chrome-devtools-frontend 1.0.1724140 → 1.0.1726686

package/.agents/skills/review-ui-widgets/SKILL.md

@@ -78,10 +78,10 @@ This skill provides review guidance for Chrome DevTools frontend changes matchin
 - **Look for**: Unscoped generic selectors in light-DOM `.css` files (or `:host` inside `@scope` blocks instead of `:scope`), or CSS rules combining `vertical-align`, negative `margin-top`, and pixel offsets to center icons and buttons.
 - **Do not flag**: Shadow DOM component stylesheets where `:host` scoping is native.
 
-### `UI_VIEW_OUTPUT_AND_CALLBACK_CONTRACTS`: Encapsulate imperative DOM actions in ViewOutput callbacks and pass user actions via semantic ViewInput callbacks instead of raw DOM references
+### `UI_VIEW_OUTPUT_AND_CALLBACK_CONTRACTS`: Encapsulate imperative DOM and child widget actions in ViewOutput callbacks and pass user actions via semantic ViewInput callbacks instead of raw DOM or Widget references
 - **Severity**: WARNING
-- **Why**: Exposing raw `HTMLElement` references on `ViewOutput` or passing raw `MouseEvent`/`KeyboardEvent` objects to presenter callbacks leaks DOM details into presenters. Views should populate narrow functional closures on `ViewOutput` (e.g. `output.focusInput = () => ...`) and unpack event values before calling `input.onSelect(value)`.
-- **Look for**: `ViewOutput` interfaces containing `HTMLElement` or `Element` properties, or `ViewInput` callbacks typed as `(event: Event) => void` instead of semantic domain values.
+- **Why**: Exposing raw `HTMLElement` or `UI.Widget` references on `ViewOutput` (e.g. `output.childWidget = w`) or passing raw `MouseEvent`/`KeyboardEvent` objects to presenter callbacks leaks view implementation details into presenters. Supply all configuration through setters/inputs on the child widget, or if imperative calls are strictly necessary, populate narrow functional closures on `ViewOutput` (e.g. `output.focusInput = () => ...`, `output.scrollWidgetToSomething = () => widgetRef.scrollToSomething()`), and unpack event values before calling `input.onSelect(value)`.
+- **Look for**: `ViewOutput` interfaces containing `HTMLElement`, `Element`, or `UI.Widget` subclass properties (other than temporary intermediate CL bridges), `get*ForTest()` presenter methods backed by `ViewOutput` widget references, or `ViewInput` callbacks typed as `(event: Event) => void` instead of semantic domain values.
 - **Do not flag**: Third-party editor or canvas host containers that require a raw mount `HTMLElement`.
 
 ### `UI_PANEL_AND_META_REGISTRATION`: Follow DevTools panel directory conventions and register settings and views in the appropriate *-meta.ts scope
@@ -102,11 +102,11 @@ This skill provides review guidance for Chrome DevTools frontend changes matchin
 - **Look for**: Raw string interpolation in `querySelector('[attr="' + val + '"]')` without `CSS.escape`, `href` attribute bindings with unvalidated `javascript:` URLs, Markdown table cell serialization without escaping `|*_<>\`, or raw HTML snippet generation without HTML escaping.
 - **Do not flag**: Standard Lit `html` text bindings (`${text}`), which escape HTML entities automatically.
 
-### `UI_DECLARATIVE_CHILD_WIDGET_COMPOSITION`: Compose child UI.Widget instances declaratively in Lit templates using the two-argument widget(ChildWidget, {...}) directive instead of imperative show() calls or single-argument factory callbacks
+### `UI_DECLARATIVE_CHILD_WIDGET_COMPOSITION`: Compose child UI.Widget instances declaratively in Lit templates using ${widget(ChildWidget, {...})} instead of imperative show() calls, single-argument factory callbacks, or bare <devtools-widget> tags
 - **Severity**: WARNING
-- **Why**: Imperatively instantiating child widgets and calling `child.show(container)` inside presenters or views bypasses Lit reconciliation, complicates lifecycle management, and recreates widgets unnecessarily across renders. Similarly, single-argument factory callbacks `widget(element => ...)` only run on initial creation and fail to propagate updated properties on subsequent re-renders; strongly prefer the two-argument `widget(ChildWidget, {...})` form (converting `setFoo()` methods on the child widget into `set foo()` setters if needed).
-- **Look for**: `new ChildWidget()` followed by `.show(...)` or `.appendChild(child.element)` inside Lit view functions or migrated `performUpdate()` methods, or `widget(element => ...)` factory callbacks configuring child widget properties imperatively instead of `<devtools-widget ${widget(ChildWidget, {...})}></devtools-widget>` (or `${widget(ChildWidget, {...})}`).
-- **Do not flag**: Top-level legacy split widgets or tabbed panes that have not migrated to Lit views.
+- **Why**: Imperatively instantiating child widgets and calling `child.show(container)` inside presenters or views bypasses Lit reconciliation, complicates lifecycle management, and recreates widgets unnecessarily across renders. Similarly, single-argument factory callbacks `widget(element => ...)` only run on initial creation and fail to propagate updated properties on subsequent re-renders; strongly prefer the two-argument `widget(ChildWidget, {...})` form (converting `setFoo()` methods on the child widget into `set foo()` setters if needed). Prefer `${widget(ChildWidget, {...})}` directly as a child expression over `<devtools-widget ${widget(ChildWidget, {...})}></devtools-widget>`; only use an explicit `<devtools-widget>` tag when setting other attributes, applying other directives (such as `widgetRef` or `ref`), or providing child nodes.
+- **Look for**: `new ChildWidget()` followed by `.show(...)` or `.appendChild(child.element)` inside Lit view functions or migrated `performUpdate()` methods, `widget(element => ...)` factory callbacks configuring child widget properties imperatively instead of `${widget(ChildWidget, {...})}`, or `<devtools-widget ${widget(ChildWidget, {...})}></devtools-widget>` tags that have no other attributes, directives, or child nodes.
+- **Do not flag**: Top-level legacy split widgets or tabbed panes that have not migrated to Lit views, or `<devtools-widget>` tags that set other attributes, use additional directives (e.g. `widgetRef`), or contain child nodes.
 
