lighthouse 13.5.0-dev.20261008 → 13.5.0-dev.20261009

package/third-party/ard/spec/schemas/ard-entry.schema.json

@@ -0,0 +1,176 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/ards-project/ard-spec/main/spec/schemas/ard-entry.schema.json",
+  "title": "ArdEntry",
+  "description": "JSON Schema for an ARD entry — the description of a single agentic resource in a form that can be found by search. An ARD entry is defined by the ARD specification. It adopts the core descriptive terms of the default namespace and additionally requires the terms discovery depends on. Every ARD entry is a well-formed catalog entry; not every catalog entry is an ARD entry.",
+  "$ref": "#/$defs/ArdEntry",
+  "$defs": {
+    "EntryFields": {
+      "type": "object",
+      "description": "The terms an ARD entry may carry. This definition imposes no required terms; ArdEntry layers its own requirements on top.",
+      "properties": {
+        "@context": {
+          "description": "Optional JSON-LD context. Absent, the entry's unprefixed terms resolve to the default namespace. Present, it MAY declare additional namespaces whose prefixed terms describe the resource and become available as filter dimensions.",
+          "oneOf": [
+            { "type": "string", "format": "uri" },
+            { "type": "object" },
+            { "type": "array" }
+          ]
+        },
+        "@id": {
+          "type": "string",
+          "description": "Optional JSON-LD node identifier. When present alongside `identifier`, both MUST denote the same resource."
+        },
+        "identifier": {
+          "type": "string",
+          "pattern": "^urn:air:[a-zA-Z0-9.-]+(:[a-zA-Z0-9._-]+)+$",
+          "description": "Globally unique discovery handle. Domain-anchored URN: urn:air:<publisher>:<namespace>:<agent-name>. The <publisher> segment is the authority anchor used for publisher-authority binding."
+        },
+        "displayName": {
+          "type": "string",
+          "description": "Human-readable name."
+        },
+        "type": {
+          "type": "string",
+          "description": "Artifact type as an IANA Media Type (e.g. application/mcp-server-card+json). Names what the artifact is without constraining its internal schema."
+        },
+        "url": {
+          "type": "string",
+          "format": "uri",
+          "description": "Reference to the full artifact document. Mutually exclusive with `data`."
+        },
+        "data": {
+          "type": "object",
+          "description": "The complete artifact document, inline. Mutually exclusive with `url`."
+        },
+        "representativeQueries": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Sample natural-language queries this resource can serve — the signal a registry builds its semantic index from. RECOMMENDED on every entry; SHOULD contain 2-5 examples. Neither presence nor count is enforced here so that emitted entries validate; the conformance tester flags absence, or a count outside 2-5, as a warning (§D.2)."
+        },
+        "capabilities": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Short skill or tool tokens (e.g. [\"WeatherTool\"]) enabling structured filtering without fetching the full artifact."
+        },
+        "description": {
+          "type": "string",
+          "description": "Short natural-language description. Contributes to the semantic index."
+        },
+        "tags": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Keywords for filtering and faceting."
+        },
+        "version": {
+          "type": "string",
+          "description": "Version of the artifact."
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of the last modification."
+        },
+        "metadata": {
+          "type": "object",
+          "description": "Custom key-value pairs, available as metadata.* filter keys.",
+          "additionalProperties": {
+            "type": ["string", "number", "boolean", "null"]
+          }
+        },
+        "TrustManifest": {
+          "$ref": "#/$defs/TrustManifest"
+        }
+      },
+      "additionalProperties": true,
+      "$comment": "additionalProperties is intentionally true. Terms drawn from namespaces declared in the entry's @context (e.g. okf:taxonomy) are valid and become filter dimensions. Constraining this to false would defeat the namespace extension mechanism."
+    },
+    "ArdEntry": {
+      "description": "A complete ARD entry, as published. Requires the discovery-critical terms and exactly one of url/data.",
+      "allOf": [{ "$ref": "#/$defs/EntryFields" }],
+      "required": ["identifier", "displayName", "type"],
+      "oneOf": [
+        {
+          "required": ["url"],
+          "not": { "required": ["data"] }
+        },
+        {
+          "required": ["data"],
+          "not": { "required": ["url"] }
+        }
+      ]
+    },
+    "ArdManifest": {
+      "type": "object",
+      "description": "The document published at /.well-known/ard.json (or any entry source). ARD requires only an `entries` array of ARD entries; any other top-level members are transport-defined and ignored by ARD, so additionalProperties is open.",
+      "required": ["entries"],
+      "properties": {
+        "entries": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/ArdEntry" }
+        }
+      },
+      "additionalProperties": true
+    },
+    "TrustManifest": {
+      "type": "object",
+      "description": "Identity, compliance, and provenance envelope. ARD requires only `identity` (for publisher-authority binding) and does not constrain the internal schema; validation is intentionally permissive (additionalProperties: true) so a trust manifest defined by any framework is structurally valid, including members ARD does not enumerate such as trustSchema. This does not mean consumers ignore it: a federated registry is expected to inspect the manifest and verify it per the framework named in trustSchema (attestations, provenance, signature). Signing and verification procedures are defined by that framework, not by ARD.",
+      "required": ["identity"],
+      "properties": {
+        "identity": {
+          "type": "string",
+          "description": "Globally unique cryptographic workload identifier (SPIFFE ID, DID, or HTTPS FQDN URI). Its trust domain MUST align with the <publisher> segment of the entry's identifier."
+        },
+        "identityType": {
+          "type": "string",
+          "description": "Hint for the cryptographic format of the identity (e.g. spiffe, did, https)."
+        },
+        "trustSchema": {
+          "type": "object",
+          "description": "The trust framework the manifest conforms to, and the source of its verification procedure.",
+          "properties": {
+            "identifier": { "type": "string" },
+            "version": { "type": "string" },
+            "governanceUri": { "type": "string", "format": "uri" },
+            "verificationMethods": { "type": "array", "items": { "type": "string" } }
+          },
+          "additionalProperties": true
+        },
+        "attestations": {
+          "type": "array",
+          "description": "Verifiable claims (compliance audits, certifications).",
+          "items": {
+            "type": "object",
+            "required": ["type", "uri"],
+            "properties": {
+              "type": { "type": "string" },
+              "uri": { "type": "string", "format": "uri" },
+              "mediaType": { "type": "string" },
+              "digest": { "type": "string" }
+            },
+            "additionalProperties": true
+          }
+        },
+        "provenance": {
+          "type": "array",
+          "description": "Lineage trail of the artifact.",
+          "items": {
+            "type": "object",
+            "required": ["relation", "sourceId"],
+            "properties": {
+              "relation": { "type": "string" },
+              "sourceId": { "type": "string" },
+              "sourceDigest": { "type": "string" }
+            },
+            "additionalProperties": true
+          }
+        },
+        "signature": {
+          "type": "string",
+          "description": "Detached signature over the trust manifest content, per the framework named in trustSchema."
+        }
+      },
+      "additionalProperties": true
+    }
+  }
+}

