@ai-ecoverse/slicc-browsers 1.18.22 → 1.19.1

package/README.md

@@ -7,7 +7,7 @@ The browser knowledge that SLICC's tools share. SLICC drives a real Chromium bro
 - which origins browser control must **never** touch, starting with seven's own origin and the vault;
 - how to prove that a CDP guard really keeps a client away from them.
 
-These programs can't share code, so they share data: one catalog, three sets of test vectors and their JSON schemas, published as a Go module, a Rust crate and an npm package at the same version.
+These programs can't share code, so they share data: one catalog, four sets of test vectors and their JSON schemas, published as a Go module, a Rust crate and an npm package at the same version.
 
 | who | uses it for |
 | --- | --- |
@@ -24,6 +24,7 @@ These programs can't share code, so they share data: one catalog, three sets of
 | [`corpus/`](corpus), `corpus.json` | discovery conformance cases: a fake machine each, with the ranked browser list it must produce |
 | [`protected.json`](protected.json), [`protected.mjs`](protected.mjs) | protected-origin test vectors, and a reference matcher in JavaScript |
 | [`guard-vectors.json`](guard-vectors.json) | the CDP scenarios every guard must pass |
+| [`debugger-stage1.json`](debugger-stage1.json) | shared Stage 1 debugger conformance data |
 | [`guard-runner.mjs`](guard-runner.mjs), [`guard-driver.mjs`](guard-driver.mjs), [`fixture-server.mjs`](fixture-server.mjs) | a reference runner for the guard vectors, its helpers, and the test server they run against |
 | [`schema/`](schema) | JSON Schema (2020-12) for each file above, and for the `--json` output of `slicc browsers` and `playwright-cli list` |
 
@@ -45,8 +46,8 @@ rank := c.Priority("chrome")
 
 The files are embedded, so nothing is read from disk at run time.
 - `Default()` parses the embedded catalog once and panics if it can't, which CI rules out; `Load()` returns the error instead, and `Parse(b)` reads another copy.
-- `Corpus()`, `Protected()` and `Guard()` return the vectors as typed structs.
-- `CatalogJSON()`, `CorpusJSON()`, `ProtectedJSON()`, `GuardVectorsJSON()` and the `…SchemaJSON()` functions return the raw files.
+- `Corpus()`, `Protected()`, `Guard()` and `DebuggerStage1()` return the vectors as typed structs.
+- `CatalogJSON()`, `CorpusJSON()`, `ProtectedJSON()`, `GuardVectorsJSON()`, `DebuggerStage1JSON()` and the `…SchemaJSON()` functions return the raw files.
 
 ### Rust
 
@@ -62,7 +63,7 @@ slicc-browsers = { version = "1", features = ["corpus"] }
 | --- | --- |
 | none | `CATALOG` and the schemas as `&str` constants, with no dependencies |
 | `serde` | typed `Catalog`, `catalog()`, `Catalog::browser` and `Catalog::priority` |
-| `corpus` | the vectors (`CORPUS`, `PROTECTED`, `GUARD_VECTORS`) and the modules `corpus`, `protected` and `guard`, for tests |
+| `corpus` | the vectors (`CORPUS`, `PROTECTED`, `GUARD_VECTORS`, `DEBUGGER_STAGE1`) and the modules `corpus`, `protected`, `guard` and `debugger_stage1`, for tests |
 
 Every feature builds for `wasm32-wasip1`. Keep `corpus` in `[dev-dependencies]` so it stays out of release builds.
 
