@oxvo/browser 7.3.0 → 7.4.15

package/dist/lib/index.js

@@ -530,7 +530,7 @@ function dec2hex(dec) {
     return dec.toString(16).padStart(2, '0');
 }
 function generateRandomId(len) {
-    const arr = new Uint8Array((len) / 2);
+    const arr = new Uint8Array((len || 40) / 2);
     // msCrypto = IE11
     // @ts-ignore
     const safeCrypto = window.crypto || window.msCrypto;
@@ -539,7 +539,7 @@ function generateRandomId(len) {
         return Array.from(arr, dec2hex).join('');
     }
     else {
-        return Array.from({ length: len }, () => dec2hex(Math.floor(Math.random() * 16))).join('');
+        return Array.from({ length: len || 40 }, () => dec2hex(Math.floor(Math.random() * 16))).join('');
     }
 }
 function inIframe() {
@@ -736,6 +736,88 @@ function throttleWithTrailing(fn, interval) {
 
 // Auto-generated, do not edit
 /* eslint-disable */
+const MESSAGE_FIELD_TYPES = {
+    0: ['number'],
+    4: ['string', 'string', 'number'],
+    5: ['number', 'number'],
+    6: ['number', 'number'],
+    7: [],
+    8: ['number', 'number', 'number', 'string', 'boolean'],
+    9: ['number', 'number', 'number'],
+    10: ['number', 'number', 'number'],
+    11: ['number'],
+    12: ['number', 'string', 'string'],
+    13: ['number', 'string'],
+    14: ['number', 'string'],
+    16: ['number', 'number', 'number'],
+    17: ['number', 'string'],
+    18: ['number', 'string', 'number'],
+    19: ['number', 'boolean'],
+    20: ['number', 'number'],
+    21: ['string', 'string', 'string', 'string', 'string', 'number', 'number', 'number'],
+    22: ['string', 'string'],
+    23: ['number', 'number', 'number', 'number', 'number', 'number', 'number', 'number', 'number'],
+    24: ['number', 'number', 'number'],
+    27: ['string', 'string'],
+    28: ['string'],
+    29: ['string'],
+    30: ['string', 'string'],
+    34: ['number', 'string'],
+    35: ['number', 'number', 'number'],
+    36: ['number', 'string'],
+    40: ['string', 'number', 'string', 'string'],
+    41: ['string', 'string'],
+    42: ['string'],
+    44: ['string', 'string', 'number'],
+    45: ['string', 'string'],
+    46: ['string', 'string'],
+    47: ['string', 'string', 'number'],
+    48: ['string', 'string', 'string', 'string', 'number'],
+    49: ['number', 'number', 'number', 'number'],
+    50: ['number', 'string'],
+    51: ['number', 'number', 'number'],
+    43: ['string', 'string'],
+    52: ['number', 'string', 'string'],
+    53: ['number', 'number', 'number', 'number', 'number', 'number', 'string', 'string'],
+    54: ['number', 'string'],
+    55: ['boolean'],
+    57: ['number', 'string', 'string', 'string'],
+    58: ['number'],
+    60: ['number', 'string', 'string', 'string'],
+    61: ['number', 'string', 'string'],
+    63: ['string', 'string'],
+    64: ['string', 'string'],
+    65: ['number', 'number'],
+    68: ['number', 'number', 'string', 'string', 'number', 'number'],
+    69: ['number', 'number', 'string', 'string'],
+    70: ['number', 'number'],
+    71: ['number', 'string', 'string'],
+    73: ['number', 'string', 'number', 'string'],
+    75: ['number', 'number'],
+    76: ['number', 'number'],
+    77: ['number', 'number'],
+    78: ['string', 'string', 'string', 'string'],
+    79: ['string', 'string'],
+    81: ['number', 'number', 'number', 'number', 'string'],
+    83: ['string', 'string', 'string', 'string', 'string', 'number', 'number', 'number', 'number'],
+    84: ['string', 'string', 'string', 'number', 'string', 'string'],
+    85: ['number', 'number', 'number', 'number', 'number', 'number', 'string', 'string', 'number', 'boolean', 'number', 'number', 'number', 'number', 'number', 'number', 'number'],
+    87: ['string', 'number', 'number'],
+    89: ['string', 'number', 'number', 'number', 'number', 'string'],
+    112: ['number', 'string', 'boolean', 'string', 'number', 'number'],
+    113: ['number', 'number', 'string'],
+    114: ['number'],
+    115: ['number'],
+    116: ['number', 'number', 'number', 'number', 'number', 'number', 'string', 'string', 'number', 'boolean'],
+    117: ['string'],
+    118: ['string'],
+    119: ['string', 'number'],
+    120: ['number'],
+    121: ['string', 'string', 'number', 'number'],
+    122: ['string', 'string', 'number', 'string'],
+    123: ['string', 'string', 'string', 'string', 'number'],
+    124: ['string', 'string'],
+};
 function Timestamp(timestamp) {
     return [
         0 /* Messages.Type.Timestamp */,
@@ -1418,6 +1500,7 @@ var _Messages = /*#__PURE__*/Object.freeze({
     JSException: JSException,
     LoadFontFace: LoadFontFace,
     LongAnimationTask: LongAnimationTask$1,
+    MESSAGE_FIELD_TYPES: MESSAGE_FIELD_TYPES,
     Metadata: Metadata,
     MobX: MobX,
     MouseClick: MouseClick,
@@ -1798,6 +1881,8 @@ class CanvasRecorder {
         this.uploadQueue = 0;
         this.MAX_CONCURRENT_UPLOADS = 2;
         this.MAX_QUEUE_SIZE = 50; // ~500 images max (50 batches × 10 images)
+        this.MAX_UPLOAD_ATTEMPTS = 5;
+        this.MAX_RETRY_DELAY_MS = 10000;
         this.pendingBatches = [];
         this.isProcessingQueue = false;
         /**
@@ -1938,26 +2023,41 @@ class CanvasRecorder {
             this.app.debug.warn('Upload queue full, dropping canvas batch');
             return;
         }
-        this.pendingBatches.push({ images, canvasId, createdAt });
+        const token = this.app.session.getSessionSecret();
+        if (!token) {
+            this.app.debug.warn('Canvas batch has no session token');
+            return;
+        }
+        this.pendingBatches.push({ images, canvasId, createdAt, token });
         if (!this.isProcessingQueue) {
-            this.processUploadQueue();
+            void this.processUploadQueue();
         }
     }
     async processUploadQueue() {
+        if (this.isProcessingQueue)
+            return;
         this.isProcessingQueue = true;
-        while (this.pendingBatches.length > 0) {
-            if (this.uploadQueue >= this.MAX_CONCURRENT_UPLOADS) {
-                await new Promise((resolve) => setTimeout(resolve, 100));
-                continue;
+        const worker = async () => {
+            while (true) {
+                const batch = this.pendingBatches.shift();
+                if (!batch)
+                    return;
+                await this.uploadBatch(batch.images, batch.canvasId, batch.createdAt, batch.token);
+            }
+        };
+        try {
+            await Promise.all(Array.from({ length: this.MAX_CONCURRENT_UPLOADS }, () => worker()));
+        }
+        finally {
+            this.isProcessingQueue = false;
+            // A batch can be appended between the final worker check and the flag
+            // reset. Restart once so that race cannot strand queued frames.
+            if (this.pendingBatches.length > 0) {
+                void this.processUploadQueue();
             }
-            const batch = this.pendingBatches.shift();
-            if (!batch)
-                break;
-            this.uploadBatch(batch.images, batch.canvasId, batch.createdAt);
         }
-        this.isProcessingQueue = false;
     }
-    async uploadBatch(images, canvasId, createdAt) {
+    async uploadBatch(images, canvasId, createdAt, token) {
         if (this.options.isDebug) {
             const packed = await packFrames(images);
             if (packed) {
@@ -2025,6 +2125,9 @@ class CanvasRecorder {
             });
         }
         const initRestart = () => {
+            if (this.app.session.getSessionSecret() !== token) {
+                return;
+            }
             this.app.debug.log('Restarting tracker; token expired');
             this.app.stop(false);
             setTimeout(() => {
@@ -2034,25 +2137,72 @@ class CanvasRecorder {
         this.uploadQueue++;
         const base = this.app.options.endpoint.replace(/\/$/, '');
         const ingestPoint = base.endsWith('/oxvo') ? base : `${base}/oxvo`;
-        fetch(ingestPoint + '/v1/assets', {
-            method: 'POST',
-            headers: {
-                Authorization: `Bearer ${this.app.session.getSessionSecret() ?? ''}`,
-            },
-            body: formData,
-        })
-            .then((r) => {
-            if (r.status === 401) {
-                return initRestart();
+        try {
+            for (let attempt = 1; attempt <= this.MAX_UPLOAD_ATTEMPTS; attempt++) {
+                try {
+                    const response = await fetch(ingestPoint + '/v1/assets', {
+                        method: 'POST',
+                        headers: {
+                            Authorization: `Bearer ${token}`,
+                        },
+                        body: formData,
+                    });
+                    if (response.ok)
+                        return;
+                    if (response.status === 401) {
+                        initRestart();
+                        return;
+                    }
+                    if (response.status === 413) {
+                        this.app.debug.warn('Canvas batch exceeds the upload size limit');
+                        return;
+                    }
+                    if (!this.isRetryableUploadStatus(response.status)) {
+                        this.app.debug.error(`Canvas upload failed with status ${response.status}`);
+                        return;
+                    }
+                    if (attempt === this.MAX_UPLOAD_ATTEMPTS) {
+                        this.app.debug.error(`Canvas upload failed after ${attempt} attempts (status ${response.status})`);
+                        return;
+                    }
+                    await this.waitBeforeUploadRetry(response, attempt);
+                }
+                catch (error) {
+                    if (attempt === this.MAX_UPLOAD_ATTEMPTS) {
+                        this.app.debug.error('Canvas upload failed after retrying', error);
+                        return;
+                    }
+                    await this.waitBeforeUploadRetry(undefined, attempt);
+                }
             }
-            return true;
-        })
-            .catch((e) => {
-            this.app.debug.error('error saving canvas', e);
-        })
-            .finally(() => {
+        }
+        finally {
             this.uploadQueue--;
-        });
+        }
+    }
+    isRetryableUploadStatus(status) {
+        return status === 429 || status === 408 || status >= 500;
+    }
+    async waitBeforeUploadRetry(response, attempt) {
+        const retryAfter = response?.headers.get('Retry-After');
+        let retryDelayMs = 0;
+        if (retryAfter) {
+            const seconds = Number(retryAfter);
+            if (Number.isFinite(seconds) && seconds >= 0) {
+                retryDelayMs = seconds * 1000;
+            }
+            else {
+                const retryAt = Date.parse(retryAfter);
+                if (Number.isFinite(retryAt)) {
+                    retryDelayMs = Math.max(0, retryAt - Date.now());
+                }
+            }
+        }
+        if (retryDelayMs === 0) {
+            retryDelayMs = 250 * 2 ** (attempt - 1);
+        }
+        retryDelayMs = Math.min(retryDelayMs, this.MAX_RETRY_DELAY_MS);
+        await new Promise((resolve) => setTimeout(resolve, retryDelayMs));
     }
     cleanupCanvas(id) {
         if (this.snapshots[id]) {
@@ -2075,8 +2225,7 @@ class CanvasRecorder {
         }
         delete this.snapshots[id];
     }
-    clear() {
-        // Flush remaining images before cleanup
+    flushPendingSnapshots() {
         Object.keys(this.snapshots).forEach((idStr) => {
             const id = parseInt(idStr, 10);
             const snapshot = this.snapshots[id];
@@ -2085,6 +2234,9 @@ class CanvasRecorder {
                 snapshot.images = [];
             }
         });
+    }
+    clear() {
+        this.flushPendingSnapshots();
         Object.keys(this.snapshots).forEach((idStr) => {
             const id = parseInt(idStr, 10);
             this.cleanupCanvas(id);
@@ -2151,6 +2303,505 @@ async function packFrames(images) {
     return packed;
 }
 
+const CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION = 1;
+const SECRET_PATTERN = /^[A-Za-z0-9_-]{32,128}$/;
+const CONTEXT_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
+const MAX_MESSAGE_FIELDS = 24;
+const MAX_MESSAGE_STRING_LENGTH = 100000;
+const MAX_BATCH_MESSAGES = 25000;
+const MAX_BATCH_BYTES = 2 * 1024 * 1024;
+// Cross-frame batches may contain only recording events. Identity, dictionary,
+// batch-header, and tab/session control opcodes remain owned by the top-level
+// tracker.
+const CROSS_DOMAIN_IFRAME_ALLOWED_MESSAGE_TYPES = new Set([
+    4 /* MType.SetPageLocationDeprecated */,
+    5 /* MType.SetViewportSize */,
+    6 /* MType.SetViewportScroll */,
+    7 /* MType.CreateDocument */,
+    8 /* MType.CreateElementNode */,
+    9 /* MType.CreateTextNode */,
+    10 /* MType.MoveNode */,
+    11 /* MType.RemoveNode */,
+    12 /* MType.SetNodeAttribute */,
+    13 /* MType.RemoveNodeAttribute */,
+    14 /* MType.SetNodeData */,
+    16 /* MType.SetNodeScroll */,
+    17 /* MType.SetInputTarget */,
+    18 /* MType.SetInputValue */,
+    19 /* MType.SetInputChecked */,
+    20 /* MType.MouseMove */,
+    21 /* MType.NetworkRequestDeprecated */,
+    22 /* MType.ConsoleLog */,
+    23 /* MType.PageLoadTiming */,
+    24 /* MType.PageRenderTiming */,
+    27 /* MType.CustomEvent */,
+    36 /* MType.NodeAnimationResult */,
+    40 /* MType.Profiler */,
+    41 /* MType.OTable */,
+    42 /* MType.StateAction */,
+    44 /* MType.ReduxDeprecated */,
+    45 /* MType.Vuex */,
+    46 /* MType.MobX */,
+    47 /* MType.NgRx */,
+    48 /* MType.GraphQLDeprecated */,
+    49 /* MType.PerformanceTrack */,
+    53 /* MType.ResourceTimingDeprecatedDeprecated */,
+    54 /* MType.ConnectionInformation */,
+    55 /* MType.SetPageVisibility */,
+    57 /* MType.LoadFontFace */,
+    58 /* MType.SetNodeFocus */,
+    60 /* MType.SetNodeAttributeURLBased */,
+    61 /* MType.SetCSSDataURLBased */,
+    63 /* MType.TechnicalInfo */,
+    64 /* MType.CustomIssue */,
+    65 /* MType.SetNodeSlot */,
+    68 /* MType.MouseClick */,
+    69 /* MType.MouseClickDeprecated */,
+    70 /* MType.CreateIFrameDocument */,
+    71 /* MType.AdoptedSSReplaceURLBased */,
+    73 /* MType.AdoptedSSInsertRuleURLBased */,
+    75 /* MType.AdoptedSSDeleteRule */,
+    76 /* MType.AdoptedSSAddOwner */,
+    77 /* MType.AdoptedSSRemoveOwner */,
+    78 /* MType.JSException */,
+    79 /* MType.Zustand */,
+    83 /* MType.NetworkRequest */,
+    84 /* MType.WSChannel */,
+    85 /* MType.ResourceTiming */,
+    87 /* MType.Incident */,
+    89 /* MType.LongAnimationTask */,
+    112 /* MType.InputChange */,
+    113 /* MType.SelectionChange */,
+    114 /* MType.MouseThrashing */,
+    115 /* MType.UnbindNodes */,
+    116 /* MType.ResourceTimingDeprecated */,
+    119 /* MType.CanvasNode */,
+    120 /* MType.TagTrigger */,
+    121 /* MType.Redux */,
+    122 /* MType.SetPageLocation */,
+    123 /* MType.GraphQL */,
+    124 /* MType.WebVitals */,
+]);
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const isFiniteNumber = (value) => typeof value === 'number' && Number.isFinite(value);
+const isSafeIntegerAtLeast = (value, minimum) => typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;
+const isBoundedString = (value, maxLength) => typeof value === 'string' && value.length > 0 && value.length <= maxLength;
+const isCanvasQuality = (value) => value === 'low' || value === 'medium' || value === 'high';
+function normalizeCrossDomainOrigin(value) {
+    if (typeof value !== 'string' || value.trim() === '' || value.trim() === '*') {
+        return null;
+    }
+    try {
+        const url = new URL(value.trim());
+        if (!['http:', 'https:'].includes(url.protocol) ||
+            url.origin === 'null' ||
+            url.username !== '' ||
+            url.password !== '' ||
+            (url.pathname !== '' && url.pathname !== '/') ||
+            url.search !== '' ||
+            url.hash !== '') {
+            return null;
+        }
+        return url.origin;
+    }
+    catch {
+        return null;
+    }
+}
+function normalizeCrossDomainOrigins(values) {
+    if (!Array.isArray(values)) {
+        return new Set();
+    }
+    return new Set(values.map(normalizeCrossDomainOrigin).filter((origin) => origin !== null));
+}
+function createCrossDomainSecret() {
+    if (!globalThis.crypto?.getRandomValues) {
+        return null;
+    }
+    const bytes = new Uint8Array(24);
+    globalThis.crypto.getRandomValues(bytes);
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+function parseCrossDomainHandshake(data, expectedLine, expectedProjectKey) {
+    if (!isRecord(data) ||
+        data.line !== expectedLine ||
