diff --git a/frontend.go b/frontend.go
index 5ba1f59..6aec982 100644
--- a/frontend.go
+++ b/frontend.go
@@ -45,6 +45,10 @@ var allowedFrontendFiles = map[string]bool{
 	// with `for await` — generated Connect Query hooks are unary-only and
 	// cannot express a streaming turn.
 	"components/site-agent/use-site-agent-stream.ts": true,
+	// InfrastructureService.RenewCertificate is a Connect server-streaming RPC;
+	// Connect Query omits server-streaming methods, so the networking terminal
+	// must consume the generated client's AsyncIterable directly.
+	"routes/dashboard/admin/infrastructure/$nodeId/networking.tsx": true,
 
 	// Registry browse/detail call the ORCHESTRATOR's public Connect endpoints
 	// (PluginRegistryService/PluginReviewService) on a different origin. The