@spotify-confidence/csr-common 0.18.9 → 0.18.11

package/src/uploader/worker/csr-client.test.ts

@@ -69,48 +69,63 @@ describe('CsrClient.initSession', () => {
 });
 
 describe('CsrClient.openTransport', () => {
-  it('derives a ws:// URL from an http:// apiUrl when websocketUrl is unset', async () => {
-    installMockWsServer('ws://api.example/sessions/stream?session_token=tok');
+  it('derives the unchanged ws:// endpoint and sends the token as a protocol', async () => {
+    const ws = installMockWsServer('ws://api.example/sessions/stream');
 
     const client = new CsrClient('http://api.example', 'secret', undefined);
-    await expect(client.openTransport('tok')).resolves.toBeDefined();
+    await expect(client.openTransport('tok-1')).resolves.toBeDefined();
+
+    expect(ws.connections[0].url).toBe('ws://api.example/sessions/stream');
+    expect(ws.protocolOffers).toEqual([['recording.v1', 'auth.tok-1']]);
   });
 
   it('derives a wss:// URL from an https:// apiUrl', async () => {
-    installMockWsServer('wss://api.example/sessions/stream?session_token=tok');
+    installMockWsServer('wss://api.example/sessions/stream');
 
     const client = new CsrClient('https://api.example', 'secret', undefined);
     await expect(client.openTransport('tok')).resolves.toBeDefined();
   });
 
-  it('uses websocketUrl verbatim when provided (split-host prod layout)', async () => {
-    installMockWsServer('wss://recording-ws.confidence.dev/sessions/stream?session_token=tok');
+  it('preserves unrelated query parameters in a configured websocketUrl', async () => {
+    const ws = installMockWsServer('wss://recording-ws.confidence.dev/sessions/stream?region=eu');
 
     const client = new CsrClient(
       'https://recording.confidence.dev',
       'secret',
       undefined,
-      'wss://recording-ws.confidence.dev/sessions/stream',
+      'wss://recording-ws.confidence.dev/sessions/stream?region=eu',
     );
     await expect(client.openTransport('tok')).resolves.toBeDefined();
+
+    expect(ws.connections[0].url).toBe('wss://recording-ws.confidence.dev/sessions/stream?region=eu');
   });
 
-  it('redacts session_token from debug log', async () => {
-    installMockWsServer('wss://api/sessions/stream?session_token=secret-tok');
+  it('keeps the credential out of the URL and debug log', async () => {
+    const ws = installMockWsServer('wss://api/sessions/stream');
 
     const logs: string[] = [];
     const client = new CsrClient('https://api', 'secret', undefined, undefined, msg => logs.push(msg));
-    await client.openTransport('secret-tok');
+    await client.openTransport('sensitive-token');
 
     expect(logs).toHaveLength(1);
-    expect(logs[0]).toContain('session_token=[REDACTED]');
-    expect(logs[0]).not.toContain('secret-tok');
+    expect(logs[0]).toBe('WebSocket connect wss://api/sessions/stream');
+    for (const value of [ws.connections[0].url, ...logs]) {
+      expect(value).not.toContain('sensitive-token');
+    }
   });
 
-  it('URL-encodes the session token', async () => {
-    installMockWsServer('wss://api/sessions/stream?session_token=tok%2Fwith%3Dspecials');
-
-    const client = new CsrClient('https://api', 'secret', undefined);
-    await expect(client.openTransport('tok/with=specials')).resolves.toBeDefined();
-  });
+  it.each(['wss://api/sessions/stream?session_token=legacy', 'wss://api/sessions/stream?region=eu&session_token='])(
+    'rejects a configured legacy credential before logging or connecting: %s',
+    async websocketUrl => {
+      const ws = installMockWsServer(websocketUrl);
+      const logs: string[] = [];
+      const client = new CsrClient('https://api', 'secret', undefined, websocketUrl, msg => logs.push(msg));
+
+      await expect(client.openTransport('sensitive-token')).rejects.toThrowError(
+        'WebSocket URL must not include a session token',
+      );
+      expect(logs).toEqual([]);
+      expect(ws.connections).toEqual([]);
+    },
+  );
 });

package/src/uploader/worker/csr-client.ts

@@ -1,6 +1,7 @@
 import type { ClientContext } from '../client-context';
 import type { Client, Transport } from '../types';
 import { WebSocketTransport } from './web-socket-transport';
+import { recordingProtocols } from './websocket-auth';
 
 /**
  * Single Client implementation that talks to the recording backend's REST + WS protocol.
@@ -45,10 +46,18 @@ export class CsrClient implements Client {
 
   async openTransport(sessionToken: string): Promise<Transport> {
     const wsBase = this.websocketUrl ?? `${this.toWsScheme(this.trimSlash(this.apiUrl))}/sessions/stream`;
-    const sep = wsBase.includes('?') ? '&' : '?';
-    const url = `${wsBase}${sep}session_token=${encodeURIComponent(sessionToken)}`;
-    this.log(`WebSocket connect ${url.replace(/session_token=[^&]*/, 'session_token=[REDACTED]')}`);
-    const transport = new WebSocketTransport(url);
+    let parsedUrl: URL;
+    try {
+      parsedUrl = new URL(wsBase);
+    } catch (_error) {
+      throw new Error('Invalid WebSocket URL');
+    }
+    if (parsedUrl.searchParams.has('session_token')) {
+      throw new Error('WebSocket URL must not include a session token');
+    }
+    const protocols = recordingProtocols(sessionToken);
+    this.log(`WebSocket connect ${wsBase}`);
+    const transport = new WebSocketTransport(wsBase, protocols);
     await transport.ready();
     return transport;
   }

package/src/uploader/worker/web-socket-transport.test.ts

@@ -1,12 +1,24 @@
-import { describe, expect, it, vi } from 'vitest';
+import { describe, expect, it, onTestFinished, vi } from 'vitest';
 import { installMockWsServer } from '../../test-utils';
 import { WebSocketTransport } from './web-socket-transport';
 
-const URL = 'ws://localhost:1234/sessions/stream?session_token=abc';
+const URL = 'ws://localhost:1234/sessions/stream';
+const PROTOCOLS = ['recording.v1', 'auth.sensitive-token'];
 
 describe('WebSocketTransport', () => {
   const setup = () => installMockWsServer(URL);
 
+  it('copies and supplies the protocols on the first connection', async () => {
+    const ws = setup();
+    const protocols = [...PROTOCOLS];
+    const t = new WebSocketTransport(URL, protocols);
+    protocols[0] = 'changed-after-construction';
+
+    await expect(t.ready()).resolves.toBeUndefined();
+
+    expect(ws.protocolOffers).toEqual([PROTOCOLS]);
+  });
+
   it('resolves ready() once the server accepts the connection', async () => {
     setup();
     const t = new WebSocketTransport(URL);
@@ -48,8 +60,8 @@ describe('WebSocketTransport', () => {
   });
 