+        data.protocolVersion !== CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION ||
+        data.projectKey !== expectedProjectKey ||
+        !isBoundedString(data.context, 128) ||
+        !CONTEXT_PATTERN.test(data.context) ||
+        !isBoundedString(data.nonce, 128) ||
+        !SECRET_PATTERN.test(data.nonce)) {
+        return null;
+    }
+    return {
+        protocolVersion: CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION,
+        context: data.context,
+        nonce: data.nonce,
+        projectKey: expectedProjectKey,
+    };
+}
+function matchesCrossDomainEnvelope(data, expectedLine, expected) {
+    return (isRecord(data) &&
+        data.line === expectedLine &&
+        data.protocolVersion === CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION &&
+        data.context === expected.context &&
+        data.nonce === expected.nonce &&
+        data.capability === expected.capability);
+}
+function parseCrossDomainFrameInit(data, expectedLine, expected) {
+    if (!isRecord(data) ||
+        data.line !== expectedLine ||
+        data.protocolVersion !== CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION ||
+        data.context !== expected.context ||
+        data.nonce !== expected.nonce ||
+        !isBoundedString(data.capability, 128) ||
+        !SECRET_PATTERN.test(data.capability) ||
+        !isSafeIntegerAtLeast(data.id, 0) ||
+        !isSafeIntegerAtLeast(data.frameOrderNumber, 1) ||
+        !isSafeIntegerAtLeast(data.frameLevel, 0) ||
+        !isSafeIntegerAtLeast(data.capabilityExpiresAt, 1) ||
+        data.capabilityExpiresAt <= Date.now() ||
+        !isRecord(data.session)) {
+        return null;
+    }
+    const session = data.session;
+    if (!isBoundedString(session.sessionID, 256) ||
+        !isFiniteNumber(session.startedAt) ||
+        !isFiniteNumber(session.delayMs) ||
+        typeof session.userUUID !== 'string' ||
+        session.userUUID.length > 256) {
+        return null;
+    }
+    let projectID;
+    if (session.projectID !== undefined) {
+        if (!isBoundedString(session.projectID, 256)) {
+            return null;
+        }
+        projectID = session.projectID;
+    }
+    const canvas = parseCanvasConfig(data.canvas);
+    if (data.canvas !== undefined && canvas === null) {
+        return null;
+    }
+    return {
+        protocolVersion: CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION,
+        context: data.context,
+        nonce: data.nonce,
+        capability: data.capability,
+        id: data.id,
+        frameOrderNumber: data.frameOrderNumber,
+        frameLevel: data.frameLevel,
+        capabilityExpiresAt: data.capabilityExpiresAt,
+        session: {
+            sessionID: session.sessionID,
+            projectID,
+            startedAt: session.startedAt,
+            delayMs: session.delayMs,
+            userUUID: session.userUUID,
+        },
+        ...(canvas ? { canvas } : {}),
+    };
+}
+function parseCanvasConfig(value) {
+    if (value === undefined) {
+        return null;
+    }
+    if (!isRecord(value) || typeof value.enabled !== 'boolean') {
+        return null;
+    }
+    let quality;
+    if (value.quality !== undefined) {
+        if (!isCanvasQuality(value.quality)) {
+            return null;
+        }
+        quality = value.quality;
+    }
+    let fps;
+    if (value.fps !== undefined) {
+        if (!isFiniteNumber(value.fps)) {
+            return null;
+        }
+        fps = value.fps;
+    }
+    let framesSupport;
+    if (value.framesSupport !== undefined) {
+        if (typeof value.framesSupport !== 'boolean') {
+            return null;
+        }
+        framesSupport = value.framesSupport;
+    }
+    return {
+        enabled: value.enabled,
+        quality,
+        fps,
+        framesSupport,
+    };
+}
+function parseCrossDomainIframeBatch(messages) {
+    if (!Array.isArray(messages) || messages.length > MAX_BATCH_MESSAGES) {
+        return null;
+    }
+    let bytes = 0;
+    for (const message of messages) {
+        if (!Array.isArray(message) || message.length < 1 || message.length > MAX_MESSAGE_FIELDS) {
+            return null;
+        }
+        const messageType = message[0];
+        if (typeof messageType !== 'number' ||
+            !Number.isInteger(messageType) ||
+            !CROSS_DOMAIN_IFRAME_ALLOWED_MESSAGE_TYPES.has(messageType)) {
+            return null;
+        }
+        const expectedFieldTypes = MESSAGE_FIELD_TYPES[messageType];
+        if (expectedFieldTypes === undefined || message.length !== expectedFieldTypes.length + 1) {
+            return null;
+        }
+        bytes += 8;
+        for (let fieldIndex = 0; fieldIndex < expectedFieldTypes.length; fieldIndex++) {
+            const field = message[fieldIndex + 1];
+            if (typeof field !== expectedFieldTypes[fieldIndex]) {
+                return null;
+            }
+            if (typeof field === 'string') {
+                if (field.length > MAX_MESSAGE_STRING_LENGTH) {
+                    return null;
+                }
+                bytes += field.length * 3;
+            }
+            else if (typeof field === 'number') {
+                if (!Number.isFinite(field)) {
+                    return null;
+                }
+                bytes += 8;
+            }
+            else if (typeof field === 'boolean') {
+                bytes += 1;
+            }
+            else {
+                return null;
+            }
+            if (bytes > MAX_BATCH_BYTES) {
+                return null;
+            }
+        }
+    }
+    return { messages: messages, bytes };
+}
+
+const REDACTED_DEBUG_VALUE = '[REDACTED]';
+const TRUNCATED_DEBUG_VALUE = '[TRUNCATED]';
+const MAX_DEBUG_TEXT_LENGTH = 2048;
+const MAX_DEBUG_CREDENTIAL_LOOKAHEAD = 512;
+const MAX_DEBUG_REDACTION_DEPTH = 5;
+const MAX_DEBUG_REDACTION_ITEMS = 50;
+const DEBUG_FIELD_VALUE_PATTERN = /(["']?)([ \t]*[a-z0-9_-]{1,64}[ \t]*)\1(\s*[:=]\s*)("[^"\r\n]*"|'[^'\r\n]*'|[^\s,;&{}\[\]()\r\n]+)/gim;
+const DEBUG_AUTHORIZATION_FIELD_PATTERN = /(["']?)((?:proxy[-_]?authorization|authorization)(?:[-_]?header)?)\1(\s*[:=]\s*)("[^"\r\n]*"|'[^'\r\n]*'|\[(?:REDACTED|TRUNCATED)\]|[^,;&}\]\)\r\n]+)/gi;
+const DEBUG_COOKIE_FIELD_PATTERN = /(["']?)((?:set[-_]?cookie|cookies?)(?:[-_]?header)?)\1(\s*[:=]\s*)("[^"\r\n]*"|'[^'\r\n]*'|\[(?:REDACTED|TRUNCATED)\]|[^\r\n]+)/gi;
+const DEBUG_AUTH_SCHEME_VALUE_PATTERN = /(\b(?:ApiKey|Basic|Bearer|Digest|Negotiate)\s+)[a-z0-9._~+/=-]+/gi;
+const DEBUG_TOKEN_AUTH_SCHEME_VALUE_PATTERN = /(\bToken\s+)[a-z0-9._~+/=-]+/g;
+const DEBUG_JWT_VALUE_PATTERN = /\beyJ[a-z0-9_-]{5,}\.[a-z0-9_-]{5,}\.[a-z0-9_-]{5,}\b/gi;
+const DEBUG_URL_CREDENTIAL_PATTERN = /(\bhttps?:\/\/)([^\s/:@]+):([^\s/@]+)@/gi;
+const DEBUG_ENCODED_FIELD_VALUE_PATTERN = /([a-z0-9_-]{0,48}(?:token|secret|grant|credential|api[-_]?key|private[-_]?key|signing[-_]?key|authorization|cookie))(%3a|%3d)(?:%22|%27)?[a-z0-9._~+/%=-]+/gi;
+const DEBUG_PROVIDER_CREDENTIAL_PATTERNS = [
+    /sk-(?:(?:proj|svcacct|ant)-)?[a-z0-9_-]{8,}/gi,
+    /AIza[a-z0-9_-]{20,}/gi,
+    /(?:AKIA|ASIA)[A-Z0-9]{16}/g,
+    /gh[pousr]_[a-z0-9]{20,}/gi,
+    /xox[a-z]-[a-z0-9-]{10,}/gi,
+];
+const DEBUG_PRIVATE_KEY_PATTERN = /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z0-9 ]*PRIVATE KEY-----|$)/g;
+const PROVIDER_KEY_PREFIXES = [
+    'anthropic',
+    'azureopenai',
+    'cohere',
+    'deepseek',
+    'elevenlabs',
+    'gemini',
+    'google',
+    'groq',
+    'mistral',
+    'openai',
+    'openrouter',
+    'perplexity',
+];
+const isSensitiveDebugField = (key) => {
+    const normalized = key.replace(/[^a-z0-9]/gi, '').toLowerCase();
+    return (normalized === 'auth' ||
+        normalized.includes('authorization') ||
+        normalized.includes('bearer') ||
+        normalized.includes('cookie') ||
+        normalized === 'sessionhash' ||
+        normalized === 'oxvolinkageassertion' ||
+        normalized === 'xoxvosessionstrace' ||
+        normalized.includes('password') ||
+        normalized === 'privatekey' ||
+        normalized === 'privatekeyid' ||
+        normalized === 'signingkey' ||
+        normalized === 'jwt' ||
+        normalized.endsWith('jwt') ||
+        normalized.endsWith('token') ||
+        normalized.endsWith('grant') ||
+        normalized.includes('secret') ||
+        normalized.endsWith('apikey') ||
+        normalized.endsWith('accesskey') ||
+        normalized.endsWith('accesskeyid') ||
+        normalized.endsWith('subscriptionkey') ||
+        normalized.endsWith('credential') ||
+        normalized.endsWith('credentials') ||
+        (normalized.includes('provider') && normalized.endsWith('key')) ||
+        (normalized.endsWith('key') &&
+            PROVIDER_KEY_PREFIXES.some((provider) => normalized.startsWith(provider))));
+};
+const redactedFieldValue = (rawValue) => {
+    const valueQuote = rawValue[0];
+    return valueQuote === '"' || valueQuote === "'"
+        ? `${valueQuote}${REDACTED_DEBUG_VALUE}${valueQuote}`
+        : REDACTED_DEBUG_VALUE;
+};
+const redactDebugTextToLength = (value, maxOutputLength) => {
+    const truncated = value.length > maxOutputLength;
+    let redacted = value
+        .slice(0, maxOutputLength + MAX_DEBUG_CREDENTIAL_LOOKAHEAD)
+        .replace(DEBUG_AUTHORIZATION_FIELD_PATTERN, (_match, keyQuote, key, separator, rawValue) => `${keyQuote}${key}${keyQuote}${separator}${redactedFieldValue(rawValue)}`)
+        .replace(DEBUG_COOKIE_FIELD_PATTERN, (_match, keyQuote, key, separator, rawValue) => `${keyQuote}${key}${keyQuote}${separator}${redactedFieldValue(rawValue)}`)
+        .replace(DEBUG_AUTH_SCHEME_VALUE_PATTERN, `$1${REDACTED_DEBUG_VALUE}`)
+        .replace(DEBUG_TOKEN_AUTH_SCHEME_VALUE_PATTERN, `$1${REDACTED_DEBUG_VALUE}`)
+        .replace(DEBUG_FIELD_VALUE_PATTERN, (match, keyQuote, key, separator, rawValue) => {
+        if (!isSensitiveDebugField(key)) {
+            return match;
+        }
+        return `${keyQuote}${key}${keyQuote}${separator}${redactedFieldValue(rawValue)}`;
+    })
+        .replace(DEBUG_ENCODED_FIELD_VALUE_PATTERN, (_match, key, separator) => `${key}${separator}${REDACTED_DEBUG_VALUE}`)
+        .replace(DEBUG_URL_CREDENTIAL_PATTERN, `$1${REDACTED_DEBUG_VALUE}:${REDACTED_DEBUG_VALUE}@`)
+        .replace(DEBUG_JWT_VALUE_PATTERN, REDACTED_DEBUG_VALUE)
+        .replace(DEBUG_PRIVATE_KEY_PATTERN, REDACTED_DEBUG_VALUE);
+    for (const credentialPattern of DEBUG_PROVIDER_CREDENTIAL_PATTERNS) {
+        redacted = redacted.replace(credentialPattern, REDACTED_DEBUG_VALUE);
+    }
+    const bounded = redacted.slice(0, maxOutputLength);
+    return truncated ? `${bounded} ${TRUNCATED_DEBUG_VALUE}` : bounded;
+};
+const redactDebugText = (value) => redactDebugTextToLength(value, MAX_DEBUG_TEXT_LENGTH);
+const createDebugRedactionState = () => ({
+    seen: new WeakSet(),
+    remainingItems: MAX_DEBUG_REDACTION_ITEMS,
+    remainingText: MAX_DEBUG_TEXT_LENGTH,
+});
+const redactDebugTextWithBudget = (value, state) => {
+    if (state.remainingText <= 0) {
+        return TRUNCATED_DEBUG_VALUE;
+    }
+    const permittedLength = Math.min(value.length, state.remainingText);
+    state.remainingText -= permittedLength;
+    return redactDebugTextToLength(value, permittedLength);
+};
+const redactDebugValue = (value, state = createDebugRedactionState(), depth = 0) => {
+    if (typeof value === 'string') {
+        return redactDebugTextWithBudget(value, state);
+    }
+    if (value instanceof Error) {
+        const redacted = new Error(redactDebugTextWithBudget(value.message, state));
+        redacted.name = redactDebugTextWithBudget(value.name, state);
+        if (value.stack) {
+            redacted.stack = redactDebugTextWithBudget(value.stack, state);
+        }
+        return redacted;
+    }
+    if (value === null || typeof value === 'number' || typeof value === 'boolean') {
+        return value;
+    }
+    if (typeof value === 'undefined') {
+        return undefined;
+    }
+    if (typeof value === 'bigint' || typeof value === 'symbol') {
+        return String(value);
+    }
+    if (typeof value === 'function') {
+        return '[Function]';
+    }
+    const objectValue = value;
+    if (depth >= MAX_DEBUG_REDACTION_DEPTH || state.remainingItems <= 0) {
+        return TRUNCATED_DEBUG_VALUE;
+    }
+    if (state.seen.has(objectValue)) {
+        return '[Circular]';
+    }
+    state.seen.add(objectValue);
+    if (Array.isArray(value)) {
+        const count = Math.min(value.length, state.remainingItems);
+        state.remainingItems -= count;
+        const redacted = value.slice(0, count).map((entry) => redactDebugValue(entry, state, depth + 1));
+        if (count < value.length) {
+            redacted.push(TRUNCATED_DEBUG_VALUE);
+        }
+        return redacted;
+    }
+    const redacted = {};
+    let allKeys;
+    try {
+        allKeys = Object.keys(objectValue);
+    }
+    catch {
+        return '[Unavailable]';
+    }
+    const keys = allKeys.slice(0, state.remainingItems);
+    state.remainingItems -= keys.length;
+    for (const key of keys) {
+        if (isSensitiveDebugField(key)) {
+            redacted[key] = REDACTED_DEBUG_VALUE;
+            continue;
+        }
+        try {
+            redacted[key] = redactDebugValue(value[key], state, depth + 1);
+        }
+        catch {
+            redacted[key] = '[Unavailable]';
+        }
+    }
+    if (keys.length < allKeys.length) {
+        redacted.__truncated__ = TRUNCATED_DEBUG_VALUE;
+    }
+    return redacted;
+};
+const redactDebugArgs = (values) => {
+    const state = createDebugRedactionState();
+    return values.map((value) => redactDebugValue(value, state));
+};
+const debugValueText = (value) => {
+    if (value instanceof Error) {
+        return `${value.name}: ${value.message}`;
+    }
+    if (typeof value === 'string') {
+        return value;
+    }
+    let serialized;
+    try {
+        serialized = JSON.stringify(value);
+    }
+    catch {
+        return '[Unavailable]';
+    }
+    if (serialized === undefined) {
+        return String(value);
+    }
+    return serialized.length > MAX_DEBUG_TEXT_LENGTH
+        ? `${serialized.slice(0, MAX_DEBUG_TEXT_LENGTH)} ${TRUNCATED_DEBUG_VALUE}`
+        : serialized;
+};
+const redactedErrorFrom = (value, fallback, knownSecrets = []) => {
+    const uniqueKnownSecrets = [
+        ...new Set(knownSecrets.filter((secret) => !!secret)),
+    ].sort((left, right) => right.length - left.length);
+    const redacted = value instanceof Error || typeof value === 'string' ? value : redactDebugValue(value);
+    let message = redacted instanceof Error ? redacted.message.trim() : debugValueText(redacted).trim();
+    for (const secret of uniqueKnownSecrets) {
+        message = message.split(secret).join(REDACTED_DEBUG_VALUE);
+    }
+    message = redactDebugText(message);
+    return new Error(message.length > 0 ? message : fallback);
+};
+
 const LogLevel = {
     Verbose: 5,
     Log: 4,
@@ -2165,26 +2816,22 @@ class Logger {
         };
         this.info = (...args) => {
             if (this.shouldLog(LogLevel.Verbose)) {
-                // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
-                console.info(...args);
+                console.info(...redactDebugArgs(args));
             }
         };
         this.log = (...args) => {
             if (this.shouldLog(LogLevel.Log)) {
-                // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
-                console.log(...args);
+                console.log(...redactDebugArgs(args));
             }
         };
         this.warn = (...args) => {
             if (this.shouldLog(LogLevel.Warnings)) {
-                // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
-                console.warn(...args);
+                console.warn(...redactDebugArgs(args));
             }
         };
         this.error = (...args) => {
             if (this.shouldLog(LogLevel.Errors)) {
-                // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
-                console.error(...args);
+                console.error(...redactDebugArgs(args));
             }
         };
         this.level = debugLevel;
@@ -3954,6 +4601,10 @@ class Session {
             this.token = `${token}${tokenSeparator}${projectKey}`;
             this.app.sessionStorage.setItem(this.options.session_token_key, `${token}${tokenSeparator}${projectKey}`);
         };
+        this.clearSessionSecret = () => {
+            this.token = undefined;
+            this.app.sessionStorage.removeItem(this.options.session_token_key);
+        };
         this.app = params.app;
         this.options = params.options;
         this.createTabId();
@@ -4050,7 +4701,7 @@ class Session {
         };
     }
     reset() {
