chrome-devtools-frontend 1.0.1645245 → 1.0.1646714

package/front_end/models/ai_assistance/AiAgent2.ts

@@ -26,15 +26,42 @@ import {ToolRegistry} from './tools/ToolRegistry.js';
 
 const SKILL_DISPLAY_NAMES: Record<SkillName, string> = {
   styling: 'CSS and styling',
+  network: 'Network requests',
 };
 
+const preamble = `You are the most advanced unified AI assistant integrated into Chrome DevTools.
+Your role is to help web developers debug, analyze, and optimize web applications by learning specialized skills and utilizing tools.
+
+# Style Guidelines
+* **Precision and Brevity**: Use the precision of Strunk & White, the brevity of Hemingway, and the simple clarity of Vonnegut. Keep answers short, direct, and avoid repeated information or filler.
+* **Tone**: Technical, precise, educational, and supportive.
+* **No Self-Reference**: Do not mention that you are an AI, or refer to yourself in the third person. Simulate a senior web development expert.
+* **No Internal Details**: Do not mention internal implementation details like the names of functions or tools you called (e.g., do not say "I called getStyles").
+
+# Workflow
+1. **Analyze**: Understand the user's intent, the context provided, and what they are trying to achieve.
+2. **Investigate**: Proactively use your learned skills and tools to gather live data. Do not make assumptions or guess without sufficient evidence.
+3. **Analyze**: Explore multiple potential explanations and solutions. Distinguish between the primary root cause and contributing factors.
+4. **Respond**: Provide a structured, clear, and actionable response.
+
+# Response Structure
+If the user asks a question that requires an investigation or debugging, use this structure:
+* **Root Cause(s)**: Point out the root cause(s) of the problem.
+  - Example: "**Root Cause**: [reason]" or "**Root Causes**:" followed by a bulleted list.
+* **Suggestion(s)**: List actionable solution suggestion(s) in order of impact.
+  - Example: "**Suggestion**: [Suggestion]" or "**Suggestions**:" followed by a bulleted list.
+
+# Constraints
+* **CRITICAL**: You are a web development assistant. NEVER provide answers to questions of unrelated topics (such as legal advice, financial advice, personal opinions, medical advice, religion, race, politics, sexuality, gender, or any other non-web-development topics). If asked about these, respond with: "Sorry, I can't answer that. I'm best at questions about web development and debugging."
+* **CRITICAL**: Do not write full Python programs or other scripts to interact with the environment. Only invoke the allowed tools.
+* **CRITICAL**: Do not expose raw, internal system identifiers (such as database IDs, internal node paths, or event keys) directly to the user. Use descriptive names instead.`;
+
 export class AiAgent2 extends AiAgent<unknown> {
   // TODO: The static preamble is a placeholder and will eventually live server-side.
-  readonly preamble = 'You are a unified AI assistant in Chrome DevTools. You can learn skills to help the user.';
-  readonly clientFeature = Host.AidaClient.ClientFeature.CHROME_STYLING_AGENT;  // Placeholder
+  readonly preamble = preamble;
+  readonly clientFeature = Host.AidaClient.ClientFeature.CHROME_DEVTOOLS_V2_AGENT;
   readonly userTier = 'TESTERS';
 
-  #skillsInjected = false;
   #changes = new ChangeManager();
   #execJs: typeof executeJsCode;
   readonly #allowedOrigin?: () => AllowedOriginResult;
@@ -51,9 +78,12 @@ export class AiAgent2 extends AiAgent<unknown> {
     this.#execJs = opts.execJs ?? executeJsCode;
     this.#allowedOrigin = opts.allowedOrigin;
     this.#declaredTools.add('learnSkills');
-    const skillsList = Object.keys(SKILLS).join(', ');
     this.declareFunction<{skills: SkillName[]}>('learnSkills', {
-      description: `Load skills to help with the task. Available skills: ${skillsList}.`,
+      description: () => {
+        const unloadedSkills = Object.keys(SKILLS).filter(name => !this.#activeSkills.has(name as SkillName));
+        return `Loads the specified skills to gain access to their specialized tools. Call this if the user's query relates to an available skill that is not yet loaded. Available skills: ${
+            unloadedSkills.join(', ')}.`;
+      },
       parameters: {
         type: Host.AidaClient.ParametersTypes.OBJECT,
         description: 'Parameters for learning skills',
@@ -103,16 +133,18 @@ QUERY: ${query}`;
       }
     }
 
