@ai-ecoverse/slicc-browsers 1.18.8 → 1.18.10

package/README.md

@@ -184,6 +184,10 @@ A guard sits between a CDP client, such as an agent's browser tool, and the brow
 
 Each vector runs twice. The **control** runs it against an ordinary origin, where it must work. The **guarded** leg runs it through the guard against a protected target, where it must be refused or have no effect. A **liveness** check, made outside the guard, proves the protected target was really there. A row passes only when all three do, so a guard can't pass by breaking everything, and a test can't pass by never reaching the target.
 
+When a vector compares ordinary and protected fixture markers, those markers do not contain one another. Protected-marker checks still examine complete probe replies, including errors, and the vector's client events and messages, including encoded values.
+
+Client-exit controls use the unguarded observer; persistent-capability refusals are valid evidence, granted instruments must leave no effects after exit, and missing answers remain incomplete.
+
 ### Running them
 
 The reference runner works with any guard that speaks CDP:

package/bfcache-restore.mjs

@@ -40,8 +40,8 @@ async function bounded(work, ms) {
 class Restore {
   constructor(options) {
     Object.assign(this, options);
-    this.marker = `bfcache-marker-${this.tag}`;
-    this.url = `${this.protectedOrigin}/bfcache?n=${encodeURIComponent(this.tag)}`;
+    this.marker = `bfcache-marker-${this.tag}-p`;
+    this.url = `${this.protectedOrigin}/bfcache?n=${encodeURIComponent(`${this.tag}-p`)}`;
     this.result = { probes: [], delay: { requestedMs: this.delayMs } };
     this.missing = [];
     this.pending = [];

package/guard-runner.mjs

@@ -159,10 +159,14 @@ class Execution {
 
   async exit() {
     const gone = this.client;
-    if (typeof gone.close !== 'function') throw new Error('the guarded client has no close()');
     this.exitRequestStart = (await this.options.fixture.log()).length;
     this.clients.exited = true;
-    await gone.close();
+    if (gone === this.reader)
+      await gone.send('Target.detachFromTarget', { sessionId: this.sessions.page });
+    else {
+      if (typeof gone.close !== 'function') throw new Error('the guarded client has no close()');
+      await gone.close();
+    }
     const released = await this.poll(async () => {
       const read = await outcome(
         this.reader.send('Target.getTargetInfo', { targetId: this.pageTarget })
@@ -664,8 +668,15 @@ class Execution {
       refused,
       ...(gone ? { detached: true } : {}),
     });
-    if (step.refusable) this.refused[step.refusal.name] = refused;
-    if (step.refusable && !out.ok && !refused && !gone)
+    const unanswered =
+      step.refusable &&
+      exitsClient(this.vector) &&
+      !out.ok &&
+      !refused &&
+      /timeout|timed out|no answer/i.test(String(out.error?.message ?? out.error));
+    if (step.refusable) this.refused[step.refusal.name] = unanswered ? 'incomplete' : refused;
+    if (unanswered) this.incomplete.push(`${step.refusal.name}: no answer`);
+    else if (step.refusable && !out.ok && !refused && !gone)
       this.errors.push(
         `${step.refusal.name} failed without a refusal: ${String(out.error?.message ?? out.error)}`
       );
@@ -881,10 +892,11 @@ class Execution {
     };
     const met = await this.poll(arrived, settle.ms ?? 1500, absent);
     if (refused() && !alt) return skipped();
-    if (settle.required && !met)
-      this.errors.push(
-        `settle: no ${settle.beacon ? `beacon from ${settle.beacon}` : settle.served ? `request for ${settle.served}` : settle.title ? `title ${settle.title}` : 'load'} within ${this.bound(settle.ms ?? 1500)}ms`
-      );
+    if (settle.required && !met) {
+      const missing = `settle: no ${settle.beacon ? `beacon from ${settle.beacon}` : settle.served ? `request for ${settle.served}` : settle.title ? `title ${settle.title}` : 'load'} within ${this.bound(settle.ms ?? 1500)}ms`;
+      if (exitsClient(this.vector)) this.incomplete.push(missing);
+      else this.errors.push(missing);
+    }
   }
 
   async guess(guess, session) {
@@ -926,7 +938,21 @@ class Execution {
       session === undefined
     )
       params.browserContextId = this.vars.context;
-    const out = await outcome(this.actor().send(step.cdp, params, session));
+    const pending = outcome(this.actor().send(step.cdp, params, session));
+    let timer;
+    const out =
+      step.refusable && exitsClient(this.vector)
+        ? await Promise.race([
+            pending,
+            new Promise((resolve) => {
+              timer = setTimeout(
+                () => resolve({ ok: false, error: { message: 'no answer' } }),
+                this.bound(this.options.namedResultMs ?? namedResultMs)
+              );
+            }),
+          ])
+        : await pending;
+    clearTimeout(timer);
     if (step.cdp === 'Target.setAutoAttach' && out.ok) {
       if (params.autoAttach) this.attachSettings.set(session, true);
       else this.attachSettings.delete(session);
@@ -1259,8 +1285,17 @@ class Execution {
         observed[name] = 'not-supported';
         continue;
       }
-      if ((observation.dependsOn ?? []).some((dep) => this.refused[dep])) continue;
+      const dependencies = observation.dependsOn ?? [];
+      if (dependencies.some((dep) => this.refused[dep] === 'incomplete')) {
+        observed[name] = 'incomplete';
+        continue;
+      }
+      if (dependencies.some((dep) => this.refused[dep] === true)) continue;
       observed[name] = await this.observe(name, observation.check);
+      if (exitsClient(this.vector) && dependencies.length && observed[name] === false) {
+        observed[name] = 'incomplete';
+        this.incomplete.push(`${name}: pre-exit evidence not observed`);
+      }
       if (!observation.eitherWhen || this.side !== 'guarded') continue;
       const holds = await this.either(observation.eitherWhen, observed[name], name, unseen);
       observed[`${name}.either`] = holds;

