@xbrowser/cli 1.18.2 → 1.20.0

package/dist/{chunk-7SDM4EA4.js → chunk-T2KUVO4H.js}

@@ -146,8 +146,17 @@ function buildStealthInitScript() {
     "      if(!e)return f.call(this,e);",
     "      return f.call(this,new Proxy(e,{get:function(k,p){",
     '        if(p==="sourceCapabilities")return fc;',
-    '        if(p==="isTrusted")return Reflect.get(k,"isTrusted");',
-    '        if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])&&k.isTrusted===true){',
+    // S124 修正（d67 攻防）：恒 true 是"过度伪装"——站点自己的合成事件
+    // 也变 true → 直接判定浏览器被篡改（比检测自动化更严重的指纹暴露）。
+    // 正确策略：透传原始值（CDP Input 事件本来就是 true，JS 合成本来是 false）
+    // + paste 定向伪装（合成的 paste 在真实场景都是 trusted 的键盘操作产物）
+    '        if(p==="isTrusted"){',
+    '          var orig=Reflect.get(k,"isTrusted");',
+    "          if(orig===true)return true;",
+    '          if(k.type==="paste")return true;',
+    "          return orig;",
+    "        }",
+    '        if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])){',
     "          var _f=((k.timeStamp||Date.now())%89)/89*0.7+0.15;",
     "          return k[p]+_f;",
     "        }",
@@ -157,6 +166,30 @@ function buildStealthInitScript() {
     "    return o.call(this,t,w,op);",
     "  };",
     "  EventTarget.prototype.addEventListener=_ael;",
+    // window.event isTrusted 伪装（S123）：AEL 参数包装收不到 window.event
+    // （它是原始 Event 对象的隐式引用）。定义 getter 拦截读取。
+    "  try{",
+    '    var _weDesc=Object.getOwnPropertyDescriptor(Window.prototype,"event");',
+    "    if(_weDesc&&_weDesc.get){",
+    "      var _origWeGet=_weDesc.get;",
+    '      Object.defineProperty(Window.prototype,"event",{',
+    "        configurable:true,",
+    "        get:function(){",
+    "          var ev=_origWeGet.call(this);",
+    "          if(!ev)return ev;",
+    "          return new Proxy(ev,{get:function(k,p){",
+    '            if(p==="isTrusted"){',
+    '              var orig=Reflect.get(k,"isTrusted");',
+    "              if(orig===true)return true;",
+    '              if(k.type==="paste")return true;',
+    "              return orig;",
+    "            }",
+    '            var v=Reflect.get(k,p);return typeof v==="function"?v.bind(k):v;',
+    "          }});",
+    "        }",
+    "      });",
+    "    }",
+    "  }catch(e){}",
     // 2. Screen override (prototype-level, not instance-level)
     "  var _gw=function(){return 1728};",
     "  var _gh=function(){return 1117};",
@@ -165,9 +198,42 @@ function buildStealthInitScript() {
     '  Object.defineProperty(Screen.prototype,"height",{get:_gh,configurable:true});',
     '  Object.defineProperty(Screen.prototype,"availWidth",{get:_gw,configurable:true});',
     '  Object.defineProperty(Screen.prototype,"availHeight",{get:_gah,configurable:true});',
+    // S174: UA Headless 标记清洗——headless launch 的 UA 含 HeadlessChrome/xxx
+    // （最高频检测面），同步清洗 userAgent/appVersion/userAgentData(brands+高熵值)。
+    // 原型+实例双层覆写（S172 模式）。
+    "  try{",
+    '    var fixUA=function(ua){return String(ua).replace("HeadlessChrome","Chrome");};',
+    '    var fixBrands=function(list){return (list||[]).map(function(b){return (b.brand&&b.brand.indexOf("Headless")!==-1)?Object.assign({},b,{brand:b.brand.replace("HeadlessChrome","Chrome")}):b;});};',
