lighthouse 13.5.0 → 13.6.0-dev.20261028

package/third-party/ard/spec/schemas/ard-entry.schema.json

@@ -0,0 +1,176 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/ards-project/ard-spec/main/spec/schemas/ard-entry.schema.json",
+  "title": "ArdEntry",
+  "description": "JSON Schema for an ARD entry — the description of a single agentic resource in a form that can be found by search. An ARD entry is defined by the ARD specification. It adopts the core descriptive terms of the default namespace and additionally requires the terms discovery depends on. Every ARD entry is a well-formed catalog entry; not every catalog entry is an ARD entry.",
+  "$ref": "#/$defs/ArdEntry",
+  "$defs": {
+    "EntryFields": {
+      "type": "object",
+      "description": "The terms an ARD entry may carry. This definition imposes no required terms; ArdEntry layers its own requirements on top.",
+      "properties": {
+        "@context": {
+          "description": "Optional JSON-LD context. Absent, the entry's unprefixed terms resolve to the default namespace. Present, it MAY declare additional namespaces whose prefixed terms describe the resource and become available as filter dimensions.",
+          "oneOf": [
+            { "type": "string", "format": "uri" },
+            { "type": "object" },
+            { "type": "array" }
+          ]
+        },
+        "@id": {
+          "type": "string",
+          "description": "Optional JSON-LD node identifier. When present alongside `identifier`, both MUST denote the same resource."
+        },
+        "identifier": {
+          "type": "string",
+          "pattern": "^urn:air:[a-zA-Z0-9.-]+(:[a-zA-Z0-9._-]+)+$",
+          "description": "Globally unique discovery handle. Domain-anchored URN: urn:air:<publisher>:<namespace>:<agent-name>. The <publisher> segment is the authority anchor used for publisher-authority binding."
+        },
+        "displayName": {
+          "type": "string",
+          "description": "Human-readable name."
+        },
+        "type": {
+          "type": "string",
+          "description": "Artifact type as an IANA Media Type (e.g. application/mcp-server-card+json). Names what the artifact is without constraining its internal schema."
+        },
+        "url": {
+          "type": "string",
+          "format": "uri",
+          "description": "Reference to the full artifact document. Mutually exclusive with `data`."
+        },
+        "data": {
+          "type": "object",
+          "description": "The complete artifact document, inline. Mutually exclusive with `url`."
+        },
+        "representativeQueries": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Sample natural-language queries this resource can serve — the signal a registry builds its semantic index from. RECOMMENDED on every entry; SHOULD contain 2-5 examples. Neither presence nor count is enforced here so that emitted entries validate; the conformance tester flags absence, or a count outside 2-5, as a warning (§D.2)."
+        },
+        "capabilities": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Short skill or tool tokens (e.g. [\"WeatherTool\"]) enabling structured filtering without fetching the full artifact."
+        },
+        "description": {
+          "type": "string",
+          "description": "Short natural-language description. Contributes to the semantic index."
+        },
+        "tags": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Keywords for filtering and faceting."
+        },
+        "version": {
+          "type": "string",
+          "description": "Version of the artifact."
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of the last modification."
+        },
+        "metadata": {
+          "type": "object",
+          "description": "Custom key-value pairs, available as metadata.* filter keys.",
+          "additionalProperties": {
+            "type": ["string", "number", "boolean", "null"]
+          }
+        },
+        "TrustManifest": {
+          "$ref": "#/$defs/TrustManifest"
+        }
+      },
+      "additionalProperties": true,
