devtools-protocol 0.0.1561482 → 0.0.1566079

package/json/browser_protocol.json

@@ -17157,6 +17157,353 @@
                         }
                     ]
                 },
+                {
+                    "id": "DeviceBoundSessionKey",
+                    "description": "Unique identifier for a device bound session.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "site",
+                            "description": "The site the session is set up for.",
+                            "type": "string"
+                        },
+                        {
+                            "name": "id",
+                            "description": "The id of the session.",
+                            "type": "string"
+                        }
+                    ]
+                },
+                {
+                    "id": "DeviceBoundSessionCookieCraving",
+                    "description": "A device bound session's cookie craving.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "name",
+                            "description": "The name of the craving.",
+                            "type": "string"
+                        },
+                        {
+                            "name": "domain",
+                            "description": "The domain of the craving.",
+                            "type": "string"
+                        },
+                        {
+                            "name": "path",
+                            "description": "The path of the craving.",
+                            "type": "string"
+                        },
+                        {
+                            "name": "secure",
+                            "description": "The `Secure` attribute of the craving attributes.",
+                            "type": "boolean"
+                        },
+                        {
+                            "name": "httpOnly",
+                            "description": "The `HttpOnly` attribute of the craving attributes.",
+                            "type": "boolean"
+                        },
+                        {
+                            "name": "sameSite",
+                            "description": "The `SameSite` attribute of the craving attributes.",
+                            "optional": true,
+                            "$ref": "CookieSameSite"
+                        }
+                    ]
+                },
+                {
+                    "id": "DeviceBoundSessionUrlRule",
+                    "description": "A device bound session's inclusion URL rule.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "ruleType",
+                            "description": "See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::rule_type`.",
+                            "type": "string",
+                            "enum": [
+                                "Exclude",
+                                "Include"
+                            ]
+                        },
+                        {
+                            "name": "hostPattern",
+                            "description": "See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::host_pattern`.",
+                            "type": "string"
+                        },
+                        {
+                            "name": "pathPrefix",
+                            "description": "See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::path_prefix`.",
+                            "type": "string"
+                        }
+                    ]
+                },
+                {
+                    "id": "DeviceBoundSessionInclusionRules",
+                    "description": "A device bound session's inclusion rules.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "origin",
+                            "description": "See comments on `net::device_bound_sessions::SessionInclusionRules::origin_`.",
+                            "type": "string"
+                        },
+                        {
+                            "name": "includeSite",
+                            "description": "Whether the whole site is included. See comments on\n`net::device_bound_sessions::SessionInclusionRules::include_site_` for more\ndetails; this boolean is true if that value is populated.",
+                            "type": "boolean"
+                        },
+                        {
+                            "name": "urlRules",
+                            "description": "See comments on `net::device_bound_sessions::SessionInclusionRules::url_rules_`.",
+                            "type": "array",
+                            "items": {
+                                "$ref": "DeviceBoundSessionUrlRule"
+                            }
+                        }
+                    ]
+                },
+                {
+                    "id": "DeviceBoundSession",
+                    "description": "A device bound session.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "key",
+                            "description": "The site and session ID of the session.",
+                            "$ref": "DeviceBoundSessionKey"
+                        },
+                        {
+                            "name": "refreshUrl",
+                            "description": "See comments on `net::device_bound_sessions::Session::refresh_url_`.",
+                            "type": "string"
+                        },
+                        {
+                            "name": "inclusionRules",
+                            "description": "See comments on `net::device_bound_sessions::Session::inclusion_rules_`.",
+                            "$ref": "DeviceBoundSessionInclusionRules"
+                        },
+                        {
+                            "name": "cookieCravings",
+                            "description": "See comments on `net::device_bound_sessions::Session::cookie_cravings_`.",
+                            "type": "array",
+                            "items": {
+                                "$ref": "DeviceBoundSessionCookieCraving"
+                            }
+                        },
+                        {
+                            "name": "expiryDate",
+                            "description": "See comments on `net::device_bound_sessions::Session::expiry_date_`.",
+                            "$ref": "Network.TimeSinceEpoch"
+                        },
+                        {
+                            "name": "cachedChallenge",
+                            "description": "See comments on `net::device_bound_sessions::Session::cached_challenge__`.",
+                            "optional": true,
+                            "type": "string"
+                        },
+                        {
+                            "name": "allowedRefreshInitiators",
+                            "description": "See comments on `net::device_bound_sessions::Session::allowed_refresh_initiators_`.",
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        }
+                    ]
+                },
+                {
+                    "id": "DeviceBoundSessionEventId",
+                    "description": "A unique identifier for a device bound session event.",
+                    "experimental": true,
+                    "type": "string"
+                },
+                {
+                    "id": "DeviceBoundSessionFetchResult",
+                    "description": "A fetch result for a device bound session creation or refresh.",
+                    "experimental": true,
+                    "type": "string",
+                    "enum": [
+                        "Success",
+                        "KeyError",
+                        "SigningError",
+                        "ServerRequestedTermination",
+                        "InvalidSessionId",
+                        "InvalidChallenge",
+                        "TooManyChallenges",
+                        "InvalidFetcherUrl",
+                        "InvalidRefreshUrl",
+                        "TransientHttpError",
+                        "ScopeOriginSameSiteMismatch",
+                        "RefreshUrlSameSiteMismatch",
+                        "MismatchedSessionId",
+                        "MissingScope",
+                        "NoCredentials",
+                        "SubdomainRegistrationWellKnownUnavailable",
+                        "SubdomainRegistrationUnauthorized",
+                        "SubdomainRegistrationWellKnownMalformed",
+                        "SessionProviderWellKnownUnavailable",
+                        "RelyingPartyWellKnownUnavailable",
+                        "FederatedKeyThumbprintMismatch",
+                        "InvalidFederatedSessionUrl",
+                        "InvalidFederatedKey",
+                        "TooManyRelyingOriginLabels",
+                        "BoundCookieSetForbidden",
+                        "NetError",
+                        "ProxyError",
+                        "EmptySessionConfig",
+                        "InvalidCredentialsConfig",
+                        "InvalidCredentialsType",
+                        "InvalidCredentialsEmptyName",
+                        "InvalidCredentialsCookie",
+                        "PersistentHttpError",
+                        "RegistrationAttemptedChallenge",
+                        "InvalidScopeOrigin",
+                        "ScopeOriginContainsPath",
+                        "RefreshInitiatorNotString",
+                        "RefreshInitiatorInvalidHostPattern",
+                        "InvalidScopeSpecification",
+                        "MissingScopeSpecificationType",
+                        "EmptyScopeSpecificationDomain",
+                        "EmptyScopeSpecificationPath",
+                        "InvalidScopeSpecificationType",
+                        "InvalidScopeIncludeSite",
+                        "MissingScopeIncludeSite",
+                        "FederatedNotAuthorizedByProvider",
+                        "FederatedNotAuthorizedByRelyingParty",
+                        "SessionProviderWellKnownMalformed",
+                        "SessionProviderWellKnownHasProviderOrigin",
+                        "RelyingPartyWellKnownMalformed",
+                        "RelyingPartyWellKnownHasRelyingOrigins",
+                        "InvalidFederatedSessionProviderSessionMissing",
+                        "InvalidFederatedSessionWrongProviderOrigin",
+                        "InvalidCredentialsCookieCreationTime",
+                        "InvalidCredentialsCookieName",
