rustcloak — a tiny Rust/Tauri profile manager on top of the CloakBrowser engine

[izzipizzy]

Hi CloakHQ team 👋 — first, thanks for shipping a source-level patched engine instead of yet another JS-injection stealth wrapper. I built a small desktop tool around it and wanted to share, plus pass back a few concrete findings.

What it is

rustcloak — a Rust + Tauri (Svelte) desktop GUI to manage many isolated browser profiles, using the CloakBrowser binary as the engine. Source (MIT): https://github.com/izzipizzy/rustcloak — think a lightweight AdsPower/Dolphin-style launcher. (Not affiliated; it downloads your official binary, doesn't redistribute it.)

What it does

• Profiles: each = its own --user-data-dir + fingerprint --fingerprint=<seed> + optional proxy. Open manually or drive via CDP (--remote-debugging-port).
• One-click engine setup: downloads the official build straight from your GitHub releases (cloakbrowser-<platform>.tar.gz), verifies it against SHA256SUMS, extracts, strips the macOS quarantine xattr. Daily update check via the releases API.
• Auto geo by exit IP: resolves the proxy's (or direct) exit IP and sets timezone/locale to match — using --fingerprint-timezone, --lang, --accept-lang, --fingerprint-locale. Or set them manually from a searchable list.
• Clone profiles without sharing fingerprints (fresh seed per clone), while keeping logins — see note #3 below.
• Per-profile disk size + cache cleanup (keeps cookies/history), bulk default-extensions, crash-safe atomic extraction.

A few findings / small feedback (maybe useful)

1. macOS locale: on the macOS 145 build, --lang (and even --fingerprint-locale) alone did not change navigator.language — it stayed at the system locale. Adding --accept-lang was what actually flipped navigator.language/navigator.languages. Might be worth documenting the required flag combo (or making --fingerprint-locale sufficient on macOS).
2. macOS patch parity: the macOS build is at 26 patches / Chromium 145 vs 58 / 146 on Linux+Windows. CreepJS/pixelscan are noticeably stricter on the macOS profiles. Any plans to close the gap?
3. navigator.geolocation: I couldn't find a flag to spoof it (only IP-geo follows the proxy). A --fingerprint-geolocation=lat,lon (matching the IP) would be great for parity with timezone/locale.
4. Stable unpacked-extension IDs: extensions loaded via --load-extension get path-derived IDs, so their storage breaks when a profile dir moves/clones. We work around it by extracting the developer key from the CRX and injecting manifest.key. A built-in option for this would help anyone doing multi-profile setups.
5. Update manifest: a small documented version endpoint (instead of scraping the releases API) would make update-checkers simpler.

Thanks again — happy to share more detail on any of the above if helpful. 🙏

[Cloak-HQ]

Thanks for building this — and for doing it the right way (downloading the official binary + verifying SHA256SUMS, not redistributing). rustcloak looks great.

Two of your findings are resolved in the new v148 macOS build (just shipped, Apple Silicon + Intel):

1. macOS locale — fixed. --fingerprint-locale alone now sets navigator.language, navigator.languages, and the Intl APIs on macOS; the --accept-lang workaround is no longer needed (verified on v148).
2. macOS patch parity — closed. The mac build is now 59 patches on Chromium 148 (was 26/145), matching Linux/Windows. CreepJS/pixelscan should be much closer — worth a re-run.

v148 is the Pro build — download/setup in the CloakBrowser Pro section of the README. Your auto-download flow may need a tweak for the license-key path.

On the rest: an IP-matched geolocation flag (#3), stable unpacked-extension IDs (#4), and a documented version endpoint (#5) are all good calls — noted. Thanks for the actionable feedback. 🙂