@ai-ecoverse/slicc-browsers 1.7.4 → 1.7.6

package/README.md

@@ -87,7 +87,7 @@ Every feature builds for `wasm32-wasip1`.
   - `names`: an endpoint's name when it isn't from a known browser's user-data dir: `electron` when the user agent contains `electronUserAgent`, else `products[<product>]` for the product before the `/` in `/json/version`'s `Browser`, else that product, else `fallback`;
   - `process`: the process scan, see [The process source](#the-process-source).
 - `seven`:
-  - `originScheme` and `originHostPattern`: a seven origin is `https://<host>` with a host matching the pattern, except for the `excludedLabels` (`www`, `vault`, `vault-preview`, `get`, `mcpcat`) and the `excludedLabelPrefixes` (`vault-`, which excludes `vault-feature-x` and any other vault branch preview). The bare apex (`sliccy.ai`, i.e. an empty label) never matches. An origin is compared without the scheme's default port (443 for `https`, 80 for `http`), so `https://seven.sliccy.ai:443` is seven and `https://seven.sliccy.ai:8443` is not. The same goes for extra seven origins;
+  - `originScheme` and `originHostPattern`: a seven origin is `https://<host>` with a host matching the pattern, except for the `excludedLabels` (`www`, `vault`, `vault-preview`, `get`, `mcpcat`, `echo`) and the `excludedLabelPrefixes` (`vault-`, which excludes `vault-feature-x` and any other vault branch preview). The bare apex (`sliccy.ai`, i.e. an empty label) never matches. An origin is compared without the scheme's default port (443 for `https`, 80 for `http`), so `https://seven.sliccy.ai:443` is seven and `https://seven.sliccy.ai:8443` is not. The same goes for extra seven origins;
   - `sitePattern` (`[*.]sliccy.ai`);
   - `switches` and `disabledFeatures`: the seven flags, all `--disable-features` values merged into one switch;
   - `prefs`: values merged into a profile's `Default/Preferences` at the `path` of keys;
@@ -112,7 +112,7 @@ Browser control must never navigate to, open or attach to a target on seven's ow
 3. A scheme in `schemes` is protected when its host is one of `hosts`, or one of `domains` or under one, at any depth and on any port. The host is lower-cased, and one trailing dot is dropped.
 4. Any other URL is protected when its origin is one of the program's **extra origins**: the seven origins it accepts besides `sliccy.ai` (slicc-cli's `--origin` and `--page` origins), compared as `scheme://host[:port]` without the scheme's default port, with the host as in 3.
 
-This is wider than the rule for finding seven (`seven.originHostPattern`, which leaves out the `excludedLabels` and `excludedLabelPrefixes`—`www`, `vault`, `vault-preview`, `get`, `mcpcat`, and any `vault-*` prefix). Every `sliccy.ai` host shares the `sliccy.ai` cookies, and cookies ignore the port and, without `Secure`, the scheme. SLICC six lives on `www.sliccy.ai` and the apex, and its cookies matter. `*.kernel.localhost` is not protected: each port is its own origin, and the agent's own servers live there. An extra origin is matched exactly, so `http://127.0.0.1:5710` doesn't protect `http://127.0.0.1:5711`.
+This is wider than the rule for finding seven (`seven.originHostPattern`, which leaves out the `excludedLabels` and `excludedLabelPrefixes`—`www`, `vault`, `vault-preview`, `get`, `mcpcat`, `echo`, and any `vault-*` prefix). Every `sliccy.ai` host shares the `sliccy.ai` cookies, and cookies ignore the port and, without `Secure`, the scheme. SLICC six lives on `www.sliccy.ai` and the apex, and its cookies matter. `*.kernel.localhost` is not protected: each port is its own origin, and the agent's own servers live there. An extra origin is matched exactly, so `http://127.0.0.1:5710` doesn't protect `http://127.0.0.1:5711`.
 
 **The vault.** `vault.sliccy.ai` is in `hosts` by name, and vault branch previews (`vault-preview.sliccy.ai`, `vault-*.sliccy.ai`) are covered by the `sliccy.ai` domain rule. `sliccy.ai` already covers them all, but vault must stay protected even if `domains` ever changes: the vault must never be a CDP target for agent tools. The one exception is slicc-cli's own pairing attach for the vault, which is the CLI's own connection and not browser control handed to the agent.
 
@@ -173,6 +173,7 @@ Any `cdp`, `page` or `children` step can take `requires`, the capabilities it ne
 - `{ "children": steps, "where"? }`: run these steps on each target auto-attached from then on, then resume it. `where` scopes them to the row's own target: `{ "openerId": "page" }` (opened by the row's page) or `{ "urlPrefix": url }`; other attached targets are resumed and otherwise left alone.
 - `{ "settle": { "beacon"?, "title"?, "ms"?, "variant"?, "session"? } }`: wait for a beacon from `beacon`, for the page `title`, or for the session to detach. It waits up to `ms` (10000 by default), then another 600 ms. `variant` waits the run's detach variant instead.
 - `{ "wait": ms }`.
+- `{ "paused": { "url", "ms" } }`: wait until the client has seen the pause that an `answer` rule for `url` matches (`Fetch.requestPaused` at the rule's stage, or `Fetch.authRequired` for a `Fetch.continueWithAuth` rule). It waits up to `ms`. On the control leg, a pause that never comes fails the row with `paused: no pause for <url> within <ms>ms`. On the guarded leg the guard may hide that pause, so the step waits the full `ms` and doesn't fail. The C5 guessed-id vectors and `C5.auth` use it before their second request, so the probe's interception id falls between the two ids the guess spans.
 - `{ "guess": { "between", "cdp", "params" }, "as" }`: the call for each request id between the ids paused for the two URLs.
 - `{ "text": … }`: a step in words.
 

