@newrelic/browser-agent 1.312.1-rc.5 → 1.312.1-rc.7

package/dist/cjs/common/constants/env.cdn.js

@@ -17,7 +17,7 @@ exports.VERSION = exports.RRWEB_VERSION = exports.RRWEB_PACKAGE_NAME = exports.D
 /**
  * Exposes the version of the agent
  */
-const VERSION = exports.VERSION = "1.312.1-rc.5";
+const VERSION = exports.VERSION = "1.312.1-rc.7";
 
 /**
  * Exposes the build type of the agent

package/dist/cjs/common/constants/env.npm.js

@@ -17,7 +17,7 @@ exports.VERSION = exports.RRWEB_VERSION = exports.RRWEB_PACKAGE_NAME = exports.D
 /**
  * Exposes the version of the agent
  */
-const VERSION = exports.VERSION = "1.312.1-rc.5";
+const VERSION = exports.VERSION = "1.312.1-rc.7";
 
 /**
  * Exposes the build type of the agent

package/dist/cjs/common/v2/script-correlation.js

@@ -0,0 +1,50 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ScriptCorrelation = void 0;
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Represents script correlation data combining DOM and Performance API information
+ */
+class ScriptCorrelation {
+  /** @type {CorrelationTiming} [dom] - DOM-related information */
+  dom = new CorrelationTiming();
+  /** @type {CorrelationTiming} [performance] - Performance-related information */
+  performance = new CorrelationTiming();
+
+  /**
+   * Creates a new ScriptCorrelation instance
+   * @param {string} url - The cleaned URL of the script
+   */
+  constructor(url) {
+    /** @type {string} The cleaned URL of the script */
+    this.url = url;
+  }
+
+  /**
+   * Gets the script timing, using DOM timings if available, otherwise falling back to performance timings or registeredAt as appropriate. This is used to provide the most accurate script timing possible for registered entities.
+   * @returns {{start: number, end: number}
+   */
+  get script() {
+    const start = Math.max(this.dom.start, this.performance.end);
+    const end = Math.max(this.dom.end, this.performance.end, start);
+    return {
+      start,
+      end
+    };
+  }
+}
+exports.ScriptCorrelation = ScriptCorrelation;
+class CorrelationTiming {
+  /** @type {number} [start] - The startTime from the performance entry */
+  start = 0;
+  /** @type {number} [end] - The responseEnd from the performance entry */
+  end = 0;
+  /** @type {*} [value] - The entry value */
+  value = undefined;
+}

