j V ZUdZddlmZddlZddlZddlZddlmZmZddl m Z ddl m Z m Z mZmZddlmZdIdZdJdZddddddddddd Zded<dKd ZeZdddddd!dLd*ZGd+d,eZdMd0ZdNd2ZdOd3Zdd4lmZdd5l m!Z!eGd6d7Z"dd8d8ddddd9dd: dPdHZ#dS)QzDirect-launch helpers shared by the Playwright wrapper and the profile manager: write a user.js from a prefs dict, and build the subprocess env the patched binary reads at startup. No Playwright, no Qt.) annotationsN) dataclassfield)Path)AnyDictListOptional) DESKTOP_ENVnamestrvrreturncJt|tr|rdndSt|trt|St|ttfr!t jt|Std|dt|j d)u9Serialize a pref value the way Firefox's prefs parser accepts it. Firefox prefs are int / bool / string only - there is no float pref type; a fractional value (e.g. device-pixel-ratio) is stored as a STRING and the float pref parses it back. ``json.dumps`` would emit a bare ``1.25``, which Firefox rejects with ``prefs parse error: unexpected character`` and which invalidates every ``user_pref`` line after it. That is not hypothetical: ``ui.textScaleFactor`` written as a number once killed the browser on the second context, and the failure looked nothing like a prefs problem. ⛔ ANY OTHER TYPE IS REFUSED HERE, not written. ``None`` or a list came out as ``null`` / ``[...]``, the same parse error, and the Juggler client's own writer turned them into the string ``"None"`` instead - a pref that exists with a value nobody asked for. Neither occurs in what the core composes (bool, int and str over 300 seeds, measured when the writers became one); a caller's pref of another type is a mistake to say, at its birth. truefalsezpref z is a zK; Firefox prefs are bool, int or string (a fraction is written as a string)) isinstanceboolintrfloatjsondumps TypeErrortype__name__)r rs EC:\Projects\Muse2API\.venv\Lib\site-packages\invisible_core/launch.py _pref_literalrs$!T('vv'!S1vv !eS\"""z#a&&!!! )=ATT477CSCSCSU V VV profile_dir'str | os.PathLike[str]'prefsDict[str, Any]rct|}|dd|dz }d|D}|d|dzd|S)uAWrite ``prefs`` as ``user_pref(...)`` lines into ``/user.js``. Creates ``profile_dir`` if missing; overwrites any existing ``user.js``. ⛔ THE ONE WRITER, since 38.34.0. The Juggler client carried its own (`_write_user_js`), which every wrapper's launch went through, while this one served the direct launch: they agreed on the lines and differed on the bytes, because this one wrote in text mode and Windows turned every newline into CRLF. They became one when the client moved here (decision D85). ⛔ THE PREFS ARE WRITTEN, NOT SENT, and BEFORE the browser starts. Our fork removed prefs from the protocol - `Browser.enable` does not accept them - because a browser configured on the second launch was wrong on the first. The Python path once threw `firefoxUserPrefs` away and started Firefox on an empty profile: everything worked, every test was green, and every stealth declaration was absent. A closed shadow root made it visible, since the patch that reaches inside one is gated on a pref. ⛔ INSERTION ORDER, NO HEADER, LF ONLY, and the reason is one: the file has to match what Playwright's driver writes BYTE FOR BYTE (its `defaultArgs` uses `Object.keys()` and writes no comment), and the wrapper's `tests/gates/prefs_byte_parity.py` is the judge. Sorting produces a file that is equally correct and not identical, which that gate caught on its first real run. Bytes, not text: a text-mode write on Windows translates every newline, and a prefs file is read by the browser, not by git. Tparentsexist_okzuser.jsc fg|].