@scalebun/web 1.0.0

package/dist/features/network/lazy.js

@@ -0,0 +1,65 @@
+/**
+ * Heavy/rare network helpers, bundled into LAZY chunks so they stay out of the core bundle (mirrors
+ * features/errors/lazy.ts and the replay engine). Loaded on demand: the GraphQL parser on the first
+ * GraphQL-looking request, the body capturer when captureBodies is on, WS/SSE installers when those
+ * transports are tracked + first used.
+ */
+import { looksLikeGraphql, parseGraphqlRequest, graphqlResponseHasErrors } from './parse/graphql';
+import { isAllowedContentType, sanitizeBody } from './capture/body';
+export { looksLikeGraphql, parseGraphqlRequest, graphqlResponseHasErrors };
+/**
+ * Single LAZY enrichment pass for an http capture. Reads the (stream-safe, one-shot) response text
+ * AT MOST ONCE and feeds it to both N2 (GraphQL errors[]) and N4 (response body) so the clone isn't
+ * consumed twice. Mutates `c.graphql` / `c.request` / `c.response` in place. Never throws.
+ */
+export async function enrichHttpCapture(c, opts) {
+    // Read the response body once; share the text across consumers.
+    let responseText;
+    const readOnce = async () => {
+        if (responseText === undefined)
+            responseText = c.readResponseText ? await c.readResponseText() : null;
+        return responseText;
+    };
+    // N2 — GraphQL op-awareness.
+    if (opts.graphql) {
+        try {
+            if (looksLikeGraphql(c.url, c.reqBody)) {
+                const meta = parseGraphqlRequest(c.reqBody) ?? {};
+                if (c.status && c.status >= 200 && c.status < 300) {
+                    const text = await readOnce();
+                    if (text) {
+                        try {
+                            meta.hasErrors = graphqlResponseHasErrors(JSON.parse(text));
+                        }
+                        catch {
+                            /* non-JSON — leave hasErrors unset */
+                        }
+                    }
+                }
+                if (Object.keys(meta).length)
+                    c.graphql = meta;
+            }
+        }
+        catch {
+            /* never lose the capture over a parse failure */
+        }
+    }
+    // N4 — hardened body/header capture (opt-in).
+    if (opts.body) {
+        const o = opts.body;
+        try {
+            if (c.reqBody && isAllowedContentType(c.reqContentType, o.contentTypeAllowlist)) {
+                c.request = { ...(c.request ?? {}), body: sanitizeBody(c.reqBody, o.bodyMaxBytes) };
+            }
+            if (isAllowedContentType(c.resContentType, o.contentTypeAllowlist)) {
+                const text = await readOnce();
+                if (text != null)
+                    c.response = { ...(c.response ?? {}), body: sanitizeBody(text, o.bodyMaxBytes) };
+            }
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+}
+//# sourceMappingURL=lazy.js.map

package/dist/features/network/lazy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy.js","sourceRoot":"","sources":["../../../src/features/network/lazy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAA2B,MAAM,gBAAgB,CAAC;AAG7F,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,CAAC;AAS3E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,CAAa,EAAE,IAAuB;IAC5E,gEAAgE;IAChE,IAAI,YAAuC,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,IAA4B,EAAE;QAClD,IAAI,YAAY,KAAK,SAAS;YAAE,YAAY,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtG,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IAEF,6BAA6B;IAC7B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBAClD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;oBAC9B,IAAI,IAAI,EAAE,CAAC;wBACT,IAAI,CAAC;4BACH,IAAI,CAAC,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC9D,CAAC;wBAAC,MAAM,CAAC;4BACP,sCAAsC;wBACxC,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;oBAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAChF,CAAC,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,CAAC;YACD,IAAI,oBAAoB,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;gBAC9B,IAAI,IAAI,IAAI,IAAI;oBAAE,CAAC,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;YACrG,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/features/network/normalize.d.ts

