capiumbrowser 1.2.4__tar.gz → 1.3.1__tar.gz

{capiumbrowser-1.2.4/capiumbrowser.egg-info → capiumbrowser-1.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: capiumbrowser
-Version: 1.2.4
+Version: 1.3.1
 Summary: Drop-in stealth browser SDK on top of Playwright (Capium Chromium).
 Author: Capzy
 License: Capzy capiumbrowser SDK License
@@ -408,7 +408,7 @@ and `launch_persistent_context` forward everything to `launch`.
 | Parameter | Type | Default | Description |
 |---|---|---|---|
 | `proxy` | `str` \| `dict` \| `"env"`/`True` \| `None` | `None` | HTTP/HTTPS/SOCKS5 URL with inline creds, a `{"server","username","password"}` dict, `"env"`/`True` (reads `CAPIUM_PROXY`), or `None`/`"none"`/`""`. |
-| `geoip` | `bool` \| `None` | `None` | Geo coherence, resolved inside the binary. **`None` (default) — OFF**: no lookup runs, even with a proxy (a proxy alone doesn't trigger it, so proxied launches aren't slowed). **`True`** — ON: pins timezone/geo/WebRTC/`navigator.languages` to the egress (proxy exit, or the host IP if proxyless). **`False`** — explicit opt-out. No SDK-side probe. |
+| `geoip` | `bool` \| `None` | `None` | Geo coherence, resolved inside the binary. **`None` (default) — ON whenever a proxy is set, OFF otherwise**: an uncorrected host timezone under a proxied identity (UTC on a server) is a far stronger detection signal than the lookup's one-off launch latency. **`True`** — ON even proxyless (pins timezone/geo/WebRTC/`navigator.languages` to the host IP). **`False`** — explicit opt-out. No SDK-side probe. |
 | `timezone` | `str` \| `None` | `None` | IANA tz (e.g. `"America/New_York"`) → `--timezone`. **Overrides** `geoip`. |
 | `locale` | `str` \| `None` | `None` | BCP-47 (e.g. `"en-US"`) → `--lang` + `--accept-lang`. **Overrides** `geoip`. |
 

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/README.md

@@ -345,7 +345,7 @@ and `launch_persistent_context` forward everything to `launch`.
 | Parameter | Type | Default | Description |
 |---|---|---|---|
 | `proxy` | `str` \| `dict` \| `"env"`/`True` \| `None` | `None` | HTTP/HTTPS/SOCKS5 URL with inline creds, a `{"server","username","password"}` dict, `"env"`/`True` (reads `CAPIUM_PROXY`), or `None`/`"none"`/`""`. |
-| `geoip` | `bool` \| `None` | `None` | Geo coherence, resolved inside the binary. **`None` (default) — OFF**: no lookup runs, even with a proxy (a proxy alone doesn't trigger it, so proxied launches aren't slowed). **`True`** — ON: pins timezone/geo/WebRTC/`navigator.languages` to the egress (proxy exit, or the host IP if proxyless). **`False`** — explicit opt-out. No SDK-side probe. |
+| `geoip` | `bool` \| `None` | `None` | Geo coherence, resolved inside the binary. **`None` (default) — ON whenever a proxy is set, OFF otherwise**: an uncorrected host timezone under a proxied identity (UTC on a server) is a far stronger detection signal than the lookup's one-off launch latency. **`True`** — ON even proxyless (pins timezone/geo/WebRTC/`navigator.languages` to the host IP). **`False`** — explicit opt-out. No SDK-side probe. |
 | `timezone` | `str` \| `None` | `None` | IANA tz (e.g. `"America/New_York"`) → `--timezone`. **Overrides** `geoip`. |
 | `locale` | `str` \| `None` | `None` | BCP-47 (e.g. `"en-US"`) → `--lang` + `--accept-lang`. **Overrides** `geoip`. |
 

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/capiumbrowser/_version.py

@@ -17,7 +17,7 @@ import json
 import os
 import platform as _platform
 
-__version__ = "1.2.4"
+__version__ = "1.3.1"
 
 # Used only if channels.json can't be read (corrupt/removed install). ensure_binary() raises a
 # clear error long before the "unsupported platform" case matters; this keeps lookups total.

