@ai-ecoverse/slicc-browsers 1.18.4 → 1.18.6

package/bfcache-restore.mjs

@@ -159,14 +159,51 @@ class Restore {
   }
 
   async trigger() {
+    const method = 'Page.navigateToHistoryEntry';
     const params = { entryId: this.entry.id };
-    const out =
-      this.mode === 'history'
-        ? await this.call('Page.navigateToHistoryEntry', params)
-        : await this.read('Page.navigateToHistoryEntry', params);
+    if (this.mode !== 'history') {
+      this.result.triggerPath = 'observer';
+      this.result.trigger = await this.read(method, params);
+      return;
+    }
+    const command = { id: 'history-trigger', method, params, sentAt: Date.now() };
+    const work = this.client.send(method, params, this.session);
+    void outcome(work).then((reply) => {
+      this.result.triggerReply = reply;
+      if (reply.ok && this.result.triggerPath === 'observer-after-audited-timeout') {
+        this.result.triggerPath = 'client-late-answer';
+        this.missingEvidence('history navigation answered after non-forwarding audit');
+      }
+    });
+    const out = await bounded(work, this.budget);
     this.result.trigger = out;
-    if (this.mode === 'history' && refusal(out))
-      await this.read('Page.navigateToHistoryEntry', params);
+    const timedOut = out.error?.message === 'no answer';
+    this.result.triggerPath = timedOut ? 'client-timeout' : 'client';
+    let refused = refusal(out);
+    if (timedOut && this.forwardAudit) {
+      const audit = await bounded(
+        typeof this.gate.audit === 'function'
+          ? Promise.resolve().then(() =>
+              this.gate.audit({ historyTrigger: command, probes: [], final: false })
+            )
+          : Promise.reject(new Error('forwarding audit unavailable')),
+        this.budget
+      );
+      this.result.triggerAudit = audit;
+      const decision = audit.result?.historyTrigger;
+      refused =
+        audit.ok &&
+        decision?.complete === true &&
+        decision.id === command.id &&
+        decision.forwarded === false &&
+        !(await bounded(work, 0)).ok;
+    }
+    if (refused) {
+      this.result.triggerPath = timedOut
+        ? 'observer-after-audited-timeout'
+        : 'observer-after-refusal';
+      this.result.fallback = await this.read(method, params);
+    }
   }
 
   async probe(method, params, current) {
@@ -243,6 +280,7 @@ class Restore {
     this.messageStart = this.client.messages?.length ?? 0;
     this.result.delay.startedAt = Date.now();
     const trigger = this.trigger();
+    if (this.mode === 'history') await trigger;
     const restored = await waitFor(async () => {
       const f = await this.frame();
       return f?.url === this.url && !f.unreachableUrl && (await this.state())?.persisted === true;

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.18.4",
+  "setVersion": "1.18.6",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.18.4",
+  "version": "1.18.6",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -68,7 +68,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "npm run validate && node --test --test-concurrency=1 test/integration/self-contained.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/git-retry.test.mjs test/integration/release-line.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs && go test -race -count=1 ./test/integration/... && cargo test --all-features",
+    "test": "npm run validate && node --test --test-concurrency=1 test/integration/self-contained.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/git-retry.test.mjs test/integration/release-line.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs && go test -race -count=1 ./test/integration/... && cargo test --all-features",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "trust": "npx fledgling sync -y --skip-publish",
@@ -83,7 +83,7 @@
     "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-shared-web": "2.7.8",
+    "@ai-ecoverse/slicc-shared-web": "2.7.9",
     "@biomejs/biome": "2.5.15",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",

package/redirect-secret.mjs

@@ -668,14 +668,38 @@ class RedirectProbe {
     await this.send('Runtime.evaluate', {
       expression: `(()=>{const f=document.createElement('iframe');f.src=${JSON.stringify(url)};document.body.append(f)})();void 0`,
     });
-    await pause(500);
-    await this.send('Page.getFrameTree');
-    const snapshot = await this.send('Page.captureSnapshot', { format: 'mhtml' });
-    const dom = await this.send('DOMSnapshot.captureSnapshot', { computedStyles: [] });
+    const control = this.side === 'control';
+    const ms = Math.round(5000 * this.scale);
+    let snapshot;
+    let dom;
+    let ordinaryIframeSnapshot = false;
+    let ordinaryIframeDOM = false;
+    const read = async () => {
+      await this.send('Page.getFrameTree');
+      snapshot = await this.send('Page.captureSnapshot', { format: 'mhtml' });
+      dom = await this.send('DOMSnapshot.captureSnapshot', { computedStyles: [] });
+      ordinaryIframeSnapshot ||= snapshot.ok && this.contains(snapshot);
+      ordinaryIframeDOM ||= dom.ok && this.contains(dom);
+      return this.ended() || (ordinaryIframeSnapshot && ordinaryIframeDOM);
+    };
+    if (control) {
+      if (!(await waitFor(read, ms, 50))) {
+        const missing = [
+          !ordinaryIframeSnapshot && 'ordinaryIframeSnapshot',
+          !ordinaryIframeDOM && 'ordinaryIframeDOM',
+        ].filter(Boolean);
+        this.missing.push(
+          `redirect-secret: control iframe ${missing.join(', ')} not observed within ${ms}ms`
+        );
+      }
+    } else {
+      await pause(500);
+      await read();
+    }
     this.responses.push({
       iframeSnapshotAttempted: !snapshot.ended && !dom.ended,
-      ordinaryIframeSnapshot: this.contains(snapshot),
-      ordinaryIframeDOM: this.contains(dom),
+      ordinaryIframeSnapshot: ordinaryIframeSnapshot || (control ? 'incomplete' : false),
+      ordinaryIframeDOM: ordinaryIframeDOM || (control ? 'incomplete' : false),
     });
   }
 
@@ -750,7 +774,10 @@ class RedirectProbe {
       extraHeld &&
       (extra.length >= this.destinations.length * 4 || (this.cut() ? 'incomplete' : false));
     const unseen = this.end || this.halted ? 'incomplete' : false;
-    const found = (key) => this.responses.some((entry) => entry[key]);
+    const found = (key) => {
+      const values = this.responses.map((entry) => entry[key]);
+      return values.includes(true) || (values.includes('incomplete') ? 'incomplete' : false);
+    };
     const fetchReads = this.answers('Fetch.getResponseBody');
     const fetchLeaked = fetchReads.answered.some((entry) => !refused(entry));
     const evidence = {