@newrelic/browser-agent 1.319.0 → 1.320.0

package/dist/esm/loaders/configure/iframe-message-handler.js

@@ -0,0 +1,263 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { warn } from '../../common/util/console';
+import { getRegisteredEntityByIframeInterfaceId } from '../../common/v2/utils';
+import { IFRAME_TIMING_UPDATE, IFRAME_API, IFRAME_API_RESPONSE, IFRAME_VITALS_UPDATE, IFRAME_AJAX } from '../../common/constants/iframe-constants';
+import { REGISTER } from '../api/constants';
+import { handle } from '../../common/event-emitter/handle';
+import { FEATURE_NAMES } from '../features/features';
+import { stringify } from '../../common/util/stringify';
+import { registerHandler } from '../../common/event-emitter/register-handler';
+import { drain } from '../../common/drain/drain';
+import { isBrowserScope } from '../../common/constants/runtime';
+
+/**
+ * Retrieves the registered entity associated with the iframeInterfaceId from the event data, and validates that the origin of the message event matches the expected origin for that entity.
+ * @param {MessageEvent} event - The message event containing the method call or registration request
+ * @param {Object} agent - The browser agent instance
+ * @returns {Object|undefined} - The registered entity if it exists and the origin is valid, otherwise undefined
+ */
+function getValidEntity(event, agent) {
+  try {
+    const {
+      iframeInterfaceId
+    } = event.data;
+    if (!iframeInterfaceId) return;
+    const entity = getRegisteredEntityByIframeInterfaceId(iframeInterfaceId, agent);
+    if (!isValidOrigin(event, entity)) return;
+    return entity;
+  } catch (e) {
+    // couldnt get entity or validate origin, just let the method return undefined
+  }
+}
+function isSafeProperty(obj, property) {
+  return property in obj && typeof property === 'string' && !['__proto__', 'constructor', 'prototype'].includes(property);
+}
+
+/**
+ * Handles timing property updates from iframes. Mutates the timings object on the entity's metadata with the new value for the specified property.
+ * @param {MessageEvent} event - The message event containing the timing update
+ * @param {Object} agent - The browser agent instance
+ * @returns
+ */
+function handleTimingUpdate(event, agent) {
+  const entity = getValidEntity(event, agent);
+  if (!entity) return;
+  if (!entity.metadata.timings) return;
+  event.data.entries?.forEach(({
+    property,
+    value
+  }) => {
+    if (isSafeProperty(entity.metadata.timings, property)) {
+      entity.metadata.timings[property] = value;
+    }
+  });
+}
+
+/**
+ * Handles vitals property updates from iframes. Mutates the vitals object on the entity's metadata with the new value for the specified property.
+ * @param {MessageEvent} event - The message event containing the vitals update
+ * @param {Object} agent - The browser agent instance
+ * @returns
+ */
+function handleVitalsUpdate(event, agent) {
+  const entity = getValidEntity(event, agent);
+  if (!entity) return;
+  if (!entity.metadata?.vitals) return;
+  event.data.entries?.forEach(({
+    property,
+    value
+  }) => {
+    if (isSafeProperty(entity.metadata.vitals, property) && (!!Number(value) || value === 0)) {
+      entity.metadata.vitals[property].value = value;
+    }
+  });
+}
+
+/**
+ * Handles ajax events from iframes and forwards them to the agent's event emitter
+ * @param {MessageEvent} event  - The message event containing the method call or registration request
+ * @param {Object} agent - The browser agent instance
+ * @returns
+ */
+function handleAjax(event, agent) {
+  const entity = getValidEntity(event, agent);
+  if (!entity) return;
+  const {
+    entries
+  } = event.data;
+  entries?.forEach(({
+    params,
+    metrics,
+    start,
+    end,
+    initiatorType
+  }) => {
+    handle('xhr', [params, metrics, start, end, initiatorType, entity.metadata.target], undefined, FEATURE_NAMES.ajax, agent.ee);
+  });
+}
+
+/**
+ * Validates that the origin of the message event matches the expected origin for the registered entity
+ * @param {MessageEvent} event - The message event containing the method call or registration request
+ * @param {Object} entity - The registered entity associated with the iframeInterfaceId from the event data
+ * @returns {boolean}
+ */
+function isValidOrigin(event, entity) {
+  if (!entity) return false;
+  try {
+    // "null" is the literal serialization the spec uses for every opaque origin (sandboxed iframes
+    // without allow-same-origin, data:/javascript: URLs, etc.) -- it does not uniquely identify a
+    // single origin, so treating two "null" origins as a match would let an unrelated opaque-origin
+    // frame impersonate the one that actually registered.
+    if (event.origin === 'null' || entity.metadata.target.iframeOrigin === 'null') return false;
+    return event.origin === entity.metadata.target.iframeOrigin;
+  } catch (e) {
+    warn(77, e);
+    return false;
+  }
+}
+
+/**
+ * Handles both entity registration and method calls on existing entities
+ * @async
+ * @param {MessageEvent} event - The message event containing the method call or registration request
+ * @param {Object} agent - The browser agent instance
+ * @returns {Promise<{entity: Object|null, result: any}>}
+ */
+export async function handleMethodCall(event, agent) {
+  const {
+    target,
+    iframeInterfaceId,
+    timestamp
+  } = event.data;
+  // Method calls are always sent one-at-a-time (each has its own postMessage response), so only
+  // the first entry is ever populated -- but the payload shape stays consistent with every other
+  // iframe message type (timing/vitals/ajax), which all wrap their data in an `entries` array.
+  const [{
+    method,
+    args
+  } = {}] = event.data.entries || [];
+  const output = {
+    entity: null,
+    result: null
+  };
+  // Registration of a new entity needs to be handled differently than method calls on existing entities
+  if (method === REGISTER) {
+    // "null" is the opaque-origin serialization (sandboxed iframes, data:/javascript: URLs) -- it
+    // doesn't identify a single origin, so an entity registered from one can never be safely
+    // distinguished from another later on (see isValidOrigin). Reject up front rather than
+    // registering an entity that would silently fail every subsequent call.
+    if (event.origin === 'null') {
+      warn(74, event.origin);
+      return output;
+    }
+    const iframeDomains = agent.init.api.register.iframe_domains;
+    if (iframeDomains.length && !iframeDomains.includes(event.origin)) {
+      warn(74, event.origin);
+      return output;
+    }
+    const targetData = args?.[0] || target || {};
+    if (!agent[REGISTER]) {
+      warn(35, REGISTER);
+      return output;
+    }
+    const freshTarget = {
+      id: targetData.id,
+      name: targetData.name,
+      type: targetData.type,
+      version: targetData.version,
+      tags: targetData.tags
+    };
+    output.entity = agent[REGISTER](freshTarget);
+    output.entity.metadata.target.iframeInterfaceId = iframeInterfaceId;
+    output.entity.metadata.target.iframeOrigin = event.origin;
+    return output;
+  }
+  const entity = getRegisteredEntityByIframeInterfaceId(iframeInterfaceId, agent);
+  if (!isValidOrigin(event, entity)) {
+    warn(76);
+    return output;
+  }
+  output.entity = entity;
+  const methodFn = entity[method];
+  if (!isSafeProperty(entity, method) || typeof methodFn !== 'function') {
+    warn(35, method);
+    return output;
+  }
+
+  // Supply the timestamp captured inside the iframe at call time (from event.data.timestamp)
+  entity.metadata.events.latestTimestamp = timestamp;
+  output.result = await methodFn.apply(entity, args || []);
+  return output;
+}
+
+/**
+ * Serializes entity metadata for postMessage response.
+ * Strips out any non-serializable properties and returns a plain object.
+ * postMessage cant handle complex objects that cause DataCloneErrors to throw like functions, circular references, etc.
+ * @param {Object} entity - The registered entity whose metadata is to be serialized.  Uses a pattern of stringify and parse to remove any non-serializable properties from the metadata object.
+ * @returns {Object} - The serialized metadata object
+*/
+function serializeMetadata(entity) {
+  const meta = entity.metadata;
+  return JSON.parse(stringify(meta));
+}
+
+/**
+ * Sends a postMessage response to the iframe
+ * @param {MessageEvent} event - The message event containing the method call or registration request
+ * @param {Object} payload - The response payload to send back to the iframe
+ */
+function sendResponse(event, payload) {
+  event.source.postMessage({
+    type: IFRAME_API_RESPONSE,
+    messageId: event.data.messageId,
+    iframeInterfaceId: event.data.iframeInterfaceId,
+    ...payload
+  }, event.origin);
+}
+
+/**
+ * Sets up a postMessage listener to handle API calls and timing updates from iframes
+ * @param {Object} agent The agent instance
+ */
+export function setupIframeMFEMessageListener(agent) {
+  if (!isBrowserScope || !window.addEventListener || agent.runtime.listeningForIframeMessages) return;
+  registerHandler('iframe-message', async event => {
+    if (!event.data) return;
+    switch (event.data.type) {
+      case IFRAME_TIMING_UPDATE:
+        handleTimingUpdate(event, agent);
+        return;
+      case IFRAME_VITALS_UPDATE:
+        handleVitalsUpdate(event, agent);
+        return;
+      case IFRAME_AJAX:
+        handleAjax(event, agent);
+        return;
+      case IFRAME_API:
+        try {
+          if (!event.source || !event.data.messageId || !event.data.entries?.[0]?.method) return;
+          const {
+            entity,
+            result
+          } = await handleMethodCall(event, agent);
+          const metadata = entity ? serializeMetadata(entity) : undefined;
+          sendResponse(event, {
+            result,
+            metadata
+          });
+        } catch (error) {
+          const errorMessage = error?.message || String(error);
+          sendResponse(event, {
+            error: errorMessage
+          });
+        }
+    }
+  }, 'IFRAME', agent.ee);
+  drain(agent, 'IFRAME', true); // drain any buffered iframe messages that were received before the listener was set up
+  agent.runtime.listeningForIframeMessages = true;
+}