 ### `UI_AWAIT_UPDATE_COMPLETE_POST_RENDER`: Await this.updateComplete before executing post-render DOM measurements, focus changes, or scroll adjustments
 - **Severity**: ERROR

package/.agents/skills/ui-eng-vision-local-lit-renderer/SKILL.md

@@ -126,6 +126,12 @@ existing element containers.
 
 12. **Composing Child `UI.Widget`s & Pre-Existing Instances**:
 
+    *   **Prefer `${widget(ChildWidgetClass, {params})}` Over `<devtools-widget>`**:
+        Prefer `${widget(ChildWidgetClass, {params})}` directly as a child
+        expression instead of `<devtools-widget ${widget(ChildWidgetClass, {params})}></devtools-widget>`.
+        Only use an explicit `<devtools-widget>` tag when you need to set other
+        HTML attributes/classes, apply additional directives (such as `widgetRef`
+        or `ref`), or provide child nodes.
     *   **Strongly Prefer Two-Argument `widget(ChildWidgetClass, {params})`**:
         When instantiating child widgets in a Lit template, strongly prefer the
         two-argument form `widget(ChildWidgetClass, {propA: input.a, propB: input.b})`
@@ -136,6 +142,12 @@ existing element containers.
         `setFoo()` methods instead of setters, convert them into `set foo()`
         setters on the child widget so you can use the two-argument `widget()`
         directive.
+    *   **No Widget References on `ViewOutput`**: Do not store child widget
+        references on `ViewOutput` (e.g., `output.childWidget = w`) as a final
+        result (only acceptable temporarily in intermediate CLs). Supply all
+        configuration through setters on the child widget, or if imperative
+        actions are strictly required, expose individual functions on `ViewOutput`
+        (e.g., `output.doLayout = () => w.doLayout()`).
     *   **Pre-Existing Widget Instances (`UI.Widget.WrapperWidget`)**: Use
         `${widget(UI.Widget.WrapperWidget, {widget: input.childWidget})}` when
         embedding widgets owned by `UI.ViewManager`

package/.agents/skills/ui-eng-vision-widget-promoter/SKILL.md

@@ -66,14 +66,14 @@ clean `UI.Widget` classes that use native update rendering delegates.
 3.  **Clean Up Legacy Wrappers**:
 
     *   Remove any `LegacyWrapper` bindings or custom wrappable custom elements.
-    *   Replace old panel instantiations with standard `<devtools-widget>`
-        declarative entries (using `const {widget} = UI.Widget;`):
+    *   Replace old panel instantiations with declarative `widget` entries (using `const {widget} = UI.Widget;`). Prefer `${widget(MyWidgetClass, {params})}` directly as a child expression over `<devtools-widget ${widget(MyWidgetClass, {params})}></devtools-widget>`; only use an explicit `<devtools-widget>` tag when setting other attributes, applying other directives (such as `widgetRef` or `ref`), or providing child nodes:
 
         ```typescript
-        html`<devtools-widget ${widget(MyWidgetClass, {params})}></devtools-widget>`
+        html`${widget(MyWidgetClass, {params})}`
         ```
 
     *   **Strongly prefer the two-argument `widget(MyWidgetClass, {params})` form** over the single-argument factory callback `widget(element => new MyWidgetClass(element, ...))`. The single-argument factory only runs on initial creation and does not update properties on subsequent re-renders. If the child widget only exposes `setFoo(...)` methods, convert them into `set foo(...)` setters so they can be passed via the second argument of `widget()`.
+    *   **No Widget References on `ViewOutput`**: Keeping child `UI.Widget` instances on `ViewOutput` (e.g., `output.childWidget = w`) is not a good practice and must not remain in the final result (it is only acceptable temporarily in intermediate CLs). Either supply all configuration through setters on the child widget, or if imperative action calls are strictly needed, expose individual functions on `ViewOutput` (such as `output.doLayout = () => w.doLayout()` or `output.scrollWidgetToSomething = () => w.scrollToSomething()`). Remove legacy `get*ForTest()` methods that were only used to grab child widgets from `ViewOutput` and update tests to query the DOM (`view.contentElement.querySelector(...)?.getWidget()`) or inspect `ViewInput`.
     *   Inspect instantiator files (e.g., `ApplicationPanelSidebar.ts`) and
         decouple any direct accesses to `.element`.
 

package/.agents/skills/ui-widgets/SKILL.md

@@ -59,6 +59,7 @@ const DEFAULT_VIEW = (input: ViewInput, output: ViewOutput, target: HTMLElement)
 ### Composition
 
 * To render a child widget, the parent's View MUST use the lit-html directive `UI.Widget.widget`.
+* **Prefer `${widget(WidgetClass, {params})}` directly as a child expression** over `<devtools-widget ${widget(WidgetClass, {params})}></devtools-widget>`. Only use an explicit `<devtools-widget>` tag when you need to set other HTML attributes/classes, apply additional directives (such as `widgetRef` or `ref`), or provide child nodes.
 * **Strongly prefer the two-argument `widget(WidgetClass, {params})` form** over the single-argument factory callback `widget(element => new WidgetClass(element, ...))`. The two-argument form automatically updates properties and calls `requestUpdate()` on subsequent renders, whereas a factory callback only runs once on initial instantiation.
 * If a child widget currently exposes imperative setter methods (e.g., `setStorageKey(key)` or `setStorageBucket(bucket)`) instead of public properties/setters, convert them into standard TypeScript setters (`set storageKey(key)`, `set storageBucket(bucket)`) on the child widget so it can be instantiated and updated declaratively via the two-argument `widget(WidgetClass, {params})` directive.
 * Configuration is passed via the parameters.
@@ -110,7 +111,7 @@ render(html`
 