   it('reconnects on a graceful drain (code 1000) and emits state changes', async () => {
-    const { waitForConnection } = setup();
-    const t = new WebSocketTransport(URL);
+    const { protocolOffers, waitForConnection } = setup();
+    const t = new WebSocketTransport(URL, PROTOCOLS);
     const states: boolean[] = [];
     t.onStateChange(({ connected }) => states.push(connected));
     await t.ready();
@@ -61,6 +73,61 @@ describe('WebSocketTransport', () => {
     // First open → no state event (welcome implies connected).
     // Drain → state(false). Reconnect open → state(true).
     await vi.waitFor(() => expect(states).toEqual([false, true]));
+    expect(protocolOffers).toEqual([PROTOCOLS, PROTOCOLS]);
+  });
+
+  it.each([
+    ['no protocol', ''],
+    ['the authentication protocol', PROTOCOLS[1]],
+  ])('rejects readiness and keeps buffered frames when the server selects %s', async (_case, selectedProtocol) => {
+    const { messages } = installMockWsServer(URL, { selectProtocol: () => selectedProtocol });
+    const t = new WebSocketTransport(URL, PROTOCOLS);
+    t.send({ tabId: 'tab-1', eventCounter: 0, data: 'must-not-send' });
+
+    const error = await t.ready().catch((caught: unknown) => caught);
+
+    expect(String(error)).toContain('initial-failed');
+    expect(String(error)).not.toContain(PROTOCOLS[1]);
+    expect(messages).toEqual([]);
+  });
+
+  it('uses the protocols on reconnect and never flushes frames after wrong selection', async () => {
+    const ws = installMockWsServer(URL, {
+      selectProtocol: (_protocols, connectionIndex) => (connectionIndex === 0 ? PROTOCOLS[0] : PROTOCOLS[1]),
+    });
+    const t = new WebSocketTransport(URL, PROTOCOLS);
+    const closeReasons: string[] = [];
+    t.onClose(({ reason }) => closeReasons.push(reason));
+    t.onStateChange(({ connected }) => {
+      if (!connected) {
+        t.send({ tabId: 'tab-1', eventCounter: 0, data: 'must-not-send' });
+      }
+    });
+    await t.ready();
+
+    const first = await ws.waitForConnection();
+    first.close({ code: 1000, reason: 'drain', wasClean: true });
+
+    await vi.waitFor(() => expect(closeReasons).toEqual(['reconnect-failed']));
+    expect(ws.protocolOffers).toEqual([PROTOCOLS, PROTOCOLS]);
+    expect(ws.messages).toEqual([]);
+  });
+
+  it('hides protocol values from WebSocket constructor failures', async () => {
+    const protocolFromBrowserError = PROTOCOLS[1];
+    class ThrowingWebSocket {
+      constructor() {
+        throw new Error(`synthetic constructor failure for ${protocolFromBrowserError}`);
+      }
+    }
+    onTestFinished(() => vi.unstubAllGlobals());
+    vi.stubGlobal('WebSocket', ThrowingWebSocket);
+
+    const t = new WebSocketTransport(URL, PROTOCOLS);
+    const error = await t.ready().catch((caught: unknown) => caught);
+
+    expect(String(error)).toContain('initial-failed');
+    expect(String(error)).not.toContain(protocolFromBrowserError);
   });
 
   it('fires onClose with reason on abrupt close after open', async () => {

package/src/uploader/worker/web-socket-transport.ts

@@ -19,8 +19,10 @@ export class WebSocketTransport implements Transport {
   /** Frames buffered while a (re)connect is in progress. */
   private pending: Frame[] = [];
   private readyPromise: Promise<void>;
+  private readonly protocols: string[];
 
-  constructor(private readonly url: string) {
+  constructor(private readonly url: string, protocols: string[] = []) {
+    this.protocols = [...protocols];
     this.readyPromise = new Promise<void>((resolve, reject) => {
       this.connect(false, resolve, reject);
     });
@@ -56,11 +58,23 @@ export class WebSocketTransport implements Transport {
   }
 
   private connect(isReconnect: boolean, onReady?: () => void, onReadyFail?: (err: Error) => void): void {
-    const ws = new WebSocket(this.url);
+    let ws: WebSocket;
+    try {
+      ws = new WebSocket(this.url, [...this.protocols]);
+    } catch (_error) {
+      this.failConnection(isReconnect, onReadyFail);
+      return;
+    }
     this.ws = ws;
     let opened = false;
 
     ws.onopen = () => {
+      const expectedProtocol = this.protocols[0];
+      if (expectedProtocol !== undefined && ws.protocol !== expectedProtocol) {
+        this.failConnection(isReconnect, onReadyFail);
+        ws.close(1000, 'protocol-mismatch');
+        return;
+      }
       opened = true;
       onReady?.();
       // Emit state on every successful open EXCEPT the very first one (welcome already
@@ -75,20 +89,11 @@ export class WebSocketTransport implements Transport {
     };
 
     ws.onclose = event => {
-      if (this.intentionallyClosed) return;
+      if (this.intentionallyClosed || this.dead) return;
       if (!opened) {
-        // Server rejected the connection before it opened (e.g. unknown session).
-        const stage = isReconnect ? 'reconnect' : 'initial';
-        const reason = `${stage}-failed code=${event.code}`;
-        if (onReadyFail) {
-          // First attempt — surface the failure to whoever is awaiting `ready()` so they
-          // can decide whether to recover (e.g. fall back to a fresh initSession).
-          onReadyFail(new Error(reason));
-          this.dead = true;
-        } else {
-          // Reconnect failed; the consumer is past `ready()` and only learns about it via onClose.
-          this.die(reason);
-        }
+        // Browsers do not expose the HTTP status for a failed WebSocket handshake. Keep
+        // this failure generic and do not infer an authentication result from close 1006.
+        this.failConnection(isReconnect, onReadyFail);
         return;
       }
       // The WS opened and is now closing. Distinguish graceful drain (retry) from app
@@ -106,6 +111,16 @@ export class WebSocketTransport implements Transport {
     };
   }
 
+  private failConnection(isReconnect: boolean, onReadyFail?: (err: Error) => void): void {
+    const reason = isReconnect ? 'reconnect-failed' : 'initial-failed';
+    if (onReadyFail) {
+      this.dead = true;
+      onReadyFail(new Error(reason));
+    } else {
+      this.die(reason);
+    }
+  }
+
   private die(reason: string): void {
     this.dead = true;
     this.onCloseCb?.({ reason });

package/src/uploader/worker/websocket-auth.test.ts

@@ -0,0 +1,29 @@
+import { describe, expect, it } from 'vitest';
+import { recordingProtocols } from './websocket-auth';
+
+describe('recordingProtocols', () => {
+  it('offers the issued token unchanged, including dots, hyphens, and underscores', () => {
+    expect(recordingProtocols('cGF5bG9hZA.c2lnbmF0dXJl_-')).toEqual(['recording.v1', 'auth.cGF5bG9hZA.c2lnbmF0dXJl_-']);
+  });
+
+  it('allows a token at the 4096-character limit', () => {
+    expect(recordingProtocols('a'.repeat(4096))[1]).toHaveLength('auth.'.length + 4096);
+  });
+
+  it('rejects a token longer than 4096 characters without exposing it', () => {
+    const token = `sensitive-${'a'.repeat(4097)}`;
+    expect(() => recordingProtocols(token)).toThrowError('Session token is too long for WebSocket authentication');
+    try {
+      recordingProtocols(token);
+    } catch (error) {
+      expect(String(error)).not.toContain(token);
+    }
+  });
+
+  it.each(['', 'sensitive/token', 'sensitive=token', 'sensitive token', 'tøken-☃', 'sensitive\n'])(
+    'rejects unsupported token characters without exposing the token',
+    token => {
+      expect(() => recordingProtocols(token)).toThrowError('Invalid session token for WebSocket authentication');
+    },
+  );
+});

package/src/uploader/worker/websocket-auth.ts

@@ -0,0 +1,15 @@
+export const RECORDING_PROTOCOL = 'recording.v1';
+
+const AUTH_PROTOCOL_PREFIX = 'auth.';
+const MAX_TOKEN_LENGTH = 4096;
+
+export function recordingProtocols(sessionToken: string): string[] {
+  if (sessionToken.length > MAX_TOKEN_LENGTH) {
+    throw new Error('Session token is too long for WebSocket authentication');
+  }
+  // Issued tokens are unpadded Base64URL parts joined by a dot; dev tokens are UUIDs.
+  if (!sessionToken || /[^A-Za-z0-9._-]/.test(sessionToken)) {
+    throw new Error('Invalid session token for WebSocket authentication');
+  }
+  return [RECORDING_PROTOCOL, `${AUTH_PROTOCOL_PREFIX}${sessionToken}`];
+}

