@scalebun/web 1.0.0

package/dist/features/replay/engine/player.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"player.js","sourceRoot":"","sources":["../../../../src/features/replay/engine/player.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,GAAG,4BAA4B,CAAC;AAE5C,MAAM,UAAU,mBAAmB,CAAC,CAAQ,EAAE,GAAiB,EAAE,GAAa;IAC5E,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,IAAI,GAAG,GAAG,CAAC,sBAAsB,EAAE,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE;oBAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChF,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACjB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1F,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAClB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,4CAA4C;gBAC9C,CAAC;YACH,CAAC;YACD,gFAAgF;YAChF,MAAM,IAAI,GAAS,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAE,EAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC3C,IAAI,CAAC;oBAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,iGAAiG;YACjG,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC/C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,2CAA2C;oBACvE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;wBAClC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;wBAC3C,IAAI,CAAC;4BAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;oBAC7B,CAAC;oBACD,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,IAAI,oBAAoB,IAAI,IAAI,EAAE,CAAC;wBACnE,IAAI,CAAC;4BACF,IAAmB,CAAC,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gCACzE,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;gCAClC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gCACzB,OAAO,KAAK,CAAC;4BACf,CAAC,CAAC,CAAC;wBACL,CAAC;wBAAC,MAAM,CAAC;4BACP,sEAAsE;wBACxE,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,0DAA0D;gBAC5D,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACjB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACjB,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,GAAiB,EAAE,GAAa;IAC/E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,IAAI,EAAE,UAAU;gBAAE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,IAAI;gBAAE,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM;gBAAE,GAAG,GAAG,IAAI,CAAC,CAAC,qBAAqB;YACvE,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAwB,CAAC;YACpD,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI;gBAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;gBAC1C,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAA8B,CAAC;YAC5D,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;QAChC,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;YAC5B,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC7B,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC7B,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC7B,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;YAC/B,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,0FAA0F;YAC1F,MAAM,MAAM,GAAU,CAAC,CAAC;YACxB,KAAK,MAAM,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;qGACqG;AACrG,SAAS,UAAU,CAAC,CAAqC,EAAE,GAAiB;IAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,MAAM,IAAI,GAAG,OAAO,EAAE,KAAK,IAAI,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,IAAI;gBAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;iBACtE,IAAI,OAAO;gBAAE,OAAO,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC/E,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,OAAO;gBAAE,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC;iBAClC,IAAI,IAAI,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM;oBAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAChD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBACvB,IAAI,CAAC;wBACH,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,qBAAqB;oBACvB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,CAAsC,EAAE,GAAiB;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAkC,CAAC;IAChE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpG,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE;YAChB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC,CAAC;QACF,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED;+FAC+F;AAC/F,SAAS,aAAa,CAAC,CAAwC,EAAE,GAAa;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC,iCAAiC,CAAC,CAAC,IAAI,IAAI,CAAC;YAAE,SAAS,CAAC,kBAAkB;QAClG,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,CAAC,YAAY,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACrD,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;qFACqF;AACrF,SAAS,WAAW,CAAC,CAAsC,EAAE,GAAiB,EAAE,GAAa;IAC3F,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAwB,CAAC;IACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO;IAC7D,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,mCAAmC;IAC7C,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC;YAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,IAAI,oBAAoB,IAAI,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACzD,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;gBAClC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzB,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;AACH,CAAC;AAED;wGACwG;AACxG,SAAS,WAAW,CAAC,CAAsC,EAAE,GAAiB;IAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAkC,CAAC;IAClE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO;IACnD,IAAI,IAAI,GAAoB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxG,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAmB,CAAC;QAClE,IAAI,EAAE,IAAI,IAAI,CAAC,eAAe;YAAE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC"}

package/dist/features/replay/engine/rebuild.d.ts

@@ -0,0 +1,8 @@
+/**
+ * rebuildNode — the inverse of takeSnapshot. Shared by the dashboard player AND the tests, so
+ * serialize↔rebuild are verified as one unit. Produces real DOM from an SNode tree. (The player
+ * runs this inside a sandboxed, script-free iframe — captured markup is never executed.)
+ */
+import type { SNode } from './types';
+export declare function rebuildNode(s: SNode, doc: Document): Node | null;
+//# sourceMappingURL=rebuild.d.ts.map

package/dist/features/replay/engine/rebuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rebuild.d.ts","sourceRoot":"","sources":["../../../../src/features/replay/engine/rebuild.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAIrC,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,IAAI,CAmChE"}