+    '    var _nuad=Object.getOwnPropertyDescriptor(Navigator.prototype,"userAgentData");',
+    "    var wrapUAD=function(uad){",
+    "      if(!uad||uad.__xbUA)return uad;",
+    "      try{",
+    '        Object.defineProperty(uad,"brands",{get:function(){return fixBrands(_nuad.get.call(navigator).brands);},configurable:true});',
+    "        var _ghev=uad.getHighEntropyValues.bind(uad);",
+    "        uad.getHighEntropyValues=function(hints){return _ghev(hints).then(function(v){",
+    '          var o={};for(var k in v){o[k]=(typeof v[k]==="string")?fixUA(v[k]):(Array.isArray(v[k])?fixBrands(v[k]):v[k]);}',
+    "          return o;});};",
+    "        uad.__xbUA=true;",
+    "      }catch(e){}",
+    "      return uad;",
+    "    };",
+    '    var _nua=Object.getOwnPropertyDescriptor(Navigator.prototype,"userAgent");',
+    "    if(_nua&&_nua.get){",
+    "      var _nuag=function(){return fixUA(_nua.get.call(this));};",
+    '      _nuag.toString=function(){return "function get userAgent() { [native code] }";};',
+    '      Object.defineProperty(Navigator.prototype,"userAgent",{get:_nuag,configurable:true});',
+    "    }",
+    '    Object.defineProperty(navigator,"userAgent",{get:function(){return fixUA(_nua?_nua.get.call(this):"");},configurable:true});',
+    "    if(_nuad&&_nuad.get){",
+    "      var _nuadg=function(){return wrapUAD(_nuad.get.call(this));};",
+    '      _nuadg.toString=function(){return "function get userAgentData() { [native code] }";};',
+    '      Object.defineProperty(Navigator.prototype,"userAgentData",{get:_nuadg,configurable:true});',
+    "    }",
+    "  }catch(e){}",
     // hasFocus 与 visibilityState 联动（d29）：恒 true 在 hidden 标签下暴露
     // —— 真实浏览器失焦/后台时 hasFocus=false
-    '  document.hasFocus=function(){return document.visibilityState==="visible";};',
+    // S172: 原型层覆写——实例赋值可被 Document.prototype.hasFocus.call(document) 逃逸
+    '  Document.prototype.hasFocus=function(){return document.visibilityState==="visible";};',
     // 4. Canvas/WebGL fingerprint: per-session stable noise (d20).
     //    Headless software raster differs subtly from Chrome GPU raster —
     //    toDataURL hashes fingerprint the rasterizer. Inject a stable
@@ -230,26 +296,25 @@ function buildStealthInitScript() {
     "  }catch(e){}",
     // 3b. Font metrics + speechSynthesis + battery (d22): headless tells
     "  try{",
-    "    var _mt=CanvasRenderingContext2D.prototype.measureText;",
     '    var _tmw=Object.getOwnPropertyDescriptor(TextMetrics.prototype,"width");',
-    "    CanvasRenderingContext2D.prototype.measureText=function(t){",
-    "      var m=_mt.call(this,t);",
-    '      try{Object.defineProperty(m,"width",{get:function(){return _tmw.get.call(m)+_dx*0.01;},configurable:true});}catch(e){}',
-    "      return m;",
-    "    };",
+    "    if(_tmw&&_tmw.get){",
+    "      // S172: \u539F\u578B\u5C42\u8986\u5199\u2014\u2014\u5B9E\u4F8B(m)\u8986\u5199\u53EF\u88AB TextMetrics.prototype.width getter \u9003\u9038",
