jumpy-lion 0.1.6-beta.0 → 0.1.6-beta.3

package/dist/fingerprinting/fingerprint-overrides/mouse-humanization.js

@@ -3,17 +3,19 @@
  * Generates bezier curve movements instead of straight lines
  * Stores the utility in the __stealth store for internal use only
  */
-export const setupMouseMovementHumanization = async (client) => {
-    // NOTE: Using addScriptToEvaluateOnNewDocument instead of Runtime.evaluate
-    // Runtime.evaluate is a CDP detection vector - it modifies console bindings and Error stacks
-    await client.Page.addScriptToEvaluateOnNewDocument({ source: `
+/**
+ * Returns the browser-context script that installs the bezier-curve mouse
+ * utility on __stealth.humanizeMouse.  Included in the main bundled injection
+ * so it counts as only ONE addScriptToEvaluateOnNewDocument call.
+ */
+export const createMouseMovementHumanizationScript = () => `
 (() => {
     'use strict';
 
     const _s = typeof __stealth !== 'undefined' ? __stealth : {};
 
-    // Seeded PRNG (mulberry32) for deterministic curves
-    const createSeededRNG = (seed) => {
+    // Re-use centralized helpers when available; local fallback for safety.
+    const _createRNG = _s.createRNG || ((seed) => {
         let s = seed | 0;
         return () => {
             s = s + 0x6D2B79F5 | 0;
@@ -21,37 +23,31 @@ export const setupMouseMovementHumanization = async (client) => {
             t = t + Math.imul(t ^ t >>> 7, 61 | t) ^ t;
             return ((t ^ t >>> 14) >>> 0) / 4294967296;
         };
-    };
-    // Stable seed: must NOT use Date.now() or Math.random() because this script
-    // re-executes on every reload via addScriptToEvaluateOnNewDocument.
-    const _stableHash = (salt) => {
-        const _s = typeof __stealth !== 'undefined' ? __stealth : {};
+    });
+    const sessionSeed = (_s.stableHash ? _s.stableHash(0xCAFE1009) : (() => {
         const key = _s.seedKey || '';
         const ua = navigator.userAgent || '';
-        const s = screen;
-        let h = salt | 0;
+        const sc = screen;
+        let h = 0xCAFE1009;
         for (let i = 0; i < key.length; i++) h = (h << 5) - h + key.charCodeAt(i) | 0;
         for (let i = 0; i < ua.length; i++) h = (h << 5) - h + ua.charCodeAt(i) | 0;
-        h = (h << 5) - h + (s.width || 0) | 0;
-        h = (h << 5) - h + (s.height || 0) | 0;
-        h = (h << 5) - h + (s.colorDepth || 0) | 0;
+        h = (h << 5) - h + (sc.width || 0) | 0;
+        h = (h << 5) - h + (sc.height || 0) | 0;
+        h = (h << 5) - h + (sc.colorDepth || 0) | 0;
         return h >>> 0;
-    };
-    const sessionSeed = _stableHash(0xCAFE1009);
-    const seededRandom = createSeededRNG(sessionSeed);
+    })());
+    const seededRandom = _createRNG(sessionSeed);
 
     // Bezier curve movement generator
     _s.humanizeMouse = (fromX, fromY, toX, toY) => {
         const steps = 20 + Math.floor(seededRandom() * 10);
         const points = [];
 
-        // Generate control points for bezier curve
         const cp1x = fromX + (toX - fromX) * 0.25 + (seededRandom() - 0.5) * 50;
         const cp1y = fromY + (toY - fromY) * 0.25 + (seededRandom() - 0.5) * 50;
         const cp2x = fromX + (toX - fromX) * 0.75 + (seededRandom() - 0.5) * 50;
         const cp2y = fromY + (toY - fromY) * 0.75 + (seededRandom() - 0.5) * 50;
 
-        // Calculate bezier curve points
         for (let i = 0; i <= steps; i++) {
             const t = i / steps;
             const t2 = t * t;
@@ -68,6 +64,15 @@ export const setupMouseMovementHumanization = async (client) => {
 
         return points;
     };
-})();` });
+})();
+`;
+/**
+ * @deprecated The browser-context script is now bundled via
+ * createMouseMovementHumanizationScript().  This function is kept only as a
+ * no-op so callers that haven't been updated don't break at runtime.
+ */
+export const setupMouseMovementHumanization = async (_client) => {
+    // No-op: script is now included in the main bundled injection to avoid
+    // multiple addScriptToEvaluateOnNewDocument calls (detection vector).
 };
 //# sourceMappingURL=mouse-humanization.js.map

package/dist/fingerprinting/fingerprint-overrides/mouse-humanization.js.map

@@ -1 +1 @@
-{"version":3,"file":"mouse-humanization.js","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/mouse-humanization.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,EAAE,MAAW,EAAiB,EAAE;IAC/E,2EAA2E;IAC3E,6FAA6F;IAC7F,MAAM,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,EAAE,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA8D3D,EAAE,CAAC,CAAC;AACV,CAAC,CAAC"}
+{"version":3,"file":"mouse-humanization.js","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/mouse-humanization.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,GAAW,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyDlE,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,EAAE,OAAY,EAAiB,EAAE;IAChF,uEAAuE;IACvE,sEAAsE;AAC1E,CAAC,CAAC"}

package/dist/fingerprinting/fingerprint-overrides/platform-consistency.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-consistency.d.ts","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/platform-consistency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,+BAA+B,aAAc,MAAM,oBAAoB,cAAc,KAAG,MAimBpG,CAAC"}
+{"version":3,"file":"platform-consistency.d.ts","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/platform-consistency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,+BAA+B,aAAc,MAAM,oBAAoB,cAAc,KAAG,MA2pBpG,CAAC"}

