@xbrowser/cli 1.20.0 → 1.21.0

package/dist/{browser-PBBC7RAV.js → browser-C2VEOJC2.js}

@@ -20,8 +20,8 @@ import {
   saveSessionDiskMeta,
   setActivePage,
   touchSession
-} from "./chunk-75TLPVVZ.js";
-import "./chunk-UYEJ66VX.js";
+} from "./chunk-AVSTNODR.js";
+import "./chunk-CLYZPSDR.js";
 import "./chunk-3FWLW7FS.js";
 import "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";

package/dist/{browser-Y6B3NS4Q.js → browser-CNBSH53B.js}

@@ -20,7 +20,7 @@ import {
   saveSessionDiskMeta,
   setActivePage,
   touchSession
-} from "./chunk-T2KUVO4H.js";
+} from "./chunk-ESJYANQO.js";
 import "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
 import "./chunk-KFQGP6VL.js";

package/dist/{browser-NVC7MTML.js → browser-VZOOFLAH.js}

@@ -20,12 +20,12 @@ import {
   saveSessionDiskMeta,
   setActivePage,
   touchSession
-} from "./chunk-76EKW7YJ.js";
-import "./chunk-FDU5BCPV.js";
+} from "./chunk-Z5RTK4GW.js";
+import "./chunk-HWWG2ISJ.js";
 import "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
-import "./chunk-A6LPGFAL.js";
-import "./chunk-H2A5JUK5.js";
+import "./chunk-WYETQ5C7.js";
+import "./chunk-75DNUI6M.js";
 import "./chunk-KFQGP6VL.js";
 export {
   closeAllSessions,

package/dist/{cdp-driver-QYFA4QTP.js → cdp-driver-26LGCHXV.js}

@@ -14,7 +14,7 @@ import {
   scrollIntoView,
   waitForActionable,
   waitForNetworkIdle
-} from "./chunk-FDU5BCPV.js";
+} from "./chunk-HWWG2ISJ.js";
 import {
   connectToCDP,
   findChrome,
@@ -23,7 +23,7 @@ import {
   launchChrome
 } from "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
-import "./chunk-H2A5JUK5.js";
+import "./chunk-75DNUI6M.js";
 import "./chunk-KFQGP6VL.js";
 export {
   CDPConnection,

package/dist/{cdp-driver-Z2PLAO42.js → cdp-driver-7Z6ZAT5E.js}

@@ -21,6 +21,25 @@ import { EventEmitter } from "events";
 
 // src/cdp-driver/stealth.ts
 var DEFAULT_STEALTH_CONFIG = {
+  // S191: macOS arm64 + Chrome 151 真实采样（来源：登录桥只读通道）
+  uaChProfile: {
+    brands: [
+      { brand: "Not=A?Brand", version: "99" },
+      { brand: "Google Chrome", version: "151" },
+      { brand: "Chromium", version: "151" }
+    ],
+    platform: "macOS",
+    platformVersion: "26.2.0",
+    architecture: "arm",
+    bitness: "64",
+    model: "",
+    uaFullVersion: "151.0.7922.175",
+    fullVersionList: [
+      { brand: "Not=A?Brand", version: "99.0.0.0" },
+      { brand: "Google Chrome", version: "151.0.7922.175" },
+      { brand: "Chromium", version: "151.0.7922.175" }
+    ]
+  },
   bezierCurvature: [0.35, 0.6],
   noiseAmplitude: 5.5,
   overshootRange: [6, 14],
@@ -119,10 +138,13 @@ Object.assign(KEY_MAP, {
   "@": { key: "@", code: "Digit2", vk: 50, shift: true },
   "_": { key: "_", code: "Minus", vk: 189, shift: true }
 });
-function buildStealthInitScript() {
+function buildStealthInitScript(config = DEFAULT_STEALTH_CONFIG) {
+  const prof = config.uaChProfile;
+  const profJson = prof ? JSON.stringify(prof) : "null";
   return [
     "(function(){",
     '  window.__xbStealthVer="57";',
+    "  window.__xbUaChProf=" + profJson + ";",
     // 1. AEL event proxy
     "  var o=EventTarget.prototype.addEventListener;",
     "  var fc=new InputDeviceCapabilities({firesTouchEvents:false});",
@@ -216,6 +238,29 @@ function buildStealthInitScript() {
     '      _nuadg.toString=function(){return "function get userAgentData() { [native code] }";};',
     '      Object.defineProperty(Navigator.prototype,"userAgentData",{get:_nuadg,configurable:true});',
     "    }",
+    // S190: userAgentData 垫片——headless Chrome 151 不暴露 UA-CH API，
+    // 缺失本身即 headless 指纹。从 UA 派生 brands/platform 垫片 + getHighEntropyValues。
+    "    if(!navigator.userAgentData && window.__xbUaChProf){",
+    "      var prof = window.__xbUaChProf;",
+    "      var uad={",
+    '        brands:prof.brands.map(function(b){return {brand:b.brand,version:b.version.split(".")[0]}}),',
+    "        mobile:false,",
+    "        platform:prof.platform,",
+    "        getHighEntropyValues:function(hints){",
+    "          return Promise.resolve().then(function(){",
+    "            var all={brands:uad.brands,mobile:false,platform:prof.platform,",
+    "              platformVersion:prof.platformVersion,architecture:prof.architecture,bitness:prof.bitness,model:prof.model,",
+    "              uaFullVersion:prof.uaFullVersion,",
+    "              fullVersionList:prof.fullVersionList};",
+    "            var out={};",
+    "            (hints||[]).forEach(function(h){if(h in all)out[h]=all[h]});",
+    "            return out;",
+    "          });",
+    "        },",
+    "        toJSON:function(){return{brands:uad.brands,mobile:false,platform:prof.platform}}",
+    "      };",
+    '      Object.defineProperty(navigator,"userAgentData",{get:function(){return uad},configurable:true});',
+    "    }",
     "  }catch(e){}",
     // hasFocus 与 visibilityState 联动（d29）：恒 true 在 hidden 标签下暴露
     // —— 真实浏览器失焦/后台时 hasFocus=false
@@ -2030,7 +2075,7 @@ var XBPageImpl = class _XBPageImpl {
       try {
         await this.conn.send(
           "Page.addScriptToEvaluateOnNewDocument",
-          { source: buildStealthInitScript() },
+          { source: buildStealthInitScript({ ...DEFAULT_STEALTH_CONFIG, ...this._contextImpl.stealthConfig ?? {} }) },
           this.sessionId
         );
       } catch {
@@ -3287,6 +3332,10 @@ var XBContextImpl = class {
     this.options = opts;
     this.setupAutoAttach();
   }
+  /** S194: 任务 tab 的 stealth 配置（UA-CH 档案等）经 context 传给 page 层 */
+  get stealthConfig() {
+    return this.options.stealthConfig;
+  }
   async newPage() {
     if (this.closed) throw new Error("Context is closed");
     const { targetId } = await this._browser._createTarget(this.contextId);
@@ -3453,20 +3502,8 @@ var XBContextImpl = class {
 
