@ai-ecoverse/slicc-browsers 1.18.21 → 1.19.0

package/README.md

@@ -7,7 +7,7 @@ The browser knowledge that SLICC's tools share. SLICC drives a real Chromium bro
 - which origins browser control must **never** touch, starting with seven's own origin and the vault;
 - how to prove that a CDP guard really keeps a client away from them.
 
-These programs can't share code, so they share data: one catalog, three sets of test vectors and their JSON schemas, published as a Go module, a Rust crate and an npm package at the same version.
+These programs can't share code, so they share data: one catalog, four sets of test vectors and their JSON schemas, published as a Go module, a Rust crate and an npm package at the same version.
 
 | who | uses it for |
 | --- | --- |
@@ -24,6 +24,7 @@ These programs can't share code, so they share data: one catalog, three sets of
 | [`corpus/`](corpus), `corpus.json` | discovery conformance cases: a fake machine each, with the ranked browser list it must produce |
 | [`protected.json`](protected.json), [`protected.mjs`](protected.mjs) | protected-origin test vectors, and a reference matcher in JavaScript |
 | [`guard-vectors.json`](guard-vectors.json) | the CDP scenarios every guard must pass |
+| [`debugger-stage1.json`](debugger-stage1.json) | shared Stage 1 debugger conformance data |
 | [`guard-runner.mjs`](guard-runner.mjs), [`guard-driver.mjs`](guard-driver.mjs), [`fixture-server.mjs`](fixture-server.mjs) | a reference runner for the guard vectors, its helpers, and the test server they run against |
 | [`schema/`](schema) | JSON Schema (2020-12) for each file above, and for the `--json` output of `slicc browsers` and `playwright-cli list` |
 
@@ -45,8 +46,8 @@ rank := c.Priority("chrome")
 
 The files are embedded, so nothing is read from disk at run time.
 - `Default()` parses the embedded catalog once and panics if it can't, which CI rules out; `Load()` returns the error instead, and `Parse(b)` reads another copy.
-- `Corpus()`, `Protected()` and `Guard()` return the vectors as typed structs.
-- `CatalogJSON()`, `CorpusJSON()`, `ProtectedJSON()`, `GuardVectorsJSON()` and the `…SchemaJSON()` functions return the raw files.
+- `Corpus()`, `Protected()`, `Guard()` and `DebuggerStage1()` return the vectors as typed structs.
+- `CatalogJSON()`, `CorpusJSON()`, `ProtectedJSON()`, `GuardVectorsJSON()`, `DebuggerStage1JSON()` and the `…SchemaJSON()` functions return the raw files.
 
 ### Rust
 
@@ -62,7 +63,7 @@ slicc-browsers = { version = "1", features = ["corpus"] }
 | --- | --- |
 | none | `CATALOG` and the schemas as `&str` constants, with no dependencies |
 | `serde` | typed `Catalog`, `catalog()`, `Catalog::browser` and `Catalog::priority` |
-| `corpus` | the vectors (`CORPUS`, `PROTECTED`, `GUARD_VECTORS`) and the modules `corpus`, `protected` and `guard`, for tests |
+| `corpus` | the vectors (`CORPUS`, `PROTECTED`, `GUARD_VECTORS`, `DEBUGGER_STAGE1`) and the modules `corpus`, `protected`, `guard` and `debugger_stage1`, for tests |
 
 Every feature builds for `wasm32-wasip1`. Keep `corpus` in `[dev-dependencies]` so it stays out of release builds.
 
