@newrelic/browser-agent 1.321.0-rc.0 → 1.321.0-rc.10

package/dist/cjs/common/vitals/interaction-to-next-paint.js

@@ -7,20 +7,25 @@ exports.interactionToNextPaint = void 0;
 var _attribution = require("web-vitals/attribution");
 var _vitalMetric = require("./vital-metric");
 var _constants = require("./constants");
+var _registerVital = require("./register-vital");
 var _runtime = require("../constants/runtime");
 /**
- * Copyright 2020-2025 New Relic, Inc. All rights reserved.
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
 
 const interactionToNextPaint = exports.interactionToNextPaint = new _vitalMetric.VitalMetric(_constants.VITAL_NAMES.INTERACTION_TO_NEXT_PAINT);
 if (_runtime.isBrowserScope) {
   /* Interaction-to-Next-Paint */
-  (0, _attribution.onINP)(({
+  const handleINP = ({
     value,
     attribution,
-    id
+    id,
+    entries
   }) => {
+    /* web-vitals v6 reports a synthetic INP (value 8, no entries, no interaction attribution) after bfcache restores when
+      every interaction stayed below the duration threshold; skip those so only measured interactions are reported, as in v4 */
+    if (!entries?.length) return;
     const attrs = {
       metricId: id,
       eventTarget: attribution.interactionTarget,
@@ -40,5 +45,6 @@ if (_runtime.isBrowserScope) {
       value,
       attrs
     });
-  });
+  };
+  (0, _registerVital.registerVital)(() => (0, _attribution.onINP)(handleINP));
 }

package/dist/cjs/common/vitals/largest-contentful-paint.js

@@ -7,6 +7,7 @@ exports.largestContentfulPaint = void 0;
 var _attribution = require("web-vitals/attribution");
 var _vitalMetric = require("./vital-metric");
 var _constants = require("./constants");
+var _registerVital = require("./register-vital");
 var _runtime = require("../constants/runtime");
 var _cleanUrl = require("../url/clean-url");
 /**
@@ -16,7 +17,7 @@ var _cleanUrl = require("../url/clean-url");
 
 const largestContentfulPaint = exports.largestContentfulPaint = new _vitalMetric.VitalMetric(_constants.VITAL_NAMES.LARGEST_CONTENTFUL_PAINT);
 if (_runtime.isBrowserScope) {
-  (0, _attribution.onLCP)(({
+  const handleLCP = ({
     value,
     attribution
   }) => {
@@ -36,11 +37,12 @@ if (_runtime.isBrowserScope) {
       attrs.eid = lcpEntry.id;
       if (lcpEntry.element?.tagName) attrs.elTag = lcpEntry.element.tagName;
     }
-    if (attribution.element) attrs.element = attribution.element;
+    if (attribution.target) attrs.element = attribution.target; // renamed from `element` in web-vitals v4->v5; NR attr name kept for backwards compatibility
     if (attribution.url) attrs.elUrl = (0, _cleanUrl.cleanURL)(attribution.url);
     largestContentfulPaint.update({
       value,
       attrs
     });
-  });
+  };
+  (0, _registerVital.registerVital)(() => (0, _attribution.onLCP)(handleLCP));
 }

package/dist/cjs/common/vitals/register-vital.js

@@ -0,0 +1,25 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.registerVital = registerVital;
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+/**
+ * Invokes a web-vitals registration (e.g. `onLCP(callback)`), tolerating environments where the registration itself
+ * throws. web-vitals >= 5 reads Performance Timeline APIs such as `performance.getEntriesByType` unguarded when a
+ * metric is registered; where those are missing the metric is simply never reported, instead of the throw failing
+ * the feature that imported it.
+ * @param {() => void} register
+ */
+function registerVital(register) {
+  try {
+    register();
+  } catch (e) {
+    // metric unavailable in this environment
+  }
+}

