@ai-ecoverse/slicc-browsers 1.22.1 → 1.23.0

package/README.md

@@ -239,7 +239,7 @@ You supply:
 | `siteIsolationOff`, `inboundDelay`, `forwardAudit` | no site isolation; hold inbound; audit forwarded commands |
 | `secureOrigin` | HTTPS origins (service workers) |
 | `stockSetup`, `syntheticAutoAttach` | admit stock clients' setup calls; synthesize auto-attach |
-| `closeProtected` | close a protected tab |
+| `closeProtected` | close a protected tab, except live vault/seven-UI disguises |
 
 ### Reading the result
 

package/close-protected-shape.mjs

@@ -0,0 +1,563 @@
+import { outcome, parseURL, waitFor } from './guard-driver.mjs';
+import { createObserverTarget } from './observer-target.mjs';
+
+const pause = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+const refused = (out) => !out.ok && /^slicc: refused:/.test(out.error?.message ?? '');
+
+const peel = (text) => {
+  let u = parseURL(text);
+  for (
+    let i = 0;
+    u && ['blob', 'filesystem', 'view-source'].includes(u.protocol.slice(0, -1)) && i < 8;
+    i++
+  )
+    u = parseURL(u.href.slice(u.protocol.length));
+  return u;
+};
+
+const hostOf = (u) => {
+  const host = (u?.hostname ?? '').toLowerCase();
+  return host.endsWith('.') ? host.slice(0, -1) : host;
+};
+
+export function keptDocument(text) {
+  const u = peel(text);
+  if (!u || !['http:', 'https:'].includes(u.protocol)) return false;
+  const host = hostOf(u);
+  if (host === 'vault.sliccy.ai' || (host.startsWith('vault-') && host.endsWith('.sliccy.ai')))
+    return true;
+  const path = u.pathname || '/';
+  return host === 'seven.sliccy.ai' && path.startsWith('/os/') && path !== '/os/callback.html';
+}
+
+export function keptSecurityOrigin(url, origin) {
+  if (keptDocument(origin)) return true;
+  const u = parseURL(url);
+  const opaque =
+    u?.protocol === 'about:' && ['blank', 'srcdoc'].includes((u.pathname || '').toLowerCase());
+  if (!opaque) return false;
+  const o = peel(origin);
+  if (!o || !['http:', 'https:'].includes(o.protocol)) return false;
+  const host = hostOf(o);
+  return (
+    host === 'seven.sliccy.ai' ||
+    host === 'vault.sliccy.ai' ||
+    (host.startsWith('vault-') && host.endsWith('.sliccy.ai'))
+  );
+}
+
+export function unclosableShape({ url, documentURL, securityOrigin, navigating, navigationURL }) {
+  if (navigating && (!navigationURL || keptDocument(navigationURL))) return true;
+  const error =
+    documentURL === 'chrome-error://chromewebdata/' ||
+    (typeof documentURL === 'string' && documentURL.startsWith('chrome-error:'));
+  const keptNow =
+    keptDocument(url) ||
+    keptDocument(documentURL) ||
+    keptSecurityOrigin(documentURL ?? url, securityOrigin ?? '');
+  if (!keptNow) return false;
+  if (!error) return true;
+  return keptDocument(documentURL) || keptSecurityOrigin(documentURL, securityOrigin ?? '');
+}
+
+async function lockChecks({
+  client,
+  reader,
+  session,
+  targetId,
+  result,
+  until,
+  closeOnly,
+  skipEvaluate,
+  attachRefused,
+}) {
+  if (!closeOnly) {
+    if (session && !skipEvaluate) {
+      result.evaluateRefused = refused(
+        await outcome(
+          client.send(
+            'Runtime.evaluate',
+            { expression: 'document.title', returnByValue: true },
+            session
+          )
+        )
+      );
+    }
+    result.attachRefused = attachRefused;
+  }
+  await measureClose({ client, reader, targetId, result, until });
+}
+
+async function measureClose({ client, reader, targetId, result, until }) {
+  const close = await outcome(client.send('Target.closeTarget', { targetId }));
+  const gone = await until(
+    async () =>
+      !(await reader.send('Target.getTargets')).targetInfos.some((i) => i.targetId === targetId)
+  );
+  result.closed = gone;
+  result.closeRefused = refused(close) && !gone;
+}
+
+async function attachClient(client, targetId) {