 ### Legacy Interop & Refs
 *   **Raw Elements:** Use `Directives.ref` (from `ui/lit/lit.js`) to obtain a reference to a raw `HTMLElement` if needed for imperative APIs (e.g., `splitWidget.installResizer(element)`).
-*   **Child Widgets:** Use `UI.Widget.widgetRef` to obtain the class instance of a child widget if you need to call methods on it directly (though declarative data flow is preferred).
+*   **Child Widgets:** Use `UI.Widget.widgetRef` to obtain the class instance of a child widget inside the view function if you need to call imperative methods on it. **Do NOT store child widget instances on `ViewOutput` as a final result** (doing so is only acceptable temporarily in intermediate migration CLs). Instead, either supply all needed configuration declaratively through setters/inputs on the child widget, or if imperative calls are strictly necessary, expose narrow action functions on `ViewOutput` (e.g., `output.doLayout = () => splitWidget.doLayout()`, `output.revealPosition = pos => childWidget.revealPosition(pos)`). Do not keep `get*ForTest()` methods that return child widget instances via `ViewOutput`; tests should query rendered `<devtools-widget>` elements via `.getWidget()` or assert on `ViewInput` via `createViewFunctionStub`.
 
 ### Dependencies
 

package/docs/cookbook/dependencies.md

@@ -111,10 +111,12 @@ that shared dependencies are deduplicated and thus result in a smaller archive.
 `scripts/deps/npm_exclude.txt` holds rsync filter rules that drop files the
 build and tests don't need (tests, docs, source maps, non-declaration
 TypeScript sources, dotfiles, ...) before the archive is built. Keep rules come
-first and the first matching rule wins. Stick to generic patterns: anything
-package-specific must be measured and verified with a full build and test run,
-because the reference check only knows about paths mentioned in GN and Python
-files, not about what Node resolves at runtime.
+first and the first matching rule wins. Prefer generic patterns. A
+package-specific rule goes into the "package-specific drops" section with a
+comment saying why the files are unused, and must be measured and verified
+with a full build, test and lint run, because the reference check only knows
+about paths mentioned in GN and Python files, not about what Node resolves at
+runtime. Check such rules again when the package in question is updated.
 
 > **WARNING:** Updating tools such as Rollup and TypeScript will cause all build
 > cache output to be purged, as they are part of all DevTools modules. Whenever

package/front_end/core/i18n/i18nImpl.ts

@@ -49,7 +49,7 @@ export function getAllSupportedDevToolsLocales(): string[] {
 function getLocaleFetchUrl(locale: Intl.UnicodeBCP47LocaleIdentifier, location: string): string {
   const remoteBase = Root.Runtime.getRemoteBase(location);
   if (remoteBase?.version && !BUNDLED_LOCALES.has(locale)) {
-    return REMOTE_FETCH_PATTERN.replace('@HOST@', 'devtools://devtools')
+    return REMOTE_FETCH_PATTERN.replace('@HOST@', 'devtools://devtools-remote')
         .replace('@VERSION@', remoteBase.version)
         .replace('@LOCALE@', locale);
   }

package/front_end/core/root/Runtime.ts

@@ -47,7 +47,7 @@ export function getRemoteBase(location: string = globalObject.self?.location?.to
     return null;
   }
 
-  return {base: `devtools://devtools/remote/serve_file/${version[1]}/`, version: version[1]};
+  return {base: `devtools://devtools-remote/remote/serve_file/${version[1]}/`, version: version[1]};
 }
 
 export function getPathName(): string {

package/front_end/core/sdk/ResourceTreeModel.ts

@@ -529,6 +529,22 @@ export class ResourceTreeModel extends SDKModel<EventTypes> {
     return await this.agent.invoke_getAppId();
   }
 
+  async getSubApps(): Promise<Protocol.Page.SubApp[]> {
+    const response = await this.agent.invoke_getSubApps();
+    if (response.getError()) {
+      return [];
+    }
+    return response.subApps ?? [];
+  }
+
+  async getSiblingSubApps(): Promise<Protocol.Page.SubApp[]> {
+    const response = await this.agent.invoke_getSiblingSubApps();
+    if (response.getError()) {
+      return [];
+    }
+    return response.subApps ?? [];
+  }
+
   private executionContextComparator(a: ExecutionContext, b: ExecutionContext): number {
     function framePath(frame: ResourceTreeFrame|null): ResourceTreeFrame[] {
       let currentFrame: (ResourceTreeFrame|null) = frame;

package/front_end/entrypoints/js_app/js_app.ts

@@ -85,12 +85,9 @@ UI.ViewManager.registerViewExtension({
   commandPrompt: i18nLazyString(UIStrings.showNode),
   order: 2,
   persistence: UI.ViewManager.ViewPersistence.PERMANENT,
-  async loadView(universe) {
+  async loadView() {
     const Sources = await loadSourcesModule();
-    return Sources.SourcesNavigator.NetworkNavigatorView.instance({
-      forceNew: null,
-      networkProjectManager: universe.networkProjectManager,
-    });
+    return Sources.SourcesNavigator.NetworkNavigatorView.instance();
   },
 });
 

package/front_end/entrypoints/node_app/node_app.ts

@@ -81,10 +81,9 @@ UI.ViewManager.registerViewExtension({
   commandPrompt: i18nLazyString(UIStrings.showNode),
   order: 2,
   persistence: UI.ViewManager.ViewPersistence.PERMANENT,
-  async loadView(universe) {
+  async loadView() {
     const Sources = await loadSourcesModule();
-    return Sources.SourcesNavigator.NetworkNavigatorView.instance(
-        {forceNew: null, networkProjectManager: universe.networkProjectManager});
+    return Sources.SourcesNavigator.NetworkNavigatorView.instance();
   },
 });
 