@@ -79,7 +80,7 @@ import { protectedOrigins } from '@ai-ecoverse/slicc-browsers/protected.mjs';
 
 | export | what it is |
 | --- | --- |
-| `.`, `./catalog.json`, `./corpus.json`, `./protected.json`, `./guard-vectors.json` | the data |
+| `.`, `./catalog.json`, `./corpus.json`, `./protected.json`, `./guard-vectors.json`, `./debugger-stage1.json` | the data |
 | `./schema/<name>.schema.json` | the schemas |
 | `./protected.mjs` | the protected-origin matcher |
 | `./seven.mjs` | `isSevenLabel(seven, label)`: whether a `sliccy.ai` host label can be a seven instance |

package/catalog.json

@@ -642,7 +642,7 @@
   "seven": {
     "originScheme": "https",
     "originHostPattern": "^([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)\\.sliccy\\.ai$",
-    "excludedLabels": ["www", "vault", "vault-preview", "get", "mcpcat", "echo"],
+    "excludedLabels": ["vault", "vault-preview", "get", "mcpcat", "echo"],
     "excludedLabelPrefixes": ["vault-"],
     "sitePattern": "[*.]sliccy.ai",
     "switches": [

package/corpus.json

@@ -763,6 +763,11 @@
                   "id": "P1",
                   "url": "https://lars.sliccy.ai",
                   "title": "https://lars.sliccy.ai"
+                },
+                {
+                  "id": "P3",
+                  "url": "https://www.sliccy.ai",
+                  "title": "https://www.sliccy.ai"
                 }
               ],
               "tabs": [
@@ -2105,7 +2110,7 @@
     {
       "name": "seven-tabs",
       "case": {
-        "description": "sevenOpen needs a page target on https://<label>.sliccy.ai other than www; www, the apex, other schemes, nested labels and non-page targets don't count",
+        "description": "sevenOpen needs a page target on https://<label>.sliccy.ai, including www; excluded labels such as vault, the apex, other schemes, nested labels and non-page targets don't count",
         "needs": [
           "flag"
         ],
@@ -2180,6 +2185,13 @@
                 "url": "https://lars.sliccy.ai/",
                 "title": "worker",
                 "webSocketDebuggerUrl": "ws://127.0.0.1/devtools/page/T8"
+              },
+              {
+                "id": "T9",
+                "type": "page",
+                "url": "https://vault.sliccy.ai/",
+                "title": "vault",
+                "webSocketDebuggerUrl": "ws://127.0.0.1/devtools/page/T9"
               }
             ]
           },
@@ -2255,6 +2267,11 @@
                   "url": "https://lars.sliccy.ai",
                   "title": "https://lars.sliccy.ai"
                 },
+                {
+                  "id": "T2",
+                  "url": "https://www.sliccy.ai",
+                  "title": "https://www.sliccy.ai"
+                },
                 {
                   "id": "T6",
                   "url": "https://seven.sliccy.ai",
@@ -2264,14 +2281,14 @@
             }
           },
           {
-            "id": "cdp:127.0.0.1:9323",
+            "id": "cdp:127.0.0.1:9322",
             "kind": "endpoint",
             "tier": 1,
             "name": "Chrome",
             "version": "154.0.8037.98",
             "endpoint": {
-              "cdp": "http://127.0.0.1:9323",
-              "webSocketDebuggerUrl": "ws://127.0.0.1:9323/devtools/browser/s3",
+              "cdp": "http://127.0.0.1:9322",
+              "webSocketDebuggerUrl": "ws://127.0.0.1:9322/devtools/browser/s2",
               "name": "Chrome",
               "version": "154.0.8037.98",
               "product": "Chrome/154.0.8037.98",
@@ -2280,29 +2297,35 @@
               "sevenOpen": true,
               "sevenTabs": [
                 {
-                  "id": "V1",
-                  "url": "https://team-7.sliccy.ai",
-                  "title": "https://team-7.sliccy.ai"
+                  "id": "U1",
+                  "url": "https://www.sliccy.ai",
+                  "title": "https://www.sliccy.ai"
                 }
               ]
             }
           },
           {
-            "id": "cdp:127.0.0.1:9322",
+            "id": "cdp:127.0.0.1:9323",
             "kind": "endpoint",
-            "tier": 2,
+            "tier": 1,
             "name": "Chrome",
             "version": "154.0.8037.98",
             "endpoint": {
-              "cdp": "http://127.0.0.1:9322",
-              "webSocketDebuggerUrl": "ws://127.0.0.1:9322/devtools/browser/s2",
+              "cdp": "http://127.0.0.1:9323",
+              "webSocketDebuggerUrl": "ws://127.0.0.1:9323/devtools/browser/s3",
               "name": "Chrome",
               "version": "154.0.8037.98",
               "product": "Chrome/154.0.8037.98",
               "userAgent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.8037.98 Safari/537.36",
               "source": "flag",
-              "sevenOpen": false,
-              "sevenTabs": []
+              "sevenOpen": true,
+              "sevenTabs": [
+                {
+                  "id": "V1",
+                  "url": "https://team-7.sliccy.ai",
+                  "title": "https://team-7.sliccy.ai"
+                }
+              ]
             }
           }
         ]