+                        "InvalidCredentialsCookieParsing",
+                        "InvalidCredentialsCookieUnpermittedAttribute",
+                        "InvalidCredentialsCookieInvalidDomain",
+                        "InvalidCredentialsCookiePrefix",
+                        "InvalidScopeRulePath",
+                        "InvalidScopeRuleHostPattern",
+                        "ScopeRuleOriginScopedHostPatternMismatch",
+                        "ScopeRuleSiteScopedHostPatternMismatch",
+                        "SigningQuotaExceeded",
+                        "InvalidConfigJson",
+                        "InvalidFederatedSessionProviderFailedToRestoreKey",
+                        "FailedToUnwrapKey",
+                        "SessionDeletedDuringRefresh"
+                    ]
+                },
+                {
+                    "id": "CreationEventDetails",
+                    "description": "Session event details specific to creation.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "fetchResult",
+                            "description": "The result of the fetch attempt.",
+                            "$ref": "DeviceBoundSessionFetchResult"
+                        },
+                        {
+                            "name": "newSession",
+                            "description": "The session if there was a newly created session. This is populated for\nall successful creation events.",
+                            "optional": true,
+                            "$ref": "DeviceBoundSession"
+                        }
+                    ]
+                },
+                {
+                    "id": "RefreshEventDetails",
+                    "description": "Session event details specific to refresh.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "refreshResult",
+                            "description": "The result of a refresh.",
+                            "type": "string",
+                            "enum": [
+                                "Refreshed",
+                                "InitializedService",
+                                "Unreachable",
+                                "ServerError",
+                                "RefreshQuotaExceeded",
+                                "FatalError",
+                                "SigningQuotaExceeded"
+                            ]
+                        },
+                        {
+                            "name": "fetchResult",
+                            "description": "If there was a fetch attempt, the result of that.",
+                            "optional": true,
+                            "$ref": "DeviceBoundSessionFetchResult"
+                        },
+                        {
+                            "name": "newSession",
+                            "description": "The session display if there was a newly created session. This is populated\nfor any refresh event that modifies the session config.",
+                            "optional": true,
+                            "$ref": "DeviceBoundSession"
+                        },
+                        {
+                            "name": "wasFullyProactiveRefresh",
+                            "description": "See comments on `net::device_bound_sessions::RefreshEventResult::was_fully_proactive_refresh`.",
+                            "type": "boolean"
+                        }
+                    ]
+                },
+                {
+                    "id": "TerminationEventDetails",
+                    "description": "Session event details specific to termination.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "deletionReason",
+                            "description": "The reason for a session being deleted.",
+                            "type": "string",
+                            "enum": [
+                                "Expired",
+                                "FailedToRestoreKey",
+                                "FailedToUnwrapKey",
+                                "StoragePartitionCleared",
+                                "ClearBrowsingData",
+                                "ServerRequested",
+                                "InvalidSessionParams",
+                                "RefreshFatalError"
+                            ]
+                        }
+                    ]
+                },
+                {
+                    "id": "ChallengeEventDetails",
+                    "description": "Session event details specific to challenges.",
+                    "experimental": true,
+                    "type": "object",
+                    "properties": [
+                        {
+                            "name": "challengeResult",
+                            "description": "The result of a challenge.",
+                            "type": "string",
+                            "enum": [
+                                "Success",
+                                "NoSessionId",
+                                "NoSessionMatch",
+                                "CantSetBoundCookie"
+                            ]
+                        },
+                        {
+                            "name": "challenge",
+                            "description": "The challenge set.",
+                            "type": "string"
+                        }
+                    ]
+                },
                 {
                     "id": "LoadNetworkResourcePageResult",
                     "description": "An object providing the result of a network resource load.",
@@ -18026,6 +18373,37 @@
                         }
                     ]
                 },
+                {
+                    "name": "enableDeviceBoundSessions",
+                    "description": "Sets up tracking device bound sessions and fetching of initial set of sessions.",
+                    "experimental": true,
+                    "parameters": [
+                        {
+                            "name": "enable",
+                            "description": "Whether to enable or disable events.",
+                            "type": "boolean"
+                        }
+                    ]
+                },
+                {
+                    "name": "fetchSchemefulSite",
+                    "description": "Fetches the schemeful site for a specific origin.",
+                    "experimental": true,
+                    "parameters": [
+                        {
+                            "name": "origin",
+                            "description": "The URL origin.",
+                            "type": "string"
+                        }
+                    ],
+                    "returns": [
+                        {
+                            "name": "schemefulSite",
+                            "description": "The corresponding schemeful site.",
+                            "type": "string"
+                        }
+                    ]
+                },
                 {
                     "name": "loadNetworkResource",
                     "description": "Fetches the resource and returns the content.",
@@ -19184,6 +19562,70 @@
                             }
                         }
                     ]
+                },
+                {
+                    "name": "deviceBoundSessionsAdded",
+                    "description": "Triggered when the initial set of device bound sessions is added.",
+                    "experimental": true,
+                    "parameters": [
+                        {
+                            "name": "sessions",
+                            "description": "The device bound sessions.",
+                            "type": "array",
+                            "items": {
+                                "$ref": "DeviceBoundSession"
+                            }
+                        }
+                    ]
+                },
+                {
+                    "name": "deviceBoundSessionEventOccurred",
+                    "description": "Triggered when a device bound session event occurs.",
+                    "experimental": true,
+                    "parameters": [
+                        {
+                            "name": "eventId",
+                            "description": "A unique identifier for this session event.",
+                            "$ref": "DeviceBoundSessionEventId"
+                        },
+                        {
+                            "name": "site",
+                            "description": "The site this session event is associated with.",
+                            "type": "string"
+                        },
+                        {
+                            "name": "succeeded",
+                            "description": "Whether this event was considered successful.",
+                            "type": "boolean"
+                        },
+                        {
+                            "name": "sessionId",
+                            "description": "The session ID this event is associated with. May not be populated for\nfailed events.",
+                            "optional": true,
+                            "type": "string"
+                        },
+                        {
+                            "name": "creationEventDetails",
+                            "description": "The below are the different session event type details. Exactly one is populated.",
+                            "optional": true,
+                            "$ref": "CreationEventDetails"
+                        },
+                        {
+                            "name": "refreshEventDetails",
+                            "optional": true,
+                            "$ref": "RefreshEventDetails"
+                        },
+                        {
+                            "name": "terminationEventDetails",
+                            "optional": true,
+                            "$ref": "TerminationEventDetails"
+                        },
+                        {
+                            "name": "challengeEventDetails",
+                            "optional": true,
+                            "$ref": "ChallengeEventDetails"
+                        }
+                    ]
                 }
             ]
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devtools-protocol",
-  "version": "0.0.1561482",
+  "version": "0.0.1566079",
   "description": "The Chrome DevTools Protocol JSON",
   "repository": "https://github.com/ChromeDevTools/devtools-protocol",
   "author": "The Chromium Authors",