package/dist/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/index.js","../src/cdn/experimental.js","../src/cdn/lite.js","../src/cdn/pro.js","../src/cdn/spa.js","../src/common/aggregate/aggregator.js","../src/common/aggregate/event-aggregator.js","../src/common/config/configurable.js","../src/common/config/info.js","../src/common/config/init-types.js","../src/common/config/init.js","../src/common/config/loader-config.js","../src/common/config/runtime.js","../src/common/constants/agent-constants.js","../src/common/constants/env.cdn.js","../src/common/constants/env.js","../src/common/constants/env.npm.js","../src/common/constants/events.js","../src/common/constants/runtime.js","../src/common/constants/shared-channel.js","../src/common/deny-list/deny-list.js","../src/common/dispatch/global-event.js","../src/common/dom/iframe.js","../src/common/dom/query-selector.js","../src/common/dom/selector-path.js","../src/common/drain/drain.js","../src/common/event-emitter/contextual-ee.js","../src/common/event-emitter/event-context.js","../src/common/event-emitter/handle.js","../src/common/event-emitter/register-handler.js","../src/common/event-listener/event-listener-opts.js","../src/common/harvest/harvester.js","../src/common/harvest/send.js","../src/common/harvest/types.js","../src/common/ids/bundle-id.js","../src/common/ids/id.js","../src/common/ids/unique-id.js","../src/common/payloads/payloads.js","../src/common/serialize/bel-serializer.js","../src/common/session/constants.js","../src/common/session/session-entity.js","../src/common/session/session-key.js","../src/common/storage/local-storage.js","../src/common/timer/interaction-timer.js","../src/common/timer/timer.js","../src/common/timing/nav-timing.js","../src/common/timing/now.js","../src/common/timing/time-keeper.js","../src/common/unload/eol.js","../src/common/url/canonicalize-url.js","../src/common/url/clean-url.js","../src/common/url/encode.js","../src/common/url/extract-url.js","../src/common/url/location.js","../src/common/url/parse-url.js","../src/common/url/protocol.js","../src/common/util/attribute-size.js","../src/common/util/browser-stack-matchers.js","../src/common/util/console.js","../src/common/util/data-size.js","../src/common/util/event-origin.js","../src/common/util/feature-flags.js","../src/common/util/get-or-set.js","../src/common/util/invoke.js","../src/common/util/monkey-patched.js","../src/common/util/obfuscate.js","../src/common/util/short-circuit.js","../src/common/util/stringify.js","../src/common/util/submit-data.js","../src/common/util/text.js","../src/common/util/traverse.js","../src/common/util/type-check.js","../src/common/util/webdriver-detection.js","../src/common/v2/mfe-vitals.js","../src/common/v2/script-correlation.js","../src/common/v2/script-tracker.js","../src/common/v2/utils.js","../src/common/vitals/constants.js","../src/common/vitals/cumulative-layout-shift.js","../src/common/vitals/first-contentful-paint.js","../src/common/vitals/first-paint.js","../src/common/vitals/interaction-to-next-paint.js","../src/common/vitals/largest-contentful-paint.js","../src/common/vitals/load-time.js","../src/common/vitals/time-to-first-byte.js","../src/common/vitals/vital-metric.js","../src/common/window/load.js","../src/common/window/nreum.js","../src/common/window/page-visibility.js","../src/common/wrap/wrap-events.js","../src/common/wrap/wrap-fetch.js","../src/common/wrap/wrap-function.js","../src/common/wrap/wrap-history.js","../src/common/wrap/wrap-logger.js","../src/common/wrap/wrap-websocket.js","../src/common/wrap/wrap-xhr.js","../src/features/ajax/constants.js","../src/features/ajax/index.js","../src/features/ajax/aggregate/gql.js","../src/features/ajax/aggregate/index.js","../src/features/ajax/instrument/distributed-tracing.js","../src/features/ajax/instrument/index.js","../src/features/ajax/instrument/response-size.js","../src/features/generic_events/constants.js","../src/features/generic_events/index.js","../src/features/generic_events/aggregate/index.js","../src/features/generic_events/aggregate/user-actions/aggregated-user-action.js","../src/features/generic_events/aggregate/user-actions/user-actions-aggregator.js","../src/features/generic_events/instrument/index.js","../src/features/jserrors/constants.js","../src/features/jserrors/index.js","../src/features/jserrors/aggregate/canonical-function-name.js","../src/features/jserrors/aggregate/cause-string.js","../src/features/jserrors/aggregate/compute-stack-trace.js","../src/features/jserrors/aggregate/format-stack-trace.js","../src/features/jserrors/aggregate/index.js","../src/features/jserrors/aggregate/internal-errors.js","../src/features/jserrors/aggregate/string-hash-code.js","../src/features/jserrors/instrument/index.js","../src/features/jserrors/shared/cast-error.js","../src/features/jserrors/shared/uncaught-error.js","../src/features/logging/constants.js","../src/features/logging/index.js","../src/features/logging/aggregate/index.js","../src/features/logging/instrument/index.js","../src/features/logging/shared/log.js","../src/features/logging/shared/utils.js","../src/features/metrics/constants.js","../src/features/metrics/index.js","../src/features/metrics/aggregate/framework-detection.js","../src/features/metrics/aggregate/harvest-metadata.js","../src/features/metrics/aggregate/index.js","../src/features/metrics/instrument/index.js","../src/features/page_action/constants.js","../src/features/page_action/index.js","../src/features/page_action/instrument/index.js","../src/features/page_view_event/constants.js","../src/features/page_view_event/index.js","../src/features/page_view_event/aggregate/index.js","../src/features/page_view_event/aggregate/initialized-features.js","../src/features/page_view_event/instrument/index.js","../src/features/page_view_timing/constants.js","../src/features/page_view_timing/index.js","../src/features/page_view_timing/aggregate/index.js","../src/features/page_view_timing/instrument/index.js","../src/features