+    '      Object.defineProperty(TextMetrics.prototype,"width",{get:function(){return _tmw.get.call(this)+_dx*0.01;},configurable:true});',
+    "    }",
     "  }catch(e){}",
     "  try{",
     '    var _fakeVoices=["Alex","Daniel","Karen","Moira","Ralph","Samantha","Ting-Ting","Mei-Jia","Sinji","Yunda"];',
-    "    var _sv=speechSynthesis.getVoices.bind(speechSynthesis);",
-    "    speechSynthesis.getVoices=function(){",
-    "      var real=_sv();",
+    // S172: 原型层覆写——实例赋值可被 SpeechSynthesis.prototype.getVoices.call() 逃逸
+    "    var _sv=SpeechSynthesis.prototype.getVoices;",
+    "    SpeechSynthesis.prototype.getVoices=function(){",
+    "      var real=_sv.call(this);",
     "      if(real&&real.length>50)return real;",
     // 注意阈值从 0 改 50：iframe 原生约 10 个 —— 原阈值下 iframe 返回原生 10 个
     // 而不是伪装 180（d33 暴露）。>50 = 主文档伪装列表已生效，其余返回伪装。
     '      return _fakeVoices.map(function(n,i){return {name:n,lang:i<2?"en-US":i<6?"en-GB":"zh-TW",localService:true,default:i===0,voiceURI:n};});',
     "    };",
     // d33 修复：iframe 的 speechSynthesis 是独立实例（主文档 hook 不可达）——
-    // 轮询同源 iframe，对其 contentWindow.speechSynthesis 同样 patch
+    // 轮询同源 iframe，对其 contentWindow 的原型同样 patch（S172: 原型层，防逃逸）
     "  try{",
     "    var _piv=function(){",
     '      var frs=document.querySelectorAll("iframe");',
@@ -257,8 +322,8 @@ function buildStealthInitScript() {
     "        var cw=frs[i].contentWindow;",
     "        if(!cw||!cw.speechSynthesis||cw.speechSynthesis.__xbP)continue;",
     "        cw.speechSynthesis.__xbP=true;",
-    "        var _sv2=cw.speechSynthesis.getVoices.bind(cw.speechSynthesis);",
-    "        cw.speechSynthesis.getVoices=function(){var r=_sv2();if(r&&r.length>50)return r;",
+    "        var _sv2=cw.SpeechSynthesis.prototype.getVoices;",
+    "        cw.SpeechSynthesis.prototype.getVoices=function(){var r=_sv2.call(this);if(r&&r.length>50)return r;",
     '          return _fakeVoices.map(function(n,j){return{name:n,lang:j<2?"en-US":j<6?"en-GB":"zh-TW",localService:true,default:j===0,voiceURI:n};});};',
     "      }catch(e2){}}",
     "    };",
@@ -293,10 +358,21 @@ function buildStealthInitScript() {
     // 3d-2. performance.now precision clamp (d34): full-precision timestamps
     //     (11 decimals) differ from site-isolation-clamped real Chrome (~100μs).
     "  try{",
-    "    var _pn=performance.now.bind(performance);",
-    "    performance.now=function(){return Math.round(_pn()*10)/10;};",
+    "    var _pn=Performance.prototype.now;",
+    "    // S172: \u539F\u578B\u5C42\u8986\u5199\u2014\u2014\u5B9E\u4F8B\u8D4B\u503C\u53EF\u88AB Performance.prototype.now.call(performance) \u9003\u9038",
+    "    Performance.prototype.now=function(){return Math.round(_pn.call(this)*10)/10;};",
     '    var _pto=Object.getOwnPropertyDescriptor(Performance.prototype,"timeOrigin");',
-    '    if(_pto&&_pto.get){Object.defineProperty(performance,"timeOrigin",{get:function(){return _pto.get.call(performance);},configurable:true});}',
+    "    if(_pto&&_pto.get){",
+    "      // S173: timeOrigin \u771F\u4F2A\u88C5\u2014\u2014\u5360\u4F4D\u5C42\uFF08\u8FD4\u56DE\u771F\u503C\uFF09\u5347\u7EA7\u4E3A\u4F1A\u8BDD\u7EA7\u968F\u673A\u504F\u79FB\u3002",