package/pdl/domains/Network.pdl

@@ -2057,6 +2057,242 @@ domain Network
       string origin
       array of ReportingApiEndpoint endpoints
 
+  # Unique identifier for a device bound session.
+  experimental type DeviceBoundSessionKey extends object
+    properties
+      # The site the session is set up for.
+      string site
+      # The id of the session.
+      string id
+
+  # A device bound session's cookie craving.
+  experimental type DeviceBoundSessionCookieCraving extends object
+    properties
+      # The name of the craving.
+      string name
+      # The domain of the craving.
+      string domain
+      # The path of the craving.
+      string path
+      # The `Secure` attribute of the craving attributes.
+      boolean secure
+      # The `HttpOnly` attribute of the craving attributes.
+      boolean httpOnly
+      # The `SameSite` attribute of the craving attributes.
+      optional CookieSameSite sameSite
+
+  # A device bound session's inclusion URL rule.
+  experimental type DeviceBoundSessionUrlRule extends object
+    properties
+      # See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::rule_type`.
+      enum ruleType
+        Exclude
+        Include
+      # See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::host_pattern`.
+      string hostPattern
+      # See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::path_prefix`.
+      string pathPrefix
+
+  # A device bound session's inclusion rules.
+  experimental type DeviceBoundSessionInclusionRules extends object
+    properties
+      # See comments on `net::device_bound_sessions::SessionInclusionRules::origin_`.
+      string origin
+      # Whether the whole site is included. See comments on
+      # `net::device_bound_sessions::SessionInclusionRules::include_site_` for more
+      # details; this boolean is true if that value is populated.
+      boolean includeSite
+      # See comments on `net::device_bound_sessions::SessionInclusionRules::url_rules_`.
+      array of DeviceBoundSessionUrlRule urlRules
+
+  # A device bound session.
+  experimental type DeviceBoundSession extends object
+    properties
+      # The site and session ID of the session.
+      DeviceBoundSessionKey key
+      # See comments on `net::device_bound_sessions::Session::refresh_url_`.
+      string refreshUrl
+      # See comments on `net::device_bound_sessions::Session::inclusion_rules_`.
+      DeviceBoundSessionInclusionRules inclusionRules
+      # See comments on `net::device_bound_sessions::Session::cookie_cravings_`.
+      array of DeviceBoundSessionCookieCraving cookieCravings
+      # See comments on `net::device_bound_sessions::Session::expiry_date_`.
+      Network.TimeSinceEpoch expiryDate
+      # See comments on `net::device_bound_sessions::Session::cached_challenge__`.
+      optional string cachedChallenge
+      # See comments on `net::device_bound_sessions::Session::allowed_refresh_initiators_`.
+      array of string allowedRefreshInitiators
+
+  # A unique identifier for a device bound session event.
+  experimental type DeviceBoundSessionEventId extends string
+
+  # A fetch result for a device bound session creation or refresh.
+  experimental type DeviceBoundSessionFetchResult extends string
+    enum
+      Success
+      KeyError
+      SigningError
+      ServerRequestedTermination
+      InvalidSessionId
+      InvalidChallenge
+      TooManyChallenges
+      InvalidFetcherUrl
+      InvalidRefreshUrl
+      TransientHttpError
+      ScopeOriginSameSiteMismatch
+      RefreshUrlSameSiteMismatch
+      MismatchedSessionId
+      MissingScope
+      NoCredentials
+      SubdomainRegistrationWellKnownUnavailable
+      SubdomainRegistrationUnauthorized
+      SubdomainRegistrationWellKnownMalformed
+      SessionProviderWellKnownUnavailable
+      RelyingPartyWellKnownUnavailable
+      FederatedKeyThumbprintMismatch
+      InvalidFederatedSessionUrl
+      InvalidFederatedKey
+      TooManyRelyingOriginLabels
+      BoundCookieSetForbidden
+      NetError
+      ProxyError
+      EmptySessionConfig
+      InvalidCredentialsConfig
+      InvalidCredentialsType
+      InvalidCredentialsEmptyName
+      InvalidCredentialsCookie
+      PersistentHttpError
+      RegistrationAttemptedChallenge
+      InvalidScopeOrigin
+      ScopeOriginContainsPath
+      RefreshInitiatorNotString
+      RefreshInitiatorInvalidHostPattern
+      InvalidScopeSpecification
+      MissingScopeSpecificationType
+      EmptyScopeSpecificationDomain
+      EmptyScopeSpecificationPath
+      InvalidScopeSpecificationType
+      InvalidScopeIncludeSite
+      MissingScopeIncludeSite
+      FederatedNotAuthorizedByProvider
+      FederatedNotAuthorizedByRelyingParty
+      SessionProviderWellKnownMalformed
+      SessionProviderWellKnownHasProviderOrigin
+      RelyingPartyWellKnownMalformed
+      RelyingPartyWellKnownHasRelyingOrigins
+      InvalidFederatedSessionProviderSessionMissing
+      InvalidFederatedSessionWrongProviderOrigin
+      InvalidCredentialsCookieCreationTime
+      InvalidCredentialsCookieName
+      InvalidCredentialsCookieParsing
+      InvalidCredentialsCookieUnpermittedAttribute
+      InvalidCredentialsCookieInvalidDomain
+      InvalidCredentialsCookiePrefix
+      InvalidScopeRulePath
+      InvalidScopeRuleHostPattern
+      ScopeRuleOriginScopedHostPatternMismatch
+      ScopeRuleSiteScopedHostPatternMismatch
+      SigningQuotaExceeded
+      InvalidConfigJson
+      InvalidFederatedSessionProviderFailedToRestoreKey
+      FailedToUnwrapKey
+      SessionDeletedDuringRefresh
+
+  # Session event details specific to creation.
+  experimental type CreationEventDetails extends object
+    properties
+      # The result of the fetch attempt.
+      DeviceBoundSessionFetchResult fetchResult
+      # The session if there was a newly created session. This is populated for
+      # all successful creation events.
+      optional DeviceBoundSession newSession
+
+  # Session event details specific to refresh.
+  experimental type RefreshEventDetails extends object
+    properties
+      # The result of a refresh.
+      enum refreshResult
+        Refreshed
+        InitializedService
+        Unreachable
+        ServerError
+        RefreshQuotaExceeded
+        FatalError
+        SigningQuotaExceeded
+      # If there was a fetch attempt, the result of that.
+      optional DeviceBoundSessionFetchResult fetchResult
+      # The session display if there was a newly created session. This is populated
+      # for any refresh event that modifies the session config.
+      optional DeviceBoundSession newSession
+      # See comments on `net::device_bound_sessions::RefreshEventResult::was_fully_proactive_refresh`.
+      boolean wasFullyProactiveRefresh
+
+  # Session event details specific to termination.
+  experimental type TerminationEventDetails extends object
+    properties
+      # The reason for a session being deleted.
+      enum deletionReason
+        Expired
+        FailedToRestoreKey
+        FailedToUnwrapKey
+        StoragePartitionCleared
+        ClearBrowsingData
+        ServerRequested
+        InvalidSessionParams
+        RefreshFatalError
+
+  # Session event details specific to challenges.
+  experimental type ChallengeEventDetails extends object
+    properties
+      # The result of a challenge.
+      enum challengeResult
+        Success
+        NoSessionId
+        NoSessionMatch
+        CantSetBoundCookie
+      # The challenge set.
+      string challenge
+
+  # Triggered when the initial set of device bound sessions is added.
+  experimental event deviceBoundSessionsAdded
+    parameters
+      # The device bound sessions.
+      array of DeviceBoundSession sessions
+
+  # Triggered when a device bound session event occurs.
+  experimental event deviceBoundSessionEventOccurred
+    parameters
+      # A unique identifier for this session event.
+      DeviceBoundSessionEventId eventId
+      # The site this session event is associated with.
+      string site
+      # Whether this event was considered successful.
+      boolean succeeded
+      # The session ID this event is associated with. May not be populated for
+      # failed events.
+      optional string sessionId
+
+      # The below are the different session event type details. Exactly one is populated.
+      optional CreationEventDetails creationEventDetails
+      optional RefreshEventDetails refreshEventDetails
+      optional TerminationEventDetails terminationEventDetails
+      optional ChallengeEventDetails challengeEventDetails
+
+  # Sets up tracking device bound sessions and fetching of initial set of sessions.
+  experimental command enableDeviceBoundSessions
+    parameters
+      # Whether to enable or disable events.
+      boolean enable
+
+  # Fetches the schemeful site for a specific origin.
+  experimental command fetchSchemefulSite
+    parameters
+      # The URL origin.
+      string origin
+    returns
+      # The corresponding schemeful site.
+      string schemefulSite
+
   # An object providing the result of a network resource load.
   experimental type LoadNetworkResourcePageResult extends object
     properties

