capiumbrowser 1.2.4 → 1.3.1

package/lib/android-phones.json

@@ -2,9 +2,9 @@
   "schema_version": 2,
   "minimum_release_year": 2022,
   "browser": "chrome",
-  "status": "experimental-emulation",
-  "gpu_policy": "host",
-  "hardware_policy": "host",
+  "status": "catalog-emulation",
+  "gpu_policy": "catalog",
+  "hardware_policy": "catalog",
   "physical_device_validation": "pending",
   "default_profile_ids": [
     "pixel-7",
@@ -13,6 +13,20 @@
     "pixel-8a",
     "pixel-9"
   ],
+  "font_core": [
+    "Roboto",
+    "Noto Sans",
+    "Noto Serif",
+    "Noto Sans Mono",
+    "Noto Color Emoji",
+    "Noto Sans JP",
+    "Noto Sans KR",
+    "Noto Sans SC",
+    "Noto Sans TC",
+    "Noto Naskh Arabic",
+    "Noto Sans Devanagari",
+    "Noto Sans Thai"
+  ],
   "sources": [
     "https://support.google.com/pixelphone/answer/7158570?hl=en",
     "https://news.samsung.com/global/samsung-galaxy-a55-5g-and-galaxy-a35-5g-awesome-innovations-and-security-engineered-for-everyone",
@@ -27,7 +41,12 @@
       "platform_version": "13",
       "width": 412,
       "height": 915,
-      "dpr": 2.625
+      "dpr": 2.625,
+      "soc": "Tensor G2",
+      "cores": 8,
+      "memory_gb": 8,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G710, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-8",
@@ -36,7 +55,12 @@
       "platform_version": "14",
       "width": 412,
       "height": 915,
-      "dpr": 2.625
+      "dpr": 2.625,
+      "soc": "Tensor G3",
+      "cores": 9,
+      "memory_gb": 8,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-8-pro",
@@ -45,7 +69,12 @@
       "platform_version": "14",
       "width": 448,
       "height": 997,
-      "dpr": 3.0
+      "dpr": 3.0,
+      "soc": "Tensor G3",
+      "cores": 9,
+      "memory_gb": 12,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-8a",
@@ -54,7 +83,12 @@
       "platform_version": "14",
       "width": 412,
       "height": 915,
-      "dpr": 2.625
+      "dpr": 2.625,
+      "soc": "Tensor G3",
+      "cores": 9,
+      "memory_gb": 8,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-9",
@@ -63,7 +97,12 @@
       "platform_version": "14",
       "width": 412,
       "height": 924,
-      "dpr": 2.625
+      "dpr": 2.625,
+      "soc": "Tensor G4",
+      "cores": 8,
+      "memory_gb": 12,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "samsung-galaxy-a55",
@@ -74,6 +113,11 @@
       "width": 360,
       "height": 800,
       "dpr": 2.25,
+      "soc": "Exynos 1480",
+      "cores": 8,
+      "memory_gb": 8,
+      "gpu_vendor": "Google Inc. (Samsung Electronics Co., Ltd.)",
+      "gpu_renderer": "ANGLE (Samsung Electronics Co., Ltd., Xclipse 530, OpenGL ES 3.2)",
       "geometry_status": "devtools-emulation-only",
       "geometry_note": "These Chromium preset dimensions/DPR do not directly map to the published 1080x2340 panel; physical Chrome capture required."
     },
@@ -84,7 +128,12 @@
       "platform_version": "14",
       "width": 427,
       "height": 952,
-      "dpr": 3.0
+      "dpr": 3.0,
+      "soc": "Tensor G4",
+      "cores": 8,
+      "memory_gb": 16,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-9-pro-xl",
@@ -93,7 +142,12 @@
       "platform_version": "14",
       "width": 448,
       "height": 997,
-      "dpr": 3.0
+      "dpr": 3.0,
+      "soc": "Tensor G4",
+      "cores": 8,
+      "memory_gb": 16,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     }
   ]
 }