-    if (this.#skillsInjected) {
+    const unloadedSkills =
+        Object.entries(this.getSkills()).filter(([name]) => !this.#activeSkills.has(name as SkillName));
+    if (unloadedSkills.length === 0) {
       return enhancedQuery;
     }
-    this.#skillsInjected = true;
-    const skillsManifest =
-        Object.entries(this.getSkills()).map(([name, skill]) => `- ${name}: ${skill.description}`).join('\n');
-    return `Available skills:
+
+    const skillsManifest = unloadedSkills.map(([name, skill]) => `- ${name}: ${skill.description}`).join('\n');
+    return `Available skills that are not yet loaded:
 ${skillsManifest}
 
-You must call \`learnSkills\` to load a skill before you can use it.
+You must call \`learnSkills\` to load a skill before you can use its tools.
+If the user's request requires a skill that is not currently loaded, you MUST call \`learnSkills\` to load that skill first, instead of attempting to solve the query using tools from other skills.
 
 User query: ${enhancedQuery}`;
   }

package/front_end/models/ai_assistance/AiConversation.ts

@@ -25,8 +25,8 @@ import {
   type UserQuery
 } from './agents/AiAgent.js';
 import {ContextSelectionAgent} from './agents/ContextSelectionAgent.js';
-import {FileAgent, FileContext} from './agents/FileAgent.js';
-import {NetworkAgent, RequestContext} from './agents/NetworkAgent.js';
+import {FileAgent} from './agents/FileAgent.js';
+import {NetworkAgent} from './agents/NetworkAgent.js';
 import {PerformanceAgent, PerformanceTraceContext} from './agents/PerformanceAgent.js';
 import {StorageAgent, StorageContext} from './agents/StorageAgent.js';
 import {StylingAgent} from './agents/StylingAgent.js';
@@ -34,6 +34,8 @@ import {AiAgent2} from './AiAgent2.js';
 import {AiHistoryStorage, ConversationType, type SerializedConversation} from './AiHistoryStorage.js';
 import type {ChangeManager} from './ChangeManager.js';
 import {DOMNodeContext} from './contexts/DOMNodeContext.js';
+import {FileContext} from './contexts/FileContext.js';
+import {RequestContext} from './contexts/RequestContext.js';
 
 export const NOT_FOUND_IMAGE_DATA = '';
 export const CONTEXT_TITLE = 'Analyzing data';

package/front_end/models/ai_assistance/AiOrigins.ts

@@ -9,6 +9,8 @@ import type * as Platform from '../../core/platform/platform.js';
  * Returns true if the origin is considered opaque and should be blocked from
  * AI assistance to prevent potential data leakage.
  *
+ * @param origin The origin string to check.
+ * @returns True if the origin is opaque and blocked.
  * @see https://crbug.com/513732588
  */
 export function isOpaqueOrigin(origin: string): boolean {
@@ -16,13 +18,22 @@ export function isOpaqueOrigin(origin: string): boolean {
    * Origins starting with 'about' (like about:blank or about:srcdoc) are
    * considered opaque. 'about://' is the sentinel used by DevTools
    * ParsedURL.securityOrigin() for these.
+   *
+   * We also treat empty origins, 'undefined', and 'null' as opaque to prevent
+   * bypasses when URL parsing fails or variables are uninitialized.
    */
-  return origin === 'null' || origin === 'data:' || origin.startsWith('about') || origin.startsWith('detached');
+  const lower = origin.toLowerCase();
+  return lower === '' || lower === 'null' || lower === 'data:' || lower.startsWith('about') ||
+      lower.startsWith('detached') || lower.startsWith('undefined');
 }
 
