u-chan-secrets 4.0.1 → 5.0.0

package/dist/service/private-network.js

@@ -0,0 +1,97 @@
+import { createServer, request as httpRequest } from 'node:http';
+import { connect } from 'node:net';
+/** Per-context HTTP/CONNECT proxy: every redirect and child target must obtain a separately checked destination. */
+export async function createPrivateNetwork(hostCheck, signal, loopbackHttpOriginForTesting) {
+    let blocked = false, closing;
+    const testOrigin = loopbackHttpOriginForTesting ? new URL(loopbackHttpOriginForTesting) : undefined;
+    if (testOrigin && (testOrigin.protocol !== 'http:' || testOrigin.hostname !== '127.0.0.1' || testOrigin.username || testOrigin.password))
+        throw new Error('Invalid loopback fixture origin');
+    const sockets = new Set();
+    const allowed = (url) => {
+        try {
+            return !signal.aborted && !url.username && !url.password && hostCheck(url.href);
+        }
+        catch {
+            return false;
+        }
+    };
+    const track = (socket) => { sockets.add(socket); socket.once('close', () => sockets.delete(socket)); socket.on('error', () => { }); socket.setTimeout(60000, () => socket.destroy()); };
+    const server = createServer((incoming, response) => {
+        let url;
+        try {
+            url = new URL(incoming.url ?? '');
+        }
+        catch {
+            blocked = true;
+            response.writeHead(403);
+            response.end();
+            return;
+        }
+        if (!testOrigin || url.protocol !== 'http:' || url.origin !== testOrigin.origin || !allowed(url)) {
+            blocked = true;
+            response.writeHead(403);
+            response.end();
+            return;
+        }
+        const headers = { ...incoming.headers, host: testOrigin.host };
+        delete headers['proxy-authorization'];
+        delete headers['proxy-connection'];
+        // Plain HTTP exists only for explicitly injected loopback fixtures; the production path uses approved HTTPS CONNECT.
+        const outgoing = httpRequest({ hostname: '127.0.0.1', port: Number(testOrigin.port || 80), path: url.pathname + url.search, method: incoming.method, headers, agent: false }, upstream => {
+            response.writeHead(upstream.statusCode ?? 502, upstream.headers);
+            upstream.pipe(response);
+        });
+        outgoing.on('socket', track);
+        outgoing.on('error', () => { if (!response.headersSent)
+            response.writeHead(502); response.end(); });
+        incoming.on('error', () => outgoing.destroy());
+        incoming.pipe(outgoing); // No redirect following or credential buffering in the proxy.
+    });
+    server.on('connection', socket => { track(socket); if (sockets.size > 128)
+        socket.destroy(); });
+    server.on('clientError', (_error, socket) => socket.destroy());
+    server.on('upgrade', (_request, socket) => { blocked = true; socket.destroy(); }); // Production permits WSS via checked CONNECT only.
+    server.on('connect', (incoming, connection, head) => {
+        const client = connection;
+        let url;
+        try {
+            url = new URL('https://' + incoming.url);
+        }
+        catch {
+            blocked = true;
+            client.destroy();
+            return;
+        }
+        if (url.pathname !== '/' || url.search || url.hash || !allowed(url)) {
+            blocked = true;
+            client.end('HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n');
+            return;
+        }
+        const upstream = connect({ host: url.hostname.replace(/^\[|\]$/g, ''), port: Number(url.port || 443) });
+        track(upstream);
+        upstream.once('connect', () => {
+            if (signal.aborted || client.destroyed) {
+                upstream.destroy();
+                return;
+            }
+            client.write('HTTP/1.1 200 Connection Established\r\n\r\n');
+            if (head.length)
+                upstream.write(head);
+            upstream.pipe(client);
+            client.pipe(upstream);
+        });
+        upstream.once('error', () => client.destroy());
+        client.once('close', () => upstream.destroy());
+    });
+    await new Promise((resolve, reject) => { server.once('error', reject); server.listen(0, '127.0.0.1', () => { server.off('error', reject); resolve(); }); });
+    const close = () => closing ??= new Promise(resolve => { signal.removeEventListener('abort', abort); for (const socket of sockets)
+        socket.destroy(); server.close(() => resolve()); });
+    const abort = () => { void close(); };
+    signal.addEventListener('abort', abort, { once: true });
+    if (signal.aborted)
+        await close();
+    const address = server.address();
+    if (!address || typeof address === 'string')
+        throw new Error('Private network unavailable');
+    return { proxy: { server: `http://127.0.0.1:${address.port}`, bypass: '<-loopback>' }, wasBlocked: () => blocked, close };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "u-chan-secrets",
-  "version": "4.0.1",
+  "version": "5.0.0",
   "description": "U-Chan Secrets: local MCP server for Bitwarden-backed logins",
   "license": "MIT",
   "type": "module",