package/dist/cjs/common/v2/script-tracker.js

@@ -0,0 +1,278 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.extractUrlsFromStack = extractUrlsFromStack;
+exports.findScriptTimings = findScriptTimings;
+exports.getDeepStackTrace = getDeepStackTrace;
+exports.thisFile = exports.scriptCorrelations = void 0;
+var _runtime = require("../constants/runtime");
+var _now = require("../timing/now");
+var _cleanUrl = require("../url/clean-url");
+var _browserStackMatchers = require("../util/browser-stack-matchers");
+var _scriptCorrelation = require("./script-correlation");
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+/**
+ * @typedef {import('./register-api-types').RegisterAPITimings} RegisterAPITimings
+ */
+
+/** export for testing purposes */
+let thisFile = exports.thisFile = void 0;
+try {
+  exports.thisFile = thisFile = extractUrlsFromStack(getDeepStackTrace())[0];
+} catch (err) {
+  exports.thisFile = thisFile = extractUrlsFromStack(err)[0];
+}
+
+/** @type {(entry: PerformanceEntry) => boolean} - A shared function to determine if a performance entry is a valid script or link resource for evaluation */
+const validEntryCriteria = entry => entry.initiatorType === 'script' || ['link', 'fetch'].includes(entry.initiatorType) && entry.name.endsWith('.js');
+
+/** @type {Map<string, ScriptCorrelation>} - Central registry for script correlations containing both DOM and Performance data */
+const scriptCorrelations = exports.scriptCorrelations = new Map();
+/** @type {Array<{ test: (entry: PerformanceEntry) => boolean, addedAt: number }>} an array of PerformanceObserver subscribers to check for late emissions */
+let poSubscribers = [];
+
+/**
+ * Retrieves a script correlation by URL using exact matching
+ * @param {string} targetUrl - The URL to find
+ * @returns {ScriptCorrelation | undefined} - The correlation object if found
+ */
+function findCorrelation(targetUrl) {
+  return scriptCorrelations.get(targetUrl);
+}
+
+/**
+ * Gets or creates a script correlation entry
+ * @param {string} url - The cleaned URL
+ * @returns {ScriptCorrelation} - The correlation object
+ */
+function getOrCreateCorrelation(url) {
+  const existing = findCorrelation(url);
+  if (existing) return existing;
+  const correlation = new _scriptCorrelation.ScriptCorrelation(url);
+  scriptCorrelations.set(url, correlation);
+
+  // Keep size under control
+  if (scriptCorrelations.size > 1000) {
+    const firstKey = scriptCorrelations.keys().next().value;
+    scriptCorrelations.delete(firstKey);
+  }
+  return correlation;
+}
+
+/** Set up a MutationObserver to detect script elements being added to the DOM */
+if (_runtime.globalScope.MutationObserver && _runtime.globalScope.document) {
+  const scriptMutationObserver = new MutationObserver(mutations => {
+    mutations.forEach(mutation => {
+      mutation.addedNodes.forEach(node => {
+        if (node.nodeName === 'SCRIPT' && node.src) {
+          const cleanedSrc = (0, _cleanUrl.cleanURL)(node.src);
+          const correlation = getOrCreateCorrelation(cleanedSrc);
+          correlation.dom.start = (0, _now.now)();
+          correlation.dom.value = node;
+          const setEnd = () => {
+            correlation.dom.end = (0, _now.now)();
+          };
+          ['load', 'error'].forEach(event => node.addEventListener(event, setEnd, {
+            once: true
+          }));
+        }
+      });
+    });
+  });
+  scriptMutationObserver.observe(_runtime.globalScope.document, {
+    childList: true,
+    subtree: true
+  });
+}
+if (_runtime.globalScope.PerformanceObserver?.supportedEntryTypes.includes('resource')) {
+  /** We must track the script assets this way, because the performance buffer can fill up and when it does that
+   * it stops accepting new entries (instead of dropping old entries), which means if the register API is called
+   * after the buffer fills up we won't be able to get the script timing information from the resource timing API
+  */
+  const scriptObserver = new PerformanceObserver(list => {
+    list.getEntries().filter(validEntryCriteria).forEach(entry => {
+      // Update correlation with performance data (creates entry if needed)
+      const entryUrl = (0, _cleanUrl.cleanURL)(entry.name);
+      const correlation = getOrCreateCorrelation(entryUrl);
+      correlation.performance.start = Math.floor(entry.startTime);
+      correlation.performance.end = Math.floor(entry.responseEnd);
+      correlation.performance.value = entry;
+
+      // Clear resolved or expired subscribers
+      const canClear = [];
+      poSubscribers.forEach(({
+        test,
+        addedAt
+      }, idx) => {
+        if (test(entry) || (0, _now.now)() - addedAt > 10000) canClear.push(idx);
+      });
+      poSubscribers = poSubscribers.filter((_, idx) => !canClear.includes(idx));
+    });
+  });
+  scriptObserver.observe({
+    type: 'resource',
+    buffered: true
+  });
+}
+
+/**
+ * Extracts URLs from stack traces using the same logic as compute-stack-trace.js
+ * @param {string} stack The error stack trace
+ * @returns {string[]} Array of cleaned URLs found in the stack trace
+ */
+function extractUrlsFromStack(stack) {
+  if (!stack || typeof stack !== 'string') return [];
+  const urls = new Set();
+  const lines = stack.split('\n');
+  for (const line of lines) {
+    // Try gecko format first, then chrome
+    const parts = line.match(_browserStackMatchers.gecko) || line.match(_browserStackMatchers.chrome) || line.match(_browserStackMatchers.chromeEval);