@@ -79,7 +80,7 @@ import { protectedOrigins } from '@ai-ecoverse/slicc-browsers/protected.mjs';
 
 | export | what it is |
 | --- | --- |
-| `.`, `./catalog.json`, `./corpus.json`, `./protected.json`, `./guard-vectors.json` | the data |
+| `.`, `./catalog.json`, `./corpus.json`, `./protected.json`, `./guard-vectors.json`, `./debugger-stage1.json` | the data |
 | `./schema/<name>.schema.json` | the schemas |
 | `./protected.mjs` | the protected-origin matcher |
 | `./seven.mjs` | `isSevenLabel(seven, label)`: whether a `sliccy.ai` host label can be a seven instance |

package/debugger-stage1.json

@@ -0,0 +1,168 @@
+{
+  "schemaVersion": 1,
+  "methods": [
+    { "method": "Debugger.enable", "lifetime": "persistent", "admitted": true },
+    { "method": "Debugger.disable", "lifetime": "cleanup", "admitted": true },
+    { "method": "Debugger.resume", "lifetime": "pause-control", "admitted": true },
+    { "method": "Debugger.getScriptSource", "lifetime": "document", "admitted": false },
+    { "method": "Debugger.evaluateOnCallFrame", "lifetime": "document", "admitted": false },
+    {
+      "method": "Debugger.setInstrumentationBreakpoint",
+      "lifetime": "persistent",
+      "admitted": true
+    },
+    { "method": "Debugger.removeBreakpoint", "lifetime": "cleanup", "admitted": true },
+    {
+      "method": "Debugger.pause",
+      "lifetime": "document",
+      "admitted": false,
+      "ownedInstrumentationOnly": true
+    },
+    { "method": "Debugger.setBreakpoint", "lifetime": "persistent", "admitted": false },
+    { "method": "Debugger.setBreakpointByUrl", "lifetime": "persistent", "admitted": false },
+    { "method": "Debugger.stepInto", "lifetime": "document", "admitted": false },
+    { "method": "Debugger.stepOut", "lifetime": "document", "admitted": false },
+    { "method": "Debugger.stepOver", "lifetime": "document", "admitted": false },
+    {
+      "method": "DOMDebugger.setEventListenerBreakpoint",
+      "lifetime": "persistent",
+      "admitted": false
+    },
+    {
+      "method": "EventBreakpoints.setInstrumentationBreakpoint",
+      "lifetime": "persistent",
+      "admitted": false
+    },
+    {
+      "method": "Page.addScriptToEvaluateOnNewDocument",
+      "lifetime": "persistent",
+      "admitted": false
+    },
+    { "method": "Runtime.addBinding", "lifetime": "persistent", "admitted": false },
+    { "method": "Debugger.stage1Unknown", "lifetime": "unknown", "admitted": false }
+  ],
+  "rows": [
+    {
+      "id": "document-change-before-install",
+      "mode": "document-change-before-install",
+      "destination": "ordinary",
+      "expected": {
+        "admitted": true,
+        "published": true,
+        "installed": false,
+        "liveReads": true,
+        "released": true
+      },
+      "requires": [
+        "publishedPause",
+        "documentChange",
+        "noSourceInNewDocument",
+        "privateRescueAudit"
+      ]
+    },
+    {
+      "id": "stage2-methods-at-published-pause",
+      "mode": "stage2-refusal",
+      "destination": "ordinary",
+      "expected": { "admitted": false, "published": true, "forwarded": false, "released": true },
+      "requires": [
+        "publishedPause",
+        "getScriptSourceRefused",
+        "evaluateOnCallFrameRefused",
+        "privateRescueAudit"
+      ]
+    },
+    {
+      "id": "ordinary-install",
+      "mode": "install",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "converted": true, "liveReads": true, "released": true },
+      "requires": ["privateRescueAudit"]
+    },
+    {
+      "id": "holder-death",
+      "mode": "holder-death",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "converted": true, "liveReads": true, "released": true },
+      "requires": ["clientExit", "privateRescueAudit"]
+    },
+    {
+      "id": "session-loss",
+      "mode": "session-loss",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "converted": true, "liveReads": true, "released": true },
+      "requires": ["privateRescueAudit"]
+    },
+    {
+      "id": "worker-restart",
+      "mode": "worker-restart",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "converted": true, "liveReads": true, "released": true },
+      "requires": ["restartGuard", "privateRescueAudit"]
+    },
+    {
+      "id": "protected-seven-hop",
+      "mode": "protected-hop",
+      "destination": "seven",
+      "expected": { "admitted": true, "published": false, "committed": false, "released": true },
+      "requires": ["privateRescueAudit"]
+    },
+    {
+      "id": "protected-vault-hop",
+      "mode": "protected-hop",
+      "destination": "vault",
+      "expected": { "admitted": true, "published": false, "committed": false, "released": true },
+      "requires": ["privateRescueAudit"]
+    },
+    {
+      "id": "protected-error-page",
+      "mode": "protected-hop",
+      "destination": "seven",
+      "expected": { "admitted": true, "published": false, "committed": false, "released": true },
+      "requires": ["protectedErrorPage", "privateRescueAudit"]
+    },
+    {
+      "id": "late-foreign-world",
+      "mode": "late-foreign-world",
+      "destination": "ordinary",
+      "expected": { "admitted": true, "published": false, "released": true },
+      "requires": ["extensionWorld", "privateRescueAudit"]
+    },
+    {
+      "id": "pending-protected-hop",
+      "mode": "pending-pause-hop",
+      "destination": "seven",
+      "expected": { "admitted": true, "published": false, "committed": false, "released": true },
+      "requires": ["pendingPauseGate", "privateRescueAudit"]
+    }
+  ],
+  "navigation": [
+    "navigate",
+    "href",
+    "replace",
+    "redirect",
+    "reload",
+    "history",
+    "bfcache",
+    "prerender"
+  ],
+  "leaseRefusals": [
+    "protected-top",
+    "protected-subframe",
+    "nested-protected-subframe",
+    "protected-world",
+    "foreign-extension-world",
+    "protected-worker",
+    "unplaced-frame",
+    "unplaced-world",
+    "unplaced-worker",
+    "incomplete-read"
+  ],
+  "rescueEvidence": {
+    "origin": "guard",
+    "noObserverResume": true,
+    "ownerUnchanged": true,
+    "generationUnchanged": true,
+    "deadlineUnchanged": true
+  }
+}