package/dist/cjs/common/vitals/time-to-first-byte.js

@@ -7,6 +7,7 @@ exports.timeToFirstByte = void 0;
 var _runtime = require("../constants/runtime");
 var _constants = require("./constants");
 var _vitalMetric = require("./vital-metric");
+var _registerVital = require("./register-vital");
 var _attribution = require("web-vitals/attribution");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
@@ -24,7 +25,7 @@ const timeToFirstByte = exports.timeToFirstByte = new _vitalMetric.VitalMetric(_
  * - onTTFB relies on a truthy `responseStart` value, should ensure that exists before relying on it (seen to be falsy in certain Electron.js cases for instance)
  */
 if (_runtime.isBrowserScope && (0, _runtime.getNavigationEntry)() && !_runtime.isiOS && window === window.parent) {
-  (0, _attribution.onTTFB)(({
+  const handleTTFB = ({
     value,
     attribution
   }) => {
@@ -35,7 +36,8 @@ if (_runtime.isBrowserScope && (0, _runtime.getNavigationEntry)() && !_runtime.i
         navigationEntry: attribution.navigationEntry
       }
     });
-  });
+  };
+  (0, _registerVital.registerVital)(() => (0, _attribution.onTTFB)(handleTTFB));
 } else {
   if (!timeToFirstByte.isValid) {
     const entry = {};

package/dist/cjs/common/vitals/vital-metric.js

@@ -5,7 +5,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.VitalMetric = void 0;
 /**
- * Copyright 2020-2025 New Relic, Inc. All rights reserved.
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
 class VitalMetric {
@@ -24,7 +24,8 @@ class VitalMetric {
     const state = {
       value: this.roundingMethod(value),
       name: this.name,
-      attrs
+      // optional web-vitals attribution fields are omitted rather than being serialized as null attributes
+      attrs: Object.fromEntries(Object.entries(attrs).filter(([, attrValue]) => attrValue !== undefined))
     };
     this.history.push(state);
     this.#subscribers.forEach(cb => {

package/dist/cjs/features/generic_events/aggregate/index.js

@@ -18,6 +18,7 @@ var _iframe = require("../../../common/dom/iframe");
 var _typeCheck = require("../../../common/util/type-check");
 var _events = require("../../../common/constants/events");
 var _utils = require("../../../common/v2/utils");
+var _scriptTracker = require("../../../common/v2/script-tracker");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -239,7 +240,33 @@ class Aggregate extends _aggregateBase.AggregateBase {
               entryDuration: duration,
               firstParty
             };
-            this.addEvent(event);
+            const targets = (0, _utils.getRegisteredTargetsFromResourceUrl)(name, this.agentRef);
+            if (targets.length) {
+              targets.forEach(target => this.addEvent({
+                ...event
+              }, target));
+              return;
+            }
+            this.addEvent({
+              ...event
+            }, undefined);
+
+            // This resource entry can resolve before a self-registering script has actually executed and called
+            // register() on itself (responseEnd fires before script parse/execution). If this URL belongs to a
+            // <script> we're tracking that hasn't finished loading yet, retry resolution once it has -- reporting
+            // a second (deliberately duplicate) copy under the real target if one shows up by then. One-shot,
+            // self-cleans via `once: true`, so there's nothing to leak if the script never registers.
+            const correlation = (0, _scriptTracker.findCorrelation)((0, _cleanUrl.cleanURL)(name));
+            if (correlation?.dom.value && !correlation.dom.end) {
+              const retryAttribution = () => {
+                (0, _utils.getRegisteredTargetsFromResourceUrl)(name, this.agentRef).forEach(target => this.addEvent({
+                  ...event
+                }, target));
+              };
+              ['load', 'error'].forEach(evtType => correlation.dom.value.addEventListener(evtType, retryAttribution, {
+                once: true
+              }));
+            }
           } catch (err) {
             this.ee.emit('internal-error', [err, 'GenericEvents-Resource']);
           }