+    if (parts && parts[2]) {
+      urls.add((0, _cleanUrl.cleanURL)(parts[2]));
+    } else {
+      // Fallback: match URLs using a generic .js pattern (non-greedy to handle ports and query params)
+      const fallbackMatch = line.match(/\(([^)]+\.js):\d+:\d+\)/) || line.match(/^\s+at\s+([^\s(]+\.js):\d+:\d+/);
+      if (fallbackMatch && fallbackMatch[1]) {
+        urls.add((0, _cleanUrl.cleanURL)(fallbackMatch[1]));
+      }
+    }
+  }
+  return [...urls];
+}
+
+/**
+ * Returns a deep stack trace by temporarily increasing the stack trace limit.
+ * @returns {Error.stack | undefined}
+ */
+function getDeepStackTrace() {
+  let stack;
+  try {
+    const originalStackLimit = Error.stackTraceLimit;
+    Error.stackTraceLimit = 50;
+    stack = new Error().stack;
+    Error.stackTraceLimit = originalStackLimit;
+  } catch (e) {
+    stack = new Error().stack;
+  }
+  return stack;
+}
+
+/**
+ * Indicates whether the provided URL matches any script preload link tags in the document.
+ * @param {string} targetUrl The URL to match against preload tags
+ * @returns {boolean} True if a matching preload link is found, false otherwise
+ */
+function wasPreloaded(targetUrl) {
+  if (!targetUrl || !_runtime.globalScope.document) return false;
+  try {
+    const linkTags = _runtime.globalScope.document.querySelectorAll('link[rel="preload"][as="script"]');
+    for (const link of linkTags) {
+      // link.href is resolved to an absolute URL by the browser (even if supplied as relative), so we can match exactly against the cleaned target URL
+      if ((0, _cleanUrl.cleanURL)(link.href) === targetUrl) return true;
+    }
+  } catch (error) {
+    // Don't let DOM parsing errors break anything
+  }
+  return false;
+}
+
+/**
+ * Checks if a performance entry matches the target MFE script URL using exact matching
+ * @param {PerformanceResourceTiming} entry - The resource timing entry
+ * @param {string} targetUrl - The MFE script URL to match
+ * @returns {boolean} True if the entry matches
+ */
+function entryMatchesUrl(entry, targetUrl) {
+  const entryUrl = (0, _cleanUrl.cleanURL)(entry.name);
+  return entryUrl === targetUrl;
+}
+
+/**
+ * Applies performance entry timing data to a timings object
+ * @param {RegisterAPITimings} timings - The timings object to update
+ * @param {PerformanceResourceTiming} entry - The performance entry
+ */
+function applyPerformanceEntry(timings, entry) {
+  timings.fetchStart = Math.floor(entry.startTime);
+  timings.fetchEnd = Math.floor(entry.responseEnd);
+  timings.asset = entry.name;
+  timings.type = entry.initiatorType;
+}
+
+/**
+ * Uses the stack of the initiator function, returns script timing information if a script can be found with the resource timing API matching the URL found in the stack.
+ * @returns {RegisterAPITimings} Object containing script fetch start and end times, and the asset URL if found
+ */
+function findScriptTimings() {
+  const timings = {
+    registeredAt: (0, _now.now)(),
+    reportedAt: undefined,
+    fetchStart: 0,
+    fetchEnd: 0,
+    scriptStart: 0,
+    scriptEnd: 0,
+    asset: undefined,
+    type: 'unknown'
+  };
+  const stack = getDeepStackTrace();
+  if (!stack) return timings;
+  const navUrl = _runtime.globalScope.performance?.getEntriesByType('navigation')?.[0]?.name || '';
+  try {
+    const urls = extractUrlsFromStack(stack);
+    // Filter out agent file from URLs (unless it's the only one)
+    const mfeScriptUrl = (urls.length > 1 ? urls.filter(line => thisFile !== line) : urls)[0];
+    if (!mfeScriptUrl) return timings;
+
+    // Check for inline script
+    if (navUrl.includes(mfeScriptUrl)) {
+      timings.asset = (0, _cleanUrl.cleanURL)(navUrl);
+      timings.type = 'inline';
+      return timings;
+    }
+
+    // Get correlation data
+    timings.correlation = findCorrelation(mfeScriptUrl);
+
+    // Use correlation's performance entry if available, otherwise check live performance API
+    const performanceEntry = timings.correlation?.performance.value || performance.getEntriesByType('resource').find(e => entryMatchesUrl(e, mfeScriptUrl));
+    if (performanceEntry) {
+      applyPerformanceEntry(timings, performanceEntry);
+    } else if (wasPreloaded(mfeScriptUrl)) {
+      // Handle preloaded scripts that may report late
+      timings.asset = mfeScriptUrl;
+      timings.type = 'preload';
+
+      // Subscribe to late performance observer callbacks
+      poSubscribers.push({
+        addedAt: (0, _now.now)(),
+        test: entry => {
+          if (entryMatchesUrl(entry, mfeScriptUrl)) {
+            applyPerformanceEntry(timings, entry);
+            return true;
+          }
+          return false;
+        }
+      });
+    }
+
+    /*
+     * Use getters here because the correlation data may arrive after this function returns the timing object, and we want to provide the most up-to-date timing information possible when the getters are accessed at harvest time.
+     * The getters will fall back to fetchEnd if correlation data isn't available yet, which is our best approximation for script execution start when actual script timings can not be determined.
+    */
+    Object.defineProperty(timings, 'scriptStart', {
+      get: () => timings.correlation?.script.start || timings.fetchEnd
+    });
+    Object.defineProperty(timings, 'scriptEnd', {
+      get: () => timings.correlation?.script.end || timings.registeredAt
+    });
+  } catch (error) {
+    // Don't let stack parsing errors break anything
+  }
+  return timings;
+}