\}}dtj|dt||d/S)z user_pref(z, z);)rrr).0krs r z!write_user_js..JsB ] ] ]tq! B$*Q-- B B=A+>+> B B B ] ] ]r zutf-8)rmkdiritems write_bytesjoinencode)r r"doutliness r write_user_jsr5,s6 [AGGD4G((( i-C ] ]u{{}} ] ] ]EOOTYYu%%,44W==>>> JrEST5EDTCST6CDTMST7MDTPST8PDTMST7 AKST9AKDTHST10) zAmerica/New_YorkzAmerica/DetroitzAmerica/Indiana/IndianapoliszAmerica/Kentucky/LouisvillezAmerica/ChicagozAmerica/DenverzAmerica/Los_AngeleszAmerica/PhoenixzAmerica/AnchoragezPacific/HonoluluDict[str, str]_IANA_TO_POSIX_TZtimezonec8t||S)aThe value to put in ``TZ`` for an IANA zone. PUBLIC since 18.5.0. It was private, so the wrapper kept its own byte-identical copy of both this and the table - and the core's own comment admitted the table was "copied verbatim from the wrapper". A private name is not a reason to duplicate ten entries whose Phoenix row exists because getting it wrong made an identification service deduce the wrong origin timezone. )r>get)r?s rtz_envrB_s  8 4 44r)r?srflx_declared manifest_pathbase_env display_env Optional[str]rCrD"'Optional[str | os.PathLike[str]]'rEOptional[Dict[str, str]]rF"Optional[Dict[str, Optional[str]]]ct| tjn|}|rt||d<|#|dt ||dp|}|r ||d<d|d<|td|pi D]#\}} | ||d| ||<$|S)aSubprocess env for the patched binary - the ONE place that composes it. The wrapper's `_session.build_env` delegates here after verifying the font manifest against the executable; until 34.26.0 it was a twin of this body, and the hidden-surface half of the contract lived only in the twin, so a consumer on this builder could not express a removal at all. TZ tunes the libc clock. STEALTHFOX_WEBRTC_PUBLIC_IP feeds nICEr the proxy egress IP; an already-set value in base_env wins. STEALTHFOX_FONT_MANIFEST points the engine at the font manifest THIS package declares, and it has to be an env var rather than the pref of the same name: the font list is built during app startup, inside InitSharedFontListForPlatform, and on the Juggler path the caller's prefs never reach the profile at all - they travel over the wire and are applied by JS once the browser is already running. Measured 2026-08-08: removing a family from this package's copy changed nothing, because the pref read empty and the engine's own file won. An env var is set at process creation and inherited by every content process. It carries a PATH. The manifest is ~20 KB and an environment block is not the place for it. `manifest_path=None` writes no variable, which leaves the engine on its packaged copy - the floor a browser launched without this package still has to stand on. NTZSTEALTHFOX_FONT_MANIFESTSTEALTHFOX_WEBRTC_PUBLIC_IP1STEALTHFOX_WEBRTC_DISABLE_IPV6) dictosenviron_tz_env setdefaultrrApopr r.) r"r?rCrDrErFenv webrtc_ipr*rs rbuild_launch_envrYrs` X-rzz8 < z'verify_font_manifest..s 0 0 0qAF 0 0 0rch|]}|v| Sr_r_)r)fhaves rrhz'verify_font_manifest..s:::ATMM1MMMr) rparent splitlines startswithsplitlenappendis_diriterdirsorted)r`ra fonts_dir referencedlinepartsrks @rverify_font_manifestrysHV #g-IJ##%%,, ??4  ,JJsOOE5zzA~~%(~!!%(+++      t 0 0I--// 0 0 0D ::::j::: ; ;;r 'Path | None'cT|sdS|d}tj|dd}t dz }|dd|d|dz }|r*|jt|krqtd d g|vs Jd | d tj d }||tj|||S)aMaterialise `manifest` somewhere the engine can read it, once per content. The Playwright path does not own the profile directory - Playwright creates it - so the file cannot simply live beside the profile. Addressing it by the sha256 of its own bytes gives a stable path per manifest: launching a thousand sessions with the same core writes one file, and a session with a pinned manifest gets its own without disturbing the others. Nothing has to be cleaned up on teardown, which is the failure mode a per-session temp dir would introduce. Returns None for an empty manifest: the engine reads that as "use my own copy", and writing an empty file would say the same thing while looking like a configured one. NasciirdTr%z bundle-fonts-z.list il manifest ha terminazioni CRLF.z.tmp)r1hashlibsha256 hexdigest cache_rootr-is_filestatst_sizerpbytes with_suffixrRgetpidr/replace)r`rawdigestr2r3tmps rcached_font_manifest_pathrs t //' " "C ^C * * , ,SbS 1F wAGGD4G((( +f+++ +C ;;==CHHJJ.