@scalebun/web 1.0.0

package/dist/features/push/softAsk.js

@@ -0,0 +1,141 @@
+const STORE_KEY = 'scalebun.push.softAsk.snoozedUntil';
+const DAY_MS = 86400000;
+const DEFAULTS = {
+    title: 'Stay in the loop',
+    body: 'Get notified about important updates. You can turn this off any time.',
+    allowText: 'Allow notifications',
+    denyText: 'Not now',
+    remindAfterDays: 7,
+    accent: '#5B4FE0',
+};
+/** A dismissal is a real answer and is honoured across sessions. Storage failures never block. */
+function snoozed() {
+    try {
+        const until = Number(localStorage.getItem(STORE_KEY) || 0);
+        return Number.isFinite(until) && until > Date.now();
+    }
+    catch {
+        return false;
+    }
+}
+function snooze(days) {
+    try {
+        localStorage.setItem(STORE_KEY, String(Date.now() + days * DAY_MS));
+    }
+    catch {
+        /* private mode — the worst case is asking again next session */
+    }
+}
+/**
+ * Render the dialog and resolve with what the visitor chose.
+ *
+ * Shadow DOM so the host's CSS cannot break it and ours cannot leak into the host — the same
+ * containment rule the in-app surfaces follow.
+ */
+function ask(o) {
+    return new Promise((resolve) => {
+        const host = document.createElement('div');
+        host.setAttribute('data-scalebun-softask', '');
+        // Above ordinary page chrome, below the browser's own prompt (which the OS draws anyway).
+        host.style.cssText = 'position:fixed;z-index:2147483000;inset:auto 16px 16px auto';
+        const root = host.attachShadow({ mode: 'open' });
+        root.innerHTML = `
+      <style>
+        :host{all:initial}
+        .c{width:min(340px,calc(100vw - 32px));box-sizing:border-box;padding:16px 18px;border-radius:14px;
+           background:#fff;color:#172033;box-shadow:0 18px 48px rgba(3,7,18,.28);
+           font:14px/1.45 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;
+           animation:in .22s ease-out both}
+        @keyframes in{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:none}}
+        .t{font-size:15px;font-weight:700;margin:0 0 4px}
+        .b{margin:0 0 14px;color:#5b6472}
+        .r{display:flex;gap:8px;justify-content:flex-end}
+        button{font:inherit;font-weight:600;border-radius:9px;padding:8px 14px;cursor:pointer;border:0}
+        .no{background:transparent;color:#5b6472}
+        .yes{background:var(--a);color:#fff}
+        @media (prefers-color-scheme:dark){
+          .c{background:#1a1e27;color:#f2f4f8}.b{color:#aab2c0}.no{color:#aab2c0}
+        }
+        @media (prefers-reduced-motion:reduce){.c{animation-duration:1ms}}
+      </style>
+      <div class="c" role="dialog" aria-modal="false" style="--a:${o.accent}">
+        <p class="t"></p>
+        <p class="b"></p>
+        <div class="r">
+          <button class="no" type="button"></button>
+          <button class="yes" type="button"></button>
+        </div>
+      </div>`;
+        // textContent, never innerHTML: these strings come from tenant config and must not be able to
+        // inject markup into a host page.
+        root.querySelector('.t').textContent = o.title;
+        root.querySelector('.b').textContent = o.body;
+        const no = root.querySelector('.no');
+        const yes = root.querySelector('.yes');
+        no.textContent = o.denyText;
+        yes.textContent = o.allowText;
+        const close = (accepted) => {
+            host.remove();
+            resolve(accepted);
+        };
+        no.addEventListener('click', () => close(false));
+        // ⚠️ This click IS the user activation the browser requires. `enable()` must be called from
+        // inside this handler's task — deferring it (setTimeout, await before the call) drops the
+        // activation and the real prompt silently never appears.
+        yes.addEventListener('click', () => close(true));
+        document.body.appendChild(host);
+    });
+}
+/**
+ * Arm the soft-ask. Resolves once a decision is made (or immediately when it should not run).
+ *
+ * Every early return is a case where asking would be wrong, not merely unnecessary:
+ *   • already `granted` — they are subscribed; a dialog would be noise
+ *   • already `denied`  — the browser prompt is unavailable, so "Allow" could not work. Offering a
+ *     button that cannot succeed is worse than offering nothing.
+ *   • snoozed           — they said not now, and meant it
+ */
+export async function armSoftAsk(opts, deps) {
+    if (typeof document === 'undefined' || typeof Notification === 'undefined')
+        return;
+    const perm = deps.permission();
+    if (perm !== 'default')
+        return;
+    if (snoozed())
+        return;
+    const o = { ...DEFAULTS, ...opts };
+    const run = async () => {
+        if (deps.permission() !== 'default' || snoozed())
+            return;
+        const accepted = await ask(o);
+        if (!accepted) {
+            snooze(o.remindAfterDays);
+            deps.log?.('soft-ask declined — snoozed');
+            return;
+        }
+        const r = await deps.enable();
+        deps.log?.(`soft-ask accepted → enable() = ${r}`);
+        // A browser-level block is permanent, so there is nothing to snooze and nothing to retry.
+        if (r === 'denied')
+            deps.log?.('browser permission denied — the SDK cannot re-ask');
+    };
+    const t = opts.trigger ?? 'immediate';
+    if (t === 'immediate')
+        return void run();
+    if (typeof t === 'object' && 'afterMs' in t) {
+        setTimeout(() => void run(), Math.max(0, t.afterMs));
+        return;
+    }
+    if (typeof t === 'object' && 'onSelector' in t) {
+        // Delegated, so it still works for elements added after init (SPA routes, late hydration).
+        const onClick = (e) => {
+            const el = e.target;
+            if (el && el.closest && el.closest(t.onSelector)) {
+                document.removeEventListener('click', onClick, true);
+                void run();
+            }
+        };
+        document.addEventListener('click', onClick, true);
+    }
+}
+//# sourceMappingURL=softAsk.js.map

