@ai-ecoverse/slicc-browsers 1.1.0 → 1.3.0

package/protected.json

@@ -0,0 +1,141 @@
+{
+  "schema": 1,
+  "origins": ["http://127.0.0.1:5710", "https://seven.example.test"],
+  "urls": [
+    { "url": "https://seven.sliccy.ai/", "protected": true },
+    { "url": "https://seven.sliccy.ai", "protected": true },
+    { "url": "https://seven.sliccy.ai/index.html?x=1#y", "protected": true },
+    { "url": "https://SEVEN.SLICCY.AI/", "protected": true },
+    { "url": "https://seven.sliccy.ai:443/", "protected": true },
+    { "url": "https://seven.sliccy.ai:8443/", "protected": true },
+    { "url": "http://seven.sliccy.ai/", "protected": true },
+    { "url": "https://main--seven.sliccy.ai/", "protected": true },
+    { "url": "https://www.sliccy.ai/", "protected": true },
+    { "url": "https://sliccy.ai/", "protected": true },
+    { "url": "https://a.b.sliccy.ai/", "protected": true },
+    { "url": "https://seven.sliccy.ai./", "protected": true },
+    { "url": "https://user:secret@seven.sliccy.ai/", "protected": true },
+    { "url": "https:\\\\seven.sliccy.ai\\x", "protected": true },
+    { "url": "  https://seven.sliccy.ai/  ", "protected": true },
+    { "url": "ht\ttps://seven.sli\nccy.ai/", "protected": true },
+    { "url": "https:seven.sliccy.ai", "protected": true },
+    { "url": "https:///seven.sliccy.ai/", "protected": true },
+    { "url": "https://seven%2Esliccy%2Eai/", "protected": true },
+    { "url": "https://seven\u3002sliccy\u3002ai/", "protected": true },
+    { "url": "https://\uff53\uff45\uff56\uff45\uff4e.sliccy.ai/", "protected": true },
+    { "url": "https://se\u00adven.sliccy.ai/", "protected": true },
+    {
+      "url": "blob:https://seven.sliccy.ai/0b9e0f6c-1f0e-4c1a-9a43-5d3f6e2c7a10",
+      "protected": true
+    },
+    { "url": "filesystem:https://seven.sliccy.ai/temporary/notes.txt", "protected": true },
+    { "url": "view-source:https://seven.sliccy.ai/", "protected": true },
+    { "url": "view-source:blob:https://seven.sliccy.ai/0b9e0f6c", "protected": true },
+    {
+      "url": "devtools://devtools/bundled/inspector.html?ws=127.0.0.1:5711/devtools/page/AB12",
+      "protected": true
+    },
+    { "url": "http://127.0.0.1:5710/", "protected": true },
+    { "url": "http://127.0.0.1:5710", "protected": true },
+    { "url": "http://2130706433:5710/", "protected": true },
+    { "url": "http://0x7f.1:5710/", "protected": true },
+    { "url": "blob:http://127.0.0.1:5710/0b9e0f6c", "protected": true },
+    { "url": "https://seven.example.test/", "protected": true },
+    { "url": "https://SEVEN.example.test:443/x", "protected": true },
+    { "url": "https://seven.example.test./", "protected": true },
+    { "url": "http://localhost:5710/", "protected": false },
+    { "url": "http://127.0.0.1:5711/", "protected": false },
+    { "url": "https://127.0.0.1:5710/", "protected": false },
+    { "url": "http://127.0.0.1/", "protected": false },
+    { "url": "http://seven.example.test/", "protected": false },
+    { "url": "https://seven.example.test:8443/", "protected": false },
+    { "url": "https://x.seven.example.test/", "protected": false },
+    { "url": "https://example.test/", "protected": false },
+    { "url": "https://sliccy.ai.example.com/", "protected": false },
+    { "url": "https://notsliccy.ai/", "protected": false },
+    { "url": "https://seven.sliccy.ai.example/", "protected": false },
+    { "url": "https://sliccy.aix/", "protected": false },
+    { "url": "https://sliccy-ai.example/", "protected": false },
+    { "url": "https://example.com/?next=https://seven.sliccy.ai/", "protected": false },
+    { "url": "https://example.com/#https://seven.sliccy.ai/", "protected": false },
+    { "url": "https://seven.sliccy.ai@example.com/", "protected": false },
+    { "url": "wss://seven.sliccy.ai/", "protected": false },
+    { "url": "ftp://seven.sliccy.ai/", "protected": false },
+    { "url": "http://5173.kernel.localhost/", "protected": false },
+    { "url": "http://seven.sliccy.ai.kernel.localhost/", "protected": false },
+    { "url": "https://example.com/", "protected": false },
+    { "url": "about:blank", "protected": false },
+    { "url": "about:srcdoc", "protected": false },
+    { "url": "data:text/html,<a href=https://seven.sliccy.ai/>x</a>", "protected": false },