+      "$comment": "additionalProperties is intentionally true. Terms drawn from namespaces declared in the entry's @context (e.g. okf:taxonomy) are valid and become filter dimensions. Constraining this to false would defeat the namespace extension mechanism."
+    },
+    "ArdEntry": {
+      "description": "A complete ARD entry, as published. Requires the discovery-critical terms and exactly one of url/data.",
+      "allOf": [{ "$ref": "#/$defs/EntryFields" }],
+      "required": ["identifier", "displayName", "type"],
+      "oneOf": [
+        {
+          "required": ["url"],
+          "not": { "required": ["data"] }
+        },
+        {
+          "required": ["data"],
+          "not": { "required": ["url"] }
+        }
+      ]
+    },
+    "ArdManifest": {
+      "type": "object",
+      "description": "The document published at /.well-known/ard.json (or any entry source). ARD requires only an `entries` array of ARD entries; any other top-level members are transport-defined and ignored by ARD, so additionalProperties is open.",
+      "required": ["entries"],
+      "properties": {
+        "entries": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/ArdEntry" }
+        }
+      },
+      "additionalProperties": true
+    },
+    "TrustManifest": {
+      "type": "object",
+      "description": "Identity, compliance, and provenance envelope. ARD requires only `identity` (for publisher-authority binding) and does not constrain the internal schema; validation is intentionally permissive (additionalProperties: true) so a trust manifest defined by any framework is structurally valid, including members ARD does not enumerate such as trustSchema. This does not mean consumers ignore it: a federated registry is expected to inspect the manifest and verify it per the framework named in trustSchema (attestations, provenance, signature). Signing and verification procedures are defined by that framework, not by ARD.",
+      "required": ["identity"],
+      "properties": {
+        "identity": {
+          "type": "string",
+          "description": "Globally unique cryptographic workload identifier (SPIFFE ID, DID, or HTTPS FQDN URI). Its trust domain MUST align with the <publisher> segment of the entry's identifier."
+        },
+        "identityType": {
+          "type": "string",
+          "description": "Hint for the cryptographic format of the identity (e.g. spiffe, did, https)."
+        },
+        "trustSchema": {
+          "type": "object",
+          "description": "The trust framework the manifest conforms to, and the source of its verification procedure.",
+          "properties": {
+            "identifier": { "type": "string" },
+            "version": { "type": "string" },
+            "governanceUri": { "type": "string", "format": "uri" },
+            "verificationMethods": { "type": "array", "items": { "type": "string" } }
+          },
+          "additionalProperties": true
+        },
+        "attestations": {
+          "type": "array",
+          "description": "Verifiable claims (e.g., organizational compliance audits, artifact security scans, build provenance, transparency-log receipts, or runtime evaluations).",
+          "items": {
+            "type": "object",
+            "required": ["type", "uri"],
+            "properties": {
+              "type": { "type": "string" },
+              "uri": { "type": "string", "format": "uri" },
+              "mediaType": { "type": "string" },
+              "digest": { "type": "string" }
+            },
+            "additionalProperties": true
+          }
+        },
+        "provenance": {
+          "type": "array",
+          "description": "Lineage trail of the artifact.",
+          "items": {
+            "type": "object",
+            "required": ["relation", "sourceId"],
+            "properties": {
+              "relation": { "type": "string" },
+              "sourceId": { "type": "string" },
+              "sourceDigest": { "type": "string" }
+            },
+            "additionalProperties": true
+          }
+        },
+        "signature": {
+          "type": "string",
+          "description": "Detached signature over the trust manifest content, per the framework named in trustSchema."
+        }
+      },
+      "additionalProperties": true
+    }
+  }
+}

