diff --git a/.changeset/config.json b/.changeset/config.json
index 2be13d4..086dd3a 100644
--- a/.changeset/config.json
+++ b/.changeset/config.json
@@ -1,11 +1,28 @@
 {
-  "$schema": "https://unpkg.com/@changesets/config@3.1.1/schema.json",
+  "$schema": "https://unpkg.com/@changesets/config@3.1.4/schema.json",
   "changelog": "@changesets/cli/changelog",
   "commit": false,
-  "fixed": [],
+  "fixed": [
+    [
+      "@webblackbox/cdp-router",
+      "@webblackbox/extension",
+      "@webblackbox/mcp-server",
+      "@webblackbox/pipeline",
+      "@webblackbox/player",
+      "@webblackbox/player-sdk",
+      "@webblackbox/protocol",
+      "@webblackbox/recorder",
+      "@webblackbox/share-server",
+      "webblackbox"
+    ]
+  ],
   "linked": [],
   "access": "public",
   "baseBranch": "main",
   "updateInternalDependencies": "patch",
-  "ignore": []
+  "ignore": [],
+  "privatePackages": {
+    "version": true,
+    "tag": false
+  }
 }
diff --git a/.github/workflows/changesets.yml b/.github/workflows/changesets.yml
index 4d67bd7..d8c3642 100644
--- a/.github/workflows/changesets.yml
+++ b/.github/workflows/changesets.yml
@@ -19,15 +19,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 22
           cache: pnpm
@@ -36,7 +36,7 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Create or update version PR
-        uses: changesets/action@v1
+        uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0
         with:
           version: pnpm version-packages
           title: Version Packages
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 155b32a..94c8f4b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,13 +16,13 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 22
           cache: pnpm
@@ -30,6 +30,9 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Dependency audit
+        run: pnpm audit --audit-level=high
+
       - name: Format Check
         run: pnpm format:check
 
@@ -39,6 +42,9 @@ jobs:
       - name: Typecheck
         run: pnpm typecheck
 
+      - name: API Documentation Drift Check
+        run: pnpm docs:api:check
+
       - name: Test
         run: pnpm test
 
@@ -46,7 +52,7 @@ jobs:
         run: pnpm bench:ci
 
       - name: Upload Benchmark Report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         if: always()
         with:
           name: benchmark-report
@@ -94,13 +100,13 @@ jobs:
             needsChrome: true
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 22
           cache: pnpm
@@ -109,7 +115,7 @@ jobs:
         if: ${{ matrix.needsChrome }}
         timeout-minutes: 5
         id: setup-chrome
-        uses: browser-actions/setup-chrome@v2
+        uses: browser-actions/setup-chrome@2e1d749697dd1612b833dba4a722266286fbefcd # v2.1.2
         with:
           chrome-version: stable
           install-dependencies: true
diff --git a/.github/workflows/release-assets.yml b/.github/workflows/release-assets.yml
index a93001d..7353c87 100644
--- a/.github/workflows/release-assets.yml
+++ b/.github/workflows/release-assets.yml
@@ -11,26 +11,83 @@ on:
         required: true
         type: string
 
-permissions:
-  contents: write
+permissions: {}
+
+concurrency:
+  group: release-assets-stable
+  queue: max
+  cancel-in-progress: false
 
 jobs:
-  chrome-extension:
+  verify-release:
     runs-on: ubuntu-latest
+    outputs:
+      verified_sha: ${{ steps.verified_source.outputs.sha }}
+    permissions:
+      actions: read
+      contents: read
     env:
       RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.event.release.tag_name }}
     steps:
       - name: Checkout released ref
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.event.release.tag_name }}
 
+      - name: Setup Node
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: 22
+
+      - name: Verify immutable release source
+        run: |
+          git fetch --force --tags origin main:refs/remotes/origin/main
+          node scripts/verify-release-ref.mjs "$RELEASE_TAG" origin/main
+
+      - name: Verify successful CI for release commit
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          release_sha=$(git rev-parse HEAD)
+          successful_runs=$(gh run list \
+            --repo "$GITHUB_REPOSITORY" \
+            --workflow ci.yml \
+            --commit "$release_sha" \
+            --branch main \
+            --event push \
+            --status success \
+            --limit 1 \
+            --json databaseId \
+            --jq 'length')
+          if [ "$successful_runs" -ne 1 ]; then
+            echo "No successful CI workflow found for $release_sha." >&2
+            exit 1
+          fi
+
+      - name: Export verified release commit
+        id: verified_source
+        run: echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
+
+  chrome-extension:
+    runs-on: ubuntu-latest
+    needs: verify-release
+    permissions:
+      contents: write
+    env:
+      RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.event.release.tag_name }}
+    steps:
+      - name: Checkout verified release commit
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          fetch-depth: 0
+          ref: ${{ needs.verify-release.outputs.verified_sha }}
+
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 22
           cache: pnpm
@@ -38,13 +95,16 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Package Chrome extension
+      - name: Package and verify store-safe Chrome extension
         run: pnpm --filter @webblackbox/extension package:chrome
 
       - name: Resolve Chrome extension archive
         id: archive
         run: |
-          archive_path=$(ls -t apps/extension/dist/*-chrome.zip | head -n 1)
+          archive_path=$(find apps/extension/dist -maxdepth 1 -type f \
+            -name 'webblackbox-*-chrome.zip' \
+            ! -name '*-enterprise-chrome.zip' \
+            -print | head -n 1)
           if [ -z "$archive_path" ]; then
             echo "Could not find packaged Chrome extension archive." >&2
             exit 1
@@ -76,21 +136,24 @@ jobs:
 
   player-pages:
     runs-on: ubuntu-latest
+    needs: verify-release
+    permissions:
+      contents: write
     env:
       RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.event.release.tag_name }}
       PLAYER_SITE_URL: https://webllm.github.io/webblackbox/
     steps:
-      - name: Checkout released ref
-        uses: actions/checkout@v4
+      - name: Checkout verified release commit
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
-          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.event.release.tag_name }}
+          ref: ${{ needs.verify-release.outputs.verified_sha }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 22
           cache: pnpm
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 220de57..4773d7b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,59 +6,93 @@ on:
       - published
   workflow_dispatch:
     inputs:
-      ref:
-        description: Git ref, tag, or SHA to publish from (defaults to the selected branch/ref)
-        required: false
+      tag:
+        description: Exact semantic version tag to publish (for example v1.2.3)
+        required: true
         type: string
 
 permissions:
+  actions: read
   contents: read
   id-token: write
 
 concurrency:
-  group: release-${{ github.event_name == 'workflow_dispatch' && (inputs.ref || github.ref) || github.event.release.tag_name }}
+  group: release-stable-publish
+  queue: max
   cancel-in-progress: false
 
 jobs:
   publish:
     runs-on: ubuntu-latest
     timeout-minutes: 20
+    env:
+      RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.event.release.tag_name }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
-          ref: ${{ github.event_name == 'workflow_dispatch' && (inputs.ref || github.ref) || github.event.release.tag_name }}
+          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.event.release.tag_name }}
+
+      - name: Verify immutable release source
+        run: |
+          git fetch --force --tags origin main:refs/remotes/origin/main
+          node scripts/verify-release-ref.mjs "$RELEASE_TAG" origin/main
+
+      - name: Verify successful CI for release commit
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          release_sha=$(git rev-parse HEAD)
+          successful_runs=$(gh run list \
+            --repo "$GITHUB_REPOSITORY" \
+            --workflow ci.yml \
+            --commit "$release_sha" \
+            --branch main \
+            --event push \
+            --status success \
+            --limit 1 \
+            --json databaseId \
+            --jq 'length')
+          if [ "$successful_runs" -ne 1 ]; then
+            echo "No successful CI workflow found for $release_sha." >&2
+            exit 1
+          fi
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org
 
       - name: Ensure npm supports trusted publishing
-        run: npm install -g npm@latest
+        run: npm install -g npm@12.0.0
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Production dependency audit
+        run: pnpm audit --prod --audit-level=high
+
+      - name: Verify source quality
+        run: |
+          pnpm format:check
+          pnpm lint
+          pnpm typecheck
+          pnpm docs:api:check
+          pnpm test
+
       - name: Build workspace
         run: pnpm build
 
+      - name: Verify bundle budgets
+        run: pnpm bundle:size
+
       - name: Verify publish artifacts
-        run: >
-          pnpm
-          --filter @webblackbox/mcp-server
-          --filter @webblackbox/cdp-router
-          --filter @webblackbox/pipeline
-          --filter @webblackbox/player-sdk
-          --filter @webblackbox/protocol
-          --filter @webblackbox/recorder
-          --filter webblackbox
-          exec npm pack --dry-run --json
+        run: pnpm release:verify-artifacts
 
       - name: Publish packages to npm
         env:
@@ -71,5 +105,5 @@ jobs:
             echo "## NPM Publish Triggered"
             echo ""
             echo "- Source: \`${{ github.event_name }}\`"
-            echo "- Ref: \`${{ github.event_name == 'workflow_dispatch' && (inputs.ref || github.ref) || github.event.release.tag_name }}\`"
+            echo "- Ref: \`$RELEASE_TAG\`"
           } >> "$GITHUB_STEP_SUMMARY"
diff --git a/.npmrc b/.npmrc
deleted file mode 100644
index ef60a1b..0000000
--- a/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-auto-install-peers=true
-strict-peer-dependencies=false
-shared-workspace-lockfile=true
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 64eb82b..dce80c7 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -5,7 +5,7 @@ This guide is for working on the monorepo itself: building apps locally, running
 ## Prerequisites
 
 - Node.js `>= 22.0.0`
-- pnpm `10.28.1`
+- pnpm `11.13.1`
 
 ## Setup
 
@@ -45,18 +45,18 @@ webblackbox/
 
 ## Common Commands
 
-| Command                 | What it does                                         |
-| ----------------------- | ---------------------------------------------------- |
-| `pnpm build`            | Build the whole workspace                            |
-| `pnpm dev`              | Run workspace watch tasks                            |
-| `pnpm test`             | Run workspace tests                                  |
-| `pnpm lint`             | Run ESLint across packages                           |
-| `pnpm typecheck`        | Run TypeScript checks                                |
-| `pnpm format`           | Format the repo with Prettier                        |
-| `pnpm format:check`     | Verify formatting                                    |
-| `pnpm changeset`        | Create a release changeset                           |
-| `pnpm version-packages` | Apply changesets and sync extension manifest version |
-| `pnpm release`          | Publish npm packages via Changesets                  |
+| Command                 | What it does                                 |
+| ----------------------- | -------------------------------------------- |
+| `pnpm build`            | Build the whole workspace                    |
+| `pnpm dev`              | Run workspace watch tasks                    |
+| `pnpm test`             | Run workspace tests                          |
+| `pnpm lint`             | Run ESLint across packages                   |
+| `pnpm typecheck`        | Run TypeScript checks                        |
+| `pnpm format`           | Format the repo with Prettier                |
+| `pnpm format:check`     | Verify formatting                            |
+| `pnpm changeset`        | Create a release changeset                   |
+| `pnpm version-packages` | Apply the lockstep workspace release version |
+| `pnpm release`          | Publish npm packages via Changesets          |
 
 Use `pnpm --filter <package-name> <script>` for package-specific work.
 
@@ -94,6 +94,8 @@ pnpm --filter @webblackbox/extension e2e:perf:lite
 pnpm --filter @webblackbox/extension package:chrome
 ```
 
+`package:chrome` is the release, store-safe Chrome Web Store artifact. Use the explicitly separate `package:chrome:enterprise` command only when a broader dev/enterprise permission package is required; never upload that archive to the Web Store.
+
 ## Working on the Player
 
 ```bash
@@ -151,6 +153,7 @@ pnpm release
 
 Notes:
 
+- Every public package plus the Extension, Player, and Share Server is one Changesets fixed group. A release changeset therefore advances every shipped surface to the same version, including private app manifests used to build release assets.
 - `version-packages` also syncs the Chrome extension manifest version from `apps/extension/package.json`.
 - Release automation publishes npm packages, uploads the Chrome extension ZIP to GitHub Releases, and deploys the hosted Player to GitHub Pages.
 
diff --git a/README.md b/README.md
index 6a33466..146a81f 100644
--- a/README.md
+++ b/README.md
@@ -87,7 +87,7 @@ Full SDK details are in [packages/webblackbox/README.md](packages/webblackbox/RE
 
 ## What It Captures
 
-WebBlackbox currently records 57 event types across 13 categories, including:
+WebBlackbox currently records 62 event types across 12 categories, including:
 
 - User input and navigation
 - Console logs and runtime errors
diff --git a/apps/extension/CHANGELOG.md b/apps/extension/CHANGELOG.md
index 2f13afe..cd76fa8 100644
--- a/apps/extension/CHANGELOG.md
+++ b/apps/extension/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @webblackbox/extension
 
+## 0.7.0
+
+### Minor Changes
+
+- b3cfda9: Harden the MV3 capture lifecycle with exact document-bound authorization, capability-protected Lite
+  injection, transactional start and restore, acknowledged event delivery, bounded stop drain, and
+  fail-closed recovery across navigation, service-worker restart, and offscreen reconnects.
+
+### Patch Changes
+
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+  - webblackbox@0.7.0
+  - @webblackbox/protocol@0.7.0
+  - @webblackbox/pipeline@0.7.0
+  - @webblackbox/recorder@0.7.0
+  - @webblackbox/cdp-router@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/apps/extension/README.md b/apps/extension/README.md
index 84de8b7..7279b04 100644
--- a/apps/extension/README.md
+++ b/apps/extension/README.md
@@ -1,6 +1,6 @@
 # WebBlackbox Chrome Extension
 
-Chrome Manifest V3 extension that continuously records web session data using the Chrome DevTools Protocol and content script injection.
+Chrome Manifest V3 extension that records web sessions through scope-gated Lite page instrumentation or, in the explicit development/enterprise profile, the Chrome DevTools Protocol.
 
 ## Architecture
 
@@ -39,7 +39,7 @@ The extension consists of multiple main components:
 
 #### Content Script (`content.js`)
 
-- Injected at `document_start` on all URLs
+- Programmatically injected only into exact documents authorized for the user-started capture
 - Captures user interaction events (click, input, scroll, keydown, etc.)
 - Captures DOM mutations via MutationObserver
 - Takes DOM snapshots at configured intervals
@@ -48,15 +48,17 @@ The extension consists of multiple main components:
 
 #### Injected Script (`injected.js`)
 
-- Web-accessible resource injected into the page context
+- Dynamically addressed web-accessible ESM module bootstrapped in the page context through an exact service-worker operation
 - Intercepts console API calls (log, warn, error, etc.)
 - Monitors storage operations (localStorage, sessionStorage, IndexedDB, cookies)
-- Communicates with the content script via `window.postMessage`
+- Sends bounded, untrusted observation batches to the content script via `window.postMessage`; activation and drain control remain on the extension-owned direct module path
 
 #### Offscreen Document
 
 - Runs the `FlightRecorderPipeline` for event processing
 - Handles chunking, compression, indexing, and blob storage
+- Encrypts event chunks and blobs before IndexedDB persistence with a non-extractable, purpose-specific AES-GCM key that survives offscreen/service-worker restarts
+- Purges the legacy plaintext cache (or an encrypted cache whose managed key was lost) instead of reopening unverifiable payloads
 - Generates `.webblackbox` ZIP archives on export
 - Isolated from the main page for performance
 
@@ -88,16 +90,33 @@ The extension consists of multiple main components:
 
 ## Permissions
 
-| Permission   | Purpose                                          |
-| ------------ | ------------------------------------------------ |
-| `debugger`   | CDP access for network, runtime, and page events |
-| `tabs`       | Tab information and URL access                   |
-| `scripting`  | Content script injection                         |
-| `storage`    | Extension settings and session data              |
-| `offscreen`  | Pipeline processing in background                |
-| `webRequest` | Network request monitoring                       |
-| `downloads`  | Archive file download                            |
-| `<all_urls>` | Content script injection on any page             |
+The Chrome Web Store package uses the `store-safe` profile:
+
+| Permission      | Purpose                                                         |
+| --------------- | --------------------------------------------------------------- |
+| `activeTab`     | Temporary page access after the user starts recording           |
+| `alarms`        | Restart-safe local session retention cleanup                    |
+| `scripting`     | Programmatic capture injection after that user gesture          |
+| `storage`       | Extension settings and session data                             |
+| `offscreen`     | Pipeline processing in the background                           |
+| `downloads`     | Archive file download                                           |
+| `webNavigation` | Exact frame/document navigation identity and lifecycle tracking |
+
+The separately packaged development/enterprise profile adds the following broader capabilities and is not the Web Store artifact:
+
+| Permission      | Purpose                                                         |
+| --------------- | --------------------------------------------------------------- |
+| `debugger`      | CDP access for network, runtime, and page events                |
+| `alarms`        | Restart-safe local session retention cleanup                    |
+| `tabs`          | Tab information and URL access                                  |
+| `scripting`     | Content script injection                                        |
+| `storage`       | Extension settings and session data                             |
+| `offscreen`     | Pipeline processing in background                               |
+| `tabCapture`    | User-initiated tab media capture                                |
+| `webRequest`    | Network request monitoring                                      |
+| `downloads`     | Archive file download                                           |
+| `webNavigation` | Exact frame/document navigation identity and lifecycle tracking |
+| `<all_urls>`    | Content script injection on any page                            |
 