+    { "url": "blob:null/0b9e0f6c", "protected": false },
+    { "url": "blob:https://example.com/0b9e0f6c", "protected": false },
+    { "url": "filesystem:https://example.com/temporary/x", "protected": false },
+    { "url": "view-source:https://example.com/", "protected": false },
+    { "url": "javascript:location='https://seven.sliccy.ai/'", "protected": false },
+    { "url": "chrome://version/", "protected": false },
+    { "url": "chrome-extension://abcdefghijklmnopabcdefghijklmnop/page.html", "protected": false },
+    { "url": "file:///tmp/seven.sliccy.ai/index.html", "protected": false },
+    { "url": "", "protected": false },
+    { "url": "https://", "protected": false },
+    { "url": "seven.sliccy.ai", "protected": false },
+    { "url": "not a url", "protected": false }
+  ],
+  "targets": [
+    { "url": "https://seven.sliccy.ai/", "protected": true },
+    { "url": "https://example.com/", "protected": false },
+    { "url": "https://example.com/", "previous": true, "protected": false },
+    { "url": "https://example.com/", "opener": "protected", "protected": false },
+    { "url": "about:blank", "protected": false },
+    { "url": "about:blank", "opener": "unprotected", "protected": false },
+    { "url": "about:blank", "opener": "protected", "protected": true },
+    { "url": "about:blank", "opener": "unknown", "protected": true },
+    { "url": "about:blank", "previous": true, "protected": true },
+    { "url": "about:blank", "previous": true, "opener": "unprotected", "protected": true },
+    { "url": "about:blank#top", "previous": true, "protected": true },
+    { "url": "about:blank?x=1", "opener": "protected", "protected": true },
+    { "url": "about:srcdoc", "previous": true, "protected": true },
+    { "url": "about:srcdoc", "opener": "unprotected", "protected": false },
+    { "url": "", "opener": "protected", "protected": true },
+    { "url": "", "protected": false },
+    { "url": "about:version", "previous": true, "protected": false },
+    { "url": "data:text/html,x", "previous": true, "protected": false },
+    { "url": "blob:https://seven.sliccy.ai/0b9e0f6c", "protected": true },
+    { "url": "devtools://devtools/bundled/devtools_app.html", "protected": true },
+    { "url": "http://127.0.0.1:5710/index.html", "protected": true },
+    { "url": "http://127.0.0.1:5711/index.html", "previous": true, "protected": false }
+  ],
+  "cookieDomains": [
+    { "domain": "sliccy.ai", "protected": true },
+    { "domain": ".sliccy.ai", "protected": true },
+    { "domain": "seven.sliccy.ai", "protected": true },
+    { "domain": ".www.sliccy.ai", "protected": true },
+    { "domain": "SLICCY.AI", "protected": true },
+    { "domain": "sliccy.ai.", "protected": true },
+    { "domain": "a.b.sliccy.ai", "protected": true },
+    { "domain": "127.0.0.1", "protected": true },
+    { "domain": "seven.example.test", "protected": true },
+    { "domain": ".example.test", "protected": true },
+    { "domain": "x.seven.example.test", "protected": false },
+    { "domain": "other.example.test", "protected": false },
+    { "domain": "notsliccy.ai", "protected": false },
+    { "domain": "sliccy.ai.example", "protected": false },
+    { "domain": "localhost", "protected": false },
+    { "domain": "5173.kernel.localhost", "protected": false },
+    { "domain": "example.com", "protected": false },
+    { "domain": "", "protected": false },
+    { "domain": ".", "protected": false }
+  ],
+  "storageKeys": [
+    { "key": "https://seven.sliccy.ai/", "protected": true },
+    { "key": "https://sliccy.ai/", "protected": true },
+    { "key": "http://127.0.0.1:5710/", "protected": true },
+    { "key": "https://widget.example/^0https://sliccy.ai", "protected": true },
+    { "key": "https://seven.sliccy.ai/^31", "protected": true },
+    { "key": "https://seven.sliccy.ai/^112345^267890", "protected": true },
+    { "key": "https://example.com/", "protected": false },
+    { "key": "https://example.com/^0https://example.org", "protected": false },
+    { "key": "https://example.com/^112345^2https://sliccy.ai", "protected": false },
+    { "key": "http://127.0.0.1:5711/", "protected": false },
+    { "key": "", "protected": false }
+  ]
+}