+  const attached = await outcome(client.send('Target.attachToTarget', { targetId, flatten: true }));
+  const session = attached.result?.sessionId;
+  if (session) {
+    await outcome(client.send('Page.enable', {}, session));
+    await outcome(client.send('Runtime.enable', {}, session));
+  }
+  return { session, attachRefused: refused(attached) };
+}
+
+async function observerPage(reader, url, notes, internalSessions) {
+  const opened = await outcome(
+    createObserverTarget(reader, { url }, notes).then(async (created) => {
+      const { sessionId } = await reader.send('Target.attachToTarget', {
+        targetId: created.targetId,
+        flatten: true,
+      });
+      await reader.send('Page.enable', {}, sessionId);
+      await reader.send('Runtime.enable', {}, sessionId);
+      return { targetId: created.targetId, sessionId };
+    })
+  );
+  if (!opened.ok) return opened;
+  internalSessions.add(opened.result.sessionId);
+  return opened;
+}
+
+function noteShape(notes, label, evidence) {
+  notes.push(`${label}: ${JSON.stringify(evidence)}`);
+}
+
+async function shapeViewSource({ reader, shapedURL, notes, internalSessions, until }) {
+  const opened = await observerPage(reader, 'about:blank', notes, internalSessions);
+  if (!opened.ok) return opened;
+  const { targetId, sessionId } = opened.result;
+  await reader.send('Page.navigate', { url: shapedURL }, sessionId);
+  let info;
+  const live = await until(async () => {
+    ({ targetInfo: info } = await reader.send('Target.getTargetInfo', { targetId }));
+    return info.url === shapedURL || info.url.startsWith('view-source:');
+  });
+  noteShape(notes, 'view-source', {
+    targetId,
+    type: info?.type,
+    url: info?.url,
+  });
+  return { ok: true, result: { targetId, sessionId, live, shaped: live } };
+}
+
+async function shapeBlob({ reader, origin, tag, notes, internalSessions, until }) {
+  const page = `${origin}/blob-nav?n=${encodeURIComponent(tag)}`;
+  const opened = await observerPage(reader, page, notes, internalSessions);
+  if (!opened.ok) return opened;
+  const { targetId, sessionId } = opened.result;
+  let info;
+  const live = await until(async () => {
+    ({ targetInfo: info } = await reader.send('Target.getTargetInfo', { targetId }));
+    return info.url.startsWith('blob:');
+  });
+  noteShape(notes, 'blob', { targetId, type: info?.type, url: info?.url });
+  return { ok: true, result: { targetId, sessionId, live, shaped: live } };
+}
+
+async function shapeUserinfo({ reader, shapedURL, notes, internalSessions, until }) {
+  const opened = await observerPage(reader, 'about:blank', notes, internalSessions);
+  if (!opened.ok) return opened;
+  const { targetId, sessionId } = opened.result;
+  await reader.send('Page.navigate', { url: shapedURL }, sessionId);
+  let info;
+  let frame;
+  const live = await until(async () => {
+    ({
+      frameTree: { frame },
+    } = await reader.send('Page.getFrameTree', {}, sessionId));
+    ({ targetInfo: info } = await reader.send('Target.getTargetInfo', { targetId }));
+    return (
+      info.url.includes('@') &&
+      info.url.includes('/os/') &&
+      frame.url.includes('@') &&
+      !frame.unreachableUrl
+    );
+  });
+  noteShape(notes, 'userinfo', {
+    targetId,
+    type: info?.type,
+    url: info?.url,
+    frameUrl: frame?.url,
+    hasUserinfo: Boolean(info?.url?.includes('@')),
+  });
+  if (!live && info?.url?.includes('/os/') && !info.url.includes('@'))
+    return {
+      ok: true,
+      result: { incomplete: 'userinfo stripped from top-level target URL' },
+    };
+  return { ok: true, result: { targetId, sessionId, live, shaped: live } };
+}
+
+const raced = (promise, ms) => Promise.race([promise, pause(ms).then(() => undefined)]);
+
+async function shapeNavigating({
+  reader,
+  ordinary,
+  destination,
+  notes,
+  internalSessions,
+  hold,
+  releaseSlow,
+  tag,
+}) {