package/front_end/generated/InspectorBackendCommands.ts

@@ -838,7 +838,7 @@ inspectorBackend.registerEnum("Network.ContentSecurityPolicySource", {HTTP: "HTT
 inspectorBackend.registerEnum("Network.ReportStatus", {Queued: "Queued", Pending: "Pending", MarkedForRemoval: "MarkedForRemoval", Success: "Success"});
 inspectorBackend.registerEnum("Network.DeviceBoundSessionWithUsageUsage", {NotInScope: "NotInScope", InScopeRefreshNotYetNeeded: "InScopeRefreshNotYetNeeded", InScopeRefreshNotAllowed: "InScopeRefreshNotAllowed", ProactiveRefreshNotPossible: "ProactiveRefreshNotPossible", ProactiveRefreshAttempted: "ProactiveRefreshAttempted", Deferred: "Deferred"});
 inspectorBackend.registerEnum("Network.DeviceBoundSessionUrlRuleRuleType", {Exclude: "Exclude", Include: "Include"});
-inspectorBackend.registerEnum("Network.DeviceBoundSessionFetchResult", {Success: "Success", SigningKeyGenerationError: "SigningKeyGenerationError", AttestationKeyGenerationError: "AttestationKeyGenerationError", SigningError: "SigningError", TransientSigningError: "TransientSigningError", ServerRequestedTermination: "ServerRequestedTermination", InvalidSessionId: "InvalidSessionId", InvalidChallenge: "InvalidChallenge", TooManyChallenges: "TooManyChallenges", InvalidFetcherUrl: "InvalidFetcherUrl", InvalidRefreshUrl: "InvalidRefreshUrl", TransientHttpError: "TransientHttpError", ScopeOriginSameSiteMismatch: "ScopeOriginSameSiteMismatch", RefreshUrlSameSiteMismatch: "RefreshUrlSameSiteMismatch", MismatchedSessionId: "MismatchedSessionId", MissingScope: "MissingScope", NoCredentials: "NoCredentials", SubdomainRegistrationWellKnownUnavailable: "SubdomainRegistrationWellKnownUnavailable", SubdomainRegistrationUnauthorized: "SubdomainRegistrationUnauthorized", SubdomainRegistrationWellKnownMalformed: "SubdomainRegistrationWellKnownMalformed", SessionProviderWellKnownUnavailable: "SessionProviderWellKnownUnavailable", RelyingPartyWellKnownUnavailable: "RelyingPartyWellKnownUnavailable", FederatedKeyThumbprintMismatch: "FederatedKeyThumbprintMismatch", InvalidFederatedSessionUrl: "InvalidFederatedSessionUrl", InvalidFederatedKey: "InvalidFederatedKey", TooManyRelyingOriginLabels: "TooManyRelyingOriginLabels", BoundCookieSetForbidden: "BoundCookieSetForbidden", NetError: "NetError", ProxyError: "ProxyError", EmptySessionConfig: "EmptySessionConfig", InvalidCredentialsConfig: "InvalidCredentialsConfig", InvalidCredentialsType: "InvalidCredentialsType", InvalidCredentialsEmptyName: "InvalidCredentialsEmptyName", InvalidCredentialsCookie: "InvalidCredentialsCookie", PersistentHttpError: "PersistentHttpError", RegistrationAttemptedChallenge: "RegistrationAttemptedChallenge", InvalidScopeOrigin: "InvalidScopeOrigin", ScopeOriginContainsPath: "ScopeOriginContainsPath", RefreshInitiatorNotString: "RefreshInitiatorNotString", RefreshInitiatorInvalidHostPattern: "RefreshInitiatorInvalidHostPattern", InvalidScopeSpecification: "InvalidScopeSpecification", MissingScopeSpecificationType: "MissingScopeSpecificationType", EmptyScopeSpecificationDomain: "EmptyScopeSpecificationDomain", EmptyScopeSpecificationPath: "EmptyScopeSpecificationPath", InvalidScopeSpecificationType: "InvalidScopeSpecificationType", InvalidScopeIncludeSite: "InvalidScopeIncludeSite", MissingScopeIncludeSite: "MissingScopeIncludeSite", FederatedNotAuthorizedByProvider: "FederatedNotAuthorizedByProvider", FederatedNotAuthorizedByRelyingParty: "FederatedNotAuthorizedByRelyingParty", SessionProviderWellKnownMalformed: "SessionProviderWellKnownMalformed", SessionProviderWellKnownHasProviderOrigin: "SessionProviderWellKnownHasProviderOrigin", RelyingPartyWellKnownMalformed: "RelyingPartyWellKnownMalformed", RelyingPartyWellKnownHasRelyingOrigins: "RelyingPartyWellKnownHasRelyingOrigins", InvalidFederatedSessionProviderSessionMissing: "InvalidFederatedSessionProviderSessionMissing", InvalidFederatedSessionWrongProviderOrigin: "InvalidFederatedSessionWrongProviderOrigin", InvalidCredentialsCookieCreationTime: "InvalidCredentialsCookieCreationTime", InvalidCredentialsCookieName: "InvalidCredentialsCookieName", InvalidCredentialsCookieParsing: "InvalidCredentialsCookieParsing", InvalidCredentialsCookieUnpermittedAttribute: "InvalidCredentialsCookieUnpermittedAttribute", InvalidCredentialsCookieInvalidDomain: "InvalidCredentialsCookieInvalidDomain", InvalidCredentialsCookiePrefix: "InvalidCredentialsCookiePrefix", InvalidScopeRulePath: "InvalidScopeRulePath", InvalidScopeRuleHostPattern: "InvalidScopeRuleHostPattern", ScopeRuleOriginScopedHostPatternMismatch: "ScopeRuleOriginScopedHostPatternMismatch", ScopeRuleSiteScopedHostPatternMismatch: "ScopeRuleSiteScopedHostPatternMismatch", SigningQuotaExceeded: "SigningQuotaExceeded", InvalidConfigJson: "InvalidConfigJson", InvalidFederatedSessionProviderFailedToRestoreKey: "InvalidFederatedSessionProviderFailedToRestoreKey", FailedToUnwrapKey: "FailedToUnwrapKey", SessionDeletedDuringRefresh: "SessionDeletedDuringRefresh", CrossOriginRegistrationSiteNotIncluded: "CrossOriginRegistrationSiteNotIncluded", InvalidPreProvisionedKeyInitiatorMissing: "InvalidPreProvisionedKeyInitiatorMissing", PreProvisionedKeyAccessNotGranted: "PreProvisionedKeyAccessNotGranted", PreProvisionedKeyNotFound: "PreProvisionedKeyNotFound", AttestationCertificationError: "AttestationCertificationError", AttestationSigningError: "AttestationSigningError"});