package/src/uploader/worker/worker-script.test.ts

@@ -0,0 +1,205 @@
+import { runInNewContext } from 'node:vm';
+import { describe, expect, it, vi } from 'vitest';
+import { workerScript } from './worker-script';
+
+const API_URL = 'https://api.example';
+const WS_URL = 'wss://api.example/sessions/stream?region=eu';
+const TOKEN = 'worker-marker-token';
+const PROTOCOLS = ['recording.v1', `auth.${TOKEN}`];
+
+interface WorkerMessage {
+  type: string;
+  msg?: string;
+}
+
+interface WebSocketCall {
+  url: string;
+  protocols: string[];
+  socket: ControlledWebSocket;
+}
+
+class ControlledWebSocket {
+  static readonly CONNECTING = 0;
+  static readonly OPEN = 1;
+  static readonly CLOSING = 2;
+  static readonly CLOSED = 3;
+
+  readonly url: string;
+  readonly protocol: string;
+  readyState = ControlledWebSocket.CONNECTING;
+  onopen: (() => void) | null = null;
+  onclose: ((event: { code: number; wasClean: boolean }) => void) | null = null;
+  sent: string[] = [];
+
+  constructor(calls: WebSocketCall[], url: string | URL, protocols: string | string[] = []) {
+    this.url = String(url);
+    const offered = typeof protocols === 'string' ? [protocols] : [...protocols];
+    this.protocol = offered[0] ?? '';
+    calls.push({ url: this.url, protocols: offered, socket: this });
+    queueMicrotask(() => {
+      this.readyState = ControlledWebSocket.OPEN;
+      this.onopen?.();
+    });
+  }
+
+  send(message: string): void {
+    this.sent.push(message);
+  }
+
+  close(code = 1000): void {
+    this.readyState = ControlledWebSocket.CLOSED;
+    this.onclose?.({ code, wasClean: true });
+  }
+
+  serverClose(code = 1000, wasClean = true): void {
+    this.readyState = ControlledWebSocket.CLOSED;
+    this.onclose?.({ code, wasClean });
+  }
+}
+
+function createHarness(
+  mode: 'dedicated' | 'shared',
+  initResult: { sessionId: string; sessionToken: string } = {
+    sessionId: 'worker-session',
+    sessionToken: TOKEN,
+  },
+) {
+  const calls: WebSocketCall[] = [];
+  const received: WorkerMessage[] = [];
+  const fetchCalls: string[] = [];
+  let tabToWorker: ((event: { data: unknown }) => void) | null = null;
+  let started = false;
+
+  class TestWebSocket extends ControlledWebSocket {
+    static readonly CONNECTING = ControlledWebSocket.CONNECTING;
+    static readonly OPEN = ControlledWebSocket.OPEN;
+    static readonly CLOSING = ControlledWebSocket.CLOSING;
+    static readonly CLOSED = ControlledWebSocket.CLOSED;
+
+    constructor(url: string | URL, protocols?: string | string[]) {
+      super(calls, url, protocols);
+    }
+  }
+
+  class TestSharedWorkerGlobalScope {}
+
+  const port = {
+    start: () => {
+      started = true;
+    },
+    postMessage: (message: WorkerMessage) => received.push(message),
+    get onmessage() {
+      return tabToWorker;
+    },
+    set onmessage(callback: ((event: { data: unknown }) => void) | null) {
+      tabToWorker = callback;
+    },
+  };
+
+  const dedicatedSelf = {
+    postMessage: (message: WorkerMessage) => received.push(message),
+    get onmessage() {
+      return tabToWorker;
+    },
+    set onmessage(callback: ((event: { data: unknown }) => void) | null) {
+      tabToWorker = callback;
+    },
+  };
+  const self = mode === 'shared' ? new TestSharedWorkerGlobalScope() : dedicatedSelf;
+
+  runInNewContext(workerScript, {
+    URL,
+    WebSocket: TestWebSocket,
+    clearTimeout,
+    crypto,
+    fetch: async (url: string) => {
+      fetchCalls.push(url);
+      return {
+        ok: true,
+        status: 200,
+        json: async () => initResult,
+      };
+    },
+    queueMicrotask,
+    self,
+    setTimeout,
+    SharedWorkerGlobalScope: mode === 'shared' ? TestSharedWorkerGlobalScope : undefined,
+  });
+
+  if (mode === 'shared') {
+    const shared = self as TestSharedWorkerGlobalScope & {
+      onconnect: (event: { ports: [typeof port] }) => void;
+    };
+    shared.onconnect({ ports: [port] });
+  }
+
+  return {
+    calls,
+    received,
+    fetchCalls,
+    send: (data: unknown) => {
+      if (!tabToWorker) throw new Error('worker message handler is not installed');
+      tabToWorker({ data });
+    },
+    started: () => started,
+  };
+}
+
+describe('generated workerScript', () => {
+  it.each(['dedicated', 'shared'] as const)(
+    'uses header authentication without credential leaks for the %s worker and its reconnect',
+    async mode => {
+      const harness = createHarness(mode);
+      if (mode === 'shared') expect(harness.started()).toBe(true);
+
+      harness.send({
+        type: 'hello',
+        apiUrl: API_URL,
+        websocketUrl: WS_URL,
+        clientSecret: 'client-secret',
+        tabId: 'tab-1',
+        debugLogs: true,
+      });
+      await vi.waitFor(() => expect(harness.received.some(message => message.type === 'welcome')).toBe(true));
+
+      expect(harness.fetchCalls).toEqual([`${API_URL}/v1/sessions:initSession`]);
+      expect(harness.calls[0].url).toBe(WS_URL);
+      expect(harness.calls[0].protocols).toEqual(PROTOCOLS);
+
+      harness.calls[0].socket.serverClose();
+      await vi.waitFor(() => expect(harness.calls).toHaveLength(2));
+      expect(harness.calls[1].url).toBe(WS_URL);
+      expect(harness.calls[1].protocols).toEqual(PROTOCOLS);
+
+      const logs = harness.received.filter(message => message.type === 'log').map(message => message.msg ?? '');
+      expect(logs).toContain('init-session ok sessionId=worker-session');
+      for (const value of [...harness.calls.map(call => call.url), ...logs]) {
+        expect(value).not.toContain(TOKEN);
+      }
+    },
+  );
+
+  it.each(['dedicated', 'shared'] as const)(
+    'rejects a legacy credential without logging it in the %s worker',
+    async mode => {
+      const harness = createHarness(mode);
+
+      harness.send({
+        type: 'hello',
+        apiUrl: API_URL,
+        websocketUrl: `${WS_URL}&session_token=${TOKEN}`,
+        clientSecret: 'client-secret',
+        tabId: 'tab-1',
+        debugLogs: true,
+      });
+      await vi.waitFor(() => expect(harness.received.some(message => message.type === 'dead')).toBe(true));
+
+      expect(harness.calls).toEqual([]);
+      const logs = harness.received.filter(message => message.type === 'log').map(message => message.msg ?? '');
+      expect(logs).toContain('init-session ok sessionId=worker-session');
+      for (const log of logs) {
+        expect(log).not.toContain(TOKEN);
+      }
+    },
+  );
+});