package/debugger-stage1.json

@@ -0,0 +1,168 @@
+{
+  "schemaVersion": 1,
+  "methods": [
+    { "method": "Debugger.enable", "lifetime": "persistent", "admitted": true },
+    { "method": "Debugger.disable", "lifetime": "cleanup", "admitted": true },
+    { "method": "Debugger.resume", "lifetime": "pause-control", "admitted": true },
+    { "method": "Debugger.getScriptSource", "lifetime": "document", "admitted": false },
+    { "method": "Debugger.evaluateOnCallFrame", "lifetime": "document", "admitted": false },
+    {
+      "method": "Debugger.setInstrumentationBreakpoint",
+      "lifetime": "persistent",
+      "admitted": true
+    },
+    { "method": "Debugger.removeBreakpoint", "lifetime": "cleanup", "admitted": true },
+    {
+      "method": "Debugger.pause",
+      "lifetime": "document",
+      "admitted": false,
+      "ownedInstrumentationOnly": true
+    },
+    { "method": "Debugger.setBreakpoint", "lifetime": "persistent", "admitted": false },
+    { "method": "Debugger.setBreakpointByUrl", "lifetime": "persistent", "admitted": false },
+    { "method": "Debugger.stepInto", "lifetime": "document", "admitted": false },
+    { "method": "Debugger.stepOut", "lifetime": "document", "admitted": false },
+    { "method": "Debugger.stepOver", "lifetime": "document", "admitted": false },
+    {
+      "method": "DOMDebugger.setEventListenerBreakpoint",
+      "lifetime": "persistent",
+      "admitted": false
+    },
+    {
+      "method": "EventBreakpoints.setInstrumentationBreakpoint",
+      "lifetime": "persistent",
+      "admitted": false
+    },
+    {
+      "method": "Page.addScriptToEvaluateOnNewDocument",
+      "lifetime": "persistent",
+      "admitted": false
+    },
+    { "method": "Runtime.addBinding", "lifetime": "persistent", "admitted": false },
+    { "method": "Debugger.stage1Unknown", "lifetime": "unknown", "admitted": false }
+  ],
+  "rows": [
+    {
+      "id": "document-change-before-install",
+      "mode": "document-change-before-install",
+      "destination": "ordinary",
+      "expected": {
+        "admitted": true,
+        "published": true,
+        "installed": false,
+        "liveReads": true,
+        "released": true
+      },
+      "requires": [
+        "publishedPause",
+        "documentChange",
+        "noSourceInNewDocument",
+        "privateRescueAudit"
+      ]
+    },
+    {
+      "id": "stage2-methods-at-published-pause",
+      "mode": "stage2-refusal",
+      "destination": "ordinary",
+      "expected": { "admitted": false, "published": true, "forwarded": false, "released": true },
+      "requires": [
+        "publishedPause",
+        "getScriptSourceRefused",
+        "evaluateOnCallFrameRefused",
+        "privateRescueAudit"
+      ]
+    },
+    {
+      "id": "ordinary-install",
+      "mode": "install",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "converted": true, "liveReads": true, "released": true },
+      "requires": ["privateRescueAudit"]
+    },
+    {
+      "id": "holder-death",
+      "mode": "holder-death",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "converted": true, "liveReads": true, "released": true },
+      "requires": ["clientExit", "privateRescueAudit"]
+    },
+    {
+      "id": "session-loss",
+      "mode": "session-loss",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "converted": true, "liveReads": true, "released": true },
+      "requires": ["privateRescueAudit"]
+    },
+    {
+      "id": "worker-restart",
+      "mode": "worker-restart",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "converted": true, "liveReads": true, "released": true },
+      "requires": ["restartGuard", "privateRescueAudit"]
+    },
+    {
+      "id": "protected-seven-hop",
+      "mode": "protected-hop",
+      "destination": "seven",
+      "expected": { "admitted": true, "published": false, "committed": false, "released": true },
+      "requires": ["privateRescueAudit"]
+    },
+    {
+      "id": "protected-vault-hop",
+      "mode": "protected-hop",
+      "destination": "vault",
+      "expected": { "admitted": true, "published": false, "committed": false, "released": true },
+      "requires": ["privateRescueAudit"]
+    },
+    {
+      "id": "protected-error-page",
+      "mode": "protected-hop",
+      "destination": "seven",
+      "expected": { "admitted": true, "published": false, "committed": false, "released": true },
+      "requires": ["protectedErrorPage", "privateRescueAudit"]
+    },
+    {
+      "id": "late-foreign-world",
+      "mode": "late-foreign-world",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "published": false, "released": true },
+      "requires": ["extensionWorld", "privateRescueAudit"]
+    },
+    {
+      "id": "pending-protected-hop",
+      "mode": "pending-pause-hop",
+      "destination": "seven",
+      "expected": { "admitted": true, "published": false, "committed": false, "released": true },
+      "requires": ["pendingPauseGate", "privateRescueAudit"]
+    }
+  ],
+  "navigation": [
+    "navigate",
+    "href",
+    "replace",
+    "redirect",
+    "reload",
+    "history",
+    "bfcache",
+    "prerender"
+  ],
+  "leaseRefusals": [
+    "protected-top",
+    "protected-subframe",
+    "nested-protected-subframe",
+    "protected-world",
+    "foreign-extension-world",
+    "protected-worker",
+    "unplaced-frame",
+    "unplaced-world",
+    "unplaced-worker",
+    "incomplete-read"
+  ],
+  "rescueEvidence": {
+    "origin": "guard",
+    "noObserverResume": true,
+    "ownerUnchanged": true,
+    "generationUnchanged": true,
+    "deadlineUnchanged": true
+  }
+}

