hexium-browser 0.1.0__tar.gz

hexium_browser-0.1.0/.gitignore

@@ -0,0 +1,26 @@
+.venv/
+venv/
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+.eggs/
+dist/
+build/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+.tox/
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+credentials.json
+.DS_Store
+*.swp
+.idea/
+.vscode/
+*.orig

hexium_browser-0.1.0/BINARY-LICENSE.md

@@ -0,0 +1,52 @@
+# Hexium Browser binary license
+
+The **Hexium Browser** `chrome` binary is a modified Chromium build. It is **not** the Python package and it is **not** Google Chrome.
+
+## What this file covers
+
+This license applies to prebuilt Hexium binaries (`chrome`, `chrome.exe`, `Hexium.app`) delivered via `hexium-browser fetch`, cache under `~/.hexium/hexium-v{VERSION}/`, or a local out path:
+
+```text
+${HEXIUM_DOWNLOAD_URL}/hexium-v{VERSION}/hexium-{platform}{ext}
+$HEXIUM_OUT/hexium-v{VERSION}/hexium-{platform}{ext}
+```
+
+Runnable binary after extract (same layout as `~/.hexium/hexium-v{VERSION}/`):
+
+```text
+$HEXIUM_OUT/hexium-v{VERSION}/chrome
+```
+
+Examples:
+
+```text
+hexium-v151.0.7922.174.1/hexium-linux-x64.tar.gz
+hexium-v151.0.7922.174.1/chrome
+hexium-v151.0.7922.174.1/hexium-linux-arm64.tar.gz
+hexium-v151.0.7922.174.1/hexium-darwin-arm64.tar.gz
+hexium-v151.0.7922.174.1/hexium-darwin-x64.tar.gz
+hexium-v151.0.7922.174.1/hexium-windows-x64.zip
+```
+
+The Python wrapper (`hexium_browser`) is licensed separately under [AGPL-3.0 only](LICENSE.md).
+
+## Chromium
+
+Hexium is based on Chromium. Chromium is Copyright The Chromium Authors and is available under the BSD 3-Clause License and other notices in the Chromium source tree. See:
+
+- https://chromium.googlesource.com/chromium/src/+/HEAD/LICENSE
+- https://www.chromium.org/chromium-projects/
+
+You must retain Chromium copyright, license, and notice files shipped with the binary.
+
+## Not Google Chrome
+
+Hexium Browser is **not** an official Google product. You may not use Google trademarks, the Chrome brand, or Google’s proprietary Chrome components as if this were Google Chrome. Web identity (User-Agent) matching Chrome 151 does not grant trademark rights.
+
+## Hexium modifications
+
+HeadlessXLabs modifications to Chromium that ship inside the Hexium binary are licensed to you solely as part of that binary, for running Hexium Browser. Redistribution of the binary must keep this `BINARY-LICENSE.md`, Chromium notices, and must not strip corresponding source obligations that Chromium’s licenses already require.
+
+## No warranty
+
+THE BINARY IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.

