@ai-ecoverse/slicc-browsers 1.21.1 → 1.22.0

package/README.md

@@ -223,7 +223,7 @@ await fixture.close();
 You supply:
 - **a guarded client** per row: your guard's CDP connection, with `send(method, params, sessionId)`, `waitEvent(predicate, ms)` and an `events` array;
 - **an unguarded observer**: a direct CDP connection to the same browser, which runs the controls and checks liveness;
-- **origins**: the fixture server reachable as seven, the vault and an ordinary site. Point the protected hostnames at it with Chrome's `--host-resolver-rules`, so no test ever touches the real seven;
+- **origins**: the fixture server reachable as seven, the vault and an ordinary site. Point the protected hostnames at it with Chrome's `--host-resolver-rules`, so tests never touch the real seven;
 - **capabilities**: what your transport can do. A row that needs something you don't declare is skipped as `not-supported:<capability>`.
 
 | capability | means the transport can |
@@ -239,6 +239,7 @@ You supply:
 | `siteIsolationOff`, `inboundDelay`, `forwardAudit` | no site isolation; hold inbound; audit forwarded commands |
 | `secureOrigin` | HTTPS origins (service workers) |
 | `stockSetup`, `syntheticAutoAttach` | admit stock clients' setup calls; synthesize auto-attach |
+| `closeProtected` | close a protected tab |
 
 ### Reading the result
 
@@ -248,13 +249,13 @@ Each row reports `control`, `guarded` and `live` as `pass`, `fail`, `skip`, `inc
 GUARD-PASS my-guard@1a2b3c4 (vectors @ai-ecoverse/slicc-browsers@1.18.5)
 ```
 
-The run passes only when every row passes and none is missing. A skip with a reason the runner would never give, such as a made-up capability, is reported as forged, and skipped and incomplete rows are counted on the line, so the line can't overstate what was tested.
+The run passes only when every row passes and none is missing. A skip with a reason the runner would never give is forged; skipped and incomplete rows are counted on the line, so it can't overstate what was tested.
 
 To find out what a vector checks, read it in `guard-vectors.json`: each one lists its steps, each observation's `means`, its `live` condition and its expected outcome. [`schema/guard-vectors.schema.json`](schema/guard-vectors.schema.json) defines the format.
 
 ## Development
 
-You need Go 1.26, Rust stable with the `wasm32-wasip1` target, Node 24 or later, and Chrome or Chromium for the browser tests: they take `CHROME_PATH`, or the Chrome for Testing that `npx slicc-cdp install-browser` installs, and run it headless unless `CI` is set (`SLICC_HEADLESS=1` or `0` overrides).
+You need Go 1.26, Rust stable with `wasm32-wasip1`, Node 24+, and Chrome or Chromium for the browser tests: they take `CHROME_PATH`, or Chrome for Testing from `npx slicc-cdp install-browser`, and run headless unless `CI` is set (`SLICC_HEADLESS=1` or `0` overrides).
