =", severity: "danger", action: "block", errorCode: -32003, suggestion: "Use page.selectOption(selector, value)." },
-  { pattern: /\.value\s*=\s*["'][^"']*["']\s*[;)]?\s*$/, name: "selectElement.value =", severity: "warn", action: "block", errorCode: -32023, suggestion: "For select elements, use page.selectOption(selector, value)." },
-  // ── P2: Content properties (bypasses virtual DOM diffing) ──
-  { pattern: /\.innerHTML\s*=/, name: ".innerHTML =", severity: "info", action: "pass", errorCode: -32007, suggestion: ".innerHTML bypasses React/Vue diffing. Use component state or page.setContent()." },
-  { pattern: /\.outerHTML\s*=/, name: ".outerHTML =", severity: "info", action: "pass", errorCode: -32007, suggestion: "outerHTML replacement destroys React fiber tree. Use page.setContent()." },
-  { pattern: /\.innerText\s*=/, name: ".innerText =", severity: "warn", action: "block", errorCode: -32024, suggestion: "Framework components should be updated via state, not innerText." },
-  { pattern: /\.textContent\s*=/, name: ".textContent =", severity: "warn", action: "block", errorCode: -32024, suggestion: "textContent bypasses React/Vue diffing. Use component state instead." },
-  { pattern: /\.outerText\s*=/, name: ".outerText =", severity: "warn", action: "block", errorCode: -32024, suggestion: "Non-standard property \u2014 use proper framework update methods." },
-  { pattern: /nodeValue\s*=/, name: "node.nodeValue =", severity: "info", action: "block", errorCode: -32025, suggestion: "Direct text node mutation. Use textContent instead if needed." },
-  // ── P3: Style properties ──────────────────────────────────
-  { pattern: /\.style\s*=\s*["']/, name: ".style = (string override)", severity: "info", action: "pass", errorCode: -32008, suggestion: 'Setting style as a string overwrites CSSStyleDeclaration. Use element.style.prop = "value".' },
-  { pattern: /\.style\.cssText\s*=/, name: ".style.cssText =", severity: "info", action: "pass", errorCode: -32008, suggestion: "style.cssText replacement destroys inline styles \u2014 use individual property set." },
-  { pattern: /\.style\.setProperty\s*\(/, name: ".style.setProperty()", severity: "info", action: "pass", errorCode: -32008, suggestion: "Direct style property set bypasses CSS transitions." },
-  { pattern: /\.style\.removeProperty\s*\(/, name: ".style.removeProperty()", severity: "info", action: "pass", errorCode: -32026, suggestion: "Style removal without user interaction is suspicious." },
-  { pattern: /\.style\.animation\s*=/, name: ".style.animation =", severity: "info", action: "pass", errorCode: -32027, suggestion: "Forcing animation state via CDP is detectable." },
-  { pattern: /\.style\.transition\s*=/, name: ".style.transition =", severity: "info", action: "pass", errorCode: -32027, suggestion: "Manipulating CSS transitions is rare in normal browsing." },
-  // ── P4: Class/Attribute properties ────────────────────────
-  { pattern: /\.className\s*=/, name: ".className =", severity: "info", action: "pass", errorCode: -32009, suggestion: "Use component state or a Playwright locator instead." },
-  { pattern: /\.classList\.add\s*\(/, name: ".classList.add()", severity: "info", action: "pass", errorCode: -32009, suggestion: "classList manipulation via CDP bypasses framework state tracking." },
-  { pattern: /\.classList\.remove\s*\(/, name: ".classList.remove()", severity: "info", action: "pass", errorCode: -32009, suggestion: "Use component state or attribute selectors instead." },
-  { pattern: /\.classList\.toggle\s*\(/, name: ".classList.toggle()", severity: "info", action: "pass", errorCode: -32009, suggestion: "Toggle without user interaction is detectable." },
-  { pattern: /\.classList\.replace\s*\(/, name: ".classList.replace()", severity: "info", action: "pass", errorCode: -32028, suggestion: "Rare operation \u2014 likely automated." },
-  // ── P5: Attribute manipulation ────────────────────────────
-  { pattern: /\.setAttribute\s*\(/, name: ".setAttribute()", severity: "info", action: "pass", errorCode: -32010, suggestion: "setAttribute bypasses framework attribute tracking. Use component state." },
-  { pattern: /\.removeAttribute\s*\(/, name: ".removeAttribute()", severity: "info", action: "pass", errorCode: -32010, suggestion: "Attribute removal without user interaction is suspicious." },
-  { pattern: /\.toggleAttribute\s*\(/, name: ".toggleAttribute()", severity: "info", action: "pass", errorCode: -32029, suggestion: "Attribute toggling via CDP is detectable." },
-  { pattern: /\.dataset\.\w+\s*=/, name: ".dataset.* =", severity: "info", action: "pass", errorCode: -32030, suggestion: "dataset mutations via evaluate bypass native mutation observers." },
-  // ── P6: Focus/Selection properties ────────────────────────
-  { pattern: /\.selectionStart\s*=/, name: ".selectionStart =", severity: "info", action: "pass", errorCode: -32011, suggestion: "Setting cursor position without focus is detectable." },
-  { pattern: /\.selectionEnd\s*=/, name: ".selectionEnd =", severity: "info", action: "pass", errorCode: -32011, suggestion: "Selection range manipulation without user input is suspicious." },
-  { pattern: /\.selectionDirection\s*=/, name: ".selectionDirection =", severity: "info", action: "pass", errorCode: -32031, suggestion: "Selection direction changes normally via mouse drag." },
-  // ── P7: Boolean properties ────────────────────────────────