package/guard-driver.mjs

@@ -354,11 +354,25 @@ export const skipReason = (vector, target, scope) => {
 
 export const inapplicable = (vector, target, scope) => skipReason(vector, target, scope) !== null;
 
+const trustedEmulationMethods = new Set([
+  'Emulation.setLocaleOverride',
+  'Emulation.setTimezoneOverride',
+]);
+
+const canTrustedEmulation = (vector) =>
+  flatten(named([...(vector?.setup ?? []), ...(vector?.trigger ?? [])])).some((step) =>
+    trustedEmulationMethods.has(step.cdp)
+  );
+
 function skipWhy(vector, row, known, guard) {
   const { reason } = row;
   if (typeof reason !== 'string' || reason === '') return 'skip without a reason';
   if (reason === skipReason(vector, row.target, guard)) return null;
   if (originReason(vector, row, reason)) return null;
+  if (reason === 'not-supported:trustedEmulation')
+    return canTrustedEmulation(vector)
+      ? null
+      : `skip with a reason the runner never gives: ${reason}`;
   if (reason.startsWith('not-supported:') && known.has(reason.slice('not-supported:'.length)))
     return null;
   return `skip with a reason the runner never gives: ${reason}`;
@@ -369,6 +383,7 @@ function forgeries(set, results, guard) {
   const known = new Set([
     'browserSession',
     'unguarded-observer',
+    'trustedEmulation',
     ...capabilities(set.vectors).filter((c) => typeof c === 'string' && c !== ''),
   ]);
   return results.flatMap((row) => {
@@ -430,3 +445,25 @@ export function parseURL(value, base) {
 