package/dist/cjs/common/wrap/wrap-fetch.js

@@ -7,7 +7,7 @@ exports.scopedEE = scopedEE;
 exports.wrapFetch = wrapFetch;
 var _contextualEe = require("../event-emitter/contextual-ee");
 var _runtime = require("../constants/runtime");
-var _v = require("../util/v2");
+var _utils = require("../v2/utils");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -79,7 +79,7 @@ function wrapFetch(sharedEE, agentRef) {
       target[name] = function () {
         var args = [...arguments];
         const ctx = {};
-        const targets = (0, _v.findTargetsFromStackTrace)(agentRef);
+        const targets = (0, _utils.findTargetsFromStackTrace)(agentRef);
 
         // we are wrapping args in an array so we can preserve the reference
         ee.emit(prefix + 'before-start', [args], ctx);

package/dist/cjs/common/wrap/wrap-function.js

@@ -8,7 +8,7 @@ exports.createWrapperWithEmitter = createWrapperWithEmitter;
 exports.flag = exports.default = void 0;
 var _contextualEe = require("../event-emitter/contextual-ee");
 var _bundleId = require("../ids/bundle-id");
-var _v = require("../util/v2");
+var _utils = require("../v2/utils");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -89,7 +89,7 @@ function createWrapperWithEmitter(emitter, always, agentRef) {
 
         // certain wrappers can inform the function wrapper to evaluate the stack of the executed wrapped function to find targets of the execution
         // (e.g. wrap-logger can inform this method to find try to find the MFE source of a console.log)
-        targets = evaluateStack ? (0, _v.findTargetsFromStackTrace)(agentRef) : [undefined]; // undefined target always maps to the container agent
+        targets = evaluateStack ? (0, _utils.findTargetsFromStackTrace)(agentRef) : [undefined]; // undefined target always maps to the container agent
 
         if (typeof getContext === 'function') {
           ctx = getContext(args, originalThis);

package/dist/cjs/common/wrap/wrap-xhr.js

@@ -11,7 +11,7 @@ var _eventListenerOpts = require("../event-listener/event-listener-opts");
 var _wrapFunction = require("./wrap-function");
 var _runtime = require("../constants/runtime");
 var _console = require("../util/console");
-var _v = require("../util/v2");
+var _utils = require("../v2/utils");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -55,7 +55,7 @@ function wrapXhr(sharedEE, agentRef) {
   function newXHR(opts) {
     const xhr = new OrigXHR(opts);
     const context = ee.context(xhr);
-    context.targets = (0, _v.findTargetsFromStackTrace)(agentRef);
+    context.targets = (0, _utils.findTargetsFromStackTrace)(agentRef);
     try {
       ee.emit('new-xhr', [xhr], context);
       xhr.addEventListener(READY_STATE_CHANGE, wrapXHR(context), (0, _eventListenerOpts.eventListenerOpts)(false));

package/dist/cjs/features/ajax/aggregate/index.js

@@ -14,7 +14,7 @@ var _aggregateBase = require("../../utils/aggregate-base");
 var _gql = require("./gql");
 var _belSerializer = require("../../../common/serialize/bel-serializer");
 var _nreum = require("../../../common/window/nreum");
-var _v = require("../../../common/util/v2");
+var _utils = require("../../../common/v2/utils");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -106,11 +106,11 @@ class Aggregate extends _aggregateBase.AggregateBase {
     if (target) {
       this.events.add({
         ...event,
-        targetAttributes: (0, _v.getVersion2Attributes)(target, this)
+        targetAttributes: (0, _utils.getVersion2Attributes)(target, this)
       });
-      if ((0, _v.shouldDuplicate)(target, this)) this.reportContainerEvent({
+      if ((0, _utils.shouldDuplicate)(target, this)) this.reportContainerEvent({
         ...event,
-        targetAttributes: (0, _v.getVersion2DuplicationAttributes)(target, this)
+        targetAttributes: (0, _utils.getVersion2DuplicationAttributes)(target, this)
       }, ctx);
     } else {
       this.reportContainerEvent(event, ctx);