 // src/cdp-driver/browser.ts
 var XBBrowserImpl = class {
-  conn;
-  _emitter = new EventEmitter3();
-  _contexts = /* @__PURE__ */ new Map();
-  _disconnected = false;
-  childProcess = null;
-  tmpDir;
-  _exitHandler = null;
-  /**
-   * Original CDP endpoint (HTTP or ws URL) used to construct this browser.
-   * Used by discoverContexts() as a fallback to HTTP /json/list when
-   * Target.getTargets doesn't return page-type targets (e.g. cdp-tunnel proxy).
-   */
-  cdpEndpoint;
-  constructor(conn, childProcess, tmpDir, cdpEndpoint) {
+  constructor(conn, childProcess, tmpDir, cdpEndpoint, launchOpts) {
+    this.launchOpts = launchOpts;
     this.conn = conn;
     this.childProcess = childProcess ?? null;
     this.tmpDir = tmpDir;
@@ -3494,6 +3531,20 @@ var XBBrowserImpl = class {
       process.on("exit", this._exitHandler);
     }
   }
+  launchOpts;
+  conn;
+  _emitter = new EventEmitter3();
+  _contexts = /* @__PURE__ */ new Map();
+  _disconnected = false;
+  childProcess = null;
+  tmpDir;
+  _exitHandler = null;
+  /**
+   * Original CDP endpoint (HTTP or ws URL) used to construct this browser.
+   * Used by discoverContexts() as a fallback to HTTP /json/list when
+   * Target.getTargets doesn't return page-type targets (e.g. cdp-tunnel proxy).
+   */
+  cdpEndpoint;
   get disconnected() {
     return this._disconnected;
   }
@@ -3521,6 +3572,9 @@ var XBBrowserImpl = class {
     this._emitter.emit("disconnected");
   }
   async newContext(opts = {}) {
+    if (this.launchOpts?.stealthConfig && !opts.stealthConfig) {
+      opts = { ...opts, stealthConfig: this.launchOpts.stealthConfig };
+    }
     if (this._disconnected) {
       throw new Error("Browser is disconnected");
     }
@@ -3747,6 +3801,9 @@ function extractAllStrings(rawArgs) {
   }
   return strings.length > 0 ? strings.join("\n") : null;
 }
+function isProbeMarked(code) {
+  return code.includes("/* @xb-probe */");
+}
 
 // src/cdp-interceptor/rules/dom-mutation.ts
 var DOM_PATTERNS = [
@@ -4309,6 +4366,7 @@ var eventSimulationRule = {
   evaluate(ctx) {
     const userCode = extractUserCode(ctx);
     if (!userCode) return null;
+    if (isProbeMarked(userCode)) return null;
     for (const p of EVENT_PATTERNS) {
       if (p.pattern.test(userCode)) {
         return {
@@ -4636,6 +4694,11 @@ function createRuleEngine(customRules) {
         ...ctx,
         sessionState: getSessionState(ctx.sessionId)
       };
+      try {
+        const code = typeof ctx.params?.expression === "string" ? ctx.params.expression : JSON.stringify(ctx.params ?? "");
+        if (isProbeMarked(code)) return null;
+      } catch {
+      }
       for (const rule of rules) {
         if (rule.canHandle && !rule.canHandle(fullCtx)) continue;
         const decision = rule.evaluate(fullCtx);
@@ -5017,7 +5080,13 @@ async function launch(options = {}) {
   const conn = new CDPConnection(wsEndpoint);
   await conn.ready();
   const httpEndpoint = options.cdpEndpoint && !options.cdpEndpoint.startsWith("ws") ? options.cdpEndpoint : void 0;
-  const browser = new XBBrowserImpl(conn, childProcess, tmpDir, httpEndpoint);
+  const browser = new XBBrowserImpl(
+    conn,
+    childProcess,
+    tmpDir,
+    httpEndpoint,
+    options.stealthConfig ? { stealthConfig: options.stealthConfig } : void 0
+  );
   return { browser, wsEndpoint };
 }
 export {

package/dist/{cdp-driver-73F5CVH2.js → cdp-driver-KFX4A6WR.js}

@@ -14,7 +14,7 @@ import {
   scrollIntoView,
   waitForActionable,
   waitForNetworkIdle
-} from "./chunk-UYEJ66VX.js";
+} from "./chunk-CLYZPSDR.js";
 import "./chunk-3FWLW7FS.js";
 import {
   connectToCDP,

package/dist/{chunk-H2A5JUK5.js → chunk-75DNUI6M.js}

@@ -39,6 +39,9 @@ function extractAllStrings(rawArgs) {
   }
   return strings.length > 0 ? strings.join("\n") : null;
 }
+function isProbeMarked(code) {
+  return code.includes("/* @xb-probe */");
+}
 
 // src/cdp-interceptor/rules/dom-mutation.ts
 var DOM_PATTERNS = [
@@ -601,6 +604,7 @@ var eventSimulationRule = {
   evaluate(ctx) {
     const userCode = extractUserCode(ctx);
     if (!userCode) return null;
+    if (isProbeMarked(userCode)) return null;
     for (const p of EVENT_PATTERNS) {
       if (p.pattern.test(userCode)) {
         return {
@@ -928,6 +932,11 @@ function createRuleEngine(customRules) {
         ...ctx,
         sessionState: getSessionState(ctx.sessionId)
       };
+      try {
+        const code = typeof ctx.params?.expression === "string" ? ctx.params.expression : JSON.stringify(ctx.params ?? "");
+        if (isProbeMarked(code)) return null;
+      } catch {
+      }
       for (const rule of rules) {
         if (rule.canHandle && !rule.canHandle(fullCtx)) continue;
         const decision = rule.evaluate(fullCtx);

package/dist/{chunk-75TLPVVZ.js → chunk-AVSTNODR.js}

@@ -1,7 +1,7 @@
 import {
   createRuleEngine,
   launch
-} from "./chunk-UYEJ66VX.js";
+} from "./chunk-CLYZPSDR.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";

package/dist/{chunk-UYEJ66VX.js → chunk-CLYZPSDR.js}

@@ -24,6 +24,25 @@ import { EventEmitter } from "events";
 
