capiumbrowser 1.2.3__tar.gz → 1.3.0__tar.gz

{capiumbrowser-1.2.3/capiumbrowser.egg-info → capiumbrowser-1.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: capiumbrowser
-Version: 1.2.3
+Version: 1.3.0
 Summary: Drop-in stealth browser SDK on top of Playwright (Capium Chromium).
 Author: Capzy
 License: Capzy capiumbrowser SDK License
@@ -807,7 +807,7 @@ non-zero if the environment isn't ready. A bare `python -m capiumbrowser` runs `
 | `no license configured` | Set `CAPIUM_LICENSE_KEY`, pass `license_key=…`, or create `~/.capium/license` (`KEY=cap_…`). |
 | `CapiumSeatLimitError` | Free tier is 1 concurrent session — close the other Capium browser (or upgrade the tier). |
 | Still blocked on aggressive sites | Compare a matching persona with stock Chrome through assigned proxies. Check route, timezone, graphics availability and detector fields separately; headed mode under Xvfb also needs a working graphics backend. |
-| FPJS `tampering: true` | Prefer a matching-OS host and keep the default `--fingerprint-noise=false`. The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
+| FPJS `tampering: true` | Prefer a matching-OS host. Per-profile render noise is **on** by default (deterministic per profile; opt out with `--fingerprint-noise=false`). The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
 | "Windows persona but missing fonts" | Supply real `C:\Windows\Fonts\*.ttf` (see [fonts](#fonts)) or set `CAPIUM_SUPPRESS_FONT_WARNING=1`. |
 | `os_mismatch: true` | A network/transport signal (genuine Chrome shows it too behind some proxies) — a routing concern, not the browser. |
 | Headed browser won't start on a server | Run under `Xvfb` and export `DISPLAY=:99`. |

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0}/README.md

@@ -744,7 +744,7 @@ non-zero if the environment isn't ready. A bare `python -m capiumbrowser` runs `
 | `no license configured` | Set `CAPIUM_LICENSE_KEY`, pass `license_key=…`, or create `~/.capium/license` (`KEY=cap_…`). |
 | `CapiumSeatLimitError` | Free tier is 1 concurrent session — close the other Capium browser (or upgrade the tier). |
 | Still blocked on aggressive sites | Compare a matching persona with stock Chrome through assigned proxies. Check route, timezone, graphics availability and detector fields separately; headed mode under Xvfb also needs a working graphics backend. |
-| FPJS `tampering: true` | Prefer a matching-OS host and keep the default `--fingerprint-noise=false`. The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
+| FPJS `tampering: true` | Prefer a matching-OS host. Per-profile render noise is **on** by default (deterministic per profile; opt out with `--fingerprint-noise=false`). The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
 | "Windows persona but missing fonts" | Supply real `C:\Windows\Fonts\*.ttf` (see [fonts](#fonts)) or set `CAPIUM_SUPPRESS_FONT_WARNING=1`. |
 | `os_mismatch: true` | A network/transport signal (genuine Chrome shows it too behind some proxies) — a routing concern, not the browser. |
 | Headed browser won't start on a server | Run under `Xvfb` and export `DISPLAY=:99`. |

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0}/capiumbrowser/_version.py

@@ -17,7 +17,7 @@ import json
 import os
 import platform as _platform
 
-__version__ = "1.2.3"
+__version__ = "1.3.0"
 
 # Used only if channels.json can't be read (corrupt/removed install). ensure_binary() raises a
 # clear error long before the "unsupported platform" case matters; this keeps lookups total.

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0}/capiumbrowser/browser.py

@@ -379,7 +379,10 @@ def launch_persistent_context(user_data_dir, seed=None, platform="windows", head
     key, _ = _license.effective(license_key, license_server)
     binpath = _resolve_binary(binary, key)
     if seed is None:
-        seed = config.new_seed()
+        # No explicit identity: derive a STABLE per-profile seed from this persistent profile
+        # dir so each profile gets a distinct, consistent fingerprint (no two profiles collide,
+        # and a profile keeps its identity across launches) -- see config._profile_seed.
+        seed = config._profile_seed(user_data_dir)
     display = os.environ.get("DISPLAY")
     proxy_kwargs, proxy_args = _proxy_and_geo_args(proxy, binpath, geoip, display)
     launch_args = proxy_args + _build_args(