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/capiumbrowser/android-phones.json

@@ -2,9 +2,9 @@
   "schema_version": 2,
   "minimum_release_year": 2022,
   "browser": "chrome",
-  "status": "experimental-emulation",
-  "gpu_policy": "host",
-  "hardware_policy": "host",
+  "status": "catalog-emulation",
+  "gpu_policy": "catalog",
+  "hardware_policy": "catalog",
   "physical_device_validation": "pending",
   "default_profile_ids": [
     "pixel-7",
@@ -13,6 +13,20 @@
     "pixel-8a",
     "pixel-9"
   ],
+  "font_core": [
+    "Roboto",
+    "Noto Sans",
+    "Noto Serif",
+    "Noto Sans Mono",
+    "Noto Color Emoji",
+    "Noto Sans JP",
+    "Noto Sans KR",
+    "Noto Sans SC",
+    "Noto Sans TC",
+    "Noto Naskh Arabic",
+    "Noto Sans Devanagari",
+    "Noto Sans Thai"
+  ],
   "sources": [
     "https://support.google.com/pixelphone/answer/7158570?hl=en",
     "https://news.samsung.com/global/samsung-galaxy-a55-5g-and-galaxy-a35-5g-awesome-innovations-and-security-engineered-for-everyone",
@@ -27,7 +41,12 @@
       "platform_version": "13",
       "width": 412,
       "height": 915,
-      "dpr": 2.625
+      "dpr": 2.625,
+      "soc": "Tensor G2",
+      "cores": 8,
+      "memory_gb": 8,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G710, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-8",
@@ -36,7 +55,12 @@
       "platform_version": "14",
       "width": 412,
       "height": 915,
-      "dpr": 2.625
+      "dpr": 2.625,
+      "soc": "Tensor G3",
+      "cores": 9,
+      "memory_gb": 8,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-8-pro",
@@ -45,7 +69,12 @@
       "platform_version": "14",
       "width": 448,
       "height": 997,
-      "dpr": 3.0
+      "dpr": 3.0,
+      "soc": "Tensor G3",
+      "cores": 9,
+      "memory_gb": 12,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-8a",
@@ -54,7 +83,12 @@
       "platform_version": "14",
       "width": 412,
       "height": 915,
-      "dpr": 2.625
+      "dpr": 2.625,
+      "soc": "Tensor G3",
+      "cores": 9,
+      "memory_gb": 8,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-9",
@@ -63,7 +97,12 @@
       "platform_version": "14",
       "width": 412,
       "height": 924,
-      "dpr": 2.625
+      "dpr": 2.625,
+      "soc": "Tensor G4",
+      "cores": 8,
+      "memory_gb": 12,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "samsung-galaxy-a55",
@@ -74,6 +113,11 @@
       "width": 360,
       "height": 800,
       "dpr": 2.25,
+      "soc": "Exynos 1480",
+      "cores": 8,
+      "memory_gb": 8,
+      "gpu_vendor": "Google Inc. (Samsung Electronics Co., Ltd.)",
+      "gpu_renderer": "ANGLE (Samsung Electronics Co., Ltd., Xclipse 530, OpenGL ES 3.2)",
       "geometry_status": "devtools-emulation-only",
       "geometry_note": "These Chromium preset dimensions/DPR do not directly map to the published 1080x2340 panel; physical Chrome capture required."
     },
@@ -84,7 +128,12 @@
       "platform_version": "14",
       "width": 427,
       "height": 952,
-      "dpr": 3.0
+      "dpr": 3.0,
+      "soc": "Tensor G4",
+      "cores": 8,
+      "memory_gb": 16,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     },
     {
       "id": "pixel-9-pro-xl",
@@ -93,7 +142,12 @@
       "platform_version": "14",
       "width": 448,
       "height": 997,
-      "dpr": 3.0
+      "dpr": 3.0,
+      "soc": "Tensor G4",
+      "cores": 8,
+      "memory_gb": 16,
+      "gpu_vendor": "Google Inc. (ARM)",
+      "gpu_renderer": "ANGLE (ARM, Mali-G715, OpenGL ES 3.2)"
     }
   ]
 }