package/types/protocol-mapping.d.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2025 The Chromium Authors. All rights reserved.
+// Copyright (c) 2026 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
@@ -582,6 +582,16 @@ export namespace ProtocolMapping {
          * @experimental
          */
         'Network.reportingApiEndpointsChangedForOrigin': [Protocol.Network.ReportingApiEndpointsChangedForOriginEvent];
+        /**
+         * Triggered when the initial set of device bound sessions is added.
+         * @experimental
+         */
+        'Network.deviceBoundSessionsAdded': [Protocol.Network.DeviceBoundSessionsAddedEvent];
+        /**
+         * Triggered when a device bound session event occurs.
+         * @experimental
+         */
+        'Network.deviceBoundSessionEventOccurred': [Protocol.Network.DeviceBoundSessionEventOccurredEvent];
         /**
          * Fired when the node should be inspected. This happens after call to `setInspectMode` or when
          * user manually inspects an element.
@@ -4359,6 +4369,22 @@ export namespace ProtocolMapping {
             paramsType: [Protocol.Network.EnableReportingApiRequest];
             returnType: void;
         };
+        /**
+         * Sets up tracking device bound sessions and fetching of initial set of sessions.
+         * @experimental
+         */
+        'Network.enableDeviceBoundSessions': {
+            paramsType: [Protocol.Network.EnableDeviceBoundSessionsRequest];
+            returnType: void;
+        };
+        /**
+         * Fetches the schemeful site for a specific origin.
+         * @experimental
+         */
+        'Network.fetchSchemefulSite': {
+            paramsType: [Protocol.Network.FetchSchemefulSiteRequest];
+            returnType: Protocol.Network.FetchSchemefulSiteResponse;
+        };
         /**
          * Fetches the resource and returns the content.
          * @experimental

package/types/protocol-proxy-api.d.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2025 The Chromium Authors. All rights reserved.
+// Copyright (c) 2026 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
@@ -3193,6 +3193,18 @@ export namespace ProtocolProxyApi {
          */
         enableReportingApi(params: Protocol.Network.EnableReportingApiRequest): Promise<void>;
 
+        /**
+         * Sets up tracking device bound sessions and fetching of initial set of sessions.
+         * @experimental
+         */
+        enableDeviceBoundSessions(params: Protocol.Network.EnableDeviceBoundSessionsRequest): Promise<void>;
+
+        /**
+         * Fetches the schemeful site for a specific origin.
+         * @experimental
+         */
+        fetchSchemefulSite(params: Protocol.Network.FetchSchemefulSiteRequest): Promise<Protocol.Network.FetchSchemefulSiteResponse>;
+
         /**
          * Fetches the resource and returns the content.
          * @experimental
@@ -3451,6 +3463,18 @@ export namespace ProtocolProxyApi {
          */
         on(event: 'reportingApiEndpointsChangedForOrigin', listener: (params: Protocol.Network.ReportingApiEndpointsChangedForOriginEvent) => void): void;
 