+    "      // \u9632 cross-page \u5BFC\u822A\u65F6\u523B\u5173\u8054\uFF1A\u4E0D\u540C\u7AD9\u70B9\u7528 timeOrigin \u7CBE\u786E\u5BF9\u9F50\u7528\u6237\u884C\u4E3A\u6863\u6848\u3002",
+    "      // \u504F\u79FB\u7531\u672C\u9875 _seed \u6D3E\u751F\uFF08\u9875\u5185\u81EA\u6D3D\uFF0Cnow()+\u504F\u79FB\u4E00\u81F4\uFF09\uFF0C\u8DE8\u9875\u968F\u673A\uFF08\u4E0D\u53EF\u5173\u8054\uFF09\u3002",
+    "      var _toff=Math.floor((_seed/2147483647)*600000-300000);",
+    "      var _tog=function(){return _pto.get.call(performance)+_toff;};",
+    '      _tog.toString=function(){return "function get timeOrigin() { [native code] }";};',
+    "      // S172 \u5BA1\u8BA1\uFF1A\u5B9E\u4F8B\u8986\u5199\u53EF\u88AB\u539F\u578B getter \u9003\u9038\u2014\u2014\u539F\u578B\u5C42\u8986\u5199",
+    '      Object.defineProperty(Performance.prototype,"timeOrigin",{get:_tog,configurable:true});',
+    '      Object.defineProperty(performance,"timeOrigin",{get:_tog,configurable:true});',
+    "    }",
     "  }catch(e){}",
     // 3f. getCoalescedEvents 合成（d47）：真实鼠标 125Hz 采样被浏览器按帧合并，
     //     快速移动时 pointermove.getCoalescedEvents() 返回 2~6 个事件（群内
@@ -410,11 +486,19 @@ function buildStealthInitScript() {
     '    if(this===AnalyserNode.prototype.getFloatFrequencyData)return"function getFloatFrequencyData() { [native code] }";',
     '    if(this===AudioBuffer.prototype.getChannelData)return"function getChannelData() { [native code] }";',
     '    if(this===_gceH)return"function getCoalescedEvents() { [native code] }";',
+    '    if(this===Document.prototype.hasFocus)return"function hasFocus() { [native code] }";',
+    '    if(this===Performance.prototype.now)return"function now() { [native code] }";',
+    '    if(this===SpeechSynthesis.prototype.getVoices)return"function getVoices() { [native code] }";',
     "    return _ts.call(this);",
     "  };",
     // 4. onclick prototype hijack (dual-stream consistency)
     "  var _ba=function(k,p){",
-    '    if(p==="isTrusted")return Reflect.get(k,"isTrusted");',
+    '    if(p==="isTrusted"){',
+    '      var orig=Reflect.get(k,"isTrusted");',
+    "      if(orig===true)return true;",
+    '      if(k.type==="paste")return true;',
+    "      return orig;",
+    "    }",
     '    if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])&&k.isTrusted===true){',
     "      var _f=((k.timeStamp||Date.now())%89)/89*0.7+0.15;return k[p]+_f;",
     "    }",
@@ -5373,7 +5457,9 @@ async function resolveCDPEndpoint(raw) {
   }
   if (raw.startsWith("http://") || raw.startsWith("https://")) {
     try {
-      const httpResp = await fetchNoProxy(`${raw}/json/version`);
+      const u = new URL(raw);
+      u.pathname = (u.pathname.replace(/\/+$/, "") || "") + "/json/version";
+      const httpResp = await fetchNoProxy(u.toString());
       const data = await httpResp.json();
       if (!data.webSocketDebuggerUrl) {
         throw new Error(`Could not discover CDP endpoint from ${raw}`);
@@ -5511,9 +5597,17 @@ function discoverChromiumPath() {
   }
   return void 0;
 }
+var _browserPool = /* @__PURE__ */ new Map();