 ## Keyboard Shortcuts
 
@@ -115,22 +134,26 @@ cd apps/extension
 pnpm build
 pnpm build:release
 pnpm package:chrome
+pnpm package:chrome:enterprise
 pnpm verify
 ```
 
-The build output is in the `build/` directory. The manifest is generated from `apps/extension/package.json` during the build, so there is no source `public/manifest.json` to keep in sync. Local `pnpm build` runs keep the stable development `key`, while `pnpm build:release` generates an unpacked release build without that `key` so you can do store-parity checks before upload. `pnpm package:chrome` rebuilds the extension once, validates the generated manifest, and creates a Chrome Web Store upload ZIP in `dist/` with the release manifest. Packaging is pure Node.js, so it does not depend on a system `zip` binary being installed. `pnpm verify` runs the extension's lint, typecheck, test, and packaging pipeline in one command. You can override the ZIP path with `node scripts/build-extension.mjs --package --output ./dist/custom-name.zip`.
+The build output is in the `build/` directory. The manifest is generated from `apps/extension/package.json` during the build, so there is no source `public/manifest.json` to keep in sync. Local `pnpm build` runs keep the stable development `key`, while `pnpm build:release` generates an unpacked, keyless `store-safe` build for store-parity checks. `pnpm package:chrome` always rebuilds with `--release --profile store-safe`, writes `dist/webblackbox-<version>-chrome.zip`, then reopens the ZIP and validates its release manifest. That Web Store artifact contains no `debugger`, `tabs`, `webRequest`, or `tabCapture` permission, no persistent host permissions, and no static content script registration. Tab recording remains available only in the explicit enterprise profile because it also requires that profile's CDP capability.
+
+The broader profile is an explicit opt-in: `pnpm package:chrome:enterprise` writes `dist/webblackbox-<version>-enterprise-chrome.zip` with `--profile dev`. Do not upload that archive to the Chrome Web Store. The `pnpm package:*` commands are the source-hermetic release entrypoints because they clean and compile before packaging. A lower-level `node scripts/build-extension.mjs --package` invocation validates and packages an already compiled, closed-set `build/` directory; it defaults to `store-safe`, rejects unexpected residual files, and requires `--profile dev` for the broader archive. Packaging is pure Node.js, so it does not depend on a system `zip` binary. `pnpm verify` runs lint, typecheck, tests, and the store-safe packaging pipeline. You can override the ZIP path with `node scripts/build-extension.mjs --package --output ./dist/custom-name.zip`.
 
 Build entries:
 
-| Entry          | Output               | Description          |
-| -------------- | -------------------- | -------------------- |
-| `sw.ts`        | `build/sw.js`        | Service worker       |
-| `content.ts`   | `build/content.js`   | Content script       |
-| `offscreen.ts` | `build/offscreen.js` | Offscreen document   |
-| `popup.ts`     | `build/popup.js`     | Popup UI             |
-| `options.ts`   | `build/options.js`   | Options page         |
-| `sessions.ts`  | `build/sessions.js`  | Sessions page        |
-| `injected.ts`  | `build/injected.js`  | Injected page script |
+| Entry                          | Output                   | Description                      |
+| ------------------------------ | ------------------------ | -------------------------------- |
+| `src/sw/index.ts`              | `build/sw.js`            | Service worker                   |
+| `src/content/index.ts`         | `build/content.js`       | Isolated-world content runtime   |
+| `src/content/content-agent.ts` | `build/content-agent.js` | Scope-checking content bootstrap |
+| `src/offscreen/index.ts`       | `build/offscreen.js`     | Offscreen document               |
+| `src/popup/index.ts`           | `build/popup.js`         | Popup UI                         |
+| `src/options/index.ts`         | `build/options.js`       | Options page                     |
+| `src/sessions/index.ts`        | `build/sessions.js`      | Sessions page                    |
+| `src/injected/index.ts`        | `build/injected.js`      | Direct MAIN-world ESM controller |
 
 ## E2E
 
@@ -155,14 +178,14 @@ Build entries:
 ### Recording
 
 1. User clicks **Start** in popup
-2. Service worker creates session, attaches CDP debugger, initializes recorder
-3. `content.js` is already present as a manifest `document_start` content script across frames
-4. Injected content capture begins streaming user events and DOM summaries
-5. In `lite` mode, injected script captures console/network/storage events
-6. CDP provides network, runtime exception, and page navigation events
+2. Service worker creates the session and initializes the recorder/pipeline, attaching CDP only when the selected profile and installed capability require it
+3. Service worker authorizes and programmatically injects `content.js` into each exact in-scope document
+4. In `lite` mode, the worker seeds a per-document capability and bootstraps the dynamic MAIN-world ESM module before activation commits
+5. Content capture streams user events and DOM summaries; the MAIN-world module adds bounded console/network/storage observations and retains a bounded replay tail for exact stop drain
+6. In capable development/enterprise installs, CDP provides network, runtime exception, page-navigation, and requested visual events
 7. Service worker normalizes all events through the recorder
-8. Normalized events are batched and sent to the offscreen pipeline
-9. Pipeline chunks, indexes, and stores events
+8. Delivery-aware batches are committed by the offscreen pipeline before the content sender is acknowledged
+9. Pipeline chunks, indexes, encrypts, and stores events
 
 ### Export
 
@@ -192,7 +215,7 @@ The extension uses `@webblackbox/protocol`'s `RecorderConfig` for all settings.
   - page-side response-body sampling is disabled (`bodyCaptureMaxBytes=0`)
   - idle screenshots are disabled by default; enable `screenshotIdleMs` explicitly when needed
   - initial DOM/storage/screenshot capture is deferred briefly after start so the tab does not stall at record activation
-  - hot listeners, observers, and page-side capture loops stay inactive until recording is enabled, even though `content.js` is loaded at `document_start`
+  - content bootstrap is injected only after authorization, and hot listeners, observers, and page-side capture loops remain inactive until the exact activation commits
 - `full`: same perf-freeze disable + stricter sampling/body-capture limits
   - page-side heavy capture loops (SnapDOM screenshots, outerHTML snapshots, storage snapshots) are skipped to reduce main-thread impact
   - `injected` fetch/xhr/console patching is not enabled (CDP is the primary source in full mode)
diff --git a/apps/extension/e2e-demo/realworld-frame.html b/apps/extension/e2e-demo/realworld-frame.html
new file mode 100644
index 0000000..ddb3afd
--- /dev/null
+++ b/apps/extension/e2e-demo/realworld-frame.html
@@ -0,0 +1,11 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>WebBlackbox Real-World Frame</title>
+  </head>
+  <body data-ready="true">
+    <button id="frame-button" type="button">Frame action</button>
+  </body>
+</html>
diff --git a/apps/extension/package.json b/apps/extension/package.json
index b9fe49d..4ea238f 100644
--- a/apps/extension/package.json
+++ b/apps/extension/package.json
@@ -1,28 +1,29 @@
 {
   "name": "@webblackbox/extension",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "license": "MIT",
   "private": true,
   "type": "module",
   "scripts": {
     "dev": "tsup --config tsup.config.ts --watch src --watch public --watch scripts --onSuccess \"node scripts/build-extension.mjs\"",
     "build": "tsup --config tsup.config.ts --clean && node scripts/build-extension.mjs",
-    "build:release": "tsup --config tsup.config.ts --clean && node scripts/build-extension.mjs --release",
-    "package:chrome": "tsup --config tsup.config.ts --clean && node scripts/build-extension.mjs --package",
+    "build:release": "tsup --config tsup.config.ts --clean && node scripts/build-extension.mjs --release --profile store-safe",
+    "package:chrome": "tsup --config tsup.config.ts --clean && node scripts/build-extension.mjs --package --release --profile store-safe",
+    "package:chrome:enterprise": "tsup --config tsup.config.ts --clean && node scripts/build-extension.mjs --package --release --profile dev",
     "verify": "pnpm run lint && pnpm run typecheck && pnpm run test && pnpm run package:chrome",
     "e2e:check": "node scripts/e2e-extension-check.mjs",
     "e2e:fullchain": "node scripts/e2e-fullchain-demo.mjs",
-    "e2e:fullchain:lite": "WB_E2E_MODE=lite node scripts/e2e-fullchain-demo.mjs",
-    "e2e:fullchain:lite:reload": "WB_E2E_MODE=lite WB_E2E_RELOAD_AFTER_START=1 node scripts/e2e-fullchain-demo.mjs",
-    "e2e:fullchain:full": "WB_E2E_MODE=full node scripts/e2e-fullchain-demo.mjs",
-    "e2e:fullchain:full:defaults": "WB_E2E_MODE=full WB_E2E_CONFIGURE_OPTIONS=0 node scripts/e2e-fullchain-demo.mjs",
+    "e2e:fullchain:lite": "cross-env WB_E2E_MODE=lite node scripts/e2e-fullchain-demo.mjs",
+    "e2e:fullchain:lite:reload": "cross-env WB_E2E_MODE=lite WB_E2E_RELOAD_AFTER_START=1 node scripts/e2e-fullchain-demo.mjs",
+    "e2e:fullchain:full": "cross-env WB_E2E_MODE=full node scripts/e2e-fullchain-demo.mjs",
+    "e2e:fullchain:full:defaults": "cross-env WB_E2E_MODE=full WB_E2E_CONFIGURE_OPTIONS=0 node scripts/e2e-fullchain-demo.mjs",
     "e2e:realworld": "node scripts/e2e-realworld-stability.mjs",
-    "e2e:realworld:quick": "WB_E2E_REALWORLD_QUICK=1 node scripts/e2e-realworld-stability.mjs",
+    "e2e:realworld:quick": "cross-env WB_E2E_REALWORLD_QUICK=1 node scripts/e2e-realworld-stability.mjs",
     "e2e:realworld:ci": "node scripts/e2e-realworld-stability.mjs",
     "e2e:memory:full": "node scripts/e2e-full-memory-regression.mjs",
-    "e2e:memory:full:ci": "WB_E2E_STRESS_REQUESTS=96 WB_E2E_STRESS_CONCURRENCY=4 WB_E2E_MEMORY_SAMPLE_MS=1500 WB_E2E_MEMORY_SETTLE_SAMPLES=1 WB_E2E_MEMORY_TIMEOUT_MS=90000 node scripts/e2e-full-memory-regression.mjs",
+    "e2e:memory:full:ci": "cross-env WB_E2E_STRESS_REQUESTS=96 WB_E2E_STRESS_CONCURRENCY=4 WB_E2E_MEMORY_SAMPLE_MS=1500 WB_E2E_MEMORY_SETTLE_SAMPLES=1 WB_E2E_MEMORY_TIMEOUT_MS=90000 node scripts/e2e-full-memory-regression.mjs",
     "e2e:perf:lite": "node scripts/e2e-lite-perf-regression.mjs",
-    "e2e:perf:lite:ci": "WB_E2E_PERF_REQUESTS=32 WB_E2E_PERF_WARMUP_REQUESTS=12 WB_E2E_PERF_INTERACTION_ROUNDS=8 WB_E2E_PERF_IFRAME_ROUNDS=6 WB_E2E_PERF_EDITOR_ROUNDS=12 WB_E2E_PERF_NAV_ROUNDS=3 WB_E2E_PERF_NAV_WAIT_MS=6000 node scripts/e2e-lite-perf-regression.mjs",
+    "e2e:perf:lite:ci": "cross-env WB_E2E_PERF_REQUESTS=32 WB_E2E_PERF_WARMUP_REQUESTS=12 WB_E2E_PERF_INTERACTION_ROUNDS=8 WB_E2E_PERF_IFRAME_ROUNDS=6 WB_E2E_PERF_EDITOR_ROUNDS=12 WB_E2E_PERF_NAV_ROUNDS=3 WB_E2E_PERF_NAV_WAIT_MS=6000 node scripts/e2e-lite-perf-regression.mjs",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run"
@@ -36,6 +37,10 @@
     "webblackbox": "workspace:*"
   },
   "devDependencies": {
+    "@webblackbox/player-sdk": "workspace:*",
+    "cross-env": "^10.1.0",
+    "es-module-lexer": "^2.3.0",
+    "fake-indexeddb": "^6.2.5",
     "jszip": "^3.10.1"
   }
 }
diff --git a/apps/extension/public/_locales/en/messages.json b/apps/extension/public/_locales/en/messages.json
index 2dd57ad..98ef416 100644
--- a/apps/extension/public/_locales/en/messages.json
+++ b/apps/extension/public/_locales/en/messages.json
@@ -10,5 +10,8 @@
   },
   "extensionCommandMarkBug": {
     "message": "Create user marker"
+  },
+  "contentKeyboardMarker": {
+    "message": "Keyboard marker"
   }
 }
diff --git a/apps/extension/public/_locales/zh_CN/messages.json b/apps/extension/public/_locales/zh_CN/messages.json
index a83b781..74f2a12 100644
--- a/apps/extension/public/_locales/zh_CN/messages.json
+++ b/apps/extension/public/_locales/zh_CN/messages.json
@@ -10,5 +10,8 @@
   },
   "extensionCommandMarkBug": {
     "message": "创建用户标记"
+  },
+  "contentKeyboardMarker": {
+    "message": "键盘标记"
   }
 }
diff --git a/apps/extension/scripts/build-extension.mjs b/apps/extension/scripts/build-extension.mjs
index d62dbbd..8bb4557 100644
--- a/apps/extension/scripts/build-extension.mjs
+++ b/apps/extension/scripts/build-extension.mjs
@@ -1,8 +1,9 @@
 import { resolve } from "node:path";
 
+import { parseExtensionBuildArgs } from "./lib/extension-build-cli.mjs";
 import { buildDir, createChromeArchive, prepareBuildOutput } from "./lib/extension-build.mjs";
 
-const options = parseArgs(process.argv.slice(2));
+const options = parseExtensionBuildArgs(process.argv.slice(2));
 const outputDir = options.outputDir ? resolve(process.cwd(), options.outputDir) : buildDir;
 
 const manifest = await prepareBuildOutput({
@@ -34,60 +35,3 @@ if (options.packageArchive) {
 }
 
 console.info(JSON.stringify(result, null, 2));
-
-function parseArgs(args) {
-  const knownFlags = new Set(["--package", "--profile", "--release", "--output", "--output-dir"]);
-  const release = args.includes("--release");
-  const packageArchive = args.includes("--package");
-  const outputDir = readFlagValue(args, "--output-dir");
-  const outputPath = readFlagValue(args, "--output");
-  const profile = readFlagValue(args, "--profile") ?? "dev";
-
-  for (let index = 0; index < args.length; index += 1) {
-    const arg = args[index];
-
-    if (
-      arg.startsWith("--output=") ||
-      arg.startsWith("--output-dir=") ||
-      arg.startsWith("--profile=")
-    ) {
-      continue;
-    }
-
-    if (!knownFlags.has(arg)) {
-      throw new Error(`Unknown argument: ${arg}`);
-    }
-
-    if (
-      (arg === "--output" || arg === "--output-dir" || arg === "--profile") &&
-      !args[index + 1]?.startsWith("--")
-    ) {
-      index += 1;
-    }
-  }
-
-  return {
-    release,
-    packageArchive,
-    profile,
-    outputDir,
-    outputPath
-  };
-}
-
-function readFlagValue(args, flagName) {
-  const inline = args.find((entry) => entry.startsWith(`${flagName}=`));
-
-  if (inline) {
-    return inline.slice(flagName.length + 1);
-  }
-
-  const index = args.indexOf(flagName);
-
-  if (index === -1) {
-    return null;
-  }
-
-  const value = args[index + 1];
-  return value && !value.startsWith("--") ? value : null;
-}
diff --git a/apps/extension/scripts/e2e-extension-check.mjs b/apps/extension/scripts/e2e-extension-check.mjs
index d0bb9b8..1148495 100644
--- a/apps/extension/scripts/e2e-extension-check.mjs
+++ b/apps/extension/scripts/e2e-extension-check.mjs
@@ -1,23 +1,33 @@
 #!/usr/bin/env node
 
-import { spawn, spawnSync } from "node:child_process";
+import { spawn } from "node:child_process";
 import { constants, createWriteStream } from "node:fs";
 import { access, mkdir, rm } from "node:fs/promises";
-import { dirname, isAbsolute, resolve } from "node:path";
+import { createServer } from "node:http";
+import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
+import {
+  createE2eTempPath,
+  extensionChromeLoadArgs,
+  resolveExecutable,
+  terminateProcess
+} from "../../../scripts/e2e-runtime.mjs";
+
 const root = dirname(fileURLToPath(import.meta.url));
 const appRoot = resolve(root, "..");
 
 const extensionDir = process.env.WB_E2E_EXTENSION_DIR ?? resolve(appRoot, "build");
-const targetUrl = process.env.WB_E2E_TARGET_URL ?? "https://example.com/";
+const configuredTargetUrl = process.env.WB_E2E_TARGET_URL;
 const remotePort = Number(process.env.WB_E2E_REMOTE_PORT ?? "9222");
 const headless = (process.env.WB_E2E_HEADLESS ?? "1") !== "0";
 const profileDir =
-  process.env.WB_E2E_PROFILE_DIR ?? `/tmp/webblackbox-ext-e2e-profile-${Date.now()}`;
-const chromeLogPath = process.env.WB_E2E_LOG ?? `/tmp/webblackbox-ext-e2e-${Date.now()}.log`;
+  process.env.WB_E2E_PROFILE_DIR ?? createE2eTempPath("webblackbox-ext-e2e-profile");
+const chromeLogPath = process.env.WB_E2E_LOG ?? createE2eTempPath("webblackbox-ext-e2e", ".log");
 const baseUrl = `http://127.0.0.1:${remotePort}`;
 const checkExport = (process.env.WB_E2E_CHECK_EXPORT ?? "1") !== "0";
+const exportPassphrase = process.env.WB_E2E_EXPORT_PASSPHRASE ?? "webblackbox-e2e-passphrase";
+const cdpCommandTimeoutMs = readPositiveInteger(process.env.WB_E2E_CDP_COMMAND_TIMEOUT_MS, 15_000);
 
 const chromeCandidates = [
   process.env.WB_E2E_CHROME_BIN,
@@ -40,6 +50,7 @@ const state = {
   swClient: null,
   popupClient: null,
   pageClient: null,
+  targetServer: null,
   openedTargetIds: []
 };
 
@@ -52,6 +63,7 @@ main().catch(async (error) => {
 async function main() {
   await ensureExtensionBuildReady(extensionDir);
   const chromeBinary = await resolveChromeBinary(chromeCandidates);
+  const targetUrl = configuredTargetUrl ?? (await startTargetServer());
 
   await rm(profileDir, { recursive: true, force: true });
   await mkdir(profileDir, { recursive: true });
@@ -96,11 +108,12 @@ async function main() {
   await pageClient.connect();
   await popupClient.connect();
   await pageClient.send("Runtime.enable");
+  await pageClient.send("Page.enable");
   await popupClient.send("Runtime.enable");
   state.pageClient = pageClient;
   state.popupClient = popupClient;
 
-  await sleep(1_200);
+  await waitForPageUrl(pageClient, targetUrl, 20_000);
 
   const lite = await runModeCheck({
     popupClient,
@@ -198,7 +211,8 @@ async function runModeCheck({
 
   if (exportAfterStop) {
     const statusBefore = await readExportStatusLine(popupClient);
-    await exportSessionFromPopup(popupClient, active.sid);
+    const exportRequest = await exportSessionFromPopup(popupClient, active.sid);
+    assert(exportRequest?.ok === true, `${mode} export request failed`, exportRequest);
     exportStatus = await waitForExportStatus(popupClient, statusBefore, 30_000);
     assert(exportStatus.ok, `${mode} export failed`, exportStatus);
   }
@@ -226,7 +240,7 @@ async function ensureExtensionBuildReady(dir) {
 
 async function resolveChromeBinary(candidates) {
   for (const candidate of candidates) {
-    const resolved = await resolveChromeCandidate(candidate);
+    const resolved = await resolveExecutable(candidate);
 
     if (resolved) {
       return resolved;
@@ -238,47 +252,6 @@ async function resolveChromeBinary(candidates) {
   );
 }
 
-async function resolveChromeCandidate(candidate) {
-  if (typeof candidate !== "string" || candidate.trim().length === 0) {
-    return null;
-  }
-
-  const trimmed = candidate.trim();
-
-  if (isAbsolute(trimmed) || trimmed.startsWith(".")) {
-    try {
-      await access(trimmed, constants.X_OK);
-      return trimmed;
-    } catch {
-      return null;
-    }
-  }
-
-  const which = spawnSync("which", [trimmed], {
-    encoding: "utf8"
-  });
-
-  if (which.status !== 0) {
-    return null;
-  }
-
-  const resolved = which.stdout
-    .split("\n")
-    .map((line) => line.trim())
-    .find((line) => line.length > 0);
-
-  if (!resolved) {
-    return null;
-  }
-
-  try {
-    await access(resolved, constants.X_OK);
-    return resolved;
-  } catch {
-    return null;
-  }
-}
-
 function startChrome(binary, options) {
   const args = [
     `--remote-debugging-port=${options.remotePort}`,
@@ -289,8 +262,7 @@ function startChrome(binary, options) {
     "--disable-sync",
     "--disable-component-update",
     "--disable-default-apps",
-    `--disable-extensions-except=${options.extensionDir}`,
-    `--load-extension=${options.extensionDir}`,
+    ...extensionChromeLoadArgs(options.extensionDir),
     "--enable-logging=stderr",
     "--v=1",
     "about:blank"
@@ -391,19 +363,12 @@ async function startSessionFromPopup(popupClient, mode, expectedUrl) {
     (async () => {
       const tabs = await chrome.tabs.query({});
       const exact = tabs.find((tab) =>
-        typeof tab.id === 'number' && typeof tab.url === 'string' && tab.url.startsWith(${JSON.stringify(
-          expectedUrl
-        )})
-      );
-
-      const fallback = tabs.find((tab) =>
         typeof tab.id === 'number' &&
         typeof tab.url === 'string' &&
-        !tab.url.startsWith('chrome-extension://') &&
-        tab.url !== 'about:blank'
+        tab.url.startsWith(${JSON.stringify(expectedUrl)})
       );
 
-      const target = exact ?? fallback;
+      const target = exact;
 
       if (!target || typeof target.id !== 'number') {
         return {
@@ -413,10 +378,22 @@ async function startSessionFromPopup(popupClient, mode, expectedUrl) {
         };
       }
 
-      await chrome.runtime.sendMessage({ kind: 'ui.start', tabId: target.id, mode: ${JSON.stringify(
-        mode
-      )} });
-      return { ok: true, tabId: target.id, mode: ${JSON.stringify(mode)} };
+      const response = await chrome.runtime.sendMessage({
+        kind: 'ui.start',
+        tabId: target.id,
+        mode: ${JSON.stringify(mode)}
+      });
+      return {
+        ok: response?.ok === true,
+        tabId: target.id,
+        mode: ${JSON.stringify(mode)},
+        response,
+        target: {
+          url: target.url,
+          pendingUrl: target.pendingUrl,
+          status: target.status
+        }
+      };
     })()
   `;
 
@@ -427,15 +404,36 @@ async function stopActiveSessionFromPopup(popupClient) {
   const expression = `
     (async () => {
       const store = await chrome.storage.local.get('webblackbox.runtime.sessions');
-      const rows = store['webblackbox.runtime.sessions'];
-      const active = Array.isArray(rows) ? rows[0] : undefined;
+      const snapshot = store['webblackbox.runtime.sessions'];
+      const rows = (
+        Array.isArray(snapshot)
+          ? snapshot
+          : Array.isArray(snapshot?.sessions)
+            ? snapshot.sessions
+            : []
+      ).filter((row) => row?.state !== 'stopped');
+      const active = rows[0];
 
       if (!active || typeof active.tabId !== 'number') {
         return { ok: false, reason: 'no-active-session', rows };
       }
 
-      await chrome.runtime.sendMessage({ kind: 'ui.stop', tabId: active.tabId });
-      return { ok: true, tabId: active.tabId };
+      const button = document.querySelector("[data-action='stop']");
+
+      if (!(button instanceof HTMLButtonElement)) {
+        return { ok: false, reason: 'stop-button-not-found', tabId: active.tabId };
+      }
+
+      if (button.disabled) {
+        return { ok: false, reason: 'stop-button-disabled', tabId: active.tabId };
+      }
+
+      button.click();
+      return {
+        ok: true,
+        tabId: active.tabId,
+        via: 'popup-ui'
+      };
     })()
   `;
 
@@ -445,8 +443,17 @@ async function stopActiveSessionFromPopup(popupClient) {
 async function exportSessionFromPopup(popupClient, sid) {
   const expression = `
     (async () => {
-      await chrome.runtime.sendMessage({ kind: 'ui.export', sid: ${JSON.stringify(sid)} });
-      return { ok: true, sid: ${JSON.stringify(sid)} };
+      const response = await chrome.runtime.sendMessage({
+        kind: 'ui.export',
+        sid: ${JSON.stringify(sid)},
+        passphrase: ${JSON.stringify(exportPassphrase)},
+        saveAs: false
+      });
+      return {
+        ok: response?.ok === true,
+        sid: ${JSON.stringify(sid)},
+        response
+      };
     })()
   `;
 
@@ -457,8 +464,14 @@ async function readRuntimeSessions(popupClient) {
   const expression = `
     (async () => {
       const store = await chrome.storage.local.get('webblackbox.runtime.sessions');
-      const rows = store['webblackbox.runtime.sessions'];
-      return Array.isArray(rows) ? rows : [];
+      const snapshot = store['webblackbox.runtime.sessions'];
+      return (
+        Array.isArray(snapshot)
+          ? snapshot
+          : Array.isArray(snapshot?.sessions)
+            ? snapshot.sessions
+            : []
+      ).filter((row) => row?.state !== 'stopped');
     })()
   `;
 
@@ -513,6 +526,18 @@ async function waitForIndicatorText(pageClient, fragment, timeoutMs) {
   );
 }
 
+async function waitForPageUrl(pageClient, expectedUrl, timeoutMs) {
+  return waitFor(
+    async () => {
+      const url = await pageClient.evaluate("location.href");
+      return typeof url === "string" && url.startsWith(expectedUrl) ? url : null;
+    },
+    timeoutMs,
+    250,
+    `Target page did not navigate to ${expectedUrl}`
+  );
+}
+
 async function waitForIndicatorGone(pageClient, timeoutMs) {
   return waitFor(
     async () => {
@@ -565,6 +590,41 @@ async function fetchJson(url, timeoutMs, init) {
   return response.json();
 }
 
+async function startTargetServer() {
+  const server = createServer((_request, response) => {
+    response.writeHead(200, {
+      "cache-control": "no-store",
+      "content-type": "text/html; charset=utf-8"
+    });
+    response.end(
+      '<!doctype html><html><head><title>WebBlackbox E2E</title></head><body><button type="button">Test action</button></body></html>'
+    );
+  });
+
+  await new Promise((resolvePromise, rejectPromise) => {
+    server.once("error", rejectPromise);
+    server.listen(0, "127.0.0.1", () => {
+      server.off("error", rejectPromise);
+      resolvePromise();
+    });
+  });
+
+  const address = server.address();
+
+  if (!address || typeof address === "string") {
+    server.close();
+    throw new Error("Failed to resolve the local E2E target address");
+  }
+
+  state.targetServer = server;
+  return `http://127.0.0.1:${address.port}/`;
+}
+
+function readPositiveInteger(value, fallback) {
+  const numeric = Number(value ?? fallback);
+  return Number.isFinite(numeric) && numeric > 0 ? Math.floor(numeric) : fallback;
+}
+
 function sleep(ms) {
   return new Promise((resolve) => {
     setTimeout(resolve, ms);
@@ -591,14 +651,7 @@ async function cleanup() {
     await closeTarget(baseUrl, targetId);
   }
 
-  if (state.chromeProcess && !state.chromeProcess.killed) {
-    state.chromeProcess.kill("SIGTERM");
-    await sleep(500);
-
-    if (!state.chromeProcess.killed) {
-      state.chromeProcess.kill("SIGKILL");
-    }
-  }
+  await terminateProcess(state.chromeProcess, { graceMs: 500 });
 
   state.chromeProcess = null;
 
@@ -608,6 +661,13 @@ async function cleanup() {
     });
     state.logStream = null;
   }
+
+  if (state.targetServer) {
+    await new Promise((resolvePromise) => {
+      state.targetServer.close(resolvePromise);
+    });
+    state.targetServer = null;
+  }
 }
 
 class CdpClient {
@@ -634,6 +694,7 @@ class CdpClient {
 
       socket.addEventListener("close", () => {
         for (const pending of this.pending.values()) {
+          clearTimeout(pending.timeout);
           pending.reject(new Error("CDP socket closed"));
         }
         this.pending.clear();
@@ -650,6 +711,7 @@ class CdpClient {
           }
 
           this.pending.delete(payload.id);
+          clearTimeout(pending.timeout);
 
           if (payload.error) {
             pending.reject(new Error(payload.error.message ?? JSON.stringify(payload.error)));
@@ -685,7 +747,11 @@ class CdpClient {
     const message = JSON.stringify({ id, method, params });
 
     return new Promise((resolve, reject) => {
-      this.pending.set(id, { resolve, reject });
+      const timeout = setTimeout(() => {
+        this.pending.delete(id);
+        reject(new Error(`CDP command timed out: ${method}`));
+      }, cdpCommandTimeoutMs);
+      this.pending.set(id, { resolve, reject, timeout });
       this.socket.send(message);
     });
   }
diff --git a/apps/extension/scripts/e2e-full-memory-regression.mjs b/apps/extension/scripts/e2e-full-memory-regression.mjs
index 55299e3..4f0797e 100644
--- a/apps/extension/scripts/e2e-full-memory-regression.mjs
+++ b/apps/extension/scripts/e2e-full-memory-regression.mjs
@@ -1,13 +1,25 @@
 #!/usr/bin/env node
 
-import { spawn, spawnSync } from "node:child_process";
+import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { createServer } from "node:http";
 import { constants, createWriteStream } from "node:fs";
 import { access, mkdir, readFile, rm } from "node:fs/promises";
-import { dirname, isAbsolute, resolve } from "node:path";
+import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
+import {
+  createE2eTempPath,
+  extensionChromeLoadArgs,
+  resolveExecutable,
+  terminateProcess
+} from "../../../scripts/e2e-runtime.mjs";
+import {
+  deleteSessionFromSessionsPort,
+  startSessionFromPopupRuntime,
+  stopSessionFromPopupPort
+} from "./lib/extension-e2e-controller.mjs";
+
 const root = dirname(fileURLToPath(import.meta.url));
 const extensionRoot = resolve(root, "..");
 
@@ -15,8 +27,8 @@ const extensionDir = process.env.WB_E2E_EXTENSION_DIR ?? resolve(extensionRoot,
 const remotePort = Number(process.env.WB_E2E_REMOTE_PORT ?? "9234");
 const headless = (process.env.WB_E2E_HEADLESS ?? "1") !== "0";
 const profileDir =
-  process.env.WB_E2E_PROFILE_DIR ?? `/tmp/webblackbox-ext-memory-profile-${Date.now()}`;
-const chromeLogPath = process.env.WB_E2E_LOG ?? `/tmp/webblackbox-ext-memory-${Date.now()}.log`;
+  process.env.WB_E2E_PROFILE_DIR ?? createE2eTempPath("webblackbox-ext-memory-profile");
+const chromeLogPath = process.env.WB_E2E_LOG ?? createE2eTempPath("webblackbox-ext-memory", ".log");
 const baseUrl = `http://127.0.0.1:${remotePort}`;
 
 const stressRequests = Number(process.env.WB_E2E_STRESS_REQUESTS ?? "240");
@@ -50,6 +62,7 @@ const state = {
   server: null,
   browserClient: null,
   popupClient: null,
+  sessionsClient: null,
   pageClient: null,
   swClient: null,
   offscreenClient: null,
@@ -145,7 +158,7 @@ async function main() {
   await pageClient.send("Runtime.enable");
   await pageClient.send("Page.enable").catch(() => undefined);
   await popupClient.send("Runtime.enable");
-  await waitForPopupRuntimeReady(popupClient, 20_000);
+  await waitForExtensionRuntimeReady(popupClient, 20_000);
 
   const swClient = await connectToDiscoveredTarget(swTarget, browserClient);
   state.swClient = swClient;
@@ -160,7 +173,10 @@ async function main() {
     });
   });
 
-  const start = await startSessionFromPopup(popupClient, "full", stressUrl);
+  const start = await startSessionFromPopupRuntime(popupClient, {
+    mode: "full",
+    expectedUrl: stressUrl
+  });
   assert(start?.ok === true, "Failed to start full mode session.", start);
 
   const indicatorText = await waitForIndicatorText(pageClient, "REC full", 25_000);
@@ -179,6 +195,9 @@ async function main() {
   assert(typeof active?.sid === "string" && active.sid.length > 0, "Missing active session sid.", {
     sessionsAfterStart
   });
+  assert(typeof active?.tabId === "number", "Missing active session tab id.", {
+    sessionsAfterStart
+  });
 
   const offscreenTarget = await waitForExtensionTarget(
     baseUrl,
@@ -302,7 +321,10 @@ async function main() {
     });
   }
 
-  const stop = await stopActiveSessionFromPopup(popupClient, active.sid);
+  const stop = await stopSessionFromPopupPort(popupClient, {
+    sid: active.sid,
+    tabId: active.tabId
+  });
   assert(stop?.ok === true, "Failed to stop full mode session.", stop);
 
   const indicatorGone = await waitForIndicatorGone(pageClient, 15_000);
@@ -322,7 +344,18 @@ async function main() {
     state.offscreenClient = null;
   }
 
-  const deleted = await deleteSessionFromPopup(popupClient, active.sid);
+  const sessionsTarget = await openTarget(
+    baseUrl,
+    `chrome-extension://${extensionId}/sessions.html`
+  );
+  state.openedTargetIds.push(sessionsTarget.id);
+  const sessionsClient = new CdpClient(sessionsTarget.webSocketDebuggerUrl);
+  await sessionsClient.connect();
+  await sessionsClient.send("Runtime.enable");
+  await waitForExtensionRuntimeReady(sessionsClient, 20_000);
+  state.sessionsClient = sessionsClient;
+
+  const deleted = await deleteSessionFromSessionsPort(sessionsClient, { sid: active.sid });
   assert(deleted?.ok === true, "Failed to delete stopped session.", deleted);
 
   await waitForTargetGone(
@@ -360,7 +393,7 @@ async function ensureExtensionBuildReady(dir) {
 
 async function resolveChromeBinary(candidates) {
   for (const candidate of candidates) {
-    const resolved = await resolveChromeCandidate(candidate);
+    const resolved = await resolveExecutable(candidate);
 
     if (resolved) {
       return resolved;
@@ -372,39 +405,6 @@ async function resolveChromeBinary(candidates) {
   );
 }
 
-async function resolveChromeCandidate(candidate) {
-  if (typeof candidate !== "string" || candidate.trim().length === 0) {
-    return null;
-  }
-
-  const trimmed = candidate.trim();
-
-  if (isAbsolute(trimmed) || trimmed.startsWith(".")) {
-    try {
-      await access(trimmed, constants.X_OK);
-      return trimmed;
-    } catch {
-      return null;
-    }
-  }
-
-  const which = spawnSync("which", [trimmed], {
-    encoding: "utf8"
-  });
-  const resolved = which.status === 0 ? which.stdout.trim() : "";
-
-  if (!resolved) {
-    return null;
-  }
-
-  try {
-    await access(resolved, constants.X_OK);
-    return resolved;
-  } catch {
-    return null;
-  }
-}
-
 function startChrome(binary, options) {
   const args = [
     `--remote-debugging-port=${options.remotePort}`,
@@ -416,8 +416,7 @@ function startChrome(binary, options) {
     "--disable-component-update",
     "--disable-default-apps",
     "--disable-popup-blocking",
-    `--disable-extensions-except=${options.extensionDir}`,
-    `--load-extension=${options.extensionDir}`,
+    ...extensionChromeLoadArgs(options.extensionDir),
     "--enable-logging=stderr",
     "--v=1",
     "about:blank"
@@ -732,10 +731,10 @@ async function connectToDiscoveredTarget(target, browserClient) {
   return browserClient.attachToTarget(target.targetId);
 }
 
-async function waitForPopupRuntimeReady(popupClient, timeoutMs) {
+async function waitForExtensionRuntimeReady(extensionClient, timeoutMs) {
   return waitFor(
     async () => {
-      const snapshot = await popupClient.evaluate(`
+      const snapshot = await extensionClient.evaluate(`
         (() => ({
           runtimeId:
             typeof chrome === 'object' &&
@@ -762,99 +761,18 @@ async function waitForPopupRuntimeReady(popupClient, timeoutMs) {
   );
 }
 
-async function startSessionFromPopup(popupClient, mode, expectedUrl) {
-  const expression = `
-    (async () => {
-      const tabs = await chrome.tabs.query({});
-      const target =
-        tabs.find((tab) =>
-          typeof tab.id === 'number' &&
-          typeof tab.url === 'string' &&
-          tab.url.startsWith(${JSON.stringify(expectedUrl)})
-        ) ??
-        tabs.find((tab) =>
-          typeof tab.id === 'number' &&
-          typeof tab.url === 'string' &&
-          !tab.url.startsWith('chrome-extension://') &&
-          tab.url !== 'about:blank'
-        );
-
-      if (!target || typeof target.id !== 'number') {
-        return {
-          ok: false,
-          reason: 'target-tab-not-found',
-          tabs: tabs.map((tab) => ({ id: tab.id, url: tab.url, active: tab.active }))
-        };
-      }
-
-      await chrome.runtime.sendMessage({
-        kind: 'ui.start',
-        tabId: target.id,
-        mode: ${JSON.stringify(mode)}
-      });
-
-      return {
-        ok: true,
-        tabId: target.id,
-        mode: ${JSON.stringify(mode)}
-      };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
-}
-