+inspectorBackend.registerEnum("Network.DeviceBoundSessionFetchResult", {Success: "Success", SigningKeyGenerationError: "SigningKeyGenerationError", AttestationKeyGenerationError: "AttestationKeyGenerationError", SigningError: "SigningError", TransientSigningError: "TransientSigningError", ServerRequestedTermination: "ServerRequestedTermination", InvalidSessionId: "InvalidSessionId", InvalidChallenge: "InvalidChallenge", TooManyChallenges: "TooManyChallenges", InvalidFetcherUrl: "InvalidFetcherUrl", InvalidRefreshUrl: "InvalidRefreshUrl", TransientHttpError: "TransientHttpError", ScopeOriginSameSiteMismatch: "ScopeOriginSameSiteMismatch", RefreshUrlSameSiteMismatch: "RefreshUrlSameSiteMismatch", MismatchedSessionId: "MismatchedSessionId", MissingScope: "MissingScope", NoCredentials: "NoCredentials", SubdomainRegistrationWellKnownUnavailable: "SubdomainRegistrationWellKnownUnavailable", SubdomainRegistrationUnauthorized: "SubdomainRegistrationUnauthorized", SubdomainRegistrationWellKnownMalformed: "SubdomainRegistrationWellKnownMalformed", SessionProviderWellKnownUnavailable: "SessionProviderWellKnownUnavailable", RelyingPartyWellKnownUnavailable: "RelyingPartyWellKnownUnavailable", FederatedKeyThumbprintMismatch: "FederatedKeyThumbprintMismatch", InvalidFederatedSessionUrl: "InvalidFederatedSessionUrl", InvalidFederatedKey: "InvalidFederatedKey", TooManyRelyingOriginLabels: "TooManyRelyingOriginLabels", BoundCookieSetForbidden: "BoundCookieSetForbidden", NetError: "NetError", ProxyError: "ProxyError", EmptySessionConfig: "EmptySessionConfig", InvalidCredentialsConfig: "InvalidCredentialsConfig", InvalidCredentialsType: "InvalidCredentialsType", InvalidCredentialsEmptyName: "InvalidCredentialsEmptyName", InvalidCredentialsCookie: "InvalidCredentialsCookie", PersistentHttpError: "PersistentHttpError", RegistrationAttemptedChallenge: "RegistrationAttemptedChallenge", InvalidScopeOrigin: "InvalidScopeOrigin", ScopeOriginContainsPath: "ScopeOriginContainsPath", RefreshInitiatorNotString: "RefreshInitiatorNotString", RefreshInitiatorInvalidHostPattern: "RefreshInitiatorInvalidHostPattern", InvalidScopeSpecification: "InvalidScopeSpecification", MissingScopeSpecificationType: "MissingScopeSpecificationType", EmptyScopeSpecificationDomain: "EmptyScopeSpecificationDomain", EmptyScopeSpecificationPath: "EmptyScopeSpecificationPath", InvalidScopeSpecificationType: "InvalidScopeSpecificationType", InvalidScopeIncludeSite: "InvalidScopeIncludeSite", MissingScopeIncludeSite: "MissingScopeIncludeSite", FederatedNotAuthorizedByProvider: "FederatedNotAuthorizedByProvider", FederatedNotAuthorizedByRelyingParty: "FederatedNotAuthorizedByRelyingParty", SessionProviderWellKnownMalformed: "SessionProviderWellKnownMalformed", SessionProviderWellKnownHasProviderOrigin: "SessionProviderWellKnownHasProviderOrigin", RelyingPartyWellKnownMalformed: "RelyingPartyWellKnownMalformed", RelyingPartyWellKnownHasRelyingOrigins: "RelyingPartyWellKnownHasRelyingOrigins", InvalidFederatedSessionProviderSessionMissing: "InvalidFederatedSessionProviderSessionMissing", InvalidFederatedSessionWrongProviderOrigin: "InvalidFederatedSessionWrongProviderOrigin", InvalidCredentialsCookieCreationTime: "InvalidCredentialsCookieCreationTime", InvalidCredentialsCookieName: "InvalidCredentialsCookieName", InvalidCredentialsCookieParsing: "InvalidCredentialsCookieParsing", InvalidCredentialsCookieUnpermittedAttribute: "InvalidCredentialsCookieUnpermittedAttribute", InvalidCredentialsCookieInvalidDomain: "InvalidCredentialsCookieInvalidDomain", InvalidCredentialsCookiePrefix: "InvalidCredentialsCookiePrefix", InvalidScopeRulePath: "InvalidScopeRulePath", InvalidScopeRuleHostPattern: "InvalidScopeRuleHostPattern", ScopeRuleOriginScopedHostPatternMismatch: "ScopeRuleOriginScopedHostPatternMismatch", ScopeRuleSiteScopedHostPatternMismatch: "ScopeRuleSiteScopedHostPatternMismatch", SigningQuotaExceeded: "SigningQuotaExceeded", InvalidConfigJson: "InvalidConfigJson", InvalidFederatedSessionProviderFailedToRestoreKey: "InvalidFederatedSessionProviderFailedToRestoreKey", FailedToUnwrapKey: "FailedToUnwrapKey", SessionDeletedDuringRefresh: "SessionDeletedDuringRefresh", CrossOriginRegistrationSiteNotIncluded: "CrossOriginRegistrationSiteNotIncluded", InvalidPreProvisionedKeyInitiatorMissing: "InvalidPreProvisionedKeyInitiatorMissing", PreProvisionedKeyAccessNotGranted: "PreProvisionedKeyAccessNotGranted", PreProvisionedKeyNotFound: "PreProvisionedKeyNotFound", AttestationCertificationError: "AttestationCertificationError", AttestationSigningError: "AttestationSigningError", FederatedRegistrationRedirected: "FederatedRegistrationRedirected"});
 inspectorBackend.registerEnum("Network.RefreshEventDetailsRefreshResult", {Refreshed: "Refreshed", InitializedService: "InitializedService", Unreachable: "Unreachable", ServerError: "ServerError", FatalError: "FatalError", SigningQuotaExceeded: "SigningQuotaExceeded", RefreshedAsWaiter: "RefreshedAsWaiter", TransientSigningError: "TransientSigningError", InScopeRefreshNotYetNeeded: "InScopeRefreshNotYetNeeded", Canceled: "Canceled"});
 inspectorBackend.registerEnum("Network.TerminationEventDetailsDeletionReason", {Expired: "Expired", FailedToRestoreKey: "FailedToRestoreKey", FailedToUnwrapKey: "FailedToUnwrapKey", StoragePartitionCleared: "StoragePartitionCleared", ClearBrowsingData: "ClearBrowsingData", ServerRequested: "ServerRequested", InvalidSessionParams: "InvalidSessionParams", RefreshFatalError: "RefreshFatalError", DevTools: "DevTools", Replaced: "Replaced"});
 inspectorBackend.registerEnum("Network.ChallengeEventDetailsChallengeResult", {Success: "Success", NoSessionId: "NoSessionId", NoSessionMatch: "NoSessionMatch", CantSetBoundCookie: "CantSetBoundCookie"});