package/types/artifacts.d.ts

@@ -124,9 +124,9 @@ export interface GathererArtifacts extends PublicGathererArtifacts {
   InspectorIssues: Artifacts.InspectorIssues;
   /** The status and tools registered via WebMCP. */
   WebMCP: {isSupported: boolean, tools: Artifacts.WebMCPTool[]};
-  /** 
-   * The WebMCP schema validation issues. 
-   * TODO: fold this into the WebMCP artifact. 
+  /**
+   * The WebMCP schema validation issues.
+   * TODO: fold this into the WebMCP artifact.
    */
   WebMcpSchemaIssues: Artifacts.WebMcpSchemaIssue[];
   /** JS coverage information for code used during audit. Keyed by script id. */
@@ -138,18 +138,38 @@ export interface GathererArtifacts extends PublicGathererArtifacts {
   RobotsTxt: { status: number | null, content: string | null, errorMessage?: string };
   /** Information on fetching and the content of the /llm.txt file. */
   LlmsTxt: { status: number | null, content: string | null, errorMessage?: string };
-  /** Information on fetching and the content of the /ai-catalog.json manifest file. */
+  /** Information on discovering, fetching, and the content of the Agentic Resource Discovery (ARD) manifest. */
   AgentResourceDiscovery: {
     status: number | null;
     content: string | null;
     headers: Record<string, string> | null;
-    catalogUrl: string | null;
+    /** The loaded manifest URL, or if none loaded, the first failed advertised URL (or `/.well-known/ard.json`). */
+    catalogUrl: string;
+    /** The discovery mechanism `catalogUrl` came from. `legacy*` sources are ARD's predecessor (`ai-catalog`) names. */
+    discoverySource: Artifacts.ArdDiscoverySource;
     discoverySignals: {
       robotsTxtAgentmap: string | null;
+      /** `<link rel="ard">` */
       htmlLink: string | null;
+      /** `Link: <...>; rel="ard"` */
       httpHeaderLink: string | null;
+      /** `<link rel="ai-catalog">` */
+      legacyHtmlLink: string | null;
+      /** `Link: <...>; rel="ai-catalog"` */
+      legacyHttpHeaderLink: string | null;
+      /** `/.well-known/ard.json` */
       wellKnown: string;
+      /** `/.well-known/ai-catalog.json` */
+      legacyWellKnown: string;
     };
+    /** Advertised locations (not the probed well-known paths) that were tried and failed to load, in discovery order. */
+    failedSources: Array<{
+      source: Artifacts.ArdDiscoverySource;
+      url: string;
+      status: number | null;
+      /** Set when the fetch itself failed (e.g. a timeout) rather than returning an HTTP error. */
+      errorMessage?: string;
+    }>;
     errorMessage?: string;
   };
   /** Source maps of scripts executed in the page. */
@@ -165,6 +185,10 @@ export interface GathererArtifacts extends PublicGathererArtifacts {
 }
 