package/src/uploader/worker/worker-script.ts

@@ -1,3 +1,3 @@
 // Generated by scripts/build-worker.mjs at build time. Do not edit.
 // Run `yarn workspace @spotify-confidence/csr-common build:worker` to regenerate.
-export const workerScript: string = "//#region src/uploader/worker/web-socket-transport.ts\n/**\n* WebSocket-backed Transport. Internal retry policy: clean server-initiated close after the\n* first successful open → reconnect and resume; abrupt close (or any close before the first\n* open) → fire `onClose` and stop. Frames received while a (re)connect is in progress are\n* buffered and flushed on open.\n*\n* `ready()` resolves on the first successful open and rejects on close-before-open. Callers\n* should await it before treating the Transport as live, so a failure to open can be caught\n* (e.g. 4404 unknown session) and recovered from.\n*/\nvar WebSocketTransport = class {\n\turl;\n\tws = null;\n\tonCloseCb = null;\n\tonStateChangeCb = null;\n\tintentionallyClosed = false;\n\tdead = false;\n\t/** Frames buffered while a (re)connect is in progress. */\n\tpending = [];\n\treadyPromise;\n\tconstructor(url) {\n\t\tthis.url = url;\n\t\tthis.readyPromise = new Promise((resolve, reject) => {\n\t\t\tthis.connect(false, resolve, reject);\n\t\t});\n\t\tthis.readyPromise.catch(() => {});\n\t}\n\tready() {\n\t\treturn this.readyPromise;\n\t}\n\tsend(frame) {\n\t\tif (this.dead || this.intentionallyClosed) return;\n\t\tif (this.ws?.readyState === WebSocket.OPEN) this.ws.send(JSON.stringify(frame));\n\t\telse this.pending.push(frame);\n\t}\n\tclose(reason = \"transport-close\") {\n\t\tthis.intentionallyClosed = true;\n\t\tthis.ws?.close(1e3, reason);\n\t}\n\tonClose(cb) {\n\t\tthis.onCloseCb = cb;\n\t}\n\tonStateChange(cb) {\n\t\tthis.onStateChangeCb = cb;\n\t}\n\tconnect(isReconnect, onReady, onReadyFail) {\n\t\tconst ws = new WebSocket(this.url);\n\t\tthis.ws = ws;\n\t\tlet opened = false;\n\t\tws.onopen = () => {\n\t\t\topened = true;\n\t\t\tonReady?.();\n\t\t\tif (isReconnect) this.onStateChangeCb?.({ connected: true });\n\t\t\twhile (this.pending.length > 0) {\n\t\t\t\tconst f = this.pending.shift();\n\t\t\t\tws.send(JSON.stringify(f));\n\t\t\t}\n\t\t};\n\t\tws.onclose = (event) => {\n\t\t\tif (this.intentionallyClosed) return;\n\t\t\tif (!opened) {\n\t\t\t\tconst reason = `${isReconnect ? \"reconnect\" : \"initial\"}-failed code=${event.code}`;\n\t\t\t\tif (onReadyFail) {\n\t\t\t\t\tonReadyFail(new Error(reason));\n\t\t\t\t\tthis.dead = true;\n\t\t\t\t} else this.die(reason);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (event.wasClean && (event.code === 1e3 || event.code === 1001)) {\n\t\t\t\tthis.onStateChangeCb?.({ connected: false });\n\t\t\t\tthis.connect(true);\n\t\t\t} else this.die(`close code=${event.code} wasClean=${event.wasClean}`);\n\t\t};\n\t}\n\tdie(reason) {\n\t\tthis.dead = true;\n\t\tthis.onCloseCb?.({ reason });\n\t}\n};\n//#endregion\n//#region src/uploader/worker/csr-client.ts\n/**\n* Single Client implementation that talks to the recording backend's REST + WS protocol.\n* Both dev-server and prod implement the same protocol, so we don't need polymorphism here yet.\n*/\nvar CsrClient = class {\n\tapiUrl;\n\tclientSecret;\n\tcontext;\n\twebsocketUrl;\n\tlog;\n\tforceRecord;\n\tconstructor(apiUrl, clientSecret, context, websocketUrl, log = () => {}, forceRecord) {\n\t\tthis.apiUrl = apiUrl;\n\t\tthis.clientSecret = clientSecret;\n\t\tthis.context = context;\n\t\tthis.websocketUrl = websocketUrl;\n\t\tthis.log = log;\n\t\tthis.forceRecord = forceRecord;\n\t}\n\tasync initSession() {\n\t\tconst url = `${this.trimSlash(this.apiUrl)}/v1/sessions:initSession`;\n\t\tthis.log(`fetch POST ${url}`);\n\t\tconst res = await fetch(url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tbody: JSON.stringify({\n\t\t\t\tclientSecret: this.clientSecret,\n\t\t\t\t...this.context && Object.keys(this.context).length > 0 ? { context: this.context } : {},\n\t\t\t\t...this.forceRecord ? { forceRecord: true } : {}\n\t\t\t})\n\t\t});\n\t\tif (!res.ok) throw new Error(`init-session failed: HTTP ${res.status}`);\n\t\tconst data = await res.json();\n\t\tif (data.skipRecording) return { skipRecording: true };\n\t\tif (!data.sessionId || !data.sessionToken) throw new Error(\"init-session response missing sessionId or sessionToken\");\n\t\treturn {\n\t\t\tsessionId: data.sessionId,\n\t\t\tsessionToken: data.sessionToken\n\t\t};\n\t}\n\tasync openTransport(sessionToken) {\n\t\tconst wsBase = this.websocketUrl ?? `${this.toWsScheme(this.trimSlash(this.apiUrl))}/sessions/stream`;\n\t\tconst url = `${wsBase}${wsBase.includes(\"?\") ? \"&\" : \"?\"}session_token=${encodeURIComponent(sessionToken)}`;\n\t\tthis.log(`WebSocket connect ${url.replace(/session_token=[^&]*/, \"session_token=[REDACTED]\")}`);\n\t\tconst transport = new WebSocketTransport(url);\n\t\tawait transport.ready();\n\t\treturn transport;\n\t}\n\ttrimSlash(s) {\n\t\treturn s.endsWith(\"/\") ? s.slice(0, -1) : s;\n\t}\n\ttoWsScheme(base) {\n\t\tif (base.startsWith(\"https://\")) return `wss://${base.slice(8)}`;\n\t\tif (base.startsWith(\"http://\")) return `ws://${base.slice(7)}`;\n\t\treturn base;\n\t}\n};\n//#endregion\n//#region src/uploader/worker/core.ts\nconst IDLE_GRACE_MS = 5e3;\nlet state = { phase: \"init\" };\nconst ports = [];\nlet idleTimer = null;\nfunction cancelIdleTimer() {\n\tif (idleTimer !== null) {\n\t\tclearTimeout(idleTimer);\n\t\tidleTimer = null;\n\t}\n}\nfunction log(msg) {\n\tfor (const handle of ports) if (handle.debugLogs) handle.port.postMessage({\n\t\ttype: \"log\",\n\t\tmsg\n\t});\n}\n/**\n* The first hello \"locks in\" the session's apiUrl/clientSecret. Any later tab arriving\n* with different values is misconfigured — we reject it rather than silently using the\n* locked values. In SharedWorker mode the `name = hash(clientSecret)` scoping already\n* prevents secret-mismatch from sharing a worker, but this defends against the dedicated\n* path and against future bugs.\n*/\nlet lockedConfig = null;\nfunction registerPort(adapter) {\n\tcancelIdleTimer();\n\tconst handle = {\n\t\tport: adapter,\n\t\thello: null,\n\t\tdebugLogs: false\n\t};\n\tports.push(handle);\n\tadapter.onmessage((data) => {\n\t\thandleMessage(handle, data);\n\t});\n}\nfunction handleMessage(handle, message) {\n\tswitch (message.type) {\n\t\tcase \"hello\":\n\t\t\thandle.hello = message;\n\t\t\thandle.debugLogs = message.debugLogs ?? false;\n\t\t\tif (rejectIfIncompatible(handle)) return;\n\t\t\tif (state.phase !