package/lib/channels.json

@@ -1,36 +1,36 @@
 {
-  "_comment": "SINGLE SOURCE OF TRUTH for the current stable Capium browser build per OS/arch. Each OS reaches stable independently -- edit one entry without touching the others. This file ships inside the wheel (the SDK reads it to pick each host's stable build) AND is published to the download server by the release pipeline. `version` is the reported Chromium version (what the browser reports to the customer, names the R2 folder); `engine_version` is the actual built Chromium engine (box_package verifies the binary against it) -- it differs from `version` when a platform reports a spoofed patch (Windows reports .85 on the .84 engine). `revision` is our packaging counter -- the served R2 folder is chromium-v<version>.<revision>/, ALWAYS dotted-suffixed starting at 1. A Chromium version bump resets revision to 1. `published: false` means the tag is declared but no artifact exists yet.",
+  "_comment": "SINGLE SOURCE OF TRUTH for the current stable Capium browser build per OS/arch. Each OS reaches stable independently -- edit one entry without touching the others. This file ships inside the wheel (the SDK reads it to pick each host's stable build) AND is published to the download server by the release pipeline. `version` is the reported Chromium version (what the browser reports to the customer, names the R2 folder); `engine_version` is the actual built Chromium engine (box_package verifies the binary against it) -- it differs from `version` when a platform reports a spoofed patch (Windows/macOS report .48 on the .47 engine). `revision` is our packaging counter -- the served R2 folder is chromium-v<version>.<revision>/, ALWAYS dotted-suffixed starting at 1. A Chromium version bump resets revision to 1. `published: false` means the tag is declared but no artifact exists yet.",
   "schema": 1,
-  "updated": "2026-10-21",
+  "updated": "2026-10-24",
   "channels": {
     "stable": {
       "windows-x64": {
-        "version": "155.0.8059.85",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.48",
+        "engine_version": "156.0.8078.47",
         "revision": 2,
-        "sha256": "905bb081d5234338237b6a4c3df7ef3fbb8d20d0049adde982027494b87e4ed2",
+        "sha256": "76fa0d609f3d3fcac05436681884b3150405aaa470730d9a9ad1453ff6ad8276",
         "published": true,
         "license_status_protocol": 1
       },
       "macos-arm64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.48",
+        "engine_version": "156.0.8078.47",
         "revision": 2,
-        "sha256": "5c4ab089d7925a3b86fd891cfbe9de95777c46fc7616990a94b15b891c89775f",
+        "sha256": "3b883146c0f41fcb409113d3f43764b7e7061bb6c64d58cddb26b2619887275f",
         "published": true,
         "license_status_protocol": 1
       },
       "linux-x64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.47",
+        "engine_version": "156.0.8078.47",
         "revision": 2,
-        "sha256": "e9e18dd9f23baa500e1be0a7075096f6e6c8fb3a37150c96bd96fd4e58518880",
+        "sha256": "5fc9954366d8052e09d8f528d1cdbcedcf6d0cb1ae43c36441ce975a1e60c749",
         "published": true,
         "license_status_protocol": 1
       },
       "linux-arm64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.47",
+        "engine_version": "156.0.8078.47",
         "revision": 1,
         "sha256": null,
         "published": false