+  const started = Date.now();
+  const waitBudget = 8000;
+  const start = `${ordinary}/blank?n=close-nav-start`;
+  notes.push(`navigating.start: destination=${destination} budgetMs=${waitBudget}`);
+  notes.push('navigating.fetch: skipped; fixture /slow holds Document (no Fetch.enable)');
+  const opened = await raced(observerPage(reader, start, notes, internalSessions), 3000);
+  if (!opened?.ok)
+    return {
+      ok: true,
+      result: {
+        incomplete: `navigating shape did not appear: observer setup ${opened?.error?.message ?? 'timed out'}`,
+      },
+    };
+  const { targetId, sessionId } = opened.result;
+  hold.targetId = targetId;
+  const sequence = [];
+  let cursor = reader.events.length;
+  let stopped = false;
+  const elapsed = () => Date.now() - started;
+  const readInfo = async () => {
+    const info = await raced(reader.send('Target.getTargetInfo', { targetId }), 400);
+    const listed = await raced(reader.send('Target.getTargets'), 400);
+    const row = listed?.targetInfos?.find((i) => i.targetId === targetId);
+    return info?.targetInfo ?? row;
+  };
+  const snap = async (label) => {
+    const targetInfo = await readInfo();
+    notes.push(
+      `navigating.${label}: ${JSON.stringify({
+        atMs: elapsed(),
+        targetId,
+        type: targetInfo?.type,
+        url: targetInfo?.url,
+        title: targetInfo?.title,
+        attached: targetInfo?.attached,
+        openerId: targetInfo?.openerId,
+        pendingUrl: destination,
+        observerSession: sessionId,
+        sequence: sequence.slice(-12),
+      })}`
+    );
+    return targetInfo;
+  };
+  hold.release = async () => {
+    stopped = true;
+    releaseSlow?.(tag);
+    await pause(20);
+  };
+  hold.abort = hold.release;
+  await snap('0s');
+  const pump = (async () => {
+    while (!stopped) {
+      for (const event of reader.events.slice(cursor)) {
+        cursor++;
+        if (
+          event.method === 'Fetch.requestPaused' ||
+          event.method === 'Page.frameStartedNavigating' ||
+          event.method === 'Page.frameRequestedNavigation' ||
+          event.method === 'Page.frameNavigated'
+        ) {
+          const row = {
+            atMs: elapsed(),
+            method: event.method,
+            sessionId: event.sessionId,
+            url: event.params.request?.url ?? event.params.url ?? event.params.frame?.url,
+            resourceType: event.params.resourceType,
+            requestStage: event.params.requestStage,
+            frameId: event.params.frameId ?? event.params.frame?.id,
+          };
+          sequence.push(row);
+          notes.push(`navigating.event: ${JSON.stringify(row)}`);
+        }
+      }
+      await pause(5);
+    }
+  })();
+  await raced(reader.send('Page.enable', {}, sessionId), 500);
+  notes.push(`navigating.navigate: not-awaited url=${destination} session=${sessionId}`);
+  reader
+    .send('Page.navigate', { url: destination }, sessionId)
+    .then((result) => {
+      notes.push(
+        `navigating.navigateResult: ${JSON.stringify({
+          atMs: elapsed(),
+          frameId: result?.frameId,
+          loaderId: result?.loaderId,
+          errorText: result?.errorText,
+        })}`
+      );
+    })
+    .catch((error) => {
+      notes.push(`navigating.navigateSettled: ${error?.message ?? error}`);
+    });
+  const marks = [1000, 2000, 5000];
+  let mark = 0;
+  let targetInfo;
+  let pending = false;
+  const deadline = started + waitBudget;
+  while (Date.now() < deadline && !pending) {
+    pending = sequence.some(
+      (event) =>
+        (event.method === 'Page.frameStartedNavigating' ||
+          event.method === 'Page.frameRequestedNavigation' ||
+          event.method === 'Fetch.requestPaused') &&
+        (event.url === destination || String(event.url ?? '').includes('/slow'))
+    );
+    if (!pending) {