package/tsconfig.json

@@ -18,9 +18,7 @@
     "build/**/*.js",
     "types.js",
     "./types/**/*.d.ts",
-    "eslint-local-rules.cjs",
     "third-party/axe/valid-langs.js",
-    "third-party/esbuild-plugins-polyfills/esbuild-polyfills.js",
     "third-party/ard/**/*.js",
 
     "core/test/results/sample_v2.json",

package/types/artifacts.d.ts

@@ -12,7 +12,7 @@ import { parseManifest } from '../core/lib/manifest-parser.js';
 import { LighthouseError } from '../core/lib/lh-error.js';
 import { NetworkRequest as _NetworkRequest } from '../core/lib/network-request.js';
 import speedline from 'speedline-core';
-import * as CDTSourceMap from '../core/lib/cdt/generated/SourceMap.js';
+import CDTSourceMap from '../core/lib/cdt/generated/SourceMap.js';
 import { ArbitraryEqualityMap } from '../core/lib/arbitrary-equality-map.js';
 import type { TaskNode as _TaskNode } from '../core/lib/tracehouse/main-thread-tasks.js';
 import AuditDetails from './lhr/audit-details.js'
@@ -124,9 +124,9 @@ export interface GathererArtifacts extends PublicGathererArtifacts {
   InspectorIssues: Artifacts.InspectorIssues;
   /** The status and tools registered via WebMCP. */
   WebMCP: {isSupported: boolean, tools: Artifacts.WebMCPTool[]};
-  /** 
-   * The WebMCP schema validation issues. 
-   * TODO: fold this into the WebMCP artifact. 
+  /**
+   * The WebMCP schema validation issues.
+   * TODO: fold this into the WebMCP artifact.
    */
   WebMcpSchemaIssues: Artifacts.WebMcpSchemaIssue[];
   /** JS coverage information for code used during audit. Keyed by script id. */
@@ -138,18 +138,38 @@ export interface GathererArtifacts extends PublicGathererArtifacts {
   RobotsTxt: { status: number | null, content: string | null, errorMessage?: string };
   /** Information on fetching and the content of the /llm.txt file. */
   LlmsTxt: { status: number | null, content: string | null, errorMessage?: string };
-  /** Information on fetching and the content of the /ai-catalog.json manifest file. */
+  /** Information on discovering, fetching, and the content of the Agentic Resource Discovery (ARD) manifest. */
   AgentResourceDiscovery: {
     status: number | null;
     content: string | null;
     headers: Record<string, string> | null;
-    catalogUrl: string | null;
+    /** The loaded manifest URL, or if none loaded, the first failed advertised URL (or `/.well-known/ard.json`). */
+    catalogUrl: string;
+    /** The discovery mechanism `catalogUrl` came from. `legacy*` sources are ARD's predecessor (`ai-catalog`) names. */
+    discoverySource: Artifacts.ArdDiscoverySource;
     discoverySignals: {
       robotsTxtAgentmap: string | null;
+      /** `<link rel="ard">` */
       htmlLink: string | null;
+      /** `Link: <...>; rel="ard"` */
       httpHeaderLink: string | null;
+      /** `<link rel="ai-catalog">` */
+      legacyHtmlLink: string | null;
+      /** `Link: <...>; rel="ai-catalog"` */
+      legacyHttpHeaderLink: string | null;
+      /** `/.well-known/ard.json` */
       wellKnown: string;
+      /** `/.well-known/ai-catalog.json` */
+      legacyWellKnown: string;
     };
+    /** Advertised locations (not the probed well-known paths) that were tried and failed to load, in discovery order. */
+    failedSources: Array<{
+      source: Artifacts.ArdDiscoverySource;
+      url: string;
+      status: number | null;
+      /** Set when the fetch itself failed (e.g. a timeout) rather than returning an HTTP error. */
+      errorMessage?: string;
+    }>;
     errorMessage?: string;
   };
   /** Source maps of scripts executed in the page. */
@@ -165,6 +185,10 @@ export interface GathererArtifacts extends PublicGathererArtifacts {
 }
 
 declare namespace Artifacts {
+  /** Agentic Resource Discovery (ARD) manifest locations. `legacy*` sources are ARD's predecessor (`ai-catalog`) names. */
+  type ArdDiscoverySource = 'robotsTxtAgentmap' | 'htmlLink' | 'httpHeaderLink' | 'wellKnown' |
+    'legacyHtmlLink' | 'legacyHttpHeaderLink' | 'legacyWellKnown';
+
   interface WebMcpSchemaIssue {
     errorType: string;
     violatingNodeId?: number;
@@ -543,7 +567,12 @@ declare namespace Artifacts {
 
   type LanternMetric = Lantern.Metrics.MetricResult<Artifacts.NetworkRequest>;
 
-  type Speedline = speedline.Output<'speedIndex'>;
+  type Speedline = Omit<speedline.Output<'speedIndex'>, 'frames'> & {
+    frames: Array<Pick<
+      speedline.Output<'speedIndex'>['frames'][number],
+      'getImage' | 'getTimeStamp' | 'isProgressInterpolated'
+    >>;
+  };
 
   interface TraceTimes {
     timeOrigin: number;
@@ -902,6 +931,13 @@ export interface TraceEvent {
       protocol?: string;
       finishTime?: number;
       headers?: Array<{ name: string, value: string }>;
+      scriptId?: number;
+      sourceText?: string;
+      isolate?: number | string;
+      executionContextId?: number;
+      sourceUrl?: string;
+      splitIndex?: number;
+      splitCount?: number;
     };
     frame?: string;
     name?: string;

package/types/config.d.ts

@@ -6,7 +6,7 @@
  */
 
 import {Audit} from '../core/audits/audit.js';
-import {SharedFlagsSettings, ConfigSettings} from './lhr/settings.js';
+import {SharedFlagsSettings, ConfigSettings, Locale} from './lhr/settings.js';
 import Gatherer from './gatherer.js';
 import {IcuMessage} from './lhr/i18n.js';
 import Result from './lhr/lhr.js';
@@ -26,6 +26,7 @@ interface Config {
   categories?: Record<string, Config.CategoryJson> | null;
   groups?: Record<string, Config.GroupJson> | null;
   plugins?: Array<string>;
+  locales?: Partial<Record<Locale, Record<string, {message: string}>>> | null;
 }
 
 declare namespace Config {
@@ -43,6 +44,7 @@ declare namespace Config {
   interface ArtifactJson {
     id: string;
     gatherer: GathererJson;
+    alwaysGather?: boolean;
   }
 