@@ -0,0 +1,9 @@
+/** Builds a contract `network` Item from an interceptor capture. */
+import type { NetworkItem } from '@scalebun/protocol';
+import type { NetCapture } from './types';
+export interface NormalizeOptions {
+    /** "slow" threshold in ms (config.network.slowRequestMs). */
+    slowMs?: number;
+}
+export declare function toNetworkItem(c: NetCapture, opts?: NormalizeOptions): NetworkItem;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/features/network/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../src/features/network/normalize.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAI1C,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,GAAE,gBAAqB,GAAG,WAAW,CAqCrF"}

package/dist/features/network/normalize.js

@@ -0,0 +1,49 @@
+/** Builds a contract `network` Item from an interceptor capture. */
+import { uuid, now } from '../../core';
+import { classifyHttp, isSlow, DEFAULT_SLOW_MS } from './classify';
+import { templateRoute } from './parse/url';
+export function toNetworkItem(c, opts = {}) {
+    const protocol = c.protocol ?? 'http';
+    // WS/SSE/beacon carry their own settle semantics; classify only request/response transports.
+    const failure = protocol === 'http' || protocol === 'beacon'
+        ? classifyHttp({ status: c.status, error: c.error, aborted: c.aborted, timedOut: c.timedOut })
+        : undefined;
+    const slow = isSlow(c.duration, opts.slowMs ?? DEFAULT_SLOW_MS);
+    const route = templateRoute(c.url);
+    const item = {
+        kind: 'network',
+        method: c.method,
+        url: c.url,
+        status: c.status,
+        startedAt: c.startedAt,
+        duration: c.duration,
+        error: c.error,
+        requestSize: c.requestSize,
+        responseSize: c.responseSize,
+        route,
+        screenName: currentScreen(),
+        ...(protocol !== 'http' ? { protocol } : {}),
+        ...(failure ? { failure } : {}),
+        ...(slow ? { slow: true } : {}),
+        ...(c.transferSize !== undefined ? { transferSize: c.transferSize } : {}),
+        ...(c.graphql ? { graphql: c.graphql } : {}),
+        ...(c.timing ? { timing: c.timing } : {}),
+        ...(c.ws ? { ws: c.ws } : {}),
+        ...(c.request ? { request: c.request } : {}),
+        ...(c.response ? { response: c.response } : {}),
+        ...(c.traceId ? { traceId: c.traceId } : {}), // W3C trace id (FE→BE correlation handoff)
+        // Dedup key for the backend (NetworkRequest.clientId is @unique + skipDuplicates).
+        clientId: `net_${uuid()}`,
+        timestamp: now(),
+    };
+    return item;
+}
+function currentScreen() {
+    try {
+        return typeof location !== 'undefined' ? location.pathname : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=normalize.js.map

package/dist/features/network/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../../src/features/network/normalize.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAGpE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO5C,MAAM,UAAU,aAAa,CAAC,CAAa,EAAE,OAAyB,EAAE;IACtE,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC;IACtC,6FAA6F;IAC7F,MAAM,OAAO,GACX,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,QAAQ;QAC1C,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9F,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAEnC,MAAM,IAAI,GAAgB;QACxB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,KAAK;QACL,UAAU,EAAE,aAAa,EAAE;QAC3B,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,2CAA2C;QACzF,mFAAmF;QACnF,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE;QACzB,SAAS,EAAE,GAAG,EAAE;KACF,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,OAAO,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/features/network/parse/graphql.d.ts

@@ -0,0 +1,17 @@
+/**
+ * N2 — GraphQL operation-awareness (LAZY chunk). A `POST /graphql` is the dominant API style yet
+ * every call looks identical by URL. We parse the request body (JSON or a raw query string) for the
+ * `operationName` + operation type (query|mutation|subscription), flag batched requests, and — given
+ * a parsed response — surface GraphQL `errors[]` even on a transport-level HTTP 200.
+ *
+ * Zero-dep, defensive: never throws (callers feature-detect), bounded work (only the leading bytes of
+ * the query are scanned for the operation keyword).
+ */
+import type { NetGraphql } from '../types';
+/** True when a request looks like GraphQL — URL hint OR a body that parses to a GraphQL op shape. */
+export declare function looksLikeGraphql(url: string, body: string | undefined): boolean;
+/** Parse the request body → operation metadata. Returns undefined when it isn't recognizably GraphQL. */
+export declare function parseGraphqlRequest(body: string | undefined): NetGraphql | undefined;
+/** Inspect a parsed GraphQL RESPONSE for an `errors[]` array (200-with-errors). */
+export declare function graphqlResponseHasErrors(parsed: unknown): boolean;
+//# sourceMappingURL=graphql.d.ts.map

