captchakraken 3.2.0 → 4.0.0

package/AGENTS.md

@@ -96,15 +96,11 @@ where one exists. Retrying a `403` that means "no licence" will never succeed.
 - **Never print an API key** into a transcript, a log, or a commit. Use
   `create_api_key`, which writes it to disk instead. `captchakraken.env` and
   `.env` hold keys and are never committed.
-- **Abyss is what our hosted API serves, and it is never downloadable.** The
-  current client names an Abyss expert on every request to our endpoint and is
-  answered by Abyss; an older client, or a request that names no model, gets
-  Twilight v1.2, because its prompts belong to that generation. Nothing about it
-  is gated on the account. Do not suggest weights, a download or a workaround
-  for it, and do not quote accuracy figures for it — none are published. Verify
-  what is serving with `GET /v1/models`.
-- **Respect the licence.** Building automation with this is fine; selling the
-  solve, or shipping it inside a browser or automation product, is not. See
+- **Midnight V2 4B Q4 is the default self-hosted and hosted model.** The v2
+  weights are downloadable under LGPL-3.0-only. Older clients keep using their
+  registered chat-completion model because the protocols are not interchangeable.
+- **Respect the licence.** CaptchaKraken and all its models are LGPL-3.0-only;
+  commercial use and integration are permitted under those terms. See
   [LICENSE](./LICENSE) and
   [docs/licensing.md](https://github.com/CaptchaKraken/CaptchaKraken/blob/main/docs/licensing.md).
 - **Changing this package's own code?** Its rules are in