package/lib/launch-common.js

@@ -15,13 +15,14 @@ const proxy = require('./proxy');
 /**
  * Build [--proxy-server, --geoip] flags for geo coherence.
  *
- * The binary's CapiumGeoipResolver runs at PreBrowserStart ONLY when --geoip is present. A
- * proxy on its own does NOT trigger it: the lookup is a synchronous, blocking round-trip that
- * would otherwise add up to 2.5s to every proxied launch. When it does run it resolves the
- * egress IP (proxy exit, else the host's real public IP) and pins WebRTC / timezone /
- * geolocation / language -- so the SDK adds no probe of its own. geoipOn is tri-state:
- *   * null  -> default: add no flag, so NO geo lookup runs (no launch latency) even with a
- *              proxy. Pass geoip: true to opt into proxy-exit coherence.
+ * The binary's CapiumGeoipResolver runs at PreBrowserStart ONLY when --geoip is present.
+ * When it runs it resolves the egress IP (proxy exit, else the host's real public IP) and
+ * pins WebRTC / timezone / geolocation / language -- so the SDK adds no probe of its own.
+ * geoipOn is tri-state:
+ *   * null  -> default: ON whenever a proxy is set, OFF otherwise. An uncorrected host
+ *              timezone under a proxied identity (UTC on a server, or the operator's home
+ *              zone against a foreign exit) is a far stronger detection signal than the
+ *              lookup's one-off launch latency. Pass geoip: false to opt out.
  *   * true  -> ON with --geoip (resolves the egress -- proxy exit, or the host IP if proxyless).
  *   * false -> OFF with --geoip=false, which the binary honors FIRST (explicit opt-out).
  * Returns {launchOptions, args}.
@@ -29,11 +30,11 @@ const proxy = require('./proxy');
 function proxyAndGeoArgs(spec, geoipOn) {
   const { launchOptions, args } = proxy.resolveProxyConfig(spec);
   const out = [...args];
-  if (geoipOn === null || geoipOn === undefined) {
-    // default: no flag, no lookup
-  } else if (geoipOn) {
+  const explicitOff = geoipOn === false;
+  if (geoipOn === null || geoipOn === undefined) geoipOn = Boolean(spec);
+  if (geoipOn) {
     out.push('--geoip');
-  } else {
+  } else if (explicitOff) {
     out.push('--geoip=false');
   }
   return { launchOptions, args: out };
@@ -87,4 +88,25 @@ function clearStatusFile(p) {
   } catch {}
 }
 
-module.exports = { proxyAndGeoArgs, buildArgs, newStatusFile, clearStatusFile };
+/**
+ * Deterministic per-seed window geometry inside the seed's available screen area.
+ *
+ * Every profile previously got the identical maximized-like window (exactly availWidth x
+ * availHeight at 0,0), so all profiles sharing a pool screen were geometry-identical -- a
+ * clusterable signature. Real users are a mix: most keep the browser maximized, a minority
+ * run a windowed browser at an arbitrary size/position. Mirror that mix deterministically
+ * per seed (the geometry is part of the profile's stable identity, like its screen).
+ * Matches python browser._window_bounds_for_seed.
+ */
+function windowBoundsForSeed(seed, aw, ah) {
+  const d = crypto.createHash('sha256')
+    .update(`capium-window:${Math.trunc(seed) || 0}`).digest();
+  if (d[0] % 10 < 6) return { left: 0, top: 0, width: aw, height: ah };
+  const w = Math.max(800, Math.trunc(aw * (0.78 + (d[1] / 255) * 0.16)));
+  const h = Math.max(600, Math.trunc(ah * (0.80 + (d[2] / 255) * 0.15)));
+  const left = Math.trunc(((aw - w) * d[3]) / 255);
+  const top = Math.trunc(((ah - h) * d[4]) / 255);
+  return { left, top, width: w, height: h };
+}
+
+module.exports = { proxyAndGeoArgs, buildArgs, newStatusFile, clearStatusFile, windowBoundsForSeed };

package/lib/mobile.js

@@ -84,7 +84,7 @@ async function engineProbe(expected) {
       gl.getParameter(ext.UNMASKED_RENDERER_WEBGL) === 'Apple GPU';
   }
   const match = navigator.userAgent.match(/Chrome\/(\d+)\.0\.0\.0 Mobile Safari\//);
-  if (!expected || navigator.platform !== 'Linux armv81' || !match ||
+  if (!expected || navigator.platform !== 'Linux armv8l' || !match ||
     !navigator.userAgent.includes('(Linux; Android 10; K)') ||
     navigator.userAgent.includes('Version/4.0') || !navigator.userAgentData) return false;
   const ch = await navigator.userAgentData.getHighEntropyValues([

