capiumbrowser 1.2.3__tar.gz → 1.2.4__tar.gz

{capiumbrowser-1.2.3/capiumbrowser.egg-info → capiumbrowser-1.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: capiumbrowser
-Version: 1.2.3
+Version: 1.2.4
 Summary: Drop-in stealth browser SDK on top of Playwright (Capium Chromium).
 Author: Capzy
 License: Capzy capiumbrowser SDK License
@@ -807,7 +807,7 @@ non-zero if the environment isn't ready. A bare `python -m capiumbrowser` runs `
 | `no license configured` | Set `CAPIUM_LICENSE_KEY`, pass `license_key=…`, or create `~/.capium/license` (`KEY=cap_…`). |
 | `CapiumSeatLimitError` | Free tier is 1 concurrent session — close the other Capium browser (or upgrade the tier). |
 | Still blocked on aggressive sites | Compare a matching persona with stock Chrome through assigned proxies. Check route, timezone, graphics availability and detector fields separately; headed mode under Xvfb also needs a working graphics backend. |
-| FPJS `tampering: true` | Prefer a matching-OS host and keep the default `--fingerprint-noise=false`. The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
+| FPJS `tampering: true` | Prefer a matching-OS host. Per-profile render noise is **on** by default (deterministic per profile; opt out with `--fingerprint-noise=false`). The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
 | "Windows persona but missing fonts" | Supply real `C:\Windows\Fonts\*.ttf` (see [fonts](#fonts)) or set `CAPIUM_SUPPRESS_FONT_WARNING=1`. |
 | `os_mismatch: true` | A network/transport signal (genuine Chrome shows it too behind some proxies) — a routing concern, not the browser. |
 | Headed browser won't start on a server | Run under `Xvfb` and export `DISPLAY=:99`. |

{capiumbrowser-1.2.3 → capiumbrowser-1.2.4}/README.md

@@ -744,7 +744,7 @@ non-zero if the environment isn't ready. A bare `python -m capiumbrowser` runs `
 | `no license configured` | Set `CAPIUM_LICENSE_KEY`, pass `license_key=…`, or create `~/.capium/license` (`KEY=cap_…`). |
 | `CapiumSeatLimitError` | Free tier is 1 concurrent session — close the other Capium browser (or upgrade the tier). |
 | Still blocked on aggressive sites | Compare a matching persona with stock Chrome through assigned proxies. Check route, timezone, graphics availability and detector fields separately; headed mode under Xvfb also needs a working graphics backend. |
-| FPJS `tampering: true` | Prefer a matching-OS host and keep the default `--fingerprint-noise=false`. The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
+| FPJS `tampering: true` | Prefer a matching-OS host. Per-profile render noise is **on** by default (deterministic per profile; opt out with `--fingerprint-noise=false`). The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
 | "Windows persona but missing fonts" | Supply real `C:\Windows\Fonts\*.ttf` (see [fonts](#fonts)) or set `CAPIUM_SUPPRESS_FONT_WARNING=1`. |
 | `os_mismatch: true` | A network/transport signal (genuine Chrome shows it too behind some proxies) — a routing concern, not the browser. |
 | Headed browser won't start on a server | Run under `Xvfb` and export `DISPLAY=:99`. |

{capiumbrowser-1.2.3 → capiumbrowser-1.2.4}/capiumbrowser/_version.py

@@ -17,7 +17,7 @@ import json
 import os
 import platform as _platform
 
-__version__ = "1.2.3"
+__version__ = "1.2.4"
 
 # Used only if channels.json can't be read (corrupt/removed install). ensure_binary() raises a
 # clear error long before the "unsupported platform" case matters; this keeps lookups total.

