@spotify-confidence/csr-common 0.0.0 → 0.17.2

package/dist/index.js

@@ -0,0 +1,104 @@
+//#region src/events.ts
+/**
+* Mirrors rrweb's serialized-node types but decoupled — we own the enum.
+*/
+let SerializedNodeType = /* @__PURE__ */ function(SerializedNodeType) {
+	SerializedNodeType[SerializedNodeType["Document"] = 0] = "Document";
+	SerializedNodeType[SerializedNodeType["DocumentType"] = 1] = "DocumentType";
+	SerializedNodeType[SerializedNodeType["Element"] = 2] = "Element";
+	SerializedNodeType[SerializedNodeType["Text"] = 3] = "Text";
+	SerializedNodeType[SerializedNodeType["CDATA"] = 4] = "CDATA";
+	SerializedNodeType[SerializedNodeType["Comment"] = 5] = "Comment";
+	return SerializedNodeType;
+}({});
+/**
+* Mirrors rrweb event types but decoupled — we own the enum.
+*/
+let RecordingEventType = /* @__PURE__ */ function(RecordingEventType) {
+	RecordingEventType[RecordingEventType["DomContentLoaded"] = 0] = "DomContentLoaded";
+	RecordingEventType[RecordingEventType["Load"] = 1] = "Load";
+	RecordingEventType[RecordingEventType["FullSnapshot"] = 2] = "FullSnapshot";
+	RecordingEventType[RecordingEventType["IncrementalSnapshot"] = 3] = "IncrementalSnapshot";
+	RecordingEventType[RecordingEventType["Meta"] = 4] = "Meta";
+	RecordingEventType[RecordingEventType["Custom"] = 5] = "Custom";
+	RecordingEventType[RecordingEventType["Plugin"] = 6] = "Plugin";
+	return RecordingEventType;
+}({});
+/**
+* Incremental snapshot sub-types.
+*/
+let IncrementalSource = /* @__PURE__ */ function(IncrementalSource) {
+	IncrementalSource[IncrementalSource["Mutation"] = 0] = "Mutation";
+	IncrementalSource[IncrementalSource["MouseMove"] = 1] = "MouseMove";
+	IncrementalSource[IncrementalSource["MouseInteraction"] = 2] = "MouseInteraction";
+	IncrementalSource[IncrementalSource["Scroll"] = 3] = "Scroll";
+	IncrementalSource[IncrementalSource["ViewportResize"] = 4] = "ViewportResize";
+	IncrementalSource[IncrementalSource["Input"] = 5] = "Input";
+	IncrementalSource[IncrementalSource["TouchMove"] = 6] = "TouchMove";
+	IncrementalSource[IncrementalSource["MediaInteraction"] = 7] = "MediaInteraction";
+	IncrementalSource[IncrementalSource["StyleSheetRule"] = 8] = "StyleSheetRule";
+	IncrementalSource[IncrementalSource["CanvasMutation"] = 9] = "CanvasMutation";
+	IncrementalSource[IncrementalSource["Font"] = 10] = "Font";
+	IncrementalSource[IncrementalSource["Log"] = 11] = "Log";
+	IncrementalSource[IncrementalSource["Drag"] = 12] = "Drag";
+	IncrementalSource[IncrementalSource["StyleDeclaration"] = 13] = "StyleDeclaration";
+	IncrementalSource[IncrementalSource["Selection"] = 14] = "Selection";
+	IncrementalSource[IncrementalSource["AdoptedStyleSheet"] = 15] = "AdoptedStyleSheet";
+	return IncrementalSource;
+}({});
+/**
+* From rrweb MouseInteractions.
+*/
+let MouseInteractions = /* @__PURE__ */ function(MouseInteractions) {
+	MouseInteractions[MouseInteractions["MouseUp"] = 0] = "MouseUp";
+	MouseInteractions[MouseInteractions["MouseDown"] = 1] = "MouseDown";
+	MouseInteractions[MouseInteractions["Click"] = 2] = "Click";
+	MouseInteractions[MouseInteractions["ContextMenu"] = 3] = "ContextMenu";
+	MouseInteractions[MouseInteractions["DblClick"] = 4] = "DblClick";
+	MouseInteractions[MouseInteractions["Focus"] = 5] = "Focus";
+	MouseInteractions[MouseInteractions["Blur"] = 6] = "Blur";
+	MouseInteractions[MouseInteractions["TouchStart"] = 7] = "TouchStart";
+	MouseInteractions[MouseInteractions["TouchMove_Departed"] = 8] = "TouchMove_Departed";
+	MouseInteractions[MouseInteractions["TouchEnd"] = 9] = "TouchEnd";
+	MouseInteractions[MouseInteractions["TouchCancel"] = 10] = "TouchCancel";
+	return MouseInteractions;
+}({});
+//#endregion
+//#region src/url.ts
+/**
+* Extract only the pathname from a URL, stripping origin, query string, and
+* hash. Used across recorder and analyzer to avoid capturing PII in route data.
+*/
+function stripUrl(url) {
+	try {
+		return new URL(url).pathname;
+	} catch (_e) {
+		return url;
+	}
+}
+//#endregion
+//#region src/custom-event-limits.ts
+const MAX_KEY_LENGTH = 128;
+const MAX_TAG_VALUE_LENGTH = 256;
+const MAX_DISTINCT_KEYS = 100;
+const MAX_VALUES_PER_KEY = 1e3;
+const VALID_KEY_PATTERN = /^[a-zA-Z0-9_.-]+$/;
+function validateKey(key) {
+	if (typeof key !== "string" || key.length === 0) return "key is empty";
+	if (key.length > 128) return `key exceeds 128 characters`;
+	if (!VALID_KEY_PATTERN.test(key)) return "key contains invalid characters (allowed: a-z A-Z 0-9 _ . -)";
+	return null;
+}
+function validateTagValue(value) {
+	if (value === void 0) return null;
+	if (typeof value !== "string") return "tag value is not a string";
+	if (value.length > 256) return `tag value exceeds 256 characters`;
+	return null;
+}
+function validateMeasureValue(value) {
+	if (value === void 0) return null;
+	if (typeof value !== "number" || !Number.isFinite(value)) return "measure value must be a finite number";
+	return null;
+}
+//#endregion
+export { IncrementalSource, MAX_DISTINCT_KEYS, MAX_KEY_LENGTH, MAX_TAG_VALUE_LENGTH, MAX_VALUES_PER_KEY, MouseInteractions, RecordingEventType, SerializedNodeType, stripUrl, validateKey, validateMeasureValue, validateTagValue };

package/dist/types-BFkUa8kB.d.cts

@@ -0,0 +1,111 @@
+//#region src/uploader/client-context.d.ts
+/**
+* JSON-shaped values accepted in a Context — matches `google.protobuf.Struct`.
+*/
+type ContextValue = string | number | boolean | null | ContextValue[] | {
+  [key: string]: ContextValue;
+};
+/**
+* Browser-environment metadata captured at session init. Sent verbatim in the
+* `context` field of the InitSession request.