+      targetInfo = await readInfo();
+      pending = targetInfo?.url === destination || String(targetInfo?.url ?? '').includes('/slow');
+    }
+    while (mark < marks.length && elapsed() >= marks[mark]) {
+      await snap(`${marks[mark] / 1000}s`);
+      mark++;
+    }
+    if (!pending) await pause(25);
+  }
+  stopped = true;
+  await Promise.race([pump, pause(20)]);
+  targetInfo = targetInfo ?? (await readInfo());
+  const shaped = pending;
+  notes.push(
+    `navigating.done: ${JSON.stringify({
+      atMs: elapsed(),
+      shaped,
+      url: targetInfo?.url,
+      title: targetInfo?.title,
+      attached: targetInfo?.attached,
+      pendingUrl: destination,
+      sequence: sequence.slice(-20),
+    })}`
+  );
+  if (!shaped) {
+    notes.push(`navigating.giveUp: no pending /slow within ${waitBudget}ms`);
+    return {
+      ok: true,
+      result: {
+        incomplete: `navigating shape did not appear: no pending /slow within ${waitBudget}ms`,
+        targetId,
+        sessionId,
+      },
+    };
+  }
+  return {
+    ok: true,
+    result: {
+      targetId,
+      sessionId,
+      live: true,
+      shaped: true,
+      navigating: true,
+      navigationURL: destination,
+      closeOnly: true,
+    },
+  };
+}
+
+async function shapeBlankInherited({ reader, origin, tag, notes, internalSessions, until }) {
+  const page = `${origin}/blank-open?n=${encodeURIComponent(tag)}`;
+  const opened = await observerPage(reader, page, notes, internalSessions);
+  if (!opened.ok) return opened;
+  const parent = opened.result;
+  const before = new Set(
+    (await reader.send('Target.getTargets')).targetInfos.map((info) => info.targetId)
+  );
+  const openedBlank = await outcome(
+    reader.send(
+      'Runtime.evaluate',
+      { expression: "window.open(''); undefined", returnByValue: true, userGesture: true },
+      parent.sessionId
+    )
+  );
+  if (!openedBlank.ok)
+    return {
+      ok: true,
+      result: {
+        incomplete: `window.open failed: ${openedBlank.error?.message ?? openedBlank.error}`,
+        parentId: parent.targetId,
+      },
+    };
+  let child;
+  const found = await until(async () => {
+    const listed = await reader.send('Target.getTargets');
+    child = listed.targetInfos.find(
+      (info) =>
+        !before.has(info.targetId) &&
+        info.type === 'page' &&
+        (info.url === 'about:blank' || info.url === '') &&
+        info.openerId === parent.targetId
+    );
+    return Boolean(child);
+  });
+  if (!found) {
+    noteShape(notes, 'blank-inherited', {
+      parentId: parent.targetId,
+      popup: null,
+      reason: 'no about:blank page target with opener',
+    });
+    return {
+      ok: true,
+      result: {
+        incomplete: 'about:blank popup with opener was not created',
+        parentId: parent.targetId,
+      },
+    };
+  }
+  const { sessionId } = await reader.send('Target.attachToTarget', {
+    targetId: child.targetId,
+    flatten: true,
+  });
+  internalSessions.add(sessionId);
+  await reader.send('Page.enable', {}, sessionId);
+  let securityOrigin;
+  try {
+    const { frameTree } = await reader.send('Page.getFrameTree', {}, sessionId);
+    securityOrigin = frameTree.frame.securityOrigin;
+  } catch {
+    securityOrigin = undefined;
+  }
+  noteShape(notes, 'blank-inherited', {
+    targetId: child.targetId,
+    type: child.type,
+    url: child.url,
+    openerId: child.openerId,
+    parentId: parent.targetId,
+    securityOrigin,
+  });
+  return {
+    ok: true,
+    result: {
+      targetId: child.targetId,
+      sessionId,
+      parentId: parent.targetId,
+      live: true,
+      shaped: true,
+      securityOrigin,
+    },
+  };
+}
+
+export async function closeProtectedShape({
+  client,
+  reader,
+  ordinary,
+  protectedOrigin,
+  shape,
+  tag,
+  internalSessions = new Set(),
+  notes = [],
+  budget = 5000,