 /**
  * Extracts the origin from a context URL or identifier.
- * Handles special cases like "detached" nodes and trace identifiers.
+ * Handles special cases like "detached" nodes, trace identifiers,
+ * opaque blob URLs, and isolates local file paths.
+ *
+ * @param contextURL The context URL or trace/node identifier.
+ * @returns The extracted origin string.
  */
 export function extractContextOrigin(contextURL: string): string {
   if (isOpaqueOrigin(contextURL)) {
@@ -31,6 +42,28 @@ export function extractContextOrigin(contextURL: string): string {
   if (contextURL.startsWith('trace-')) {
     return contextURL;
   }
+  // If a blob URL has an opaque inner origin (e.g. blob:null/uuid, blob:about:blank),
+  // it won't contain "://". We classify these as opaque ('null') to prevent cross-origin leaks.
+  if (/^blob:/i.test(contextURL)) {
+    const innerURL = contextURL.substring(5);
+    if (!innerURL.includes('://')) {
+      return 'null';
+    }
+  }
+  // Local files collapse to a generic "file://" origin by default. We isolate them
+  // by appending the normalized path, ensuring distinct files are treated as different origins.
+  if (/^file:\/\//i.test(contextURL)) {
+    const parsed = Common.ParsedURL.ParsedURL.fromString(contextURL as Platform.DevToolsPath.UrlString);
+    if (parsed) {
+      // Include host and port (authority) to preserve server names in Windows UNC paths
+      // (e.g. file://server/path) so different network shares are isolated.
+      const authority = parsed.host + (parsed.port ? ':' + parsed.port : '');
+      return 'file://' + authority + parsed.path;
+    }
+    // Fallback to 'null' (opaque) if parsing fails. This prevents malformed file URLs
+    // from bypassing isolation by collapsing to the same 'file://' string.
+    return 'null';
+  }
   return Common.ParsedURL.ParsedURL.extractOrigin(contextURL as Platform.DevToolsPath.UrlString);
 }
 
@@ -44,3 +77,31 @@ export function areOriginsEquivalent(origin1: string, origin2: string): boolean
   }
   return origin1 === origin2;
 }
+
+/**
+ * Validates if the source code contents of a file (identified by targetURL) can be retrieved
+ * and shared with the AI, based on the origin of the active trace context.
+ *
+ * This function handles the following branches:
+ * 1. **Opaque origins**: If either the trace origin or target file origin is opaque
+ *    (e.g., data URLs, about:blank, sandboxed frames), access is blocked.
+ * 2. **Fresh Recordings**: For live page recordings, a strict same-origin comparison
+ *    (scheme, host, and port matching) is enforced.
+ *
+ * @param targetURL The URL of the file to be read.
+ * @param traceOrigin The allowed origin of the trace context.
+ * @returns true if reading the file is permitted; false otherwise.
+ */
+export function canResourceContentsBeReadForTrace(targetURL: string, traceOrigin: string): boolean {
+  // We explicitly block all file:// URLs. While we want to allow users to debug
+  // traces on local sites, allowing file:// access poses security risks (e.g.,
+  // reading local files like /etc/passwd via prompt injection) because file://
+  // origins are not sufficiently isolated from each other in DevTools' origin model.
+  if (traceOrigin.startsWith('file://') || targetURL.startsWith('file://')) {
+    return false;
+  }
+
+  const targetOrigin = extractContextOrigin(targetURL);
+
+  return areOriginsEquivalent(targetOrigin, traceOrigin);
+}

package/front_end/models/ai_assistance/README.md

@@ -11,12 +11,14 @@ Each agent has a _context_ defined, which represents the selected data that form
 - The `PerformanceAgent` has an individual performance trace and a specific focus (an insight, or a call tree) as its context.
 - The `StylingAgent` has a DOM Node as its context.
 