-  { pattern: /\.disabled\s*=/, name: ".disabled =", severity: "info", action: "pass", errorCode: -32012, suggestion: "Disabling elements via CDP mid-interaction is detectable." },
-  { pattern: /\.readOnly\s*=/, name: ".readOnly =", severity: "info", action: "pass", errorCode: -32032, suggestion: "readOnly changes without user action." },
-  { pattern: /\.hidden\s*=/, name: ".hidden =", severity: "info", action: "pass", errorCode: -32012, suggestion: "Hiding elements is a common scraper tactic \u2014 detectable." },
-  { pattern: /\.required\s*=/, name: ".required =", severity: "info", action: "pass", errorCode: -32032, suggestion: "Validation constraint changes mid-session." },
-  { pattern: /\.multiple\s*=/, name: ".multiple =", severity: "info", action: "pass", errorCode: -32032, suggestion: "Multiple attribute toggle is rare in normal browsing." },
-  { pattern: /\.autofocus\s*=/, name: ".autofocus =", severity: "info", action: "pass", errorCode: -32032, suggestion: "autofocus changes mid-session are suspicious." },
-  // ── P8: Frame/Navigation properties ───────────────────────
-  { pattern: /\.src\s*=/, name: ".src = (on img/iframe/script)", severity: "info", action: "pass", errorCode: -32013, suggestion: "Changing src via CDP bypasses user interaction. Use page.click() on the element." },
-  { pattern: /\.href\s*=/, name: ".href =", severity: "info", action: "pass", errorCode: -32033, suggestion: "Changing anchor href via evaluate \u2014 use page.click() instead." },
-  { pattern: /\.action\s*=/, name: "form.action =", severity: "info", action: "pass", errorCode: -32034, suggestion: "Changing form action URL is highly suspicious." },
-  { pattern: /\.method\s*=/, name: "form.method =", severity: "info", action: "pass", errorCode: -32034, suggestion: "Form method changes without user interaction." },
-  { pattern: /\.target\s*=/, name: "link/area.target =", severity: "info", action: "pass", errorCode: -32034, suggestion: "Link target manipulation via CDP." },
-  // ── P9: Media properties ──────────────────────────────────
-  { pattern: /\.currentTime\s*=/, name: "media.currentTime = (seeking)", severity: "info", action: "pass", errorCode: -32014, suggestion: "Video seeking without user interaction \u2014 common scraper pattern." },
-  { pattern: /\.playbackRate\s*=/, name: "media.playbackRate =", severity: "info", action: "pass", errorCode: -32014, suggestion: "Changing playback speed is detectable automation signal." },
-  { pattern: /\.volume\s*=/, name: "media.volume =", severity: "info", action: "pass", errorCode: -32035, suggestion: "Volume setting via evaluate is suspicious." },
-  { pattern: /\.muted\s*=/, name: "media.muted =", severity: "info", action: "pass", errorCode: -32035, suggestion: "Muting media without user click is suspicious." },
-  // ── P10: Element geometry ─────────────────────────────────
-  { pattern: /\.scrollTop\s*=/, name: ".scrollTop =", severity: "info", action: "pass", errorCode: -32015, suggestion: "Programmatic scroll without user gesture. Use page.mouse.wheel()." },
-  { pattern: /\.scrollLeft\s*=/, name: ".scrollLeft =", severity: "info", action: "pass", errorCode: -32015, suggestion: "Horizontal scroll without user gesture." },
-  { pattern: /\.scrollTo\s*\(/, name: ".scrollTo()", severity: "info", action: "pass", errorCode: -32015, suggestion: "ScrollTo bypasses user scroll detection." },
-  { pattern: /\.scrollBy\s*\(/, name: ".scrollBy()", severity: "info", action: "pass", errorCode: -32015, suggestion: "ScrollBy without user gesture." },
-  { pattern: /\.scrollIntoView\s*\(/, name: ".scrollIntoView()", severity: "info", action: "pass", errorCode: -32015, suggestion: "scrollIntoView is a common bot pattern. Let Playwright handle scrolling." },
-  // ── P11: Shadow DOM ───────────────────────────────────────
-  { pattern: /\.shadowRoot\s*=/, name: ".shadowRoot = (override)", severity: "info", action: "block", errorCode: -32036, suggestion: "ShadowRoot is read-only \u2014 this set attempt is detectable." },
-  // ── P12: Force reflow / layout thrashing ──────────────────
-  { pattern: /\.offsetHeight\b(?!\s*===?\s*)/, name: ".offsetHeight read (forced reflow)", severity: "warn", action: "pass", errorCode: -32016, suggestion: "Reading offsetHeight triggers forced reflow \u2014 anti-crawlers detect this as layout probing." },
-  { pattern: /\.offsetWidth\b(?!\s*===?\s*)/, name: ".offsetWidth read (forced reflow)", severity: "warn", action: "pass", errorCode: -32016, suggestion: "Reading offsetWidth triggers forced reflow \u2014 detectable." },
-  { pattern: /getBoundingClientRect\s*\(/, name: "getBoundingClientRect()", severity: "warn", action: "pass", errorCode: -32037, suggestion: "getBoundingClientRect triggers reflow. Minimize calls." },
-  { pattern: /getComputedStyle\s*\(/, name: "getComputedStyle()", severity: "info", action: "pass", errorCode: -32038, suggestion: "getComputedStyle can trigger style recalculation." },
-  { pattern: /\.clientHeight\b/, name: ".clientHeight read", severity: "info", action: "pass", errorCode: -32038, suggestion: "clientHeight read triggers layout." },
-  { pattern: /\.clientWidth\b/, name: ".clientWidth read", severity: "info", action: "pass", errorCode: -32038, suggestion: "clientWidth read triggers layout." }
-];
-var domMutationRule = {
-  id: "dom-mutation",
-  name: "DOM Property Mutation Detection (50+ setters)",
-  priority: 10,
-  canHandle(ctx) {
-    return ctx.method === "Runtime.evaluate" || ctx.method === "Runtime.callFunctionOn";
-  },
-  evaluate(ctx) {
-    const userCode = extractUserCode(ctx);