/session_replay/constants.js","../src/features/session_replay/index.js","../src/features/session_replay/aggregate/index.js","../src/features/session_replay/instrument/index.js","../src/features/session_replay/shared/recorder-events.js","../src/features/session_replay/shared/recorder.js","../src/features/session_replay/shared/stylesheet-evaluator.js","../src/features/session_replay/shared/utils.js","../src/features/session_trace/constants.js","../src/features/session_trace/index.js","../src/features/session_trace/aggregate/index.js","../src/features/session_trace/aggregate/trace/node.js","../src/features/session_trace/aggregate/trace/storage.js","../src/features/session_trace/aggregate/trace/utils.js","../src/features/session_trace/instrument/index.js","../src/features/soft_navigations/constants.js","../src/features/soft_navigations/index.js","../src/features/soft_navigations/aggregate/ajax-node.js","../src/features/soft_navigations/aggregate/bel-node.js","../src/features/soft_navigations/aggregate/index.js","../src/features/soft_navigations/aggregate/initial-page-load-interaction.js","../src/features/soft_navigations/aggregate/interaction.js","../src/features/soft_navigations/instrument/index.js","../src/features/utils/agent-session.js","../src/features/utils/aggregate-base.js","../src/features/utils/event-buffer.js","../src/features/utils/feature-base.js","../src/features/utils/feature-gates.js","../src/features/utils/instrument-base.js","../src/interfaces/registered-entity.js","../src/loaders/agent-base.js","../src/loaders/agent.js","../src/loaders/api-base.js","../src/loaders/browser-agent.js","../src/loaders/micro-agent-base.js","../src/loaders/micro-agent.js","../src/loaders/api/addPageAction.js","../src/loaders/api/addRelease.js","../src/loaders/api/addToTrace.js","../src/loaders/api/consent.js","../src/loaders/api/constants.js","../src/loaders/api/finished.js","../src/loaders/api/interaction-types.js","../src/loaders/api/interaction.js","../src/loaders/api/log.js","../src/loaders/api/measure.js","../src/loaders/api/noticeError.js","../src/loaders/api/pauseReplay.js","../src/loaders/api/recordCustomEvent.js","../src/loaders/api/recordReplay.js","../src/loaders/api/register-api-types.js","../src/loaders/api/register.js","../src/loaders/api/setApplicationVersion.js","../src/loaders/api/setCustomAttribute.js","../src/loaders/api/setErrorHandler.js","../src/loaders/api/setPageViewName.js","../src/loaders/api/setUserId.js","../src/loaders/api/sharedHandlers.js","../src/loaders/api/start.js","../src/loaders/api/topLevelCallers.js","../src/loaders/api/wrapLogger.js","../src/loaders/configure/configure.js","../src/loaders/configure/nonce.js","../src/loaders/configure/public-path.js","../src/loaders/features/enabled-features.js","../src/loaders/features/featureDependencies.js","../src/loaders/features/features.js"],"version":"5.9.3"}
+{"root":["../src/index.js","../src/cdn/experimental.js","../src/cdn/lite.js","../src/cdn/pro.js","../src/cdn/spa.js","../src/common/aggregate/aggregator.js","../src/common/aggregate/event-aggregator.js","../src/common/config/configurable.js","../src/common/config/info.js","../src/common/config/init-types.js","../src/common/config/init.js","../src/common/config/loader-config.js","../src/common/config/runtime.js","../src/common/constants/agent-constants.js","../src/common/constants/env.cdn.js","../src/common/constants/env.js","../src/common/constants/env.npm.js","../src/common/constants/events.js","../src/common/constants/iframe-constants.js","../src/common/constants/runtime.js","../src/common/constants/shared-channel.js","../src/common/deny-list/deny-list.js","../src/common/dispatch/global-event.js","../src/common/dom/iframe.js","../src/common/dom/query-selector.js","../src/common/dom/selector-path.js","../src/common/drain/drain.js","../src/common/event-emitter/contextual-ee.js","../src/common/event-emitter/event-context.js","../src/common/event-emitter/handle.js","../src/common/event-emitter/register-handler.js","../src/common/event-listener/event-listener-opts.js","../src/common/harvest/harvester.js","../src/common/harvest/send.js","../src/common/harvest/types.js","../src/common/ids/bundle-id.js","../src/common/ids/id.js","../src/common/ids/unique-id.js","../src/common/payloads/payloads.js","../src/common/serialize/bel-serializer.js","../src/common/session/constants.js","../src/common/session/session-entity.js","../src/common/session/session-key.js","../src/common/storage/local-storage.js","../src/common/timer/interaction-timer.js","../src/common/timer/timer.js","../src/common/timing/nav-timing.js","../src/common/timing/now.js","../src/common/timing/time-keeper.js","../src/common/unload/eol.js","../src/common/url/add-url.js","../src/common/url/canonicalize-url.js","../src/common/url/clean-url.js","../src/common/url/encode.js","../src/common/url/extract-url.js","../src/common/url/location.js","../src/common/url/parse-url.js","../src/common/url/protocol.js","../src/common/util/attribute-size.js","../src/common/util/browser-stack-matchers.js","../src/common/util/console.js","../src/common/util/data-size.js","../src/common/util/event-origin.js","../src/common/util/feature-flags.js","../src/common/util/get-or-set.js","../src/common/util/invoke.js","../src/common/util/monkey-patched.js","../src/common/util/obfuscate.js","../src/common/util/short-circuit.js","../src/common/util/stringify.js","../src/common/util/submit-data.js","../src/common/util/text.js","../src/common/util/traverse.js","../src/common/util/type-check.js","../src/common/util/webdriver-detection.js","../src/common/v2/mfe-vitals.js","../src/common/v2/script-correlation.js","../src/common/v2/script-tracker-constants.js","../src/common/v2/script-tracker.js","../src/common/v2/timing-factory.js","../src/common/v2/utils.js","../src/common/vitals/constants.js","../src/common/vitals/cumulative-layout-shift.js","../src/common/vitals/first-contentful-paint.js","../src/common/vitals/first-paint.