package/LICENSE

@@ -1,145 +1,165 @@
-CaptchaKraken Source-Available License v1.1
-Copyright (c) 2026 CaptchaKraken LLC. All rights reserved.
-
-This license governs use of the CaptchaKraken software in this repository and of
-the associated machine-learning model weights and LoRA adapters published by the
-copyright holder (collectively, the "Software"). By using the Software you agree
-to these terms. If you do not agree, do not use the Software.
-
-================================================================================
-1. GRANT
-================================================================================
-Subject to the restrictions below, you are granted a worldwide, royalty-free,
-non-exclusive license to use, copy, modify, and distribute the Software, and to
-incorporate it into your own products and services.
-
-================================================================================
-2. PERMITTED USES
-================================================================================
-You MAY use the Software for:
-
-  (a) Personal, non-commercial use, research, and education.
-
-  (b) Commercial use INSIDE a larger product or service that delivers
-      substantial value BEYOND captcha solving itself — that is, where captcha
-      solving is an internal, enabling component rather than the product.
-
-  Illustrative (non-exhaustive) examples of PERMITTED commercial use:
-      - Web scrapers and data-collection pipelines.
-      - Browser automation you build and operate for your own purposes.
-      - QA, testing, and accessibility tooling.
-      - Any application where the captcha solve is a means to an end the user
-        is actually paying for.
-
-  (c) RUNNING the Software alongside a stealth, anti-detection, or antidetect
-      browser — Camoufox, Puppeteer, Playwright, or any similar tool — to
-      automate your own work, commercially or otherwise. Section 3(d) restricts
-      SHIPPING the Software as a feature of such a browser to other people. It
-      does not restrict USING it with one.
-
-================================================================================
-3. PROHIBITED USES
-================================================================================
-You MAY NOT, without a separate written commercial agreement from the copyright
-holder:
-
-  (a) Sell, resell, rent, or otherwise offer for a fee any captcha-SOLVING
-      service, product, or API whose primary value is solving captchas,
-      where that service is powered by the Software or its model outputs.
-
-  (b) Distribute "thin wrappers" around the Software whose primary purpose is
-      captcha solving — including but not limited to browser extensions,
-      hosted endpoints, SaaS products, or CLIs that simply expose the
-      Software's solving capability to end users.
-
-  (c) Expose, proxy, or relay the responses or outputs of the Software's LoRA
-      models (e.g. bounding boxes, tile selections, click plans) through a paid
-      or public API as a captcha-solving service.
-
-  (d) Embed, bundle, preinstall, or otherwise ship the Software — or a client,
-      wrapper, plugin, or extension for it — as a captcha-solving capability of
-      any stealth browser, anti-detection or antidetect browser, browser
-      profile or identity manager, or browser-automation product or platform
-      that you distribute, host, or otherwise offer to third parties. This
-      applies whether the Software ships inside your distribution, is fetched
-      on demand, or is merely wired up and advertised as a supported
-      integration, and it applies whether or not you charge for it.
-
-      This restriction is about DISTRIBUTION, not use. Nothing in it limits
-      Section 2(c): a person who uses such a browser may install and run the
-      Software with it freely.
-
-  In short: you may BUILD WITH this Software, and you may USE it with whatever
-  browser you like — but you may not SELL THE SOLVE, and you may not SHIP THE
-  SOLVE as a feature of a stealth browser or automation product you hand to
-  other people.
-
-================================================================================
-4. MODEL OUTPUTS
-================================================================================
-Outputs produced by the model weights/adapters are subject to Sections 2 and 3
-to the same extent as the Software itself. Reselling or API-relaying those
-outputs as a captcha-solving service is prohibited under Section 3(c).
-
-================================================================================
-5. REDISTRIBUTION
-================================================================================
-If you redistribute the Software (modified or not), you must retain this license
-and this notice, and you must not remove or alter the restrictions in Section 3.
-The right to redistribute granted by Section 1 is subject to Section 3(d).
-
-================================================================================
-6. TRADEMARKS
-================================================================================
-This license does not grant permission to use the trade names, trademarks, or
-product names of the copyright holder, except as required to describe the origin
-of the Software.
-
-================================================================================
-7. NO WARRANTY
-================================================================================
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
-COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER
-IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-================================================================================
-8. RESPONSIBLE USE
-================================================================================
-You are responsible for ensuring your use of the Software complies with all
-applicable laws, the terms of service of any site you interact with, and
-applicable anti-fraud and computer-access statutes. The copyright holder does
