arise-browser 0.1.0

package/deploy/neko/policies.json

@@ -0,0 +1,28 @@
+{
+  "AutofillAddressEnabled": false,
+  "AutofillCreditCardEnabled": false,
+  "BrowserSignin": 0,
+  "DefaultNotificationsSetting": 2,
+  "DeveloperToolsAvailability": 0,
+  "EditBookmarksEnabled": false,
+  "FullscreenAllowed": true,
+  "IncognitoModeAvailability": 1,
+  "SyncDisabled": true,
+  "AutoplayAllowed": true,
+  "BrowserAddPersonEnabled": false,
+  "BrowserGuestModeEnabled": false,
+  "DefaultPopupsSetting": 1,
+  "DownloadRestrictions": 3,
+  "VideoCaptureAllowed": true,
+  "AllowFileSelectionDialogs": false,
+  "PromptForDownloadLocation": false,
+  "BookmarkBarEnabled": false,
+  "PasswordManagerEnabled": false,
+  "URLAllowlist": [
+    "file:///home/neko/Downloads"
+  ],
+  "URLBlocklist": [
+    "file://*",
+    "chrome://policy"
+  ]
+}

package/deploy/neko/pulseaudio.pa

@@ -0,0 +1,16 @@
+#!/usr/bin/pulseaudio -nF
+
+### Create virtual output device sink
+load-module module-null-sink sink_name=audio_output sink_properties=device.description="Virtual_Audio_Output"
+
+### Create virtual input device sink
+load-module module-null-sink sink_name=audio_input sink_properties=device.description="Virtual_Audio_Input"
+
+### Create a virtual audio source linked up to the virtual input device
+load-module module-virtual-source source_name=microphone master=audio_input.monitor source_properties=device.description="Virtual_Microphone"
+
+### Allow pulse audio to be accessed via TCP (from localhost only), to allow other users to access the virtual devices
+load-module module-native-protocol-unix socket=/tmp/pulseaudio.socket auth-anonymous=1
+
+### Make sure we always have a sink around, even if it is a null sink.
+load-module module-always-sink