package/dist/features/network/parse/graphql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.d.ts","sourceRoot":"","sources":["../../../../src/features/network/parse/graphql.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAO3C,qGAAqG;AACrG,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAK/E;AAED,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAsBpF;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAMjE"}

package/dist/features/network/parse/graphql.js

@@ -0,0 +1,106 @@
+/**
+ * N2 — GraphQL operation-awareness (LAZY chunk). A `POST /graphql` is the dominant API style yet
+ * every call looks identical by URL. We parse the request body (JSON or a raw query string) for the
+ * `operationName` + operation type (query|mutation|subscription), flag batched requests, and — given
+ * a parsed response — surface GraphQL `errors[]` even on a transport-level HTTP 200.
+ *
+ * Zero-dep, defensive: never throws (callers feature-detect), bounded work (only the leading bytes of
+ * the query are scanned for the operation keyword).
+ */
+const OP_RE = /\b(query|mutation|subscription)\b/;
+const NAMED_OP_RE = /\b(query|mutation|subscription)\s+([A-Za-z_][A-Za-z0-9_]*)/;
+/** True when a request looks like GraphQL — URL hint OR a body that parses to a GraphQL op shape. */
+export function looksLikeGraphql(url, body) {
+    if (/graphql/i.test(url))
+        return true;
+    if (!body)
+        return false;
+    const s = body.slice(0, 200);
+    return /["']?query["']?\s*[:=]/.test(s) || /^\s*(query|mutation|subscription)\b/.test(s);
+}
+/** Parse the request body → operation metadata. Returns undefined when it isn't recognizably GraphQL. */
+export function parseGraphqlRequest(body) {
+    if (!body)
+        return undefined;
+    const trimmed = body.trim();
+    // Batched: a JSON array of operations.
+    if (trimmed.startsWith('[')) {
+        const arr = safeJson(trimmed);
+        if (Array.isArray(arr) && arr.length) {
+            const first = arr[0];
+            const meta = first ? fromJsonOp(first) : undefined;
+            return { ...(meta ?? {}), batched: true };
+        }
+        return undefined;
+    }
+    // Standard: a JSON object { query, operationName, variables }.
+    if (trimmed.startsWith('{')) {
+        const obj = safeJson(trimmed);
+        if (obj && ('query' in obj || 'operationName' in obj))
+            return fromJsonOp(obj);
+        return undefined;
+    }
+    // Raw query string (application/graphql).
+    if (OP_RE.test(trimmed))
+        return fromQueryString(trimmed);
+    return undefined;
+}
+/** Inspect a parsed GraphQL RESPONSE for an `errors[]` array (200-with-errors). */
+export function graphqlResponseHasErrors(parsed) {
+    if (!parsed || typeof parsed !== 'object')
+        return false;
+    // single or batched: any element carrying a non-empty errors[] counts.
+    if (Array.isArray(parsed))
+        return parsed.some((p) => graphqlResponseHasErrors(p));
+    const errs = parsed.errors;
+    return Array.isArray(errs) && errs.length > 0;
+}
+function fromJsonOp(obj) {
+    const out = {};
+    const name = obj.operationName;
+    if (typeof name === 'string' && name)
+        out.operationName = name;
+    const query = typeof obj.query === 'string' ? obj.query : undefined;
+    if (query) {
+        const t = operationType(query);
+        if (t)
+            out.operationType = t;
+        if (!out.operationName) {
+            const n = operationName(query);
+            if (n)
+                out.operationName = n;
+        }
+    }
+    return out;
+}
+function fromQueryString(q) {
+    const out = {};
+    const t = operationType(q);
+    if (t)
+        out.operationType = t;
+    const n = operationName(q);
+    if (n)
+        out.operationName = n;
+    return out;
+}
+function operationType(query) {
+    const head = query.trimStart();
+    // anonymous shorthand `{ ... }` is a query
+    if (head.startsWith('{'))
+        return 'query';
+    const m = OP_RE.exec(head.slice(0, 64));
+    return m ? m[1] : undefined;
+}
+function operationName(query) {
+    const m = NAMED_OP_RE.exec(query);
+    return m && m[2] ? m[2] : undefined;
+}
+function safeJson(s) {
+    try {
+        return JSON.parse(s);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=graphql.js.map