-        this.app.sessionStorage.removeItem(this.options.session_token_key);
+        this.clearSessionSecret();
         this.metadata = {};
         this.userID = null;
         this.sessionID = undefined;
@@ -4108,10 +4759,67 @@ class Ticker {
  * this value is injected during build time via rollup
  * */
 // @ts-ignore
-const workerBodyFn = "!function(){\"use strict\";class t{constructor(t,s,i,e=10,n=250,h,r){this.onUnauthorised=s,this.onFailure=i,this.MAX_ATTEMPTS_COUNT=e,this.ATTEMPT_TIMEOUT=n,this.onCompress=h,this.pageNo=r,this.attemptsCount=0,this.busy=!1,this.queue=[],this.token=null,this.lastBatchNum=0,this.inflightKeepaliveBytes=0,this.ingestURL=t+\"/v1/events\",this.isCompressing=void 0!==h}getQueueStatus(){return 0===this.queue.length&&!this.busy}authorise(t){this.token=t,this.busy||this.sendNext()}push(t,s=\"player\"){if(this.busy||!this.token)this.queue.push({batch:t,dataType:s});else if(this.busy=!0,this.isCompressing&&this.onCompress)this.onCompress(t,s);else{const i=++this.lastBatchNum;this.sendBatch(t,!1,i,s)}}sendNext(){const t=this.queue.shift();if(t)if(this.busy=!0,this.isCompressing&&this.onCompress)this.onCompress(t.batch,t.dataType);else{const s=++this.lastBatchNum;this.sendBatch(t.batch,!1,s,t.dataType)}else this.busy=!1}retry(t,s,i,e=\"player\"){if(this.attemptsCount>=this.MAX_ATTEMPTS_COUNT)return void this.onFailure(`Failed to send batch after ${this.attemptsCount} attempts.`);this.attemptsCount++;const n=new Uint8Array(t);setTimeout((()=>this.sendBatch(n,s,i,e)),this.ATTEMPT_TIMEOUT*this.attemptsCount)}sendBatch(t,s,i,e=\"player\"){var n;if(0===t.length)return console.error(\"OxvoSessions: refusing to send 0-byte batch.\",{batchNum:i,dataType:e,isCompressed:s,batch:t}),this.attemptsCount=0,void this.sendNext();const h=null==i?void 0:i.toString().replace(/^([^_]+)_([^_]+).*/,\"$1_$2_$3\");this.busy=!0;const r={Authorization:`Bearer ${this.token}`,DataType:e};if(s&&(r[\"Content-Encoding\"]=\"gzip\"),null===this.token)return void setTimeout((()=>{this.sendBatch(t,s,`${null!=i?i:\"noBatchNum\"}_newToken`,e)}),500);const a=t.length<65536&&this.inflightKeepaliveBytes+t.length<=65536;a&&(this.inflightKeepaliveBytes+=t.length);const o=()=>{a&&(this.inflightKeepaliveBytes-=t.length)},u=`${null!==(n=this.pageNo)&&void 0!==n?n:\"noPageNum\"}_${null!=h?h:\"noBatchNum\"}`;fetch(`${this.ingestURL}?seq=${u}&keepalive=${a?\"yes\":\"no\"}`,{body:t,method:\"POST\",headers:r,keepalive:a}).then((n=>{var h;if(o(),null===(h=n.body)||void 0===h||h.cancel().catch((()=>{})),401===n.status)return this.busy=!1,void this.onUnauthorised();n.status>=400?this.retry(t,s,`${null!=i?i:\"noBatchNum\"}_network:${n.status}`,e):(this.attemptsCount=0,this.sendNext())})).catch((n=>{o(),console.warn(\"OxvoSessions:\",n),this.retry(t,s,`${null!=i?i:\"noBatchNum\"}_reject:${n.message}`,e)}))}sendCompressed(t,s=\"player\"){const i=++this.lastBatchNum;this.sendBatch(t,!0,i,s)}sendUncompressed(t,s=\"player\"){const i=++this.lastBatchNum;this.sendBatch(t,!1,i,s)}clean(){this.sendNext(),setTimeout((()=>{this.token=null,this.queue.length=0}),10)}}const s=new Set([60,61,71,73]),i=new Set([21,22,40,41,44,45,46,47,48,79,83,84,85,87,89,116,120,121,123]),e=new Set([17,23,24,27,28,29,30,42,63,64,78,112,115,124]),n=\"function\"==typeof TextEncoder?new TextEncoder:{encode(t){const s=t.length,i=new Uint8Array(3*s);let e=-1;for(let n=0,h=0,r=0;r!==s;){if(n=t.charCodeAt(r),r+=1,n>=55296&&n<=56319){if(r===s){i[e+=1]=239,i[e+=1]=191,i[e+=1]=189;break}if(h=t.charCodeAt(r),!(h>=56320&&h<=57343)){i[e+=1]=239,i[e+=1]=191,i[e+=1]=189;continue}if(n=1024*(n-55296)+h-56320+65536,r+=1,n>65535){i[e+=1]=240|n>>>18,i[e+=1]=128|n>>>12&63,i[e+=1]=128|n>>>6&63,i[e+=1]=128|63&n;continue}}n<=127?i[e+=1]=0|n:n<=2047?(i[e+=1]=192|n>>>6,i[e+=1]=128|63&n):(i[e+=1]=224|n>>>12,i[e+=1]=128|n>>>6&63,i[e+=1]=128|63&n)}return i.subarray(0,e+1)}};class h{constructor(t){this.size=t,this.offset=0,this.checkpointOffset=0,this.data=new Uint8Array(t)}getCurrentOffset(){return this.offset}getCurrentCheckpoint(){return this.checkpointOffset}checkpoint(){this.checkpointOffset=this.offset}get isEmpty(){return 0===this.offset}skip(t){return this.offset+=t,this.offset<=this.size}set(t,s){this.data.set(t,s)}boolean(t){return this.data[this.offset++]=+t,this.offset<=this.size}uint(t){for((t<0||t>Number.MAX_SAFE_INTEGER)&&(t=0);t>=128;)this.data[this.offset++]=t%256|128,t=Math.floor(t/128);return this.data[this.offset++]=t,this.offset<=this.size}int(t){return t=Math.round(t),this.uint(t>=0?2*t:-2*t-1)}string(t){const s=n.encode(t),i=s.byteLength;return!(!this.uint(i)||this.offset+i>this.size)&&(this.data.set(s,this.offset),this.offset+=i,!0)}reset(){this.offset=0,this.checkpointOffset=0}rewind(t,s){t>this.offset||s>this.checkpointOffset||(this.offset=t,this.checkpointOffset=s)}flush(){const t=this.data.slice(0,this.checkpointOffset);return this.reset(),t}}class r extends h{encode(t){switch(t[0]){case 0:case 11:case 114:case 115:return this.uint(t[1]);case 4:case 44:case 47:return this.string(t[1])&&this.string(t[2])&&this.uint(t[3]);case 5:case 20:case 65:case 70:case 75:case 76:case 77:return this.uint(t[1])&&this.uint(t[2]);case 6:return this.int(t[1])&&this.int(t[2]);case 7:return!0;case 8:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.string(t[4])&&this.boolean(t[5]);case 9:case 10:case 24:case 35:case 51:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3]);case 12:case 52:case 61:case 71:return this.uint(t[1])&&this.string(t[2])&&this.string(t[3]);case 13:case 14:case 17:case 34:case 36:case 50:case 54:return this.uint(t[1])&&this.string(t[2]);case 16:return this.uint(t[1])&&this.int(t[2])&&this.int(t[3]);case 18:return this.uint(t[1])&&this.string(t[2])&&this.int(t[3]);case 19:return this.uint(t[1])&&this.boolean(t[2]);case 21:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4])&&this.string(t[5])&&this.uint(t[6])&&this.uint(t[7])&&this.uint(t[8]);case 22:case 27:case 30:case 41:case 45:case 46:case 43:case 63:case 64:case 79:case 124:return this.string(t[1])&&this.string(t[2]);case 23:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.uint(t[4])&&this.uint(t[5])&&this.uint(t[6])&&this.uint(t[7])&&this.uint(t[8])&&this.uint(t[9]);case 28:case 29:case 42:case 117:case 118:return this.string(t[1]);case 40:return this.string(t[1])&&this.uint(t[2])&&this.string(t[3])&&this.string(t[4]);case 48:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4])&&this.int(t[5]);case 49:return this.int(t[1])&&this.int(t[2])&&this.uint(t[3])&&this.uint(t[4]);case 53:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.uint(t[4])&&this.uint(t[5])&&this.uint(t[6])&&this.string(t[7])&&this.string(t[8]);case 55:return this.boolean(t[1]);case 57:case 60:return this.uint(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4]);case 58:case 120:return this.int(t[1]);case 68:return this.uint(t[1])&&this.uint(t[2])&&this.string(t[3])&&this.string(t[4])&&this.uint(t[5])&&this.uint(t[6]);case 69:return this.uint(t[1])&&this.uint(t[2])&&this.string(t[3])&&this.string(t[4]);case 73:return this.uint(t[1])&&this.string(t[2])&&this.uint(t[3])&&this.string(t[4]);case 78:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4]);case 81:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.int(t[4])&&this.string(t[5]);case 83:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4])&&this.string(t[5])&&this.uint(t[6])&&this.uint(t[7])&&this.uint(t[8])&&this.uint(t[9]);case 84:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.uint(t[4])&&this.string(t[5])&&this.string(t[6]);case 85:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.uint(t[4])&&this.uint(t[5])&&this.uint(t[6])&&this.string(t[7])&&this.string(t[8])&&this.uint(t[9])&&this.boolean(t[10])&&this.uint(t[11])&&this.uint(t[12])&&this.uint(t[13])&&this.uint(t[14])&&this.uint(t[15])&&this.uint(t[16])&&this.uint(t[17]);case 87:return this.string(t[1])&&this.int(t[2])&&this.int(t[3]);case 89:return this.string(t[1])&&this.int(t[2])&&this.int(t[3])&&this.int(t[4])&&this.int(t[5])&&this.string(t[6]);case 112:return this.uint(t[1])&&this.string(t[2])&&this.boolean(t[3])&&this.string(t[4])&&this.int(t[5])&&this.int(t[6]);case 113:return this.uint(t[1])&&this.uint(t[2])&&this.string(t[3]);case 116:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.uint(t[4])&&this.uint(t[5])&&this.uint(t[6])&&this.string(t[7])&&this.string(t[8])&&this.uint(t[9])&&this.boolean(t[10]);case 119:return this.string(t[1])&&this.uint(t[2]);case 121:return this.string(t[1])&&this.string(t[2])&&this.uint(t[3])&&this.uint(t[4]);case 122:return this.string(t[1])&&this.string(t[2])&&this.uint(t[3])&&this.string(t[4]);case 123:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4])&&this.uint(t[5])}}}class a{constructor(t,s,i){this.bufferSize=t,this.version=s,this.dataType=i,this.sizeBuffer=new Uint8Array(3),this.snap=null,this.hasNonTimestamp=!1,this.lastPushedTs=0,this.encoder=new r(t)}push(t,s){const i=this.encoder,e=null===this.snap,n=i.getCurrentOffset(),h=i.getCurrentCheckpoint();if(e){const t={pageNo:s.pageNo,firstIndex:s.index,timestamp:s.timestamp,url:s.url,tabId:s.tabId};if(!this.writeHeader(t))return i.rewind(n,h),!1;this.snap=t,this.lastPushedTs=s.timestamp}return 0===t[0]||s.timestamp===this.lastPushedTs||this.writeMessageWithSize([0,s.timestamp])?this.writeMessageWithSize(t)?(this.lastPushedTs=s.timestamp,0!==t[0]&&(this.hasNonTimestamp=!0),!0):(i.rewind(n,h),e&&(this.snap=null),!1):(i.rewind(n,h),!1)}hasContent(){return null!==this.snap&&this.hasNonTimestamp}flush(){if(!this.hasContent())return this.reset(),null;const t=this.encoder.flush();return this.snap=null,this.hasNonTimestamp=!1,this.lastPushedTs=0,t}reset(){this.encoder.reset(),this.snap=null,this.hasNonTimestamp=!1,this.lastPushedTs=0}writeHeader(t){const s=this.encoder,i=[81,this.version,t.pageNo,t.firstIndex,t.timestamp,t.url];return!!s.uint(i[0])&&(!!s.encode(i)&&(!(s.getCurrentOffset()>this.bufferSize)&&(s.checkpoint(),!!this.writeMessageWithSize([0,t.timestamp])&&!!this.writeMessageWithSize([118,t.tabId]))))}writeMessageWithSize(t){const s=this.encoder;if(!s.uint(t[0])||!s.skip(3))return!1;const i=s.getCurrentOffset();if(!s.encode(t))return!1;const e=s.getCurrentOffset(),n=e-i;return n>16777215?(console.warn(\"OxvoSessions: max message size overflow.\"),!1):!(e>this.bufferSize)&&(this.writeSizeAt(n,i-3),s.checkpoint(),!0)}writeSizeAt(t,s){for(let s=0;s<3;s++)this.sizeBuffer[s]=t>>8*s;this.encoder.set(this.sizeBuffer,s)}}class o{constructor(t,s,i,e,n,h,r=!1,o){this.pageNo=t,this.timestamp=s,this.url=i,this.onBatch=e,this.tabId=n,this.onOfflineEnd=h,this.localDebug=r,this.onLocalSave=o,this.nextIndex=0,this.beaconSize=2e5,this.beaconSizeLimit=1e6,this.protocolVersion=1,this.playerBuilder=new a(this.beaconSize,this.playerVersion(),\"player\"),this.assetBuilder=new a(this.beaconSize,3,\"assets\"),this.devtoolsBuilder=new a(this.beaconSize,4,\"devtools\"),this.analyticsBuilder=new a(this.beaconSize,5,\"analytics\")}playerVersion(){return 2===this.protocolVersion?2:1}currentCtx(){return{pageNo:this.pageNo,index:this.nextIndex,timestamp:this.timestamp,url:this.url,tabId:this.tabId}}setBeaconSizeLimit(t){this.beaconSizeLimit=t}setProtocolVersion(t){this.protocolVersion!==t&&(this.protocolVersion=t,this.playerBuilder.reset(),this.playerBuilder=new a(this.beaconSize,this.playerVersion(),\"player\"))}writeMessage(t){if(-1===t[0])return this.finaliseBatch(),this.onOfflineEnd();0===t[0]&&(this.timestamp=t[1]),122===t[0]&&(this.url=t[1]);const s=this.routeMessage(t);this.pushTo(s,t)}routeMessage(t){if(2===this.protocolVersion){const n=t[0];if(s.has(n))return this.assetBuilder;if(i.has(n))return this.devtoolsBuilder;if(e.has(n))return this.analyticsBuilder}return this.playerBuilder}pushTo(t,s){const i=this.currentCtx();if(t.push(s,i))return void this.nextIndex++;if(this.flushBuilder(t),t.push(s,i))return void this.nextIndex++;const e=new a(this.beaconSizeLimit,t.version,t.dataType);if(!e.push(s,i))return void console.warn(\"OxvoSessions: beacon size overflow. Skipping large message.\",s);this.nextIndex++;const n=e.flush();n&&this.emitBatch(n,t.dataType,!1)}flushBuilder(t,s=!1){const i=t.flush();return!!i&&(this.emitBatch(i,t.dataType,s),!0)}emitBatch(t,s,i){this.localDebug&&this.onLocalSave&&this.onLocalSave(`${s}-${Date.now()}`,t.slice()),this.onBatch(t,i,s)}finaliseBatch(t=!1){this.flushBuilder(this.playerBuilder,t),this.flushBuilder(this.assetBuilder,t),this.flushBuilder(this.devtoolsBuilder,t),this.flushBuilder(this.analyticsBuilder,t)}clean(){this.playerBuilder.reset(),this.assetBuilder.reset(),this.devtoolsBuilder.reset(),this.analyticsBuilder.reset()}}var u;!function(t){t[t.NotActive=0]=\"NotActive\",t[t.Starting=1]=\"Starting\",t[t.Stopping=2]=\"Stopping\",t[t.Active=3]=\"Active\",t[t.Stopped=4]=\"Stopped\"}(u||(u={}));let c=null,l=null,d=u.NotActive;function p(t){l&&l.finaliseBatch(t)}function f(){return new Promise((t=>{d=u.Stopping,null!==b&&(clearInterval(b),b=null),l&&(l.clean(),l=null),c&&(c.clean(),setTimeout((()=>{c=null}),20)),setTimeout((()=>{d=u.NotActive,t(null)}),100)}))}function g(){[u.Stopped,u.Stopping].includes(d)||(postMessage(\"a_stop\"),f().then((()=>{postMessage(\"a_start\")})))}let m,b=null;self.onmessage=({data:s})=>{var i;if(\"stop\"===s)return p(),void f().then((()=>{d=u.Stopped}));if(\"forceFlushBatch\"!==s)if(\"closing\"!==s){if(!Array.isArray(s)){if(\"compressed\"===s.type){if(!c)return console.debug(\"OR WebWorker: sender not initialised. Compressed batch.\"),void g();s.batch&&c.sendCompressed(s.batch,s.dataType)}if(\"uncompressed\"===s.type){if(!c)return console.debug(\"OR WebWorker: sender not initialised. Uncompressed batch.\"),void g();s.batch&&c.sendUncompressed(s.batch,s.dataType)}return\"start\"===s.type?(d=u.Starting,c=new t(s.ingestPoint,(()=>{g()}),(t=>{!function(t){postMessage({type:\"failure\",reason:t}),f()}(t)}),s.connAttemptCount,s.connAttemptGap,((t,s)=>{postMessage({type:\"compress\",batch:t,dataType:s},[t.buffer])}),s.pageNo),l=new o(s.pageNo,s.timestamp,s.url,((t,s,i=\"player\")=>{c&&(s?c.sendUncompressed(t,i):c.push(t,i))}),s.tabId,(()=>postMessage({type:\"queue_empty\"})),null!==(i=s.localDebug)&&void 0!==i&&i,((t,s)=>{postMessage({type:\"local_save\",name:t,batch:s},[s.buffer])})),null===b&&(b=setInterval(p,3e4)),d=u.Active):\"auth\"===s.type?c?l?(c.authorise(s.token),s.beaconSizeLimit&&l.setBeaconSizeLimit(s.beaconSizeLimit),void(s.protocolVersion&&l.setProtocolVersion(s.protocolVersion))):(console.debug(\"OR WebWorker: writer not initialised. Received auth.\"),void g()):(console.debug(\"OR WebWorker: sender not initialised. Received auth.\"),void g()):void 0}if(l){const t=l;s.forEach((s=>{55===s[0]&&(s[1]?m=setTimeout((()=>g()),18e5):clearTimeout(m)),t.writeMessage(s)}))}else postMessage(\"not_init\"),g()}else p(!0);else p()}}();\n";