package/front_end/generated/protocol.ts

@@ -12249,6 +12249,7 @@ export namespace Network {
     PreProvisionedKeyNotFound = 'PreProvisionedKeyNotFound',
     AttestationCertificationError = 'AttestationCertificationError',
     AttestationSigningError = 'AttestationSigningError',
+    FederatedRegistrationRedirected = 'FederatedRegistrationRedirected',
   }
 
   /**

package/front_end/models/ai_assistance/skills/lighthouse.md

@@ -1,6 +1,6 @@
 ---
 name: lighthouse
-description: Analyzing an active Lighthouse report context, running Lighthouse reports and audits (performance, accessibility, best practices, Search Engine Optimization (SEO)), accessibility audits, ARIA properties, accessible tree inspection, color contrast, and screen reader semantics. Not for general page performance measurement without a Lighthouse report; use the performance skill for that.
+description: Analyzing an active Lighthouse report context, running Lighthouse reports and audits (performance, accessibility, best practices, Search Engine Optimization (SEO), and agentic browsing when explicitly requested), accessibility audits, ARIA properties, accessible tree inspection, color contrast, and screen reader semantics. Not for general page performance measurement without a Lighthouse report; use the performance skill for that.
 allowed-tools:
   - runLighthouse
   - getLighthouseAudits
@@ -22,6 +22,7 @@ Your role is to evaluate websites using Lighthouse audits across performance, ac
    - If no active report exists or a fresh audit is requested, call `runLighthouse`:
      - If the user asks for a general report or multiple categories, use `categoryId: 'all'`.
      - For a single category, pass that category ID (e.g. `'accessibility'`).
+     - Only pass `categoryId: 'agentic-browsing'` when the user explicitly asks for an agentic browsing audit, such as how ready the page is for AI agents to navigate and use it, or WebMCP checks. `'all'` does not include it, so never pick it for general audits, and never substitute another category (such as `'seo'`) when the user asks for it. Use `"navigation"` mode for `'agentic-browsing'` unless the user explicitly asks for another mode, because its WebMCP audits only run in `"navigation"` mode.
      - Execution mode:
        - Use `"navigation"` mode for full page-load audits (default for full site reviews).
        - Use `"snapshot"` mode to re-evaluate live in-page DOM/CSS modifications without reloading.

package/front_end/models/ai_assistance/skills/network.md

@@ -20,3 +20,4 @@ You are an expert network request debugging assistant.
 
 * **Privacy**: If the request or response payload contains sensitive personal data, authorization tokens, or API secrets, redact or generalize it in your response.
 * **Origin Lock**: Only requests belonging to the conversation's established origin can be inspected.
+* **Recording**: DevTools only records requests made while DevTools is open and network recording is enabled (and the log has not been cleared). If `listNetworkRequests` reports that no requests have been recorded, ask the user to ensure network recording is enabled, reload the page or repeat the action that triggers the request, and try again.

package/front_end/models/ai_assistance/tools/ExecuteJavaScript.ts

@@ -31,6 +31,24 @@ const MAX_TOTAL_CHARACTERS = 2500;
 const MAX_LONG_LINES_REPORTED = 3;
 const LONG_LINE_PREVIEW_LENGTH = 60;
 
+/**
+ * Matches the error observations for network requests that the isolated
+ * world's CSP (`FREESTYLER_WORLD_CSP`) blocks. When code run by this tool calls
+ * `fetch()`, Chrome rejects with exactly "Failed to fetch". A synchronous
+ * `XMLHttpRequest.send()` throws "Failed to execute 'send' on 'XMLHttpRequest':
+ * Failed to load '<url>'.".
+ */
+const BLOCKED_NETWORK_ERROR_PATTERN =
+    /^Error: (?:Failed to fetch$|Failed to execute 'send' on 'XMLHttpRequest': Failed to load )/;
+const BLOCKED_NETWORK_HINT =
+    'Network access (e.g., fetch, XMLHttpRequest) is blocked for JavaScript run by this tool, so this error does not mean the page\'s own network requests are failing. Do not retry network requests with this tool.';
+/**
+ * Only the V2 agent can load the network tools, so V1 agents do not get this
+ * part of the hint.
+ */
+const NETWORK_TOOLS_HINT =
+    'To inspect the page\'s network requests, load the `network` skill with `learnSkills` if it is not loaded yet, then use `listNetworkRequests` and `getNetworkRequestDetails`.';
+
 /**
  * Returns one message per size limit that the formatted code exceeds. Each
  * message states the actual value, the limit, and how to fix it, so the model
@@ -178,7 +196,8 @@ const data = {
       return {error: 'Error: Cannot execute JavaScript on cross-origin target.'};
     }
 