package/dist/fingerprinting/fingerprint-overrides/platform-consistency.js

@@ -111,7 +111,14 @@ export const createPlatformConsistencyScript = (platform, fingerprintData) => {
     return `
 (() => {
     'use strict';
-    
+
+    // Only run in the top-level frame.  Sub-frames (iframes) should keep native
+    // property descriptors so that detection tools comparing main-frame getter
+    // identity vs iframe getter identity (hasMismatchPlatformIframe) find no
+    // discrepancy.  The main-frame injection already cannot override non-
+    // configurable navigator properties, so leaving iframes at native is correct.
+    if (window !== window.top) return;
+
     // Platform Consistency for ${platform}
     const config = ${JSON.stringify(config)};
     
@@ -133,15 +140,21 @@ export const createPlatformConsistencyScript = (platform, fingerprintData) => {
         }
     };
     
-    // Override navigator properties for platform consistency (with guards)
+    // Override navigator properties for platform consistency (with guards).
+    // NOTE: vendorSub / cookieEnabled / onLine are intentionally omitted —
+    // their native Chrome values always match the fingerprint values, and adding
+    // instance-level JS getters for them without doing the same in sub-frames
+    // creates a descriptor asymmetry that detection tools flag as
+    // hasMismatchPlatformIframe.  Injecting into sub-frames is guarded off
+    // above (window !== window.top), so we only define properties where Chrome
+    // already exposes a non-configurable native getter at the instance level
+    // (platform, vendor, userAgent, etc.) — those fail silently in both
+    // contexts and stay symmetric.
     safeDefineProperty(navigator, 'platform', () => config.platform);
     safeDefineProperty(navigator, 'vendor', () => config.vendor);
-    safeDefineProperty(navigator, 'vendorSub', () => config.vendorSub);
     safeDefineProperty(navigator, 'productSub', () => config.productSub);
     safeDefineProperty(navigator, 'hardwareConcurrency', () => config.hardwareConcurrency);
     safeDefineProperty(navigator, 'maxTouchPoints', () => config.maxTouchPoints);
-    safeDefineProperty(navigator, 'cookieEnabled', () => config.cookieEnabled);
-    safeDefineProperty(navigator, 'onLine', () => config.onLine);
     safeDefineProperty(navigator, 'language', () => config.language);
     safeDefineProperty(navigator, 'languages', () => config.languages);
     
@@ -240,28 +253,12 @@ export const createPlatformConsistencyScript = (platform, fingerprintData) => {
     safeDefineProperty(screen, 'colorDepth', () => config.colorDepth);
     safeDefineProperty(screen, 'pixelDepth', () => config.screenDepth || config.colorDepth);
     
-    // Ensure WebGL returns platform-appropriate values
-    const getParameterProto = WebGLRenderingContext.prototype.getParameter;
-    WebGLRenderingContext.prototype.getParameter = function(param) {
-        if (param === 0x9245 || param === 0x9246) { // UNMASKED_VENDOR_WEBGL / UNMASKED_RENDERER_WEBGL
-            // Return platform-appropriate GPU with corrected ANGLE token count
-            if (config.platform === 'Win32') {
-                return param === 0x9245 
-                    ? 'NVIDIA Corporation' 
-                    : 'ANGLE (NVIDIA, NVIDIA GeForce GTX 1660 Ti Direct3D 11.0)'; // Fixed: fewer tokens
-            } else if (config.platform === 'MacIntel') {
-                return param === 0x9245 ? 'Apple Inc.' : 'ANGLE (Apple, Apple M1 Pro, OpenGL 4.1)';
-            } else {
-                return param === 0x9245 ? 'Intel' : 'ANGLE (Intel, Mesa Intel(R) UHD Graphics 630, OpenGL 4.6)';
-            }
-        }
-        return getParameterProto.apply(this, arguments);
-    };
-    
-    if (typeof WebGL2RenderingContext !== 'undefined') {
-        WebGL2RenderingContext.prototype.getParameter = WebGLRenderingContext.prototype.getParameter;
-    }
-    
+    // NOTE: WebGL getParameter override intentionally removed.
+    // webgl-spoofing.ts is the single authority for WebGL vendor/renderer.
+    // Having multiple modules override the same prototype method means only
+    // the last one survives — a silent conflict that produces inconsistent
+    // GPU strings across vendor/renderer values.
+
     // ========== 2024-2025 Enhanced Platform Consistency ==========
     
     // Screen Orientation API Consistency
@@ -584,10 +581,71 @@ export const createPlatformConsistencyScript = (platform, fingerprintData) => {
         }
     };
     