+const workerBodyFn = "!function(){\"use strict\";class t{constructor(t,s,i,e=10,n=250,h,r){this.onUnauthorised=s,this.onFailure=i,this.MAX_ATTEMPTS_COUNT=e,this.ATTEMPT_TIMEOUT=n,this.onCompress=h,this.pageNo=r,this.attemptsCount=0,this.busy=!1,this.queue=[],this.token=null,this.lastBatchNum=0,this.inflightKeepaliveBytes=0,this.ingestURL=t+\"/v1/events\",this.analyticsIngestURL=t+\"/v1/analytics\",this.isCompressing=void 0!==h}getQueueStatus(){return 0===this.queue.length&&!this.busy}authorise(t){this.token=t,this.busy||this.sendNext()}push(t,s=\"player\"){if(this.busy||!this.token)this.queue.push({batch:t,dataType:s});else if(this.busy=!0,this.isCompressing&&this.onCompress)this.onCompress(t,s);else{const i=++this.lastBatchNum;this.sendBatch(t,!1,i,s)}}sendNext(){const t=this.queue.shift();if(t)if(this.busy=!0,this.isCompressing&&this.onCompress)this.onCompress(t.batch,t.dataType);else{const s=++this.lastBatchNum;this.sendBatch(t.batch,!1,s,t.dataType)}else this.busy=!1}retry(t,s,i,e=\"player\"){if(this.attemptsCount>=this.MAX_ATTEMPTS_COUNT)return void this.onFailure(`Failed to send batch after ${this.attemptsCount} attempts.`);this.attemptsCount++;const n=new Uint8Array(t);setTimeout((()=>this.sendBatch(n,s,i,e)),this.ATTEMPT_TIMEOUT*this.attemptsCount)}sendBatch(t,s,i,e=\"player\"){var n;if(0===t.length)return console.error(\"OxvoSessions: refusing to send 0-byte batch.\",{batchNum:i,dataType:e,isCompressed:s,batch:t}),this.attemptsCount=0,void this.sendNext();const h=null==i?void 0:i.toString().replace(/^([^_]+)_([^_]+).*/,\"$1_$2_$3\");this.busy=!0;const r={Authorization:`Bearer ${this.token}`,DataType:e};if(s&&(r[\"Content-Encoding\"]=\"gzip\"),null===this.token)return void setTimeout((()=>{this.sendBatch(t,s,`${null!=i?i:\"noBatchNum\"}_newToken`,e)}),500);const a=t.length<65536&&this.inflightKeepaliveBytes+t.length<=65536;a&&(this.inflightKeepaliveBytes+=t.length);const o=()=>{a&&(this.inflightKeepaliveBytes-=t.length)},u=`${null!==(n=this.pageNo)&&void 0!==n?n:\"noPageNum\"}_${null!=h?h:\"noBatchNum\"}`,c=\"analytics\"===e?this.analyticsIngestURL:this.ingestURL;fetch(`${c}?seq=${u}&keepalive=${a?\"yes\":\"no\"}`,{body:t,method:\"POST\",headers:r,keepalive:a}).then((n=>{var h;if(o(),null===(h=n.body)||void 0===h||h.cancel().catch((()=>{})),401===n.status)return this.busy=!1,void this.onUnauthorised();n.status>=400?this.retry(t,s,`${null!=i?i:\"noBatchNum\"}_network:${n.status}`,e):(this.attemptsCount=0,this.sendNext())})).catch((n=>{o(),console.warn(\"OxvoSessions:\",n),this.retry(t,s,`${null!=i?i:\"noBatchNum\"}_reject:${n.message}`,e)}))}sendCompressed(t,s=\"player\"){const i=++this.lastBatchNum;this.sendBatch(t,!0,i,s)}sendUncompressed(t,s=\"player\"){const i=++this.lastBatchNum;this.sendBatch(t,!1,i,s)}clean(){this.sendNext(),setTimeout((()=>{this.token=null,this.queue.length=0}),10)}}const s=new Set([60,61,71,73]),i=new Set([21,22,40,41,44,45,46,47,48,79,83,84,85,87,89,116,120,121,123]),e=new Set([17,23,24,27,28,29,30,42,63,64,78,112,115,124]),n=\"function\"==typeof TextEncoder?new TextEncoder:{encode(t){const s=t.length,i=new Uint8Array(3*s);let e=-1;for(let n=0,h=0,r=0;r!==s;){if(n=t.charCodeAt(r),r+=1,n>=55296&&n<=56319){if(r===s){i[e+=1]=239,i[e+=1]=191,i[e+=1]=189;break}if(h=t.charCodeAt(r),!(h>=56320&&h<=57343)){i[e+=1]=239,i[e+=1]=191,i[e+=1]=189;continue}if(n=1024*(n-55296)+h-56320+65536,r+=1,n>65535){i[e+=1]=240|n>>>18,i[e+=1]=128|n>>>12&63,i[e+=1]=128|n>>>6&63,i[e+=1]=128|63&n;continue}}n<=127?i[e+=1]=0|n:n<=2047?(i[e+=1]=192|n>>>6,i[e+=1]=128|63&n):(i[e+=1]=224|n>>>12,i[e+=1]=128|n>>>6&63,i[e+=1]=128|63&n)}return i.subarray(0,e+1)}};class h{constructor(t){this.size=t,this.offset=0,this.checkpointOffset=0,this.data=new Uint8Array(t)}getCurrentOffset(){return this.offset}getCurrentCheckpoint(){return this.checkpointOffset}checkpoint(){this.checkpointOffset=this.offset}get isEmpty(){return 0===this.offset}skip(t){return this.offset+=t,this.offset<=this.size}set(t,s){this.data.set(t,s)}boolean(t){return this.data[this.offset++]=+t,this.offset<=this.size}uint(t){for((t<0||t>Number.MAX_SAFE_INTEGER)&&(t=0);t>=128;)this.data[this.offset++]=t%256|128,t=Math.floor(t/128);return this.data[this.offset++]=t,this.offset<=this.size}int(t){return t=Math.round(t),this.uint(t>=0?2*t:-2*t-1)}string(t){const s=n.encode(t),i=s.byteLength;return!(!this.uint(i)||this.offset+i>this.size)&&(this.data.set(s,this.offset),this.offset+=i,!0)}reset(){this.offset=0,this.checkpointOffset=0}rewind(t,s){t>this.offset||s>this.checkpointOffset||(this.offset=t,this.checkpointOffset=s)}flush(){const t=this.data.slice(0,this.checkpointOffset);return this.reset(),t}}class r extends h{encode(t){switch(t[0]){case 0:case 11:case 114:case 115:return this.uint(t[1]);case 4:case 44:case 47:return this.string(t[1])&&this.string(t[2])&&this.uint(t[3]);case 5:case 20:case 65:case 70:case 75:case 76:case 77:return this.uint(t[1])&&this.uint(t[2]);case 6:return this.int(t[1])&&this.int(t[2]);case 7:return!0;case 8:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.string(t[4])&&this.boolean(t[5]);case 9:case 10:case 24:case 35:case 51:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3]);case 12:case 52:case 61:case 71:return this.uint(t[1])&&this.string(t[2])&&this.string(t[3]);case 13:case 14:case 17:case 34:case 36:case 50:case 54:return this.uint(t[1])&&this.string(t[2]);case 16:return this.uint(t[1])&&this.int(t[2])&&this.int(t[3]);case 18:return this.uint(t[1])&&this.string(t[2])&&this.int(t[3]);case 19:return this.uint(t[1])&&this.boolean(t[2]);case 21:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4])&&this.string(t[5])&&this.uint(t[6])&&this.uint(t[7])&&this.uint(t[8]);case 22:case 27:case 30:case 41:case 45:case 46:case 43:case 63:case 64:case 79:case 124:return this.string(t[1])&&this.string(t[2]);case 23:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.uint(t[4])&&this.uint(t[5])&&this.uint(t[6])&&this.uint(t[7])&&this.uint(t[8])&&this.uint(t[9]);case 28:case 29:case 42:case 117:case 118:return this.string(t[1]);case 40:return this.string(t[1])&&this.uint(t[2])&&this.string(t[3])&&this.string(t[4]);case 48:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4])&&this.int(t[5]);case 49:return this.int(t[1])&&this.int(t[2])&&this.uint(t[3])&&this.uint(t[4]);case 53:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.uint(t[4])&&this.uint(t[5])&&this.uint(t[6])&&this.string(t[7])&&this.string(t[8]);case 55:return this.boolean(t[1]);case 57:case 60:return this.uint(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4]);case 58:case 120:return this.int(t[1]);case 68:return this.uint(t[1])&&this.uint(t[2])&&this.string(t[3])&&this.string(t[4])&&this.uint(t[5])&&this.uint(t[6]);case 69:return this.uint(t[1])&&this.uint(t[2])&&this.string(t[3])&&this.string(t[4]);case 73:return this.uint(t[1])&&this.string(t[2])&&this.uint(t[3])&&this.string(t[4]);case 78:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4]);case 81:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.int(t[4])&&this.string(t[5]);case 83:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4])&&this.string(t[5])&&this.uint(t[6])&&this.uint(t[7])&&this.uint(t[8])&&this.uint(t[9]);case 84:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.uint(t[4])&&this.string(t[5])&&this.string(t[6]);case 85:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.uint(t[4])&&this.uint(t[5])&&this.uint(t[6])&&this.string(t[7])&&this.string(t[8])&&this.uint(t[9])&&this.boolean(t[10])&&this.uint(t[11])&&this.uint(t[12])&&this.uint(t[13])&&this.uint(t[14])&&this.uint(t[15])&&this.uint(t[16])&&this.uint(t[17]);case 87:return this.string(t[1])&&this.int(t[2])&&this.int(t[3]);case 89:return this.string(t[1])&&this.int(t[2])&&this.int(t[3])&&this.int(t[4])&&this.int(t[5])&&this.string(t[6]);case 112:return this.uint(t[1])&&this.string(t[2])&&this.boolean(t[3])&&this.string(t[4])&&this.int(t[5])&&this.int(t[6]);case 113:return this.uint(t[1])&&this.uint(t[2])&&this.string(t[3]);case 116:return this.uint(t[1])&&this.uint(t[2])&&this.uint(t[3])&&this.uint(t[4])&&this.uint(t[5])&&this.uint(t[6])&&this.string(t[7])&&this.string(t[8])&&this.uint(t[9])&&this.boolean(t[10]);case 119:return this.string(t[1])&&this.uint(t[2]);case 121:return this.string(t[1])&&this.string(t[2])&&this.uint(t[3])&&this.uint(t[4]);case 122:return this.string(t[1])&&this.string(t[2])&&this.uint(t[3])&&this.string(t[4]);case 123:return this.string(t[1])&&this.string(t[2])&&this.string(t[3])&&this.string(t[4])&&this.uint(t[5])}}}class a{constructor(t,s,i){this.bufferSize=t,this.version=s,this.dataType=i,this.sizeBuffer=new Uint8Array(3),this.snap=null,this.hasNonTimestamp=!1,this.lastPushedTs=0,this.encoder=new r(t)}push(t,s){const i=this.encoder,e=null===this.snap,n=i.getCurrentOffset(),h=i.getCurrentCheckpoint();if(e){const t={pageNo:s.pageNo,firstIndex:s.index,timestamp:s.timestamp,url:s.url,tabId:s.tabId};if(!this.writeHeader(t))return i.rewind(n,h),!1;this.snap=t,this.lastPushedTs=s.timestamp}return 0===t[0]||s.timestamp===this.lastPushedTs||this.writeMessageWithSize([0,s.timestamp])?this.writeMessageWithSize(t)?(this.lastPushedTs=s.timestamp,0!==t[0]&&(this.hasNonTimestamp=!0),!0):(i.rewind(n,h),e&&(this.snap=null),!1):(i.rewind(n,h),!1)}hasContent(){return null!==this.snap&&this.hasNonTimestamp}flush(){if(!this.hasContent())return this.reset(),null;const t=this.encoder.flush();return this.snap=null,this.hasNonTimestamp=!1,this.lastPushedTs=0,t}reset(){this.encoder.reset(),this.snap=null,this.hasNonTimestamp=!1,this.lastPushedTs=0}writeHeader(t){const s=this.encoder,i=[81,this.version,t.pageNo,t.firstIndex,t.timestamp,t.url];return!!s.uint(i[0])&&(!!s.encode(i)&&(!(s.getCurrentOffset()>this.bufferSize)&&(s.checkpoint(),!!this.writeMessageWithSize([0,t.timestamp])&&!!this.writeMessageWithSize([118,t.tabId]))))}writeMessageWithSize(t){const s=this.encoder;if(!s.uint(t[0])||!s.skip(3))return!1;const i=s.getCurrentOffset();if(!s.encode(t))return!1;const e=s.getCurrentOffset(),n=e-i;return n>16777215?(console.warn(\"OxvoSessions: max message size overflow.\"),!1):!(e>this.bufferSize)&&(this.writeSizeAt(n,i-3),s.checkpoint(),!0)}writeSizeAt(t,s){for(let s=0;s<3;s++)this.sizeBuffer[s]=t>>8*s;this.encoder.set(this.sizeBuffer,s)}}class o{constructor(t,s,i,e,n,h,r=!1,o){this.pageNo=t,this.timestamp=s,this.url=i,this.onBatch=e,this.tabId=n,this.onOfflineEnd=h,this.localDebug=r,this.onLocalSave=o,this.nextIndex=0,this.beaconSize=2e5,this.beaconSizeLimit=1e6,this.protocolVersion=1,this.playerBuilder=new a(this.beaconSize,this.playerVersion(),\"player\"),this.assetBuilder=new a(this.beaconSize,3,\"assets\"),this.devtoolsBuilder=new a(this.beaconSize,4,\"devtools\"),this.analyticsBuilder=new a(this.beaconSize,5,\"analytics\")}playerVersion(){return 2===this.protocolVersion?2:1}currentCtx(){return{pageNo:this.pageNo,index:this.nextIndex,timestamp:this.timestamp,url:this.url,tabId:this.tabId}}setBeaconSizeLimit(t){this.beaconSizeLimit=t}setProtocolVersion(t){this.protocolVersion!==t&&(this.protocolVersion=t,this.playerBuilder.reset(),this.playerBuilder=new a(this.beaconSize,this.playerVersion(),\"player\"))}writeMessage(t){if(-1===t[0])return this.finaliseBatch(),this.onOfflineEnd();0===t[0]&&(this.timestamp=t[1]),122===t[0]&&(this.url=t[1]);const s=this.routeMessage(t);this.pushTo(s,t)}routeMessage(t){if(2===this.protocolVersion){const n=t[0];if(s.has(n))return this.assetBuilder;if(i.has(n))return this.devtoolsBuilder;if(e.has(n))return this.analyticsBuilder}return this.playerBuilder}pushTo(t,s){const i=this.currentCtx();if(t.push(s,i))return void this.nextIndex++;if(this.flushBuilder(t),t.push(s,i))return void this.nextIndex++;const e=new a(this.beaconSizeLimit,t.version,t.dataType);if(!e.push(s,i))return void console.warn(\"OxvoSessions: beacon size overflow. Skipping large message.\",s);this.nextIndex++;const n=e.flush();n&&this.emitBatch(n,t.dataType,!1)}flushBuilder(t,s=!1){const i=t.flush();return!!i&&(this.emitBatch(i,t.dataType,s),!0)}emitBatch(t,s,i){this.localDebug&&this.onLocalSave&&this.onLocalSave(`${s}-${Date.now()}`,t.slice()),this.onBatch(t,i,s)}finaliseBatch(t=!1){this.flushBuilder(this.playerBuilder,t),this.flushBuilder(this.assetBuilder,t),this.flushBuilder(this.devtoolsBuilder,t),this.flushBuilder(this.analyticsBuilder,t)}clean(){this.playerBuilder.reset(),this.assetBuilder.reset(),this.devtoolsBuilder.reset(),this.analyticsBuilder.reset()}}var u;!function(t){t[t.NotActive=0]=\"NotActive\",t[t.Starting=1]=\"Starting\",t[t.Stopping=2]=\"Stopping\",t[t.Active=3]=\"Active\",t[t.Stopped=4]=\"Stopped\"}(u||(u={}));let c=null,l=null,d=u.NotActive;function p(t){l&&l.finaliseBatch(t)}function f(){return new Promise((t=>{d=u.Stopping,null!==y&&(clearInterval(y),y=null),l&&(l.clean(),l=null),c&&(c.clean(),setTimeout((()=>{c=null}),20)),setTimeout((()=>{d=u.NotActive,t(null)}),100)}))}function g(){[u.Stopped,u.Stopping].includes(d)||(postMessage(\"a_stop\"),f().then((()=>{postMessage(\"a_start\")})))}let m,y=null;self.onmessage=({data:s})=>{var i;if(\"stop\"===s)return p(),void f().then((()=>{d=u.Stopped}));if(\"forceFlushBatch\"!==s)if(\"closing\"!==s){if(!Array.isArray(s)){if(\"compressed\"===s.type){if(!c)return console.debug(\"OR WebWorker: sender not initialised. Compressed batch.\"),void g();s.batch&&c.sendCompressed(s.batch,s.dataType)}if(\"uncompressed\"===s.type){if(!c)return console.debug(\"OR WebWorker: sender not initialised. Uncompressed batch.\"),void g();s.batch&&c.sendUncompressed(s.batch,s.dataType)}return\"start\"===s.type?(d=u.Starting,c=new t(s.ingestPoint,(()=>{g()}),(t=>{!function(t){postMessage({type:\"failure\",reason:t}),f()}(t)}),s.connAttemptCount,s.connAttemptGap,((t,s)=>{postMessage({type:\"compress\",batch:t,dataType:s},[t.buffer])}),s.pageNo),l=new o(s.pageNo,s.timestamp,s.url,((t,s,i=\"player\")=>{c&&(s?c.sendUncompressed(t,i):c.push(t,i))}),s.tabId,(()=>postMessage({type:\"queue_empty\"})),null!==(i=s.localDebug)&&void 0!==i&&i,((t,s)=>{postMessage({type:\"local_save\",name:t,batch:s},[s.buffer])})),null===y&&(y=setInterval(p,3e4)),d=u.Active):\"auth\"===s.type?c?l?(c.authorise(s.token),s.beaconSizeLimit&&l.setBeaconSizeLimit(s.beaconSizeLimit),void(s.protocolVersion&&l.setProtocolVersion(s.protocolVersion))):(console.debug(\"OR WebWorker: writer not initialised. Received auth.\"),void g()):(console.debug(\"OR WebWorker: sender not initialised. Received auth.\"),void g()):void 0}if(l){const t=l;s.forEach((s=>{55===s[0]&&(s[1]?m=setTimeout((()=>g()),18e5):clearTimeout(m)),t.writeMessage(s)}))}else postMessage(\"not_init\"),g()}else p(!0);else p()}}();\n";
 const CANCELED = 'canceled';
 const bufferStorageKey = 'or_buffer_1';
 const PROTO_VERSION = '2';
+const BOOTSTRAP_ATTEMPT_TTL_MS = 24 * 60 * 60 * 1000;
+const MAX_BOOTSTRAP_ATTEMPT_STORAGE_LENGTH = 1024 * 1024;
+const MAX_SESSION_TOKEN_LENGTH = 4096;
+const MAX_ASSIST_SESSION_GRANT_LENGTH = 4096;
+const LINKAGE_ASSERTION_METADATA_KEY = 'oxvo_linkage_assertion';
+const MESSENGER_LINKAGE_CHALLENGE_PATTERN = /^[a-f0-9]{64}$/;
+const MIN_MESSENGER_LINKAGE_CHALLENGE_TTL_SECONDS = 5;
+const MAX_MESSENGER_LINKAGE_CHALLENGE_TTL_SECONDS = 120;
+const asRecord = (value) => value !== null && typeof value === 'object' && !Array.isArray(value)
+    ? value
+    : {};
+const isValidBootstrapCredential = (value, maxLength) => typeof value === 'string' &&
+    value.length > 0 &&
+    value.length <= maxLength &&
+    value.trim() === value;
+const parseMessengerLinkageChallenge = (value, expectedSessionId) => {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        return null;
+    }
+    const record = value;
+    const keys = Object.keys(record).sort();
+    if (keys.length !== 3 ||
+        keys[0] !== 'challenge' ||
+        keys[1] !== 'expiresIn' ||
+        keys[2] !== 'sessionId' ||
+        typeof record.challenge !== 'string' ||
+        !MESSENGER_LINKAGE_CHALLENGE_PATTERN.test(record.challenge) ||
+        record.sessionId !== expectedSessionId ||
+        !Number.isInteger(record.expiresIn) ||
+        record.expiresIn < MIN_MESSENGER_LINKAGE_CHALLENGE_TTL_SECONDS ||
+        record.expiresIn > MAX_MESSENGER_LINKAGE_CHALLENGE_TTL_SECONDS) {
+        return null;
+    }
+    return {
+        challenge: record.challenge,
+        sessionId: expectedSessionId,
+        expiresIn: record.expiresIn,
+    };
+};
+const bootstrapHttpError = async (response, responseText, knownSecrets = []) => {
+    let body;
+    try {
+        body = responseText ?? (await response.text());
+    }
+    catch (error) {
+        return redactedErrorFrom(error, `Server error: ${response.status}.`, knownSecrets);
+    }
+    return redactedErrorFrom(`Server error: ${response.status}. ${body}`, `Server error: ${response.status}.`, knownSecrets);
+};
+const bootstrapJson = async (response, knownSecrets = []) => {
+    try {
+        return asRecord(await response.json());
+    }
+    catch (error) {
+        throw redactedErrorFrom(error, 'Incorrect server response (invalid JSON)', knownSecrets);
+    }
+};
 const UnsuccessfulStart = (reason) => ({ reason, success: false });
 const SuccessfulStart = (body) => ({ ...body, success: true });
 var ActivityState;
@@ -4142,18 +4850,25 @@ const proto = {
     resp: 'never-gonna-let-you-down',
     // regenerating id (copied other tab)
     reg: 'never-gonna-run-around-and-desert-you',
-    iframeSignal: 'tracker inside a child iframe',
-    iframeId: 'getting node id for child iframe',
-    iframeBatch: 'batch of messages from an iframe window',
-    parentAlive: 'signal that parent is live',
-    killIframe: 'stop tracker inside frame',
-    startIframe: 'start tracker inside frame',
+    iframeSignal: 'oxvo:cross-frame:v1:handshake',
+    iframeId: 'oxvo:cross-frame:v1:ready',
+    iframeBatch: 'oxvo:cross-frame:v1:batch',
+    parentAlive: 'oxvo:cross-frame:v1:pong',
+    killIframe: 'oxvo:cross-frame:v1:stop',
+    startIframe: 'oxvo:cross-frame:v1:start',
     // checking updates
-    polling: 'hello-how-are-you-im-under-the-water-please-help-me',
+    polling: 'oxvo:cross-frame:v1:ping',
     // happens if tab is old and has outdated token but
     // not communicating with backend to update it (for whatever reason)
     reset: 'reset-your-session-please',
 };
+const FRAME_RATE_WINDOW_MS = 1000;
+const MAX_FRAME_ENVELOPES_PER_WINDOW = 120;
+const MAX_FRAME_MESSAGES_PER_WINDOW = 50000;
+const MAX_FRAME_BYTES_PER_WINDOW = 4 * 1024 * 1024;
+const FRAME_CAPABILITY_TTL_MS = 5 * 60 * 1000;
+const FRAME_CAPABILITY_REFRESH_LEAD_MS = 60 * 1000;
+const FRAME_PREVIOUS_CAPABILITY_GRACE_MS = 5 * 1000;
 class App {
     get tagMatcher() {
         return this.markerWatcher.matcher;
@@ -4174,18 +4889,32 @@ class App {
         this.stopCallbacks = [];
         this.commitCallbacks = [];
         this.activityState = ActivityState.NotActive;
-        this.version = '7.3.0'; // TODO: version compatability check inside each plugin.