+*/
+type UserAgentContext = {
+  userAgent?: string; /** Coarse OS family — `windows`, `macos`, `ios`, `android`, `linux`, or `unknown`. */
+  os?: string; /** Coarse browser family — `chrome`, `firefox`, `safari`, `edge`, or `unknown`. */
+  browser?: string; /** Browser major version. */
+  browserVersion?: string;
+  mobile?: boolean; /** BCP-47 language tag (e.g. `en-US`). */
+  languageCode?: string; /** IANA time zone (e.g. `Europe/Stockholm`). */
+  timeZone?: string; /** Viewport in CSS pixels. */
+  viewportWidth?: number;
+  viewportHeight?: number; /** Physical screen in CSS pixels. */
+  screenWidth?: number;
+  screenHeight?: number;
+  devicePixelRatio?: number; /** Initial document URI — without query/hash to avoid leaking PII. */
+  uri?: string;
+  referrer?: string;
+};
+interface ClientContext {
+  userAgent?: UserAgentContext;
+  [key: string]: ContextValue | undefined;
+}
+declare function collectUserAgentContext(): UserAgentContext | undefined;
+//#endregion
+//#region src/uploader/types.d.ts
+interface Uploader {
+  (event: unknown): void;
+  close(): void;
+}
+interface CreateUploaderOptions {
+  /** Base URL of the recording backend (serves `/v1/sessions:initSession` and, by default, the WS ingest endpoint). */
+  apiUrl: string;
+  /**
+  * URL of the WebSocket ingest endpoint, including the path (e.g.
+  * `wss://recording-ws.confidence.dev/sessions/stream`) but **without** any query —
+  * the worker appends `?session_token=…`. Optional: when omitted the worker derives
+  * one from `apiUrl` by swapping `http(s)://` → `ws(s)://` and appending
+  * `/sessions/stream`. Set this when the init endpoint and the WS ingest live on
+  * different hosts (e.g. prod).
+  */
+  websocketUrl?: string;
+  /** Per-tenant secret. Hashed to scope the SharedWorker so different secrets never share a session, and sent in the `initSession` request body. */
+  clientSecret: string;
+  /** End-user identifier (visitor / device ID). Forwarded in the `initSession` body for sampling and eligibility. */
+  targetingKey?: string;
+  /**
+  * Session context sent in the InitSession request. The SDK auto-populates
+  * `userAgent` with browser/OS/screen metadata. Pass any extra keys as
+  * custom dimensions.
+  */
+  context?: ClientContext;
+  /** Force a worker mode for testing. Default `"auto"`. */
+  workerMode?: "shared" | "dedicated" | "auto";
+  /**
+  * Optional override for the worker script URL. By default the bundled worker is loaded
+  * from a `data:` URL — self-contained, no infrastructure setup, works across tabs
+  * (`SharedWorker` is keyed by `(scriptURL, name)` and identical content yields identical
+  * data: URLs). Provide this only if your `worker-src` CSP forbids `data:`; you can serve
+  * the bundled worker yourself by re-exporting `workerScript` from
+  * `csr-common/uploader` and pointing `workerUrl` at the route.
+  */
+  workerUrl?: string;
+  /** Force recording regardless of backend sampling and targeting rules. Included in the `initSession` request body. */
+  forceRecord?: boolean;
+  /** Tab-side hint expiry; cached `sessionId`s older than this are discarded on init. */
+  sessionTtlMs?: number;
+  onStateChange?: (state: {
+    sessionId: string | null;
+    tabId: string | null;
+    connected: boolean;
+    /**
+    * Token issued by `initSession`. Null until the session is established.
+    * Most consumers should ignore this; it's exposed for tooling that needs
+    * to call session-lifecycle endpoints directly (e.g. `closeSession`).
+    */
+    sessionToken: string | null;
+  }) => void;
+  /** Called once when recording is permanently dead. SDK should dismantle the recorder. */
+  onTerminate?: (info: {
+    reason: string;
+  }) => void;
+  /**
+  * Optional verbose tracer. Called on key tab- and worker-side events
+  * (hello/welcome, init-session URL, ws connect URL, retries, transitions).
+  * Worker messages are forwarded over the port and tagged so you can tell them apart.
+  */
+  debugLogger?: (msg: string) => void;
+}
+/** Internal: wire-level frame. Session-id is implicit (Transport is session-bound at open). */
+interface Frame {
+  tabId: string;
+  /** Monotonic, 0-based per Recording. Resets on adoption. */
+  eventCounter: number;
+  /** Opaque payload from the recorder. */
+  data: unknown;
+  /** Set only on the first frame emitted after the tab was adopted into a different session. */
+  adoptedFromSessionId?: string;
+  /** Epoch millis of the adoption event. */
+  adoptedAt?: number;
+}
+//#endregion
+export { ContextValue as a, ClientContext as i, Frame as n, UserAgentContext as o, Uploader as r, collectUserAgentContext as s, CreateUploaderOptions as t };

package/dist/types-BFkUa8kB.d.ts

@@ -0,0 +1,111 @@
+//#region src/uploader/client-context.d.ts
+/**
+* JSON-shaped values accepted in a Context — matches `google.protobuf.Struct`.
+*/
+type ContextValue = string | number | boolean | null | ContextValue[] | {
+  [key: string]: ContextValue;
+};
+/**
+* Browser-environment metadata captured at session init. Sent verbatim in the
+* `context` field of the InitSession request.
+*/
+type UserAgentContext = {
+  userAgent?: string; /** Coarse OS family — `windows`, `macos`, `ios`, `android`, `linux`, or `unknown`. */
+  os?: string; /** Coarse browser family — `chrome`, `firefox`, `safari`, `edge`, or `unknown`. */
+  browser?: string; /** Browser major version. */
+  browserVersion?: string;
+  mobile?: boolean; /** BCP-47 language tag (e.g. `en-US`). */
+  languageCode?: string; /** IANA time zone (e.g. `Europe/Stockholm`). */
+  timeZone?: string; /** Viewport in CSS pixels. */
+  viewportWidth?: number;
+  viewportHeight?: number; /** Physical screen in CSS pixels. */
+  screenWidth?: number;
+  screenHeight?: number;
+  devicePixelRatio?: number; /** Initial document URI — without query/hash to avoid leaking PII. */
+  uri?: string;
+  referrer?: string;
+};
+interface ClientContext {
+  userAgent?: UserAgentContext;
+  [key: string]: ContextValue | undefined;
+}
+declare function collectUserAgentContext(): UserAgentContext | undefined;
+//#endregion
+//#region src/uploader/types.d.ts
+interface Uploader {
+  (event: unknown): void;
+  close(): void;
+}
+interface CreateUploaderOptions {
+  /** Base URL of the recording backend (serves `/v1/sessions:initSession` and, by default, the WS ingest endpoint). */
+  apiUrl: string;
+  /**
+  * URL of the WebSocket ingest endpoint, including the path (e.g.
+  * `wss://recording-ws.confidence.dev/sessions/stream`) but **without** any query —
+  * the worker appends `?session_token=…`. Optional: when omitted the worker derives
+  * one from `apiUrl` by swapping `http(s)://` → `ws(s)://` and appending
+  * `/sessions/stream`. Set this when the init endpoint and the WS ingest live on
+  * different hosts (e.g. prod).
+  */
+  websocketUrl?: string;
+  /** Per-tenant secret. Hashed to scope the SharedWorker so different secrets never share a session, and sent in the `initSession` request body. */
+  clientSecret: string;
+  /** End-user identifier (visitor / device ID). Forwarded in the `initSession` body for sampling and eligibility. */
+  targetingKey?: string;
+  /**
+  * Session context sent in the InitSession request. The SDK auto-populates
+  * `userAgent` with browser/OS/screen metadata. Pass any extra keys as
+  * custom dimensions.