package/scripts/debug-install.bat

@@ -1,69 +1,69 @@
-@echo off
-setlocal
-set ROOT=%~dp0..
-
-fltmc.exe >nul 2>&1
-if %errorlevel% neq 0 (
-    echo [*] Requesting Administrator elevation...
-    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
-    exit /b
-)
-
-cd /d "%ROOT%"
-echo ========================================================
-echo       U-Chan Secrets V2 Installation & Setup
-echo ========================================================
-echo.
-echo [*] Step 1: Stopping previous service (if any)...
-taskkill /F /IM prompt-helper.exe >nul 2>&1
-taskkill /F /IM auth-helper.exe >nul 2>&1
-call node dist\cli.js uninstall
-echo.
-echo [*] Step 2: Installing U-Chan Windows Service...
-call node dist\cli.js install
-if %errorlevel% neq 0 (
-    echo.
-    echo [X] Installation failed with exit code %errorlevel%.
-    pause
-    exit /b %errorlevel%
-)
-icacls C:\ProgramData\u-chan-secrets\bin /grant "Users:(OI)(CI)RX" >nul 2>&1
-echo.
-echo [*] Step 3: Checking service status...
-sc.exe query u-chan-secrets
-echo.
-
-echo [*] Step 4: Bitwarden Vault Login...
-set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
-set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
-if not exist "%BW_BIN%" (
-    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
-)
-
-if exist "%BW_BIN%" (
-    "%BW_BIN%" status > "%TEMP%\bw_stat.json" 2>&1
-    findstr /C:"\"unauthenticated\"" "%TEMP%\bw_stat.json" >nul 2>&1
-    if %errorlevel% equ 0 (
-        echo [!] Bitwarden is not logged in for the privileged service.
-        echo [*] Please log in to your Bitwarden vault below:
-        "%BW_BIN%" login
-    ) else (
-        echo [+] Bitwarden vault is already logged in.
-    )
-    del "%TEMP%\bw_stat.json" >nul 2>&1
-) else (
-    echo [!] Warning: bw.exe not found.
-)
-
-echo.
-copy /y C:\ProgramData\u-chan-secrets\service.log "%ROOT%\service-copy.log" >nul 2>&1
-copy /y C:\ProgramData\u-chan-secrets\settings.json "%ROOT%\settings-copy.json" >nul 2>&1
-echo ========================================================
-echo [+] Service and Bitwarden configuration complete!
-echo.
-echo Next: Close this window, open your normal terminal, and run:
-echo    u-chan import-v1
-echo    u-chan unlock
-echo ========================================================
-echo.
-pause
+@echo off
+setlocal
+set ROOT=%~dp0..
+
+fltmc.exe >nul 2>&1
+if %errorlevel% neq 0 (
+    echo [*] Requesting Administrator elevation...
+    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
+    exit /b
+)
+
+cd /d "%ROOT%"
+echo ========================================================
+echo       U-Chan Secrets V2 Installation & Setup
+echo ========================================================
+echo.
+echo [*] Step 1: Stopping previous service (if any)...
+taskkill /F /IM prompt-helper.exe >nul 2>&1
+taskkill /F /IM auth-helper.exe >nul 2>&1
+call node dist\cli.js uninstall
+echo.
+echo [*] Step 2: Installing U-Chan Windows Service...
+call node dist\cli.js install
+if %errorlevel% neq 0 (
+    echo.
+    echo [X] Installation failed with exit code %errorlevel%.
+    pause
+    exit /b %errorlevel%
+)
+icacls C:\ProgramData\u-chan-secrets\bin /grant "Users:(OI)(CI)RX" >nul 2>&1
+echo.
+echo [*] Step 3: Checking service status...
+sc.exe query u-chan-secrets
+echo.
+
+echo [*] Step 4: Bitwarden Vault Login...
+set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
+set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
+if not exist "%BW_BIN%" (
+    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
+)
+
+if exist "%BW_BIN%" (
+    "%BW_BIN%" status > "%TEMP%\bw_stat.json" 2>&1
+    findstr /C:"\"unauthenticated\"" "%TEMP%\bw_stat.json" >nul 2>&1
+    if %errorlevel% equ 0 (
+        echo [!] Bitwarden is not logged in for the privileged service.
+        echo [*] Please log in to your Bitwarden vault below:
+        "%BW_BIN%" login
+    ) else (
+        echo [+] Bitwarden vault is already logged in.
+    )
+    del "%TEMP%\bw_stat.json" >nul 2>&1
+) else (
+    echo [!] Warning: bw.exe not found.
+)
+
+echo.
+copy /y C:\ProgramData\u-chan-secrets\service.log "%ROOT%\service-copy.log" >nul 2>&1
+copy /y C:\ProgramData\u-chan-secrets\settings.json "%ROOT%\settings-copy.json" >nul 2>&1
+echo ========================================================
+echo [+] Service and Bitwarden configuration complete!
+echo.
+echo Next: Close this window, open your normal terminal, and run:
+echo    u-chan import-v1
+echo    u-chan unlock
+echo ========================================================
+echo.
+pause