+        this.version = '7.4.15'; // TODO: version compatability check inside each plugin.
         this.socketMode = false;
         this.compressionThreshold = 24 * 1000;
         this.bc = null;
         this.canvasRecorder = null;
         this.conditionsManager = null;
+        this.bootstrapAttempts = {};
+        this.assistSessionGrant = null;
         this.canStart = false;
         this.rootId = null;
         this.pageFrames = [];
         this.frameOderNumber = 0;
         this.frameLevel = 0;
         this.emptyBatchCounter = 0;
+        this.crossDomainFrameCapability = null;
+        this.crossDomainFrameCapabilityExpiresAt = 0;
+        this.crossDomainFrameSession = null;
+        this.crossDomainFrameCanvas = null;
+        this.crossDomainResumeAfterHandshake = false;
+        this.crossDomainConnectionRequested = false;
+        this.crossDomainFrames = new Map();
+        this.crossDomainEnvelopeBudgets = new WeakMap();
+        this.pendingCrossDomainFrames = new Map();
+        this.crossDomainAuthorizationGeneration = 0;
+        this.nextCrossDomainFrameOrder = 1;
+        this.crossDomainCanvasConfig = null;
         /** used by child iframes for crossdomain only */
         this.parentActive = false;
         this.checkStatus = () => {
@@ -4193,230 +4922,201 @@ class App {
         };
         this.parentCrossDomainFrameListener = (event) => {
             const { data } = event;
-            if (!data || event.source === window)
+            if (!data ||
+                this.crossDomainParentOrigin === null ||
+                this.crossDomainFrameNonce === null ||
+                event.source !== window.parent ||
+                event.origin !== this.crossDomainParentOrigin) {
+                return;
+            }
+            if (data.line === proto.iframeId) {
+                const init = parseCrossDomainFrameInit(data, proto.iframeId, {
+                    context: this.contextId,
+                    nonce: this.crossDomainFrameNonce,
+                });
+                if (init === null)
+                    return;
+                const sessionChanged = this.crossDomainFrameSession !== null &&
+                    this.crossDomainFrameSession.sessionID !== init.session.sessionID;
+                if (sessionChanged && this.activityState === ActivityState.Starting) {
+                    this.postHandshakeToParent();
+                    return;
+                }
+                const shouldResume = this.crossDomainResumeAfterHandshake || (sessionChanged && this.active());
+                if (sessionChanged && this.active()) {
+                    this.stop();
+                }
+                this.applyCrossDomainFrameInit(init);
+                if (shouldResume &&
+                    this.activityState !== ActivityState.Active &&
+                    this.activityState !== ActivityState.Starting) {
+                    this.crossDomainResumeAfterHandshake = false;
+                    this.startCrossDomainFrame(this.prevOpts);
+                }
+                this.debug.log('Starting secure cross-domain iframe tracking');
+                return;
+            }
+            const expectedLine = data.line === proto.parentAlive
+                ? proto.parentAlive
+                : data.line === proto.startIframe
+                    ? proto.startIframe
+                    : data.line === proto.killIframe
+                        ? proto.killIframe
+                        : null;
+            if (this.crossDomainFrameCapability === null ||
+                expectedLine === null ||
+                (expectedLine !== proto.killIframe &&
+                    Date.now() >= this.crossDomainFrameCapabilityExpiresAt) ||
+                !matchesCrossDomainEnvelope(data, expectedLine, {
+                    context: this.contextId,
+                    nonce: this.crossDomainFrameNonce,
+                    capability: this.crossDomainFrameCapability,
+                })) {
                 return;
+            }
+            if (data.line === proto.parentAlive) {
+                this.parentActive = true;
+                return;
+            }
             if (data.line === proto.startIframe) {
                 // Avoid corrupting an in-flight start; let it complete.
                 if (this.activityState === ActivityState.Starting)
                     return;
+                const init = parseCrossDomainFrameInit(data, proto.startIframe, {
+                    context: this.contextId,
+                    nonce: this.crossDomainFrameNonce,
+                });
+                if (init === null)
+                    return;
                 try {
                     if (this.active()) {
                         this.stop();
                     }
-                    if (data.token) {
-                        this.session.setSessionSecret(data.token, this.projectKey);
-                    }
-                    if (data.id !== undefined) {
-                        this.rootId = data.id;
-                    }
-                    this.allowAppStart();
-                    void this.start();
+                    this.applyCrossDomainFrameInit(init);
+                    this.startCrossDomainFrame(this.prevOpts);
                 }
                 catch (e) {
-                    console.error('children frame restart failed:', e);
+                    console.error('children frame restart failed:', redactDebugValue(e));
                 }
-            }
-            if (data.line === proto.parentAlive) {
-                this.parentActive = true;
-            }
-            if (data.line === proto.iframeId) {
-                this.parentActive = true;
-                this.rootId = data.id;
-                this.session.setSessionSecret(data.token, this.projectKey);
-                this.frameOderNumber = data.frameOrderNumber;
-                this.frameLevel = data.frameLevel;
-                this.debug.log('starting iframe tracking', data);
-                this.allowAppStart();
+                return;
             }
             if (data.line === proto.killIframe) {
-                if (this.active()) {
+                const shouldResume = this.activityState === ActivityState.Active || this.activityState === ActivityState.Starting;
+                if (this.activityState !== ActivityState.NotActive) {
                     this.stop();
                 }
+                this.clearCrossDomainFrameAuthorization();
+                this.crossDomainResumeAfterHandshake = shouldResume;
+                this.crossDomainConnectionRequested = shouldResume;
             }
         };
-        this.trackedFrames = [];
-        this.frameLastSeen = new Map();
-        this.FRAME_STALE_MS = 1500;
         this.crossDomainIframeListener = (event) => {
-            if (event.source === window)
-                return;
             const { data } = event;
-            if (!data)
+            if (!data || event.source === window)
+                return;
+            if (data.line === proto.iframeSignal) {
+                const handshake = parseCrossDomainHandshake(data, proto.iframeSignal, this.projectKey);
+                if (handshake !== null) {
+                    void this.establishCrossDomainFrame(event, handshake);
+                }
                 return;
-            // Record liveness regardless of our own active state so the queue can prune
-            // stale contexts reliably once we resume dispatching commands after a cycle.
-            if ((data.line === proto.polling || data.line === proto.iframeSignal) && data.context) {
-                this.frameLastSeen.set(data.context, Date.now());
             }
             if (!this.active())
                 return;
-            if (data.line === proto.iframeSignal) {
-                // @ts-ignore
-                event.source?.postMessage({ ping: true, line: proto.parentAlive }, '*');
-                const signalId = async () => {
-                    if (event.source === null) {
-                        return console.error('Couldnt connect to event.source for child iframe tracking');
-                    }
-                    const id = await this.checkNodeId(event.source);
-                    if (!id) {
-                        this.debug.log('Couldnt get node id for iframe', event.source);
-                        return;
-                    }
-                    try {
-                        if (this.trackedFrames.includes(data.context)) {
-                            this.debug.log('Trying to observe already added iframe; ignore if its a restart');
-                        }
-                        else {
-                            this.trackedFrames.push(data.context);
-                        }
-                        await this.waitStarted();
-                        const token = this.session.getSessionSecret(this.projectKey);
-                        const order = this.trackedFrames.findIndex((f) => f === data.context) + 1;
-                        if (order === 0) {
-                            this.debug.error('Couldnt get order number for iframe', data.context, this.trackedFrames);
-                        }
-                        const iframeData = {
-                            line: proto.iframeId,
-                            id,
-                            token,
-                            frameOrderNumber: order,
-                            frameLevel: this.frameLevel + 1,
-                        };
-                        this.debug.log('Got child frame signal; nodeId', id, event.source, iframeData);
-                        // @ts-ignore
-                        event.source?.postMessage(iframeData, '*');
-                    }
-                    catch (e) {
-                        console.error(e);
-                    }
-                };
-                void signalId();
+            if (data.line === proto.polling) {
+                const state = this.validatedCrossDomainFrame(event, proto.polling);
+                if (state !== null && this.consumeCrossDomainEnvelopeBudget(state.source)) {
+                    this.postToCrossDomainFrame(state, proto.parentAlive);
+                }
+                return;
             }
             /**
              * proxying messages from iframe to main body, so they can be in one batch (same indexes, etc)
              * plus we rewrite some of the messages to be relative to the main context/window
              * */
             if (data.line === proto.iframeBatch) {
-                const msgBatch = data.messages;
+                const state = this.validatedCrossDomainFrame(event, proto.iframeBatch);
+                if (state === null || !this.consumeCrossDomainEnvelopeBudget(state.source)) {
+                    return;
+                }
+                const batch = parseCrossDomainIframeBatch(data.messages);
+                if (batch === null ||
+                    !this.consumeCrossDomainFrameBudget(state, batch.messages.length, batch.bytes)) {
+                    return;
+                }
                 const mappedMessages = [];
-                msgBatch.forEach((msg) => {
+                batch.messages.forEach((msg) => {
+                    let fixedMessage = msg;
                     if (msg[0] === 20 /* MType.MouseMove */) {
-                        let fixedMessage = msg;
-                        this.pageFrames.forEach((frame) => {
-                            if (frame.contentWindow === event.source) {
-                                const [type, x, y] = msg;
-                                const { left, top } = frame.getBoundingClientRect();
-                                fixedMessage = [type, x + left, y + top];
-                            }
-                        });
-                        mappedMessages.push(fixedMessage);
+                        const [type, x, y] = msg;
+                        const { left, top } = state.frame.getBoundingClientRect();
+                        fixedMessage = [type, x + left, y + top];
                     }
                     if (msg[0] === 68 /* MType.MouseClick */) {
-                        let fixedMessage = msg;
-                        this.pageFrames.forEach((frame) => {
-                            if (frame.contentWindow === event.source) {
-                                const [type, id, hesitationTime, label, selector, normX, normY] = msg;
-                                const { left, top, width, height } = frame.getBoundingClientRect();
-                                const contentWidth = document.documentElement.scrollWidth;
-                                const contentHeight = document.documentElement.scrollHeight;
-                                // (normalizedX * frameWidth + frameLeftOffset)/docSize
-                                const fullX = (normX / 100) * width + left;
-                                const fullY = (normY / 100) * height + top;
-                                const fixedX = fullX / contentWidth;
-                                const fixedY = fullY / contentHeight;
-                                fixedMessage = [
-                                    type,
-                                    id,
-                                    hesitationTime,
-                                    label,
-                                    selector,
-                                    Math.round(fixedX * 1e3) / 1e1,
-                                    Math.round(fixedY * 1e3) / 1e1,
-                                ];
-                            }
-                        });
-                        mappedMessages.push(fixedMessage);
-                    }
-                    if (![28 /* MType.UserID */, 29 /* MType.UserAnonymousID */, 30 /* MType.Metadata */].includes(msg[0])) {
-                        mappedMessages.push(msg);
+                        const [type, id, hesitationTime, label, selector, normX, normY] = msg;
+                        const { left, top, width, height } = state.frame.getBoundingClientRect();
+                        const contentWidth = document.documentElement.scrollWidth;
+                        const contentHeight = document.documentElement.scrollHeight;
+                        const fullX = (normX / 100) * width + left;
+                        const fullY = (normY / 100) * height + top;
+                        const fixedX = fullX / contentWidth;
+                        const fixedY = fullY / contentHeight;
+                        fixedMessage = [
+                            type,
+                            id,
+                            hesitationTime,
+                            label,
+                            selector,
+                            Math.round(fixedX * 1e3) / 1e1,
+                            Math.round(fixedY * 1e3) / 1e1,
+                        ];
                     }
+                    mappedMessages.push(fixedMessage);
                 });
                 this.messages.push(...mappedMessages);
             }
-            if (data.line === proto.polling) {
-                if (!this.pollingQueue.order.length) {
-                    return;
-                }
-                this.pruneStaleFrames();
-                const liveSet = new Set(this.trackedFrames);
-                while (this.pollingQueue.order.length > 0) {
-                    const head = this.pollingQueue.order[0];
-                    this.pollingQueue[head] = this.pollingQueue[head].filter((ctx) => liveSet.has(ctx));
-                    if (this.pollingQueue[head].length === 0) {
-                        delete this.pollingQueue[head];
-                        this.pollingQueue.order.shift();
-                    }
-                    else {
-                        break;
-                    }
+        };
+        this.bootChildrenFrames = async () => {
+            await this.waitStarted();
+            this.pruneDetachedCrossDomainFrames();
+            for (const state of this.crossDomainFrames.values()) {
+                const authorizationGeneration = this.crossDomainAuthorizationGeneration;
+                const id = await this.checkNodeId(state.source);
+                const session = this.currentCrossDomainSession();
+                if (id === null ||
+                    session === null ||
+                    authorizationGeneration !== this.crossDomainAuthorizationGeneration ||
+                    this.crossDomainFrames.get(state.source) !== state ||
+                    !this.active()) {
+                    continue;
                 }
-                if (!this.pollingQueue.order.length) {
-                    return;
+                const rotated = this.crossDomainFrameNeedsRotation(state, session.sessionID);
+                if (rotated && !this.rotateCrossDomainFrameCapability(state, session.sessionID)) {
+                    continue;
                 }
-                const nextCommand = this.pollingQueue.order[0];
-                if (this.pollingQueue[nextCommand].includes(data.context)) {
-                    this.pollingQueue[nextCommand] = this.pollingQueue[nextCommand].filter((c) => c !== data.context);
-                    const message = { line: nextCommand };
-                    if (nextCommand === proto.startIframe) {
-                        message.token = this.session.getSessionSecret(this.projectKey);
-                        const targetFrame = this.pageFrames.find((f) => f.contentWindow === event.source) ||
-                            Array.from(document.querySelectorAll('iframe')).find((f) => f.contentWindow === event.source);
-                        if (targetFrame) {
-                            const nodeId = targetFrame[this.options.node_id];
-                            if (nodeId !== undefined) {
-                                message.id = nodeId;
-                            }
-                        }
-                    }
-                    // @ts-ignore
-                    event.source?.postMessage(message, '*');
-                    if (this.pollingQueue[nextCommand].length === 0) {
-                        delete this.pollingQueue[nextCommand];
-                        this.pollingQueue.order.shift();
-                    }
+                const payload = id === null ? null : this.frameInitPayload(state, id);
+                if (payload) {
+                    this.postToCrossDomainFrame(state, rotated ? proto.iframeId : proto.startIframe, payload);
                 }
             }
         };
-        /**
-         * { command : [remaining iframes] }
-         * + order of commands
-         **/
-        this.pollingQueue = {
-            order: [],
-        };
-        this.addCommand = (cmd) => {
-            this.pruneStaleFrames();
-            if (this.pollingQueue[cmd]) {
-                this.pollingQueue[cmd] = Array.from(new Set([...this.pollingQueue[cmd], ...this.trackedFrames]));
-                return;
-            }
-            this.pollingQueue.order.push(cmd);
-            this.pollingQueue[cmd] = [...this.trackedFrames];
-        };
-        this.bootChildrenFrames = async () => {
-            await this.waitStarted();
-            this.addCommand(proto.startIframe);
-        };
         this.killChildrenFrames = () => {
-            this.addCommand(proto.killIframe);
+            this.pruneDetachedCrossDomainFrames();
+            const states = Array.from(this.crossDomainFrames.values());
+            this.crossDomainAuthorizationGeneration += 1;
+            this.crossDomainFrames.clear();
+            this.pendingCrossDomainFrames.clear();
+            states.forEach((state) => {
+                this.postToCrossDomainFrame(state, proto.killIframe);
+            });
         };
         this.signalIframeTracker = () => {
-            const thisTab = this.session.getTabId();
-            window.parent.postMessage({
-                line: proto.iframeSignal,
-                source: thisTab,
-                context: this.contextId,
-            }, this.options.crossdomain?.parentDomain ?? '*');
+            if (this.crossDomainParentOrigin === null || this.crossDomainFrameNonce === null) {
+                this.debug.error('Cross-domain iframe capture requires an explicit parentDomain and secure random support.');
+                return;
+            }
+            this.crossDomainConnectionRequested = true;
+            this.postHandshakeToParent();
             /**
              * since we need to wait uncertain amount of time
              * and I don't want to have recursion going on,
@@ -4428,20 +5128,16 @@ class App {
             let cumulativeDelay = 0;
             let stopAttempts = false;
             const checkAndSendMessage = () => {
-                if (stopAttempts || this.checkStatus()) {
+                if (stopAttempts || !this.crossDomainConnectionRequested || this.checkStatus()) {
                     stopAttempts = true;
                     return;
                 }
-                window.parent.postMessage({
-                    line: proto.iframeSignal,
-                    source: thisTab,
-                    context: this.contextId,
-                }, this.options.crossdomain?.parentDomain ?? '*');
+                this.postHandshakeToParent();
                 this.debug.info('Trying to signal to parent, attempt:', retries + 1);
                 retries++;
             };
             for (let i = 0; i < maxRetries; i++) {
-                if (this.checkStatus()) {
+                if (!this.crossDomainConnectionRequested || this.checkStatus()) {
                     stopAttempts = true;
                     break;
                 }
@@ -4459,10 +5155,10 @@ class App {
                 this.allowAppStart();
                 this.start(this.prevOpts, true)
                     .then((r) => {
-                    this.debug.info('Session restart', r);
+                    this.debug.info('Session restart', redactDebugValue(r));
                 })
                     .catch((e) => {
-                    this.debug.error('Session restart failed', e);
+                    this.debug.error('Session restart failed', redactDebugValue(e));
                 });
             });
         };
@@ -4598,9 +5294,7 @@ class App {
             maskTextEmails: false,
             maskTextNumbers: false,
             disableStringDict: false,
-            crossdomain: {
-                parentDomain: '*',
-            },
+            crossdomain: {},
             canvas: {
                 disableCanvas: false,
                 fixedCanvasScaling: false,
@@ -4613,6 +5307,9 @@ class App {
             disableThrottling: false,
         };
         this.options = simpleMerge(defaultOptions, options);
+        this.crossDomainChildOrigins = normalizeCrossDomainOrigins(this.options.crossdomain?.childOrigins);
+        this.crossDomainParentOrigin = normalizeCrossDomainOrigin(this.options.crossdomain?.parentDomain);
+        this.crossDomainFrameNonce = this.insideIframe ? createCrossDomainSecret() : null;
         if (!this.insideIframe &&
             !this.options.forceSingleTab &&
             globalThis &&
@@ -4643,7 +5340,7 @@ class App {
         });
         this.markerWatcher = new MarkerWatcher({
             sessionStorage: this.sessionStorage,
-            errLog: this.debug.error,
+            errLog: (...args) => this.debug.error(...args.map((arg) => redactDebugValue(arg))),
             onMarkerHit: (markerId) => this.send(TagTrigger(markerId)),
         });
         this.session.attachUpdateCallback(({ userID, metadata }) => {
@@ -4659,22 +5356,33 @@ class App {
             }
         });
         // @deprecated (use sessionHash on start instead)
-        if (sessionToken != null) {
+        if (sessionToken != null && !this.insideIframe) {
             this.session.applySessionHash(sessionToken);
         }
+        if (this.insideIframe) {
+            this.session.clearSessionSecret();
+        }
         const thisTab = this.session.getTabId();
         if (this.insideIframe) {
-            /**
-             * listen for messages from parent window, so we can signal that we're alive
-             * */
-            window.addEventListener('message', this.parentCrossDomainFrameListener);
-            window.addEventListener('message', this.crossDomainIframeListener);
-            setInterval(() => {
-                window.parent.postMessage({
-                    line: proto.polling,
-                    context: this.contextId,
-                }, options.crossdomain?.parentDomain ?? '*');
-            }, 250);
+            if (this.crossDomainParentOrigin !== null && this.crossDomainFrameNonce !== null) {
+                /**
+                 * listen for messages from parent window, so we can signal that we're alive
+                 * */
+                window.addEventListener('message', this.parentCrossDomainFrameListener);
+                setInterval(() => {
+                    if (!this.crossDomainConnectionRequested) {
+                        return;
+                    }
+                    if (this.crossDomainFrameCapability === null ||
+                        Date.now() >=
+                            this.crossDomainFrameCapabilityExpiresAt - FRAME_CAPABILITY_REFRESH_LEAD_MS) {
+                        this.postHandshakeToParent();
+                    }
+                    else {
+                        this.postToParent(proto.polling);
+                    }
+                }, 1000);
+            }
         }
         else {
             this.initWorker();
@@ -4682,7 +5390,9 @@ class App {
              * if we get a signal from child iframes, we check for their node_id and send it back,
              * so they can act as if it was just a same-domain iframe
              * */
-            window.addEventListener('message', this.crossDomainIframeListener);
+            if (this.options.crossdomain?.enabled && this.crossDomainChildOrigins.size > 0) {
+                window.addEventListener('message', this.crossDomainIframeListener);
+            }
         }
         if (this.bc !== null) {
             this.bc.postMessage({
@@ -4696,10 +5406,10 @@ class App {
             }, 250);
             this.bc.onmessage = (ev) => {
                 if (ev.data.context === this.contextId || this.projectKey !== ev.data.projectKey) {
-                    this.debug.log('same ctx event', ev);
+                    this.debug.log('same ctx event', redactDebugValue(ev.data));
                     return;
                 }
-                this.debug.log(ev);
+                this.debug.log('broadcast event', redactDebugValue(ev.data));
                 if (ev.data.line === proto.resp) {
                     const sessionToken = ev.data.token;
                     this.session.setSessionSecret(sessionToken, this.projectKey);
@@ -4732,15 +5442,318 @@ class App {
             };
         }
     }
-    pruneStaleFrames() {
-        const staleAfter = Date.now() - this.FRAME_STALE_MS;
-        this.trackedFrames = this.trackedFrames.filter((ctx) => {
-            const last = this.frameLastSeen.get(ctx);
-            if (last !== undefined && last >= staleAfter)
-                return true;
-            this.frameLastSeen.delete(ctx);
+    postToParent(line, extra = {}) {
+        if (this.crossDomainParentOrigin === null ||
+            this.crossDomainFrameNonce === null ||
+            this.crossDomainFrameCapability === null ||
+            Date.now() >= this.crossDomainFrameCapabilityExpiresAt) {
+            return;
+        }
+        window.parent.postMessage({
+            line,
+            protocolVersion: CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION,
+            context: this.contextId,
+            nonce: this.crossDomainFrameNonce,
+            capability: this.crossDomainFrameCapability,
+            ...extra,
+        }, this.crossDomainParentOrigin);
+    }
+    postHandshakeToParent() {
+        if (this.crossDomainParentOrigin === null || this.crossDomainFrameNonce === null) {
+            return;
+        }
+        window.parent.postMessage({
+            line: proto.iframeSignal,
+            protocolVersion: CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION,
+            context: this.contextId,
+            nonce: this.crossDomainFrameNonce,
+            projectKey: this.projectKey,
+        }, this.crossDomainParentOrigin);
+    }
+    applyCrossDomainFrameInit(init) {
+        this.parentActive = true;
+        this.crossDomainConnectionRequested = true;
+        this.crossDomainFrameCapability = init.capability;
+        this.crossDomainFrameCapabilityExpiresAt = init.capabilityExpiresAt;
+        this.crossDomainFrameSession = init.session;
+        this.crossDomainFrameCanvas = init.canvas ?? null;
+        this.rootId = init.id;
+        this.frameOderNumber = init.frameOrderNumber;
+        this.frameLevel = init.frameLevel;
+        this.allowAppStart();
+    }
+    clearCrossDomainFrameAuthorization() {
+        this.parentActive = false;
+        this.canStart = false;
+        this.crossDomainFrameCapability = null;
+        this.crossDomainFrameCapabilityExpiresAt = 0;
+        this.crossDomainFrameSession = null;
+        this.crossDomainFrameCanvas = null;
+        this.rootId = null;
+    }
+    findCrossDomainFrame(source) {
+        const frame = this.pageFrames.find((candidate) => candidate.contentWindow === source) ??