+  */
+  context?: ClientContext;
+  /** Force a worker mode for testing. Default `"auto"`. */
+  workerMode?: "shared" | "dedicated" | "auto";
+  /**
+  * Optional override for the worker script URL. By default the bundled worker is loaded
+  * from a `data:` URL — self-contained, no infrastructure setup, works across tabs
+  * (`SharedWorker` is keyed by `(scriptURL, name)` and identical content yields identical
+  * data: URLs). Provide this only if your `worker-src` CSP forbids `data:`; you can serve
+  * the bundled worker yourself by re-exporting `workerScript` from
+  * `csr-common/uploader` and pointing `workerUrl` at the route.
+  */
+  workerUrl?: string;
+  /** Force recording regardless of backend sampling and targeting rules. Included in the `initSession` request body. */
+  forceRecord?: boolean;
+  /** Tab-side hint expiry; cached `sessionId`s older than this are discarded on init. */
+  sessionTtlMs?: number;
+  onStateChange?: (state: {
+    sessionId: string | null;
+    tabId: string | null;
+    connected: boolean;
+    /**
+    * Token issued by `initSession`. Null until the session is established.
+    * Most consumers should ignore this; it's exposed for tooling that needs
+    * to call session-lifecycle endpoints directly (e.g. `closeSession`).
+    */
+    sessionToken: string | null;
+  }) => void;
+  /** Called once when recording is permanently dead. SDK should dismantle the recorder. */
+  onTerminate?: (info: {
+    reason: string;
+  }) => void;
+  /**
+  * Optional verbose tracer. Called on key tab- and worker-side events
+  * (hello/welcome, init-session URL, ws connect URL, retries, transitions).
+  * Worker messages are forwarded over the port and tagged so you can tell them apart.
+  */
+  debugLogger?: (msg: string) => void;
+}
+/** Internal: wire-level frame. Session-id is implicit (Transport is session-bound at open). */
+interface Frame {
+  tabId: string;
+  /** Monotonic, 0-based per Recording. Resets on adoption. */
+  eventCounter: number;
+  /** Opaque payload from the recorder. */
+  data: unknown;
+  /** Set only on the first frame emitted after the tab was adopted into a different session. */
+  adoptedFromSessionId?: string;
+  /** Epoch millis of the adoption event. */
+  adoptedAt?: number;
+}
+//#endregion
+export { ContextValue as a, ClientContext as i, Frame as n, UserAgentContext as o, Uploader as r, collectUserAgentContext as s, CreateUploaderOptions as t };

package/dist/uploader/index.cjs

@@ -0,0 +1,276 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+let bowser = require("bowser");
+bowser = __toESM(bowser, 1);
+//#region src/uploader/client-context.ts
+function collectUserAgentContext() {
+	if (typeof window === "undefined" || typeof navigator === "undefined") return void 0;
+	const parsed = bowser.default.parse(navigator.userAgent);
+	let timeZone;
+	try {
+		timeZone = new Intl.DateTimeFormat().resolvedOptions().timeZone;
+	} catch (_e) {}
+	return {
+		userAgent: navigator.userAgent,
+		os: parsed.os.name?.toLowerCase().replace(/\s+/g, ""),
+		browser: parsed.browser.name?.toLowerCase().replace(/\s+/g, ""),
+		browserVersion: parsed.browser.version?.split(".")[0],
+		mobile: parsed.platform.type ? parsed.platform.type === "mobile" || parsed.platform.type === "tablet" : void 0,
+		languageCode: navigator.language,
+		timeZone,
+		viewportWidth: window.innerWidth,
+		viewportHeight: window.innerHeight,
+		screenWidth: window.screen.width,
+		screenHeight: window.screen.height,
+		devicePixelRatio: window.devicePixelRatio,
+		uri: `${window.location.origin}${window.location.pathname}`,
+		referrer: document.referrer
+	};
+}
+//#endregion
+//#region src/uploader/worker/worker-script.ts
+const workerScript = "//#region src/uploader/worker/web-socket-transport.ts\n/**\n* WebSocket-backed Transport. Internal retry policy: clean server-initiated close after the\n* first successful open → reconnect and resume; abrupt close (or any close before the first\n* open) → fire `onClose` and stop. Frames received while a (re)connect is in progress are\n* buffered and flushed on open.\n*\n* `ready()` resolves on the first successful open and rejects on close-before-open. Callers\n* should await it before treating the Transport as live, so a failure to open can be caught\n* (e.g. 4404 unknown session) and recovered from.\n*/\nvar WebSocketTransport = class {\n	url;\n	ws = null;\n	onCloseCb = null;\n	onStateChangeCb = null;\n	intentionallyClosed = false;\n	dead = false;\n	/** Frames buffered while a (re)connect is in progress. */\n	pending = [];\n	readyPromise;\n	constructor(url) {\n		this.url = url;\n		this.readyPromise = new Promise((resolve, reject) => {\n			this.connect(false, resolve, reject);\n		});\n		this.readyPromise.catch(() => {});\n	}\n	ready() {\n		return this.readyPromise;\n	}\n	send(frame) {\n		if (this.dead || this.intentionallyClosed) return;\n		if (this.ws?.readyState === WebSocket.OPEN) this.ws.send(JSON.stringify(frame));\n		else this.pending.push(frame);\n	}\n	close(reason = \"transport-close\") {\n		this.intentionallyClosed = true;\n		this.ws?.close(1e3, reason);\n	}\n	onClose(cb) {\n		this.onCloseCb = cb;\n	}\n	onStateChange(cb) {\n		this.onStateChangeCb = cb;\n	}\n	connect(isReconnect, onReady, onReadyFail) {\n		const ws = new WebSocket(this.url);\n		this.ws = ws;\n		let opened = false;\n		ws.onopen = () => {\n			opened = true;\n			onReady?.();\n			if (isReconnect) this.onStateChangeCb?.({ connected: true });\n			while (this.pending.length > 0) {\n				const f = this.pending.shift();\n				ws.send(JSON.stringify(f));\n			}\n		};\n		ws.onclose = (event) => {\n			if (this.intentionallyClosed) return;\n			if (!opened) {\n				const reason = `${isReconnect ? \"reconnect\" : \"initial\"}-failed code=${event.code}`;\n				if (onReadyFail) {\n					onReadyFail(new Error(reason));\n					this.dead = true;\n				} else this.die(reason);\n				return;\n			}\n			if (event.wasClean && (event.code === 1e3 || event.code === 1001)) {\n				this.onStateChangeCb?.({ connected: false });\n				this.connect(true);\n			} else this.die(`close code=${event.code} wasClean=${event.wasClean}`);\n		};\n	}\n	die(reason) {\n		this.dead = true;\n		this.onCloseCb?.({ reason });\n	}\n};\n//#endregion\n//#region src/uploader/worker/csr-client.ts\n/**\n* Single Client implementation that talks to the recording backend's REST + WS protocol.\n* Both dev-server and prod implement the same protocol, so we don't need polymorphism here yet.