package/guard-driver.mjs

@@ -430,3 +430,16 @@ export function parseURL(value, base) {
 
 export const owned = (entries, tag) =>
   (entries ?? []).filter((entry) => typeof entry?.url === 'string' && entry.url.includes(tag));
+
+export const debuggerCleanup = (vector, step, phase) =>
+  ['E4.instrumentation', 'E4.event-listener'].includes(vector.id) &&
+  phase === 'trigger' &&
+  step.cdp === 'Debugger.resume';
+
+export const idleDebuggerCleanup = (vector, step, phase, out) =>
+  debuggerCleanup(vector, step, phase) &&
+  !out.ok &&
+  out.error?.message === 'Can only perform operation while paused.';
+
+export const debuggerPaused = (events, session) =>
+  events.some((event) => event.sessionId === session && event.method === 'Debugger.paused');

package/guard-runner.mjs

@@ -8,8 +8,11 @@ import { frameRead } from './frame-read.mjs';
 import {
   beacon,
   canary,
+  debuggerCleanup,
+  debuggerPaused,
   expand,
   hop,
+  idleDebuggerCleanup,
   inapplicable,
   isRefusal,
   knownOrigins,
@@ -683,7 +686,13 @@ class Execution {
       /timeout|timed out|no answer/i.test(String(out.error?.message ?? out.error));
     if (step.refusable) this.refused[step.refusal.name] = unanswered ? 'incomplete' : refused;
     if (unanswered) this.incomplete.push(`${step.refusal.name}: no answer`);
-    else if (step.refusable && !out.ok && !refused && !gone)
+    else if (
+      step.refusable &&
+      !out.ok &&
+      !refused &&
+      !gone &&
+      !idleDebuggerCleanup(this.vector, step, phase, out)
+    )
       this.errors.push(
         `${step.refusal.name} failed without a refusal: ${String(out.error?.message ?? out.error)}`
       );
@@ -895,7 +904,7 @@ class Execution {
         })
       );
     if (step.guess) return this.guess(step.guess, session);
-    if (step.cdp) return this.cdp(step, session);
+    if (step.cdp) return this.cdp(step, session, phase);
     if (step.page) return this.page(step, session, phase);
     throw new Error('Unknown step kind');
   }
@@ -965,7 +974,12 @@ class Execution {
     return { ok: true, result: attempts };
   }
 
-  async cdp(step, sessionId) {
+  async cdp(step, sessionId, phase) {
+    if (
+      debuggerCleanup(this.vector, step, phase) &&
+      !debuggerPaused(this.client.events.slice(this.eventStart), sessionId)
+    )
+      return { ok: true, result: { cleanup: 'never paused' } };
     if (step.cdp === 'Target.detachFromTarget') await sleep(this.delay);
     if (step.cdp === 'Target.setAutoAttach' && step.params?.autoAttach === false)
       this.cleanupEventStart = this.client.events.length;