package/dist/features/network/parse/graphql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.js","sourceRoot":"","sources":["../../../../src/features/network/parse/graphql.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,KAAK,GAAG,mCAAmC,CAAC;AAClD,MAAM,WAAW,GAAG,4DAA4D,CAAC;AAEjF,qGAAqG;AACrG,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAwB;IACpE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,uCAAuC;IACvC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAqB,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnD,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,+DAA+D;IAC/D,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAqB,CAAC;QAClD,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,eAAe,IAAI,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,0CAA0C;IAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CAAC,MAAe;IACtD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,uEAAuE;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAI,MAAe,CAAC,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,GAAS;IAC3B,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI;QAAE,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC;YAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC;gBAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC;QAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC;QAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IAC/B,2CAA2C;IAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/features/network/parse/url.d.ts

@@ -0,0 +1,12 @@
+/**
+ * N0 — URL → templated `route` grouping key. Strips volatile path segments (numeric ids, UUIDs,
+ * hashes, ULIDs) down to `:id` so `/users/42` and `/users/99` group as `/users/:id`, and drops the
+ * query string + hash. Pure, allocation-light, zero-dep. Used as the stable grouping key for the
+ * dashboard's "by endpoint" rollups and (later) the failure-rate / anomaly detector.
+ */
+/**
+ * Templated grouping route from a (possibly relative) URL. Returns `METHODless` path with ids → `:id`.
+ * Falls back to the raw pathname (or the input) when the URL can't be parsed. Never throws.
+ */
+export declare function templateRoute(url: string): string;
+//# sourceMappingURL=url.d.ts.map

package/dist/features/network/parse/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../../../src/features/network/parse/url.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBjD"}

package/dist/features/network/parse/url.js

@@ -0,0 +1,52 @@
+/**
+ * N0 — URL → templated `route` grouping key. Strips volatile path segments (numeric ids, UUIDs,
+ * hashes, ULIDs) down to `:id` so `/users/42` and `/users/99` group as `/users/:id`, and drops the
+ * query string + hash. Pure, allocation-light, zero-dep. Used as the stable grouping key for the
+ * dashboard's "by endpoint" rollups and (later) the failure-rate / anomaly detector.
+ */
+// One alternation covers: pure numeric id · UUID · Mongo ObjectId / long hex (≥16) · ULID (Crockford).
+const ID_SEG = /^(?:\d+|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|[0-9a-f]{16,}|[0-9A-HJKMNP-TV-Z]{26})$/i;
+/** True if a path segment looks like a volatile identifier we should template out. */
+function isIdSegment(seg) {
+    if (!seg)
+        return false;
+    if (ID_SEG.test(seg))
+        return true;
+    // mixed alnum tokens that contain a digit and are long-ish (e.g. "a1b2c3d4e5") — likely an id
+    if (seg.length >= 12 && /\d/.test(seg) && /^[A-Za-z0-9_-]+$/.test(seg))
+        return true;
+    return false;
+}
+/**
+ * Templated grouping route from a (possibly relative) URL. Returns `METHODless` path with ids → `:id`.
+ * Falls back to the raw pathname (or the input) when the URL can't be parsed. Never throws.
+ */
+export function templateRoute(url) {
+    let pathname = url;
+    try {
+        const base = typeof location !== 'undefined' ? location.href : 'http://x';
+        pathname = new URL(url, base).pathname;
+    }
+    catch {
+        // strip query/hash manually from a non-parseable input
+        const q = pathname.indexOf('?');
+        if (q >= 0)
+            pathname = pathname.slice(0, q);
+        const h = pathname.indexOf('#');
+        if (h >= 0)
+            pathname = pathname.slice(0, h);
+    }
+    if (pathname === '/' || pathname === '')
+        return pathname || '/';
+    const parts = pathname.split('/');
+    let changed = false;
+    for (let i = 0; i < parts.length; i++) {
+        const seg = parts[i];
+        if (seg !== undefined && isIdSegment(seg)) {
+            parts[i] = ':id';
+            changed = true;
+        }
+    }
+    return changed ? parts.join('/') : pathname;
+}
+//# sourceMappingURL=url.js.map