 export const owned = (entries, tag) =>
   (entries ?? []).filter((entry) => typeof entry?.url === 'string' && entry.url.includes(tag));
+
+export const debuggerCleanup = (vector, step, phase) =>
+  ['E4.instrumentation', 'E4.event-listener'].includes(vector.id) &&
+  phase === 'trigger' &&
+  step.cdp === 'Debugger.resume';
+
+export const idleDebuggerCleanup = (vector, step, phase, out) =>
+  debuggerCleanup(vector, step, phase) &&
+  !out.ok &&
+  out.error?.message === 'Can only perform operation while paused.';
+
+export const debuggerPaused = (events, session) =>
+  events.some((event) => event.sessionId === session && event.method === 'Debugger.paused');
+
+export const trustedClientOnly = (step, out) =>
+  trustedEmulationMethods.has(step.cdp) &&
+  !out.ok &&
+  Number(out.error?.code) === -32000 &&
+  /only available to trusted clients/i.test(String(out.error?.message ?? ''));
+
+export const refusalError = (step, out, refused, gone, phase, vector) =>
+  step.refusable && !out.ok && !refused && !gone && !idleDebuggerCleanup(vector, step, phase, out);

package/guard-runner.mjs

@@ -8,6 +8,8 @@ import { frameRead } from './frame-read.mjs';
 import {
   beacon,
   canary,
+  debuggerCleanup,
+  debuggerPaused,
   expand,
   hop,
   inapplicable,
@@ -18,10 +20,12 @@ import {
   outcome,
   owned,
   parseURL,
+  refusalError,
   summary as report,
   result,
   skipReason,
   steps,
+  trustedClientOnly,
   waitFor,
 } from './guard-driver.mjs';
 import { createObserverTarget, discoveryViolation } from './observer-target.mjs';
@@ -142,6 +146,7 @@ class Execution {
     this.pending = [];
     this.errors = [];
     this.incomplete = [];
+    this.unsupported = undefined;
     this.preSent = [];
     this.notes = [];
     this.answers = [];
@@ -682,8 +687,10 @@ class Execution {
       !refused &&
       /timeout|timed out|no answer/i.test(String(out.error?.message ?? out.error));
     if (step.refusable) this.refused[step.refusal.name] = unanswered ? 'incomplete' : refused;
-    if (unanswered) this.incomplete.push(`${step.refusal.name}: no answer`);
-    else if (step.refusable && !out.ok && !refused && !gone)
+    const trusted = this.side === 'control' && trustedClientOnly(step, out);
+    if (trusted) this.unsupported = 'trustedEmulation';
+    else if (unanswered) this.incomplete.push(`${step.refusal.name}: no answer`);
+    else if (refusalError(step, out, refused, gone, phase, this.vector))
       this.errors.push(
         `${step.refusal.name} failed without a refusal: ${String(out.error?.message ?? out.error)}`
       );
@@ -895,7 +902,7 @@ class Execution {
         })
       );
     if (step.guess) return this.guess(step.guess, session);
-    if (step.cdp) return this.cdp(step, session);
+    if (step.cdp) return this.cdp(step, session, phase);
     if (step.page) return this.page(step, session, phase);
     throw new Error('Unknown step kind');
   }
@@ -965,7 +972,12 @@ class Execution {
     return { ok: true, result: attempts };
   }
 
-  async cdp(step, sessionId) {
+  async cdp(step, sessionId, phase) {
+    if (
+      debuggerCleanup(this.vector, step, phase) &&
+      !debuggerPaused(this.client.events.slice(this.eventStart), sessionId)
+    )
+      return { ok: true, result: { cleanup: 'never paused' } };
     if (step.cdp === 'Target.detachFromTarget') await sleep(this.delay);
     if (step.cdp === 'Target.setAutoAttach' && step.params?.autoAttach === false)
       this.cleanupEventStart = this.client.events.length;
@@ -1433,6 +1445,7 @@ class Execution {
         errors: this.errors,
         notes: this.notes,
         incomplete: this.incomplete,
+        unsupported: this.unsupported,
         evidence: Object.fromEntries(
           Object.entries(this.calls)
             .filter(
@@ -1744,6 +1757,8 @@ async function executeRow(job, opts, made, set, slot, index, flights) {
     flight.abandoned = true;
     return timedOut(stuck, base, made, sides, opts);
   }
+  if (legs.control.unsupported === 'trustedEmulation')
+    return skipRow(base, 'not-supported:trustedEmulation');
   const row = {
     ...result(vector, {
       ...base,