package/dist/features/push/softAsk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"softAsk.js","sourceRoot":"","sources":["../../../src/features/push/softAsk.ts"],"names":[],"mappings":"AAiDA,MAAM,SAAS,GAAG,oCAAoC,CAAC;AACvD,MAAM,MAAM,GAAG,QAAU,CAAC;AAE1B,MAAM,QAAQ,GAAG;IACf,KAAK,EAAE,kBAAkB;IACzB,IAAI,EAAE,uEAAuE;IAC7E,SAAS,EAAE,qBAAqB;IAChC,QAAQ,EAAE,SAAS;IACnB,eAAe,EAAE,CAAC;IAClB,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF,kGAAkG;AAClG,SAAS,OAAO;IACd,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AACD,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,GAAG,CAAC,CAA4C;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;QAC/C,0FAA0F;QAC1F,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,6DAA6D,CAAC;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG;;;;;;;;;;;;;;;;;;;mEAmB8C,CAAC,CAAC,MAAM;;;;;;;aAO9D,CAAC;QACV,8FAA8F;QAC9F,kCAAkC;QACjC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAiB,CAAC,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC;QAC/D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAiB,CAAC,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;QAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAsB,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAsB,CAAC;QAC5D,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC5B,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,SAAS,CAAC;QAE9B,MAAM,KAAK,GAAG,CAAC,QAAiB,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC,CAAC;QACF,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,4FAA4F;QAC5F,0FAA0F;QAC1F,yDAAyD;QACzD,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB,EAAE,IAAiB;IACtE,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,OAAO,YAAY,KAAK,WAAW;QAAE,OAAO;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IAC/B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAI,OAAO,EAAE;QAAE,OAAO;IAEtB,MAAM,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAA+C,CAAC;IAChF,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;QACrB,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE;YAAE,OAAO;QACzD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC1B,IAAI,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC;QAClD,0FAA0F;QAC1F,IAAI,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,GAAG,EAAE,CAAC,mDAAmD,CAAC,CAAC;IACtF,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;IACtC,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,KAAK,GAAG,EAAE,CAAC;IACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAC5C,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QAC/C,2FAA2F;QAC3F,MAAM,OAAO,GAAG,CAAC,CAAQ,EAAE,EAAE;YAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,MAAwB,CAAC;YACtC,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjD,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBACrD,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC;QACF,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/features/replay/ReplayFeature.d.ts

@@ -0,0 +1,32 @@
+/**
+ * F-RPL — the thin eager shell. Registered in the manifest so the SDK knows replay exists, but it
+ * carries almost no code: it makes the deterministic SAMPLING decision (lazy `sampling.ts`) and, only
+ * for a sampled session, lazy-loads the full `RecorderController` (`lifecycle/recorder.ts`). All the
+ * recording lifecycle — snapshot, segments, checkpoints, cadence, engine wiring — lives in that lazy
+ * chunk, so it never weighs down the core bundle. A non-sampled session loads only `sampling.ts`.
+ */
+import type { IFeature, FeatureContext } from '@scalebun/sdk-contracts';
+import type { ReplayStats } from './lifecycle/recorder';
+export declare class ReplayFeature implements IFeature {
+    readonly name = "replay";
+    private controller?;
+    private uninstallWebGL?;
+    get isActive(): boolean;
+    setup(ctx: FeatureContext): Promise<void>;
+    /** Capture-on-signal flush (promote pre-roll → live). No-op until a recorder is active. */
+    flush(): void;
+    /** Live diagnostics (null when not recording — off, or a non-sampled session). */
+    stats(): ReplayStats | null;
+    /** Force a re-keyframe (e.g. before a risky flow), so the player gets a clean seek point. */
+    checkpoint(reason?: string): void;
+    /** Pause capture (keep the session + buffered pre-roll). No-op until a recorder is active. */
+    pause(): void;
+    /** Resume capture after pause() with a fresh keyframe. No-op unless paused. */
+    resume(): void;
+    /** Change replay text-masking at runtime (re-keyframes so it applies from here on). */
+    setPrivacy(policy: {
+        maskAllText?: boolean;
+    }): void;
+    teardown(): void;
+}
+//# sourceMappingURL=ReplayFeature.d.ts.map

