@newrelic/browser-agent 1.319.0 → 1.320.0

package/dist/types/common/v2/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/utils.js"],"names":[],"mappings":"AAkBA;;;;;GAKG;AACH,+CAJW,MAAM,GAAC,MAAM,YACb,GAAC,GACC,OAAO,oCAAoC,EAAE,yBAAyB,EAAE,CAMpF;AAED;;;;;GAKG;AACH,2DAJW,MAAM,YACN,GAAC,GACC,OAAO,oCAAoC,EAAE,yBAAyB,EAAE,CAMpF;AAED;;;;;;;GAOG;AACH,+CAJW,MAAM,sBACN,iBAAiB,GACf,MAAM,CAclB;AAED;;;;;;;GAOG;AACH,yDAJW,OAAO,oCAAoC,EAAE,yBAAyB,qBACtE,GAAC,GACC,MAAM,CAKlB;AAED;;;;;;GAMG;AACH,wCAJW,OAAO,oCAAoC,EAAE,yBAAyB,qBACtE,GAAC,GACC,OAAO,CAInB;AAED;;;;GAIG;AACH,oDAHW,GAAC,SAkBX;;;;uBApGS,MAAM"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/common/v2/utils.js"],"names":[],"mappings":"AAkBA;;;;;GAKG;AACH,0EAJW,MAAM,YACN,GAAC,GACC,OAAO,sCAAsC,EAAE,WAAW,GAAC,SAAS,CAMhF;AAED;;;;;GAKG;AACH,+CAJW,MAAM,GAAC,MAAM,YACb,GAAC,GACC,OAAO,oCAAoC,EAAE,yBAAyB,EAAE,CAMpF;AAED;;;;;;;;;;;;GAYG;AACH,2DAJW,MAAM,YACN,GAAC,GACC,OAAO,oCAAoC,EAAE,yBAAyB,EAAE,CAOpF;AAED;;;;;;;;;;;;GAYG;AACH,wEA6BC;AAED;;;;;;;GAOG;AACH,+CAJW,MAAM,sBACN,iBAAiB,GACf,MAAM,CAclB;AAED;;;;;;;GAOG;AACH,yDAJW,OAAO,oCAAoC,EAAE,yBAAyB,qBACtE,GAAC,GACC,MAAM,CAKlB;AAED;;;;;;GAMG;AACH,wCAJW,OAAO,oCAAoC,EAAE,yBAAyB,qBACtE,GAAC,GACC,OAAO,CAInB;AAED;;;;GAIG;AACH,oDAHW,GAAC,SAoBX;AAED;;;;;;;GAOG;AACH,+DAUC;;;;uBA1LS,MAAM"}

package/dist/types/features/ajax/instrument/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/features/ajax/instrument/index.js"],"names":[],"mappings":"AA+BA;IACE,2BAAiC;IACjC,2BAiCC;IA9BC,OAA0B;IAE1B,8DAAkF;CA6BrF;AA6bD,qCAA8B;+BAjfC,6BAA6B;mBAFzC,uBAAuB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/features/ajax/instrument/index.js"],"names":[],"mappings":"AAgCA;IACE,2BAAiC;IACjC,2BAiCC;IA9BC,OAA0B;IAE1B,8DAAkF;CA6BrF;AAgbD,qCAA8B;+BAreC,6BAA6B;mBAFzC,uBAAuB"}

package/dist/types/features/utils/instrument-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instrument-base.d.ts","sourceRoot":"","sources":["../../../../src/features/utils/instrument-base.js"],"names":[],"mappings":"AA4BA;;;GAGG;AACH;IACE;;;;OAIG;IACH,sBAHW,MAAM,eACN,MAAM,EA0ChB;IArCC,8IAA8I;IAC9I,cADW,WAAW,SAAS,CACF;IAE7B;;;MAGE;IACF,eAHU,OAAO,kBAAkB,EAAE,aAAa,CAGpB;IAE9B;;;MAGE;IACF,iCAAmC;IACnC,kCAEE;IAEF;;;MAGE;IACF,uBAAiC;IAiBnC;;;;;;;OAOG;IACH,2BALW,MAAM,qDAEN,MAAM,QA6DhB;;CAiDF;4BAvL2B,gBAAgB"}
+{"version":3,"file":"instrument-base.d.ts","sourceRoot":"","sources":["../../../../src/features/utils/instrument-base.js"],"names":[],"mappings":"AA4BA;;;GAGG;AACH;IACE;;;;OAIG;IACH,sBAHW,MAAM,eACN,MAAM,EA0ChB;IArCC,8IAA8I;IAC9I,cADW,WAAW,SAAS,CACF;IAE7B;;;MAGE;IACF,eAHU,OAAO,kBAAkB,EAAE,aAAa,CAGpB;IAE9B;;;MAGE;IACF,iCAAmC;IACnC,kCAEE;IAEF;;;MAGE;IACF,uBAAiC;IAiBnC;;;;;;;OAOG;IACH,2BALW,MAAM,qDAEN,MAAM,QAyEhB;;CAiDF;4BAnM2B,gBAAgB"}