-    if (!userCode) return null;
-    for (const p of DOM_PATTERNS) {
-      if (p.pattern.test(userCode)) {
-        return {
-          ruleId: "dom-mutation",
-          action: p.action,
-          severity: p.severity,
-          reason: `Direct DOM property setter: "${p.name}". This bypasses framework event systems and is detectable as automation.`,
-          suggestion: p.suggestion,
-          errorCode: p.errorCode,
-          errorMessage: p.severity === "danger" ? `[CDP Firewall] ${p.name} blocked \u2014 bypasses framework reactivity` : `[CDP Firewall] ${p.name} detected \u2014 use proper interaction API`
-        };
-      }
-    }
-    return null;
-  }
-};
-
-// src/cdp-interceptor/rules/mouse-trajectory.ts
-var TRACKER_KEY = "mouse-trajectory-tracker";
-var MAX_SAMPLES = 200;
-var MIN_SAMPLES_FOR_ANALYSIS = 5;
-var mouseTrajectoryRule = {
-  id: "mouse-trajectory",
-  name: "Mouse Trajectory Analysis",
-  priority: 20,
-  canHandle(ctx) {
-    return ctx.method === "Input.dispatchMouseEvent";
-  },
-  evaluate(ctx) {
-    const type = ctx.params.type;
-    const x = ctx.params.x;
-    const y = ctx.params.y;
-    if (typeof x !== "number" || typeof y !== "number") return null;
-    let tracker = ctx.sessionState.get(TRACKER_KEY);
-    if (!tracker) {
-      tracker = { samples: [], lastMouseDownAt: 0, isDragging: false };
-      ctx.sessionState.set(TRACKER_KEY, tracker);
-    }
-    if (type === "mousePressed") {
-      const priorResult = analyzeTrajectory(tracker.samples);
-      tracker.lastMouseDownAt = Date.now();
-      tracker.isDragging = true;
-      tracker.samples = [];
-      return priorResult;
-    }
-    if (type === "mouseReleased") {
-      tracker.isDragging = false;
-      const result = analyzeTrajectory(tracker.samples);
-      tracker.samples = [];
-      return result;
-    }
-    if (type === "mouseMoved") {
-      const now = Date.now();
-      const prevSample = tracker.samples[tracker.samples.length - 1];
-      const distanceTraveled = prevSample ? prevSample.distanceTraveled + distance(prevSample.x, prevSample.y, x, y) : 0;
-      const sample = { x, y, timestamp: now, distanceTraveled };
-      tracker.samples.push(sample);
-      if (tracker.samples.length > MAX_SAMPLES) {
-        tracker.samples.shift();
-      }
-      return null;
-    }
-    if (type === "mouseReleased" && tracker.samples.length < MIN_SAMPLES_FOR_ANALYSIS) {
-      tracker.samples = [];
-      return null;
-    }
-    return null;
-  }
-};
-function analyzeTrajectory(samples) {
-  if (samples.length < MIN_SAMPLES_FOR_ANALYSIS) return null;
-  const issues = [];
-  const startX = samples[0].x;
-  const startY = samples[0].y;
-  const endX = samples[samples.length - 1].x;
-  const endY = samples[samples.length - 1].y;
-  const lineLength = distance(startX, startY, endX, endY);
-  const collinearityResult = checkCollinearity(samples, startX, startY, endX, endY, lineLength);
-  if (collinearityResult) {
-    issues.push(collinearityResult);
-  }
-  const velocityResult = checkConstantVelocity(samples);
-  if (velocityResult) {
-    issues.push(velocityResult);
-  }
-  const jitterResult = checkJitter(samples);
-  if (jitterResult) {
-    issues.push(jitterResult);
-  }
-  if (issues.length === 0) return null;
-  const stopX = samples[samples.length - 1].x;
-  const stopY = samples[samples.length - 1].y;
-  return {
-    ruleId: "mouse-trajectory",
-    action: "block",
-    severity: "danger",
-    reason: `Suspicious mouse trajectory: ${issues.join("; ")}`,
-    suggestion: `This mouse movement appears automated (straight line A\u2192B, no natural variation).
-  Use a humanized mouse API that generates:
-  - Bezier curves instead of straight lines
-  - Random acceleration/deceleration
-  - 1-3px micro-jitter per sample
-
-  Example: The 'faker' or 'ghost-cursor' libraries generate realistic mouse paths.
-  Target was: (${Math.round(startX)}, ${Math.round(startY)}) \u2192 (${Math.round(stopX)}, ${Math.round(stopY)})`,
-    errorCode: -32002,
-    errorMessage: "[CDP Firewall] Automated mouse trajectory blocked \u2014 appears non-human"
-  };
-}
-function distance(x1, y1, x2, y2) {
-  return Math.sqrt((x2 - x1) ** 2 + (y2 - y1) ** 2);
-}
-function checkCollinearity(samples, x1, y1, x2, y2, lineLength) {
-  if (lineLength < 5) return null;
-  let maxDeviation = 0;
-  const dx = x2 - x1;
-  const dy = y2 - y1;
-  for (let i = 1; i < samples.length - 1; i++) {
-    const { x, y } = samples[i];
-    const cross = Math.abs(dy * x - dx * y + x2 * y1 - y2 * x1);
-    const dev = cross / lineLength;
-    if (dev > maxDeviation) maxDeviation = dev;
-  }
-  if (maxDeviation < 1.5 && lineLength > 20) {
-    return `Perfectly straight line (max deviation ${maxDeviation.toFixed(1)}px over ${lineLength.toFixed(0)}px)`;
+  if (maxDeviation < 1.5 && lineLength > 20) {
+    return `Perfectly straight line (max deviation ${maxDeviation.toFixed(1)}px over ${lineLength.toFixed(0)}px)`;
   }
   if (maxDeviation < 0.5 && lineLength > 10) {
     return `Near-perfect straight line (max deviation ${maxDeviation.toFixed(1)}px)`;
@@ -3802,7 +3674,7 @@ function analyzeKeyTiming(samples) {
   if (allIdentical) {
     return {
       ruleId: "input-keystroke",
-      action: "block",
+      action: "pass",
       severity: "danger",
       reason: `All ${intervals.length} keystroke intervals are exactly ${intervals[0]}ms \u2014 impossible for human typing.`,
       suggestion: `Use page.fill(selector, text) instead of page.type() with delay.