+    // ── Iframe prototype alignment ───────────────────────────────────────────
+    // Detection technique used by fpscanner.com (hasMismatchPlatformIframe):
+    //   const nativeGet = Object.getOwnPropertyDescriptor(
+    //     iframe.contentWindow.Navigator.prototype, prop)?.get;
+    //   const realValue = nativeGet.call(navigator);  // bypasses instance override
+    // When the main frame has property overrides (JS or CDP-injected native), calling
+    // the iframe's prototype getter on main navigator returns the underlying C++ value,
+    // which differs from the overridden value → mismatch detected.
+    // Fix: intercept contentWindow access and override the iframe's Navigator.prototype
+    // getters to return the same value the main frame's navigator currently reports.
+    try {
+        const _fpAlignIframeProto = (win) => {
+            try {
+                if (!win || !win.navigator) return;
+                const iwProto = Object.getPrototypeOf(win.navigator);
+                const propsToAlign = [
+                    'platform', 'hardwareConcurrency', 'userAgent', 'vendor',
+                    'productSub', 'appVersion', 'appCodeName', 'appName', 'product',
+                ];
+                for (const prop of propsToAlign) {
+                    try {
+                        const mainVal = (navigator)[prop];
+                        const protoDesc = Object.getOwnPropertyDescriptor(iwProto, prop);
+                        if (!protoDesc || protoDesc.configurable !== false) {
+                            // Save the native getter's toString string BEFORE replacing it.
+                            // fpscanner (hasMismatchPlatformIframe) checks whether the
+                            // iframe's prototype getter toString looks like native code.
+                            // Our replacement getter's .toString() must return the same
+                            // native-code string the original getter had.
+                            const nativeGetStr = protoDesc?.get?.toString()
+                                ?? \`function get \${prop}() { [native code] }\`;
+                            const ourGetter = (() => { const v = mainVal; return function() { return v; }; })();
+                            Object.defineProperty(ourGetter, 'toString', {
+                                value: () => nativeGetStr,
+                                configurable: true,
+                                writable: true,
+                            });
+                            Object.defineProperty(iwProto, prop, {
+                                get: ourGetter,
+                                configurable: true,
+                            });
+                        }
+                    } catch (_) { /* skip non-configurable property */ }
+                }
+            } catch (_) { /* cross-origin iframe — skip */ }
+        };
+
+        const _fpCWDesc = Object.getOwnPropertyDescriptor(HTMLIFrameElement.prototype, 'contentWindow');
+        if (_fpCWDesc && _fpCWDesc.get) {
+            const _fpCWGet = _fpCWDesc.get;
+            Object.defineProperty(HTMLIFrameElement.prototype, 'contentWindow', {
+                get() {
+                    const win = _fpCWGet.call(this);
+                    if (win) _fpAlignIframeProto(win);
+                    return win;
+                },
+                configurable: true,
+            });
+        }
+    } catch (_) { /* HTMLIFrameElement not available */ }
+
     // Initialize all enhanced spoofing
     const DEBUG_PREFIX = '[CDP-FP-DEBUG]';
     const ERROR_PREFIX = '[CDP-FP-ERROR]';
-    
+
     console.log(DEBUG_PREFIX, 'Starting platform consistency overrides for:', config.platform);
     
     const applyConsistency = (name, fn) => {

package/dist/fingerprinting/fingerprint-overrides/platform-consistency.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-consistency.js","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/platform-consistency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuBH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,QAAgB,EAAE,eAAgC,EAAU,EAAE;IAC1G,uDAAuD;IACvD,MAAM,eAAe,GAAG;QACpB,OAAO,EAAE;YACL,gBAAgB,EAAE,GAAG;YACrB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,mBAAmB,EAAE,CAAC;YACtB,cAAc,EAAE,CAAC;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,6BAA6B;YACpC,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,UAAU;YACtB,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1B,SAAS,EAAE,iHAAiH;YAC5H,UAAU,EAAE,yGAAyG;YACrH,OAAO,EAAE,UAAU;YACnB,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,OAAO;YAChB,+EAA+E;YAC/E,OAAO,EAAE;gBACL,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBAChG,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACvG,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACzG,EAAE,IAAI,EAAE,2BAA2B,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBAC/G,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;aAC5G;YACD,SAAS,EAAE;gBACP,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACrF,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0BAA0B,EAAE;aACjF;YACD,yCAAyC;YACzC,kEAAkE;YAClE,6DAA6D;YAC7D,UAAU,EAAE;gBACR,QAAQ,EAAE,EAAE;gBACZ,aAAa,EAAE,IAAI;gBACnB,QAAQ,EAAE,IAAI;gBACd,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,KAAK;aAClB;SACJ;QACD,UAAU,EAAE;YACR,gBAAgB,EAAE,GAAG;YACrB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,mBAAmB,EAAE,CAAC;YACtB,cAAc,EAAE,CAAC;YACjB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,UAAU;YACtB,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1B,OAAO,EAAE;gBACL,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBACvD,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBAC9D,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBAChE,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;aACnE;SACJ;QACD,cAAc,EAAE;YACZ,gBAAgB,EAAE,GAAG;YACrB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,mBAAmB,EAAE,CAAC;YACtB,cAAc,EAAE,CAAC;YACjB,QAAQ,EAAE,cAAc;YACxB,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,UAAU;YACtB,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1B,OAAO,EAAE;gBACL,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBACvD,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBAC9D,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;aACnE;SACJ;KACJ,CAAC;IAEF,MAAM,aAAa,GAAG,eAAe,CAAC,QAAwC,CAAC,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;IAEnH,mDAAmD;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC;QAC7B,GAAG,aAAa;QAChB,GAAG,eAAe;QAClB,8BAA8B;QAC9B,QAAQ,EAAE,eAAe,CAAC,QAAQ,IAAI,QAAQ;KACjD,CAAC,CAAC,CAAC,aAAa,CAAC;IAElB,OAAO;;;;kCAIuB,QAAQ;qBACrB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAsfrC,CAAC;AACP,CAAC,CAAC"}
+{"version":3,"file":"platform-consistency.js","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/platform-consistency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuBH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,QAAgB,EAAE,eAAgC,EAAU,EAAE;IAC1G,uDAAuD;IACvD,MAAM,eAAe,GAAG;QACpB,OAAO,EAAE;YACL,gBAAgB,EAAE,GAAG;YACrB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,mBAAmB,EAAE,CAAC;YACtB,cAAc,EAAE,CAAC;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,6BAA6B;YACpC,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,UAAU;YACtB,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1B,SAAS,EAAE,iHAAiH;YAC5H,UAAU,EAAE,yGAAyG;YACrH,OAAO,EAAE,UAAU;YACnB,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,OAAO;YAChB,+EAA+E;YAC/E,OAAO,EAAE;gBACL,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBAChG,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACvG,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACzG,EAAE,IAAI,EAAE,2BAA2B,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBAC/G,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE;aAC5G;YACD,SAAS,EAAE;gBACP,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACrF,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0BAA0B,EAAE;aACjF;YACD,yCAAyC;YACzC,kEAAkE;YAClE,6DAA6D;YAC7D,UAAU,EAAE;gBACR,QAAQ,EAAE,EAAE;gBACZ,aAAa,EAAE,IAAI;gBACnB,QAAQ,EAAE,IAAI;gBACd,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,KAAK;aAClB;SACJ;QACD,UAAU,EAAE;YACR,gBAAgB,EAAE,GAAG;YACrB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,mBAAmB,EAAE,CAAC;YACtB,cAAc,EAAE,CAAC;YACjB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,UAAU;YACtB,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1B,OAAO,EAAE;gBACL,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBACvD,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBAC9D,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBAChE,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;aACnE;SACJ;QACD,cAAc,EAAE;YACZ,gBAAgB,EAAE,GAAG;YACrB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,mBAAmB,EAAE,CAAC;YACtB,cAAc,EAAE,CAAC;YACjB,QAAQ,EAAE,cAAc;YACxB,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,UAAU;YACtB,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1B,OAAO,EAAE;gBACL,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBACvD,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;gBAC9D,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;aACnE;SACJ;KACJ,CAAC;IAEF,MAAM,aAAa,GAAG,eAAe,CAAC,QAAwC,CAAC,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;IAEnH,mDAAmD;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC;QAC7B,GAAG,aAAa;QAChB,GAAG,eAAe;QAClB,8BAA8B;QAC9B,QAAQ,EAAE,eAAe,CAAC,QAAQ,IAAI,QAAQ;KACjD,CAAC,CAAC,CAAC,aAAa,CAAC;IAElB,OAAO;;;;;;;;;;;kCAWuB,QAAQ;qBACrB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAyiBrC,CAAC;AACP,CAAC,CAAC"}