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0}/capiumbrowser/browser_async.py

@@ -202,7 +202,9 @@ async def launch_persistent_context_async(user_data_dir, seed=None, platform="wi
     key, _ = _license.effective(license_key, license_server)
     binpath = _resolve_binary(binary, key)
     if seed is None:
-        seed = config.new_seed()
+        # Stable per-profile seed from the persistent profile dir -- distinct, consistent
+        # fingerprint per profile so no two profiles collide (see config._profile_seed).
+        seed = config._profile_seed(user_data_dir)
     display = os.environ.get("DISPLAY")
     proxy_kwargs, proxy_args = await _proxy_and_geo_args_async(proxy, binpath, geoip, display)
     launch_args = proxy_args + _build_args(

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0}/capiumbrowser/channels.json

@@ -1,36 +1,36 @@
 {
-  "_comment": "SINGLE SOURCE OF TRUTH for the current stable Capium browser build per OS/arch. Each OS reaches stable independently -- edit one entry without touching the others. This file ships inside the wheel (the SDK reads it to pick each host's stable build) AND is published to the download server by the release pipeline. `version` is the reported Chromium version (what the browser reports to the customer, names the R2 folder); `engine_version` is the actual built Chromium engine (box_package verifies the binary against it) -- it differs from `version` when a platform reports a spoofed patch (Windows reports .85 on the .84 engine). `revision` is our packaging counter -- the served R2 folder is chromium-v<version>.<revision>/, ALWAYS dotted-suffixed starting at 1. A Chromium version bump resets revision to 1. `published: false` means the tag is declared but no artifact exists yet.",
+  "_comment": "SINGLE SOURCE OF TRUTH for the current stable Capium browser build per OS/arch. Each OS reaches stable independently -- edit one entry without touching the others. This file ships inside the wheel (the SDK reads it to pick each host's stable build) AND is published to the download server by the release pipeline. `version` is the reported Chromium version (what the browser reports to the customer, names the R2 folder); `engine_version` is the actual built Chromium engine (box_package verifies the binary against it) -- it differs from `version` when a platform reports a spoofed patch (Windows/macOS report .48 on the .47 engine). `revision` is our packaging counter -- the served R2 folder is chromium-v<version>.<revision>/, ALWAYS dotted-suffixed starting at 1. A Chromium version bump resets revision to 1. `published: false` means the tag is declared but no artifact exists yet.",
   "schema": 1,
-  "updated": "2026-10-21",
+  "updated": "2026-10-24",
   "channels": {
     "stable": {
       "windows-x64": {
-        "version": "155.0.8059.85",
-        "engine_version": "155.0.8059.84",
-        "revision": 2,
-        "sha256": "905bb081d5234338237b6a4c3df7ef3fbb8d20d0049adde982027494b87e4ed2",
+        "version": "156.0.8078.48",
+        "engine_version": "156.0.8078.47",
+        "revision": 1,
+        "sha256": "1c4dff0da8a61036b1e14a2bbe91c79a8a083cf91879399ab5cf57d68f0e865b",
         "published": true,
         "license_status_protocol": 1
       },
       "macos-arm64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
-        "revision": 2,
-        "sha256": "5c4ab089d7925a3b86fd891cfbe9de95777c46fc7616990a94b15b891c89775f",
+        "version": "156.0.8078.48",
+        "engine_version": "156.0.8078.47",
+        "revision": 1,
+        "sha256": "d545647a102c851394edbb3d6281917e5feabf1909bb128091b3eb9ed4326ee7",
         "published": true,
         "license_status_protocol": 1
       },
       "linux-x64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
-        "revision": 2,
-        "sha256": "e9e18dd9f23baa500e1be0a7075096f6e6c8fb3a37150c96bd96fd4e58518880",
+        "version": "156.0.8078.47",
+        "engine_version": "156.0.8078.47",
+        "revision": 1,
+        "sha256": "ff7019affcba442ea0fd1e3049d772cc26140a61615dadb8d383960b1f68a47f",
         "published": true,
         "license_status_protocol": 1
       },
       "linux-arm64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.47",
+        "engine_version": "156.0.8078.47",
         "revision": 1,
         "sha256": null,
         "published": false