package/scripts/desktop-browser.ps1

@@ -0,0 +1,103 @@
+# Shared user-side Chrome/Edge launcher and read-only process policy. No elevation or vault access.
+function Split-UChanWindowsCommandLine([string]$CommandLine) {
+    if (-not ('UChanWindowsCommandLine' -as [type])) {
+        Add-Type -TypeDefinition @'
+using System;
+using System.Runtime.InteropServices;
+public static class UChanWindowsCommandLine {
+    [DllImport("shell32.dll", SetLastError=true, CharSet=CharSet.Unicode)] static extern IntPtr CommandLineToArgvW(string value, out int count);
+    [DllImport("kernel32.dll")] static extern IntPtr LocalFree(IntPtr value);
+    public static string[] Split(string value) {
+        int count; IntPtr memory=CommandLineToArgvW(value,out count);
+        if(memory==IntPtr.Zero) throw new InvalidOperationException("Command line is unavailable");
+        try { string[] result=new string[count]; for(int i=0;i<count;i++)result[i]=Marshal.PtrToStringUni(Marshal.ReadIntPtr(memory,i*IntPtr.Size)); return result; }
+        finally { LocalFree(memory); }
+    }
+}
+'@
+    }
+    return [UChanWindowsCommandLine]::Split($CommandLine)
+}
+function Test-UChanBrowserProcess($Observation, [string]$Executable, [string]$Profile, [string]$OwnerSid, [int]$Port) {
+    if (-not $Observation.ExecutablePath -or -not $Observation.OwnerSid -or -not $Observation.CommandLine -or -not $Observation.Addresses) { return 'unknown' }
+    if ($Observation.ExecutablePath -ine $Executable -or $Observation.OwnerSid -ne $OwnerSid) { return 'fail' }
+    foreach ($address in $Observation.Addresses) { if ($address -notin @('127.0.0.1','::1')) { return 'fail' } }
+    try { $tokens = @(Split-UChanWindowsCommandLine $Observation.CommandLine) } catch { return 'unknown' }
+    if ($tokens.Count -lt 1 -or $tokens[0] -ine $Executable) { return 'fail' }
+    $profiles = @($tokens | Where-Object { $_ -imatch '^--user-data-dir(?:=|$)' })
+    if ($profiles.Count -ne 1 -or $profiles[0] -inotmatch '^--user-data-dir=.+$') { return 'fail' }
+    $actual = $profiles[0].Substring('--user-data-dir='.Length)
+    try { if ([IO.Path]::GetFullPath($actual).TrimEnd('\') -ine [IO.Path]::GetFullPath($Profile).TrimEnd('\')) { return 'fail' } } catch { return 'fail' }
+    $ports = @($tokens | Where-Object { $_ -imatch '^--remote-debugging-port(?:=|$)' })
+    if ($ports.Count -ne 1 -or $ports[0] -inotmatch '^--remote-debugging-port=[0-9]+$' -or $ports[0].Substring('--remote-debugging-port='.Length) -ne [string]$Port) { return 'fail' }
+    return 'pass'
+}
+
+function Get-UChanBrowserConfiguration([string]$Browser, [string]$HomeOverride, [string]$OwnerOverride, [string]$LocalOverride) {
+    $userHome = if ($HomeOverride) { $HomeOverride } elseif ($env:U_CHAN_HOME) { $env:U_CHAN_HOME } else { Join-Path $env:APPDATA 'u-chan-secrets' }
+    if (-not $Browser) { $Browser = $env:U_CHAN_BROWSER }
+    if (-not $Browser) {
+        $choice = Join-Path $userHome 'browser.json'
+        if (Test-Path -LiteralPath $choice) {
+            $item = Get-Item -LiteralPath $choice -Force
+            if ($item.PSIsContainer -or ($item.Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Browser preference path is redirected.' }
+            $saved = Get-Content -LiteralPath $choice -Raw | ConvertFrom-Json
+            if (@($saved.PSObject.Properties).Count -ne 1) { throw 'Invalid browser preference.' }
+            $Browser = $saved.browser
+            if (-not $Browser) { throw 'Invalid browser preference.' }
+        } else { $Browser = 'chrome' }
+    }
+    if ($Browser -cnotin @('chrome','edge')) { throw 'Choose chrome or edge.' }
+    $profile = Join-Path $userHome ($Browser + '-profile')
+    $check = [IO.Path]::GetFullPath($profile)
+    while ($check) {
+        if ((Test-Path -LiteralPath $check) -and ((Get-Item -LiteralPath $check -Force).Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Dedicated browser profile is redirected.' }
+        $check = [IO.Path]::GetDirectoryName($check)
+    }
+    $cdp = [Uri]$(if ($env:U_CHAN_CDP) { $env:U_CHAN_CDP } else { 'http://127.0.0.1:9222' })