package/dist/cjs/interfaces/registered-iframe-entity.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", {
 exports.RegisteredIframeEntity = void 0;
 var _webVitals = require("web-vitals");
 var _runtime = require("../common/constants/runtime");
+var _registerVital = require("../common/vitals/register-vital");
 var _iframe = require("../common/dom/iframe");
 var _now = require("../common/timing/now");
 var _console = require("../common/util/console");
@@ -191,9 +192,14 @@ class RegisteredIframeEntity {
    */
   #setupVitalsListeners() {
     VITALS.forEach(([vitalFn, property]) => {
-      vitalFn(({
-        value
+      (0, _registerVital.registerVital)(() => vitalFn(({
+        value,
+        entries: vitalEntries
       }) => {
+        /* web-vitals v6 reports a synthetic INP (value 8, no entries) after bfcache restores when
+          every interaction stayed below the duration threshold; skip those so only measured
+          interactions are reported, matching the guard in src/common/vitals/interaction-to-next-paint.js */
+        if (property === 'inp' && !vitalEntries?.length) return;
         this.metadata.vitals[property].value = value;
         this.#postMessageToParent(_iframeConstants.IFRAME_VITALS_UPDATE, {
           entries: [{
@@ -203,7 +209,7 @@ class RegisteredIframeEntity {
         });
       }, {
         reportAllChanges: property === 'cls' || property === 'inp'
-      });
+      }));
     });
   }
 

