capiumbrowser 1.0.4 → 1.0.5

package/lib/channels.json

@@ -6,20 +6,20 @@
     "stable": {
       "windows-x64": {
         "version": "152.0.7977.82",
-        "revision": 3,
+        "revision": 4,
         "sha256": "7172b2fdd62cbbfa2619428eca44a2c2fc614b859ce3e51bafef95ad759d4ef0",
         "published": true
       },
       "macos-arm64": {
         "version": "152.0.7977.82",
-        "revision": 3,
+        "revision": 4,
         "sha256": "4196dcc7687f11390a095b5f3c5aae091a7480306f63cdd9df86ad1267b421d8",
         "published": true
       },
       "linux-x64": {
         "version": "152.0.7977.82",
-        "revision": 3,
-        "sha256": "cd95ced9f03f571d9b3af419cd46949ca850968daa29c3bebdeaabeb9a412972",
+        "revision": 4,
+        "sha256": "e4e052da580e300b0097c057445fff3ae865339dd93fd71ec96092dcfb1e7218",
         "published": true
       },
       "linux-arm64": {

package/lib/download.js

@@ -192,6 +192,38 @@ function stampVersion(binPath, version) {
   } catch {}
 }
 
+/**
+ * The buildId (`<version>` or `<version>-r<N>`) this host SHOULD run, honoring CAPIUM_* env, or
+ * null if it can't be determined (CAPIUM_BINARY override / unsupported platform / bad manifest).
+ * Lets the launch path detect+reject a stale binary from an earlier install instead of running it.
+ */
+function expectedBuildId() {
+  if (process.env.CAPIUM_BINARY) return null;
+  try {
+    const tag = downloadTag();
+    const envVer = process.env.CAPIUM_VERSION;
+    const version = envVer || binaryVersionFor(tag);
+    let revision;
+    if (process.env.CAPIUM_REVISION) revision = parseInt(process.env.CAPIUM_REVISION, 10);
+    else if (envVer) revision = 1;
+    else revision = binaryRevisionFor(tag);
+    return buildId(version, revision);
+  } catch {
+    return null;
+  }
+}
+
+/** The launch wrapper inside a just-extracted distro dir, or null (scoped, never a global search). */
+function wrapperIn(distroDir) {
+  for (const nm of config._wrapperNames()) {
+    const p = path.join(distroDir, nm);
+    try {
+      if (fs.statSync(p).isFile()) return p;
+    } catch {}
+  }
+  return null;
+}
+
 /**
  * Delete previously-extracted capium distros under `root`. A host only ever holds its own
  * platform's build, so on a version change we drop the stale one before installing the new
@@ -328,12 +360,13 @@ async function ensureBinary({ version = null, licenseKey = null, server = null }
   const subdir = `capium-${String(version).split('.')[0]}-${tag}`; // FLAT-archive wrapper name
   const tmp = path.join(os.tmpdir(),
     `capium-dl-${crypto.randomBytes(6).toString('hex')}.tar.gz`);
+  let distroDir = null;
   try {
     await download(url, headers, tmp, version, tag);
     // Only drop the stale install once the new bytes are in hand (a failed download must
     // never leave the host with no binary), then extract the new version.
     removeInstalls(root);
-    const distroDir = await extract(tmp, root, subdir);
+    distroDir = await extract(tmp, root, subdir);
     // Stamp the version marker BEFORE discovery: the FLAT Windows tar carries no capium
     // marker files, and findBinary only accepts a bare chrome.exe next to one -- the
     // downloader vouches for the directory it just extracted.
@@ -346,13 +379,17 @@ async function ensureBinary({ version = null, licenseKey = null, server = null }
     } catch {}
   }
 
-  let binPath;
-  try {
-    binPath = config.findBinary();
-  } catch {
-    throw new CapiumError(
-      `downloaded and extracted the ${tag} build but no launch target was found afterwards ` +
-        `(unexpected archive layout under ${root}).`);
+  // Return the binary we JUST extracted (scoped to distroDir), never a global findBinary here --
+  // a stale binary in another base could otherwise be returned instead of the fresh build.
+  let binPath = wrapperIn(distroDir);
+  if (!binPath) {
+    try {
+      binPath = config.findBinary();
+    } catch {
+      throw new CapiumError(
+        `downloaded and extracted the ${tag} build but no launch target was found afterwards ` +
+          `(unexpected archive layout under ${root}).`);
+    }
   }
   stampVersion(binPath, bid); // so a later version/revision bump knows to re-download
   // Re-apply exec bits the wrapper + engine binaries need (zip drops unix perms).
@@ -372,6 +409,7 @@ module.exports = {
   destRoot,
   ensureBinary,
   installedVersion,
+  expectedBuildId,
   _SUPPORTED: SUPPORTED,
   _normOs: normOs,
   _normArch: normArch,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "capiumbrowser",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Drop-in stealth browser SDK on top of Playwright or Puppeteer (Capium Chromium).",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Capzy (https://capzy.ai)",

package/playwright.js

@@ -42,12 +42,23 @@ function requireDriver() {
 
 /** Find the capium wrapper; if absent, try to download it (see lib/download). */
 async function resolveBinary(binary, licenseKey) {
+  // Explicit override (arg or CAPIUM_BINARY) wins with no version check -- the caller's choice.
+  if (binary || process.env.CAPIUM_BINARY) return config.findBinary(binary);
+  // Otherwise the discovered binary must be the CURRENT target build. A stale binary left by an
+  // earlier install (older revision -> older device pool / pre-fix fingerprint) must never be
+  // launched silently even after `npm i -U` -- it still trips detection. Re-fetch on a mismatch.
+  const want = download.expectedBuildId();
   try {
-    return config.findBinary(binary);
+    const found = config.findBinary();
+    const have = download.installedVersion(found);
+    if (want === null || have === want) return found;
+    process.stderr.write(
+      `capium: ignoring stale binary at ${found} (build ${have}; current target ${want}) and ` +
+        `fetching the current build. Delete it or set CAPIUM_BINARY to silence this.\n`);
   } catch (e) {
     if (e.code !== 'ENOENT') throw e;
-    return download.ensureBinary({ licenseKey });
   }
+  return download.ensureBinary({ licenseKey });
 }
 
 /**

package/puppeteer.js

@@ -45,12 +45,23 @@ function requireDriver() {
 }
 
 async function resolveBinary(binary, licenseKey) {
+  // Explicit override (arg or CAPIUM_BINARY) wins with no version check -- the caller's choice.
+  if (binary || process.env.CAPIUM_BINARY) return config.findBinary(binary);
+  // Otherwise the discovered binary must be the CURRENT target build. A stale binary left by an
+  // earlier install (older revision -> older device pool / pre-fix fingerprint) must never be
+  // launched silently even after `npm i -U` -- it still trips detection. Re-fetch on a mismatch.
+  const want = download.expectedBuildId();
   try {
-    return config.findBinary(binary);
+    const found = config.findBinary();
+    const have = download.installedVersion(found);
+    if (want === null || have === want) return found;
+    process.stderr.write(
+      `capium: ignoring stale binary at ${found} (build ${have}; current target ${want}) and ` +
+        `fetching the current build. Delete it or set CAPIUM_BINARY to silence this.\n`);
   } catch (e) {
     if (e.code !== 'ENOENT') throw e;
-    return download.ensureBinary({ licenseKey });
   }
+  return download.ensureBinary({ licenseKey });
 }
 
 async function prepare(opts) {