chrome-devtools-frontend 1.0.1721762 → 1.0.1726686

package/.agents/skills/review-ui-widgets/SKILL.md

@@ -78,10 +78,10 @@ This skill provides review guidance for Chrome DevTools frontend changes matchin
 - **Look for**: Unscoped generic selectors in light-DOM `.css` files (or `:host` inside `@scope` blocks instead of `:scope`), or CSS rules combining `vertical-align`, negative `margin-top`, and pixel offsets to center icons and buttons.
 - **Do not flag**: Shadow DOM component stylesheets where `:host` scoping is native.
 
-### `UI_VIEW_OUTPUT_AND_CALLBACK_CONTRACTS`: Encapsulate imperative DOM actions in ViewOutput callbacks and pass user actions via semantic ViewInput callbacks instead of raw DOM references
+### `UI_VIEW_OUTPUT_AND_CALLBACK_CONTRACTS`: Encapsulate imperative DOM and child widget actions in ViewOutput callbacks and pass user actions via semantic ViewInput callbacks instead of raw DOM or Widget references
 - **Severity**: WARNING
-- **Why**: Exposing raw `HTMLElement` references on `ViewOutput` or passing raw `MouseEvent`/`KeyboardEvent` objects to presenter callbacks leaks DOM details into presenters. Views should populate narrow functional closures on `ViewOutput` (e.g. `output.focusInput = () => ...`) and unpack event values before calling `input.onSelect(value)`.
-- **Look for**: `ViewOutput` interfaces containing `HTMLElement` or `Element` properties, or `ViewInput` callbacks typed as `(event: Event) => void` instead of semantic domain values.
+- **Why**: Exposing raw `HTMLElement` or `UI.Widget` references on `ViewOutput` (e.g. `output.childWidget = w`) or passing raw `MouseEvent`/`KeyboardEvent` objects to presenter callbacks leaks view implementation details into presenters. Supply all configuration through setters/inputs on the child widget, or if imperative calls are strictly necessary, populate narrow functional closures on `ViewOutput` (e.g. `output.focusInput = () => ...`, `output.scrollWidgetToSomething = () => widgetRef.scrollToSomething()`), and unpack event values before calling `input.onSelect(value)`.
+- **Look for**: `ViewOutput` interfaces containing `HTMLElement`, `Element`, or `UI.Widget` subclass properties (other than temporary intermediate CL bridges), `get*ForTest()` presenter methods backed by `ViewOutput` widget references, or `ViewInput` callbacks typed as `(event: Event) => void` instead of semantic domain values.
 - **Do not flag**: Third-party editor or canvas host containers that require a raw mount `HTMLElement`.
 
 ### `UI_PANEL_AND_META_REGISTRATION`: Follow DevTools panel directory conventions and register settings and views in the appropriate *-meta.ts scope
@@ -102,11 +102,11 @@ This skill provides review guidance for Chrome DevTools frontend changes matchin
 - **Look for**: Raw string interpolation in `querySelector('[attr="' + val + '"]')` without `CSS.escape`, `href` attribute bindings with unvalidated `javascript:` URLs, Markdown table cell serialization without escaping `|*_<>\`, or raw HTML snippet generation without HTML escaping.
 - **Do not flag**: Standard Lit `html` text bindings (`${text}`), which escape HTML entities automatically.
 
-### `UI_DECLARATIVE_CHILD_WIDGET_COMPOSITION`: Compose child UI.Widget instances declaratively in Lit templates using the two-argument widget(ChildWidget, {...}) directive instead of imperative show() calls or single-argument factory callbacks
+### `UI_DECLARATIVE_CHILD_WIDGET_COMPOSITION`: Compose child UI.Widget instances declaratively in Lit templates using ${widget(ChildWidget, {...})} instead of imperative show() calls, single-argument factory callbacks, or bare <devtools-widget> tags
 - **Severity**: WARNING
-- **Why**: Imperatively instantiating child widgets and calling `child.show(container)` inside presenters or views bypasses Lit reconciliation, complicates lifecycle management, and recreates widgets unnecessarily across renders. Similarly, single-argument factory callbacks `widget(element => ...)` only run on initial creation and fail to propagate updated properties on subsequent re-renders; strongly prefer the two-argument `widget(ChildWidget, {...})` form (converting `setFoo()` methods on the child widget into `set foo()` setters if needed).
-- **Look for**: `new ChildWidget()` followed by `.show(...)` or `.appendChild(child.element)` inside Lit view functions or migrated `performUpdate()` methods, or `widget(element => ...)` factory callbacks configuring child widget properties imperatively instead of `<devtools-widget ${widget(ChildWidget, {...})}></devtools-widget>` (or `${widget(ChildWidget, {...})}`).
-- **Do not flag**: Top-level legacy split widgets or tabbed panes that have not migrated to Lit views.
+- **Why**: Imperatively instantiating child widgets and calling `child.show(container)` inside presenters or views bypasses Lit reconciliation, complicates lifecycle management, and recreates widgets unnecessarily across renders. Similarly, single-argument factory callbacks `widget(element => ...)` only run on initial creation and fail to propagate updated properties on subsequent re-renders; strongly prefer the two-argument `widget(ChildWidget, {...})` form (converting `setFoo()` methods on the child widget into `set foo()` setters if needed). Prefer `${widget(ChildWidget, {...})}` directly as a child expression over `<devtools-widget ${widget(ChildWidget, {...})}></devtools-widget>`; only use an explicit `<devtools-widget>` tag when setting other attributes, applying other directives (such as `widgetRef` or `ref`), or providing child nodes.
+- **Look for**: `new ChildWidget()` followed by `.show(...)` or `.appendChild(child.element)` inside Lit view functions or migrated `performUpdate()` methods, `widget(element => ...)` factory callbacks configuring child widget properties imperatively instead of `${widget(ChildWidget, {...})}`, or `<devtools-widget ${widget(ChildWidget, {...})}></devtools-widget>` tags that have no other attributes, directives, or child nodes.
+- **Do not flag**: Top-level legacy split widgets or tabbed panes that have not migrated to Lit views, or `<devtools-widget>` tags that set other attributes, use additional directives (e.g. `widgetRef`), or contain child nodes.
 
 ### `UI_AWAIT_UPDATE_COMPLETE_POST_RENDER`: Await this.updateComplete before executing post-render DOM measurements, focus changes, or scroll adjustments
 - **Severity**: ERROR

package/.agents/skills/ui-eng-vision-local-lit-renderer/SKILL.md

@@ -126,6 +126,12 @@ existing element containers.
 
