fix(browser): resource filter hang and double-dash stealth arg bug

- set_resource_filter now spawns a requestPaused handler that
  continues allowed requests and fails blocked ones; previously
  Fetch.enable intercepted every request with no handler, causing
  100% navigation timeouts (closes #9)
- browser.rs strips the '--' prefix before passing args to
  chromiumoxide's ArgsBuilder, which prepends '--' itself; the
  stealth arg --disable-blink-features=AutomationControlled was
  reaching Chrome as '----disable-blink-features=...' (closes #10)

Author: greysquirr3l

CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.9] - 2026-03-02
+
+### Fixed
+
+- `stygian-browser`: `set_resource_filter` previously called `Fetch.enable` but never subscribed to `Fetch.requestPaused` events, causing Chrome to intercept and hang every network request indefinitely — navigation always timed out when a resource filter was active. A background task now processes each paused event: blocked resource types receive `Fetch.failRequest(BlockedByClient)`, all others receive `Fetch.continueRequest` (closes [#9](https://github.com/greysquirr3l/stygian/issues/9))
+- `stygian-browser`: Chrome launch arguments including `--disable-blink-features=AutomationControlled` were being passed with a double-dash prefix (`----arg`) because chromiumoxide's `ArgsBuilder` prepends `--` to every key and stygian was also including the `--` in the string. The arg builder in `browser.rs` now strips the `--` prefix before handing each argument to chromiumoxide, so the stealth flag reaches Chrome correctly (closes [#10](https://github.com/greysquirr3l/stygian/issues/10))
+
 ## [0.1.8] - 2026-03-02
 
 ### Changed
@@ -163,7 +170,8 @@ Both crates are functional and well-tested, but APIs may evolve based on communi
 
 ---
 
-[Unreleased]: https://github.com/greysquirr3l/stygian/compare/v0.1.8...HEAD
+[Unreleased]: https://github.com/greysquirr3l/stygian/compare/v0.1.9...HEAD
+[0.1.9]: https://github.com/greysquirr3l/stygian/compare/v0.1.8...v0.1.9
 [0.1.8]: https://github.com/greysquirr3l/stygian/compare/v0.1.7...v0.1.8
 [0.1.7]: https://github.com/greysquirr3l/stygian/compare/v0.1.6...v0.1.7
 [0.1.6]: https://github.com/greysquirr3l/stygian/compare/v0.1.5...v0.1.6

Cargo.lock

@@ -6,7 +6,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.1.8"
+version = "0.1.9"
 edition = "2024"
 rust-version = "1.93.1"
 authors = ["Nick Campbell <s0ma@protonmail.com>"]

Cargo.toml

@@ -98,7 +98,10 @@ impl BrowserInstance {
         }
 
         for arg in &args {
-            builder = builder.arg(arg.as_str());
+            // chromiumoxide's ArgsBuilder prepends "--" when formatting args, so
+            // we strip any existing "--" prefix first to avoid "----arg" in Chrome.
+            let stripped = arg.strip_prefix("--").unwrap_or(arg.as_str());
+            builder = builder.arg(stripped);
         }
 
         if let Some((w, h)) = config.window_size {

crates/stygian-browser/src/browser.rs

@@ -190,6 +190,9 @@ pub struct PageHandle {
     /// HTTP status code of the most recent main-frame navigation, or `0` if not
     /// yet captured.  Written atomically by the listener spawned in `navigate()`.
     last_status_code: Arc<AtomicU16>,
+    /// Background task processing `Fetch.requestPaused` events. Aborted and
+    /// replaced each time `set_resource_filter` is called.
+    resource_filter_task: Option<tokio::task::JoinHandle<()>>,
 }
 
 impl PageHandle {
@@ -199,6 +202,7 @@ impl PageHandle {
             page,
             cdp_timeout,
             last_status_code: Arc::new(AtomicU16::new(0)),
+            resource_filter_task: None,
         }
     }
 
@@ -430,19 +434,30 @@ impl PageHandle {
 
     /// Set a resource filter to block specific network request types.
     ///
-    /// **Note:** Requires Network.enable; called automatically.
+    /// Enables `Fetch` interception and spawns a background task that continues
+    /// allowed requests and fails blocked ones with `BlockedByClient`. Any
+    /// previously set filter task is cancelled first.
     ///
     /// # Errors
     ///
     /// Returns a [`BrowserError::CdpError`] if the CDP call fails.
     pub async fn set_resource_filter(&mut self, filter: ResourceFilter) -> Result<()> {
-        use chromiumoxide::cdp::browser_protocol::fetch::{EnableParams, RequestPattern};
+        use chromiumoxide::cdp::browser_protocol::fetch::{
+            ContinueRequestParams, EnableParams, EventRequestPaused, FailRequestParams,
+            RequestPattern,
+        };
+        use chromiumoxide::cdp::browser_protocol::network::ErrorReason;
+        use futures::StreamExt as _;
 
         if filter.is_empty() {
             return Ok(());
         }
 
-        // Both builders are infallible — they return the struct directly (not Result)
+        // Cancel any previously running filter task.
+        if let Some(task) = self.resource_filter_task.take() {
+            task.abort();
+        }
+
         let pattern = RequestPattern::builder().url_pattern("*").build();
         let params = EnableParams::builder()
             .patterns(vec![pattern])
@@ -460,7 +475,33 @@ impl PageHandle {
                 message: e.to_string(),
             })?;
 
+        // Subscribe to requestPaused events and dispatch each one so navigation
+        // is never blocked. Without this handler Chrome holds every intercepted
+        // request indefinitely and the page hangs.
+        let mut events = self
+            .page
+            .event_listener::<EventRequestPaused>()
+            .await
+            .map_err(|e| BrowserError::CdpError {
+                operation: "Fetch.requestPaused subscribe".to_string(),
+                message: e.to_string(),
+            })?;
+
+        let page = self.page.clone();
         debug!("Resource filter active: {:?}", filter);
+        let task = tokio::spawn(async move {
+            while let Some(event) = events.next().await {
+                let request_id = event.request_id.clone();
+                if filter.should_block(event.resource_type.as_ref()) {
+                    let params = FailRequestParams::new(request_id, ErrorReason::BlockedByClient);
+                    let _ = page.execute(params).await;
+                } else {
+                    let _ = page.execute(ContinueRequestParams::new(request_id)).await;
+                }
+            }
+        });
+
+        self.resource_filter_task = Some(task);
         Ok(())
     }