Puppeteer with antidetect browser profiles

// Launch one XDLogin profile, attach Puppeteer, look at a page, then detach.
//
//   XDLOGIN_PROFILE_ID=<id> node node/puppeteer-launch.mjs [url] [--stop]
//
// XDLOGIN_BASE_URL  API address (default http://127.0.0.1:31337)
// XDLOGIN_API_KEY   only if you set a key in Settings > API & Auto
// --stop            stop the profile afterwards instead of leaving it running
import puppeteer from 'puppeteer-core';
import { setTimeout as sleep } from 'node:timers/promises';

const BASE = (process.env.XDLOGIN_BASE_URL || 'http://127.0.0.1:31337').replace(/\/+$/, '');
const KEY = process.env.XDLOGIN_API_KEY;
const PROFILE = (process.env.XDLOGIN_PROFILE_ID || '').trim();
const args = process.argv.slice(2);
const STOP = args.includes('--stop');
const TARGET = args.find((a) => !a.startsWith('--')) || 'https://example.com';

async function api(method, path) {
  let res;
  try {
    res = await fetch(BASE + path, { method, headers: KEY ? { Authorization: `Bearer ${KEY}` } : {} });
  } catch (err) {
    throw new Error(`Can't reach the XDLogin API at ${BASE} (${err.cause?.code ?? err.message}). ` +
      'In XDLogin: Settings > API & Auto > Start API.');
  }
  if (res.status === 401) {
    throw new Error('401 Unauthorized: set XDLOGIN_API_KEY to the key in Settings > API & Auto, or unset it if no key is set.');
  }
  const json = await res.json().catch(() => ({}));
  return { code: res.status, ...json };
}

async function launch(id) {
  const r = await api('POST', `/api/profiles/${encodeURIComponent(id)}/launch`);
  if (r.code !== 200) throw new Error(`Launch failed: ${r.error ?? `HTTP ${r.code}`}`);
}

// /connect answers 409 until Chrome is ready. It also answers 409 when the
// profile is not running, does not exist or uses the built-in engine, so stop
// waiting after a while and show the reason.
async function connectInfo(id, timeoutMs = 30_000) {
  const deadline = Date.now() + timeoutMs;
  for (;;) {
    const r = await api('GET', `/api/profiles/${encodeURIComponent(id)}/connect`);
    if (r.code === 200) return r.data;
    if (r.code !== 409 || Date.now() > deadline) {
      throw new Error(`No DevTools endpoint: ${r.error ?? `HTTP ${r.code}`}`);
    }
    await sleep(500);
  }
}

async function main() {
  if (!PROFILE) {
    throw new Error(`Set XDLOGIN_PROFILE_ID to a profile id. List them with: curl ${BASE}/api/profiles`);
  }

  await launch(PROFILE);          // brings the window forward if it is already running
  const info = await connectInfo(PROFILE);
  console.log(`Attached to ${info.browser} at ${info.debuggerAddress}`);

  // defaultViewport: null keeps the profile's own window and screen size.
  // Puppeteer's default (800x600) would override them on every page.
  const browser = await puppeteer.connect({ browserWSEndpoint: info.wsEndpoint, defaultViewport: null });
  try {
    const page = await browser.newPage();   // a new tab in the profile, with its cookies
    await page.goto(TARGET, { waitUntil: 'domcontentloaded' });
    console.log('Title:', await page.title());
    console.log('The page sees:', await page.evaluate(() => ({
      userAgent: navigator.userAgent,
      platform: navigator.platform,
      timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
      screen: `${screen.width}x${screen.height}`,
    })));
    await page.close();
  } finally {
    // disconnect() leaves the profile running; browser.close() would shut its Chrome down.
    await browser.disconnect();
  }

  if (STOP) {
    const r = await api('POST', `/api/profiles/${encodeURIComponent(PROFILE)}/stop`);
    console.log(r.code === 200 ? 'Profile stopped.' : `Stop failed: ${r.error ?? `HTTP ${r.code}`}`);
  }
}

main().catch((err) => {
  console.error(err.message);
  process.exitCode = 1;
});