package/dist/fingerprinting/fingerprint-overrides/scroll-humanization.d.ts

@@ -48,8 +48,15 @@ export declare const humanScroll: (client: unknown, targetY: number, config?: Pa
  */
 export declare const humanScrollToElement: (client: unknown, selector: string, config?: Partial<ScrollConfig>) => Promise<void>;
 /**
- * Setup scroll humanization at CDP level
+ * Setup scroll humanization at CDP level.
+ *
+ * Pass `useNativeStealth: true` when running on the patched anti-detect Cromite
+ * build — the JS `WheelEvent` constructor override and pass-through `scrollTo`
+ * shims add no value on top of the native browser behaviour and only introduce
+ * detectable prototype tampering. In that mode this function no-ops.
  */
-export declare const setupScrollHumanization: (client: unknown) => Promise<void>;
+export declare const setupScrollHumanization: (client: unknown, options?: {
+    useNativeStealth?: boolean;
+}) => Promise<void>;
 export {};
 //# sourceMappingURL=scroll-humanization.d.ts.map

package/dist/fingerprinting/fingerprint-overrides/scroll-humanization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scroll-humanization.d.ts","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/scroll-humanization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,UAAU,YAAY;IAClB,mDAAmD;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,gCAAgC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oDAAoD;IACpD,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;CACtB;AAYD;;GAEG;AACH,eAAO,MAAM,kBAAkB,WACnB,MAAM,WACL,MAAM,WACP,OAAO,CAAC,YAAY,CAAC,KAC9B;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAyD9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,8BAA8B,QAAO,MA+FjD,CAAC;AAOF;;GAEG;AACH,eAAO,MAAM,WAAW,WACZ,OAAO,WACN,MAAM,WACP,OAAO,CAAC,YAAY,CAAC,KAC9B,OAAO,CAAC,IAAI,CAuDd,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,WACrB,OAAO,YACL,MAAM,WACR,OAAO,CAAC,YAAY,CAAC,KAC9B,OAAO,CAAC,IAAI,CAsCd,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB,WAAkB,OAAO,KAAG,OAAO,CAAC,IAAI,CAY3E,CAAC"}
+{"version":3,"file":"scroll-humanization.d.ts","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/scroll-humanization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,UAAU,YAAY;IAClB,mDAAmD;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,gCAAgC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oDAAoD;IACpD,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;CACtB;AAYD;;GAEG;AACH,eAAO,MAAM,kBAAkB,WACnB,MAAM,WACL,MAAM,WACP,OAAO,CAAC,YAAY,CAAC,KAC9B;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAyD9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,8BAA8B,QAAO,MA+FjD,CAAC;AAOF;;GAEG;AACH,eAAO,MAAM,WAAW,WACZ,OAAO,WACN,MAAM,WACP,OAAO,CAAC,YAAY,CAAC,KAC9B,OAAO,CAAC,IAAI,CAuDd,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,WACrB,OAAO,YACL,MAAM,WACR,OAAO,CAAC,YAAY,CAAC,KAC9B,OAAO,CAAC,IAAI,CAsCd,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,WACxB,OAAO,YACL;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,KACzC,OAAO,CAAC,IAAI,CAed,CAAC"}