-async function stopActiveSessionFromPopup(popupClient, expectedSid) {
-  const expression = `
-    (async () => {
-      const store = await chrome.storage.local.get('webblackbox.runtime.sessions');
-      const rows = store['webblackbox.runtime.sessions'];
-      const sessions = Array.isArray(rows) ? rows : [];
-      const expectedSid = ${JSON.stringify(expectedSid)};
-      const active =
-        (expectedSid
-          ? sessions.find((row) => row?.sid === expectedSid && typeof row?.tabId === 'number')
-          : undefined) ??
-        sessions.find((row) => typeof row?.tabId === 'number');
-
-      if (!active || typeof active.tabId !== 'number') {
-        if (expectedSid) {
-          return {
-            ok: true,
-            sid: expectedSid,
-            alreadyStopped: true,
-            rows: sessions
-          };
-        }
-
-        return { ok: false, reason: 'no-active-session', rows: sessions };
-      }
-
-      await chrome.runtime.sendMessage({ kind: 'ui.stop', tabId: active.tabId });
-      return { ok: true, tabId: active.tabId };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
-}
-
-async function deleteSessionFromPopup(popupClient, sid) {
-  const expression = `
-    (async () => {
-      await chrome.runtime.sendMessage({ kind: 'ui.delete', sid: ${JSON.stringify(sid)} });
-      return { ok: true, sid: ${JSON.stringify(sid)} };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
-}
-
 async function readRuntimeSessions(popupClient) {
   const expression = `
     (async () => {
       const store = await chrome.storage.local.get('webblackbox.runtime.sessions');
-      const rows = store['webblackbox.runtime.sessions'];
-      return Array.isArray(rows) ? rows : [];
+      const snapshot = store['webblackbox.runtime.sessions'];
+      return (
+        Array.isArray(snapshot)
+          ? snapshot
+          : Array.isArray(snapshot?.sessions)
+            ? snapshot.sessions
+            : []
+      ).filter((row) => row?.state !== 'stopped');
     })()
   `;
 
@@ -1242,6 +1160,9 @@ async function cleanup() {
   await closeClient(state.popupClient);
   state.popupClient = null;
 
+  await closeClient(state.sessionsClient);
+  state.sessionsClient = null;
+
   await closeClient(state.browserClient);
   state.browserClient = null;
 
@@ -1249,14 +1170,7 @@ async function cleanup() {
     await closeTarget(baseUrl, targetId);
   }
 
-  if (state.chromeProcess && !state.chromeProcess.killed) {
-    state.chromeProcess.kill("SIGTERM");
-    await sleep(700);
-
-    if (!state.chromeProcess.killed) {
-      state.chromeProcess.kill("SIGKILL");
-    }
-  }
+  await terminateProcess(state.chromeProcess, { graceMs: 700 });
 
   state.chromeProcess = null;
 
diff --git a/apps/extension/scripts/e2e-fullchain-demo.mjs b/apps/extension/scripts/e2e-fullchain-demo.mjs
index f250d44..972c5cc 100644
--- a/apps/extension/scripts/e2e-fullchain-demo.mjs
+++ b/apps/extension/scripts/e2e-fullchain-demo.mjs
@@ -1,14 +1,30 @@
 #!/usr/bin/env node
 
-import { spawn, spawnSync } from "node:child_process";
+import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { createServer } from "node:http";
 import { constants, createWriteStream } from "node:fs";
 import { access, cp, mkdir, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
 import { createServer as createNetServer } from "node:net";
-import { dirname, extname, isAbsolute, resolve, sep } from "node:path";
+import { dirname, extname, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import JSZip from "jszip";
+import { WebBlackboxPlayer } from "@webblackbox/player-sdk";
+
+import {
+  createE2eTempPath,
+  extensionChromeLoadArgs,
+  resolveExecutable,
+  terminateProcess
+} from "../../../scripts/e2e-runtime.mjs";
+import {
+  exportSessionFromPopupRuntime,
+  startSessionFromPopupRuntime,
+  stopSessionFromPopupPort
+} from "./lib/extension-e2e-controller.mjs";
+import {
+  verifyRealWorldArchiveEvidence,
+  verifyScreenRecordingArchiveEvidence
+} from "./lib/archive-evidence.mjs";
 
 const root = dirname(fileURLToPath(import.meta.url));
 const extensionRoot = resolve(root, "..");
@@ -21,10 +37,11 @@ const playerDir = process.env.WB_E2E_PLAYER_DIR ?? resolve(workspaceRoot, "apps/
 const remotePort = Number(process.env.WB_E2E_REMOTE_PORT ?? "9233");
 const headless = (process.env.WB_E2E_HEADLESS ?? "1") !== "0";
 const profileDir =
-  process.env.WB_E2E_PROFILE_DIR ?? `/tmp/webblackbox-ext-fullchain-profile-${Date.now()}`;
+  process.env.WB_E2E_PROFILE_DIR ?? createE2eTempPath("webblackbox-ext-fullchain-profile");
 const downloadDir =
-  process.env.WB_E2E_DOWNLOAD_DIR ?? `/tmp/webblackbox-ext-fullchain-downloads-${Date.now()}`;
-const chromeLogPath = process.env.WB_E2E_LOG ?? `/tmp/webblackbox-ext-fullchain-${Date.now()}.log`;
+  process.env.WB_E2E_DOWNLOAD_DIR ?? createE2eTempPath("webblackbox-ext-fullchain-downloads");
+const chromeLogPath =
+  process.env.WB_E2E_LOG ?? createE2eTempPath("webblackbox-ext-fullchain", ".log");
 const chromeReadyTimeoutMs = Number(process.env.WB_E2E_CHROME_READY_TIMEOUT_MS ?? "25000");
 const chromeLaunchAttempts = Number(process.env.WB_E2E_CHROME_LAUNCH_ATTEMPTS ?? "2");
 const downloadTimeoutMs = Number(process.env.WB_E2E_DOWNLOAD_TIMEOUT_MS ?? "45000");
@@ -109,8 +126,13 @@ async function main() {
   await ensureBuildInputs();
 
   await mkdir(downloadDir, { recursive: true });
-  const extensionDirForRun = recordScreenInFullMode
-    ? await prepareScreenRecordingE2eExtensionDir(extensionDir)
+  const extensionCapabilities = await readExtensionHarnessCapabilities(extensionDir);
+  const { activeTabActionGrantRequired } = extensionCapabilities;
+  const networkEvidenceExpected =
+    captureMode === "full" ? extensionCapabilities.fullCdp : extensionCapabilities.browserNetwork;
+  const actionPopupRequired = recordScreenInFullMode || activeTabActionGrantRequired;
+  const extensionDirForRun = actionPopupRequired
+    ? await prepareActionShortcutE2eExtensionDir(extensionDir)
     : extensionDir;
   state.tempExtensionDir = extensionDirForRun === extensionDir ? null : extensionDirForRun;
 
@@ -146,7 +168,6 @@ async function main() {
 
   const version = chrome.version;
   console.log(`Chrome: ${version.Browser}`);
-  assertCommandLineExtensionLoadingSupported(chromeBinary, version.Browser);
 
   const browserWsUrl =
     typeof version.webSocketDebuggerUrl === "string" ? version.webSocketDebuggerUrl : null;
@@ -214,114 +235,63 @@ async function main() {
   }
 
   const demoClient = new CdpClient(demoTarget.webSocketDebuggerUrl);
-  const demoContexts = createRuntimeContextTracker(demoClient);
   await demoClient.connect();
   await demoClient.send("Runtime.enable");
   await demoClient.send("DOM.enable");
   state.demoClient = demoClient;
 
-  const usePopupControl = recordScreenInFullMode || usePopupUiActions;
-  let usePopupUiActionsEffective = recordScreenInFullMode ? false : usePopupUiActions;
-  let control = null;
-
-  if (usePopupControl) {
-    if (!popupTarget) {
-      popupTarget = recordScreenInFullMode
-        ? await openActionPopupFromShortcut(baseUrl, demoClient, extensionId)
-        : await openTarget(baseUrl, `chrome-extension://${extensionId}/popup.html`);
-      state.openedTargetIds.push(popupTarget.id);
-    } else if (warmupPopupTargetId) {
-      await closeTarget(baseUrl, warmupPopupTargetId);
-      state.openedTargetIds = state.openedTargetIds.filter((id) => id !== warmupPopupTargetId);
-      popupTarget = recordScreenInFullMode
-        ? await openActionPopupFromShortcut(baseUrl, demoClient, extensionId)
-        : await openTarget(baseUrl, `chrome-extension://${extensionId}/popup.html`);
-      state.openedTargetIds.push(popupTarget.id);
-    }
-
-    const popupClient = new CdpClient(popupTarget.webSocketDebuggerUrl);
-    await popupClient.connect();
-    await popupClient.send("Runtime.enable");
-    await popupClient.send("DOM.enable");
-    state.popupClient = popupClient;
+  // Extension UI authorization is page- and transport-bound. Keep every
+  // fullchain control action in an actual popup page, including headless runs.
+  let usePopupUiActionsEffective = actionPopupRequired ? false : usePopupUiActions;
+  if (!popupTarget) {
+    popupTarget = actionPopupRequired
+      ? await openActionPopupFromShortcut(baseUrl, demoClient, extensionId)
+      : await openTarget(baseUrl, `chrome-extension://${extensionId}/popup.html`);
+    state.openedTargetIds.push(popupTarget.id);
+  } else if (warmupPopupTargetId) {
+    await closeTarget(baseUrl, warmupPopupTargetId);
+    state.openedTargetIds = state.openedTargetIds.filter((id) => id !== warmupPopupTargetId);
+    popupTarget = actionPopupRequired
+      ? await openActionPopupFromShortcut(baseUrl, demoClient, extensionId)
+      : await openTarget(baseUrl, `chrome-extension://${extensionId}/popup.html`);
+    state.openedTargetIds.push(popupTarget.id);
+  }
 
-    if (usePopupUiActionsEffective) {
-      const popupUiReady = await waitForPopupUiReady(popupClient, 20_000).catch(() => null);
+  const popupClient = new CdpClient(popupTarget.webSocketDebuggerUrl);
+  await popupClient.connect();
+  await popupClient.send("Runtime.enable");
+  await popupClient.send("DOM.enable");
+  state.popupClient = popupClient;
 
-      if (!popupUiReady) {
-        const popupRuntimeReady = await waitForPopupRuntimeReady(popupClient, 12_000).catch(
-          () => null
-        );
+  if (usePopupUiActionsEffective) {
+    const popupUiReady = await waitForPopupUiReady(popupClient, 20_000).catch(() => null);
 
-        if (popupRuntimeReady) {
-          usePopupUiActionsEffective = false;
-          console.warn("Popup UI not ready; falling back to runtime message actions.");
-        } else {
-          throw new Error("Popup UI/runtime is not ready");
-        }
-      }
-    } else {
+    if (!popupUiReady) {
       const popupRuntimeReady = await waitForPopupRuntimeReady(popupClient, 12_000).catch(
         () => null
       );
 
-      if (!popupRuntimeReady) {
-        throw new Error("Popup runtime is not ready");
+      if (popupRuntimeReady) {
+        usePopupUiActionsEffective = false;
+        console.warn("Popup UI not ready; falling back to runtime message actions.");
+      } else {
+        throw new Error("Popup UI/runtime is not ready");
       }
     }
-
-    control = {
-      kind: "popup",
-      client: popupClient,
-      useUiActions: usePopupUiActionsEffective
-    };
   } else {
-    let runtimeContext = await waitForExtensionRuntimeContext(
-      demoClient,
-      demoContexts,
-      extensionId,
-      15_000
-    ).catch(() => null);
-
-    if (!runtimeContext) {
-      await demoClient.send("Page.reload", { ignoreCache: true }).catch(() => undefined);
-      runtimeContext = await waitForExtensionRuntimeContext(
-        demoClient,
-        demoContexts,
-        extensionId,
-        20_000
-      );
-    }
-
-    control = {
-      kind: "content-runtime",
-      client: demoClient,
-      contextId: runtimeContext.contextId,
-      contextTracker: demoContexts,
-      extensionId
-    };
-
-    if (!state.swClient) {
-      swTarget = await waitForExtensionServiceWorker(baseUrl, 10_000, extensionId).catch(
-        () => null
-      );
-
-      if (swTarget?.webSocketDebuggerUrl) {
-        const swClient = new CdpClient(swTarget.webSocketDebuggerUrl);
-        await swClient.connect();
-        await swClient.send("Runtime.enable");
-        state.swClient = swClient;
+    const popupRuntimeReady = await waitForPopupRuntimeReady(popupClient, 12_000).catch(() => null);
 
-        swClient.on("Runtime.exceptionThrown", (params) => {
-          swExceptions.push({
-            text: params?.exceptionDetails?.text ?? "unknown",
-            line: params?.exceptionDetails?.lineNumber ?? null
-          });
-        });
-      }
+    if (!popupRuntimeReady) {
+      throw new Error("Popup runtime is not ready");
     }
   }
 
+  const control = {
+    kind: "popup",
+    client: popupClient,
+    useUiActions: usePopupUiActionsEffective
+  };
+
   const demoExceptions = [];
   demoClient.on("Runtime.exceptionThrown", (params) => {
     demoExceptions.push({
@@ -384,6 +354,9 @@ async function main() {
 
   const sid = activeSessions[0]?.sid;
   assert(typeof sid === "string" && sid.length > 0, "Missing session id", { activeSessions });
+  assert(typeof activeSessions[0]?.tabId === "number", "Missing active session tab id", {
+    activeSessions
+  });
   if (typeof demoTab?.id === "number") {
     assert(activeSessions[0]?.tabId === demoTab.id, "Session started on unexpected tab", {
       expectedTabId: demoTab.id,
@@ -418,7 +391,8 @@ async function main() {
     baseUrl,
     demoUrl,
     browserClient: state.browserClient,
-    extensionId
+    extensionId,
+    networkEvidenceExpected
   });
   assert(realWorldResult.ok, "Real-world scenario failed", realWorldResult);
 
@@ -427,7 +401,7 @@ async function main() {
 
   await sleep(captureMode === "lite" || recordScreenInFullMode ? 2_400 : 1_600);
 
-  const stop = await stopActiveSessionFromControl(control, sid);
+  const stop = await stopActiveSessionFromControl(control, activeSessions[0]);
   assert(stop?.ok === true, `Failed to stop ${captureMode} mode`, stop);
 
   const indicatorGone = await waitForIndicatorGone(demoClient, 15_000);
@@ -493,9 +467,18 @@ async function main() {
     downloadRecord
   });
 
+  const needsArchiveEvidence = Boolean(
+    (realWorldScenario && realWorldResult.archiveEvidence) || recordScreenInFullMode
+  );
+  const archiveEvidencePlayer = needsArchiveEvidence
+    ? await WebBlackboxPlayer.open(
+        await readFile(exportedPath),
+        exportPassphrase.trim().length > 0 ? { passphrase: exportPassphrase.trim() } : {}
+      )
+    : null;
   const archiveEvidenceResult =
     realWorldScenario && realWorldResult.archiveEvidence
-      ? await verifyRealWorldArchiveEvidence(exportedPath, realWorldResult.archiveEvidence)
+      ? verifyRealWorldArchiveEvidence(archiveEvidencePlayer, realWorldResult.archiveEvidence)
       : { ok: true, skipped: true };
   assert(
     archiveEvidenceResult.ok,
@@ -504,7 +487,10 @@ async function main() {
   );
 
   const screenRecordingArchiveResult = recordScreenInFullMode
-    ? await verifyScreenRecordingArchiveEvidence(exportedPath)
+    ? await verifyScreenRecordingArchiveEvidence(archiveEvidencePlayer, {
+        captureScreenshots: captureScreenshotsInFullMode,
+        maxBlobBytes: e2eExportPolicy.maxArchiveBytes
+      })
     : { ok: true, skipped: "screen-recording-e2e-disabled" };
   assert(
     screenRecordingArchiveResult.ok,
@@ -544,24 +530,26 @@ async function main() {
   `);
   const playerResult = await waitForPlayerLoad(playerClient, 35_000, exportPassphrase);
   assert(playerResult.eventCount > 0, "Player rendered zero timeline events", playerResult);
-  assert(
-    playerResult.waterfallCount > 0,
-    "Player rendered zero network waterfall rows",
-    playerResult
-  );
+  if (networkEvidenceExpected) {
+    assert(
+      playerResult.waterfallCount > 0,
+      "Player rendered zero network waterfall rows",
+      playerResult
+    );
 
-  const hasApiRequest = [
-    ...(playerResult.waterfallSamples ?? []),
-    ...(playerResult.waterfallSampleUrls ?? [])
-  ].some((sample) => sample.includes("/api/"));
-  assert(hasApiRequest, "Player waterfall does not include demo API requests", playerResult);
+    const hasApiRequest = [
+      ...(playerResult.waterfallSamples ?? []),
+      ...(playerResult.waterfallSampleUrls ?? [])
+    ].some((sample) => sample.includes("/api/"));
+    assert(hasApiRequest, "Player waterfall does not include demo API requests", playerResult);
+  }
 
   const requiredEventTypes =
     captureMode === "lite"
       ? [
           "user.mousemove",
           "console.entry",
-          "network.request",
+          ...(networkEvidenceExpected ? ["network.request"] : []),
           "dom.snapshot",
           "storage.local.snapshot"
         ]
@@ -678,14 +666,6 @@ function assert(condition, message, details) {
   }
 }
 
-function safeStringify(value) {
-  try {
-    return JSON.stringify(value) ?? "";
-  } catch {
-    return String(value);
-  }
-}
-
 async function ensureBuildInputs() {
   await access(extensionDir, constants.R_OK);
   await access(resolve(extensionDir, "manifest.json"), constants.R_OK);
@@ -700,8 +680,19 @@ async function ensureBuildInputs() {
   await access(resolve(playerDir, "main.js"), constants.R_OK);
 }
 
-async function prepareScreenRecordingE2eExtensionDir(sourceDir) {
-  const tempDir = `/tmp/webblackbox-ext-fullchain-extension-${Date.now()}`;
+async function readExtensionHarnessCapabilities(sourceDir) {
+  const manifest = JSON.parse(await readFile(resolve(sourceDir, "manifest.json"), "utf8"));
+  const permissions = Array.isArray(manifest.permissions) ? manifest.permissions : [];
+  return {
+    activeTabActionGrantRequired:
+      permissions.includes("activeTab") && !permissions.includes("tabs"),
+    browserNetwork: permissions.includes("webRequest"),
+    fullCdp: permissions.includes("debugger")
+  };
+}
+
+async function prepareActionShortcutE2eExtensionDir(sourceDir) {
+  const tempDir = createE2eTempPath("webblackbox-ext-fullchain-extension");
   await rm(tempDir, { recursive: true, force: true });
   await cp(sourceDir, tempDir, { recursive: true });
 
@@ -723,7 +714,7 @@ async function prepareScreenRecordingE2eExtensionDir(sourceDir) {
 
 async function resolveChromeBinary(candidates) {
   for (const candidate of candidates) {
-    const resolved = await resolveChromeCandidate(candidate);
+    const resolved = await resolveExecutable(candidate);
 
     if (resolved) {
       return resolved;
@@ -735,65 +726,6 @@ async function resolveChromeBinary(candidates) {
   );
 }
 
-function assertCommandLineExtensionLoadingSupported(binary, browserVersion) {
-  const major = Number(/^Chrome\/(\d+)/u.exec(browserVersion ?? "")?.[1] ?? "0");
-  const normalizedBinary = String(binary).replaceAll("\\", "/").toLowerCase();
-  const isChromeForTesting = normalizedBinary.includes("chrome for testing");
-  const isChromium = normalizedBinary.includes("chromium");
-  const isMacBrandedChrome = normalizedBinary.includes("/applications/google chrome.app/");
-
-  if (major >= 137 && isMacBrandedChrome && !isChromeForTesting && !isChromium) {
-    throw new Error(
-      [
-        "This E2E requires a browser that still supports command-line unpacked extensions.",
-        "Official Chrome branded builds block --load-extension starting with Chrome 137.",
-        "Set WB_E2E_CHROME_BIN to Chrome for Testing or Chromium."
-      ].join(" ")
-    );
-  }
-}
-
-async function resolveChromeCandidate(candidate) {
-  if (typeof candidate !== "string" || candidate.trim().length === 0) {
-    return null;
-  }
-
-  const trimmed = candidate.trim();
-
-  if (isAbsolute(trimmed) || trimmed.startsWith(".")) {
-    try {
-      await access(trimmed, constants.X_OK);
-      return trimmed;
-    } catch {
-      return null;
-    }
-  }
-
-  const which = spawnSync("which", [trimmed], {
-    encoding: "utf8"
-  });
-
-  if (which.status !== 0) {
-    return null;
-  }
-
-  const resolved = which.stdout
-    .split("\n")
-    .map((line) => line.trim())
-    .find((line) => line.length > 0);
-
-  if (!resolved) {
-    return null;
-  }
-
-  try {
-    await access(resolved, constants.X_OK);
-    return resolved;
-  } catch {
-    return null;
-  }
-}
-
 function startChrome(binary, options) {
   const args = [
     `--remote-debugging-port=${options.remotePort}`,
@@ -808,8 +740,7 @@ function startChrome(binary, options) {
     "--disable-popup-blocking",
     "--safebrowsing-disable-download-protection",
     "--window-size=1400,1000",
-    `--disable-extensions-except=${options.extensionDir}`,
-    `--load-extension=${options.extensionDir}`,
+    ...extensionChromeLoadArgs(options.extensionDir),
     ...(options.allowlistedExtensionId
       ? [`--allowlisted-extension-id=${options.allowlistedExtensionId}`]
       : []),
@@ -889,7 +820,7 @@ async function launchChromeWithRetry(binary, options) {
       };
     } catch (error) {
       lastError = error;
-      await terminateChromeProcess(proc);
+      await terminateProcess(proc);
       logStream.end();
 
       if (attempt < options.attempts) {
@@ -905,30 +836,6 @@ async function launchChromeWithRetry(binary, options) {
   throw lastError instanceof Error ? lastError : new Error(String(lastError));
 }
 
-async function terminateChromeProcess(proc) {
-  if (!proc || proc.exitCode !== null || proc.signalCode !== null) {
-    return;
-  }
-
-  proc.kill("SIGTERM");
-  await Promise.race([
-    new Promise((resolve) => {
-      proc.once("exit", resolve);
-    }),
-    sleep(5_000)
-  ]);
-
-  if (proc.exitCode === null && proc.signalCode === null) {
-    proc.kill("SIGKILL");
-    await Promise.race([
-      new Promise((resolve) => {
-        proc.once("exit", resolve);
-      }),
-      sleep(2_000)
-    ]);
-  }
-}
-
 async function resolveLaunchPort(preferredPort) {
   if (Number.isFinite(preferredPort) && preferredPort > 0) {
     const preferredAvailable = await canBindPort(preferredPort);
@@ -1100,7 +1007,12 @@ async function handleApiRequest(request, response, requestUrl, tasks) {
     return;
   }
 
-  if (pathname === "/api/large-response" && request.method === "GET") {
+  if (
+    ["/api/large-response", "/api/iframe-large-response", "/api/worker-large-response"].includes(
+      pathname
+    ) &&
+    request.method === "GET"
+  ) {
     const rawBytes = Number(requestUrl.searchParams.get("bytes") ?? realWorldLargeResponseBytes);
     const size = Number.isFinite(rawBytes)
       ? Math.max(1024, Math.min(rawBytes, 4 * 1024 * 1024))
@@ -1824,152 +1736,8 @@ async function closeTarget(urlBase, targetId) {
   }
 }
 
-function createRuntimeContextTracker(client) {
-  const contexts = new Map();
-
-  client.on("Runtime.executionContextCreated", (params) => {
-    const context = params?.context;
-
-    if (context && typeof context.id === "number") {
-      contexts.set(context.id, context);
-    }
-  });
-
-  client.on("Runtime.executionContextDestroyed", (params) => {
-    const id = params?.executionContextId;
-
-    if (typeof id === "number") {
-      contexts.delete(id);
-    }
-  });
-
-  client.on("Runtime.executionContextsCleared", () => {
-    contexts.clear();
-  });
-
-  return {
-    list() {
-      return [...contexts.values()];
-    }
-  };
-}
-
-async function waitForExtensionRuntimeContext(pageClient, tracker, extensionId, timeoutMs) {
-  let lastSnapshot = null;
-
-  try {
-    return await waitFor(
-      async () => {
-        const contexts = tracker.list().filter((context) => {
-          const origin = typeof context.origin === "string" ? context.origin : "";
-          const name = typeof context.name === "string" ? context.name : "";
-          const auxData =
-            context.auxData && typeof context.auxData === "object" ? context.auxData : {};
-          const type = typeof auxData.type === "string" ? auxData.type : "";
-
-          return (
-            type === "isolated" ||
-            origin.startsWith(`chrome-extension://${extensionId}`) ||
-            name.includes(extensionId) ||
-            name.includes("WebBlackbox")
-          );
-        });
-
-        for (const context of contexts) {
-          const snapshot = await pageClient
-            .evaluate(
-              `
-                (() => {
-                  const chromeApi =
-                    typeof chrome === "object" && chrome !== null ? chrome : null;
-                  const runtime = chromeApi?.runtime ?? null;
-                  return {
-                    contextId: ${JSON.stringify(context.id)},
-                    contextName: ${JSON.stringify(context.name ?? "")},
-                    contextOrigin: ${JSON.stringify(context.origin ?? "")},
-                    url: location.href,
-                    runtimeId:
-                      runtime && typeof runtime.id === "string" ? runtime.id : null,
-                    hasRuntimeMessaging:
-                      runtime !== null && typeof runtime.sendMessage === "function",
-                    hasStorageLocal:
-                      typeof chromeApi?.storage?.local?.get === "function"
-                  };
-                })()
-              `,
-              { contextId: context.id }
-            )
-            .catch((error) => ({
-              contextId: context.id,
-              error: error instanceof Error ? error.message : String(error)
-            }));
-
-          lastSnapshot = snapshot;
-
-          if (
-            snapshot?.hasRuntimeMessaging &&
-            (snapshot.runtimeId === extensionId || typeof snapshot.runtimeId === "string")
-          ) {
-            return {
-              contextId: context.id,
-              snapshot
-            };
-          }
-        }
-
-        return null;
-      },
-      timeoutMs,
-      200,
-      "Extension runtime context not ready"
-    );
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    const contextSummary = tracker
-      .list()
-      .map((context) => ({
-        id: context.id,
-        name: context.name,
-        origin: context.origin,
-        auxData: context.auxData
-      }))
-      .slice(0, 12);
-    throw new Error(
-      `${message}; lastSnapshot=${JSON.stringify(lastSnapshot)}; contexts=${JSON.stringify(
-        contextSummary
-      )}`
-    );
-  }
-}
-
 async function evaluateControl(control, expression) {
-  try {
-    return await control.client.evaluate(
-      expression,
-      typeof control.contextId === "number" ? { contextId: control.contextId } : undefined
-    );
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    const canRefreshContext =
-      control.kind === "content-runtime" &&
-      control.contextTracker &&
-      control.extensionId &&
-      /Cannot find context|Execution context|Cannot find object with id/u.test(message);
-
-    if (!canRefreshContext) {
-      throw error;
-    }
-
-    const runtimeContext = await waitForExtensionRuntimeContext(
-      control.client,
-      control.contextTracker,
-      control.extensionId,
-      10_000
-    );
-    control.contextId = runtimeContext.contextId;
-
-    return control.client.evaluate(expression, { contextId: control.contextId });
-  }
+  return control.client.evaluate(expression);
 }
 
 async function configureE2eRecorderOptions(control, mode) {
@@ -2101,40 +1869,10 @@ async function startSessionFromControl(control, mode, expectedUrl, options = {})
       ? (options.visualCapture ?? (options.recordScreen === true ? "both" : "screenshots"))
       : null;
 
-  if (control.kind === "popup") {
-    return startSessionFromPopup(control.client, mode, expectedUrl, control.useUiActions, {
-      ...options,
-      visualCapture
-    });
-  }
-
-  return evaluateControl(
-    control,
-    `
-      (async () => {
-        const chromeApi = typeof chrome === 'object' && chrome !== null ? chrome : null;
-        if (typeof chromeApi?.runtime?.sendMessage !== 'function') {
-          return { ok: false, reason: 'runtime-api-unavailable' };
-        }
-
-        const response = await chromeApi.runtime.sendMessage({
-          kind: 'ui.start',
-          mode: ${JSON.stringify(mode)},
-          visualCapture: ${JSON.stringify(visualCapture)}
-        });
-
-        if (response && typeof response === 'object' && response.ok === false) {
-          return {
-            ok: false,
-            reason: 'runtime-start-rejected',
-            response
-          };
-        }
-
-        return { ok: true, mode: ${JSON.stringify(mode)}, via: 'content-runtime' };
-      })()
-    `
-  );
+  return startSessionFromPopup(control.client, mode, expectedUrl, control.useUiActions, {
+    ...options,
+    visualCapture
+  });
 }
 
 async function startSessionFromPopup(popupClient, mode, expectedUrl, useUiActions, options = {}) {
@@ -2223,138 +1961,23 @@ async function startSessionFromPopup(popupClient, mode, expectedUrl, useUiAction
     return popupClient.evaluate(expression);
   }
 
-  const expression = `
-    (async () => {
-      if (typeof chrome?.tabs?.query === 'function') {
-        const tabs = await chrome.tabs.query({});
-        const exact = tabs.find((tab) =>
-          typeof tab.id === 'number' &&
-          typeof tab.url === 'string' &&
-          tab.url.startsWith(${JSON.stringify(expectedUrl)})
-        );
-
-        const fallback = tabs.find((tab) =>
-          typeof tab.id === 'number' &&
-          typeof tab.url === 'string' &&
-          !tab.url.startsWith('chrome-extension://') &&
-          tab.url !== 'about:blank'
-        );
-
-        const target = exact ?? fallback;
-
-        if (!target || typeof target.id !== 'number') {
-          return {
-            ok: false,
-            reason: 'target-tab-not-found',
-            tabs: tabs.map((tab) => ({ id: tab.id, url: tab.url, active: tab.active }))
-          };
-        }
-
-        const response = await chrome.runtime.sendMessage({
-          kind: 'ui.start',
-          tabId: target.id,
-          mode: ${JSON.stringify(mode)},
-          visualCapture: ${JSON.stringify(visualCapture)}
-        });
-        if (response && typeof response === 'object' && response.ok === false) {
-          return {
-            ok: false,
-            reason: 'runtime-start-rejected',
-            tabId: target.id,
-            response
-          };
-        }
-        return {
-          ok: true,
-          tabId: target.id,
-          mode: ${JSON.stringify(mode)},
-          visualCapture: ${JSON.stringify(visualCapture)},
-          via: 'runtime-tabs'
-        };
-      }
-
-      const response = await chrome.runtime.sendMessage({
-        kind: 'ui.start',
-        mode: ${JSON.stringify(mode)},
-        visualCapture: ${JSON.stringify(visualCapture)}
-      });
-      if (response && typeof response === 'object' && response.ok === false) {
-        return {
-          ok: false,
-          reason: 'runtime-start-rejected',
-          response
-        };
-      }
-      return {
-        ok: true,
-        mode: ${JSON.stringify(mode)},
-        visualCapture: ${JSON.stringify(visualCapture)},
-        via: 'runtime-active-tab-fallback'
-      };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
+  return startSessionFromPopupRuntime(popupClient, {
+    mode,
+    expectedUrl,
+    visualCapture
+  });
 }
 
-async function stopActiveSessionFromControl(control, expectedSid) {
-  if (control.kind === "popup") {
-    return stopActiveSessionFromPopup(control.client, control.useUiActions, expectedSid);
-  }
-
-  return evaluateControl(
-    control,
-    `
-      (async () => {
-        const chromeApi = typeof chrome === 'object' && chrome !== null ? chrome : null;
-
-        if (typeof chromeApi?.runtime?.sendMessage !== 'function') {
-          return { ok: false, reason: 'runtime-api-unavailable' };
-        }
-
-        const store =
-          typeof chromeApi?.storage?.local?.get === 'function'
-            ? await chromeApi.storage.local.get('webblackbox.runtime.sessions')
-            : {};
-        const rows = store['webblackbox.runtime.sessions'];
-        const sessions = Array.isArray(rows) ? rows : [];
-        const expectedSid = ${JSON.stringify(expectedSid)};
-        const active =
-          (expectedSid
-            ? sessions.find((row) => row?.sid === expectedSid && typeof row?.tabId === 'number')
-            : undefined) ??
-          sessions.find((row) => typeof row?.tabId === 'number');
-
-        if (!active || typeof active.tabId !== 'number') {
-          if (expectedSid) {
-            return {
-              ok: true,
-              sid: expectedSid,
-              alreadyStopped: true,
-              via: 'content-runtime',
-              rows: sessions
-            };
-          }
-
-          return { ok: false, reason: 'no-active-session', rows: sessions };
-        }
-
-        const response = await chromeApi.runtime.sendMessage({
-          kind: 'ui.stop',
-          tabId: active.tabId
-        });
-
-        if (response && typeof response === 'object' && response.ok === false) {
-          return { ok: false, reason: 'runtime-stop-rejected', response };
-        }
-
-        return { ok: true, tabId: active.tabId, via: 'content-runtime' };
-      })()
-    `
+async function stopActiveSessionFromControl(control, activeSession) {
+  return stopActiveSessionFromPopup(
+    control.client,
+    control.useUiActions,
+    activeSession?.sid,
+    activeSession?.tabId
   );
 }
 
-async function stopActiveSessionFromPopup(popupClient, useUiActions, expectedSid) {
+async function stopActiveSessionFromPopup(popupClient, useUiActions, expectedSid, tabId) {
   if (useUiActions) {
     const expression = `
       (() => {
@@ -2385,71 +2008,11 @@ async function stopActiveSessionFromPopup(popupClient, useUiActions, expectedSid
     return popupClient.evaluate(expression);
   }
 
-  const expression = `
-    (async () => {
-      const store = await chrome.storage.local.get('webblackbox.runtime.sessions');
-      const rows = store['webblackbox.runtime.sessions'];
-      const sessions = Array.isArray(rows) ? rows : [];
-      const expectedSid = ${JSON.stringify(expectedSid)};
-      const active =
-        (expectedSid
-          ? sessions.find((row) => row?.sid === expectedSid && typeof row?.tabId === 'number')
-          : undefined) ??
-        sessions.find((row) => typeof row?.tabId === 'number');
-
-      if (!active || typeof active.tabId !== 'number') {
-        if (expectedSid) {
-          return {
-            ok: true,
-            sid: expectedSid,
-            alreadyStopped: true,
-            via: 'popup-runtime',
-            rows: sessions
-          };
-        }
-
-        return { ok: false, reason: 'no-active-session', rows: sessions };
-      }
-
-      await chrome.runtime.sendMessage({ kind: 'ui.stop', tabId: active.tabId });
-      return { ok: true, tabId: active.tabId };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
+  return stopSessionFromPopupPort(popupClient, { sid: expectedSid, tabId });
 }
 
 async function exportSessionFromControl(control, sid) {
-  if (control.kind === "popup") {
-    return exportSessionFromPopup(control.client, sid, control.useUiActions);
-  }
-
-  return evaluateControl(
-    control,
-    `
-      (async () => {
-        const chromeApi = typeof chrome === 'object' && chrome !== null ? chrome : null;
-
-        if (typeof chromeApi?.runtime?.sendMessage !== 'function') {
-          return { ok: false, reason: 'runtime-api-unavailable' };
-        }
-
-        const response = await chromeApi.runtime.sendMessage({
-          kind: 'ui.export',
-          sid: ${JSON.stringify(sid)},
-          passphrase: ${JSON.stringify(exportPassphrase)},
-          saveAs: false,
-          policy: ${JSON.stringify(e2eExportPolicy)}
-        });
-
-        if (response && typeof response === 'object' && response.ok === false) {
-          return { ok: false, reason: 'runtime-export-rejected', response };
-        }
-
-        return { ok: true, sid: ${JSON.stringify(sid)}, via: 'content-runtime' };
-      })()
-    `
-  );
+  return exportSessionFromPopup(control.client, sid, control.useUiActions);