{capiumbrowser-1.2.3 → capiumbrowser-1.2.4}/capiumbrowser/browser.py

@@ -379,7 +379,10 @@ def launch_persistent_context(user_data_dir, seed=None, platform="windows", head
     key, _ = _license.effective(license_key, license_server)
     binpath = _resolve_binary(binary, key)
     if seed is None:
-        seed = config.new_seed()
+        # No explicit identity: derive a STABLE per-profile seed from this persistent profile
+        # dir so each profile gets a distinct, consistent fingerprint (no two profiles collide,
+        # and a profile keeps its identity across launches) -- see config._profile_seed.
+        seed = config._profile_seed(user_data_dir)
     display = os.environ.get("DISPLAY")
     proxy_kwargs, proxy_args = _proxy_and_geo_args(proxy, binpath, geoip, display)
     launch_args = proxy_args + _build_args(

{capiumbrowser-1.2.3 → capiumbrowser-1.2.4}/capiumbrowser/browser_async.py

@@ -202,7 +202,9 @@ async def launch_persistent_context_async(user_data_dir, seed=None, platform="wi
     key, _ = _license.effective(license_key, license_server)
     binpath = _resolve_binary(binary, key)
     if seed is None:
-        seed = config.new_seed()
+        # Stable per-profile seed from the persistent profile dir -- distinct, consistent
+        # fingerprint per profile so no two profiles collide (see config._profile_seed).
+        seed = config._profile_seed(user_data_dir)
     display = os.environ.get("DISPLAY")
     proxy_kwargs, proxy_args = await _proxy_and_geo_args_async(proxy, binpath, geoip, display)
     launch_args = proxy_args + _build_args(

{capiumbrowser-1.2.3 → capiumbrowser-1.2.4}/capiumbrowser/config.py

@@ -46,6 +46,42 @@ def get_headless_default_args():
 
 # Chrome flags that make an automated launch look like a normal user session. These are
 # fingerprint-level; the bash wrapper adds the platform/GL/geoip/font/bluetooth/storage flags.
+def _machine_seed():
+    """A stable, unique-per-machine fingerprint seed.
+
+    Persisted as a random 32-bit value in CAPIUM_HOME/machine-seed on first use -- it is NOT
+    derived from hardware (so it leaks nothing about the host) but is fixed thereafter, so a
+    machine keeps one consistent identity across launches instead of every no-seed instance
+    collapsing onto the engine's built-in default seed (identical renders). Used only when the
+    caller passes no seed; callers that want a specific identity still pass seed=."""
+    import random
+    home = os.environ.get("CAPIUM_HOME") or os.path.join(os.path.expanduser("~"), ".capium")
+    path = os.path.join(home, "machine-seed")
+    try:
+        with open(path) as f:
+            return int(f.read().strip())
+    except (OSError, ValueError):
+        pass
+    s = random.SystemRandom().randrange(1, 2**31)
+    try:
+        os.makedirs(home, exist_ok=True)
+        with open(path, "w") as f:
+            f.write(str(s))
+    except OSError:
+        pass
+    return s
+
+
+def _profile_seed(user_data_dir):
+    """Stable seed unique to this (machine, profile) pair -- a hash of the per-machine seed and the
+    profile directory. Each persistent profile (user_data_dir) on each machine gets a distinct,
+    consistent fingerprint, so no two profiles collide (not the same path on different machines,
+    nor different profiles on one host) and a profile keeps one identity across launches."""
+    import hashlib
+    base = "%d:%s" % (_machine_seed(), os.path.abspath(user_data_dir))
+    return int.from_bytes(hashlib.sha256(base.encode()).digest()[:4], "big") % (2**31 - 1) + 1
+
+
 def get_default_stealth_args(seed=None, platform="windows", screen=None, mobile_device=None, browser_brand=None):
     """Return the default per-launch fingerprint flags.
 