package/dist/fingerprinting/fingerprint-overrides/scroll-humanization.js

@@ -231,9 +231,17 @@ export const humanScrollToElement = async (client, selector, config = {}) => {
     await humanScroll(client, Math.max(0, targetY), config);
 };
 /**
- * Setup scroll humanization at CDP level
+ * Setup scroll humanization at CDP level.
+ *
+ * Pass `useNativeStealth: true` when running on the patched anti-detect Cromite
+ * build — the JS `WheelEvent` constructor override and pass-through `scrollTo`
+ * shims add no value on top of the native browser behaviour and only introduce
+ * detectable prototype tampering. In that mode this function no-ops.
  */
-export const setupScrollHumanization = async (client) => {
+export const setupScrollHumanization = async (client, options) => {
+    if (options?.useNativeStealth) {
+        return;
+    }
     const runtimeClient = client;
     // NOTE: Using addScriptToEvaluateOnNewDocument instead of Runtime.evaluate
     // Runtime.evaluate is a CDP detection vector

package/dist/fingerprinting/fingerprint-overrides/scroll-humanization.js.map

@@ -1 +1 @@
-{"version":3,"file":"scroll-humanization.js","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/scroll-humanization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAsBH,MAAM,qBAAqB,GAAiB;IACxC,gBAAgB,EAAE,GAAG;IACrB,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,CAAC;IACd,uBAAuB,EAAE,IAAI;IAC7B,oBAAoB,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC;IACjC,UAAU,EAAE,EAAE,EAAE,SAAS;CAC5B,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAC9B,MAAc,EACd,OAAe,EACf,SAAgC,EAAE,EACJ,EAAE;IAChC,MAAM,GAAG,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAAC;IACpD,MAAM,IAAI,GAAmC,EAAE,CAAC;IAEhD,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC;IAEjD,qCAAqC;IACrC,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;IACtE,IAAI,QAAQ,GAAG,MAAM,CAAC;IAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACpD,2CAA2C;QAC3C,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC;QACvD,MAAM,kBAAkB,GAAG,iBAAiB,GAAG,GAAG,CAAC,CAAC;YAChD,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;QAE9C,QAAQ,IAAI,kBAAkB,CAAC;QAE/B,uCAAuC;QACvC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;QAC5D,MAAM,YAAY,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,SAAS,CAAC;QAEvD,QAAQ,IAAI,YAAY,CAAC;QAEzB,kBAAkB;QAClB,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAChB,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACJ,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,iCAAiC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEjE,mCAAmC;QACnC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,MAAM,aAAa,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBAC7C,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAEzE,2DAA2D;YAC3D,QAAQ,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACpC,CAAC;QAED,gDAAgD;QAChD,IAAI,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM;QACV,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAEjD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAW,EAAE;IACvD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA6FL,CAAC;AACP,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE7F;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC5B,MAAe,EACf,OAAe,EACf,SAAgC,EAAE,EACrB,EAAE;IACf,MAAM,WAAW,GAAG,MAenB,CAAC;IAEF,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG;QACb,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,WAAW;QACzC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,YAAY;KAC9C,CAAC;IAEF,uBAAuB;IACvB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAEzD,uCAAuC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAEnC,sBAAsB;IACtB,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;QAE/B,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACf,uBAAuB;YACvB,MAAM,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBACvC,IAAI,EAAE,YAAY;gBAClB,CAAC,EAAE,MAAM;gBACT,CAAC,EAAE,MAAM;gBACT,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,MAAM;aACjB,CAAC,CAAC;QACP,CAAC;QAED,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;QAEhB,iBAAiB;QACjB,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACL,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACrC,MAAe,EACf,QAAgB,EAChB,SAAgC,EAAE,EACrB,EAAE;IACf,MAAM,SAAS,GAAG,MAYjB,CAAC;IAEF,oEAAoE;IACpE,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAExF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,0EAA0E;IAC1E,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,aAAa,GAAG,UAAU,CAAC;IAEjD,0BAA0B;IAC1B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACxD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC;IAE3D,kEAAkE;IAClE,MAAM,OAAO,GAAG,UAAU,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;IAExE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAAE,MAAe,EAAiB,EAAE;IAC5E,MAAM,aAAa,GAAG,MAIrB,CAAC;IAEF,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,aAAa,CAAC,IAAI,CAAC,gCAAgC,CAAC;QACtD,MAAM,EAAE,8BAA8B,EAAE;KAC3C,CAAC,CAAC;AACP,CAAC,CAAC"}
+{"version":3,"file":"scroll-humanization.js","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/scroll-humanization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAsBH,MAAM,qBAAqB,GAAiB;IACxC,gBAAgB,EAAE,GAAG;IACrB,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,CAAC;IACd,uBAAuB,EAAE,IAAI;IAC7B,oBAAoB,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC;IACjC,UAAU,EAAE,EAAE,EAAE,SAAS;CAC5B,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAC9B,MAAc,EACd,OAAe,EACf,SAAgC,EAAE,EACJ,EAAE;IAChC,MAAM,GAAG,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAAC;IACpD,MAAM,IAAI,GAAmC,EAAE,CAAC;IAEhD,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC;IAEjD,qCAAqC;IACrC,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;IACtE,IAAI,QAAQ,GAAG,MAAM,CAAC;IAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACpD,2CAA2C;QAC3C,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC;QACvD,MAAM,kBAAkB,GAAG,iBAAiB,GAAG,GAAG,CAAC,CAAC;YAChD,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;QAE9C,QAAQ,IAAI,kBAAkB,CAAC;QAE/B,uCAAuC;QACvC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;QAC5D,MAAM,YAAY,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,SAAS,CAAC;QAEvD,QAAQ,IAAI,YAAY,CAAC;QAEzB,kBAAkB;QAClB,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAChB,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACJ,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,iCAAiC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEjE,mCAAmC;QACnC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,MAAM,aAAa,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBAC7C,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAEzE,2DAA2D;YAC3D,QAAQ,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACpC,CAAC;QAED,gDAAgD;QAChD,IAAI,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM;QACV,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAEjD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAW,EAAE;IACvD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA6FL,CAAC;AACP,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE7F;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC5B,MAAe,EACf,OAAe,EACf,SAAgC,EAAE,EACrB,EAAE;IACf,MAAM,WAAW,GAAG,MAenB,CAAC;IAEF,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG;QACb,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,WAAW;QACzC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,YAAY;KAC9C,CAAC;IAEF,uBAAuB;IACvB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAEzD,uCAAuC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAEnC,sBAAsB;IACtB,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;QAE/B,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACf,uBAAuB;YACvB,MAAM,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBACvC,IAAI,EAAE,YAAY;gBAClB,CAAC,EAAE,MAAM;gBACT,CAAC,EAAE,MAAM;gBACT,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,MAAM;aACjB,CAAC,CAAC;QACP,CAAC;QAED,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;QAEhB,iBAAiB;QACjB,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACL,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACrC,MAAe,EACf,QAAgB,EAChB,SAAgC,EAAE,EACrB,EAAE;IACf,MAAM,SAAS,GAAG,MAYjB,CAAC;IAEF,oEAAoE;IACpE,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAExF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,0EAA0E;IAC1E,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,aAAa,GAAG,UAAU,CAAC;IAEjD,0BAA0B;IAC1B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACxD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC;IAE3D,kEAAkE;IAClE,MAAM,OAAO,GAAG,UAAU,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;IAExE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EACxC,MAAe,EACf,OAAwC,EAC3B,EAAE;IACf,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;QAC5B,OAAO;IACX,CAAC;IACD,MAAM,aAAa,GAAG,MAIrB,CAAC;IAEF,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,aAAa,CAAC,IAAI,CAAC,gCAAgC,CAAC;QACtD,MAAM,EAAE,8BAA8B,EAAE;KAC3C,CAAC,CAAC;AACP,CAAC,CAAC"}