\n*/\nvar CsrClient = class {\n	apiUrl;\n	clientSecret;\n	targetingKey;\n	context;\n	websocketUrl;\n	log;\n	forceRecord;\n	constructor(apiUrl, clientSecret, targetingKey, context, websocketUrl, log = () => {}, forceRecord) {\n		this.apiUrl = apiUrl;\n		this.clientSecret = clientSecret;\n		this.targetingKey = targetingKey;\n		this.context = context;\n		this.websocketUrl = websocketUrl;\n		this.log = log;\n		this.forceRecord = forceRecord;\n	}\n	async initSession() {\n		const url = `${this.trimSlash(this.apiUrl)}/v1/sessions:initSession`;\n		this.log(`fetch POST ${url}`);\n		const res = await fetch(url, {\n			method: \"POST\",\n			headers: { \"Content-Type\": \"application/json\" },\n			body: JSON.stringify({\n				clientSecret: this.clientSecret,\n				...this.targetingKey ? { targetingKey: this.targetingKey } : {},\n				...this.context && Object.keys(this.context).length > 0 ? { context: this.context } : {},\n				...this.forceRecord ? { forceRecord: true } : {}\n			})\n		});\n		if (!res.ok) throw new Error(`init-session failed: HTTP ${res.status}`);\n		const data = await res.json();\n		if (data.skipRecording) return { skipRecording: true };\n		if (!data.sessionId || !data.sessionToken) throw new Error(\"init-session response missing sessionId or sessionToken\");\n		return {\n			sessionId: data.sessionId,\n			sessionToken: data.sessionToken\n		};\n	}\n	async openTransport(sessionToken) {\n		const wsBase = this.websocketUrl ?? `${this.toWsScheme(this.trimSlash(this.apiUrl))}/sessions/stream`;\n		const url = `${wsBase}${wsBase.includes(\"?\") ? \"&\" : \"?\"}session_token=${encodeURIComponent(sessionToken)}`;\n		this.log(`WebSocket connect ${url}`);\n		const transport = new WebSocketTransport(url);\n		await transport.ready();\n		return transport;\n	}\n	trimSlash(s) {\n		return s.endsWith(\"/\") ? s.slice(0, -1) : s;\n	}\n	toWsScheme(base) {\n		if (base.startsWith(\"https://\")) return `wss://${base.slice(8)}`;\n		if (base.startsWith(\"http://\")) return `ws://${base.slice(7)}`;\n		return base;\n	}\n};\n//#endregion\n//#region src/uploader/worker/core.ts\nconst IDLE_GRACE_MS = 5e3;\nlet state = { phase: \"init\" };\nconst ports = [];\nlet idleTimer = null;\nfunction cancelIdleTimer() {\n	if (idleTimer !== null) {\n		clearTimeout(idleTimer);\n		idleTimer = null;\n	}\n}\nfunction log(msg) {\n	for (const handle of ports) if (handle.debugLogs) handle.port.postMessage({\n		type: \"log\",\n		msg\n	});\n}\n/**\n* The first hello \"locks in\" the session's apiUrl/clientSecret. Any later tab arriving\n* with different values is misconfigured — we reject it rather than silently using the\n* locked values. In SharedWorker mode the `name = hash(clientSecret)` scoping already\n* prevents secret-mismatch from sharing a worker, but this defends against the dedicated\n* path and against future bugs.\n*/\nlet lockedConfig = null;\nfunction registerPort(adapter) {\n	cancelIdleTimer();\n	const handle = {\n		port: adapter,\n		hello: null,\n		debugLogs: false\n	};\n	ports.push(handle);\n	adapter.onmessage((data) => {\n		handleMessage(handle, data);\n	});\n}\nfunction handleMessage(handle, message) {\n	switch (message.type) {\n		case \"hello\":\n			handle.hello = message;\n			handle.debugLogs = message.debugLogs ?? false;\n			if (rejectIfIncompatible(handle)) return;\n			if (state.phase !== \"dead\" && state.phase !== \"skipping\") detectDuplicateTab(handle);\n			onHello(handle);\n			return;\n		case \"frame\":\n			onFrame(message.frame);\n			return;\n		case \"bye\":\n			onBye(handle);\n			return;\n		default: break;\n	}\n}\n/**\n* Reject hellos whose `apiUrl`/`clientSecret` don't match the values established by the\n* first hello. Returns true if the port was rejected (caller should not continue\n* processing this hello).\n*/\nfunction rejectIfIncompatible(handle) {\n	if (lockedConfig === null) return false;\n	const incoming = handle.hello;\n	if (incoming.apiUrl === lockedConfig.apiUrl && incoming.websocketUrl === lockedConfig.websocketUrl && incoming.clientSecret === lockedConfig.clientSecret) return false;\n	handle.port.postMessage({\n		type: \"dead\",\n		reason: \"incompatible-options: apiUrl/websocketUrl/clientSecret differ from the worker session\"\n	});\n	const idx = ports.indexOf(handle);\n	if (idx >= 0) ports.splice(idx, 1);\n	return true;\n}\n/**\n* If another already-connected port has the same `tabId`, this hello is from a duplicate\n* tab (browser \"Duplicate\" command clones sessionStorage). Mint a fresh `tabId` so the two\n* tabs don't collide on the same `(sessionId, tabId)` Recording. The new tabId is returned\n* to the tab in `welcome` so it can update its own state and sessionStorage.\n*/\nfunction detectDuplicateTab(handle) {\n	const tabId = handle.hello.tabId;\n	if (!ports.some((p) => p !== handle && p.hello?.tabId === tabId)) return;\n	const fresh = crypto.randomUUID();\n	handle.newTabId = fresh;\n	handle.hello.tabId = fresh;\n}\nfunction onHello(handle) {\n	switch (state.phase) {\n		case \"init\":\n			lockedConfig = {\n				apiUrl: handle.hello.apiUrl,\n				websocketUrl: handle.hello.websocketUrl,\n				clientSecret: handle.hello.clientSecret\n			};\n			log(`hello received apiUrl=${handle.hello.apiUrl} websocketUrl=${handle.hello.websocketUrl ?? \"(derive)\"} sessionIdHint=${handle.hello.sessionIdHint ?? \"(none)\"}`);\n			state = { phase: \"initializing\" };\n			initializeSession(handle.hello).then(flushPendingWelcomes);\n			return;\n		case \"initializing\": return;\n		case \"active\":\n			sendActiveWelcome(handle, state.sessionId, state.sessionToken);\n			return;\n		case \"idle\": {\n			const { client, sessionId, sessionToken } = state;\n			state = { phase: \"initializing\" };\n			resumeTransport(client, sessionId, sessionToken).then(flushPendingWelcomes);\n			return;\n		}\n		case \"skipping\":\n			if (handle.hello.forceRecord) {\n				log(\"forceRecord set; re-initializing from skipping state\");\n				state = { phase: \"initializing\" };\n				initializeSession(handle.hello).then(flushPendingWelcomes);\n				return;\n			}\n			handle.port.postMessage({\n				type: \"welcome\",\n				result: { skipRecording: true }\n			});\n			return;\n		case \"dead\":\n			handle.port.postMessage({\n				type: \"dead\",\n				reason: state.reason\n			});\n			return;\n		default: break;\n	}\n}\nasync function initializeSession(firstHello) {\n	const client = new CsrClient(firstHello.apiUrl, firstHello.clientSecret, firstHello.targetingKey, firstHello.context, firstHello.websocketUrl, log, firstHello.forceRecord);\n	