+  releaseSlow,
+}) {
+  const until = (check) => waitFor(check, budget);
+  const result = {};
+  const hold = {};
+  let shaped;
+  const missing = async (reason) => {
+    hold.abort?.();
+    await hold.release?.();
+    const targetId = shaped?.result?.targetId ?? hold.targetId;
+    const parentId = shaped?.result?.parentId ?? hold.parentId;
+    if (targetId) await outcome(reader.send('Target.closeTarget', { targetId }));
+    if (parentId) await outcome(reader.send('Target.closeTarget', { targetId: parentId }));
+    return { ...result, incomplete: `close-protected-shape: ${reason}` };
+  };
+  if (!reader) return missing('missing unguarded reader');
+  const origin = protectedOrigin;
+  if (shape === 'view-source') {
+    shaped = await shapeViewSource({
+      reader,
+      shapedURL: `view-source:${origin}/doc?n=${encodeURIComponent(tag)}`,
+      notes,
+      internalSessions,
+      until,
+    });
+  } else if (shape === 'blob') {
+    shaped = await shapeBlob({ reader, origin, tag, notes, internalSessions, until });
+  } else if (shape === 'userinfo') {
+    const host = parseURL(origin)?.host;
+    const shapedURL = `${parseURL(origin)?.protocol}//user:pass@${host}/os/index.html?n=${encodeURIComponent(tag)}`;
+    shaped = await shapeUserinfo({ reader, shapedURL, notes, internalSessions, until });
+  } else if (shape === 'navigating') {
+    const navigating = shapeNavigating({
+      reader,
+      ordinary,
+      destination: `${origin}/slow?n=${encodeURIComponent(tag)}&ms=15000`,
+      notes,
+      internalSessions,
+      hold,
+      releaseSlow,
+      tag,
+    }).then((value) => ({ timedOut: false, value }));
+    let hardTimer;
+    const hard = new Promise((resolve) => {
+      hardTimer = setTimeout(() => resolve({ timedOut: true }), 9000);
+    });
+    const winner = await Promise.race([navigating, hard]);
+    clearTimeout(hardTimer);
+    if (winner.timedOut) {
+      notes.push('navigating.giveUp: hard 9s shape budget');
+      hold.abort?.();
+      await hold.release?.();
+      shaped = {
+        ok: true,
+        result: {
+          incomplete: 'navigating shape did not appear: hard 9s shape budget',
+          targetId: hold.targetId,
+        },
+      };
+    } else shaped = winner.value;
+  } else if (shape === 'blank-inherited') {
+    shaped = await shapeBlankInherited({ reader, origin, tag, notes, internalSessions, until });
+  } else {
+    return await missing(`unknown shape ${shape}`);
+  }
+  if (!shaped.ok)
+    return await missing(`observer setup failed: ${shaped.error?.message ?? shaped.error}`);
+  if (shaped.result.incomplete) return await missing(shaped.result.incomplete);
+  if (!shaped.result.live) return await missing(`shape ${shape} did not appear`);
+  Object.assign(result, {
+    shaped: shaped.result.shaped,
+    live: shaped.result.live,
+  });
+  const { targetId } = shaped.result;
+  const closeOnly = shaped.result.closeOnly === true;
+  const { session, attachRefused } = await attachClient(client, targetId);
+  if (!session) {
+    if (!closeOnly) result.attachRefused = attachRefused;
+    await measureClose({ client, reader, targetId, result, until });
+    await hold.release?.();
+    await outcome(reader.send('Target.closeTarget', { targetId }));
+    if (shaped.result.parentId)
+      await outcome(reader.send('Target.closeTarget', { targetId: shaped.result.parentId }));
+    return result;
+  }
+  try {
+    await lockChecks({
+      client,
+      reader,
+      session,
+      targetId,
+      result,
+      until,
+      closeOnly,
+      skipEvaluate: true,
+      attachRefused,
+    });
+    return result;
+  } finally {
+    await hold.release?.();
+    await outcome(reader.send('Target.closeTarget', { targetId }));
+    if (shaped.result.parentId)
+      await outcome(reader.send('Target.closeTarget', { targetId: shaped.result.parentId }));
+  }
+}