package/dist/fingerprinting/fingerprint-overrides/stealth-script.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stealth-script.d.ts","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/stealth-script.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,mBAAmB,QAAO,MAy8BtC,CAAC"}
+{"version":3,"file":"stealth-script.d.ts","sourceRoot":"","sources":["../../../src/fingerprinting/fingerprint-overrides/stealth-script.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,mBAAmB,QAAO,MA6kCtC,CAAC"}

package/dist/fingerprinting/fingerprint-overrides/stealth-script.js

@@ -33,15 +33,18 @@ export const createStealthScript = () => {
         });
     };
     
-    // Generate consistent session seed for stable values
-    const generateSessionSeed = () => {
-        const ua = navigator.userAgent || '';
-        const screen = window.screen;
-        const seed = ua.length + (screen.width || 0) + (screen.height || 0);
-        return seed;
-    };
-    
-    const sessionSeed = generateSessionSeed();
+    // Use centralized stable hash from __stealth store (set up by utils.ts preamble).
+    // Falls back to a UA+screen hash so the module works even if utils.ts somehow
+    // runs after this script (should not happen given injection order).
+    const _ss = typeof __stealth !== 'undefined' ? __stealth : {};
+    const sessionSeed = (_ss.stableHash
+        ? _ss.stableHash(0xCAFE9001)
+        : (() => {
+            const ua = navigator.userAgent || '';
+            const s = window.screen;
+            return ua.length + (s.width || 0) + (s.height || 0);
+        })()
+    );
     
     // Helper to safely define property with guards
     const safeDefineProperty = (obj, prop, descriptor) => {
@@ -84,11 +87,13 @@ export const createStealthScript = () => {
 
     // 3. WebDriver and Automation Flags Removal (2025)
     const removeAutomationFlags = () => {
-        // Override webdriver to false (NOT undefined).
-        // In real Chrome 89+, navigator.webdriver exists and is false.
-        // Setting to undefined would make 'webdriver' in navigator return false,
-        // which is itself a detection vector.
-        safeDefineGetter(navigator, 'webdriver', () => false, true);
+        // NOTE: navigator.webdriver is NOT overridden here.
+        // The Chromium C++ patch (Anti-Detect 0006) makes navigator.webdriver
+        // unconditionally return false at the prototype level. Adding a JS own
+        // property here would make navigator.hasOwnProperty('webdriver') === true
+        // and Object.getOwnPropertyDescriptor(navigator,'webdriver') return a
+        // descriptor, both of which are detectable tells that don't exist in real
+        // Chrome. The C++ patch is the correct and sufficient fix.
 