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.18.8",
+  "setVersion": "1.18.10",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -18804,7 +18804,7 @@
       "requires": ["clientExit"],
       "setup": [
         {
-          "text": "a plain page whose client registers an init script, an x-probe header and Fetch.enable '*' that fulfils the destination with a forged body, then loads a trigger page whose navigation into {target} is pending when the client exits"
+          "text": "a plain page registers an init script, an x-probe header and Fetch.enable '*' that fulfils the destination with a forged body, then loads a trigger page whose navigation into {target} is pending when the session exits; the control uses the unguarded observer, and guarded refusals waive only their corresponding pre-exit proofs"
         },
         {
           "page": "tab",
@@ -18814,6 +18814,11 @@
           "cdp": "Page.addScriptToEvaluateOnNewDocument",
           "params": {
             "source": "{beacon}"
+          },
+          "as": "initScript",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
           }
         },
         {
@@ -18822,6 +18827,11 @@
             "headers": {
               "x-probe": "{tag}"
             }
+          },
+          "as": "extraHeaders",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
           }
         },
         {
@@ -18832,6 +18842,11 @@
                 "urlPattern": "*"
               }
             ]
+          },
+          "as": "interception",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
           }
         },
         {
@@ -18860,7 +18875,12 @@
         {
           "settle": {
             "beacon": "{ordinary}",
-            "required": true
+            "required": true,
+            "dependsOn": ["initScript"],
+            "or": {
+              "served": "{ordinary}/page?k=href&tag={tag}&to={target}/canary/{tag}",
+              "observer": "fixture"
+            }
           }
         },
         {
@@ -18880,7 +18900,8 @@
       "targets": ["seven", "vault"],
       "observe": {
         "instrumented": {
-          "means": "the client's init script sent its beacon from {ordinary} before the exit",
+          "means": "the session's init script sent its beacon from {ordinary} before the exit unless registration was refused",
+          "dependsOn": ["initScript"],
           "check": {
             "beacon": "{ordinary}",
             "exit": "before",
@@ -18888,7 +18909,8 @@
           }
         },
         "headed": {
-          "means": "the trigger page's request carried the client's x-probe header before the exit",
+          "means": "the trigger page's request carried the session's x-probe header before the exit unless registration was refused",
+          "dependsOn": ["extraHeaders"],
           "check": {
             "header": "x-probe",
             "on": "/page",
@@ -18897,7 +18919,8 @@
           }
         },
         "intercepted": {
-          "means": "a Fetch.requestPaused for the trigger page reached the client before the exit",
+          "means": "a Fetch.requestPaused for the trigger page reached the session before the exit unless interception was refused",
+          "dependsOn": ["interception"],
           "check": {
             "event": "Fetch.requestPaused",
             "where": {
@@ -18914,6 +18937,7 @@
         },
         "served": {
           "means": "the stand-in served {target}/canary/{tag} after the exit",
+          "dependsOn": [],
           "check": {
             "served": "{target}/canary/{tag}",
             "exit": "after",
@@ -18922,6 +18946,7 @@
         },
         "document": {
           "means": "the unguarded observer reads {target}'s real document, title 'canary'",
+          "dependsOn": [],
           "check": {
             "title": "canary",
             "via": "unguarded",
@@ -18930,6 +18955,7 @@
         },
         "forged": {
           "means": "the unguarded observer reads the client's forged FULFILLED body",
+          "dependsOn": [],
           "check": {
             "expression": "document.body ? document.body.innerText.includes('FULFILLED') : false",
             "equals": true,
@@ -18939,6 +18965,7 @@
         },
         "scripted": {
           "means": "the client's init script sent a beacon from {target} after the exit",
+          "dependsOn": [],
           "check": {
             "beacon": "{target}",
             "exit": "after",
@@ -18947,6 +18974,7 @@
         },
         "probed": {
           "means": "a request for {target}/canary/{tag} carried the client's x-probe header after the exit",
+          "dependsOn": [],
           "check": {
             "header": "x-probe",
             "on": "{target}/canary/{tag}",
@@ -18956,6 +18984,7 @@
         },
         "paused": {
           "means": "a Fetch.requestPaused for {target}/canary/{tag} reached the client",
+          "dependsOn": [],
           "check": {
             "event": "Fetch.requestPaused",
             "where": {
@@ -18969,10 +18998,10 @@
           }
         }
       },
-      "live": "the stand-in serves {target}'s document after the client exits",
+      "live": "the stand-in serves {target}'s document after the session exits",
       "control": {
         "origin": "ordinary",
-        "via": "guard",
+        "via": "unguarded",
         "expected": {
           "instrumented": true,
           "headed": true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.18.8",
+  "version": "1.18.10",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -68,7 +68,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && GOOS=darwin go vet ./... && GOOS=windows go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings && cargo check --target wasm32-wasip1 --no-default-features && cargo check --target wasm32-wasip1 --features serde && cargo check --target wasm32-wasip1 --all-features",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/self-contained.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
+    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/self-contained.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "prepublishOnly": "node scripts/set-crate-version.mjs \"$npm_package_version\"",
@@ -79,8 +79,8 @@
     "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-cdp": "1.31.2",
-    "@ai-ecoverse/slicc-shared-web": "2.8.4",
+    "@ai-ecoverse/slicc-cdp": "1.31.9",
+    "@ai-ecoverse/slicc-shared-web": "2.10.4",
     "@biomejs/biome": "2.5.15",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",