+        /**
+         * Triggered when the initial set of device bound sessions is added.
+         * @experimental
+         */
+        on(event: 'deviceBoundSessionsAdded', listener: (params: Protocol.Network.DeviceBoundSessionsAddedEvent) => void): void;
+
+        /**
+         * Triggered when a device bound session event occurs.
+         * @experimental
+         */
+        on(event: 'deviceBoundSessionEventOccurred', listener: (params: Protocol.Network.DeviceBoundSessionEventOccurredEvent) => void): void;
+
     }
 
     export interface OverlayApi {

package/types/protocol-tests-proxy-api.d.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2025 The Chromium Authors. All rights reserved.
+// Copyright (c) 2026 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
@@ -3365,6 +3365,18 @@ export namespace ProtocolTestsProxyApi {
          */
         enableReportingApi(params: Protocol.Network.EnableReportingApiRequest): Promise<{id: number, result: void, sessionId: string}>;
 
+        /**
+         * Sets up tracking device bound sessions and fetching of initial set of sessions.
+         * @experimental
+         */
+        enableDeviceBoundSessions(params: Protocol.Network.EnableDeviceBoundSessionsRequest): Promise<{id: number, result: void, sessionId: string}>;
+
+        /**
+         * Fetches the schemeful site for a specific origin.
+         * @experimental
+         */
+        fetchSchemefulSite(params: Protocol.Network.FetchSchemefulSiteRequest): Promise<{id: number, result: Protocol.Network.FetchSchemefulSiteResponse, sessionId: string}>;
+
         /**
          * Fetches the resource and returns the content.
          * @experimental
@@ -3707,6 +3719,22 @@ export namespace ProtocolTestsProxyApi {
         offReportingApiEndpointsChangedForOrigin(listener: (event: { params: Protocol.Network.ReportingApiEndpointsChangedForOriginEvent }) => void): void;
         onceReportingApiEndpointsChangedForOrigin(eventMatcher?: (event: { params: Protocol.Network.ReportingApiEndpointsChangedForOriginEvent }) => boolean): Promise<{ params: Protocol.Network.ReportingApiEndpointsChangedForOriginEvent }>;
 
+        /**
+         * Triggered when the initial set of device bound sessions is added.
+         * @experimental
+         */
+        onDeviceBoundSessionsAdded(listener: (event: { params: Protocol.Network.DeviceBoundSessionsAddedEvent }) => void): void;
+        offDeviceBoundSessionsAdded(listener: (event: { params: Protocol.Network.DeviceBoundSessionsAddedEvent }) => void): void;
+        onceDeviceBoundSessionsAdded(eventMatcher?: (event: { params: Protocol.Network.DeviceBoundSessionsAddedEvent }) => boolean): Promise<{ params: Protocol.Network.DeviceBoundSessionsAddedEvent }>;
+
+        /**
+         * Triggered when a device bound session event occurs.
+         * @experimental
+         */
+        onDeviceBoundSessionEventOccurred(listener: (event: { params: Protocol.Network.DeviceBoundSessionEventOccurredEvent }) => void): void;
+        offDeviceBoundSessionEventOccurred(listener: (event: { params: Protocol.Network.DeviceBoundSessionEventOccurredEvent }) => void): void;
+        onceDeviceBoundSessionEventOccurred(eventMatcher?: (event: { params: Protocol.Network.DeviceBoundSessionEventOccurredEvent }) => boolean): Promise<{ params: Protocol.Network.DeviceBoundSessionEventOccurredEvent }>;
+
     }
 
     export interface OverlayApi {

package/types/protocol.d.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2025 The Chromium Authors. All rights reserved.
+// Copyright (c) 2026 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
@@ -13540,6 +13540,238 @@ export namespace Protocol {
             groupName: string;
         }
 