 12. **Composing Child `UI.Widget`s & Pre-Existing Instances**:
 
+    *   **Prefer `${widget(ChildWidgetClass, {params})}` Over `<devtools-widget>`**:
+        Prefer `${widget(ChildWidgetClass, {params})}` directly as a child
+        expression instead of `<devtools-widget ${widget(ChildWidgetClass, {params})}></devtools-widget>`.
+        Only use an explicit `<devtools-widget>` tag when you need to set other
+        HTML attributes/classes, apply additional directives (such as `widgetRef`
+        or `ref`), or provide child nodes.
     *   **Strongly Prefer Two-Argument `widget(ChildWidgetClass, {params})`**:
         When instantiating child widgets in a Lit template, strongly prefer the
         two-argument form `widget(ChildWidgetClass, {propA: input.a, propB: input.b})`
@@ -136,6 +142,12 @@ existing element containers.
         `setFoo()` methods instead of setters, convert them into `set foo()`
         setters on the child widget so you can use the two-argument `widget()`
         directive.
+    *   **No Widget References on `ViewOutput`**: Do not store child widget
+        references on `ViewOutput` (e.g., `output.childWidget = w`) as a final
+        result (only acceptable temporarily in intermediate CLs). Supply all
+        configuration through setters on the child widget, or if imperative
+        actions are strictly required, expose individual functions on `ViewOutput`
+        (e.g., `output.doLayout = () => w.doLayout()`).
     *   **Pre-Existing Widget Instances (`UI.Widget.WrapperWidget`)**: Use
         `${widget(UI.Widget.WrapperWidget, {widget: input.childWidget})}` when
         embedding widgets owned by `UI.ViewManager`

package/.agents/skills/ui-eng-vision-widget-promoter/SKILL.md

@@ -66,14 +66,14 @@ clean `UI.Widget` classes that use native update rendering delegates.
 3.  **Clean Up Legacy Wrappers**:
 
     *   Remove any `LegacyWrapper` bindings or custom wrappable custom elements.
-    *   Replace old panel instantiations with standard `<devtools-widget>`
-        declarative entries (using `const {widget} = UI.Widget;`):
+    *   Replace old panel instantiations with declarative `widget` entries (using `const {widget} = UI.Widget;`). Prefer `${widget(MyWidgetClass, {params})}` directly as a child expression over `<devtools-widget ${widget(MyWidgetClass, {params})}></devtools-widget>`; only use an explicit `<devtools-widget>` tag when setting other attributes, applying other directives (such as `widgetRef` or `ref`), or providing child nodes:
 
         ```typescript
-        html`<devtools-widget ${widget(MyWidgetClass, {params})}></devtools-widget>`
+        html`${widget(MyWidgetClass, {params})}`
         ```
 
     *   **Strongly prefer the two-argument `widget(MyWidgetClass, {params})` form** over the single-argument factory callback `widget(element => new MyWidgetClass(element, ...))`. The single-argument factory only runs on initial creation and does not update properties on subsequent re-renders. If the child widget only exposes `setFoo(...)` methods, convert them into `set foo(...)` setters so they can be passed via the second argument of `widget()`.
+    *   **No Widget References on `ViewOutput`**: Keeping child `UI.Widget` instances on `ViewOutput` (e.g., `output.childWidget = w`) is not a good practice and must not remain in the final result (it is only acceptable temporarily in intermediate CLs). Either supply all configuration through setters on the child widget, or if imperative action calls are strictly needed, expose individual functions on `ViewOutput` (such as `output.doLayout = () => w.doLayout()` or `output.scrollWidgetToSomething = () => w.scrollToSomething()`). Remove legacy `get*ForTest()` methods that were only used to grab child widgets from `ViewOutput` and update tests to query the DOM (`view.contentElement.querySelector(...)?.getWidget()`) or inspect `ViewInput`.
     *   Inspect instantiator files (e.g., `ApplicationPanelSidebar.ts`) and
         decouple any direct accesses to `.element`.
 

package/.agents/skills/ui-widgets/SKILL.md

@@ -59,6 +59,7 @@ const DEFAULT_VIEW = (input: ViewInput, output: ViewOutput, target: HTMLElement)
 ### Composition
 
 * To render a child widget, the parent's View MUST use the lit-html directive `UI.Widget.widget`.
+* **Prefer `${widget(WidgetClass, {params})}` directly as a child expression** over `<devtools-widget ${widget(WidgetClass, {params})}></devtools-widget>`. Only use an explicit `<devtools-widget>` tag when you need to set other HTML attributes/classes, apply additional directives (such as `widgetRef` or `ref`), or provide child nodes.
 * **Strongly prefer the two-argument `widget(WidgetClass, {params})` form** over the single-argument factory callback `widget(element => new WidgetClass(element, ...))`. The two-argument form automatically updates properties and calls `requestUpdate()` on subsequent renders, whereas a factory callback only runs once on initial instantiation.
 * If a child widget currently exposes imperative setter methods (e.g., `setStorageKey(key)` or `setStorageBucket(bucket)`) instead of public properties/setters, convert them into standard TypeScript setters (`set storageKey(key)`, `set storageBucket(bucket)`) on the child widget so it can be instantiated and updated declaratively via the two-argument `widget(WidgetClass, {params})` directive.
 * Configuration is passed via the parameters.
@@ -110,7 +111,7 @@ render(html`
 
 ### Legacy Interop & Refs
 *   **Raw Elements:** Use `Directives.ref` (from `ui/lit/lit.js`) to obtain a reference to a raw `HTMLElement` if needed for imperative APIs (e.g., `splitWidget.installResizer(element)`).
-*   **Child Widgets:** Use `UI.Widget.widgetRef` to obtain the class instance of a child widget if you need to call methods on it directly (though declarative data flow is preferred).
+*   **Child Widgets:** Use `UI.Widget.widgetRef` to obtain the class instance of a child widget inside the view function if you need to call imperative methods on it. **Do NOT store child widget instances on `ViewOutput` as a final result** (doing so is only acceptable temporarily in intermediate migration CLs). Instead, either supply all needed configuration declaratively through setters/inputs on the child widget, or if imperative calls are strictly necessary, expose narrow action functions on `ViewOutput` (e.g., `output.doLayout = () => splitWidget.doLayout()`, `output.revealPosition = pos => childWidget.revealPosition(pos)`). Do not keep `get*ForTest()` methods that return child widget instances via `ViewOutput`; tests should query rendered `<devtools-widget>` elements via `.getWidget()` or assert on `ViewInput` via `createViewFunctionStub`.
 