package/fixture-server.mjs

@@ -76,6 +76,16 @@ function route(req, url, send, html, redirects) {
         { sourcemap: '/listener.js.map' }
       ),
     '/page': () => html('trigger', trigger(p)),
+    '/blob-nav': () =>
+      html(
+        'blob-nav',
+        `<p>blob-nav ${escape(p.get('n') ?? '')}</p><script>const b=URL.createObjectURL(new Blob(['<!doctype html><title>blob</title><p>blob ${escape(p.get('n') ?? '')}</p>'],{type:'text/html'}));location.replace(b);</script>`
+      ),
+    '/blank': () => html('blank', `<p>blank ${escape(p.get('n') ?? '')}</p>`),
+    '/blank-open': () => html('blank-open', `<p>blank-open ${escape(p.get('n') ?? '')}</p>`),
+    '/os/': () => html('os', `<p>os ${escape(p.get('n') ?? '')}</p>`),
+    '/os/index.html': () => html('os', `<p>os ${escape(p.get('n') ?? '')}</p>`),
+    '/os/callback.html': () => html('os-callback', `<p>callback ${escape(p.get('n') ?? '')}</p>`),
     '/api/cookies': () => send(200, req.headers.cookie ?? 'none', 'text/plain'),
     '/plant': () =>
       html('plant', '<script>localStorage.setItem("canary","planted")</script>', {
@@ -147,10 +157,31 @@ function requestURL(req, scheme) {
   };
 }
 
+async function holdSlow({ req, res, url, p, html, entries, history, slows }) {
+  const n = p.get('n') ?? '';
+  const ms = Math.min(Math.max(Number(p.get('ms') ?? 15000) || 15000, 1), 60000);
+  const entry = {
+    time: Date.now(),
+    url: url.href,
+    method: req.method,
+    headers: { ...req.headers },
+  };
+  entries.push(entry);
+  history.push(entry);
+  await new Promise((resolve) => {
+    const timer = setTimeout(resolve, ms);
+    slows.set(n, { resolve, timer });
+  });
+  slows.delete(n);
+  if (res.writableEnded) return;
+  return html('slow', `<p>slow ${escape(n)}</p>`);
+}
+
 export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency } = {}) {
   let entries = [];
   const history = [];
   const redirects = new Map();
+  const slows = new Map();
   const redirectSecret = async ({ path, host = '', search = '', remove, ...value }) => {
     if (
       typeof path !== 'string' ||
@@ -162,6 +193,14 @@ export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency
     if (remove) redirects.delete(key);
     else redirects.set(key, value);
   };
+  const releaseSlow = (n) => {
+    const entry = slows.get(String(n ?? ''));
+    if (!entry) return false;
+    clearTimeout(entry.timer);
+    entry.resolve();
+    slows.delete(String(n ?? ''));
+    return true;
+  };
   const scheme = tls ? 'https' : 'http';
   const handler = async (req, res) => {
     const url = requestURL(req, scheme);
@@ -183,6 +222,10 @@ export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency
         'text/html',
         headers
       );
+    if (req.method === 'GET' && url.pathname === '/slow') {
+      await holdSlow({ req, res, url, p, html, entries, history, slows });
+      return;
+    }
     if (req.method === 'GET' && url.pathname === '/log') {
       const from = Number(p.get('since') ?? 0);
       if (!Number.isInteger(from) || from < 0 || from > history.length)
@@ -220,6 +263,7 @@ export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency
   return {
     redirects,
     redirectSecret,
+    releaseSlow,
     port: address.port,
     origin: `${scheme}://${host}:${address.port}`,
     log: () => structuredClone(entries),
@@ -228,6 +272,7 @@ export async function fixtureServer({ host = '127.0.0.1', port = 0, tls, latency
     },
     close: () =>
       new Promise((resolve, reject) => {
+        for (const n of [...slows.keys()]) releaseSlow(n);
         server.closeAllConnections();
         server.close((error) => (error ? reject(error) : resolve()));
       }),

package/guard-runner.mjs

@@ -3,6 +3,7 @@ import { fixtureClient, prepareFixture } from './fixture-client.mjs';
 export { fixtureClient };
 