js","../src/common/vitals/interaction-to-next-paint.js","../src/common/vitals/largest-contentful-paint.js","../src/common/vitals/load-time.js","../src/common/vitals/time-to-first-byte.js","../src/common/vitals/vital-metric.js","../src/common/window/load.js","../src/common/window/nreum.js","../src/common/window/page-visibility.js","../src/common/wrap/wrap-events.js","../src/common/wrap/wrap-fetch.js","../src/common/wrap/wrap-function.js","../src/common/wrap/wrap-history.js","../src/common/wrap/wrap-logger.js","../src/common/wrap/wrap-websocket.js","../src/common/wrap/wrap-xhr.js","../src/features/ajax/constants.js","../src/features/ajax/index.js","../src/features/ajax/aggregate/gql.js","../src/features/ajax/aggregate/index.js","../src/features/ajax/instrument/distributed-tracing.js","../src/features/ajax/instrument/index.js","../src/features/ajax/instrument/response-size.js","../src/features/generic_events/constants.js","../src/features/generic_events/index.js","../src/features/generic_events/aggregate/index.js","../src/features/generic_events/aggregate/user-actions/aggregated-user-action.js","../src/features/generic_events/aggregate/user-actions/user-actions-aggregator.js","../src/features/generic_events/instrument/index.js","../src/features/jserrors/constants.js","../src/features/jserrors/index.js","../src/features/jserrors/aggregate/canonical-function-name.js","../src/features/jserrors/aggregate/cause-string.js","../src/features/jserrors/aggregate/compute-stack-trace.js","../src/features/jserrors/aggregate/format-stack-trace.js","../src/features/jserrors/aggregate/index.js","../src/features/jserrors/aggregate/internal-errors.js","../src/features/jserrors/aggregate/string-hash-code.js","../src/features/jserrors/instrument/index.js","../src/features/jserrors/shared/cast-error.js","../src/features/jserrors/shared/uncaught-error.js","../src/features/logging/constants.js","../src/features/logging/index.js","../src/features/logging/aggregate/index.js","../src/features/logging/instrument/index.js","../src/features/logging/shared/log.js","../src/features/logging/shared/utils.js","../src/features/metrics/constants.js","../src/features/metrics/index.js","../src/features/metrics/aggregate/framework-detection.js","../src/features/metrics/aggregate/harvest-metadata.js","../src/features/metrics/aggregate/index.js","../src/features/metrics/instrument/index.js","../src/features/page_action/constants.js","../src/features/page_action/index.js","../src/features/page_action/instrument/index.js","../src/features/page_view_event/constants.js","../src/features/page_view_event/index.js","../src/features/page_view_event/aggregate/index.js","../src/features/page_view_event/aggregate/initialized-features.js","../src/features/page_view_event/instrument/index.js","../src/features/page_view_timing/constants.js","../src/features/page_view_timing/index.js","../src/features/page_view_timing/aggregate/index.js","../src/features/page_view_timing/instrument/index.js","../src/features/session_replay/constants.js","../src/features/session_replay/index.js","../src/features/session_replay/aggregate/index.js","../src/features/session_replay/instrument/index.js","../src/features/session_replay/shared/recorder-events.js","../src/features/session_replay/shared/recorder.js","../src/features/session_replay/shared/stylesheet-evaluator.js","../src/features/session_replay/shared/utils.js","../src/features/session_trace/constants.js","../src/features/session_trace/index.js","../src/features/session_trace/aggregate/index.js","../src/features/session_trace/aggregate/trace/node.js","../src/features/session_trace/aggregate/trace/storage.js","../src/features/session_trace/aggregate/trace/utils.js","../src/features/session_trace/instrument/index.js","../src/features/soft_navigations/constants.js","../src/features/soft_navigations/index.js","../src/features/soft_navigations/aggregate/ajax-node.js","../src/features/soft_navigations/aggregate/bel-node.js","../src/features/soft_navigations/aggregate/index.js","../src/features/soft_navigations/aggregate/initial-page-load-interaction.js","../src/features/soft_navigations/aggregate/interaction.js","../src/features/soft_navigations/instrument/index.js","../src/features/utils/agent-session.js","../src/features/utils/aggregate-base.js","../src/features/utils/event-buffer.js","../src/features/utils/feature-base.js","../src/features/utils/feature-gates.js","../src/features/utils/instrument-base.js","../src/interfaces/registered-entity.js","../src/interfaces/registered-iframe-entity.js","../src/loaders/agent-base.js","../src/loaders/agent.js","../src/loaders/api-base.js","../src/loaders/browser-agent.js","../src/loaders/micro-agent-base.js","../src/loaders/micro-agent.js","../src/loaders/api/addPageAction.js","../src/loaders/api/addRelease.js","../src/loaders/api/addToTrace.js","../src/loaders/api/consent.js","../src/loaders/api/constants.js","../src/loaders/api/finished.js","../src/loaders/api/interaction-types.js","../src/loaders/api/interaction.js","../src/loaders/api/log.js","../src/loaders/api/measure.js","../src/loaders/api/noticeError.js","../src/loaders/api/pauseReplay.js","../src/loaders/api/recordCustomEvent.js","../src/loaders/api/recordReplay.js","../src/loaders/api/register-api-types.js","../src/loaders/api/register.js","../src/loaders/api/setApplicationVersion.js","../src/loaders/api/setCustomAttribute.js","../src/loaders/api/setErrorHandler.js","../src/loaders/api/setPageViewName.js","../src/loaders/api/setUserId.js","../src/loaders/api/sharedHandlers.js","../src/loaders/api/start.js","../src/loaders/api/topLevelCallers.js","../src/loaders/api/wrapLogger.js","../src/loaders/configure/configure.js","../src/loaders/configure/iframe-message-handler.js","../src/loaders/configure/nonce.js","../src/loaders/configure/public-path.js","../src/loaders/features/enabled-features.js","../src/loaders/features/featureDependencies.js","../src/loaders/features/features.js"],"version":"5.9.3"}

