release: v0.3.11 — Linux build 145.0.7632.159.3

- Version bump: 0.3.10 → 0.3.11 (Python + JS)
- Linux Chromium: 145.0.7632.159.2 → 159.3
- CHANGELOG: v0.3.11 entry
- README: patch count 26→31, humanize docs
- bin/cloakserve: use --remote-debugging-address, remove socat
- Dockerfile: remove socat dependency

bin/cloakserve

@@ -9,7 +9,6 @@ Usage:
 Connect from host:
     playwright.chromium.connect_over_cdp("http://localhost:9222")
 """
-import os
 import signal
 import subprocess
 import sys
@@ -18,15 +17,14 @@ import time
 from cloakbrowser.config import get_default_stealth_args
 from cloakbrowser.download import ensure_binary
 
-EXPOSE_PORT = 9222   # External, 0.0.0.0 (user connects here)
-CHROME_PORT = 9223   # Internal, 127.0.0.1 (Chrome binds here)
+PORT = 9222
 
 binary = ensure_binary()
 
 chrome_args = [
     binary,
-    f"--remote-debugging-port={CHROME_PORT}",
-    # "--remote-debugging-address=0.0.0.0",  # TODO: enable after binary patch 032
+    f"--remote-debugging-port={PORT}",
+    "--remote-debugging-address=0.0.0.0",
     # Sane defaults for running Chrome directly (outside Playwright)
     "--no-first-run",
     "--no-default-browser-check",
@@ -37,33 +35,19 @@ chrome_args = [
     "--metrics-recording-only",
 ] + get_default_stealth_args() + sys.argv[1:]
 
-# Launch Chrome
 chrome = subprocess.Popen(chrome_args)
 
-# Wait for Chrome to start listening
 time.sleep(2)
 
-# Forward 0.0.0.0:9222 -> 127.0.0.1:9223
-# Chrome hardcodes 127.0.0.1 for security; socat exposes it to Docker network.
-# TODO: Remove socat after patching binary to support --remote-debugging-address
-socat = subprocess.Popen([
-    "socat",
-    f"TCP-LISTEN:{EXPOSE_PORT},fork,reuseaddr,bind=0.0.0.0",
-    f"TCP:127.0.0.1:{CHROME_PORT}",
-])
-
-print(f"CloakBrowser CDP server ready on port {EXPOSE_PORT}", flush=True)
+print(f"CloakBrowser CDP server ready on port {PORT}", flush=True)
 
 
 def cleanup(sig, frame):
     chrome.terminate()
-    socat.terminate()
     sys.exit(0)
 
 
 signal.signal(signal.SIGTERM, cleanup)
 signal.signal(signal.SIGINT, cleanup)
 
-# Wait for Chrome to exit, then clean up socat
 chrome.wait()
-socat.terminate()