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0}/capiumbrowser/config.py

@@ -46,6 +46,42 @@ def get_headless_default_args():
 
 # Chrome flags that make an automated launch look like a normal user session. These are
 # fingerprint-level; the bash wrapper adds the platform/GL/geoip/font/bluetooth/storage flags.
+def _machine_seed():
+    """A stable, unique-per-machine fingerprint seed.
+
+    Persisted as a random 32-bit value in CAPIUM_HOME/machine-seed on first use -- it is NOT
+    derived from hardware (so it leaks nothing about the host) but is fixed thereafter, so a
+    machine keeps one consistent identity across launches instead of every no-seed instance
+    collapsing onto the engine's built-in default seed (identical renders). Used only when the
+    caller passes no seed; callers that want a specific identity still pass seed=."""
+    import random
+    home = os.environ.get("CAPIUM_HOME") or os.path.join(os.path.expanduser("~"), ".capium")
+    path = os.path.join(home, "machine-seed")
+    try:
+        with open(path) as f:
+            return int(f.read().strip())
+    except (OSError, ValueError):
+        pass
+    s = random.SystemRandom().randrange(1, 2**31)
+    try:
+        os.makedirs(home, exist_ok=True)
+        with open(path, "w") as f:
+            f.write(str(s))
+    except OSError:
+        pass
+    return s
+
+
+def _profile_seed(user_data_dir):
+    """Stable seed unique to this (machine, profile) pair -- a hash of the per-machine seed and the
+    profile directory. Each persistent profile (user_data_dir) on each machine gets a distinct,
+    consistent fingerprint, so no two profiles collide (not the same path on different machines,
+    nor different profiles on one host) and a profile keeps one identity across launches."""
+    import hashlib
+    base = "%d:%s" % (_machine_seed(), os.path.abspath(user_data_dir))
+    return int.from_bytes(hashlib.sha256(base.encode()).digest()[:4], "big") % (2**31 - 1) + 1
+
+
 def get_default_stealth_args(seed=None, platform="windows", screen=None, mobile_device=None, browser_brand=None):
     """Return the default per-launch fingerprint flags.
 
@@ -75,7 +111,9 @@ def get_default_stealth_args(seed=None, platform="windows", screen=None, mobile_
             "primaryPointerType=2,availablePointerTypes=2,maxTouchPoints=5,"
             "viewportEnabled=true,viewportMetaEnabled=true,shrinksViewportContentToFit=true",
             "--touch-events=enabled", "--enable-viewport",
-            "--no-first-run", "--no-default-browser-check", "--fingerprint-noise=false",
+            # Per-profile render noise ON (engine default), same as desktop: mobile canvas/WebGL/
+            # audio are unique + stable per seed instead of identical across profiles on one host.
+            "--no-first-run", "--no-default-browser-check",
             "--window-size=%d,%d" % (sw, sh),
             *(["--user-agent=" + profile["user_agent"], "--capium-preserve-user-agent"] if platform == "ios" else []),
         ] + (["--fingerprint-screen-width=%d" % sw, "--fingerprint-screen-height=%d" % sh] if screen else [])
@@ -103,17 +141,21 @@ def get_default_stealth_args(seed=None, platform="windows", screen=None, mobile_
         "primaryPointerType=4,availablePointerTypes=4",
         "--no-first-run",
         "--no-default-browser-check",
-        # Engine 153 redirects main-world evaluations by default. Development
-        # 155 honors the requested context and keeps console masking independent:
-        # --capium-isolate-cdp-eval opts into legacy isolation;
-        # --capium-disable-console-mask restores page/worker console delivery;
-        # --capium-disable-cdp-stealth disables both policies on either engine.
-        # Published 1.2.0 selects engine 155.
+        # CDP stealth defaults (engine 156): inspector-frame scrub ON (hides the
+        # UtilityScript/eval source-URL leak from Error.stack -- Patchright-equivalent,
+        # does not trip anti-detect ML); console mask OFF (ON makes developer_tools=false
+        # -> FPJS anti_detect/tampering) -- opt in with --capium-enable-console-mask; main-
+        # world evaluate isolation OFF (ON breaks page-global access for solvers) -- opt in
+        # with --capium-isolate-cdp-eval. --capium-disable-cdp-stealth turns everything off.
+        # See docs/STEALTH-FLAGS.md.
     ]
-    # Keep injected canvas/audio/rectangle noise opt-in. Device fonts and the
-    # actual renderer can still affect pixels; noise=false does not guarantee
-    # identical canvases across personas or a particular detector classification.
-    args.append("--fingerprint-noise=false")
+    # Per-profile render farbling is ON (the engine default) so canvas/WebGL/audio are unique AND
+    # stable per seed. Without it, every profile on a host renders identically -- a cross-instance
+    # correlation surface a detector clusters over time. The engine farbles deterministically per
+    # (seed,x,y) and skips low-entropy images (so trivial hashes aren't perturbed). Combined with
+    # the per-machine seed above, each machine gets a distinct, consistent render fingerprint.
+    # Opt out with CAPIUM_EXTRA_ARGS=--fingerprint-noise=false (e.g. when byte-exact canvas is
+    # required). Previously this forced =false, collapsing all profiles onto the host's raw render.
     # A Windows persona's font metrics must match real Windows (needs Windows fonts
     # present on the host); harmless elsewhere, so gate it to the windows persona.
     if platform == "windows":