== \"dead\" && state.phase !== \"skipping\") detectDuplicateTab(handle);\n\t\t\tonHello(handle);\n\t\t\treturn;\n\t\tcase \"frame\":\n\t\t\tonFrame(message.frame);\n\t\t\treturn;\n\t\tcase \"bye\":\n\t\t\tonBye(handle);\n\t\t\treturn;\n\t\tdefault: break;\n\t}\n}\n/**\n* Reject hellos whose `apiUrl`/`clientSecret` don't match the values established by the\n* first hello. Returns true if the port was rejected (caller should not continue\n* processing this hello).\n*/\nfunction rejectIfIncompatible(handle) {\n\tif (lockedConfig === null) return false;\n\tconst incoming = handle.hello;\n\tif (incoming.apiUrl === lockedConfig.apiUrl && incoming.websocketUrl === lockedConfig.websocketUrl && incoming.clientSecret === lockedConfig.clientSecret) return false;\n\thandle.port.postMessage({\n\t\ttype: \"dead\",\n\t\treason: \"incompatible-options: apiUrl/websocketUrl/clientSecret differ from the worker session\"\n\t});\n\tconst idx = ports.indexOf(handle);\n\tif (idx >= 0) ports.splice(idx, 1);\n\treturn true;\n}\n/**\n* If another already-connected port has the same `tabId`, this hello is from a duplicate\n* tab (browser \"Duplicate\" command clones sessionStorage). Mint a fresh `tabId` so the two\n* tabs don't collide on the same `(sessionId, tabId)` Recording. The new tabId is returned\n* to the tab in `welcome` so it can update its own state and sessionStorage.\n*/\nfunction detectDuplicateTab(handle) {\n\tconst tabId = handle.hello.tabId;\n\tif (!ports.some((p) => p !== handle && p.hello?.tabId === tabId)) return;\n\tconst fresh = crypto.randomUUID();\n\thandle.newTabId = fresh;\n\thandle.hello.tabId = fresh;\n}\nfunction onHello(handle) {\n\tswitch (state.phase) {\n\t\tcase \"init\":\n\t\t\tlockedConfig = {\n\t\t\t\tapiUrl: handle.hello.apiUrl,\n\t\t\t\twebsocketUrl: handle.hello.websocketUrl,\n\t\t\t\tclientSecret: handle.hello.clientSecret\n\t\t\t};\n\t\t\tlog(`hello received apiUrl=${handle.hello.apiUrl} websocketUrl=${handle.hello.websocketUrl ?? \"(derive)\"} sessionIdHint=${handle.hello.sessionIdHint ?? \"(none)\"}`);\n\t\t\tstate = { phase: \"initializing\" };\n\t\t\tinitializeSession(handle.hello).then(flushPendingWelcomes);\n\t\t\treturn;\n\t\tcase \"initializing\": return;\n\t\tcase \"active\":\n\t\t\tsendActiveWelcome(handle, state.sessionId, state.sessionToken);\n\t\t\treturn;\n\t\tcase \"idle\": {\n\t\t\tconst { client, sessionId, sessionToken } = state;\n\t\t\tstate = { phase: \"initializing\" };\n\t\t\tresumeTransport(client, sessionId, sessionToken).then(flushPendingWelcomes);\n\t\t\treturn;\n\t\t}\n\t\tcase \"skipping\":\n\t\t\tif (handle.hello.forceRecord) {\n\t\t\t\tlog(\"forceRecord set; re-initializing from skipping state\");\n\t\t\t\tstate = { phase: \"initializing\" };\n\t\t\t\tinitializeSession(handle.hello).then(flushPendingWelcomes);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\thandle.port.postMessage({\n\t\t\t\ttype: \"welcome\",\n\t\t\t\tresult: { skipRecording: true }\n\t\t\t});\n\t\t\treturn;\n\t\tcase \"dead\":\n\t\t\thandle.port.postMessage({\n\t\t\t\ttype: \"dead\",\n\t\t\t\treason: state.reason\n\t\t\t});\n\t\t\treturn;\n\t\tdefault: break;\n\t}\n}\nasync function initializeSession(firstHello) {\n\tconst client = new CsrClient(firstHello.apiUrl, firstHello.clientSecret, firstHello.context, firstHello.websocketUrl, log, firstHello.forceRecord);\n\tif (firstHello.sessionIdHint && firstHello.sessionTokenHint) {\n\t\tlog(`adopting sessionIdHint=${firstHello.sessionIdHint}`);\n\t\ttry {\n\t\t\tconst transport = await client.openTransport(firstHello.sessionTokenHint);\n\t\t\twireTransport(transport);\n\t\t\tstate = {\n\t\t\t\tphase: \"active\",\n\t\t\t\tclient,\n\t\t\t\ttransport,\n\t\t\t\tsessionId: firstHello.sessionIdHint,\n\t\t\t\tsessionToken: firstHello.sessionTokenHint\n\t\t\t};\n\t\t\tlog(\"hint adopted; transport open\");\n\t\t\tif (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n\t\t\treturn;\n\t\t} catch (err) {\n\t\t\tlog(`hint rejected (${String(err)}); falling back to fresh init`);\n\t\t}\n\t}\n\tlet result;\n\ttry {\n\t\tresult = await client.initSession();\n\t} catch (err) {\n\t\tlog(`init-session threw: ${String(err)}`);\n\t\ttransitionToDead(`init-session-failed: ${String(err)}`);\n\t\treturn;\n\t}\n\tif (\"skipRecording\" in result) {\n\t\tlog(\"init-session: skipRecording\");\n\t\tstate = { phase: \"skipping\" };\n\t\treturn;\n\t}\n\tlog(`init-session ok sessionId=${result.sessionId}`);\n\tlet transport;\n\ttry {\n\t\ttransport = await client.openTransport(result.sessionToken);\n\t} catch (err) {\n\t\tlog(`openTransport threw: ${String(err)}`);\n\t\ttransitionToDead(`open-transport-failed: ${String(err)}`);\n\t\treturn;\n\t}\n\twireTransport(transport);\n\tlog(\"transport open; session active\");\n\tstate = {\n\t\tphase: \"active\",\n\t\tclient,\n\t\ttransport,\n\t\tsessionId: result.sessionId,\n\t\tsessionToken: result.sessionToken\n\t};\n\tif (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n}\nasync function resumeTransport(client, sessionId, sessionToken) {\n\tlog(\"resuming transport from idle\");\n\tlet transport;\n\ttry {\n\t\ttransport = await client.openTransport(sessionToken);\n\t} catch (err) {\n\t\tlog(`resume-transport threw: ${String(err)}`);\n\t\ttransitionToDead(`resume-transport-failed: ${String(err)}`);\n\t\treturn;\n\t}\n\twireTransport(transport);\n\tlog(\"transport resumed\");\n\tstate = {\n\t\tphase: \"active\",\n\t\tclient,\n\t\ttransport,\n\t\tsessionId,\n\t\tsessionToken\n\t};\n\tif (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n}\nfunction wireTransport(transport) {\n\ttransport.onClose((info) => {\n\t\tif (state.phase !== \"active\") return;\n\t\ttransitionToDead(info.reason);\n\t});\n\ttransport.onStateChange((info) => {\n\t\tif (state.phase !== \"active\") return;\n\t\tfor (const handle of ports) handle.port.postMessage({\n\t\t\ttype: \"state\",\n\t\t\tconnected: info.connected\n\t\t});\n\t});\n}\nfunction transitionToDead(reason) {\n\tstate = {\n\t\tphase: \"dead\",\n\t\treason\n\t};\n\tfor (const handle of ports) handle.port.postMessage({\n\t\ttype: \"dead\",\n\t\treason\n\t});\n}\nfunction flushPendingWelcomes() {\n\tfor (const handle of ports) {\n\t\tif (handle.hello === null) continue;\n\t\tif (state.phase === \"active\") sendActiveWelcome(handle, state.sessionId, state.sessionToken);\n\t\telse if (state.phase === \"skipping\") handle.port.postMessage({\n\t\t\ttype: \"welcome\",\n\t\t\tresult: { skipRecording: true }\n\t\t});\n\t\telse if (state.phase === \"dead\") handle.port.postMessage({\n\t\t\ttype: \"dead\",\n\t\t\treason: state.reason\n\t\t});\n\t}\n}\nfunction sendActiveWelcome(handle, currentSessionId, currentSessionToken) {\n\tconst hint = handle.hello?.sessionIdHint;\n\tconst adopted = hint !