package/dist/features/replay/ReplayFeature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReplayFeature.d.ts","sourceRoot":"","sources":["../../../src/features/replay/ReplayFeature.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,EAAsB,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAS5E,qBAAa,aAAc,YAAW,QAAQ;IAC5C,QAAQ,CAAC,IAAI,YAAY;IACzB,OAAO,CAAC,UAAU,CAAC,CAAqB;IACxC,OAAO,CAAC,cAAc,CAAC,CAAa;IAEpC,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAEK,KAAK,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA2F/C,2FAA2F;IAC3F,KAAK,IAAI,IAAI;IAIb,kFAAkF;IAClF,KAAK,IAAI,WAAW,GAAG,IAAI;IAI3B,6FAA6F;IAC7F,UAAU,CAAC,MAAM,SAAW,GAAG,IAAI;IAInC,8FAA8F;IAC9F,KAAK,IAAI,IAAI;IAIb,+EAA+E;IAC/E,MAAM,IAAI,IAAI;IAId,uFAAuF;IACvF,UAAU,CAAC,MAAM,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAInD,QAAQ,IAAI,IAAI;CAMjB"}

package/dist/features/replay/ReplayFeature.js

@@ -0,0 +1,132 @@
+/** Gap before the single recorder-import retry (A3). Long enough to outlast a blip, short enough that a
+ *  bouncing visitor is not what decides the outcome. */
+const RECORDER_RETRY_MS = 400;
+/** Extracted so the retry awaits the SAME specifier — two spellings would defeat the module cache. */
+const loadRecorder = () => import('./lifecycle/recorder');
+export class ReplayFeature {
+    constructor() {
+        this.name = 'replay';
+    }
+    get isActive() {
+        return this.controller?.isActive ?? false;
+    }
+    async setup(ctx) {
+        if (typeof document === 'undefined' || typeof MutationObserver === 'undefined')
+            return;
+        // Deterministic sampling gate (server-reconcilable fnv1a) — decide BEFORE loading the recorder,
+        // so a non-sampled session installs nothing beyond this tiny decision.
+        const { decideSampling } = await import('./lifecycle/sampling');
+        const decision = decideSampling(ctx.replaySampling, ctx.sessionId ?? '');
+        ctx.log('[replay] sampling:', decision.reason, '(bucket', decision.bucket + ')');
+        if (!decision.record)
+            return;
+        // D3 — honor GPC / Do-Not-Track (opt-in via privacy.respectDnt). If the user signalled opt-out,
+        // don't record replay at all. Lazy-imported so it costs nothing unless the host opted in.
+        if (ctx.respectDnt) {
+            const { userOptedOutOfTracking } = await import('./lifecycle/deviceSignals');
+            if (userOptedOutOfTracking()) {
+                ctx.log('[replay] dnt: skip');
+                return;
+            }
+        }
+        // P3/D1 cost-aware egress (Save-Data/slow/low-mem → buffer instead of stream) is applied inside the
+        // lazy recorder so it costs zero eager-core bytes.
+        // WebGL replay: force preserveDrawingBuffer as EARLY as possible (must precede the app creating its
+        // WebGL context) so the canvas recorder can snapshot 3D/WebGL canvases instead of capturing blank.
+        // Gated on canvas capture — we only pay the GPU cost for sampled sessions that record canvases.
+        if (ctx.replayCanvas) {
+            const { installWebGLPreserve } = await import('./engine/webglPatch');
+            this.uninstallWebGL = installWebGLPreserve();
+        }
+        /**
+         * R3 — WARM the engine chunks concurrently instead of letting them waterfall.
+         *
+         * Time-to-first-keyframe was five SEQUENTIAL await points: sampling → recorder →
+         * worker+segmentBuffer → the engine modules → iframe → only then `takeSnapshot`. Each is a module
+         * fetch, so on a cold cache the first keyframe waits on a chain of round trips — which is why
+         * sessions under 1s reach only 12% replay coverage while sessions over 30s reach 88%. Nothing is
+         * broken; the recorder simply is not loaded yet when a bouncing visitor leaves.
+         *
+         * These are fire-and-forget: the module registry dedupes, so when `arm()` later awaits the same
+         * specifiers they are already resolved and the waterfall collapses to roughly one round trip.
+         * Deliberately placed AFTER the sampling gate, so a non-sampled session still fetches nothing —