#c((::b"Xc)))+M)))oo3")++33344  3 Jrc|sdSt|}|dd|dz }|d}tddg|vs Jd|||S) aWrite `manifest` beside the profile and return its path, or None. Returns None for an empty manifest rather than writing an empty file: the engine treats an unreadable or empty source as "use my own copy", and an empty file would be an indistinguishable way of saying the same thing while looking like a configured one. Written as BYTES with an explicit ascii encode. `write_text` on Windows translates every newline to CRLF, and this project has already shipped a 30k-star repository a commit that was 48 additions and 48 deletions for a one-line change because of exactly that. The engine's parser splits on a bare newline. NTr%zbundle-fonts.listr|r~rr)rr-r1rr/)r r`r2r3rs rwrite_font_manifestrs t [AGGD4G((( ! !C //' " "C "b??# % % %'I % % %OOC Jr)r) SessionTokenc^eZdZUdZded<ded<ded<ded <ee Zd ed <d S) LaunchPlanz@Everything needed to spawn the patched Firefox for one identity.rrarr z List[str]argvr=rW)default_factoryr session_tokenN)rr\r]r^__annotations__rrrr_rrrr8sbJJKKKOOO #(% "E"E"EMEEEEEErrauto) proxyr?localepin binary_ver binary_path extra_argsurl show_cursorseedrrrrOptional[Dict[str, Any]]rrrOptional[List[str]]rrOptional[bool]c 2ddlm} ddlm} ddlm} ddlm}|rL|dpd dvrtd |rt|}n$t|r | |n | }| |||}| || }|||j |j|d | j}t|}t!||t#||jpd |}|ddt|g}|t'|pgz }| r|| t+j}t/||||||S)aThe single direct-launch entry point (no Playwright, no Qt). Give it a ``seed`` and a ``profile_dir`` (plus optionally a concrete ``proxy`` dict, ``timezone``/``locale`` - both default to ``"auto"`` and are resolved from the proxy egress - a ``pin`` and a ``binary_ver``); it resolves geo, generates the fingerprint profile, translates it to prefs, writes ``user.js`` into ``profile_dir``, and returns the binary path + argv + env. Any direct-launch consumer uses this so the session-setup logic lives in one place (mirrors the wrapper's __aenter__) - the profile manager did, until its 2026-08-18 deletion. ``proxy`` must already be a concrete endpoint dict (SOCKS/HTTP), not an intent. r ) ensure_binary)generate_profile)prepare_session_geo)compose_session_prefsserverr)rz direct://aBbuild_launch_plan() cannot take a proxy: it starts the binary directly, so there is no protocol connection to send the engine's proxy command on, and a browser launched without the proxy it was given announces one country and connects from another. Drive the proxy through invisible_playwright, which holds the connection.)rrT)rr?rsurvive_hard_killrN)r?rCz -no-remotez-profile)rar rrWr)downloadr_fpforger_georr"rrAstriplower ValueErrorrrr?rr5rYsrflx_to_declarelistrqrmintrstamp)rr rr?rrrrrrrrrrrrageofpr"pdirrWrtokens rbuild_launch_planrGsh('''''******)))))),,,,,, O%))H%%+2244::<*>*@*@ B B BC L*c$ii 8DD!r " ""D  C    E VD++c**% A A AAr)r rrrrr)r r!r"r#rr)r?rrr)r"r#r?rGrCrGrDrHrErIrFrJrr=)r`rrar!rrb)r`rrrz)r r!r`rrrz)rrr r!rrIr?rrrrrrrGrrGrrrrrrrr)$r^ __future__rrrrR dataclassesrrpathlibrtypingrrr r _headlessr rr5r>rrBrTrY RuntimeErrorr[ryrrrrprocessrrrr_rrrs:::#"""""  ((((((((,,,,,,,,,,,,""""""VVVV8    L%.$-$-$-$-$-$-$*$/$+ % %     5 5 5 5  #%)8<)-7;+FFFFFFTOOOOO<OOO0<0<0<0