package/dist/types/interfaces/registered-iframe-entity.d.ts

@@ -0,0 +1,116 @@
+/**
+ * @typedef {import('../loaders/api/register-api-types').RegisterAPI} RegisterAPI
+ * @typedef {import('../loaders/api/register-api-types').RegisterAPIMetadata} RegisterAPIMetadata
+ * @typedef {import('../loaders/api/register-api-types').RegisterAPIConstructor} RegisterAPIConstructor
+ */
+/**
+ * @experimental
+ * IMPORTANT: This feature is being developed for use internally and is not in a public-facing production-ready state.
+ * It is not recommended for use in production environments and will not receive support for issues.
+ *
+ * An interface for registering an external caller to report through the base agent to a different target than the base agent.
+ */
+export class RegisteredIframeEntity {
+    /**
+     *
+     * @param {RegisterAPIConstructor} opts The options for setting up the registered iframe entity.
+     */
+    constructor(opts: RegisterAPIConstructor);
+    /** @type {RegisterAPIMetadata} */
+    metadata: RegisterAPIMetadata;
+    set blocked(value: boolean);
+    /**
+     * Whether this entity is blocked from sending further calls to the container. Backed by
+     * `this.metadata.target.blocked` (rather than an independent field) so that this always
+     * reflects the container's blocked state too, including future syncs from response metadata --
+     * there is only ever one source of truth for "blocked", not one flag per side.
+     * @returns {boolean}
+     */
+    get blocked(): boolean;
+    /**
+     * Reports a browser PageAction event along with a name and optional attributes to the registered target.
+     * {@link https://docs.newrelic.com/docs/browser/new-relic-browser/browser-apis/addpageaction/}
+     * @param {string} name Name or category of the action. Reported as the actionName attribute.
+     * @param {object} [attributes] JSON object with one or more key/value pairs. For example: {key:"value"}. The key is reported as its own PageAction attribute with the specified values.
+     */
+    addPageAction(name: string, attributes?: object): void;
+    /**
+     * @experimental
+     * IMPORTANT: This feature is being developed for use internally and is not in a public-facing production-ready state.
+     * It is not recommended for use in production environments and will not receive support for issues.
+     *
+     * Deregister the registered entity (this), which blocks its use and captures end of life timings.
+     * @returns {Promise<void>}
+     */
+    deregister(): Promise<void>;
+    /**
+       * Records a custom event with a specified eventType and attributes.
+       * {@link https://docs.newrelic.com/docs/browser/new-relic-browser/browser-apis/recordCustomEvent/}
+       * @param {string} eventType The eventType to store the event as.
+       * @param {Object} [attributes] JSON object with one or more key/value pairs. For example: {key:"value"}.
+       */
+    recordCustomEvent(eventType: string, attributes?: Object): void;
+    /**
+     * Measures a task that is recorded as a BrowserPerformance event.
+     * {@link https://docs.newrelic.com/docs/browser/new-relic-browser/browser-apis/measure/}
+     * @param {string} name The name of the task
+     * @param {{start?: number|PerformanceMark, end?: number|PerformanceMark, customAttributes?: object}} [options] An object used to control the way the measure API operates
+     * @returns {Promise<{start: number, end: number, duration: number, customAttributes: object}>} Measurement details
+     */
+    measure(name: string, options?: {
+        start?: number | PerformanceMark;
+        end?: number | PerformanceMark;
+        customAttributes?: object;
+    }): Promise<{
+        start: number;
+        end: number;
+        duration: number;
+        customAttributes: object;
+    }>;
+    /**
+     * Adds a user-defined attribute name and value to subsequent events on the page for the registered target. Note -- the persist flag does not work with the register API.
+     * {@link https://docs.newrelic.com/docs/browser/new-relic-browser/browser-apis/setcustomattribute/}
+     * @param {string} name Name of the attribute. Appears as column in the PageView event. It will also appear as a column in the PageAction event if you are using it.
+     * @param {string|number|boolean|null} value Value of the attribute. Appears as the value in the named attribute column in the PageView event. It will appear as a column in the PageAction event if you are using it. Custom attribute values cannot be complex objects, only simple types such as Strings, Integers and Booleans. Passing a null value unsets any existing attribute of the same name.
+     * @param {boolean} [persist] Default false. If set to true, the name-value pair will also be set into the browser's storage API. Then on the following instrumented pages that load within the same session, the pair will be re-applied as a custom attribute.
+     */
+    setCustomAttribute(name: string, value: string | number | boolean | null, persist?: boolean): void;
+    /**
+     * Identifies a browser error without disrupting your app's operations for the registered target.
+     * {@link https://docs.newrelic.com/docs/browser/new-relic-browser/browser-apis/noticeerror/}
+     * @param {Error|string} error Provide a meaningful error message that you can use when analyzing data on browser's JavaScript errors page.
+     * @param {object} [customAttributes] An object containing name/value pairs representing custom attributes.
+     */
+    noticeError(error: Error | string, customAttributes?: object): void;
+    /**
+     * Adds a user-defined identifier string to subsequent events on the page for the registered target.
+     * {@link https://docs.newrelic.com/docs/browser/new-relic-browser/browser-apis/setuserid/}
+     * @param {string|null} value A string identifier for the end-user, useful for tying all browser events to specific users. The value parameter does not have to be unique. If IDs should be unique, the caller is responsible for that validation. Passing a null value unsets any existing user ID.
+     * @param {boolean} [resetSession=false] Optional param. Should not be used from a registered entity context. To reset a session when updating user id, must be initiated by the main agent.
+     */
+    setUserId(value: string | null, resetSession?: boolean): void;
+    /**
+     * Adds a user-defined application version string to subsequent events on the page for the registered target.
+     * This decorates all payloads with an attribute of `application.version` which is queryable in NR1.
+     * {@link https://docs.newrelic.com/docs/browser/new-relic-browser/browser-apis/setapplicationversion/}
+     * @param {string|null} value A string identifier for the application version, useful for
+     * tying all browser events to a specific release tag. The value parameter does not
+     * have to be unique. Passing a null value unsets any existing value.
+     */
+    setApplicationVersion(value: string | null): void;
+    /**
+     * Capture a single log for the registered target.
+     * {@link https://docs.newrelic.com/docs/browser/new-relic-browser/browser-apis/log/}
+     * @param {string} message String to be captured as log message
+     * @param {{customAttributes?: object, level?: 'ERROR'|'TRACE'|'DEBUG'|'INFO'|'WARN'}} [options] customAttributes defaults to `{}` if not assigned, level defaults to `info` if not assigned.
+    */
+    log(message: string, options?: {
+        customAttributes?: object;
+        level?: "ERROR" | "TRACE" | "DEBUG" | "INFO" | "WARN";
+    }): void;
+    #private;
+}
+export type RegisterAPI = import("../loaders/api/register-api-types").RegisterAPI;
+export type RegisterAPIMetadata = import("../loaders/api/register-api-types").RegisterAPIMetadata;
+export type RegisterAPIConstructor = import("../loaders/api/register-api-types").RegisterAPIConstructor;
+//# sourceMappingURL=registered-iframe-entity.d.ts.map