== void 0 && hint !== currentSessionId;\n\tconst newTabId = handle.newTabId;\n\thandle.port.postMessage({\n\t\ttype: \"welcome\",\n\t\tresult: {\n\t\t\tsessionId: currentSessionId,\n\t\t\tsessionToken: currentSessionToken\n\t\t},\n\t\tadoptedFromSessionId: adopted ? hint : void 0,\n\t\tnewTabId,\n\t\tresetCounter: adopted || newTabId !== void 0\n\t});\n}\nfunction onFrame(frame) {\n\tif (state.phase !== \"active\") return;\n\tstate.transport.send(frame);\n}\nfunction onBye(handle) {\n\tconst idx = ports.indexOf(handle);\n\tif (idx >= 0) ports.splice(idx, 1);\n\tif (ports.length === 0 && state.phase === \"active\") {\n\t\tlog(`last tab disconnected; closing transport in ${IDLE_GRACE_MS}ms`);\n\t\tidleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n\t}\n}\nfunction enterIdle() {\n\tidleTimer = null;\n\tif (state.phase !== \"active\" || ports.length > 0) return;\n\tlog(\"idle timeout; closing transport\");\n\tstate.transport.close(\"idle\");\n\tstate = {\n\t\tphase: \"idle\",\n\t\tclient: state.client,\n\t\tsessionId: state.sessionId,\n\t\tsessionToken: state.sessionToken\n\t};\n}\n//#endregion\n//#region src/uploader/worker/entry.ts\nconst SharedWorkerScopeCtor = globalThis.SharedWorkerGlobalScope;\nif (typeof SharedWorkerScopeCtor === \"function\" && self instanceof SharedWorkerScopeCtor) self.onconnect = (event) => {\n\tconst port = event.ports[0];\n\tport.start();\n\tregisterPort(adaptMessagePort(port));\n};\nelse registerPort(adaptDedicatedSelf());\nfunction adaptMessagePort(port) {\n\treturn {\n\t\tpostMessage: (message) => port.postMessage(message),\n\t\tonmessage: (cb) => {\n\t\t\tport.onmessage = (e) => cb(e.data);\n\t\t}\n\t};\n}\nfunction adaptDedicatedSelf() {\n\tconst ws = self;\n\treturn {\n\t\tpostMessage: (message) => ws.postMessage(message),\n\t\tonmessage: (cb) => {\n\t\t\tws.onmessage = (e) => cb(e.data);\n\t\t}\n\t};\n}\n//#endregion\n";
+export const workerScript: string = "//#region src/uploader/worker/web-socket-transport.ts\n/**\n* WebSocket-backed Transport. Internal retry policy: clean server-initiated close after the\n* first successful open → reconnect and resume; abrupt close (or any close before the first\n* open) → fire `onClose` and stop. Frames received while a (re)connect is in progress are\n* buffered and flushed on open.\n*\n* `ready()` resolves on the first successful open and rejects on close-before-open. Callers\n* should await it before treating the Transport as live, so a failure to open can be caught\n* (e.g. 4404 unknown session) and recovered from.\n*/\nvar WebSocketTransport = class {\n\turl;\n\tws = null;\n\tonCloseCb = null;\n\tonStateChangeCb = null;\n\tintentionallyClosed = false;\n\tdead = false;\n\t/** Frames buffered while a (re)connect is in progress. */\n\tpending = [];\n\treadyPromise;\n\tprotocols;\n\tconstructor(url, protocols = []) {\n\t\tthis.url = url;\n\t\tthis.protocols = [...protocols];\n\t\tthis.readyPromise = new Promise((resolve, reject) => {\n\t\t\tthis.connect(false, resolve, reject);\n\t\t});\n\t\tthis.readyPromise.catch(() => {});\n\t}\n\tready() {\n\t\treturn this.readyPromise;\n\t}\n\tsend(frame) {\n\t\tif (this.dead || this.intentionallyClosed) return;\n\t\tif (this.ws?.readyState === WebSocket.OPEN) this.ws.send(JSON.stringify(frame));\n\t\telse this.pending.push(frame);\n\t}\n\tclose(reason = \"transport-close\") {\n\t\tthis.intentionallyClosed = true;\n\t\tthis.ws?.close(1e3, reason);\n\t}\n\tonClose(cb) {\n\t\tthis.onCloseCb = cb;\n\t}\n\tonStateChange(cb) {\n\t\tthis.onStateChangeCb = cb;\n\t}\n\tconnect(isReconnect, onReady, onReadyFail) {\n\t\tlet ws;\n\t\ttry {\n\t\t\tws = new WebSocket(this.url, [...this.protocols]);\n\t\t} catch (_error) {\n\t\t\tthis.failConnection(isReconnect, onReadyFail);\n\t\t\treturn;\n\t\t}\n\t\tthis.ws = ws;\n\t\tlet opened = false;\n\t\tws.onopen = () => {\n\t\t\tconst expectedProtocol = this.protocols[0];\n\t\t\tif (expectedProtocol !== void 0 && ws.protocol !== expectedProtocol) {\n\t\t\t\tthis.failConnection(isReconnect, onReadyFail);\n\t\t\t\tws.close(1e3, \"protocol-mismatch\");\n\t\t\t\treturn;\n\t\t\t}\n\t\t\topened = true;\n\t\t\tonReady?.();\n\t\t\tif (isReconnect) this.onStateChangeCb?.({ connected: true });\n\t\t\twhile (this.pending.length > 0) {\n\t\t\t\tconst f = this.pending.shift();\n\t\t\t\tws.send(JSON.stringify(f));\n\t\t\t}\n\t\t};\n\t\tws.onclose = (event) => {\n\t\t\tif (this.intentionallyClosed || this.dead) return;\n\t\t\tif (!opened) {\n\t\t\t\tthis.failConnection(isReconnect, onReadyFail);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (event.wasClean && (event.code === 1e3 || event.code === 1001)) {\n\t\t\t\tthis.onStateChangeCb?.({ connected: false });\n\t\t\t\tthis.connect(true);\n\t\t\t} else this.die(`close code=${event.code} wasClean=${event.wasClean}`);\n\t\t};\n\t}\n\tfailConnection(isReconnect, onReadyFail) {\n\t\tconst reason = isReconnect ? \"reconnect-failed\" : \"initial-failed\";\n\t\tif (onReadyFail) {\n\t\t\tthis.dead = true;\n\t\t\tonReadyFail(new Error(reason));\n\t\t} else this.die(reason);\n\t}\n\tdie(reason) {\n\t\tthis.dead = true;\n\t\tthis.onCloseCb?.({ reason });\n\t}\n};\n//#endregion\n//#region src/uploader/worker/websocket-auth.ts\nconst RECORDING_PROTOCOL = \"recording.v1\";\nconst AUTH_PROTOCOL_PREFIX = \"auth.\";\nconst MAX_TOKEN_LENGTH = 4096;\nfunction recordingProtocols(sessionToken) {\n\tif (sessionToken.length > MAX_TOKEN_LENGTH) throw new Error(\"Session token is too long for WebSocket authentication\");\n\tif (!sessionToken || /[^A-Za-z0-9._-]/.test(sessionToken)) throw new Error(\"Invalid session token for WebSocket authentication\");\n\treturn [RECORDING_PROTOCOL, `${AUTH_PROTOCOL_PREFIX}${sessionToken}`];\n}\n//#endregion\n//#region src/uploader/worker/csr-client.ts\n/**\n* Single Client implementation that talks to the recording backend's REST + WS protocol.\n* Both dev-server and prod implement the same protocol, so we don't need polymorphism here yet.