if (firstHello.sessionIdHint && firstHello.sessionTokenHint) {\n		log(`adopting sessionIdHint=${firstHello.sessionIdHint}`);\n		try {\n			const transport = await client.openTransport(firstHello.sessionTokenHint);\n			wireTransport(transport);\n			state = {\n				phase: \"active\",\n				client,\n				transport,\n				sessionId: firstHello.sessionIdHint,\n				sessionToken: firstHello.sessionTokenHint\n			};\n			log(\"hint adopted; transport open\");\n			if (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n			return;\n		} catch (err) {\n			log(`hint rejected (${String(err)}); falling back to fresh init`);\n		}\n	}\n	let result;\n	try {\n		result = await client.initSession();\n	} catch (err) {\n		log(`init-session threw: ${String(err)}`);\n		transitionToDead(`init-session-failed: ${String(err)}`);\n		return;\n	}\n	if (\"skipRecording\" in result) {\n		log(\"init-session: skipRecording\");\n		state = { phase: \"skipping\" };\n		return;\n	}\n	log(`init-session ok sessionId=${result.sessionId}`);\n	let transport;\n	try {\n		transport = await client.openTransport(result.sessionToken);\n	} catch (err) {\n		log(`openTransport threw: ${String(err)}`);\n		transitionToDead(`open-transport-failed: ${String(err)}`);\n		return;\n	}\n	wireTransport(transport);\n	log(\"transport open; session active\");\n	state = {\n		phase: \"active\",\n		client,\n		transport,\n		sessionId: result.sessionId,\n		sessionToken: result.sessionToken\n	};\n	if (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n}\nasync function resumeTransport(client, sessionId, sessionToken) {\n	log(\"resuming transport from idle\");\n	let transport;\n	try {\n		transport = await client.openTransport(sessionToken);\n	} catch (err) {\n		log(`resume-transport threw: ${String(err)}`);\n		transitionToDead(`resume-transport-failed: ${String(err)}`);\n		return;\n	}\n	wireTransport(transport);\n	log(\"transport resumed\");\n	state = {\n		phase: \"active\",\n		client,\n		transport,\n		sessionId,\n		sessionToken\n	};\n	if (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n}\nfunction wireTransport(transport) {\n	transport.onClose((info) => {\n		if (state.phase !== \"active\") return;\n		transitionToDead(info.reason);\n	});\n	transport.onStateChange((info) => {\n		if (state.phase !== \"active\") return;\n		for (const handle of ports) handle.port.postMessage({\n			type: \"state\",\n			connected: info.connected\n		});\n	});\n}\nfunction transitionToDead(reason) {\n	state = {\n		phase: \"dead\",\n		reason\n	};\n	for (const handle of ports) handle.port.postMessage({\n		type: \"dead\",\n		reason\n	});\n}\nfunction flushPendingWelcomes() {\n	for (const handle of ports) {\n		if (handle.hello === null) continue;\n		if (state.phase === \"active\") sendActiveWelcome(handle, state.sessionId, state.sessionToken);\n		else if (state.phase === \"skipping\") handle.port.postMessage({\n			type: \"welcome\",\n			result: { skipRecording: true }\n		});\n		else if (state.phase === \"dead\") handle.port.postMessage({\n			type: \"dead\",\n			reason: state.reason\n		});\n	}\n}\nfunction sendActiveWelcome(handle, currentSessionId, currentSessionToken) {\n	const hint = handle.hello?.sessionIdHint;\n	const adopted = hint !== void 0 && hint !== currentSessionId;\n	const newTabId = handle.newTabId;\n	handle.port.postMessage({\n		type: \"welcome\",\n		result: {\n			sessionId: currentSessionId,\n			sessionToken: currentSessionToken\n		},\n		adoptedFromSessionId: adopted ? hint : void 0,\n		newTabId,\n		resetCounter: adopted || newTabId !== void 0\n	});\n}\nfunction onFrame(frame) {\n	if (state.phase !== \"active\") return;\n	state.transport.send(frame);\n}\nfunction onBye(handle) {\n	const idx = ports.indexOf(handle);\n	if (idx >= 0) ports.splice(idx, 1);\n	if (ports.length === 0 && state.phase === \"active\") {\n		log(`last tab disconnected; closing transport in ${IDLE_GRACE_MS}ms`);\n		idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n	}\n}\nfunction enterIdle() {\n	idleTimer = null;\n	if (state.phase !== \"active\" || ports.length > 0) return;\n	log(\"idle timeout; closing transport\");\n	state.transport.close(\"idle\");\n	state = {\n		phase: \"idle\",\n		client: state.client,\n		sessionId: state.sessionId,\n		sessionToken: state.sessionToken\n	};\n}\n//#endregion\n//#region src/uploader/worker/entry.ts\nconst SharedWorkerScopeCtor = globalThis.SharedWorkerGlobalScope;\nif (typeof SharedWorkerScopeCtor === \"function\" && self instanceof SharedWorkerScopeCtor) self.onconnect = (event) => {\n	const port = event.ports[0];\n	port.start();\n	registerPort(adaptMessagePort(port));\n};\nelse registerPort(adaptDedicatedSelf());\nfunction adaptMessagePort(port) {\n	return {\n		postMessage: (message) => port.postMessage(message),\n		onmessage: (cb) => {\n			port.onmessage = (e) => cb(e.data);\n		}\n	};\n}\nfunction adaptDedicatedSelf() {\n	const ws = self;\n	return {\n		postMessage: (message) => ws.postMessage(message),\n		onmessage: (cb) => {\n			ws.onmessage = (e) => cb(e.data);\n		}\n	};\n}\n//#endregion\n";
+//#endregion
+//#region src/uploader/create-uploader.ts
+const STORAGE_TAB_ID = "csr:tabId";
+const STORAGE_SESSION = "csr:session";
+const STORAGE_COUNTER = "csr:counter";
+const DEFAULT_SESSION_TTL_MS = 1800 * 1e3;
+async function createUploader(opts) {
+	const log = opts.debugLogger;
+	const sessionTtlMs = opts.sessionTtlMs ?? DEFAULT_SESSION_TTL_MS;
+	const tabId = readOrMintTabId();
+	const sessionHint = readSessionHint(sessionTtlMs);
+	const counterHint = readCounter();
+	const mode = resolveMode(opts.workerMode ?? "auto");
+	log?.(`tab: createUploader mode=${mode} tabId=${tabId} sessionHint=${sessionHint?.id ?? "(none)"} counterHint=${counterHint}`);
+	const port = await openWorkerPort(mode, opts.clientSecret, opts.workerUrl);
+	let phase = "awaiting-welcome";
+	let sessionId = null;
+	let sessionToken = null;
+	let effectiveTabId = tabId;
+	let resolveWelcome;
+	const welcomePromise = new Promise((res) => {
+		resolveWelcome = res;
+	});
+	port.setHandler((data) => {
+		const msg = data;
+		if (msg.type === "log") {
+			log?.(`worker: ${msg.msg}`);
+			return;
+		}
+		if (phase === "awaiting-welcome") {
+			if (msg.type === "welcome" || msg.type === "dead") {
+				phase = msg.type === "welcome" ? "active" : "dead";
+				resolveWelcome(msg);
+			}
+			return;
+		}
+		if (msg.type === "state" && sessionId !== null) {
+			opts.onStateChange?.({
+				sessionId,
+				tabId: effectiveTabId,