package/dist/types/interfaces/registered-iframe-entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registered-iframe-entity.d.ts","sourceRoot":"","sources":["../../../src/interfaces/registered-iframe-entity.js"],"names":[],"mappings":"AAsBA;;;;GAIG;AAEH;;;;;;GAMG;AACH;IAkDE;;;OAGG;IACH,kBAFW,sBAAsB,EAsDhC;IAzGD,kCAAkC;IAClC,UADW,mBAAmB,CAW7B;IAyBD,mBANa,OAAO,EAQnB;IAbD;;;;;;OAMG;IACH,eAFa,OAAO,CAInB;IAgTD;;;;;OAKG;IACH,oBAHW,MAAM,eACN,MAAM,QAIhB;IAED;;;;;;;OAOG;IACH,cAFa,OAAO,CAAC,IAAI,CAAC,CAgBzB;IAED;;;;;SAKK;IACL,6BAHa,MAAM,eACN,MAAM,QAIlB;IAED;;;;;;OAMG;IACH,cAJW,MAAM,YACN;QAAC,KAAK,CAAC,EAAE,MAAM,GAAC,eAAe,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAC,eAAe,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAC,GACvF,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAC,CAAC,CAI7F;IAED;;;;;;OAMG;IACH,yBAJW,MAAM,SACN,MAAM,GAAC,MAAM,GAAC,OAAO,GAAC,IAAI,YAC1B,OAAO,QAIjB;IAED;;;;;OAKG;IACH,mBAHW,KAAK,GAAC,MAAM,qBACZ,MAAM,QAIhB;IAED;;;;;OAKG;IACH,iBAHW,MAAM,GAAC,IAAI,iBACX,OAAO,QAIjB;IAED;;;;;;;OAOG;IACH,6BAJW,MAAM,GAAC,IAAI,QAMrB;IAED;;;;;MAKE;IACF,aAHW,MAAM,YACN;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,GAAC,OAAO,GAAC,OAAO,GAAC,MAAM,GAAC,MAAM,CAAA;KAAC,QAIpF;;CACF;0BA1cY,OAAO,mCAAmC,EAAE,WAAW;kCACvD,OAAO,mCAAmC,EAAE,mBAAmB;qCAC/D,OAAO,mCAAmC,EAAE,sBAAsB"}

