capiumbrowser 1.1.3 → 1.1.5

package/lib/channels.json

@@ -1,27 +1,27 @@
 {
   "_comment": "SINGLE SOURCE OF TRUTH for the current stable Capium browser build per OS/arch. Each OS reaches stable independently -- edit one entry without touching the others. This file ships inside the wheel (the SDK reads it to pick each host's stable build) AND is published to the download server by the release pipeline. `version` is the Chromium version (what the browser reports to the customer -- unchanged by the revision); `revision` is our packaging counter -- the served R2 folder is chromium-v<version>.<revision>/, ALWAYS dotted-suffixed starting at 1 (chromium-v<version>.1/ is the first build, .2/ a same-engine re-spin), so publishing a re-spin never overwrites the artifact older SDKs still fetch. `published: false` means the tag is declared but no artifact exists yet -- the SDK raises a clear 'not published yet' error instead of a raw 404.",
   "schema": 1,
-  "updated": "2026-09-29",
+  "updated": "2026-09-30",
   "channels": {
     "stable": {
       "windows-x64": {
         "version": "153.0.8010.53",
         "engine_version": "153.0.8010.52",
-        "revision": 3,
-        "sha256": "af8ca122fe5ba572c985ee83869371505aba4e9cf6696c9385c68b28001c43ef",
+        "revision": 4,
+        "sha256": "a3c92c3a726ed350f23864a10ed671d2bae302334185fe05d5218c0d2f79e23a",
         "published": true
       },
       "macos-arm64": {
         "version": "153.0.8010.53",
         "engine_version": "153.0.8010.52",
-        "revision": 3,
-        "sha256": "4f41a66c792781e86bff653cd91adb3d41733c67d350d70c5c7c4287621a679f",
+        "revision": 4,
+        "sha256": "26aa45865098fd528b8d88ff82135ecbba1fa23397f892bd77734d1ed1109582",
         "published": true
       },
       "linux-x64": {
         "version": "153.0.8010.52",
-        "revision": 2,
-        "sha256": "bb6f88b874f41718250cc26f50976c6cd27167a7583b5169fbcac99619d0eafc",
+        "revision": 3,
+        "sha256": "51e7d68ad521b14f81cf60440eb37a6546d0f5e7b7fb96619c9546433931ad89",
         "published": true
       },
       "linux-arm64": {

package/lib/download.js

@@ -106,6 +106,17 @@ function destRoot() {
   return process.env.CAPIUM_HOME || path.join(os.homedir(), '.capium');
 }
 
+/**
+ * True if `binPath` lives under the canonical install root (~/.capium or CAPIUM_HOME). A
+ * same-version binary found OUTSIDE it (a legacy install elsewhere) is NOT reused -- we reinstall
+ * into the root so everything lands under one folder next to the license.
+ */
+function inRoot(binPath, root) {
+  const d = path.resolve(path.dirname(binPath));
+  const r = path.resolve(root);
+  return d === r || d.startsWith(r + path.sep);
+}
+
 /**
  * Extract a distro archive, sniffing gzip/zip/tar so the server can ship any of them.
  *
@@ -334,12 +345,13 @@ async function ensureBinary({ version = null, licenseKey = null, server = null }
   else revision = binaryRevisionFor(tag);
   const bid = buildId(version, revision);
 
-  // Reuse the cached binary ONLY if it's already this exact build (version + revision). A
-  // different build -- e.g. after `npm install capiumbrowser@latest` bumps this OS's pinned build
-  // or re-spin -- falls through to fetch the new one and drop the old.
+  // Reuse the cached binary ONLY if it's already this exact build (version + revision) AND it
+  // lives in the canonical root (~/.capium or CAPIUM_HOME). A different build -- or a same-build
+  // binary in a LEGACY location -- falls through so we (re)install into ~/.capium, keeping the
+  // browser under one folder next to the license.
   try {
     const existing = config.findBinary();
-    if (readInstalledVersion(existing) === bid) return existing;
+    if (readInstalledVersion(existing) === bid && inRoot(existing, destRoot())) return existing;
   } catch {}
 
   let url;
@@ -407,6 +419,7 @@ module.exports = {
   downloadTag,
   distroPath,
   destRoot,
+  inRoot,
   ensureBinary,
   installedVersion,
   expectedBuildId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "capiumbrowser",
-  "version": "1.1.3",
+  "version": "1.1.5",
   "description": "Drop-in stealth browser SDK on top of Playwright or Puppeteer (Capium Chromium).",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Capzy (https://capzy.ai)",

package/playwright.js

@@ -20,6 +20,7 @@
  */
 'use strict';
 
+const path = require('path');
 const config = require('./lib/config');
 const download = require('./lib/download');
 const human = require('./lib/human');
@@ -50,11 +51,19 @@ async function resolveBinary(binary, licenseKey) {
   const want = download.expectedBuildId();
   try {
     const found = config.findBinary();
+    if (want === null) return found; // can't determine target (unsupported/manifest) -- trust it
     const have = download.installedVersion(found);
-    if (want === null || have === want) return found;
-    process.stderr.write(
-      `capium: ignoring stale binary at ${found} (build ${have}; current target ${want}) and ` +
-        `fetching the current build. Delete it or set CAPIUM_BINARY to silence this.\n`);
+    const atRoot = download.inRoot(found, download.destRoot());
+    if (have === want && atRoot) return found;
+    if (have === want && !atRoot) {
+      process.stderr.write(
+        `capium: moving the browser out of ${path.dirname(found)} into ~/.capium (the shared ` +
+          `capium home). Set CAPIUM_BINARY to pin a location.\n`);
+    } else {
+      process.stderr.write(
+        `capium: ignoring stale binary at ${found} (build ${have}; current target ${want}) and ` +
+          `fetching the current build. Delete it or set CAPIUM_BINARY to silence this.\n`);
+    }
   } catch (e) {
     if (e.code !== 'ENOENT') throw e;
   }

package/puppeteer.js

@@ -24,6 +24,7 @@
  */
 'use strict';
 
+const path = require('path');
 const config = require('./lib/config');
 const download = require('./lib/download');
 const human = require('./lib/human');
@@ -53,11 +54,19 @@ async function resolveBinary(binary, licenseKey) {
   const want = download.expectedBuildId();
   try {
     const found = config.findBinary();
+    if (want === null) return found; // can't determine target (unsupported/manifest) -- trust it
     const have = download.installedVersion(found);
-    if (want === null || have === want) return found;
-    process.stderr.write(
-      `capium: ignoring stale binary at ${found} (build ${have}; current target ${want}) and ` +
-        `fetching the current build. Delete it or set CAPIUM_BINARY to silence this.\n`);
+    const atRoot = download.inRoot(found, download.destRoot());
+    if (have === want && atRoot) return found;
+    if (have === want && !atRoot) {
+      process.stderr.write(
+        `capium: moving the browser out of ${path.dirname(found)} into ~/.capium (the shared ` +
+          `capium home). Set CAPIUM_BINARY to pin a location.\n`);
+    } else {
+      process.stderr.write(
+        `capium: ignoring stale binary at ${found} (build ${have}; current target ${want}) and ` +
+          `fetching the current build. Delete it or set CAPIUM_BINARY to silence this.\n`);
+    }
   } catch (e) {
     if (e.code !== 'ENOENT') throw e;
   }