+				connected: msg.connected,
+				sessionToken
+			});
+			return;
+		}
+		if (msg.type === "dead") {
+			phase = "dead";
+			if (sessionId !== null) opts.onStateChange?.({
+				sessionId,
+				tabId: effectiveTabId,
+				connected: false,
+				sessionToken
+			});
+			opts.onTerminate?.({ reason: msg.reason });
+		}
+	});
+	const autoUA = collectUserAgentContext();
+	const context = {
+		...autoUA ? { userAgent: autoUA } : {},
+		...opts.context ?? {}
+	};
+	port.postMessage({
+		type: "hello",
+		apiUrl: opts.apiUrl,
+		websocketUrl: opts.websocketUrl,
+		clientSecret: opts.clientSecret,
+		targetingKey: opts.targetingKey,
+		context,
+		forceRecord: opts.forceRecord,
+		sessionIdHint: sessionHint?.id,
+		sessionTokenHint: sessionHint?.token,
+		tabId,
+		debugLogs: log !== void 0
+	});
+	log?.("tab: hello sent, awaiting welcome");
+	const welcome = await welcomePromise;
+	log?.(welcome.type === "welcome" ? `tab: welcome (${"sessionId" in welcome.result ? `sessionId=${welcome.result.sessionId}` : "skipRecording"})` : `tab: dead reason=${welcome.reason}`);
+	if (welcome.type === "dead") throw new Error(`uploader: ${welcome.reason}`);
+	if ("skipRecording" in welcome.result) {
+		if (opts.forceRecord) log?.("tab: forceRecord was set but backend still skipped — backend may not support forceRecord yet");
+		return null;
+	}
+	sessionId = welcome.result.sessionId;
+	sessionToken = welcome.result.sessionToken;
+	writeSession(welcome.result.sessionId, welcome.result.sessionToken);
+	if (welcome.newTabId !== void 0) {
+		effectiveTabId = welcome.newTabId;
+		sessionStorage.setItem(STORAGE_TAB_ID, effectiveTabId);
+	}
+	let counter = welcome.resetCounter ? 0 : counterHint;
+	let nextAdoptionMeta = welcome.adoptedFromSessionId !== void 0 ? {
+		adoptedFromSessionId: welcome.adoptedFromSessionId,
+		adoptedAt: Date.now()
+	} : void 0;
+	opts.onStateChange?.({
+		sessionId,
+		tabId: effectiveTabId,
+		connected: true,
+		sessionToken
+	});
+	const flush = () => {
+		writeCounter(counter);
+	};
+	window.addEventListener("pagehide", () => {
+		flush();
+		try {
+			port.postMessage({
+				type: "bye",
+				reason: "pagehide"
+			});
+		} catch (_e) {}
+	});
+	document.addEventListener("visibilitychange", () => {
+		if (document.visibilityState === "hidden") flush();
+	});
+	const uploader = ((event) => {
+		if (phase === "dead") throw new Error("uploader: terminated");
+		const frame = {
+			tabId: effectiveTabId,
+			eventCounter: counter,
+			data: event,
+			...nextAdoptionMeta ?? {}
+		};
+		counter += 1;
+		nextAdoptionMeta = void 0;
+		port.postMessage({
+			type: "frame",
+			frame
+		});
+	});
+	uploader.close = () => {
+		flush();
+		try {
+			port.postMessage({
+				type: "bye",
+				reason: "stop"
+			});
+		} catch (_e) {}
+	};
+	return uploader;
+}
+function resolveMode(mode) {
+	if (mode === "auto") return typeof SharedWorker !== "undefined" ? "shared" : "dedicated";
+	return mode;
+}
+async function openWorkerPort(mode, clientSecret, workerUrl) {
+	const url = workerUrl ?? toDataUrl("//#region src/uploader/worker/web-socket-transport.ts\n/**\n* WebSocket-backed Transport. Internal retry policy: clean server-initiated close after the\n* first successful open → reconnect and resume; abrupt close (or any close before the first\n* open) → fire `onClose` and stop. Frames received while a (re)connect is in progress are\n* buffered and flushed on open.\n*\n* `ready()` resolves on the first successful open and rejects on close-before-open. Callers\n* should await it before treating the Transport as live, so a failure to open can be caught\n* (e.g. 4404 unknown session) and recovered from.\n*/\nvar WebSocketTransport = class {\n	url;\n	ws = null;\n	onCloseCb = null;\n	onStateChangeCb = null;\n	intentionallyClosed = false;\n	dead = false;\n	/** Frames buffered while a (re)connect is in progress. */\n	pending = [];\n	readyPromise;\n	constructor(url) {\n		this.url = url;\n		this.readyPromise = new Promise((resolve, reject) => {\n			this.connect(false, resolve, reject);\n		});\n		this.readyPromise.catch(() => {});\n	}\n	ready() {\n		return this.readyPromise;\n	}\n	send(frame) {\n		if (this.dead || this.intentionallyClosed) return;\n		if (this.ws?.readyState === WebSocket.OPEN) this.ws.send(JSON.stringify(frame));\n		else this.pending.push(frame);\n	}\n	close(reason = \"transport-close\") {\n		this.intentionallyClosed = true;\n		this.ws?.close(1e3, reason);\n	}\n	onClose(cb) {\n		this.onCloseCb = cb;\n	}\n	onStateChange(cb) {\n		this.onStateChangeCb = cb;\n	}\n	connect(isReconnect, onReady, onReadyFail) {\n		const ws = new WebSocket(this.url);\n		this.ws = ws;\n		let opened = false;\n		ws.onopen = () => {\n			opened = true;\n			onReady?.();\n			if (isReconnect) this.onStateChangeCb?.({ connected: true });\n			while (this.pending.length > 0) {\n				const f = this.pending.shift();\n				ws.send(JSON.stringify(f));\n			}\n		};\n		ws.onclose = (event) => {\n			if (this.intentionallyClosed) return;\n			if (!opened) {\n				const reason = `${isReconnect ? \"reconnect\" : \"initial\"}-failed code=${event.code}`;\n				if (onReadyFail) {\n					onReadyFail(new Error(reason));\n					this.dead = true;\n				} else this.die(reason);\n				return;\n			}\n			if (event.wasClean && (event.code === 1e3 || event.code === 1001)) {\n				this.onStateChangeCb?.({ connected: false });\n				this.connect(true);\n			} else this.die(`close code=${event.code} wasClean=${event.wasClean}`);\n		};\n	}\n	die(reason) {\n		this.dead = true;\n		this.onCloseCb?.({ reason });\n	}\n};\n//#endregion\n//#region src/uploader/worker/csr-client.ts\n/**\n* Single Client implementation that talks to the recording backend's REST + WS protocol.\n* Both dev-server and prod implement the same protocol, so we don't need polymorphism here yet.