package/dist/types/loaders/configure/configure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../../../../src/loaders/configure/configure.js"],"names":[],"mappings":"AAeA;;;GAGG;AACH,oGAkEC"}
+{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../../../../src/loaders/configure/configure.js"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,oGA8EC"}

package/dist/types/loaders/configure/iframe-message-handler.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Handles both entity registration and method calls on existing entities
+ * @async
+ * @param {MessageEvent} event - The message event containing the method call or registration request
+ * @param {Object} agent - The browser agent instance
+ * @returns {Promise<{entity: Object|null, result: any}>}
+ */
+export function handleMethodCall(event: MessageEvent, agent: Object): Promise<{
+    entity: Object | null;
+    result: any;
+}>;
+/**
+ * Sets up a postMessage listener to handle API calls and timing updates from iframes
+ * @param {Object} agent The agent instance
+ */
+export function setupIframeMFEMessageListener(agent: Object): void;
+//# sourceMappingURL=iframe-message-handler.d.ts.map

package/dist/types/loaders/configure/iframe-message-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iframe-message-handler.d.ts","sourceRoot":"","sources":["../../../../src/loaders/configure/iframe-message-handler.js"],"names":[],"mappings":"AA+GA;;;;;;GAMG;AACH,wCAJW,YAAY,SACZ,MAAM,GACJ,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAC,CAAC,CA+DvD;AA6BD;;;GAGG;AACH,qDAFW,MAAM,QAiChB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@newrelic/browser-agent",
-  "version": "1.319.0",
+  "version": "1.320.0",
   "private": false,
   "author": "New Relic Browser Agent Team <browser-agent@newrelic.com>",
   "description": "New Relic Browser Agent",
@@ -32,6 +32,9 @@
       "interfaces/registered-entity": [
         "dist/types/interfaces/registered-entity.d.ts"
       ],
+      "interfaces/registered-iframe-entity": [
+        "dist/types/interfaces/registered-iframe-entity.d.ts"
+      ],
       "features/ajax": [
         "dist/types/features/ajax/instrument/index.d.ts"
       ],
@@ -98,6 +101,11 @@
       "require": "./dist/cjs/interfaces/registered-entity.js",
       "default": "./dist/esm/interfaces/registered-entity.js"
     },
+    "./interfaces/registered-iframe-entity": {
+      "types": "./dist/types/interfaces/registered-iframe-entity.d.ts",
+      "require": "./dist/cjs/interfaces/registered-iframe-entity.js",
+      "default": "./dist/esm/interfaces/registered-iframe-entity.js"
+    },
     "./features/ajax": {
       "types": "./dist/types/features/ajax/instrument/index.d.ts",
       "require": "./dist/cjs/features/ajax/instrument/index.js",

package/src/common/config/init.js

@@ -23,7 +23,9 @@ const InitModelFn = () => {
     feature_flags: [],
     experimental: {
       register: false,
-      resources: false
+      resources: false,
+      iframe_bridge: false,
+      iframe_domains: []
     },
     mask_selector: '*',
     block_selector: '[data-nr-block]',
@@ -53,7 +55,16 @@ const InitModelFn = () => {
       register: {
         get enabled () { return hiddenState.feature_flags.includes(FEATURE_FLAGS.REGISTER) || hiddenState.experimental.register },
         set enabled (val) { hiddenState.experimental.register = val },
-        duplicate_data_to_container: false
+        duplicate_data_to_container: false,
+        // experimental iframe bridge feature
+        get allow_iframe_bridge () { return hiddenState.feature_flags.includes(FEATURE_FLAGS.IFRAME_BRIDGE) || hiddenState.experimental.iframe_bridge },
+        set allow_iframe_bridge (val) { hiddenState.experimental.iframe_bridge = val },
+        get iframe_domains () { return hiddenState.experimental.iframe_domains },
+        set iframe_domains (val) {
+          if (Array.isArray(val)) hiddenState.experimental.iframe_domains = val
+          else warn(1, val)
+        }
+
       }
     },
     browser_consent_mode: { enabled: false },

package/src/common/config/runtime.js

@@ -55,7 +55,8 @@ const RuntimeModel = {
   registeredEntities: [],
   /** a proxy is set in agent-session to track jsAttributes changes for harvesting mechanics */
   jsAttributesMetadata: { bytes: 0 },
-  get harvestCount () { return ++_harvestCount }
+  get harvestCount () { return ++_harvestCount },
+  listeningForIframeMessages: false
 }
 