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.18.22",
+  "setVersion": "1.19.1",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -15587,7 +15587,9 @@
           "cdp": "Page.enable"
         },
         {
-          "cdp": "Debugger.enable"
+          "cdp": "Debugger.enable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
           "cdp": "Debugger.setBreakpointByUrl",
@@ -15613,14 +15615,21 @@
           }
         },
         {
-          "cdp": "Debugger.disable"
+          "cdp": "Debugger.disable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         }
       ],
       "targets": ["seven", "vault", "vault-x", "apex"],
       "observe": {
+        "admissionRefused": {
+          "means": "the URL-condition method is refused on the ordinary control",
+          "dependsOn": [],
+          "check": { "registration": "any", "observer": "client" }
+        },
         "condition": {
           "means": "a beacon from the breakpoint condition evaluated in {target}/listener.js?n={tag}",
-          "dependsOn": ["refused.3"],
+          "dependsOn": [],
           "check": {
             "beacon": "{target}",
             "observer": "fixture"
@@ -15628,7 +15637,7 @@
         },
         "paused": {
           "means": "a Debugger.paused in {target}/listener.js?n={tag}",
-          "dependsOn": ["refused.3"],
+          "dependsOn": [],
           "check": {
             "any": [
               {
@@ -15671,9 +15680,10 @@
       "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step",
       "control": {
         "origin": "ordinary",
-        "via": "guard",
+        "via": "unguarded",
         "expected": {
-          "condition": true
+          "condition": true,
+          "admissionRefused": false
         }
       },
       "expected": {
@@ -15748,7 +15758,9 @@
           "cdp": "Page.enable"
         },
         {
-          "cdp": "Debugger.enable"
+          "cdp": "Debugger.enable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
           "cdp": "Debugger.setInstrumentationBreakpoint",
@@ -15776,17 +15788,21 @@
           "wait": 2000
         },
         {
-          "cdp": "Debugger.resume"
+          "cdp": "Debugger.resume",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
-          "cdp": "Debugger.disable"
+          "cdp": "Debugger.disable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         }
       ],
       "targets": ["seven", "vault", "vault-x", "apex"],
       "observe": {
         "paused": {
           "means": "a Debugger.paused before {target}/listener.js?n={tag}, which names a source map in its SourceMap header",
-          "dependsOn": ["refused.3"],
+          "dependsOn": [],
           "check": {
             "any": [
               {
@@ -15824,14 +15840,24 @@
             "served": "{target}/doc?n={tag}&listener=1",
             "observer": "fixture"
           }
+        },
+        "convertedPause": {
+          "means": "the guard converts the ordinary instrumentation pause to reason other",
+          "dependsOn": [],
+          "check": {
+            "event": "Debugger.paused",
+            "where": { "params": { "reason": "other" } },
+            "observer": "client"
+          }
         }
       },
       "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step",
       "control": {
         "origin": "ordinary",
-        "via": "guard",
+        "via": "unguarded",
         "expected": {
-          "paused": true
+          "paused": true,
+          "convertedPause": false
         }
       },
       "expected": {
@@ -15905,7 +15931,9 @@
           "cdp": "Page.enable"
         },
         {
-          "cdp": "Debugger.enable"
+          "cdp": "Debugger.enable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
           "cdp": "DOMDebugger.setEventListenerBreakpoint",
@@ -15933,17 +15961,21 @@
           "wait": 2000
         },
         {
-          "cdp": "Debugger.resume"
+          "cdp": "Debugger.resume",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         },
         {
-          "cdp": "Debugger.disable"
+          "cdp": "Debugger.disable",
+          "refusable": true,
+          "refusal": { "match": "refused" }
         }
       ],
       "targets": ["seven", "vault", "vault-x", "apex"],
       "observe": {
         "paused": {
           "means": "a Debugger.paused in a window load listener, which only {target}/doc?n={tag}&listener=1 registers",
-          "dependsOn": ["refused.3"],
+          "dependsOn": [],
           "check": {
             "event": "Debugger.paused",
             "where": {
@@ -15964,14 +15996,20 @@