 
 | command | what it does |
 | --- | --- |

package/guard-driver.mjs

@@ -197,7 +197,9 @@ export function judge(vector, side, observed) {
   }
   const skipped = Object.keys(want).filter(
     (k) =>
-      (observed?.[k] === 'not-supported' && vector.observe?.[k]?.requires?.length > 0) ||
+      (observed?.[k] === 'not-supported' &&
+        ((vector.observe?.[k]?.requires?.length ?? 0) > 0 ||
+          (vector.observe?.[k]?.unless?.length ?? 0) > 0)) ||
       (vector.observe?.[k]?.dependsOn ?? []).some((d) => refused.includes(d))
   );
   const incomplete = Object.keys(want).filter(
@@ -310,7 +312,9 @@ const capabilities = (value) =>
     ? value.flatMap(capabilities)
     : value && typeof value === 'object'
       ? Object.entries(value).flatMap(([key, item]) =>
-          key === 'requires' && Array.isArray(item) ? item : capabilities(item)
+          (key === 'requires' || key === 'unless') && Array.isArray(item)
+            ? item
+            : capabilities(item)
         )
       : [];
 
@@ -389,6 +393,17 @@ function skipWhy(vector, row, known, guard, declared) {
   return `skip with a reason the runner never gives: ${reason}`;
 }
 
+function observationWhy(vector, row, declared) {
+  return (row.notSupported ?? []).flatMap((name) => {
+    const observation = vector?.observe?.[name];
+    if (!observation) return [`not-supported observation ${name} the vector lacks`];
+    const missing = (observation.requires ?? []).some((cap) => !declared.includes(cap));
+    const unless = (observation.unless ?? []).some((cap) => declared.includes(cap));
+    if (missing || unless) return [];
+    return [`not-supported:${name} while the observation should run`];
+  });
+}
+
 function forgeries(set, results, guard, capabilitiesList) {
   const vectors = new Map(set.vectors.map((v) => [v.id, v]));
   const declared = declaredCapabilities(capabilitiesList);
@@ -405,6 +420,7 @@ function forgeries(set, results, guard, capabilitiesList) {
     if (legs.includes('not-run') && vector?.kind !== 'text')
       why.push('not-run on a vector that is not kind text');
     if (legs.includes('skip')) why.push(skipWhy(vector, row, known, guard, declared));
+    why.push(...observationWhy(vector, row, declared));
     const found = why.filter(Boolean);
     if (!found.length) return [];
     const { id, target, variant, transport } = row;

package/guard-runner.mjs

@@ -50,6 +50,13 @@ const supported = (requires, capabilities) =>
   (requires ?? []).every((c) =>
     Array.isArray(capabilities) ? capabilities.includes(c) : capabilities[c] === true
   );
+const declared = (capability, capabilities) =>
+  Array.isArray(capabilities)
+    ? capabilities.includes(capability)
+    : capabilities[capability] === true;
+const gatedOut = (observation, capabilities) =>
+  !supported(observation?.requires, capabilities) ||
+  (observation?.unless ?? []).some((capability) => declared(capability, capabilities));
 const matches = (value, predicate) => {
   if (predicate === null || typeof predicate !== 'object') return value === predicate;
   return Object.entries(predicate).every(([key, want]) => {
@@ -1616,7 +1623,7 @@ class Execution {
     const observed = { ...this.refused };
     const incomplete = [];
     for (const [name, observation] of Object.entries(this.vector.observe ?? {})) {
-      if (!supported(observation.requires, this.options.capabilities)) {
+      if (gatedOut(observation, this.options.capabilities)) {
         observed[name] = 'not-supported';
         continue;
       }

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.21.1",
+  "setVersion": "1.22.0",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -105,7 +105,8 @@
     "forwardAudit": "a complete browser-side forwarding ledger for history-restore probes and for checks of a command's forwarded params (client.forwarded)",
     "stockSetup": "the guard admits stock clients' setup calls: init scripts with no code (the no-code regex is matched on the whole string without the multiline flag), the four display emulation calls, bindings scoped to an isolated world, Page.createIsolatedWorld on an ordinary frame with grantUniveralAccess and contentSecurityPolicy stripped and no executionContextId for any other frame, and Target.setAutoAttach narrowed to tab targets (pages under the tab held like pages, with the same URL redaction in targetInfo)",
     "syntheticAutoAttach": "the transport has no native Target.setAutoAttach, so the guard attaches new tabs, pages and their children itself and synthesizes Target.attachedToTarget, with the same placement and holds",
-    "secureOrigin": "the fixture and page origins are secure contexts (HTTPS), so service worker registration is available"
+    "secureOrigin": "the fixture and page origins are secure contexts (HTTPS), so service worker registration is available",