+    if ($cdp.Scheme -ne 'http' -or $cdp.Host -notin @('127.0.0.1','localhost','[::1]','::1') -or $cdp.UserInfo -or $cdp.AbsolutePath -ne '/' -or $cdp.Query -or $cdp.Fragment) { throw 'Use an HTTP loopback CDP origin without credentials, path, query or fragment.' }
+    $suffix = if ($Browser -eq 'edge') { 'Microsoft\Edge\Application\msedge.exe' } else { 'Google\Chrome\Application\chrome.exe' }
+    $local = if ($LocalOverride) { $LocalOverride } else { $env:LOCALAPPDATA }
+    $candidates = @(foreach ($base in @($env:ProgramFiles, ${env:ProgramFiles(x86)}, $local)) { if ($base) { Join-Path $base $suffix } })
+    $executables = @($candidates | Where-Object { Test-Path -LiteralPath $_ -PathType Leaf })
+    $owner = if ($OwnerOverride) { $OwnerOverride } else { [Security.Principal.WindowsIdentity]::GetCurrent().User.Value }
+    return @{ Browser=$Browser; Profile=$profile; Endpoint=$cdp; Executables=$executables; OwnerSid=$owner }
+}
+
+# Privileged checks derive the desktop home from the installed owner's SID, never SYSTEM's APPDATA or user preference files.
+function Get-UChanOwnerBrowserConfiguration([string]$OwnerSid, [string]$Browser) {
+    if ($OwnerSid -notmatch '^S-1-5-21-(?:[0-9]+-){3}[0-9]+$') { throw 'Installed desktop owner is invalid.' }
+    $profile = (Get-ItemProperty -LiteralPath ('HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\'+$OwnerSid) -ErrorAction Stop).ProfileImagePath
+    if (-not $profile) { throw 'Installed desktop owner profile is unavailable.' }
+    $profile = [Environment]::ExpandEnvironmentVariables($profile)
+    $roaming = Join-Path $profile 'AppData\Roaming'
+    $local = Join-Path $profile 'AppData\Local'
+    $shell = Get-ItemProperty -LiteralPath ('Registry::HKEY_USERS\'+$OwnerSid+'\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders') -ErrorAction SilentlyContinue
+    if ($shell.AppData) { $roaming = [Environment]::ExpandEnvironmentVariables(($shell.AppData -ireplace '%USERPROFILE%', $profile)) }
+    if ($shell.'Local AppData') { $local = [Environment]::ExpandEnvironmentVariables(($shell.'Local AppData' -ireplace '%USERPROFILE%', $profile)) }
+    $desktopHome = if ($env:U_CHAN_DESKTOP_HOME) { $env:U_CHAN_DESKTOP_HOME } else { Join-Path $roaming 'u-chan-secrets' }
+    return Get-UChanBrowserConfiguration $Browser $desktopHome $OwnerSid $local
+}
+
+function Get-UChanBrowserState($Configuration) {
+    try {
+        $listeners = @(Get-NetTCPConnection -State Listen -ErrorAction Stop | Where-Object LocalPort -eq $Configuration.Endpoint.Port)
+        if ($listeners.Count -eq 0) { return 'missing' }
+        $owners = @($listeners.OwningProcess | Select-Object -Unique)
+        if ($owners.Count -ne 1) { return 'fail' }
+        $process = Get-CimInstance Win32_Process -Filter ("ProcessId=" + $owners[0]) -ErrorAction Stop
+        if (-not $process) { return 'unknown' }
+        $owner = Invoke-CimMethod -InputObject $process -MethodName GetOwnerSid -ErrorAction Stop
+        $observation = @{ ExecutablePath=$process.ExecutablePath; OwnerSid=$owner.Sid; CommandLine=$process.CommandLine; Addresses=@($listeners.LocalAddress) }
+        if (-not $process.ExecutablePath) { return 'unknown' }
+        if ($process.ExecutablePath -notin $Configuration.Executables) { return 'fail' }
+        $policy = Test-UChanBrowserProcess $observation $process.ExecutablePath $Configuration.Profile $Configuration.OwnerSid $Configuration.Endpoint.Port
+        if ($policy -ne 'pass') { return $policy }
+        $version = Invoke-RestMethod -Uri ([Uri]::new($Configuration.Endpoint,'/json/version')) -TimeoutSec 2 -ErrorAction Stop
+        $socket = [Uri]$version.webSocketDebuggerUrl
+        if ($socket.Scheme -ne 'ws' -or $socket.Host -notin @('127.0.0.1','localhost','[::1]','::1') -or $socket.Port -ne $Configuration.Endpoint.Port -or $socket.UserInfo) { return 'fail' }
+        $edge = $version.'User-Agent' -match '(?:Edg|Edge)/'
+        if (($Configuration.Browser -eq 'edge') -ne $edge) { return 'fail' }
+        return 'pass'
+    } catch { return 'unknown' }
+}