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/capiumbrowser/browser.py

@@ -90,19 +90,22 @@ def _proxy_and_geo_args(spec, binpath, geoip_on, display):
     would otherwise add up to 2.5s to every proxied launch. When it does run it resolves the
     egress IP (proxy exit, else the host's real public IP) and pins WebRTC / timezone /
     geolocation / language -- so the SDK adds no probe of its own. geoip_on is tri-state:
-      * None  -> default: add no flag, so NO geo lookup runs (no launch latency) even with a
-                 proxy. Pass geoip=True to opt into proxy-exit coherence.
+      * None  -> default: ON whenever a proxy is set, OFF otherwise. An uncorrected host
+                 timezone under a proxied identity (UTC on a server, or the operator's home
+                 zone against a foreign exit) is a far stronger detection signal than the
+                 one-off launch-latency cost of the lookup. Pass geoip=False to opt out.
       * True  -> ON with --geoip (resolves the egress -- proxy exit, or the host IP if proxyless).
       * False -> OFF with --geoip=false, which the binary honors FIRST (explicit opt-out).
     Returns (proxy_kwargs, [flags]).
     """
     proxy_kwargs, out = _proxy.resolve_proxy_config(spec)
     out = list(out)
+    explicit_off = geoip_on is False
     if geoip_on is None:
-        pass
-    elif geoip_on:
+        geoip_on = bool(spec)
+    if geoip_on:
         out.append("--geoip")
-    else:
+    elif explicit_off:
         out.append("--geoip=false")
     return proxy_kwargs, out
 
@@ -163,14 +166,34 @@ def fit_window(browser, context, page):
         pass
 
 
+def _window_bounds_for_seed(seed, aw, ah):
+    """Deterministic per-seed window geometry inside the seed's available screen area.
+
+    Every profile previously got the identical maximized-like window (exactly availWidth x
+    availHeight at 0,0), so all profiles sharing a pool screen were geometry-identical -- a
+    clusterable signature. Real users are a mix: most keep the browser maximized, a minority
+    run a windowed browser at an arbitrary size/position. Mirror that mix deterministically
+    per seed (the geometry is part of the profile's stable identity, like its screen)."""
+    import hashlib
+    d = hashlib.sha256(b"capium-window:%d" % int(seed)).digest()
+    if d[0] % 10 < 6:  # most seeds: maximized-like (previous behavior)
+        return 0, 0, aw, ah
+    w = max(800, int(aw * (0.78 + (d[1] / 255.0) * 0.16)))   # 78-94% of avail width
+    h = max(600, int(ah * (0.80 + (d[2] / 255.0) * 0.15)))   # 80-95% of avail height
+    left = (aw - w) * d[3] // 255
+    top = (ah - h) * d[4] // 255
+    return int(left), int(top), int(w), int(h)
+
+
 def _fit_window_to_screen(context):
     """Size the window to the seed's (coherent, per-seed) spoofed screen so viewport ~= screen.
 