+         * that guarantee is the reason the gate is first, and warming ahead of it would break it.
+         *
+         * `catch` per import: a warm that fails must stay silent. `arm()` awaits these same specifiers and
+         * will surface a genuine failure there; an unhandled rejection here would be noise on a page that
+         * is about to record perfectly well from a retried fetch.
+         */
+        const warm = (p) => { void p.catch(() => { }); };
+        warm(import('../replay/engine/nodeRegistry'));
+        warm(import('../replay/engine/snapshot'));
+        warm(import('../replay/engine/mutations'));
+        warm(import('../replay/engine/interactions'));
+        warm(import('../replay/engine/cssom'));
+        warm(import('../replay/engine/iframe'));
+        warm(import('../replay/engine/replayWorker'));
+        warm(import('./lifecycle/segmentBuffer'));
+        /**
+         * A3 — retry the recorder import before giving up.
+         *
+         * This one import decides whether the session records at all: everything above it is warming, and
+         * `createRecorder` is what installs the observers. A single transient failure here loses the WHOLE
+         * session's replay while every other lane (events, perf, network — all eager core) keeps working
+         * normally, which is exactly the signature of the 43-of-47 unexplained sessions measured live
+         * (`npm run replay:diagnose`): SDK demonstrably ran, zero frames stored.
+         *
+         * Two attempts, ~400ms apart. Deliberately modest: a chunk that 404s (deploy skew, bad CDN path) will
+         * fail identically on retry, so this only buys back the transient cases — a dropped request, a
+         * network blip, a cold cache under contention. It costs nothing when the first attempt succeeds,
+         * which is the overwhelmingly common path.
+         *
+         * When the retry SUCCEEDS it says so. Without that event a retry is an unfalsifiable fix: coverage
+         * might improve and nobody could tell whether this was why. `sdk_replay_recovered` makes it
+         * measurable, and pairs with `sdk_feature_setup_failed` (which the throw below still produces via
+         * FeatureRegistry) so both outcomes are visible instead of neither.
+         */
+        let createRecorder;
+        try {
+            ({ createRecorder } = await loadRecorder());
+        }
+        catch (first) {
+            await new Promise((r) => setTimeout(r, RECORDER_RETRY_MS));
+            ({ createRecorder } = await loadRecorder()); // a second failure propagates → reported by the registry
+            ctx.trackEvent('sdk_replay_recovered', {
+                stage: 'recorder-import',
+                message: String(first?.message ?? first).slice(0, 300),
+            });
+        }
+        this.controller = await createRecorder(ctx, decision);
+    }
+    /** Capture-on-signal flush (promote pre-roll → live). No-op until a recorder is active. */
+    flush() {
+        this.controller?.flush();
+    }
+    /** Live diagnostics (null when not recording — off, or a non-sampled session). */
+    stats() {
+        return this.controller?.stats() ?? null;
+    }
+    /** Force a re-keyframe (e.g. before a risky flow), so the player gets a clean seek point. */
+    checkpoint(reason = 'manual') {
+        this.controller?.forceCheckpoint(reason);
+    }
+    /** Pause capture (keep the session + buffered pre-roll). No-op until a recorder is active. */
+    pause() {
+        this.controller?.pause();
+    }
+    /** Resume capture after pause() with a fresh keyframe. No-op unless paused. */
+    resume() {
+        this.controller?.resume();
+    }
+    /** Change replay text-masking at runtime (re-keyframes so it applies from here on). */
+    setPrivacy(policy) {
+        this.controller?.setPrivacy(policy);
+    }
+    teardown() {
+        this.controller?.teardown();
+        this.controller = undefined;
+        this.uninstallWebGL?.();
+        this.uninstallWebGL = undefined;
+    }
+}
+//# sourceMappingURL=ReplayFeature.js.map