@@ -3814,7 +3686,7 @@ Or add random variation: page.type(selector, text, {delay: 50 + Math.random() *
   if (cv < 0.08) {
     return {
       ruleId: "input-keystroke",
-      action: "block",
+      action: "pass",
       severity: "warn",
       reason: `Unnatural keystroke timing (CV=${cv.toFixed(3)}). Human typing has CV > 0.2 on average.`,
       suggestion: `Add random variation to your typing delay: page.type(selector, text, {delay: 50 + Math.random() * 80}).`,
@@ -3910,7 +3782,7 @@ function makeDecision(p, context) {
   const suggestion = p.suggestionOverride ?? `Detected: "${p.name}" \u2014 an automation tool marker that anti-crawler systems immediately flag. Remove this pattern from your code.`;
   return {
     ruleId: "automation-signals",
-    action: "block",
+    action: "pass",
     severity: p.severity,
     reason: `Automation marker detected: "${p.name}". Context: "${context}..."`,
     suggestion,
@@ -3985,7 +3857,7 @@ var fingerprintingRule = {
       if (p.pattern.test(userCode)) {
         return {
           ruleId: "fingerprinting",
-          action: "block",
+          action: "pass",
           severity: p.severity,
           reason: `Browser fingerprinting API accessed: "${p.name}". Anti-crawler systems use this to identify your browser.`,
           suggestion: p.suggestion,
@@ -4002,7 +3874,7 @@ var fingerprintingRule = {
 var EVENT_PATTERNS = [
   // ── Direct method calls (all isTrusted=false) ─────────
   { pattern: /\.click\s*\(\s*\)/, name: "el.click()", severity: "danger", errorCode: -32070, suggestion: "el.click() fires isTrusted=false events. Use page.click(selector) which uses Input.dispatchMouseEvent (isTrusted=true)." },
-  { pattern: /\.focus\s*\(\s*\)/, name: "el.focus()", severity: "danger", errorCode: -32071, suggestion: "el.focus() without user interaction is detectable. Use page.click(selector) which naturally focuses." },
+  { pattern: /\.focus\s*\(\s*\)/, name: "el.focus()", severity: "warn", errorCode: -32071, suggestion: "el.focus() without user interaction is detectable. Use page.click(selector) which naturally focuses." },
   { pattern: /\.blur\s*\(\s*\)/, name: "el.blur()", severity: "danger", errorCode: -32071, suggestion: "el.blur() without user interaction. Avoid in automation scripts." },
   { pattern: /\.submit\s*\(\s*\)/, name: "el.submit()", severity: "danger", errorCode: -32072, suggestion: `form.submit() bypasses onSubmit handlers. Click the submit button: page.click('button[type="submit"]').` },
   { pattern: /\.reset\s*\(\s*\)/, name: "el.reset()", severity: "danger", errorCode: -32072, suggestion: "form.reset() without user action. Let the user clear fields manually." },
@@ -4017,7 +3889,7 @@ var EVENT_PATTERNS = [
   { pattern: /\.showPicker\s*\(\s*\)/, name: "HTMLInputElement.showPicker()", severity: "info", errorCode: -32076, suggestion: "Date/color picker shown without click \u2014 detectable." },
   { pattern: /\.reportValidity\s*\(\s*\)/, name: "el.reportValidity()", severity: "info", errorCode: -32076, suggestion: "Validity reporting without form submission attempt." },
   // ── dispatchEvent with synthetic events (isTrusted=false) ──
-  { pattern: /dispatchEvent\s*\(\s*new\s+(?:Event|CustomEvent)\s*\(/, name: "dispatchEvent(new Event/CustomEvent)", severity: "danger", errorCode: -32077, suggestion: "Synthetic events have isTrusted=false. Use Input.dispatch* CDP methods for trusted events." },
+  { pattern: /dispatchEvent\s*\(\s*new\s+(?:Event|CustomEvent)\s*\(/, name: "dispatchEvent(new Event/CustomEvent)", severity: "warn", errorCode: -32077, suggestion: "Synthetic events have isTrusted=false. Use Input.dispatch* CDP methods for trusted events." },
   { pattern: /dispatchEvent\s*\(\s*new\s+MouseEvent\s*\(/, name: "dispatchEvent(new MouseEvent)", severity: "danger", errorCode: -32077, suggestion: "Synthetic mouse events (isTrusted=false). Use Input.dispatchMouseEvent CDP method." },
   { pattern: /dispatchEvent\s*\(\s*new\s+KeyboardEvent\s*\(/, name: "dispatchEvent(new KeyboardEvent)", severity: "danger", errorCode: -32077, suggestion: "Synthetic keyboard events (isTrusted=false). Use Input.dispatchKeyEvent CDP method." },
   { pattern: /dispatchEvent\s*\(\s*new\s+FocusEvent\s*\(/, name: "dispatchEvent(new FocusEvent)", severity: "warn", errorCode: -32078, suggestion: "Synthetic focus events bypass user interaction." },
@@ -4046,7 +3918,9 @@ var eventSimulationRule = {
       if (p.pattern.test(userCode)) {
         return {
           ruleId: "event-simulation",
-          action: "block",
+          // danger 级硬拦（el.click 等 100% 暴露的模式）；
+          // warning 级放行+提示（dispatchEvent 在部分合法场景如 DataTransfer paste 使用）
+          action: p.severity === "danger" ? "block" : "pass",
           severity: p.severity,
           reason: `Event simulation detected: "${p.name}". Synthetic events have isTrusted=false and are 100% detectable.`,
           suggestion: p.suggestion,
@@ -4105,7 +3979,7 @@ var emulationOverrideRule = {
       if (ctx.method !== p.method) continue;
       return {
         ruleId: "emulation-override",
-        action: "block",
+        action: "pass",
         severity: p.severity,
         reason: `CDP emulation/override detected: "${p.name}". This creates detectable inconsistencies between the JS environment and real browser state.`,
         suggestion: p.suggestion,
@@ -4135,7 +4009,7 @@ var networkAnomalyRule = {
           if (!headerStr.includes("sec-ch-ua")) {
             return {
               ruleId: "network-anomaly",
-              action: "block",
+              action: "pass",
               severity: "warn",
               reason: "Network.setExtraHTTPHeaders called without Sec-CH-UA client hints \u2014 browser normally sends these.",
               suggestion: "Modern browsers send Sec-CH-UA headers automatically. Adding custom headers without them creates detectable inconsistency.",
@@ -4149,7 +4023,7 @@ var networkAnomalyRule = {
       case "Network.clearBrowserCache": {
         return {
           ruleId: "network-anomaly",
-          action: "block",
+          action: "pass",
           severity: "warn",
           reason: "Network.clearBrowserCache called \u2014 cache clearing mid-session is unnatural for real users.",