-not endorse using the Software to violate any third party's terms or rights.
-
-================================================================================
-9. COMMERCIAL LICENSING
-================================================================================
-For uses prohibited under Section 3 — including selling captcha-solving as a
-service, and shipping the Software as a built-in capability of a stealth browser
-or automation product — contact the copyright holder to discuss a separate
-commercial license. These uses are licensable; they are not categorically
-refused.
-
-================================================================================
-10. VERSION HISTORY
-================================================================================
-v1.1 — Section 3(d) added: shipping the Software as a captcha-solving feature of
-       a stealth/anti-detection browser or automation product distributed to
-       third parties now requires a commercial license. Section 2(c) added to
-       make clear that USING the Software with such a browser remains permitted.
-       The v1.0 text listed "stealth / anti-detection browsers" as an
-       illustrative PERMITTED commercial use; that example is removed.
-v1.0 — Initial release.
-
-Each version applies to the releases distributed under it. Copies obtained under
-v1.0 remain governed by v1.0.
-
---------------------------------------------------------------------------------
-This text is a license, not legal advice. If the boundary between a permitted
-"value-add" product and a prohibited "thin wrapper", or between using the
-Software with a browser and shipping it as part of one, is unclear for your use
-case, ask by opening an issue or messaging the maintainer on GitHub:
-https://github.com/CaptchaKraken/CaptchaKraken
---------------------------------------------------------------------------------
+                   GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+  This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+  0. Additional Definitions.
+
+  As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+  "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+  An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+  A "Combined Work" is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+  The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+  The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+  1. Exception to Section 3 of the GNU GPL.
+
+  You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+  2. Conveying Modified Versions.
+
+  If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+   a) under this License, provided that you make a good faith effort to
+   ensure that, in the event an Application does not supply the
+   function or data, the facility still operates, and performs
+   whatever part of its purpose remains meaningful, or
+
+   b) under the GNU GPL, with none of the additional permissions of
+   this License applicable to that copy.
+
+  3. Object Code Incorporating Material from Library Header Files.
+
+  The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+   a) Give prominent notice with each copy of the object code that the
+   Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the object code with a copy of the GNU GPL and this license
+   document.
+
+  4. Combined Works.
+
+  You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+   a) Give prominent notice with each copy of the Combined Work that
+   the Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the Combined Work with a copy of the GNU GPL and this license
+   document.
+
+   c) For a Combined Work that displays copyright notices during
+   execution, include the copyright notice for the Library among
+   these notices, as well as a reference directing the user to the
+   copies of the GNU GPL and this license document.
+
+   d) Do one of the following:
+
+       0) Convey the Minimal Corresponding Source under the terms of this
+       License, and the Corresponding Application Code in a form
+       suitable for, and under terms that permit, the user to
+       recombine or relink the Application with a modified version of
+       the Linked Version to produce a modified Combined Work, in the
+       manner specified by section 6 of the GNU GPL for conveying
+       Corresponding Source.
+
+       1) Use a suitable shared library mechanism for linking with the
+       Library.  A suitable mechanism is one that (a) uses at run time
+       a copy of the Library already present on the user's computer
+       system, and (b) will operate properly with a modified version
+       of the Library that is interface-compatible with the Linked
+       Version.
+
+   e) Provide Installation Information, but only if you would otherwise
+   be required to provide such information under section 6 of the
+   GNU GPL, and only to the extent that such information is
+   necessary to install and execute a modified version of the
+   Combined Work produced by recombining or relinking the
+   Application with a modified version of the Linked Version. (If
+   you use option 4d0, the Installation Information must accompany
+   the Minimal Corresponding Source and Corresponding Application
+   Code. If you use option 4d1, you must provide the Installation
+   Information in the manner specified by section 6 of the GNU GPL
+   for conveying Corresponding Source.)
+
+  5. Combined Libraries.
+
+  You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+   a) Accompany the combined library with a copy of the same work based
+   on the Library, uncombined with any other library facilities,
+   conveyed under the terms of this License.
+
+   b) Give prominent notice with the combined library that part of it
+   is a work based on the Library, and explaining where to find the
+   accompanying uncombined form of the same work.
+
+  6. Revised Versions of the GNU Lesser General Public License.
+
+  The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+  If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.