-When defining a context, they must extend the `ConversationContext` interface, which defines a few methods which must be implemented, including:
+Contexts are defined as subclasses extending the `ConversationContext` abstract class, which defines the following key methods:
 
-- `getOrigin()`: the origin of the data. This is important as for security concerns if the user swaps to a new context with a different origin, a new conversation must be started to avoid any concerns of sharing data across origins.
-- `getTitle()` which are used to represent the context in the UI.
+- `getOrigin()`: the origin of the data. This is critical for security: if the user switches to a new context with a different origin, the panel forces a new conversation to avoid cross-origin data exposure.
+- `getTitle()`: returns the user-facing title of the context.
+- `getPromptDetails()`: returns a Markdown formatted description of the context item to be directly included in the LLM prompt.
+- `getUserFacingDetails()`: returns structured details (such as request/response headers, timings, etc.) displayed to the user in the UI under the "Analyzing data" accordion.
 
-When the user begins a conversation with the AI, we want to include information based on the active context to send as part of the prompt. This is done in the agent implementation by overriding the `enhanceQuery()` method, which takes the active context as the second argument. This method can be used to enrich the query with contextual information.
+Encapsulating prompt formatting and UI generation within the context classes simplifies agent implementations and promotes reusability. Contexts are located in the `contexts/` directory.
 
 ### Formatters
 
@@ -102,3 +104,12 @@ To aid debugging, you can enable the AI Assistance logging. This setting is stor
 4. In the console, run `setDebugAiAssistanceEnabled(true)`.
 
 Now, when interacting with the AI and sending requests, you will see output logged to the console. You can use the `debugLog` helper to add your own logging as you are building out your feature.
+
+## Security & Origin Isolation
+
+To prevent prompt injection attacks and cross-origin data leaks, the AI Assistance panel enforces strict origin-lock boundaries:
+
+*   **Origin Locking**: Once a conversation session begins, it locks to the origin of the initial data context (e.g. `https://google.com` or a specific file path).
+*   **Opaque Origins**: Any origin classified as opaque (e.g. `data:`, `about:`, `detached` nodes, unparsed `undefined://` or empty origins) is blocked from starting AI assistance (`isOpaqueOrigin()`).
+*   **File Isolation**: Local files (`file://`) do not share a single wildcard origin. Instead, the path is appended (e.g. `file:///path/to/file.js`) to treat each local file as its own unique origin. Swapping local files in the same conversation is blocked.
+*   **Equivalence**: `areOriginsEquivalent()` ensures opaque origins are never equivalent to anything (including themselves), forcing a conversation reset on transitions.

package/front_end/models/ai_assistance/agents/AiAgent.ts

@@ -410,7 +410,7 @@ export interface FunctionDeclaration<Args extends Record<string, unknown>, Retur
    * Description of function, this is send to the LLM
    * to explain what will the function do.
    */
-  description: string;
+  description: string|(() => string);
   /**
    * JSON schema like representation of the parameters
    * the function needs to be called with.
@@ -582,7 +582,7 @@ export abstract class AiAgent<T> {
     for (const [name, definition] of this.#functionDeclarations.entries()) {
       declarations.push({
         name,
-        description: definition.description,
+        description: typeof definition.description === 'function' ? definition.description() : definition.description,
         parameters: definition.parameters,
       });
     }

package/front_end/models/ai_assistance/agents/ContextSelectionAgent.ts

@@ -15,6 +15,8 @@ import type * as Trace from '../../trace/trace.js';
 import * as Workspace from '../../workspace/workspace.js';
 import {isOpaqueOrigin} from '../AiOrigins.js';
 import {DOMNodeContext} from '../contexts/DOMNodeContext.js';
+import {FileContext} from '../contexts/FileContext.js';
+import {getRequestContextOrigin, RequestContext} from '../contexts/RequestContext.js';
 import {debugLog} from '../debug.js';
 import {StorageItem} from '../StorageItem.js';
 