     With screen=None (the default), each persona uses its device-pool screen/dpr. Here we size the
-    window to that screen's available area (a maximized-like window), via the page's CDP session
-    (works for persistent contexts, which have no browser() object). This keeps screen~=viewport in
-    headless/container (avoids the browserscan 'screen != viewport' VM tell) AND stays coherent in
-    headed (Chrome clamps to the real display -> a normal viewport<screen window). Best-effort."""
+    window within that screen's available area -- maximized-like for most seeds, realistically
+    windowed for the rest (see _window_bounds_for_seed) -- via the page's CDP session
+    (works for persistent contexts, which have no browser() object). This keeps viewport<=screen
+    coherent in headless/container (avoids the browserscan 'screen != viewport' VM tell) AND stays
+    coherent in headed (Chrome clamps to the real display). Best-effort."""
     s = None
     try:
         page = context.pages[0] if context.pages else None
@@ -180,10 +203,12 @@ def _fit_window_to_screen(context):
         if not (scr and scr.get("w") and scr.get("h")):
             return
         aw, ah = int(scr["w"]), int(scr["h"])
+        left, top, w, h = _window_bounds_for_seed(
+            getattr(context, "_capium_seed", 0) or 0, aw, ah)
         s = context.new_cdp_session(page)
         wid = s.send("Browser.getWindowForTarget")["windowId"]
         s.send("Browser.setWindowBounds", {"windowId": wid, "bounds": {
-            "left": 0, "top": 0, "width": aw, "height": ah, "windowState": "normal"}})
+            "left": left, "top": top, "width": w, "height": h, "windowState": "normal"}})
     except Exception:
         pass
     finally:
@@ -470,6 +495,7 @@ def launch_context(seed=None, platform="windows", headless=False, url=None,
         _human.humanize(context, preset=human_preset)
     page = context.pages[0] if context.pages else context.new_page()
     if not getattr(browser, "_capium_mobile", False):
+        context._capium_seed = getattr(browser, "_capium_seed", 0)
         if headless:
             _fit_window_to_screen(context)   # per-seed screen fit (coherent viewport, not the tiny startup window)
         else:

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/capiumbrowser/browser_async.py

@@ -33,17 +33,18 @@ async def _license_preflight_async(license_key, license_server, do_preflight):
 async def _proxy_and_geo_args_async(spec, binpath, geoip_on, display):
     """Return (proxy_kwargs, chrome_args). proxy_kwargs for Playwright auth; chrome_args for
     native --proxy-server + geo flags. The binary's CapiumGeoipResolver runs at PreBrowserStart
-    ONLY when --geoip is present (a proxy alone does NOT trigger it -- the lookup is a blocking
-    round-trip we don't pay unasked). geoip_on is tri-state: None = default OFF (no lookup, no
-    launch latency, even with a proxy), True = ON (--geoip), False = explicit opt-out
-    (--geoip=false, honored first)."""
+    ONLY when --geoip is present. geoip_on is tri-state: None = default ON whenever a proxy is
+    set and OFF otherwise (an uncorrected host timezone under a proxied identity -- UTC on a
+    server -- is a far stronger detection signal than the lookup's launch latency), True = ON
+    (--geoip), False = explicit opt-out (--geoip=false, honored first)."""
     proxy_kwargs, out = _proxy.resolve_proxy_config(spec)
     out = list(out)
+    explicit_off = geoip_on is False
     if geoip_on is None:
-        pass
-    elif geoip_on:
+        geoip_on = bool(spec)
+    if geoip_on:
         out.append("--geoip")
-    else:
+    elif explicit_off:
         out.append("--geoip=false")
     return proxy_kwargs, out
 
@@ -164,18 +165,22 @@ async def _require_mobile_engine_async(context, mobile_device=None, seed=0, plat
 