 }
 
 async function exportSessionFromPopup(popupClient, sid, useUiActions) {
@@ -2510,20 +2073,12 @@ async function exportSessionFromPopup(popupClient, sid, useUiActions) {
     return popupClient.evaluate(expression);
   }
 
-  const expression = `
-    (async () => {
-      await chrome.runtime.sendMessage({
-        kind: 'ui.export',
-        sid: ${JSON.stringify(sid)},
-        passphrase: ${JSON.stringify(exportPassphrase)},
-        saveAs: false,
-        policy: ${JSON.stringify(e2eExportPolicy)}
-      });
-      return { ok: true, sid: ${JSON.stringify(sid)} };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
+  return exportSessionFromPopupRuntime(popupClient, {
+    sid,
+    passphrase: exportPassphrase,
+    saveAs: false,
+    policy: e2eExportPolicy
+  });
 }
 
 async function readRuntimeSessions(control) {
@@ -2536,8 +2091,14 @@ async function readRuntimeSessions(control) {
       }
 
       const store = await chromeApi.storage.local.get('webblackbox.runtime.sessions');
-      const rows = store['webblackbox.runtime.sessions'];
-      return Array.isArray(rows) ? rows : [];
+      const snapshot = store['webblackbox.runtime.sessions'];
+      return (
+        Array.isArray(snapshot)
+          ? snapshot
+          : Array.isArray(snapshot?.sessions)
+            ? snapshot.sessions
+            : []
+      ).filter((row) => row?.state !== 'stopped');
     })()
   `;
 
@@ -2782,125 +2343,6 @@ async function waitForExportedArchiveFile(sid, startedAtMs, timeoutMs) {
   );
 }
 
-async function verifyRealWorldArchiveEvidence(archivePath, evidence) {
-  if (exportPassphrase.length > 0) {
-    return { ok: true, skipped: "encrypted-export" };
-  }
-
-  const events = await readArchiveEvents(archivePath);
-  const eventTexts = events.map((event) => `${event.type} ${safeStringify(event.data)}`);
-  const missingMarkers = (evidence.markers ?? []).filter(
-    (marker) => !eventTexts.some((text) => text.includes(marker))
-  );
-  const missingUrls = (evidence.urls ?? []).filter(
-    (url) => !eventTexts.some((text) => text.includes(url))
-  );
-  const missingEventTypes = (evidence.eventTypes ?? []).filter(
-    (type) => !events.some((event) => event.type === type)
-  );
-
-  return {
-    ok: missingMarkers.length === 0 && missingUrls.length === 0 && missingEventTypes.length === 0,
-    eventCount: events.length,
-    missingMarkers,
-    missingUrls,
-    missingEventTypes
-  };
-}
-
-async function verifyScreenRecordingArchiveEvidence(archivePath) {
-  if (exportPassphrase.length > 0) {
-    return { ok: true, skipped: "encrypted-export" };
-  }
-
-  const zip = await JSZip.loadAsync(await readFile(archivePath));
-  const paths = Object.keys(zip.files);
-  const events = await readArchiveEvents(archivePath);
-  const startEvents = events.filter((event) => event.type === "screen.recording.start");
-  const chunkEvents = events.filter((event) => event.type === "screen.recording.chunk");
-  const endEvents = events.filter((event) => event.type === "screen.recording.end");
-  const screenshotEvents = events.filter((event) => event.type === "screen.screenshot");
-  const endWithChunks = endEvents.find(
-    (event) => Array.isArray(event.data?.chunks) && event.data.chunks.length > 0
-  );
-  const referencedChunks = new Set([
-    ...chunkEvents
-      .map((event) => event.data?.chunkId)
-      .filter((value) => typeof value === "string" && value.length > 0),
-    ...((Array.isArray(endWithChunks?.data?.chunks) ? endWithChunks.data.chunks : []).filter(
-      (value) => typeof value === "string" && value.length > 0
-    ) ?? [])
-  ]);
-  const webmBlobs = paths.filter((path) => path.startsWith("blobs/") && path.endsWith(".webm"));
-  const screenshotBlobs = paths.filter(
-    (path) => path.startsWith("blobs/") && path.endsWith(".webp")
-  );
-  const missingChunkBlobs = [...referencedChunks].filter(
-    (hash) => !webmBlobs.some((path) => path.includes(hash))
-  );
-  const screenshotLeak =
-    !captureScreenshotsInFullMode && (screenshotEvents.length > 0 || screenshotBlobs.length > 0);
-
-  return {
-    ok:
-      startEvents.length > 0 &&
-      chunkEvents.length > 0 &&
-      endEvents.length > 0 &&
-      Boolean(endWithChunks) &&
-      webmBlobs.length > 0 &&
-      missingChunkBlobs.length === 0 &&
-      !screenshotLeak,
-    startEvents: startEvents.length,
-    chunkEvents: chunkEvents.length,
-    endEvents: endEvents.length,
-    screenshotEvents: screenshotEvents.length,
-    endChunkCount: Array.isArray(endWithChunks?.data?.chunks)
-      ? endWithChunks.data.chunks.length
-      : 0,
-    webmBlobs: webmBlobs.length,
-    screenshotBlobs: screenshotBlobs.length,
-    referencedChunks: referencedChunks.size,
-    missingChunkBlobs,
-    screenshotLeak
-  };
-}
-
-async function readArchiveEvents(archivePath) {
-  const zip = await JSZip.loadAsync(await readFile(archivePath));
-  const paths = Object.keys(zip.files)
-    .filter((path) => path.startsWith("events/") && path.endsWith(".ndjson"))
-    .sort();
-  const events = [];
-
-  for (const path of paths) {
-    const file = zip.file(path);
-
-    if (!file) {
-      continue;
-    }
-
-    const text = await file.async("string");
-
-    for (const line of text.split(/\r?\n/u)) {
-      const trimmed = line.trim();
-
-      if (!trimmed) {
-        continue;
-      }
-
-      try {
-        events.push(JSON.parse(trimmed));
-      } catch (error) {
-        throw new Error(
-          `Failed to parse ${path}: ${error instanceof Error ? error.message : String(error)}`
-        );
-      }
-    }
-  }
-
-  return events;
-}
-
 async function runDemoScenario(demoClient) {
   const expression = `
     (async () => {
@@ -2928,7 +2370,8 @@ async function runRealWorldScenarioAddons({
   control,
   baseUrl,
   demoUrl,
-  browserClient
+  browserClient,
+  networkEvidenceExpected
 }) {
   if (!scenario) {
     return { ok: true, skipped: true };
@@ -2968,21 +2411,30 @@ async function runRealWorldScenarioAddons({
         history.replaceState({ route: 'checkout' }, '', '#/checkout?step=payment');
         window.dispatchEvent(new HashChangeEvent('hashchange'));
         result.spaRoutes.push(location.href);
+        await new Promise((resolve) => setTimeout(resolve, 500));
         mark('spa route checkout');
 
         const iframe = document.createElement('iframe');
         iframe.id = 'wb-realworld-frame';
-        iframe.srcdoc = '<!doctype html><button id="frame-button">Frame action</button><script>document.body.dataset.ready="true";<\\/script>';
+        iframe.src = '/demo/realworld-frame.html';
+        const iframeLoaded = new Promise((resolve) => {
+          const timeout = setTimeout(() => resolve(false), 3000);
+          iframe.addEventListener('load', () => {
+            clearTimeout(timeout);
+            resolve(true);
+          }, { once: true });
+        });
         document.body.appendChild(iframe);
-        await new Promise((resolve) => setTimeout(resolve, 150));
+        const iframeReady = await iframeLoaded;
+        await new Promise((resolve) => setTimeout(resolve, 300));
         iframe.contentDocument?.getElementById('frame-button')?.dispatchEvent(
           new MouseEvent('click', { bubbles: true })
         );
-        result.iframe = iframe.contentDocument?.body?.dataset.ready === 'true';
+        result.iframe = iframeReady && iframe.contentDocument?.body?.dataset.ready === 'true';
         mark('iframe ready');
 
         if (${JSON.stringify(wantsIframeNetwork)}) {
-          const iframeResponse = await iframe.contentWindow?.fetch('/api/large-response?source=iframe&bytes=2048');
+          const iframeResponse = await iframe.contentWindow?.fetch('/api/iframe-large-response?bytes=2048');
           const iframeText = iframeResponse ? await iframeResponse.text() : '';
           result.iframeNetworkBytes = iframeText.length;
           mark('iframe network ' + result.iframeNetworkBytes);
@@ -2990,10 +2442,11 @@ async function runRealWorldScenarioAddons({
 
         if (${JSON.stringify(wantsChildTarget)}) {
           const workerResult = await new Promise((resolve) => {
-            const workerFetchUrl = new URL('/api/large-response?source=worker&bytes=2048', location.href).href;
+            const workerFetchUrl = new URL('/api/worker-large-response?bytes=2048', location.href).href;
             const workerSource = [
               'self.onmessage = async () => {',
               '  try {',
+              '    await new Promise((resolve) => setTimeout(resolve, 500));',
               '    const response = await fetch(' + JSON.stringify(workerFetchUrl) + ');',
               '    const text = await response.text();',
               '    self.postMessage({ ok: true, bytes: text.length });',
@@ -3185,12 +2638,12 @@ async function runRealWorldScenarioAddons({
     permissionMarker,
     multiTabMarker
   ].filter((marker) => typeof marker === "string" && marker.length > 0);
-  const expectedUrls = ["/api/large-response?bytes="];
-  if (wantsIframeNetwork) {
-    expectedUrls.push("/api/large-response?source=iframe");
+  const expectedUrls = networkEvidenceExpected ? ["/api/large-response"] : [];
+  if (networkEvidenceExpected && wantsIframeNetwork) {
+    expectedUrls.push("/api/iframe-large-response");
   }
-  if (wantsChildTarget) {
-    expectedUrls.push("/api/large-response?source=worker");
+  if (networkEvidenceExpected && wantsChildTarget) {
+    expectedUrls.push("/api/worker-large-response");
   }
 
   return {
@@ -3215,7 +2668,7 @@ async function runRealWorldScenarioAddons({
     archiveEvidence: {
       markers: expectedMarkers,
       urls: expectedUrls,
-      eventTypes: ["console.entry", "network.request"]
+      eventTypes: ["console.entry", ...(networkEvidenceExpected ? ["network.request"] : [])]
     },
     browserConnected: Boolean(browserClient)
   };
@@ -4462,7 +3915,7 @@ async function cleanup() {
     }
   }
 
-  await terminateChromeProcess(state.chromeProcess);
+  await terminateProcess(state.chromeProcess);
 
   state.chromeProcess = null;
   state.baseUrl = null;
diff --git a/apps/extension/scripts/e2e-lite-perf-regression.mjs b/apps/extension/scripts/e2e-lite-perf-regression.mjs
index fc1aadb..d166c3f 100644
--- a/apps/extension/scripts/e2e-lite-perf-regression.mjs
+++ b/apps/extension/scripts/e2e-lite-perf-regression.mjs
@@ -1,14 +1,26 @@
 #!/usr/bin/env node
 
-import { spawn, spawnSync } from "node:child_process";
+import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { createServer } from "node:http";
 import { constants, createWriteStream } from "node:fs";
 import { access, mkdir, readFile, rm } from "node:fs/promises";
-import { dirname, isAbsolute, resolve } from "node:path";
+import { dirname, resolve } from "node:path";
 import { createServer as createNetServer } from "node:net";
 import { fileURLToPath } from "node:url";
 
+import {
+  createE2eTempPath,
+  extensionChromeLoadArgs,
+  resolveExecutable,
+  terminateProcess
+} from "../../../scripts/e2e-runtime.mjs";
+import {
+  deleteSessionFromSessionsPort,
+  startSessionFromPopupRuntime,
+  stopSessionFromPopupPort
+} from "./lib/extension-e2e-controller.mjs";
+
 const root = dirname(fileURLToPath(import.meta.url));
 const extensionRoot = resolve(root, "..");
 
@@ -16,8 +28,9 @@ const extensionDir = process.env.WB_E2E_EXTENSION_DIR ?? resolve(extensionRoot,
 const remotePort = Number(process.env.WB_E2E_REMOTE_PORT ?? "9235");
 const headless = (process.env.WB_E2E_HEADLESS ?? "1") !== "0";
 const profileDir =
-  process.env.WB_E2E_PROFILE_DIR ?? `/tmp/webblackbox-ext-lite-perf-profile-${Date.now()}`;
-const chromeLogPath = process.env.WB_E2E_LOG ?? `/tmp/webblackbox-ext-lite-perf-${Date.now()}.log`;
+  process.env.WB_E2E_PROFILE_DIR ?? createE2eTempPath("webblackbox-ext-lite-perf-profile");
+const chromeLogPath =
+  process.env.WB_E2E_LOG ?? createE2eTempPath("webblackbox-ext-lite-perf", ".log");
 const chromeReadyTimeoutMs = Number(process.env.WB_E2E_CHROME_READY_TIMEOUT_MS ?? "45000");
 const chromeLaunchAttempts = Number(process.env.WB_E2E_CHROME_LAUNCH_ATTEMPTS ?? "2");
 
@@ -87,6 +100,7 @@ const state = {
   server: null,
   browserClient: null,
   popupClient: null,
+  sessionsClient: null,
   pageClient: null,
   swClient: null,
   openedTargetIds: []
@@ -238,7 +252,7 @@ async function main() {
   );
 
   const popupUrl = `chrome-extension://${extensionId}/popup.html`;
-  const popupStart = await openPopupRuntimeTarget(popupUrl);
+  const popupStart = await openExtensionRuntimeTarget(popupUrl);
   state.popupClient = popupStart.client;
 
   const swTarget = await waitForExtensionTarget(
@@ -262,7 +276,10 @@ async function main() {
     });
   });
 
-  const start = await startSessionFromPopup(popupStart.client, "lite", stressUrl);
+  const start = await startSessionFromPopupRuntime(popupStart.client, {
+    mode: "lite",
+    expectedUrl: stressUrl
+  });
   assert(start?.ok === true, "Failed to start lite mode session.", start);
 
   const indicatorText = await waitForIndicatorText(pageClient, "REC lite", 25_000);
@@ -281,6 +298,9 @@ async function main() {
   assert(typeof active?.sid === "string" && active.sid.length > 0, "Missing active session sid.", {
     sessionsAfterStart
   });
+  assert(typeof active?.tabId === "number", "Missing active session tab id.", {
+    sessionsAfterStart
+  });
 
   await closeClient(popupStart.client);
   state.popupClient = null;
@@ -348,10 +368,13 @@ async function main() {
     recordedNavigation
   );
 
-  const popupStop = await openPopupRuntimeTarget(popupUrl);
+  const popupStop = await openExtensionRuntimeTarget(popupUrl);
   state.popupClient = popupStop.client;
 
-  const stop = await stopActiveSessionFromPopup(popupStop.client);
+  const stop = await stopSessionFromPopupPort(popupStop.client, {
+    sid: active.sid,
+    tabId: active.tabId
+  });
   assert(stop?.ok === true, "Failed to stop lite mode session.", stop);
 
   const indicatorGone = await waitForIndicatorGone(pageClient, 15_000);
@@ -375,7 +398,12 @@ async function main() {
     { sessionsAfterStop }
   );
 
-  const deleted = await deleteSessionFromPopup(popupStop.client, active.sid);
+  const sessionsUrl = `chrome-extension://${extensionId}/sessions.html`;
+  const sessionsController = await openExtensionRuntimeTarget(sessionsUrl);
+  state.sessionsClient = sessionsController.client;
+  const deleted = await deleteSessionFromSessionsPort(sessionsController.client, {
+    sid: active.sid
+  });
   assert(deleted?.ok === true, "Failed to delete stopped session.", deleted);
 
   assert(swExceptions.length === 0, "Service worker threw runtime exceptions.", {
@@ -424,7 +452,7 @@ async function ensureExtensionBuildReady(dir) {
 
 async function resolveChromeBinary(candidates) {
   for (const candidate of candidates) {
-    const resolved = await resolveChromeCandidate(candidate);
+    const resolved = await resolveExecutable(candidate);
 
     if (resolved) {
       return resolved;
@@ -436,39 +464,6 @@ async function resolveChromeBinary(candidates) {
   );
 }
 
-async function resolveChromeCandidate(candidate) {
-  if (typeof candidate !== "string" || candidate.trim().length === 0) {
-    return null;
-  }
-
-  const trimmed = candidate.trim();
-
-  if (isAbsolute(trimmed) || trimmed.startsWith(".")) {
-    try {
-      await access(trimmed, constants.X_OK);
-      return trimmed;
-    } catch {
-      return null;
-    }
-  }
-
-  const which = spawnSync("which", [trimmed], {
-    encoding: "utf8"
-  });
-  const resolved = which.status === 0 ? which.stdout.trim() : "";
-
-  if (!resolved) {
-    return null;
-  }
-
-  try {
-    await access(resolved, constants.X_OK);
-    return resolved;
-  } catch {
-    return null;
-  }
-}
-
 function startChrome(binary, options) {
   const args = [
     `--remote-debugging-port=${options.remotePort}`,
@@ -483,8 +478,7 @@ function startChrome(binary, options) {
     "--disable-popup-blocking",
     "--safebrowsing-disable-download-protection",
     "--window-size=1400,1000",
-    `--disable-extensions-except=${options.extensionDir}`,
-    `--load-extension=${options.extensionDir}`,
+    ...extensionChromeLoadArgs(options.extensionDir),
     "--enable-logging=stderr",
     "--v=1",
     "about:blank"
@@ -561,7 +555,7 @@ async function launchChromeWithRetry(binary, options) {
       };
     } catch (error) {
       lastError = error;
-      await terminateChromeProcess(proc);
+      await terminateProcess(proc);
       logStream.end();
 
       if (attempt < options.attempts) {
@@ -577,30 +571,6 @@ async function launchChromeWithRetry(binary, options) {
   throw lastError instanceof Error ? lastError : new Error(String(lastError));
 }
 
-async function terminateChromeProcess(proc) {
-  if (!proc || proc.killed || proc.exitCode !== null) {
-    return;
-  }
-
-  proc.kill("SIGTERM");
-  await Promise.race([
-    new Promise((resolve) => {
-      proc.once("exit", resolve);
-    }),
-    sleep(5_000)
-  ]);
-
-  if (proc.exitCode === null && !proc.killed) {
-    proc.kill("SIGKILL");
-    await Promise.race([
-      new Promise((resolve) => {
-        proc.once("exit", resolve);
-      }),
-      sleep(2_000)
-    ]);
-  }
-}
-
 async function resolveLaunchPort(preferredPort) {
   if (Number.isFinite(preferredPort) && preferredPort > 0) {
     const preferredAvailable = await canBindPort(preferredPort);
@@ -2250,14 +2220,14 @@ async function openTarget(urlBase, url) {
   return target;
 }
 
-async function openPopupRuntimeTarget(popupUrl) {
-  assert(state.baseUrl, "Chrome base URL is unavailable while opening the popup target.");
-  const target = await openTarget(state.baseUrl, popupUrl);
+async function openExtensionRuntimeTarget(pageUrl) {
+  assert(state.baseUrl, "Chrome base URL is unavailable while opening the extension target.");
+  const target = await openTarget(state.baseUrl, pageUrl);
   state.openedTargetIds.push(target.id);
   const client = new CdpClient(target.webSocketDebuggerUrl);
   await client.connect();
   await client.send("Runtime.enable");
-  await waitForPopupRuntimeReady(client, 20_000);
+  await waitForExtensionRuntimeReady(client, 20_000);
 
   return {
     target,
@@ -2308,10 +2278,10 @@ async function connectToDiscoveredTarget(target, browserClient) {
   return browserClient.attachToTarget(target.targetId);
 }
 
-async function waitForPopupRuntimeReady(popupClient, timeoutMs) {
+async function waitForExtensionRuntimeReady(extensionClient, timeoutMs) {
   return waitFor(
     async () => {
-      const snapshot = await popupClient.evaluate(`
+      const snapshot = await extensionClient.evaluate(`
         (() => ({
           runtimeId:
             typeof chrome === 'object' &&
@@ -2588,84 +2558,18 @@ async function runDocumentNavigationScenario(pageClient, options) {
   };
 }
 
-async function startSessionFromPopup(popupClient, mode, expectedUrl) {
-  const expression = `
-    (async () => {
-      const tabs = await chrome.tabs.query({});
-      const target =
-        tabs.find((tab) =>
-          typeof tab.id === 'number' &&
-          typeof tab.url === 'string' &&
-          tab.url.startsWith(${JSON.stringify(expectedUrl)})
-        ) ??
-        tabs.find((tab) =>
-          typeof tab.id === 'number' &&
-          typeof tab.url === 'string' &&
-          !tab.url.startsWith('chrome-extension://') &&
-          tab.url !== 'about:blank'
-        );
-
-      if (!target || typeof target.id !== 'number') {
-        return {
-          ok: false,
-          reason: 'target-tab-not-found',
-          tabs: tabs.map((tab) => ({ id: tab.id, url: tab.url, active: tab.active }))
-        };
-      }
-
-      await chrome.runtime.sendMessage({
-        kind: 'ui.start',
-        tabId: target.id,
-        mode: ${JSON.stringify(mode)}
-      });
-
-      return {
-        ok: true,
-        tabId: target.id,
-        mode: ${JSON.stringify(mode)}
-      };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
-}
-
-async function stopActiveSessionFromPopup(popupClient) {
-  const expression = `
-    (async () => {
-      const store = await chrome.storage.local.get('webblackbox.runtime.sessions');
-      const rows = store['webblackbox.runtime.sessions'];
-      const active = Array.isArray(rows) ? rows[0] : undefined;
-
-      if (!active || typeof active.tabId !== 'number') {
-        return { ok: false, reason: 'no-active-session', rows };
-      }
-
-      await chrome.runtime.sendMessage({ kind: 'ui.stop', tabId: active.tabId });
-      return { ok: true, tabId: active.tabId };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
-}
-
-async function deleteSessionFromPopup(popupClient, sid) {
-  const expression = `
-    (async () => {
-      await chrome.runtime.sendMessage({ kind: 'ui.delete', sid: ${JSON.stringify(sid)} });
-      return { ok: true, sid: ${JSON.stringify(sid)} };
-    })()
-  `;
-
-  return popupClient.evaluate(expression);
-}
-
 async function readRuntimeSessions(popupClient) {
   const expression = `
     (async () => {
       const store = await chrome.storage.local.get('webblackbox.runtime.sessions');
-      const rows = store['webblackbox.runtime.sessions'];
-      return Array.isArray(rows) ? rows : [];
+      const snapshot = store['webblackbox.runtime.sessions'];
+      return (
+        Array.isArray(snapshot)
+          ? snapshot
+          : Array.isArray(snapshot?.sessions)
+            ? snapshot.sessions
+            : []
+      ).filter((row) => row?.state !== 'stopped');
     })()
   `;
 
@@ -3111,6 +3015,9 @@ async function cleanup() {
   await closeClient(state.popupClient);
   state.popupClient = null;
 
+  await closeClient(state.sessionsClient);
+  state.sessionsClient = null;
+
   await closeClient(state.browserClient);
   state.browserClient = null;
 
@@ -3120,14 +3027,7 @@ async function cleanup() {
     }
   }
 
-  if (state.chromeProcess && !state.chromeProcess.killed) {
-    state.chromeProcess.kill("SIGTERM");
-    await sleep(700);
-
-    if (!state.chromeProcess.killed) {
-      state.chromeProcess.kill("SIGKILL");
-    }
-  }
+  await terminateProcess(state.chromeProcess, { graceMs: 700 });
 
   state.chromeProcess = null;
   state.baseUrl = null;
diff --git a/apps/extension/scripts/e2e-realworld-stability.mjs b/apps/extension/scripts/e2e-realworld-stability.mjs
index ff0f9f5..a3f0b35 100644
--- a/apps/extension/scripts/e2e-realworld-stability.mjs
+++ b/apps/extension/scripts/e2e-realworld-stability.mjs
@@ -4,6 +4,8 @@ import { spawn } from "node:child_process";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
+import { createE2eTempPath } from "../../../scripts/e2e-runtime.mjs";
+
 const root = dirname(fileURLToPath(import.meta.url));
 const fullchainScript = resolve(root, "e2e-fullchain-demo.mjs");
 
@@ -84,13 +86,14 @@ function runScenario(scenario, index) {
       ...scenario.env,
       WB_E2E_REMOTE_PORT: String(basePort + index),
       WB_E2E_LOG:
-        process.env.WB_E2E_LOG ?? `/tmp/webblackbox-realworld-${scenario.name}-${Date.now()}.log`,
+        process.env.WB_E2E_LOG ??
+        createE2eTempPath(`webblackbox-realworld-${scenario.name}`, ".log"),
       WB_E2E_PROFILE_DIR:
         process.env.WB_E2E_PROFILE_DIR ??
-        `/tmp/webblackbox-realworld-profile-${scenario.name}-${Date.now()}`,
+        createE2eTempPath(`webblackbox-realworld-profile-${scenario.name}`),
       WB_E2E_DOWNLOAD_DIR:
         process.env.WB_E2E_DOWNLOAD_DIR ??
-        `/tmp/webblackbox-realworld-downloads-${scenario.name}-${Date.now()}`
+        createE2eTempPath(`webblackbox-realworld-downloads-${scenario.name}`)
     };
 
     console.log(`\n[realworld:${index + 1}/${selected.length}] ${scenario.name}`);
diff --git a/apps/extension/scripts/lib/archive-evidence.mjs b/apps/extension/scripts/lib/archive-evidence.mjs
new file mode 100644
index 0000000..fab1c66
--- /dev/null
+++ b/apps/extension/scripts/lib/archive-evidence.mjs
@@ -0,0 +1,130 @@
+export function verifyRealWorldArchiveEvidence(player, evidence) {
+  const events = readPlayerEvents(player);
+  const eventTexts = events.map((event) => `${event.type} ${safeStringify(event.data)}`);
+  const missingMarkers = (evidence?.markers ?? []).filter(
+    (marker) => !eventTexts.some((text) => text.includes(marker))
+  );
+  const missingUrls = (evidence?.urls ?? []).filter(
+    (url) => !eventTexts.some((text) => text.includes(url))
+  );
+  const missingEventTypes = (evidence?.eventTypes ?? []).filter(
+    (type) => !events.some((event) => event.type === type)
+  );
+
+  return {
+    ok: missingMarkers.length === 0 && missingUrls.length === 0 && missingEventTypes.length === 0,
+    eventCount: events.length,
+    missingMarkers,
+    missingUrls,
+    missingEventTypes
+  };
+}
+
+export async function verifyScreenRecordingArchiveEvidence(
+  player,
+  { captureScreenshots, maxBlobBytes }
+) {
+  if (!Number.isSafeInteger(maxBlobBytes) || maxBlobBytes <= 0) {
+    throw new TypeError("Screen recording evidence requires a positive blob read limit.");
+  }
+
+  const events = readPlayerEvents(player);
+  const paths = readIntegrityPaths(player);
+  const startEvents = events.filter((event) => event.type === "screen.recording.start");
+  const chunkEvents = events.filter((event) => event.type === "screen.recording.chunk");
+  const endEvents = events.filter((event) => event.type === "screen.recording.end");
+  const screenshotEvents = events.filter((event) => event.type === "screen.screenshot");
+  const endWithChunks = endEvents.find(
+    (event) => Array.isArray(event.data?.chunks) && event.data.chunks.length > 0
+  );
+  const referencedChunks = new Set([
+    ...chunkEvents
+      .map((event) => event.data?.chunkId)
+      .filter((value) => typeof value === "string" && value.length > 0),
+    ...(Array.isArray(endWithChunks?.data?.chunks)
+      ? endWithChunks.data.chunks.filter((value) => typeof value === "string" && value.length > 0)
+      : [])
+  ]);
+  const webmBlobs = paths.filter((path) => path.startsWith("blobs/") && path.endsWith(".webm"));
+  const screenshotBlobs = paths.filter(
+    (path) => path.startsWith("blobs/") && path.endsWith(".webp")
+  );
+  const missingChunkBlobs = [];
+  const invalidChunkBlobs = [];
+
+  for (const hash of referencedChunks) {
+    let blob;
+
+    try {
+      blob = await player.readBlobTransient(hash, maxBlobBytes);
+    } catch (error) {
+      invalidChunkBlobs.push({
+        hash,
+        error: error instanceof Error ? error.message : String(error)
+      });
+      continue;
+    }
+
+    if (!blob) {
+      missingChunkBlobs.push(hash);
+    } else if (blob.mime !== "video/webm" || (blob.bytes?.byteLength ?? 0) <= 0) {
+      invalidChunkBlobs.push({
+        hash,
+        mime: blob.mime ?? null,
+        bytes: blob.bytes?.byteLength ?? 0
+      });
+    }
+  }
+
+  const screenshotLeak =
+    !captureScreenshots && (screenshotEvents.length > 0 || screenshotBlobs.length > 0);
+
+  return {
+    ok:
+      startEvents.length > 0 &&
+      chunkEvents.length > 0 &&
+      endEvents.length > 0 &&
+      Boolean(endWithChunks) &&
+      webmBlobs.length > 0 &&
+      referencedChunks.size > 0 &&
+      missingChunkBlobs.length === 0 &&
+      invalidChunkBlobs.length === 0 &&
+      !screenshotLeak,
+    startEvents: startEvents.length,
+    chunkEvents: chunkEvents.length,
+    endEvents: endEvents.length,
+    screenshotEvents: screenshotEvents.length,
+    endChunkCount: Array.isArray(endWithChunks?.data?.chunks)
+      ? endWithChunks.data.chunks.length
+      : 0,
+    webmBlobs: webmBlobs.length,
+    screenshotBlobs: screenshotBlobs.length,
+    referencedChunks: referencedChunks.size,
+    missingChunkBlobs,
+    invalidChunkBlobs,
+    screenshotLeak
+  };
+}
+
+function readPlayerEvents(player) {
+  const events = player?.events;
+
+  if (!Array.isArray(events)) {
+    throw new TypeError("Archive evidence requires a loaded Player instance.");
+  }
+
+  return events;
+}
+
+function readIntegrityPaths(player) {
+  const files = player?.archive?.integrity?.files;
+  return files && typeof files === "object" && !Array.isArray(files) ? Object.keys(files) : [];
+}
+
+function safeStringify(value) {
+  try {
+    return JSON.stringify(value) ?? "";
+  } catch {
+    return String(value);
+  }
+}
diff --git a/apps/extension/scripts/lib/extension-build-cli.mjs b/apps/extension/scripts/lib/extension-build-cli.mjs
new file mode 100644
index 0000000..454265c
--- /dev/null
+++ b/apps/extension/scripts/lib/extension-build-cli.mjs
@@ -0,0 +1,59 @@
+export function parseExtensionBuildArgs(args) {
+  const knownFlags = new Set(["--package", "--profile", "--release", "--output", "--output-dir"]);
+  const packageArchive = args.includes("--package");
+  const outputDir = readFlagValue(args, "--output-dir");
+  const outputPath = readFlagValue(args, "--output");
+  const requestedProfile = readFlagValue(args, "--profile");
+
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+
+    if (
+      arg.startsWith("--output=") ||
+      arg.startsWith("--output-dir=") ||
+      arg.startsWith("--profile=")
+    ) {
+      continue;
+    }
+
+    if (!knownFlags.has(arg)) {
+      throw new Error(`Unknown argument: ${arg}`);
+    }
+
+    if (
+      (arg === "--output" || arg === "--output-dir" || arg === "--profile") &&
+      !args[index + 1]?.startsWith("--")
+    ) {
+      index += 1;
+    }
+  }
+
+  return {
+    // Packaging is a release operation by default. Development builds retain
+    // their stable key unless callers explicitly request --release.
+    release: packageArchive || args.includes("--release"),
+    packageArchive,
+    // The safe profile is the only implicit packaging profile. Producing an
+    // enterprise archive requires an explicit --profile dev opt-in.
+    profile: requestedProfile ?? (packageArchive ? "store-safe" : "dev"),
+    outputDir,
+    outputPath
+  };
+}
+
+function readFlagValue(args, flagName) {
+  const inline = args.find((entry) => entry.startsWith(`${flagName}=`));
+
+  if (inline) {
+    return inline.slice(flagName.length + 1);
+  }
+
+  const index = args.indexOf(flagName);
+
+  if (index === -1) {
+    return null;
+  }
+
+  const value = args[index + 1];
+  return value && !value.startsWith("--") ? value : null;
+}
diff --git a/apps/extension/scripts/lib/extension-build.mjs b/apps/extension/scripts/lib/extension-build.mjs
index 47d4bb2..72b639c 100644
--- a/apps/extension/scripts/lib/extension-build.mjs
+++ b/apps/extension/scripts/lib/extension-build.mjs
@@ -3,6 +3,9 @@ import { access, cp, mkdir, readFile, readdir, rm, stat, writeFile } from "node:
 import { dirname, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import JSZip from "jszip";
+import { init as initEsmLexer, parse as parseEsm } from "es-module-lexer";
+
+await initEsmLexer;
 
 const scriptDir = dirname(fileURLToPath(import.meta.url));
 
@@ -61,6 +64,7 @@ export const EXTENSION_MANIFEST_PROFILES = ["dev", "store-safe"];
 // and persistent host access comes from `<all_urls>`, so neither `cookies`
 // nor `activeTab` belongs in the dev/enterprise permission set.
 const DEV_PERMISSIONS = [
+  "alarms",
   "debugger",
   "downloads",
   "offscreen",
@@ -68,19 +72,22 @@ const DEV_PERMISSIONS = [
   "storage",
   "tabCapture",
   "tabs",
+  "webNavigation",
   "webRequest"
 ];
 const STORE_SAFE_PERMISSIONS = [
   "activeTab",
+  "alarms",
   "downloads",
   "offscreen",
   "scripting",
   "storage",
-  "tabCapture"
+  "webNavigation"
 ];
 const URL_MATCHES = ["<all_urls>"];
 const ARCHIVE_FIXED_DATE = new Date("1980-01-01T00:00:00.000Z");
 const ARCHIVE_EXCLUDED_FILE_NAMES = new Set([".DS_Store"]);
+const INJECTED_MODULE_EXPORTS = ["bootstrap", "control"];
 
 async function readJson(path) {
   const text = await readFile(path, "utf8");
@@ -132,7 +139,8 @@ export function createExtensionManifest({ version, release = false, profile = "d
     web_accessible_resources: [
       {
         resources: ["content-agent.js", "injected.js"],
-        matches: [...URL_MATCHES]
+        matches: [...URL_MATCHES],
+        use_dynamic_url: true
       }
     ],
     content_security_policy: {
@@ -149,17 +157,6 @@ export function createExtensionManifest({ version, release = false, profile = "d
     }
   };
 
-  if (!storeSafe) {
-    manifest.content_scripts = [
-      {
-        matches: [...URL_MATCHES],
-        js: ["content.js"],
-        all_frames: true,
-        run_at: "document_start"
-      }
-    ];
-  }
-
   return manifest;
 }
 
@@ -183,6 +180,12 @@ export function validateExtensionManifest(
     issues.push(`Manifest version must match package version ${version}.`);
   }
 
+  if (!isValidChromeExtensionVersion(manifest?.version)) {
+    issues.push(
+      "Manifest version must use 1-4 dot-separated integers from 0 to 65535, without leading zeroes, and must not be all zero."
+    );
+  }
+
   if (release && Object.hasOwn(manifest ?? {}, "key")) {
     issues.push("Release manifest must not include the extension key.");
   }
@@ -201,10 +204,11 @@ export function validateExtensionManifest(
   }
 
   const webAccessibleResources = manifest?.web_accessible_resources;
-  const injectedResources =
+  const injectedResourceEntry =
     Array.isArray(webAccessibleResources) && webAccessibleResources.length === 1
-      ? webAccessibleResources[0]?.resources
+      ? webAccessibleResources[0]
       : null;
+  const injectedResources = injectedResourceEntry?.resources;
 
   if (
     !Array.isArray(injectedResources) ||
@@ -213,18 +217,87 @@ export function validateExtensionManifest(
     issues.push("Manifest must only expose content-agent.js and injected.js as web resources.");
   }
 
-  validateUniqueStringArray(manifest?.permissions, "permissions", issues);
+  if (injectedResourceEntry?.use_dynamic_url !== true) {
+    issues.push("Manifest web resources must use dynamic URLs.");
+  }
 
   if (storeSafe) {
     validateStoreSafeManifest(manifest, issues);
   } else {
-    validateUniqueStringArray(manifest?.host_permissions, "host_permissions", issues);
     validateDevManifest(manifest, issues);
   }
 
+  validateAbsentOrEmptyArray(manifest, "optional_permissions", issues);
+  validateAbsentOrEmptyArray(manifest, "optional_host_permissions", issues);
+
   return issues;
 }
 
+export function validateInjectedModuleBuildSource(source) {
+  if (typeof source !== "string") {
+    return ["injected.js must be an ECMAScript module source file."];
+  }
+
+  let imports;
+  let exports;
+  try {
+    [imports, exports] = parseEsm(source, "injected.js");
+  } catch (error) {
+    return [
+      `injected.js must contain valid ECMAScript module syntax: ${
+        error instanceof Error ? error.message : String(error)
+      }`
+    ];
+  }
+
+  const actualExports = [...new Set(exports.map((entry) => entry.n))].sort();
+  const expectedExports = [...INJECTED_MODULE_EXPORTS].sort();
+  const issues = [];
+
+  if (actualExports.join(",") !== expectedExports.join(",")) {
+    issues.push(
+      `injected.js must only export ${INJECTED_MODULE_EXPORTS.join(" and ")}; found ${
+        actualExports.length > 0 ? actualExports.join(", ") : "no named exports"
+      }.`
+    );
+  }
+
+  if (actualExports.includes("default")) {
+    issues.push("injected.js must not expose a default export.");
+  }
+
+  if (imports.some((entry) => source.startsWith("export", entry.ss))) {