+        /**
+         * Unique identifier for a device bound session.
+         * @experimental
+         */
+        export interface DeviceBoundSessionKey {
+            /**
+             * The site the session is set up for.
+             */
+            site: string;
+            /**
+             * The id of the session.
+             */
+            id: string;
+        }
+
+        /**
+         * A device bound session's cookie craving.
+         * @experimental
+         */
+        export interface DeviceBoundSessionCookieCraving {
+            /**
+             * The name of the craving.
+             */
+            name: string;
+            /**
+             * The domain of the craving.
+             */
+            domain: string;
+            /**
+             * The path of the craving.
+             */
+            path: string;
+            /**
+             * The `Secure` attribute of the craving attributes.
+             */
+            secure: boolean;
+            /**
+             * The `HttpOnly` attribute of the craving attributes.
+             */
+            httpOnly: boolean;
+            /**
+             * The `SameSite` attribute of the craving attributes.
+             */
+            sameSite?: CookieSameSite;
+        }
+
+        export const enum DeviceBoundSessionUrlRuleRuleType {
+            Exclude = 'Exclude',
+            Include = 'Include',
+        }
+
+        /**
+         * A device bound session's inclusion URL rule.
+         * @experimental
+         */
+        export interface DeviceBoundSessionUrlRule {
+            /**
+             * See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::rule_type`.
+             */
+            ruleType: ('Exclude' | 'Include');
+            /**
+             * See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::host_pattern`.
+             */
+            hostPattern: string;
+            /**
+             * See comments on `net::device_bound_sessions::SessionInclusionRules::UrlRule::path_prefix`.
+             */
+            pathPrefix: string;
+        }
+
+        /**
+         * A device bound session's inclusion rules.
+         * @experimental
+         */
+        export interface DeviceBoundSessionInclusionRules {
+            /**
+             * See comments on `net::device_bound_sessions::SessionInclusionRules::origin_`.
+             */
+            origin: string;
+            /**
+             * Whether the whole site is included. See comments on
+             * `net::device_bound_sessions::SessionInclusionRules::include_site_` for more
+             * details; this boolean is true if that value is populated.
+             */
+            includeSite: boolean;
+            /**
+             * See comments on `net::device_bound_sessions::SessionInclusionRules::url_rules_`.
+             */
+            urlRules: DeviceBoundSessionUrlRule[];
+        }
+
+        /**
+         * A device bound session.
+         * @experimental
+         */
+        export interface DeviceBoundSession {
+            /**
+             * The site and session ID of the session.
+             */
+            key: DeviceBoundSessionKey;
+            /**
+             * See comments on `net::device_bound_sessions::Session::refresh_url_`.
+             */
+            refreshUrl: string;
+            /**
+             * See comments on `net::device_bound_sessions::Session::inclusion_rules_`.
+             */
+            inclusionRules: DeviceBoundSessionInclusionRules;
+            /**
+             * See comments on `net::device_bound_sessions::Session::cookie_cravings_`.
+             */
+            cookieCravings: DeviceBoundSessionCookieCraving[];
+            /**
+             * See comments on `net::device_bound_sessions::Session::expiry_date_`.
+             */
+            expiryDate: Network.TimeSinceEpoch;
+            /**
+             * See comments on `net::device_bound_sessions::Session::cached_challenge__`.
+             */
+            cachedChallenge?: string;
+            /**
+             * See comments on `net::device_bound_sessions::Session::allowed_refresh_initiators_`.
+             */
+            allowedRefreshInitiators: string[];
+        }
+
+        /**
+         * A unique identifier for a device bound session event.
+         * @experimental
+         */
+        export type DeviceBoundSessionEventId = string;
+
+        /**
+         * A fetch result for a device bound session creation or refresh.
+         * @experimental
+         */
