5 Commits

Include renames

Author	SHA1	Message	Date
leeguooooo	d1fbdaadeb	chore(release): 0.27.0-fork.30 — stealth: navigator overrides on prototype, not instance ... rebrowser's navigatorWebdriver probe checks Object.getOwnPropertyNames(navigator) == [] (real Chrome keeps navigator members on Navigator.prototype). The launch-mode stealth script defined language/languages/userAgentData/contacts as instance own-properties, leaking them as an automation tell. - add __abRedefineNavProto(name, getterImpl): redefines a navigator member on the PROTOTYPE with a native-masked getter toString, then deletes any instance shadow (mirrors the existing vendor patch). Falls back to instance only if proto is locked. - convert language/languages/userAgentData to it; make the contacts block prototype-first. After: Object.getOwnPropertyNames(navigator) == [], values intact, getters native, rebrowser navigatorWebdriver 🟢, runtimeEnableLeak/pwInitScripts 🟢, sannysoft 0 fails.	2026-06-10 11:35:35 +09:00
leeguooooo	839aaa5586	chore(release): 0.27.0-fork.29 — plugin overflowTest fix, popup-free auto-connect, ab-connect rebrand+icon, README ... - stealth(plugins): stop overwriting real native navigator.plugins in headed mode (the JS fake had a non-native item(), broken uint32 wrap → incolumitas overflowTest FAIL, and an anachronistic Native Client plugin). Leave native plugins untouched when present; modernize the headless-escape fallback to the real 5 PDF-viewer set with masked-native item()/namedItem(). - connect: auto_connect_cdp() now prefers the dialog-free ab-connect relay over the raw :9222 CDP port, so Chrome 136+'s "Allow remote debugging?" consent modal no longer fires when the extension relay is live. Gated by a bare-TCP relay_is_live() probe (+3 unit tests). - extension: rename ab-connect to "agent-browser-stealth" + new stealth icon set (16/32/48/128). - docs(README): hero/shield/fingerprint images, expanded detector results (CreepJS 0% stealth, incolumitas all-OK, BrowserScan CDP-clean), and a "Verify it yourself" section. .gitignore: allow assets/ + extension icons.	2026-06-10 11:17:41 +09:00
leeguooooo	6b99d304b1	feat(stealth): shrink detectable surface — lazy Runtime.enable, native timezone/WebRTC, opt-in canvas noise ... Borrow anti-detection hardening from Scrapling/patchright, preferring native CDP/Chrome overrides over JS lies: - Runtime.enable is now opt-in via AGENT_BROWSER_CAPTURE_CONSOLE (default off). It was called on every session INCLUDING CdpAttach (the user's real Chrome), leaking the patchright/rebrowser "runtime" CDP signal and undermining the "real browser, no lies" guarantee. Runtime.evaluate/callFunctionOn and runIfWaitingForDebugger work without it; only console/error capture needs it. The console/errors commands now return a hint when capture is disabled. - Timezone alignment via native Emulation.setTimezoneOverride, opt-in with AGENT_BROWSER_TIMEZONE=<IANA>|auto (FullLaunch only). Intl and Date both follow with no JS artifact. - WebRTC IP-leak handling via the --force-webrtc-ip-handling-policy Chrome flag: auto disable_non_proxied_udp when a proxy is set (so the real IP can't leak past the proxy); AGENT_BROWSER_BLOCK_WEBRTC=1 hides the local IP when there is no proxy; =0 opts out. - Opt-in canvas/audio fingerprint noise via AGENT_BROWSER_HIDE_CANVAS=1 (FullLaunch only). Session-stable seed so reads stay consistent within a session while differing from the headless-stable hash. Adds 5 unit tests; full suite 751 passed, 0 failed.	2026-06-04 13:28:34 +09:00
leeguooooo	7a1ca90416	fix(stealth): webdriver = false (not undefined) — never delete the property ... The webdriver patch deleted navigator.webdriver, leaving it `undefined`. Real Chrome reports `false`, so `undefined` is itself a detection tell, and deleting it also removes the native `false` that Emulation.setAutomationOverride sets. Now we rely on setAutomationOverride for a native (undetectable) `false` and only force `false` via a getter as a fallback when webdriver is still `true` (older Chrome without that override) — never delete it. Verified: FullLaunch headless now reports navigator.webdriver === false (boolean), consistently.	2026-06-01 13:41:49 +09:00
leeguoooooandClaude Opus 4.6	77616a209c	feat(stealth): inject anti-detection patches in native Rust architecture ... - Created cli/src/native/stealth.rs with stealth JS injection via CDP - Extracted 32 patch IIFEs from TS stealth.ts into stealth_scripts.js - Injected via Page.addScriptToEvaluateOnNewDocument on every launch/connect - Added stealth Chrome args (disable AutomationControlled, use ANGLE GL) - Auto-detects and cleans HeadlessChrome from User-Agent string - Overrides navigator.userAgentData high-entropy hints - Stealth enabled by default, disable with AGENT_BROWSER_STEALTH=0 Track 2 of native-stealth migration. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-05-08 23:47:50 +09:00