+            Array.from(document.querySelectorAll('iframe')).find((candidate) => candidate.contentWindow === source);
+        if (!frame)
+            return null;
+        if (!this.pageFrames.includes(frame)) {
+            this.pageFrames.push(frame);
+        }
+        return frame;
+    }
+    revokeCrossDomainFrame(source, expectedState) {
+        const state = this.crossDomainFrames.get(source);
+        if (!state || (expectedState !== undefined && state !== expectedState)) {
+            return;
+        }
+        this.crossDomainFrames.delete(source);
+    }
+    pruneDetachedCrossDomainFrames() {
+        this.crossDomainFrames.forEach((state, source) => {
+            if (!state.frame.isConnected || state.frame.contentWindow !== source) {
+                this.revokeCrossDomainFrame(source);
+            }
+        });
+    }
+    currentCrossDomainSession() {
+        const session = this.session.getInfo();
+        if (!session.sessionID) {
+            return null;
+        }
+        return {
+            sessionID: session.sessionID,
+            projectID: session.projectID,
+            startedAt: session.timestamp,
+            delayMs: this.delay,
+            userUUID: this.localStorage.getItem(this.options.local_uuid_key) ?? '',
+        };
+    }
+    frameInitPayload(state, id) {
+        const session = this.currentCrossDomainSession();
+        if (session === null ||
+            session.sessionID !== state.sessionID ||
+            Date.now() >= state.capabilityExpiresAt) {
+            return null;
+        }
+        return {
+            id,
+            frameOrderNumber: state.frameOrderNumber,
+            frameLevel: this.frameLevel + 1,
+            capabilityExpiresAt: state.capabilityExpiresAt,
+            session,
+            ...(this.crossDomainCanvasConfig ? { canvas: this.crossDomainCanvasConfig } : {}),
+        };
+    }
+    rotateCrossDomainFrameCapability(state, sessionID, now = Date.now()) {
+        const capability = createCrossDomainSecret();
+        if (capability === null) {
+            return false;
+        }
+        const preservePreviousCapability = state.sessionID === sessionID && now < state.capabilityExpiresAt;
+        state.previousCapability = preservePreviousCapability ? state.capability : null;
+        state.previousCapabilityExpiresAt = preservePreviousCapability
+            ? Math.min(state.capabilityExpiresAt, now + FRAME_PREVIOUS_CAPABILITY_GRACE_MS)
+            : 0;
+        state.capability = capability;
+        state.sessionID = sessionID;
+        state.capabilityExpiresAt = now + FRAME_CAPABILITY_TTL_MS;
+        return true;
+    }
+    crossDomainFrameNeedsRotation(state, sessionID, now = Date.now()) {
+        return (state.sessionID !== sessionID ||
+            now >= state.capabilityExpiresAt - FRAME_CAPABILITY_REFRESH_LEAD_MS);
+    }
+    postToCrossDomainFrame(state, line, extra = {}) {
+        state.source.postMessage({
+            line,
+            protocolVersion: CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION,
+            context: state.context,
+            nonce: state.nonce,
+            capability: state.capability,
+            ...extra,
+        }, state.origin);
+    }
+    consumeCrossDomainEnvelopeBudget(source) {
+        const now = Date.now();
+        let budget = this.crossDomainEnvelopeBudgets.get(source);
+        if (budget === undefined || now - budget.windowStartedAt >= FRAME_RATE_WINDOW_MS) {
+            budget = {
+                windowStartedAt: now,
+                envelopesInWindow: 0,
+            };
+            this.crossDomainEnvelopeBudgets.set(source, budget);
+        }
+        if (budget.envelopesInWindow >= MAX_FRAME_ENVELOPES_PER_WINDOW) {
+            return false;
+        }
+        budget.envelopesInWindow += 1;
+        return true;
+    }
+    async establishCrossDomainFrame(event, handshake) {
+        if (!this.active() ||
+            event.source === null ||
+            !this.crossDomainChildOrigins.has(event.origin)) {
+            return;
+        }
+        const candidateSource = event.source;
+        if (!this.consumeCrossDomainEnvelopeBudget(candidateSource)) {
+            return;
+        }
+        const frame = this.findCrossDomainFrame(candidateSource);
+        if (frame === null || !frame.isConnected || frame.contentWindow === null) {
+            return;
+        }
+        const source = frame.contentWindow;
+        const existing = this.crossDomainFrames.get(source);
+        if (this.pendingCrossDomainFrames.has(source)) {
+            return;
+        }
+        const existingMatches = existing !== undefined &&
+            existing.origin === event.origin &&
+            existing.context === handshake.context &&
+            existing.nonce === handshake.nonce &&
+            existing.frame === frame;
+        if (existing !== undefined && !existingMatches) {
+            return;
+        }
+        const authorizationGeneration = this.crossDomainAuthorizationGeneration;
+        const pendingToken = Symbol();
+        this.pendingCrossDomainFrames.set(source, pendingToken);
+        let navigated = false;
+        const markNavigated = () => {
+            navigated = true;
+        };
+        frame.addEventListener('load', markNavigated, { once: true });
+        try {
+            const id = await this.checkNodeId(source);
+            if (id === null ||
+                navigated ||
+                !this.active() ||
+                authorizationGeneration !== this.crossDomainAuthorizationGeneration ||
+                !frame.isConnected ||
+                frame.contentWindow !== source) {
+                return;
+            }
+            const session = this.currentCrossDomainSession();
+            if (session === null) {
+                return;
+            }
+            const now = Date.now();
+            let state;
+            if (existingMatches) {
+                state = existing;
+                if (this.crossDomainFrameNeedsRotation(state, session.sessionID, now) &&
+                    !this.rotateCrossDomainFrameCapability(state, session.sessionID, now)) {
+                    return;
+                }
+                state.lastSeenAt = now;
+            }
+            else {
+                const capability = createCrossDomainSecret();
+                if (capability === null) {
+                    return;
+                }
+                state = {
+                    source,
+                    frame,
+                    origin: event.origin,
+                    protocolVersion: CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION,
+                    context: handshake.context,
+                    nonce: handshake.nonce,
+                    capability,
+                    frameOrderNumber: this.nextCrossDomainFrameOrder++,
+                    sessionID: session.sessionID,
+                    capabilityExpiresAt: now + FRAME_CAPABILITY_TTL_MS,
+                    previousCapability: null,
+                    previousCapabilityExpiresAt: 0,
+                    lastSeenAt: now,
+                    rateWindowStartedAt: now,
+                    messagesInRateWindow: 0,
+                    bytesInRateWindow: 0,
+                };
+            }
+            const payload = this.frameInitPayload(state, id);
+            if (payload === null) {
+                return;
+            }
+            if (!existingMatches) {
+                if (existing !== undefined) {
+                    this.revokeCrossDomainFrame(source, existing);
+                }
+                this.crossDomainFrames.set(source, state);
+                frame.addEventListener('load', () => {
+                    this.revokeCrossDomainFrame(source, state);
+                }, { once: true });
+            }
+            this.postToCrossDomainFrame(state, proto.iframeId, payload);
+        }
+        finally {
+            frame.removeEventListener('load', markNavigated);
+            if (this.pendingCrossDomainFrames.get(source) === pendingToken) {
+                this.pendingCrossDomainFrames.delete(source);
+            }
+        }
+    }
+    validatedCrossDomainFrame(event, expectedLine) {
+        if (event.source === null ||
+            !this.crossDomainChildOrigins.has(event.origin) ||
+            event.source === window) {
+            return null;
+        }
+        const source = event.source;
+        const state = this.crossDomainFrames.get(source);
+        const now = Date.now();
+        const currentSessionID = this.session.getInfo().sessionID;
+        if (!state ||
+            state.origin !== event.origin ||
+            !state.frame.isConnected ||
+            state.frame.contentWindow !== source) {
+            if (state) {
+                this.revokeCrossDomainFrame(source);
+            }
+            return null;
+        }
+        if (currentSessionID === undefined || state.sessionID !== currentSessionID) {
+            this.revokeCrossDomainFrame(source);
+            return null;
+        }
+        const matchesCurrentCapability = now < state.capabilityExpiresAt && matchesCrossDomainEnvelope(event.data, expectedLine, state);
+        const matchesPreviousCapability = state.previousCapability !== null &&
+            now < state.previousCapabilityExpiresAt &&
+            matchesCrossDomainEnvelope(event.data, expectedLine, {
+                protocolVersion: state.protocolVersion,
+                context: state.context,
+                nonce: state.nonce,
+                capability: state.previousCapability,
+            });
+        if (!matchesCurrentCapability && !matchesPreviousCapability) {
+            if (now >= state.capabilityExpiresAt && now >= state.previousCapabilityExpiresAt) {
+                this.revokeCrossDomainFrame(source);
+            }
+            return null;
+        }
+        if ((matchesCurrentCapability && state.previousCapability !== null) ||
+            now >= state.previousCapabilityExpiresAt) {
+            state.previousCapability = null;
+            state.previousCapabilityExpiresAt = 0;
+        }
+        state.lastSeenAt = now;
+        return state;
+    }
+    consumeCrossDomainFrameBudget(state, messageCount, bytes) {
+        const now = Date.now();
+        if (now - state.rateWindowStartedAt >= FRAME_RATE_WINDOW_MS) {
+            state.rateWindowStartedAt = now;
+            state.messagesInRateWindow = 0;
+            state.bytesInRateWindow = 0;
+        }
+        if (state.messagesInRateWindow + messageCount > MAX_FRAME_MESSAGES_PER_WINDOW ||
+            state.bytesInRateWindow + bytes > MAX_FRAME_BYTES_PER_WINDOW) {
             return false;
-        });
+        }
+        state.messagesInRateWindow += messageCount;
+        state.bytesInRateWindow += bytes;
+        return true;
     }
     allowAppStart() {
         this.canStart = true;
@@ -4801,6 +5814,7 @@ class App {
                 setTimeout(() => {
                     closing = false;
                 }, 500);
+                this.canvasRecorder?.flushPendingSnapshots();
                 if (this.worker) {
                     this.worker.postMessage('closing');
                 }
@@ -4824,10 +5838,10 @@ class App {
                 this.allowAppStart();
                 this.start(this.prevOpts, true)
                     .then((r) => {
-                    this.debug.info('Worker restart, session too long', r);
+                    this.debug.info('Worker restart, session too long', redactDebugValue(r));
                 })
                     .catch((e) => {
-                    this.debug.error('Worker restart failed', e);
+                    this.debug.error('Worker restart failed', redactDebugValue(e));
                 });
             });
         }
@@ -4836,7 +5850,7 @@ class App {
         }
         else if (data.type === 'failure') {
             this.stop(false);
-            this.debug.error('worker_failed', data.reason);
+            this.debug.error('worker_failed', redactDebugValue(data.reason));
             this._debug('worker_failed', data.reason);
         }
         else if (data.type === 'compress') {
@@ -4857,7 +5871,7 @@ class App {
                     });
                 })
                     .catch((err) => {
-                    this.debug.error('OxvoSessions compression error:', err);
+                    this.debug.error('OxvoSessions compression error:', redactDebugValue(err));
                     this.worker?.postMessage({ type: 'uncompressed', batch: batch, dataType });
                 });
             }
@@ -4879,18 +5893,18 @@ class App {
         }
     }
     _debug(context, e) {
+        const redactedError = redactDebugValue(e);
         if (this.options.__debug_report_edp !== null) {
             void fetch(this.options.__debug_report_edp, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
                 body: JSON.stringify({
                     context,
-                    // @ts-ignore
-                    error: `${e}`,
+                    error: debugValueText(redactedError),
                 }),
             });
         }
-        this.debug.error('OxvoSessions error: ', context, e);
+        this.debug.error('OxvoSessions error: ', context, redactedError);
     }
     /**
      * Normal workflow: add timestamp and tab data to batch, then commit it
@@ -4904,10 +5918,7 @@ class App {
             return;
         }
         if (this.insideIframe) {
-            window.parent.postMessage({
-                line: proto.iframeBatch,
-                messages: this.messages,
-            }, this.options.crossdomain?.parentDomain ?? '*');
+            this.postToParent(proto.iframeBatch, { messages: this.messages });
             this.commitCallbacks.forEach((cb) => cb(this.messages));
             this.messages.length = 0;
             return;
@@ -5063,12 +6074,230 @@ class App {
             },
         };
     }
+    getBootstrapAttemptStorageKey(kind) {
+        return `${this.options.session_token_key}_bootstrap_idempotency_${kind}`;
+    }
+    isValidBootstrapAttempt(value, kind, currentTime) {
+        if (typeof value !== 'object' || value === null) {
+            return false;
+        }
+        const attempt = value;
+        if (attempt.version !== 1 ||
+            attempt.projectKey !== this.projectKey ||
+            typeof attempt.createdAt !== 'number' ||
+            !Number.isFinite(attempt.createdAt) ||
+            currentTime - attempt.createdAt >= BOOTSTRAP_ATTEMPT_TTL_MS ||
+            typeof attempt.idempotencyKey !== 'string' ||
+            attempt.idempotencyKey.length < 8 ||
+            attempt.idempotencyKey.length > 128 ||
+            !/^[A-Za-z0-9._:-]+$/.test(attempt.idempotencyKey) ||
+            typeof attempt.intentFingerprint !== 'string' ||
+            attempt.intentFingerprint.length === 0 ||
+            attempt.intentFingerprint.length > MAX_BOOTSTRAP_ATTEMPT_STORAGE_LENGTH ||
+            typeof attempt.requestTimestamp !== 'number' ||
+            !Number.isFinite(attempt.requestTimestamp) ||
+            typeof attempt.workerTimestamp !== 'number' ||
+            !Number.isFinite(attempt.workerTimestamp) ||
+            typeof attempt.requestBody !== 'string' ||
+            attempt.requestBody.length > MAX_BOOTSTRAP_ATTEMPT_STORAGE_LENGTH) {
+            return false;
+        }
+        try {
+            const body = JSON.parse(attempt.requestBody);
+            const intent = this.parseBootstrapIntent(attempt.intentFingerprint);
+            return (intent?.projectKey === this.projectKey &&
+                intent.kind === kind &&
+                body.app?.key === this.projectKey &&
+                body.session?.dry === false &&
+                body.session?.offline === (kind === 'offline') &&
+                typeof body.session?.token === 'string' &&
+                body.session.token === intent.token &&
+                body.session?.rule === intent.rule &&
+                (body.user?.id ?? '') === intent.userID &&
+                (body.user?.uuid ?? '') === intent.userUUID &&
+                body.meta?.ts === attempt.requestTimestamp &&
+                attempt.idempotencyKey.startsWith(`bootstrap:${kind}:`));
+        }
+        catch {
+            return false;
+        }
+    }
+    removeStoredBootstrapAttempt(kind) {
+        delete this.bootstrapAttempts[kind];
+        try {
+            this.sessionStorage.removeItem(this.getBootstrapAttemptStorageKey(kind));
+        }
+        catch {
+            // The in-memory copy is still cleared when storage is unavailable.