\n*/\nvar CsrClient = class {\n	apiUrl;\n	clientSecret;\n	targetingKey;\n	context;\n	websocketUrl;\n	log;\n	forceRecord;\n	constructor(apiUrl, clientSecret, targetingKey, context, websocketUrl, log = () => {}, forceRecord) {\n		this.apiUrl = apiUrl;\n		this.clientSecret = clientSecret;\n		this.targetingKey = targetingKey;\n		this.context = context;\n		this.websocketUrl = websocketUrl;\n		this.log = log;\n		this.forceRecord = forceRecord;\n	}\n	async initSession() {\n		const url = `${this.trimSlash(this.apiUrl)}/v1/sessions:initSession`;\n		this.log(`fetch POST ${url}`);\n		const res = await fetch(url, {\n			method: \"POST\",\n			headers: { \"Content-Type\": \"application/json\" },\n			body: JSON.stringify({\n				clientSecret: this.clientSecret,\n				...this.targetingKey ? { targetingKey: this.targetingKey } : {},\n				...this.context && Object.keys(this.context).length > 0 ? { context: this.context } : {},\n				...this.forceRecord ? { forceRecord: true } : {}\n			})\n		});\n		if (!res.ok) throw new Error(`init-session failed: HTTP ${res.status}`);\n		const data = await res.json();\n		if (data.skipRecording) return { skipRecording: true };\n		if (!data.sessionId || !data.sessionToken) throw new Error(\"init-session response missing sessionId or sessionToken\");\n		return {\n			sessionId: data.sessionId,\n			sessionToken: data.sessionToken\n		};\n	}\n	async openTransport(sessionToken) {\n		const wsBase = this.websocketUrl ?? `${this.toWsScheme(this.trimSlash(this.apiUrl))}/sessions/stream`;\n		const url = `${wsBase}${wsBase.includes(\"?\") ? \"&\" : \"?\"}session_token=${encodeURIComponent(sessionToken)}`;\n		this.log(`WebSocket connect ${url}`);\n		const transport = new WebSocketTransport(url);\n		await transport.ready();\n		return transport;\n	}\n	trimSlash(s) {\n		return s.endsWith(\"/\") ? s.slice(0, -1) : s;\n	}\n	toWsScheme(base) {\n		if (base.startsWith(\"https://\")) return `wss://${base.slice(8)}`;\n		if (base.startsWith(\"http://\")) return `ws://${base.slice(7)}`;\n		return base;\n	}\n};\n//#endregion\n//#region src/uploader/worker/core.ts\nconst IDLE_GRACE_MS = 5e3;\nlet state = { phase: \"init\" };\nconst ports = [];\nlet idleTimer = null;\nfunction cancelIdleTimer() {\n	if (idleTimer !== null) {\n		clearTimeout(idleTimer);\n		idleTimer = null;\n	}\n}\nfunction log(msg) {\n	for (const handle of ports) if (handle.debugLogs) handle.port.postMessage({\n		type: \"log\",\n		msg\n	});\n}\n/**\n* The first hello \"locks in\" the session's apiUrl/clientSecret. Any later tab arriving\n* with different values is misconfigured — we reject it rather than silently using the\n* locked values. In SharedWorker mode the `name = hash(clientSecret)` scoping already\n* prevents secret-mismatch from sharing a worker, but this defends against the dedicated\n* path and against future bugs.\n*/\nlet lockedConfig = null;\nfunction registerPort(adapter) {\n	cancelIdleTimer();\n	const handle = {\n		port: adapter,\n		hello: null,\n		debugLogs: false\n	};\n	ports.push(handle);\n	adapter.onmessage((data) => {\n		handleMessage(handle, data);\n	});\n}\nfunction handleMessage(handle, message) {\n	switch (message.type) {\n		case \"hello\":\n			handle.hello = message;\n			handle.debugLogs = message.debugLogs ?? false;\n			if (rejectIfIncompatible(handle)) return;\n			if (state.phase !== \"dead\" && state.phase !== \"skipping\") detectDuplicateTab(handle);\n			onHello(handle);\n			return;\n		case \"frame\":\n			onFrame(message.frame);\n			return;\n		case \"bye\":\n			onBye(handle);\n			return;\n		default: break;\n	}\n}\n/**\n* Reject hellos whose `apiUrl`/`clientSecret` don't match the values established by the\n* first hello. Returns true if the port was rejected (caller should not continue\n* processing this hello).\n*/\nfunction rejectIfIncompatible(handle) {\n	if (lockedConfig === null) return false;\n	const incoming = handle.hello;\n	if (incoming.apiUrl === lockedConfig.apiUrl && incoming.websocketUrl === lockedConfig.websocketUrl && incoming.clientSecret === lockedConfig.clientSecret) return false;\n	handle.port.postMessage({\n		type: \"dead\",\n		reason: \"incompatible-options: apiUrl/websocketUrl/clientSecret differ from the worker session\"\n	});\n	const idx = ports.indexOf(handle);\n	if (idx >= 0) ports.splice(idx, 1);\n	return true;\n}\n/**\n* If another already-connected port has the same `tabId`, this hello is from a duplicate\n* tab (browser \"Duplicate\" command clones sessionStorage). Mint a fresh `tabId` so the two\n* tabs don't collide on the same `(sessionId, tabId)` Recording. The new tabId is returned\n* to the tab in `welcome` so it can update its own state and sessionStorage.\n*/\nfunction detectDuplicateTab(handle) {\n	const tabId = handle.hello.tabId;\n	if (!ports.some((p) => p !== handle && p.hello?.tabId === tabId)) return;\n	const fresh = crypto.randomUUID();\n	handle.newTabId = fresh;\n	handle.hello.tabId = fresh;\n}\nfunction onHello(handle) {\n	switch (state.phase) {\n		case \"init\":\n			lockedConfig = {\n				apiUrl: handle.hello.apiUrl,\n				websocketUrl: handle.hello.websocketUrl,\n				clientSecret: handle.hello.clientSecret\n			};\n			log(`hello received apiUrl=${handle.hello.apiUrl} websocketUrl=${handle.hello.websocketUrl ?? \"(derive)\"} sessionIdHint=${handle.hello.sessionIdHint ?? \"(none)\"}`);\n			state = { phase: \"initializing\" };\n			initializeSession(handle.hello).then(flushPendingWelcomes);\n			return;\n		case \"initializing\": return;\n		case \"active\":\n			sendActiveWelcome(handle, state.sessionId, state.sessionToken);\n			return;\n		case \"idle\": {\n			const { client, sessionId, sessionToken } = state;\n			state = { phase: \"initializing\" };\n			resumeTransport(client, sessionId, sessionToken).then(flushPendingWelcomes);\n			return;\n		}\n		case \"skipping\":\n			if (handle.hello.forceRecord) {\n				log(\"forceRecord set; re-initializing from skipping state\");\n				state = { phase: \"initializing\" };\n				initializeSession(handle.hello).then(flushPendingWelcomes);\n				return;\n			}\n			handle.port.postMessage({\n				type: \"welcome\",\n				result: { skipRecording: true }\n			});\n			return;\n		case \"dead\":\n			handle.port.postMessage({\n				type: \"dead\",\n				reason: state.reason\n			});\n			return;\n		default: break;\n	}\n}\nasync function initializeSession(firstHello) {\n	const client = new CsrClient(firstHello.apiUrl, firstHello.clientSecret, firstHello.targetingKey, firstHello.context, firstHello.websocketUrl, log, firstHello.forceRecord);\n	if (firstHello.sessionIdHint && firstHello.sessionTokenHint) {\n		log(`adopting sessionIdHint=${firstHello.sessionIdHint}`);\n		try {\n			const transport = await client.openTransport(firstHello.sessionTokenHint);\n			wireTransport(transport);\n			state = {\n				phase: \"active\",\n				client,\n				transport,\n				sessionId: firstHello.sessionIdHint,\n				sessionToken: firstHello.sessionTokenHint\n			};\n			log(\"hint adopted; transport open\");\n			if (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n			return;\n		} catch (err) {\n			log(`hint rejected (${String(err)}); falling back to fresh init`);\n		}\n	}\n	let result;\n	try {\n		result = await client.initSession();\n	