 // src/cdp-driver/stealth.ts
 var DEFAULT_STEALTH_CONFIG = {
+  // S191: macOS arm64 + Chrome 151 真实采样（来源：登录桥只读通道）
+  uaChProfile: {
+    brands: [
+      { brand: "Not=A?Brand", version: "99" },
+      { brand: "Google Chrome", version: "151" },
+      { brand: "Chromium", version: "151" }
+    ],
+    platform: "macOS",
+    platformVersion: "26.2.0",
+    architecture: "arm",
+    bitness: "64",
+    model: "",
+    uaFullVersion: "151.0.7922.175",
+    fullVersionList: [
+      { brand: "Not=A?Brand", version: "99.0.0.0" },
+      { brand: "Google Chrome", version: "151.0.7922.175" },
+      { brand: "Chromium", version: "151.0.7922.175" }
+    ]
+  },
   bezierCurvature: [0.35, 0.6],
   noiseAmplitude: 5.5,
   overshootRange: [6, 14],
@@ -130,10 +149,13 @@ Object.assign(KEY_MAP, {
   "@": { key: "@", code: "Digit2", vk: 50, shift: true },
   "_": { key: "_", code: "Minus", vk: 189, shift: true }
 });
-function buildStealthInitScript() {
+function buildStealthInitScript(config = DEFAULT_STEALTH_CONFIG) {
+  const prof = config.uaChProfile;
+  const profJson = prof ? JSON.stringify(prof) : "null";
   return [
     "(function(){",
     '  window.__xbStealthVer="57";',
+    "  window.__xbUaChProf=" + profJson + ";",
     // 1. AEL event proxy
     "  var o=EventTarget.prototype.addEventListener;",
     "  var fc=new InputDeviceCapabilities({firesTouchEvents:false});",
@@ -227,6 +249,29 @@ function buildStealthInitScript() {
     '      _nuadg.toString=function(){return "function get userAgentData() { [native code] }";};',
     '      Object.defineProperty(Navigator.prototype,"userAgentData",{get:_nuadg,configurable:true});',
     "    }",
+    // S190: userAgentData 垫片——headless Chrome 151 不暴露 UA-CH API，
+    // 缺失本身即 headless 指纹。从 UA 派生 brands/platform 垫片 + getHighEntropyValues。
+    "    if(!navigator.userAgentData && window.__xbUaChProf){",
+    "      var prof = window.__xbUaChProf;",
+    "      var uad={",
+    '        brands:prof.brands.map(function(b){return {brand:b.brand,version:b.version.split(".")[0]}}),',
+    "        mobile:false,",
+    "        platform:prof.platform,",
+    "        getHighEntropyValues:function(hints){",
+    "          return Promise.resolve().then(function(){",
+    "            var all={brands:uad.brands,mobile:false,platform:prof.platform,",
+    "              platformVersion:prof.platformVersion,architecture:prof.architecture,bitness:prof.bitness,model:prof.model,",
+    "              uaFullVersion:prof.uaFullVersion,",
+    "              fullVersionList:prof.fullVersionList};",
+    "            var out={};",
+    "            (hints||[]).forEach(function(h){if(h in all)out[h]=all[h]});",
+    "            return out;",
+    "          });",
+    "        },",
+    "        toJSON:function(){return{brands:uad.brands,mobile:false,platform:prof.platform}}",
+    "      };",
+    '      Object.defineProperty(navigator,"userAgentData",{get:function(){return uad},configurable:true});',
+    "    }",
     "  }catch(e){}",
     // hasFocus 与 visibilityState 联动（d29）：恒 true 在 hidden 标签下暴露
     // —— 真实浏览器失焦/后台时 hasFocus=false
@@ -1939,7 +1984,7 @@ var XBPageImpl = class _XBPageImpl {
       try {
         await this.conn.send(
           "Page.addScriptToEvaluateOnNewDocument",
-          { source: buildStealthInitScript() },
+          { source: buildStealthInitScript({ ...DEFAULT_STEALTH_CONFIG, ...this._contextImpl.stealthConfig ?? {} }) },
           this.sessionId
         );
       } catch {
@@ -3196,6 +3241,10 @@ var XBContextImpl = class {
     this.options = opts;
     this.setupAutoAttach();
   }
+  /** S194: 任务 tab 的 stealth 配置（UA-CH 档案等）经 context 传给 page 层 */
+  get stealthConfig() {
+    return this.options.stealthConfig;
+  }
   async newPage() {
     if (this.closed) throw new Error("Context is closed");
     const { targetId } = await this._browser._createTarget(this.contextId);
@@ -3362,20 +3411,8 @@ var XBContextImpl = class {
 
 // src/cdp-driver/browser.ts
 var XBBrowserImpl = class {
-  conn;
-  _emitter = new EventEmitter3();
-  _contexts = /* @__PURE__ */ new Map();
-  _disconnected = false;
-  childProcess = null;
-  tmpDir;
-  _exitHandler = null;
-  /**
-   * Original CDP endpoint (HTTP or ws URL) used to construct this browser.
-   * Used by discoverContexts() as a fallback to HTTP /json/list when
-   * Target.getTargets doesn't return page-type targets (e.g. cdp-tunnel proxy).
-   */
-  cdpEndpoint;
-  constructor(conn, childProcess, tmpDir, cdpEndpoint) {
+  constructor(conn, childProcess, tmpDir, cdpEndpoint, launchOpts) {
+    this.launchOpts = launchOpts;
     this.conn = conn;
     this.childProcess = childProcess ?? null;
     this.tmpDir = tmpDir;
@@ -3403,6 +3440,20 @@ var XBBrowserImpl = class {
       process.on("exit", this._exitHandler);
     }
   }
+  launchOpts;
+  conn;
+  _emitter = new EventEmitter3();
+  _contexts = /* @__PURE__ */ new Map();
+  _disconnected = false;
+  childProcess = null;
+  tmpDir;
+  _exitHandler = null;
+  /**
+   * Original CDP endpoint (HTTP or ws URL) used to construct this browser.
+   * Used by discoverContexts() as a fallback to HTTP /json/list when
+   * Target.getTargets doesn't return page-type targets (e.g. cdp-tunnel proxy).
+   */
+  cdpEndpoint;
   get disconnected() {
     return this._disconnected;
   }
@@ -3430,6 +3481,9 @@ var XBBrowserImpl = class {
     this._emitter.emit("disconnected");
   }
   async newContext(opts = {}) {
+    if (this.launchOpts?.stealthConfig && !opts.stealthConfig) {
+      opts = { ...opts, stealthConfig: this.launchOpts.stealthConfig };
+    }
     if (this._disconnected) {
       throw new Error("Browser is disconnected");
     }
@@ -3656,6 +3710,9 @@ function extractAllStrings(rawArgs) {
   }
   return strings.length > 0 ? strings.join("\n") : null;
 }
+function isProbeMarked(code) {
+  return code.includes("/* @xb-probe */");
+}
 