 async function createBrowser(options) {
   if (options?.cdpEndpoint) {
     const realEndpoint = await resolveCDPEndpoint(options.cdpEndpoint);
+    if (!options.intercept) {
+      const pooled = _browserPool.get(realEndpoint);
+      if (pooled && !pooled.disconnected) {
+        return pooled;
+      }
+      if (pooled) _browserPool.delete(realEndpoint);
+    }
     if (options.intercept) {
       const config = typeof options.intercept === "object" ? { ...options.intercept, cdpEndpoint: realEndpoint } : { cdpEndpoint: realEndpoint };
       _sharedCdpProxy = new CDPInterceptorProxy(config);
@@ -5526,6 +5620,7 @@ async function createBrowser(options) {
     await browser2.discoverContexts().catch((err) => {
       console.error(`[browser] discoverContexts failed: ${errMsg(err)}`);
     });
+    if (!options.intercept) _browserPool.set(realEndpoint, browser2);
     return browser2;
   }
   const executablePath = options?.executablePath || process.env.XBROWSER_CHROMIUM_PATH || discoverChromiumPath();

package/dist/{chunk-DVKIL7H6.js → chunk-UYEJ66VX.js}

@@ -144,8 +144,17 @@ function buildStealthInitScript() {
     "      if(!e)return f.call(this,e);",
     "      return f.call(this,new Proxy(e,{get:function(k,p){",
     '        if(p==="sourceCapabilities")return fc;',
-    '        if(p==="isTrusted")return Reflect.get(k,"isTrusted");',
-    '        if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])&&k.isTrusted===true){',
+    // S124 修正（d67 攻防）：恒 true 是"过度伪装"——站点自己的合成事件
+    // 也变 true → 直接判定浏览器被篡改（比检测自动化更严重的指纹暴露）。
+    // 正确策略：透传原始值（CDP Input 事件本来就是 true，JS 合成本来是 false）
+    // + paste 定向伪装（合成的 paste 在真实场景都是 trusted 的键盘操作产物）
+    '        if(p==="isTrusted"){',
+    '          var orig=Reflect.get(k,"isTrusted");',
+    "          if(orig===true)return true;",
+    '          if(k.type==="paste")return true;',
+    "          return orig;",
+    "        }",
+    '        if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])){',
     "          var _f=((k.timeStamp||Date.now())%89)/89*0.7+0.15;",
     "          return k[p]+_f;",
     "        }",
@@ -155,6 +164,30 @@ function buildStealthInitScript() {
     "    return o.call(this,t,w,op);",
     "  };",
     "  EventTarget.prototype.addEventListener=_ael;",
+    // window.event isTrusted 伪装（S123）：AEL 参数包装收不到 window.event
+    // （它是原始 Event 对象的隐式引用）。定义 getter 拦截读取。
+    "  try{",
+    '    var _weDesc=Object.getOwnPropertyDescriptor(Window.prototype,"event");',
+    "    if(_weDesc&&_weDesc.get){",
+    "      var _origWeGet=_weDesc.get;",
+    '      Object.defineProperty(Window.prototype,"event",{',
+    "        configurable:true,",
+    "        get:function(){",
+    "          var ev=_origWeGet.call(this);",
+    "          if(!ev)return ev;",
+    "          return new Proxy(ev,{get:function(k,p){",
+    '            if(p==="isTrusted"){',
+    '              var orig=Reflect.get(k,"isTrusted");',
+    "              if(orig===true)return true;",
+    '              if(k.type==="paste")return true;',
+    "              return orig;",
+    "            }",
+    '            var v=Reflect.get(k,p);return typeof v==="function"?v.bind(k):v;',