package/dist/features/network/parse/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../../../src/features/network/parse/url.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,uGAAuG;AACvG,MAAM,MAAM,GACV,8GAA8G,CAAC;AAEjH,sFAAsF;AACtF,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,8FAA8F;IAC9F,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;QAC1E,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,IAAI,GAAG,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,GAAG,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9C,CAAC"}

package/dist/features/network/sampler.d.ts

@@ -0,0 +1,21 @@
+/**
+ * N5 — adaptive network sampling. The rule that makes high-RPS apps affordable WITHOUT losing the
+ * signal that matters: ALWAYS keep failed + slow requests; thin only the SUCCESSFUL ones to the base
+ * `sampleRate`. The thin is deterministic per-request (fnv1a32 over a stable per-request key) so it's
+ * spread evenly and the backend could re-derive it — no client trust, the same hash family as
+ * flags/experiments/error-grouping. Zero-dep.
+ */
+export interface SampleInput {
+    /** A classified failure ⇒ always kept. */
+    failed: boolean;
+    /** Over the slow threshold ⇒ always kept. */
+    slow: boolean;
+    /** Stable per-request key for the deterministic bucket (e.g. url + startedAt). */
+    key: string;
+}
+/**
+ * Decide whether to keep a request. `sampleRate` ∈ [0,1] is the base for SUCCESSFUL requests; 1 keeps
+ * everything (today's behavior), 0 keeps only failed/slow. Out-of-range rates clamp.
+ */
+export declare function shouldKeep(input: SampleInput, sampleRate: number): boolean;
+//# sourceMappingURL=sampler.d.ts.map

package/dist/features/network/sampler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.d.ts","sourceRoot":"","sources":["../../../src/features/network/sampler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,MAAM,EAAE,OAAO,CAAC;IAChB,6CAA6C;IAC7C,IAAI,EAAE,OAAO,CAAC;IACd,kFAAkF;IAClF,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAQ1E"}

package/dist/features/network/sampler.js

@@ -0,0 +1,25 @@
+/**
+ * N5 — adaptive network sampling. The rule that makes high-RPS apps affordable WITHOUT losing the
+ * signal that matters: ALWAYS keep failed + slow requests; thin only the SUCCESSFUL ones to the base
+ * `sampleRate`. The thin is deterministic per-request (fnv1a32 over a stable per-request key) so it's
+ * spread evenly and the backend could re-derive it — no client trust, the same hash family as
+ * flags/experiments/error-grouping. Zero-dep.
+ */
+import { fnv1a32 } from '../config/bucketing';
+/**
+ * Decide whether to keep a request. `sampleRate` ∈ [0,1] is the base for SUCCESSFUL requests; 1 keeps
+ * everything (today's behavior), 0 keeps only failed/slow. Out-of-range rates clamp.
+ */
+export function shouldKeep(input, sampleRate) {
+    if (input.failed || input.slow)
+        return true; // never thin the actionable ones
+    const rate = sampleRate >= 1 ? 1 : sampleRate <= 0 ? 0 : sampleRate;
+    if (rate >= 1)
+        return true;
+    if (rate <= 0)
+        return false;
+    // bucket 0..9999 → fractional decision with 1/10000 resolution
+    const bucket = fnv1a32(input.key) % 10000;
+    return bucket < Math.round(rate * 10000);
+}
+//# sourceMappingURL=sampler.js.map

