agent-browser v0.1.1 (portable server binaries)

Fixes the standalone MCP server executables so they no longer depend on the build host's absolute playwright-core path.

The release packaging now embeds Playwright metadata during compilation and tests the extracted archive after removing access to the build tree.

Verification:

• macOS arm64: native relocation test, --version, MCP initialize, and all 32 tools listed
• Linux x64: cross-compiled with the same checked transform; native runtime test unavailable on the release host
• Windows x64: cross-compiled with the same checked transform; native runtime test unavailable on the release host

agent-browser v0.1.0 (server binaries)

Single-file MCP server executables (bun --compile), packaged by scripts/package-server-binary.mjs with .sha256 sidecars.

Patched Chromium 148.0.7778.215 (revision 1)

The browser agent-browser downloads on first use. This is not a release of the
server itself — it is the browser binary the server refuses to run without.

Built from the fingerprint-chromium
patch series against Chromium 148.0.7778.215. The patches remove automation tells in
C++ rather than by injecting JavaScript, which is itself the loudest tell.

Asset

Platform	macOS arm64
File	chromium-148.0.7778.215-darwin-arm64.tar.gz
Size	153,777,682 bytes (367 MB extracted)
sha256	9ed1752f4223767d05a84b64c8ac3a11c6589fe3cabcf0c2fc7ea5a0912253d6

macOS arm64 is the only platform published. On anything else the server refuses to
start rather than silently falling back to a stock Chromium, which would lose every
guarantee below without telling you; build it yourself and pass --binary.

The archive is reproducible: scripts/package-binary.mjs pipes tar into gzip -n, so
re-packaging an unchanged bundle yields this same sha256 and you can verify the asset
yourself. The checksum is verified before extraction. It is a .tar.gz rather than a .zip
because the app bundle contains symlinks — including
Chromium Framework.framework/Versions/Current — plus executable bits, and a naive zip
extractor breaks the bundle silently. The build is adhoc, linker-signed with no Team
ID, so the server also strips com.apple.quarantine after extracting.

Measured

Driven through agent-browser, launched the way it launches:

Suite	This build	Real Chrome 150 headless
navigator.webdriver	false	false
Headless in the user agent	no	yes
bot.sannysoft.com	0 failed	3 failed
deviceandbrowserinfo are_you_a_bot	isBot: false, 0 of 22 signals	isBot: true, 3 signals
iphey.com	Trustworthy, nothing flagged	Unreliable
CreepJS headless	0%	67%
CreepJS stealth	0%	0%
browserscan.net/bot-detection	Normal, 0 abnormal of 19	—
nowsecure.nl (real Cloudflare)	passes	—

isPlaywright: false and isAutomatedWithCDP: false, so the driver underneath is not
visible either. Reproduce with node scripts/detection-check.mjs.