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0/capiumbrowser.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: capiumbrowser
-Version: 1.2.3
+Version: 1.3.0
 Summary: Drop-in stealth browser SDK on top of Playwright (Capium Chromium).
 Author: Capzy
 License: Capzy capiumbrowser SDK License
@@ -807,7 +807,7 @@ non-zero if the environment isn't ready. A bare `python -m capiumbrowser` runs `
 | `no license configured` | Set `CAPIUM_LICENSE_KEY`, pass `license_key=…`, or create `~/.capium/license` (`KEY=cap_…`). |
 | `CapiumSeatLimitError` | Free tier is 1 concurrent session — close the other Capium browser (or upgrade the tier). |
 | Still blocked on aggressive sites | Compare a matching persona with stock Chrome through assigned proxies. Check route, timezone, graphics availability and detector fields separately; headed mode under Xvfb also needs a working graphics backend. |
-| FPJS `tampering: true` | Prefer a matching-OS host and keep the default `--fingerprint-noise=false`. The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
+| FPJS `tampering: true` | Prefer a matching-OS host. Per-profile render noise is **on** by default (deterministic per profile; opt out with `--fingerprint-noise=false`). The current Linux audit remains flagged even with hardware Vulkan; ML zero alone does not clear tampering or anomaly. See the [audit](../../docs/SDK-GPU-AUDIT.md). |
 | "Windows persona but missing fonts" | Supply real `C:\Windows\Fonts\*.ttf` (see [fonts](#fonts)) or set `CAPIUM_SUPPRESS_FONT_WARNING=1`. |
 | `os_mismatch: true` | A network/transport signal (genuine Chrome shows it too behind some proxies) — a routing concern, not the browser. |
 | Headed browser won't start on a server | Run under `Xvfb` and export `DISPLAY=:99`. |

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "capiumbrowser"
-version = "1.2.3"
+version = "1.3.0"
 description = "Drop-in stealth browser SDK on top of Playwright (Capium Chromium)."
 readme = "README.md"
 requires-python = ">=3.8"

{capiumbrowser-1.2.3 → capiumbrowser-1.3.0}/tests/test_config_args.py

@@ -30,9 +30,11 @@ def test_windows_gets_font_metrics_others_do_not():
         assert "--fingerprint-windows-font-metrics" not in a
 
 
-def test_noise_off_by_default():
+def test_noise_on_by_default():
+    # Per-profile render farbling is the engine default now; the SDK no longer forces it off,
+    # so canvas/WebGL/audio are unique + stable per seed instead of identical across profiles.
     args = config.get_default_stealth_args(seed=1, platform="linux", screen=None)
-    assert "--fingerprint-noise=false" in args
+    assert "--fingerprint-noise=false" not in args
 
 
 def test_screen_coherence_flags():