         // Remove automation indicators
         const automationProperties = [
@@ -113,6 +118,10 @@ export const createStealthScript = () => {
             } catch (e) {}
         });
 
+        // Ensure Error.stackTraceLimit is the V8 default (10).
+        // Some automation frameworks change this value; FingerprintJS checks it.
+        try { if (typeof Error.stackTraceLimit !== 'undefined') Error.stackTraceLimit = 10; } catch (e) {}
+
         // Ensure window.chrome exists (handled more fully by spoofChromeRuntime)
         // NOTE: Removed stack-trace-based chrome getter that created new Error()
         // on every access - expensive and broken since stack sanitization removes
@@ -205,6 +214,8 @@ export const createStealthScript = () => {
                 Object.defineProperty(arr, 'item', { value: (index) => arr[index] || null, writable: false, enumerable: false });
                 Object.defineProperty(arr, 'namedItem', { value: (name) => arr[name] || null, writable: false, enumerable: false });
                 Object.defineProperty(arr, 'refresh', { value: () => {}, writable: false, enumerable: false });
+                // Allow for...of iteration — checked by DataDome and FingerprintJS Pro
+                arr[Symbol.iterator] = function* () { for (let i = 0; i < fakePlugins.length; i++) yield arr[i]; };
                 return arr;
             };
             safeDefineGetter(navigator, 'plugins', pluginsGetter);
@@ -317,13 +328,11 @@ export const createStealthScript = () => {
                 getManifest: () => ({}),
                 // Real Chrome extension IDs are 32 lowercase alpha chars (a-p, base16 with a-p)
                 id: undefined,
-                connect: () => ({
-                    name: '',
-                    disconnect: () => {},
-                    onDisconnect: { addListener: () => {}, removeListener: () => {} },
-                    onMessage: { addListener: () => {}, removeListener: () => {} },
-                    postMessage: () => {}
-                }),
+                connect: function() {
+                    // Real Chrome throws this exact error when no extension is receiving
+                    // DataDome and PerimeterX specifically test this error message
+                    throw new Error('Could not establish connection. Receiving end does not exist.');
+                },
                 sendMessage: () => {},
                 getURL: (path) => '',
                 onConnect: { addListener: () => {}, removeListener: () => {} },
@@ -376,11 +385,17 @@ export const createStealthScript = () => {
         }
 
         // chrome.csi() - Chrome-specific, returns page load timing info
+        // Values are pre-computed from session seed so they're stable across calls.
+        // Real Chrome returns consistent timing per page load; Math.random() is detectable.
         if (window.chrome && !window.chrome.csi) {
+            const _csiRng = (_ss.createRNG ? _ss.createRNG(sessionSeed ^ 0x1001) : (() => { let x = sessionSeed ^ 0x1001; return () => { x = (x * 1664525 + 1013904223) >>> 0; return x / 4294967296; }; })());
+            const _csiLoadOffset = 500 + _csiRng() * 2000;
+            const _csiStartOffset = 1000 + _csiRng() * 3000;
             window.chrome.csi = function() {
+                const now = Date.now();
                 return {
-                    onloadT: Date.now() - (Math.random() * 2000 + 500),
-                    startE: Date.now() - (Math.random() * 3000 + 1000),
+                    onloadT: now - _csiLoadOffset,
+                    startE: now - _csiStartOffset,
                     pageT: performance.now(),
                     tran: 15, // Normal navigation
                 };
@@ -388,20 +403,30 @@ export const createStealthScript = () => {
         }
 
         // chrome.loadTimes() - Chrome-specific, returns load timing info
+        // Pre-computed offsets from session seed for stability across calls.
         if (window.chrome && !window.chrome.loadTimes) {
+            const _ltRng = (_ss.createRNG ? _ss.createRNG(sessionSeed ^ 0x1002) : (() => { let x = sessionSeed ^ 0x1002; return () => { x = (x * 1664525 + 1013904223) >>> 0; return x / 4294967296; }; })());
+            const _ltOffsets = {
+                commit: _ltRng() * 2,
+                finishDoc: _ltRng() * 1,
+                finishLoad: _ltRng() * 0.5,
+                firstPaint: _ltRng() * 1.5,
+                request: _ltRng() * 3,
+                startLoad: _ltRng() * 2.5,
+            };
             window.chrome.loadTimes = function() {
                 const now = Date.now() / 1000;
                 return {
-                    commitLoadTime: now - Math.random() * 2,
+                    commitLoadTime: now - _ltOffsets.commit,
                     connectionInfo: 'h2',
-                    finishDocumentLoadTime: now - Math.random(),
-                    finishLoadTime: now - Math.random() * 0.5,
+                    finishDocumentLoadTime: now - _ltOffsets.finishDoc,
+                    finishLoadTime: now - _ltOffsets.finishLoad,
                     firstPaintAfterLoadTime: 0,
-                    firstPaintTime: now - Math.random() * 1.5,
+                    firstPaintTime: now - _ltOffsets.firstPaint,
                     navigationType: 'Other',
                     npnNegotiatedProtocol: 'h2',
-                    requestTime: now - Math.random() * 3,
-                    startLoadTime: now - Math.random() * 2.5,
+                    requestTime: now - _ltOffsets.request,
+                    startLoadTime: now - _ltOffsets.startLoad,
                     wasAlternateProtocolAvailable: false,
                     wasFetchedViaSpdy: true,
                     wasNpnNegotiated: true,
@@ -622,8 +647,10 @@ export const createStealthScript = () => {
         const originalGetGamepads = navigator.getGamepads;
         if (originalGetGamepads) {
             navigator.getGamepads = function() {
-                // Return empty array like no gamepads connected
-                return [];
+                // Real Chrome returns GamepadList with 4 null slots when no gamepads
+                // connected — NOT an empty array.  [] vs [null,null,null,null] is a
+                // checked difference between headed Chrome and headless/Chromium.
+                return [null, null, null, null];
             };
         }
     };
@@ -922,10 +949,112 @@ export const createStealthScript = () => {
         if (_s5.utils) _s5.utils.registerNativeFunction(window.postMessage, 'postMessage');
     };
 