-    if (Root.Runtime.hostConfig.devToolsAiV2Architecture?.enabled) {
+    const isV2Architecture = Root.Runtime.hostConfig.devToolsAiV2Architecture?.enabled;
+    if (isV2Architecture) {
       const validationResult = await ExecuteJavaScriptTool.validateAndFormatCode(params.code);
       if (validationResult.error) {
         return {error: validationResult.error};
@@ -199,6 +218,11 @@ const data = {
     },
                                             context.execJs);
 
-    return await executor.executeAction(params.code, options);
+    const result = await executor.executeAction(params.code, options);
+    if ('result' in result && typeof result.result === 'string' && BLOCKED_NETWORK_ERROR_PATTERN.test(result.result)) {
+      const hint = isV2Architecture ? `${BLOCKED_NETWORK_HINT} ${NETWORK_TOOLS_HINT}` : BLOCKED_NETWORK_HINT;
+      return {...result, result: `${result.result}\n${hint}`};
+    }
+    return result;
   }
 }

package/front_end/models/ai_assistance/tools/GetLighthouseAudits.ts

@@ -34,7 +34,7 @@ export class GetLighthouseAuditsTool implements
       categoryId: {
         type: Host.AidaClient.ParametersTypes.STRING,
         description:
-            'The category of audits to retrieve. Use "all" to retrieve the full report and all categories, or specify a category: "accessibility", "performance", "best-practices", "seo".',
+            'The category of audits to retrieve. Use "all" to retrieve the full report and all categories, or specify a category: "accessibility", "performance", "best-practices", "seo", or "agentic-browsing" (only present when the active report includes an agentic browsing audit).',
         nullable: false,
       },
     },

package/front_end/models/ai_assistance/tools/ListNetworkRequests.ts

@@ -114,13 +114,8 @@ export class ListNetworkRequestsTool implements
         };
       }
       return {
-        result: JSON.stringify([]),
-        widgets: [{
-          name: 'NETWORK_REQUESTS_LIST',
-          data: {
-            requests: [],
-          },
-        }],
+        error:
+            'No network requests have been recorded. DevTools only records requests made while DevTools is open and network recording is enabled (and the log has not been cleared). Ask the user to ensure network recording is enabled, reload the page or repeat the action that triggers the request, and try again.',
       };
     }
 

package/front_end/models/ai_assistance/tools/RunLighthouse.ts

@@ -45,9 +45,9 @@ export class RunLighthouseTool implements
       },
       categoryId: {
         type: Host.AidaClient.ParametersTypes.STRING,
-        // The experimental 'agentic-browsing' category is intentionally omitted from the prompt description so the agent does not invoke it unprompted. It is also excluded when 'all' is provided.
+        // The experimental 'agentic-browsing' category is listed separately from the standard categories and restricted to explicit user requests so the agent does not invoke it unprompted. It is also excluded when 'all' is provided (see `LighthouseController.getCategoryIDs`).
         description:
-            'Lighthouse category. Use "all" to run all categories, or specify a category: "accessibility", "performance", "best-practices", "seo".',
+            'Lighthouse category. Use "all" to run all categories, or specify a category: "accessibility", "performance", "best-practices", "seo". Use "agentic-browsing" only when the user explicitly asks for an agentic browsing audit (how well AI agents can navigate and use the page, including WebMCP). "all" does not include "agentic-browsing". Run "agentic-browsing" in "navigation" mode, because its WebMCP audits only run in "navigation" mode.',
         nullable: false,
       },
       mode: {

package/front_end/models/comment_manager/CommentManager.ts

@@ -48,11 +48,6 @@ export class CommentManager extends Common.ObjectWrapper.ObjectWrapper<EventType
   #commentMode = false;
   #agentAttached = false;
 
-  constructor() {
-    super();
-    CommentThread.resetIndex();
-  }
-
   #onThreadChanged(): void {
     this.dispatchEventToListeners(Events.COMMENT_THREADS_CHANGED, this.getCommentThreads());
   }
@@ -174,7 +169,6 @@ export class CommentManager extends Common.ObjectWrapper.ObjectWrapper<EventType
       thread.removeEventListener(CommentThreadEvents.CHANGED, this.#onThreadChanged, this);
     }
     this.#commentThreads.clear();
-    CommentThread.resetIndex();
     this.dispatchEventToListeners(Events.COMMENT_THREADS_CHANGED, []);
   }
 }

package/front_end/models/comment_manager/CommentThread.ts

@@ -22,7 +22,10 @@ export interface DOMNodeAnchorSignature {
 export interface TimelineAnchorSignature {
   /** Identifier of the trace to scope comments to a specific recording */
   traceId: string;
-  /** Serializable key from Trace.EventsSerializer (e.g. 'r-123', 'p-1-2-3-4', 's-5') */
+  /**
+   * Serializable key from Trace.EventsSerializer (e.g. 'r-123', 'p-1-2-3-4', 's-5'), or
+   * 'fc-<chartLocation>-<entryIndex>' for flame chart entries that EventsSerializer cannot key.
+   */
   traceEventKey: string;
   /** Primary event title or category name */
   entryName: string;
@@ -93,17 +96,11 @@ export interface CommentThreadOptions {
 }
 
 export class CommentThread extends Common.ObjectWrapper.ObjectWrapper<EventTypes> {
-  static #nextIndex = 1;
-
-  static resetIndex(): void {
-    CommentThread.#nextIndex = 1;
-  }
-
   readonly id: string = crypto.randomUUID();
   readonly anchor: CommentAnchorSignature;
   /** True for comments generated from the change tracker. */
   readonly isGeneratedComment: boolean;
-  #savedIndex?: number;
+  #isOrphaned = false;
   comments: Comment[];
   status: CommentThreadStatus = 'DRAFT';
   transmitted: boolean = false;
@@ -115,8 +112,16 @@ export class CommentThread extends Common.ObjectWrapper.ObjectWrapper<EventTypes
     this.isGeneratedComment = Boolean(options.isGeneratedComment);
   }
 