package/dist/features/replay/engine/rebuild.js

@@ -0,0 +1,46 @@
+/**
+ * rebuildNode — the inverse of takeSnapshot. Shared by the dashboard player AND the tests, so
+ * serialize↔rebuild are verified as one unit. Produces real DOM from an SNode tree. (The player
+ * runs this inside a sandboxed, script-free iframe — captured markup is never executed.)
+ */
+const SVG_NS = 'http://www.w3.org/2000/svg';
+export function rebuildNode(s, doc) {
+    switch (s.t) {
+        case 'doc': {
+            // A document's children (doctype/html) can't live under an element, so return a fragment.
+            const frag = doc.createDocumentFragment();
+            for (const c of s.children) {
+                const n = rebuildNode(c, doc);
+                if (n && n.nodeType !== 10)
+                    frag.appendChild(n); // skip doctype in a fragment context
+            }
+            return frag;
+        }
+        case 'dt':
+            return doc.implementation.createDocumentType(s.name, s.publicId, s.systemId);
+        case 'el': {
+            const el = s.ns === 'svg' ? doc.createElementNS(SVG_NS, s.tag) : doc.createElement(s.tag);
+            for (const [k, v] of Object.entries(s.attrs)) {
+                try {
+                    el.setAttribute(k, v);
+                }
+                catch {
+                    /* invalid attribute name in this context */
+                }
+            }
+            for (const c of s.children) {
+                const n = rebuildNode(c, doc);
+                if (n)
+                    el.appendChild(n);
+            }
+            return el;
+        }
+        case 'tx':
+            return doc.createTextNode(s.value);
+        case 'cm':
+            return doc.createComment(s.value);
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=rebuild.js.map

package/dist/features/replay/engine/rebuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rebuild.js","sourceRoot":"","sources":["../../../../src/features/replay/engine/rebuild.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,MAAM,GAAG,4BAA4B,CAAC;AAE5C,MAAM,UAAU,WAAW,CAAC,CAAQ,EAAE,GAAa;IACjD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,0FAA0F;YAC1F,MAAM,IAAI,GAAG,GAAG,CAAC,sBAAsB,EAAE,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE;oBAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,qCAAqC;YACxF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,IAAI;YACP,OAAO,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/E,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1F,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,4CAA4C;gBAC9C,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC9B,IAAI,CAAC;oBAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,IAAI;YACP,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,IAAI;YACP,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/features/replay/engine/replayWorker.d.ts

@@ -0,0 +1,33 @@
+/**
+ * ReplayEncoder — moves gzip compression of the (potentially large) keyframe snapshot OFF the main
+ * thread via an inline Blob Worker + Compression Streams. The snapshot is stringified on the main
+ * thread (cheap-ish, and structured-cloning the object would cost the same), then gzipped in the
+ * worker. Output is base64 with a `gz:` marker stored in the existing `snapshot` field (which is
+ * `z.unknown()` in the contract) — so NO contract change and the DOM-frame XOR refine still passes.
+ *
+ * Privacy: the snapshot is already masked at serialize time, so only masked data reaches the worker.
+ * Fallbacks (no Worker / no CompressionStream / CSP blocks blob: workers): main-thread gzip, then
+ * uncompressed — capture is never lost.
+ */
+export declare const GZ_PREFIX = "gz:";
+export declare class ReplayEncoder {
+    private worker;
+    private url;
+    private nextId;
+    private pending;
+    constructor();
+    private tryInitWorker;
+    private disableWorker;
+    /**
+     * Returns the snapshot field to put on the frame: a `gz:<base64>` string when compression worked,
+     * or the original object when no compression path is available (player handles both).
+     */
+    encodeSnapshot(snapshot: unknown): Promise<unknown>;
+    private viaWorker;
+    dispose(): void;
+}
+export declare function gzipBase64(text: string): Promise<string>;
+export declare function gunzipBase64(b64: string): Promise<string>;
+/** Symmetric decode (used by tests; the dashboard player has its own port). */
+export declare function decodeSnapshotValue(value: unknown): Promise<unknown>;
+//# sourceMappingURL=replayWorker.d.ts.map

package/dist/features/replay/engine/replayWorker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replayWorker.d.ts","sourceRoot":"","sources":["../../../../src/features/replay/engine/replayWorker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,SAAS,QAAQ,CAAC;AAoB/B,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,GAAG,CAAuB;IAClC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,OAAO,CAAqF;;IAMpG,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,aAAa;IAoBrB;;;OAGG;IACG,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBzD,OAAO,CAAC,SAAS;IAoBjB,OAAO,IAAI,IAAI;CAGhB;AAID,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO9D;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS/D;AAED,+EAA+E;AAC/E,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAK1E"}