+    issues.push("injected.js must not re-export code from another module.");
+  }
+
+  return issues;
+}
+
+function isValidChromeExtensionVersion(value) {
+  if (typeof value !== "string") {
+    return false;
+  }
+
+  const components = value.split(".");
+  if (components.length < 1 || components.length > 4) {
+    return false;
+  }
+
+  let nonZero = false;
+  for (const component of components) {
+    if (!/^(?:0|[1-9]\d*)$/.test(component)) {
+      return false;
+    }
+    const numeric = Number(component);
+    if (!Number.isSafeInteger(numeric) || numeric > 65_535) {
+      return false;
+    }
+    nonZero ||= numeric !== 0;
+  }
+
+  return nonZero;
+}
+
 export async function copyPublicAssets(outputDir) {
   await mkdir(outputDir, { recursive: true });
 
@@ -261,6 +334,10 @@ export async function assertExtensionBuild(outputDir, { version, release = false
   await Promise.all(
     REQUIRED_BUILD_FILES.map((file) => access(resolve(outputDir, file), constants.R_OK))
   );
+  const buildFileIssues = validatePackagedFileSet(await listPackagedFiles(outputDir));
+  if (buildFileIssues.length > 0) {
+    throw new Error(`Build output file set is invalid:\n- ${buildFileIssues.join("\n- ")}`);
+  }
 
   const manifest = await readJson(resolve(outputDir, "manifest.json"));
   const resolvedProfile = profile ?? inferManifestProfile(manifest);
@@ -274,6 +351,15 @@ export async function assertExtensionBuild(outputDir, { version, release = false
     throw new Error(`Build output manifest is invalid:\n- ${issues.join("\n- ")}`);
   }
 
+  const injectedModuleIssues = validateInjectedModuleBuildSource(
+    await readFile(resolve(outputDir, "injected.js"), "utf8")
+  );
+  if (injectedModuleIssues.length > 0) {
+    throw new Error(
+      `Build output injected module is invalid:\n- ${injectedModuleIssues.join("\n- ")}`
+    );
+  }
+
   return manifest;
 }
 
@@ -325,15 +411,16 @@ export async function createChromeArchive({ sourceDir = buildDir, outputPath } =
   }
 
   const archiveSlug = slugify(EXTENSION_ARCHIVE_SLUG);
+  const archiveVariant = sourceProfile === "store-safe" ? "chrome" : "enterprise-chrome";
   const resolvedOutputPath = outputPath
     ? resolve(process.cwd(), outputPath)
-    : resolve(distDir, `${archiveSlug}-${version}-chrome.zip`);
+    : resolve(distDir, `${archiveSlug}-${version}-${archiveVariant}.zip`);
 
   await mkdir(dirname(resolvedOutputPath), { recursive: true });
   await mkdir(distDir, { recursive: true });
 
   if (!outputPath) {
-    await removeStaleArchives(distDir, archiveSlug, resolvedOutputPath);
+    await removeStaleArchives(distDir, archiveSlug, archiveVariant, resolvedOutputPath);
   }
 
   await rm(resolvedOutputPath, { force: true });
@@ -350,7 +437,8 @@ export async function createChromeArchive({ sourceDir = buildDir, outputPath } =
 
     zip.file(relativePath, bytes, {
       binary: true,
-      date: ARCHIVE_FIXED_DATE
+      date: ARCHIVE_FIXED_DATE,
+      createFolders: false
     });
   }
 
@@ -365,6 +453,11 @@ export async function createChromeArchive({ sourceDir = buildDir, outputPath } =
 
   await writeFile(resolvedOutputPath, archiveBytes);
 
+  await assertChromeArchive(resolvedOutputPath, {
+    version,
+    profile: sourceProfile
+  });
+
   const archiveStat = await stat(resolvedOutputPath);
 
   return {
@@ -372,12 +465,68 @@ export async function createChromeArchive({ sourceDir = buildDir, outputPath } =
     bytes: archiveStat.size,
     manifest: {
       name: EXTENSION_ARCHIVE_NAME,
-      version: releaseManifest.version
+      version: releaseManifest.version,
+      profile: sourceProfile
     },
     strippedKeys: Object.hasOwn(sourceManifest ?? {}, "key") ? ["key"] : []
   };
 }
 
+export async function assertChromeArchive(archivePath, { version, profile = "store-safe" } = {}) {
+  const archiveBytes = await readFile(archivePath);
+  const zip = await JSZip.loadAsync(archiveBytes);
+  const directoryEntries = Object.values(zip.files)
+    .filter((entry) => entry.dir)
+    .map((entry) => entry.name)
+    .sort();
+  if (directoryEntries.length > 0) {
+    throw new Error(
+      `Chrome archive must not contain generated directory entries: ${directoryEntries.join(", ")}`
+    );
+  }
+  const archiveFileIssues = validatePackagedFileSet(Object.keys(zip.files));
+  if (archiveFileIssues.length > 0) {
+    throw new Error(`Chrome archive file set is invalid:\n- ${archiveFileIssues.join("\n- ")}`);
+  }
+  const manifestEntry = zip.file("manifest.json");
+
+  if (!manifestEntry) {
+    throw new Error(`Chrome archive is missing manifest.json: ${archivePath}`);
+  }
+
+  const manifest = JSON.parse(await manifestEntry.async("text"));
+  const issues = validateExtensionManifest(manifest, {
+    version,
+    release: true,
+    profile
+  });
+
+  if (issues.length > 0) {
+    throw new Error(`Chrome archive manifest is invalid:\n- ${issues.join("\n- ")}`);
+  }
+
+  return manifest;
+}
+
+function validatePackagedFileSet(files) {
+  const actual = new Set(files);
+  const expected = new Set(REQUIRED_BUILD_FILES);
+  const issues = [];
+
+  for (const path of REQUIRED_BUILD_FILES) {
+    if (!actual.has(path)) {
+      issues.push(`Missing required packaged file '${path}'.`);
+    }
+  }
+  for (const path of [...actual].sort()) {
+    if (!expected.has(path)) {
+      issues.push(`Unexpected packaged file '${path}'.`);
+    }
+  }
+
+  return issues;
+}
+
 function validateUniqueStringArray(value, fieldName, issues) {
   if (!Array.isArray(value)) {
     issues.push(`${fieldName} must be an array.`);
@@ -401,58 +550,89 @@ function validateUniqueStringArray(value, fieldName, issues) {
   }
 }
 
-function validateStoreSafeManifest(manifest, issues) {
-  const permissions = new Set(manifest?.permissions ?? []);
+function validateExactStringArray(
+  value,
+  expectedValues,
+  fieldName,
+  issues,
+  { missingIssue, unexpectedIssue }
+) {
+  validateUniqueStringArray(value, fieldName, issues);
 
-  if (permissions.has("debugger")) {
-    issues.push("Store-safe manifest must not request the debugger permission.");
+  if (!Array.isArray(value)) {
+    return;
   }
 
-  if (permissions.has("tabs") || permissions.has("webRequest")) {
-    issues.push("Store-safe manifest must not request persistent tabs or webRequest access.");
+  const actualValues = new Set(
+    value.filter((entry) => typeof entry === "string" && entry.length > 0)
+  );
+  const expectedValueSet = new Set(expectedValues);
+
+  for (const expectedValue of expectedValues) {
+    if (!actualValues.has(expectedValue)) {
+      issues.push(missingIssue(expectedValue));
+    }
   }
 
-  if (!permissions.has("activeTab")) {
-    issues.push("Store-safe manifest must request activeTab for user-gesture scoped capture.");
+  for (const actualValue of actualValues) {
+    if (!expectedValueSet.has(actualValue)) {
+      issues.push(unexpectedIssue(actualValue));
+    }
   }
+}
 
-  if (Array.isArray(manifest?.host_permissions) && manifest.host_permissions.length > 0) {
-    issues.push("Store-safe manifest must not declare persistent host_permissions.");
+function validateAbsentOrEmptyArray(manifest, fieldName, issues) {
+  if (!Object.hasOwn(manifest ?? {}, fieldName)) {
+    return;
   }
 
-  if (Array.isArray(manifest?.content_scripts) && manifest.content_scripts.length > 0) {
-    issues.push("Store-safe manifest must not declare static content_scripts.");
+  const value = manifest[fieldName];
+  if (!Array.isArray(value) || value.length !== 0) {
+    issues.push(`Manifest ${fieldName} must be absent or an empty array.`);
   }
 }
 
-function validateDevManifest(manifest, issues) {
-  const permissions = new Set(manifest?.permissions ?? []);
+function validateStoreSafeManifest(manifest, issues) {
+  validateExactStringArray(manifest?.permissions, STORE_SAFE_PERMISSIONS, "permissions", issues, {
+    missingIssue: (permission) => `Store-safe manifest must include '${permission}' permission.`,
+    unexpectedIssue: (permission) => {
+      if (permission === "debugger") {
+        return "Store-safe manifest must not request the debugger permission.";
+      }
+      if (permission === "tabs" || permission === "webRequest") {
+        return "Store-safe manifest must not request persistent tabs or webRequest access.";
+      }
+      return `Store-safe manifest must not request undeclared permission '${permission}'.`;
+    }
+  });
 
-  for (const permission of DEV_PERMISSIONS) {
-    if (!permissions.has(permission)) {
-      issues.push(`Dev manifest must include '${permission}' permission.`);
+  if (Object.hasOwn(manifest ?? {}, "host_permissions")) {
+    const hostPermissions = manifest.host_permissions;
+    if (!Array.isArray(hostPermissions) || hostPermissions.length !== 0) {
+      issues.push("Store-safe manifest must not declare persistent host_permissions.");
     }
   }
 
-  if (!Array.isArray(manifest?.host_permissions)) {
-    return;
+  if (Array.isArray(manifest?.content_scripts) && manifest.content_scripts.length > 0) {
+    issues.push("Store-safe manifest must not declare static content_scripts.");
   }
+}
 
-  if (!manifest.host_permissions.includes("<all_urls>")) {
-    issues.push("Dev manifest must include <all_urls> host permission.");
-  }
+function validateDevManifest(manifest, issues) {
+  validateExactStringArray(manifest?.permissions, DEV_PERMISSIONS, "permissions", issues, {
+    missingIssue: (permission) => `Dev manifest must include '${permission}' permission.`,
+    unexpectedIssue: (permission) =>
+      `Dev manifest must not request undeclared permission '${permission}'.`
+  });
 
-  const contentScripts = Array.isArray(manifest?.content_scripts) ? manifest.content_scripts : [];
-  const hasAllSitesContentScript = contentScripts.some(
-    (entry) =>
-      Array.isArray(entry?.matches) &&
-      entry.matches.includes("<all_urls>") &&
-      Array.isArray(entry?.js) &&
-      entry.js.includes("content.js")
-  );
+  validateExactStringArray(manifest?.host_permissions, URL_MATCHES, "host_permissions", issues, {
+    missingIssue: () => "Dev manifest must include <all_urls> host permission.",
+    unexpectedIssue: (hostPermission) =>
+      `Dev manifest must not request undeclared host permission '${hostPermission}'.`
+  });
 
-  if (!hasAllSitesContentScript) {
-    issues.push("Dev manifest must include the all-sites content script.");
+  if (Array.isArray(manifest?.content_scripts) && manifest.content_scripts.length > 0) {
+    issues.push("Dev manifest must use policy-scoped dynamic content-script injection.");
   }
 }
 
@@ -478,12 +658,12 @@ function inferManifestProfile(manifest) {
   return "dev";
 }
 
-async function removeStaleArchives(directory, slug, keepPath) {
+async function removeStaleArchives(directory, slug, variant, keepPath) {
   const entries = await readdir(directory).catch(() => []);
 
   await Promise.all(
     entries
-      .filter((entry) => entry.startsWith(`${slug}-`) && entry.endsWith("-chrome.zip"))
+      .filter((entry) => isArchiveForVariant(entry, slug, variant))
       .map(async (entry) => {
         const candidatePath = resolve(directory, entry);
 
@@ -496,6 +676,18 @@ async function removeStaleArchives(directory, slug, keepPath) {
   );
 }
 
+function isArchiveForVariant(entry, slug, variant) {
+  if (!entry.startsWith(`${slug}-`)) {
+    return false;
+  }
+
+  if (variant === "enterprise-chrome") {
+    return entry.endsWith("-enterprise-chrome.zip");
+  }
+
+  return entry.endsWith("-chrome.zip") && !entry.endsWith("-enterprise-chrome.zip");
+}
+
 async function listPackagedFiles(rootDir, currentDir = rootDir) {
   const entries = await readdir(currentDir, { withFileTypes: true });
   const files = [];
diff --git a/apps/extension/scripts/lib/extension-e2e-controller.mjs b/apps/extension/scripts/lib/extension-e2e-controller.mjs
new file mode 100644
index 0000000..eed98a9
--- /dev/null
+++ b/apps/extension/scripts/lib/extension-e2e-controller.mjs
@@ -0,0 +1,227 @@
+const POPUP_PAGE = "popup.html";
+const POPUP_PORT = "webblackbox:popup";
+const SESSIONS_PAGE = "sessions.html";
+const SESSIONS_PORT = "webblackbox:sessions";
+
+export async function startSessionFromPopupRuntime(
+  popupClient,
+  { mode, expectedUrl, reloadPage = false, visualCapture }
+) {
+  assertEvaluateClient(popupClient);
+
+  if (mode !== "lite" && mode !== "full") {
+    throw new TypeError(`Unsupported capture mode: ${String(mode)}`);
+  }
+
+  if (typeof expectedUrl !== "string" || expectedUrl.length === 0) {
+    throw new TypeError("expectedUrl must be a non-empty string.");
+  }
+
+  return popupClient.evaluate(`
+    (async () => {
+      const expectedPage = chrome.runtime.getURL(${JSON.stringify(POPUP_PAGE)});
+
+      if (location.href !== expectedPage) {
+        return { ok: false, reason: 'unexpected-controller-page', expectedPage, actualPage: location.href };
+      }
+
+      const tabs = await chrome.tabs.query({});
+      const exact = tabs.find((tab) =>
+        typeof tab.id === 'number' &&
+        typeof tab.url === 'string' &&
+        tab.url.startsWith(${JSON.stringify(expectedUrl)})
+      );
+
+      if (!exact || typeof exact.id !== 'number') {
+        return {
+          ok: false,
+          reason: 'target-tab-not-found',
+          tabs: tabs.map((tab) => ({ id: tab.id, url: tab.url, active: tab.active }))
+        };
+      }
+
+      const response = await chrome.runtime.sendMessage({
+        kind: 'ui.start',
+        tabId: exact.id,
+        mode: ${JSON.stringify(mode)},
+        ...(Boolean(${JSON.stringify(reloadPage)}) ? { reloadPage: true } : {}),
+        ...(${JSON.stringify(visualCapture ?? null)} ? {
+          visualCapture: ${JSON.stringify(visualCapture ?? null)}
+        } : {})
+      });
+
+      if (response?.ok !== true) {
+        return { ok: false, reason: 'runtime-start-rejected', tabId: exact.id, response };
+      }
+
+      return {
+        ok: true,
+        tabId: exact.id,
+        mode: ${JSON.stringify(mode)},
+        visualCapture: ${JSON.stringify(visualCapture ?? null)},
+        via: 'popup-runtime'
+      };
+    })()
+  `);
+}
+
+export async function exportSessionFromPopupRuntime(
+  popupClient,
+  { sid, passphrase, saveAs = false, policy }
+) {
+  assertEvaluateClient(popupClient);
+  assertSessionId(sid);
+
+  if (typeof passphrase !== "string") {
+    throw new TypeError("passphrase must be a string.");
+  }
+
+  return popupClient.evaluate(`
+    (async () => {
+      const expectedPage = chrome.runtime.getURL(${JSON.stringify(POPUP_PAGE)});
+
+      if (location.href !== expectedPage) {
+        return { ok: false, reason: 'unexpected-controller-page', expectedPage, actualPage: location.href };
+      }
+
+      const response = await chrome.runtime.sendMessage({
+        kind: 'ui.export',
+        sid: ${JSON.stringify(sid)},
+        passphrase: ${JSON.stringify(passphrase)},
+        saveAs: ${JSON.stringify(saveAs)},
+        ...(${JSON.stringify(policy ?? null)} ? { policy: ${JSON.stringify(policy ?? null)} } : {})
+      });
+
+      if (response?.ok !== true) {
+        return { ok: false, reason: 'runtime-export-rejected', response };
+      }
+
+      return { ok: true, sid: ${JSON.stringify(sid)}, response, via: 'popup-runtime' };
+    })()
+  `);
+}
+
+export async function stopSessionFromPopupPort(popupClient, { sid, tabId }) {
+  assertEvaluateClient(popupClient);
+  assertSessionId(sid);
+  assertTabId(tabId);
+
+  return popupClient.evaluate(`
+    (async () => {
+      const expectedPage = chrome.runtime.getURL(${JSON.stringify(POPUP_PAGE)});
+
+      if (location.href !== expectedPage) {
+        return { ok: false, reason: 'unexpected-controller-page', expectedPage, actualPage: location.href };
+      }
+
+      const port = chrome.runtime.connect({ name: ${JSON.stringify(POPUP_PORT)} });
+      const completion = new Promise((resolve) => {
+        const timeout = setTimeout(() => {
+          port.onMessage.removeListener(onMessage);
+          resolve({
+            ok: false,
+            reason: 'stop-session-list-timeout',
+            sid: ${JSON.stringify(sid)},
+            tabId: ${JSON.stringify(tabId)}
+          });
+        }, 30_000);
+        const onMessage = (message) => {
+          if (message?.kind !== 'sw.session-list' || !Array.isArray(message.sessions)) {
+            return;
+          }
+
+          const session = message.sessions.find((row) => row?.sid === ${JSON.stringify(sid)});
+
+          if (session?.active !== false && session !== undefined) {
+            return;
+          }
+
+          clearTimeout(timeout);
+          port.onMessage.removeListener(onMessage);
+          resolve({
+            ok: true,
+            sid: ${JSON.stringify(sid)},
+            tabId: ${JSON.stringify(tabId)},
+            via: 'popup-port'
+          });
+        };
+
+        port.onMessage.addListener(onMessage);
+      });
+
+      try {
+        port.postMessage({ kind: 'ui.stop', tabId: ${JSON.stringify(tabId)} });
+        return await completion;
+      } finally {
+        port.disconnect();
+      }
+    })()
+  `);
+}
+
+export async function deleteSessionFromSessionsPort(sessionsClient, { sid }) {
+  assertEvaluateClient(sessionsClient);
+  assertSessionId(sid);
+
+  return sessionsClient.evaluate(`
+    (async () => {
+      const expectedPage = chrome.runtime.getURL(${JSON.stringify(SESSIONS_PAGE)});
+
+      if (location.href !== expectedPage) {
+        return { ok: false, reason: 'unexpected-controller-page', expectedPage, actualPage: location.href };
+      }
+
+      const port = chrome.runtime.connect({ name: ${JSON.stringify(SESSIONS_PORT)} });
+      const completion = new Promise((resolve) => {
+        const timeout = setTimeout(() => {
+          port.onMessage.removeListener(onMessage);
+          resolve({
+            ok: false,
+            reason: 'delete-session-list-timeout',
+            sid: ${JSON.stringify(sid)}
+          });
+        }, 30_000);
+        const onMessage = (message) => {
+          if (message?.kind !== 'sw.session-list' || !Array.isArray(message.sessions)) {
+            return;
+          }
+
+          if (message.sessions.some((row) => row?.sid === ${JSON.stringify(sid)})) {
+            return;
+          }
+
+          clearTimeout(timeout);
+          port.onMessage.removeListener(onMessage);
+          resolve({ ok: true, sid: ${JSON.stringify(sid)}, via: 'sessions-port' });
+        };
+
+        port.onMessage.addListener(onMessage);
+      });
+
+      try {
+        port.postMessage({ kind: 'ui.delete', sid: ${JSON.stringify(sid)} });
+        return await completion;
+      } finally {
+        port.disconnect();
+      }
+    })()
+  `);
+}
+
+function assertEvaluateClient(client) {
+  if (!client || typeof client.evaluate !== "function") {
+    throw new TypeError("A CDP client with evaluate() is required.");
+  }
+}
+
+function assertSessionId(sid) {
+  if (typeof sid !== "string" || sid.length === 0) {
+    throw new TypeError("sid must be a non-empty string.");
+  }
+}
+
+function assertTabId(tabId) {
+  if (!Number.isInteger(tabId) || tabId < 0) {
+    throw new TypeError("tabId must be a non-negative integer.");
+  }
+}
diff --git a/apps/extension/src/content/bootstrap-lease.test.ts b/apps/extension/src/content/bootstrap-lease.test.ts
new file mode 100644
index 0000000..07a4ce5
--- /dev/null
+++ b/apps/extension/src/content/bootstrap-lease.test.ts
@@ -0,0 +1,75 @@
+import { describe, expect, it } from "vitest";
+
+import { acquireContentBootstrapLease } from "./bootstrap-lease.js";
+
+describe("content bootstrap lease", () => {
+  it("allows only one runtime bootstrap in the same document world", () => {
+    const documentWorld = {};
+    const owner = acquireContentBootstrapLease(documentWorld);
+
+    expect(owner?.isActive()).toBe(true);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+    expect(owner?.isActive()).toBe(true);
+  });
+
+  it("keeps a canceled navigation on the existing active owner", () => {
+    const documentWorld = {};
+    const owner = acquireContentBootstrapLease(documentWorld);
+
+    // A cancelable beforeunload does not transition the lease. Only pagehide
+    // drives suspension or disposal in the content runtime.
+    expect(owner?.isActive()).toBe(true);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+  });
+
+  it("suspends and resumes one owner across a back-forward cache transition", () => {
+    const documentWorld = {};
+    const owner = acquireContentBootstrapLease(documentWorld);
+
+    expect(owner?.suspend()).toBe(true);
+    expect(owner?.isActive()).toBe(false);
+    expect(owner?.suspend()).toBe(false);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+
+    expect(owner?.resume()).toBe(true);
+    expect(owner?.isActive()).toBe(true);
+    expect(owner?.resume()).toBe(false);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+  });
+
+  it("keeps a cleaned document terminal so duplicate execution cannot revive it", () => {
+    const documentWorld = {};
+    const owner = acquireContentBootstrapLease(documentWorld);
+
+    expect(owner?.dispose()).toBe(true);
+    expect(owner?.dispose()).toBe(false);
+    expect(owner?.isActive()).toBe(false);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+  });
+
+  it("cannot resume a suspended document after terminal cleanup", () => {
+    const documentWorld = {};
+    const owner = acquireContentBootstrapLease(documentWorld);
+
+    expect(owner?.suspend()).toBe(true);
+    expect(owner?.dispose()).toBe(true);
+    expect(owner?.resume()).toBe(false);
+    expect(owner?.isActive()).toBe(false);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+  });
+
+  it("allows a new document world to bootstrap independently", () => {
+    const previousDocument = {};
+    const nextDocument = {};
+    const previousOwner = acquireContentBootstrapLease(previousDocument);
+    const nextOwner = acquireContentBootstrapLease(nextDocument);
+
+    expect(previousOwner).not.toBeNull();
+    expect(nextOwner).not.toBeNull();
+
+    previousOwner?.dispose();
+
+    expect(previousOwner?.isActive()).toBe(false);
+    expect(nextOwner?.isActive()).toBe(true);
+  });
+});
diff --git a/apps/extension/src/content/bootstrap-lease.ts b/apps/extension/src/content/bootstrap-lease.ts
new file mode 100644
index 0000000..11522c8
--- /dev/null
+++ b/apps/extension/src/content/bootstrap-lease.ts
@@ -0,0 +1,70 @@
+const CONTENT_BOOTSTRAP_SLOT = Symbol.for("webblackbox.content.bootstrap.v1");
+
+type ContentBootstrapRecord = {
+  state: "active" | "disposed" | "suspended";
+};
+
+export type ContentBootstrapLease = {
+  dispose(): boolean;
+  isActive(): boolean;
+  resume(): boolean;
+  suspend(): boolean;
+};
+
+/**
+ * Claims the content-script runtime for one isolated-world global.
+ *
+ * Chrome can execute the same content bundle more than once in a document. The
+ * non-configurable marker intentionally survives runtime cleanup so a stale or
+ * delayed duplicate execution cannot start a second runtime in that document.
+ * A navigation receives a fresh isolated-world global and therefore a fresh
+ * lease.
+ */
+export function acquireContentBootstrapLease(scope: object): ContentBootstrapLease | null {
+  if (Reflect.has(scope, CONTENT_BOOTSTRAP_SLOT)) {
+    return null;
+  }
+
+  const record: ContentBootstrapRecord = { state: "active" };
+
+  try {
+    Object.defineProperty(scope, CONTENT_BOOTSTRAP_SLOT, {
+      configurable: false,
+      enumerable: false,
+      value: record,
+      writable: false
+    });
+  } catch {
+    return null;
+  }
+
+  return Object.freeze({
+    dispose(): boolean {
+      if (record.state === "disposed") {
+        return false;
+      }
+
+      record.state = "disposed";
+      return true;
+    },
+    isActive(): boolean {
+      return record.state === "active";
+    },
+    resume(): boolean {
+      if (record.state !== "suspended") {
+        return false;
+      }
+
+      record.state = "active";
+      return true;
+    },
+    suspend(): boolean {
+      if (record.state !== "active") {
+        return false;
+      }
+
+      record.state = "suspended";
+      return true;
+    }
+  });
+}
diff --git a/apps/extension/src/content/event-queue-recovery.test.ts b/apps/extension/src/content/event-queue-recovery.test.ts
new file mode 100644
index 0000000..cbedbb5
--- /dev/null
+++ b/apps/extension/src/content/event-queue-recovery.test.ts
@@ -0,0 +1,190 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  createContentEventBatchId,
+  parseContentActivationId
+} from "../shared/content-activation-protocol.js";
+import {
+  captureRecoverableContentEventQueue,
+  restoreRecoverableContentEventQueue
+} from "./event-queue-recovery.js";
+
+const ACTIVATION_ID = parseContentActivationId(`a1_${"1".repeat(64)}`)!;
+const NEXT_ACTIVATION_ID = parseContentActivationId(`a1_${"2".repeat(64)}`)!;
+const OTHER_ACTIVATION_ID = parseContentActivationId(`a1_${"3".repeat(64)}`)!;
+const IDENTITY = {
+  activationId: ACTIVATION_ID,
+  sid: "S-content",
+  tabId: 7,
+  mode: "lite" as const,
+  documentUrl: "https://example.test/app"
+};
+
+function rawEvent(sid = IDENTITY.sid, tabId = IDENTITY.tabId) {
+  return {
+    source: "content" as const,
+    rawType: "click",
+    sid,
+    tabId,
+    t: 1,
+    mono: 1,
+    payload: {}
+  };
+}
+
+function pendingBatch(stopDrainToken?: string) {
+  return {
+    batchId: createContentEventBatchId({
+      getRandomValues(bytes) {
+        bytes.fill(9);
+        return bytes;
+      }
+    }),
+    events: [rawEvent()],
+    documentUrl: IDENTITY.documentUrl,
+    ...(stopDrainToken ? { stopDrainToken } : {})
+  };
+}
+
+describe("content event queue recovery", () => {
+  it("preserves the exact unacknowledged batch id and queued suffix for the same identity", () => {
+    const batch = pendingBatch();
+    const recovered = captureRecoverableContentEventQueue({
+      identity: IDENTITY,
+      phase: "active-bound",
+      pendingBatch: batch,
+      pendingEvents: [rawEvent()]
+    });
+    const restored = restoreRecoverableContentEventQueue(
+      recovered,
+      IDENTITY,
+      IDENTITY.documentUrl,
+      1_200
+    );
+
+    expect(restored?.pendingBatch?.batchId).toBe(batch.batchId);
+    expect(restored?.pendingBatch?.events).toEqual(batch.events);
+    expect(restored?.pendingEvents).toHaveLength(1);
+    expect(restored?.pendingBatch).not.toBe(batch);
+  });
+
+  it("never captures a stop-drain or quiescing queue", () => {
+    expect(
+      captureRecoverableContentEventQueue({
+        identity: IDENTITY,
+        phase: "active-bound",
+        pendingBatch: pendingBatch("a".repeat(64)),
+        pendingEvents: []
+      })
+    ).toBeNull();
+    expect(
+      captureRecoverableContentEventQueue({
+        identity: IDENTITY,
+        phase: "quiescing-bound",
+        pendingBatch: pendingBatch(),
+        pendingEvents: []
+      })
+    ).toBeNull();
+  });
+
+  it.each([
+    ["sid", { ...IDENTITY, sid: "S-other" }],
+    ["tab", { ...IDENTITY, tabId: 8 }],
+    ["mode", { ...IDENTITY, mode: "full" as const }],
+    ["url", { ...IDENTITY, documentUrl: "https://example.test/other" }]
+  ])("fails closed when the new activation changes %s identity", (_label, nextIdentity) => {
+    const recovered = captureRecoverableContentEventQueue({
+      identity: IDENTITY,
+      phase: "active-unbound",
+      pendingBatch: pendingBatch(),
+      pendingEvents: []
+    });
+
+    expect(
+      restoreRecoverableContentEventQueue(recovered, nextIdentity, nextIdentity.documentUrl, 1_200)
+    ).toBeNull();
+  });
+
+  it("rejects a local URL drift and mismatched queued event ownership", () => {
+    const recovered = captureRecoverableContentEventQueue({
+      identity: IDENTITY,
+      phase: "active-bound",
+      pendingBatch: null,
+      pendingEvents: [rawEvent("S-other")]
+    });
+
+    expect(
+      restoreRecoverableContentEventQueue(recovered, IDENTITY, "https://example.test/drift", 1_200)
+    ).toBeNull();
+    expect(
+      restoreRecoverableContentEventQueue(recovered, IDENTITY, IDENTITY.documentUrl, 1_200)
+    ).toBeNull();
+  });
+
+  it("atomically rebinds an exact same-document queue to its authorized URL revision", () => {
+    const batch = pendingBatch();
+    const recovered = captureRecoverableContentEventQueue({
+      identity: IDENTITY,
+      phase: "active-bound",
+      pendingBatch: batch,
+      pendingEvents: [rawEvent()]
+    });
+    const nextIdentity = {
+      ...IDENTITY,
+      activationId: NEXT_ACTIVATION_ID,
+      documentUrl: "https://example.test/next"
+    };
+    const restored = restoreRecoverableContentEventQueue(
+      recovered,
+      nextIdentity,
+      nextIdentity.documentUrl,
+      1_200,
+      {
+        previousActivationId: IDENTITY.activationId,
+        frameId: 0,
+        documentId: "document-1",
+        previousDocumentUrl: IDENTITY.documentUrl,
+        documentUrl: nextIdentity.documentUrl,
+        revision: 3
+      }
+    );
+
+    expect(restored?.pendingBatch).toMatchObject({
+      batchId: batch.batchId,
+      documentUrl: nextIdentity.documentUrl
+    });
+    expect(restored?.pendingBatch?.events).toEqual(batch.events);
+    expect(restored?.pendingEvents).toEqual([rawEvent()]);
+  });
+
+  it("rejects a forged or cross-document queue URL transition", () => {
+    const recovered = captureRecoverableContentEventQueue({
+      identity: IDENTITY,
+      phase: "active-bound",
+      pendingBatch: pendingBatch(),
+      pendingEvents: []
+    });
+    const nextIdentity = {
+      ...IDENTITY,
+      activationId: NEXT_ACTIVATION_ID,
+      documentUrl: "https://example.test/next"
+    };
+
+    expect(
+      restoreRecoverableContentEventQueue(
+        recovered,
+        nextIdentity,
+        nextIdentity.documentUrl,
+        1_200,
+        {
+          previousActivationId: OTHER_ACTIVATION_ID,
+          frameId: 0,
+          documentId: "document-1",
+          previousDocumentUrl: IDENTITY.documentUrl,
+          documentUrl: nextIdentity.documentUrl,
+          revision: 3
+        }
+      )
+    ).toBeNull();
+  });
+});
diff --git a/apps/extension/src/content/event-queue-recovery.ts b/apps/extension/src/content/event-queue-recovery.ts
new file mode 100644
index 0000000..65bd0fc
--- /dev/null
+++ b/apps/extension/src/content/event-queue-recovery.ts
@@ -0,0 +1,110 @@
+import type { CaptureMode } from "@webblackbox/protocol";
+import type { RawRecorderEvent } from "@webblackbox/recorder";
+
+import type {
+  ContentActivationId,
+  ContentEventBatchId
+} from "../shared/content-activation-protocol.js";
+import type { ContentSameDocumentTransition } from "../shared/messages.js";
+
+export type RecoverablePendingContentEventBatch = {
+  batchId: ContentEventBatchId;
+  events: RawRecorderEvent[];
+  documentUrl: string;
+  stopDrainToken?: string;
+};
+
+export type RecoverableContentEventQueue = Readonly<{
+  activationId: ContentActivationId;
+  sid: string;
+  tabId: number;
+  mode: CaptureMode;
+  documentUrl: string;
+  pendingBatch: RecoverablePendingContentEventBatch | null;
+  pendingEvents: RawRecorderEvent[];
+}>;
+
+export type ContentEventQueueIdentity = Readonly<{
+  activationId: ContentActivationId;
+  sid: string;
+  tabId: number;
+  mode: CaptureMode;
+  documentUrl: string;
+}>;
+
+export function captureRecoverableContentEventQueue(input: {
+  identity: ContentEventQueueIdentity;
+  phase: string;
+  pendingBatch: RecoverablePendingContentEventBatch | null;
+  pendingEvents: readonly RawRecorderEvent[];
+}): RecoverableContentEventQueue | null {
+  if (
+    (input.phase !== "active-bound" && input.phase !== "active-unbound") ||
+    input.pendingBatch?.stopDrainToken ||
+    (input.pendingBatch === null && input.pendingEvents.length === 0)
+  ) {
+    return null;
+  }
+
+  return {
+    ...input.identity,
+    pendingBatch: input.pendingBatch
+      ? { ...input.pendingBatch, events: [...input.pendingBatch.events] }
+      : null,
+    pendingEvents: [...input.pendingEvents]
+  };
+}
+
+export function restoreRecoverableContentEventQueue(
+  recovered: RecoverableContentEventQueue | null,
+  identity: ContentEventQueueIdentity,
+  currentDocumentUrl: string | null,
+  pendingEventLimit: number,
+  sameDocumentTransition?: ContentSameDocumentTransition
+): Readonly<{
+  pendingBatch: RecoverablePendingContentEventBatch | null;
+  pendingEvents: RawRecorderEvent[];
+}> | null {
+  if (
+    !Number.isSafeInteger(pendingEventLimit) ||
+    pendingEventLimit <= 0 ||
+    !recovered ||
+    recovered.sid !== identity.sid ||
+    recovered.tabId !== identity.tabId ||
+    recovered.mode !== identity.mode ||
+    currentDocumentUrl !== identity.documentUrl ||
+    recovered.pendingBatch?.stopDrainToken ||
+    (recovered.pendingBatch !== null &&
+      (recovered.pendingBatch.documentUrl !== recovered.documentUrl ||
+        recovered.pendingBatch.events.length === 0)) ||
+    [...(recovered.pendingBatch?.events ?? []), ...recovered.pendingEvents].some(
+      (event) =>
+        event.source !== "content" || event.sid !== identity.sid || event.tabId !== identity.tabId
+    )
+  ) {
+    return null;
+  }
+
+  const sameUrl = recovered.documentUrl === identity.documentUrl;
+  const authorizedUrlTransition = Boolean(
+    !sameUrl &&
+    sameDocumentTransition &&
+    sameDocumentTransition.previousActivationId === recovered.activationId &&
+    sameDocumentTransition.previousDocumentUrl === recovered.documentUrl &&
+    sameDocumentTransition.documentUrl === identity.documentUrl
+  );
+  if (!sameUrl && !authorizedUrlTransition) {
+    return null;
+  }
+
+  return {
+    pendingBatch: recovered.pendingBatch
+      ? {
+          ...recovered.pendingBatch,
+          documentUrl: identity.documentUrl,
+          events: [...recovered.pendingBatch.events]
+        }
+      : null,
+    pendingEvents: recovered.pendingEvents.slice(0, pendingEventLimit)
+  };
+}
diff --git a/apps/extension/src/content/flush-policy.ts b/apps/extension/src/content/flush-policy.ts
index 155edb2..0559a61 100644
--- a/apps/extension/src/content/flush-policy.ts
+++ b/apps/extension/src/content/flush-policy.ts
@@ -1,4 +1,6 @@
-export const CONTENT_EVENT_FLUSH_CHUNK = 120;
+import { CONTENT_EVENT_BATCH_MAX } from "../shared/messages.js";
+
+export const CONTENT_EVENT_FLUSH_CHUNK = CONTENT_EVENT_BATCH_MAX;
 export const CONTENT_EVENT_FLUSH_URGENT_THRESHOLD = 360;
 export const CONTENT_EVENT_FLUSH_URGENT_MS = 8;
 export const CONTENT_EVENT_FLUSH_SOON_MS = 16;
diff --git a/apps/extension/src/content/index.test.ts b/apps/extension/src/content/index.test.ts
new file mode 100644
index 0000000..93168f5
--- /dev/null
+++ b/apps/extension/src/content/index.test.ts
@@ -0,0 +1,747 @@
+// @vitest-environment jsdom
+
+import { DEFAULT_CAPTURE_POLICY } from "@webblackbox/protocol";
+import { afterAll, beforeAll, describe, expect, it, vi } from "vitest";
+
+const state = vi.hoisted(() => {
+  const runtimeListeners: Array<
+    (message: unknown, sender: unknown, sendResponse: (response: unknown) => void) => unknown
+  > = [];
+  const portMessageListeners: Array<(message: unknown) => void> = [];
+  const portDisconnectListeners: Array<() => void> = [];
+  const portMessages: unknown[] = [];