@@ -75,7 +111,9 @@ def get_default_stealth_args(seed=None, platform="windows", screen=None, mobile_
             "primaryPointerType=2,availablePointerTypes=2,maxTouchPoints=5,"
             "viewportEnabled=true,viewportMetaEnabled=true,shrinksViewportContentToFit=true",
             "--touch-events=enabled", "--enable-viewport",
-            "--no-first-run", "--no-default-browser-check", "--fingerprint-noise=false",
+            # Per-profile render noise ON (engine default), same as desktop: mobile canvas/WebGL/
+            # audio are unique + stable per seed instead of identical across profiles on one host.
+            "--no-first-run", "--no-default-browser-check",
             "--window-size=%d,%d" % (sw, sh),
             *(["--user-agent=" + profile["user_agent"], "--capium-preserve-user-agent"] if platform == "ios" else []),
         ] + (["--fingerprint-screen-width=%d" % sw, "--fingerprint-screen-height=%d" % sh] if screen else [])
@@ -110,10 +148,13 @@ def get_default_stealth_args(seed=None, platform="windows", screen=None, mobile_
         # --capium-disable-cdp-stealth disables both policies on either engine.
         # Published 1.2.0 selects engine 155.
     ]
-    # Keep injected canvas/audio/rectangle noise opt-in. Device fonts and the
-    # actual renderer can still affect pixels; noise=false does not guarantee
-    # identical canvases across personas or a particular detector classification.
-    args.append("--fingerprint-noise=false")
+    # Per-profile render farbling is ON (the engine default) so canvas/WebGL/audio are unique AND
+    # stable per seed. Without it, every profile on a host renders identically -- a cross-instance
+    # correlation surface a detector clusters over time. The engine farbles deterministically per
+    # (seed,x,y) and skips low-entropy images (so trivial hashes aren't perturbed). Combined with
+    # the per-machine seed above, each machine gets a distinct, consistent render fingerprint.
+    # Opt out with CAPIUM_EXTRA_ARGS=--fingerprint-noise=false (e.g. when byte-exact canvas is
+    # required). Previously this forced =false, collapsing all profiles onto the host's raw render.
     # A Windows persona's font metrics must match real Windows (needs Windows fonts
     # present on the host); harmless elsewhere, so gate it to the windows persona.
     if platform == "windows":

{capiumbrowser-1.2.3 → capiumbrowser-1.2.4/capiumbrowser.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: capiumbrowser
-Version: 1.2.3
+Version: 1.2.4
 Summary: Drop-in stealth browser SDK on top of Playwright (Capium Chromium).
 Author: Capzy
 License: Capzy capiumbrowser SDK License
@@ -807,7 +807,7 @@ non-zero if the environment isn't ready. A bare `python -m capiumbrowser` runs `
 | `no license configured` | Set `CAPIUM_LICENSE_KEY`, pass `license_key=…`, or create `~/.capium/license` (`KEY=cap_…`). |
 | `CapiumSeatLimitError` | Free tier is 1 concurrent session — close the other Capium browser (or upgrade the tier). |
 | Still blocked on aggressive sites | Compare a matching persona with stock Chrome through assigned proxies. Check route, timezone, graphics availability and detector fields separately; headed mode under Xvfb also needs a working graphics backend. |
-| FPJS `tampering: true` | Prefer a matching-OS host and keep the default `--fingerprint-noise=false`. The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
+| FPJS `tampering: true` | Prefer a matching-OS host. Per-profile render noise is **on** by default (deterministic per profile; opt out with `--fingerprint-noise=false`). The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
 | "Windows persona but missing fonts" | Supply real `C:\Windows\Fonts\*.ttf` (see [fonts](#fonts)) or set `CAPIUM_SUPPRESS_FONT_WARNING=1`. |
 | `os_mismatch: true` | A network/transport signal (genuine Chrome shows it too behind some proxies) — a routing concern, not the browser. |
 | Headed browser won't start on a server | Run under `Xvfb` and export `DISPLAY=:99`. |

{capiumbrowser-1.2.3 → capiumbrowser-1.2.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "capiumbrowser"
-version = "1.2.3"
+version = "1.2.4"
 description = "Drop-in stealth browser SDK on top of Playwright (Capium Chromium)."
 readme = "README.md"
 requires-python = ">=3.8"

{capiumbrowser-1.2.3 → capiumbrowser-1.2.4}/tests/test_config_args.py

@@ -30,9 +30,11 @@ def test_windows_gets_font_metrics_others_do_not():
         assert "--fingerprint-windows-font-metrics" not in a
 
 
-def test_noise_off_by_default():
+def test_noise_on_by_default():
+    # Per-profile render farbling is the engine default now; the SDK no longer forces it off,
+    # so canvas/WebGL/audio are unique + stable per seed instead of identical across profiles.
     args = config.get_default_stealth_args(seed=1, platform="linux", screen=None)
-    assert "--fingerprint-noise=false" in args
+    assert "--fingerprint-noise=false" not in args
 
 
 def test_screen_coherence_flags():