+    "          }});",
+    "        }",
+    "      });",
+    "    }",
+    "  }catch(e){}",
     // 2. Screen override (prototype-level, not instance-level)
     "  var _gw=function(){return 1728};",
     "  var _gh=function(){return 1117};",
@@ -163,9 +196,42 @@ function buildStealthInitScript() {
     '  Object.defineProperty(Screen.prototype,"height",{get:_gh,configurable:true});',
     '  Object.defineProperty(Screen.prototype,"availWidth",{get:_gw,configurable:true});',
     '  Object.defineProperty(Screen.prototype,"availHeight",{get:_gah,configurable:true});',
+    // S174: UA Headless 标记清洗——headless launch 的 UA 含 HeadlessChrome/xxx
+    // （最高频检测面），同步清洗 userAgent/appVersion/userAgentData(brands+高熵值)。
+    // 原型+实例双层覆写（S172 模式）。
+    "  try{",
+    '    var fixUA=function(ua){return String(ua).replace("HeadlessChrome","Chrome");};',
+    '    var fixBrands=function(list){return (list||[]).map(function(b){return (b.brand&&b.brand.indexOf("Headless")!==-1)?Object.assign({},b,{brand:b.brand.replace("HeadlessChrome","Chrome")}):b;});};',
+    '    var _nuad=Object.getOwnPropertyDescriptor(Navigator.prototype,"userAgentData");',
+    "    var wrapUAD=function(uad){",
+    "      if(!uad||uad.__xbUA)return uad;",
+    "      try{",
+    '        Object.defineProperty(uad,"brands",{get:function(){return fixBrands(_nuad.get.call(navigator).brands);},configurable:true});',
+    "        var _ghev=uad.getHighEntropyValues.bind(uad);",
+    "        uad.getHighEntropyValues=function(hints){return _ghev(hints).then(function(v){",
+    '          var o={};for(var k in v){o[k]=(typeof v[k]==="string")?fixUA(v[k]):(Array.isArray(v[k])?fixBrands(v[k]):v[k]);}',
+    "          return o;});};",
+    "        uad.__xbUA=true;",
+    "      }catch(e){}",
+    "      return uad;",
+    "    };",
+    '    var _nua=Object.getOwnPropertyDescriptor(Navigator.prototype,"userAgent");',
+    "    if(_nua&&_nua.get){",
+    "      var _nuag=function(){return fixUA(_nua.get.call(this));};",
+    '      _nuag.toString=function(){return "function get userAgent() { [native code] }";};',
+    '      Object.defineProperty(Navigator.prototype,"userAgent",{get:_nuag,configurable:true});',
+    "    }",
+    '    Object.defineProperty(navigator,"userAgent",{get:function(){return fixUA(_nua?_nua.get.call(this):"");},configurable:true});',
+    "    if(_nuad&&_nuad.get){",
+    "      var _nuadg=function(){return wrapUAD(_nuad.get.call(this));};",
+    '      _nuadg.toString=function(){return "function get userAgentData() { [native code] }";};',
+    '      Object.defineProperty(Navigator.prototype,"userAgentData",{get:_nuadg,configurable:true});',
+    "    }",
+    "  }catch(e){}",
     // hasFocus 与 visibilityState 联动（d29）：恒 true 在 hidden 标签下暴露
     // —— 真实浏览器失焦/后台时 hasFocus=false
-    '  document.hasFocus=function(){return document.visibilityState==="visible";};',
+    // S172: 原型层覆写——实例赋值可被 Document.prototype.hasFocus.call(document) 逃逸
+    '  Document.prototype.hasFocus=function(){return document.visibilityState==="visible";};',
     // 4. Canvas/WebGL fingerprint: per-session stable noise (d20).
