capiumbrowser 1.2.3 → 1.2.4

package/README.md

@@ -753,7 +753,7 @@ license key; it prints a fix for anything missing and exits non-zero if the envi
 | `CapiumSeatLimitError` | Free tier is 1 concurrent session — close the other Capium browser (or upgrade the tier). |
 | Still blocked on aggressive sites | Compare a matching persona with stock Chrome through assigned proxies. Check route, timezone, graphics availability and detector fields separately; headed mode under Xvfb also needs a working graphics backend. |
 | Intermittent 403s on reCAPTCHA Enterprise sites | Prefer the **Playwright** front-end — Puppeteer's CDP protocol usage leaks more automation signals (a Puppeteer limitation, not a Capium one). |
-| FPJS `tampering: true` | Prefer a matching-OS host and keep the default `--fingerprint-noise=false`. The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
+| FPJS `tampering: true` | Prefer a matching-OS host. Per-profile render noise is **on** by default (deterministic per profile; opt out with `--fingerprint-noise=false`). The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
 | "Windows persona but missing fonts" | Supply real `C:\Windows\Fonts\*.ttf` (see [Fonts](#fonts)) or set `CAPIUM_SUPPRESS_FONT_WARNING=1`. |
 | `os_mismatch: true` | A network/transport signal (genuine Chrome shows it too behind some proxies) — a routing concern, not the browser. |
 | Headed browser won't start on a server | Run under `Xvfb` and export `DISPLAY=:99`. |

package/lib/config.js

@@ -73,7 +73,9 @@ function getDefaultStealthArgs(seed = null, platform = 'windows', screen = null,
         'primaryPointerType=2,availablePointerTypes=2,maxTouchPoints=5,' +
         'viewportEnabled=true,viewportMetaEnabled=true,shrinksViewportContentToFit=true',
       '--touch-events=enabled', '--enable-viewport',
-      '--no-first-run', '--no-default-browser-check', '--fingerprint-noise=false',
+      // Per-profile render noise ON (engine default), same as desktop: mobile canvas/WebGL/audio
+      // are unique + stable per seed instead of identical across profiles on one host.
+      '--no-first-run', '--no-default-browser-check',
       `--window-size=${sw},${sh}`,
       ...(platform === 'ios' ? [`--user-agent=${p.user_agent}`, '--capium-preserve-user-agent'] : []),
       ...(screen ? [`--fingerprint-screen-width=${sw}`, `--fingerprint-screen-height=${sh}`] : []),
@@ -110,10 +112,11 @@ function getDefaultStealthArgs(seed = null, platform = 'windows', screen = null,
     // requests that legacy mode on 155. See docs/SDK-GPU-AUDIT.md for measured
     // page-global, object-handle and binding compatibility.
   );
-  // Keep injected canvas/audio/rectangle noise opt-in. Device fonts and the
-  // actual renderer can still affect pixels; noise=false does not guarantee
-  // identical canvases across personas or a particular detector classification.
-  args.push('--fingerprint-noise=false');
+  // Per-profile render farbling is ON (engine default) so canvas/WebGL/audio are unique AND
+  // stable per seed; without it every profile on a host renders identically (a cross-instance
+  // correlation surface a detector clusters over time). The engine farbles deterministically per
+  // (seed,x,y), skipping low-entropy images. Combined with the per-profile seed, each profile gets
+  // a distinct render fingerprint. Opt out via args: ['--fingerprint-noise=false'].
   // A Windows persona's font metrics must match real Windows (needs Windows fonts
   // present on the host); harmless elsewhere, so gate it to the windows persona.
   if (platform === 'windows') args.push('--fingerprint-windows-font-metrics');
@@ -138,6 +141,28 @@ function newSeed() {
   return 1 + Math.floor(Math.random() * (2 ** 31 - 2));
 }
 
+/** Stable, unique-per-machine seed, persisted in CAPIUM_HOME/machine-seed (random on first use,
+ *  never derived from hardware so it leaks nothing). Keeps a machine's no-seed identity
+ *  consistent across launches instead of colliding on the engine's built-in default. */
+function machineSeed() {
+  const os = require('os'), fs = require('fs'), path = require('path');
+  const home = process.env.CAPIUM_HOME || path.join(os.homedir(), '.capium');
+  const p = path.join(home, 'machine-seed');
+  try { const v = parseInt(fs.readFileSync(p, 'utf8').trim(), 10); if (v > 0) return v; } catch (e) { /* first use */ }
+  const s = 1 + Math.floor(Math.random() * (2 ** 31 - 2));
+  try { fs.mkdirSync(home, { recursive: true }); fs.writeFileSync(p, String(s)); } catch (e) { /* ephemeral ok */ }
+  return s;
+}
+
+/** Stable seed unique to this (machine, profile) pair -- a hash of the machine seed and the
+ *  profile directory. Each persistent profile gets a distinct, consistent fingerprint so no two
+ *  profiles collide (not the same path on different machines, nor different profiles on one host). */
+function profileSeed(userDataDir) {
+  const crypto = require('crypto'), path = require('path');
+  const base = `${machineSeed()}:${path.resolve(userDataDir)}`;
+  return (crypto.createHash('sha256').update(base).digest().readUInt32BE(0) % (2 ** 31 - 1)) + 1;
+}
+
 // ---- binary / wrapper discovery -------------------------------------------------------------
 // The launch target (handed to the driver as executablePath) differs by OS:
 //   * POSIX (Linux/macOS): the `capium` bash wrapper -- it adds the GL/geoip/font flags and
@@ -338,6 +363,8 @@ module.exports = {
   getHeadlessDefaultArgs,
   hasScreenOverride,
   newSeed,
+  machineSeed,
+  profileSeed,
   findBinary,
   searchBases,
   _ensureExecutable: ensureExecutable,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "capiumbrowser",
-  "version": "1.2.3",
+  "version": "1.2.4",
   "description": "Drop-in stealth browser SDK on top of Playwright or Puppeteer (Capium Chromium).",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Capzy (https://capzy.ai)",

package/playwright.js

@@ -236,6 +236,9 @@ async function requireMobileEngine(context, mobileDevice = null, seed = 0, platf
  * Same options as launch(); returns a BrowserContext.
  */
 async function launchPersistentContext(userDataDir, opts = {}) {
+  // Stable per-profile seed from the persistent profile dir so each profile gets a distinct,
+  // consistent fingerprint and no two profiles collide. An explicit opts.seed still wins.
+  if (opts.seed === null || opts.seed === undefined) opts = { ...opts, seed: config.profileSeed(userDataDir) };
   const {
     seed, platform, mobileDevice, browserBrand, proxy, geoip, args, stealthArgs, timezone, locale, extensionPaths,
     binary, licenseKey, licenseServer, licenseThroughProxy, licensePreflight,

package/puppeteer.js

@@ -246,6 +246,9 @@ async function launch(opts = {}) {
  * Returns the Browser.
  */
 async function launchPersistentContext(userDataDir, opts = {}) {
+  // Stable per-profile seed from the persistent profile dir so each profile gets a distinct,
+  // consistent fingerprint and no two profiles collide. An explicit opts.seed still wins.
+  if (opts.seed === null || opts.seed === undefined) opts = { ...opts, seed: config.profileSeed(userDataDir) };
   const browser = await launch({ ...opts, userDataDir });
   // Desktop personas: fit the window to the seed's screen in HEADLESS too (coherent per-seed
   // viewport, not the tiny startup window). Mobile keeps its device viewport.