+  const sentMessages: unknown[] = [];
+  const agentStates: unknown[] = [];
+  const agentMarkers: string[] = [];
+  let flushEvent: unknown | null = null;
+  let flushCalls = 0;
+  let freezeCalls = 0;
+  let quiesceCalls = 0;
+  let prepareStopCalls = 0;
+  let resolvePrepareStop: (() => void) | null = null;
+  let agentCreationFailures = 1;
+  let agentCreationCalls = 0;
+  let agentOptions: {
+    emitBatch(events: unknown[], activationId: string): void;
+    onInjectedBridgeArmed?: (activationId: string) => void;
+  } | null = null;
+  let activationSequence = 0;
+  let controllerRevision = 0;
+  let controllerPhase: "inactive" | "active" | "drained" = "inactive";
+  let controllerActivationId: string | null = null;
+  const port = {
+    name: "webblackbox:content",
+    onMessage: {
+      addListener(listener: (message: unknown) => void) {
+        portMessageListeners.push(listener);
+      },
+      removeListener(listener: (message: unknown) => void) {
+        const index = portMessageListeners.indexOf(listener);
+        if (index >= 0) portMessageListeners.splice(index, 1);
+      }
+    },
+    onDisconnect: {
+      addListener(listener: () => void) {
+        portDisconnectListeners.push(listener);
+      },
+      removeListener(listener: () => void) {
+        const index = portDisconnectListeners.indexOf(listener);
+        if (index >= 0) portDisconnectListeners.splice(index, 1);
+      }
+    },
+    postMessage(message: unknown) {
+      portMessages.push(message);
+    },
+    disconnect() {
+      for (const listener of [...portDisconnectListeners]) listener();
+    }
+  };
+  const agent = {
+    setRecordingStatus(next: unknown) {
+      agentStates.push(next);
+    },
+    flush() {
+      flushCalls += 1;
+      if (flushEvent && agentOptions) {
+        agentOptions.emitBatch([flushEvent], state.currentActivationId());
+        flushEvent = null;
+      }
+    },
+    freezeOrdinaryCapture() {
+      freezeCalls += 1;
+    },
+    quiesceOrdinaryCapture() {
+      quiesceCalls += 1;
+    },
+    mergeInjectedDirectReplay() {
+      return { confirmed: true, conflict: false, replayedEvents: 0 };
+    },
+    prepareStopCapture() {
+      prepareStopCalls += 1;
+      return new Promise<{
+        expectedArtifacts: [];
+        emittedArtifacts: [];
+        omittedArtifacts: [];
+        degraded: false;
+        degradationReason: null;
+      }>((resolve) => {
+        resolvePrepareStop = () =>
+          resolve({
+            expectedArtifacts: [],
+            emittedArtifacts: [],
+            omittedArtifacts: [],
+            degraded: false,
+            degradationReason: null
+          });
+      });
+    },
+    emitMarker(message: string) {
+      agentMarkers.push(message);
+    },
+    setIndicatorState() {},
+    dispose() {}
+  };
+
+  return {
+    runtimeListeners,
+    portMessageListeners,
+    portMessages,
+    sentMessages,
+    agentStates,
+    agentMarkers,
+    port,
+    agent,
+    setFlushEvent(event: unknown) {
+      flushEvent = event;
+    },
+    get flushCalls() {
+      return flushCalls;
+    },
+    get freezeCalls() {
+      return freezeCalls;
+    },
+    get quiesceCalls() {
+      return quiesceCalls;
+    },
+    get prepareStopCalls() {
+      return prepareStopCalls;
+    },
+    get agentCreationCalls() {
+      return agentCreationCalls;
+    },
+    createAgent(options: typeof agentOptions) {
+      agentCreationCalls += 1;
+      if (agentCreationFailures > 0) {
+        agentCreationFailures -= 1;
+        throw new Error("content agent unavailable once");
+      }
+      agentOptions = options;
+      return agent;
+    },
+    finishPrepareStop() {
+      resolvePrepareStop?.();
+      resolvePrepareStop = null;
+    },
+    get agentOptions() {
+      return agentOptions;
+    },
+    setAgentOptions(options: typeof agentOptions) {
+      agentOptions = options;
+    },
+    nextActivationId() {
+      activationSequence += 1;
+      return `a1_${activationSequence.toString(16).padStart(64, "0")}`;
+    },
+    currentActivationId() {
+      return `a1_${activationSequence.toString(16).padStart(64, "0")}`;
+    },
+    controllerHint() {
+      return {
+        secret: "f".repeat(64),
+        moduleNonce: `m1_${"e".repeat(64)}`,
+        revision: controllerRevision,
+        phase: controllerPhase,
+        activationId: controllerActivationId
+      };
+    },
+    controlMainWorld(operation: "activate" | "deactivate" | "drain", activationId: string) {
+      controllerRevision += 1;
+      controllerPhase =
+        operation === "activate" ? "active" : operation === "drain" ? "drained" : "inactive";
+      controllerActivationId = operation === "deactivate" ? null : activationId;
+      const result =
+        operation === "activate"
+          ? { kind: "activated", activationId, revision: controllerRevision }
+          : operation === "deactivate"
+            ? { kind: "deactivated", activationId, revision: controllerRevision }
+            : {
+                kind: "drained",
+                activationId,
+                revision: controllerRevision,
+                events: [],
+                producedThrough: 0,
+                truncatedBefore: 0,
+                degraded: false,
+                replayed: false
+              };
+      return {
+        kind: "sw.main-world-control-result",
+        activationId,
+        operation,
+        controller: state.controllerHint(),
+        result
+      };
+    }
+  };
+});
+
+vi.mock("../shared/chrome-api.js", () => ({
+  getChromeApi: () => ({
+    i18n: {
+      getMessage: (messageName: string) =>
+        messageName === "contentKeyboardMarker" ? "Localized keyboard marker" : "",
+      getUILanguage: () => "en-US"
+    },
+    runtime: {
+      connect: vi.fn(() => state.port),
+      getURL: () => "./content-agent.js",
+      onMessage: {
+        addListener: (listener: (typeof state.runtimeListeners)[number]) => {
+          state.runtimeListeners.push(listener);
+        },
+        removeListener: (listener: (typeof state.runtimeListeners)[number]) => {
+          const index = state.runtimeListeners.indexOf(listener);
+          if (index >= 0) state.runtimeListeners.splice(index, 1);
+        }
+      },
+      sendMessage: vi.fn(async (message: Record<string, unknown>) => {
+        state.sentMessages.push(message);
+
+        if (message.kind === "content.ready") {
+          return {
+            kind: "sw.content-prepare",
+            readyId: message.readyId,
+            activationId: state.nextActivationId(),
+            sid: "S-content",
+            tabId: 7,
+            mode: "lite",
+            sampling: {
+              mousemoveHz: 20,
+              scrollHz: 15,
+              domFlushMs: 100,
+              snapshotIntervalMs: 20_000,
+              screenshotIdleMs: 0,
+              bodyCaptureMaxBytes: 64_000
+            },
+            capturePolicy: DEFAULT_CAPTURE_POLICY,
+            mainWorldController: state.controllerHint()
+          };
+        }
+
+        if (message.kind === "content.main-world-control") {
+          return state.controlMainWorld(
+            message.operation as "activate" | "deactivate" | "drain",
+            message.activationId as string
+          );
+        }
+
+        return { ok: true };
+      })
+    }
+  })
+}));
+
+vi.mock("./content-agent.js", () => ({
+  createContentCaptureAgent: (options: Parameters<typeof state.setAgentOptions>[0]) => {
+    return state.createAgent(options);
+  }
+}));
+
+async function dispatchRuntimeMessage(message: unknown): Promise<unknown> {
+  const listener = state.runtimeListeners[0];
+  let response: unknown;
+  listener?.(message, {}, (value) => {
+    response = value;
+  });
+  await vi.waitFor(() => expect(state.runtimeListeners.length).toBeGreaterThan(0));
+  await Promise.resolve();
+  return response;
+}
+
+function persistedPageEvent(type: "pagehide" | "pageshow"): Event {
+  const event = new Event(type);
+  Object.defineProperty(event, "persisted", { value: true });
+  return event;
+}
+
+describe("content activation runtime", () => {
+  beforeAll(async () => {
+    vi.useFakeTimers({ shouldAdvanceTime: true });
+    window.history.replaceState({}, "", "/dashboard");
+    await import("./index.js");
+    await vi.waitFor(() =>
+      expect(
+        state.sentMessages.some(
+          (message) => (message as { kind?: unknown }).kind === "content.ready"
+        )
+      ).toBe(true)
+    );
+  });
+
+  afterAll(() => {
+    vi.useRealTimers();
+  });
+
+  it("preloads inertly, binds explicitly, drains in order, and rotates BFCache identity", async () => {
+    const ready = state.sentMessages.find(
+      (message) => (message as { kind?: unknown }).kind === "content.ready"
+    ) as Record<string, unknown>;
+    expect(ready.reason).toBe("recovery");
+    expect(ready.currentActivationId).toBeUndefined();
+
+    await vi.advanceTimersByTimeAsync(500);
+    await vi.waitFor(() => expect(state.agentOptions).not.toBeNull());
+    expect(state.agentCreationCalls).toBe(2);
+    let activationId = state.currentActivationId();
+    expect(state.agentStates).toHaveLength(0);
+    expect(state.portMessages).toHaveLength(0);
+    await vi.waitFor(() =>
+      expect(
+        state.sentMessages.some(
+          (message) =>
+            (message as { kind?: unknown; activationId?: unknown }).kind === "content.armed" &&
+            (message as { activationId?: unknown }).activationId === activationId
+        )
+      ).toBe(true)
+    );
+
+    await dispatchRuntimeMessage({ kind: "sw.content-activated", activationId });
+    await vi.waitFor(() => expect(state.agentOptions).not.toBeNull());
+    await vi.waitFor(() =>
+      expect(
+        state.portMessages.some(
+          (message) => (message as { kind?: unknown }).kind === "content.bind"
+        )
+      ).toBe(true)
+    );
+    expect(
+      state.portMessages.some(
+        (message) => (message as { kind?: unknown }).kind === "content.events"
+      )
+    ).toBe(false);
+
+    await dispatchRuntimeMessage({ kind: "sw.marker-command" });
+    await vi.waitFor(() => expect(state.agentMarkers).toEqual(["Localized keyboard marker"]));
+
+    state.agentOptions!.emitBatch(
+      [
+        {
+          source: "content",
+          rawType: "click",
+          sid: "S-content",
+          tabId: 7,
+          t: 2,
+          mono: 2,
+          payload: {}
+        }
+      ],
+      activationId
+    );
+    for (const listener of [...state.portMessageListeners]) {
+      listener({ kind: "sw.content-bound", activationId });
+    }
+    await vi.advanceTimersByTimeAsync(500);
+    expect(
+      state.portMessages.filter(
+        (message) => (message as { kind?: unknown }).kind === "content.events"
+      )
+    ).toHaveLength(1);
+    const firstBatch = state.portMessages.find(
+      (message) => (message as { kind?: unknown }).kind === "content.events"
+    ) as { batchId: string };
+    state.setFlushEvent({
+      source: "content",
+      rawType: "keydown",
+      sid: "S-content",
+      tabId: 7,
+      t: 2.25,
+      mono: 2.25,
+      payload: { key: "Enter" }
+    });
+    const readyCountBeforeBindRecovery = state.sentMessages.filter(
+      (message) => (message as { kind?: unknown }).kind === "content.ready"
+    ).length;
+    await vi.advanceTimersByTimeAsync(2_250);
+    await vi.advanceTimersByTimeAsync(2_250);
+    await vi.advanceTimersByTimeAsync(2_250);
+    await vi.advanceTimersByTimeAsync(2_250);
+    await vi.waitFor(() =>
+      expect(
+        state.sentMessages.filter(
+          (message) => (message as { kind?: unknown }).kind === "content.ready"
+        ).length
+      ).toBeGreaterThan(readyCountBeforeBindRecovery)
+    );
+    const recoveredActivationId = state.currentActivationId();
+    expect(recoveredActivationId).not.toBe(activationId);
+    await vi.waitFor(() =>
+      expect(
+        state.sentMessages.some(
+          (message) =>
+            (message as { kind?: unknown; activationId?: unknown }).kind === "content.armed" &&
+            (message as { activationId?: unknown }).activationId === recoveredActivationId
+        )
+      ).toBe(true)
+    );
+    await dispatchRuntimeMessage({
+      kind: "sw.content-activated",
+      activationId: recoveredActivationId
+    });
+    await vi.waitFor(() =>
+      expect(
+        state.portMessages.some(
+          (message) =>
+            (message as { kind?: unknown; activationId?: unknown }).kind === "content.bind" &&
+            (message as { activationId?: unknown }).activationId === recoveredActivationId
+        )
+      ).toBe(true)
+    );
+    for (const listener of [...state.portMessageListeners]) {
+      listener({ kind: "sw.content-bound", activationId: recoveredActivationId });
+    }
+    await vi.waitFor(() =>
+      expect(
+        state.portMessages.filter(
+          (message) =>
+            (message as { kind?: unknown; batchId?: unknown }).kind === "content.events" &&
+            (message as { batchId?: unknown }).batchId === firstBatch.batchId
+        )
+      ).toHaveLength(2)
+    );
+    const replayedBatch = state.portMessages.filter(
+      (message) =>
+        (message as { kind?: unknown; batchId?: unknown }).kind === "content.events" &&
+        (message as { batchId?: unknown }).batchId === firstBatch.batchId
+    )[1] as { activationId?: string; events?: unknown[] };
+    expect(replayedBatch.activationId).toBe(recoveredActivationId);
+    expect(replayedBatch.events).toHaveLength(1);
+    activationId = recoveredActivationId;
+    for (const listener of [...state.portMessageListeners]) {
+      listener({
+        kind: "sw.content-events-ack",
+        activationId,
+        batchId: firstBatch.batchId
+      });
+    }
+    await vi.waitFor(() =>
+      expect(
+        [...state.portMessages]
+          .reverse()
+          .find(
+            (message) =>
+              (message as { kind?: unknown; batchId?: unknown }).kind === "content.events" &&
+              (message as { batchId?: unknown }).batchId !== firstBatch.batchId
+          )
+      ).toBeDefined()
+    );
+    const recoveredSuffix = [...state.portMessages]
+      .reverse()
+      .find(
+        (message) =>
+          (message as { kind?: unknown; batchId?: unknown }).kind === "content.events" &&
+          (message as { batchId?: unknown }).batchId !== firstBatch.batchId
+      ) as { batchId: string; events: Array<{ rawType?: string }> };
+    expect(recoveredSuffix.events.map((event) => event.rawType)).toContain("keydown");
+    for (const listener of [...state.portMessageListeners]) {
+      listener({
+        kind: "sw.content-events-ack",
+        activationId,
+        batchId: recoveredSuffix.batchId
+      });
+    }
+
+    const predecessorActivationId = activationId;
+    const predecessorDocumentUrl = window.location.href;
+    const eventBatchCountBeforeRapidTransitions = state.portMessages.filter(
+      (message) => (message as { kind?: unknown }).kind === "content.events"
+    ).length;
+    state.agentOptions!.emitBatch(
+      [
+        {
+          source: "content",
+          rawType: "rapid-transition",
+          sid: "S-content",
+          tabId: 7,
+          t: 2.4,
+          mono: 2.4,
+          payload: {}
+        }
+      ],
+      predecessorActivationId
+    );
+    await vi.advanceTimersByTimeAsync(550);
+    await vi.waitFor(() =>
+      expect(
+        state.portMessages.filter(
+          (message) => (message as { kind?: unknown }).kind === "content.events"
+        )
+      ).toHaveLength(eventBatchCountBeforeRapidTransitions + 1)
+    );
+    const predecessorBatch = [...state.portMessages]
+      .reverse()
+      .find((message) => (message as { kind?: unknown }).kind === "content.events") as {
+      activationId: string;
+      batchId: string;
+      events: Array<{ rawType?: string }>;
+    };
+    expect(predecessorBatch.activationId).toBe(predecessorActivationId);
+    expect(predecessorBatch.events.map((event) => event.rawType)).toEqual(["rapid-transition"]);
+
+    const readyCountBeforePolicyRevocation = state.sentMessages.filter(
+      (message) => (message as { kind?: unknown }).kind === "content.ready"
+    ).length;
+    await dispatchRuntimeMessage({
+      kind: "sw.content-revoked",
+      activationId: predecessorActivationId,
+      reason: "same-document-policy-pending"
+    });
+    await vi.advanceTimersByTimeAsync(500);
+    expect(
+      state.sentMessages.filter(
+        (message) => (message as { kind?: unknown }).kind === "content.ready"
+      )
+    ).toHaveLength(readyCountBeforePolicyRevocation);
+
+    const documentId = "rapid-transition-document";
+    window.history.replaceState({}, "", "/dashboard?step=b");
+    const provisionalDocumentUrl = window.location.href;
+    await dispatchRuntimeMessage({
+      kind: "sw.request-content-ready",
+      sameDocumentTransition: {
+        previousActivationId: predecessorActivationId,
+        frameId: 0,
+        documentId,
+        previousDocumentUrl: predecessorDocumentUrl,
+        documentUrl: provisionalDocumentUrl,
+        revision: 10
+      }
+    });
+    const provisionalActivationId = state.currentActivationId();
+    await vi.waitFor(() =>
+      expect(
+        state.sentMessages.some(
+          (message) =>
+            (message as { kind?: unknown; activationId?: unknown }).kind === "content.armed" &&
+            (message as { activationId?: unknown }).activationId === provisionalActivationId
+        )
+      ).toBe(true)
+    );
+
+    window.history.replaceState({}, "", "/dashboard?step=c");
+    const finalDocumentUrl = window.location.href;
+    await dispatchRuntimeMessage({
+      kind: "sw.request-content-ready",
+      sameDocumentTransition: {
+        previousActivationId: predecessorActivationId,
+        frameId: 0,
+        documentId,
+        previousDocumentUrl: predecessorDocumentUrl,
+        documentUrl: finalDocumentUrl,
+        revision: 11
+      }
+    });
+    const finalActivationId = state.currentActivationId();
+    expect(finalActivationId).not.toBe(provisionalActivationId);
+    await vi.waitFor(() =>
+      expect(
+        state.sentMessages.some(
+          (message) =>
+            (message as { kind?: unknown; activationId?: unknown }).kind === "content.armed" &&
+            (message as { activationId?: unknown }).activationId === finalActivationId
+        )
+      ).toBe(true)
+    );
+    await dispatchRuntimeMessage({
+      kind: "sw.content-activated",
+      activationId: finalActivationId
+    });
+    await vi.waitFor(() =>
+      expect(
+        state.portMessages.some(
+          (message) =>
+            (message as { kind?: unknown; activationId?: unknown }).kind === "content.bind" &&
+            (message as { activationId?: unknown }).activationId === finalActivationId
+        )
+      ).toBe(true)
+    );
+    for (const listener of [...state.portMessageListeners]) {
+      listener({ kind: "sw.content-bound", activationId: finalActivationId });
+    }
+    await vi.waitFor(() =>
+      expect(
+        state.portMessages.filter(
+          (message) =>
+            (message as { kind?: unknown; batchId?: unknown }).kind === "content.events" &&
+            (message as { batchId?: unknown }).batchId === predecessorBatch.batchId
+        )
+      ).toHaveLength(2)
+    );
+    const reboundPredecessorBatch = [...state.portMessages]
+      .reverse()
+      .find(
+        (message) =>
+          (message as { kind?: unknown; batchId?: unknown }).kind === "content.events" &&
+          (message as { batchId?: unknown }).batchId === predecessorBatch.batchId
+      ) as { activationId?: string; documentUrl?: string };
+    expect(reboundPredecessorBatch).toMatchObject({
+      activationId: finalActivationId,
+      documentUrl: finalDocumentUrl
+    });
+    for (const listener of [...state.portMessageListeners]) {
+      listener({
+        kind: "sw.content-events-ack",
+        activationId: finalActivationId,
+        batchId: predecessorBatch.batchId
+      });
+    }
+    activationId = finalActivationId;
+
+    const flushCallsBeforeQuiesce = state.flushCalls;
+    const batchesBeforeQuiesce = state.portMessages.filter(
+      (message) => (message as { kind?: unknown }).kind === "content.events"
+    ).length;
+    state.agentOptions!.emitBatch(
+      [
+        {
+          source: "content",
+          rawType: "keydown",
+          sid: "S-content",
+          tabId: 7,
+          t: 2.5,
+          mono: 2.5,
+          payload: {}
+        }
+      ],
+      activationId
+    );
+    await dispatchRuntimeMessage({ kind: "sw.content-quiesce", activationId });
+    await vi.waitFor(() => expect(state.quiesceCalls).toBe(1));
+    await vi.advanceTimersByTimeAsync(550);
+    await vi.waitFor(() => expect(state.freezeCalls).toBe(1));
+    expect(state.flushCalls).toBe(flushCallsBeforeQuiesce + 2);
+    await vi.advanceTimersByTimeAsync(2_100);
+    expect(
+      state.portMessages.filter(
+        (message) => (message as { kind?: unknown }).kind === "content.events"
+      )
+    ).toHaveLength(batchesBeforeQuiesce);
+
+    state.setFlushEvent({
+      source: "content",
+      rawType: "submit",
+      sid: "S-content",
+      tabId: 7,
+      t: 3,
+      mono: 3,
+      payload: {}
+    });
+    await dispatchRuntimeMessage({
+      kind: "sw.content-drain",
+      activationId,
+      sid: "S-content",
+      token: "a".repeat(64),
+      deadline: Date.now() + 10_000,
+      documentUrl: window.location.href
+    });
+    await vi.waitFor(() => expect(state.prepareStopCalls).toBe(1));
+    expect(state.freezeCalls).toBe(2);
+    expect(state.flushCalls).toBe(flushCallsBeforeQuiesce + 3);
+    expect(
+      state.portMessages.some(
+        (message) =>
+          (message as { kind?: unknown; stopDrainToken?: unknown }).kind === "content.events" &&
+          (message as { stopDrainToken?: unknown }).stopDrainToken === "a".repeat(64)
+      )
+    ).toBe(true);
+    expect(
+      state.portMessages.some(
+        (message) => (message as { kind?: unknown }).kind === "content.stop-drained"
+      )
+    ).toBe(false);
+
+    const drainBatch = [...state.portMessages]
+      .reverse()
+      .find(
+        (message) =>
+          (message as { kind?: unknown; stopDrainToken?: unknown }).kind === "content.events" &&
+          (message as { stopDrainToken?: unknown }).stopDrainToken === "a".repeat(64)
+      ) as { batchId: string };
+    for (const listener of [...state.portMessageListeners]) {
+      listener({
+        kind: "sw.content-events-ack",
+        activationId,
+        batchId: drainBatch.batchId
+      });
+    }
+
+    state.finishPrepareStop();
+    await vi.waitFor(() =>
+      expect(
+        state.portMessages.some(
+          (message) => (message as { kind?: unknown }).kind === "content.stop-drained"
+        )
+      ).toBe(true)
+    );
+    const firstDrainAckCount = state.portMessages.filter(
+      (message) => (message as { kind?: unknown }).kind === "content.stop-drained"
+    ).length;
+    await vi.advanceTimersByTimeAsync(550);
+    expect(
+      state.portMessages.filter(
+        (message) => (message as { kind?: unknown }).kind === "content.stop-drained"
+      ).length
+    ).toBeGreaterThan(firstDrainAckCount);
+
+    const readyCountBeforeBfCache = state.sentMessages.filter(
+      (message) => (message as { kind?: unknown }).kind === "content.ready"
+    ).length;
+    window.dispatchEvent(persistedPageEvent("pagehide"));
+    window.dispatchEvent(persistedPageEvent("pageshow"));
+    await vi.waitFor(() =>
+      expect(
+        state.sentMessages.filter(
+          (message) => (message as { kind?: unknown }).kind === "content.ready"
+        )
+      ).toHaveLength(readyCountBeforeBfCache + 1)
+    );
+    const resumedReady = state.sentMessages
+      .filter((message) => (message as { kind?: unknown }).kind === "content.ready")
+      .at(-1) as Record<string, unknown>;
+
+    expect(resumedReady.reason).toBe("pageshow");
+    expect(resumedReady.readyId).not.toBe(ready.readyId);
+    expect(resumedReady.currentActivationId).toBe(activationId);
+    expect(resumedReady.mainWorldController).toMatchObject({
+      secret: "f".repeat(64),
+      moduleNonce: `m1_${"e".repeat(64)}`
+    });
+
+    const recoveredSeed = (await dispatchRuntimeMessage({
+      kind: "sw.main-world-controller-seed",
+      controller: {
+        secret: "1".repeat(64),
+        moduleNonce: `m1_${"2".repeat(64)}`,
+        revision: 0,
+        phase: "inactive",
+        activationId: null
+      }
+    })) as { kind?: string; controller?: { secret?: string; moduleNonce?: string } };
+    expect(recoveredSeed).toMatchObject({
+      kind: "content.main-world-controller-seeded",
+      controller: {
+        secret: "f".repeat(64),
+        moduleNonce: `m1_${"e".repeat(64)}`
+      }
+    });
+  });
+});
diff --git a/apps/extension/src/content/index.ts b/apps/extension/src/content/index.ts
index 5fa63b8..b1ef0a3 100644
--- a/apps/extension/src/content/index.ts
+++ b/apps/extension/src/content/index.ts
@@ -1,472 +1,1695 @@
+import type { CaptureMode, CapturePolicy } from "@webblackbox/protocol";
 import type { RawRecorderEvent } from "@webblackbox/recorder";
 import type { LiteCaptureAgent } from "webblackbox/lite-capture-agent";
-import type { LiteCaptureAgentOptions } from "webblackbox/types";
-
-import { getChromeApi, type PortLike } from "../shared/chrome-api.js";
-import { createExtensionI18n } from "../shared/i18n.js";
-import { PORT_NAMES, type ExtensionOutboundMessage } from "../shared/messages.js";
+import type { LiteCaptureAgentOptions, LiteCaptureState } from "webblackbox/types";
+
+import { getChromeApi, type MessageSenderLike, type PortLike } from "../shared/chrome-api.js";
+import {
+  createContentEventBatchId,
+  createContentReadyId,
+  type ContentActivationId,
+  type ContentEventBatchId,
+  type ContentReadyId
+} from "../shared/content-activation-protocol.js";
+import {
+  parseMainWorldControllerSeedMessage,
+  sameMainWorldControllerCapability,
+  type MainWorldControllerHint
+} from "../shared/main-world-controller.js";
+import {
+  PORT_NAMES,
+  type ContentPrepareMessage,
+  type ContentSameDocumentTransition,
+  type ContentStopDrainArtifact,
+  type ContentStopDrainDegradationReason
+} from "../shared/messages.js";
+import { acquireContentBootstrapLease, type ContentBootstrapLease } from "./bootstrap-lease.js";
 import { CONTENT_EVENT_FLUSH_CHUNK, resolveContentEventFlushDelay } from "./flush-policy.js";
+import {
+  captureRecoverableContentEventQueue,
+  restoreRecoverableContentEventQueue,
+  type RecoverableContentEventQueue
+} from "./event-queue-recovery.js";
+import {
+  isContentMarkerCommand,
+  parseContentMainWorldControlResult,
+  parseContentControlMessage,
+  type ContentControlMessage
+} from "./outbound-messages.js";
+import { bindContentPageLifecycle } from "./page-lifecycle.js";
+import {
+  buildContentStopDrainedMessage,
+  resolveContentStopDrainContext,
+  type ContentStopDrainContext
+} from "./stop-drain.js";
 
 type ContentAgentModule = typeof import("./content-agent.js");
 
-const chromeApi = getChromeApi();
-const { t } = createExtensionI18n();
-let contentPort: PortLike | null = null;
-let reconnectTimer = 0;
-let reconnectAttempts = 0;
-let captureAgent: LiteCaptureAgent | null = null;
-let captureAgentPromise: Promise<LiteCaptureAgent> | null = null;
-
-let recordingActive = false;
-let recordingStatusVersion = 0;
-let pendingEvents: RawRecorderEvent[] = [];
-let pendingEventFlushTimer = 0;
-let pendingEventFlushDelayMs = Number.POSITIVE_INFINITY;
-
-const PORT_RECONNECT_INITIAL_MS = 250;
-const PORT_RECONNECT_MAX_MS = 5_000;
-const PENDING_EVENT_MAX = 1_200;
-const DEFAULT_TAB_ID = -1;
-const PORT_DEBUG_LOG_FLAG = "__WEBBLACKBOX_DEBUG_PORT__";
-const INJECTED_CAPTURE_CONFIG_EVENT = "webblackbox:injected-config";
-
-void requestRecordingStatusOnce();
-
-chromeApi?.runtime?.onMessage.addListener((message) => {
-  if (isMarkerCommand(message)) {
-    if (recordingActive) {
+type ContentActivationPhase =
+  | "prepared"
+  | "armed"
+  | "active-unbound"
+  | "active-bound"
+  | "quiescing-unbound"
+  | "quiescing-bound"
+  | "draining";
+
+type ContentActivation = Readonly<{
+  epoch: number;
+  readyId: ContentReadyId;
+  activationId: ContentActivationId;
+  sid: string;
+  tabId: number;
+  mode: CaptureMode;
+  sampling: ContentPrepareMessage["sampling"];
+  capturePolicy: CapturePolicy;
+  sameDocumentTransition?: ContentSameDocumentTransition;
+}> & {
+  mainWorldController: MainWorldControllerHint | null;
+  documentUrl: string;
+  urlRevision: number;
+  phase: ContentActivationPhase;
+};
+
+type PendingContentEventBatch = {
+  batchId: ContentEventBatchId;
+  events: RawRecorderEvent[];
+  documentUrl: string;
+  stopDrainToken?: string;
+};
+
+type AwaitingReady = Readonly<{
+  epoch: number;
+  readyId: ContentReadyId;
+  reason: "requested" | "pageshow" | "recovery";
+  currentActivationId?: ContentActivationId;
+  documentUrl: string;
+  mainWorldController: MainWorldControllerHint | null;
+  sameDocumentTransition?: ContentSameDocumentTransition;
+}>;
+
+const contentBootstrapLease = acquireContentBootstrapLease(globalThis);
+
+if (contentBootstrapLease) {
+  bootstrapContentRuntime(contentBootstrapLease);
+}
+
+function bootstrapContentRuntime(bootstrapLease: ContentBootstrapLease): void {
+  const chromeApi = getChromeApi();
+  const keyboardMarkerMessage =
+    chromeApi?.i18n?.getMessage?.("contentKeyboardMarker") || "Keyboard marker";
+  let activationEpoch = 0;
+  let lifecycleVersion = 0;
+  let awaitingReady: AwaitingReady | null = null;
+  let currentActivation: ContentActivation | null = null;
+  let lastActivationHint: ContentActivationId | undefined;
+  let lastMainWorldController: MainWorldControllerHint | null = null;
+  let contentPort: PortLike | null = null;
+  let contentPortBound = false;
+  let reconnectTimer = 0;
+  let reconnectAttempts = 0;
+  let bindFailures = 0;
+  let bindAckTimer = 0;
+  let armedRetryTimer = 0;
+  let readyRetryTimer = 0;
+  let captureAgent: LiteCaptureAgent | null = null;
+  let captureAgentPromise: Promise<LiteCaptureAgent> | null = null;
+  let pendingEvents: RawRecorderEvent[] = [];
+  let pendingEventBatch: PendingContentEventBatch | null = null;
+  let recoverableEventQueue: RecoverableContentEventQueue | null = null;
+  let exactReactivationPending = false;
+  let pendingEventFlushTimer = 0;
+  let pendingEventFlushDelayMs = Number.POSITIVE_INFINITY;
+  let eventBatchAckTimer = 0;
+  let stopDrainContext: ContentStopDrainContext | null = null;
+  let stopIntentQuiescence: {
+    activationId: ContentActivationId;
+    promise: Promise<boolean>;
+  } | null = null;
+  const stopDrainExpectedArtifacts = new Set<ContentStopDrainArtifact>();
+  const stopDrainEmittedArtifacts = new Set<ContentStopDrainArtifact>();
+  const stopDrainOmittedArtifacts = new Set<ContentStopDrainArtifact>();
+  const stopDrainDegradationReasons = new Set<ContentStopDrainDegradationReason>();
+  let drainFinishing = false;
+  let drainPrepared = false;
+  let stopDrainAckRetryTimer = 0;
+  let drainDeadlineTimer = 0;
+
+  const PORT_RECONNECT_INITIAL_MS = 250;
+  const PORT_RECONNECT_MAX_MS = 5_000;
+  const READY_RETRY_MS = 500;
+  const ARMED_RETRY_MS = 250;
+  const BIND_ACK_TIMEOUT_MS = 2_000;
+  const EVENT_BATCH_ACK_TIMEOUT_MS = 2_000;
+  const STOP_DRAIN_ACK_RETRY_MS = 500;
+  const PENDING_EVENT_MAX = 1_200;
+  const PORT_DEBUG_LOG_FLAG = "__WEBBLACKBOX_DEBUG_PORT__";
+
+  const onRuntimeMessage = (
+    rawMessage: unknown,
+    _sender: MessageSenderLike,
+    sendResponse: (response: unknown) => void
+  ) => {
+    const seed = parseMainWorldControllerSeedMessage(rawMessage);
+    if (seed) {
+      if (!bootstrapLease.isActive()) {
+        return false;
+      }
+      const existing = currentActivation?.mainWorldController ?? lastMainWorldController;
+      if (existing) {
+        sendResponse({ kind: "content.main-world-controller-seeded", controller: existing });
+        return false;
+      }
+      lastMainWorldController = seed.controller;
+      sendResponse({ kind: "content.main-world-controller-seeded", controller: seed.controller });
+      queueMicrotask(() => {
+        if (bootstrapLease.isActive() && currentActivation === null) {
+          void requestFreshActivation("recovery");
+        }
+      });
+      return false;
+    }
+
+    const message = parseContentControlMessage(rawMessage);
+
+    if (message?.kind === "sw.request-content-ready") {
+      sendResponse({ kind: "content.ready-requested" });
+
+      if (bootstrapLease.isActive()) {
+        void requestFreshActivation("requested", message.sameDocumentTransition);
+      }
+
+      return false;
+    }
+
+    if (!bootstrapLease.isActive()) {
+      return false;
+    }
+
+    if (isContentMarkerCommand(rawMessage)) {
       void emitKeyboardMarker();
+      return false;
+    }
+
+    if (message) {
+      void handleControlMessage(message);
     }
 
     return false;
+  };
+
+  chromeApi?.runtime?.onMessage.addListener(onRuntimeMessage);
+
+  const unbindPageLifecycle = bindContentPageLifecycle(window, {
+    dispose: cleanup,
+    resume: resumeFromBackForwardCache,
+    suspend: suspendForBackForwardCache
+  });
+
+  void requestFreshActivation("recovery");
+
+  function resumeFromBackForwardCache(): void {
+    if (!bootstrapLease.resume()) {
+      return;
+    }
+
+    lifecycleVersion += 1;
+    void requestFreshActivation("pageshow");
   }
 
-  void handleSwMessage(message as ExtensionOutboundMessage);
-  return false;
-});
+  function suspendForBackForwardCache(): void {
+    if (!bootstrapLease.suspend()) {
+      return;
+    }
 
-window.addEventListener("beforeunload", cleanup);
-window.addEventListener("pagehide", cleanup, { once: true });
+    lifecycleVersion += 1;
+    deactivateCurrentActivation("bfcache-suspend", true, true);
+    awaitingReady = null;
+    captureAgentPromise = null;
+    stopReadyRetry();
+  }
 
-function cleanup(): void {
-  recordingActive = false;
-  recordingStatusVersion += 1;
-  stopPortReconnect();
-  stopPendingEventFlush();
-  pendingEvents = [];
-  captureAgent?.dispose();
-  captureAgent = null;
-  captureAgentPromise = null;
-  disconnectContentPort();
-}
+  function cleanup(): void {
+    if (!bootstrapLease.dispose()) {
+      return;
+    }
 
-function connectContentPort(): void {
-  if (!recordingActive || !chromeApi?.runtime || contentPort) {
-    return;
+    lifecycleVersion += 1;
+    deactivateCurrentActivation("document-dispose", false);
+    awaitingReady = null;
+    lastActivationHint = undefined;
+    lastMainWorldController = null;
+    stopReadyRetry();
+    removeRuntimeMessageListener();
+    unbindPageLifecycle();
+    captureAgent?.dispose();
+    captureAgent = null;
+    captureAgentPromise = null;
   }
 
-  try {
-    const port = chromeApi.runtime.connect({ name: PORT_NAMES.content });
-    bindContentPort(port);
-  } catch (error) {
-    debugPortSendFailure("runtime.connect", error);
-    schedulePortReconnect();
+  function removeRuntimeMessageListener(): void {