 import { bfcacheRestore } from './bfcache-restore.mjs';
+import { closeProtectedShape } from './close-protected-shape.mjs';
 import { extensionFrame } from './extension-frame.mjs';
 import { DEFAULT_EXTENSION_WORLD_ID, extensionWorld } from './extension-world.mjs';
 import { frameRead } from './frame-read.mjs';
@@ -194,6 +195,7 @@ class Execution {
     this.unsupported = undefined;
     this.preSent = [];
     this.notes = [];
+    this.sharedNotes = Array.isArray(options.notes) ? options.notes : undefined;
     this.answers = [];
     this.internalSessions = new Set();
     this.attachSettings = new Map();
@@ -222,6 +224,10 @@ class Execution {
   note(message) {
     if (this.notes.length >= 80) this.notes.shift();
     Array.prototype.push.call(this.notes, message);
+    if (this.sharedNotes && this.sharedNotes !== this.notes) {
+      if (this.sharedNotes.length >= 80) this.sharedNotes.shift();
+      Array.prototype.push.call(this.sharedNotes, message);
+    }
   }
 
   installClientTrace() {
@@ -894,6 +900,7 @@ class Execution {
       'redirectSecret',
       'unparseable',
       'errorPage',
+      'closeProtectedShape',
       'extensionWorld',
       'extensionFrame',
       'frameRead',
@@ -902,9 +909,14 @@ class Execution {
     if (probe && !out.ok) this.errors.push(`${probe}: ${out.error?.message ?? 'probe failed'}`);
     if (step.client && !out.ok) this.errors.push(`client exit: ${out.error.message}`);
     if (
-      ['errorPage', 'redirectSecret', 'extensionFrame', 'frameRead', 'bfcacheRestore'].includes(
-        probe
-      ) &&
+      [
+        'errorPage',
+        'closeProtectedShape',
+        'redirectSecret',
+        'extensionFrame',
+        'frameRead',
+        'bfcacheRestore',
+      ].includes(probe) &&
       out.ok &&
       out.result?.incomplete
     )
@@ -1000,9 +1012,14 @@ class Execution {
       return;
     }
     if (step.client) return outcome(this.exit());
-    if (step.redirectSecret || step.errorPage) return this.originProbe(step, session);
-    if (step.spawnWorker) return this.spawnWorker(step);
-    if (step.probeSessions) return this.probeSessions(step);
+    if (
+      step.redirectSecret ||
+      step.errorPage ||
+      step.closeProtectedShape ||
+      step.spawnWorker ||
+      step.probeSessions
+    )
+      return this.stepProbe(step, session);
     if (step.bfcacheRestore)
       return outcome(
         bfcacheRestore({
@@ -1143,6 +1160,13 @@ class Execution {
     }
   }
 
+  stepProbe(step, session) {
+    if (step.redirectSecret || step.errorPage) return this.originProbe(step, session);
+    if (step.closeProtectedShape) return this.runCloseProtectedShape(step);
+    if (step.spawnWorker) return this.spawnWorker(step);
+    return this.probeSessions(step);
+  }
+
   async originProbe(step, session) {
     if (step.redirectSecret) {
       this.internalSessions.add(session);
@@ -1187,6 +1211,23 @@ class Execution {
     );
   }
 
+  runCloseProtectedShape(step) {
+    return outcome(
+      closeProtectedShape({
+        client: this.client,
+        reader: this.reader,
+        ordinary: this.vars.ordinary,
+        protectedOrigin: this.vars.target,
+        shape: step.closeProtectedShape,
+        tag: this.vars.tag,
+        internalSessions: this.internalSessions,
+        notes: this.notes,
+        budget: this.bound(5000),
+        releaseSlow: this.options.fixture.releaseSlow,
+      })
+    );
+  }
+
   spawnWorkerKind() {
     return allSteps([...(this.vector.setup ?? []), ...(this.vector.trigger ?? [])]).find(
       (step) => step.spawnWorker
@@ -2175,7 +2216,7 @@ const observerRequired = (check) => {
 const needsObserver = (vector) =>
   vector.control.via === 'unguarded' ||
   allSteps([...(vector.setup ?? []), ...(vector.trigger ?? [])]).some(
-    (step) => step.isolatedWorld || step.observer || step.spawnWorker
+    (step) => step.isolatedWorld || step.observer || step.spawnWorker || step.closeProtectedShape
   ) ||
   observerRequired(vector.liveCheck) ||
   Object.values(vector.observe ?? {}).some(