package/catalog.json

@@ -642,7 +642,7 @@
   "seven": {
     "originScheme": "https",
     "originHostPattern": "^([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)\\.sliccy\\.ai$",
-    "excludedLabels": ["www", "vault", "vault-preview", "get", "mcpcat"],
+    "excludedLabels": ["www", "vault", "vault-preview", "get", "mcpcat", "echo"],
     "excludedLabelPrefixes": ["vault-"],
     "sitePattern": "[*.]sliccy.ai",
     "switches": [

package/guard-runner.mjs

@@ -471,14 +471,33 @@ class Execution {
     this.pending.push(started);
   }
 
-  async answer(event) {
+  rule(event) {
     const p = event.params;
-    const rule = this.answers.find(
+    return this.answers.find(
       (a) =>
         a.url === p.request.url &&
         (!a.stage || (a.stage === 'Response') === Boolean(p.responseStatusCode)) &&
         (a.cdp === 'Fetch.continueWithAuth') === (event.method === 'Fetch.authRequired')
     );
+  }
+
+  async paused({ url, ms }) {
+    const seen = () =>
+      this.client.events
+        .slice(this.eventStart)
+        .some(
+          (event) =>
+            (event.method === 'Fetch.requestPaused' || event.method === 'Fetch.authRequired') &&
+            event.params?.request?.url === url &&
+            this.rule(event)?.url === url
+        );
+    if (!(await this.poll(seen, ms)) && this.side === 'control')
+      this.errors.push(`paused: no pause for ${url} within ${ms}ms`);
+  }
+
+  async answer(event) {
+    const p = event.params;
+    const rule = this.rule(event);
     if (rule?.hold) return;
     const method =
       rule?.cdp ??
@@ -570,6 +589,10 @@ class Execution {
       await sleep(step.wait);
       return;
     }
+    if (step.paused) {
+      await this.paused(step.paused);
+      return;
+    }
     if (step.settle) {
       await this.settle(step.settle);
       return;

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.7.4",
+  "setVersion": "1.7.6",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -6811,7 +6811,10 @@
           "background": true
         },
         {
-          "wait": 500
+          "paused": {
+            "url": "{target}/auth/{tag}?n={tag}",
+            "ms": 5000
+          }
         },
         {
           "page": "fetch",
@@ -6949,7 +6952,10 @@
           "as": "body"
         },
         {
-          "wait": 300
+          "paused": {
+            "url": "{target}/data?n={tag}",
+            "ms": 5000
+          }
         },
         {
           "page": "fetch",
@@ -7120,7 +7126,10 @@
           "as": "body"
         },
         {
-          "wait": 300
+          "paused": {
+            "url": "{target}/data?n={tag}",
+            "ms": 5000
+          }
         },
         {
           "page": "fetch",
@@ -7280,7 +7289,10 @@
           "status": true
         },
         {
-          "wait": 300
+          "paused": {
+            "url": "{target}/data?n={tag}",
+            "ms": 5000
+          }
         },
         {
           "page": "fetch",
@@ -7465,7 +7477,10 @@
           "status": true
         },
         {
-          "wait": 300
+          "paused": {
+            "url": "{target}/auth/{tag}?n={tag}",
+            "ms": 5000
+          }
         },
         {
           "page": "fetch",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.7.4",
+  "version": "1.7.6",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -65,13 +65,13 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish",
     "release": "semantic-release",
     "test:guard": "npm run test:guard-integration && npm run test:guard-sweep",
-    "test:guard-integration": "node --test test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs",
+    "test:guard-integration": "node --test test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs",
     "test:guard-sweep": "node scripts/test-guards.mjs",
     "test:guard-target": "node --test test/integration/guard-runner.test.mjs",
     "test:unit:guard": "node --experimental-test-coverage --test --test-coverage-include=guard-runner.mjs --test-coverage-include=fixture-server.mjs --test-coverage-lines=100 test/unit/guard-*.test.mjs"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-shared-web": "1.21.0",
+    "@ai-ecoverse/slicc-shared-web": "1.23.0",
     "@biomejs/biome": "2.5.15",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",

package/protected.json

@@ -314,6 +314,10 @@
       "url": "https://vault-preview.sliccy.ai/",
       "protected": true
     },
+    {
+      "url": "https://echo.sliccy.ai/",
+      "protected": true
+    },
     {
       "url": "https://vault-feature-x.sliccy.ai/",
       "protected": true

package/schema/guard-vectors.schema.json

@@ -616,6 +616,30 @@
             }
           }
         },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["paused"],
+          "properties": {
+            "paused": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["url", "ms"],
+              "properties": {
+                "url": {
+                  "type": "string"
+                },
+                "ms": {
+                  "type": "integer",
+                  "minimum": 1
+                }
+              }
+            },
+            "on": {
+              "$ref": "#/$defs/on"
+            }
+          }
+        },
         {
           "type": "object",
           "additionalProperties": false,