 export const mergeRuntime = (runtime) => {

package/src/common/constants/iframe-constants.js

@@ -0,0 +1,11 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export const prefix = 'newrelic-iframe-'
+
+export const IFRAME_TIMING_UPDATE = prefix + 'timing-update'
+export const IFRAME_API = prefix + 'api'
+export const IFRAME_API_RESPONSE = prefix + 'api-response'
+export const IFRAME_VITALS_UPDATE = prefix + 'vitals-update'
+export const IFRAME_AJAX = prefix + 'ajax'

package/src/common/url/add-url.js

@@ -0,0 +1,18 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { parseUrl } from './parse-url.js'
+
+export function addUrl (ctx, url) {
+  var parsed = parseUrl(url)
+  var params = ctx.params || ctx
+
+  params.hostname = parsed.hostname
+  params.port = parsed.port
+  params.protocol = parsed.protocol
+  params.host = parsed.hostname + ':' + parsed.port
+  params.pathname = parsed.pathname
+  ctx.parsedOrigin = parsed
+  ctx.sameOrigin = parsed.sameOrigin
+}

package/src/common/util/console.js

@@ -16,39 +16,39 @@ import { dispatchGlobalEvent } from '../dispatch/global-event'
  *
  * | Code | Message |
  * |------|---------|
- * | 1 | An error occurred while setting a property of a Configurable |
- * | 2 | An error occurred while setting a Configurable |
- * | 3 | Setting a Configurable requires an object as input |
- * | 4 | Setting a Configurable requires a model to set its initial properties |
+ * | 1 | An error occurred while setting a property of a Configurable. |
+ * | 2 | An error occurred while setting a Configurable. |
+ * | 3 | Setting a Configurable requires an object as input. |
+ * | 4 | Setting a Configurable requires a model to set its initial properties. |
  * | 5 | An invalid session_replay.mask_selector was provided. \* will be used. |
- * | 6 | An invalid session_replay.block_selector was provided and will not be used |
- * | 7 | An invalid session_replay.mask_input_option was provided and will not be used |
- * | 8 | Shared context requires an object as input |
- * | 9 | An error occurred while setting SharedContext |
- * | 10 | Failed to read from storage API |
- * | 11 | Failed to write to the storage API |
+ * | 6 | An invalid session_replay.block_selector was provided and will not be used. |
+ * | 7 | An invalid session_replay.mask_input_option was provided and will not be used. |
+ * | 8 | Shared context requires an object as input. |
+ * | 9 | An error occurred while setting SharedContext. |
+ * | 10 | Failed to read from storage API. |
+ * | 11 | Failed to write to the storage API. |
  * | 12 | An obfuscation replacement rule was detected missing a "regex" value. |
- * | 13 | An obfuscation replacement rule contains a "regex" value with an invalid type (must be a string or RegExp) |
- * | 14 | An obfuscation replacement rule contains a "replacement" value with an invalid type (must be a string) |
- * | 15 | An error occurred while intercepting XHR |
- * | 16 | Could not cast log message to string |
+ * | 13 | An obfuscation replacement rule contains a "regex" value with an invalid type (must be a string or RegExp). |
+ * | 14 | An obfuscation replacement rule contains a "replacement" value with an invalid type (must be a string). |
+ * | 15 | An error occurred while intercepting XHR. |
+ * | 16 | Could not cast log message to string. |
  * | 17 | Could not calculate New Relic server time. Agent shutting down. |
  * | 18 | RUM call failed. Agent shutting down. |
  * | 19 | SPA scheduler is not initialized. Saved interaction is not sent! |
  * | 20 | A problem occurred when starting up session manager. This page will not start or extend any session. |
  * | 21 | Failed to initialize the agent. Could not determine the runtime environment. |
  * | 22 | Failed to initialize all enabled instrument classes (agent aborted) - |
- * | 23 | An unexpected issue occurred |
+ * | 23 | An unexpected issue occurred. |
  * | 24 | Something prevented the agent from instrumenting. |
  * | 25 | Something prevented the agent from being downloaded. |
  * | 26 | Failed to initialize instrument classes. |
  * | 27 | Downloading runtime APIs failed... |
  * | 28 | The Browser Agent is attempting to send a very large payload. This is usually tied to large amounts of custom attributes. Please check your configurations. |
- * | 29 | Failed to wrap logger: invalid argument(s) |
- * | 30 | Invalid log level |
- * | 31 | Ignored log: Log is larger than maximum payload size |
- * | 32 | Ignored log: Invalid message |
- * | 33 | Session Replay Aborted |
+ * | 29 | Failed to wrap logger: invalid argument(s). |
+ * | 30 | Invalid log level. |
+ * | 31 | Ignored log: Log is larger than maximum payload size. |
+ * | 32 | Ignored log: Invalid message. |
+ * | 33 | Session Replay Aborted. |
  * | 34 | Downloading and initializing a feature failed... |
  * | 35 | Call to agent api failed. The API is not currently initialized. |
  * | 36 | A feature is enabled but one or more dependent features have not been initialized. This may cause unintended consequences or missing data... |