   type GathererJson = {
@@ -94,6 +96,7 @@ declare namespace Config {
     dependencies?: TDependencies extends Gatherer.DefaultDependenciesKey ?
       undefined :
       Record<Exclude<TDependencies, Gatherer.DefaultDependenciesKey>, {id: string}>;
+    alwaysGather?: boolean;
   }
 
   type ArtifactDefnExpander<TDependencies extends Gatherer.DependencyKey> =
@@ -136,6 +139,8 @@ declare namespace Config {
     category: Config.Category;
     /** Optionally provide more groups in addition to those specified by the base config. */
     groups?: Record<string, Config.GroupJson>;
+    /** Optionally provide locale messages for translating plugin strings. */
+    locales?: Partial<Record<Locale, Record<string, {message: string}>>>;
   }
 
   type Merge = {

package/types/externs.d.ts

@@ -57,6 +57,10 @@ export interface CliFlags extends Flags {
   precomputedLanternDataPath?: string;
   /** Path to the file where precomputed lantern data should be written to. */
   lanternDataOutputPath?: string;
+  /** Path to a file containing newline-delimited URLs to audit. */
+  urlFile?: string[];
+  /** Flag to stop auditing remaining URLs immediately if a run fails. */
+  failFast?: boolean;
 
   // The following are given defaults in cli-flags, so are not optional like in Flags or SharedFlagsSettings.
   output: OutputMode[];

package/types/internal/test.d.ts

@@ -29,6 +29,7 @@ declare module 'expect' {
      */
     // tslint:disable-next-line: no-unnecessary-generics
     toMatchInlineSnapshot<U extends { [P in keyof T]: any }>(propertyMatchers: Partial<U>, snapshot?: string): R;
+    toMatchInlineSnapshot(snapshot?: string): R;
 
     // The following are custom matchers defined in expect-setup.js
 

package/build-tracker.config.js

@@ -1,16 +0,0 @@
-// https://buildtracker.dev/docs/installation/#upload-your-builds
-
-
-module.exports = {
-  applicationUrl: 'https://lh-build-tracker.herokuapp.com',
-  artifacts: [
-    'dist/lightrider/lighthouse-lr-bundle.js',
-    'dist/extension/scripts/lighthouse-ext-bundle.js',
-    'dist/devtools/lighthouse-dt-bundle.js',
-    'dist/gh-pages/viewer/src/bundled.js',
-    'dist/gh-pages/treemap/src/bundled.js',
-    'dist/lightrider/report-generator-bundle.js',
-    'dist/dt-report-resources/report.js',
-    'dist/dt-report-resources/report-generator.js',
-  ],
-};

package/core/lib/cdt/package.json

@@ -1,4 +0,0 @@
-{
-  "type": "commonjs",
-  "//": "Temporary file until made esm"
-}

package/eslint-local-rules.d.cts

@@ -1,9 +0,0 @@
-declare namespace _exports {
-    export { RuleModule };
-}
-declare const _exports: {
-    'require-file-extension': import("eslint").Rule.RuleModule;
-};
-export = _exports;
-type RuleModule = import("eslint").Rule.RuleModule;
-//# sourceMappingURL=eslint-local-rules.d.cts.map