package/deploy/neko/setup.sh

@@ -0,0 +1,308 @@
+#!/usr/bin/env bash
+#
+# AriseBrowser + Neko dependency installer
+# Supports: Debian/Ubuntu (apt) and CentOS/RHEL/Fedora (dnf/yum)
+#
+# Usage: sudo bash setup.sh
+#
+
+set -euo pipefail
+
+NEKO_VERSION="${NEKO_VERSION:-v3.3.0}"
+NODE_MAJOR="${NODE_MAJOR:-20}"
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+log()  { echo -e "${GREEN}[+]${NC} $*"; }
+warn() { echo -e "${YELLOW}[!]${NC} $*"; }
+err()  { echo -e "${RED}[x]${NC} $*" >&2; }
+
+if [[ $EUID -ne 0 ]]; then
+  err "This script must be run as root (use sudo)"
+  exit 1
+fi
+
+# Detect package manager
+if command -v apt-get &>/dev/null; then
+  PKG_MGR="apt"
+elif command -v dnf &>/dev/null; then
+  PKG_MGR="dnf"
+elif command -v yum &>/dev/null; then
+  PKG_MGR="yum"
+else
+  err "Unsupported package manager. Need apt, dnf, or yum."
+  exit 1
+fi
+
+log "Detected package manager: ${PKG_MGR}"
+
+# ─── System packages ───────────────────────────────────────────────
+
+install_apt() {
+  apt-get update -qq
+
+  # Xvfb + X11
+  apt-get install -y -qq \
+    xvfb \
+    xserver-xorg-video-dummy \
+    x11-xserver-utils \
+    xdotool
+
+  # PulseAudio
+  apt-get install -y -qq pulseaudio
+
+  # Openbox window manager
+  apt-get install -y -qq openbox
+
+  # GStreamer (full suite for Neko)
+  apt-get install -y -qq \
+    libgstreamer1.0-0 \
+    gstreamer1.0-plugins-base \
+    gstreamer1.0-plugins-good \
+    gstreamer1.0-plugins-bad \
+    gstreamer1.0-plugins-ugly \
+    gstreamer1.0-pulseaudio \
+    gstreamer1.0-x
+
+  # CJK + emoji fonts
+  apt-get install -y -qq \
+    fonts-noto-cjk \
+    fonts-noto-color-emoji \
+    fonts-liberation
+
+  # Misc
+  apt-get install -y -qq \
+    curl \
+    wget \
+    ca-certificates \
+    gnupg
+}
+
+install_rpm() {
+  local mgr="$1"
+
+  # Enable EPEL
+  if ! rpm -q epel-release &>/dev/null; then
+    $mgr install -y epel-release
+  fi
+
+  # Enable RPM Fusion (for GStreamer ugly plugins)
+  if ! rpm -q rpmfusion-free-release &>/dev/null; then
+    $mgr install -y \
+      "https://mirrors.rpmfusion.org/free/el/rpmfusion-free-release-$(rpm -E %rhel).noarch.rpm" || true
+  fi
+
+  # Xvfb + X11
+  $mgr install -y \
+    xorg-x11-server-Xvfb \
+    xorg-x11-drv-dummy \
+    xorg-x11-utils \
+    xdotool
+
+  # PulseAudio
+  $mgr install -y pulseaudio pulseaudio-utils
+
+  # Openbox
+  $mgr install -y openbox
+
+  # GStreamer
+  $mgr install -y \
+    gstreamer1 \
+    gstreamer1-plugins-base \
+    gstreamer1-plugins-good \
+    gstreamer1-plugins-bad-free \
+    gstreamer1-plugins-ugly \
+    gstreamer1-plugins-good-extras
+
+  # CJK + emoji fonts
+  $mgr install -y \
+    google-noto-sans-cjk-fonts \
+    google-noto-emoji-color-fonts \
+    liberation-fonts
+
+  # Misc
+  $mgr install -y \
+    curl \
+    wget \
+    ca-certificates
+}
+
+case "$PKG_MGR" in
+  apt) install_apt ;;
+  dnf) install_rpm dnf ;;
+  yum) install_rpm yum ;;
+esac
+
+log "System packages installed"
+
+# ─── Google Chrome ─────────────────────────────────────────────────
+
+if ! command -v google-chrome &>/dev/null && ! command -v google-chrome-stable &>/dev/null; then
+  if [[ "$NEKO_ARCH" == "arm64" ]]; then
+    # Google Chrome has no ARM64 Linux builds — install Chromium instead
+    log "Installing Chromium (ARM64, Google Chrome not available)..."
+    if [[ "$PKG_MGR" == "apt" ]]; then
+      apt-get install -y -qq chromium-browser || apt-get install -y -qq chromium
+    else
+      $PKG_MGR install -y chromium
+    fi
+    log "Chromium installed"
+  else
+    log "Installing Google Chrome..."
+    if [[ "$PKG_MGR" == "apt" ]]; then
+      wget -q -O /tmp/google-chrome.deb \
+        "https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb"
+      apt-get install -y -qq /tmp/google-chrome.deb
+      rm -f /tmp/google-chrome.deb
+    else
+      cat > /etc/yum.repos.d/google-chrome.repo <<'REPO'
+[google-chrome]
+name=google-chrome
+baseurl=https://dl.google.com/linux/chrome/rpm/stable/x86_64
+enabled=1
+gpgcheck=1
+gpgkey=https://dl.google.com/linux/linux_signing_key.pub
+REPO
+      $PKG_MGR install -y google-chrome-stable
+    fi
+    log "Google Chrome installed"
+  fi
+else
+  log "Google Chrome/Chromium already installed"
+fi
+