package/dist/types/common/config/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../src/common/config/init.js"],"names":[],"mappings":"AAiJO,0CAEN;mBAvIY,OAAO,cAAc,EAAE,IAAI"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../src/common/config/init.js"],"names":[],"mappings":"AA4JO,0CAEN;mBAlJY,OAAO,cAAc,EAAE,IAAI"}

package/dist/types/common/config/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/common/config/runtime.js"],"names":[],"mappings":"AA4DO,gDAON"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/common/config/runtime.js"],"names":[],"mappings":"AA6DO,gDAON"}

package/dist/types/common/constants/iframe-constants.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export const prefix: "newrelic-iframe-";
+export const IFRAME_TIMING_UPDATE: string;
+export const IFRAME_API: string;
+export const IFRAME_API_RESPONSE: string;
+export const IFRAME_VITALS_UPDATE: string;
+export const IFRAME_AJAX: string;
+//# sourceMappingURL=iframe-constants.d.ts.map

package/dist/types/common/constants/iframe-constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iframe-constants.d.ts","sourceRoot":"","sources":["../../../../src/common/constants/iframe-constants.js"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAsB,kBAAkB,CAAA;AAExC,0CAA4D;AAC5D,gCAAwC;AACxC,yCAA0D;AAC1D,0CAA4D;AAC5D,iCAA0C"}

package/dist/types/common/url/add-url.d.ts

@@ -0,0 +1,2 @@
+export function addUrl(ctx: any, url: any): void;
+//# sourceMappingURL=add-url.d.ts.map

package/dist/types/common/url/add-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-url.d.ts","sourceRoot":"","sources":["../../../../src/common/url/add-url.js"],"names":[],"mappings":"AAMA,iDAWC"}