package/dist/features/replay/ReplayFeature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReplayFeature.js","sourceRoot":"","sources":["../../../src/features/replay/ReplayFeature.ts"],"names":[],"mappings":"AAUA;wDACwD;AACxD,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,sGAAsG;AACtG,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAE1D,MAAM,OAAO,aAAa;IAA1B;QACW,SAAI,GAAG,QAAQ,CAAC;IAuI3B,CAAC;IAnIC,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,UAAU,EAAE,QAAQ,IAAI,KAAK,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAmB;QAC7B,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,OAAO,gBAAgB,KAAK,WAAW;YAAE,OAAO;QAEvF,gGAAgG;QAChG,uEAAuE;QACvE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QAE7B,gGAAgG;QAChG,0FAA0F;QAC1F,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC7E,IAAI,sBAAsB,EAAE,EAAE,CAAC;gBAC7B,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;QACH,CAAC;QACD,oGAAoG;QACpG,mDAAmD;QAEnD,oGAAoG;QACpG,mGAAmG;QACnG,gGAAgG;QAChG,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACrE,IAAI,CAAC,cAAc,GAAG,oBAAoB,EAAE,CAAC;QAC/C,CAAC;QAED;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,IAAI,GAAG,CAAC,CAAmB,EAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAE1C;;;;;;;;;;;;;;;;;;WAkBG;QACH,IAAI,cAA0E,CAAC;QAC/E,IAAI,CAAC;YACH,CAAC,EAAE,cAAc,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC3D,CAAC,EAAE,cAAc,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC,CAAC,CAAC,yDAAyD;YACtG,GAAG,CAAC,UAAU,CAAC,sBAAsB,EAAE;gBACrC,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,MAAM,CAAE,KAA8B,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACjF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,2FAA2F;IAC3F,KAAK;QACH,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,kFAAkF;IAClF,KAAK;QACH,OAAO,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,6FAA6F;IAC7F,UAAU,CAAC,MAAM,GAAG,QAAQ;QAC1B,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,8FAA8F;IAC9F,KAAK;QACH,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAC/E,MAAM;QACJ,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,uFAAuF;IACvF,UAAU,CAAC,MAAiC;QAC1C,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;IAClC,CAAC;CACF"}

package/dist/features/replay/engine/canvas.d.ts

@@ -0,0 +1,45 @@
+/**
+ * CanvasRecorder — opt-in <canvas> pixel capture. The DOM serializer captures a <canvas> element but
+ * not its pixels (they live in a 2D/WebGL context), so canvases replay blank. This throttled loop
+ * snapshots each canvas to a compact image and emits an `op:'canvas'` delta keyed by the node id; the
+ * player draws it back. Off by default (pixels can't be masked) + a per-canvas blocklist.
+ *
+ * Handles BOTH 2D and WebGL/3D canvases: a WebGL canvas would normally read back blank from this async
+ * loop (`preserveDrawingBuffer:false` clears the buffer after compositing), so `webglPatch.ts` forces
+ * `preserveDrawingBuffer:true` at context creation — the same `drawImage`/`toDataURL` path then captures
+ * WebGL pixels unchanged. A tainted (cross-origin texture) canvas still throws → skipped.
+ *
+ * v1 encodes on the main thread (`toDataURL`), bounded by the fps throttle + downscale. Moving the
+ * encode into the RPL-WORKER (OffscreenCanvas.convertToBlob) is a follow-up.
+ */
+import type { Mutation } from './types';
+import { NodeRegistry } from './nodeRegistry';
+export interface CanvasOptions {
+    fps?: number;
+    maxDim?: number;
+    quality?: number;
+    /** Documents to scan for canvases. Defaults to the top document; the ReplayFeature also passes the
+     *  observed same-origin iframe sub-documents so in-iframe canvases are captured too (A7). */
+    getDocs?: () => Document[];
+}
+export declare class CanvasRecorder {
+    private readonly reg;
+    private readonly onMutations;
+    private readonly log;
+    private timer;
+    private readonly last;
+    private readonly tainted;
+    private readonly intervalMs;
+    private readonly maxDim;
+    private readonly quality;
+    private readonly getDocs?;
+    private scratch;
+    constructor(reg: NodeRegistry, onMutations: (m: Mutation[]) => void, log?: (...a: unknown[]) => void, opts?: CanvasOptions);
+    start(): void;
+    disconnect(): void;
+    private capture;
+    /** Encode to a (possibly downscaled) webp data URL. `w/h` stay the ORIGINAL dims so the player
+     *  redraws at full size. Throws (SecurityError) on a tainted canvas → caller skips. */
+    private encode;
+}
+//# sourceMappingURL=canvas.d.ts.map

package/dist/features/replay/engine/canvas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas.d.ts","sourceRoot":"","sources":["../../../../src/features/replay/engine/canvas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;iGAC6F;IAC7F,OAAO,CAAC,EAAE,MAAM,QAAQ,EAAE,CAAC;CAC5B;AAID,qBAAa,cAAc;IAWvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG;IAZtB,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAmB;IAC5C,OAAO,CAAC,OAAO,CAAkC;gBAG9B,GAAG,EAAE,YAAY,EACjB,WAAW,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,IAAI,EACpC,GAAG,GAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,IAAe,EAC1D,IAAI,GAAE,aAAkB;IAQ1B,KAAK,IAAI,IAAI;IAMb,UAAU,IAAI,IAAI;IAQlB,OAAO,CAAC,OAAO;IAkDf;2FACuF;IACvF,OAAO,CAAC,MAAM;CAcf"}