+    const onMessage = chromeApi?.runtime?.onMessage as
+      | {
+          removeListener?: (listener: typeof onRuntimeMessage) => void;
+        }
+      | undefined;
+    onMessage?.removeListener?.(onRuntimeMessage);
   }
-}
 
-function bindContentPort(port: PortLike): void {
-  stopPortReconnect();
-  reconnectAttempts = 0;
-  contentPort = port;
+  async function requestFreshActivation(
+    reason: AwaitingReady["reason"],
+    sameDocumentTransition?: ContentSameDocumentTransition
+  ): Promise<void> {
+    if (!bootstrapLease.isActive() || !chromeApi?.runtime?.sendMessage) {
+      return;
+    }
 
-  const onMessage = (message: unknown) => {
-    void handleSwMessage(message as ExtensionOutboundMessage);
-  };
+    if (reason === "recovery" && exactReactivationPending) {
+      return;
+    }
 
-  const onDisconnect = () => {
-    if (contentPort === port) {
-      contentPort = null;
+    const documentUrl = readDocumentUrl();
+    if (!documentUrl) {
+      return;
     }
 
-    port.onMessage.removeListener(onMessage);
-    port.onDisconnect.removeListener(onDisconnect);
+    let readyId: ContentReadyId;
+
+    try {
+      readyId = createContentReadyId();
+    } catch (error) {
+      debugPortSendFailure("content.ready.id", error);
+      return;
+    }
+
+    const currentActivationId = currentActivation?.activationId ?? lastActivationHint;
+    const mainWorldController = currentActivation?.mainWorldController ?? lastMainWorldController;
+    const trustedSameDocumentTransition = authorizeSameDocumentQueueTransition(
+      sameDocumentTransition,
+      documentUrl
+    );
+    if (exactReactivationPending && reason === "requested") {
+      exactReactivationPending = false;
+    }
+    deactivateCurrentActivation("fresh-ready", true, true);
+    const epoch = (activationEpoch += 1);
+
+    const request: AwaitingReady = {
+      epoch,
+      readyId,
+      reason,
+      ...(currentActivationId ? { currentActivationId } : {}),
+      documentUrl,
+      mainWorldController,
+      ...(trustedSameDocumentTransition
+        ? { sameDocumentTransition: trustedSameDocumentTransition }
+        : {})
+    };
+    awaitingReady = request;
+    stopReadyRetry();
+    await sendReadyRequest(request);
+  }
+
+  async function sendReadyRequest(request: AwaitingReady): Promise<void> {
+    if (!isCurrentReadyRequest(request) || !chromeApi?.runtime?.sendMessage) {
+      return;
+    }
+
+    try {
+      const response = await chromeApi.runtime.sendMessage({
+        kind: "content.ready",
+        readyId: request.readyId,
+        reason: request.reason,
+        ...(request.currentActivationId
+          ? { currentActivationId: request.currentActivationId }
+          : {}),
+        documentUrl: request.documentUrl,
+        mainWorldController: request.mainWorldController
+      });
+
+      if (!isCurrentReadyRequest(request)) {
+        return;
+      }
+
+      const message = parseContentControlMessage(response);
+      if (message) {
+        await handleControlMessage(message);
+      } else {
+        scheduleReadyRetry(request);
+      }
+    } catch (error) {
+      if (isCurrentReadyRequest(request)) {
+        debugPortSendFailure("content.ready", error);
+        scheduleReadyRetry(request);
+      }
+    }
+  }
+
+  function isCurrentReadyRequest(request: AwaitingReady): boolean {
+    return (
+      bootstrapLease.isActive() && awaitingReady === request && request.epoch === activationEpoch
+    );
+  }
+
+  function scheduleReadyRetry(request: AwaitingReady): void {
+    if (!isCurrentReadyRequest(request) || readyRetryTimer > 0) {
+      return;
+    }
+
+    readyRetryTimer = window.setTimeout(() => {
+      readyRetryTimer = 0;
+      void sendReadyRequest(request);
+    }, READY_RETRY_MS);
+  }
+
+  function stopReadyRetry(): void {
+    if (readyRetryTimer > 0) {
+      clearTimeout(readyRetryTimer);
+      readyRetryTimer = 0;
+    }
+  }
+
+  async function handleControlMessage(message: ContentControlMessage): Promise<void> {
+    switch (message.kind) {
+      case "sw.request-content-ready":
+        await requestFreshActivation("requested", message.sameDocumentTransition);
+        return;
+      case "sw.content-inactive":
+        if (awaitingReady?.readyId === message.readyId) {
+          awaitingReady = null;
+          stopReadyRetry();
+        }
+        return;
+      case "sw.content-prepare":
+        await prepareActivation(message);
+        return;
+      case "sw.content-activated":
+        await activatePreparedContent(message.activationId);
+        return;
+      case "sw.content-bound":
+        bindActivatedContent(message.activationId);
+        return;
+      case "sw.content-events-ack":
+        acknowledgeContentEventBatch(message.activationId, message.batchId);
+        return;
+      case "sw.content-url":
+        if (
+          currentActivation?.activationId === message.activationId &&
+          (message.revision > currentActivation.urlRevision ||
+            (message.revision === currentActivation.urlRevision &&
+              message.documentUrl !== currentActivation.documentUrl)) &&
+          readDocumentUrl() === message.documentUrl
+        ) {
+          currentActivation.documentUrl = message.documentUrl;
+          currentActivation.urlRevision = message.revision;
+        }
+        return;
+      case "sw.content-quiesce":
+        await quiesceActivation(message.activationId);
+        return;
+      case "sw.content-drain":
+        await drainActivation(message);
+        return;
+      case "sw.content-revoked":
+        if (currentActivation?.activationId === message.activationId) {
+          exactReactivationPending = message.reason === "same-document-policy-pending";
+          deactivateCurrentActivation(
+            message.reason,
+            true,
+            message.reason !== "runtime-stop" &&
+              message.reason !== "content-delivery-mismatch" &&
+              message.reason !== "content-delivery-inconsistent"
+          );
+          // Same-document policy rotation is service-worker-owned: it follows this
+          // revocation with an exact request that carries the queue transition.
+          // A generic recovery here races that request and can discard its proof.
+          if (message.reason !== "same-document-policy-pending") {
+            void requestFreshActivation("recovery");
+          }
+        }
+        return;
+      case "sw.content-reset":
+        exactReactivationPending = false;
+        deactivateCurrentActivation(message.reason, false);
+        awaitingReady = null;
+        stopReadyRetry();
+        void requestFreshActivation("recovery");
+        return;
+      case "sw.freeze":
+        if (currentActivation?.sid === message.sid) {
+          captureAgent?.setIndicatorState(message.sid, "freeze");
+        }
+        return;
+    }
+  }
+
+  async function quiesceActivation(activationId: ContentActivationId): Promise<void> {
+    const activation = currentActivation;
+    if (
+      !activation ||
+      activation.activationId !== activationId ||
+      (activation.phase !== "active-bound" &&
+        activation.phase !== "active-unbound" &&
+        activation.phase !== "quiescing-bound" &&
+        activation.phase !== "quiescing-unbound")
+    ) {
+      return;
+    }
+
+    await ensureStopIntentQuiescence(activation);
+  }
+
+  function ensureStopIntentQuiescence(activation: ContentActivation): Promise<boolean> {
+    if (stopIntentQuiescence?.activationId === activation.activationId) {
+      return stopIntentQuiescence.promise;
+    }
+
+    if (activation.phase === "active-bound") {
+      activation.phase = "quiescing-bound";
+    } else if (activation.phase === "active-unbound") {
+      activation.phase = "quiescing-unbound";
+      disconnectContentPort();
+    }
     stopPendingEventFlush();
-    schedulePortReconnect();
-  };
+    stopEventBatchAckTimer();
+    cancelPortReconnectTimer();
 
-  port.onMessage.addListener(onMessage);
-  port.onDisconnect.addListener(onDisconnect);
+    const promise = (async () => {
+      const agent = captureAgent;
+      try {
+        agent?.quiesceOrdinaryCapture();
+        agent?.flush();
+      } catch (error) {
+        debugPortSendFailure("content.quiesce.ordinary", error);
+      }
 
-  if (recordingActive) {
-    schedulePendingEventFlush();
+      const injectedDrained =
+        activation.mode === "lite" ? await drainInjectedCaptureBridge(activation) : true;
+
+      try {
+        agent?.freezeOrdinaryCapture();
+        agent?.flush();
+      } catch (error) {
+        debugPortSendFailure("content.quiesce.finalize", error);
+      }
+      return injectedDrained;
+    })();
+    stopIntentQuiescence = { activationId: activation.activationId, promise };
+    return promise;
   }
-}
 
-function disconnectContentPort(): void {
-  const port = contentPort;
+  async function prepareActivation(message: ContentPrepareMessage): Promise<void> {
+    const request = awaitingReady;
+
+    if (!request || request.readyId !== message.readyId || request.epoch !== activationEpoch) {
+      return;
+    }
+
+    awaitingReady = null;
+    stopReadyRetry();
+    const activation: ContentActivation = {
+      epoch: request.epoch,
+      readyId: message.readyId,
+      activationId: message.activationId,
+      sid: message.sid,
+      tabId: message.tabId,
+      mode: message.mode,
+      sampling: message.sampling,
+      capturePolicy: message.capturePolicy,
+      mainWorldController: message.mainWorldController,
+      ...(request.sameDocumentTransition
+        ? { sameDocumentTransition: request.sameDocumentTransition }
+        : {}),
+      documentUrl: request.documentUrl,
+      urlRevision: 0,
+      phase: "prepared"
+    };
+    currentActivation = activation;
+    lastActivationHint = activation.activationId;
+
+    try {
+      await ensureCaptureAgent();
+    } catch (error) {
+      if (currentActivation === activation) {
+        deactivateCurrentActivation("capture-agent-load-failed", true);
+        debugPortSendFailure("content-agent.load", error);
+        window.setTimeout(() => {
+          if (bootstrapLease.isActive() && currentActivation === null) {
+            void requestFreshActivation("recovery");
+          }
+        }, READY_RETRY_MS);
+      }
+      return;
+    }
+
+    if (!isCurrentActivation(activation, "prepared")) {
+      return;
+    }
 
-  if (!port) {
-    return;
+    if (activation.mode === "lite") {
+      const mainWorldActivation = await requestMainWorldControl(activation, "activate");
+      if (mainWorldActivation?.result.kind !== "activated") {
+        deactivateCurrentActivation("main-world-control-failed", true);
+        void requestFreshActivation("recovery");
+        return;
+      }
+    }
+    void sendContentArmed(activation);
   }
 
-  contentPort = null;
+  async function sendContentArmed(activation: ContentActivation): Promise<void> {
+    if (
+      !currentActivation ||
+      currentActivation !== activation ||
+      (activation.phase !== "prepared" && activation.phase !== "armed") ||
+      !chromeApi?.runtime?.sendMessage
+    ) {
+      return;
+    }
+
+    activation.phase = "armed";
 
-  try {
-    port.disconnect?.();
-  } catch (error) {
-    debugPortSendFailure("runtime.disconnect", error);
+    try {
+      const response = await chromeApi.runtime.sendMessage({
+        kind: "content.armed",
+        readyId: activation.readyId,
+        activationId: activation.activationId,
+        documentUrl: activation.documentUrl
+      });
+
+      if (!isCurrentActivation(activation, "armed")) {
+        return;
+      }
+
+      const message = parseContentControlMessage(response);
+      if (message) {
+        await handleControlMessage(message);
+      } else {
+        scheduleArmedRetry(activation);
+      }
+    } catch (error) {
+      if (isCurrentActivation(activation, "armed")) {
+        debugPortSendFailure("content.armed", error);
+        scheduleArmedRetry(activation);
+      }
+    }
   }
-}
 
-function schedulePortReconnect(): void {
-  if (!recordingActive || !chromeApi?.runtime || reconnectTimer > 0 || contentPort) {
-    return;
+  function scheduleArmedRetry(activation: ContentActivation): void {
+    if (!isCurrentActivation(activation, "armed") || armedRetryTimer > 0) {
+      return;
+    }
+
+    armedRetryTimer = window.setTimeout(() => {
+      armedRetryTimer = 0;
+      void sendContentArmed(activation);
+    }, ARMED_RETRY_MS);
   }
 
-  const delay = Math.min(PORT_RECONNECT_INITIAL_MS * 2 ** reconnectAttempts, PORT_RECONNECT_MAX_MS);
-  reconnectAttempts += 1;
+  function stopArmedRetry(): void {
+    if (armedRetryTimer > 0) {
+      clearTimeout(armedRetryTimer);
+      armedRetryTimer = 0;
+    }
+  }
 
-  reconnectTimer = window.setTimeout(() => {
-    reconnectTimer = 0;
-    connectContentPort();
-  }, delay);
-}
+  async function activatePreparedContent(activationId: ContentActivationId): Promise<void> {
+    const activation = currentActivation;
+
+    if (
+      !activation ||
+      activation.activationId !== activationId ||
+      (activation.phase !== "prepared" && activation.phase !== "armed")
+    ) {
+      return;
+    }
+
+    const agent = await ensureCaptureAgent();
+    if (
+      !currentActivation ||
+      currentActivation !== activation ||
+      (activation.phase !== "prepared" && activation.phase !== "armed")
+    ) {
+      return;
+    }
 
-function stopPortReconnect(): void {
-  reconnectAttempts = 0;
+    restoreRecoverableEventQueue(activation);
+    stopArmedRetry();
+    stopPendingEventFlush();
+    stopDrainContext = null;
+    agent.setRecordingStatus(toActiveAgentState(activation));
+    activation.phase = "active-unbound";
 
-  if (reconnectTimer > 0) {
-    clearTimeout(reconnectTimer);
-    reconnectTimer = 0;
+    connectContentPort();
   }
-}
 
-function queuePendingEvents(events: RawRecorderEvent[]): void {
-  if (!recordingActive || events.length === 0) {
-    return;
+  function restoreRecoverableEventQueue(activation: ContentActivation): void {
+    const recovered = recoverableEventQueue;
+    recoverableEventQueue = null;
+    pendingEventBatch = null;
+    pendingEvents = [];
+
+    const restored = restoreRecoverableContentEventQueue(
+      recovered,
+      activation,
+      readDocumentUrl(),
+      PENDING_EVENT_MAX,
+      activation.sameDocumentTransition
+    );
+    if (!restored) {
+      return;
+    }
+
+    pendingEventBatch = restored.pendingBatch;
+    pendingEvents = restored.pendingEvents;
   }
 
-  pendingEvents.push(...events);
-  trimPendingEvents();
-}
+  function connectContentPort(): void {
+    const activation = currentActivation;
 
-function trimPendingEvents(): void {
-  if (pendingEvents.length <= PENDING_EVENT_MAX) {
-    return;
+    if (
+      !activation ||
+      (activation.phase !== "active-unbound" && activation.phase !== "draining") ||
+      !chromeApi?.runtime ||
+      contentPort
+    ) {
+      return;
+    }
+
+    try {
+      const port = chromeApi.runtime.connect({ name: PORT_NAMES.content });
+      bindContentPort(port, activation);
+    } catch (error) {
+      debugPortSendFailure("runtime.connect", error);
+      schedulePortReconnect();
+    }
   }
 
-  pendingEvents.splice(0, pendingEvents.length - PENDING_EVENT_MAX);
-}
+  function bindContentPort(port: PortLike, activation: ContentActivation): void {
+    if (
+      currentActivation !== activation ||
+      (activation.phase !== "active-unbound" && activation.phase !== "draining")
+    ) {
+      port.disconnect?.();
+      return;
+    }
 
-function flushPendingEventsChunk(): boolean {
-  if (!contentPort || !recordingActive || pendingEvents.length === 0) {
-    return false;
+    cancelPortReconnectTimer();
+    contentPort = port;
+    contentPortBound = false;
+
+    const onMessage = (rawMessage: unknown) => {
+      if (contentPort !== port) {
+        return;
+      }
+
+      const message = parseContentControlMessage(rawMessage);
+      if (message) {
+        void handleControlMessage(message);
+      }
+    };
+
+    const onDisconnect = () => {
+      port.onMessage.removeListener(onMessage);
+      port.onDisconnect.removeListener(onDisconnect);
+
+      if (contentPort !== port) {
+        return;
+      }
+
+      contentPort = null;
+      contentPortBound = false;
+      stopBindAckTimer();
+      stopEventBatchAckTimer();
+      stopPendingEventFlush();
+
+      if (
+        currentActivation === activation &&
+        (activation.phase === "active-bound" || activation.phase === "active-unbound")
+      ) {
+        activation.phase = "active-unbound";
+        bindFailures += 1;
+
+        if (bindFailures >= 3) {
+          void requestFreshActivation("recovery");
+        } else {
+          schedulePortReconnect();
+        }
+      } else if (currentActivation === activation && activation.phase === "draining") {
+        schedulePortReconnect();
+      }
+    };
+
+    port.onMessage.addListener(onMessage);
+    port.onDisconnect.addListener(onDisconnect);
+
+    try {
+      port.postMessage({
+        kind: "content.bind",
+        activationId: activation.activationId,
+        documentUrl: activation.documentUrl
+      });
+      bindAckTimer = window.setTimeout(() => {
+        bindAckTimer = 0;
+
+        if (
+          contentPort === port &&
+          currentActivation === activation &&
+          (activation.phase === "active-unbound" || activation.phase === "draining")
+        ) {
+          bindFailures += 1;
+          disconnectContentPort();
+
+          if (bindFailures >= 3 && activation.phase !== "draining") {
+            void requestFreshActivation("recovery");
+          } else {
+            schedulePortReconnect();
+          }
+        }
+      }, BIND_ACK_TIMEOUT_MS);
+    } catch (error) {
+      debugPortSendFailure("content.bind", error);
+      bindFailures += 1;
+      disconnectContentPort();
+
+      if (bindFailures >= 3 && activation.phase !== "draining") {
+        void requestFreshActivation("recovery");
+      } else {
+        schedulePortReconnect();
+      }
+    }
   }
 
-  const batch = pendingEvents.splice(0, CONTENT_EVENT_FLUSH_CHUNK);
+  function bindActivatedContent(activationId: ContentActivationId): void {
+    const activation = currentActivation;
 
-  try {
-    contentPort.postMessage({
-      kind: "content.events",
-      events: batch
-    });
-  } catch (error) {
-    debugPortSendFailure("content.events.replay", error);
-    pendingEvents = [...batch, ...pendingEvents];
-    trimPendingEvents();
+    if (
+      !activation ||
+      activation.activationId !== activationId ||
+      (activation.phase !== "active-unbound" && activation.phase !== "draining") ||
+      !contentPort
+    ) {
+      return;
+    }
+
+    const draining = activation.phase === "draining";
+    if (!draining) {
+      activation.phase = "active-bound";
+    }
+    contentPortBound = true;
+    reconnectAttempts = 0;
+    bindFailures = 0;
+    stopBindAckTimer();
+    if (pendingEventBatch) {
+      sendPendingEventBatch();
+    } else {
+      schedulePendingEventFlush(pendingEvents.length >= CONTENT_EVENT_FLUSH_CHUNK);
+    }
+
+    if (draining) {
+      void finishDrain(activation);
+    }
+  }
+
+  function disconnectContentPort(): void {
+    const port = contentPort;
     contentPort = null;
-    schedulePortReconnect();
-    return false;
+    contentPortBound = false;
+    stopBindAckTimer();
+    stopEventBatchAckTimer();
+
+    if (!port) {
+      return;
+    }
+
+    try {
+      port.disconnect?.();
+    } catch (error) {
+      debugPortSendFailure("runtime.disconnect", error);
+    }
   }
 
-  return true;
-}
+  function schedulePortReconnect(): void {
+    const activation = currentActivation;
+
+    if (
+      !activation ||
+      (activation.phase !== "active-unbound" && activation.phase !== "draining") ||
+      !chromeApi?.runtime ||
+      reconnectTimer > 0 ||
+      contentPort
+    ) {
+      return;
+    }
 
-function flushPendingEvents(): void {
-  if (!flushPendingEventsChunk()) {
-    return;
+    const delay = Math.min(
+      PORT_RECONNECT_INITIAL_MS * 2 ** reconnectAttempts,
+      PORT_RECONNECT_MAX_MS
+    );
+    reconnectAttempts += 1;
+    reconnectTimer = window.setTimeout(() => {
+      reconnectTimer = 0;
+      connectContentPort();
+    }, delay);
   }
 
-  if (pendingEvents.length > 0) {
-    schedulePendingEventFlush(pendingEvents.length >= CONTENT_EVENT_FLUSH_CHUNK);
+  function stopPortReconnect(): void {
+    reconnectAttempts = 0;
+    bindFailures = 0;
+    cancelPortReconnectTimer();
   }
-}
 
-async function flushAllPendingEvents(): Promise<void> {
-  stopPendingEventFlush();
+  function cancelPortReconnectTimer(): void {
+    if (reconnectTimer > 0) {
+      clearTimeout(reconnectTimer);
+      reconnectTimer = 0;
+    }
+  }
 
-  while (contentPort && recordingActive && pendingEvents.length > 0) {
-    if (!flushPendingEventsChunk()) {
+  function stopBindAckTimer(): void {
+    if (bindAckTimer > 0) {
+      clearTimeout(bindAckTimer);
+      bindAckTimer = 0;
+    }
+  }
+
+  function emitBatch(events: RawRecorderEvent[], activationId: string): void {
+    const activation = currentActivation;
+
+    if (
+      !activation ||
+      activation.activationId !== activationId ||
+      (activation.phase !== "active-unbound" &&
+        activation.phase !== "active-bound" &&
+        activation.phase !== "quiescing-unbound" &&
+        activation.phase !== "quiescing-bound" &&
+        activation.phase !== "draining") ||
+      events.length === 0 ||
+      events.some(
+        (event) =>
+          event.source !== "content" ||
+          event.sid !== activation.sid ||
+          event.tabId !== activation.tabId
+      )
+    ) {
       return;
     }
+
+    if (deactivateForLocalUrlDrift(activation)) {
+      return;
+    }
+
+    pendingEvents.push(...events);
+    trimPendingEvents();
+
+    if (activation.phase === "active-bound" || activation.phase === "draining") {
+      schedulePendingEventFlush(pendingEvents.length >= CONTENT_EVENT_FLUSH_CHUNK);
+    }
   }
-}
 
-function emitBatch(events: RawRecorderEvent[]): void {
-  if (events.length === 0) {
-    return;
+  function trimPendingEvents(): void {
+    if (pendingEvents.length > PENDING_EVENT_MAX) {
+      pendingEvents.splice(0, pendingEvents.length - PENDING_EVENT_MAX);
+    }
   }
 
-  queuePendingEvents(events);
+  function flushPendingEventsChunk(): boolean {
+    const activation = currentActivation;
+
+    if (
+      !activation ||
+      !contentPort ||
+      !contentPortBound ||
+      pendingEventBatch !== null ||
+      (activation.phase !== "active-bound" && activation.phase !== "draining") ||
+      pendingEvents.length === 0
+    ) {
+      return false;
+    }
 
-  if (!contentPort) {
-    connectContentPort();
-    return;
+    if (deactivateForLocalUrlDrift(activation)) {
+      return false;
+    }
+
+    let batchId: ContentEventBatchId;
+
+    try {
+      batchId = createContentEventBatchId();
+    } catch (error) {
+      debugPortSendFailure("content.events.id", error);
+      deactivateCurrentActivation("event-batch-id-failed", true);
+      return false;
+    }
+
+    pendingEventBatch = {
+      batchId,
+      events: pendingEvents.splice(0, CONTENT_EVENT_FLUSH_CHUNK),
+      documentUrl: stopDrainContext?.documentUrl ?? activation.documentUrl,
+      ...(stopDrainContext ? { stopDrainToken: stopDrainContext.token } : {})
+    };
+
+    return sendPendingEventBatch();
   }
 
-  schedulePendingEventFlush(pendingEvents.length >= CONTENT_EVENT_FLUSH_CHUNK);
-}
+  function sendPendingEventBatch(): boolean {
+    const activation = currentActivation;
+    const batch = pendingEventBatch;
+
+    if (
+      !activation ||
+      !batch ||
+      !contentPort ||
+      !contentPortBound ||
+      (activation.phase !== "active-bound" && activation.phase !== "draining")
+    ) {
+      return false;
+    }
 
-function emitMarker(message: string): void {
-  if (!contentPort) {
-    connectContentPort();
-    return;
+    try {
+      contentPort.postMessage({
+        kind: "content.events",
+        activationId: activation.activationId,
+        batchId: batch.batchId,
+        events: batch.events,
+        documentUrl: batch.documentUrl,
+        ...(batch.stopDrainToken ? { stopDrainToken: batch.stopDrainToken } : {})
+      });
+      startEventBatchAckTimer(batch.batchId);
+    } catch (error) {
+      debugPortSendFailure("content.events", error);
+      disconnectContentPort();
+
+      if (activation.phase === "active-bound") {
+        activation.phase = "active-unbound";
+        schedulePortReconnect();
+      }
+      return false;
+    }
+
+    return true;
   }
 
-  try {
-    contentPort.postMessage({
-      kind: "content.marker",
-      message
-    });
-  } catch (error) {
-    debugPortSendFailure("content.marker", error);
+  function flushPendingEvents(): void {
+    if (!flushPendingEventsChunk()) {
+      return;
+    }
+
+    if (pendingEvents.length > 0) {
+      schedulePendingEventFlush(pendingEvents.length >= CONTENT_EVENT_FLUSH_CHUNK);
+    }
   }
-}
 
-function emitStopDrained(sid?: string): void {
-  if (!contentPort || window.top !== window || typeof sid !== "string" || sid.length === 0) {
-    return;
+  async function flushAllPendingEvents(): Promise<void> {
+    stopPendingEventFlush();
+
+    if (pendingEventBatch) {
+      sendPendingEventBatch();
+      return;
+    }
+
+    flushPendingEventsChunk();
   }
 
-  try {
-    contentPort.postMessage({
-      kind: "content.stop-drained",
-      sid
-    });
-  } catch (error) {
-    debugPortSendFailure("content.stop-drained", error);
+  function acknowledgeContentEventBatch(
+    activationId: ContentActivationId,
+    batchId: ContentEventBatchId
+  ): void {
+    const activation = currentActivation;
+    const batch = pendingEventBatch;
+
+    if (!activation || activation.activationId !== activationId || batch?.batchId !== batchId) {
+      return;
+    }
+
+    stopEventBatchAckTimer();
+    pendingEventBatch = null;
+
+    if (pendingEvents.length > 0) {
+      schedulePendingEventFlush(true);
+    }
+
+    if (activation.phase === "draining") {
+      void finishDrain(activation);
+    }
   }
-}
 
-async function handleSwMessage(message: ExtensionOutboundMessage): Promise<void> {
-  if (!message || typeof message !== "object") {
-    return;
+  function startEventBatchAckTimer(batchId: ContentEventBatchId): void {
+    stopEventBatchAckTimer();
+    eventBatchAckTimer = window.setTimeout(() => {
+      eventBatchAckTimer = 0;
+
+      if (pendingEventBatch?.batchId !== batchId) {
+        return;
+      }
+
+      const activation = currentActivation;
+      if (activation?.phase === "active-bound") {
+        activation.phase = "active-unbound";
+      }
+      disconnectContentPort();
+      schedulePortReconnect();
+    }, EVENT_BATCH_ACK_TIMEOUT_MS);
   }
 
-  if (message.kind === "sw.recording-status") {
-    const statusVersion = (recordingStatusVersion += 1);
-    syncInjectedCaptureConfig(message);
-    const nextState = {
-      active: message.active,
-      sid: message.sid,
-      tabId: DEFAULT_TAB_ID,
-      mode: message.mode,
-      sampling: message.sampling,
-      capturePolicy: message.capturePolicy
-    };
+  function stopEventBatchAckTimer(): void {
+    if (eventBatchAckTimer > 0) {
+      clearTimeout(eventBatchAckTimer);
+      eventBatchAckTimer = 0;
+    }
+  }
 
-    if (message.active) {
-      recordingActive = true;
-      connectContentPort();
-      const agent = await ensureCaptureAgent();
+  function schedulePendingEventFlush(immediate = false): void {
+    const activation = currentActivation;
+
+    if (
+      !activation ||
+      !contentPort ||
+      !contentPortBound ||
+      (activation.phase !== "active-bound" && activation.phase !== "draining") ||
+      pendingEvents.length === 0
+    ) {
+      return;
+    }
 
-      if (statusVersion !== recordingStatusVersion || !recordingActive) {
+    const delayMs = resolveContentEventFlushDelay(pendingEvents.length, immediate);
+
+    if (pendingEventFlushTimer > 0) {
+      if (delayMs >= pendingEventFlushDelayMs) {
         return;
       }
 
-      agent.setRecordingStatus(nextState);
-      schedulePendingEventFlush();
-    } else {
-      const wasRecording = recordingActive;
-      const agent = captureAgent;
+      clearTimeout(pendingEventFlushTimer);
+      pendingEventFlushTimer = 0;
+    }
 
-      if (wasRecording && agent) {
-        await agent.prepareStopCapture();
+    pendingEventFlushDelayMs = delayMs;
+    pendingEventFlushTimer = window.setTimeout(() => {
+      pendingEventFlushTimer = 0;
+      pendingEventFlushDelayMs = Number.POSITIVE_INFINITY;
+      flushPendingEvents();
+    }, delayMs);
+  }
 
-        if (statusVersion !== recordingStatusVersion) {
-          return;
-        }
+  function stopPendingEventFlush(): void {
+    if (pendingEventFlushTimer > 0) {
+      clearTimeout(pendingEventFlushTimer);
+      pendingEventFlushTimer = 0;
+    }
+
+    pendingEventFlushDelayMs = Number.POSITIVE_INFINITY;
+  }
+
+  function emitMarker(message: string): void {
+    const activation = currentActivation;
+
+    if (!activation || activation.phase !== "active-bound" || !contentPort) {
+      return;
+    }
 
-        agent.setRecordingStatus(nextState);
-        await flushAllPendingEvents();
+    if (deactivateForLocalUrlDrift(activation)) {
+      return;
+    }
+
+    try {
+      contentPort.postMessage({
+        kind: "content.marker",
+        activationId: activation.activationId,
+        message,
+        documentUrl: activation.documentUrl
+      });
+    } catch (error) {
+      debugPortSendFailure("content.marker", error);
+    }
+  }
+
+  async function emitKeyboardMarker(): Promise<void> {
+    const activation = currentActivation;
+
+    if (
+      !activation ||
+      (activation.phase !== "active-unbound" && activation.phase !== "active-bound")
+    ) {
+      return;
+    }
 
-        if (statusVersion !== recordingStatusVersion) {
-          return;
+    const agent = await ensureCaptureAgent();
+    if (currentActivation === activation) {
+      agent.emitMarker(keyboardMarkerMessage);
+    }
+  }
+
+  async function drainActivation(
+    message: Extract<ContentControlMessage, { kind: "sw.content-drain" }>
+  ): Promise<void> {
+    const activation = currentActivation;
+
+    if (
+      !activation ||
+      activation.activationId !== message.activationId ||
+      activation.sid !== message.sid ||
+      (activation.phase !== "active-bound" &&
+        activation.phase !== "active-unbound" &&
+        activation.phase !== "quiescing-bound" &&
+        activation.phase !== "quiescing-unbound")
+    ) {
+      return;
+    }
+
+    const context = resolveContentStopDrainContext(message);
+    if (!context) {
+      return;
+    }
+
+    if (
+      context.documentUrl !== activation.documentUrl &&
+      readDocumentUrl() === context.documentUrl
+    ) {
+      activation.documentUrl = context.documentUrl;
+      activation.urlRevision += 1;
+    }
+
+    if (context.documentUrl !== activation.documentUrl || deactivateForLocalUrlDrift(activation)) {
+      return;
+    }
+
+    const stopIntentQuiescence = ensureStopIntentQuiescence(activation);
+    activation.phase = "draining";
+    stopDrainContext = context;
+    drainFinishing = false;
+    drainPrepared = false;
+    stopDrainExpectedArtifacts.clear();
+    stopDrainEmittedArtifacts.clear();
+    stopDrainOmittedArtifacts.clear();
+    stopDrainDegradationReasons.clear();
+    for (const artifact of resolveExpectedContentStopArtifacts(activation)) {
+      stopDrainExpectedArtifacts.add(artifact);
+    }
+    stopDrainAckRetry();
+    cancelPortReconnectTimer();
+    reconnectAttempts = 0;
+    startDrainDeadlineTimer(activation, context.deadline);
+
+    if (pendingEventBatch) {
+      pendingEventBatch.documentUrl = context.documentUrl;
+      pendingEventBatch.stopDrainToken = context.token;
+      stopEventBatchAckTimer();
+    }
+
+    if (!contentPort) {
+      connectContentPort();
+    } else if (contentPortBound && pendingEventBatch) {
+      sendPendingEventBatch();
+    }
+
+    if (activation.mode === "lite") {
+      const injectedDrained = await stopIntentQuiescence;
+      if (injectedDrained) {
+        stopDrainEmittedArtifacts.add("main-world-tail");
+      } else {
+        stopDrainDegradationReasons.add("main-world-tail-timeout");
+      }
+    }
+
+    const agent = captureAgent;
+
+    if (agent) {
+      if (!(await runBestEffortContentDrainStep("freeze", () => agent.freezeOrdinaryCapture()))) {
+        stopDrainDegradationReasons.add("content-drain-error");
+      }
+      if (
+        !(await runBestEffortContentDrainStep("ordinary-flush", async () => {
+          agent.flush();
+          await flushAllPendingEvents();
+        }))
+      ) {
+        stopDrainDegradationReasons.add("content-drain-error");
+      }
+
+      if (activation.mode === "lite" && window.top === window) {
+        try {
+          const result = await agent.prepareStopCapture();
+          for (const artifact of result.emittedArtifacts) {
+            stopDrainEmittedArtifacts.add(artifact);
+          }
+          if (result.degradationReason) {
+            stopDrainDegradationReasons.add(result.degradationReason);
+          }
+        } catch (error) {
+          stopDrainDegradationReasons.add("artifact-error");
+          debugPortSendFailure("content.drain.final-artifacts", error);
         }
+      }
 
-        emitStopDrained(nextState.sid);
-      } else if (agent) {
-        agent.setRecordingStatus(nextState);
-      } else if (wasRecording) {
-        emitStopDrained(nextState.sid);
+      if (
+        !(await runBestEffortContentDrainStep("inactive", () =>
+          agent.setRecordingStatus(toInactiveAgentState(activation))
+        ))
+      ) {
+        stopDrainDegradationReasons.add("content-drain-error");
       }
+    } else if (stopDrainExpectedArtifacts.size > 0) {
+      stopDrainDegradationReasons.add("inactive");
+    }
 
-      if (statusVersion !== recordingStatusVersion) {
-        return;
+    for (const artifact of stopDrainExpectedArtifacts) {
+      if (!stopDrainEmittedArtifacts.has(artifact)) {
+        stopDrainOmittedArtifacts.add(artifact);
       }
+    }
 
-      recordingActive = false;
-      stopPendingEventFlush();
-      pendingEvents = [];
-      disconnectContentPort();
+    drainPrepared = true;
+
+    if (!isCurrentActivation(activation, "draining") || Date.now() > context.deadline) {
+      return;
     }
 
-    return;
-  }
+    if (!contentPort || !contentPortBound) {
+      schedulePortReconnect();
+      return;
+    }
 
-  if (message.kind === "sw.freeze") {
-    captureAgent?.setIndicatorState(message.sid, "freeze");
+    await finishDrain(activation);
   }
-}
 
-async function ensureCaptureAgent(): Promise<LiteCaptureAgent> {
-  if (captureAgent) {
-    return captureAgent;
+  async function runBestEffortContentDrainStep(
+    stage: string,
+    step: () => void | Promise<void>
+  ): Promise<boolean> {