 // src/cdp-interceptor/rules/dom-mutation.ts
 var DOM_PATTERNS = [
@@ -4218,6 +4275,7 @@ var eventSimulationRule = {
   evaluate(ctx) {
     const userCode = extractUserCode(ctx);
     if (!userCode) return null;
+    if (isProbeMarked(userCode)) return null;
     for (const p of EVENT_PATTERNS) {
       if (p.pattern.test(userCode)) {
         return {
@@ -4545,6 +4603,11 @@ function createRuleEngine(customRules) {
         ...ctx,
         sessionState: getSessionState(ctx.sessionId)
       };
+      try {
+        const code = typeof ctx.params?.expression === "string" ? ctx.params.expression : JSON.stringify(ctx.params ?? "");
+        if (isProbeMarked(code)) return null;
+      } catch {
+      }
       for (const rule of rules) {
         if (rule.canHandle && !rule.canHandle(fullCtx)) continue;
         const decision = rule.evaluate(fullCtx);
@@ -4926,7 +4989,13 @@ async function launch(options = {}) {
   const conn = new CDPConnection(wsEndpoint);
   await conn.ready();
   const httpEndpoint = options.cdpEndpoint && !options.cdpEndpoint.startsWith("ws") ? options.cdpEndpoint : void 0;
-  const browser = new XBBrowserImpl(conn, childProcess, tmpDir, httpEndpoint);
+  const browser = new XBBrowserImpl(
+    conn,
+    childProcess,
+    tmpDir,
+    httpEndpoint,
+    options.stealthConfig ? { stealthConfig: options.stealthConfig } : void 0
+  );
   return { browser, wsEndpoint };
 }
 

package/dist/{chunk-T2KUVO4H.js → chunk-ESJYANQO.js}

@@ -26,6 +26,25 @@ import { EventEmitter } from "events";
 
 // src/cdp-driver/stealth.ts
 var DEFAULT_STEALTH_CONFIG = {
+  // S191: macOS arm64 + Chrome 151 真实采样（来源：登录桥只读通道）
+  uaChProfile: {
+    brands: [
+      { brand: "Not=A?Brand", version: "99" },
+      { brand: "Google Chrome", version: "151" },
+      { brand: "Chromium", version: "151" }
+    ],
+    platform: "macOS",
+    platformVersion: "26.2.0",
+    architecture: "arm",
+    bitness: "64",
+    model: "",
+    uaFullVersion: "151.0.7922.175",
+    fullVersionList: [
+      { brand: "Not=A?Brand", version: "99.0.0.0" },
+      { brand: "Google Chrome", version: "151.0.7922.175" },
+      { brand: "Chromium", version: "151.0.7922.175" }
+    ]
+  },
   bezierCurvature: [0.35, 0.6],
   noiseAmplitude: 5.5,
   overshootRange: [6, 14],
@@ -132,10 +151,13 @@ Object.assign(KEY_MAP, {
   "@": { key: "@", code: "Digit2", vk: 50, shift: true },
   "_": { key: "_", code: "Minus", vk: 189, shift: true }
 });
-function buildStealthInitScript() {
+function buildStealthInitScript(config = DEFAULT_STEALTH_CONFIG) {
+  const prof = config.uaChProfile;
+  const profJson = prof ? JSON.stringify(prof) : "null";
   return [
     "(function(){",
     '  window.__xbStealthVer="57";',
+    "  window.__xbUaChProf=" + profJson + ";",
     // 1. AEL event proxy
     "  var o=EventTarget.prototype.addEventListener;",
     "  var fc=new InputDeviceCapabilities({firesTouchEvents:false});",
@@ -229,6 +251,29 @@ function buildStealthInitScript() {
     '      _nuadg.toString=function(){return "function get userAgentData() { [native code] }";};',
     '      Object.defineProperty(Navigator.prototype,"userAgentData",{get:_nuadg,configurable:true});',
     "    }",
+    // S190: userAgentData 垫片——headless Chrome 151 不暴露 UA-CH API，
+    // 缺失本身即 headless 指纹。从 UA 派生 brands/platform 垫片 + getHighEntropyValues。
+    "    if(!navigator.userAgentData && window.__xbUaChProf){",
+    "      var prof = window.__xbUaChProf;",
+    "      var uad={",
+    '        brands:prof.brands.map(function(b){return {brand:b.brand,version:b.version.split(".")[0]}}),',
+    "        mobile:false,",
+    "        platform:prof.platform,",
+    "        getHighEntropyValues:function(hints){",
+    "          return Promise.resolve().then(function(){",
+    "            var all={brands:uad.brands,mobile:false,platform:prof.platform,",
+    "              platformVersion:prof.platformVersion,architecture:prof.architecture,bitness:prof.bitness,model:prof.model,",
+    "              uaFullVersion:prof.uaFullVersion,",
+    "              fullVersionList:prof.fullVersionList};",
+    "            var out={};",
+    "            (hints||[]).forEach(function(h){if(h in all)out[h]=all[h]});",
+    "            return out;",
+    "          });",
+    "        },",
+    "        toJSON:function(){return{brands:uad.brands,mobile:false,platform:prof.platform}}",
+    "      };",
+    '      Object.defineProperty(navigator,"userAgentData",{get:function(){return uad},configurable:true});',
+    "    }",
     "  }catch(e){}",
     // hasFocus 与 visibilityState 联动（d29）：恒 true 在 hidden 标签下暴露
     // —— 真实浏览器失焦/后台时 hasFocus=false
@@ -2043,7 +2088,7 @@ var XBPageImpl = class _XBPageImpl {
       try {
         await this.conn.send(
           "Page.addScriptToEvaluateOnNewDocument",
-          { source: buildStealthInitScript() },
+          { source: buildStealthInitScript({ ...DEFAULT_STEALTH_CONFIG, ...this._contextImpl.stealthConfig ?? {} }) },
           this.sessionId
         );
       } catch {
@@ -3300,6 +3345,10 @@ var XBContextImpl = class {
     this.options = opts;
     this.setupAutoAttach();
   }
+  /** S194: 任务 tab 的 stealth 配置（UA-CH 档案等）经 context 传给 page 层 */
+  get stealthConfig() {
+    return this.options.stealthConfig;
+  }
   async newPage() {
     if (this.closed) throw new Error("Context is closed");
     const { targetId } = await this._browser._createTarget(this.contextId);
@@ -3466,20 +3515,8 @@ var XBContextImpl = class {
 