package/scripts/login-bw.bat

@@ -1,21 +1,21 @@
-@echo off
-setlocal
-set ROOT=%~dp0..
-
-fltmc.exe >nul 2>&1
-if %errorlevel% neq 0 (
-    echo [*] Requesting Administrator elevation...
-    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
-    exit /b
-)
-
-set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
-set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
-if not exist "%BW_BIN%" (
-    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
-)
-
-echo [*] Logging in to Bitwarden for U-Chan Service Store...
-"%BW_BIN%" login
-echo.
-pause
+@echo off
+setlocal
+set ROOT=%~dp0..
+
+fltmc.exe >nul 2>&1
+if %errorlevel% neq 0 (
+    echo [*] Requesting Administrator elevation...
+    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
+    exit /b
+)
+
+set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
+set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
+if not exist "%BW_BIN%" (
+    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
+)
+
+echo [*] Logging in to Bitwarden for U-Chan Service Store...
+"%BW_BIN%" login
+echo.
+pause

package/scripts/migrate.bat

@@ -1,4 +1,4 @@
-@echo off
-setlocal
-call "%~dp0debug-install.bat" %*
-
+@echo off
+setlocal
+call "%~dp0debug-install.bat" %*
+

package/scripts/start-browser.ps1

@@ -0,0 +1,33 @@
+param([ValidateSet('chrome','edge')][string]$Browser, [switch]$Background, [switch]$CheckOnly, [string]$DesktopOwnerSid)
+$ErrorActionPreference='Stop'
+. (Join-Path $PSScriptRoot 'desktop-browser.ps1')
+if ($DesktopOwnerSid) {
+    if (-not $CheckOnly) { throw 'An owner-specific inspection cannot launch a desktop browser.' }
+    $observed = 'unknown'
+    $kinds = if ($Browser) { @($Browser) } else { @('chrome','edge') }
+    foreach ($kind in $kinds) {
+        $configuration = Get-UChanOwnerBrowserConfiguration $DesktopOwnerSid $kind
+        $candidate = Get-UChanBrowserState $configuration
+        if ($candidate -eq 'pass') { 'pass'; return }
+        if ($candidate -eq 'fail' -or $candidate -eq 'missing') { $observed = 'fail' }
+    }
+    $observed; return
+}
+$configuration=Get-UChanBrowserConfiguration $Browser
+$state=Get-UChanBrowserState $configuration
+if ($CheckOnly) { if ($state -eq 'missing') { 'fail' } else { $state }; return }
+if ($state -eq 'pass') { Write-Host ($configuration.Browser + ' dedicated browser is ready.'); return }
+if ($state -ne 'missing') { throw 'The browser endpoint is occupied, mismatched, or unverifiable. Close only the previous dedicated U-Chan browser before switching; keep personal windows open.' }
+if ($configuration.Executables.Count -eq 0) { throw ($configuration.Browser + ' is not installed. Install it or explicitly select the other supported browser.') }
+New-Item -ItemType Directory -Force -Path $configuration.Profile | Out-Null
+$arguments=@(('--remote-debugging-port='+$configuration.Endpoint.Port), '--remote-debugging-address=127.0.0.1', ('--user-data-dir="'+$configuration.Profile+'"'), '--no-first-run')
+if ($Background) { $arguments += '--no-startup-window' }
+Start-Process -FilePath $configuration.Executables[0] -ArgumentList $arguments -WindowStyle Hidden
+$deadline=[DateTime]::UtcNow.AddSeconds(15)
+do {
+    Start-Sleep -Milliseconds 300
+    $state=Get-UChanBrowserState $configuration
+    if ($state -eq 'pass') { Write-Host ($configuration.Browser + ' dedicated browser started.'); return }
+    if ($state -eq 'fail') { break }
+} while ([DateTime]::UtcNow -lt $deadline)
+throw 'Selected dedicated browser did not become verifiably ready. Check browser policy and run setup again.'

package/scripts/start-chrome.ps1

@@ -1,39 +1,5 @@
-param([switch]$Background)
+param([switch]$Background, [switch]$CheckOnly)
 $ErrorActionPreference = 'Stop'
-$home_ = if ($env:U_CHAN_HOME) { $env:U_CHAN_HOME } else { Join-Path $env:APPDATA 'u-chan-secrets' }
-$profileDir = Join-Path $home_ 'chrome-profile'   # dedicated profile, never the default Chrome profile
-$cdp = [Uri]$(if ($env:U_CHAN_CDP) { $env:U_CHAN_CDP } else { 'http://127.0.0.1:9222' })
-if ($cdp.Scheme -ne 'http' -or $cdp.Host -notin @('127.0.0.1', 'localhost', '[::1]', '::1') -or $cdp.UserInfo -or $cdp.AbsolutePath -ne '/' -or $cdp.Query -or $cdp.Fragment) {
-  throw 'Use an HTTP loopback CDP origin without user information, path, query or fragment.'
-}
-$port = $cdp.Port
-$bindHost = $cdp.Host
-
-# Already listening? Then do nothing (short TCP probe; Test-NetConnection is slow).
-$client = New-Object System.Net.Sockets.TcpClient
-try {
-  $iar = $client.BeginConnect($bindHost, $port, $null, $null)
-  if ($iar.AsyncWaitHandle.WaitOne(500) -and $client.Connected) {
-    Write-Host "Port $port already open; Chrome is already running with remote debugging."
-    return
-  }
-} catch { } finally { $client.Close() }
-
-$candidates = @(
-  (Join-Path $env:ProgramFiles 'Google\Chrome\Application\chrome.exe'),
-  (Join-Path ${env:ProgramFiles(x86)} 'Google\Chrome\Application\chrome.exe'),
-  (Join-Path $env:LOCALAPPDATA 'Google\Chrome\Application\chrome.exe')
-)
-$chrome = $candidates | Where-Object { $_ -and (Test-Path $_) } | Select-Object -First 1
-if (-not $chrome) { throw 'chrome.exe not found' }
-
-New-Item -ItemType Directory -Force -Path $profileDir | Out-Null
-$chromeArgs = @(
-  "--remote-debugging-port=$port",
-  "--remote-debugging-address=$bindHost",
-  "--user-data-dir=`"$profileDir`"",
-  '--no-first-run'
-)
-if ($Background) { $chromeArgs += '--no-startup-window' }
-Start-Process -FilePath $chrome -ArgumentList $chromeArgs -WindowStyle Hidden
-Write-Host "Chrome started (profile: $profileDir, CDP: http://${bindHost}:$port)"
+# Compatibility entry point: dedicated profile, never the default Chrome profile.
+# Already listening? Validate browser identity, owner, profile and CDP before reusing it.
+& (Join-Path $PSScriptRoot 'start-browser.ps1') -Browser chrome -Background:$Background -CheckOnly:$CheckOnly