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.18.21",
+  "setVersion": "1.19.0",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -15587,7 +15587,9 @@
           "cdp": "Page.enable"
         },
         {
-          "cdp": "Debugger.enable"
+          "cdp": "Debugger.enable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
           "cdp": "Debugger.setBreakpointByUrl",
@@ -15613,14 +15615,21 @@
           }
         },
         {
-          "cdp": "Debugger.disable"
+          "cdp": "Debugger.disable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         }
       ],
       "targets": ["seven", "vault", "vault-x", "apex"],
       "observe": {
+        "admissionRefused": {
+          "means": "the URL-condition method is refused on the ordinary control",
+          "dependsOn": [],
+          "check": { "registration": "any", "observer": "client" }
+        },
         "condition": {
           "means": "a beacon from the breakpoint condition evaluated in {target}/listener.js?n={tag}",
-          "dependsOn": ["refused.3"],
+          "dependsOn": [],
           "check": {
             "beacon": "{target}",
             "observer": "fixture"
@@ -15628,7 +15637,7 @@
         },
         "paused": {
           "means": "a Debugger.paused in {target}/listener.js?n={tag}",
-          "dependsOn": ["refused.3"],
+          "dependsOn": [],
           "check": {
             "any": [
               {
@@ -15671,9 +15680,10 @@
       "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step",
       "control": {
         "origin": "ordinary",
-        "via": "guard",
+        "via": "unguarded",
         "expected": {
-          "condition": true
+          "condition": true,
+          "admissionRefused": false
         }
       },
       "expected": {
@@ -15748,7 +15758,9 @@
           "cdp": "Page.enable"
         },
         {
-          "cdp": "Debugger.enable"
+          "cdp": "Debugger.enable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
           "cdp": "Debugger.setInstrumentationBreakpoint",
@@ -15776,17 +15788,21 @@
           "wait": 2000
         },
         {
-          "cdp": "Debugger.resume"
+          "cdp": "Debugger.resume",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
-          "cdp": "Debugger.disable"
+          "cdp": "Debugger.disable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         }
       ],
       "targets": ["seven", "vault", "vault-x", "apex"],
       "observe": {
         "paused": {
           "means": "a Debugger.paused before {target}/listener.js?n={tag}, which names a source map in its SourceMap header",
-          "dependsOn": ["refused.3"],
+          "dependsOn": [],
           "check": {
             "any": [
               {
@@ -15824,14 +15840,24 @@
             "served": "{target}/doc?n={tag}&listener=1",
             "observer": "fixture"
           }
+        },
+        "convertedPause": {
+          "means": "the guard converts the ordinary instrumentation pause to reason other",
+          "dependsOn": [],
+          "check": {
+            "event": "Debugger.paused",
+            "where": { "params": { "reason": "other" } },
+            "observer": "client"
+          }
         }
       },
       "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step",
       "control": {
         "origin": "ordinary",
-        "via": "guard",
+        "via": "unguarded",
         "expected": {
-          "paused": true
+          "paused": true,
+          "convertedPause": false
         }
       },
       "expected": {
@@ -15905,7 +15931,9 @@
           "cdp": "Page.enable"
         },
         {
-          "cdp": "Debugger.enable"