@@ -57,7 +57,7 @@ import { dispatchGlobalEvent } from '../dispatch/global-event'
  * | 39 | Failed to execute setCustomAttribute. Name must be a string type. |
  * | 40 | Failed to execute setCustomAttribute. Non-null value must be a string, number or boolean type. |
  * | 41 | Failed to execute setUserId. Non-null value must be a string type. |
- * | 42 | Failed to execute setApplicationVersion. Expected <String \| null> |
+ * | 42 | Failed to execute setApplicationVersion. Expected <String \| null>. |
  * | 43 | Agent not configured properly. |
  * | 44 | Invalid object passed to generic event aggregate. Missing "eventType". |
  * | 45 | An internal agent process failed to execute. |
@@ -66,27 +66,34 @@ import { dispatchGlobalEvent } from '../dispatch/global-event'
  * | 48 | Supplied an invalid API target. Must be an <Object> that contains valid (string) id and name properties. |
  * | 49 | Supplied API target is missing an entityGuid. Some APIs may not behave correctly without a valid entityGuid (ex. logs). |
  * | 50 | Failed to connect. Cannot allow registered API. |
- * | 51 | Container agent is not available to register with. Can not connect |
+ * | 51 | Container agent is not available to register with. Can not connect. |
  * | 52 | Unexpected problem encountered. There should be at least one app for harvest! |
- * | 53 | Did not receive a valid entityGuid from connection response |
- * | 54 | An experimental feature is being used. Support can not be offered for issues |
- * | 55 | Register API has been disabled on the container agent |
- * | 56 | Could not find a matching entity to store data |
+ * | 53 | Did not receive a valid entityGuid from connection response. |
+ * | 54 | An experimental feature is being used. Support can not be offered for issues. |
+ * | 55 | Register API has been disabled on the container agent. |
+ * | 56 | Could not find a matching entity to store data. |
  * | 57 | Failed to execute measure. Arguments must have valid types. |
  * | 58 | Failed to execute measure. Resulting duration must be non-negative. |
- * | 59 | Session replay harvested before a session trace payload could be sent. This could be problematic for replays that rely on a trace |
- * | 60 | Session trace aborted |
+ * | 59 | Session replay harvested before a session trace payload could be sent. This could be problematic for replays that rely on a trace. |
+ * | 60 | Session trace aborted. |
  * | 61 | Timestamps must be non-negative and end time cannot be before start time. |
- * | 62 | Timestamp must be a unix timestamp greater than the page origin time |
- * | 63 | A single event was larger than the maximum allowed payload size |
+ * | 62 | Timestamp must be a unix timestamp greater than the page origin time. |
+ * | 63 | A single event was larger than the maximum allowed payload size. |
  * | 64 | Required globals have been mutated before being accessed by the browser agent. This can cause issues and should be avoided. |
- * | 65 | Consent API argument must be boolean or undefined |
- * | 66 | A new agent session has started |
+ * | 65 | Consent API argument must be boolean or undefined. |
+ * | 66 | A new agent session has started. |
  * | 67 | The "spa" feature has been deprecated and disabled. Please use/import "soft_navigations" instead for tracking of BrowserInteraction data. |
  * | 68 | API has been deregistered and can no longer be used. Call "register" API again with credentials to start over. |
- * | 69 | More than one Browser agent is running on the page |
+ * | 69 | More than one Browser agent is running on the page. |
  * | 70 | A session replay payload failed to send and is being retried. Recording is paused during the retry period, and will resume when a successful harvest is made. Some replay activity may be missed during retry phases. |
  * | 71 | An invalid feature mode was detected and set to "off". |
+ * | 72 | RegisteredIframeEntity failed to transmit API data from an iframe to window context. |
+ * | 73 | RegisteredIframeEntity failed to register with window context. |
+ * | 74 | RegisteredIframeEntity rejected message from unauthorized origin. |
+ * | 75 | RegisteredIframeEntity rejected message with mismatched iframeInterfaceId. |
+ * | 76 | Agent rejected post message, could not match with existing entity. |
+ * | 77 | Agent rejected post message, could not validate origin. |
+ * | 78 | RegisteredIframeEntity could not determine parent origin and will not register, to avoid trusting messages from any origin. |
  *
  * @param {number} code The warning code to emit, which will be used to link to the warning code documentation
  * @param {*} [secondary] Secondary data to include, usually an extra message, error or object

package/src/common/v2/mfe-vitals.js

@@ -5,6 +5,7 @@
 
 import { globalScope, isBrowserScope } from '../constants/runtime'
 import { now } from '../timing/now'
+import { CORRELATION_STALE_THRESHOLD_MS } from './script-tracker-constants'
 
