@ai-ecoverse/slicc-browsers 1.22.1 → 1.24.0

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.22.1",
+  "setVersion": "1.24.0",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -2406,6 +2406,410 @@
         "fullURL": false
       }
     },
+    {
+      "id": "C8.close-protected.view-source",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "view-source",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["vault"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected view-source vault: the unguarded observer opened the shaped tab",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "closeProtected view-source vault: Target.attachToTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected view-source vault: Target.closeTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected view-source vault: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "attachRefused": false,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "attachRefused": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
+    {
+      "id": "C8.close-protected.blob",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "blob",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["vault"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected blob vault: the unguarded observer opened the shaped tab",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "closeProtected blob vault: Target.attachToTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected blob vault: Target.closeTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected blob vault: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "attachRefused": false,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "attachRefused": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
+    {
+      "id": "C8.close-protected.userinfo",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "userinfo",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["seven"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected userinfo seven UI: top-level tab URL still contains userinfo (@) and /os/ as seen by the unguarded reader",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "closeProtected userinfo seven UI: Target.attachToTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected userinfo seven UI: Target.closeTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected userinfo seven UI: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "attachRefused": false,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "attachRefused": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
+    {
+      "id": "C8.close-protected.navigating",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "navigating",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["vault"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected navigating vault: fixture /slow holds the vault Document response while Page.frameStartedNavigating (or target URL) shows the pending navigation; released after the close attempt",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected navigating vault: Target.closeTarget through the client is refused while the vault Document is pending",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected navigating vault: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
+    {
+      "id": "C8.close-protected.blank-inherited",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "requires": ["closeProtected"],
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "closeProtectedShape": "blank-inherited",
+          "as": "shape",
+          "requires": ["closeProtected"]
+        }
+      ],
+      "targets": ["vault"],
+      "observe": {
+        "shaped": {
+          "means": "closeProtected blank-inherited vault: an about:blank popup whose opener is a vault tab",
+          "check": {
+            "result": "shape",
+            "path": "result.shaped",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "closeProtected blank-inherited vault: Target.attachToTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closeRefused": {
+          "means": "closeProtected blank-inherited vault: Target.closeTarget through the client is refused",
+          "check": {
+            "result": "shape",
+            "path": "result.closeRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "closed": {
+          "means": "closeProtected blank-inherited vault: Target.closeTarget on the locked tab is answered with success and the tab is gone",
+          "check": {
+            "result": "shape",
+            "path": "result.closed",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded observer opened the shaped tab",
+      "liveCheck": {
+        "result": "shape",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "shaped": true,
+          "attachRefused": false,
+          "closeRefused": false,
+          "closed": true
+        }
+      },
+      "expected": {
+        "shaped": true,
+        "attachRefused": true,
+        "closeRefused": true,
+        "closed": false
+      }
+    },
     {
       "id": "C8.unparseable",
       "family": "C",
@@ -31158,6 +31562,207 @@
         "workerReachable": false
       },
       "designDependent": ["attachRefused", "workerAttached"]
+    },
+
+    {
+      "id": "C3.protected-parent-iframes",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "text": "a protected page frames a cross-site ordinary iframe that frames a further ordinary iframe; the guarded client must not list, discover, or attach to either ordinary iframe target"
+        },
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "protectedParentIframes": "nested-cross",
+          "as": "probe",
+          "requires": ["browserSession"]
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["browserSession"],
+      "observe": {
+        "iframeListed": {
+          "means": "C3.protected-parent-iframes: Target.getTargets through the client shows an ordinary iframe under the protected parent by id, URL, or parentId chain",
+          "check": {
+            "result": "probe",
+            "path": "result.iframeListed",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "infoRead": {
+          "means": "C3.protected-parent-iframes: Target.getTargetInfo through the client returns either ordinary iframe under the protected parent",
+          "check": {
+            "result": "probe",
+            "path": "result.infoRead",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "eventsSeen": {
+          "means": "C3.protected-parent-iframes: a discovery event carries either ordinary iframe under the protected parent",
+          "requires": ["discovery"],
+          "check": {
+            "result": "probe",
+            "path": "result.eventsSeen",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "attachSession": {
+          "means": "C3.protected-parent-iframes: Target.attachToTarget on a raw ordinary iframe id returned a session",