+          "cdp": "Debugger.enable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
           "cdp": "DOMDebugger.setEventListenerBreakpoint",
@@ -15933,17 +15961,21 @@
           "wait": 2000
         },
         {
-          "cdp": "Debugger.resume"
+          "cdp": "Debugger.resume",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
-          "cdp": "Debugger.disable"
+          "cdp": "Debugger.disable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         }
       ],
       "targets": ["seven", "vault", "vault-x", "apex"],
       "observe": {
         "paused": {
           "means": "a Debugger.paused in a window load listener, which only {target}/doc?n={tag}&listener=1 registers",
-          "dependsOn": ["refused.3"],
+          "dependsOn": [],
           "check": {
             "event": "Debugger.paused",
             "where": {
@@ -15964,14 +15996,20 @@
             "served": "{target}/doc?n={tag}&listener=1",
             "observer": "fixture"
           }
+        },
+        "admissionRefused": {
+          "means": "the listener breakpoint method is refused on the ordinary control",
+          "dependsOn": [],
+          "check": { "registration": "any", "observer": "client" }
         }
       },
       "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step",
       "control": {
         "origin": "ordinary",
-        "via": "guard",
+        "via": "unguarded",
         "expected": {
-          "paused": true
+          "paused": true,
+          "admissionRefused": false
         }
       },
       "expected": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.18.21",
+  "version": "1.19.0",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -26,6 +26,7 @@
     "./catalog.json": "./catalog.json",
     "./corpus.json": "./corpus.json",
     "./protected.json": "./protected.json",
+    "./debugger-stage1.json": "./debugger-stage1.json",
     "./protected.mjs": "./protected.mjs",
     "./guard-vectors.json": "./guard-vectors.json",
     "./guard-driver.mjs": "./guard-driver.mjs",
@@ -35,6 +36,7 @@
     "./schema/corpus.schema.json": "./schema/corpus.schema.json",
     "./schema/protected.schema.json": "./schema/protected.schema.json",
     "./schema/guard-vectors.schema.json": "./schema/guard-vectors.schema.json",
+    "./schema/debugger-stage1.schema.json": "./schema/debugger-stage1.schema.json",
     "./package.json": "./package.json",
     "./guard-runner.mjs": "./guard-runner.mjs",
     "./guard-runner": "./guard-runner.mjs",
@@ -45,6 +47,7 @@
     "catalog.json",
     "corpus.json",
     "protected.json",
+    "debugger-stage1.json",
     "protected.mjs",
     "guard-vectors.json",
     "guard-driver.mjs",
@@ -68,7 +71,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && GOOS=darwin go vet ./... && GOOS=windows go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings && cargo check --target wasm32-wasip1 --no-default-features && cargo check --target wasm32-wasip1 --features serde && cargo check --target wasm32-wasip1 --all-features",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/self-contained.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
+    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "prepublishOnly": "node scripts/set-crate-version.mjs \"$npm_package_version\"",
@@ -79,9 +82,9 @@
     "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=guard-driver.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-cdp": "1.42.4",
-    "@ai-ecoverse/slicc-shared-web": "2.13.6",
-    "@biomejs/biome": "2.6.2",
+    "@ai-ecoverse/slicc-cdp": "1.44.3",
+    "@ai-ecoverse/slicc-shared-web": "2.13.9",
+    "@biomejs/biome": "2.6.3",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",
     "lefthook": "2.2.2",