 ### Dependencies
 

package/docs/cookbook/dependencies.md

@@ -54,23 +54,69 @@ reviewers and typically avoids inflating the bundle size.
 
 For all third-party packages that are used either as part of the DevTools build
 process or to augment engineers workflows (for example linters), we add them to
-`scripts/deps/manage_node_deps.py`. This Python script has been approved by
-Chromium licensing to be used, on the basis that it enforces all packages have a
-license that is compatible with a set of pre-defined licensees.
-
-If you want to use a new package as tooling process in engineer workflows, you
-can add the package to the `package.json` and run `./dt install-deps` to
-check in the new contents.
+`package.json`; `scripts/deps/manage_node_deps.py` installs them. This Python
+script has been approved by Chromium licensing to be used, on the basis that it
+enforces all packages have a license that is compatible with a set of
+pre-defined licensees.
+
+`node_modules/` is not checked into git. `gclient sync` downloads it as one
+archive from `gs://chromium-nodejs/devtools-frontend/<sha256>`, pinned by the
+`node_modules` entry in `DEPS`, the same way Chromium's WebUI toolchain and
+chromium-bidi ship their npm dependencies. Local edits inside `node_modules/`
+only last until the next `gclient sync` that changes the pin.
+
+gclient decides whether to re-extract the archive from the stamp files it
+keeps in `node_modules/`, not from the extracted tree. Checking out a revision
+from before `node_modules/` left git restores the tracked tree over the
+extracted one and leaves the stamps alone; checking out a later revision again
+deletes the tracked files, and `gclient sync` would consider the now empty
+directory up to date. The `ensure_node_modules` hook
+(`scripts/deps/ensure_node_modules.py`) catches this and re-extracts the
+archive that gclient leaves in `node_modules/node_modules.tar.gz`; if that
+archive is missing, it removes the stamps and asks you to run `gclient sync`
+once more.
+
+To add or update a package:
+
+1. Change the version in `package.json`.
+2. Run `./dt install-deps`. It runs `npm install`, post-processes the tree,
+   checks licenses, applies `scripts/deps/npm_exclude.txt`, verifies that
+   every `node_modules/` path referenced from GN or Python build files still
+   exists and writes a deterministic `out/node_modules.tar.gz` (sorted
+   entries, zeroed timestamps and ownership: the same tree always has the
+   same sha256).
+3. Build and test against the new tree: `./dt build && ./dt test`.
+4. Run `./dt install-deps --upload`. It uploads the archive (a no-op if the
+   object exists) and updates `DEPS`. This needs write access to the bucket;
+   otherwise ask an infra owner (`config/owner/INFRA_OWNERS`) to run it on
+   your branch.
+5. Upload the CL: `package.json`, `package-lock.json` and the `DEPS` change.
+   Presubmit checks that these change together; add a
+   `Skip-Node-Modules-Check: <reason>` footer for intentional exceptions.
+
+Reviewers can rebuild the archive from the lockfile with `./dt install-deps`
+and compare the printed sha256 with `DEPS`.
 
 Only add new license types to `LICENSES` after you received approval from
 `opensource-licensing@google.com`. Their response time is typically within 24
 hours, so this typically is not a big hurdle.
 
 To avoid excessive package updates, it is typically easiest to update all
-packages in `manage_node_deps.py` once a month. Since NPM packages can have a
-lot of (shared) transitive dependencies, updating the packages on a specific day
-increases the chances that shared dependencies are deduplicated and thus result
-in smaller repository sizes.
+packages once a month. Since NPM packages can have a lot of (shared) transitive
+dependencies, updating the packages on a specific day increases the chances
+that shared dependencies are deduplicated and thus result in a smaller archive.
+
+#### The exclude list
+
+`scripts/deps/npm_exclude.txt` holds rsync filter rules that drop files the
+build and tests don't need (tests, docs, source maps, non-declaration
+TypeScript sources, dotfiles, ...) before the archive is built. Keep rules come
+first and the first matching rule wins. Prefer generic patterns. A
+package-specific rule goes into the "package-specific drops" section with a
+comment saying why the files are unused, and must be measured and verified
+with a full build, test and lint run, because the reference check only knows
+about paths mentioned in GN and Python files, not about what Node resolves at
+runtime. Check such rules again when the package in question is updated.
 
 > **WARNING:** Updating tools such as Rollup and TypeScript will cause all build
 > cache output to be purged, as they are part of all DevTools modules. Whenever

package/docs/get_the_code.md

@@ -334,6 +334,14 @@ Follow [instructions](https://www.chromium.org/developers/how-tos/get-the-code)
 to check out Chromium. The DevTools front-end code is located inside the
 `third_party/devtools-frontend/src/` folder (after running `gclient sync`).
 
+`node_modules/` is not part of the devtools-frontend git tree: `gclient sync`,
+run from `chromium/src`, downloads the archive pinned in
+`third_party/devtools-frontend/src/DEPS` and extracts it (see
+[dependencies.md](cookbook/dependencies.md)). Whenever you check out a
+different DevTools revision or branch in `third_party/devtools-frontend/src`,
+run `gclient sync` again before building; `git checkout` or `git rebase`
+alone do not update `node_modules/`.
+
 ### Build
 