           suggestion: "Avoid cache clearing during sessions. Start with a fresh profile if needed.",
@@ -4160,7 +4034,7 @@ var networkAnomalyRule = {
       case "Network.clearBrowserCookies": {
         return {
           ruleId: "network-anomaly",
-          action: "block",
+          action: "pass",
           severity: "warn",
           reason: "Network.clearBrowserCookies called \u2014 wiping cookies mid-session is a scraper optimization.",
           suggestion: "Cookies should only be cleared via normal browser flow (expiration, user action).",
@@ -4171,7 +4045,7 @@ var networkAnomalyRule = {
       case "Network.setBlockedURLs": {
         return {
           ruleId: "network-anomaly",
-          action: "block",
+          action: "pass",
           severity: "warn",
           reason: "Network.setBlockedURLs blocks resource loading \u2014 this changes the page behavior and is detectable.",
           suggestion: "Blocking images/fonts/etc creates measurable differences in performance and page rendering.",
@@ -4193,7 +4067,7 @@ var networkAnomalyRule = {
       case "Fetch.enable": {
         return {
           ruleId: "network-anomaly",
-          action: "block",
+          action: "pass",
           severity: "warn",
           reason: "Fetch.enable intercepts all network requests \u2014 a man-in-the-middle approach used by scrapers.",
           suggestion: "Do not use Fetch domain for network interception if avoiding detection.",
@@ -4205,179 +4079,496 @@ var networkAnomalyRule = {
         return null;
     }
   }
-};
-
-// src/cdp-interceptor/rules/page-lifecycle.ts
-var STAT_KEY = "lifecycle-tracker";
-var pageLifecycleRule = {
-  id: "page-lifecycle",
-  name: "Page Lifecycle Anomaly Detection (10+ patterns)",
-  priority: 80,
-  canHandle(ctx) {
-    const m = ctx.method;
-    return m === "Page.navigate" || m === "Page.captureScreenshot" || m === "Page.printToPDF" || m === "Page.reload" || m === "Page.close" || m === "Runtime.evaluate" || m === "Runtime.callFunctionOn";
-  },
-  evaluate(ctx) {
-    let state = ctx.sessionState.get(STAT_KEY);
-    if (!state) {
-      state = { navigations: [], screenshots: 0, printToPDF: false, evaluateCount: 0, lastNavTime: 0, lastEvalTime: 0 };
-      ctx.sessionState.set(STAT_KEY, state);
+};
+
+// src/cdp-interceptor/rules/page-lifecycle.ts
+var STAT_KEY = "lifecycle-tracker";
+var pageLifecycleRule = {
+  id: "page-lifecycle",
+  name: "Page Lifecycle Anomaly Detection (10+ patterns)",
+  priority: 80,
+  canHandle(ctx) {
+    const m = ctx.method;
+    return m === "Page.navigate" || m === "Page.captureScreenshot" || m === "Page.printToPDF" || m === "Page.reload" || m === "Page.close" || m === "Runtime.evaluate" || m === "Runtime.callFunctionOn";
+  },
+  evaluate(ctx) {
+    let state = ctx.sessionState.get(STAT_KEY);
+    if (!state) {
+      state = { navigations: [], screenshots: 0, printToPDF: false, evaluateCount: 0, lastNavTime: 0, lastEvalTime: 0 };
+      ctx.sessionState.set(STAT_KEY, state);
+    }
+    const now = Date.now();
+    switch (ctx.method) {
+      case "Page.navigate": {
+        state.navigations.push(now);
+        if (state.navigations.length >= 2) {
+          const prev = state.navigations[state.navigations.length - 2];
+          const interval = now - prev;
+          if (interval < 100) {
+            return {
+              ruleId: "page-lifecycle",
+              action: "pass",
+              severity: "warn",
+              reason: `Multiple Page.navigate calls within ${interval}ms of each other \u2014 unnatural rapid navigation.`,
+              suggestion: "Add proper waits between navigations: wait for page load before navigating again.",
+              errorCode: -32100,
+              errorMessage: "[CDP Firewall] Rapid navigation sequence detected"
+            };
+          }
+        }
+        state.lastNavTime = now;
+        return null;
+      }
+      case "Page.captureScreenshot": {
+        state.screenshots++;
+        if (state.lastNavTime > 0 && now - state.lastNavTime < 500) {
+          return {
+            ruleId: "page-lifecycle",
+            action: "pass",
+            severity: "danger",
+            reason: "Page.captureScreenshot called within 500ms of navigation \u2014 content extraction pattern.",
+            suggestion: "Wait for the page to fully render before taking screenshots: wait for load/networkidle.",
+            errorCode: -32101,
+            errorMessage: "[CDP Firewall] Pre-render screenshot blocked \u2014 content extraction pattern"
+          };
+        }
+        if (state.screenshots > 3 && state.navigations.length < 2) {
+          return {
+            ruleId: "page-lifecycle",
+            action: "pass",
+            severity: "warn",
+            reason: "Multiple screenshots on a single page without navigation \u2014 suspicious extraction behavior.",
+            suggestion: "Consider if all screenshots are necessary.",
+            errorCode: -32102,
+            errorMessage: "[CDP Firewall] Excessive screenshot detection"
+          };
+        }
+        return null;
+      }
+      case "Page.printToPDF": {
+        return {
+          ruleId: "page-lifecycle",
+          action: "pass",
+          severity: "danger",
+          reason: "Page.printToPDF called \u2014 this is a telltale scraper pattern that gives away automation intent.",
+          suggestion: "Avoid PDF generation. If you must, add significant delays and user-like interaction first.",
+          errorCode: -32103,
+          errorMessage: "[CDP Firewall] printToPDF blocked \u2014 scraper intent detected"
+        };
+      }
+      case "Page.reload": {
+        if (state.lastNavTime > 0 && now - state.lastNavTime < 1e3) {
+          return {
+            ruleId: "page-lifecycle",
+            action: "pass",
+            severity: "warn",
+            reason: "Page.reload called immediately after navigate \u2014 unnatural fast-reload pattern.",
+            suggestion: "Introduce delays between navigation and reload to simulate human behavior.",
+            errorCode: -32104,
+            errorMessage: "[CDP Firewall] Rapid reload detected"
+          };
+        }
+        return null;
+      }
+      case "Page.close": {