package/dist/features/replay/engine/canvas.js

@@ -0,0 +1,122 @@
+/**
+ * CanvasRecorder — opt-in <canvas> pixel capture. The DOM serializer captures a <canvas> element but
+ * not its pixels (they live in a 2D/WebGL context), so canvases replay blank. This throttled loop
+ * snapshots each canvas to a compact image and emits an `op:'canvas'` delta keyed by the node id; the
+ * player draws it back. Off by default (pixels can't be masked) + a per-canvas blocklist.
+ *
+ * Handles BOTH 2D and WebGL/3D canvases: a WebGL canvas would normally read back blank from this async
+ * loop (`preserveDrawingBuffer:false` clears the buffer after compositing), so `webglPatch.ts` forces
+ * `preserveDrawingBuffer:true` at context creation — the same `drawImage`/`toDataURL` path then captures
+ * WebGL pixels unchanged. A tainted (cross-origin texture) canvas still throws → skipped.
+ *
+ * v1 encodes on the main thread (`toDataURL`), bounded by the fps throttle + downscale. Moving the
+ * encode into the RPL-WORKER (OffscreenCanvas.convertToBlob) is a follow-up.
+ */
+const BLOCK_ATTR = 'data-scalebun-block';
+export class CanvasRecorder {
+    constructor(reg, onMutations, log = () => { }, opts = {}) {
+        this.reg = reg;
+        this.onMutations = onMutations;
+        this.log = log;
+        this.timer = null;
+        this.last = new Map(); // id → last encoded (skip unchanged)
+        this.tainted = new Set(); // ids already logged as un-capturable
+        this.scratch = null;
+        this.intervalMs = Math.max(50, Math.round(1000 / (opts.fps ?? 3)));
+        this.maxDim = opts.maxDim ?? 1024;
+        this.quality = opts.quality ?? 0.6;
+        this.getDocs = opts.getDocs;
+    }
+    start() {
+        if (typeof document === 'undefined')
+            return;
+        this.capture(); // initial paint so frame 0 has content
+        this.timer = setInterval(() => this.capture(), this.intervalMs);
+    }
+    disconnect() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        this.last.clear();
+        this.tainted.clear(); // allow re-attempt on restart (a tainted canvas may have been replaced)
+        this.scratch = null; // release the downscale buffer
+    }
+    capture() {
+        const docs = this.getDocs
+            ? this.getDocs()
+            : typeof document !== 'undefined'
+                ? [document]
+                : [];
+        const muts = [];
+        const live = new Set(); // ids seen this tick — anything else no longer exists
+        for (const d of docs) {
+            let canvases;
+            try {
+                canvases = d.querySelectorAll('canvas');
+            }
+            catch {
+                continue; // sub-document became inaccessible — skip it, keep scanning the rest
+            }
+            canvases.forEach((c) => {
+                const id = this.reg.getId(c);
+                if (id == null)
+                    return; // not in the captured subtree
+                live.add(id); // exists, even if we skip capturing it below
+                if (c.hasAttribute(BLOCK_ATTR))
+                    return; // privacy blocklist
+                const w = c.width;
+                const h = c.height;
+                if (!w || !h)
+                    return;
+                let data;
+                try {
+                    data = this.encode(c, w, h);
+                }
+                catch {
+                    if (!this.tainted.has(id)) {
+                        this.tainted.add(id);
+                        this.log('[scalebun] canvas not capturable (tainted / cross-origin)');
+                    }
+                    return;
+                }
+                if (this.last.get(id) === data)
+                    return; // unchanged since last tick
+                this.last.set(id, data);
+                muts.push({ op: 'canvas', id, data, w, h });
+            });
+        }
+        // Prune state for canvases that no longer exist. `last` holds an encoded webp DATA URL per canvas
+        // and was only cleared on stop(), so it grew for every canvas the session ever saw — the largest
+        // retained-bytes leak in the engine. Pruning is free: this tick already enumerated the live set.
+        if (this.last.size > live.size) {
+            for (const id of this.last.keys())
+                if (!live.has(id))
+                    this.last.delete(id);
+        }
+        if (this.tainted.size) {
+            for (const id of this.tainted)
+                if (!live.has(id))
+                    this.tainted.delete(id);
+        }
+        if (muts.length)
+            this.onMutations(muts);
+    }
+    /** Encode to a (possibly downscaled) webp data URL. `w/h` stay the ORIGINAL dims so the player
+     *  redraws at full size. Throws (SecurityError) on a tainted canvas → caller skips. */
+    encode(c, w, h) {
+        const scale = Math.min(1, this.maxDim / Math.max(w, h));
+        if (scale < 1) {
+            const sc = (this.scratch ?? (this.scratch = document.createElement('canvas')));
+            sc.width = Math.max(1, Math.round(w * scale));
+            sc.height = Math.max(1, Math.round(h * scale));
+            const ctx = sc.getContext('2d');
+            if (!ctx)
+                throw new Error('no 2d context');
+            ctx.clearRect(0, 0, sc.width, sc.height);
+            ctx.drawImage(c, 0, 0, sc.width, sc.height); // taints sc if c is tainted → toDataURL throws
+            return sc.toDataURL('image/webp', this.quality);
+        }
+        return c.toDataURL('image/webp', this.quality);
+    }
+}
+//# sourceMappingURL=canvas.js.map