package/scripts/verify-windows-adversarial.mjs

@@ -121,16 +121,26 @@ if (command === '--prepare') {
   const publicDirectory = await createChannel(runIdArgument ?? randomUUID())
   const home = path.join(process.env.ProgramData ?? 'C:\\ProgramData', 'u-chan-secrets')
   const root = path.join(home, '#0 backup', 'browser-probe-' + randomUUID()), task = 'UChanBrowserProbe-' + randomUUID()
+  const program = process.argv[4] ? path.resolve(process.argv[4]) : path.join(home, 'program'), endpoint = process.argv[5] ?? 'http://127.0.0.1:9222', matrix = process.argv[6] === 'matrix'
+  if (program !== path.join(home, 'program') && !program.startsWith(path.resolve(home, '#0 backup') + path.sep)) throw new Error('Candidate must be in protected backup storage')
+  const { safeCdpOrigin } = await import('../dist/core/doctor.js')
+  if (!safeCdpOrigin(endpoint)) throw new Error('Unsafe fixture endpoint')
+  const desktopHome = matrix ? path.resolve(process.argv[7] ?? '') : undefined
+  if (matrix && (!desktopHome.startsWith(path.resolve(os.tmpdir(), 'u-chan-v5-matrix-' + runIdArgument) + path.sep) || !['chrome','edge'].includes(path.basename(desktopHome)))) throw new Error('Unsafe disposable desktop home')
   let registered = false
   try {
     await fs.mkdir(root); await setAdminOnlyAcl(root)
+    if (matrix) {
+      const settings = JSON.parse(await fs.readFile(path.join(home, 'settings.json'), 'utf8'))
+      await fs.writeFile(path.join(root, 'matrix-context.json'), JSON.stringify({ desktopHome, ownerSid: settings.authorizedSid }))
+    }
     const runner = path.join(root, 'runner.mjs')
     await fs.copyFile(new URL('./windows-security/browser-worker.mjs', import.meta.url), runner)
     await fs.copyFile(new URL('./windows-security/module-audit.ps1', import.meta.url), path.join(root, 'module-audit.ps1'))
     await fs.copyFile(new URL('./windows-security/result-policy.mjs', import.meta.url), path.join(root, 'result-policy.mjs'))
     await setAdminOnlyAcl(root)
     const transcripts = path.join(process.env.USERPROFILE, '.codex', 'sessions')
-    await ps(`$ErrorActionPreference='Stop';$a=New-ScheduledTaskAction -Execute ${quote(path.join(home, 'bin', 'node.exe'))} -Argument ${quote('"' + runner + '" "' + root + '" "' + transcripts + '"')} -WorkingDirectory ${quote(root)};$p=New-ScheduledTaskPrincipal -UserId 'SYSTEM' -LogonType ServiceAccount -RunLevel Highest;$s=New-ScheduledTaskSettingsSet -ExecutionTimeLimit (New-TimeSpan -Minutes 3) -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries;Register-ScheduledTask -TaskName ${quote(task)} -Action $a -Principal $p -Settings $s | Out-Null`)
+    await ps(`$ErrorActionPreference='Stop';$a=New-ScheduledTaskAction -Execute ${quote(path.join(home, 'bin', 'node.exe'))} -Argument ${quote('"' + runner + '" "' + root + '" "' + transcripts + '" "' + program + '" "' + endpoint + '"' + (matrix ? ' matrix' : ''))} -WorkingDirectory ${quote(root)};$p=New-ScheduledTaskPrincipal -UserId 'SYSTEM' -LogonType ServiceAccount -RunLevel Highest;$s=New-ScheduledTaskSettingsSet -ExecutionTimeLimit (New-TimeSpan -Minutes 3) -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries;Register-ScheduledTask -TaskName ${quote(task)} -Action $a -Principal $p -Settings $s | Out-Null`)
     registered = true; await ps(`Start-ScheduledTask -TaskName ${quote(task)}`)
     const output = path.join(root, 'browser-result.json'), deadline = Date.now() + 90000
     while (Date.now() < deadline && !await fs.stat(output).catch(() => null)) await sleep(200)