+          "check": {
+            "result": "probe",
+            "path": "result.attachSession",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "C3.protected-parent-iframes: Target.attachToTarget on a raw ordinary iframe id was refused",
+          "check": {
+            "result": "probe",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded reader opened the protected host page",
+      "liveCheck": {
+        "result": "probe",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "iframeListed": true,
+          "infoRead": true,
+          "eventsSeen": true,
+          "attachSession": true,
+          "attachRefused": false
+        }
+      },
+      "expected": {
+        "iframeListed": false,
+        "infoRead": false,
+        "eventsSeen": false,
+        "attachSession": false,
+        "attachRefused": true
+      }
+    },
+    {
+      "id": "C3.protected-parent-srcdoc",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "text": "a seven page frames a sandboxed srcdoc iframe without allow-same-origin; when Chrome gives it its own target the guarded client must hide it, otherwise the row is incomplete with that evidence"
+        },
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "protectedParentIframes": "sandboxed-srcdoc",
+          "as": "probe",
+          "requires": ["browserSession"]
+        }
+      ],
+      "targets": ["seven"],
+      "requires": ["browserSession"],
+      "observe": {
+        "iframeListed": {
+          "means": "C3.protected-parent-srcdoc: Target.getTargets through the client shows the sandboxed srcdoc iframe under seven by id, URL, or parentId chain",
+          "check": {
+            "result": "probe",
+            "path": "result.iframeListed",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "infoRead": {
+          "means": "C3.protected-parent-srcdoc: Target.getTargetInfo through the client returns the sandboxed srcdoc iframe under seven",
+          "check": {
+            "result": "probe",
+            "path": "result.infoRead",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "eventsSeen": {
+          "means": "C3.protected-parent-srcdoc: a discovery event carries the sandboxed srcdoc iframe under seven",
+          "requires": ["discovery"],
+          "check": {
+            "result": "probe",
+            "path": "result.eventsSeen",
+            "equals": true,
+            "observer": "client"
+          },
+          "absencePoll": true
+        },
+        "attachSession": {
+          "means": "C3.protected-parent-srcdoc: Target.attachToTarget on the raw srcdoc iframe id returned a session",
+          "check": {
+            "result": "probe",
+            "path": "result.attachSession",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "attachRefused": {
+          "means": "C3.protected-parent-srcdoc: Target.attachToTarget on the raw srcdoc iframe id was refused",
+          "check": {
+            "result": "probe",
+            "path": "result.attachRefused",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the unguarded reader opened the protected host page",
+      "liveCheck": {
+        "result": "probe",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "iframeListed": true,
+          "infoRead": true,
+          "eventsSeen": true,
+          "attachSession": true,
+          "attachRefused": false
+        }
+      },
+      "expected": {
+        "iframeListed": false,
+        "infoRead": false,
+        "eventsSeen": false,
+        "attachSession": false,
+        "attachRefused": true
+      }
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.22.1",
+  "version": "1.24.0",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -65,7 +65,9 @@
     "observer-target.mjs",
     "frame-read.mjs",
     "bfcache-restore.mjs",
+    "close-protected-shape.mjs",
     "protected-worker.mjs",
+    "protected-parent-iframes.mjs",
     "fixture-client.mjs"
   ],
   "scripts": {
@@ -74,7 +76,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && GOOS=darwin go vet ./... && GOOS=windows go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings && cargo check --target wasm32-wasip1 --no-default-features && cargo check --target wasm32-wasip1 --features serde && cargo check --target wasm32-wasip1 --all-features",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-close-protected.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-protected-worker.test.mjs test/integration/guard-protected-worker-chrome-narrow.test.mjs test/integration/guard-protected-worker-chrome-hide.test.mjs test/integration/guard-protected-worker-chrome-hide-cut.test.mjs test/integration/guard-protected-worker-chrome-admit.test.mjs test/integration/guard-protected-worker-chrome-late.test.mjs test/integration/guard-protected-worker-chrome-rewrite.test.mjs test/integration/guard-protected-worker-chrome-rewrite-late.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
+    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-close-protected.test.mjs test/integration/guard-close-protected-shapes.test.mjs test/integration/guard-close-protected-shapes-chrome.test.mjs test/integration/guard-protected-parent-iframes.test.mjs test/integration/guard-protected-parent-iframes-chrome.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-protected-worker.test.mjs test/integration/guard-protected-worker-chrome-narrow.test.mjs test/integration/guard-protected-worker-chrome-hide.test.mjs test/integration/guard-protected-worker-chrome-hide-cut.test.mjs test/integration/guard-protected-worker-chrome-admit.test.mjs test/integration/guard-protected-worker-chrome-late.test.mjs test/integration/guard-protected-worker-chrome-rewrite.test.mjs test/integration/guard-protected-worker-chrome-rewrite-late.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "prepublishOnly": "node scripts/set-crate-version.mjs \"$npm_package_version\"",
@@ -82,10 +84,10 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish",
     "release": "semantic-release",
     "test:unit:redirect": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=redirect-secret.mjs --test-coverage-include=redirect-fragments.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/redirect.lcov test/unit/guard-redirect-*.test.mjs && slicc-diff-cover coverage/unit/redirect.lcov",
-    "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=guard-driver.mjs --test-coverage-include=extension-frame.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
+    "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=guard-driver.mjs --test-coverage-include=extension-frame.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=protected-parent-iframes.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-cdp": "1.48.7",
+    "@ai-ecoverse/slicc-cdp": "1.48.10",
     "@ai-ecoverse/slicc-shared-web": "2.14.2",
     "@biomejs/biome": "2.6.5",
     "ajv": "8.20.0",