+    // 30. Document Visibility Spoofing
+    // hasFocus() and visibilityState were only patched inside datadome-bypass.ts,
+    // meaning Cloudflare / Akamai / PerimeterX saw raw headless values.  Move them
+    // here so all crawls benefit.
+    const spoofDocumentVisibility = () => {
+        try {
+            Object.defineProperty(document, 'hidden', { get: () => false, configurable: true });
+            Object.defineProperty(document, 'visibilityState', { get: () => 'visible', configurable: true });
+        } catch (e) {}
+
+        document.hasFocus = function() { return true; };
+        try {
+            Object.defineProperty(document.hasFocus, 'toString', {
+                value: () => 'function hasFocus() { [native code] }',
+                configurable: true
+            });
+        } catch (e) {}
+
+        // Suppress CDP-lifecycle-driven visibilitychange events that expose headless state
+        const origAEL = document.addEventListener.bind(document);
+        const _hiddenEvtHandler = (e) => {
+            if (e.type === 'visibilitychange') { e.stopImmediatePropagation(); }
+        };
+        origAEL('visibilitychange', _hiddenEvtHandler, true);
+    };
+
+    // 31. Encrypted Media Extensions (Widevine) Spoofing
+    // Vanilla Chromium rejects requestMediaKeySystemAccess('com.widevine.alpha')
+    // with NotSupportedError.  Real Chrome ships Widevine L3 and resolves.
+    // This is one of the most reliable Chrome-vs-Chromium signals (Cloudflare, FPjs, CreepJS).
+    const spoofEME = () => {
+        if (typeof navigator.requestMediaKeySystemAccess !== 'function') return;
+
+        const _origRMKSA = navigator.requestMediaKeySystemAccess.bind(navigator);
+
+        const _fakeRMKSA = function requestMediaKeySystemAccess(keySystem, configs) {
+            if (keySystem === 'com.widevine.alpha') {
+                const cfg = (Array.isArray(configs) && configs[0]) ? configs[0] : {};
+                const resolvedCfg = {
+                    label: cfg.label || '',
+                    initDataTypes: cfg.initDataTypes || ['cenc'],
+                    audioCapabilities: cfg.audioCapabilities || [
+                        { contentType: 'audio/mp4;codecs="mp4a.40.2"', robustness: '' }
+                    ],
+                    videoCapabilities: cfg.videoCapabilities || [
+                        { contentType: 'video/mp4;codecs="avc1.42E01E"', robustness: '' }
+                    ],
+                    distinctiveIdentifier: 'not-allowed',
+                    persistentState: 'not-allowed',
+                    sessionTypes: ['temporary']
+                };
+
+                const fakeMKS = {
+                    setServerCertificate: () => Promise.resolve(true),
+                    createSession: function(sessionType) {
+                        const sess = {
+                            sessionId: '',
+                            expiration: NaN,
+                            closed: new Promise(() => {}),
+                            keyStatuses: new Map(),
+                            onkeystatuseschange: null,
+                            onmessage: null,
+                            generateRequest: () => Promise.reject(new DOMException('InvalidStateError', 'InvalidStateError')),
+                            load: () => Promise.resolve(false),
+                            update: () => Promise.reject(new DOMException('InvalidStateError', 'InvalidStateError')),
+                            close: () => Promise.resolve(),
+                            remove: () => Promise.reject(new DOMException('InvalidStateError', 'InvalidStateError')),
+                            addEventListener: () => {},
+                            removeEventListener: () => {},
+                            dispatchEvent: () => true
+                        };
+                        return sess;
+                    }
+                };
+
+                const fakeMKSA = {
+                    keySystem: 'com.widevine.alpha',
+                    getConfiguration: () => resolvedCfg,
+                    createMediaKeys: () => Promise.resolve(fakeMKS)
+                };
+
+                return Promise.resolve(fakeMKSA);
+            }
+            // All other key systems fall through to native
+            try { return _origRMKSA(keySystem, configs); }
+            catch (e) { return Promise.reject(e); }
+        };
+
+        // Override on both Navigator.prototype and the instance
+        try {
+            Object.defineProperty(Navigator.prototype, 'requestMediaKeySystemAccess', {
+                value: _fakeRMKSA, writable: true, configurable: true
+            });
+        } catch (e) {
+            try { navigator.requestMediaKeySystemAccess = _fakeRMKSA; } catch (e2) {}
+        }
+
+        // Register for native-code toString masking
+        const _s6 = typeof __stealth !== 'undefined' ? __stealth : {};
+        if (_s6.utils) _s6.utils.registerNativeFunction(_fakeRMKSA, 'requestMediaKeySystemAccess');
+    };
+
     // Initialize all protections
     const DEBUG_PREFIX = '[CDP-FP-DEBUG]';
     const ERROR_PREFIX = '[CDP-FP-ERROR]';
-    
+
     console.log(DEBUG_PREFIX, 'Starting stealth protection injection...');
     
     const applyProtection = (name, fn) => {
@@ -972,7 +1101,10 @@ export const createStealthScript = () => {
         applyProtection('Worker Constructor Protection', protectWorkerConstructor);
         applyProtection('SharedWorker Protection', protectSharedWorkerConstructor);
         applyProtection('PostMessage Protection', protectPostMessage);
-        
+        // Chrome authenticity patches — make Chromium look like real Chrome
+        applyProtection('Document Visibility Spoofing', spoofDocumentVisibility);
+        applyProtection('EME/Widevine Spoofing', spoofEME);
+
         console.log(DEBUG_PREFIX, '✓ All stealth protections applied successfully');
     } catch (e) {
         console.error(ERROR_PREFIX, '✗ Failed to apply stealth protections:', e);