 The [instructions](https://www.chromium.org/developers/how-tos/get-the-code) on
@@ -438,6 +446,13 @@ git rebase
 popd
 ```
 
+Finish with another `gclient sync` so that `node_modules/` (and the other
+dependencies pinned in the DevTools `DEPS`) match the DevTools revision you
+ended up on. If you switch back and forth across the revision that moved
+`node_modules/` out of git, `gclient sync` repairs the directory on its own
+(`ensure_node_modules` hook); in the worst case it asks you to run it once
+more.
+
 ## Integrated checkout
 
 **This solution is experimental, please report any trouble that you run into!**

package/front_end/core/i18n/collect-ui-strings.js

@@ -2,7 +2,9 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-import {globSync} from 'node:fs';
+import {createHash} from 'node:crypto';
+import * as fs from 'node:fs';
+import {createRequire} from 'node:module';
 import * as path from 'node:path';
 import yargs from 'yargs';
 import {hideBin} from 'yargs/helpers';
@@ -58,32 +60,56 @@ if (inputDirectories.length === 0) {
   throw new Error('Provide at least one directory!');
 }
 
+const outputDirectory = yargsObject['output-directory'];
+
+// The parse results depend on collect-strings.js and the TypeScript version,
+// so a change to either one discards the cache.
+const cachePath = path.join(outputDirectory, 'collected-ui-strings.cache.json');
+const collectStringsSource = fs.readFileSync(new URL('../../../third_party/i18n/collect-strings.js', import.meta.url));
+const typescriptVersion = createRequire(import.meta.url)('typescript/package.json').version;
+const cacheVersion = createHash('sha256').update(collectStringsSource).update(typescriptVersion).digest('hex');
+/** @type {Record<string, {source: string, parsed: object}>} */
+let savedFiles = {};
+try {
+  const saved = JSON.parse(fs.readFileSync(cachePath, 'utf8'));
+  if (saved.version === cacheVersion) {
+    savedFiles = saved.files;
+  }
+} catch {
+  // Without a cache, all UIStrings get parsed again.
+}
+const cache = new Map(Object.entries(savedFiles));
+const initialCacheSize = cache.size;
+
 /** @type {Record<string, CtcMessage>} */
 let collectedStrings = {};
 /** @type {string[]} */
 const files = [];
 for (const directory of inputDirectories) {
-  collectedStrings = {
-    ...collectedStrings,
-    ...collectAllStringsInDir(directory),
-  };
-
-  const fs = globSync('**/*.{js,ts,gn}', {
+  const directoryFiles = fs.globSync('**/*.{js,ts,gn}', {
     cwd: directory,
     exclude: IGNORED_PATH_COMPONENTS,
   });
-  files.push(...fs.map(f => path.join(directory, f)));
+  collectedStrings = {
+    ...collectedStrings,
+    ...collectAllStringsInDir(
+        directory,
+        directoryFiles.filter(f => !f.endsWith('.gn')),
+        cache,
+        ),
+  };
+  files.push(...directoryFiles.map(f => path.join(directory, f)));
 }
 
-const outputDirectory = yargsObject['output-directory'];
-await convertCtcToLhLAndSave(outputDirectory, 'en-US', collectedStrings);
+const tasks = [convertCtcToLhLAndSave(outputDirectory, 'en-US', collectedStrings)];
 if (yargsObject['include-en-xl']) {
-  await convertCtcToLhLAndSave(
+  tasks.push(convertCtcToLhLAndSave(
       outputDirectory,
       'en-XL',
       createPsuedoLocaleStrings(collectedStrings),
-  );
+      ));
 }
+await Promise.all(tasks);
 
 // Write the depfile. This is necessary to properly rebuild en-US.json/en-XL.json
 // when any of the input TS files change. We also re-build when any GN file changes,
@@ -93,3 +119,23 @@ ${path.join(outputDirectory, 'en-US.json')}: ${files.join(' ')}
 `;
 
 await writeIfChanged(path.join(outputDirectory, 'collected-ui-strings.d'), depfile);
+
+// Drop the entries of deleted files, and save the cache only if it changed.
+let cacheChanged = false;
+await Promise.all(
+    Array.from(cache.entries()).map(async ([file, entry]) => {
+      if (savedFiles[file] !== entry) {
+        cacheChanged = true;
+      }
+      try {
+        await fs.promises.access(file);
+      } catch {
+        cache.delete(file);
+        cacheChanged = true;
+      }
+    }),
+);
+if (cacheChanged || cache.size !== initialCacheSize) {
+  const serialized = JSON.stringify({version: cacheVersion, files: Object.fromEntries(cache)});
+  await writeIfChanged(cachePath, serialized);
+}

package/front_end/core/i18n/i18nImpl.ts

@@ -49,7 +49,7 @@ export function getAllSupportedDevToolsLocales(): string[] {
 function getLocaleFetchUrl(locale: Intl.UnicodeBCP47LocaleIdentifier, location: string): string {
   const remoteBase = Root.Runtime.getRemoteBase(location);
   if (remoteBase?.version && !BUNDLED_LOCALES.has(locale)) {
-    return REMOTE_FETCH_PATTERN.replace('@HOST@', 'devtools://devtools')
+    return REMOTE_FETCH_PATTERN.replace('@HOST@', 'devtools://devtools-remote')
         .replace('@VERSION@', remoteBase.version)
         .replace('@LOCALE@', locale);
   }

package/front_end/core/root/Runtime.ts

@@ -47,7 +47,7 @@ export function getRemoteBase(location: string = globalObject.self?.location?.to
     return null;
   }
 
-  return {base: `devtools://devtools/remote/serve_file/${version[1]}/`, version: version[1]};
+  return {base: `devtools://devtools-remote/remote/serve_file/${version[1]}/`, version: version[1]};
 }
 
 export function getPathName(): string {

package/front_end/core/sdk/ResourceTreeModel.ts

@@ -529,6 +529,22 @@ export class ResourceTreeModel extends SDKModel<EventTypes> {
     return await this.agent.invoke_getAppId();
   }
 
+  async getSubApps(): Promise<Protocol.Page.SubApp[]> {
+    const response = await this.agent.invoke_getSubApps();
+    if (response.getError()) {
+      return [];
+    }
+    return response.subApps ?? [];
+  }
+
+  async getSiblingSubApps(): Promise<Protocol.Page.SubApp[]> {
+    const response = await this.agent.invoke_getSiblingSubApps();
+    if (response.getError()) {
+      return [];
+    }
+    return response.subApps ?? [];
+  }
+
   private executionContextComparator(a: ExecutionContext, b: ExecutionContext): number {
