@xcanwin/manyoyo 5.1.9 → 5.1.10

package/config.example.json

@@ -38,6 +38,10 @@
             "vncPasswordEnvKey": "VNC_PASSWORD",
             // playwright ext-download 的 CRX prodversion 参数
             "extensionProdversion": "132.0.0.0",
+            // 注入 navigator.platform（默认与内置 UA 对齐为 MacIntel）
+            "navigatorPlatform": "MacIntel",
+            // 是否禁用 WebRTC（默认 false）
+            "disableWebRTC": false,
             "ports": {
                 "contHeadless": 8931,
                 "contHeaded": 8932,

package/lib/plugin/playwright.js

@@ -65,6 +65,21 @@ const DEFAULT_FINGERPRINT_PROFILE = {
     width: 1366,
     height: 768
 };
+const DISABLE_WEBRTC_LAUNCH_ARGS = ['--disable-webrtc'];
+
+function platformFromUserAgent(userAgent) {
+    const ua = String(userAgent || '').toLowerCase();
+    if (ua.includes('macintosh') || ua.includes('mac os x')) {
+        return 'MacIntel';
+    }
+    if (ua.includes('windows')) {
+        return 'Win32';
+    }
+    if (ua.includes('android') || ua.includes('linux')) {
+        return 'Linux x86_64';
+    }
+    return 'MacIntel';
+}
 
 function sleep(ms) {
     return new Promise(resolve => setTimeout(resolve, ms));
@@ -94,6 +109,22 @@ function asStringArray(value, fallback) {
         .filter(Boolean);
 }
 
+function asBoolean(value, fallback = false) {
+    if (typeof value === 'boolean') {
+        return value;
+    }
+    if (typeof value === 'string') {
+        const normalized = value.trim().toLowerCase();
+        if (normalized === 'true') {
+            return true;
+        }
+        if (normalized === 'false') {
+            return false;
+        }
+    }
+    return fallback;
+}
+
 function isHostPermission(value) {
     if (value === '<all_urls>') {
         return true;
@@ -242,6 +273,8 @@ class PlaywrightPlugin {
             configDir: path.join(pluginRootDir, 'config'),
             runDir: path.join(pluginRootDir, 'run'),
             extensionProdversion: '132.0.0.0',
+            navigatorPlatform: platformFromUserAgent(DEFAULT_FINGERPRINT_PROFILE.userAgent),
+            disableWebRTC: false,
             composeDir: path.join(__dirname, 'playwright-assets'),
             ports: {
                 contHeadless: 8931,
@@ -273,6 +306,8 @@ class PlaywrightPlugin {
             asStringArray(this.globalConfig.enabledScenes, [...defaultConfig.enabledScenes])
         );
         merged.containerRuntime = this.resolveContainerRuntime(merged.containerRuntime);
+        merged.navigatorPlatform = String(merged.navigatorPlatform || defaultConfig.navigatorPlatform).trim() || defaultConfig.navigatorPlatform;
+        merged.disableWebRTC = asBoolean(merged.disableWebRTC, defaultConfig.disableWebRTC);
 
         if (merged.enabledScenes.length === 0) {
             throw new Error('playwright.enabledScenes 不能为空');
@@ -377,6 +412,72 @@ class PlaywrightPlugin {
         return !fs.existsSync(this.sceneConfigPath(sceneName));
     }
 