 declare namespace Artifacts {
+  /** Agentic Resource Discovery (ARD) manifest locations. `legacy*` sources are ARD's predecessor (`ai-catalog`) names. */
+  type ArdDiscoverySource = 'robotsTxtAgentmap' | 'htmlLink' | 'httpHeaderLink' | 'wellKnown' |
+    'legacyHtmlLink' | 'legacyHttpHeaderLink' | 'legacyWellKnown';
+
   interface WebMcpSchemaIssue {
     errorType: string;
     violatingNodeId?: number;

package/build-tracker.config.js

@@ -1,16 +0,0 @@
-// https://buildtracker.dev/docs/installation/#upload-your-builds
-
-
-module.exports = {
-  applicationUrl: 'https://lh-build-tracker.herokuapp.com',
-  artifacts: [
-    'dist/lightrider/lighthouse-lr-bundle.js',
-    'dist/extension/scripts/lighthouse-ext-bundle.js',
-    'dist/devtools/lighthouse-dt-bundle.js',
-    'dist/gh-pages/viewer/src/bundled.js',
-    'dist/gh-pages/treemap/src/bundled.js',
-    'dist/lightrider/report-generator-bundle.js',
-    'dist/dt-report-resources/report.js',
-    'dist/dt-report-resources/report-generator.js',
-  ],
-};