             "served": "{target}/doc?n={tag}&listener=1",
             "observer": "fixture"
           }
+        },
+        "admissionRefused": {
+          "means": "the listener breakpoint method is refused on the ordinary control",
+          "dependsOn": [],
+          "check": { "registration": "any", "observer": "client" }
         }
       },
       "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step",
       "control": {
         "origin": "ordinary",
-        "via": "guard",
+        "via": "unguarded",
         "expected": {
-          "paused": true
+          "paused": true,
+          "admissionRefused": false
         }
       },
       "expected": {
@@ -17331,7 +17369,7 @@
       "targets": ["seven", "vault", "vault-x", "apex"],
       "observe": {
         "locale": {
-          "means": "{target}/doc?n={tag} formats in the fr-CH locale",
+          "means": "when the client can override locale, {target}/doc?n={tag} formats in fr-CH",
           "dependsOn": ["refused.2"],
           "check": {
             "expression": "(location.href === '{target}/doc?n={tag}') ? Intl.DateTimeFormat().resolvedOptions().locale : 'elsewhere'",
@@ -17349,7 +17387,7 @@
           }
         }
       },
-      "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step",
+      "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step; Chrome's trusted-client-only refusal of Emulation.setLocaleOverride on the ordinary control is not-supported:trustedEmulation",
       "control": {
         "origin": "ordinary",
         "via": "guard",
@@ -17452,7 +17490,7 @@
       "targets": ["seven", "vault", "vault-x", "apex"],
       "observe": {
         "timezone": {
-          "means": "{target}/doc?n={tag} runs in the Pacific/Chatham time zone",
+          "means": "when the client can override the time zone, {target}/doc?n={tag} runs in Pacific/Chatham",
           "dependsOn": ["refused.2"],
           "check": {
             "expression": "(location.href === '{target}/doc?n={tag}') ? Intl.DateTimeFormat().resolvedOptions().timeZone : 'elsewhere'",
@@ -17470,7 +17508,7 @@
           }
         }
       },
-      "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step",
+      "live": "the runner's own CDP sees {target}'s document load (title, marker or URL), or the guard returned its refusal for a refusable step; Chrome's trusted-client-only refusal of Emulation.setTimezoneOverride on the ordinary control is not-supported:trustedEmulation",
       "control": {
         "origin": "ordinary",
         "via": "guard",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.18.22",
+  "version": "1.19.1",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -26,6 +26,7 @@
     "./catalog.json": "./catalog.json",
     "./corpus.json": "./corpus.json",
     "./protected.json": "./protected.json",
+    "./debugger-stage1.json": "./debugger-stage1.json",
     "./protected.mjs": "./protected.mjs",
     "./guard-vectors.json": "./guard-vectors.json",
     "./guard-driver.mjs": "./guard-driver.mjs",
@@ -35,6 +36,7 @@
     "./schema/corpus.schema.json": "./schema/corpus.schema.json",
     "./schema/protected.schema.json": "./schema/protected.schema.json",
     "./schema/guard-vectors.schema.json": "./schema/guard-vectors.schema.json",
+    "./schema/debugger-stage1.schema.json": "./schema/debugger-stage1.schema.json",
     "./package.json": "./package.json",
     "./guard-runner.mjs": "./guard-runner.mjs",
     "./guard-runner": "./guard-runner.mjs",
@@ -45,6 +47,7 @@
     "catalog.json",
     "corpus.json",
     "protected.json",
+    "debugger-stage1.json",
     "protected.mjs",
     "guard-vectors.json",
     "guard-driver.mjs",
@@ -68,7 +71,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && GOOS=darwin go vet ./... && GOOS=windows go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings && cargo check --target wasm32-wasip1 --no-default-features && cargo check --target wasm32-wasip1 --features serde && cargo check --target wasm32-wasip1 --all-features",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
+    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "prepublishOnly": "node scripts/set-crate-version.mjs \"$npm_package_version\"",
@@ -79,8 +82,8 @@
     "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=guard-driver.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-cdp": "1.44.2",
-    "@ai-ecoverse/slicc-shared-web": "2.13.8",
+    "@ai-ecoverse/slicc-cdp": "1.45.0",
+    "@ai-ecoverse/slicc-shared-web": "2.13.10",
     "@biomejs/biome": "2.6.3",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",