package/dist/features/replay/engine/replayWorker.js

@@ -0,0 +1,175 @@
+/**
+ * ReplayEncoder — moves gzip compression of the (potentially large) keyframe snapshot OFF the main
+ * thread via an inline Blob Worker + Compression Streams. The snapshot is stringified on the main
+ * thread (cheap-ish, and structured-cloning the object would cost the same), then gzipped in the
+ * worker. Output is base64 with a `gz:` marker stored in the existing `snapshot` field (which is
+ * `z.unknown()` in the contract) — so NO contract change and the DOM-frame XOR refine still passes.
+ *
+ * Privacy: the snapshot is already masked at serialize time, so only masked data reaches the worker.
+ * Fallbacks (no Worker / no CompressionStream / CSP blocks blob: workers): main-thread gzip, then
+ * uncompressed — capture is never lost.
+ */
+export const GZ_PREFIX = 'gz:';
+const WORKER_SRC = `
+self.onmessage = async (e) => {
+  const { id, json } = e.data;
+  try {
+    const cs = new CompressionStream('gzip');
+    const w = cs.writable.getWriter();
+    w.write(new TextEncoder().encode(json)); w.close();
+    const ab = await new Response(cs.readable).arrayBuffer();
+    const bytes = new Uint8Array(ab);
+    let bin = ''; const CH = 0x8000;
+    for (let i = 0; i < bytes.length; i += CH) bin += String.fromCharCode.apply(null, bytes.subarray(i, i + CH));
+    self.postMessage({ id, out: btoa(bin) });
+  } catch (err) {
+    self.postMessage({ id, err: String(err) });
+  }
+};
+`;
+export class ReplayEncoder {
+    constructor() {
+        this.worker = null;
+        this.url = null;
+        this.nextId = 1;
+        this.pending = new Map();
+        this.tryInitWorker();
+    }
+    tryInitWorker() {
+        if (typeof Worker === 'undefined' || typeof Blob === 'undefined' || typeof URL === 'undefined')
+            return;
+        if (typeof CompressionStream === 'undefined')
+            return; // no point spinning a worker that can't compress
+        try {
+            const blob = new Blob([WORKER_SRC], { type: 'application/javascript' });
+            this.url = URL.createObjectURL(blob);
+            this.worker = new Worker(this.url);
+            this.worker.onmessage = (e) => {
+                const { id, out, err } = e.data;
+                const p = this.pending.get(id);
+                if (!p)
+                    return;
+                this.pending.delete(id);
+                if (err != null)
+                    p.reject(new Error(err));
+                else
+                    p.resolve(out);
+            };
+            this.worker.onerror = () => this.disableWorker(); // CSP / runtime failure → fall back
+        }
+        catch {
+            this.disableWorker(); // e.g. CSP worker-src blocks blob:
+        }
+    }
+    disableWorker() {
+        try {
+            this.worker?.terminate();
+        }
+        catch {
+            /* ignore */
+        }
+        this.worker = null;
+        if (this.url) {
+            try {
+                URL.revokeObjectURL(this.url);
+            }
+            catch {
+                /* ignore */
+            }
+            this.url = null;
+        }
+        // reject in-flight so callers fall back rather than hang
+        for (const p of this.pending.values())
+            p.reject(new Error('worker disabled'));
+        this.pending.clear();
+    }
+    /**
+     * Returns the snapshot field to put on the frame: a `gz:<base64>` string when compression worked,
+     * or the original object when no compression path is available (player handles both).
+     */
+    async encodeSnapshot(snapshot) {
+        let json;
+        try {
+            json = JSON.stringify(snapshot);
+        }
+        catch {
+            return snapshot; // unserializable — shouldn't happen for SNode, but never throw
+        }
+        if (this.worker) {
+            try {
+                return GZ_PREFIX + (await this.viaWorker(json));
+            }
+            catch {
+                this.disableWorker(); // worker died → main-thread fallback below
+            }
+        }
+        if (typeof CompressionStream !== 'undefined') {
+            try {
+                return GZ_PREFIX + (await gzipBase64(json));
+            }
+            catch {
+                /* fall through to uncompressed */
+            }
+        }
+        return snapshot; // uncompressed
+    }
+    viaWorker(json) {
+        return new Promise((resolve, reject) => {
+            const id = this.nextId++;
+            const t = setTimeout(() => {
+                if (this.pending.delete(id))
+                    reject(new Error('worker timeout'));
+            }, 5000);
+            this.pending.set(id, {
+                resolve: (s) => {
+                    clearTimeout(t);
+                    resolve(s);
+                },
+                reject: (e) => {
+                    clearTimeout(t);
+                    reject(e);
+                },
+            });
+            this.worker.postMessage({ id, json });
+        });
+    }
+    dispose() {
+        this.disableWorker();
+    }
+}
+// ── pure gzip/gunzip-base64 (also runs in the worker; exported for tests + the player port) ──
+export async function gzipBase64(text) {
+    const cs = new CompressionStream('gzip');
+    const w = cs.writable.getWriter();
+    void w.write(new TextEncoder().encode(text));
+    void w.close();
+    const ab = await new Response(cs.readable).arrayBuffer();
+    return bytesToBase64(new Uint8Array(ab));
+}
+export async function gunzipBase64(b64) {
+    const bin = atob(b64);
+    const bytes = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        bytes[i] = bin.charCodeAt(i);
+    const ds = new DecompressionStream('gzip');
+    const w = ds.writable.getWriter();
+    void w.write(bytes);
+    void w.close();
+    return await new Response(ds.readable).text();
+}
+/** Symmetric decode (used by tests; the dashboard player has its own port). */
+export async function decodeSnapshotValue(value) {
+    if (typeof value === 'string' && value.startsWith(GZ_PREFIX)) {
+        return JSON.parse(await gunzipBase64(value.slice(GZ_PREFIX.length)));
+    }
+    return value;
+}
+function bytesToBase64(bytes) {
+    let bin = '';
+    const CH = 0x8000;
+    for (let i = 0; i < bytes.length; i += CH) {
+        bin += String.fromCharCode.apply(null, Array.from(bytes.subarray(i, i + CH)));
+    }
+    return btoa(bin);
+}
+//# sourceMappingURL=replayWorker.js.map