+        if (state.navigations.length < 2) {
+          return {
+            ruleId: "page-lifecycle",
+            action: "pass",
+            severity: "info",
+            reason: "Page.close called after minimal interaction \u2014 zombie pages common in automation.",
+            suggestion: "Ensure meaningful interaction before closing pages.",
+            errorCode: -32105,
+            errorMessage: "[CDP Firewall] Page close after minimal interaction"
+          };
+        }
+        return null;
+      }
+      case "Runtime.evaluate":
+      case "Runtime.callFunctionOn": {
+        state.evaluateCount++;
+        if (state.evaluateCount > 50 && state.navigations.length === 0) {
+          return {
+            ruleId: "page-lifecycle",
+            action: "pass",
+            severity: "info",
+            reason: "50+ evaluate calls without any Page.navigate \u2014 data extraction without real browsing.",
+            suggestion: "Navigate to a real page first. Evaluate on about:blank is suspicious.",
+            errorCode: -32106,
+            errorMessage: "[CDP Firewall] Excessive evaluate without navigation"
+          };
+        }
+        return null;
+      }
+      default:
+        return null;
+    }
+  }
+};
+
+// src/cdp-interceptor/rules-engine.ts
+var BUILTIN_RULES = [
+  domMutationRule,
+  automationSignalsRule,
+  fingerprintingRule,
+  eventSimulationRule,
+  mouseTrajectoryRule,
+  inputKeystrokeRule,
+  emulationOverrideRule,
+  networkAnomalyRule,
+  pageLifecycleRule
+];
+function createRuleEngine(customRules) {
+  const rules = [...BUILTIN_RULES, ...customRules ?? []].sort((a, b) => a.priority - b.priority);
+  const sessionStates = /* @__PURE__ */ new Map();
+  function getSessionState(sessionId) {
+    let state = sessionStates.get(sessionId);
+    if (!state) {
+      state = /* @__PURE__ */ new Map();
+      sessionStates.set(sessionId, state);
+    }
+    return state;
+  }
+  return {
+    start() {
+      sessionStates.clear();
+    },
+    stop() {
+      sessionStates.clear();
+    },
+    evaluate(ctx) {
+      const fullCtx = {
+        ...ctx,
+        sessionState: getSessionState(ctx.sessionId)
+      };
+      for (const rule of rules) {
+        if (rule.canHandle && !rule.canHandle(fullCtx)) continue;
+        const decision = rule.evaluate(fullCtx);
+        if (!decision) continue;
+        if (decision.action !== "pass") return decision;
+      }
+      return null;
+    }
+  };
+}
+
+// src/cdp-driver/connection.ts
+var CDPConnection = class _CDPConnection extends EventEmitter4 {
+  ws;
+  nextId = 1;
+  /** CDP Guard：全部出站命令过规则引擎（env XBROWSER_CDP_GUARD=off 关闭）。
+   *  173 条规则 / 9 模块：合成事件 block、指纹暴露警告、自动化信号拦截。 */
+  static __guard;
+  get guard() {
+    if (_CDPConnection.__guard === void 0) {
+      if (process.env.XBROWSER_CDP_GUARD === "off") {
+        _CDPConnection.__guard = null;
+      } else {
+        try {
+          const g = createRuleEngine();
+          g.start();
+          _CDPConnection.__guard = g;
+        } catch {
+          _CDPConnection.__guard = null;
+        }
+      }
+    }
+    return _CDPConnection.__guard;
+  }
+  pending = /* @__PURE__ */ new Map();
+  closed = false;
+  closeReason = null;
+  /** Default session ID for flat session protocol (Target.attachToTarget) */
+  defaultSessionId;
+  constructor(wsOrUrl, sessionId) {
+    super();
+    this.setMaxListeners(0);
+    this.defaultSessionId = sessionId;
+    if (typeof wsOrUrl === "string") {
+      const wsOptions = /^wss:\/\/\d+\.\d+\.\d+\.\d+/.test(wsOrUrl) ? { rejectUnauthorized: false } : void 0;
+      this.ws = new WebSocket(wsOrUrl, wsOptions);
+    } else {
+      this.ws = wsOrUrl;
+    }
+    this.bindWebSocket();
+    this.startKeepalive();
+  }
+  /** Send periodic WS pings to prevent idle-timeout disconnects (e.g. CF's 100s).
+   *  Also detects dead connections: if a pong isn't received within 10s of a
+   *  ping, the connection is considered dead and forcibly closed. */
+  keepaliveTimer = null;
+  pongTimer = null;
+  /** 最近一次收到任何 WS 消息的时间——有数据流动即证明连接存活 */
+  lastIncomingAt = Date.now();
+  startKeepalive() {
+    this.ws.on("pong", () => {
+      if (this.pongTimer) {
+        clearTimeout(this.pongTimer);
+        this.pongTimer = null;
+      }
+    });
+    this.keepaliveTimer = setInterval(() => {
+      if (this.ws.readyState === WebSocket.OPEN) {
+        if (!this.pongTimer) {
+          this.pongTimer = setTimeout(() => {
+            const recentlyActive = Date.now() - this.lastIncomingAt < 3e4;
+            if (recentlyActive) {
+              this.pongTimer = null;
+              return;
+            }
+            if (!this.closed) {
+              this.closed = true;
+              this.closeReason = "keepalive timeout (no pong and idle >30s)";
+              try {
+                this.ws.terminate();
+              } catch {
+              }
+              for (const [, pending] of this.pending) {
+                clearTimeout(pending.timeout);
+                pending.reject(new Error("Connection dead: keepalive timeout"));
+              }
+              this.pending.clear();
+              this.emit("disconnect");
+            }
+          }, 6e4);
+        }
+        this.ws.ping?.();
+      } else if (this.closed) {
+        if (this.keepaliveTimer) clearInterval(this.keepaliveTimer);
+        this.keepaliveTimer = null;
+      }
+    }, 3e4);
+  }
+  /** Wait for the connection to be fully open */
+  async ready() {
+    if (this.ws.readyState === WebSocket.OPEN) return;
+    if (this.ws.readyState === WebSocket.CLOSED || this.ws.readyState === WebSocket.CLOSING) {
+      throw new Error(`WebSocket already closed: ${this.closeReason ?? "unknown"}`);
+    }
+    return new Promise((resolve, reject) => {
+      const onOpen = () => {
+        this.ws.off("error", onError);
+        resolve();
+      };
+      const onError = (err) => {
+        this.ws.off("open", onOpen);
+        reject(err);
+      };
+      this.ws.once("open", onOpen);
+      this.ws.once("error", onError);
+    });
+  }
+  /** Is the underlying WebSocket alive? */
+  get isOpen() {
+    return !this.closed && this.ws.readyState === WebSocket.OPEN;
+  }
+  /**
+   * Send a CDP command and await its response.