+# ─── Chrome policies ──────────────────────────────────────────────
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+POLICIES_SRC="${SCRIPT_DIR}/policies.json"
+POLICIES_DST="/etc/opt/chrome/policies/managed/arise-browser.json"
+
+if [[ -f "$POLICIES_SRC" ]]; then
+  mkdir -p "$(dirname "$POLICIES_DST")"
+  cp "$POLICIES_SRC" "$POLICIES_DST"
+  log "Chrome policies installed to ${POLICIES_DST}"
+else
+  warn "policies.json not found at ${POLICIES_SRC}, skipping"
+fi
+
+# ─── Node.js ──────────────────────────────────────────────────────
+
+if ! command -v node &>/dev/null; then
+  log "Installing Node.js ${NODE_MAJOR}..."
+
+  if [[ "$PKG_MGR" == "apt" ]]; then
+    curl -fsSL https://deb.nodesource.com/setup_${NODE_MAJOR}.x | bash -
+    apt-get install -y -qq nodejs
+  else
+    curl -fsSL https://rpm.nodesource.com/setup_${NODE_MAJOR}.x | bash -
+    $PKG_MGR install -y nodejs
+  fi
+
+  log "Node.js installed: $(node --version)"
+else
+  log "Node.js already installed: $(node --version)"
+fi
+
+# ─── Neko server binary ──────────────────────────────────────────
+
+NEKO_BIN="/usr/local/bin/neko"
+NEKO_WWW="/usr/local/share/neko/www"
+
+# Detect arch early so it's available for all sections
+ARCH="$(uname -m)"
+case "$ARCH" in
+  x86_64)  NEKO_ARCH="amd64" ;;
+  aarch64) NEKO_ARCH="arm64" ;;
+  *)       err "Unsupported architecture: $ARCH"; exit 1 ;;
+esac
+
+if [[ ! -f "$NEKO_BIN" ]]; then
+  log "Installing Neko server ${NEKO_VERSION}..."
+
+  NEKO_URL="https://github.com/m1k1o/neko/releases/download/${NEKO_VERSION}/server-${NEKO_ARCH}"
+  wget -q -O "$NEKO_BIN" "$NEKO_URL"
+  chmod +x "$NEKO_BIN"
+
+  log "Neko server installed to ${NEKO_BIN}"
+else
+  log "Neko server already installed at ${NEKO_BIN}"
+fi
+
+# ─── Neko client static files ────────────────────────────────────
+
+if [[ ! -d "$NEKO_WWW" ]]; then
+  log "Installing Neko client files..."
+
+  NEKO_CLIENT_URL="https://github.com/m1k1o/neko/releases/download/${NEKO_VERSION}/client.tar.gz"
+  mkdir -p "$NEKO_WWW"
+  wget -q -O /tmp/neko-client.tar.gz "$NEKO_CLIENT_URL"
+  tar -xzf /tmp/neko-client.tar.gz -C "$NEKO_WWW"
+  rm -f /tmp/neko-client.tar.gz
+
+  log "Neko client files installed to ${NEKO_WWW}"
+else
+  log "Neko client files already at ${NEKO_WWW}"
+fi
+
+# ─── Neko X11 drivers ────────────────────────────────────────────
+
+XORG_MODULES="/usr/lib/xorg/modules"
+if [[ -d "$XORG_MODULES" ]]; then
+  NEKO_DRIVERS_URL="https://github.com/m1k1o/neko/releases/download/${NEKO_VERSION}/xf86-input-neko-${NEKO_ARCH}.tar.gz"
+
+  if [[ ! -f "${XORG_MODULES}/input/neko_drv.so" ]]; then
+    log "Installing Neko X11 input driver..."
+    wget -q -O /tmp/neko-drivers.tar.gz "$NEKO_DRIVERS_URL" || true
+    if [[ -f /tmp/neko-drivers.tar.gz ]]; then
+      tar -xzf /tmp/neko-drivers.tar.gz -C "$XORG_MODULES" || true
+      rm -f /tmp/neko-drivers.tar.gz
+      log "Neko X11 drivers installed"
+    else
+      warn "Could not download Neko X11 drivers (non-critical)"
+    fi
+  else
+    log "Neko X11 drivers already installed"
+  fi
+fi
+
+# ─── Playwright browser deps ─────────────────────────────────────
+
+if command -v npx &>/dev/null; then
+  log "Installing Playwright Chromium dependencies..."
+  npx playwright install-deps chromium 2>/dev/null || warn "playwright install-deps skipped"
+fi
+
+# ─── System user ──────────────────────────────────────────────────
+
+if ! id -u neko &>/dev/null; then
+  log "Creating 'neko' system user..."
+  useradd -r -m -s /bin/bash neko
+  usermod -aG audio,video neko
+  log "User 'neko' created"
+else
+  log "User 'neko' already exists"
+fi
+
+# ─── Summary ──────────────────────────────────────────────────────
+
+echo ""
+log "Setup complete!"
+echo ""
+echo "Next steps:"
+echo "  1. Deploy arise-browser to /opt/arise-browser/"
+echo "  2. Install systemd service:"
+echo "     cp deploy/neko/arise-browser.service /etc/systemd/system/"
+echo "     systemctl daemon-reload"
+echo "     systemctl enable --now arise-browser"
+echo ""
+echo "  Or run manually:"
+echo "     node dist/bin/arise-browser.js --virtual-display --port 9867 --host 0.0.0.0"
+echo ""
+echo "Ports:"
+echo "  - 9867  arise-browser API"
+echo "  - 6090  Neko WebRTC UI"
+echo "  - 52000-52100  WebRTC UDP"