package/dist/features/replay/engine/replayWorker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replayWorker.js","sourceRoot":"","sources":["../../../../src/features/replay/engine/replayWorker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC;AAE/B,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;CAgBlB,CAAC;AAEF,MAAM,OAAO,aAAa;IAMxB;QALQ,WAAM,GAAkB,IAAI,CAAC;QAC7B,QAAG,GAAkB,IAAI,CAAC;QAC1B,WAAM,GAAG,CAAC,CAAC;QACX,YAAO,GAAG,IAAI,GAAG,EAA0E,CAAC;QAGlG,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAEO,aAAa;QACnB,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,OAAO,GAAG,KAAK,WAAW;YAAE,OAAO;QACvG,IAAI,OAAO,iBAAiB,KAAK,WAAW;YAAE,OAAO,CAAC,iDAAiD;QACvG,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE;gBAC1C,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAkD,CAAC;gBAC9E,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC/B,IAAI,CAAC,CAAC;oBAAE,OAAO;gBACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,IAAI,GAAG,IAAI,IAAI;oBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;;oBACrC,CAAC,CAAC,OAAO,CAAC,GAAI,CAAC,CAAC;YACvB,CAAC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,oCAAoC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,mCAAmC;QAC3D,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,yDAAyD;QACzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,QAAiB;QACpC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,CAAC,+DAA+D;QAClF,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,OAAO,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,2CAA2C;YACnE,CAAC;QACH,CAAC;QACD,IAAI,OAAO,iBAAiB,KAAK,WAAW,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,OAAO,SAAS,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,CAAC,eAAe;IAClC,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACnE,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;oBACb,YAAY,CAAC,CAAC,CAAC,CAAC;oBAChB,OAAO,CAAC,CAAC,CAAC,CAAC;gBACb,CAAC;gBACD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;oBACZ,YAAY,CAAC,CAAC,CAAC,CAAC;oBAChB,MAAM,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAO,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;CACF;AAED,gGAAgG;AAEhG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,EAAE,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IAClC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,EAAE,GAAG,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,OAAO,aAAa,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IAClC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpB,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACf,OAAO,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAc;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,EAAE,GAAG,MAAM,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC"}