     //    Headless software raster differs subtly from Chrome GPU raster —
     //    toDataURL hashes fingerprint the rasterizer. Inject a stable
@@ -228,26 +294,25 @@ function buildStealthInitScript() {
     "  }catch(e){}",
     // 3b. Font metrics + speechSynthesis + battery (d22): headless tells
     "  try{",
-    "    var _mt=CanvasRenderingContext2D.prototype.measureText;",
     '    var _tmw=Object.getOwnPropertyDescriptor(TextMetrics.prototype,"width");',
-    "    CanvasRenderingContext2D.prototype.measureText=function(t){",
-    "      var m=_mt.call(this,t);",
-    '      try{Object.defineProperty(m,"width",{get:function(){return _tmw.get.call(m)+_dx*0.01;},configurable:true});}catch(e){}',
-    "      return m;",
-    "    };",
+    "    if(_tmw&&_tmw.get){",
+    "      // S172: \u539F\u578B\u5C42\u8986\u5199\u2014\u2014\u5B9E\u4F8B(m)\u8986\u5199\u53EF\u88AB TextMetrics.prototype.width getter \u9003\u9038",
+    '      Object.defineProperty(TextMetrics.prototype,"width",{get:function(){return _tmw.get.call(this)+_dx*0.01;},configurable:true});',
+    "    }",
     "  }catch(e){}",
     "  try{",
     '    var _fakeVoices=["Alex","Daniel","Karen","Moira","Ralph","Samantha","Ting-Ting","Mei-Jia","Sinji","Yunda"];',
-    "    var _sv=speechSynthesis.getVoices.bind(speechSynthesis);",
-    "    speechSynthesis.getVoices=function(){",
-    "      var real=_sv();",
+    // S172: 原型层覆写——实例赋值可被 SpeechSynthesis.prototype.getVoices.call() 逃逸
+    "    var _sv=SpeechSynthesis.prototype.getVoices;",
+    "    SpeechSynthesis.prototype.getVoices=function(){",
+    "      var real=_sv.call(this);",
     "      if(real&&real.length>50)return real;",
     // 注意阈值从 0 改 50：iframe 原生约 10 个 —— 原阈值下 iframe 返回原生 10 个
     // 而不是伪装 180（d33 暴露）。>50 = 主文档伪装列表已生效，其余返回伪装。
     '      return _fakeVoices.map(function(n,i){return {name:n,lang:i<2?"en-US":i<6?"en-GB":"zh-TW",localService:true,default:i===0,voiceURI:n};});',
     "    };",
     // d33 修复：iframe 的 speechSynthesis 是独立实例（主文档 hook 不可达）——
-    // 轮询同源 iframe，对其 contentWindow.speechSynthesis 同样 patch
+    // 轮询同源 iframe，对其 contentWindow 的原型同样 patch（S172: 原型层，防逃逸）
     "  try{",
     "    var _piv=function(){",
     '      var frs=document.querySelectorAll("iframe");',
@@ -255,8 +320,8 @@ function buildStealthInitScript() {
     "        var cw=frs[i].contentWindow;",
     "        if(!cw||!cw.speechSynthesis||cw.speechSynthesis.__xbP)continue;",
     "        cw.speechSynthesis.__xbP=true;",
-    "        var _sv2=cw.speechSynthesis.getVoices.bind(cw.speechSynthesis);",
-    "        cw.speechSynthesis.getVoices=function(){var r=_sv2();if(r&&r.length>50)return r;",
+    "        var _sv2=cw.SpeechSynthesis.prototype.getVoices;",
+    "        cw.SpeechSynthesis.prototype.getVoices=function(){var r=_sv2.call(this);if(r&&r.length>50)return r;",
     '          return _fakeVoices.map(function(n,j){return{name:n,lang:j<2?"en-US":j<6?"en-GB":"zh-TW",localService:true,default:j===0,voiceURI:n};});};',
     "      }catch(e2){}}",
     "    };",
@@ -291,10 +356,21 @@ function buildStealthInitScript() {
     // 3d-2. performance.now precision clamp (d34): full-precision timestamps
     //     (11 decimals) differ from site-isolation-clamped real Chrome (~100μs).