+   *
+   * @param method — CDP domain.method (e.g. "Page.navigate")
+   * @param params — method parameters
+   * @param sessionId — optional flat session ID for sub-targets
+   * @param timeoutMs — response timeout (default: 30s；重 SPA 加载期间主线程忙，
+   *   evaluate 可排队 >30s——Runtime.evaluate 单独放宽到 90s)
+   * @returns the `result` field from the CDP response
+   */
+  async send(method, params, sessionId, timeoutMs) {
+    const effectiveTimeout = timeoutMs ?? (method === "Runtime.evaluate" ? 9e4 : 3e4);
+    if (this.guard) {
+      const decision = this.guard.evaluate({
+        method,
+        params: params ?? {},
+        sessionId: sessionId ?? this.defaultSessionId ?? "",
+        direction: "client\u2192browser"
+      });
+      if (decision && decision.action === "block") {
+        throw new Error(`[CDP-Guard] ${decision.reason}${decision.suggestion ? " | \u66FF\u4EE3: " + decision.suggestion : ""} [${decision.ruleId}]`);
+      }
+    }
+    if (this.closed) {
+      throw new Error(`CDP connection closed: ${this.closeReason ?? "unknown"}`);
+    }
+    if (!this.isOpen) {
+      throw new Error(`CDP connection not open (state: ${this.ws.readyState})`);
+    }
+    const id = this.nextId++;
+    const sid = sessionId ?? this.defaultSessionId;
+    const message = { id, method };
+    if (params !== void 0) message.params = params;
+    if (sid !== void 0) message.sessionId = sid;
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        this.pending.delete(id);
+        reject(new Error(`CDP timeout: ${method} (${effectiveTimeout}ms)`));
+      }, effectiveTimeout);
+      this.pending.set(id, {
+        resolve: (v) => {
+          clearTimeout(timeout);
+          this.pending.delete(id);
+          resolve(v);
+        },
+        reject: (err) => {
+          clearTimeout(timeout);
+          this.pending.delete(id);
+          reject(err);
+        },
+        method,
+        timeout
+      });
+      const data = JSON.stringify(message);
+      try {
+        this.ws.send(data);
+      } catch (err) {
+        clearTimeout(timeout);
+        this.pending.delete(id);
+        reject(new Error(`CDP send failed: ${method} \u2014 ${err instanceof Error ? err.message : String(err)}`));
+      }
+    });
+  }
+  /**
+   * Subscribe to a CDP event.
+   *
+   * @param event — full event name (e.g. "Page.frameNavigated")
+   * @param handler — called with the event params
+   * @param sessionId — optional session filter
+   */
+  on(event, handler) {
+    return super.on(event, handler);
+  }
+  once(event, handler) {
+    return super.once(event, handler);
+  }
+  /** Remove an event listener */
+  off(event, handler) {
+    super.off(event, handler);
+    return this;
+  }
+  /**
+   * Subscribe to a CDP event for a specific session.
+   * Returns an unsubscribe function.
+   */
+  subscribe(event, sessionId, handler) {
+    const wrapper = (params, sid) => {
+      if (sid === sessionId || !sessionId && !sid) handler(params);
+    };
+    this.on(event, wrapper);
+    return () => this.off(event, wrapper);
+  }
+  /** Close the WebSocket */
+  async close() {
+    if (this.closed) return;
+    this.closed = true;
+    this.closeReason = "closed by caller";
+    if (this.keepaliveTimer) {
+      clearInterval(this.keepaliveTimer);
+      this.keepaliveTimer = null;
     }
-    const now = Date.now();
-    switch (ctx.method) {
-      case "Page.navigate": {
-        state.navigations.push(now);
-        if (state.navigations.length >= 2) {
-          const prev = state.navigations[state.navigations.length - 2];
-          const interval = now - prev;
-          if (interval < 100) {
-            return {
-              ruleId: "page-lifecycle",
-              action: "block",
-              severity: "warn",
-              reason: `Multiple Page.navigate calls within ${interval}ms of each other \u2014 unnatural rapid navigation.`,
-              suggestion: "Add proper waits between navigations: wait for page load before navigating again.",
-              errorCode: -32100,
-              errorMessage: "[CDP Firewall] Rapid navigation sequence detected"
-            };
-          }
-        }
-        state.lastNavTime = now;
-        return null;
+    if (this.pongTimer) {
+      clearTimeout(this.pongTimer);
+      this.pongTimer = null;
+    }
+    for (const [id, pending] of this.pending) {
+      clearTimeout(pending.timeout);
+      pending.reject(new Error(`Connection closed: ${pending.method}`));
+      this.pending.delete(id);
+    }
+    if (this.ws.readyState === WebSocket.OPEN || this.ws.readyState === WebSocket.CONNECTING) {
+      this.ws.close(1e3, "normal closure");
+    }
+  }
+  /** Set the default session ID for flat protocol */
+  setDefaultSessionId(sid) {
+    this.defaultSessionId = sid;
+  }
+  // ── Private ─────────────────────────────────────────────────
+  bindWebSocket() {
+    this.ws.on("message", (raw) => {
+      this.lastIncomingAt = Date.now();
+      let msg;
+      try {
+        msg = JSON.parse(raw.toString());
+      } catch {
+        return;
       }
-      case "Page.captureScreenshot": {
-        state.screenshots++;
-        if (state.lastNavTime > 0 && now - state.lastNavTime < 500) {
-          return {
-            ruleId: "page-lifecycle",
-            action: "block",
-            severity: "danger",
-            reason: "Page.captureScreenshot called within 500ms of navigation \u2014 content extraction pattern.",
-            suggestion: "Wait for the page to fully render before taking screenshots: wait for load/networkidle.",
-            errorCode: -32101,
-            errorMessage: "[CDP Firewall] Pre-render screenshot blocked \u2014 content extraction pattern"
-          };
-        }
-        if (state.screenshots > 3 && state.navigations.length < 2) {
-          return {
-            ruleId: "page-lifecycle",
-            action: "block",
-            severity: "warn",
-            reason: "Multiple screenshots on a single page without navigation \u2014 suspicious extraction behavior.",
-            suggestion: "Consider if all screenshots are necessary.",
-            errorCode: -32102,
-            errorMessage: "[CDP Firewall] Excessive screenshot detection"
