deva-cloaklisted

# deva-cloak: stealth browser in the deva cloak container CloakBrowser is a custom-compiled Chromium with source-level fingerprint patches. Same Playwright API, different binary -- detection sites score it as a real browser because it is one. This image runs it **headed by default** on a virtual display, which passes checks that headless fails even with the patches. ## Am I in the cloak context? This skill only applies when the browser is actually present. ALWAYS run this check fresh -- never conclude from conversation context, a resumed session, or `$DEVA_CLOAK` alone (env markers can be scrubbed or stale; the binary is the ground truth): ```bash command -v cloakbrowser >/dev/null && cloakbrowser info --quick ``` If that fails, you are in the base or rust image -- there is no CloakBrowser here. (`DEVA_CLOAK=1` is baked into the cloak image as a convenience marker, but treat it as a hint, not the test.) Tell the user to relaunch with `deva.sh -p cloak <agent>`, or use the plain Playwright install (rust image) instead. Do not try to `npm install cloakbrowser` yourself; the binary is baked into the cloak image and a runtime install would download ~200MB and defeat the point. ## What is baked in - Wrapper + `playwright-core` live in `$CLOAK_APP_DIR` (`/opt/cloak`). - Chromium binary is pre-downloaded, cache at `/opt/cloakbrowser`, auto-update off -- fully offline, no network needed to launch. - Free binary = **Chromium 146** (58 fingerprint patches). No Pro license. G