@@ -26,8 +28,6 @@ import {
   type ContextResponse,
   type RequestOptions,
 } from './AiAgent.js';
-import {FileContext} from './FileAgent.js';
-import {getRequestContextOrigin, RequestContext} from './NetworkAgent.js';
 import {PerformanceTraceContext} from './PerformanceAgent.js';
 import {StorageContext} from './StorageAgent.js';
 

package/front_end/models/ai_assistance/agents/FileAgent.ts

@@ -5,13 +5,11 @@
 import * as Host from '../../../core/host/host.js';
 import * as Root from '../../../core/root/root.js';
 import type * as Workspace from '../../workspace/workspace.js';
-import {FileFormatter} from '../data_formatters/FileFormatter.js';
 
 import {
   AiAgent,
-  type ContextDetail,
   type ContextResponse,
-  ConversationContext,
+  type ConversationContext,
   type RequestOptions,
   ResponseType,
 } from './AiAgent.js';
@@ -75,31 +73,6 @@ External Resources:
 MDN Web Docs: JavaScript Functions: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Functions
 `;
 
-export class FileContext extends ConversationContext<Workspace.UISourceCode.UISourceCode> {
-  #file: Workspace.UISourceCode.UISourceCode;
-
-  constructor(file: Workspace.UISourceCode.UISourceCode) {
-    super();
-    this.#file = file;
-  }
-
-  override getURL(): string {
-    return this.#file.url();
-  }
-
-  override getItem(): Workspace.UISourceCode.UISourceCode {
-    return this.#file;
-  }
-
-  override getTitle(): string {
-    return this.#file.displayName();
-  }
-
-  override async refresh(): Promise<void> {
-    await this.#file.requestContentData();
-  }
-}
-
 /**
  * One agent instance handles one conversation. Create a new agent
  * instance for a new conversation.
@@ -126,27 +99,21 @@ export class FileAgent extends AiAgent<Workspace.UISourceCode.UISourceCode> {
       return;
     }
 
+    const details = await selectedFile.getUserFacingDetails();
+    if (!details) {
+      return;
+    }
+
     yield {
       type: ResponseType.CONTEXT,
-      details: createContextDetailsForFileAgent(selectedFile),
+      details,
     };
   }
 
   override async enhanceQuery(
       query: string, selectedFile: ConversationContext<Workspace.UISourceCode.UISourceCode>|null): Promise<string> {
-    const fileEnchantmentQuery = selectedFile ?
-        `# Selected file\n${new FileFormatter(selectedFile.getItem()).formatFile()}\n\n# User request\n\n` :
-        '';
+    const promptDetails = selectedFile ? await selectedFile.getPromptDetails() : null;
+    const fileEnchantmentQuery = promptDetails ? `${promptDetails}\n\n# User request\n\n` : '';
     return `${fileEnchantmentQuery}${query}`;
   }
 }
-
-function createContextDetailsForFileAgent(selectedFile: ConversationContext<Workspace.UISourceCode.UISourceCode>):
-    [ContextDetail, ...ContextDetail[]] {
-  return [
-    {
-      title: 'Selected file',
-      text: new FileFormatter(selectedFile.getItem()).formatFile(),
-    },
-  ];
-}