package/NOTICE

@@ -1,10 +1,10 @@
 CaptchaKraken
-Copyright (c) 2026 CaptchaKraken LLC. All rights reserved.
+Copyright (c) 2026 CaptchaKraken LLC.
 
 This product includes third-party software. The notices below are required by
-those components' licences and do not change the terms of the CaptchaKraken
-Source-Available License, which governs everything in this repository that is
-not listed here.
+those components' licences and do not change the terms of the GNU Lesser
+General Public License, version 3 only (LGPL-3.0-only), which governs
+everything in this repository that is not listed here.
 
 ────────────────────────────────────────────────────────────────────────────
 Cursory  —  mouse trajectory generation

package/README.md

@@ -10,8 +10,8 @@
 </p>
 
 Hand it a Playwright or Puppeteer `Page`. It finds the captcha, reads the whole
-puzzle with a fine-tuned **Qwen3.5-9B** vision model, and clicks, drags, slides
-or types human-like through to a token.
+puzzle with the **v2 pointer model**, and clicks, drags, slides or types
+human-like through to a token.
 
 Run the model on **your own hardware**, or point it at the **hosted API** and run
 nothing at all.
@@ -155,9 +155,10 @@ Full details, including writing your own humanizer:
 | `VLLM_BASE_URL` | Inference endpoint (local vLLM, a server you run, or `https://api.captchakraken.com/v1`) | credentials file, else `http://localhost:8000/v1` |
 | `CAPTCHA_KRAKEN_API_KEY` | Bearer token (`VLLM_API_KEY` also accepted) | credentials file, else `EMPTY` |
 | `CAPTCHA_HUMANIZATION` | How gestures are performed: `mouse`, `mobile` or `none`. Loses to anything set in code | `mouse` |
-| `CAPTCHA_BASE_MODEL` | Base weights vLLM loads | `RedHatAI/Qwen3.5-9B-FP8-dynamic` |
-| `CAPTCHA_LORA_ADAPTER` | Captcha adapter (HF id or path) | `CaptchaKraken/CaptchaKraken-Lora-v1.2` |
-| `CAPTCHA_LORA_NAME` | Served adapter name sent as `model` | `captcha-v12` |
+| `CAPTCHA_BASE_MODEL` | Merged v2 weights vLLM loads | `CaptchaKraken/MidnightV2-4B-q4` |
+| `CAPTCHA_LORA_ADAPTER` | Model repository (HF id or path) | `CaptchaKraken/MidnightV2-4B-q4` |
+| `CAPTCHA_LORA_NAME` | Served model name sent as `model` | `captcha-pointer` |
+| `CAPTCHA_POINTER_DETECTOR` | CNN element detector | path written by `setup.sh` |
 | `CAPTCHA_KRAKEN_AUTOSTART` | `0` never auto-starts a local server | `1` |
 | `CAPTCHA_KRAKEN_PYTHON` | Interpreter used for the bundled engine | the package's venv, else `python3` |
 | `CAPTCHA_KRAKEN_SKIP_PYTHON_SETUP` | `1` skips the `postinstall` bootstrap | unset |
@@ -175,9 +176,7 @@ the vLLM server knobs, are in
 
 ## License
 
-**CaptchaKraken Source-Available License v1.1** — see [LICENSE](./LICENSE).
-Build *with* it (scrapers, QA tooling) and run it against **any** browser you
-like, stealth or not. You may **not sell the solve itself**, ship a thin wrapper
-(browser extension, hosted solving API), or **bundle it as a built-in feature of
-a stealth/antidetect browser you distribute** — using it with one is fine. Those
-three are licensable, not categorically refused: open an issue to ask.
+**LGPL-3.0-only** — see [LICENSE](./LICENSE). Use, modify and redistribute it,
+including in commercial and hosted services. If you distribute a modified
+version, keep the licence and copyright notices and make your changes available
+under LGPLv3.

package/dist/cli-invocation.d.ts

@@ -1,6 +1,6 @@
 import type { PromptFamily, RetryMode, Vendor } from './kinds.js';
+import type { CliResponse } from './types.js';
 export declare const API_KEY_ENV = "CAPTCHA_KRAKEN_API_KEY";
-export declare const RESAMPLE_LEVEL_ENV = "CAPTCHA_RESAMPLE_LEVEL";
 export declare const API_PROVIDER = "captchaKrakenApi";
 export interface SolveInvocation {
     imagePath: string;
@@ -9,9 +9,12 @@ export interface SolveInvocation {
     retryMode?: RetryMode | null;
     textMode?: boolean;
     expert?: PromptFamily | null;
+    /** Earlier screens of the same paged puzzle, oldest first. */
+    history?: string[];
 }
 /** An argv array for execFile, never a shell string. */
 export declare function buildSolveArgs(invocation: SolveInvocation): string[];
-/** The resample LEVEL travels, not a temperature: the schedule lives once in planner.RESAMPLE_TEMPERATURES, and a fresh CLI process cannot know the round count. */
-export declare function solveEnv(base: NodeJS.ProcessEnv, apiKey?: string, resampleLevel?: number): NodeJS.ProcessEnv;
+export declare function solveEnv(base: NodeJS.ProcessEnv, apiKey?: string): NodeJS.ProcessEnv;
 export declare function redactCommand(command: string, apiKey?: string): string;
+/** What the CLI printed, as one response: the answer, the server's other plans for it, and the usage. */
+export declare function parseSolveOutput(stdout: string): CliResponse;