+        }
+    }
+    loadBootstrapAttempt(kind) {
+        const currentTime = Date.now();
+        const inMemoryAttempt = this.bootstrapAttempts[kind];
+        if (this.isValidBootstrapAttempt(inMemoryAttempt, kind, currentTime)) {
+            return inMemoryAttempt;
+        }
+        delete this.bootstrapAttempts[kind];
+        try {
+            const storedAttempt = this.sessionStorage.getItem(this.getBootstrapAttemptStorageKey(kind));
+            if (storedAttempt === null || storedAttempt.length > MAX_BOOTSTRAP_ATTEMPT_STORAGE_LENGTH) {
+                if (storedAttempt !== null) {
+                    this.removeStoredBootstrapAttempt(kind);
+                }
+                return undefined;
+            }
+            const parsedAttempt = JSON.parse(storedAttempt);
+            if (this.isValidBootstrapAttempt(parsedAttempt, kind, currentTime)) {
+                this.bootstrapAttempts[kind] = parsedAttempt;
+                return parsedAttempt;
+            }
+        }
+        catch {
+            // Treat corrupt or inaccessible storage as an absent pending attempt.
+        }
+        this.removeStoredBootstrapAttempt(kind);
+        return undefined;
+    }
+    getOrCreateBootstrapAttempt(kind, request) {
+        const existingAttempt = this.loadBootstrapAttempt(kind);
+        if (existingAttempt &&
+            this.bootstrapIntentsMatch(existingAttempt.intentFingerprint, request.intentFingerprint)) {
+            return existingAttempt;
+        }
+        if (existingAttempt) {
+            this.removeStoredBootstrapAttempt(kind);
+        }
+        const attempt = {
+            version: 1,
+            projectKey: this.projectKey,
+            createdAt: Date.now(),
+            idempotencyKey: `bootstrap:${kind}:${generateRandomId(40)}`,
+            ...request,
+        };
+        this.bootstrapAttempts[kind] = attempt;
+        try {
+            this.sessionStorage.setItem(this.getBootstrapAttemptStorageKey(kind), JSON.stringify(attempt));
+        }
+        catch {
+            // The in-memory copy still protects retries within this tracker instance.
+        }
+        return attempt;
+    }
+    clearBootstrapAttempt(kind) {
+        this.removeStoredBootstrapAttempt(kind);
+    }
+    buildBootstrapIntentFingerprint(params) {
+        const tracker = this.getTrackerInfo();
+        return JSON.stringify({
+            projectKey: this.projectKey,
+            kind: params.kind,
+            token: params.token ?? '',
+            rule: params.rule ?? '',
+            userID: this.session.getInfo().userID ?? '',
+            userUUID: tracker.userUUID ?? '',
+        });
+    }
+    parseBootstrapIntent(value) {
+        try {
+            const intent = JSON.parse(value);
+            if (intent.projectKey !== this.projectKey ||
+                (intent.kind !== 'recording' && intent.kind !== 'offline') ||
+                typeof intent.token !== 'string' ||
+                typeof intent.rule !== 'string' ||
+                typeof intent.userID !== 'string' ||
+                typeof intent.userUUID !== 'string') {
+                return undefined;
+            }
+            return intent;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    bootstrapIntentsMatch(existingFingerprint, currentFingerprint) {
+        const existing = this.parseBootstrapIntent(existingFingerprint);
+        const current = this.parseBootstrapIntent(currentFingerprint);
+        if (!existing || !current) {
+            return false;
+        }
+        return (existing.projectKey === current.projectKey &&
+            existing.kind === current.kind &&
+            existing.token === current.token &&
+            (current.rule === '' || existing.rule === current.rule) &&
+            (current.userID === '' || existing.userID === current.userID) &&
+            (current.userUUID === '' || existing.userUUID === current.userUUID));
+    }
     getSessionMeta() {
+        const sessionInfo = this.session.getInfo();
+        const metadata = { ...sessionInfo.metadata };
+        Object.keys(metadata).forEach((key) => {
+            if (key.trim().toLowerCase() === LINKAGE_ASSERTION_METADATA_KEY) {
+                delete metadata[key];
+            }
+        });
         return {
-            ...this.session.getInfo(),
+            ...sessionInfo,
+            metadata,
             ...this.getTrackerInfo(),
         };
     }
+    async requestMessengerLinkageChallenge() {
+        const sessionId = this.session.getInfo().sessionID;
+        const grantLineage = this.assistSessionGrant;
+        const grant = this.getAssistSessionGrant();
+        if (!sessionId || !grantLineage || !grant || grant.sessionId !== sessionId) {
+            return null;
+        }
+        const tabId = this.session.getTabId();
+        try {
+            const response = await fetch(`${normalizeEndpoint(this.options.endpoint)}/v1/linkage-challenge`, {
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${grant.token}`,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({ tabId }),
+                cache: 'no-store',
+                credentials: 'omit',
+                referrerPolicy: 'no-referrer',
+            });
+            if (response.status !== 200) {
+                return null;
+            }
+            const challenge = parseMessengerLinkageChallenge(await response.json(), sessionId);
+            if (!challenge) {
+                return null;
+            }
+            const currentGrant = this.getAssistSessionGrant();
+            if (!currentGrant ||
+                this.assistSessionGrant !== grantLineage ||
+                currentGrant.sessionId !== grant.sessionId ||
+                currentGrant.token !== grant.token ||
+                this.session.getInfo().sessionID !== sessionId ||
+                this.session.getTabId() !== tabId) {
+                return null;
+            }
+            return challenge;
+        }
+        catch {
+            return null;
+        }
+    }
+    getAssistSessionGrant() {
+        return this.assistSessionGrant ? { ...this.assistSessionGrant } : null;
+    }
+    setAssistSessionGrant(sessionId, token) {
+        this.assistSessionGrant =
+            typeof token === 'string' &&
+                token.length > 0 &&
+                token.length <= MAX_ASSIST_SESSION_GRANT_LENGTH &&
+                token.trim() === token
+                ? { sessionId, token }
+                : null;
+    }
+    clearAssistSessionGrant() {
+        this.assistSessionGrant = null;
+    }
     getSessionSecret() {
         return this.session.getSessionSecret(this.projectKey);
     }
@@ -5133,12 +6362,19 @@ class App {
         const needReset = this.sessionStorage.getItem(this.options.session_reset_key) !== null;
         let needNewSessionID = startNewSession || needReset;
         const sessionToken = this.session.getSessionSecret(this.projectKey);
+        if (needReset) {
+            this.sessionStorage.removeItem(this.options.session_reset_key);
+        }
         const storedVersion = this.sessionStorage.getItem(`${this.options.session_token_key}_version`);
         if (!storedVersion || storedVersion !== PROTO_VERSION) {
             needNewSessionID = true;
             this.sessionStorage.setItem(`${this.options.session_token_key}_version`, PROTO_VERSION);
         }
-        return needNewSessionID || !sessionToken;
+        const isNewSession = needNewSessionID || !sessionToken;
+        if (isNewSession && sessionToken) {
+            this.session.clearSessionSecret();
+        }
+        return isNewSession;
     }
     /**
      * start buffering messages without starting the actual session, which gives
@@ -5194,23 +6430,48 @@ class App {
     async setupConditionalStart(startOpts) {
         this.conditionsManager = new ConditionsManager(this, startOpts);
         const ingestPoint = normalizeEndpoint(this.options.endpoint);
-        const r = await fetch(ingestPoint + '/v1/bootstrap', {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify(this.buildStartPayload({
-                timestamp: now(),
-                dry: true,
-                bufferMs: 0,
-                token: '',
-                width: window.screen.width,
-                height: window.screen.height,
-                referrer: document.referrer,
-            })),
-        });
-        const { session = {}, client = {}, device = {} } = await r.json();
-        const { token, projectId } = session;
+        let r;
+        try {
+            r = await fetch(ingestPoint + '/v1/bootstrap', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify(this.buildStartPayload({
+                    timestamp: now(),
+                    dry: true,
+                    bufferMs: 0,
+                    token: '',
+                    width: window.screen.width,
+                    height: window.screen.height,
+                    referrer: document.referrer,
+                })),
+            });
+        }
+        catch (error) {
+            throw redactedErrorFrom(error, 'Conditional bootstrap request failed.');
+        }
+        if (r.status !== 200) {
+            throw await bootstrapHttpError(r);
+        }
+        const response = await bootstrapJson(r);
+        const session = asRecord(response.session);
+        const client = asRecord(response.client);
+        const device = asRecord(response.device);
+        const { token, projectId, assistToken } = session;
+        const invalidResponseFields = [
+            !isValidBootstrapCredential(token, MAX_SESSION_TOKEN_LENGTH) ? 'session.token' : null,
+            typeof assistToken !== 'undefined' &&
+                !isValidBootstrapCredential(assistToken, MAX_ASSIST_SESSION_GRANT_LENGTH)
+                ? 'session.assistToken'
+                : null,
+            typeof session.id !== 'string' ? 'session.id' : null,
+            typeof projectId !== 'string' ? 'session.projectId' : null,
+            typeof device.id !== 'string' ? 'device.id' : null,
+        ].filter((field) => field !== null);
+        if (invalidResponseFields.length > 0) {
+            throw new Error(`Incorrect server response (status ${r.status}; invalid fields: ${invalidResponseFields.join(', ')})`);
+        }
         const { browser: userBrowser, city: userCity, country: userCountry, device: userDevice, os: userOS, state: userState, } = client;
         this.session.assign({ projectID: projectId });
         this.session.setUserInfo({
@@ -5223,12 +6484,18 @@ class App {
         });
         const onStartInfo = {
             sessionToken: token,
-            userUUID: device?.id || '',
-            sessionID: session?.id || '',
+            assistToken,
+            userUUID: device.id,
+            sessionID: session.id,
         };
-        this.startCallbacks.forEach((cb) => cb(onStartInfo));
-        await this.conditionsManager?.fetchConditions(projectId, token);
-        await this.markerWatcher.fetchTags(normalizeEndpoint(this.options.endpoint), token);
+        try {
+            this.startCallbacks.forEach((cb) => cb(onStartInfo));
+            await this.conditionsManager?.fetchConditions(projectId, token);
+            await this.markerWatcher.fetchTags(normalizeEndpoint(this.options.endpoint), token);
+        }
+        catch (error) {
+            throw redactedErrorFrom(error, 'Conditional bootstrap failed.', [token, assistToken]);
+        }
     }
     /**
      * Starts offline session recording
@@ -5236,9 +6503,9 @@ class App {
      * @param {Function} onSessionSent - callback that will be called once session is fully sent
      * */
     offlineRecording(startOpts = {}, onSessionSent) {
+        this.clearAssistSessionGrant();
         this.onSessionSent = onSessionSent;
         this.singleBuffer = true;
-        const isNewSession = this.checkSessionToken(startOpts.startNewSession);
         adjustTimeOrigin();
         this.coldStartTs = now();
         const saverBuffer = this.localStorage.getItem(bufferStorageKey);
@@ -5256,6 +6523,10 @@ class App {
         if (startOpts.startNewSession) {
             this.session.reset();
         }
+        const isNewSession = this.checkSessionToken(startOpts.startNewSession);
+        this.offlineRecordingSessionToken = isNewSession
+            ? undefined
+            : this.session.getSessionSecret(this.projectKey);
         this.session.assign({
             userID: startOpts.userID,
             metadata: startOpts.metadata,
@@ -5305,12 +6576,29 @@ class App {
      * */
     async uploadOfflineRecording() {
         this.stop(false);
-        const timestamp = now();
+        const freshTimestamp = now();
+        const bootstrapToken = this.offlineRecordingSessionToken ?? '';
+        const freshRequestBody = () => JSON.stringify(this.buildStartPayload({
+            timestamp: freshTimestamp,
+            dry: false,
+            offline: true,
+            bufferMs: freshTimestamp - this.coldStartTs,
+            token: bootstrapToken,
+        }));
+        const bootstrapAttempt = this.getOrCreateBootstrapAttempt('offline', {
+            intentFingerprint: this.buildBootstrapIntentFingerprint({
+                kind: 'offline',
+                token: bootstrapToken,
+            }),
+            requestTimestamp: freshTimestamp,
+            workerTimestamp: this.coldStartTs,
+            requestBody: freshRequestBody(),
+        });
         this.worker?.postMessage({
             type: 'start',
             pageNo: this.session.incPageNo(),
             ingestPoint: normalizeEndpoint(this.options.endpoint),
-            timestamp: this.coldStartTs,
+            timestamp: bootstrapAttempt.workerTimestamp,
             url: document.URL,
             connAttemptCount: this.options.connAttemptCount,
             connAttemptGap: this.options.connAttemptGap,
@@ -5318,28 +6606,45 @@ class App {
             localDebug: this.options.__local_debug,
         });
         const ingestPoint = normalizeEndpoint(this.options.endpoint);
-        const r = await fetch(ingestPoint + '/v1/bootstrap', {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify(this.buildStartPayload({
-                timestamp,
-                dry: false,
-                bufferMs: timestamp - this.coldStartTs,
-                token: '',
-            })),
-        });
-        const { session = {}, client = {}, limits = {}, protocolVersion: offlineProtocolVersion } = await r.json();
+        const headers = {
+            'Content-Type': 'application/json',
+            'Idempotency-Key': bootstrapAttempt.idempotencyKey,
+        };
+        let r;
+        try {
+            r = await fetch(ingestPoint + '/v1/bootstrap', {
+                method: 'POST',
+                headers,
+                body: bootstrapAttempt.requestBody,
+            });
+        }
+        catch (error) {
+            throw redactedErrorFrom(error, 'Offline bootstrap request failed.', [bootstrapToken]);
+        }
+        if (r.status !== 200) {
+            throw await bootstrapHttpError(r, undefined, [bootstrapToken]);
+        }
+        const response = await bootstrapJson(r, [bootstrapToken]);
+        const session = asRecord(response.session);
+        const client = asRecord(response.client);
+        const limits = asRecord(response.limits);
+        const offlineProtocolVersion = response.protocolVersion;
         const { token, projectId } = session;
         const { browser: userBrowser, city: userCity, country: userCountry, device: userDevice, os: userOS, state: userState, } = client;
         const { beacon: beaconSizeLimit } = limits;
-        this.worker?.postMessage({
-            type: 'auth',
-            token,
-            beaconSizeLimit,
-            protocolVersion: offlineProtocolVersion,
-        });
+        const invalidResponseFields = [
+            !isValidBootstrapCredential(token, MAX_SESSION_TOKEN_LENGTH) ? 'session.token' : null,
+            typeof projectId !== 'string' ? 'session.projectId' : null,
+            typeof beaconSizeLimit !== 'number' && typeof beaconSizeLimit !== 'undefined'
+                ? 'limits.beacon'
+                : null,
+        ].filter((field) => field !== null);
+        if (invalidResponseFields.length > 0) {
+            throw new Error(`Incorrect server response (status ${r.status}; invalid fields: ${invalidResponseFields.join(', ')})`);
+        }
+        this.session.setSessionSecret(token, this.projectKey);
+        this.clearBootstrapAttempt('offline');
+        this.offlineRecordingSessionToken = token;
         this.session.assign({ projectID: projectId });
         this.session.setUserInfo({
             userBrowser,
@@ -5349,12 +6654,83 @@ class App {
             userOS,
             userState,
         });
-        while (this.bufferedMessages1.length > 0) {
-            await this.flushBuffer(this.bufferedMessages1);
+        this.worker?.postMessage({
+            type: 'auth',
+            token,
+            beaconSizeLimit,
+            protocolVersion: offlineProtocolVersion,
+        });
+        try {
+            while (this.bufferedMessages1.length > 0) {
+                await this.flushBuffer(this.bufferedMessages1);
+            }
+        }
+        catch (error) {
+            throw redactedErrorFrom(error, 'Offline recording upload failed.', [token, bootstrapToken]);
         }
         this.postToWorker([[-1]]);
         this.clearBuffers();
     }
+    startCrossDomainFrame(startOpts = {}) {
+        if (this.activityState === ActivityState.Active ||
+            this.activityState === ActivityState.Starting) {
+            const reason = 'OxvoSessions: trying to call `start()` on the instance that has been started already.';
+            return UnsuccessfulStart(reason);
+        }
+        if (this.crossDomainFrameSession === null ||
+            this.crossDomainFrameCapability === null ||
+            this.rootId === null) {
+            return UnsuccessfulStart('Cross-domain iframe handshake was not established.');
+        }
+        this.clearAssistSessionGrant();
+        if (Object.keys(startOpts).length !== 0) {
+            this.prevOpts = startOpts;
+        }
+        if (startOpts.startCallback) {
+            this.userStartCallback = startOpts.startCallback;
+        }
+        try {
+            adjustTimeOrigin();
+            this.activityState = ActivityState.Starting;
+            this.delay = this.crossDomainFrameSession.delayMs;
+            this.session.clearSessionSecret();
+            this.session.assign({
+                sessionID: this.crossDomainFrameSession.sessionID,
+                projectID: this.crossDomainFrameSession.projectID,
+                timestamp: this.crossDomainFrameSession.startedAt,
+            });
+            const onStartInfo = {
+                sessionToken: '',
+                userUUID: this.crossDomainFrameSession.userUUID,
+                sessionID: this.crossDomainFrameSession.sessionID,
+            };
+            this.startCallbacks.forEach((callback) => callback(onStartInfo));
+            this.userStartCallback?.(SuccessfulStart(onStartInfo));
+            this.activityState = ActivityState.Active;
+            if (this.crossDomainFrameCanvas?.enabled && !this.options.canvas.disableCanvas) {
+                this.canvasRecorder =
+                    this.canvasRecorder ??