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.22.1",
+  "setVersion": "1.23.0",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -2406,6 +2406,410 @@
         "fullURL": false
       }
     },
+    {
+      "id": "C8.close-protected.view-source",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "view-source",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["vault"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected view-source vault: the unguarded observer opened the shaped tab",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "closeProtected view-source vault: Target.attachToTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected view-source vault: Target.closeTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected view-source vault: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "attachRefused": false,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "attachRefused": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
+    {
+      "id": "C8.close-protected.blob",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "blob",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["vault"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected blob vault: the unguarded observer opened the shaped tab",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "closeProtected blob vault: Target.attachToTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected blob vault: Target.closeTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected blob vault: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "attachRefused": false,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "attachRefused": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
+    {
+      "id": "C8.close-protected.userinfo",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "userinfo",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["seven"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected userinfo seven UI: top-level tab URL still contains userinfo (@) and /os/ as seen by the unguarded reader",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "closeProtected userinfo seven UI: Target.attachToTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected userinfo seven UI: Target.closeTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected userinfo seven UI: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "attachRefused": false,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "attachRefused": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
+    {
+      "id": "C8.close-protected.navigating",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "navigating",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["vault"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected navigating vault: fixture /slow holds the vault Document response while Page.frameStartedNavigating (or target URL) shows the pending navigation; released after the close attempt",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected navigating vault: Target.closeTarget through the client is refused while the vault Document is pending",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected navigating vault: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
+    {
+      "id": "C8.close-protected.blank-inherited",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "blank-inherited",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["vault"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected blank-inherited vault: an about:blank popup whose opener is a vault tab",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "closeProtected blank-inherited vault: Target.attachToTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected blank-inherited vault: Target.closeTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected blank-inherited vault: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "attachRefused": false,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "attachRefused": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
     {
       "id": "C8.unparseable",
       "family": "C",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.22.1",
+  "version": "1.23.0",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -65,6 +65,7 @@
     "observer-target.mjs",
     "frame-read.mjs",
     "bfcache-restore.mjs",
+    "close-protected-shape.mjs",
     "protected-worker.mjs",
     "fixture-client.mjs"
   ],
@@ -74,7 +75,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && GOOS=darwin go vet ./... && GOOS=windows go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings && cargo check --target wasm32-wasip1 --no-default-features && cargo check --target wasm32-wasip1 --features serde && cargo check --target wasm32-wasip1 --all-features",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-close-protected.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-protected-worker.test.mjs test/integration/guard-protected-worker-chrome-narrow.test.mjs test/integration/guard-protected-worker-chrome-hide.test.mjs test/integration/guard-protected-worker-chrome-hide-cut.test.mjs test/integration/guard-protected-worker-chrome-admit.test.mjs test/integration/guard-protected-worker-chrome-late.test.mjs test/integration/guard-protected-worker-chrome-rewrite.test.mjs test/integration/guard-protected-worker-chrome-rewrite-late.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
+    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-close-protected.test.mjs test/integration/guard-close-protected-shapes.test.mjs test/integration/guard-close-protected-shapes-chrome.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-protected-worker.test.mjs test/integration/guard-protected-worker-chrome-narrow.test.mjs test/integration/guard-protected-worker-chrome-hide.test.mjs test/integration/guard-protected-worker-chrome-hide-cut.test.mjs test/integration/guard-protected-worker-chrome-admit.test.mjs test/integration/guard-protected-worker-chrome-late.test.mjs test/integration/guard-protected-worker-chrome-rewrite.test.mjs test/integration/guard-protected-worker-chrome-rewrite-late.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "prepublishOnly": "node scripts/set-crate-version.mjs \"$npm_package_version\"",

package/schema/guard-vectors.schema.json

@@ -548,6 +548,22 @@
             }
           }
         },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["closeProtectedShape", "as"],
+          "properties": {
+            "closeProtectedShape": {
+              "enum": ["view-source", "blob", "userinfo", "navigating", "blank-inherited"]
+            },
+            "as": {
+              "$ref": "#/$defs/name"
+            },
+            "requires": {
+              "$ref": "#/$defs/requires"
+            }
+          }
+        },
         {
           "type": "object",
           "additionalProperties": false,