 // src/cdp-driver/browser.ts
 var XBBrowserImpl = class {
-  conn;
-  _emitter = new EventEmitter3();
-  _contexts = /* @__PURE__ */ new Map();
-  _disconnected = false;
-  childProcess = null;
-  tmpDir;
-  _exitHandler = null;
-  /**
-   * Original CDP endpoint (HTTP or ws URL) used to construct this browser.
-   * Used by discoverContexts() as a fallback to HTTP /json/list when
-   * Target.getTargets doesn't return page-type targets (e.g. cdp-tunnel proxy).
-   */
-  cdpEndpoint;
-  constructor(conn, childProcess, tmpDir, cdpEndpoint) {
+  constructor(conn, childProcess, tmpDir, cdpEndpoint, launchOpts) {
+    this.launchOpts = launchOpts;
     this.conn = conn;
     this.childProcess = childProcess ?? null;
     this.tmpDir = tmpDir;
@@ -3507,6 +3544,20 @@ var XBBrowserImpl = class {
       process.on("exit", this._exitHandler);
     }
   }
+  launchOpts;
+  conn;
+  _emitter = new EventEmitter3();
+  _contexts = /* @__PURE__ */ new Map();
+  _disconnected = false;
+  childProcess = null;
+  tmpDir;
+  _exitHandler = null;
+  /**
+   * Original CDP endpoint (HTTP or ws URL) used to construct this browser.
+   * Used by discoverContexts() as a fallback to HTTP /json/list when
+   * Target.getTargets doesn't return page-type targets (e.g. cdp-tunnel proxy).
+   */
+  cdpEndpoint;
   get disconnected() {
     return this._disconnected;
   }
@@ -3534,6 +3585,9 @@ var XBBrowserImpl = class {
     this._emitter.emit("disconnected");
   }
   async newContext(opts = {}) {
+    if (this.launchOpts?.stealthConfig && !opts.stealthConfig) {
+      opts = { ...opts, stealthConfig: this.launchOpts.stealthConfig };
+    }
     if (this._disconnected) {
       throw new Error("Browser is disconnected");
     }
@@ -3760,6 +3814,9 @@ function extractAllStrings(rawArgs) {
   }
   return strings.length > 0 ? strings.join("\n") : null;
 }
+function isProbeMarked(code) {
+  return code.includes("/* @xb-probe */");
+}
 
 // src/cdp-interceptor/rules/dom-mutation.ts
 var DOM_PATTERNS = [
@@ -4322,6 +4379,7 @@ var eventSimulationRule = {
   evaluate(ctx) {
     const userCode = extractUserCode(ctx);
     if (!userCode) return null;
+    if (isProbeMarked(userCode)) return null;
     for (const p of EVENT_PATTERNS) {
       if (p.pattern.test(userCode)) {
         return {
@@ -4649,6 +4707,11 @@ function createRuleEngine(customRules) {
         ...ctx,
         sessionState: getSessionState(ctx.sessionId)
       };
+      try {
+        const code = typeof ctx.params?.expression === "string" ? ctx.params.expression : JSON.stringify(ctx.params ?? "");
+        if (isProbeMarked(code)) return null;
+      } catch {
+      }
       for (const rule of rules) {
         if (rule.canHandle && !rule.canHandle(fullCtx)) continue;
         const decision = rule.evaluate(fullCtx);
@@ -4970,7 +5033,13 @@ async function launch(options = {}) {
   const conn = new CDPConnection(wsEndpoint);
   await conn.ready();
   const httpEndpoint = options.cdpEndpoint && !options.cdpEndpoint.startsWith("ws") ? options.cdpEndpoint : void 0;
-  const browser = new XBBrowserImpl(conn, childProcess, tmpDir, httpEndpoint);
+  const browser = new XBBrowserImpl(
+    conn,
+    childProcess,
+    tmpDir,
+    httpEndpoint,
+    options.stealthConfig ? { stealthConfig: options.stealthConfig } : void 0
+  );
   return { browser, wsEndpoint };
 }
 

package/dist/{chunk-FDU5BCPV.js → chunk-HWWG2ISJ.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-GDKLH7ZY.js";
 import {
   createRuleEngine
-} from "./chunk-H2A5JUK5.js";
+} from "./chunk-75DNUI6M.js";
 import {
   __require
 } from "./chunk-KFQGP6VL.js";
@@ -23,6 +23,25 @@ import { EventEmitter } from "events";
 