+                        new CanvasRecorder(this, {
+                            fps: this.crossDomainFrameCanvas.fps ?? 15,
+                            quality: this.crossDomainFrameCanvas.quality ?? 'medium',
+                            isDebug: this.options.canvas.__save_canvas_locally,
+                            fixedScaling: this.options.canvas.fixedCanvasScaling,
+                            useAnimationFrame: this.options.canvas.useAnimationFrame,
+                            framesSupport: this.crossDomainFrameCanvas.framesSupport,
+                        });
+            }
+            this.observer.crossdomainObserve(this.rootId, this.frameOderNumber, this.frameLevel);
+            this.ticker.start();
+            this.canvasRecorder?.startTracking();
+            return SuccessfulStart(onStartInfo);
+        }
+        catch (reason) {
+            this.stop();
+            const message = reason instanceof Error ? reason.message : String(reason);
+            this.signalError(message, []);
+            return UnsuccessfulStart(message);
+        }
+    }
     async _start(startOpts = {}, resetByWorker = false, conditionName) {
         if (Object.keys(startOpts).length !== 0) {
             this.prevOpts = startOpts;
@@ -5376,6 +6752,7 @@ class App {
             const reason = 'OxvoSessions: trying to call `start()` on the instance that has been started already.';
             return Promise.resolve(UnsuccessfulStart(reason));
         }
+        this.clearAssistSessionGrant();
         this.activityState = ActivityState.Starting;
         if (!isColdStart) {
             adjustTimeOrigin();
@@ -5393,68 +6770,112 @@ class App {
             userID: userId || undefined,
             metadata: startOpts.metadata,
         });
-        const timestamp = now();
+        const sessionToken = this.session.getSessionSecret(this.projectKey);
+        const isNewSession = this.checkSessionToken(startOpts.startNewSession);
+        const freshTimestamp = now();
+        const freshWorkerTimestamp = isColdStart ? this.coldStartTs : freshTimestamp;
+        const bootstrapToken = isNewSession ? '' : sessionToken;
+        const freshRequestBody = () => JSON.stringify(this.buildStartPayload({
+            timestamp: freshTimestamp,
+            dry: false,
+            bufferMs: this.coldStartTs ? freshTimestamp - this.coldStartTs : 0,
+            token: bootstrapToken,
+            rule: conditionName,
+            width: window.screen.width,
+            height: window.screen.height,
+        }));
+        const bootstrapAttempt = this.getOrCreateBootstrapAttempt('recording', {
+            intentFingerprint: this.buildBootstrapIntentFingerprint({
+                kind: 'recording',
+                token: bootstrapToken,
+                rule: conditionName,
+            }),
+            requestTimestamp: freshTimestamp,
+            workerTimestamp: freshWorkerTimestamp,
+            requestBody: freshRequestBody(),
+        });
+        const timestamp = bootstrapAttempt.requestTimestamp;
         this.worker?.postMessage({
             type: 'start',
             pageNo: this.session.incPageNo(),
             ingestPoint: normalizeEndpoint(this.options.endpoint),
-            timestamp: isColdStart ? this.coldStartTs : timestamp,
+            timestamp: bootstrapAttempt.workerTimestamp,
             url: document.URL,
             connAttemptCount: this.options.connAttemptCount,
             connAttemptGap: this.options.connAttemptGap,
             tabId: this.session.getTabId(),
             localDebug: this.options.__local_debug,
         });
-        const sessionToken = this.session.getSessionSecret(this.projectKey);
-        const isNewSession = this.checkSessionToken(startOpts.startNewSession);
-        this.sessionStorage.removeItem(this.options.session_reset_key);
-        this.debug.log('OxvoSessions: starting session; need new session id?', isNewSession, 'session token: ', sessionToken);
+        this.debug.log('OxvoSessions: starting session; need new session id?', isNewSession, 'has existing session token:', Boolean(sessionToken));
+        const bootstrapSecrets = [sessionToken, bootstrapToken];
         try {
             const ingestPoint = normalizeEndpoint(this.options.endpoint);
+            const headers = {
+                'Content-Type': 'application/json',
+                'Idempotency-Key': bootstrapAttempt.idempotencyKey,
+            };
             const r = await window.fetch(ingestPoint + '/v1/bootstrap', {
                 method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                },
-                body: JSON.stringify(this.buildStartPayload({
-                    timestamp,
-                    dry: false,
-                    bufferMs: this.coldStartTs ? timestamp - this.coldStartTs : 0,
-                    token: isNewSession ? '' : sessionToken,
-                    rule: conditionName,
-                    width: window.screen.width,
-                    height: window.screen.height,
-                })),
+                headers,
+                body: bootstrapAttempt.requestBody,
             });
             if (r.status !== 200) {
                 const error = await r.text();
-                const reason = error === CANCELED ? CANCELED : `Server error: ${r.status}. ${error}`;
-                return UnsuccessfulStart(reason);
+                if (error === CANCELED) {
+                    this.stop();
+                    this.signalError(CANCELED, []);
+                    return UnsuccessfulStart(CANCELED);
+                }
+                throw await bootstrapHttpError(r, error, bootstrapSecrets);
             }
             if (!this.worker && !this.insideIframe) {
                 const reason = 'no worker found after start request (this should not happen in real world)';
-                this.signalError(reason, []);
-                return UnsuccessfulStart(reason);
-            }
-            const { session = {}, device = {}, client = {}, limits = {}, canvas = {}, flags = {}, protocolVersion, } = await r.json();
-            const { token, id: sessionID, projectId: projectID, delayMs: delay, startedAt: startTimestamp, } = session;
+                throw new Error(reason);
+            }
+            const response = await bootstrapJson(r, bootstrapSecrets);
+            const session = asRecord(response.session);
+            const device = asRecord(response.device);
+            const client = asRecord(response.client);
+            const limits = asRecord(response.limits);
+            const canvas = asRecord(response.canvas);
+            const flags = asRecord(response.flags);
+            const protocolVersion = response.protocolVersion;
+            const { token, assistToken, id: sessionID, projectId: projectID, delayMs: delay, startedAt: startTimestamp, } = session;
             const { id: userUUID } = device;
             const { browser: userBrowser, city: userCity, country: userCountry, device: userDevice, os: userOS, state: userState, } = client;
             const { beacon: beaconSizeLimit, compressAt: compressionThreshold } = limits;
             const { enabled: canvasEnabled, quality: canvasQuality, fps: canvasFPS, framesSupport, } = canvas;
             const socketOnly = flags?.socketOnly;
-            if (typeof token !== 'string' ||
-                typeof userUUID !== 'string' ||
-                (typeof startTimestamp !== 'number' && typeof startTimestamp !== 'undefined') ||
-                typeof sessionID !== 'string' ||
-                typeof delay !== 'number' ||
-                (typeof beaconSizeLimit !== 'number' && typeof beaconSizeLimit !== 'undefined')) {
-                const reason = `Incorrect server response: ${JSON.stringify(r)}`;
-                this.signalError(reason, []);
-                return UnsuccessfulStart(reason);
-            }
+            const invalidResponseFields = [
+                !isValidBootstrapCredential(token, MAX_SESSION_TOKEN_LENGTH) ? 'session.token' : null,
+                typeof assistToken !== 'undefined' &&
+                    !isValidBootstrapCredential(assistToken, MAX_ASSIST_SESSION_GRANT_LENGTH)
+                    ? 'session.assistToken'
+                    : null,
+                typeof userUUID !== 'string' ? 'device.id' : null,
+                typeof startTimestamp !== 'number' && typeof startTimestamp !== 'undefined'
+                    ? 'session.startedAt'
+                    : null,
+                typeof sessionID !== 'string' ? 'session.id' : null,
+                typeof projectID !== 'string' ? 'session.projectId' : null,
+                typeof delay !== 'number' ? 'session.delayMs' : null,
+                typeof beaconSizeLimit !== 'number' && typeof beaconSizeLimit !== 'undefined'
+                    ? 'limits.beacon'
+                    : null,
+            ].filter((field) => field !== null);
+            if (invalidResponseFields.length > 0) {
+                throw new Error(`Incorrect server response (status ${r.status}; invalid fields: ${invalidResponseFields.join(', ')})`);
+            }
+            bootstrapSecrets.push(token, assistToken);
+            this.crossDomainCanvasConfig = {
+                enabled: canvasEnabled === true,
+                ...(['low', 'medium', 'high'].includes(canvasQuality) ? { quality: canvasQuality } : {}),
+                ...(typeof canvasFPS === 'number' ? { fps: canvasFPS } : {}),
+                ...(typeof framesSupport === 'boolean' ? { framesSupport } : {}),
+            };
             this.delay = delay;
             this.session.setSessionSecret(token, this.projectKey);
+            this.clearBootstrapAttempt('recording');
             if (sessionToken && sessionToken !== token) {
                 this.bc?.postMessage({
                     type: proto.reset,
@@ -5474,6 +6895,7 @@ class App {
                 timestamp: startTimestamp || timestamp,
                 projectID,
             });
+            this.setAssistSessionGrant(sessionID, assistToken);
             if (socketOnly) {
                 this.socketMode = true;
                 this.worker?.postMessage('stop');
@@ -5495,7 +6917,7 @@ class App {
             Object.entries(this.session.getInfo().metadata).forEach(([key, value]) => this.send(Metadata(key, value)));
             this.localStorage.setItem(this.options.local_uuid_key, userUUID);
             this.compressionThreshold = compressionThreshold;
-            const onStartInfo = { sessionToken: token, userUUID, sessionID };
+            const onStartInfo = { sessionToken: token, assistToken, userUUID, sessionID };
             // TODO: start as early as possible (before receiving the token)
             /** after start */
             this.startCallbacks.forEach((cb) => cb(onStartInfo)); // MBTODO: callbacks after DOM "mounted" (observed)
@@ -5543,7 +6965,6 @@ class App {
         }
         catch (reason) {
             this.stop();
-            this.session.reset();
             if (!reason) {
                 console.error('Unknown error during start');
                 this.signalError('Unknown error', []);
@@ -5553,8 +6974,9 @@ class App {
                 this.signalError(CANCELED, []);
                 return UnsuccessfulStart(CANCELED);
             }
-            this._debug('session_start', reason);
-            const errorMessage = reason instanceof Error ? reason.message : reason.toString();
+            const redactedError = redactedErrorFrom(reason, 'Session start failed.', bootstrapSecrets);
+            this._debug('session_start', redactedError);
+            const errorMessage = redactedError.message;
             this.signalError(errorMessage, []);
             return UnsuccessfulStart(errorMessage);
         }
@@ -5569,6 +6991,23 @@ class App {
             }, 100);
         });
     }
+    async waitCrossDomainStart(timeoutMs = 15000) {
+        if (this.canStart)
+            return true;
+        return new Promise((resolve) => {
+            const interval = setInterval(() => {
+                if (!this.canStart)
+                    return;
+                clearInterval(interval);
+                clearTimeout(timeout);
+                resolve(true);
+            }, 100);
+            const timeout = setTimeout(() => {
+                clearInterval(interval);
+                resolve(false);
+            }, timeoutMs);
+        });
+    }
     async waitStarted() {
         return this.waitStatus(ActivityState.Active);
     }
@@ -5596,20 +7035,35 @@ class App {
             return Promise.resolve(UnsuccessfulStart(reason));
         }
         if (this.insideIframe) {
+            if (this.crossDomainParentOrigin === null || this.crossDomainFrameNonce === null) {
+                return UnsuccessfulStart('Cross-domain iframe capture requires an explicit parentDomain and secure random support.');
+            }
             this.signalIframeTracker();
         }
-        if (!document.hidden) {
+        const startWhenReady = async () => {
+            if (this.insideIframe) {
+                const ready = await this.waitCrossDomainStart();
+                if (!ready) {
+                    this.crossDomainConnectionRequested = false;
+                    this.crossDomainResumeAfterHandshake = false;
+                    this.clearCrossDomainFrameAuthorization();
+                    return UnsuccessfulStart('Cross-domain iframe handshake timed out.');
+                }
+                return this.startCrossDomainFrame(args[0]);
+            }
             await this.waitStart();
             return this._start(...args);
+        };
+        if (!document.hidden) {
+            return startWhenReady();
         }
         else {
             return new Promise((resolve) => {
                 const onVisibilityChange = async () => {
                     if (!document.hidden) {
-                        await this.waitStart();
                         // eslint-disable-next-line
                         document.removeEventListener('visibilitychange', onVisibilityChange);
-                        resolve(this._start(...args));
+                        resolve(startWhenReady());
                     }
                 };
                 // eslint-disable-next-line
@@ -5645,6 +7099,7 @@ class App {
         };
     }
     stop(stopWorker = true) {
+        this.clearAssistSessionGrant();
         if (this.activityState !== ActivityState.NotActive) {
             try {
                 if (this.options.crossdomain?.enabled) {
@@ -5670,6 +7125,11 @@ class App {
                 this.debug.log('OxvoSessions tracking stopped.');
             }
         }
+        if (this.insideIframe) {
+            this.crossDomainConnectionRequested = false;
+            this.crossDomainResumeAfterHandshake = false;
+            this.clearCrossDomainFrameAuthorization();
+        }
     }
 }
 
@@ -7320,10 +8780,14 @@ function Fonts (app) {
 }
 
 function axiosSpy (app, instance, opts, sanitize, stringify) {
-    app.debug.log('OxvoSessions: attaching axios spy to instance', instance);
+    app.debug.log('OxvoSessions: attaching axios spy to configured instance');
     function captureResponseData(axiosResponseObj) {
-        app.debug.log('OxvoSessions: capturing axios response data', axiosResponseObj);
-        const { headers: reqHs, data: reqData, method, url, baseURL } = axiosResponseObj.config;
+        app.debug.log('OxvoSessions: capturing axios response data', {
+            method: axiosResponseObj.config.method,
+            status: axiosResponseObj.status,
+            url: axiosResponseObj.config.url,
+        });
+        const { headers: reqHs, data: reqData, method, url } = axiosResponseObj.config;
         const { data: rData, headers: rHs, status: globStatus, response } = axiosResponseObj;
         const { data: resData, headers: resHs, status: resStatus } = response || {};
         const ihOpt = opts.ignoreHeaders;
@@ -7382,11 +8846,18 @@ function axiosSpy (app, instance, opts, sanitize, stringify) {
         }
         const requestStart = axiosResponseObj.config.__oxvosessions_timing;
         const duration = performance.now() - requestStart;
-        app.debug.log('OxvoSessions: final req object', reqResInfo);
+        app.debug.log('OxvoSessions: sanitized axios request is ready', {
+            method: reqResInfo.method,
+            status: reqResInfo.status,
+            url: reqResInfo.url,
+        });
         app.send(NetworkRequest('xhr', String(method), String(reqResInfo.url), stringify(reqResInfo.request), stringify(reqResInfo.response), reqResInfo.status, requestStart + getTimeOrigin(), duration, 0));
     }
     function getStartTime(config) {
-        app.debug.log('OxvoSessions: capturing API request', config);
+        app.debug.log('OxvoSessions: capturing axios request', {
+            method: config.method,
+            url: config.url,
+        });
         config.__oxvosessions_timing = performance.now();
         if (opts.sessionTokenHeader) {
             const header = typeof opts.sessionTokenHeader === 'string'
@@ -7406,17 +8877,23 @@ function axiosSpy (app, instance, opts, sanitize, stringify) {
         return response;
     }
     function captureNetworkError(error) {
-        app.debug.log('OxvoSessions: capturing API request error', error);
+        app.debug.log('OxvoSessions: capturing axios request error', {
+            hasResponse: Boolean(error.response),
+            isAxiosError: isAxiosError(error),
+            message: typeof error.message === 'string' ? error.message : undefined,
+        });
         if (isAxiosError(error) && Boolean(error.response)) {
             captureResponseData(error.response);
         }
         else if (error instanceof Error) {
             app.send(getExceptionMessage(error, []));
         }
+        // Axios rejection handlers must preserve the original Axios error object for downstream code.
+        // eslint-disable-next-line @typescript-eslint/prefer-promise-reject-errors
         return Promise.reject(error);
     }
-    function logRequestError(ev) {
-        app.debug.log('OxvoSessions: failed API request, skipping', ev);
+    function logRequestError() {
+        app.debug.log('OxvoSessions: failed axios request, skipping');
     }
     const reqInt = instance.interceptors.request.use(getStartTime, logRequestError, {
         synchronous: true,
@@ -9229,7 +10706,7 @@ class ConstantProperties {
             user_id: this.user_id,
             distinct_id: this.deviceId,
             sdk_edition: 'web',
-            sdk_version: '7.3.0',
+            sdk_version: '7.4.15',
             timezone: getUTCOffsetString(),
             search_engine: this.searchEngine,
         };
@@ -9812,6 +11289,8 @@ class Batcher {
 }
 
 const STORAGEKEY = '__or_sdk_analytics_token';
+const START_ATTEMPT_STORAGE_KEY = '__or_sdk_analytics_start_attempt';
+const START_ATTEMPT_TTL_MS = 24 * 60 * 60 * 1000;
 const normalizeIngestPoint = (ingest) => {
     const base = ingest.replace(/\/$/, '');
     return base.endsWith('/oxvo') ? base : `${base}/oxvo`;
@@ -9835,6 +11314,7 @@ class Analytics {
     constructor(options) {
         this.token = null;
         this.standalone = false;
+        this.pendingStartAttempt = null;
         this._getToken = () => {
             if (this.standalone) {
                 return this.token;
@@ -9878,9 +11358,14 @@ class Analytics {
                     timezone: defaultFields.timezone,
                     search_engine: defaultFields.search_engine,
                 };
+                const attempt = this.startAttempt(JSON.stringify(data));
                 const resp = await fetch(apiEdp, {
                     method: 'POST',
-                    body: JSON.stringify(data),
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'Idempotency-Key': attempt.idempotencyKey,
+                    },
+                    body: attempt.requestBody,
                 });
                 if (!resp.ok) {
                     throw new Error(`HTTP error! status: ${resp.status}`);
@@ -9889,6 +11374,7 @@ class Analytics {
                 if (result.token) {
                     this.token = result.token;
                     this.sessionStorage.setItem(STORAGEKEY, result.token);
+                    this.clearStartAttempt();
                 }
                 else {
                     throw new Error('No token received from server');
@@ -9915,6 +11401,7 @@ class Analytics {
             if (this.standalone) {
                 this.token = null;
                 this.sessionStorage.setItem(STORAGEKEY, '');
+                this.clearStartAttempt();
             }
         };
         /**
@@ -9953,6 +11440,91 @@ class Analytics {
             this.init();
         }
     }
+    loadStartAttempt() {
+        if (this.isValidStartAttempt(this.pendingStartAttempt)) {
+            return this.pendingStartAttempt;
+        }
+        this.pendingStartAttempt = null;
+        let serialized;
+        try {
+            serialized = this.sessionStorage.getItem(START_ATTEMPT_STORAGE_KEY);
+        }
+        catch {
+            return null;
+        }
+        if (!serialized || serialized.length > 1024 * 1024) {
+            return null;
+        }
+        try {
+            const attempt = JSON.parse(serialized);
+            if (this.isValidStartAttempt(attempt)) {
+                this.pendingStartAttempt = attempt;
+                return attempt;
+            }
+        }
+        catch {
+            // Treat corrupt storage as an absent pending attempt.
+        }
+        return null;
+    }
+    isValidStartAttempt(value) {
+        if (typeof value !== 'object' || value === null) {
+            return false;
+        }
+        const attempt = value;
+        const currentTime = Date.now();
+        if (attempt.version !== 1 ||
+            attempt.projectKey !== this.projectKey ||
+            typeof attempt.createdAt !== 'number' ||
+            !Number.isFinite(attempt.createdAt) ||
+            attempt.createdAt > currentTime ||
+            currentTime - attempt.createdAt >= START_ATTEMPT_TTL_MS ||
+            typeof attempt.idempotencyKey !== 'string' ||
+            attempt.idempotencyKey.length < 8 ||
+            attempt.idempotencyKey.length > 128 ||
+            !/^[A-Za-z0-9._:-]+$/.test(attempt.idempotencyKey) ||
+            typeof attempt.requestBody !== 'string' ||
+            attempt.requestBody.length > 1024 * 1024) {
+            return false;
+        }
+        try {
+            const request = JSON.parse(attempt.requestBody);
+            return request.projectKey === this.projectKey;
+        }
+        catch {
+            return false;
+        }
+    }
+    startAttempt(requestBody) {
+        const existing = this.loadStartAttempt();
+        if (existing) {
+            return existing;
+        }
+        const attempt = {
+            version: 1,
+            projectKey: this.projectKey,
+            createdAt: Date.now(),
+            idempotencyKey: `insights:start:${generateRandomId(40)}`,
+            requestBody,
+        };
+        this.pendingStartAttempt = attempt;
+        try {
+            this.sessionStorage.setItem(START_ATTEMPT_STORAGE_KEY, JSON.stringify(attempt));
+        }
+        catch {
+            // The in-memory copy still protects retries within this Analytics instance.
+        }
+        return attempt;
+    }
+    clearStartAttempt() {
+        this.pendingStartAttempt = null;
+        try {
+            this.sessionStorage.setItem(START_ATTEMPT_STORAGE_KEY, '');
+        }
+        catch {
+            // The in-memory copy is still cleared when storage is unavailable.
+        }
+    }
 }
 
 const Messages = _Messages;
@@ -9999,7 +11571,7 @@ class API {
         this.signalStartIssue = (reason, missingApi) => {
             const doNotTrack = this.checkDoNotTrack();
             console.log("Tracker couldn't start due to:", JSON.stringify({
-                trackerVersion: '7.3.0',
+                trackerVersion: '7.4.15',
                 siteKey: this.options.siteKey,
                 doNotTrack,
                 reason: missingApi.length ? `missing api: ${missingApi.join(',')}` : reason,
@@ -10365,6 +11937,12 @@ class API {
         }
         return this.app.getSessionSecret();
     }
+    requestMessengerLinkageChallenge() {
+        if (this.app === null) {
+            return Promise.resolve(null);
+        }
+        return this.app.requestMessengerLinkageChallenge();
+    }
     getSessionMeta() {
         if (this.app === null) {
             return null;