package/protected.mjs

@@ -0,0 +1,77 @@
+const parse = (text) => {
+  try {
+    return new URL(text);
+  } catch {
+    return null;
+  }
+};
+
+const scheme = (u) => u.protocol.slice(0, -1);
+
+const hostOf = (u) => {
+  const h = u.hostname.toLowerCase();
+  return h.endsWith('.') ? h.slice(0, -1) : h;
+};
+
+const originOf = (u) => {
+  if (!u?.host) return null;
+  return `${scheme(u)}://${hostOf(u)}${u.port ? `:${u.port}` : ''}`;
+};
+
+const under = (host, domain) => host === domain || host.endsWith(`.${domain}`);
+
+export function protectedOrigins(rules, extraOrigins = []) {
+  const extra = extraOrigins.map((o) => originOf(parse(o))).filter(Boolean);
+  const extraHosts = extraOrigins
+    .map((o) => parse(o))
+    .filter((u) => u?.host)
+    .map(hostOf);
+
+  const unwrap = (u) => {
+    for (let i = 0; u && rules.innerSchemes.includes(scheme(u)) && i < 8; i += 1) {
+      u = parse(u.href.slice(u.protocol.length));
+    }
+    return u;
+  };
+
+  const url = (text) => {
+    const u = unwrap(parse(text));
+    if (!u) return false;
+    const s = scheme(u);
+    if (rules.anySchemes.includes(s)) return true;
+    if (rules.schemes.includes(s) && rules.domains.some((d) => under(hostOf(u), d))) return true;
+    const o = originOf(u);
+    return o !== null && extra.includes(o);
+  };
+
+  const inheriting = (text) => {
+    if (text === '') return true;
+    const u = parse(text);
+    return (
+      u !== null &&
+      scheme(u) === 'about' &&
+      rules.inheriting.includes(`about:${u.pathname.toLowerCase()}`)
+    );
+  };
+
+  const target = ({ url: text, previous = false, opener }) => {
+    if (inheriting(text)) return previous || opener === 'protected' || opener === 'unknown';
+    return url(text);
+  };
+
+  const cookieDomain = (domain) => {
+    let d = domain.toLowerCase();
+    if (d.startsWith('.')) d = d.slice(1);
+    if (d.endsWith('.')) d = d.slice(0, -1);
+    if (d === '') return false;
+    if (rules.domains.some((x) => under(d, x))) return true;
+    return [...rules.domains, ...extraHosts].some((h) => under(h, d));
+  };
+
+  const storageKey = (key) => {
+    const [first, ...rest] = key.split('^');
+    return [first, ...rest.filter((p) => p.startsWith('0')).map((p) => p.slice(1))].some(url);
+  };
+
+  return { url, target, cookieDomain, storageKey };
+}