package/dist/features/replay/engine/resources.d.ts

@@ -0,0 +1,52 @@
+/**
+ * resources.ts — best-in-class font fidelity for replay. Cross-origin `@font-face` fonts REQUIRE CORS
+ * to load via the page's CSS; in a replay rendered from a different origin (and a sandboxed player)
+ * those fonts silently fall back → wrong metrics/layout. We fetch the font bytes once, inline them as
+ * a `data:` URL, and re-declare the `@font-face` with that data src. Innovations vs rrweb (unbounded
+ * inline): a per-session **byte budget** (fidelity without payload blowup) and a **content-hash cache**
+ * (each font emitted once, deduped across keyframes/navigations). Zero-dep (fetch + btoa only).
+ *
+ * Async + emitted as a `resource` delta (after the keyframe), so the keyframe stays cheap. The capture
+ * orchestrator calls `collectFontFaces(...)` with the document's CSS and emits the returned items.
+ */
+import type { SResource } from './types';
+/** fnv1a-32 hex — a stable, zero-dep content hash for dedupe/reference. */
+export declare function contentHash(s: string): string;
+/** Pull out each `@font-face { ... }` block from a CSS string. */
+export declare function extractFontFaceBlocks(css: string): string[];
+/** All `url(...)` refs inside a CSS fragment. */
+export declare function extractUrls(css: string): string[];
+/** Replace `url(x)` with `url(map[x])` for any x present in the map (leaves others untouched). */
+export declare function rewriteUrls(css: string, map: Map<string, string>): string;
+/** ArrayBuffer → base64, chunked (avoids stack overflow on large fonts). btoa is a browser API. */
+export declare function arrayBufferToBase64(buf: ArrayBuffer): string;
+export interface ResourceCollectorOpts {
+    /** Total inlined font bytes allowed per session (default 512 KB). Over-budget fonts are skipped
+     *  (M5 already absolutized their URL as a fallback). */
+    budgetBytes?: number;
+    /** Injectable fetch (tests / custom transport). Defaults to global `fetch`. */
+    fetchImpl?: (url: string) => Promise<{
+        ok: boolean;
+        arrayBuffer(): Promise<ArrayBuffer>;
+    }>;
+    /** Base URL for resolving relative font refs (the capture document's baseURI). */
+    baseUrl?: string;
+}
+/**
+ * Stateful across a session: dedupes font URLs (each fetched + emitted once) and enforces the byte
+ * budget. Reuse one instance per replay session.
+ */
+export declare class ResourceCollector {
+    private readonly opts;
+    private readonly seen;
+    private bytes;
+    constructor(opts?: ResourceCollectorOpts);
+    /** Bytes inlined so far (diagnostics). */
+    get inlinedBytes(): number;
+    /**
+     * Given CSS texts (e.g. each stylesheet's serialized rules), find @font-face fonts, fetch + inline
+     * the new ones (budgeted, deduped), and return a `SResource` per face whose URLs were inlined.
+     */
+    collectFontFaces(cssTexts: string[]): Promise<SResource[]>;
+}
+//# sourceMappingURL=resources.d.ts.map

package/dist/features/replay/engine/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/features/replay/engine/resources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAMzC,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAO7C;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3D;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CASjD;AAED,kGAAkG;AAClG,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAKzE;AAYD,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CAa5D;AAED,MAAM,WAAW,qBAAqB;IACpC;4DACwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;KAAE,CAAC,CAAC;IAC3F,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAGhB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,KAAK,CAAK;gBACW,IAAI,GAAE,qBAA0B;IAE7D,0CAA0C;IAC1C,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;OAGG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;CAkCjE"}