package/protected.json

@@ -5,6 +5,16 @@
   "unparseableRefusal": "slicc: refused: slicc can't parse this URL, so it could be a protected page",
   "origins": ["http://127.0.0.1:5710", "https://seven.example.test"],
   "urls": [
+    { "url": "http://sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://sliccy.ai/cdp-premise", "protected": true },
+    { "url": "http://www.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://www.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "http://seven.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://seven.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "http://vault.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://vault.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "http://arbitrary-premise.sliccy.ai/cdp-premise", "protected": true },
+    { "url": "https://arbitrary-premise.sliccy.ai/cdp-premise", "protected": true },
     {
       "url": "http://exa mple.sliccy.ai/",
       "protected": true
@@ -739,6 +749,16 @@
     }
   ],
   "targets": [
+    { "url": "http://sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "http://www.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://www.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "http://seven.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://seven.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "http://vault.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://vault.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "http://arbitrary-premise.sliccy.ai/cdp-premise", "type": "page", "protected": true },
+    { "url": "https://arbitrary-premise.sliccy.ai/cdp-premise", "type": "page", "protected": true },
     {
       "url": "https://seven.sliccy.ai/path?secret=query#fragment",
       "documentURL": "chrome-error://chromewebdata/",

package/schema/debugger-stage1.schema.json

@@ -0,0 +1,87 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/ai-ecoverse/slicc-browsers/schema/debugger-stage1.schema.json",
+  "title": "slicc-browsers Stage 1 debugger conformance vectors, schema 1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "methods", "rows", "navigation", "leaseRefusals", "rescueEvidence"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "methods": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["method", "lifetime", "admitted"],
+        "properties": {
+          "method": { "$ref": "#/$defs/name" },
+          "lifetime": { "enum": ["persistent", "document", "cleanup", "pause-control", "unknown"] },
+          "admitted": { "type": "boolean" },
+          "ownedInstrumentationOnly": { "type": "boolean" }
+        }
+      }
+    },
+    "rows": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "mode", "destination", "expected", "requires"],
+        "properties": {
+          "id": { "$ref": "#/$defs/name" },
+          "mode": { "$ref": "#/$defs/name" },
+          "destination": { "$ref": "#/$defs/name" },
+          "expected": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["admitted", "released"],
+            "properties": {
+              "admitted": { "type": "boolean" },
+              "published": { "type": "boolean" },
+              "installed": { "type": "boolean" },
+              "liveReads": { "type": "boolean" },
+              "released": { "type": "boolean" },
+              "converted": { "type": "boolean" },
+              "committed": { "type": "boolean" },
+              "forwarded": { "type": "boolean" }
+            }
+          },
+          "requires": { "$ref": "#/$defs/names" }
+        }
+      }
+    },
+    "navigation": { "$ref": "#/$defs/names" },
+    "leaseRefusals": { "$ref": "#/$defs/names" },
+    "rescueEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "origin",
+        "noObserverResume",
+        "ownerUnchanged",
+        "generationUnchanged",
+        "deadlineUnchanged"
+      ],
+      "properties": {
+        "origin": { "$ref": "#/$defs/name" },
+        "noObserverResume": { "type": "boolean" },
+        "ownerUnchanged": { "type": "boolean" },
+        "generationUnchanged": { "type": "boolean" },
+        "deadlineUnchanged": { "type": "boolean" }
+      }
+    }
+  },
+  "$defs": {
+    "name": { "type": "string", "minLength": 1 },
+    "names": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/name" }
+    }
+  }
+}