Optional Dependencies

The Docker image includes yt-dlp. For local dev, install it for the /youtube/transcript endpoint. Without it, the endpoint falls back to a slower browser-based method.

Docker

The included Makefile auto-detects your CPU architecture and pre-downloads Camoufox + yt-dlp binaries outside the Docker build, so rebuilds are fast (~30s vs ~3min).

```bash

Build and start (auto-detects arch: aarch64 on M1/M2, x86_64 on Intel)

make up

Force a clean rebuild (e.g. after upgrading VERSION/RELEASE)

make reset

Just download binaries (without building)

make fetch

Build and start

.\build.ps1 up

Build image only

.\build.ps1 build

Force a clean rebuild

.\build.ps1 reset

Download binaries only (without building)

.\build.ps1 fetch

Install Railway CLI, then:

railway link railway up

Set secrets via the Railway dashboard or CLI:

3. Check the commit matches what CI deployed

https://github.com/jo-inc/camofox-browser/actions/workflows/telemetry-deploy.yml

git log --oneline workers/crash-reporter/index.ts | head -1

If the hashes don't match, the endpoint is running different code than what's in the repo. The deploy workflow ([`.github/workflows/telemetry-deploy.yml`](.github/workflows/telemetry-deploy.yml)) injects the commit and source hash at deploy time -- every deploy is auditable in [GitHub Actions](https://github.com/jo-inc/camofox-browser/actions/workflows/telemetry-deploy.yml).

Or skip verification entirely: `CAMOFOX_CRASH_REPORT_ENABLED=false` disables all telemetry, or point to [your own endpoint](#self-hosted-telemetry-endpoint) with `CAMOFOX_CRASH_REPORT_URL`.

#### Privacy

All reported data goes through paranoid anonymization ([`lib/reporter.js` L28-290](lib/reporter.js#L28-L290)) before leaving the process:

- **URLs** -- well-known public domains (Google, Amazon, Reddit, Cloudflare, etc.) are shown verbatim so we can identify which sites cause problems. Private/unknown domains are replaced with a stable HMAC hash (`site-a1b2c3d4`) -- same hash across reports for correlation, but not reversible to the original domain. Path segments become `*/*/*` (depth only). Query params become `?[3]` (count only). No keys, values, or path content is ever included.
- **File paths** -> stripped to filename only (`<path>/server.js`)
- **Tokens, secrets, API keys** -> `<token>`
- **IPs, emails, env vars** -> redacted
- **Docker/Fly machine IDs** -> `<id>`
- **Tab health** -- pure counters (crash count, error count, status code histogram). No page content, no URLs, no user data.

Duplicate issues are detected by stack signature and get a `+1` comment instead of a new issue.

Quick Start

Usage

Subprocess usage

Two subprocesses may be spawned: (1) the Camoufox browser engine (core functionality, lib/launcher.js), (2) yt-dlp for YouTube transcript extraction (optional, plugins/youtube/youtube.js). Both are isolated in dedicated files separate from route handlers.

Environment Variables

1. Ask the endpoint what code it's running

curl https://camofox-telemetry.askjo.workers.dev/source

Point to your own endpoint (see below)

export CAMOFOX_CRASH_REPORT_URL=https://your-endpoint.example.com/report

API

OpenClaw Plugin

openclaw plugins install @askjo/camofox-browser

Tools: camofox_create_tab | camofox_snapshot | camofox_click | camofox_type | camofox_navigate | camofox_scroll | camofox_screenshot | camofox_close_tab | camofox_list_tabs | camofox_import_cookies

2. Compare the sha256 against the source in this repo

sha256sum workers/crash-reporter/index.ts