package/dist/cjs/loaders/api/register-api-types.js

@@ -21,6 +21,9 @@ exports.default = void 0;
  * @property {(value: string | null, resetSession?: boolean) => void} setUserId - Add an enduser.id attribute to all outgoing API data for the registered entity.  Note: a registered entity will not be able to initiate a session reset.  It must be done from the main agent.
  * @property {RegisterAPIMetadata} metadata - The metadata object containing the custom attributes and target information for the registered entity.
  */
+/**
+ * @typedef {import('../../common/v2/manifest').AssetFile} AssetFile
+ */
 /**
  * @typedef {Object} RegisterAPIConstructor
  * @property {string} id - The unique id for the registered entity. This will be assigned to any synthesized entities.
@@ -28,6 +31,8 @@ exports.default = void 0;
  * @property {{[key: string]: any}} [tags] - The tags for the registered entity as key-value pairs. This will be assigned to any synthesized entities. Tags are converted to source.* attributes (e.g., {environment: 'production'} becomes source.environment: 'production').
  * @property {RegisterAPITarget} [parent] - The parent target for the registered entity. If none was supplied, it will assume the entity guid from the main agent.
  * @property {string} [parentId] - The parentId for the registered entity. If none was supplied, it will assume the entity guid from the main agent.
+ * @property {{assets?: Array<AssetFile>}} [manifest] - An optional manifest describing the MFE's known assets (scripts, stylesheets, images, fonts, etc.) as `AssetFile` entries, used to improve the accuracy of event attribution (errors, logs, ajax, websockets), attribute `BrowserPerformance` resource events (any asset type, not just scripts) and, depending on `timingMethod`, MicroFrontEndTiming values. Each `AssetFile`'s script-capability is inferred from a `.js` suffix on a string `matcher` (a RegExp `matcher` is never inferred as a script), unless overridden via `type: 'script'` or explicitly disabled via `type: 'asset'`. An `AssetFile` with an invalid `matcher` or an unrecognized `type` is discarded/ignored (with a console warning) rather than applied. If omitted, the agent falls back to its existing behavior of only evaluating the script that called `register()` (resource attribution still applies to that script).
+ * @property {'entry'|'scripts'|'all'} [timingMethod] - Controls which manifest assets are used to calculate MicroFrontEndTiming values: 'entry' (the default) leaves timing based entirely on the script that called `register()`, unaffected by the manifest; 'scripts' widens the timing window across all script assets; 'all' widens it across every asset.
  */
 /**
  * @typedef {Object} RegisterAPIMetadata
@@ -41,17 +46,21 @@ exports.default = void 0;
  * @property {string} name - The name returned for the registered entity.
  * @property {{[key: string]: any}} [tags] - The tags for the registered entity as key-value pairs.
  * @property {string} [parentId] - The parentId for the registered entity. If none was supplied, it will assume the entity guid from the main agent.
+ * @property {import('../../common/v2/manifest').ParsedManifest} [manifest] - The parsed manifest for the registered entity, if one was supplied.
+ * @property {'entry'|'scripts'|'all'} [timingMethod] - The timing method supplied for the registered entity, if any.
  */
 /**
  * @typedef {Object} RegisterAPITimings
  * @property {number} registeredAt - The timestamp when the registered entity was created.
  * @property {number} [reportedAt] - The timestamp when the registered entity was deregistered.
- * @property {number} fetchStart - The timestamp when the registered entity began fetching (performance.start).
- * @property {number} fetchEnd - The timestamp when the registered entity finished fetching (performance.end).
- * @property {number} scriptStart - The timestamp when script initialization began (max of dom.start or performance.end, or performance.end if no dom.start).
- * @property {number} scriptEnd - The timestamp when script loading completed (dom.end or registeredAt if no dom.end).
+ * @property {number} fetchStart - The timestamp when the registered entity began fetching (performance.start). When a manifest with timingMethod 'scripts'|'all' is supplied, this widens to the earliest fetchStart across all matched manifest assets.
+ * @property {number} fetchEnd - The timestamp when the registered entity finished fetching (performance.end). When a manifest with timingMethod 'scripts'|'all' is supplied, this widens to the latest fetchEnd across all matched manifest assets.
+ * @property {number} scriptStart - The timestamp when script initialization began (max of dom.start or performance.end, or performance.end if no dom.start). When a manifest with timingMethod 'scripts'|'all' is supplied, this widens to the earliest scriptStart across all matched manifest script assets (non-script assets are excluded).
+ * @property {number} scriptEnd - The timestamp when script loading completed (dom.end or registeredAt if no dom.end). When a manifest with timingMethod 'scripts'|'all' is supplied, this widens to the latest scriptEnd across all matched manifest script assets (non-script assets are excluded).
  * @property {Object} [asset] - The asset path (if found) for the registered entity.
  * @property {string} type - The type of timing associated with the registered entity, 'script' or 'link' if found with the performance resource API, 'fetch' for dynamic imports, 'inline' if found to be associated with the root document URL, or 'unknown' if no associated resource could be found.
+ * @property {number} totalWeight - The sum of `transferSize` (bytes) across every asset detected for the registered entity -- the entry script, plus, when a manifest is supplied, every matched manifest asset (script or non-script). Unlike fetchStart/fetchEnd/scriptStart/scriptEnd above, this is never gated behind `timingMethod` -- manifest assets contribute their bytes even at the 'entry' default/unset. Cross-origin assets without a Timing-Allow-Origin header report 0 bytes per the Resource Timing spec.
+ * @property {boolean} [renderBlocking] - True if any detected asset (entry script or matched manifest asset) has a `renderBlockingStatus` of 'blocking'; false if none were 'blocking' but at least one reported 'non-blocking'; left `undefined` if no detected asset reported the attribute at all (e.g. unsupported browser). A single 'blocking' asset always wins over any number of 'non-blocking' ones, regardless of resolution order.
  */
 /**
  * @typedef {Object} RegisterAPIVitals

package/dist/cjs/loaders/api/register.js

@@ -23,12 +23,15 @@ var _pageVisibility = require("../../common/window/page-visibility");
 var _scriptTracker = require("../../common/v2/script-tracker");
 var _mfeVitals = require("../../common/v2/mfe-vitals");
 var _uniqueId = require("../../common/ids/unique-id");
+var _manifest = require("../../common/v2/manifest");
 var _cleanUrl = require("../../common/url/clean-url");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
 