package/scripts/windows-security/browser-worker.mjs

@@ -10,13 +10,18 @@ import { moduleAuditSucceeded } from './result-policy.mjs'
 const exec = promisify(execFile), root = path.resolve(process.argv[2])
 const home = path.join(process.env.ProgramData ?? 'C:\\ProgramData', 'u-chan-secrets')
 if (!root.startsWith(path.resolve(home, '#0 backup') + path.sep)) throw new Error('Unsafe fixture path')
+const program = process.argv[4] ? path.resolve(process.argv[4]) : path.join(home, 'program')
+if (program !== path.join(home, 'program') && !program.startsWith(path.resolve(home, '#0 backup') + path.sep)) throw new Error('Unsafe candidate path')
+const endpoint = process.argv[5] ?? 'http://127.0.0.1:9222', matrix = process.argv[6] === 'matrix'
 const result = { ok: false }, started = Date.now()
-const load = relative => import(pathToFileURL(path.join(home, 'program', relative)).href)
+const load = relative => import(pathToFileURL(path.join(program, relative)).href)
 const { stdout: identity } = await exec('whoami.exe', ['/user'], { windowsHide: true })
 if (!identity.includes('S-1-5-18')) throw new Error('SYSTEM runner required')
 const username = randomUUID() + '@example.invalid', password = randomUUID() + randomUUID(), cookie = 'u_chan_probe_' + randomUUID().replaceAll('-', '')
 let server, shared, userPage, browser, provider, bitwarden, bwTimer
 let receivedCredentials = false
+let sharedInputCount = 0
+let matrixMetadata
 try {
   const { chromium } = await load('node_modules/playwright/index.mjs')
   const { IsolatedLogin } = await load('dist/service/isolated-login.js')
@@ -36,20 +41,41 @@ try {
   })
   await new Promise(resolve => server.listen(0, '127.0.0.1', resolve))
   const origin = 'http://127.0.0.1:' + server.address().port
-  shared = await chromium.connectOverCDP('http://127.0.0.1:9222')
+  shared = await chromium.connectOverCDP(endpoint)
+  if (matrix) {
+    const binding = '__uChanMatrixInput' + randomUUID().replaceAll('-', '')
+    await shared.contexts()[0].exposeBinding(binding, () => { sharedInputCount++ })
+    await shared.contexts()[0].addInitScript(name => document.addEventListener('input', () => { void window[name]().catch(() => {}) }, true), binding)
+    const { inspectServiceDesktopBrowser } = await load('dist/platform/windows/desktop-browser.js')
+    matrixMetadata = JSON.parse(await fs.readFile(path.join(root, 'matrix-context.json'), 'utf8'))
+    const { observeCdpBrowser } = await load('dist/core/doctor.js')
+    result.fixtureBrowser = await observeCdpBrowser(endpoint)
+    result.desktopIdentity = await inspectServiceDesktopBrowser(endpoint, matrixMetadata.ownerSid, { ...process.env, U_CHAN_DESKTOP_HOME: matrixMetadata.desktopHome }, result.fixtureBrowser)
+    result.wrongBrowserRejected = await inspectServiceDesktopBrowser(endpoint, matrixMetadata.ownerSid, { ...process.env, U_CHAN_DESKTOP_HOME: matrixMetadata.desktopHome }, result.fixtureBrowser === 'edge' ? 'chrome' : 'edge') !== 'pass'
+  }
   userPage = await shared.contexts()[0].newPage()
   await userPage.addInitScript(() => { window.__uChanProbeInputCount = 0; document.addEventListener('input', () => { window.__uChanProbeInputCount++ }, true) })
   await userPage.goto(origin)
   await userPage.locator('input[type=email]').fill('positive-control@example.invalid')
   result.initScriptPositiveControl = await userPage.evaluate(() => window.__uChanProbeInputCount > 0)
+  if (matrix) { await new Promise(resolve => setTimeout(resolve, 150)); result.allPageInputPositiveControl = sharedInputCount > 0; sharedInputCount = 0 }
   await userPage.goto(origin)
-  browser = await chromium.launch({ headless: true, executablePath: await privateBrowserPath(home) })
-  provider = new CdpBrowserProvider('http://127.0.0.1:9222')
-  const target = new CdpSessionTarget(provider)
+  browser = await chromium.launch({ headless: true, executablePath: await privateBrowserPath(home), args: ['--disable-http2', '--disable-quic'] })
+  provider = new CdpBrowserProvider(endpoint, matrixMetadata ? { validate: async requested => {
+    const { inspectServiceDesktopBrowser } = await load('dist/platform/windows/desktop-browser.js')
+    return await inspectServiceDesktopBrowser(endpoint, matrixMetadata.ownerSid, { ...process.env, U_CHAN_DESKTOP_HOME: matrixMetadata.desktopHome }, requested) === 'pass'
+  } } : {})
+  const target = new CdpSessionTarget(provider, { hostCheck: (_entry, url) => new URL(url).hostname === '127.0.0.1' })
+  if (matrix) {
+    await provider.withPage(async page => { await page.goto(origin); await page.locator('input[type=email]').fill('cross-connection-control@example.invalid') }, undefined, result.fixtureBrowser)
+    await new Promise(resolve => setTimeout(resolve, 150))
+    result.crossConnectionInputPositiveControl = sharedInputCount > 0
+    sharedInputCount = 0
+  }
   const login = new IsolatedLogin({ launch: async () => browser, target, timeoutMs: 15000, hostCheck: url => new URL(url).hostname === '127.0.0.1' })
-  const outcome = await login.run({ domain: '127.0.0.1', hosts: ['127.0.0.1'], item: 'disposable', loginUrl: origin + '/login', success: { selector: '#signed-in' } }, async () => ({ username, password }))
+  const outcome = await login.run({ domain: '127.0.0.1', hosts: ['127.0.0.1'], item: 'disposable', loginUrl: origin + '/login', success: { selector: '#signed-in' } }, async () => ({ username, password }), { browser: result.fixtureBrowser ?? 'chrome' })