 
 async def _fit_window_to_screen_async(context):
-    """Fit a headed desktop window to its available screen without emulation."""
+    """Fit a desktop window within its available screen (per-seed geometry, no emulation)."""
+    from .browser import _window_bounds_for_seed
     session = None
     try:
         page = context.pages[0] if context.pages else await context.new_page()
         screen = await page.evaluate("()=>({w:screen.availWidth,h:screen.availHeight})")
         if not (screen and screen.get("w") and screen.get("h")):
             return
+        left, top, w, h = _window_bounds_for_seed(
+            getattr(context, "_capium_seed", 0) or 0,
+            int(screen["w"]), int(screen["h"]))
         session = await context.new_cdp_session(page)
         window_id = (await session.send("Browser.getWindowForTarget"))["windowId"]
         await session.send("Browser.setWindowBounds", {"windowId": window_id, "bounds": {
-            "left": 0, "top": 0, "width": int(screen["w"]),
-            "height": int(screen["h"]), "windowState": "normal"}})
+            "left": left, "top": top, "width": w,
+            "height": h, "windowState": "normal"}})
     except Exception:
         pass
     finally:
@@ -281,6 +286,7 @@ async def launch_context_async(seed=None, platform="windows", headless=False, ur
         _human.humanize(context, preset=human_preset)
     page = context.pages[0] if context.pages else await context.new_page()
     if not getattr(browser, "_capium_mobile", False):
+        context._capium_seed = getattr(browser, "_capium_seed", 0)
         await _fit_window_to_screen_async(context)
     if url:
         await page.goto(url, wait_until="domcontentloaded", timeout=60000)

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/capiumbrowser/channels.json

@@ -1,36 +1,36 @@
 {
-  "_comment": "SINGLE SOURCE OF TRUTH for the current stable Capium browser build per OS/arch. Each OS reaches stable independently -- edit one entry without touching the others. This file ships inside the wheel (the SDK reads it to pick each host's stable build) AND is published to the download server by the release pipeline. `version` is the reported Chromium version (what the browser reports to the customer, names the R2 folder); `engine_version` is the actual built Chromium engine (box_package verifies the binary against it) -- it differs from `version` when a platform reports a spoofed patch (Windows reports .85 on the .84 engine). `revision` is our packaging counter -- the served R2 folder is chromium-v<version>.<revision>/, ALWAYS dotted-suffixed starting at 1. A Chromium version bump resets revision to 1. `published: false` means the tag is declared but no artifact exists yet.",
+  "_comment": "SINGLE SOURCE OF TRUTH for the current stable Capium browser build per OS/arch. Each OS reaches stable independently -- edit one entry without touching the others. This file ships inside the wheel (the SDK reads it to pick each host's stable build) AND is published to the download server by the release pipeline. `version` is the reported Chromium version (what the browser reports to the customer, names the R2 folder); `engine_version` is the actual built Chromium engine (box_package verifies the binary against it) -- it differs from `version` when a platform reports a spoofed patch (Windows/macOS report .48 on the .47 engine). `revision` is our packaging counter -- the served R2 folder is chromium-v<version>.<revision>/, ALWAYS dotted-suffixed starting at 1. A Chromium version bump resets revision to 1. `published: false` means the tag is declared but no artifact exists yet.",
   "schema": 1,
-  "updated": "2026-10-21",
+  "updated": "2026-10-24",
   "channels": {
     "stable": {
       "windows-x64": {
-        "version": "155.0.8059.85",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.48",
+        "engine_version": "156.0.8078.47",
         "revision": 2,
-        "sha256": "905bb081d5234338237b6a4c3df7ef3fbb8d20d0049adde982027494b87e4ed2",
+        "sha256": "76fa0d609f3d3fcac05436681884b3150405aaa470730d9a9ad1453ff6ad8276",
         "published": true,
         "license_status_protocol": 1
       },
       "macos-arm64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.48",
+        "engine_version": "156.0.8078.47",
         "revision": 2,
-        "sha256": "5c4ab089d7925a3b86fd891cfbe9de95777c46fc7616990a94b15b891c89775f",
+        "sha256": "3b883146c0f41fcb409113d3f43764b7e7061bb6c64d58cddb26b2619887275f",
         "published": true,
         "license_status_protocol": 1
       },
       "linux-x64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.47",
+        "engine_version": "156.0.8078.47",
         "revision": 2,
-        "sha256": "e9e18dd9f23baa500e1be0a7075096f6e6c8fb3a37150c96bd96fd4e58518880",
+        "sha256": "5fc9954366d8052e09d8f528d1cdbcedcf6d0cb1ae43c36441ce975a1e60c749",
         "published": true,
         "license_status_protocol": 1
       },
       "linux-arm64": {
-        "version": "155.0.8059.84",
-        "engine_version": "155.0.8059.84",
+        "version": "156.0.8078.47",
+        "engine_version": "156.0.8078.47",
         "revision": 1,
         "sha256": null,
         "published": false

