@ai-ecoverse/slicc-bios 1.51.10 → 1.51.12

package/README.md

@@ -408,6 +408,8 @@ Programs in the kernel drive a browser over the Chrome DevTools Protocol: `playw
 - **Requests from protected documents:** a request whose URL, document, frame, initiator, `Referer` or `Origin` is protected never reaches the program. The guard continues its `Fetch` pause itself, drops its `Network` events, and refuses its bodies (`Network.getResponseBody`, `getRequestPostData`, `Fetch.getResponseBody` and the like). Bodies, `replayXHR` and `Fetch` replies for a request the guard hasn't seen are refused too. Extra-info events that come before their request wait up to 2 s for it, then are dropped.
 - **Flat sessions only:** `Target.attachToTarget` and `Target.setAutoAttach` need `flatten: true`. `Target.sendMessageToTarget`, `Target.attachToBrowserTarget` and `Target.exposeDevToolsProtocol` are refused, so no command can be tunnelled past the guard.
 
+- **Known limit:** extensions that refuse `Target.setAutoAttach` (including 7.6.x) leave an ordinary page with a cross-site iframe locked for paint, DOM, CSS, accessibility and input. The guard fails closed when it cannot place the child.
+
 **Sign-in tabs are held for life (#754).** A sign-in popup shows its token or code in its URL and on the IdP's pages, and the guard can't scrub a page's own content. So the owner tab holds every sign-in tab from the moment it opens. A held tab is never listed, attached, auto-attached or reported to a program on any origin, until it closes. Its events, `urlFragment` included, never reach the program.
 - **Seven's own sign-in:** the popup opens on `about:blank#slicc-sign-in-<nonce>`. bios asks the owner over the `slicc-held` BroadcastChannel to hold it. The owner finds that target by its marker URL on each browser host (slicc-extension), holds it, and only then is the popup sent to the IdP. The owner answers `held` once it has held the tab on every listed host, `none` when no host is listed, and `unheld` otherwise, including when a listed host can't be opened. On `unheld`, on `none` while bios sees a host, or on no answer within 6 s while a host is connected, the sign-in stops before the IdP and says so; it never goes on unheld. On `none`, the sign-in goes on, and the owner keeps it as in flight for 11 minutes (in `localStorage`, `slicc-os.sign-in-flight`, so a reload keeps it). Before any program gets a browser connection, the owner sweeps every host: it holds sign-in tabs still on `about:blank`, and while a sign-in is in flight, every page a protected page opened. So a host that connects in the middle of a sign-in never sees its tab.
 - **The guard decides by itself, too:** a page that a held tab opened is held, on any URL, and so are its own popups in turn, and so are the frames and workers of a held tab (`parentId`). A page seven (or another protected page) opened with opener access (`canAccessOpener`), or that is still on `about:blank`, is held the first time any guard sees it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-bios",
-  "version": "1.51.10",
+  "version": "1.51.12",
   "description": "Slim loader that boots SLICC into OPFS and serves the UI from there",
   "type": "module",
   "license": "Apache-2.0",

package/src/packages/package-lock.json

@@ -11,7 +11,7 @@
         "@ai-ecoverse/slicc-capture": "1.4.1",
         "@ai-ecoverse/slicc-kernel": "1.170.0",
         "@ai-ecoverse/slicc-spectrum": "1.107.2",
-        "@ai-ecoverse/wasi-fnox": "1.41.0-1",
+        "@ai-ecoverse/wasi-fnox": "1.42.0-1",
         "@ai-ecoverse/wasi-pnpm": "12.9.1-21",
         "@ai-ecoverse/wasm-bash": "5.3.0-23",
         "@ai-ecoverse/wasm-coreutils": "9.12.0-15",
@@ -155,9 +155,9 @@
       }
     },
     "node_modules/@ai-ecoverse/wasi-fnox": {
-      "version": "1.41.0-1",
-      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasi-fnox/-/wasi-fnox-1.41.0-1.tgz",
-      "integrity": "sha512-76b3bd5lKTbKtCXIHklOLU0nrKQvKqw3r7gyotZQrjSj5HuJ3YxUODViOIav5cxGH+u/C45/Fo9S97tshlOEeg==",
+      "version": "1.42.0-1",
+      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasi-fnox/-/wasi-fnox-1.42.0-1.tgz",
+      "integrity": "sha512-bDnoliLYijXxOj1KA5PQ1MulgI9bfFEQ8muP5/8B52xRbnsWcMkXGNq+48A/2tvDLR2qk3MhgQRVr8Y+qnJjjw==",
       "license": "MIT",
       "engines": {
         "slicc-kernel": ">=1.83.0"

package/src/packages/package.json

@@ -8,7 +8,7 @@
     "@ai-ecoverse/slicc-capture": "1.4.1",
     "@ai-ecoverse/slicc-kernel": "1.170.0",
     "@ai-ecoverse/slicc-spectrum": "1.107.2",
-    "@ai-ecoverse/wasi-fnox": "1.41.0-1",
+    "@ai-ecoverse/wasi-fnox": "1.42.0-1",
     "@ai-ecoverse/wasi-pnpm": "12.9.1-21",
     "@ai-ecoverse/wasm-bash": "5.3.0-23",
     "@ai-ecoverse/wasm-coreutils": "9.12.0-15",

package/src/packages/pnpm-lock.yaml

@@ -24,8 +24,8 @@ importers:
         specifier: 1.107.2
         version: 1.107.2
       '@ai-ecoverse/wasi-fnox':
-        specifier: 1.41.0-1
-        version: 1.41.0-1
+        specifier: 1.42.0-1
+        version: 1.42.0-1
       '@ai-ecoverse/wasi-pnpm':
         specifier: 12.9.1-21
         version: 12.9.1-21
@@ -109,8 +109,8 @@ packages:
     resolution: {integrity: sha512-zN4kW/Ss8X9sAbszs2uwv1dO4UpSfqWutd8Sc4BD3EfmUekYJcPSsqVuKzlkhPtIBlWDVpQu/pgLDYPzQ3r+PA==}
     engines: {node: '>=24'}
 
-  '@ai-ecoverse/wasi-fnox@1.41.0-1':
-    resolution: {integrity: sha512-76b3bd5lKTbKtCXIHklOLU0nrKQvKqw3r7gyotZQrjSj5HuJ3YxUODViOIav5cxGH+u/C45/Fo9S97tshlOEeg==}
+  '@ai-ecoverse/wasi-fnox@1.42.0-1':
+    resolution: {integrity: sha512-bDnoliLYijXxOj1KA5PQ1MulgI9bfFEQ8muP5/8B52xRbnsWcMkXGNq+48A/2tvDLR2qk3MhgQRVr8Y+qnJjjw==}
     engines: {slicc-kernel: '>=1.83.0'}
 
   '@ai-ecoverse/wasi-pnpm@12.9.1-21':
@@ -272,7 +272,7 @@ snapshots:
 
   '@ai-ecoverse/slicc-spectrum@1.107.2': {}
 
-  '@ai-ecoverse/wasi-fnox@1.41.0-1': {}
+  '@ai-ecoverse/wasi-fnox@1.42.0-1': {}
 
   '@ai-ecoverse/wasi-pnpm@12.9.1-21': {}