-          };
+      if (msg.id !== void 0) {
+        const pending = this.pending.get(msg.id);
+        if (!pending) return;
+        if (msg.error) {
+          pending.reject(new CDPProtocolError(msg.error.code, msg.error.message, pending.method));
+        } else {
+          pending.resolve(msg.result ?? {});
         }
-        return null;
-      }
-      case "Page.printToPDF": {
-        return {
-          ruleId: "page-lifecycle",
-          action: "block",
-          severity: "danger",
-          reason: "Page.printToPDF called \u2014 this is a telltale scraper pattern that gives away automation intent.",
-          suggestion: "Avoid PDF generation. If you must, add significant delays and user-like interaction first.",
-          errorCode: -32103,
-          errorMessage: "[CDP Firewall] printToPDF blocked \u2014 scraper intent detected"
-        };
+        return;
       }
-      case "Page.reload": {
-        if (state.lastNavTime > 0 && now - state.lastNavTime < 1e3) {
-          return {
-            ruleId: "page-lifecycle",
-            action: "block",
-            severity: "warn",
-            reason: "Page.reload called immediately after navigate \u2014 unnatural fast-reload pattern.",
-            suggestion: "Introduce delays between navigation and reload to simulate human behavior.",
-            errorCode: -32104,
-            errorMessage: "[CDP Firewall] Rapid reload detected"
-          };
-        }
-        return null;
+      if (msg.method) {
+        this.emit(msg.method, msg.params ?? {}, msg.sessionId);
+        this.emit("*", msg.method, msg.params ?? {}, msg.sessionId);
       }
-      case "Page.close": {
-        if (state.navigations.length < 2) {
-          return {
-            ruleId: "page-lifecycle",
-            action: "block",
-            severity: "info",
-            reason: "Page.close called after minimal interaction \u2014 zombie pages common in automation.",
-            suggestion: "Ensure meaningful interaction before closing pages.",
-            errorCode: -32105,
-            errorMessage: "[CDP Firewall] Page close after minimal interaction"
-          };
-        }
-        return null;
+    });
+    this.ws.on("close", (code, reason) => {
+      if (this.closed) return;
+      this.closed = true;
+      this.closeReason = `WebSocket closed: ${code} ${reason?.toString() ?? ""}`.trim();
+      if (this.keepaliveTimer) {
+        clearInterval(this.keepaliveTimer);
+        this.keepaliveTimer = null;
       }
-      case "Runtime.evaluate":
-      case "Runtime.callFunctionOn": {
-        state.evaluateCount++;
-        if (state.evaluateCount > 50 && state.navigations.length === 0) {
-          return {
-            ruleId: "page-lifecycle",
-            action: "block",
-            severity: "info",
-            reason: "50+ evaluate calls without any Page.navigate \u2014 data extraction without real browsing.",
-            suggestion: "Navigate to a real page first. Evaluate on about:blank is suspicious.",
-            errorCode: -32106,
-            errorMessage: "[CDP Firewall] Excessive evaluate without navigation"
-          };
-        }
-        return null;
+      for (const [id, pending] of this.pending) {
+        clearTimeout(pending.timeout);
+        pending.reject(new Error(`Connection closed: ${pending.method}`));
+        this.pending.delete(id);
       }
-      default:
-        return null;
-    }
+      this.emit("disconnect");
+    });
+    this.ws.on("error", (err) => {
+      if (this.closed) return;
+      this.emit("ws-error", err);
+    });
+  }
+};
+var CDPProtocolError = class extends Error {
+  code;
+  method;
+  data;
+  constructor(code, message, method, data) {
+    super(`CDP error [${code}] in ${method}: ${message}`);
+    this.name = "CDPProtocolError";
+    this.code = code;
+    this.method = method;
+    this.data = data;
   }
 };
 
-// src/cdp-interceptor/rules-engine.ts
-var BUILTIN_RULES = [
-  domMutationRule,
-  automationSignalsRule,
-  fingerprintingRule,
-  eventSimulationRule,
-  mouseTrajectoryRule,
-  inputKeystrokeRule,
-  emulationOverrideRule,
-  networkAnomalyRule,
-  pageLifecycleRule
-];
-function createRuleEngine(customRules) {
-  const rules = [...BUILTIN_RULES, ...customRules ?? []].sort((a, b) => a.priority - b.priority);
-  const sessionStates = /* @__PURE__ */ new Map();
-  function getSessionState(sessionId) {
-    let state = sessionStates.get(sessionId);
-    if (!state) {
-      state = /* @__PURE__ */ new Map();
-      sessionStates.set(sessionId, state);
-    }
-    return state;
+// src/cdp-driver/index.ts
+async function launch(options = {}) {
+  let wsEndpoint;
+  let childProcess;
+  let tmpDir;
+  if (options.cdpEndpoint) {
+    wsEndpoint = await connectToCDP(options.cdpEndpoint);
+  } else {
+    const result = await launchChrome({
+      executablePath: options.executablePath,
+      headless: options.headless,
+      args: options.args,
+      userDataDir: options.userDataDir,
+      timeout: options.timeout,
+      env: options.env
+    });
+    wsEndpoint = result.wsEndpoint;
+    childProcess = result.process;
+    tmpDir = result.tmpDir;
   }
-  return {
-    start() {
-      sessionStates.clear();
-    },
-    stop() {
-      sessionStates.clear();
-    },
-    evaluate(ctx) {
-      const fullCtx = {
-        ...ctx,
-        sessionState: getSessionState(ctx.sessionId)
-      };
-      for (const rule of rules) {
-        if (rule.canHandle && !rule.canHandle(fullCtx)) continue;
-        const decision = rule.evaluate(fullCtx);
-        if (!decision) continue;
-        if (decision.action !== "pass") return decision;
-      }
-      return null;
-    }
-  };
+  const conn = new CDPConnection(wsEndpoint);
+  await conn.ready();
+  const httpEndpoint = options.cdpEndpoint && !options.cdpEndpoint.startsWith("ws") ? options.cdpEndpoint : void 0;
+  const browser = new XBBrowserImpl(conn, childProcess, tmpDir, httpEndpoint);
+  return { browser, wsEndpoint };
 }
 
+// src/cdp-interceptor/proxy.ts
+import { WebSocketServer, WebSocket as WebSocket2 } from "ws";
+
 // src/cdp-interceptor/logger.ts
 function createLogger(config) {
   const buffer = [];