What a viewer-embedded host offers. network is true: the viewer DOES
attempt network.fetch (subject to the browser's own CORS enforcement —
a blocked request surfaces as an explicit CORS error, not an empty
success; see HttpRequest's node doc and runner.ts). secrets is
always empty: the browser has no process.env and must never persist a
secret, so a graph that references one shows unavailable before it
runs rather than failing mid-run (#5167 phase 3.5).
What a viewer-embedded host offers.
networkistrue: the viewer DOES attemptnetwork.fetch(subject to the browser's own CORS enforcement — a blocked request surfaces as an explicit CORS error, not an empty success; seeHttpRequest's node doc andrunner.ts).secretsis always empty: the browser has noprocess.envand must never persist a secret, so a graph that references one showsunavailablebefore it runs rather than failing mid-run (#5167 phase 3.5).