package/dist/cjs/features/generic_events/aggregate/index.js

@@ -16,7 +16,7 @@ var _traverse = require("../../../common/util/traverse");
 var _userActionsAggregator = require("./user-actions/user-actions-aggregator");
 var _iframe = require("../../../common/dom/iframe");
 var _typeCheck = require("../../../common/util/type-check");
-var _v = require("../../../common/util/v2");
+var _utils = require("../../../common/v2/utils");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -270,6 +270,25 @@ class Aggregate extends _aggregateBase.AggregateBase {
           this.addEvent(event);
         }, this.featureName, this.ee);
       }
+      if (!agentRef.init.feature_flags.includes('no_spv')) {
+        (0, _registerHandler.registerHandler)('spv', evt => {
+          this.addEvent({
+            eventType: 'SecurityPolicyViolation',
+            timestamp: this.#toEpoch(evt.timeStamp),
+            blockedUri: evt.blockedURI,
+            documentUri: evt.documentURI,
+            effectiveDirective: evt.effectiveDirective,
+            originalPolicy: evt.originalPolicy,
+            sourceFile: evt.sourceFile,
+            statusCode: evt.statusCode,
+            lineNumber: evt.lineNumber,
+            columnNumber: evt.columnNumber,
+            disposition: evt.disposition,
+            sample: evt.sample,
+            referrer: evt.referrer
+          });
+        }, this.featureName, this.ee);
+      }
       this.drain();
     });
   }
@@ -305,7 +324,7 @@ class Aggregate extends _aggregateBase.AggregateBase {
       pageUrl: (0, _cleanUrl.cleanURL)('' + _runtime.initialLocation),
       currentUrl: (0, _cleanUrl.cleanURL)('' + location),
       /** Specific attributes only supplied if harvesting to endpoint version 2 */
-      ...(0, _v.getVersion2Attributes)(target, this)
+      ...(0, _utils.getVersion2Attributes)(target, this)
     };
     const eventAttributes = {
       /** Agent-level custom attributes */

package/dist/cjs/features/generic_events/instrument/index.js

@@ -31,9 +31,10 @@ class Instrument extends _instrumentBase.InstrumentBase {
   constructor(agentRef) {
     super(agentRef, _constants.FEATURE_NAME);
     const websocketsEnabled = agentRef.init.feature_flags.includes('websockets');
+    const securityPolicyViolationEnabled = !agentRef.init.feature_flags.includes('no_spv');
 
     /** config values that gate whether the generic events aggregator should be imported at all */
-    const genericEventSourceConfigs = [agentRef.init.page_action.enabled, agentRef.init.performance.capture_marks, agentRef.init.performance.capture_measures, agentRef.init.performance.resources.enabled, agentRef.init.user_actions.enabled, websocketsEnabled];
+    const genericEventSourceConfigs = [agentRef.init.page_action.enabled, agentRef.init.performance.capture_marks, agentRef.init.performance.capture_measures, agentRef.init.performance.resources.enabled, agentRef.init.user_actions.enabled, websocketsEnabled, securityPolicyViolationEnabled];
 