 // src/cdp-driver/stealth.ts
 var DEFAULT_STEALTH_CONFIG = {
+  // S191: macOS arm64 + Chrome 151 真实采样（来源：登录桥只读通道）
+  uaChProfile: {
+    brands: [
+      { brand: "Not=A?Brand", version: "99" },
+      { brand: "Google Chrome", version: "151" },
+      { brand: "Chromium", version: "151" }
+    ],
+    platform: "macOS",
+    platformVersion: "26.2.0",
+    architecture: "arm",
+    bitness: "64",
+    model: "",
+    uaFullVersion: "151.0.7922.175",
+    fullVersionList: [
+      { brand: "Not=A?Brand", version: "99.0.0.0" },
+      { brand: "Google Chrome", version: "151.0.7922.175" },
+      { brand: "Chromium", version: "151.0.7922.175" }
+    ]
+  },
   bezierCurvature: [0.35, 0.6],
   noiseAmplitude: 5.5,
   overshootRange: [6, 14],
@@ -129,10 +148,13 @@ Object.assign(KEY_MAP, {
   "@": { key: "@", code: "Digit2", vk: 50, shift: true },
   "_": { key: "_", code: "Minus", vk: 189, shift: true }
 });
-function buildStealthInitScript() {
+function buildStealthInitScript(config = DEFAULT_STEALTH_CONFIG) {
+  const prof = config.uaChProfile;
+  const profJson = prof ? JSON.stringify(prof) : "null";
   return [
     "(function(){",
     '  window.__xbStealthVer="57";',
+    "  window.__xbUaChProf=" + profJson + ";",
     // 1. AEL event proxy
     "  var o=EventTarget.prototype.addEventListener;",
     "  var fc=new InputDeviceCapabilities({firesTouchEvents:false});",
@@ -226,6 +248,29 @@ function buildStealthInitScript() {
     '      _nuadg.toString=function(){return "function get userAgentData() { [native code] }";};',
     '      Object.defineProperty(Navigator.prototype,"userAgentData",{get:_nuadg,configurable:true});',
     "    }",
+    // S190: userAgentData 垫片——headless Chrome 151 不暴露 UA-CH API，
+    // 缺失本身即 headless 指纹。从 UA 派生 brands/platform 垫片 + getHighEntropyValues。
+    "    if(!navigator.userAgentData && window.__xbUaChProf){",
+    "      var prof = window.__xbUaChProf;",
+    "      var uad={",
+    '        brands:prof.brands.map(function(b){return {brand:b.brand,version:b.version.split(".")[0]}}),',
+    "        mobile:false,",
+    "        platform:prof.platform,",
+    "        getHighEntropyValues:function(hints){",
+    "          return Promise.resolve().then(function(){",
+    "            var all={brands:uad.brands,mobile:false,platform:prof.platform,",
+    "              platformVersion:prof.platformVersion,architecture:prof.architecture,bitness:prof.bitness,model:prof.model,",
+    "              uaFullVersion:prof.uaFullVersion,",
+    "              fullVersionList:prof.fullVersionList};",
+    "            var out={};",
+    "            (hints||[]).forEach(function(h){if(h in all)out[h]=all[h]});",
+    "            return out;",
+    "          });",
+    "        },",
+    "        toJSON:function(){return{brands:uad.brands,mobile:false,platform:prof.platform}}",
+    "      };",
+    '      Object.defineProperty(navigator,"userAgentData",{get:function(){return uad},configurable:true});',
+    "    }",
     "  }catch(e){}",
     // hasFocus 与 visibilityState 联动（d29）：恒 true 在 hidden 标签下暴露
     // —— 真实浏览器失焦/后台时 hasFocus=false
@@ -2040,7 +2085,7 @@ var XBPageImpl = class _XBPageImpl {
       try {
         await this.conn.send(
           "Page.addScriptToEvaluateOnNewDocument",
-          { source: buildStealthInitScript() },
+          { source: buildStealthInitScript({ ...DEFAULT_STEALTH_CONFIG, ...this._contextImpl.stealthConfig ?? {} }) },
           this.sessionId
         );
       } catch {
@@ -3297,6 +3342,10 @@ var XBContextImpl = class {
     this.options = opts;
     this.setupAutoAttach();
   }
+  /** S194: 任务 tab 的 stealth 配置（UA-CH 档案等）经 context 传给 page 层 */
+  get stealthConfig() {
+    return this.options.stealthConfig;
+  }
   async newPage() {
     if (this.closed) throw new Error("Context is closed");
     const { targetId } = await this._browser._createTarget(this.contextId);
@@ -3463,20 +3512,8 @@ var XBContextImpl = class {
 
 // src/cdp-driver/browser.ts
 var XBBrowserImpl = class {
-  conn;
-  _emitter = new EventEmitter3();
-  _contexts = /* @__PURE__ */ new Map();
-  _disconnected = false;
-  childProcess = null;
-  tmpDir;
-  _exitHandler = null;
-  /**
-   * Original CDP endpoint (HTTP or ws URL) used to construct this browser.
-   * Used by discoverContexts() as a fallback to HTTP /json/list when
-   * Target.getTargets doesn't return page-type targets (e.g. cdp-tunnel proxy).
-   */
-  cdpEndpoint;
-  constructor(conn, childProcess, tmpDir, cdpEndpoint) {
+  constructor(conn, childProcess, tmpDir, cdpEndpoint, launchOpts) {
+    this.launchOpts = launchOpts;
     this.conn = conn;
     this.childProcess = childProcess ?? null;
     this.tmpDir = tmpDir;
@@ -3504,6 +3541,20 @@ var XBBrowserImpl = class {
       process.on("exit", this._exitHandler);
     }
   }
+  launchOpts;
+  conn;
+  _emitter = new EventEmitter3();
+  _contexts = /* @__PURE__ */ new Map();
+  _disconnected = false;
+  childProcess = null;
+  tmpDir;
+  _exitHandler = null;
+  /**
+   * Original CDP endpoint (HTTP or ws URL) used to construct this browser.
+   * Used by discoverContexts() as a fallback to HTTP /json/list when
+   * Target.getTargets doesn't return page-type targets (e.g. cdp-tunnel proxy).
+   */
+  cdpEndpoint;
   get disconnected() {
     return this._disconnected;
   }
@@ -3531,6 +3582,9 @@ var XBBrowserImpl = class {
     this._emitter.emit("disconnected");
   }
   async newContext(opts = {}) {
+    if (this.launchOpts?.stealthConfig && !opts.stealthConfig) {
+      opts = { ...opts, stealthConfig: this.launchOpts.stealthConfig };
+    }
     if (this._disconnected) {
       throw new Error("Browser is disconnected");
     }
@@ -4084,7 +4138,13 @@ async function launch(options = {}) {
   const conn = new CDPConnection(wsEndpoint);
   await conn.ready();
   const httpEndpoint = options.cdpEndpoint && !options.cdpEndpoint.startsWith("ws") ? options.cdpEndpoint : void 0;
-  const browser = new XBBrowserImpl(conn, childProcess, tmpDir, httpEndpoint);
+  const browser = new XBBrowserImpl(
+    conn,
+    childProcess,
+    tmpDir,
+    httpEndpoint,
+    options.stealthConfig ? { stealthConfig: options.stealthConfig } : void 0
+  );
   return { browser, wsEndpoint };
 }
 

package/dist/{chunk-A6LPGFAL.js → chunk-WYETQ5C7.js}

@@ -1,6 +1,6 @@
 import {
   createRuleEngine
-} from "./chunk-H2A5JUK5.js";
+} from "./chunk-75DNUI6M.js";
 
 // src/cdp-interceptor/proxy.ts
 import { WebSocketServer, WebSocket } from "ws";

package/dist/{chunk-76EKW7YJ.js → chunk-Z5RTK4GW.js}

@@ -1,12 +1,12 @@
 import {
   launch
-} from "./chunk-FDU5BCPV.js";
+} from "./chunk-HWWG2ISJ.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
 import {
   CDPInterceptorProxy
-} from "./chunk-A6LPGFAL.js";
+} from "./chunk-WYETQ5C7.js";
 