package/front_end/models/ai_assistance/agents/NetworkAgent.snapshot.txt

@@ -10,7 +10,7 @@ Content:
       },
       {
         "title": "Response",
-        "text": "Response headers:\ncontent-type: bar2\nx-forwarded-for: bar3\n\nResponse body:\n{\"request\":\"body\"}\n\nResponse status: 200 \nNetwork request status: pending\n"
+        "text": "Response headers:\ncontent-type: bar2\nx-forwarded-for: bar3\n\nResponse body:\n{\"request\":\"body\"}\n\nResponse status: 200\nNetwork request status: pending\n"
       },
       {
         "title": "Timing",
@@ -59,7 +59,7 @@ Content:
   {
     "parts": [
       {
-        "text": "# Selected network request \nRequest: https://www.example.com\n\nRequest headers:\ncontent-type: bar1\n\nResponse headers:\ncontent-type: bar2\nx-forwarded-for: bar3\n\nResponse body:\n{\"request\":\"body\"}\n\nResponse status: 200 \nNetwork request status: pending\n\nRequest timing:\nQueued at (timestamp): 0 s\nStarted at (timestamp): 501 s\nQueueing (duration): 501 s\nConnection start (stalled) (duration): 800 ms\nRequest sent (duration): 100 ms\nDuration (duration): 501 s\n\nRequest initiator chain:\n- URL: <redacted cross-origin initiator URL>\n\t- URL: https://www.example.com\n\t\t- URL: https://www.example.com/1\n\t\t- URL: https://www.example.com/2\n\n# User request\n\ntest"
+        "text": "# Selected network request\nRequest: https://www.example.com\n\nRequest headers:\ncontent-type: bar1\n\nResponse headers:\ncontent-type: bar2\nx-forwarded-for: bar3\n\nResponse body:\n{\"request\":\"body\"}\n\nResponse status: 200\nNetwork request status: pending\n\nRequest timing:\nQueued at (timestamp): 0 s\nStarted at (timestamp): 501 s\nQueueing (duration): 501 s\nConnection start (stalled) (duration): 800 ms\nRequest sent (duration): 100 ms\nDuration (duration): 501 s\n\nRequest initiator chain:\n- URL: <redacted cross-origin initiator URL>\n\t- URL: https://www.example.com\n\t\t- URL: https://www.example.com/1\n\t\t- URL: https://www.example.com/2\n\n# User request\n\ntest"
       }
     ],
     "role": 1

package/front_end/models/ai_assistance/agents/NetworkAgent.ts

@@ -2,21 +2,14 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-import * as Common from '../../../core/common/common.js';
 import * as Host from '../../../core/host/host.js';
-import * as i18n from '../../../core/i18n/i18n.js';
-import type * as Platform from '../../../core/platform/platform.js';
 import * as Root from '../../../core/root/root.js';
 import type * as SDK from '../../../core/sdk/sdk.js';
-import type * as NetworkTimeCalculator from '../../network_time_calculator/network_time_calculator.js';
-import {extractContextOrigin} from '../AiOrigins.js';
-import {NetworkRequestFormatter} from '../data_formatters/NetworkRequestFormatter.js';
+import type {RequestContext} from '../contexts/RequestContext.js';
 
 import {
   AiAgent,
-  type ContextDetail,
   type ContextResponse,
-  ConversationContext,
   type RequestOptions,
   ResponseType,
 } from './AiAgent.js';
@@ -73,90 +66,6 @@ This request aims to retrieve a list of products matching the search query "lapt
 `;
 /* clang-format on */
 
-/*
-* Strings that don't need to be translated at this time.
-*/
-const UIStringsNotTranslate = {
-  /**
-   * @description Heading text for the block that shows the network request details.
-   */
-  request: 'Request',
-  /**
-   * @description Heading text for the block that shows the network response details.
-   */
-  response: 'Response',
-  /**
-   * @description Prefix text for request URL.
-   */
-  requestUrl: 'Request URL',
-  /**
-   * @description Title text for request timing details.
-   */
-  timing: 'Timing',
-  /**
-   * @description Title text for request initiator chain.
-   */
-  requestInitiatorChain: 'Request initiator chain',
-} as const;
-
-const lockedString = i18n.i18n.lockedString;
-
-/**
- * Returns the origin for a network request in the AI context.
- *
- * To prevent cross-origin prompt injection attacks, HAR-imported requests
- * are isolated from live pages. We assign them a virtual origin
- * (`imported-har://${domain}`) so they do not share the origin of live pages
- * (e.g., `https://${domain}`). This forces a conversation reset when transitioning
- * between imported HAR data and live pages.
- */
-export function getRequestContextOrigin(request: SDK.NetworkRequest.NetworkRequest): string {
-  const origin = extractContextOrigin(request.documentURL);
-  if (request.isImportedHar()) {
-    const parsed = Common.ParsedURL.ParsedURL.fromString(origin as Platform.DevToolsPath.UrlString);
-    return `imported-har://${parsed ? parsed.domain() : origin}`;
-  }
-  return origin;
-}
-
-export class RequestContext extends ConversationContext<SDK.NetworkRequest.NetworkRequest> {
-  #request: SDK.NetworkRequest.NetworkRequest;
-  #calculator: NetworkTimeCalculator.NetworkTransferTimeCalculator;
-
-  constructor(
-      request: SDK.NetworkRequest.NetworkRequest, calculator: NetworkTimeCalculator.NetworkTransferTimeCalculator) {
-    super();
-    this.#request = request;
-    this.#calculator = calculator;
-  }
-
-  /**
-   * Note: this is not the literal origin of the network request. This URL
-   * is used to determine when we should force the user to start a new AI
-   * conversation when the context changes. We allow a single AI conversation to
-   * inspect all network requests that were made for that given target URL.
-   */
-  override getURL(): string {
-    return this.#request.documentURL;
-  }
-
-  override getOrigin(): string {
-    return getRequestContextOrigin(this.#request);
-  }
-
-  override getItem(): SDK.NetworkRequest.NetworkRequest {
-    return this.#request;
-  }
-
-  get calculator(): NetworkTimeCalculator.NetworkTimeCalculator {
-    return this.#calculator;
-  }
-
-  override getTitle(): string {
-    return this.#request.name();
-  }
-}
-
 /**
  * One agent instance handles one conversation. Create a new agent
  * instance for a new conversation.
@@ -183,9 +92,14 @@ export class NetworkAgent extends AiAgent<SDK.NetworkRequest.NetworkRequest> {
       return;
     }
 