package/dist/cli-invocation.js

@@ -1,16 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.API_PROVIDER = exports.RESAMPLE_LEVEL_ENV = exports.API_KEY_ENV = void 0;
+exports.API_PROVIDER = exports.API_KEY_ENV = void 0;
 exports.buildSolveArgs = buildSolveArgs;
 exports.solveEnv = solveEnv;
 exports.redactCommand = redactCommand;
+exports.parseSolveOutput = parseSolveOutput;
 // The key travels in env, never argv: argv is world-readable on Linux via /proc/<pid>/cmdline and `ps`. See TRIBAL_KNOWLEDGE.md.
 exports.API_KEY_ENV = 'CAPTCHA_KRAKEN_API_KEY';
-exports.RESAMPLE_LEVEL_ENV = 'CAPTCHA_RESAMPLE_LEVEL';
 exports.API_PROVIDER = 'captchaKrakenApi';
 /** An argv array for execFile, never a shell string. */
 function buildSolveArgs(invocation) {
-    const { imagePath, model, puzzleSource, retryMode, textMode, expert } = invocation;
+    const { imagePath, model, puzzleSource, retryMode, textMode, expert, history } = invocation;
     const args = ['-m', 'captchakraken.cli', imagePath];
     // Both positionals or neither: the provider passed alone would bind to `model`.
     if (model)
@@ -20,20 +20,36 @@ function buildSolveArgs(invocation) {
         args.push(`--retry-mode=${retryMode}`);
     if (textMode)
         args.push('--text-mode');
+    for (const screen of history ?? [])
+        args.push(`--history=${screen}`);
     if (expert)
         args.push(`--expert=${expert}`);
     return args;
 }
-/** The resample LEVEL travels, not a temperature: the schedule lives once in planner.RESAMPLE_TEMPERATURES, and a fresh CLI process cannot know the round count. */
-function solveEnv(base, apiKey, resampleLevel) {
-    const out = apiKey ? { ...base, [exports.API_KEY_ENV]: apiKey } : { ...base };
-    if (resampleLevel && resampleLevel > 0) {
-        out[exports.RESAMPLE_LEVEL_ENV] = String(resampleLevel);
-    }
-    return out;
+function solveEnv(base, apiKey) {
+    return apiKey ? { ...base, [exports.API_KEY_ENV]: apiKey } : { ...base };
 }
 function redactCommand(command, apiKey) {
     if (!apiKey)
         return command;
     return command.split(apiKey).join('***');
 }
+/** What the CLI printed, as one response: the answer, the server's other plans for it, and the usage. */
+function parseSolveOutput(stdout) {
+    let actions = [];
+    for (const line of stdout.trim().split('\n')) {
+        try {
+            const parsed = JSON.parse(line);
+            if (parsed.actions !== undefined && parsed.token_usage !== undefined) {
+                return { actions: parsed.actions, token_usage: parsed.token_usage,
+                    ...(Array.isArray(parsed.fallbacks) ? { fallbacks: parsed.fallbacks } : {}) };
+            }
+            if (Array.isArray(parsed))
+                actions = parsed;
+            else if (parsed.action && (parsed.target_bounding_box || parsed.target_coordinates || parsed.action === 'wait'))
+                actions = [parsed];
+        }
+        catch { /* not json or not relevant */ }
+    }
+    return { actions, token_usage: [] };
+}