     /** feature specific APIs */
     (0, _addPageAction.setupAddPageActionAPI)(agentRef);
@@ -41,8 +42,24 @@ class Instrument extends _instrumentBase.InstrumentBase {
     (0, _finished.setupFinishedAPI)(agentRef);
     (0, _register.setupRegisterAPI)(agentRef);
     (0, _measure.setupMeasureAPI)(agentRef);
-    let historyEE, websocketsEE;
-    if (websocketsEnabled) websocketsEE = (0, _wrapWebsocket.wrapWebSocket)(this.ee);
+    this.removeOnAbort = new AbortController();
+    this.abortHandler = () => {
+      this.removeOnAbort.abort();
+      this.abortHandler = undefined; // weakly allow this abort op to run only once
+    };
+    let historyEE;
+    if (websocketsEnabled) {
+      // this can apply outside browser scope such as in worker
+      const websocketsEE = (0, _wrapWebsocket.wrapWebSocket)(this.ee);
+      websocketsEE.on('ws', nrData => {
+        (0, _handle.handle)('ws-complete', [nrData], undefined, this.featureName, this.ee);
+      });
+    }
+    if (securityPolicyViolationEnabled) {
+      _runtime.globalScope.addEventListener('securitypolicyviolation', evt => {
+        (0, _handle.handle)('spv', [evt], undefined, _features.FEATURE_NAMES.genericEvents, this.ee);
+      }, (0, _eventListenerOpts.eventListenerOpts)(false, this.removeOnAbort.signal));
+    }
     if (_runtime.isBrowserScope) {
       (0, _wrapFetch.wrapFetch)(this.ee, agentRef);
       (0, _wrapXhr.wrapXhr)(this.ee, agentRef);
@@ -61,7 +78,7 @@ class Instrument extends _instrumentBase.InstrumentBase {
         );
         _runtime.globalScope.addEventListener('error', () => {
           (0, _handle.handle)('uaErr', [], undefined, _features.FEATURE_NAMES.genericEvents, this.ee);
-        }, (0, _eventListenerOpts.eventListenerOpts)(false, this.removeOnAbort?.signal));
+        }, (0, _eventListenerOpts.eventListenerOpts)(false, this.removeOnAbort.signal));
         this.ee.on('open-xhr-start', (args, xhr) => {
           if (!isInternalTraffic(args[1])) {
             xhr.addEventListener('readystatechange', () => {
@@ -69,7 +86,7 @@ class Instrument extends _instrumentBase.InstrumentBase {
                 // HEADERS_RECEIVED
                 (0, _handle.handle)('uaXhr', [], undefined, _features.FEATURE_NAMES.genericEvents, this.ee);
               }
-            });
+            }, (0, _eventListenerOpts.eventListenerOpts)(undefined, this.removeOnAbort.signal));
           }
         });
         this.ee.on('fetch-start', fetchArguments => {
@@ -83,8 +100,8 @@ class Instrument extends _instrumentBase.InstrumentBase {
         }
         historyEE.on('pushState-end', navigationChange);
         historyEE.on('replaceState-end', navigationChange);
-        window.addEventListener('hashchange', navigationChange, (0, _eventListenerOpts.eventListenerOpts)(true, this.removeOnAbort?.signal));
-        window.addEventListener('popstate', navigationChange, (0, _eventListenerOpts.eventListenerOpts)(true, this.removeOnAbort?.signal));
+        window.addEventListener('hashchange', navigationChange, (0, _eventListenerOpts.eventListenerOpts)(true, this.removeOnAbort.signal));
+        window.addEventListener('popstate', navigationChange, (0, _eventListenerOpts.eventListenerOpts)(true, this.removeOnAbort.signal));
         function navigationChange() {
           historyEE.emit('navChange');
         }
@@ -101,20 +118,6 @@ class Instrument extends _instrumentBase.InstrumentBase {
         });
       }
     }
-    if (websocketsEnabled) {
-      // this can apply outside browser scope such as in worker
-      websocketsEE.on('ws', nrData => {
-        (0, _handle.handle)('ws-complete', [nrData], undefined, this.featureName, this.ee);
-      });
-    }
-    try {
-      this.removeOnAbort = new AbortController();
-    } catch (e) {}
-    this.abortHandler = () => {
-      this.removeOnAbort?.abort();
-      this.abortHandler = undefined; // weakly allow this abort op to run only once
-    };
-
     /** If any of the sources are active, import the aggregator. otherwise deregister */
     if (genericEventSourceConfigs.some(x => x)) this.importAggregator(agentRef, () => Promise.resolve().then(() => _interopRequireWildcard(require(/* webpackChunkName: "generic_events-aggregate" */'../aggregate'))));else this.deregisterDrain();
   }