package/schema/browsers.schema.json

@@ -17,7 +17,7 @@
       "properties": {
         "id": { "$ref": "#/$defs/text" },
         "kind": { "enum": ["endpoint", "installed"] },
-        "tier": { "type": "integer", "minimum": 1, "maximum": 5 },
+        "tier": { "type": "integer", "minimum": 1, "maximum": 6 },
         "name": { "type": "string" },
         "version": { "$ref": "#/$defs/text" },
         "endpoint": { "$ref": "#/$defs/endpoint" },
@@ -28,10 +28,15 @@
           "properties": {
             "kind": { "const": "endpoint" },
             "id": { "type": "string", "pattern": "^cdp:" },
-            "tier": { "enum": [1, 2] }
+            "tier": { "enum": [1, 2, 6] }
           },
           "required": ["endpoint"],
-          "not": { "required": ["installed"] }
+          "not": { "required": ["installed"] },
+          "if": { "properties": { "tier": { "const": 6 } } },
+          "then": { "properties": { "endpoint": { "type": "object", "required": ["six"] } } },
+          "else": {
+            "properties": { "endpoint": { "type": "object", "not": { "required": ["six"] } } }
+          }
         },
         {
           "properties": {
@@ -68,6 +73,7 @@
         "userDataDir": { "$ref": "#/$defs/text" },
         "profile": { "$ref": "#/$defs/text" },
         "wsOnly": { "const": true },
+        "six": { "const": true },
         "sevenOpen": { "type": "boolean" },
         "sevenTabs": { "type": "array", "items": { "$ref": "#/$defs/tab" } }
       }

package/schema/catalog.schema.json

@@ -12,6 +12,7 @@
     "rank",
     "discovery",
     "seven",
+    "protectedOrigins",
     "profiles",
     "launch",
     "platforms"
@@ -54,13 +55,14 @@
         "tiers": {
           "type": "object",
           "additionalProperties": false,
-          "required": ["sevenOpen", "endpoint", "chrome", "chromium", "electron"],
+          "required": ["sevenOpen", "endpoint", "chrome", "chromium", "electron", "six"],
           "properties": {
             "sevenOpen": { "$ref": "#/$defs/tier" },
             "endpoint": { "$ref": "#/$defs/tier" },
             "chrome": { "$ref": "#/$defs/tier" },
             "chromium": { "$ref": "#/$defs/tier" },
-            "electron": { "$ref": "#/$defs/tier" }
+            "electron": { "$ref": "#/$defs/tier" },
+            "six": { "$ref": "#/$defs/tier" }
           }
         },
         "chromeId": { "$ref": "#/$defs/id" }
@@ -168,16 +170,63 @@
         "cleanExit": { "type": "array", "items": { "$ref": "#/$defs/pref" } }
       }
     },
+    "protectedOrigins": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["domains", "schemes", "innerSchemes", "anySchemes", "inheriting", "refusal"],
+      "properties": {
+        "domains": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$"
+          }
+        },
+        "schemes": { "$ref": "#/$defs/schemes", "type": "array", "minItems": 1 },
+        "innerSchemes": { "$ref": "#/$defs/schemes" },
+        "anySchemes": { "$ref": "#/$defs/schemes" },
+        "inheriting": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "type": "string", "pattern": "^about:[a-z]+$" }
+        },
+        "refusal": { "$ref": "#/$defs/name" }
+      }
+    },
     "profiles": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["root", "snapRoot", "legacyRoot", "sixProfilePattern", "namePattern"],
+      "required": ["root", "snapRoot", "legacyRoot", "sixProfilePattern", "namePattern", "six"],
       "properties": {
         "root": { "$ref": "#/$defs/segments" },
         "snapRoot": { "$ref": "#/$defs/segments" },
         "legacyRoot": { "$ref": "#/$defs/segments" },
         "sixProfilePattern": { "type": "string", "format": "regex" },
-        "namePattern": { "type": "string", "format": "regex" }
+        "namePattern": { "type": "string", "format": "regex" },
+        "six": {
+          "description": "SLICC six's Chrome profiles, used in place and never written to.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["roots", "defaultName", "defaultPort", "portSuffix", "userDataDirEnv"],
+          "properties": {
+            "roots": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["macos", "linux", "windows"],
+              "properties": {
+                "macos": { "$ref": "#/$defs/sixRoot" },
+                "linux": { "$ref": "#/$defs/sixRoot" },
+                "windows": { "$ref": "#/$defs/sixRoot" }
+              }
+            },
+            "defaultName": { "$ref": "#/$defs/name" },
+            "defaultPort": { "$ref": "#/$defs/port" },
+            "portSuffix": { "type": "string", "pattern": "\\{port\\}" },
+            "userDataDirEnv": { "$ref": "#/$defs/name" }
+          }
+        }
       }
     },
     "launch": {
@@ -244,6 +293,11 @@
   "$defs": {
     "name": { "type": "string", "minLength": 1 },
     "names": { "type": "array", "items": { "$ref": "#/$defs/name" } },
+    "schemes": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "type": "string", "pattern": "^[a-z][a-z0-9+.-]*$" }
+    },
     "id": { "type": "string", "pattern": "^[a-z0-9]+(-[a-z0-9]+)*$" },
     "segments": {
       "description": "A relative path, one segment per item.",
@@ -253,7 +307,7 @@
     },
     "port": { "type": "integer", "minimum": 1, "maximum": 65535 },
     "ports": { "type": "array", "items": { "$ref": "#/$defs/port" } },
-    "tier": { "type": "integer", "minimum": 1, "maximum": 5 },
+    "tier": { "type": "integer", "minimum": 1, "maximum": 6 },
     "form": { "enum": ["six", "chrome-154"] },
     "pref": {
       "type": "object",
@@ -265,6 +319,16 @@
         "form": { "$ref": "#/$defs/form" }
       }
     },
+    "sixRoot": {
+      "description": "A base location, then path segments under it.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["base", "path"],
+      "properties": {
+        "base": { "$ref": "#/$defs/location" },
+        "path": { "$ref": "#/$defs/segments" }
+      }
+    },
     "location": {
       "description": "An environment variable, else a dir under the home dir or an absolute path.",
       "type": "object",