+const TIMING_METHODS = ['entry', 'scripts', 'all'];
+
 /**
  * @typedef {import('./register-api-types').RegisterAPI} RegisterAPI
  */
@@ -49,7 +52,10 @@ const warnings = exports.warnings = {
   experimental: (0, _invoke.single)(() => (0, _console.warn)(54, 'newrelic.register')),
   disabled: (0, _invoke.single)(() => (0, _console.warn)(55)),
   invalidTarget: (0, _invoke.single)(target => (0, _console.warn)(48, target)),
-  deregistered: (0, _invoke.single)(() => (0, _console.warn)(68))
+  deregistered: (0, _invoke.single)(() => (0, _console.warn)(68)),
+  invalidTimingMethod: (0, _invoke.single)(value => (0, _console.warn)(80, value)),
+  duplicateName: (0, _invoke.single)(target => (0, _console.warn)(81, target)),
+  duplicateId: (0, _invoke.single)(target => (0, _console.warn)(82, target))
 };
 
 /**
@@ -85,9 +91,17 @@ function register(agentRef, target) {
     // getter because this is asynchronously set
     type: _constants.V2_TYPES.BA
   };
+  target.manifest = (0, _manifest.parseManifest)(target.manifest);
+  if (target.timingMethod !== undefined && !TIMING_METHODS.includes(target.timingMethod)) {
+    warnings.invalidTimingMethod(target.timingMethod);
+    target.timingMethod = undefined;
+  }
 
   // The script timings for this entity, which will be used to populate part of the MicroFrontEndTiming custom event.
   const timings = (0, _scriptTracker.findScriptTimings)(target);
+  // Always applied when a manifest is present -- totalWeight/renderBlocking accumulate from manifest assets
+  // regardless of timingMethod; actual timing widening inside stays gated to 'scripts'/'all' (see applyManifestTimings).
+  if (target.manifest) (0, _scriptTracker.applyManifestTimings)(timings, target);
 
   // Track MFE vitals for this entity, which will be used to populate part of the MicroFrontEndTiming custom event.
   const vitals = (0, _mfeVitals.trackMFEVitals)(target, timings);
@@ -139,6 +153,19 @@ function register(agentRef, target) {
   /** primary cases that can block the register API from working at init time */
   if (!agentRef.init.api.register.enabled) block(warnings.disabled);
   if (!hasValidValue(target.id) || !hasValidValue(target.name)) block(() => warnings.invalidTarget(target));
+  /** warn if we see obviously unstable things with MFE targets */
+  registeredEntities.forEach(entity => {
+    try {
+      const {
+        name,
+        id
+      } = entity.metadata.target;
+      if (name === target.name && id !== target.id) warnings.duplicateName(target);
+      if (id === target.id && name !== target.name) warnings.duplicateId(target);
+    } catch (e) {
+      // something unexpected went wrong...
+    }
+  });
 
   /** @type {RegisterAPI} */
   const api = {
@@ -248,6 +275,12 @@ function register(agentRef, target) {
       // fetch time and script time together
       timeToRegister: timings.registeredAt,
       // timestamp when register() was called
+      totalWeight: timings.totalWeight,
+      // sum of transferSize bytes across every detected asset (entry script + matched manifest assets)
+      // renderBlocking: true if any detected asset was 'blocking', false if only 'non-blocking' assets were seen, omitted entirely if no detected asset reported the attribute at all
+      ...(timings.renderBlocking !== undefined && {
+        renderBlocking: timings.renderBlocking
+      }),
       // leave room to extend these with more data keys as needed
       ...(vitals.fcp.value >= 0 && {
         'vitals.fcp.value': vitals.fcp.value

package/dist/esm/common/constants/env.cdn.js

@@ -11,7 +11,7 @@
 /**
  * Exposes the version of the agent
  */
-export const VERSION = "1.321.0-rc.0";
+export const VERSION = "1.321.0-rc.10";
 
 /**
  * Exposes the build type of the agent

package/dist/esm/common/constants/env.npm.js

@@ -11,7 +11,7 @@
 /**
  * Exposes the version of the agent
  */
-export const VERSION = "1.321.0-rc.0";
+export const VERSION = "1.321.0-rc.10";
 