package/dist/types/common/util/console.d.ts

@@ -6,39 +6,39 @@
  *
  * | Code | Message |
  * |------|---------|
- * | 1 | An error occurred while setting a property of a Configurable |
- * | 2 | An error occurred while setting a Configurable |
- * | 3 | Setting a Configurable requires an object as input |
- * | 4 | Setting a Configurable requires a model to set its initial properties |
+ * | 1 | An error occurred while setting a property of a Configurable. |
+ * | 2 | An error occurred while setting a Configurable. |
+ * | 3 | Setting a Configurable requires an object as input. |
+ * | 4 | Setting a Configurable requires a model to set its initial properties. |
  * | 5 | An invalid session_replay.mask_selector was provided. \* will be used. |
- * | 6 | An invalid session_replay.block_selector was provided and will not be used |
- * | 7 | An invalid session_replay.mask_input_option was provided and will not be used |
- * | 8 | Shared context requires an object as input |
- * | 9 | An error occurred while setting SharedContext |
- * | 10 | Failed to read from storage API |
- * | 11 | Failed to write to the storage API |
+ * | 6 | An invalid session_replay.block_selector was provided and will not be used. |
+ * | 7 | An invalid session_replay.mask_input_option was provided and will not be used. |
+ * | 8 | Shared context requires an object as input. |
+ * | 9 | An error occurred while setting SharedContext. |
+ * | 10 | Failed to read from storage API. |
+ * | 11 | Failed to write to the storage API. |
  * | 12 | An obfuscation replacement rule was detected missing a "regex" value. |
- * | 13 | An obfuscation replacement rule contains a "regex" value with an invalid type (must be a string or RegExp) |
- * | 14 | An obfuscation replacement rule contains a "replacement" value with an invalid type (must be a string) |
- * | 15 | An error occurred while intercepting XHR |
- * | 16 | Could not cast log message to string |
+ * | 13 | An obfuscation replacement rule contains a "regex" value with an invalid type (must be a string or RegExp). |
+ * | 14 | An obfuscation replacement rule contains a "replacement" value with an invalid type (must be a string). |
+ * | 15 | An error occurred while intercepting XHR. |
+ * | 16 | Could not cast log message to string. |
  * | 17 | Could not calculate New Relic server time. Agent shutting down. |
  * | 18 | RUM call failed. Agent shutting down. |
  * | 19 | SPA scheduler is not initialized. Saved interaction is not sent! |
  * | 20 | A problem occurred when starting up session manager. This page will not start or extend any session. |
  * | 21 | Failed to initialize the agent. Could not determine the runtime environment. |
  * | 22 | Failed to initialize all enabled instrument classes (agent aborted) - |
- * | 23 | An unexpected issue occurred |
+ * | 23 | An unexpected issue occurred. |
  * | 24 | Something prevented the agent from instrumenting. |
  * | 25 | Something prevented the agent from being downloaded. |
  * | 26 | Failed to initialize instrument classes. |
  * | 27 | Downloading runtime APIs failed... |
  * | 28 | The Browser Agent is attempting to send a very large payload. This is usually tied to large amounts of custom attributes. Please check your configurations. |
- * | 29 | Failed to wrap logger: invalid argument(s) |
- * | 30 | Invalid log level |
- * | 31 | Ignored log: Log is larger than maximum payload size |
- * | 32 | Ignored log: Invalid message |
- * | 33 | Session Replay Aborted |
+ * | 29 | Failed to wrap logger: invalid argument(s). |
+ * | 30 | Invalid log level. |
+ * | 31 | Ignored log: Log is larger than maximum payload size. |
+ * | 32 | Ignored log: Invalid message. |
+ * | 33 | Session Replay Aborted. |
  * | 34 | Downloading and initializing a feature failed... |
  * | 35 | Call to agent api failed. The API is not currently initialized. |
  * | 36 | A feature is enabled but one or more dependent features have not been initialized. This may cause unintended consequences or missing data... |
@@ -47,7 +47,7 @@
  * | 39 | Failed to execute setCustomAttribute. Name must be a string type. |
  * | 40 | Failed to execute setCustomAttribute. Non-null value must be a string, number or boolean type. |
  * | 41 | Failed to execute setUserId. Non-null value must be a string type. |
- * | 42 | Failed to execute setApplicationVersion. Expected <String \| null> |
+ * | 42 | Failed to execute setApplicationVersion. Expected <String \| null>. |
  * | 43 | Agent not configured properly. |
  * | 44 | Invalid object passed to generic event aggregate. Missing "eventType". |
  * | 45 | An internal agent process failed to execute. |
@@ -56,27 +56,34 @@
  * | 48 | Supplied an invalid API target. Must be an <Object> that contains valid (string) id and name properties. |
  * | 49 | Supplied API target is missing an entityGuid. Some APIs may not behave correctly without a valid entityGuid (ex. logs). |
  * | 50 | Failed to connect. Cannot allow registered API. |
- * | 51 | Container agent is not available to register with. Can not connect |
+ * | 51 | Container agent is not available to register with. Can not connect. |
  * | 52 | Unexpected problem encountered. There should be at least one app for harvest! |
- * | 53 | Did not receive a valid entityGuid from connection response |
- * | 54 | An experimental feature is being used. Support can not be offered for issues |
- * | 55 | Register API has been disabled on the container agent |
- * | 56 | Could not find a matching entity to store data |
+ * | 53 | Did not receive a valid entityGuid from connection response. |
+ * | 54 | An experimental feature is being used. Support can not be offered for issues. |
+ * | 55 | Register API has been disabled on the container agent. |
+ * | 56 | Could not find a matching entity to store data. |
  * | 57 | Failed to execute measure. Arguments must have valid types. |
  * | 58 | Failed to execute measure. Resulting duration must be non-negative. |
- * | 59 | Session replay harvested before a session trace payload could be sent. This could be problematic for replays that rely on a trace |
- * | 60 | Session trace aborted |
+ * | 59 | Session replay harvested before a session trace payload could be sent. This could be problematic for replays that rely on a trace. |
+ * | 60 | Session trace aborted. |
  * | 61 | Timestamps must be non-negative and end time cannot be before start time. |
- * | 62 | Timestamp must be a unix timestamp greater than the page origin time |
- * | 63 | A single event was larger than the maximum allowed payload size |
+ * | 62 | Timestamp must be a unix timestamp greater than the page origin time. |
+ * | 63 | A single event was larger than the maximum allowed payload size. |
  * | 64 | Required globals have been mutated before being accessed by the browser agent. This can cause issues and should be avoided. |
- * | 65 | Consent API argument must be boolean or undefined |
- * | 66 | A new agent session has started |
+ * | 65 | Consent API argument must be boolean or undefined. |
+ * | 66 | A new agent session has started. |
  * | 67 | The "spa" feature has been deprecated and disabled. Please use/import "soft_navigations" instead for tracking of BrowserInteraction data. |
  * | 68 | API has been deregistered and can no longer be used. Call "register" API again with credentials to start over. |
- * | 69 | More than one Browser agent is running on the page |
+ * | 69 | More than one Browser agent is running on the page. |
  * | 70 | A session replay payload failed to send and is being retried. Recording is paused during the retry period, and will resume when a successful harvest is made. Some replay activity may be missed during retry phases. |
  * | 71 | An invalid feature mode was detected and set to "off". |
+ * | 72 | RegisteredIframeEntity failed to transmit API data from an iframe to window context. |
+ * | 73 | RegisteredIframeEntity failed to register with window context. |
+ * | 74 | RegisteredIframeEntity rejected message from unauthorized origin. |
+ * | 75 | RegisteredIframeEntity rejected message with mismatched iframeInterfaceId. |
+ * | 76 | Agent rejected post message, could not match with existing entity. |
+ * | 77 | Agent rejected post message, could not validate origin. |
+ * | 78 | RegisteredIframeEntity could not determine parent origin and will not register, to avoid trusting messages from any origin. |
  *
  * @param {number} code The warning code to emit, which will be used to link to the warning code documentation
  * @param {*} [secondary] Secondary data to include, usually an extra message, error or object