package/dist/features/network/sampler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.js","sourceRoot":"","sources":["../../../src/features/network/sampler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAW9C;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAkB,EAAE,UAAkB;IAC/D,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAC9E,MAAM,IAAI,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACpE,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,+DAA+D;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAM,CAAC;IAC3C,OAAO,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/features/network/size.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Byte-accurate request/response sizes (N0). Byte *counts* carry no payload content, so they're safe
+ * to compute unconditionally — independent of body capture (which is opt-in). Mirrors the mobile SDK's
+ * `bodyCapture` size helpers for cross-platform parity. Never throws.
+ */
+/** UTF-8 byte length of a string (not the char/code-unit count). Never throws. */
+export declare function utf8ByteLength(s: string): number;
+/**
+ * Best-effort byte size of an outgoing request body, computed synchronously without consuming streams.
+ * Returns undefined when the size can't be known cheaply (FormData / ReadableStream / unknown). Never throws.
+ */
+export declare function requestBodyBytes(body: unknown): number | undefined;
+/** Parse a `content-length` header value to a byte count. undefined when absent/invalid. */
+export declare function contentLengthBytes(value: string | null | undefined): number | undefined;
+/**
+ * Monotonic high-resolution clock for measuring request DURATIONS — immune to wall-clock jumps
+ * (NTP corrections, sleep/wake) that can make `Date.now()` deltas wrong or negative. Falls back to
+ * `Date.now()` where `performance.now` is unavailable. (Wire timestamps still use epoch `Date.now()`.)
+ */
+export declare function perfNow(): number;
+//# sourceMappingURL=size.d.ts.map

package/dist/features/network/size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"size.d.ts","sourceRoot":"","sources":["../../../src/features/network/size.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQhD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAYlE;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIvF;AAED;;;;GAIG;AACH,wBAAgB,OAAO,IAAI,MAAM,CAEhC"}

package/dist/features/network/size.js

@@ -0,0 +1,63 @@
+/**
+ * Byte-accurate request/response sizes (N0). Byte *counts* carry no payload content, so they're safe
+ * to compute unconditionally — independent of body capture (which is opt-in). Mirrors the mobile SDK's
+ * `bodyCapture` size helpers for cross-platform parity. Never throws.
+ */
+let _enc;
+function encoder() {
+    if (_enc)
+        return _enc;
+    return (_enc = typeof TextEncoder !== 'undefined' ? new TextEncoder() : undefined);
+}
+/** UTF-8 byte length of a string (not the char/code-unit count). Never throws. */
+export function utf8ByteLength(s) {
+    try {
+        const e = encoder();
+        if (e)
+            return e.encode(s).length;
+        return unescape(encodeURIComponent(s)).length; // fallback when TextEncoder is absent
+    }
+    catch {
+        return s.length;
+    }
+}
+/**
+ * Best-effort byte size of an outgoing request body, computed synchronously without consuming streams.
+ * Returns undefined when the size can't be known cheaply (FormData / ReadableStream / unknown). Never throws.
+ */
+export function requestBodyBytes(body) {
+    try {
+        if (body == null)
+            return undefined;
+        if (typeof body === 'string')
+            return utf8ByteLength(body);
+        if (typeof URLSearchParams !== 'undefined' && body instanceof URLSearchParams)
+            return utf8ByteLength(body.toString());
+        if (typeof Blob !== 'undefined' && body instanceof Blob)
+            return body.size;
+        if (body instanceof ArrayBuffer)
+            return body.byteLength;
+        if (ArrayBuffer.isView(body))
+            return body.byteLength;
+        return undefined; // FormData / ReadableStream / Document — not cheaply measurable without consuming
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Parse a `content-length` header value to a byte count. undefined when absent/invalid. */
+export function contentLengthBytes(value) {
+    if (!value)
+        return undefined;
+    const n = parseInt(value, 10);
+    return Number.isFinite(n) && n >= 0 ? n : undefined;
+}
+/**
+ * Monotonic high-resolution clock for measuring request DURATIONS — immune to wall-clock jumps
+ * (NTP corrections, sleep/wake) that can make `Date.now()` deltas wrong or negative. Falls back to
+ * `Date.now()` where `performance.now` is unavailable. (Wire timestamps still use epoch `Date.now()`.)
+ */
+export function perfNow() {
+    return typeof performance !== 'undefined' && typeof performance.now === 'function' ? performance.now() : Date.now();
+}
+//# sourceMappingURL=size.js.map