 /**
  * Exposes the build type of the agent

package/dist/esm/common/util/console.js

@@ -95,6 +95,9 @@ import { dispatchGlobalEvent } from '../dispatch/global-event';
  * | 77 | Agent rejected post message, could not validate origin. |
  * | 78 | RegisteredIframeEntity could not determine parent origin and will not register, to avoid trusting messages from any origin. |
  * | 79 | Unable to initialize Connector and/or Harvester. |
+ * | 80 | An invalid manifest option was provided to register() and will be ignored. |
+ * | 81 | Entities were detected that share a name with different IDs - This can cause multiple entities to have the same name in New Relic. |
+ * | 82 | Entities were detected that share an ID with different names - This can cause your entity's name to change unexpectedly. |
  *
  * @param {number} code The warning code to emit, which will be used to link to the warning code documentation
  * @param {*} [secondary] Secondary data to include, usually an extra message, error or object

package/dist/esm/common/v2/manifest.js

@@ -0,0 +1,136 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import { cleanURL } from '../url/clean-url';
+import { warn } from '../util/console';
+import { single } from '../util/invoke';
+
+/**
+ * @typedef {Object} AssetFile
+ * @property {string|RegExp} matcher - the path/path-fragment string, or RegExp, used to match a resolved URL against this asset
+ * @property {'script'|'asset'} [type] - optional override for script-capability inference. When omitted, script-capability is inferred from a
+ * `.js` suffix on a string `matcher` (a RegExp `matcher` is never inferred as a script). Supply `type: 'script'` to explicitly flag an entry
+ * as a script regardless of its matcher shape/suffix (e.g. an extensionless URL, or a RegExp targeting a script path), or `type: 'asset'` to
+ * explicitly flag it as non-script. Any other value is invalid, logs a warning, and is ignored (falls back to inference).
+ */
+
+/** Warns at most once per page for any invalid manifest entry (bad `matcher` or bad `type`) -- mirrors the
+ * existing `invalidTimingMethod` single()-wrapped warning pattern in register.js. */
+const warnInvalidManifestEntry = single(secondary => warn(80, secondary));
+
+/**
+ * @typedef {Object} ParsedManifestAsset
+ * @property {string|RegExp} pattern - the original matcher supplied by the customer
+ * @property {(url: string) => boolean} test - precompiled matcher against a resolved URL
+ * @property {boolean} isScript
+ */
+
+/**
+ * @typedef {Object} ParsedManifest
+ * @property {ParsedManifestAsset[]} assets - all supplied assets
+ * @property {ParsedManifestAsset[]} scripts - the subset of assets inferred/declared as scripts (`.js`)
+ */
+
+/**
+ * Parses a raw manifest supplied to `register()` into precompiled matcher closures. Parsing happens once, at
+ * registration time, so downstream event attribution (which runs on every ajax/error/log/websocket event) never has
+ * to re-derive matching logic from the raw customer input.
+ * @param {{assets?: Array<AssetFile>}} [rawManifest]
+ * @returns {ParsedManifest|undefined} undefined if no usable assets were supplied, so callers can cheaply skip all manifest logic
+ */
+export function parseManifest(rawManifest) {
+  if (!Array.isArray(rawManifest?.assets) || !rawManifest.assets.length) return undefined;
+  const assets = rawManifest.assets.map(parseAsset).filter(Boolean);
+  if (!assets.length) return undefined;
+  return {
+    assets,
+    scripts: assets.filter(asset => asset.isScript)
+  };
+}
+
+/**
+ * @param {AssetFile} entry
+ * @returns {ParsedManifestAsset|undefined}
+ */
+function parseAsset(entry) {
+  if (!entry || typeof entry !== 'object') return undefined;
+  const {
+    matcher,
+    type
+  } = entry;
+  const inferredIsScript = typeof matcher === 'string' && isScriptPath(matcher);
+  let isScript = inferredIsScript;
+  if (type !== undefined) {
+    if (isValidType(type)) {
+      isScript = isScriptType(type);
+    } else {
+      // Invalid `type` never overrides -- fall back to inference-only behavior rather than forcing `isScript: false`,
+      // so a typo'd `type` can't silently break stack-trace attribution for an otherwise-valid `.js` matcher.
+      warnInvalidManifestEntry(type);
+    }
+  }
+  if (isRegExp(matcher)) {
+    // Reset lastIndex before every test -- a `g`/`y` flagged matcher otherwise carries state across calls
+    // (this closure is reused for every event), causing intermittent, input-order-dependent match failures.
+    return {
+      pattern: matcher,
+      test: url => {
+        matcher.lastIndex = 0;
+        return matcher.test(cleanURL(url));
+      },
+      isScript
+    };
+  }
+  if (typeof matcher === 'string' && matcher.length > 0) {
+    return {
+      pattern: matcher,
+      test: url => cleanURL(url).includes(matcher),
+      isScript
+    };
+  }
+
+  // Every other matcher shape (missing, empty string, null, number, plain object, ...) is invalid -- notably an
+  // empty string must be rejected here rather than falling through to the string branch above, since
+  // ''.includes('') is always true and would otherwise silently match every URL.
+  warnInvalidManifestEntry(matcher);
+  return undefined;
+}
+function isScriptPath(path) {
+  return path.endsWith('.js');
+}
+function isValidType(type) {
+  return type === 'script' || type === 'asset';
+}
+
+/**
+ * Cross-realm-safe check for whether a value is a RegExp. `instanceof RegExp` only returns true when the value's
+ * prototype chain links to THIS realm's `RegExp.prototype` -- a regex literal constructed in a different realm
+ * (an iframe, a Worker via structured clone, a WebDriver sandbox such as Firefox's geckodriver executeScript
+ * context) is still a genuine RegExp, just not an instance of this realm's constructor, and would otherwise be
+ * silently dropped by parseAsset below.
+ * @param {*} value
+ * @returns {boolean}
+ */
+function isRegExp(value) {
+  return Object.prototype.toString.call(value) === '[object RegExp]';
+}
+function isScriptType(type) {
+  return type === 'script';
+}
+
+/**
+ * Determines whether a resolved URL matches any asset in a parsed manifest.
+ * @param {ParsedManifest|undefined} parsed
+ * @param {string} url
+ * @param {{scriptsOnly?: boolean}} [options]
+ * @returns {boolean}
+ */
+export function matchManifestAsset(parsed, url, {
+  scriptsOnly = false
+} = {}) {
+  if (!parsed || !url) return false;
+  const candidates = scriptsOnly ? parsed.scripts : parsed.assets;
+  return candidates.some(asset => asset.test(url));
+}