package/protected.json

@@ -5,6 +5,16 @@
   "unparseableRefusal": "slicc: refused: slicc can't parse this URL, so it could be a protected page",
   "origins": ["http://127.0.0.1:5710", "https://seven.example.test"],
   "urls": [
+    { "url": "http://sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://sliccy.ai/cdp-premise", "protected": true },
+    { "url": "http://www.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://www.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "http://seven.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://seven.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "http://vault.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://vault.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "http://arbitrary-premise.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://arbitrary-premise.sliccy.ai/cdp-premise", "protected": true },
     {
       "url": "http://exa mple.sliccy.ai/",
       "protected": true
@@ -739,6 +749,16 @@
     }
   ],
   "targets": [
+    { "url": "http://sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "http://www.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://www.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "http://seven.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://seven.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "http://vault.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://vault.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "http://arbitrary-premise.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://arbitrary-premise.sliccy.ai/cdp-premise", "type": "page", "protected": true },
     {
       "url": "https://seven.sliccy.ai/path?secret=query#fragment",
       "documentURL": "chrome-error://chromewebdata/",

package/schema/debugger-stage1.schema.json

@@ -0,0 +1,87 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/ai-ecoverse/slicc-browsers/schema/debugger-stage1.schema.json",
+  "title": "slicc-browsers Stage 1 debugger conformance vectors, schema 1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "methods", "rows", "navigation", "leaseRefusals", "rescueEvidence"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "methods": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["method", "lifetime", "admitted"],
+        "properties": {
+          "method": { "$ref": "#/$defs/name" },
+          "lifetime": { "enum": ["persistent", "document", "cleanup", "pause-control", "unknown"] },
+          "admitted": { "type": "boolean" },
+          "ownedInstrumentationOnly": { "type": "boolean" }
+        }
+      }
+    },
+    "rows": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "mode", "destination", "expected", "requires"],
+        "properties": {
+          "id": { "$ref": "#/$defs/name" },
+          "mode": { "$ref": "#/$defs/name" },
+          "destination": { "$ref": "#/$defs/name" },
+          "expected": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["admitted", "released"],
+            "properties": {
+              "admitted": { "type": "boolean" },
+              "published": { "type": "boolean" },
+              "installed": { "type": "boolean" },
+              "liveReads": { "type": "boolean" },
+              "released": { "type": "boolean" },
+              "converted": { "type": "boolean" },
+              "committed": { "type": "boolean" },
+              "forwarded": { "type": "boolean" }
+            }
+          },
+          "requires": { "$ref": "#/$defs/names" }
+        }
+      }
+    },
+    "navigation": { "$ref": "#/$defs/names" },
+    "leaseRefusals": { "$ref": "#/$defs/names" },
+    "rescueEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "origin",
+        "noObserverResume",
+        "ownerUnchanged",
+        "generationUnchanged",
+        "deadlineUnchanged"
+      ],
+      "properties": {
+        "origin": { "$ref": "#/$defs/name" },
+        "noObserverResume": { "type": "boolean" },
+        "ownerUnchanged": { "type": "boolean" },
+        "generationUnchanged": { "type": "boolean" },
+        "deadlineUnchanged": { "type": "boolean" }
+      }
+    }
+  },
+  "$defs": {
+    "name": { "type": "string", "minLength": 1 },
+    "names": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/name" }
+    }
+  }
+}