\n*/\nvar CsrClient = class {\n\tapiUrl;\n\tclientSecret;\n\tcontext;\n\twebsocketUrl;\n\tlog;\n\tforceRecord;\n\tconstructor(apiUrl, clientSecret, context, websocketUrl, log = () => {}, forceRecord) {\n\t\tthis.apiUrl = apiUrl;\n\t\tthis.clientSecret = clientSecret;\n\t\tthis.context = context;\n\t\tthis.websocketUrl = websocketUrl;\n\t\tthis.log = log;\n\t\tthis.forceRecord = forceRecord;\n\t}\n\tasync initSession() {\n\t\tconst url = `${this.trimSlash(this.apiUrl)}/v1/sessions:initSession`;\n\t\tthis.log(`fetch POST ${url}`);\n\t\tconst res = await fetch(url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tbody: JSON.stringify({\n\t\t\t\tclientSecret: this.clientSecret,\n\t\t\t\t...this.context && Object.keys(this.context).length > 0 ? { context: this.context } : {},\n\t\t\t\t...this.forceRecord ? { forceRecord: true } : {}\n\t\t\t})\n\t\t});\n\t\tif (!res.ok) throw new Error(`init-session failed: HTTP ${res.status}`);\n\t\tconst data = await res.json();\n\t\tif (data.skipRecording) return { skipRecording: true };\n\t\tif (!data.sessionId || !data.sessionToken) throw new Error(\"init-session response missing sessionId or sessionToken\");\n\t\treturn {\n\t\t\tsessionId: data.sessionId,\n\t\t\tsessionToken: data.sessionToken\n\t\t};\n\t}\n\tasync openTransport(sessionToken) {\n\t\tconst wsBase = this.websocketUrl ?? `${this.toWsScheme(this.trimSlash(this.apiUrl))}/sessions/stream`;\n\t\tlet parsedUrl;\n\t\ttry {\n\t\t\tparsedUrl = new URL(wsBase);\n\t\t} catch (_error) {\n\t\t\tthrow new Error(\"Invalid WebSocket URL\");\n\t\t}\n\t\tif (parsedUrl.searchParams.has(\"session_token\")) throw new Error(\"WebSocket URL must not include a session token\");\n\t\tconst protocols = recordingProtocols(sessionToken);\n\t\tthis.log(`WebSocket connect ${wsBase}`);\n\t\tconst transport = new WebSocketTransport(wsBase, protocols);\n\t\tawait transport.ready();\n\t\treturn transport;\n\t}\n\ttrimSlash(s) {\n\t\treturn s.endsWith(\"/\") ? s.slice(0, -1) : s;\n\t}\n\ttoWsScheme(base) {\n\t\tif (base.startsWith(\"https://\")) return `wss://${base.slice(8)}`;\n\t\tif (base.startsWith(\"http://\")) return `ws://${base.slice(7)}`;\n\t\treturn base;\n\t}\n};\n//#endregion\n//#region src/uploader/worker/core.ts\nconst WORKER_HASH = globalThis.__WORKER_HASH__;\nconst IDLE_GRACE_MS = 5e3;\nlet state = { phase: \"init\" };\nconst ports = [];\nlet idleTimer = null;\nfunction cancelIdleTimer() {\n\tif (idleTimer !== null) {\n\t\tclearTimeout(idleTimer);\n\t\tidleTimer = null;\n\t}\n}\nfunction log(msg) {\n\tfor (const handle of ports) if (handle.debugLogs) handle.port.postMessage({\n\t\ttype: \"log\",\n\t\tmsg\n\t});\n}\n/**\n* The first hello \"locks in\" the session's apiUrl/clientSecret. Any later tab arriving\n* with different values is misconfigured — we reject it rather than silently using the\n* locked values. In SharedWorker mode the `name = hash(clientSecret)` scoping already\n* prevents secret-mismatch from sharing a worker, but this defends against the dedicated\n* path and against future bugs.\n*/\nlet lockedConfig = null;\nfunction registerPort(adapter) {\n\tcancelIdleTimer();\n\tconst handle = {\n\t\tport: adapter,\n\t\thello: null,\n\t\tdebugLogs: false\n\t};\n\tports.push(handle);\n\tadapter.onmessage((data) => {\n\t\thandleMessage(handle, data);\n\t});\n}\nfunction handleMessage(handle, message) {\n\tswitch (message.type) {\n\t\tcase \"hello\":\n\t\t\thandle.hello = message;\n\t\t\thandle.debugLogs = message.debugLogs ?? false;\n\t\t\tif (rejectIfIncompatible(handle)) return;\n\t\t\tif (state.phase !== \"dead\" && state.phase !== \"skipping\") detectDuplicateTab(handle);\n\t\t\tonHello(handle);\n\t\t\treturn;\n\t\tcase \"frame\":\n\t\t\tonFrame(message.frame);\n\t\t\treturn;\n\t\tcase \"bye\":\n\t\t\tonBye(handle);\n\t\t\treturn;\n\t\tdefault: break;\n\t}\n}\n/**\n* Reject hellos whose `apiUrl`/`clientSecret` don't match the values established by the\n* first hello. Returns true if the port was rejected (caller should not continue\n* processing this hello).\n*/\nfunction rejectIfIncompatible(handle) {\n\tif (lockedConfig === null) return false;\n\tconst incoming = handle.hello;\n\tif (incoming.apiUrl === lockedConfig.apiUrl && incoming.websocketUrl === lockedConfig.websocketUrl && incoming.clientSecret === lockedConfig.clientSecret) return false;\n\thandle.port.postMessage({\n\t\ttype: \"dead\",\n\t\treason: \"incompatible-options: apiUrl/websocketUrl/clientSecret differ from the worker session\"\n\t});\n\tconst idx = ports.indexOf(handle);\n\tif (idx >= 0) ports.splice(idx, 1);\n\treturn true;\n}\n/**\n* If another already-connected port has the same `tabId`, this hello is from a duplicate\n* tab (browser \"Duplicate\" command clones sessionStorage). Mint a fresh `tabId` so the two\n* tabs don't collide on the same `(sessionId, tabId)` Recording. The new tabId is returned\n* to the tab in `welcome` so it can update its own state and sessionStorage.\n*/\nfunction detectDuplicateTab(handle) {\n\tconst tabId = handle.hello.tabId;\n\tif (!ports.some((p) => p !== handle && p.hello?.tabId === tabId)) return;\n\tconst fresh = crypto.randomUUID();\n\thandle.newTabId = fresh;\n\thandle.hello.tabId = fresh;\n}\nfunction onHello(handle) {\n\tswitch (state.phase) {\n\t\tcase \"init\":\n\t\t\tlockedConfig = {\n\t\t\t\tapiUrl: handle.hello.apiUrl,\n\t\t\t\twebsocketUrl: handle.hello.websocketUrl,\n\t\t\t\tclientSecret: handle.hello.clientSecret\n\t\t\t};\n\t\t\tlog(`hello received apiUrl=${handle.hello.apiUrl} websocketUrl=${handle.hello.websocketUrl ? \"(configured)\" : \"(derive)\"} sessionIdHint=${handle.hello.sessionIdHint ?? \"(none)\"}`);\n\t\t\tstate = { phase: \"initializing\" };\n\t\t\tinitializeSession(handle.hello).then(flushPendingWelcomes);\n\t\t\treturn;\n\t\tcase \"initializing\": return;\n\t\tcase \"active\":\n\t\t\tsendActiveWelcome(handle, state.sessionId, state.sessionToken);\n\t\t\treturn;\n\t\tcase \"idle\": {\n\t\t\tconst { client, sessionId, sessionToken } = state;\n\t\t\tstate = { phase: \"initializing\" };\n\t\t\tresumeTransport(client, sessionId, sessionToken).then(flushPendingWelcomes);\n\t\t\treturn;\n\t\t}\n\t\tcase \"skipping\":\n\t\t\tif (handle.hello.forceRecord) {\n\t\t\t\tlog(\"forceRecord set; re-initializing from skipping state\");\n\t\t\t\tstate = { phase: \"initializing\" };\n\t\t\t\tinitializeSession(handle.hello).then(flushPendingWelcomes);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\thandle.port.postMessage({\n\t\t\t\ttype: \"welcome\",\n\t\t\t\tresult: { skipRecording: true },\n\t\t\t\tworkerHash: WORKER_HASH\n\t\t\t});\n\t\t\treturn;\n\t\tcase \"dead\":\n\t\t\thandle.port.postMessage({\n\t\t\t\ttype: \"dead\",\n\t\t\t\treason: state.reason\n\t\t\t});\n\t\t\treturn;\n\t\tdefault: break;\n\t}\n}\nasync function initializeSession(firstHello) {\n\tconst client = new CsrClient(firstHello.apiUrl, firstHello.clientSecret, firstHello.context, firstHello.websocketUrl, log, firstHello.forceRecord);\n\tif (firstHello.sessionIdHint && firstHello.sessionTokenHint) {\n\t\tlog(`adopting sessionIdHint=${firstHello.sessionIdHint}`);\n\t\ttry {\n\t\t\tconst transport = await client.openTransport(firstHello.sessionTokenHint);\n\t\t\twireTransport(transport);\n\t\t\tstate = {\n\t\t\t\tphase: \"active\",\n\t\t\t\tclient,\n\t\t\t\ttransport,\n\t\t\t\tsessionId: firstHello.sessionIdHint,\n\t\t\t\tsessionToken: firstHello.sessionTokenHint\n\t\t\t};\n\t\t\tlog(\"hint adopted; transport open\");\n\t\t\tif (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n\t\t\treturn;\n\t\t} catch (err) {\n\t\t\tlog(`hint rejected (${String(err)}); falling back to fresh init`);\n\t\t}\n\t}\n\tlet result;\n\ttry {\n\t\tresult = await client.initSession();\n\t} catch (err) {\n\t\tlog(`init-session threw: ${String(err)}`);\n\t\ttransitionToDead(`init-session-failed: ${String(err)}`);\n\t\treturn;\n\t}\n\tif (\"skipRecording\" in result) {\n\t\tlog(\"init-session: skipRecording\");\n\t\tstate = { phase: \"skipping\" };\n\t\treturn;\n\t}\n\tlog(`init-session ok sessionId=${result.sessionId}`);\n\tlet transport;\n\ttry {\n\t\ttransport = await client.openTransport(result.sessionToken);\n\t} catch (err) {\n\t\tlog(`openTransport threw: ${String(err)}`);\n\t\ttransitionToDead(`open-transport-failed: ${String(err)}`);\n\t\treturn;\n\t}\n\twireTransport(transport);\n\tlog(\"transport open; session active\");\n\tstate = {\n\t\tphase: \"active\",\n\t\tclient,\n\t\ttransport,\n\t\tsessionId: result.sessionId,\n\t\tsessionToken: result.sessionToken\n\t};\n\tif (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n}\nasync function resumeTransport(client, sessionId, sessionToken) {\n\tlog(\"resuming transport from idle\");\n\tlet transport;\n\ttry {\n\t\ttransport = await client.openTransport(sessionToken);\n\t} catch (err) {\n\t\tlog(`resume-transport threw: ${String(err)}`);\n\t\ttransitionToDead(`resume-transport-failed: ${String(err)}`);\n\t\treturn;\n\t}\n\twireTransport(transport);\n\tlog(\"transport resumed\");\n\tstate = {\n\t\tphase: \"active\",\n\t\tclient,\n\t\ttransport,\n\t\tsessionId,\n\t\tsessionToken\n\t};\n\tif (ports.length === 0) idleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n}\nfunction wireTransport(transport) {\n\ttransport.onClose((info) => {\n\t\tif (state.phase !== \"active\") return;\n\t\ttransitionToDead(info.reason);\n\t});\n\ttransport.onStateChange((info) => {\n\t\tif (state.phase !== \"active\") return;\n\t\tfor (const handle of ports) handle.port.postMessage({\n\t\t\ttype: \"state\",\n\t\t\tconnected: info.connected\n\t\t});\n\t});\n}\nfunction transitionToDead(reason) {\n\tstate = {\n\t\tphase: \"dead\",\n\t\treason\n\t};\n\tfor (const handle of ports) handle.port.postMessage({\n\t\ttype: \"dead\",\n\t\treason\n\t});\n}\nfunction flushPendingWelcomes() {\n\tfor (const handle of ports) {\n\t\tif (handle.hello === null) continue;\n\t\tif (state.phase === \"active\") sendActiveWelcome(handle, state.sessionId, state.sessionToken);\n\t\telse if (state.phase === \"skipping\") handle.port.postMessage({\n\t\t\ttype: \"welcome\",\n\t\t\tresult: { skipRecording: true },\n\t\t\tworkerHash: WORKER_HASH\n\t\t});\n\t\telse if (state.phase === \"dead\") handle.port.postMessage({\n\t\t\ttype: \"dead\",\n\t\t\treason: state.reason\n\t\t});\n\t}\n}\nfunction sendActiveWelcome(handle, currentSessionId, currentSessionToken) {\n\tconst hint = handle.hello?.sessionIdHint;\n\tconst adopted = hint !== void 0 && hint !== currentSessionId;\n\tconst newTabId = handle.newTabId;\n\thandle.port.postMessage({\n\t\ttype: \"welcome\",\n\t\tresult: {\n\t\t\tsessionId: currentSessionId,\n\t\t\tsessionToken: currentSessionToken\n\t\t},\n\t\tworkerHash: WORKER_HASH,\n\t\tadoptedFromSessionId: adopted ? hint : void 0,\n\t\tnewTabId,\n\t\tresetCounter: adopted || newTabId !== void 0\n\t});\n}\nfunction onFrame(frame) {\n\tif (state.phase !== \"active\") return;\n\tstate.transport.send(frame);\n}\nfunction onBye(handle) {\n\tconst idx = ports.indexOf(handle);\n\tif (idx >= 0) ports.splice(idx, 1);\n\tif (ports.length === 0 && state.phase === \"active\") {\n\t\tlog(`last tab disconnected; closing transport in ${IDLE_GRACE_MS}ms`);\n\t\tidleTimer = setTimeout(enterIdle, IDLE_GRACE_MS);\n\t}\n}\nfunction enterIdle() {\n\tidleTimer = null;\n\tif (state.phase !== \"active\" || ports.length > 0) return;\n\tlog(\"idle timeout; closing transport\");\n\tstate.transport.close(\"idle\");\n\tstate = {\n\t\tphase: \"idle\",\n\t\tclient: state.client,\n\t\tsessionId: state.sessionId,\n\t\tsessionToken: state.sessionToken\n\t};\n}\n//#endregion\n//#region src/uploader/worker/entry.ts\nconst SharedWorkerScopeCtor = globalThis.SharedWorkerGlobalScope;\nif (typeof SharedWorkerScopeCtor === \"function\" && self instanceof SharedWorkerScopeCtor) self.onconnect = (event) => {\n\tconst port = event.ports[0];\n\tport.start();\n\tregisterPort(adaptMessagePort(port));\n};\nelse registerPort(adaptDedicatedSelf());\nfunction adaptMessagePort(port) {\n\treturn {\n\t\tpostMessage: (message) => port.postMessage(message),\n\t\tonmessage: (cb) => {\n\t\t\tport.onmessage = (e) => cb(e.data);\n\t\t}\n\t};\n}\nfunction adaptDedicatedSelf() {\n\tconst ws = self;\n\treturn {\n\t\tpostMessage: (message) => ws.postMessage(message),\n\t\tonmessage: (cb) => {\n\t\t\tws.onmessage = (e) => cb(e.data);\n\t\t}\n\t};\n}\n//#endregion\n";

package/src/uploader/worker-hash.ts

@@ -0,0 +1,2 @@
+// Generated — do not edit.
+export const WORKER_HASH = '1774b236fa1eb46a';

package/src/url.ts

@@ -1,3 +1,8 @@
+/** Remove query strings and fragments, including from relative or malformed URLs. */
+export function stripUrlQueryAndHash(url: string): string {
+  return url.split(/[?#]/, 1)[0];
+}
+
 /**
  * Extract only the pathname from a URL, stripping origin, query string, and
  * hash. Used across recorder and analyzer to avoid capturing PII in route data.