     "  try{",
-    "    var _pn=performance.now.bind(performance);",
-    "    performance.now=function(){return Math.round(_pn()*10)/10;};",
+    "    var _pn=Performance.prototype.now;",
+    "    // S172: \u539F\u578B\u5C42\u8986\u5199\u2014\u2014\u5B9E\u4F8B\u8D4B\u503C\u53EF\u88AB Performance.prototype.now.call(performance) \u9003\u9038",
+    "    Performance.prototype.now=function(){return Math.round(_pn.call(this)*10)/10;};",
     '    var _pto=Object.getOwnPropertyDescriptor(Performance.prototype,"timeOrigin");',
-    '    if(_pto&&_pto.get){Object.defineProperty(performance,"timeOrigin",{get:function(){return _pto.get.call(performance);},configurable:true});}',
+    "    if(_pto&&_pto.get){",
+    "      // S173: timeOrigin \u771F\u4F2A\u88C5\u2014\u2014\u5360\u4F4D\u5C42\uFF08\u8FD4\u56DE\u771F\u503C\uFF09\u5347\u7EA7\u4E3A\u4F1A\u8BDD\u7EA7\u968F\u673A\u504F\u79FB\u3002",
+    "      // \u9632 cross-page \u5BFC\u822A\u65F6\u523B\u5173\u8054\uFF1A\u4E0D\u540C\u7AD9\u70B9\u7528 timeOrigin \u7CBE\u786E\u5BF9\u9F50\u7528\u6237\u884C\u4E3A\u6863\u6848\u3002",
+    "      // \u504F\u79FB\u7531\u672C\u9875 _seed \u6D3E\u751F\uFF08\u9875\u5185\u81EA\u6D3D\uFF0Cnow()+\u504F\u79FB\u4E00\u81F4\uFF09\uFF0C\u8DE8\u9875\u968F\u673A\uFF08\u4E0D\u53EF\u5173\u8054\uFF09\u3002",
+    "      var _toff=Math.floor((_seed/2147483647)*600000-300000);",
+    "      var _tog=function(){return _pto.get.call(performance)+_toff;};",
+    '      _tog.toString=function(){return "function get timeOrigin() { [native code] }";};',
+    "      // S172 \u5BA1\u8BA1\uFF1A\u5B9E\u4F8B\u8986\u5199\u53EF\u88AB\u539F\u578B getter \u9003\u9038\u2014\u2014\u539F\u578B\u5C42\u8986\u5199",
+    '      Object.defineProperty(Performance.prototype,"timeOrigin",{get:_tog,configurable:true});',
+    '      Object.defineProperty(performance,"timeOrigin",{get:_tog,configurable:true});',
+    "    }",
     "  }catch(e){}",
     // 3f. getCoalescedEvents 合成（d47）：真实鼠标 125Hz 采样被浏览器按帧合并，
     //     快速移动时 pointermove.getCoalescedEvents() 返回 2~6 个事件（群内
@@ -408,11 +484,19 @@ function buildStealthInitScript() {
     '    if(this===AnalyserNode.prototype.getFloatFrequencyData)return"function getFloatFrequencyData() { [native code] }";',
     '    if(this===AudioBuffer.prototype.getChannelData)return"function getChannelData() { [native code] }";',
     '    if(this===_gceH)return"function getCoalescedEvents() { [native code] }";',
+    '    if(this===Document.prototype.hasFocus)return"function hasFocus() { [native code] }";',
+    '    if(this===Performance.prototype.now)return"function now() { [native code] }";',
+    '    if(this===SpeechSynthesis.prototype.getVoices)return"function getVoices() { [native code] }";',
     "    return _ts.call(this);",
     "  };",
     // 4. onclick prototype hijack (dual-stream consistency)
     "  var _ba=function(k,p){",
-    '    if(p==="isTrusted")return Reflect.get(k,"isTrusted");',
+    '    if(p==="isTrusted"){',
+    '      var orig=Reflect.get(k,"isTrusted");',
+    "      if(orig===true)return true;",
+    '      if(k.type==="paste")return true;',
+    "      return orig;",
+    "    }",
     '    if((p==="clientX"||p==="clientY")&&k.type==="click"&&Number.isInteger(k[p])&&k.isTrusted===true){',
     "      var _f=((k.timeStamp||Date.now())%89)/89*0.7+0.15;return k[p]+_f;",
     "    }",