package/dist/features/replay/engine/resources.js

@@ -0,0 +1,132 @@
+/**
+ * resources.ts — best-in-class font fidelity for replay. Cross-origin `@font-face` fonts REQUIRE CORS
+ * to load via the page's CSS; in a replay rendered from a different origin (and a sandboxed player)
+ * those fonts silently fall back → wrong metrics/layout. We fetch the font bytes once, inline them as
+ * a `data:` URL, and re-declare the `@font-face` with that data src. Innovations vs rrweb (unbounded
+ * inline): a per-session **byte budget** (fidelity without payload blowup) and a **content-hash cache**
+ * (each font emitted once, deduped across keyframes/navigations). Zero-dep (fetch + btoa only).
+ *
+ * Async + emitted as a `resource` delta (after the keyframe), so the keyframe stays cheap. The capture
+ * orchestrator calls `collectFontFaces(...)` with the document's CSS and emits the returned items.
+ */
+import { absUrl } from './snapshot';
+const DEFAULT_BUDGET_BYTES = 512 * 1024; // cap inlined font bytes per session
+const SKIP_SRC = /^(?:data:|blob:)/i;
+/** fnv1a-32 hex — a stable, zero-dep content hash for dedupe/reference. */
+export function contentHash(s) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < s.length; i++) {
+        h ^= s.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return (h >>> 0).toString(16);
+}
+/** Pull out each `@font-face { ... }` block from a CSS string. */
+export function extractFontFaceBlocks(css) {
+    return css.match(/@font-face\s*\{[^}]*\}/gi) ?? [];
+}
+/** All `url(...)` refs inside a CSS fragment. */
+export function extractUrls(css) {
+    const out = [];
+    const re = /url\(\s*(['"]?)([^'")]+)\1\s*\)/gi;
+    let m;
+    while ((m = re.exec(css))) {
+        const ref = m[2];
+        if (ref)
+            out.push(ref.trim());
+    }
+    return out;
+}
+/** Replace `url(x)` with `url(map[x])` for any x present in the map (leaves others untouched). */
+export function rewriteUrls(css, map) {
+    return css.replace(/url\(\s*(['"]?)([^'")]+)\1\s*\)/gi, (whole, q, ref) => {
+        const data = map.get(ref.trim());
+        return data ? `url(${q}${data}${q})` : whole;
+    });
+}
+function guessFontMime(url) {
+    const u = url.toLowerCase();
+    if (u.includes('.woff2'))
+        return 'font/woff2';
+    if (u.includes('.woff'))
+        return 'font/woff';
+    if (u.includes('.ttf'))
+        return 'font/ttf';
+    if (u.includes('.otf'))
+        return 'font/otf';
+    if (u.includes('.eot'))
+        return 'application/vnd.ms-fontobject';
+    return 'application/octet-stream';
+}
+/** ArrayBuffer → base64, chunked (avoids stack overflow on large fonts). btoa is a browser API. */
+export function arrayBufferToBase64(buf) {
+    const bytes = new Uint8Array(buf);
+    let bin = '';
+    const CHUNK = 0x8000;
+    for (let i = 0; i < bytes.length; i += CHUNK) {
+        bin += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+    }
+    if (typeof btoa === 'function')
+        return btoa(bin);
+    // node test fallback (never hit in the browser)
+    return globalThis.Buffer.from(bin, 'binary').toString('base64');
+}
+/**
+ * Stateful across a session: dedupes font URLs (each fetched + emitted once) and enforces the byte
+ * budget. Reuse one instance per replay session.
+ */
+export class ResourceCollector {
+    constructor(opts = {}) {
+        this.opts = opts;
+        this.seen = new Set(); // absolute font URLs already inlined
+        this.bytes = 0;
+    }
+    /** Bytes inlined so far (diagnostics). */
+    get inlinedBytes() {
+        return this.bytes;
+    }
+    /**
+     * Given CSS texts (e.g. each stylesheet's serialized rules), find @font-face fonts, fetch + inline
+     * the new ones (budgeted, deduped), and return a `SResource` per face whose URLs were inlined.
+     */
+    async collectFontFaces(cssTexts) {
+        const fetchImpl = this.opts.fetchImpl ?? (typeof fetch === 'function' ? fetch : undefined);
+        if (!fetchImpl)
+            return [];
+        const budget = this.opts.budgetBytes ?? DEFAULT_BUDGET_BYTES;
+        const base = this.opts.baseUrl ?? '';
+        const out = [];
+        for (const css of cssTexts) {
+            for (const face of extractFontFaceBlocks(css)) {
+                const map = new Map();
+                for (const ref of extractUrls(face)) {
+                    if (SKIP_SRC.test(ref))
+                        continue; // already inline
+                    const url = base ? absUrl(ref, base) : ref;
+                    if (this.seen.has(url) || this.bytes >= budget)
+                        continue;
+                    try {
+                        const res = await fetchImpl(url);
+                        if (!res.ok)
+                            continue;
+                        const buf = await res.arrayBuffer();
+                        if (this.bytes + buf.byteLength > budget)
+                            continue; // would exceed budget → leave as URL
+                        this.bytes += buf.byteLength;
+                        this.seen.add(url);
+                        map.set(ref, `data:${guessFontMime(url)};base64,${arrayBufferToBase64(buf)}`);
+                    }
+                    catch {
+                        /* unreachable / CORS-blocked — skip; the absolutized URL (M5) remains the fallback */
+                    }
+                }
+                if (map.size) {
+                    const rewritten = rewriteUrls(face, map);
+                    out.push({ hash: contentHash(rewritten), kind: 'font', css: rewritten });
+                }
+            }
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=resources.js.map