package/dist/features/replay/engine/canvas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas.js","sourceRoot":"","sources":["../../../../src/features/replay/engine/canvas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAcH,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAEzC,MAAM,OAAO,cAAc;IAUzB,YACmB,GAAiB,EACjB,WAAoC,EACpC,MAAiC,GAAG,EAAE,GAAE,CAAC,EAC1D,OAAsB,EAAE;QAHP,QAAG,GAAH,GAAG,CAAc;QACjB,gBAAW,GAAX,WAAW,CAAyB;QACpC,QAAG,GAAH,GAAG,CAAsC;QAZpD,UAAK,GAA0C,IAAI,CAAC;QAC3C,SAAI,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,qCAAqC;QACvE,YAAO,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,sCAAsC;QAK5E,YAAO,GAA6B,IAAI,CAAC;QAQ/C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,KAAK;QACH,IAAI,OAAO,QAAQ,KAAK,WAAW;YAAE,OAAO;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,uCAAuC;QACvD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,wEAAwE;QAC9F,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,+BAA+B;IACtD,CAAC;IAEO,OAAO;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO;YACvB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE;YAChB,CAAC,CAAC,OAAO,QAAQ,KAAK,WAAW;gBAC/B,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACZ,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,IAAI,GAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,sDAAsD;QACtF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,QAAuC,CAAC;YAC5C,IAAI,CAAC;gBACH,QAAQ,GAAG,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,qEAAqE;YACjF,CAAC;YACD,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,IAAI,EAAE,IAAI,IAAI;oBAAE,OAAO,CAAC,8BAA8B;gBACtD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,6CAA6C;gBAC3D,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC;oBAAE,OAAO,CAAC,oBAAoB;gBAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;gBAClB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACnB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;oBAAE,OAAO;gBACrB,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACrB,IAAI,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;oBACxE,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;oBAAE,OAAO,CAAC,4BAA4B;gBACpE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,kGAAkG;QAClG,iGAAiG;QACjG,iGAAiG;QACjG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED;2FACuF;IAC/E,MAAM,CAAC,CAAoB,EAAE,CAAS,EAAE,CAAS;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAZ,IAAI,CAAC,OAAO,GAAK,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAC,CAAC;YAC/D,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;YAC9C,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YACzC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,+CAA+C;YAC5F,OAAO,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;CACF"}

package/dist/features/replay/engine/crossOrigin.d.ts

@@ -0,0 +1,23 @@
+import type { Mutation, SnapshotOptions } from './types';
+/**
+ * Run on the cross-origin CHILD page. Waits for a parent handshake from an allowed origin, then
+ * records this document (offset registry) and relays frames back. No-op when not framed. Returns a
+ * teardown. The child may still run its own SDK independently — this only adds the relay.
+ */
+export declare function installChildSatellite(allowedParentOrigins: string[], opts?: SnapshotOptions): () => void;
+export interface ParentBridgeDeps {
+    /** Disjoint node-id base for this child (e.g. iframeNodeId * 1_000_000). */
+    nodeIdBase: number;
+    /** Origins the child is allowed to be served from (validates inbound frames). */
+    allowedChildOrigins: string[];
+    /** Forward stitched ops onto the replay stream (same callback the same-origin path uses). */
+    emit: (mutations: Mutation[]) => void;
+}
+/**
+ * Bridge ONE cross-origin iframe: handshake the child, then forward its keyframe (as `op:'iframe'`
+ * referencing the iframe's node id) + its mutation deltas onto the replay stream. Returns teardown.
+ */
+export declare function bridgeCrossOriginFrame(iframe: HTMLIFrameElement, iframeNodeId: number, deps: ParentBridgeDeps): () => void;
+/** A disjoint id base for a child frame, keyed off the iframe's own node id. */
+export declare const nodeIdBaseFor: (iframeNodeId: number) => number;
+//# sourceMappingURL=crossOrigin.d.ts.map

package/dist/features/replay/engine/crossOrigin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crossOrigin.d.ts","sourceRoot":"","sources":["../../../../src/features/replay/engine/crossOrigin.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AASzD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,oBAAoB,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,eAAoB,GAAG,MAAM,IAAI,CA8B5G;AAGD,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,6FAA6F;IAC7F,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC;CACvC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,iBAAiB,EACzB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,gBAAgB,GACrB,MAAM,IAAI,CAsCZ;AAED,gFAAgF;AAChF,eAAO,MAAM,aAAa,GAAI,cAAc,MAAM,KAAG,MAAkC,CAAC"}