} catch (err) {\n		log(`init-session threw: ${String(err)}`);\n		transitionToDead(`init-session-failed: ${String(err)}`);\n		return;\n	}\n	if (\"skipRecording\" in result) {\n		log(\"init-session: skipRecording\");\n		state = { phase: \"skipping\" };\n		return;\n	}\n	log(`init-session ok sessionId=${result.sessionId}`);\n	let transport;\n	try {\n		transport = await client.openTransport(result.sessionToken);\n	} catch (err) {\n		log(`openTransport threw: ${String(err)}`);\n		transitionToDead(`open-transport-failed: ${String(err)}`);\n		return;\n	}\n	wireTransport(transport);\n	log(\"transport open; session active\");\n	state = {\n		phase: \"active\",\n		client,\n		transport,\n		sessionId: result.sessionId,\n		sessionToken: result.sessionToken\n	};\n	if (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n}\nasync function resumeTransport(client, sessionId, sessionToken) {\n	log(\"resuming transport from idle\");\n	let transport;\n	try {\n		transport = await client.openTransport(sessionToken);\n	} catch (err) {\n		log(`resume-transport threw: ${String(err)}`);\n		transitionToDead(`resume-transport-failed: ${String(err)}`);\n		return;\n	}\n	wireTransport(transport);\n	log(\"transport resumed\");\n	state = {\n		phase: \"active\",\n		client,\n		transport,\n		sessionId,\n		sessionToken\n	};\n	if (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n}\nfunction wireTransport(transport) {\n	transport.onClose((info) => {\n		if (state.phase !== \"active\") return;\n		transitionToDead(info.reason);\n	});\n	transport.onStateChange((info) => {\n		if (state.phase !== \"active\") return;\n		for (const handle of ports) handle.port.postMessage({\n			type: \"state\",\n			connected: info.connected\n		});\n	});\n}\nfunction transitionToDead(reason) {\n	state = {\n		phase: \"dead\",\n		reason\n	};\n	for (const handle of ports) handle.port.postMessage({\n		type: \"dead\",\n		reason\n	});\n}\nfunction flushPendingWelcomes() {\n	for (const handle of ports) {\n		if (handle.hello === null) continue;\n		if (state.phase === \"active\") sendActiveWelcome(handle, state.sessionId, state.sessionToken);\n		else if (state.phase === \"skipping\") handle.port.postMessage({\n			type: \"welcome\",\n			result: { skipRecording: true }\n		});\n		else if (state.phase === \"dead\") handle.port.postMessage({\n			type: \"dead\",\n			reason: state.reason\n		});\n	}\n}\nfunction sendActiveWelcome(handle, currentSessionId, currentSessionToken) {\n	const hint = handle.hello?.sessionIdHint;\n	const adopted = hint !== void 0 && hint !== currentSessionId;\n	const newTabId = handle.newTabId;\n	handle.port.postMessage({\n		type: \"welcome\",\n		result: {\n			sessionId: currentSessionId,\n			sessionToken: currentSessionToken\n		},\n		adoptedFromSessionId: adopted ? hint : void 0,\n		newTabId,\n		resetCounter: adopted || newTabId !== void 0\n	});\n}\nfunction onFrame(frame) {\n	if (state.phase !== \"active\") return;\n	state.transport.send(frame);\n}\nfunction onBye(handle) {\n	const idx = ports.indexOf(handle);\n	if (idx >= 0) ports.splice(idx, 1);\n	if (ports.length === 0 && state.phase === \"active\") {\n		log(`last tab disconnected; closing transport in ${IDLE_GRACE_MS}ms`);\n		idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n	}\n}\nfunction enterIdle() {\n	idleTimer = null;\n	if (state.phase !== \"active\" || ports.length > 0) return;\n	log(\"idle timeout; closing transport\");\n	state.transport.close(\"idle\");\n	state = {\n		phase: \"idle\",\n		client: state.client,\n		sessionId: state.sessionId,\n		sessionToken: state.sessionToken\n	};\n}\n//#endregion\n//#region src/uploader/worker/entry.ts\nconst SharedWorkerScopeCtor = globalThis.SharedWorkerGlobalScope;\nif (typeof SharedWorkerScopeCtor === \"function\" && self instanceof SharedWorkerScopeCtor) self.onconnect = (event) => {\n	const port = event.ports[0];\n	port.start();\n	registerPort(adaptMessagePort(port));\n};\nelse registerPort(adaptDedicatedSelf());\nfunction adaptMessagePort(port) {\n	return {\n		postMessage: (message) => port.postMessage(message),\n		onmessage: (cb) => {\n			port.onmessage = (e) => cb(e.data);\n		}\n	};\n}\nfunction adaptDedicatedSelf() {\n	const ws = self;\n	return {\n		postMessage: (message) => ws.postMessage(message),\n		onmessage: (cb) => {\n			ws.onmessage = (e) => cb(e.data);\n		}\n	};\n}\n//#endregion\n");
+	if (mode === "shared") {
+		const options = {
+			name: await hashSecret(clientSecret),
+			type: "module",
+			extendedLifetime: true
+		};
+		const worker = new SharedWorker(url, options);
+		worker.port.start();
+		return {
+			postMessage: (m) => worker.port.postMessage(m),
+			setHandler: (cb) => {
+				worker.port.onmessage = (e) => cb(e.data);
+			}
+		};
+	}
+	const worker = new Worker(url, { type: "module" });
+	return {
+		postMessage: (m) => worker.postMessage(m),
+		setHandler: (cb) => {
+			worker.onmessage = (e) => cb(e.data);
+		}
+	};
+}
+function toDataUrl(script) {
+	const bytes = new TextEncoder().encode(script);
+	let binary = "";
+	for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+	return `data:application/javascript;base64,${btoa(binary)}`;
+}
+async function hashSecret(secret) {
+	const buf = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(secret));
+	return Array.from(new Uint8Array(buf)).slice(0, 8).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+function readOrMintTabId() {
+	let id = sessionStorage.getItem(STORAGE_TAB_ID);
+	if (!id) {
+		id = crypto.randomUUID();
+		sessionStorage.setItem(STORAGE_TAB_ID, id);
+	}
+	return id;
+}
+function readSessionHint(ttlMs) {
+	const raw = sessionStorage.getItem(STORAGE_SESSION);
+	if (!raw) return null;
+	try {
+		const parsed = JSON.parse(raw);
+		if (Date.now() - parsed.ts > ttlMs) return null;
+		if (!parsed.token) return null;
+		return {
+			id: parsed.id,
+			token: parsed.token
+		};
+	} catch (_e) {
+		return null;
+	}
+}
+function writeSession(sessionId, sessionToken) {
+	sessionStorage.setItem(STORAGE_SESSION, JSON.stringify({
+		id: sessionId,
+		token: sessionToken,
+		ts: Date.now()
+	}));
+}
+function readCounter() {
+	const raw = sessionStorage.getItem(STORAGE_COUNTER);
+	if (!raw) return 0;
+	const n = Number(raw);
+	return Number.isFinite(n) ? n : 0;
+}
+function writeCounter(counter) {
+	sessionStorage.setItem(STORAGE_COUNTER, String(counter));
+}
+//#endregion
+exports.collectUserAgentContext = collectUserAgentContext;
+exports.createUploader = createUploader;
+exports.workerScript = workerScript;