package/dist/features/replay/engine/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../../src/features/replay/engine/resources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,qCAAqC;AAC9E,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,EAAE,GAAG,mCAAmC,CAAC;IAC/C,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,GAAwB;IAC/D,OAAO,GAAG,CAAC,OAAO,CAAC,mCAAmC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,GAAW,EAAE,EAAE;QACxF,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9C,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC5C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAC/D,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IAClD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,KAAK,GAAG,MAAM,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7C,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,gDAAgD;IAChD,OAAQ,UAA2F,CAAC,MAAO,CAAC,IAAI,CAC9G,GAAG,EACH,QAAQ,CACT,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvB,CAAC;AAYD;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAG5B,YAA6B,OAA8B,EAAE;QAAhC,SAAI,GAAJ,IAAI,CAA4B;QAF5C,SAAI,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,qCAAqC;QACxE,UAAK,GAAG,CAAC,CAAC;IAC8C,CAAC;IAEjE,0CAA0C;IAC1C,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAAkB;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAA4C,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnI,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,MAAM,GAAG,GAAgB,EAAE,CAAC;QAE5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;gBACtC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,SAAS,CAAC,iBAAiB;oBACnD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC3C,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,MAAM;wBAAE,SAAS;oBACzD,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;wBACjC,IAAI,CAAC,GAAG,CAAC,EAAE;4BAAE,SAAS;wBACtB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;wBACpC,IAAI,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,UAAU,GAAG,MAAM;4BAAE,SAAS,CAAC,qCAAqC;wBACzF,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC;wBAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,aAAa,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChF,CAAC;oBAAC,MAAM,CAAC;wBACP,sFAAsF;oBACxF,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACb,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACzC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/features/replay/engine/snapshot.d.ts