 // src/browser.ts
 import { randomUUID } from "crypto";

package/dist/cli.js

@@ -72,7 +72,7 @@ import {
   setActivePage,
   sleep,
   wheelDelta
-} from "./chunk-T2KUVO4H.js";
+} from "./chunk-ESJYANQO.js";
 import "./chunk-3KZ34AUC.js";
 import {
   errMsg
@@ -8248,7 +8248,7 @@ async function executeCommand(commandName, params, sessionName = "default", extr
   }
   let targetPageOverride = null;
   if (_target && extraOpts?.cdpEndpoint) {
-    const { findTargetPage } = await import("./browser-Y6B3NS4Q.js");
+    const { findTargetPage } = await import("./browser-CNBSH53B.js");
     targetPageOverride = await findTargetPage(extraOpts.cdpEndpoint, _target);
     if (!targetPageOverride) {
       return errorResult(`Target "${_target}" not found. Use 'xbrowser targets --cdp ${extraOpts.cdpEndpoint}' to list available pages.`);
@@ -14433,7 +14433,7 @@ Run "xbrowser ${command} ${subCommand} --help" to see available parameters.`
               const targetPage = pages[cmdTabIndex];
               await targetPage.bringToFront().catch(() => {
               });
-              const { setActivePage: setActivePage2 } = await import("./browser-Y6B3NS4Q.js");
+              const { setActivePage: setActivePage2 } = await import("./browser-CNBSH53B.js");
               setActivePage2(session, targetPage);
             }
           }
@@ -14709,7 +14709,7 @@ async function main() {
     const command = process.argv[2];
     const isLongRunning = command === "preview" || command === "serve";
     if (!isLongRunning) {
-      const { ensureProcessCanExit } = await import("./browser-Y6B3NS4Q.js");
+      const { ensureProcessCanExit } = await import("./browser-CNBSH53B.js");
       await ensureProcessCanExit().catch(() => {
       });
       process.exit(process.exitCode || exitCode);

package/dist/daemon-main.js

@@ -34,13 +34,13 @@ import {
   resolveLaunchOpts,
   saveSessionDiskMeta,
   setActivePage
-} from "./chunk-75TLPVVZ.js";
+} from "./chunk-AVSTNODR.js";
 import {
   createRuleEngine,
   rand,
   sleep,
   wheelDelta
-} from "./chunk-UYEJ66VX.js";
+} from "./chunk-CLYZPSDR.js";
 import {
   queryJS
 } from "./chunk-3FWLW7FS.js";
@@ -7766,7 +7766,7 @@ async function executeCommand(commandName, params, sessionName = "default", extr
   }
   let targetPageOverride = null;
   if (_target && extraOpts?.cdpEndpoint) {
-    const { findTargetPage } = await import("./browser-PBBC7RAV.js");
+    const { findTargetPage } = await import("./browser-C2VEOJC2.js");
     targetPageOverride = await findTargetPage(extraOpts.cdpEndpoint, _target);
     if (!targetPageOverride) {
       return errorResult(`Target "${_target}" not found. Use 'xbrowser targets --cdp ${extraOpts.cdpEndpoint}' to list available pages.`);
@@ -9588,7 +9588,7 @@ function createRPCHandler() {
     if (isNewFormat) {
       try {
         const replayErrors = [];
-        const { SessionReplayer } = await import("./session-replayer-SBYJXQZZ.js");
+        const { SessionReplayer } = await import("./session-replayer-EVD4HZBB.js");
         const replayer = new SessionReplayer({
           page: session.page,
           stepDelay: slowMo * 500,

package/dist/index.d.ts

@@ -6,6 +6,103 @@ import { ZodType, ZodTypeDef, z } from 'zod';
 
 declare const version: any;
 
+/**
+ * stealth.ts — Behavioral stealth layer for CDP driver
+ *
+ * Enhances mouse/keyboard with human-like patterns:
+ *   • Bezier trajectory with cosine easing + noise + overshoot correction
+ *   • Landing offset from element center (no dead-center clicks)
+ *   • Press/release drift (finger micro-movement)
+ *   • Three-tier typing rhythm with random pauses
+ *   • Typo + backspace correction
+ *   • Wheel exponential decay (momentum)
+ *
+ * Also provides init script for page-level stealth hooks:
+ *
+ * ── 维护红线（S183 站点观测实证）────────────────────────────
+ *   1. 永不覆写 navigator.webdriver —— 原生 false 即最佳伪装。
+ *      掘金等站点以 ~5s/次轮询 Navigator.prototype.webdriver 的
+ *      descriptor（getter native + 实例无覆写 = 正常），任何覆写
+ *      都会在 descriptor 检测下露馅。
+ *   2. 实例覆写必须原型层同步（S172）—— 实例 defineProperty 可被
+ *      X.prototype.p.call(target) 一行逃逸，见 stealth-audit.test.ts。
+ *   3. 覆写函数必须进 toString native 伪装名单（S172b 审计规则 R2）。
+ *   ────────────────────────────────────────────────────────
+ * Also provides init script for page-level stealth hooks:
+ *   • AEL event proxy (sourceCapabilities / isTrusted / coordinate floatification)
+ *   • onclick prototype hijack (dual-stream consistency)
+ *   • Screen/hasFocus override + toString disguise
+ *
+ * 124 rounds of attack-defense validated (output/cdp-duel-s5/)
+ */
+
+interface UaChProfile {
+    /** GREASE brands 形状，例：Not=A?Brand:99（从真实环境采样） */
+    brands: Array<{
+        brand: string;
+        version: string;
+    }>;
+    /** 平台（macOS / Windows / Linux） */
+    platform: string;
+    /** 平台版本（高熵） */
+    platformVersion: string;
+    /** 架构（arm / x86） */
+    architecture: string;
+    /** 位宽（64 / 32） */
+    bitness: string;
+    /** 设备型号（桌面端通常空） */
+    model: string;
+    /** 完整版本号（uaFullVersion，例：151.0.7922.175） */
+    uaFullVersion: string;
+    /** 完整版本列表（fullVersionList，与 brands 同形状+全版本） */
+    fullVersionList: Array<{
+        brand: string;
+        version: string;
+    }>;
+}
+interface StealthConfig {
+    /**
+     * S191: UA-CH 真实档案——垫片在 navigator.userAgentData 缺失时
+     * 以此生成 API 表面（值来自真实有头 Chrome 采样，形状一致）。
+     * 未提供时从 UA 字符串派生兜底值。
+     */
+    uaChProfile?: UaChProfile;
+    /** Bezier curvature range [min, max] as fraction of distance */
+    bezierCurvature: [number, number];
+    /** Trajectory noise amplitude ±px */
+    noiseAmplitude: number;
+    /** Overshoot distance range [min, max] px */
+    overshootRange: [number, number];
+    /** Aim pause before click [min, max] ms */
+    aimPause: [number, number];
+    /** Press duration [min, max] ms */
+    pressDuration: [number, number];
+    /** Release coordinate drift [min, max] px */
+    releaseDrift: [number, number];
+    /** Landing offset for small elements [min, max] px */
+    landingOffsetSmall: [number, number];
+    /** Landing offset for large elements [min, max] px */
+    landingOffsetLarge: [number, number];
+    /** Elements smaller than this (px) use small offset */
+    smallElementThreshold: number;
+    /** Typing rhythm probabilities */
+    typingRhythm: {
+        fastProb: number;
+        fastRange: [number, number];
+        normalRange: [number, number];
+        pauseProb: number;
+        pauseRange: [number, number];
+    };
+    /** Key press duration [min, max] ms */
+    keyPressDuration: [number, number];
+    /** Typo probability per field (0-1) */
+    typoProbability: number;
+    /** Wheel peak delta */
+    wheelPeak: number;
+    /** Wheel decay rate */
+    wheelDecayRate: number;
+}
+
 /**
  * XBrowser CDP Driver — Abstract Interface Types
  *
@@ -38,6 +135,8 @@ interface XBContextOptions {
     userAgent?: string;
     extraHTTPHeaders?: Record<string, string>;
     ignoreHTTPSErrors?: boolean;
+    /** S194: stealth 伪装配置（UA-CH 档案等）——经 context 传至 page 的注入层 */
+    stealthConfig?: Partial<StealthConfig>;
 }
 interface XBContext {
     newPage(): Promise<XBPage>;