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/capiumbrowser/config.py

@@ -141,12 +141,13 @@ def get_default_stealth_args(seed=None, platform="windows", screen=None, mobile_
         "primaryPointerType=4,availablePointerTypes=4",
         "--no-first-run",
         "--no-default-browser-check",
-        # Engine 153 redirects main-world evaluations by default. Development
-        # 155 honors the requested context and keeps console masking independent:
-        # --capium-isolate-cdp-eval opts into legacy isolation;
-        # --capium-disable-console-mask restores page/worker console delivery;
-        # --capium-disable-cdp-stealth disables both policies on either engine.
-        # Published 1.2.0 selects engine 155.
+        # CDP stealth defaults (engine 156): inspector-frame scrub ON (hides the
+        # UtilityScript/eval source-URL leak from Error.stack -- Patchright-equivalent,
+        # does not trip anti-detect ML); console mask OFF (ON makes developer_tools=false
+        # -> FPJS anti_detect/tampering) -- opt in with --capium-enable-console-mask; main-
+        # world evaluate isolation OFF (ON breaks page-global access for solvers) -- opt in
+        # with --capium-isolate-cdp-eval. --capium-disable-cdp-stealth turns everything off.
+        # See docs/STEALTH-FLAGS.md.
     ]
     # Per-profile render farbling is ON (the engine default) so canvas/WebGL/audio are unique AND
     # stable per seed. Without it, every profile on a host renders identically -- a cross-instance

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/capiumbrowser/mobile.py

@@ -15,7 +15,7 @@ _IOS_PROFILES = {profile["id"]: profile for profile in _IOS_CATALOG["profiles"]}
 # No network request is sent. A secure origin exposes native UA Client Hints.
 ENGINE_PROBE = r"""async expected => {
     const match = navigator.userAgent.match(/Chrome\/(\d+)\.0\.0\.0 Mobile Safari\//);
-    if (!expected || navigator.platform !== 'Linux armv81' || !match ||
+    if (!expected || navigator.platform !== 'Linux armv8l' || !match ||
         !navigator.userAgent.includes('(Linux; Android 10; K)') ||
         navigator.userAgent.includes('Version/4.0') || !navigator.userAgentData) return false;
     const ch = await navigator.userAgentData.getHighEntropyValues([

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1/capiumbrowser.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: capiumbrowser
-Version: 1.2.4
+Version: 1.3.1
 Summary: Drop-in stealth browser SDK on top of Playwright (Capium Chromium).
 Author: Capzy
 License: Capzy capiumbrowser SDK License
@@ -408,7 +408,7 @@ and `launch_persistent_context` forward everything to `launch`.
 | Parameter | Type | Default | Description |
 |---|---|---|---|
 | `proxy` | `str` \| `dict` \| `"env"`/`True` \| `None` | `None` | HTTP/HTTPS/SOCKS5 URL with inline creds, a `{"server","username","password"}` dict, `"env"`/`True` (reads `CAPIUM_PROXY`), or `None`/`"none"`/`""`. |
-| `geoip` | `bool` \| `None` | `None` | Geo coherence, resolved inside the binary. **`None` (default) — OFF**: no lookup runs, even with a proxy (a proxy alone doesn't trigger it, so proxied launches aren't slowed). **`True`** — ON: pins timezone/geo/WebRTC/`navigator.languages` to the egress (proxy exit, or the host IP if proxyless). **`False`** — explicit opt-out. No SDK-side probe. |
+| `geoip` | `bool` \| `None` | `None` | Geo coherence, resolved inside the binary. **`None` (default) — ON whenever a proxy is set, OFF otherwise**: an uncorrected host timezone under a proxied identity (UTC on a server) is a far stronger detection signal than the lookup's one-off launch latency. **`True`** — ON even proxyless (pins timezone/geo/WebRTC/`navigator.languages` to the host IP). **`False`** — explicit opt-out. No SDK-side probe. |
 | `timezone` | `str` \| `None` | `None` | IANA tz (e.g. `"America/New_York"`) → `--timezone`. **Overrides** `geoip`. |
 | `locale` | `str` \| `None` | `None` | BCP-47 (e.g. `"en-US"`) → `--lang` + `--accept-lang`. **Overrides** `geoip`. |
 

