Configuration

The default Bundle configuration is in cordis.patch.yml.

Setting	Default	Description
`headless`	`true`	Run Chromium without a visible window
`humanize`	`true`	Enable CloakBrowser humanized interactions
`humanPreset`	`default`	`default` or `careful` behavior preset
`geoip`	`auto`	Automatically derive locale/timezone when `proxyEnv` is set; accepts `true` or `false` overrides
`proxyEnv`	`CLOAKBROWSER_PROXY_URL`	Name of the environment variable containing the proxy URL
`persistentProfileRoot`	empty	Root for hashed per-Agent persistent profiles
`fingerprintSeed`	empty	Empty derives a stable, hashed per-Agent seed automatically; an explicit seed overrides it
`fingerprintNoise`	`false`	Disable injected canvas/WebGL/audio/client-rect noise; this removed five CreepJS lies in the documented test
`fingerprintWindowsFontMetrics`	`false`	Enable Chromium 148+ Windows font metrics; requires a real Windows font set on Linux
`allowThirdPartyCookies`	`false`	Chromium 148+ compatibility switch for embedded reCAPTCHA/SSO/payment flows
`fingerprintStorageQuotaMb`	`0`	Optional storage quota override; `0` keeps the upstream automatic value
`viewportWidth`, `viewportHeight`	`0`, `0`	Optional matching viewport and fingerprint screen size; `0` keeps safer automatic handling
`allowedDomains`	`[]`	Empty permits public hosts; supports exact and `*.example.com` patterns
`blockedDomains`	`[]`	Host patterns denied before the allowlist
`blockPrivateNetworks`	`true`	Block explicit localhost, private, link-local, and reserved IP URLs
`maxPages`	`5`	Maximum tabs per Agent session
`actionTimeoutMs`	`15000`	Ordinary Playwright action timeout
`typingTimeoutMs`	`90000`	Longer timeout for deliberately slow humanized typing
`navigationTimeoutMs`	`30000`	Navigation timeout
`maxSnapshotElements`	`100`	Maximum refs returned by a snapshot
`maxTextChars`	`12000`	Maximum returned page/extraction text
`autoSnapshot`	`true`	Include a fresh bounded snapshot in navigation and interaction results
`screenshotFormat`	`jpeg`	`jpeg` or `png`
`screenshotQuality`	`80`	JPEG quality
`routePrompt`	`true`	Install browser-selection guidance in the system prompt

For production automation, restrict navigations in your profile override:

- id: cloak-browser
  config:
    allowedDomains:
      - 'example.com'
      - '*.example.com'
    blockedDomains:
      - 'admin.example.com'
    persistentProfileRoot: '/var/lib/dsh/cloak-profiles'

Keep profile, fingerprint, proxy, timezone, and locale consistent for the same site identity. Never give an Agent your everyday Chrome profile.

dsh-cloak-browser

AI Analysis

Install

README

Configuration