+    const details = await selectedNetworkRequest.getUserFacingDetails();
+    if (!details) {
+      return;
+    }
+
     yield {
       type: ResponseType.CONTEXT,
-      details: await createContextDetailsForNetworkAgent(selectedNetworkRequest),
+      details,
       widgets: [{
         name: 'NETWORK_REQUEST_GENERAL_HEADERS',
         data: {
@@ -196,46 +110,8 @@ export class NetworkAgent extends AiAgent<SDK.NetworkRequest.NetworkRequest> {
   }
 
   override async enhanceQuery(query: string, selectedNetworkRequest: RequestContext|null): Promise<string> {
-    const networkEnchantmentQuery = selectedNetworkRequest ?
-        `# Selected network request \n${
-            await (new NetworkRequestFormatter(selectedNetworkRequest.getItem(), selectedNetworkRequest.calculator)
-                       .formatNetworkRequest())}\n\n# User request\n\n` :
-        '';
+    const promptDetails = selectedNetworkRequest ? await selectedNetworkRequest.getPromptDetails() : null;
+    const networkEnchantmentQuery = promptDetails ? `${promptDetails}\n\n# User request\n\n` : '';
     return `${networkEnchantmentQuery}${query}`;
   }
 }
-
-async function createContextDetailsForNetworkAgent(
-    selectedNetworkRequest: RequestContext,
-    ): Promise<[ContextDetail, ...ContextDetail[]]> {
-  const request = selectedNetworkRequest.getItem();
-  const formatter = new NetworkRequestFormatter(request, selectedNetworkRequest.calculator);
-  const requestContextDetail: ContextDetail = {
-    title: lockedString(UIStringsNotTranslate.request),
-    text: lockedString(UIStringsNotTranslate.requestUrl) + ': ' + request.url() + '\n\n' +
-        formatter.formatRequestHeaders(),
-  };
-  const responseBody = await formatter.formatResponseBody();
-  const responseBodyString = responseBody ? `\n\n${responseBody}` : '';
-
-  const responseContextDetail: ContextDetail = {
-    title: lockedString(UIStringsNotTranslate.response),
-    text: formatter.formatResponseHeaders() + responseBodyString +
-        `\n\n${formatter.formatStatus()}${formatter.formatFailureReasons()}`,
-  };
-  const timingContextDetail: ContextDetail = {
-    title: lockedString(UIStringsNotTranslate.timing),
-    text: formatter.formatNetworkRequestTiming(),
-  };
-  const initiatorChainContextDetail: ContextDetail = {
-    title: lockedString(UIStringsNotTranslate.requestInitiatorChain),
-    text: formatter.formatRequestInitiatorChain(),
-  };
-
-  return [
-    requestContextDetail,
-    responseContextDetail,
-    timingContextDetail,
-    initiatorChainContextDetail,
-  ];
-}