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "capiumbrowser"
-version = "1.2.4"
+version = "1.3.1"
 description = "Drop-in stealth browser SDK on top of Playwright (Capium Chromium)."
 readme = "README.md"
 requires-python = ">=3.8"

{capiumbrowser-1.2.4 → capiumbrowser-1.3.1}/tests/test_geoip_flags.py

@@ -1,7 +1,10 @@
 """Unit tests for the SDK geoip flag tri-state (capiumbrowser.browser._proxy_and_geo_args).
 
-Regression for the 2026-09 contract change: a proxy ALONE must NOT enable geoip (that added a
-blocking egress round-trip to every proxied launch). --geoip is the sole trigger now.
+Contract as of 1.3.1: geoip=None (the default) enables --geoip WHENEVER A PROXY IS SET and
+stays off otherwise. An uncorrected host timezone under a proxied identity (UTC on a server
+against a residential exit) is a far stronger detection signal than the lookup's one-off
+launch latency, which is why the 2026-09 "default always off" contract was reversed.
+Explicit False still opts out with --geoip=false (honored first by the binary).
 """
 import asyncio
 
@@ -14,11 +17,12 @@ def _flags(spec, geoip):
     return out
 
 
-def test_default_none_adds_no_geoip_even_with_proxy():
+def test_default_none_enables_geoip_with_proxy():
     out = _flags("http://u:p@h:1", geoip=None)
     assert any(a.startswith("--proxy-server=") for a in out), "proxy flag expected"
-    assert not any(a == "--geoip" or a.startswith("--geoip=") for a in out), \
-        "a proxy alone must NOT enable geoip (default is OFF)"
+    assert "--geoip" in out, \
+        "a proxy must enable geoip by default (exit-coherent timezone/geo/WebRTC)"
+    assert not any(a.startswith("--geoip=") for a in out)
 
 
 def test_true_adds_geoip():
@@ -26,9 +30,15 @@ def test_true_adds_geoip():
     assert "--geoip" in out
 
 
+def test_true_without_proxy_adds_geoip():
+    out = _flags(None, geoip=True)
+    assert "--geoip" in out
+
+
 def test_false_adds_explicit_optout():
     out = _flags("http://u:p@h:1", geoip=False)
     assert "--geoip=false" in out
+    assert "--geoip" not in out
 
 
 def test_no_proxy_no_geoip_by_default():
@@ -42,5 +52,6 @@ def test_async_mirror_matches_sync():
                                                                geoip_on=geoip, display=None)
         return out
     assert "--geoip" in asyncio.run(_run("http://u:p@h:1", True))
-    assert not any(a.startswith("--geoip") for a in asyncio.run(_run("http://u:p@h:1", None)))
+    assert "--geoip" in asyncio.run(_run("http://u:p@h:1", None))
+    assert not any(a.startswith("--geoip") for a in asyncio.run(_run(None, None)))
     assert "--geoip=false" in asyncio.run(_run(None, False))