+        export type DeviceBoundSessionFetchResult = ('Success' | 'KeyError' | 'SigningError' | 'ServerRequestedTermination' | 'InvalidSessionId' | 'InvalidChallenge' | 'TooManyChallenges' | 'InvalidFetcherUrl' | 'InvalidRefreshUrl' | 'TransientHttpError' | 'ScopeOriginSameSiteMismatch' | 'RefreshUrlSameSiteMismatch' | 'MismatchedSessionId' | 'MissingScope' | 'NoCredentials' | 'SubdomainRegistrationWellKnownUnavailable' | 'SubdomainRegistrationUnauthorized' | 'SubdomainRegistrationWellKnownMalformed' | 'SessionProviderWellKnownUnavailable' | 'RelyingPartyWellKnownUnavailable' | 'FederatedKeyThumbprintMismatch' | 'InvalidFederatedSessionUrl' | 'InvalidFederatedKey' | 'TooManyRelyingOriginLabels' | 'BoundCookieSetForbidden' | 'NetError' | 'ProxyError' | 'EmptySessionConfig' | 'InvalidCredentialsConfig' | 'InvalidCredentialsType' | 'InvalidCredentialsEmptyName' | 'InvalidCredentialsCookie' | 'PersistentHttpError' | 'RegistrationAttemptedChallenge' | 'InvalidScopeOrigin' | 'ScopeOriginContainsPath' | 'RefreshInitiatorNotString' | 'RefreshInitiatorInvalidHostPattern' | 'InvalidScopeSpecification' | 'MissingScopeSpecificationType' | 'EmptyScopeSpecificationDomain' | 'EmptyScopeSpecificationPath' | 'InvalidScopeSpecificationType' | 'InvalidScopeIncludeSite' | 'MissingScopeIncludeSite' | 'FederatedNotAuthorizedByProvider' | 'FederatedNotAuthorizedByRelyingParty' | 'SessionProviderWellKnownMalformed' | 'SessionProviderWellKnownHasProviderOrigin' | 'RelyingPartyWellKnownMalformed' | 'RelyingPartyWellKnownHasRelyingOrigins' | 'InvalidFederatedSessionProviderSessionMissing' | 'InvalidFederatedSessionWrongProviderOrigin' | 'InvalidCredentialsCookieCreationTime' | 'InvalidCredentialsCookieName' | 'InvalidCredentialsCookieParsing' | 'InvalidCredentialsCookieUnpermittedAttribute' | 'InvalidCredentialsCookieInvalidDomain' | 'InvalidCredentialsCookiePrefix' | 'InvalidScopeRulePath' | 'InvalidScopeRuleHostPattern' | 'ScopeRuleOriginScopedHostPatternMismatch' | 'ScopeRuleSiteScopedHostPatternMismatch' | 'SigningQuotaExceeded' | 'InvalidConfigJson' | 'InvalidFederatedSessionProviderFailedToRestoreKey' | 'FailedToUnwrapKey' | 'SessionDeletedDuringRefresh');
+
+        /**
+         * Session event details specific to creation.
+         * @experimental
+         */
+        export interface CreationEventDetails {
+            /**
+             * The result of the fetch attempt.
+             */
+            fetchResult: DeviceBoundSessionFetchResult;
+            /**
+             * The session if there was a newly created session. This is populated for
+             * all successful creation events.
+             */
+            newSession?: DeviceBoundSession;
+        }
+
+        export const enum RefreshEventDetailsRefreshResult {
+            Refreshed = 'Refreshed',
+            InitializedService = 'InitializedService',
+            Unreachable = 'Unreachable',
+            ServerError = 'ServerError',
+            RefreshQuotaExceeded = 'RefreshQuotaExceeded',
+            FatalError = 'FatalError',
+            SigningQuotaExceeded = 'SigningQuotaExceeded',
+        }
+
+        /**
+         * Session event details specific to refresh.
+         * @experimental
+         */
+        export interface RefreshEventDetails {
+            /**
+             * The result of a refresh.
+             */
+            refreshResult: ('Refreshed' | 'InitializedService' | 'Unreachable' | 'ServerError' | 'RefreshQuotaExceeded' | 'FatalError' | 'SigningQuotaExceeded');
+            /**
+             * If there was a fetch attempt, the result of that.
+             */
+            fetchResult?: DeviceBoundSessionFetchResult;
+            /**
+             * The session display if there was a newly created session. This is populated
+             * for any refresh event that modifies the session config.
+             */
+            newSession?: DeviceBoundSession;
+            /**
+             * See comments on `net::device_bound_sessions::RefreshEventResult::was_fully_proactive_refresh`.
+             */
+            wasFullyProactiveRefresh: boolean;
+        }
+
+        export const enum TerminationEventDetailsDeletionReason {
+            Expired = 'Expired',
+            FailedToRestoreKey = 'FailedToRestoreKey',
+            FailedToUnwrapKey = 'FailedToUnwrapKey',
+            StoragePartitionCleared = 'StoragePartitionCleared',
+            ClearBrowsingData = 'ClearBrowsingData',
+            ServerRequested = 'ServerRequested',
+            InvalidSessionParams = 'InvalidSessionParams',
+            RefreshFatalError = 'RefreshFatalError',
+        }
+
+        /**
+         * Session event details specific to termination.
+         * @experimental
+         */
+        export interface TerminationEventDetails {
+            /**
+             * The reason for a session being deleted.
+             */
+            deletionReason: ('Expired' | 'FailedToRestoreKey' | 'FailedToUnwrapKey' | 'StoragePartitionCleared' | 'ClearBrowsingData' | 'ServerRequested' | 'InvalidSessionParams' | 'RefreshFatalError');
+        }
+
+        export const enum ChallengeEventDetailsChallengeResult {
+            Success = 'Success',
+            NoSessionId = 'NoSessionId',
+            NoSessionMatch = 'NoSessionMatch',
+            CantSetBoundCookie = 'CantSetBoundCookie',
+        }
+
+        /**
+         * Session event details specific to challenges.
+         * @experimental
+         */
+        export interface ChallengeEventDetails {
+            /**
+             * The result of a challenge.
+             */
+            challengeResult: ('Success' | 'NoSessionId' | 'NoSessionMatch' | 'CantSetBoundCookie');
+            /**
+             * The challenge set.
+             */
+            challenge: string;
+        }
+
         /**
          * An object providing the result of a network resource load.
          * @experimental
@@ -14096,6 +14328,27 @@ export namespace Protocol {
             enable: boolean;
         }
 