package/eslint.config.mjs

@@ -1,242 +0,0 @@
-import path from 'node:path';
-import {fileURLToPath} from 'node:url';
-
-import localRules from 'eslint-plugin-local-rules';
-import _import from 'eslint-plugin-import';
-import {fixupPluginRules} from '@eslint/compat';
-import globals from 'globals';
-import tsParser from '@typescript-eslint/parser';
-import js from '@eslint/js';
-import {FlatCompat} from '@eslint/eslintrc';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const compat = new FlatCompat({
-  baseDirectory: __dirname,
-  recommendedConfig: js.configs.recommended,
-  allConfig: js.configs.all,
-});
-
-// See https://eslint.org/docs/latest/use/configure/configuration-files
-export default [{
-  files: [
-    '**/*.cjs',
-    '**/*.js',
-    '**/*.mjs',
-    '**/*.ts',
-    '**/*.tsx',
-  ],
-}, {
-  // Global ignores.
-  ignores: [
-    '.cz-config.js',
-    '**/.tmp',
-    '**/*.d.cts', // ignore d.ts files until we can properly lint them
-    '**/*.d.ts',
-    '**/dist',
-    '**/fixtures/**',
-    '**/node_modules/**',
-    '**/source-maps/**',
-    '**/third_party/**',
-    '**/third-party/**',
-    'build/test/page-functions-test-case*out*.js',
-    'core/scripts/legacy-javascript/variants/**',
-    'coverage/**',
-  ],
-}, ...compat.extends('eslint:recommended', 'google'), {
-  plugins: {
-    'local-rules': localRules,
-    'import': fixupPluginRules(_import),
-  },
-
-  languageOptions: {
-    globals: {
-      ...globals.node,
-    },
-
-    parser: tsParser,
-    ecmaVersion: 2020,
-    sourceType: 'module',
-
-    parserOptions: {
-      ecmaFeatures: {
-        globalReturn: true,
-        jsx: false,
-      },
-    },
-  },
-
-  rules: {
-    'import/order': [2, {
-      'groups': ['builtin', 'external', ['sibling', 'parent'], 'index', 'object', 'type'],
-      'newlines-between': 'always',
-    }],
-
-    'import/group-exports': 2,
-    'import/exports-last': 2,
-    'eqeqeq': 2,
-    'no-console': 2,
-
-    'indent': [2, 2, {
-      SwitchCase: 1,
-      VariableDeclarator: 2,
-
-      CallExpression: {
-        arguments: 'off',
-      },
-
-      MemberExpression: 'off',
-
-      FunctionExpression: {
-        body: 1,
-        parameters: 2,
-      },
-
-      ignoredNodes: [
-        'ConditionalExpression > :matches(.consequent, .alternate)',
-        'VariableDeclarator > ArrowFunctionExpression > :expression.body',
-        'CallExpression > ArrowFunctionExpression > :expression.body',
-      ],
-    }],
-
-    'no-floating-decimal': 2,
-
-    'max-len': [2, 100, {
-      ignorePattern: 'readJson\\(|^import ',
-      ignoreComments: true,
-      ignoreUrls: true,
-      tabWidth: 2,
-    }],
-
-    'no-empty': [2, {
-      allowEmptyCatch: true,
-    }],
-
-    'no-implicit-coercion': [2, {
-      boolean: false,
-      number: true,
-      string: true,
-    }],
-
-    'no-unused-expressions': [2, {
-      allowShortCircuit: true,
-      allowTernary: false,
-    }],
-
-    'no-unused-vars': [2, {
-      vars: 'all',
-      args: 'after-used',
-      caughtErrors: 'none', // TODO: remove for new "all" default.
-      argsIgnorePattern: '(^reject$|^_+$)',
-      varsIgnorePattern: '(^_$|^LH$|^Lantern$|^TraceEngine$|^Protocol$)',
-    }],
-
-    'no-cond-assign': 2,
-    'space-infix-ops': 2,
-    'strict': [2, 'global'],
-    'prefer-const': 2,
-    'curly': [2, 'multi-line'],
-
-    'comma-dangle': [2, {
-      arrays: 'always-multiline',
-      objects: 'always-multiline',
-      imports: 'always-multiline',
-      exports: 'always-multiline',
-      functions: 'never',
-    }],
-
-    'operator-linebreak': ['error', 'after', {
-      overrides: {
-        '?': 'ignore',
-        ':': 'ignore',
-      },
-    }],
-
-    'local-rules/require-file-extension': 2,
-    'require-jsdoc': 0,
-    'valid-jsdoc': 0,
-    'arrow-parens': 0,
-  },
-}, {
-  files: ['cli/test/smokehouse/test-definitions/**'],
-
-  rules: {
-    'max-len': 0,
-  },
-}, {
-  files: [
-    '**/build/**',
-    '**/scripts/**',
-    '**/test/**',
-  ],
-
-  rules: {
-    'no-console': 0,
-  },
-}, {
-  files: [
-    'docs/recipes/auth/**',
-  ],
-
-  rules: {
-    'new-cap': 0,
-    'no-console': 0,
-    'no-unused-vars': 0,
-  },
-}, {
-  files: [
-    '**/test/**',
-    'docs/recipes/**',
-  ],
-
-  languageOptions: {
-    globals: {
-      ...globals.jest,
-      ...globals.mocha,
-    },
-  },
-}, {
-  files: [
-    'clients/**',
-    'core/gather/gatherers/**',
-    'docs/recipes/auth/**',
-    'flow-report/**',
-    'report/**',
-    'treemap/**',
-    'viewer/**',
-  ],
-  ignores: [
-    'report/generator/**',
-    'report/test/generator/**',
-  ],
-
-  languageOptions: {
-    globals: {
-      ...globals.browser,
-    },
-  },
-}, {
-  files: [
-    'clients/**',
-  ],
-
-  languageOptions: {
-    globals: {
-      chrome: true,
-      __lighthouse: true,
-    },
-  },
-}, {
-  files: ['flow-report/**'],
-
-  languageOptions: {
-    globals: {
-      ...globals.browser,
-      ...globals.node,
-    },
-  },
-
-  rules: {
-    'no-undef': 'off',
-  },
-}];