package/dist/features/network/size.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"size.js","sourceRoot":"","sources":["../../../src/features/network/size.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,IAAI,IAA6B,CAAC;AAClC,SAAS,OAAO;IACd,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,CAAC,IAAI,GAAG,OAAO,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACrF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjC,OAAO,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,sCAAsC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,IAAI,CAAC;QACH,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QACnC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,IAAI,YAAY,eAAe;YAAE,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtH,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAC1E,IAAI,IAAI,YAAY,WAAW;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QACxD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAuB,CAAC;YAAE,OAAQ,IAAwB,CAAC,UAAU,CAAC;QAC7F,OAAO,SAAS,CAAC,CAAC,kFAAkF;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,KAAgC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,WAAW,KAAK,WAAW,IAAI,OAAO,WAAW,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACtH,CAAC"}

package/dist/features/network/timing.d.ts

@@ -0,0 +1,41 @@
+/**
+ * N1 — `PerformanceResourceTiming` correlation. The interceptor sees status/duration/body but NOT
+ * the network-stack phases (DNS/TCP/TLS/TTFB) or the actual transferred bytes (chunked/compressed).
+ * The browser records those in a `PerformanceResourceTiming` entry that lands *after* the response
+ * settles. We buffer recent entries via a `PerformanceObserver` (no polling) and match a settled
+ * capture to its entry by URL + a start-time window.
+ *
+ * Cross-vertical seam: Perf owns navigation + STATIC-resource timing + spans; Network owns request
+ * capture and merges timing onto fetch/XHR (`initiatorType` 'fetch'|'xmlhttprequest'). We only read
+ * those initiator types so a resource isn't double-counted by both verticals.
+ */
+import type { NetTiming } from './types';
+export interface MergedTiming {
+    timing?: NetTiming;
+    transferSize?: number;
+}
+/** Extract the phase breakdown (ms, clamped ≥0) + transferSize from a ResourceTiming entry. */
+export declare function timingFromEntry(e: PerformanceResourceTiming): MergedTiming;
+/**
+ * A bounded, time-windowed index of recent ResourceTiming entries for our initiator types, fed by a
+ * buffered `PerformanceObserver`. `match(url, startedAt)` pops the closest entry (one-shot so two
+ * requests to the same URL each get their own). Graceful no-op where the API is unavailable.
+ */
+export declare class ResourceTimingIndex {
+    private readonly byUrl;
+    private observer?;
+    private timeOriginMs;
+    /** Entries older than this (ms, relative to performance.now()) are pruned to bound memory. */
+    private static readonly TTL_MS;
+    private static readonly MAX_PER_URL;
+    install(): boolean;
+    private add;
+    /**
+     * Pop the ResourceTiming entry that best matches this settled capture. `startedAt` is an epoch ms
+     * (Date.now()); we convert it to the performance timeline to pick the closest entry. One-shot.
+     */
+    match(url: string, startedAt: number): MergedTiming;
+    private prune;
+    teardown(): void;
+}
+//# sourceMappingURL=timing.d.ts.map

package/dist/features/network/timing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing.d.ts","sourceRoot":"","sources":["../../../src/features/network/timing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIzC,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,+FAA+F;AAC/F,wBAAgB,eAAe,CAAC,CAAC,EAAE,yBAAyB,GAAG,YAAY,CAmB1E;AAMD;;;;GAIG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkD;IACxE,OAAO,CAAC,QAAQ,CAAC,CAAsB;IACvC,OAAO,CAAC,YAAY,CAAK;IACzB,8FAA8F;IAC9F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAU;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAK;IAExC,OAAO,IAAI,OAAO;IAmBlB,OAAO,CAAC,GAAG;IAYX;;;OAGG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;IAqBnD,OAAO,CAAC,KAAK;IAUb,QAAQ,IAAI,IAAI;CAKjB"}