+    "closeProtected": "the guard lets Target.closeTarget close a protected tab"
   },
   "placeholders": {
     "target": "the target's origin; {plain} on the control",
@@ -1706,6 +1707,7 @@
         },
         "closeRefused": {
           "means": "protected error-page restore: closeRefused",
+          "unless": ["closeProtected"],
           "check": {
             "result": "errorPage",
             "path": "result.closeRefused",
@@ -1713,6 +1715,16 @@
             "observer": "client"
           }
         },
+        "closed": {
+          "means": "protected error-page restore: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "errorPage",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          },
+          "requires": ["closeProtected"]
+        },
         "attachRedacted": {
           "means": "protected error-page restore: attachRedacted",
           "check": {
@@ -1754,6 +1766,7 @@
           "evaluateRefused": false,
           "attachRefused": false,
           "closeRefused": false,
+          "closed": true,
           "attachRedacted": false,
           "fullURL": true
         }
@@ -1770,6 +1783,7 @@
         "evaluateRefused": true,
         "attachRefused": true,
         "closeRefused": true,
+        "closed": true,
         "attachRedacted": true,
         "fullURL": false
       }
@@ -1887,6 +1901,7 @@
         },
         "closeRefused": {
           "means": "protected error-page sticky: closeRefused",
+          "unless": ["closeProtected"],
           "check": {
             "result": "errorPage",
             "path": "result.closeRefused",
@@ -1894,6 +1909,16 @@
             "observer": "client"
           }
         },
+        "closed": {
+          "means": "protected error-page sticky: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "errorPage",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          },
+          "requires": ["closeProtected"]
+        },
         "stickyError": {
           "means": "protected error-page sticky: stickyError",
           "check": {
@@ -1944,6 +1969,7 @@
           "evaluateRefused": false,
           "attachRefused": false,
           "closeRefused": false,
+          "closed": true,
           "stickyError": true,
           "attachRedacted": false,
           "fullURL": true
@@ -1961,6 +1987,7 @@
         "evaluateRefused": true,
         "attachRefused": true,
         "closeRefused": true,
+        "closed": true,
         "stickyError": true,
         "attachRedacted": true,
         "fullURL": false
@@ -2080,6 +2107,7 @@
         },
         "closeRefused": {
           "means": "protected error-page sticky (query): closeRefused",
+          "unless": ["closeProtected"],
           "check": {
             "result": "errorPage",
             "path": "result.closeRefused",
@@ -2087,6 +2115,16 @@
             "observer": "client"
           }
         },
+        "closed": {
+          "means": "protected error-page sticky (query): Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "errorPage",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          },
+          "requires": ["closeProtected"]
+        },
         "stickyError": {
           "means": "protected error-page sticky (query): stickyError",
           "check": {
@@ -2137,6 +2175,7 @@
           "evaluateRefused": false,
           "attachRefused": false,
           "closeRefused": false,
+          "closed": true,
           "stickyError": true,
           "attachRedacted": false,
           "fullURL": true
@@ -2154,6 +2193,7 @@
         "evaluateRefused": true,
         "attachRefused": true,
         "closeRefused": true,
+        "closed": true,
         "stickyError": true,
         "attachRedacted": true,
         "fullURL": false
@@ -2273,6 +2313,7 @@
         },
         "closeRefused": {
           "means": "protected error-page sticky (fragment): closeRefused",
+          "unless": ["closeProtected"],
           "check": {
             "result": "errorPage",
             "path": "result.closeRefused",
@@ -2280,6 +2321,16 @@
             "observer": "client"
           }
         },
+        "closed": {
+          "means": "protected error-page sticky (fragment): Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "errorPage",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          },
+          "requires": ["closeProtected"]
+        },
         "stickyError": {
           "means": "protected error-page sticky (fragment): stickyError",
           "check": {
@@ -2330,6 +2381,7 @@
           "evaluateRefused": false,
           "attachRefused": false,
           "closeRefused": false,
+          "closed": true,
           "stickyError": true,
           "attachRedacted": false,
           "fullURL": true
@@ -2347,6 +2399,7 @@
         "evaluateRefused": true,
         "attachRefused": true,