package/dist/humanize.d.ts

@@ -14,10 +14,24 @@ import type { Page, PlaywrightElementHandle } from './playwright-types.js';
 import { HumanizationMode, PauseKind } from './kinds.js';
 export type { HumanizationMode, PauseKind } from './kinds.js';
 export type Point = [number, number];
-/** A recorded human movement morphed onto the endpoints; timings are cumulative ms. */
+export declare const gauss: (sigma: number) => number;
+export declare const MAX_EVENT_GAP_MS = 8;
+export declare const MAX_EVENT_STEP_PX = 16;
+export declare const MAX_DEVIATION = 0.15;
+export declare const MIN_DEVIATION_PX = 3;
+/** A recorded human movement morphed onto the endpoints, held near the line between them and sampled at least
+ * once per mouse report; timings are cumulative ms. */
 export declare function trajectory(start: Point, end: Point, frequency: number): [Point[], number[]];
 /** Every inter-gesture wait the driver takes, named, so each device supplies its own table. */
 export declare const PAUSE_KINDS: readonly PauseKind[];
+/** How often a held press looks at the widget, in ms: a frame hash per look, so not every frame. */
+export declare const HOLD_POLL_MS: readonly [number, number];
+/**
+ * Press at `to` until `done()` says the widget completed, or `maxMs` passes; true when it completed.
+ * Built on move/press/release so any humanizer can hold. The hand drifts a pixel or so meanwhile, because a
+ * press that does not move for seconds is a synthetic one, and the button is released whatever `done` throws.
+ */
+export declare function hold(human: Humanizer, page: Page, to: Point, done: () => Promise<boolean>, maxMs: number): Promise<boolean>;
 export interface Humanizer {
     readonly name: string;
     /** False on a device with no resting cursor; switches off every hover-for-realism behaviour. */
@@ -25,6 +39,8 @@ export interface Humanizer {
     at: Point;
     reset(page: Page): Promise<void>;
     move(page: Page, to: Point): Promise<void>;
+    /** A pixel of wander while held; a humanizer without it drifts with `move`. */
+    drift?(page: Page, to: Point): Promise<void>;
     press(page: Page): Promise<void>;
     release(page: Page): Promise<void>;
     click(page: Page, to: Point): Promise<void>;
@@ -41,6 +57,11 @@ export declare abstract class BaseHumanizer implements Humanizer {
     constructor(start?: Point);
     reset(_page: Page): Promise<void>;
     abstract move(page: Page, to: Point): Promise<void>;
+    /**
+     * A held hand's pixel of wander. `move` is a reach, and a reach overshoots: on a 1px move it wandered up to 34px,
+     * off a thin bar, which the widget takes for a release.
+     */
+    drift(page: Page, to: Point): Promise<void>;
     abstract press(page: Page): Promise<void>;
     abstract release(page: Page): Promise<void>;
     abstract typeText(page: Page, field: PlaywrightElementHandle, text: string): Promise<boolean>;
@@ -50,16 +71,30 @@ export declare abstract class BaseHumanizer implements Humanizer {
     click(page: Page, to: Point): Promise<void>;
     drag(page: Page, src: Point, dst: Point): Promise<void>;
 }
+/** How much longer than the bare round trip a step takes when the browser re-draws it as a path of its own. */
+export declare const BROWSER_PATH_MS = 100;
 export declare class MouseHumanizer extends BaseHumanizer {
     readonly name: HumanizationMode;
     readonly hovers = true;
     protected readonly pauses: PauseTable;
     private frequency;
     private viewportCache;
+    /** Undefined until the first move of a solve measures it. */
+    private browserDrawsPath;
     constructor(start?: Point, frequency?: number);
     reset(_page: Page): Promise<void>;
     /** The window to keep the cursor inside; null under camoufox, which reports no viewport and whose window we ask instead. */
     private viewport;
+    drift(page: Page, to: Point): Promise<void>;
+    /** Clamp only when the viewport is known: a coordinate pinned to the edge of a guessed one deadlocks camoufox's juggler (upstream #225). */
+    private clamp;
+    /**
+     * Whether the browser draws its own path for every mouse.move(), as camoufox's humanize does. Ours on top has every
+     * sample re-drawn: a 1px step took 190ms there against 1ms, and one GeeTest slider 82s against 13s. One short step
+     * towards `to`, timed against a zero-length move (the bare round trip, so a remote browser is not mistaken for
+     * one), tells them apart with no movement the page could single out.
+     */
+    private measureBrowserPath;
     move(page: Page, to: Point): Promise<void>;
     press(page: Page): Promise<void>;
     release(page: Page): Promise<void>;
@@ -154,6 +189,7 @@ export declare class MobileHumanizer extends BaseHumanizer {
     reset(page: Page): Promise<void>;
     private touch;
     move(page: Page, to: Point): Promise<void>;
+    drift(page: Page, to: Point): Promise<void>;
     press(page: Page): Promise<void>;
     release(page: Page): Promise<void>;
     /** A tap whose contact patch wobbles a pixel while held; a motionless tap is a synthetic one. */