hexium_browser-0.1.0/CHANGELOG.md

@@ -0,0 +1,53 @@
+# Changelog
+
+All notable changes to Hexium Browser — wrapper and binary — are documented here.
+
+Changes are tagged: **[wrapper]** for the Python package, **[binary]** for Chromium patches, **[docs]** for this repo’s markdown.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning is [SemVer](https://semver.org/) while this tree is **0.1.x alpha**.
+
+---
+
+## [Unreleased]
+
+---
+
+## [0.1.0] — 2026-09-13
+
+**Alpha.** First Hexium Browser ship: Playwright `launch()` in, Google Chrome **151.0.7922.174** out. Persistent disk profiles, C++ personas, GeoIP, humanize. No JS fingerprint injectors. Python-only; [.NET](https://github.com/HeadlessXLabs/hexium-browser/issues/1), [npm](https://github.com/HeadlessXLabs/hexium-browser/issues/2), [Go](https://github.com/HeadlessXLabs/hexium-browser/issues/3), and [Rust](https://github.com/HeadlessXLabs/hexium-browser/issues/4) are tracked as What’s next.
+
+### [binary]
+
+- Chromium **151.0.7922.174.1** (engine product). Web identity is four-part **151.0.7922.174** (User-Agent and UA-CH `fullVersion` / brand list). Desktop UA-CH `model` is empty.
+- Named persona presets:
+  - **`linux-native`** — Linux default. Host GPU, fonts, screen, CPU.
+  - **`windows-native`** — Windows default. Host pass-through (not a sampled D3D GPU).
+  - **`macos-native`** — macOS default (alias `mac-native`). Host pass-through. No `macos-chrome`.
+  - **`linux-chrome`** — Linux Chrome 151 UA; host GPU/fonts; sampled screen/CPU/RAM.
+  - **`windows-chrome`** — Win32 + sampled D3D11 WebGL + Segoe pack (alias `windows-1080p`). Opt-in on Linux.
+- A `*-native` name that does not match the host OS remaps to that host’s native preset.
+- `--hexium-fingerprint=off` — fingerprint surface pass-through (P0 automation stealth stays on).
+- Canvas LSB noise **off** unless `--hexium-noise=on`.
+- GeoIP overlays (`--hexium-timezone=`, `--hexium-locale=`, `--hexium-webrtc-ip=`) apply after the named preset. Locale tags keep the region (`en-PK`); `--lang` uses a Chrome 151 language pack the binary actually ships (e.g. `en-GB` for commonwealth English).
+- Windows UA-CH `platformVersion` is Chrome 151 reduced form: **10.0.0** (Win10) or **15.0.0** (Win11). Never UniversalApiContract **19.0.0**. Frozen UA still says `Windows NT 10.0` for both (stock Chrome).
+- Known: Linux `windows-chrome` can show BrowserScan **WebGL exception −5%** (D3D11 name vs host pixels). Not claimed fixed. Score-max on a Linux host is `linux-native`.
+
+### [wrapper]
+
+- `from hexium_browser import launch` — drop-in Playwright Chromium launch. `launch_persistent_context` only (real user-data-dir, not Incognito).
+- Bare `launch()` mints `~/.hexium/profiles/hexium-session-*` and a new fingerprint. `profile="Work"` / `HEXIUM_USER_DATA_DIR` / `fingerprint="account-1"` stick.
+- CLI: `hexium-browser info`, `fetch`, `profiles` (`new` / `use` / `last`).
+- Auto-download linux-x64 from `https://headlessx.dev/api/download` (pin with `HEXIUM_VERSION`). `HEXIUM_BINARY_PATH` / `$HEXIUM_OUT` win when set.
+- `humanize=True` by default — Bézier mouse, per-character typing, scroll. Virtual mouse pointer follows CDP moves; pass `show_cursor=False` on stealth oracles (DOM tell).
+- GeoIP **on by default** (`pip install -e '.[geoip]'`). Egress IP → timezone, `navigator.languages`, WebRTC mask IP. Explicit `timezone=` / `locale=` win. Without the extra, launch continues; timezone stays sampled UTC.
+- `windows-chrome` on Linux: fontconfig jail + Segoe pack (`HEXIUM_FONTS_DIR` or engine bundle). Incomplete pack warns once (`HEXIUM_SUPPRESS_FONT_WARNING=1`). Headless WebGPU flags only for that persona.
+- Sampled `linux-chrome` / `windows-chrome` write `persona.json` next to the profile; natives do not.
+- SOCKS5 and HTTP(S) proxies, including `user:pass@host:port`.
+
+### [docs]
+
+- README quickstart, [Usage](docs/USAGE.md), [persona pages](docs/persona/README.md), CONTRIBUTING, SUPPORT, SECURITY, CLAUDE.md.
+- Oracle captures (12 Sep 2026): reCAPTCHA v3 demo **0.9**, BrowserScan bot **Normal**, DABI human, sannysoft WebDriver missing.
+
+[Unreleased]: https://github.com/HeadlessXLabs/hexium-browser/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/HeadlessXLabs/hexium-browser/releases/tag/v0.1.0