package/deploy/neko/xorg.conf

@@ -0,0 +1,118 @@
+# This xorg configuration file is meant to be used by xpra
+# to start a dummy X11 server.
+# For details, please see:
+# https://xpra.org/trac/wiki/Xdummy
+
+Section "ServerFlags"
+  Option "DontVTSwitch" "true"
+  Option "AllowMouseOpenFail" "true"
+  Option "PciForceNone" "true"
+  Option "AutoEnableDevices" "false"
+  Option "AutoAddDevices" "false"
+EndSection
+
+Section "InputDevice"
+  Identifier "dummy_mouse"
+  Option "CorePointer" "true"
+  Driver "void"
+EndSection
+
+Section "InputDevice"
+  Identifier "dummy_keyboard"
+  Option "CoreKeyboard" "true"
+  Driver "void"
+EndSection
+
+Section "InputDevice"
+  Identifier "dummy_touchscreen"
+  Option "SendCoreEvents" "On"
+  Option "SocketName" "/tmp/xf86-input-neko.sock"
+  Driver "neko"
+EndSection
+
+Section "Device"
+  Identifier "dummy_videocard"
+  Driver "dummy"
+  Option "ConstantDPI" "true"
+  VideoRam 1024000
+  #VideoRam 512000
+  #VideoRam 256000
+  #VideoRam 192000
+EndSection
+
+Section "Monitor"
+  Identifier "dummy_monitor"
+  HorizSync   5.0 - 1000.0
+  VertRefresh 5.0 - 200.0
+  #This can be used to get a specific DPI, but only for the default resolution:
+  #DisplaySize 508 317
+  #NOTE: the highest modes will not work without increasing the VideoRam
+  # for the dummy video card.
+  # https://arachnoid.com/modelines/
+
+  # 1920x1080 @ 60.00 Hz (GTF) hsync: 67.08 kHz; pclk: 172.80 MHz
+  Modeline "1920x1080_60.00" 172.80 1920 2040 2248 2576 1080 1081 1084 1118 -HSync +Vsync
+  # 1280x720 @ 60.00 Hz (GTF) hsync: 44.76 kHz; pclk: 74.48 MHz
+  Modeline "1280x720_60.00" 74.48 1280 1336 1472 1664 720 721 724 746 -HSync +Vsync
+  # 1152x648 @ 60.00 Hz (GTF) hsync: 40.26 kHz; pclk: 59.91 MHz
+  Modeline "1152x648_60.00" 59.91 1152 1200 1320 1488 648 649 652 671 -HSync +Vsync
+  # 1024x576 @ 60.00 Hz (GTF) hsync: 35.82 kHz; pclk: 47.00 MHz
+  Modeline "1024x576_60.00" 47.00 1024 1064 1168 1312 576 577 580 597 -HSync +Vsync
+  # 960x720 @ 60.00 Hz (GTF) hsync: 44.76 kHz; pclk: 55.86 MHz
+  Modeline "960x720_60.00" 55.86 960 1008 1104 1248 720 721 724 746 -HSync +Vsync
+  # 800x600 @ 60.00 Hz (GTF) hsync: 37.32 kHz; pclk: 38.22 MHz
+  Modeline "800x600_60.00" 38.22 800 832 912 1024 600 601 604 622 -HSync +Vsync
+
+  # 2560x1440 @ 30.00 Hz (GTF) hsync: 43.95 kHz; pclk: 146.27 MHz
+  Modeline "2560x1440_30.00" 146.27 2560 2680 2944 3328 1440 1441 1444 1465 -HSync +Vsync
+  # 1920x1080 @ 30.00 Hz (GTF) hsync: 32.97 kHz; pclk: 80.18 MHz
+  Modeline "1920x1080_30.00" 80.18 1920 1984 2176 2432 1080 1081 1084 1099 -HSync +Vsync
+  # 1368x768 @ 30.00 Hz (GTF) hsync: 23.46 kHz; pclk: 38.85 MHz
+  Modeline "1368x768_30.00" 38.85 1368 1376 1512 1656 768 769 772 782 -HSync +Vsync
+  # 1280x720 @ 30.00 Hz (GTF) hsync: 21.99 kHz; pclk: 33.78 MHz
+  Modeline "1280x720_30.00" 33.78 1280 1288 1408 1536 720 721 724 733 -HSync +Vsync
+  # 1152x648 @ 30.00 Hz (GTF) hsync: 19.80 kHz; pclk: 26.93 MHz
+  Modeline "1152x648_30.00" 26.93 1152 1144 1256 1360 648 649 652 660 -HSync +Vsync
+  # 1024x576 @ 30.00 Hz (GTF) hsync: 17.61 kHz; pclk: 20.85 MHz
+  Modeline "1024x576_30.00" 20.85 1024 1008 1104 1184 576 577 580 587 -HSync +Vsync
+  # 960x720 @ 30.00 Hz (GTF) hsync: 21.99 kHz; pclk: 25.33 MHz