     function framePath(frame: ResourceTreeFrame|null): ResourceTreeFrame[] {
       let currentFrame: (ResourceTreeFrame|null) = frame;

package/front_end/core/sdk/WebAuthnModel.ts

@@ -22,6 +22,13 @@ export interface EventTypes {
   [Events.CREDENTIAL_UPDATED]: Protocol.WebAuthn.CredentialUpdatedEvent;
 }
 
+function throwIfError(response: Protocol.ProtocolResponseWithError): void {
+  const error = response.getError();
+  if (error) {
+    throw new Error(error);
+  }
+}
+
 export class WebAuthnModel extends SDKModel<EventTypes> {
   readonly #agent: ProtocolProxyApi.WebAuthnApi;
   constructor(target: Target) {
@@ -30,44 +37,44 @@ export class WebAuthnModel extends SDKModel<EventTypes> {
     target.registerWebAuthnDispatcher(new WebAuthnDispatcher(this));
   }
 
-  setVirtualAuthEnvEnabled(enable: boolean, enableUI = true): Promise<Object> {
-    if (enable) {
-      return this.#agent.invoke_enable({enableUI});
-    }
-    return this.#agent.invoke_disable();
+  async setVirtualAuthEnvEnabled(enable: boolean, enableUI = true): Promise<void> {
+    const response = enable ? await this.#agent.invoke_enable({enableUI}) : await this.#agent.invoke_disable();
+    throwIfError(response);
   }
 
   async addAuthenticator(options: Protocol.WebAuthn.VirtualAuthenticatorOptions):
       Promise<Protocol.WebAuthn.AuthenticatorId> {
     const response = await this.#agent.invoke_addVirtualAuthenticator({options});
+    throwIfError(response);
     return response.authenticatorId;
   }
 
   async removeAuthenticator(authenticatorId: Protocol.WebAuthn.AuthenticatorId): Promise<void> {
-    await this.#agent.invoke_removeVirtualAuthenticator({authenticatorId});
+    throwIfError(await this.#agent.invoke_removeVirtualAuthenticator({authenticatorId}));
   }
 
   async setAutomaticPresenceSimulation(authenticatorId: Protocol.WebAuthn.AuthenticatorId, enabled: boolean):
       Promise<void> {
-    await this.#agent.invoke_setAutomaticPresenceSimulation({authenticatorId, enabled});
+    throwIfError(await this.#agent.invoke_setAutomaticPresenceSimulation({authenticatorId, enabled}));
   }
 
   async setUserVerified(authenticatorId: Protocol.WebAuthn.AuthenticatorId, isUserVerified: boolean): Promise<void> {
-    await this.#agent.invoke_setUserVerified({authenticatorId, isUserVerified});
+    throwIfError(await this.#agent.invoke_setUserVerified({authenticatorId, isUserVerified}));
   }
 
   async addCredential(authenticatorId: Protocol.WebAuthn.AuthenticatorId,
                       credential: Protocol.WebAuthn.Credential): Promise<void> {
-    await this.#agent.invoke_addCredential({authenticatorId, credential});
+    throwIfError(await this.#agent.invoke_addCredential({authenticatorId, credential}));
   }
 
   async getCredentials(authenticatorId: Protocol.WebAuthn.AuthenticatorId): Promise<Protocol.WebAuthn.Credential[]> {
     const response = await this.#agent.invoke_getCredentials({authenticatorId});
+    throwIfError(response);
     return response.credentials;
   }
 
   async removeCredential(authenticatorId: Protocol.WebAuthn.AuthenticatorId, credentialId: string): Promise<void> {
-    await this.#agent.invoke_removeCredential({authenticatorId, credentialId});
+    throwIfError(await this.#agent.invoke_removeCredential({authenticatorId, credentialId}));
   }
 
   credentialAdded(params: Protocol.WebAuthn.CredentialAddedEvent): void {

package/front_end/entrypoints/js_app/js_app.ts

@@ -85,12 +85,9 @@ UI.ViewManager.registerViewExtension({
   commandPrompt: i18nLazyString(UIStrings.showNode),
   order: 2,
   persistence: UI.ViewManager.ViewPersistence.PERMANENT,
-  async loadView(universe) {
+  async loadView() {
     const Sources = await loadSourcesModule();
-    return Sources.SourcesNavigator.NetworkNavigatorView.instance({
-      forceNew: null,
-      networkProjectManager: universe.networkProjectManager,
-    });
+    return Sources.SourcesNavigator.NetworkNavigatorView.instance();
   },
 });
 

package/front_end/entrypoints/node_app/node_app.ts

@@ -81,10 +81,9 @@ UI.ViewManager.registerViewExtension({
   commandPrompt: i18nLazyString(UIStrings.showNode),
   order: 2,
   persistence: UI.ViewManager.ViewPersistence.PERMANENT,
-  async loadView(universe) {
+  async loadView() {
     const Sources = await loadSourcesModule();
-    return Sources.SourcesNavigator.NetworkNavigatorView.instance(
-        {forceNew: null, networkProjectManager: universe.networkProjectManager});
+    return Sources.SourcesNavigator.NetworkNavigatorView.instance();
   },
 });
 

package/front_end/generated/InspectorBackendCommands.ts

@@ -838,7 +838,7 @@ inspectorBackend.registerEnum("Network.ContentSecurityPolicySource", {HTTP: "HTT
 inspectorBackend.registerEnum("Network.ReportStatus", {Queued: "Queued", Pending: "Pending", MarkedForRemoval: "MarkedForRemoval", Success: "Success"});
 inspectorBackend.registerEnum("Network.DeviceBoundSessionWithUsageUsage", {NotInScope: "NotInScope", InScopeRefreshNotYetNeeded: "InScopeRefreshNotYetNeeded", InScopeRefreshNotAllowed: "InScopeRefreshNotAllowed", ProactiveRefreshNotPossible: "ProactiveRefreshNotPossible", ProactiveRefreshAttempted: "ProactiveRefreshAttempted", Deferred: "Deferred"});
 inspectorBackend.registerEnum("Network.DeviceBoundSessionUrlRuleRuleType", {Exclude: "Exclude", Include: "Include"});