package/dist/cjs/features/jserrors/aggregate/index.js

@@ -18,7 +18,7 @@ var _aggregateBase = require("../../utils/aggregate-base");
 var _now = require("../../../common/timing/now");
 var _traverse = require("../../../common/util/traverse");
 var _internalErrors = require("./internal-errors");
-var _v = require("../../../common/util/v2");
+var _utils = require("../../../common/v2/utils");
 var _causeString = require("./cause-string");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
@@ -200,7 +200,7 @@ class Aggregate extends _aggregateBase.AggregateBase {
     let [type, bucketHash, params, newMetrics, localAttrs, target] = errorInfoArr;
     const allCustomAttrs = {
       /** MFE specific attributes if in "multiple" mode (ie consumer version 2) */
-      ...(0, _v.getVersion2Attributes)(target, this)
+      ...(0, _utils.getVersion2Attributes)(target, this)
     };
     Object.entries(this.agentRef.info.jsAttributes).forEach(([k, v]) => setCustom(k, v));
     Object.entries(softNavCustomAttrs).forEach(([k, v]) => setCustom(k, v)); // when an ixn finishes, it'll pass attrs specific to the ixn; if no associated ixn, this defaults to empty

package/dist/cjs/features/logging/aggregate/index.js

@@ -15,7 +15,7 @@ var _traverse = require("../../../common/util/traverse");
 var _constants2 = require("../../../common/session/constants");
 var _constants3 = require("../../session_replay/constants");
 var _featureGates = require("../../utils/feature-gates");
-var _v = require("../../../common/util/v2");
+var _utils2 = require("../../../common/v2/utils");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -106,11 +106,11 @@ class Aggregate extends _aggregateBase.AggregateBase {
     };
     addEvent({
       ...attributes,
-      ...(0, _v.getVersion2Attributes)(target, this)
+      ...(0, _utils2.getVersion2Attributes)(target, this)
     });
-    if ((0, _v.shouldDuplicate)(target, this)) addEvent({
+    if ((0, _utils2.shouldDuplicate)(target, this)) addEvent({
       ...attributes,
-      ...(0, _v.getVersion2DuplicationAttributes)(target, this)
+      ...(0, _utils2.getVersion2DuplicationAttributes)(target, this)
     });
   }
   serializer(eventBuffer) {

package/dist/cjs/features/metrics/instrument/index.js

@@ -4,23 +4,16 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.Metrics = exports.Instrument = void 0;
-var _runtime = require("../../../common/constants/runtime");
-var _handle = require("../../../common/event-emitter/handle");
 var _instrumentBase = require("../../utils/instrument-base");
 var _constants = require("../constants");
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); } /**
- * Copyright 2020-2025 New Relic, Inc. All rights reserved.
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
 class Instrument extends _instrumentBase.InstrumentBase {
   static featureName = _constants.FEATURE_NAME;
   constructor(agentRef) {
     super(agentRef, _constants.FEATURE_NAME);
-    if (_runtime.isBrowserScope) {
-      document.addEventListener('securitypolicyviolation', e => {
-        (0, _handle.handle)(_constants.SUPPORTABILITY_METRIC_CHANNEL, ['Generic/CSPViolation/Detected'], undefined, this.featureName, this.ee);
-      });
-    }
     this.importAggregator(agentRef, () => Promise.resolve().then(() => _interopRequireWildcard(require(/* webpackChunkName: "metrics-aggregate" */'../aggregate'))));
   }
 }

package/dist/cjs/loaders/api/register-api-types.js

@@ -46,9 +46,11 @@ exports.default = void 0;
  * @typedef {Object} RegisterAPITimings
  * @property {number} registeredAt - The timestamp when the registered entity was created.
  * @property {number} [reportedAt] - The timestamp when the registered entity was deregistered.
- * @property {number} fetchStart - The timestamp when the registered entity began fetching.
- * @property {number} fetchEnd - The timestamp when the registered entity finished fetching.
+ * @property {number} fetchStart - The timestamp when the registered entity began fetching (performance.start).
+ * @property {number} fetchEnd - The timestamp when the registered entity finished fetching (performance.end).
+ * @property {number} scriptStart - The timestamp when script initialization began (max of dom.start or performance.end, or performance.end if no dom.start).
+ * @property {number} scriptEnd - The timestamp when script loading completed (dom.end or registeredAt if no dom.end).
  * @property {Object} [asset] - The asset path (if found) for the registered entity.
- * @property {string} type - The type of timing associated with the registered entity, 'script' or 'link' if found with the performance resource API, 'inline' if found to be associated with the root document URL, or 'unknown' if no associated resource could be found.
+ * @property {string} type - The type of timing associated with the registered entity, 'script' or 'link' if found with the performance resource API, 'fetch' for dynamic imports, 'inline' if found to be associated with the root document URL, or 'unknown' if no associated resource could be found.
  */
 var _default = exports.default = {};