sliccy 6.193.0 → 6.194.0

package/dist/node-server/chrome-launch.js

@@ -170,6 +170,28 @@ export function resolveChromeLaunchProfile(options) {
             : null,
     };
 }
+/**
+ * Features disabled on every Slicc-launched Chrome. Hosted leaders add
+ * `WebRtcHideLocalIpsWithMdns` so host candidates are literal addresses.
+ * Chromium honours a single `--disable-features` value (Chrome 154 still
+ * ships the feature under that name).
+ */
+const CHROME_DISABLE_FEATURES = [
+    'LocalNetworkAccessChecks',
+    'LocalNetworkAccessChecksWebSockets',
+    'IntensiveWakeUpThrottling',
+    'HighEfficiencyModeAvailable',
+    'InfiniteTabsFreezing',
+    'InfiniteTabsFreezingOnMemoryPressure',
+    'CPUMeasurementInFreezingPolicy',
+    'MemoryMeasurementInFreezingPolicy',
+    'AllowDevtoolsConnectedDiscard',
+];
+const HOSTED_DISABLE_FEATURES = [...CHROME_DISABLE_FEATURES, 'WebRtcHideLocalIpsWithMdns'];
+function chromeDisableFeaturesArg(hosted) {
+    const features = hosted ? HOSTED_DISABLE_FEATURES : CHROME_DISABLE_FEATURES;
+    return `--disable-features=${features.join(',')}`;
+}
 export function buildChromeLaunchArgs(options) {
     const args = [
         `--remote-debugging-port=${options.cdpPort}`,
@@ -218,7 +240,9 @@ export function buildChromeLaunchArgs(options) {
         // trips it on a ~30 min cadence), and AllowDevtoolsConnectedDiscard
         // removed the DevTools-attached exemption the leader used to enjoy.
         // Belt: seedChromeProfilePreferences() writes the matching prefs.
-        '--disable-features=LocalNetworkAccessChecks,LocalNetworkAccessChecksWebSockets,IntensiveWakeUpThrottling,HighEfficiencyModeAvailable,InfiniteTabsFreezing,InfiniteTabsFreezingOnMemoryPressure,CPUMeasurementInFreezingPolicy,MemoryMeasurementInFreezingPolicy,AllowDevtoolsConnectedDiscard',
+        // Hosted mode appends WebRtcHideLocalIpsWithMdns; keep that off this list
+        // so desktop, extension, and Electron still hide local IPs.
+        chromeDisableFeaturesArg(false),
         '--disable-background-timer-throttling',
         '--disable-backgrounding-occluded-windows',
         '--disable-renderer-backgrounding',
@@ -240,8 +264,17 @@ export function buildChromeLaunchArgs(options) {
         args.push(`--load-extension=${options.profile.extensionPath}`);
     }
     if (options.hosted) {
+        // One --disable-features switch: Chromium keeps a single value, so the
+        // hosted addition replaces the base flag rather than stacking a second.
+        const base = args.findIndex((arg) => arg.startsWith('--disable-features='));
+        if (base >= 0)
+            args[base] = chromeDisableFeaturesArg(true);
         // Local Network Access is disabled unconditionally in the base args above
         // (every float dials the local bridge); these are the container-only flags.
+        // A hosted leader is headless Chrome on a machine the CLI shares, so its
+        // private address is not a secret worth hiding behind mDNS. A literal host
+        // candidate lets pion connect directly. The relay fallback is what dies
+        // when TURN rejects CreatePermission.
         args.push('--headless=new', '--no-sandbox', '--disable-dev-shm-usage', '--disable-gpu', '--font-render-hinting=none');
     }
     args.push(options.launchUrl);

package/dist/node-server/index.js

@@ -473,6 +473,11 @@ async function launchChromeTarget(state) {
         hosted: RUNTIME_FLAGS.hosted,
         mockKeychain: process.env.SLICC_CHROME_MOCK_KEYCHAIN === '1',
     });
+    if (RUNTIME_FLAGS.hosted) {
+        // Chrome rewrites /proc/cmdline after startup, so this line is the record
+        // that the hosted leader asked for literal host addresses.
+        console.log('[hosted] WebRTC host candidates are literal addresses (mDNS hiding disabled)');
+    }
     // Chrome never clears DevToolsActivePort on shutdown, so a stale file from a
     // prior crash/SIGKILL would let our active-port poller win the race with the
     // wrong port. Clear it before spawn.