-  get index(): number {
-    return this.#savedIndex ?? CommentThread.#nextIndex;
+  get isOrphaned(): boolean {
+    return this.#isOrphaned;
+  }
+
+  setOrphaned(isOrphaned: boolean): void {
+    if (this.#isOrphaned === isOrphaned) {
+      return;
+    }
+    this.#isOrphaned = isOrphaned;
+    this.dispatchEventToListeners(Events.CHANGED);
   }
 
   /**
@@ -153,9 +158,6 @@ export class CommentThread extends Common.ObjectWrapper.ObjectWrapper<EventTypes
     let changed = this.#saveText(text, author);
     if (this.status === 'DRAFT') {
       this.#recordCommentCreated();
-      if (this.#savedIndex === undefined) {
-        this.#savedIndex = CommentThread.#nextIndex++;
-      }
       this.status = 'ACTIVE';
       changed = true;
     }
@@ -183,9 +185,6 @@ export class CommentThread extends Common.ObjectWrapper.ObjectWrapper<EventTypes
       this.#recordCommentCreated();
     }
     if (this.status === 'DRAFT' || this.status === 'ACTIVE') {
-      if (this.#savedIndex === undefined) {
-        this.#savedIndex = CommentThread.#nextIndex++;
-      }
       this.status = 'SENT_TO_AGENT';
       changed = true;
     }
@@ -202,10 +201,15 @@ export class CommentThread extends Common.ObjectWrapper.ObjectWrapper<EventTypes
         timestamp: Date.now(),
       });
     }
-    if (this.#savedIndex === undefined) {
-      this.#savedIndex = CommentThread.#nextIndex++;
-    }
     this.status = 'RESOLVED';
     this.dispatchEventToListeners(Events.CHANGED);
   }
 }
+
+export class RevealableThread {
+  constructor(
+      readonly thread: CommentThread,
+      readonly position?: {left: number, top: number},
+  ) {
+  }
+}

package/front_end/models/elements/StyleChanges.ts

@@ -95,3 +95,69 @@ export function trackStylePropertyToggle(
   }
   tracker.trackChange(describeStylePropertyToggle(toggle), buildAnchor(STYLES_PANE_VE_PATH, node));
 }
+
+export function trackStyleRuleAdded(
+    tracker: ChangeTracker.ChangeTracker.ChangeTracker|undefined,
+    node: SDK.DOMModel.DOMNode,
+    selector: string,
+    ): void {
+  if (!tracker?.isTracking) {
+    return;
+  }
+  const trimmedSelector = Platform.StringUtilities.collapseWhitespace(selector.trim());
+  if (!trimmedSelector) {
+    return;
+  }
+  tracker.trackChange(
+      `Added style rule "${trimValue(trimmedSelector)}"`,
+      buildAnchor(STYLES_PANE_VE_PATH, node),
+  );
+}
+
+function trackRuleHeaderChange(
+    tracker: ChangeTracker.ChangeTracker.ChangeTracker|undefined,
+    node: SDK.DOMModel.DOMNode,
+    headerDescription: string,
+    oldText: string,
+    newText: string,
+    ): void {
+  if (!tracker?.isTracking) {
+    return;
+  }
+  const trimmedOld = Platform.StringUtilities.collapseWhitespace(oldText.trim());
+  const trimmedNew = Platform.StringUtilities.collapseWhitespace(newText.trim());
+  if (!trimmedOld || !trimmedNew || trimmedOld === trimmedNew) {
+    return;
+  }
+  tracker.trackChange(
+      `Changed ${headerDescription} from "${trimValue(trimmedOld)}" to "${trimValue(trimmedNew)}"`,
+      buildAnchor(STYLES_PANE_VE_PATH, node),
+  );
+}
+
+export function trackStyleSelectorChange(
+    tracker: ChangeTracker.ChangeTracker.ChangeTracker|undefined,
+    node: SDK.DOMModel.DOMNode,
+    oldSelector: string,
+    newSelector: string,
+    ): void {
+  trackRuleHeaderChange(tracker, node, 'style rule selector', oldSelector, newSelector);
+}
+
+export function trackPropertyRuleNameChange(
+    tracker: ChangeTracker.ChangeTracker.ChangeTracker|undefined,
+    node: SDK.DOMModel.DOMNode,
+    oldName: string,
+    newName: string,
+    ): void {
+  trackRuleHeaderChange(tracker, node, '@property rule name', oldName, newName);
+}
+
+export function trackKeyframeKeyChange(
+    tracker: ChangeTracker.ChangeTracker.ChangeTracker|undefined,
+    node: SDK.DOMModel.DOMNode,
+    oldKey: string,
+    newKey: string,
+    ): void {
+  trackRuleHeaderChange(tracker, node, 'keyframe key', oldKey, newKey);
+}

package/front_end/models/trace/EventsSerializer.ts

@@ -84,13 +84,8 @@ export class EventsSerializer {
     }
 
     if (EventsSerializer.isSyntheticEventKey(eventValues)) {
-      const syntheticEvents = Helpers.SyntheticEvents.SyntheticEventsManager.getActiveManager().getSyntheticTraces();
-      const syntheticEvent = syntheticEvents.at(eventValues.rawIndex);
-      if (!syntheticEvent) {
-        throw new Error(`Unknown trace event. Attempted to get a synthetic event from an unknown raw event index: ${
-            eventValues.rawIndex}`);
-      }
-      return syntheticEvent;
+      return Helpers.SyntheticEvents.SyntheticEventsManager.getActiveManager().syntheticEventForRawEventIndex(
+          eventValues.rawIndex);
     }
 
     if (EventsSerializer.isRawEventKey(eventValues)) {

package/front_end/models/trace/ModelImpl.ts

@@ -110,8 +110,6 @@ export class Model extends EventTarget {
       }
       const file = this.#storeAndCreateParsedTraceFile(
           syntheticEventsManager, traceEvents, metadata, this.#processor.data, this.#processor.insights);
-      // Reclaim memory used by the temporary event-to-index lookup map now that trace parsing is complete.
-      syntheticEventsManager.clearRegistrationIndex();
       // We only push the file onto this.#traces here once we know it's valid
       // and there's been no errors in the parsing.
       this.#traces.push(file);