package/third-party/ard/spec/schemas/ai-catalog.schema.json

@@ -1,292 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/ards-project/ard-spec/main/spec/schemas/ai-catalog.schema.json",
-  "title": "AICatalogManifest",
-  "description": "JSON Schema for the ai-catalog.json capability manifest, defining how AI artifacts are advertised.",
-  "type": "object",
-  "required": [
-    "specVersion",
-    "entries"
-  ],
-  "properties": {
-    "specVersion": {
-      "type": "string",
-      "description": "Version of the ai-catalog specification used in this manifest.",
-      "enum": [
-        "1.0"
-      ]
-    },
-    "host": {
-      "type": "object",
-      "description": "Information about the catalog publisher or hosting entity.",
-      "required": [
-        "displayName"
-      ],
-      "properties": {
-        "displayName": {
-          "type": "string",
-          "description": "Human-readable name of the host."
-        },
-        "identifier": {
-          "type": "string",
-          "description": "Cryptographic or verifiable identifier of the host (e.g. did:web:domain.com)."
-        },
-        "documentationUrl": {
-          "type": "string",
-          "format": "uri",
-          "description": "URL to publisher documentation."
-        },
-        "logoUrl": {
-          "type": "string",
-          "format": "uri",
-          "description": "URL to the publisher's logo image."
-        },
-        "trustManifest": {
-          "$ref": "#/$defs/trustManifest"
-        }
-      },
-      "additionalProperties": false
-    },
-    "entries": {
-      "type": "array",
-      "description": "List of AI agent or capability catalog entries.",
-      "items": {
-        "$ref": "#/$defs/catalogEntry"
-      }
-    }
-  },
-  "additionalProperties": false,
-  "$defs": {
-    "catalogEntry": {
-      "type": "object",
-      "description": "A single AI capability entry within the catalog.",
-      "required": [
-        "identifier",
-        "displayName",
-        "type"
-      ],
-      "oneOf": [
-        {
-          "required": [
-            "url"
-          ],
-          "not": {
-            "required": [
-              "data"
-            ]
-          }
-        },
-        {
-          "required": [
-            "data"
-          ],
-          "not": {
-            "required": [
-              "url"
-            ]
-          }
-        }
-      ],
-      "properties": {
-        "identifier": {
-          "type": "string",
-          "pattern": "^urn:air:[a-zA-Z0-9.-]+(:[a-zA-Z0-9._-]+)+$",
-          "description": "RFC 8141-compliant unique logical URN formatted as: urn:air:<publisher>:<namespace>:<agent-name>"
-        },
-        "displayName": {
-          "type": "string",
-          "description": "Human-friendly display name."
-        },
-        "type": {
-          "type": "string",
-          "description": "IANA Media Type indicating the specific protocol wrapper or payload structure (e.g. application/mcp-server-card+json)."
-        },
-        "url": {
-          "type": "string",
-          "format": "uri",
-          "description": "HTTP URL reference to retrieve the full artifact document."
-        },
-        "data": {
-          "type": "object",
-          "description": "Embedded JSON object containing the complete artifact specification inline."
-        },
-        "description": {
-          "type": "string",
-          "description": "Brief natural-language description of the capability."
-        },
-        "tags": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Tags or keywords for basic categorizing and filtering."
-        },
-        "capabilities": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Explicit high-performance indexing tags representing skills, tools, or functions (e.g. ['WeatherTool', 'ForecastTool'])."
-        },
-        "representativeQueries": {
-          "type": "array",
-          "minItems": 2,
-          "maxItems": 5,
-          "items": {
-            "type": "string"
-          },
-          "description": "Representative natural-language search queries used for indexing and vector embedding generation."
-        },
-        "version": {
-          "type": "string",
-          "description": "Semantic version of the capability."
-        },
-        "updatedAt": {
-          "type": "string",
-          "format": "date-time",
-          "description": "ISO 8601 timestamp of the last modification."
-        },
-        "metadata": {
-          "type": "object",
-          "description": "Arbitrary key-value pairs for custom extensions.",
-          "additionalProperties": {
-            "type": [
-              "string",
-              "number",
-              "boolean",
-              "null"
-            ]
-          }
-        },
-        "trustManifest": {
-          "$ref": "#/$defs/trustManifest"
-        }
-      }
-    },
-    "trustManifest": {
-      "type": "object",
-      "description": "Zero-trust security, identity, and compliance envelope metadata.",
-      "required": [
-        "identity"
-      ],
-      "properties": {
-        "identity": {
-          "type": "string",
-          "description": "Globally unique cryptographic workload identifier principal (e.g. SPIFFE ID or DID URI)."
-        },
-        "identityType": {
-          "type": "string",
-          "enum": [
-            "spiffe",
-            "did",
-            "https",
-            "other"
-          ],
-          "description": "Hint representing the cryptographic format of the identity."
-        },
-        "trustSchema": {
-          "$ref": "#/$defs/trustSchema"
-        },
-        "attestations": {
-          "type": "array",
-          "description": "List of verifiable claims (SOC 2 audits, compliance statements, HIPAA checks).",
-          "items": {
-            "type": "object",
-            "required": [
-              "type",
-              "uri",
-              "mediaType"
-            ],
-            "properties": {
-              "type": {
-                "type": "string",
-                "description": "Attestation standard type (e.g., SOC2-Type2, HIPAA)."
-              },
-              "uri": {
-                "type": "string",
-                "format": "uri",
-                "description": "Location of the attestation certificate or document."
-              },
-              "mediaType": {
-                "type": "string",
-                "description": "Format of the attestation document (e.g. application/pdf, text/html)."
-              },
-              "digest": {
-                "type": "string",
-                "description": "Cryptographic sha256 digest for document integrity verification."
-              }
-            },
-            "additionalProperties": false
-          }
-        },
-        "provenance": {
-          "type": "array",
-          "description": "Cryptographic lineage trail of the artifact.",
-          "items": {
-            "type": "object",
-            "required": [
-              "relation",
-              "sourceId"
-            ],
-            "properties": {
-              "relation": {
-                "type": "string",
-                "enum": [
-                  "derivedFrom",
-                  "publishedFrom",
-                  "copiedFrom"
-                ],
-                "description": "Lineage relation."
-              },
-              "sourceId": {
-                "type": "string",
-                "description": "Identifier of the source artifact."
-              },
-              "sourceDigest": {
-                "type": "string",
-                "description": "Optional sha256 digest for safety."
-              }
-            },
-            "additionalProperties": false
-          }
-        },
-        "signature": {
-          "type": "string",
-          "description": "Detached JWS signature generated over the fields of the trustManifest."
-        }
-      },
-      "additionalProperties": false
-    },
-    "trustSchema": {
-      "type": "object",
-      "description": "Describes the trust framework applied to the artifact.",
-      "required": [
-        "identifier",
-        "version"
-      ],
-      "properties": {
-        "identifier": {
-          "type": "string",
-          "description": "Unique identifier of the trust schema/framework (e.g. URN)."
-        },
-        "version": {
-          "type": "string",
-          "description": "Version of the trust schema/framework."
-        },
-        "governanceUri": {
-          "type": "string",
-          "format": "uri",
-          "description": "URI pointing to the governance policy document."
-        },
-        "verificationMethods": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Verification methods supported by the schema (e.g., ['did', 'x509', 'dns-01'])."
-        }
-      },
-      "additionalProperties": false
-    }
-  }
-}