+    sceneInitScriptPath(sceneName) {
+        const configFile = path.basename(this.sceneConfigPath(sceneName), '.json');
+        return path.join(this.config.configDir, `${configFile}.init.js`);
+    }
+
+    legacySceneInitScriptPath(sceneName) {
+        return path.join(this.config.configDir, `${sceneName}.init.js`);
+    }
+
+    buildInitScriptContent() {
+        const lines = [
+            "'use strict';",
+            '(function () {',
+            `    const platformValue = ${JSON.stringify(this.config.navigatorPlatform)};`,
+            '    try {',
+            '        const navProto = Object.getPrototypeOf(navigator);',
+            "        Object.defineProperty(navProto, 'platform', {",
+            '            configurable: true,',
+            '            get: () => platformValue',
+            '        });',
+            '    } catch (_) {}'
+        ];
+
+        if (this.config.disableWebRTC) {
+            lines.push(
+                '    try {',
+                '        const scope = globalThis;',
+                "        const blocked = ['RTCPeerConnection', 'webkitRTCPeerConnection', 'RTCIceCandidate', 'RTCRtpSender', 'RTCRtpReceiver', 'RTCRtpTransceiver', 'RTCDataChannel'];",
+                '        for (const name of blocked) {',
+                "            Object.defineProperty(scope, name, { configurable: true, writable: true, value: undefined });",
+                '        }',
+                '        if (navigator.mediaDevices) {',
+                '            const errorFactory = () => {',
+                '                try {',
+                "                    return new DOMException('WebRTC is disabled', 'NotAllowedError');",
+                '                } catch (_) {',
+                "                    const error = new Error('WebRTC is disabled');",
+                "                    error.name = 'NotAllowedError';",
+                '                    return error;',
+                '                }',
+                '            };',
+                "            Object.defineProperty(navigator.mediaDevices, 'getUserMedia', {",
+                '                configurable: true,',
+                '                writable: true,',
+                '                value: async () => { throw errorFactory(); }',
+                '            });',
+                '        }',
+                '    } catch (_) {}'
+            );
+        }
+
+        lines.push('})();', '');
+        return lines.join('\n');
+    }
+
+    ensureSceneInitScript(sceneName) {
+        const filePath = this.sceneInitScriptPath(sceneName);
+        const content = this.buildInitScriptContent();
+        fs.writeFileSync(filePath, content, 'utf8');
+        const legacyFilePath = this.legacySceneInitScriptPath(sceneName);
+        if (legacyFilePath !== filePath) {
+            fs.rmSync(legacyFilePath, { force: true });
+        }
+        return filePath;
+    }
+
     defaultBrowserName(sceneName) {
         const cfg = this.buildSceneConfig(sceneName);
         const browserName = cfg && cfg.browser && cfg.browser.browserName;
@@ -553,6 +654,7 @@ class PlaywrightPlugin {
         const def = SCENE_DEFS[sceneName];
         const port = this.scenePort(sceneName);
         const extensionPaths = asStringArray(options.extensionPaths, []);
+        const initScript = asStringArray(options.initScript, []);
         const baseLaunchArgs = [
             `--user-agent=${DEFAULT_FINGERPRINT_PROFILE.userAgent}`,
             `--lang=${DEFAULT_FINGERPRINT_PROFILE.locale}`,
@@ -569,6 +671,9 @@ class PlaywrightPlugin {
         if (extensionPaths.length > 0) {
             launchOptions.args.push(...this.buildExtensionLaunchArgs(extensionPaths));
         }
+        if (this.config.disableWebRTC) {
+            launchOptions.args.push(...DISABLE_WEBRTC_LAUNCH_ARGS);
+        }
 
         return {
             server: {
@@ -584,6 +689,7 @@ class PlaywrightPlugin {
             browser: {
                 chromiumSandbox: true,
                 browserName: 'chromium',
+                initScript,
                 launchOptions,
                 contextOptions: {
                     userAgent: DEFAULT_FINGERPRINT_PROFILE.userAgent,
@@ -607,7 +713,13 @@ class PlaywrightPlugin {
 
     ensureSceneConfig(sceneName, options = {}) {
         fs.mkdirSync(this.config.configDir, { recursive: true });
-        const payload = this.buildSceneConfig(sceneName, options);
+        const initScriptPath = this.ensureSceneInitScript(sceneName);
+        const configuredInitScript = asStringArray(options.initScript, []);
+        const initScript = configuredInitScript.length > 0 ? configuredInitScript : [initScriptPath];
+        const payload = this.buildSceneConfig(sceneName, {
+            ...options,
+            initScript
+        });
         const filePath = this.sceneConfigPath(sceneName);
         fs.writeFileSync(filePath, `${JSON.stringify(payload, null, 4)}\n`, 'utf8');
         return filePath;
@@ -717,21 +829,31 @@ class PlaywrightPlugin {
         }
 
         const incomingExtensionPaths = asStringArray(options.extensionPaths, []);
-        let configOptions = { ...options, extensionPaths: incomingExtensionPaths };
+        const hostInitScriptPath = this.sceneInitScriptPath(sceneName);
+        const containerInitScriptPath = path.posix.join('/app/config', path.basename(hostInitScriptPath));
+        let configOptions = {
+            ...options,
+            extensionPaths: incomingExtensionPaths,
+            initScript: [containerInitScriptPath]
+        };
         const composeFiles = [this.containerComposePath(sceneName)];
+        const volumeMounts = [`${hostInitScriptPath}:${containerInitScriptPath}:ro`];
 
         if (incomingExtensionPaths.length > 0) {
             const mapped = this.buildContainerExtensionMounts(incomingExtensionPaths);
-            const overridePath = this.ensureContainerComposeOverride(sceneName, mapped.volumeMounts);
-            if (overridePath) {
-                composeFiles.push(overridePath);
-            }
-            configOptions = { ...options, extensionPaths: mapped.containerPaths };
-        } else {
-            this.ensureContainerComposeOverride(sceneName, []);
+            volumeMounts.push(...mapped.volumeMounts);
+            configOptions = {
+                ...options,
+                extensionPaths: mapped.containerPaths,
+                initScript: [containerInitScriptPath]
+            };
         }
-
         const cfgPath = this.ensureSceneConfig(sceneName, configOptions);
+        const overridePath = this.ensureContainerComposeOverride(sceneName, volumeMounts);
+        if (overridePath) {
+            composeFiles.push(overridePath);
+        }
+
         const env = this.containerEnv(sceneName, cfgPath, { requireVncPassword: true });
         const def = SCENE_DEFS[sceneName];
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@xcanwin/manyoyo",
-    "version": "5.1.9",
+    "version": "5.1.10",
     "imageVersion": "1.8.1-common",
     "description": "AI Agent CLI Security Sandbox for Docker and Podman",
     "keywords": [