package/dist/esm/common/v2/script-tracker-types.js

@@ -0,0 +1,24 @@
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+/**
+ * @typedef {(start: number, end: number) => void} RecordManifestScriptWindowFn - Widens the live scriptStart/
+ * scriptEnd window with one manifest script asset's DOM correlation timing. `start`/`end` are that asset's
+ * `correlation.script.start`/`.end`, or falsy if not yet resolved. See `findScriptTimings`, which registers the
+ * concrete implementation, for the exact widening semantics (never shrinks either bound).
+ */
+
+/**
+ * @typedef {Object} TimingsInternals
+ * @property {Set<string>} weighedAssetUrls - Always present (seeded by `getOrCreateInternals`, see
+ * `script-tracker.js`). Cleaned URLs already folded into `timings.totalWeight`/`timings.renderBlocking` by
+ * `applyResourceWeight`, so the same underlying resource (e.g. a manifest asset that's also the .register calling
+ * script itself) is never counted twice.
+ * @property {RecordManifestScriptWindowFn} recordManifestScriptWindow - Always present (seeded by
+ * `getOrCreateInternals`, see `script-tracker.js`). `findScriptTimings` overrides the seeded default with one that
+ * folds into the live `scriptStart`/`scriptEnd` getters instead.
+ */
+
+export default {};