package/dist/features/replay/engine/crossOrigin.js

@@ -0,0 +1,108 @@
+/**
+ * F-IFR Phase 2 — cross-origin iframe replay stitching. The parent can't read a cross-origin iframe's
+ * DOM, so the CHILD SDK (running on the other origin) volunteers its capture: it serializes its own
+ * document with an OFFSET node registry (disjoint id range → no collision with the parent) and relays
+ * frames to the parent via postMessage. The parent re-emits them through the SAME path as same-origin
+ * frames — `op:'iframe'` for the keyframe + the child's mutation ops as deltas — so the existing player
+ * stitches the sub-tree into the iframe placeholder with no new player code.
+ *
+ * Security: strict origin allowlists BOTH ways; the handshake carries no secrets (just a node-id base).
+ * Zero third-party deps. Mask-by-default still applies inside the child.
+ */
+import { NodeRegistry } from './nodeRegistry';
+import { serializeNode, resolveSnapshotOpts } from './snapshot';
+import { MutationRecorder } from './mutations';
+const INIT = 'scalebun:frame-init'; // parent → child
+const KEY = 'scalebun:frame-key'; // child → parent (serialized sub-document)
+const MUT = 'scalebun:frame-mut'; // child → parent (mutation ops)
+const originAllowed = (origin, allow) => allow.includes('*') || allow.includes(origin);
+// ── Child side ───────────────────────────────────────────────────────────────
+/**
+ * Run on the cross-origin CHILD page. Waits for a parent handshake from an allowed origin, then
+ * records this document (offset registry) and relays frames back. No-op when not framed. Returns a
+ * teardown. The child may still run its own SDK independently — this only adds the relay.
+ */
+export function installChildSatellite(allowedParentOrigins, opts = {}) {
+    if (typeof window === 'undefined' || window.parent === window)
+        return () => { };
+    const o = resolveSnapshotOpts(opts);
+    let rec;
+    let started = false;
+    const onMsg = (e) => {
+        const d = e.data;
+        if (!d || d.scalebun !== INIT || started)
+            return;
+        if (!originAllowed(e.origin, allowedParentOrigins))
+            return;
+        started = true;
+        const reg = new NodeRegistry(typeof d.nodeIdBase === 'number' ? d.nodeIdBase : 1);
+        const post = (msg) => {
+            try {
+                e.source?.postMessage(msg, e.origin);
+            }
+            catch {
+                /* parent gone */
+            }
+        };
+        const doc = serializeNode(document, reg, o);
+        if (doc)
+            post({ scalebun: KEY, doc });
+        rec = new MutationRecorder(reg, (mutations) => post({ scalebun: MUT, mutations }), opts);
+        rec.observe(document.documentElement);
+    };
+    window.addEventListener('message', onMsg);
+    return () => {
+        window.removeEventListener('message', onMsg);
+        rec?.disconnect();
+    };
+}
+/**
+ * Bridge ONE cross-origin iframe: handshake the child, then forward its keyframe (as `op:'iframe'`
+ * referencing the iframe's node id) + its mutation deltas onto the replay stream. Returns teardown.
+ */
+export function bridgeCrossOriginFrame(iframe, iframeNodeId, deps) {
+    const win = iframe.contentWindow;
+    if (!win)
+        return () => { };
+    const onMsg = (e) => {
+        if (e.source !== win)
+            return; // only this child's window
+        if (!originAllowed(e.origin, deps.allowedChildOrigins))
+            return;
+        const d = e.data;
+        if (!d)
+            return;
+        if (d.scalebun === KEY && d.doc) {
+            deps.emit([{ op: 'iframe', id: iframeNodeId, doc: d.doc }]);
+        }
+        else if (d.scalebun === MUT && Array.isArray(d.mutations)) {
+            deps.emit(d.mutations);
+        }
+    };
+    window.addEventListener('message', onMsg);
+    // Target the child's specific origin (no secrets, but don't broadcast). Retry on (re)load.
+    let targetOrigin = '*';
+    try {
+        targetOrigin = new URL(iframe.src, location.href).origin;
+    }
+    catch {
+        /* keep '*' */
+    }
+    const send = () => {
+        try {
+            win.postMessage({ scalebun: INIT, nodeIdBase: deps.nodeIdBase }, targetOrigin);
+        }
+        catch {
+            /* child not ready */
+        }
+    };
+    send();
+    iframe.addEventListener('load', send);
+    return () => {
+        window.removeEventListener('message', onMsg);
+        iframe.removeEventListener('load', send);
+    };
+}
+/** A disjoint id base for a child frame, keyed off the iframe's own node id. */
+export const nodeIdBaseFor = (iframeNodeId) => iframeNodeId * 1000000;
+//# sourceMappingURL=crossOrigin.js.map