 /**
  * @typedef {import('../../loaders/api/register-api-types').RegisterAPITimings} RegisterAPITimings
@@ -131,10 +132,12 @@ export function trackMFEVitals (target, timings) {
 
   const vitals = {
     fcp: {
-      get value () { return getTimeRelativeToScriptStart(fcpObservedAt) }
+      get value () { return getTimeRelativeToScriptStart(fcpObservedAt) },
+      set value (v) { fcpObservedAt = v }
     },
     lcp: {
-      get value () { return getTimeRelativeToScriptStart(lcpObservedAt) }
+      get value () { return getTimeRelativeToScriptStart(lcpObservedAt) },
+      set value (v) { lcpObservedAt = v }
     },
     cls: {
       value: undefined
@@ -149,11 +152,11 @@ export function trackMFEVitals (target, timings) {
 
   const observers = []
 
-  // If FCP hasn't been observed within 10 seconds, give up and shut down all observers.
+  // If FCP hasn't been observed within this window, give up and shut down all observers.
   // Once FCP is observed, the other vitals are left to record until their natural lifespan ends.
   setTimeout(() => {
     if (!fcpObservedAt) vitals.disconnect()
-  }, 10000)
+  }, CORRELATION_STALE_THRESHOLD_MS)
 
   const populateVitalMinimums = () => {
     fcpObservedAt ??= now()

package/src/common/v2/script-correlation.js

@@ -18,6 +18,8 @@ export class ScriptCorrelation {
   constructor (url) {
     /** @type {string} The cleaned URL of the script */
     this.url = url
+    /** @type {Set<string>} MFE target ids that have already claimed this correlation via a completed `findScriptTimings()` call. Keyed per target rather than a single flag so one script that registers multiple distinct MFEs (each with its own id) doesn't have the second MFE's registration mistaken for a stale reuse of the first's. */
+    this.claimedBy = new Set()
   }
 
   /**

package/src/common/v2/script-tracker-constants.js

@@ -0,0 +1,7 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+/** @type {number} - Correlations are keyed only by script URL and never cleared per-registration, so a script registered more than once in a session (SPA remount, shared bundle, etc.) can reuse a correlation from a much earlier load. If the correlation's recorded start predates `registeredAt` by more than this, treat it as stale and fall back to `registeredAt`. */
+export const CORRELATION_STALE_THRESHOLD_MS = 10000

package/src/common/v2/script-tracker.js

@@ -8,9 +8,12 @@ import { now } from '../timing/now'
 import { cleanURL } from '../url/clean-url'
 import { chrome, chromeEval, gecko } from '../util/browser-stack-matchers'
 import { ScriptCorrelation } from './script-correlation'
+import { CORRELATION_STALE_THRESHOLD_MS } from './script-tracker-constants'
+import { timingFactory } from './timing-factory'
 
 /**
  * @typedef {import('./register-api-types').RegisterAPITimings} RegisterAPITimings
+ * @typedef {import('../../loaders/api/register-api-types').RegisterAPITarget} RegisterAPITarget
  */
 
 /** export for testing purposes */
@@ -22,7 +25,7 @@ try {
 }
 
 /** @type {(entry: PerformanceEntry) => boolean} - A shared function to determine if a performance entry is a valid script or link resource for evaluation */
-const validEntryCriteria = entry => entry.initiatorType === 'script' || (['link', 'fetch'].includes(entry.initiatorType) && entry.name.endsWith('.js'))
+const validEntryCriteria = entry => entry.initiatorType === 'script' || (['link', 'fetch'].includes(entry.initiatorType) && cleanURL(entry.name).endsWith('.js'))
 
 /** @type {Map<string, ScriptCorrelation>} - Central registry for script correlations containing both DOM and Performance data */
 export const scriptCorrelations = new Map()
@@ -196,11 +199,33 @@ function applyPerformanceEntry (timings, entry) {
   timings.type = entry.initiatorType
 }
 
+/**
+ * Subscribes to late resource timing emissions for a script URL.
+ * @param {RegisterAPITimings} timings - The timings object to update
+ * @param {string} mfeScriptUrl - The script URL to match
+ */
+function subscribeToLatePerformanceEntry (timings, mfeScriptUrl) {
+  if (!globalScope.PerformanceObserver?.supportedEntryTypes?.includes('resource')) return
+
+  poSubscribers.push({
+    addedAt: now(),
+    test: (entry) => {
+      if (entryMatchesUrl(entry, mfeScriptUrl)) {
+        applyPerformanceEntry(timings, entry)
+        return true
+      }
+      return false
+    }
+  })
+}
+
 /**
  * Uses the stack of the initiator function, returns script timing information if a script can be found with the resource timing API matching the URL found in the stack.
+ * @param {RegisterAPITarget} [target] - The MFE target being registered. Its id is used to scope stale-correlation detection per-MFE rather than per-script-URL, so one script registering multiple distinct MFEs doesn't misclassify a later MFE's registration as a stale reuse of an earlier one's.
  * @returns {RegisterAPITimings} Object containing script fetch start and end times, and the asset URL if found
  */
-export function findScriptTimings () {
+export function findScriptTimings (target) {
+  const mfeId = target?.id
   const timings = { registeredAt: now(), reportedAt: undefined, fetchStart: 0, fetchEnd: 0, scriptStart: 0, scriptEnd: 0, asset: undefined, type: 'unknown' }
   const stack = getDeepStackTrace()
   if (!stack) return timings
@@ -223,35 +248,49 @@ export function findScriptTimings () {
     // Get correlation data
     timings.correlation = findCorrelation(mfeScriptUrl)
 