-inspectorBackend.registerEnum("Network.DeviceBoundSessionFetchResult", {Success: "Success", SigningKeyGenerationError: "SigningKeyGenerationError", AttestationKeyGenerationError: "AttestationKeyGenerationError", SigningError: "SigningError", TransientSigningError: "TransientSigningError", ServerRequestedTermination: "ServerRequestedTermination", InvalidSessionId: "InvalidSessionId", InvalidChallenge: "InvalidChallenge", TooManyChallenges: "TooManyChallenges", InvalidFetcherUrl: "InvalidFetcherUrl", InvalidRefreshUrl: "InvalidRefreshUrl", TransientHttpError: "TransientHttpError", ScopeOriginSameSiteMismatch: "ScopeOriginSameSiteMismatch", RefreshUrlSameSiteMismatch: "RefreshUrlSameSiteMismatch", MismatchedSessionId: "MismatchedSessionId", MissingScope: "MissingScope", NoCredentials: "NoCredentials", SubdomainRegistrationWellKnownUnavailable: "SubdomainRegistrationWellKnownUnavailable", SubdomainRegistrationUnauthorized: "SubdomainRegistrationUnauthorized", SubdomainRegistrationWellKnownMalformed: "SubdomainRegistrationWellKnownMalformed", SessionProviderWellKnownUnavailable: "SessionProviderWellKnownUnavailable", RelyingPartyWellKnownUnavailable: "RelyingPartyWellKnownUnavailable", FederatedKeyThumbprintMismatch: "FederatedKeyThumbprintMismatch", InvalidFederatedSessionUrl: "InvalidFederatedSessionUrl", InvalidFederatedKey: "InvalidFederatedKey", TooManyRelyingOriginLabels: "TooManyRelyingOriginLabels", BoundCookieSetForbidden: "BoundCookieSetForbidden", NetError: "NetError", ProxyError: "ProxyError", EmptySessionConfig: "EmptySessionConfig", InvalidCredentialsConfig: "InvalidCredentialsConfig", InvalidCredentialsType: "InvalidCredentialsType", InvalidCredentialsEmptyName: "InvalidCredentialsEmptyName", InvalidCredentialsCookie: "InvalidCredentialsCookie", PersistentHttpError: "PersistentHttpError", RegistrationAttemptedChallenge: "RegistrationAttemptedChallenge", InvalidScopeOrigin: "InvalidScopeOrigin", ScopeOriginContainsPath: "ScopeOriginContainsPath", RefreshInitiatorNotString: "RefreshInitiatorNotString", RefreshInitiatorInvalidHostPattern: "RefreshInitiatorInvalidHostPattern", InvalidScopeSpecification: "InvalidScopeSpecification", MissingScopeSpecificationType: "MissingScopeSpecificationType", EmptyScopeSpecificationDomain: "EmptyScopeSpecificationDomain", EmptyScopeSpecificationPath: "EmptyScopeSpecificationPath", InvalidScopeSpecificationType: "InvalidScopeSpecificationType", InvalidScopeIncludeSite: "InvalidScopeIncludeSite", MissingScopeIncludeSite: "MissingScopeIncludeSite", FederatedNotAuthorizedByProvider: "FederatedNotAuthorizedByProvider", FederatedNotAuthorizedByRelyingParty: "FederatedNotAuthorizedByRelyingParty", SessionProviderWellKnownMalformed: "SessionProviderWellKnownMalformed", SessionProviderWellKnownHasProviderOrigin: "SessionProviderWellKnownHasProviderOrigin", RelyingPartyWellKnownMalformed: "RelyingPartyWellKnownMalformed", RelyingPartyWellKnownHasRelyingOrigins: "RelyingPartyWellKnownHasRelyingOrigins", InvalidFederatedSessionProviderSessionMissing: "InvalidFederatedSessionProviderSessionMissing", InvalidFederatedSessionWrongProviderOrigin: "InvalidFederatedSessionWrongProviderOrigin", InvalidCredentialsCookieCreationTime: "InvalidCredentialsCookieCreationTime", InvalidCredentialsCookieName: "InvalidCredentialsCookieName", InvalidCredentialsCookieParsing: "InvalidCredentialsCookieParsing", InvalidCredentialsCookieUnpermittedAttribute: "InvalidCredentialsCookieUnpermittedAttribute", InvalidCredentialsCookieInvalidDomain: "InvalidCredentialsCookieInvalidDomain", InvalidCredentialsCookiePrefix: "InvalidCredentialsCookiePrefix", InvalidScopeRulePath: "InvalidScopeRulePath", InvalidScopeRuleHostPattern: "InvalidScopeRuleHostPattern", ScopeRuleOriginScopedHostPatternMismatch: "ScopeRuleOriginScopedHostPatternMismatch", ScopeRuleSiteScopedHostPatternMismatch: "ScopeRuleSiteScopedHostPatternMismatch", SigningQuotaExceeded: "SigningQuotaExceeded", InvalidConfigJson: "InvalidConfigJson", InvalidFederatedSessionProviderFailedToRestoreKey: "InvalidFederatedSessionProviderFailedToRestoreKey", FailedToUnwrapKey: "FailedToUnwrapKey", SessionDeletedDuringRefresh: "SessionDeletedDuringRefresh", CrossOriginRegistrationSiteNotIncluded: "CrossOriginRegistrationSiteNotIncluded", InvalidPreProvisionedKeyInitiatorMissing: "InvalidPreProvisionedKeyInitiatorMissing", PreProvisionedKeyAccessNotGranted: "PreProvisionedKeyAccessNotGranted", PreProvisionedKeyNotFound: "PreProvisionedKeyNotFound", AttestationCertificationError: "AttestationCertificationError", AttestationSigningError: "AttestationSigningError"});
+inspectorBackend.registerEnum("Network.DeviceBoundSessionFetchResult", {Success: "Success", SigningKeyGenerationError: "SigningKeyGenerationError", AttestationKeyGenerationError: "AttestationKeyGenerationError", SigningError: "SigningError", TransientSigningError: "TransientSigningError", ServerRequestedTermination: "ServerRequestedTermination", InvalidSessionId: "InvalidSessionId", InvalidChallenge: "InvalidChallenge", TooManyChallenges: "TooManyChallenges", InvalidFetcherUrl: "InvalidFetcherUrl", InvalidRefreshUrl: "InvalidRefreshUrl", TransientHttpError: "TransientHttpError", ScopeOriginSameSiteMismatch: "ScopeOriginSameSiteMismatch", RefreshUrlSameSiteMismatch: "RefreshUrlSameSiteMismatch", MismatchedSessionId: "MismatchedSessionId", MissingScope: "MissingScope", NoCredentials: "NoCredentials", SubdomainRegistrationWellKnownUnavailable: "SubdomainRegistrationWellKnownUnavailable", SubdomainRegistrationUnauthorized: "SubdomainRegistrationUnauthorized", SubdomainRegistrationWellKnownMalformed: "SubdomainRegistrationWellKnownMalformed", SessionProviderWellKnownUnavailable: "SessionProviderWellKnownUnavailable", RelyingPartyWellKnownUnavailable: "RelyingPartyWellKnownUnavailable", FederatedKeyThumbprintMismatch: "FederatedKeyThumbprintMismatch", InvalidFederatedSessionUrl: "InvalidFederatedSessionUrl", InvalidFederatedKey: "InvalidFederatedKey", TooManyRelyingOriginLabels: "TooManyRelyingOriginLabels", BoundCookieSetForbidden: "BoundCookieSetForbidden", NetError: "NetError", ProxyError: "ProxyError", EmptySessionConfig: "EmptySessionConfig", InvalidCredentialsConfig: "InvalidCredentialsConfig", InvalidCredentialsType: "InvalidCredentialsType", InvalidCredentialsEmptyName: "InvalidCredentialsEmptyName", InvalidCredentialsCookie: "InvalidCredentialsCookie", PersistentHttpError: "PersistentHttpError", RegistrationAttemptedChallenge: "RegistrationAttemptedChallenge", InvalidScopeOrigin: "InvalidScopeOrigin", ScopeOriginContainsPath: "ScopeOriginContainsPath", RefreshInitiatorNotString: "RefreshInitiatorNotString", RefreshInitiatorInvalidHostPattern: "RefreshInitiatorInvalidHostPattern", InvalidScopeSpecification: "InvalidScopeSpecification", MissingScopeSpecificationType: "MissingScopeSpecificationType", EmptyScopeSpecificationDomain: "EmptyScopeSpecificationDomain", EmptyScopeSpecificationPath: "EmptyScopeSpecificationPath", InvalidScopeSpecificationType: "InvalidScopeSpecificationType", InvalidScopeIncludeSite: "InvalidScopeIncludeSite", MissingScopeIncludeSite: "MissingScopeIncludeSite", FederatedNotAuthorizedByProvider: "FederatedNotAuthorizedByProvider", FederatedNotAuthorizedByRelyingParty: "FederatedNotAuthorizedByRelyingParty", SessionProviderWellKnownMalformed: "SessionProviderWellKnownMalformed", SessionProviderWellKnownHasProviderOrigin: "SessionProviderWellKnownHasProviderOrigin", RelyingPartyWellKnownMalformed: "RelyingPartyWellKnownMalformed", RelyingPartyWellKnownHasRelyingOrigins: "RelyingPartyWellKnownHasRelyingOrigins", InvalidFederatedSessionProviderSessionMissing: "InvalidFederatedSessionProviderSessionMissing", InvalidFederatedSessionWrongProviderOrigin: "InvalidFederatedSessionWrongProviderOrigin", InvalidCredentialsCookieCreationTime: "InvalidCredentialsCookieCreationTime", InvalidCredentialsCookieName: "InvalidCredentialsCookieName", InvalidCredentialsCookieParsing: "InvalidCredentialsCookieParsing", InvalidCredentialsCookieUnpermittedAttribute: "InvalidCredentialsCookieUnpermittedAttribute", InvalidCredentialsCookieInvalidDomain: "InvalidCredentialsCookieInvalidDomain", InvalidCredentialsCookiePrefix: "InvalidCredentialsCookiePrefix", InvalidScopeRulePath: "InvalidScopeRulePath", InvalidScopeRuleHostPattern: "InvalidScopeRuleHostPattern", ScopeRuleOriginScopedHostPatternMismatch: "ScopeRuleOriginScopedHostPatternMismatch", ScopeRuleSiteScopedHostPatternMismatch: "ScopeRuleSiteScopedHostPatternMismatch", SigningQuotaExceeded: "SigningQuotaExceeded", InvalidConfigJson: "InvalidConfigJson", InvalidFederatedSessionProviderFailedToRestoreKey: "InvalidFederatedSessionProviderFailedToRestoreKey", FailedToUnwrapKey: "FailedToUnwrapKey", SessionDeletedDuringRefresh: "SessionDeletedDuringRefresh", CrossOriginRegistrationSiteNotIncluded: "CrossOriginRegistrationSiteNotIncluded", InvalidPreProvisionedKeyInitiatorMissing: "InvalidPreProvisionedKeyInitiatorMissing", PreProvisionedKeyAccessNotGranted: "PreProvisionedKeyAccessNotGranted", PreProvisionedKeyNotFound: "PreProvisionedKeyNotFound", AttestationCertificationError: "AttestationCertificationError", AttestationSigningError: "AttestationSigningError", FederatedRegistrationRedirected: "FederatedRegistrationRedirected"});
 inspectorBackend.registerEnum("Network.RefreshEventDetailsRefreshResult", {Refreshed: "Refreshed", InitializedService: "InitializedService", Unreachable: "Unreachable", ServerError: "ServerError", FatalError: "FatalError", SigningQuotaExceeded: "SigningQuotaExceeded", RefreshedAsWaiter: "RefreshedAsWaiter", TransientSigningError: "TransientSigningError", InScopeRefreshNotYetNeeded: "InScopeRefreshNotYetNeeded", Canceled: "Canceled"});
 inspectorBackend.registerEnum("Network.TerminationEventDetailsDeletionReason", {Expired: "Expired", FailedToRestoreKey: "FailedToRestoreKey", FailedToUnwrapKey: "FailedToUnwrapKey", StoragePartitionCleared: "StoragePartitionCleared", ClearBrowsingData: "ClearBrowsingData", ServerRequested: "ServerRequested", InvalidSessionParams: "InvalidSessionParams", RefreshFatalError: "RefreshFatalError", DevTools: "DevTools", Replaced: "Replaced"});
 inspectorBackend.registerEnum("Network.ChallengeEventDetailsChallengeResult", {Success: "Success", NoSessionId: "NoSessionId", NoSessionMatch: "NoSessionMatch", CantSetBoundCookie: "CantSetBoundCookie"});
@@ -867,8 +867,8 @@ inspectorBackend.registerEvent("Network.directTCPSocketAborted", ["identifier",
 inspectorBackend.registerEvent("Network.directTCPSocketClosed", ["identifier", "timestamp"]);
 inspectorBackend.registerEvent("Network.directTCPSocketChunkSent", ["identifier", "data", "timestamp"]);
 inspectorBackend.registerEvent("Network.directTCPSocketChunkReceived", ["identifier", "data", "timestamp"]);
-inspectorBackend.registerEvent("Network.directUDPSocketJoinedMulticastGroup", ["identifier", "IPAddress"]);
-inspectorBackend.registerEvent("Network.directUDPSocketLeftMulticastGroup", ["identifier", "IPAddress"]);
+inspectorBackend.registerEvent("Network.directUDPSocketJoinedMulticastGroup", ["identifier", "IPAddress", "sourceAddress"]);
+inspectorBackend.registerEvent("Network.directUDPSocketLeftMulticastGroup", ["identifier", "IPAddress", "sourceAddress"]);
 inspectorBackend.registerEvent("Network.directUDPSocketCreated", ["identifier", "options", "timestamp", "initiator"]);
 inspectorBackend.registerEvent("Network.directUDPSocketOpened", ["identifier", "localAddr", "localPort", "timestamp", "remoteAddr", "remotePort"]);
 inspectorBackend.registerEvent("Network.directUDPSocketAborted", ["identifier", "errorMessage", "timestamp"]);

package/front_end/generated/protocol.ts

@@ -12249,6 +12249,7 @@ export namespace Network {
     PreProvisionedKeyNotFound = 'PreProvisionedKeyNotFound',
     AttestationCertificationError = 'AttestationCertificationError',
     AttestationSigningError = 'AttestationSigningError',
+    FederatedRegistrationRedirected = 'FederatedRegistrationRedirected',
   }
 
   /**
@@ -13395,12 +13396,28 @@ export namespace Network {
 
   export interface DirectUDPSocketJoinedMulticastGroupEvent {
     identifier: RequestId;
+    /**
+     * Multicast group address.
+     */
     IPAddress: string;
+    /**
+     * Source address of a source-specific multicast (SSM) membership. Absent
+     * for any-source multicast (ASM) memberships.
+     */
+    sourceAddress?: string;
   }
 
   export interface DirectUDPSocketLeftMulticastGroupEvent {
     identifier: RequestId;
+    /**
+     * Multicast group address.
+     */
     IPAddress: string;
+    /**
+     * Source address of a source-specific multicast (SSM) membership. Absent
+     * for any-source multicast (ASM) memberships.
+     */
+    sourceAddress?: string;
   }
 
   /**

package/front_end/models/ai_assistance/skills/lighthouse.md