package/dist/index.js

@@ -18,7 +18,7 @@ import {
   resolveLaunchOpts,
   saveSessionDiskMeta,
   setActivePage
-} from "./chunk-76EKW7YJ.js";
+} from "./chunk-Z5RTK4GW.js";
 import {
   detectAntiBot,
   formatDetectionMessage
@@ -86,7 +86,7 @@ import {
   rand,
   sleep,
   wheelDelta
-} from "./chunk-FDU5BCPV.js";
+} from "./chunk-HWWG2ISJ.js";
 import "./chunk-3KZ34AUC.js";
 import {
   errMsg
@@ -94,7 +94,7 @@ import {
 import {
   CDPInterceptorProxy,
   advise
-} from "./chunk-A6LPGFAL.js";
+} from "./chunk-WYETQ5C7.js";
 import {
   automationSignalsRule,
   createRuleEngine,
@@ -106,7 +106,7 @@ import {
   mouseTrajectoryRule,
   networkAnomalyRule,
   pageLifecycleRule
-} from "./chunk-H2A5JUK5.js";
+} from "./chunk-75DNUI6M.js";
 import {
   SessionRecorder
 } from "./chunk-NODRQGOK.js";
@@ -8599,7 +8599,7 @@ async function executeCommand(commandName, params, sessionName = "default", extr
   }
   let targetPageOverride = null;
   if (_target && extraOpts?.cdpEndpoint) {
-    const { findTargetPage } = await import("./browser-NVC7MTML.js");
+    const { findTargetPage } = await import("./browser-VZOOFLAH.js");
     targetPageOverride = await findTargetPage(extraOpts.cdpEndpoint, _target);
     if (!targetPageOverride) {
       return errorResult(`Target "${_target}" not found. Use 'xbrowser targets --cdp ${extraOpts.cdpEndpoint}' to list available pages.`);
@@ -14822,7 +14822,7 @@ Run "xbrowser ${command} ${subCommand} --help" to see available parameters.`
               const targetPage = pages[cmdTabIndex];
               await targetPage.bringToFront().catch(() => {
               });
-              const { setActivePage: setActivePage2 } = await import("./browser-NVC7MTML.js");
+              const { setActivePage: setActivePage2 } = await import("./browser-VZOOFLAH.js");
               setActivePage2(session, targetPage);
             }
           }
@@ -17995,7 +17995,7 @@ var DataCollector = class {
     return results;
   }
   async createBrowserContext() {
-    const { launch } = await import("./cdp-driver-QYFA4QTP.js");
+    const { launch } = await import("./cdp-driver-26LGCHXV.js");
     const { browser } = await launch({
       headless: true,
       args: ["--no-sandbox", "--disable-setuid-sandbox"]
@@ -18035,7 +18035,7 @@ var DataCollector = class {
 
 // src/cdp-interceptor/index.ts
 async function createCDPInterceptor(config) {
-  const { CDPInterceptorProxy: CDPInterceptorProxy2 } = await import("./proxy-LUR4U5YF.js");
+  const { CDPInterceptorProxy: CDPInterceptorProxy2 } = await import("./proxy-NKCYE76M.js");
   const proxy = new CDPInterceptorProxy2(config);
   await proxy.start();
   return proxy;

package/dist/{proxy-LUR4U5YF.js → proxy-NKCYE76M.js}

@@ -1,7 +1,7 @@
 import {
   CDPInterceptorProxy
-} from "./chunk-A6LPGFAL.js";
-import "./chunk-H2A5JUK5.js";
+} from "./chunk-WYETQ5C7.js";
+import "./chunk-75DNUI6M.js";
 import "./chunk-KFQGP6VL.js";
 export {
   CDPInterceptorProxy

package/dist/{session-replayer-SBYJXQZZ.js → session-replayer-EVD4HZBB.js}

@@ -34,7 +34,7 @@ var SessionReplayer = class {
     if (this.opts.page) {
       this.page = this.opts.page;
     } else if (this.opts.cdpUrl) {
-      const { launch } = await import("./cdp-driver-73F5CVH2.js");
+      const { launch } = await import("./cdp-driver-KFX4A6WR.js");
       const { browser } = await launch({ cdpEndpoint: this.opts.cdpUrl });
       let contexts = browser.contexts();
       for (let i = 0; i < 10 && contexts.length === 0; i++) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xbrowser/cli",
-  "version": "1.20.0",
+  "version": "1.21.0",
   "description": "Browser automation CLI for web scraping, headless browsing, SEO analysis, and AI agent workflows. A command-line alternative to Playwright, Puppeteer, and Selenium.",
   "type": "module",
   "bin": {
@@ -75,6 +75,7 @@
     "lint": "eslint src/ bin/ --ext .ts",
     "lint:plugin-contract": "node lint-scripts/check-plugin-contract.mjs && node lint-scripts/check-plugin-status.mjs",
     "lint:plugin-status": "node lint-scripts/check-plugin-status.mjs --update",
+    "stealth:check": "vitest run tests/cdp-driver/stealth-health.test.ts tests/cdp-driver/stealth-audit.test.ts tests/cdp-driver/stealth-probe.test.ts",
     "lint:docs": "node lint-scripts/check-docs-consistency.mjs",
     "typecheck": "tsc --noEmit",
     "start": "node dist/cli.js",