   result.confirmedFixtureLogin = outcome.status === 'logged_in' && receivedCredentials
-  result.sharedInputEvents = await userPage.evaluate(() => window.__uChanProbeInputCount)
+  result.sharedInputEvents = matrix ? sharedInputCount : await userPage.evaluate(() => window.__uChanProbeInputCount)
   await userPage.goto(origin + '/account')
   result.transferredFixtureSession = await userPage.locator('#signed-in').isVisible()
   const { CoreService } = await load('dist/core/service.js')
@@ -60,9 +86,9 @@ try {
   await store.upsert(once)
   let credentialReads = 0
   const deps = { vault: { status: async () => 'unlocked', getLogin: async () => { credentialReads++; return { username, password } } }, allowlist: store, approver: { ask: async () => false }, audit: { record: async () => {} }, login, mode: async () => 'easy' }
-  const core = new CoreService(deps), attempts = await Promise.all([core.login(once.domain), core.login(once.domain)])
+  const core = new CoreService(deps), attempts = await Promise.all([core.login(once.domain, result.fixtureBrowser ?? 'chrome'), core.login(once.domain, result.fixtureBrowser ?? 'chrome')])
   const restarted = new CoreService({ ...deps, allowlist: new AllowlistStore(grantPath) })
-  const replay = await restarted.login(once.domain)
+  const replay = await restarted.login(once.domain, result.fixtureBrowser ?? 'chrome')
   result.onceGrantConcurrency = attempts.filter(r => r.ok).length === 1 && attempts.filter(r => r.code === 'grant_exhausted').length === 1 && credentialReads === 1 && replay.code === 'grant_exhausted'
   let wall = Date.now(), mono = 0
   const timed = { ...once, grantId: randomUUID(), remainingUses: undefined, expiresAt: new Date(wall + 60000).toISOString() }
@@ -71,6 +97,19 @@ try {
   wall -= 5000; mono += 1000
   await clock.run(async () => {})
   result.clockRollbackPersisted = (await new AllowlistStore(grantPath).get(timed.domain)).expiresAt === new Date(0).toISOString()
+  if (matrix) {
+    const { createPrivateNetwork } = await load('dist/service/private-network.js')
+    const network = await createPrivateNetwork(url => new URL(url).protocol === 'https:' && new URL(url).hostname === 'example.com', AbortSignal.timeout(20000))
+    const context = await browser.newContext({ serviceWorkers: 'block', proxy: network.proxy })
+    try {
+      const page = await context.newPage()
+      const response = await page.goto('https://example.com/', { waitUntil: 'domcontentloaded', timeout: 15000 })
+      const security = await response?.securityDetails()
+      result.privateHttpsHttpStatus = response?.status()
+      result.privateHttpsProtocol = security?.protocol?.startsWith('TLS') ? security.protocol : 'unknown'
+      result.privateHttpsCertificateValidated = !!response && new URL(response.url()).origin === 'https://example.com' && new URL(page.url()).origin === 'https://example.com' && result.privateHttpsProtocol !== 'unknown'
+    } finally { await context.close(); await network.close() }
+  }
   await fs.mkdir(path.join(root, 'bw-fixture'))
   bitwarden = spawn(path.join(home, 'bin', 'bw.exe'), ['status'], { windowsHide: true, stdio: 'ignore', env: { ...process.env, BITWARDENCLI_APPDATA_DIR: path.join(root, 'bw-fixture'), BW_NOINTERACTION: 'true' } })
   const bwFinished = new Promise(resolve => bitwarden.once('exit', resolve))
@@ -103,7 +142,7 @@ try {
   if (verified.ok) {
     const updateHome = path.join(root, 'update-fixture'), programDir = path.join(updateHome, 'program')
     await fs.mkdir(path.join(programDir, 'node_modules'), { recursive: true })
-    const pkg = JSON.parse(await fs.readFile(path.join(home, 'program', 'package.json'), 'utf8'))
+    const pkg = JSON.parse(await fs.readFile(path.join(program, 'package.json'), 'utf8'))
     await fs.writeFile(path.join(programDir, 'package.json'), JSON.stringify({ ...pkg, version: '3.0.1' }))
     await fs.writeFile(path.join(programDir, 'node_modules', 'private-marker'), 'preserve-private-dependencies')
     const state = JSON.stringify({ protectedFixture: randomUUID() })
@@ -115,6 +154,7 @@ try {
     result.signedUpdateRehearsal = updated.ok && JSON.parse(await fs.readFile(path.join(programDir, 'package.json'), 'utf8')).version === '3.0.2' && await fs.readFile(path.join(programDir, 'node_modules', 'private-marker'), 'utf8') === 'preserve-private-dependencies' && await fs.readFile(path.join(updateHome, 'settings.json'), 'utf8') === state && restarts === 1
   }
   result.ok = result.initScriptPositiveControl && result.confirmedFixtureLogin && result.sharedInputEvents === 0 && result.transferredFixtureSession && result.onceGrantConcurrency && result.clockRollbackPersisted && moduleAuditSucceeded(result.nativeModules) && result.realRegistryVerification && result.signedUpdateRehearsal && matches === 0
+  if (matrix) result.ok &&= result.allPageInputPositiveControl && result.crossConnectionInputPositiveControl && result.desktopIdentity === 'pass' && result.wrongBrowserRejected && result.privateHttpsCertificateValidated && ['chrome','edge'].includes(result.fixtureBrowser)
 } catch (e) { result.errorType = e.name }
 finally {
   clearTimeout(bwTimer); if (bitwarden && bitwarden.exitCode === null) bitwarden.kill()