Clark-Browser

Stealth4 Linux binary

Built on an AWS c7i.8xlarge runner with CLARK_BROWSER_TARGET=chrome. The tarball keeps the rollback headless_shell launcher while making chrome the primary Linux binary.

What changed

• Bumps the auto-download release pointer to chromium-v148.0.7778.96-stealth4, so fresh installs fetch this build.
• Defaults Linux sandboxes to a Linux-coherent profile unless a Windows font pack is explicitly configured.
• Adds profile/font-dir validation and Linux Fontconfig setup for bundled font profiles.
• Verifies direct Notification.permission === "default" plus permissions.query({ name: "notifications" }) === "prompt" in smoke coverage.
• Adds seeded Network Information values for navigator.connection (rtt, downlink, effectiveType, saveData).
• Adds opt-in WebRTC proxy-coherent policy using Chromium's non-proxied UDP disable switches.
• Documents WebGPU coherence: unsupported is intentional in the headless profile; if enabled, adapter identity must match the GPU profile.

Verification

• python3 -m pytest tests/test_imports.py -> 39 passed.
• c7 build completed ninja -C out/Default -j 32 chrome and packaged clark-browser-linux-x64.tar.gz.
• In-container Linux smoke passed all JS-surface checks, including notification, Linux font profile, network information, UA/UA-CH, WebGPU absence, and audio seed differential.
• Pulled package smoke passed for both chrome and rollback headless_shell launchers.
• WebRTC proxy smoke used a real local HTTP proxy; proxy-coherent mode exposed no private/local IPs and no non-proxy public route. The raw control gathered no candidates in the AWS Docker network, so the smoke reports that as a warning unless CLARK_WEBRTC_REQUIRE_RAW_CANDIDATES=1 is set.

Asset

• clark-browser-linux-x64.tar.gz
• SHA256: 30cca952d11d94ca3424ac184b100c88ba686bfb87f2aaf4668ac5767562bd67