-    // Use correlation's performance entry if available, otherwise check live performance API
-    const performanceEntry = timings.correlation?.performance.value || performance.getEntriesByType('resource').find(e => entryMatchesUrl(e, mfeScriptUrl))
+    // Use correlation's performance entry if available, otherwise check the live performance API before falling back to the buffered observer.
+    const performanceEntry = timings.correlation?.performance.value || globalScope.performance?.getEntriesByType('resource')?.find(e => entryMatchesUrl(e, mfeScriptUrl))
 
     if (performanceEntry) {
       applyPerformanceEntry(timings, performanceEntry)
-    } else if (wasPreloaded(mfeScriptUrl)) {
-      // Handle preloaded scripts that may report late
-      timings.asset = mfeScriptUrl
-      timings.type = 'preload'
-
-      // Subscribe to late performance observer callbacks
-      poSubscribers.push({
-        addedAt: now(),
-        test: (entry) => {
-          if (entryMatchesUrl(entry, mfeScriptUrl)) {
-            applyPerformanceEntry(timings, entry)
-            return true
-          }
-          return false
-        }
-      })
+    } else {
+      const isPreloaded = wasPreloaded(mfeScriptUrl)
+
+      // Handle preloaded scripts and any late resource emissions through the shared buffered observer.
+      if (isPreloaded) {
+        timings.asset = mfeScriptUrl
+        timings.type = 'preload'
+      }
+
+      subscribeToLatePerformanceEntry(timings, mfeScriptUrl)
+    }
+
+    // A correlation can be reused across multiple `register()` calls for the same script URL (e.g. an SPA
+    // remounting the same MFE without the script actually reloading). When that happens, its dom/performance
+    // timings still describe the *original* load, not this one. Detect that case so scriptStart/scriptEnd
+    // below can ignore the stale data instead of reporting it as if it were fresh.
+    const correlation = timings.correlation
+    const alreadyClaimedByThisMFE = !!mfeId && !!correlation?.claimedBy.has(mfeId)
+    if (correlation && mfeId) correlation.claimedBy.add(mfeId)
+    const isCorrelationStale = () => {
+      const correlationStart = correlation?.script.start
+      if (!alreadyClaimedByThisMFE || !correlationStart) return false
+      const staleness = timings.registeredAt - correlationStart
+      return staleness > CORRELATION_STALE_THRESHOLD_MS
     }
 
-    /*
-     * Use getters here because the correlation data may arrive after this function returns the timing object, and we want to provide the most up-to-date timing information possible when the getters are accessed at harvest time.
-     * The getters will fall back to fetchEnd if correlation data isn't available yet, which is our best approximation for script execution start when actual script timings can not be determined.
-    */
-    Object.defineProperty(timings, 'scriptStart', { get: () => timings.correlation?.script.start || timings.fetchEnd })
-    Object.defineProperty(timings, 'scriptEnd', { get: () => timings.correlation?.script.end || timings.registeredAt })
+    // Use getters here because the correlation data may arrive after this function returns the timing object, and we want to provide the most up-to-date timing information possible when the getters are accessed at harvest time.
+    // Non-stale: fall back to fetchEnd if correlation data isn't available yet (our best approximation for script execution start). Stale: fall back straight to registeredAt — fetchEnd would be derived from the same stale correlation, so it can't be trusted either.
+    Object.defineProperty(
+      timings,
+      'scriptStart',
+      timingFactory(() => isCorrelationStale() ? timings.registeredAt : (correlation?.script.start ?? timings.fetchEnd))
+    )
+    Object.defineProperty(
+      timings,
+      'scriptEnd',
+      timingFactory(() => isCorrelationStale() ? timings.registeredAt : (correlation?.script.end ?? timings.registeredAt))
+    )
   } catch (error) {
     // Don't let stack parsing errors break anything
   }

package/src/common/v2/timing-factory.js

@@ -0,0 +1,10 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export function timingFactory (getLazyValue = () => {}, override) {
+  return {
+    get: () => (override !== undefined ? override : getLazyValue()),
+    set: (newValue) => { override = newValue }
+  }
+}