+        export interface EnableDeviceBoundSessionsRequest {
+            /**
+             * Whether to enable or disable events.
+             */
+            enable: boolean;
+        }
+
+        export interface FetchSchemefulSiteRequest {
+            /**
+             * The URL origin.
+             */
+            origin: string;
+        }
+
+        export interface FetchSchemefulSiteResponse {
+            /**
+             * The corresponding schemeful site.
+             */
+            schemefulSite: string;
+        }
+
         export interface LoadNetworkResourceRequest {
             /**
              * Frame id to get the resource for. Mandatory for frame targets, and
@@ -14967,6 +15220,48 @@ export namespace Protocol {
             origin: string;
             endpoints: ReportingApiEndpoint[];
         }
+
+        /**
+         * Triggered when the initial set of device bound sessions is added.
+         * @experimental
+         */
+        export interface DeviceBoundSessionsAddedEvent {
+            /**
+             * The device bound sessions.
+             */
+            sessions: DeviceBoundSession[];
+        }
+
+        /**
+         * Triggered when a device bound session event occurs.
+         * @experimental
+         */
+        export interface DeviceBoundSessionEventOccurredEvent {
+            /**
+             * A unique identifier for this session event.
+             */
+            eventId: DeviceBoundSessionEventId;
+            /**
+             * The site this session event is associated with.
+             */
+            site: string;
+            /**
+             * Whether this event was considered successful.
+             */
+            succeeded: boolean;
+            /**
+             * The session ID this event is associated with. May not be populated for
+             * failed events.
+             */
+            sessionId?: string;
+            /**
+             * The below are the different session event type details. Exactly one is populated.
+             */
+            creationEventDetails?: CreationEventDetails;
+            refreshEventDetails?: RefreshEventDetails;
+            terminationEventDetails?: TerminationEventDetails;
+            challengeEventDetails?: ChallengeEventDetails;
+        }
     }
 
     /**