@@ -0,0 +1,103 @@
+/**
+ * takeSnapshot — serialize a DOM subtree (or whole document) into our compact SNode tree.
+ * Privacy-by-default: all text + input values masked at serialize time, so raw PII never leaves
+ * this function. CSSOM-first: <style> captures live cssRules (CSS-in-JS) and the document captures
+ * adoptedStyleSheets — the things rrweb drops from the initial snapshot.
+ */
+import type { SNode, SShadow, SnapshotOptions } from './types';
+import { NodeRegistry } from './nodeRegistry';
+export declare const NO_MASK_TEXT_PARENTS: Set<string>;
+export declare const SENSITIVE_ATTRS: Set<string>;
+export interface ResolvedSnapshotOpts {
+    maskAllText: boolean;
+    maskAllInputs: boolean;
+    /** Combined always-mask selector (contenteditable + [data-scalebun-mask] + host maskSelectors),
+     *  pre-validated. '' only if there is somehow no valid selector. */
+    maskSel: string;
+    /**
+     * Mutable per-snapshot budget for inlined <link> CSS. Carried on the options
+     * object rather than a extra parameter so it threads through the recursive
+     * serializer — and through `serializeNode` calls from the mutation observer —
+     * without changing any signature.
+     */
+    cssBudget: {
+        used: number;
+    };
+}
+/** True when `el` (or an ancestor) matches the mask selector — used to mask a subtree even when
+ *  maskAllText is off. Guarded: a malformed selector or detached node never throws. */
+export declare function isMaskedSubtree(el: Element | null, sel: string): boolean;
+export declare function resolveSnapshotOpts(opts?: SnapshotOptions): ResolvedSnapshotOpts;
+export declare function takeSnapshot(root: Node, reg: NodeRegistry, opts?: SnapshotOptions): SNode;
+export declare function serializeNode(node: Node, reg: NodeRegistry, o: ResolvedSnapshotOpts): SNode | null;
+/**
+ * Total inlined <link> CSS allowed per snapshot.
+ *
+ * Replay payloads are gzipped, but stylesheet text is the single biggest lever
+ * on snapshot size — a Tailwind/Bootstrap build can be hundreds of KB before
+ * compression. Past the cap we stop inlining and mark the remaining sheets
+ * unresolved rather than silently bloating every session.
+ */
+export declare const MAX_INLINED_CSS_BYTES: number;
+/**
+ * Marks a <link rel=stylesheet> whose rules we could not read (cross-origin
+ * without CORS, or over the size cap). The dashboard reads this to tell the
+ * operator WHY a reconstruction looks unstyled instead of presenting a broken
+ * page as if it were the real one.
+ */
+export declare const UNRESOLVED_SHEET_ATTR = "data-scalebun-sheet-unresolved";
+/**
+ * A password field. Its CHARACTERS are never captured on any lane (keyframe, mutation, input event),
+ * whatever `maskAllInputs` says — the value is replaced with same-length asterisks via `maskSecret`.
+ *
+ * It used to be blanked to '' outright. That read as an untouched field on replay: an empty value lets
+ * the page's own placeholder show through, so a login where the user typed (or the browser autofilled)
+ * a password was indistinguishable from one where they never reached the field. Length-only masking
+ * keeps that distinction while still shipping nothing about the content.
+ *
+ * Shared rather than re-tested inline per lane, because the lanes had drifted. The keyframe and
+ * input-event lanes handled passwords unconditionally, but the mutation lane only masked `value` when
+ * `maskAllInputs` was on — so with masking off, `el.setAttribute('value', …)` on a password input
+ * shipped the credential in plaintext. That is reachable from ordinary code: a React `defaultValue`
+ * re-render, a server-rendered form re-hydrating, or an extension/password-manager shim that writes
+ * the attribute rather than the property.
+ *
+ * Note the property/attribute split is why that was invisible: typing and browser autofill mutate the
+ * `value` PROPERTY, which MutationObserver cannot see, so the common paths never reached the buggy
+ * branch and the leak only opened for code that writes the attribute explicitly.
+ */
+export declare function isPasswordField(el: Element): boolean;
+/** Serialize an OPEN shadow root — its subtree (masked via the same opts) + its own adopted sheets. */
+export declare function serializeShadow(root: ShadowRoot, reg: NodeRegistry, o: ResolvedSnapshotOpts): SShadow;
+/** Mask visible chars, preserve length + whitespace. Non-reversible. */
+export declare function maskText(s: string): string;
+/**
+ * Mask a credential: EVERY character becomes '*', length preserved, nothing else.
+ *
+ * Deliberately stricter than `maskText`, which preserves whitespace so masked prose still reads as
+ * prose. On a password that would leak real structure — a passphrase would show its word boundaries
+ * and word lengths. Here only the total length survives.
+ *
+ * Length is survivable-by-design: it is what makes the replayed field render as dots instead of
+ * falling back to the page's placeholder, which is the difference between "the user typed a password"
+ * and "the field looks untouched". The characters never leave the page.
+ */
+export declare function maskSecret(s: string): string;
+/** Resolve a possibly-relative resource ref against `base`; leave absolute/data/blob/fragment refs. */
+export declare function absUrl(ref: string, base: string): string;
+/** Rewrite relative `url(...)` + `@import "…"` refs in CSS to absolute, so a replay rendered from a
+ *  DIFFERENT origin still resolves background images, web fonts, and imported sheets. */
+export declare function absolutizeCssUrls(css: string, base: string): string;
+/**
+ * Absolutize one URL-bearing attribute value against `base`. Resource refs (images, media, posters,
+ * inline background-image url(...), web fonts, SVG <use>/<image>) → absolute; navigation refs
+ * (<a>/<base> href) are left untouched. Shared by the initial snapshot and the mutation delta path so
+ * assets added AFTER load resolve identically. `absUrl`/`absolutizeCssUrls` already skip
+ * absolute/data/blob/fragment refs, so this is safe to call unconditionally.
+ */
+export declare function absolutizeAttrValue(name: string, value: string, tag: string, base: string): string;
+/** Absolutize every candidate URL in a srcset ("url 1x, url 2x" / "url 100w, …"). Left untouched when
+ *  it contains a data: URI — embedded commas would break naive splitting, and data URIs are already
+ *  self-contained. */
+export declare function absolutizeSrcset(srcset: string, base: string): string;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/features/replay/engine/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../../../src/features/replay/engine/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAuB,OAAO,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,eAAO,MAAM,oBAAoB,aAA+B,CAAC;AAGjE,eAAO,MAAM,eAAe,aAA4E,CAAC;AAIzG,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB;wEACoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7B;AAmBD;uFACuF;AACvF,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAOxE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,eAAoB,GAAG,oBAAoB,CAOpF;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,GAAE,eAAoB,GAAG,KAAK,CAE7F;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,EAAE,oBAAoB,GAAG,KAAK,GAAG,IAAI,CAsDlG;AAWD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,QAAkB,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,mCAAmC,CAAC;AA8FtE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAIpD;AAgCD,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAOrG;AAuBD,wEAAwE;AACxE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5C;AAMD,uGAAuG;AACvG,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQxD;AAED;yFACyF;AACzF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQnE;AAKD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAmBlG;AAED;;sBAEsB;AACtB,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAWrE"}