package/dist/types/common/util/console.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"console.d.ts","sourceRoot":"","sources":["../../../../src/common/util/console.js"],"names":[],"mappings":"AAUA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AAEH,2BALW,MAAM,cACN,GAAC,QAiBX"}
+{"version":3,"file":"console.d.ts","sourceRoot":"","sources":["../../../../src/common/util/console.js"],"names":[],"mappings":"AAUA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0FG;AAEH,2BALW,MAAM,cACN,GAAC,QAiBX"}

package/dist/types/common/v2/mfe-vitals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mfe-vitals.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/mfe-vitals.js"],"names":[],"mappings":"AAoHA;;;;;GAKG;AACH,uCAJW,iBAAiB,WACjB,kBAAkB,GAChB,iBAAiB,CAqM7B;iCApTY,OAAO,sCAAsC,EAAE,kBAAkB;gCACjE,OAAO,sCAAsC,EAAE,iBAAiB;gCAChE,OAAO,sCAAsC,EAAE,iBAAiB"}
+{"version":3,"file":"mfe-vitals.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/mfe-vitals.js"],"names":[],"mappings":"AAqHA;;;;;GAKG;AACH,uCAJW,iBAAiB,WACjB,kBAAkB,GAChB,iBAAiB,CAuM7B;iCAtTY,OAAO,sCAAsC,EAAE,kBAAkB;gCACjE,OAAO,sCAAsC,EAAE,iBAAiB;gCAChE,OAAO,sCAAsC,EAAE,iBAAiB"}

package/dist/types/common/v2/script-correlation.d.ts

@@ -17,6 +17,8 @@ export class ScriptCorrelation {
     performance: CorrelationTiming;
     /** @type {string} The cleaned URL of the script */
     url: string;
+    /** @type {Set<string>} MFE target ids that have already claimed this correlation via a completed `findScriptTimings()` call. Keyed per target rather than a single flag so one script that registers multiple distinct MFEs (each with its own id) doesn't have the second MFE's registration mistaken for a stale reuse of the first's. */
+    claimedBy: Set<string>;
     /**
      * Gets the script timing, using DOM timings if available, otherwise falling back to performance timings or registeredAt as appropriate. This is used to provide the most accurate script timing possible for registered entities.
      * @returns {{start: number, end: number}

package/dist/types/common/v2/script-correlation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"script-correlation.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/script-correlation.js"],"names":[],"mappings":"AAAA;;;GAGG;AACH;;GAEG;AACH;IAME;;;OAGG;IACH,iBAFW,MAAM,EAKhB;IAZD,gEAAgE;IAChE,KADW,iBAAiB,CACC;IAC7B,gFAAgF;IAChF,aADW,iBAAiB,CACS;IAOnC,mDAAmD;IACnD,KADW,MAAM,CACH;IAGhB;;;OAGG;IACH,cAFa;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,CASxC;CACF;AAED;IACE,wEAAwE;IACxE,OADW,MAAM,CACR;IACT,wEAAwE;IACxE,KADW,MAAM,CACV;IACP,0CAA0C;IAC1C,OADW,GAAC,CACK;CAClB"}
+{"version":3,"file":"script-correlation.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/script-correlation.js"],"names":[],"mappings":"AAAA;;;GAGG;AACH;;GAEG;AACH;IAME;;;OAGG;IACH,iBAFW,MAAM,EAOhB;IAdD,gEAAgE;IAChE,KADW,iBAAiB,CACC;IAC7B,gFAAgF;IAChF,aADW,iBAAiB,CACS;IAOnC,mDAAmD;IACnD,KADW,MAAM,CACH;IACd,4UAA4U;IAC5U,WADW,GAAG,CAAC,MAAM,CAAC,CACI;IAG5B;;;OAGG;IACH,cAFa;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,CASxC;CACF;AAED;IACE,wEAAwE;IACxE,OADW,MAAM,CACR;IACT,wEAAwE;IACxE,KADW,MAAM,CACV;IACP,0CAA0C;IAC1C,OADW,GAAC,CACK;CAClB"}

package/dist/types/common/v2/script-tracker-constants.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/** @type {number} - Correlations are keyed only by script URL and never cleared per-registration, so a script registered more than once in a session (SPA remount, shared bundle, etc.) can reuse a correlation from a much earlier load. If the correlation's recorded start predates `registeredAt` by more than this, treat it as stale and fall back to `registeredAt`. */
+export const CORRELATION_STALE_THRESHOLD_MS: number;
+//# sourceMappingURL=script-tracker-constants.d.ts.map

package/dist/types/common/v2/script-tracker-constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-tracker-constants.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/script-tracker-constants.js"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,+WAA+W;AAC/W,6CADW,MAAM,CACkC"}

package/dist/types/common/v2/script-tracker.d.ts

@@ -11,16 +11,19 @@ export function extractUrlsFromStack(stack: string): string[];
 export function getDeepStackTrace(): Error.stack | undefined;
 /**
  * Uses the stack of the initiator function, returns script timing information if a script can be found with the resource timing API matching the URL found in the stack.
+ * @param {RegisterAPITarget} [target] - The MFE target being registered. Its id is used to scope stale-correlation detection per-MFE rather than per-script-URL, so one script registering multiple distinct MFEs doesn't misclassify a later MFE's registration as a stale reuse of an earlier one's.
  * @returns {RegisterAPITimings} Object containing script fetch start and end times, and the asset URL if found
  */
-export function findScriptTimings(): RegisterAPITimings;
+export function findScriptTimings(target?: RegisterAPITarget): RegisterAPITimings;
 /**
  * @typedef {import('./register-api-types').RegisterAPITimings} RegisterAPITimings
+ * @typedef {import('../../loaders/api/register-api-types').RegisterAPITarget} RegisterAPITarget
  */
 /** export for testing purposes */
 export let thisFile: any;
 /** @type {Map<string, ScriptCorrelation>} - Central registry for script correlations containing both DOM and Performance data */
 export const scriptCorrelations: Map<string, ScriptCorrelation>;
 export type RegisterAPITimings = any;
+export type RegisterAPITarget = import("../../loaders/api/register-api-types").RegisterAPITarget;
 import { ScriptCorrelation } from './script-correlation';
 //# sourceMappingURL=script-tracker.d.ts.map

