Theseus Navigator — Silent Mode's Electron browser with the Ariadne resolver built in.
882de1654f
Cloudflare Bot Fight Mode / Turnstile flag 'UA claims Chrome but client hints don't confirm it' as bot. Electron's default sec-ch-ua reads 'Chromium';v='130', 'Not(A:Brand';v='99' — no 'Google Chrome' brand (that's closed-source Google branding open Chromium doesn't carry). Combined with a UA that's already stripped of the Electron token (stockChromeUA), the mismatch itself is the fingerprint. This is what whybitcoincash.com and other CF-fronted sites tripped on: server returned 503 to Theseus while returning 200 to any curl variant. Brave, Vivaldi and Opera solved this the same way — ship their own sec-ch-ua that INCLUDES Chrome-family brands so CF's allow-list catches them. New applyClientHintsSpoof() registers a session-wide onBeforeSendHeaders that rewrites the sec-ch-ua family on every outbound request: sec-ch-ua: 'Google Chrome';v=<major>, 'Chromium';v=<major>, 'Not?A_Brand';v='99' sec-ch-ua-full-version-list: same trio with real Chromium version sec-ch-ua-mobile: '?0' sec-ch-ua-platform: actual OS name (Windows / macOS / Linux) Major comes from process.versions.chrome so the story stays internally consistent — nothing to fingerprint from a Chrome/version mismatch. Runs alongside applyEmbedCookieShim which uses onHeadersReceived; the two hooks are separate so no listener collision. |
||
|---|---|---|
| bundled-addons | ||
| dev | ||
| docs | ||
| lib | ||
| nsis | ||
| scripts | ||
| snapshots | ||
| addon-inject-preload.js | ||
| addon-tab-preload.js | ||
| addon-update-pubkeys.js | ||
| addon-updater.js | ||
| addons-host.js | ||
| address-picker-preload.js | ||
| address-picker.html | ||
| approval-preload.js | ||
| approval.html | ||
| bcnr-origin.js | ||
| bcnr-preload.js | ||
| BROWSER-PROMPT.md | ||
| chrome.html | ||
| collision-preload.js | ||
| collision.html | ||
| DESIGN-integrated-wallet.md | ||
| DESIGN-password-manager.md | ||
| DESIGN-wallet-multi-account-amendment.md | ||
| downloads-preload.js | ||
| downloads.html | ||
| engine-picker-preload.js | ||
| engine-picker.html | ||
| error-preload.js | ||
| error.html | ||
| GOTCHAS.md | ||
| home-preload.js | ||
| home.html | ||
| link-status-preload.js | ||
| link-status.html | ||
| main.js | ||
| messages-preload.js | ||
| messages.html | ||
| package-lock.json | ||
| package.json | ||
| PACKAGING-PROMPT.md | ||
| PENDING.md | ||
| popover-preload.js | ||
| popover.html | ||
| preload.js | ||
| pw-fill-preload.js | ||
| pw-fill.html | ||
| README.md | ||
| RELEASE-HANDOFF.md | ||
| ROADMAP-identity-wallet.md | ||
| SESSION-PROMPT-identity-wallet.md | ||
| settings-preload.js | ||
| settings.html | ||
| sidebar-preload.js | ||
Theseus Navigator
The browser — the consumer face of the stack. Native .bch support with the
resolver built in, so a user installs one app instead of modifying their
operating system. Named for the thread through the labyrinth: the chain is the
thread.
Scope
- Electron shell (Chromium engine, no forking): tabs, address bar, history.
- In-process
.bchresolution — no system daemon, no NRPT, no OS trust-store changes; reusesbns.jsfrom the BNS repo as a library. - Record handling:
hrender,ipconnect,p/s3via in-app gateway,uredirect. - TLS via cert-verify hook (Electron
setCertificateVerifyProc) against the BNS root / on-chaintlsfingerprints — no OS store touched. - Provenance indicator: shows whether a page came from the chain / Sia / a direct server, with NFT category and record type — the decentralized padlock.
Status: not started
Build it in its own session/repo. The ready-to-paste brief is
BROWSER-PROMPT.md (a reference copy in this folder; canonical source is
D:\Dev\NameCoin\BROWSER-PROMPT.md — if they diverge, NameCoin wins). It points
here and reuses the resolver core. theseus.bch is registered and should
eventually serve the browser's own homepage over the protocol it implements.
Roadmap
BUILD-ROADMAP.md Stage 5.