package/schema/corpus.schema.json

@@ -46,7 +46,8 @@
               "process",
               "probe",
               "origins",
-              "installed"
+              "installed",
+              "six"
             ]
           }
         },
@@ -55,7 +56,7 @@
           "type": "object",
           "propertyNames": {
             "type": "string",
-            "pattern": "^\\{(home|config|sevenProfiles|userData:[a-z0-9-]+)\\}/[^\\\\]+$"
+            "pattern": "^\\{(home|config|sevenProfiles|sixProfiles|userData:[a-z0-9-]+)\\}/[^\\\\]+$"
           },
           "additionalProperties": { "type": "string" }
         },
@@ -99,6 +100,10 @@
         "installed": {
           "type": "array",
           "items": { "$ref": "browsers.schema.json#/$defs/installed" }
+        },
+        "auto": {
+          "description": "With needs six: the id of the first entry that isn't six's, or null.",
+          "type": ["string", "null"]
         }
       }
     }

package/schema/protected.schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/ai-ecoverse/slicc-browsers/schema/protected.schema.json",
+  "title": "slicc-browsers protected-origin test vectors, schema 1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "origins", "urls", "targets", "cookieDomains", "storageKeys"],
+  "properties": {
+    "schema": { "const": 1 },
+    "origins": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "urls": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["url", "protected"],
+        "properties": {
+          "url": { "type": "string" },
+          "protected": { "type": "boolean" }
+        }
+      }
+    },
+    "targets": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["url", "protected"],
+        "properties": {
+          "url": { "type": "string" },
+          "previous": { "type": "boolean" },
+          "opener": { "enum": ["protected", "unprotected", "unknown"] },
+          "protected": { "type": "boolean" }
+        }
+      }
+    },
+    "cookieDomains": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["domain", "protected"],
+        "properties": {
+          "domain": { "type": "string" },
+          "protected": { "type": "boolean" }
+        }
+      }
+    },
+    "storageKeys": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["key", "protected"],
+        "properties": {
+          "key": { "type": "string" },
+          "protected": { "type": "boolean" }
+        }
+      }
+    }
+  }
+}