package/front_end/models/ai_assistance/agents/PerformanceAgent.ts

@@ -15,7 +15,7 @@ import * as Logs from '../../logs/logs.js';
 import * as SourceMapScopes from '../../source_map_scopes/source_map_scopes.js';
 import * as TextUtils from '../../text_utils/text_utils.js';
 import * as Trace from '../../trace/trace.js';
-import {extractContextOrigin} from '../AiOrigins.js';
+import {canResourceContentsBeReadForTrace, extractContextOrigin} from '../AiOrigins.js';
 import {sanitizeHeaders} from '../data_formatters/NetworkRequestFormatter.js';
 import {
   PerformanceInsightFormatter,
@@ -1472,8 +1472,16 @@ export class PerformanceAgent extends AiAgent<AgentFocus> {
       },
       handler: async args => {
         debugLog('Function call: getResourceContent');
+        if (!isFresh) {
+          return {error: 'Cannot use this tool on an imported file.'};
+        }
+
+        const url = args.url;
+        const allowedOrigin = context.getOrigin();
+        if (!canResourceContentsBeReadForTrace(url, allowedOrigin)) {
+          return {error: 'Resource not found'};
+        }
 
-        const url = args.url as Platform.DevToolsPath.UrlString;
         let content: string|undefined;
 
         // First check parsedTrace.data.Scripts.

package/front_end/models/ai_assistance/agents/README.md

@@ -31,6 +31,13 @@ Example from `PerformanceAgent`:
   }
 ```
 
+### Origin Validation (`isOriginAllowed`)
+
+Before running an execution loop, the system validates the context's origin:
+*   **Opaque Origin Rejection**: Opaque origins are rejected immediately, blocking conversations on untrusted/opaque contexts (like `about:blank`, `data:` URLs, or opaque blob URLs).
+*   **Origin Lock Integrity**: If the conversation is already locked to an origin, the new context's origin must be equivalent (as defined by `areOriginsEquivalent()`) to the locked origin.
+*   **Safety Termination**: If validation fails, a cross-origin error is yielded and execution stops.
+
 ## Performance Agent
 
 The `PerformanceAgent` analyzes performance traces. This documentation details the specific data provided to the agent and the data it can retrieve via functions.

package/front_end/models/ai_assistance/agents/StorageAgent.ts

@@ -14,6 +14,7 @@ import {
   AiAgent,
   type ContextResponse,
   ConversationContext,
+  type ConversationSuggestions,
   type RequestOptions,
   ResponseType,
 } from './AiAgent.js';
@@ -97,6 +98,50 @@ export class StorageContext extends ConversationContext<StorageItem> {
     }
     return `Storage: ${this.getOrigin()}`;
   }
+
+  override async getSuggestions(): Promise<ConversationSuggestions|undefined> {
+    if (this.#item instanceof CookieItem) {
+      if (this.#item.name) {
+        return [
+          {
+            title: 'Why is this cookie set?',
+            jslogContext: 'storage-cookie',
+          },
+          {
+            title: 'Explain the value of this cookie',
+            jslogContext: 'storage-cookie',
+          },
+        ];
+      }
+      return [
+        {
+          title: 'Explain the cookies set by this page',
+          jslogContext: 'storage-cookie',
+        },
+      ];
+    }
+    if (this.#item instanceof DOMStorageItem) {
+      if (this.#item.key) {
+        return [
+          {
+            title: 'What is the purpose of this storage entry?',
+            jslogContext: 'storage-domstorage',
+          },
+          {
+            title: 'Explain the value of this storage entry',
+            jslogContext: 'storage-domstorage',
+          },
+        ];
+      }
+      return [
+        {
+          title: 'Explain these storage items',
+          jslogContext: 'storage-domstorage',
+        },
+      ];
+    }
+    return undefined;
+  }
 }
 
 // Maximum character length of values allowed.