@@ -1,6 +1,6 @@
 ---
 name: lighthouse
-description: Analyzing an active Lighthouse report context, running Lighthouse reports and audits (performance, accessibility, best practices, Search Engine Optimization (SEO)), accessibility audits, ARIA properties, accessible tree inspection, color contrast, and screen reader semantics. Not for general page performance measurement without a Lighthouse report; use the performance skill for that.
+description: Analyzing an active Lighthouse report context, running Lighthouse reports and audits (performance, accessibility, best practices, Search Engine Optimization (SEO), and agentic browsing when explicitly requested), accessibility audits, ARIA properties, accessible tree inspection, color contrast, and screen reader semantics. Not for general page performance measurement without a Lighthouse report; use the performance skill for that.
 allowed-tools:
   - runLighthouse
   - getLighthouseAudits
@@ -22,6 +22,7 @@ Your role is to evaluate websites using Lighthouse audits across performance, ac
    - If no active report exists or a fresh audit is requested, call `runLighthouse`:
      - If the user asks for a general report or multiple categories, use `categoryId: 'all'`.
      - For a single category, pass that category ID (e.g. `'accessibility'`).
+     - Only pass `categoryId: 'agentic-browsing'` when the user explicitly asks for an agentic browsing audit, such as how ready the page is for AI agents to navigate and use it, or WebMCP checks. `'all'` does not include it, so never pick it for general audits, and never substitute another category (such as `'seo'`) when the user asks for it. Use `"navigation"` mode for `'agentic-browsing'` unless the user explicitly asks for another mode, because its WebMCP audits only run in `"navigation"` mode.
      - Execution mode:
        - Use `"navigation"` mode for full page-load audits (default for full site reviews).
        - Use `"snapshot"` mode to re-evaluate live in-page DOM/CSS modifications without reloading.

package/front_end/models/ai_assistance/skills/network.md

@@ -20,3 +20,4 @@ You are an expert network request debugging assistant.
 
 * **Privacy**: If the request or response payload contains sensitive personal data, authorization tokens, or API secrets, redact or generalize it in your response.
 * **Origin Lock**: Only requests belonging to the conversation's established origin can be inspected.
+* **Recording**: DevTools only records requests made while DevTools is open and network recording is enabled (and the log has not been cleared). If `listNetworkRequests` reports that no requests have been recorded, ask the user to ensure network recording is enabled, reload the page or repeat the action that triggers the request, and try again.

package/front_end/models/ai_assistance/tools/ExecuteJavaScript.ts

@@ -31,6 +31,24 @@ const MAX_TOTAL_CHARACTERS = 2500;
 const MAX_LONG_LINES_REPORTED = 3;
 const LONG_LINE_PREVIEW_LENGTH = 60;
 
+/**
+ * Matches the error observations for network requests that the isolated
+ * world's CSP (`FREESTYLER_WORLD_CSP`) blocks. When code run by this tool calls
+ * `fetch()`, Chrome rejects with exactly "Failed to fetch". A synchronous
+ * `XMLHttpRequest.send()` throws "Failed to execute 'send' on 'XMLHttpRequest':
+ * Failed to load '<url>'.".
+ */
+const BLOCKED_NETWORK_ERROR_PATTERN =
+    /^Error: (?:Failed to fetch$|Failed to execute 'send' on 'XMLHttpRequest': Failed to load )/;
+const BLOCKED_NETWORK_HINT =
+    'Network access (e.g., fetch, XMLHttpRequest) is blocked for JavaScript run by this tool, so this error does not mean the page\'s own network requests are failing. Do not retry network requests with this tool.';
+/**
+ * Only the V2 agent can load the network tools, so V1 agents do not get this
+ * part of the hint.
+ */
+const NETWORK_TOOLS_HINT =
+    'To inspect the page\'s network requests, load the `network` skill with `learnSkills` if it is not loaded yet, then use `listNetworkRequests` and `getNetworkRequestDetails`.';
+
 /**
  * Returns one message per size limit that the formatted code exceeds. Each
  * message states the actual value, the limit, and how to fix it, so the model
@@ -178,7 +196,8 @@ const data = {
       return {error: 'Error: Cannot execute JavaScript on cross-origin target.'};
     }
 
-    if (Root.Runtime.hostConfig.devToolsAiV2Architecture?.enabled) {
+    const isV2Architecture = Root.Runtime.hostConfig.devToolsAiV2Architecture?.enabled;
+    if (isV2Architecture) {
       const validationResult = await ExecuteJavaScriptTool.validateAndFormatCode(params.code);
       if (validationResult.error) {
         return {error: validationResult.error};
@@ -199,6 +218,11 @@ const data = {
     },
                                             context.execJs);
 
-    return await executor.executeAction(params.code, options);
+    const result = await executor.executeAction(params.code, options);
+    if ('result' in result && typeof result.result === 'string' && BLOCKED_NETWORK_ERROR_PATTERN.test(result.result)) {
+      const hint = isV2Architecture ? `${BLOCKED_NETWORK_HINT} ${NETWORK_TOOLS_HINT}` : BLOCKED_NETWORK_HINT;
+      return {...result, result: `${result.result}\n${hint}`};
+    }
+    return result;
   }
 }

package/front_end/models/ai_assistance/tools/GetLighthouseAudits.ts

@@ -34,7 +34,7 @@ export class GetLighthouseAuditsTool implements
       categoryId: {
         type: Host.AidaClient.ParametersTypes.STRING,
         description:
-            'The category of audits to retrieve. Use "all" to retrieve the full report and all categories, or specify a category: "accessibility", "performance", "best-practices", "seo".',
+            'The category of audits to retrieve. Use "all" to retrieve the full report and all categories, or specify a category: "accessibility", "performance", "best-practices", "seo", or "agentic-browsing" (only present when the active report includes an agentic browsing audit).',
         nullable: false,
       },
     },