+  Modeline "960x720_30.00" 25.33 960 960 1056 1152 720 721 724 733 -HSync +Vsync
+  # 800x600 @ 30.00 Hz (GTF) hsync: 18.33 kHz; pclk: 17.01 MHz
+  Modeline "800x600_30.00" 17.01 800 792 864 928 600 601 604 611 -HSync +Vsync
+
+  # 800x1600 @ 30.00 Hz (GTF) hsync: 48.84 kHz; pclk: 51.58 MHz
+  Modeline "800x1600_30.00" 51.58 800 840 928 1056 1600 1601 1604 1628 -HSync +Vsync
+
+  # 3840x2160 @ 25.00 Hz (GTF) hsync: 54.77 kHz; pclk: 278.70 MHz
+  Modeline "3840x2160_25.00" 278.70 3840 4056 4464 5088 2160 2161 2164 2191 -HSync +Vsync
+  # 2560x1440 @ 24.96 Hz (CVT) hsync: 36.53 kHz; pclk: 119.25 MHz
+  Modeline "2560x1440_25.00"  119.25  2560 2656 2912 3264  1440 1443 1448 1464 -Hsync +Vsync
+  # 1920x1080 @ 25.00 Hz (GTF) hsync: 27.40 kHz; pclk: 64.88 MHz
+  Modeline "1920x1080_25.00" 64.88 1920 1952 2144 2368 1080 1081 1084 1096 -HSync +Vsync
+  # 1600x900 @ 24.97 Hz (CVT) hsync: 22.88 kHz; pclk: 45.75 MHz
+  Modeline "1600x900_25.00"   45.75  1600 1648 1800 2000  900 903 908 916 -Hsync +Vsync
+  # 1368x768 @ 24.89 Hz (CVT) hsync: 19.51 kHz; pclk: 33.25 MHz
+  Modeline "1368x768_25.00"   33.25  1368 1408 1536 1704  768 771 781 784 -Hsync +Vsync
+  # 800x1600 @ 24.92 Hz (CVT) hsync: 40.53 kHz; pclk: 41.50 MHz
+  Modeline "800x1600_25.00"   41.50  800 832 912 1024  1600 1603 1613 1626 -Hsync +Vsync
+EndSection
+
+Section "Screen"
+  Identifier "dummy_screen"
+  Device "dummy_videocard"
+  Monitor "dummy_monitor"
+  DefaultDepth 24
+  SubSection "Display"
+    Viewport 0 0
+    Depth 24
+    Modes "1920x1080_60.00" "1280x720_60.00" "1152x648_60.00" "1024x576_60.00" "960x720_60.00" "800x600_60.00" "2560x1440_30.00" "1920x1080_30.00" "1368x768_30.00" "1280x720_30.00" "1152x648_30.00" "1024x576_30.00" "960x720_30.00" "800x600_30.00" "3840x2160_25.00" "2560x1440_25.00" "1920x1080_25.00" "1600x900_25.00" "1368x768_25.00" "800x1600_30.00" "800x1600_25.00"
+  EndSubSection
+EndSection
+
+Section "ServerLayout"
+  Identifier   "dummy_layout"
+  Screen       "dummy_screen"
+  InputDevice  "dummy_mouse"
+  InputDevice  "dummy_keyboard"
+  InputDevice  "dummy_touchscreen" "CorePointer"
+EndSection

package/dist/bin/arise-browser.d.ts

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+/**
+ * AriseBrowser CLI — Start the HTTP server.
+ *
+ * Usage:
+ *   npx arise-browser [options]
+ *
+ * Options:
+ *   --port, -p       Server port (default: 9867)
+ *   --host           Bind address (default: 127.0.0.1)
+ *   --token          Auth token
+ *   --headless       Run headless (default: true)
+ *   --no-headless    Run with visible browser
+ *   --profile        Browser profile directory (enables managed mode)
+ *   --cdp            CDP endpoint URL (enables cdp mode)
+ *   --help           Show help
+ *
+ * Environment variables (Pinchtab-compatible):
+ *   ARISE_BROWSER_PORT / BRIDGE_PORT
+ *   ARISE_BROWSER_BIND / BRIDGE_BIND
+ *   ARISE_BROWSER_TOKEN / BRIDGE_TOKEN
+ *   ARISE_BROWSER_HEADLESS
+ *   ARISE_BROWSER_PROFILE
+ */
+export {};
+//# sourceMappingURL=arise-browser.d.ts.map

package/dist/bin/arise-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arise-browser.d.ts","sourceRoot":"","sources":["../../bin/arise-browser.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;GAsBG"}