         "closeRefused": true,
+        "closed": true,
         "stickyError": true,
         "attachRedacted": true,
         "fullURL": false
@@ -26267,7 +26320,7 @@
         {
           "cdp": "Page.addScriptToEvaluateOnNewDocument",
           "params": {
-            "source": "// slicc\u2028fetch
fetch(new URL('/doc?n=bound-ls-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-ls-{tag}\n",
+            "source": "// slicc
fetch(new URL('/doc?n=bound-ls-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-ls-{tag}\n",
             "worldName": "slicc-bound-ls-{tag}"
           },
           "as": "boundLs",
@@ -26279,7 +26332,7 @@
         {
           "cdp": "Page.addScriptToEvaluateOnNewDocument",
           "params": {
-            "source": "// slicc\u2029fetch
fetch(new URL('/doc?n=bound-ps-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-ps-{tag}\n",
+            "source": "// slicc
fetch(new URL('/doc?n=bound-ps-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-ps-{tag}\n",
             "worldName": "slicc-bound-ps-{tag}"
           },
           "as": "boundPs",
@@ -26315,7 +26368,7 @@
         {
           "cdp": "Page.addScriptToEvaluateOnNewDocument",
           "params": {
-            "source": "\ufefffetch(new URL('/doc?n=bound-bom-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-bom-{tag}\n",
+            "source": "fetch(new URL('/doc?n=bound-bom-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-bom-{tag}\n",
             "worldName": "slicc-bound-bom-{tag}"
           },
           "as": "boundBom",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.21.1",
+  "version": "1.22.0",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -73,7 +73,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && GOOS=darwin go vet ./... && GOOS=windows go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings && cargo check --target wasm32-wasip1 --no-default-features && cargo check --target wasm32-wasip1 --features serde && cargo check --target wasm32-wasip1 --all-features",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
+    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-close-protected.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "prepublishOnly": "node scripts/set-crate-version.mjs \"$npm_package_version\"",
@@ -84,8 +84,8 @@
     "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=guard-driver.mjs --test-coverage-include=extension-frame.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-cdp": "1.47.0",
-    "@ai-ecoverse/slicc-shared-web": "2.13.10",
+    "@ai-ecoverse/slicc-cdp": "1.47.5",
+    "@ai-ecoverse/slicc-shared-web": "2.14.2",
     "@biomejs/biome": "2.6.4",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",

package/protected-error-page.mjs

@@ -35,7 +35,7 @@ async function loadedDocument(reader, observer, url, until) {
   });
 }
 
-async function lockChecks({ client, session, targetId, result }) {
+async function lockChecks({ client, reader, session, targetId, result, until }) {
   result.evaluateRefused = refused(
     await outcome(
       client.send(
@@ -48,7 +48,14 @@ async function lockChecks({ client, session, targetId, result }) {
   result.attachRefused = refused(
     await outcome(client.send('Target.attachToTarget', { targetId, flatten: true }))
   );
-  result.closeRefused = refused(await outcome(client.send('Target.closeTarget', { targetId })));
+  const close = await outcome(client.send('Target.closeTarget', { targetId }));
+  result.closeRefused = refused(close);
+  result.closed =
+    close.result?.success === true &&
+    (await until(
+      async () =>
+        !(await reader.send('Target.getTargets')).targetInfos.some((i) => i.targetId === targetId)
+    ));
 }
 
 const discoveryMethods = ['Target.targetCreated', 'Target.targetInfoChanged'];
@@ -463,7 +470,7 @@ export async function protectedErrorPage({
       result.stickyError = true;
       await pause(100);
     }
-    await lockChecks({ client, session, targetId, result });
+    await lockChecks({ client, reader, session, targetId, result, until });
     return result;
   } finally {
     stopped = true;

package/schema/guard-vectors.schema.json

@@ -150,6 +150,10 @@
         "syntheticAutoAttach": {
           "type": "string",
           "minLength": 1
+        },
+        "closeProtected": {
+          "type": "string",
+          "minLength": 1
         }
       }
     },
@@ -187,7 +191,8 @@
         "secureOrigin",
         "forwardAudit",
         "stockSetup",
-        "syntheticAutoAttach"
+        "syntheticAutoAttach",
+        "closeProtected"
       ]
     },
     "requires": {
@@ -218,6 +223,9 @@
         "requires": {
           "$ref": "#/$defs/requires"
         },
+        "unless": {
+          "$ref": "#/$defs/requires"
+        },
         "check": {
           "$ref": "#/$defs/check"
         },