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "capiumbrowser",
-  "version": "1.2.4",
+  "version": "1.3.1",
   "description": "Drop-in stealth browser SDK on top of Playwright or Puppeteer (Capium Chromium).",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Capzy (https://capzy.ai)",

package/playwright.js

@@ -27,7 +27,7 @@ const human = require('./lib/human');
 const license = require('./lib/license');
 const readiness = require('./lib/license-readiness');
 const { CapiumError, translateLaunchError, readLaunchStatus } = require('./lib/errors');
-const { proxyAndGeoArgs, buildArgs, newStatusFile, clearStatusFile } =
+const { proxyAndGeoArgs, buildArgs, newStatusFile, clearStatusFile, windowBoundsForSeed } =
   require('./lib/launch-common');
 
 function requireDriver() {
@@ -161,9 +161,9 @@ function applyViewportDefaults(browser, mobileSeed = null, mobileDevice = null,
  *
  * seed/platform : identity. stealthArgs: false drops the default fingerprint flags.
  * proxy         : "http://user:pass@host:port" | "socks5://host:port" | {server, username, ...}.
- * geoip         : geo coherence, resolved inside the binary. null (default) = OFF: no lookup
- *                 runs, even with a proxy. true = ON: pins timezone/geo/WebRTC/language to the
- *                 egress (proxy exit, or the host IP if proxyless). false = explicit opt-out.
+ * geoip         : geo coherence, resolved inside the binary. null (default) = ON whenever a
+ *                 proxy is set (pins timezone/geo/WebRTC/language to the exit), OFF otherwise.
+ *                 true = ON even proxyless (host IP). false = explicit opt-out.
  * timezone/locale: explicit override (IANA tz + BCP-47 locale; in-binary spoof).
  * licenseKey/licenseServer: pass the license programmatically (else read from
  *                 CAPIUM_LICENSE_KEY / ~/.capium/license). The binary self-licenses; the key
@@ -298,12 +298,11 @@ async function fitWindow(browser, context, page) {
     if (!scr || !scr.w || !scr.h) return;
     const aw = Math.trunc(scr.w);
     const ah = Math.trunc(scr.h);
-    // Size the window to the FULL per-seed screen (match python _fit_window_to_screen) so
-    // screen ~= viewport -- avoids the browserscan "screen != viewport" VM tell. NOT a forced 1440x900.
-    const w = aw;
-    const h = ah;
-    const left = 0;
-    const top = 0;
+    // Per-seed geometry within the seed's screen: maximized-like for most seeds,
+    // realistically windowed for the rest (match python _window_bounds_for_seed).
+    const seed = (context && context._capiumSeed) ||
+                 (browser && browser._capiumSeed) || 0;
+    const { left, top, width: w, height: h } = windowBoundsForSeed(seed, aw, ah);
     pcdp = await context.newCDPSession(page);
     const { targetInfo } = await pcdp.send('Target.getTargetInfo');
     // Persistent contexts may have no Browser handle; their page session still

package/puppeteer.js

@@ -31,7 +31,7 @@ const human = require('./lib/human');
 const license = require('./lib/license');
 const readiness = require('./lib/license-readiness');
 const { CapiumError, translateLaunchError, readLaunchStatus } = require('./lib/errors');
-const { proxyAndGeoArgs, buildArgs, newStatusFile, clearStatusFile } =
+const { proxyAndGeoArgs, buildArgs, newStatusFile, clearStatusFile, windowBoundsForSeed } =
   require('./lib/launch-common');
 
 function requireDriver() {
@@ -267,12 +267,10 @@ async function fitWindow(browser, page) {
     if (!scr || !scr.w || !scr.h) return;
     const aw = Math.trunc(scr.w);
     const ah = Math.trunc(scr.h);
-    // Size the window to the FULL per-seed screen (match python _fit_window_to_screen) so
-    // screen ~= viewport -- avoids the browserscan "screen != viewport" VM tell. NOT a forced 1440x900.
-    const w = aw;
-    const h = ah;
-    const left = 0;
-    const top = 0;
+    // Per-seed geometry within the seed's screen: maximized-like for most seeds,
+    // realistically windowed for the rest (match python _window_bounds_for_seed).
+    const seed = (browser && browser._capiumSeed) || 0;
+    const { left, top, width: w, height: h } = windowBoundsForSeed(seed, aw, ah);
     cdp = await page.createCDPSession();
     const { targetInfo } = await cdp.send('Target.getTargetInfo');
     const { windowId } = await cdp.send('Browser.getWindowForTarget',