package/dist/types/common/v2/script-tracker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"script-tracker.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/script-tracker.js"],"names":[],"mappings":"AA+GA;;;;GAIG;AACH,4CAHW,MAAM,GACJ,MAAM,EAAE,CAsBpB;AAED;;;GAGG;AACH,qCAFa,KAAK,CAAC,KAAK,GAAG,SAAS,CAanC;AA6CD;;;GAGG;AACH,qCAFa,kBAAkB,CA2D9B;AAxPD;;GAEG;AAEH,kCAAkC;AAClC,yBAAmB;AAUnB,iIAAiI;AACjI,iCADW,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CACE;;kCAlBT,sBAAsB"}
+{"version":3,"file":"script-tracker.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/script-tracker.js"],"names":[],"mappings":"AAkHA;;;;GAIG;AACH,4CAHW,MAAM,GACJ,MAAM,EAAE,CAsBpB;AAED;;;GAGG;AACH,qCAFa,KAAK,CAAC,KAAK,GAAG,SAAS,CAanC;AAiED;;;;GAIG;AACH,2CAHW,iBAAiB,GACf,kBAAkB,CA0E9B;AA7RD;;;GAGG;AAEH,kCAAkC;AAClC,yBAAmB;AAUnB,iIAAiI;AACjI,iCADW,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CACE;;gCAf9B,OAAO,sCAAsC,EAAE,iBAAiB;kCAN3C,sBAAsB"}

package/dist/types/common/v2/timing-factory.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export function timingFactory(getLazyValue: () => void, override: any): {
+    get: () => any;
+    set: (newValue: any) => void;
+};
+//# sourceMappingURL=timing-factory.d.ts.map

package/dist/types/common/v2/timing-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing-factory.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/timing-factory.js"],"names":[],"mappings":"AAAA;;;GAGG;AACH;;;EAKC"}

package/dist/types/common/v2/utils.d.ts

@@ -1,3 +1,10 @@
+/**
+ * Returns a single registered entity associated with a given iframe interface ID. Returns undefined if no entity is found.
+ * @param {string} iframeInterfaceId
+ * @param {*} agentRef the agent reference
+ * @returns {import("../../loaders/api/register-api-types").RegisterAPI|undefined}
+ */
+export function getRegisteredEntityByIframeInterfaceId(iframeInterfaceId: string, agentRef: any): import("../../loaders/api/register-api-types").RegisterAPI | undefined;
 /**
  * Returns the registered target associated with a given ID. Returns an empty array if no target is found.
  * @param {string|number} id
@@ -7,11 +14,32 @@
 export function getRegisteredTargetsFromId(id: string | number, agentRef: any): import("../../interfaces/registered-entity").RegisterAPIMetadataTarget[];
 /**
  * Returns the registered target(s) associated with a given filename if found in the resource timing API during registration. Returns an empty array if no target is found.
+ * Multiple registrations that resolve to the same underlying script asset AND represent the same logical MFE (i.e.
+ * share the same customer-supplied `target.id`) are collapsed to a single target via
+ * {@link dedupeRegisteredEntitiesByAsset}, since auto-instrumented events (AJAX, JS errors, logs, WebSockets) should
+ * only be reported once per real occurrence when the same MFE was registered many times over -- not once per
+ * duplicate registration. Distinct MFEs (different `target.id`) that happen to share a script (e.g. two different
+ * MFEs both registered from the same inline `<script>` block) are intentionally NOT collapsed, since each is a
+ * genuinely different entity that should still receive its own copy of the matched event.
  * @param {string} filename
  * @param {*} agentRef
  * @returns {import("../../interfaces/registered-entity").RegisterAPIMetadataTarget[]}
  */
 export function getRegisteredTargetsFromFilename(filename: string, agentRef: any): import("../../interfaces/registered-entity").RegisterAPIMetadataTarget[];
+/**
+ * Collapses a list of registered entities down to one canonical entity per unique, defined `metadata.timings.asset` +
+ * `target.id` combination. Entities whose asset could not be resolved (undefined -- e.g. inline scripts or scripts
+ * not found in the resource timing buffer) are never deduped against each other or against resolved entities, since
+ * there is no signal that they represent the same underlying script. Entities that share an asset but have different
+ * `target.id`s are never deduped against each other either, since a differing id means the customer registered
+ * genuinely distinct MFEs (not duplicate registrations of the same one).
+ *
+ * Canonical selection per asset+id: prefer an entity whose target has not been deregistered (`target.blocked ===
+ * false`) over one that has; otherwise the first-encountered entity wins, for determinism.
+ * @param {Array} entities registered entities (each with `metadata.timings.asset` and `metadata.target`)
+ * @returns {Array} deduped list of entities, preserving relative order of first occurrence
+ */
+export function dedupeRegisteredEntitiesByAsset(entities: any[]): any[];
 /**
  * When given a valid target, returns an object with the V2 payload attributes.  Returns an empty object otherwise.
  * @note Field names may change as the schema is finalized
@@ -44,6 +72,15 @@ export function shouldDuplicate(target: import("../../interfaces/registered-enti
  * @returns {Array} An array of targets found from the stack trace. If no targets are found or allowed, returns an array with undefined.
  */
 export function findTargetsFromStackTrace(agentRef: any): any[];
+/**
+ * Removes duplicate targets from an array, keyed by `target.instance`. This guards against the same canonical
+ * target re-entering the array via multiple matched stack-frame URLs (e.g. a recursive call whose stack contains the
+ * same file at multiple depths). Entries with no `instance` (i.e. `undefined`, meaning "the container agent")
+ * naturally collapse to a single entry too, which is the desired behavior.
+ * @param {Array} targets
+ * @returns {Array} deduped list of targets, preserving relative order of first occurrence
+ */
+export function dedupeTargetsByInstance(targets: any[]): any[];
 /**
  * *
  */