+    try {
+      await step();
+      return true;
+    } catch (error) {
+      debugPortSendFailure(`content.drain.${stage}`, error);
+      return false;
+    }
   }
 
-  if (captureAgentPromise) {
-    return captureAgentPromise;
+  function resolveExpectedContentStopArtifacts(
+    activation: ContentActivation
+  ): ContentStopDrainArtifact[] {
+    if (activation.mode !== "lite") {
+      return [];
+    }
+
+    const expected: ContentStopDrainArtifact[] = ["main-world-tail"];
+    if (window.top !== window) {
+      return expected;
+    }
+    if (activation.capturePolicy.categories.dom !== "off") {
+      expected.push("snapshot");
+    }
+    if (activation.capturePolicy.categories.storage !== "off") {
+      expected.push("localStorageSnapshot");
+    }
+    if (
+      (activation.sampling?.screenshotIdleMs ?? 0) > 0 &&
+      activation.capturePolicy.categories.screenshots === "allow"
+    ) {
+      expected.push("screenshot");
+    }
+    return expected;
   }
 
-  const moduleUrl = chromeApi?.runtime?.getURL?.("content-agent.js") ?? "./content-agent.js";
+  async function finishDrain(activation: ContentActivation): Promise<void> {
+    const context = stopDrainContext;
+
+    if (
+      drainFinishing ||
+      !drainPrepared ||
+      !context ||
+      !isCurrentActivation(activation, "draining") ||
+      !contentPortBound ||
+      Date.now() > context.deadline
+    ) {
+      return;
+    }
 
-  captureAgentPromise = import(moduleUrl)
-    .then((module) => {
-      const { createContentCaptureAgent } = module as ContentAgentModule;
-      const options: LiteCaptureAgentOptions = {
-        emitBatch,
-        onMarker: emitMarker,
-        showIndicator: true
-      };
-      const agent = createContentCaptureAgent(options);
-      captureAgent = agent;
-      return agent;
-    })
-    .finally(() => {
-      captureAgentPromise = null;
-    });
+    drainFinishing = true;
 
-  return captureAgentPromise;
-}
+    try {
+      await flushAllPendingEvents();
 
-async function emitKeyboardMarker(): Promise<void> {
-  const statusVersion = recordingStatusVersion;
-  const agent = await ensureCaptureAgent();
+      if (pendingEventBatch || pendingEvents.length > 0) {
+        return;
+      }
 
-  if (statusVersion !== recordingStatusVersion || !recordingActive) {
-    return;
+      if (
+        !isCurrentActivation(activation, "draining") ||
+        !contentPort ||
+        !contentPortBound ||
+        Date.now() > context.deadline
+      ) {
+        if (!contentPort && Date.now() <= context.deadline) {
+          schedulePortReconnect();
+        }
+        return;
+      }
+
+      const acknowledgement = buildContentStopDrainedMessage(context, {
+        expectedArtifacts: [...stopDrainExpectedArtifacts],
+        emittedArtifacts: [...stopDrainEmittedArtifacts],
+        omittedArtifacts: [...stopDrainOmittedArtifacts],
+        degradationReasons: [...stopDrainDegradationReasons]
+      });
+      if (acknowledgement) {
+        contentPort.postMessage(acknowledgement);
+        scheduleStopDrainAckRetry(activation);
+      }
+    } catch (error) {
+      debugPortSendFailure("content.stop-drained", error);
+      disconnectContentPort();
+      schedulePortReconnect();
+    } finally {
+      drainFinishing = false;
+    }
   }
 
-  agent.emitMarker(t("contentKeyboardMarker"));
-}
+  function deactivateCurrentActivation(
+    reason: string,
+    preserveHint: boolean,
+    preserveEventQueue = false
+  ): void {
+    const activation = currentActivation;
+
+    if (activation && preserveHint) {
+      lastActivationHint = activation.activationId;
+      lastMainWorldController = activation.mainWorldController;
+    }
+
+    if (activation && preserveEventQueue) {
+      try {
+        captureAgent?.flush();
+      } catch (error) {
+        debugPortSendFailure("content.recovery.flush", error);
+      }
+      retainRecoverableEventQueue(activation);
+    } else if (!preserveEventQueue) {
+      recoverableEventQueue = null;
+    }
 
-async function requestRecordingStatusOnce(): Promise<void> {
-  if (!chromeApi?.runtime?.sendMessage) {
-    return;
+    currentActivation = null;
+    stopDrainContext = null;
+    stopIntentQuiescence = null;
+    stopDrainExpectedArtifacts.clear();
+    stopDrainEmittedArtifacts.clear();
+    stopDrainOmittedArtifacts.clear();
+    stopDrainDegradationReasons.clear();
+    drainFinishing = false;
+    drainPrepared = false;
+    stopDrainAckRetry();
+    stopDrainDeadlineTimer();
+    stopEventBatchAckTimer();
+    stopArmedRetry();
+    stopBindAckTimer();
+    stopPortReconnect();
+    stopPendingEventFlush();
+    pendingEvents = [];
+    pendingEventBatch = null;
+
+    if (activation) {
+      if (activation.mode === "lite" && activation.mainWorldController?.phase === "active") {
+        void requestMainWorldControl(activation, "deactivate", preserveHint);
+      }
+      captureAgent?.setRecordingStatus(toInactiveAgentState(activation));
+    }
+
+    disconnectContentPort();
+
+    if (!preserveHint) {
+      lastActivationHint = undefined;
+      lastMainWorldController = null;
+    }
+
+    debugActivationTransition(reason);
   }
 
-  try {
-    const response = await chromeApi.runtime.sendMessage({
-      kind: "content.ready"
+  function retainRecoverableEventQueue(activation: ContentActivation): void {
+    const captured = captureRecoverableContentEventQueue({
+      identity: activation,
+      phase: activation.phase,
+      pendingBatch: pendingEventBatch,
+      pendingEvents
     });
+    if (captured) {
+      recoverableEventQueue = captured;
+    }
+  }
 
-    if (isRecordingStatusMessage(response)) {
-      await handleSwMessage(response);
+  function authorizeSameDocumentQueueTransition(
+    transition: ContentSameDocumentTransition | undefined,
+    documentUrl: string
+  ): ContentSameDocumentTransition | undefined {
+    if (
+      !transition ||
+      transition.documentUrl !== documentUrl ||
+      transition.previousDocumentUrl === transition.documentUrl
+    ) {
+      return undefined;
     }
-  } catch (error) {
-    debugPortSendFailure("content.ready", error);
+
+    const activation = currentActivation;
+    const currentMatches = Boolean(
+      activation &&
+      (activation.phase === "active-bound" || activation.phase === "active-unbound") &&
+      activation.activationId === transition.previousActivationId &&
+      activation.documentUrl === transition.previousDocumentUrl
+    );
+    const recoveredQueueMatches = Boolean(
+      recoverableEventQueue?.activationId === transition.previousActivationId &&
+      recoverableEventQueue.documentUrl === transition.previousDocumentUrl
+    );
+    const recoveredWithoutActivation = Boolean(
+      !activation && lastActivationHint === transition.previousActivationId && recoveredQueueMatches
+    );
+    const provisionalPredecessor = activation?.sameDocumentTransition;
+    const recoveredBehindProvisional = Boolean(
+      activation &&
+      (activation.phase === "prepared" || activation.phase === "armed") &&
+      recoveredQueueMatches &&
+      recoverableEventQueue?.sid === activation.sid &&
+      recoverableEventQueue.tabId === activation.tabId &&
+      recoverableEventQueue.mode === activation.mode &&
+      provisionalPredecessor?.previousActivationId === transition.previousActivationId &&
+      provisionalPredecessor.previousDocumentUrl === transition.previousDocumentUrl &&
+      provisionalPredecessor.documentUrl === activation.documentUrl &&
+      provisionalPredecessor.frameId === transition.frameId &&
+      provisionalPredecessor.documentId === transition.documentId &&
+      provisionalPredecessor.revision < transition.revision
+    );
+    const recoveredMatches = recoveredWithoutActivation || recoveredBehindProvisional;
+
+    if (!currentMatches && !recoveredMatches) {
+      return undefined;
+    }
+
+    return transition;
   }
-}
 
-function isRecordingStatusMessage(message: unknown): message is ExtensionOutboundMessage {
-  if (!message || typeof message !== "object" || Array.isArray(message)) {
-    return false;
+  function startDrainDeadlineTimer(activation: ContentActivation, deadline: number): void {
+    stopDrainDeadlineTimer();
+    const remaining = Math.max(0, deadline - Date.now());
+    drainDeadlineTimer = window.setTimeout(() => {
+      drainDeadlineTimer = 0;
+      if (isCurrentActivation(activation, "draining")) {
+        deactivateCurrentActivation("drain-deadline", true);
+      }
+    }, remaining);
   }
 
-  return (message as { kind?: unknown }).kind === "sw.recording-status";
-}
+  function scheduleStopDrainAckRetry(activation: ContentActivation): void {
+    stopDrainAckRetry();
+    stopDrainAckRetryTimer = window.setTimeout(() => {
+      stopDrainAckRetryTimer = 0;
+      if (isCurrentActivation(activation, "draining")) {
+        void finishDrain(activation);
+      }
+    }, STOP_DRAIN_ACK_RETRY_MS);
+  }
 
-function schedulePendingEventFlush(immediate = false): void {
-  if (!contentPort || !recordingActive || pendingEvents.length === 0) {
-    return;
+  function stopDrainAckRetry(): void {
+    if (stopDrainAckRetryTimer > 0) {
+      clearTimeout(stopDrainAckRetryTimer);
+      stopDrainAckRetryTimer = 0;
+    }
   }
 
-  const delayMs = resolveContentEventFlushDelay(pendingEvents.length, immediate);
+  function stopDrainDeadlineTimer(): void {
+    if (drainDeadlineTimer > 0) {
+      clearTimeout(drainDeadlineTimer);
+      drainDeadlineTimer = 0;
+    }
+  }
 
-  if (pendingEventFlushTimer > 0) {
-    if (delayMs >= pendingEventFlushDelayMs) {
-      return;
+  function deactivateForLocalUrlDrift(activation: ContentActivation): boolean {
+    if (readDocumentUrl() === activation.documentUrl) {
+      return false;
     }
 
-    clearTimeout(pendingEventFlushTimer);
-    pendingEventFlushTimer = 0;
+    if (currentActivation === activation) {
+      deactivateCurrentActivation("document-url-drift", true);
+      void requestFreshActivation("recovery");
+    }
+    return true;
   }
 
-  pendingEventFlushDelayMs = delayMs;
+  function isCurrentActivation(
+    activation: ContentActivation,
+    phase: ContentActivationPhase
+  ): boolean {
+    return (
+      bootstrapLease.isActive() &&
+      currentActivation === activation &&
+      activation.epoch === activationEpoch &&
+      activation.phase === phase
+    );
+  }
 
-  pendingEventFlushTimer = window.setTimeout(() => {
-    pendingEventFlushTimer = 0;
-    pendingEventFlushDelayMs = Number.POSITIVE_INFINITY;
-    flushPendingEvents();
-  }, delayMs);
-}
+  async function ensureCaptureAgent(): Promise<LiteCaptureAgent> {
+    if (captureAgent) {
+      return captureAgent;
+    }
+
+    if (captureAgentPromise) {
+      return captureAgentPromise;
+    }
+
+    const moduleUrl = chromeApi?.runtime?.getURL?.("content-agent.js") ?? "./content-agent.js";
+    const requestLifecycleVersion = lifecycleVersion;
+    const promise = import(moduleUrl).then((module) => {
+      const { createContentCaptureAgent } = module as ContentAgentModule;
+      const options: LiteCaptureAgentOptions = {
+        emitBatch,
+        onMarker: emitMarker,
+        showIndicator: true
+      };
+      const agent = createContentCaptureAgent(options);
 
-function stopPendingEventFlush(): void {
-  if (pendingEventFlushTimer > 0) {
-    clearTimeout(pendingEventFlushTimer);
-    pendingEventFlushTimer = 0;
+      if (!bootstrapLease.isActive() || requestLifecycleVersion !== lifecycleVersion) {
+        agent.dispose();
+        return agent;
+      }
+
+      captureAgent = agent;
+      return agent;
+    });
+    captureAgentPromise = promise;
+    void promise.then(
+      () => {
+        if (captureAgentPromise === promise) {
+          captureAgentPromise = null;
+        }
+      },
+      () => {
+        if (captureAgentPromise === promise) {
+          captureAgentPromise = null;
+        }
+      }
+    );
+    return promise;
   }
 
-  pendingEventFlushDelayMs = Number.POSITIVE_INFINITY;
-}
+  function toActiveAgentState(activation: ContentActivation): LiteCaptureState {
+    return {
+      active: true,
+      activationId: activation.activationId,
+      sid: activation.sid,
+      tabId: activation.tabId,
+      mode: activation.mode,
+      sampling: activation.sampling,
+      capturePolicy: activation.capturePolicy
+    };
+  }
 
-function debugPortSendFailure(kind: string, error: unknown): void {
-  const flags = globalThis as unknown as Record<string, unknown>;
-  const enabled = flags[PORT_DEBUG_LOG_FLAG] === true || flags.__WEBBLACKBOX_PERF__ === true;
+  function toInactiveAgentState(activation: ContentActivation): LiteCaptureState {
+    return {
+      active: false,
+      activationId: activation.activationId,
+      sid: activation.sid,
+      tabId: activation.tabId,
+      mode: activation.mode,
+      sampling: activation.sampling,
+      capturePolicy: activation.capturePolicy
+    };
+  }
 
-  if (!enabled) {
-    return;
+  async function requestMainWorldControl(
+    activation: ContentActivation,
+    operation: "activate" | "deactivate" | "drain",
+    rememberController = true
+  ): Promise<ReturnType<typeof parseContentMainWorldControlResult>> {
+    const controller = activation.mainWorldController;
+    if (!controller || !chromeApi?.runtime?.sendMessage) {
+      return null;
+    }
+
+    try {
+      const rawResponse = await chromeApi.runtime.sendMessage({
+        kind: "content.main-world-control",
+        activationId: activation.activationId,
+        documentUrl: activation.documentUrl,
+        operation
+      });
+      const response = parseContentMainWorldControlResult(rawResponse);
+      if (
+        !response ||
+        response.activationId !== activation.activationId ||
+        response.operation !== operation ||
+        !sameMainWorldControllerCapability(controller, response.controller)
+      ) {
+        return null;
+      }
+      activation.mainWorldController = response.controller;
+      if (
+        rememberController &&
+        (!lastMainWorldController ||
+          sameMainWorldControllerCapability(lastMainWorldController, response.controller))
+      ) {
+        lastMainWorldController = response.controller;
+      }
+      return response;
+    } catch (error) {
+      debugPortSendFailure(`injected.direct.${operation}`, error);
+      return null;
+    }
   }
 
-  console.debug("[WebBlackbox][port] content postMessage failed", {
-    kind,
-    error: error instanceof Error ? error.message : String(error)
-  });
-}
+  async function drainInjectedCaptureBridge(activation: ContentActivation): Promise<boolean> {
+    if (activation.mode !== "lite") {
+      return true;
+    }
 
-function isMarkerCommand(message: unknown): boolean {
-  if (message === null || typeof message !== "object" || Array.isArray(message)) {
-    return false;
+    const response = await requestMainWorldControl(activation, "drain");
+    if (!response || response.result.kind !== "drained") {
+      return false;
+    }
+    return captureAgent?.mergeInjectedDirectReplay(response.result).confirmed === true;
   }
 
-  return (message as { kind?: unknown }).kind === "sw.marker-command";
-}
+  function readDocumentUrl(): string | null {
+    try {
+      const url = window.location.href;
+      return typeof url === "string" && url.length > 0 ? url : null;
+    } catch {
+      return null;
+    }
+  }
 
-function syncInjectedCaptureConfig(
-  message: Extract<ExtensionOutboundMessage, { kind: "sw.recording-status" }>
-): void {
-  const bodyCaptureMaxBytes =
-    message.active &&
-    message.mode === "lite" &&
-    message.capturePolicy?.categories.network === "body-allowlist"
-      ? normalizeBodyCaptureBudget(message.sampling?.bodyCaptureMaxBytes)
-      : 0;
-
-  window.dispatchEvent(
-    new CustomEvent(INJECTED_CAPTURE_CONFIG_EVENT, {
-      detail: {
-        active: message.active && message.mode === "lite",
-        bodyCaptureMaxBytes,
-        capturePolicy: message.capturePolicy
-      }
-    })
-  );
-}
+  function debugPortSendFailure(kind: string, error: unknown): void {
+    const flags = globalThis as unknown as Record<string, unknown>;
+    const enabled = flags[PORT_DEBUG_LOG_FLAG] === true || flags.__WEBBLACKBOX_PERF__ === true;
 
-function normalizeBodyCaptureBudget(value: unknown): number {
-  if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
-    return 0;
+    if (enabled) {
+      console.debug("[WebBlackbox][port] content operation failed", {
+        kind,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
   }
 
-  return Math.max(4 * 1024, Math.min(8 * 1024 * 1024, Math.round(value)));
+  function debugActivationTransition(reason: string): void {
+    const flags = globalThis as unknown as Record<string, unknown>;
+    if (flags[PORT_DEBUG_LOG_FLAG] === true) {
+      console.debug("[WebBlackbox][activation] content deactivated", { reason });
+    }
+  }
 }
diff --git a/apps/extension/src/content/outbound-messages.test.ts b/apps/extension/src/content/outbound-messages.test.ts
new file mode 100644
index 0000000..eccf53b
--- /dev/null
+++ b/apps/extension/src/content/outbound-messages.test.ts
@@ -0,0 +1,353 @@
+import { describe, expect, it } from "vitest";
+
+import { capturePolicySchema, DEFAULT_CAPTURE_POLICY } from "@webblackbox/protocol";
+
+import {
+  isContentMarkerCommand,
+  parseContentControlMessage,
+  parseContentMainWorldControlResult
+} from "./outbound-messages.js";
+
+const READY_ID = `r1_${"a".repeat(64)}`;
+const ACTIVATION_ID = `a1_${"b".repeat(64)}`;
+const MAIN_WORLD_CONTROLLER = {
+  secret: "e".repeat(64),
+  moduleNonce: `m1_${"f".repeat(64)}`,
+  revision: 0,
+  phase: "inactive",
+  activationId: null
+};
+
+function contentPrepareMessage(capturePolicy: unknown): Record<string, unknown> {
+  return {
+    kind: "sw.content-prepare",
+    readyId: READY_ID,
+    activationId: ACTIVATION_ID,
+    sid: "S-content",
+    tabId: 7,
+    mode: "lite",
+    sampling: {
+      mousemoveHz: 20,
+      scrollHz: 15,
+      domFlushMs: 100,
+      snapshotIntervalMs: 20_000,
+      screenshotIdleMs: 0,
+      bodyCaptureMaxBytes: 64_000
+    },
+    capturePolicy,
+    mainWorldController: MAIN_WORLD_CONTROLLER
+  };
+}
+
+describe("content outbound control parser", () => {
+  it("accepts exact activation controls", () => {
+    expect(parseContentControlMessage({ kind: "sw.request-content-ready" })).not.toBeNull();
+    expect(
+      parseContentControlMessage({
+        kind: "sw.request-content-ready",
+        sameDocumentTransition: {
+          previousActivationId: ACTIVATION_ID,
+          frameId: 0,
+          documentId: "document-1",
+          previousDocumentUrl: "https://app.example/old",
+          documentUrl: "https://app.example/new",
+          revision: 2
+        }
+      })
+    ).toEqual({
+      kind: "sw.request-content-ready",
+      sameDocumentTransition: {
+        previousActivationId: ACTIVATION_ID,
+        frameId: 0,
+        documentId: "document-1",
+        previousDocumentUrl: "https://app.example/old",
+        documentUrl: "https://app.example/new",
+        revision: 2
+      }
+    });
+    expect(
+      parseContentControlMessage(contentPrepareMessage(DEFAULT_CAPTURE_POLICY))
+    ).not.toBeNull();
+    expect(
+      parseContentControlMessage({ kind: "sw.content-reset", reason: "restore-failed" })
+    ).not.toBeNull();
+    expect(
+      parseContentControlMessage({ kind: "sw.content-quiesce", activationId: ACTIVATION_ID })
+    ).not.toBeNull();
+    expect(
+      parseContentControlMessage({
+        kind: "sw.content-events-ack",
+        activationId: ACTIVATION_ID,
+        batchId: `b1_${"d".repeat(64)}`
+      })
+    ).not.toBeNull();
+    expect(
+      parseContentControlMessage({
+        kind: "sw.content-drain",
+        activationId: ACTIVATION_ID,
+        sid: "S-content",
+        token: "c".repeat(64),
+        deadline: Date.now() + 1_000,
+        documentUrl: "https://app.example/path"
+      })
+    ).not.toBeNull();
+    expect(isContentMarkerCommand({ kind: "sw.marker-command" })).toBe(true);
+    expect(
+      parseContentMainWorldControlResult({
+        kind: "sw.main-world-control-result",
+        activationId: ACTIVATION_ID,
+        operation: "activate",
+        controller: {
+          ...MAIN_WORLD_CONTROLLER,
+          revision: 1,
+          phase: "active",
+          activationId: ACTIVATION_ID
+        },
+        result: { kind: "activated", activationId: ACTIVATION_ID, revision: 1 }
+      })
+    ).not.toBeNull();
+  });
+
+  it("keeps lightweight capture-policy parsing aligned with the protocol schema", () => {
+    const completeValidPolicy = {
+      ...DEFAULT_CAPTURE_POLICY,
+      mode: "lab",
+      captureContext: "synthetic",
+      captureContextEvidenceRef: "fixture:synthetic-user",
+      consent: {
+        ...DEFAULT_CAPTURE_POLICY.consent,
+        provenance: "support-assisted",
+        purpose: "incident-response",
+        grantedBy: "support-agent",
+        grantedAt: "2028-02-29T23:59Z",
+        expiresAt: "2030-01-01T00:00:00.000Z",
+        revocationRef: "consent:revocation"
+      },
+      unmaskPolicySource: "enterprise",
+      categories: {
+        actions: "allow",
+        inputs: "masked",
+        dom: "wireframe",
+        screenshots: "masked",
+        screenRecordings: "allow",
+        console: "sanitized",
+        network: "headers-allowlist",
+        storage: "names-only",
+        indexedDb: "names-only",
+        cookies: "names-only",
+        cdp: "safe-subset",
+        heapProfiles: "lab-only"
+      },
+      encryption: {
+        localAtRest: "required",
+        archive: "explicit-low-risk-override",
+        archiveKeyEnvelope: "enterprise-managed",
+        overrideReasonRef: "fixture:override"
+      },
+      retention: {
+        localTtlMs: 60_000,
+        shareTtlMs: 30_000
+      }
+    };
+    expect(capturePolicySchema.safeParse(completeValidPolicy).success).toBe(true);
+    expect(parseContentControlMessage(contentPrepareMessage(completeValidPolicy))).not.toBeNull();
+
+    const sparseHeaders = new Array<string>(1);
+    const invalidPolicies = [
+      { ...DEFAULT_CAPTURE_POLICY, unknown: true },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        consent: { ...DEFAULT_CAPTURE_POLICY.consent, purpose: "profiling" }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        consent: { ...DEFAULT_CAPTURE_POLICY.consent, grantedAt: "not-a-date" }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        consent: {
+          ...DEFAULT_CAPTURE_POLICY.consent,
+          grantedAt: "2023-02-29T00:00:00Z"
+        }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        consent: {
+          ...DEFAULT_CAPTURE_POLICY.consent,
+          grantedAt: "2024-04-31T00:00:00Z"
+        }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        consent: {
+          ...DEFAULT_CAPTURE_POLICY.consent,
+          grantedAt: "2024-01-01T24:00:00Z"
+        }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        scope: { ...DEFAULT_CAPTURE_POLICY.scope, tabId: -1 }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        categories: { ...DEFAULT_CAPTURE_POLICY.categories, network: "all" }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        categories: { ...DEFAULT_CAPTURE_POLICY.categories, unexpected: true }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        redaction: {
+          ...DEFAULT_CAPTURE_POLICY.redaction,
+          redactHeaders: ["authorization", 7]
+        }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        redaction: { ...DEFAULT_CAPTURE_POLICY.redaction, redactHeaders: sparseHeaders }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        encryption: { ...DEFAULT_CAPTURE_POLICY.encryption, overrideReasonRef: "" }
+      },
+      {
+        ...DEFAULT_CAPTURE_POLICY,
+        retention: { localTtlMs: 1.5 }
+      }
+    ];
+
+    for (const policy of invalidPolicies) {
+      expect(capturePolicySchema.safeParse(policy).success).toBe(false);
+      expect(parseContentControlMessage(contentPrepareMessage(policy))).toBeNull();
+    }
+  });
+
+  it("rejects nested policy accessors without invoking them", () => {
+    let getterCalls = 0;
+    const consent = { ...DEFAULT_CAPTURE_POLICY.consent };
+    Object.defineProperty(consent, "id", {
+      enumerable: true,
+      get: () => {
+        getterCalls += 1;
+        return "consent-id";
+      }
+    });
+
+    expect(
+      parseContentControlMessage(contentPrepareMessage({ ...DEFAULT_CAPTURE_POLICY, consent }))
+    ).toBeNull();
+    expect(getterCalls).toBe(0);
+
+    const everyGetterHeaders = ["authorization"];
+    Object.defineProperty(everyGetterHeaders, "every", {
+      enumerable: true,
+      get: () => {
+        getterCalls += 1;
+        return Array.prototype.every;
+      }
+    });
+    const nonFunctionEveryHeaders = ["authorization"];
+    Object.defineProperty(nonFunctionEveryHeaders, "every", {
+      enumerable: true,
+      value: 0
+    });
+    const spoofedEveryHeaders = [123];
+    Object.defineProperty(spoofedEveryHeaders, "every", {
+      enumerable: true,
+      value: () => true
+    });
+    const indexGetterHeaders: string[] = [];
+    Object.defineProperty(indexGetterHeaders, "0", {
+      enumerable: true,
+      get: () => {
+        getterCalls += 1;
+        return "authorization";
+      }
+    });
+    indexGetterHeaders.length = 1;
+
+    for (const redactHeaders of [
+      everyGetterHeaders,
+      nonFunctionEveryHeaders,
+      spoofedEveryHeaders,
+      indexGetterHeaders
+    ]) {
+      expect(
+        parseContentControlMessage(
+          contentPrepareMessage({
+            ...DEFAULT_CAPTURE_POLICY,
+            redaction: { ...DEFAULT_CAPTURE_POLICY.redaction, redactHeaders }
+          })
+        )
+      ).toBeNull();
+    }
+    expect(getterCalls).toBe(0);
+  });
+
+  it("detaches parsed capture-policy arrays from the control message", () => {
+    const allowedOrigins = ["https://app.example"];
+    const redactHeaders = ["authorization"];
+    const policy = {
+      ...DEFAULT_CAPTURE_POLICY,
+      scope: { ...DEFAULT_CAPTURE_POLICY.scope, allowedOrigins },
+      redaction: { ...DEFAULT_CAPTURE_POLICY.redaction, redactHeaders }
+    };
+    const parsed = parseContentControlMessage(contentPrepareMessage(policy));
+
+    expect(parsed?.kind).toBe("sw.content-prepare");
+    if (parsed?.kind !== "sw.content-prepare") {
+      throw new Error("expected a parsed prepare control");
+    }
+
+    allowedOrigins[0] = "https://mutated.example";
+    redactHeaders[0] = "x-mutated";
+    expect(parsed.capturePolicy.scope.allowedOrigins).toEqual(["https://app.example"]);
+    expect(parsed.capturePolicy.redaction.redactHeaders).toEqual(["authorization"]);
+  });
+
+  it("rejects malformed ids, extra fields, symbols, and accessors without invoking them", () => {
+    let getterCalls = 0;
+    const accessor = { kind: "sw.content-activated" };
+    Object.defineProperty(accessor, "activationId", {
+      enumerable: true,
+      get: () => {
+        getterCalls += 1;
+        return ACTIVATION_ID;
+      }
+    });
+    const symbolMessage = { kind: "sw.content-activated", activationId: ACTIVATION_ID };
+    Object.defineProperty(symbolMessage, Symbol("hidden"), { value: true });
+
+    expect(parseContentControlMessage(accessor)).toBeNull();
+    expect(getterCalls).toBe(0);
+    expect(parseContentControlMessage(symbolMessage)).toBeNull();
+    expect(
+      parseContentControlMessage({
+        kind: "sw.content-activated",
+        activationId: `a1_${"A".repeat(64)}`
+      })
+    ).toBeNull();
+    expect(
+      parseContentControlMessage({
+        kind: "sw.content-inactive",
+        readyId: READY_ID,
+        unexpected: true
+      })
+    ).toBeNull();
+    expect(isContentMarkerCommand({ kind: "sw.marker-command", extra: true })).toBe(false);
+    expect(
+      parseContentControlMessage({
+        kind: "sw.request-content-ready",
+        sameDocumentTransition: {
+          previousActivationId: ACTIVATION_ID,
+          frameId: 0,
+          documentId: "document-1",
+          previousDocumentUrl: "https://app.example/same",
+          documentUrl: "https://app.example/same",
+          revision: 1
+        }
+      })
+    ).toBeNull();
+  });
+});
diff --git a/apps/extension/src/content/outbound-messages.ts b/apps/extension/src/content/outbound-messages.ts
new file mode 100644
index 0000000..23724fc
--- /dev/null
+++ b/apps/extension/src/content/outbound-messages.ts
@@ -0,0 +1,774 @@
+import type { CapturePolicy } from "@webblackbox/protocol";
+
+import {
+  parseContentActivationId,
+  parseContentEventBatchId,
+  parseContentReadyId,
+  parseExactPlainOwnDataRecord,
+  type ContentActivationId
+} from "../shared/content-activation-protocol.js";
+import type {
+  ContentActivatedMessage,
+  ContentBoundMessage,
+  ContentDrainMessage,
+  ContentEventBatchAckMessage,
+  ContentInactiveMessage,
+  ContentMainWorldControlResultMessage,
+  ContentPrepareMessage,
+  ContentQuiesceMessage,
+  ContentResetMessage,
+  ContentRevokedMessage,
+  ContentSameDocumentTransition,
+  ContentUrlChangedMessage,
+  FreezeNoticeMessage,
+  RequestContentReadyMessage
+} from "../shared/messages.js";
+import {
+  parseInjectedDirectControlResult,
+  parseMainWorldControllerHint
+} from "../shared/main-world-controller.js";
+import { isStopDrainToken } from "../shared/stop-drain-token.js";
+
+export type ContentControlMessage =
+  | RequestContentReadyMessage
+  | ContentPrepareMessage
+  | ContentInactiveMessage
+  | ContentActivatedMessage
+  | ContentBoundMessage
+  | ContentEventBatchAckMessage
+  | ContentUrlChangedMessage
+  | ContentQuiesceMessage
+  | ContentDrainMessage
+  | ContentRevokedMessage
+  | ContentResetMessage
+  | FreezeNoticeMessage;
+
+export function parseContentControlMessage(value: unknown): ContentControlMessage | null {
+  const envelope = parseExactPlainOwnDataRecordWithAnyKeys(value);
+  const kind = envelope?.kind;
+
+  if (typeof kind !== "string") {
+    return null;
+  }
+
+  switch (kind) {
+    case "sw.request-content-ready":
+      return parseRequestContentReady(value);
+    case "sw.content-prepare":
+      return parsePrepare(value);
+    case "sw.content-inactive":
+      return parseReadyScoped(value, "sw.content-inactive");
+    case "sw.content-activated":
+      return parseActivationScoped(value, "sw.content-activated");
+    case "sw.content-bound":
+      return parseActivationScoped(value, "sw.content-bound");
+    case "sw.content-events-ack":
+      return parseContentEventsAck(value);
+    case "sw.content-url":
+      return parseContentUrl(value);
+    case "sw.content-quiesce":
+      return parseActivationScoped(value, "sw.content-quiesce");
+    case "sw.content-drain":
+      return parseDrain(value);
+    case "sw.content-revoked":
+      return parseRevoked(value);
+    case "sw.content-reset":
+      return parseReset(value);
+    case "sw.freeze":
+      return parseFreeze(value);
+    default:
+      return null;
+  }
+}
+
+function parseRequestContentReady(value: unknown): RequestContentReadyMessage | null {
+  const kindOnly = parseExactPlainOwnDataRecord(value, ["kind"]);
+  if (kindOnly?.kind === "sw.request-content-ready") {
+    return { kind: "sw.request-content-ready" };
+  }
+
+  const record = parseExactPlainOwnDataRecord(value, ["kind", "sameDocumentTransition"]);
+
+  if (record?.kind !== "sw.request-content-ready") {
+    return null;
+  }
+
+  const sameDocumentTransition = parseSameDocumentTransition(record.sameDocumentTransition);
+  return sameDocumentTransition
+    ? { kind: "sw.request-content-ready", sameDocumentTransition }
+    : null;
+}
+
+function parseSameDocumentTransition(value: unknown): ContentSameDocumentTransition | null {
+  const record = parseExactPlainOwnDataRecord(value, [
+    "previousActivationId",
+    "frameId",
+    "documentId",
+    "previousDocumentUrl",
+    "documentUrl",
+    "revision"
+  ]);
+  const previousActivationId = parseContentActivationId(record?.previousActivationId);
+
+  return record &&
+    previousActivationId &&
+    Number.isSafeInteger(record.frameId) &&
+    (record.frameId as number) >= 0 &&
+    isNonEmptyString(record.documentId) &&
+    isAbsoluteUrl(record?.previousDocumentUrl) &&
+    isAbsoluteUrl(record.documentUrl) &&
+    record.previousDocumentUrl !== record.documentUrl &&
+    Number.isSafeInteger(record.revision) &&
+    (record.revision as number) > 0
+    ? {
+        previousActivationId,
+        frameId: record.frameId as number,
+        documentId: record.documentId,
+        previousDocumentUrl: record.previousDocumentUrl,
+        documentUrl: record.documentUrl,
+        revision: record.revision as number
+      }
+    : null;
+}
+
+export function isContentMarkerCommand(value: unknown): boolean {
+  const record = parseExactPlainOwnDataRecord(value, ["kind"]);
+  return record?.kind === "sw.marker-command";
+}
+
+export function parseInjectedBridgeArmedMessage(value: unknown): ContentActivationId | null {
+  const record = parseExactPlainOwnDataRecord(value, ["source", "kind", "activationId"]);
+  const activationId = parseContentActivationId(record?.activationId);
+
+  return record?.source === "webblackbox-injected" &&
+    record.kind === "injected-armed" &&
+    activationId
+    ? activationId
+    : null;
+}
+
+function parsePrepare(value: unknown): ContentPrepareMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, [
+    "kind",
+    "readyId",
+    "activationId",
+    "sid",
+    "tabId",
+    "mode",
+    "sampling",
+    "capturePolicy",
+    "mainWorldController"
+  ]);
+  const readyId = parseContentReadyId(record?.readyId);
+  const activationId = parseContentActivationId(record?.activationId);
+  const sampling = parseSampling(record?.sampling);
+  const capturePolicy = parseCapturePolicy(record?.capturePolicy);
+  const mainWorldController =
+    record?.mainWorldController === null
+      ? null
+      : (parseMainWorldControllerHint(record?.mainWorldController) ?? undefined);
+
+  if (
+    record?.kind !== "sw.content-prepare" ||
+    !readyId ||
+    !activationId ||
+    !isNonEmptyString(record.sid) ||
+    !Number.isSafeInteger(record.tabId) ||
+    (record.tabId as number) < 0 ||
+    (record.mode !== "lite" && record.mode !== "full") ||
+    mainWorldController === undefined ||
+    (record.mode === "lite" ? mainWorldController === null : mainWorldController !== null) ||
+    !sampling ||
+    !capturePolicy
+  ) {
+    return null;
+  }
+
+  return {
+    kind: "sw.content-prepare",
+    readyId,
+    activationId,
+    sid: record.sid,
+    tabId: record.tabId as number,
+    mode: record.mode,
+    sampling,
+    capturePolicy,
+    mainWorldController
+  };
+}
+
+export function parseContentMainWorldControlResult(
+  value: unknown
+): ContentMainWorldControlResultMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, [
+    "kind",
+    "activationId",
+    "operation",
+    "controller",
+    "result"
+  ]);
+  const activationId = parseContentActivationId(record?.activationId);
+  const controller = parseMainWorldControllerHint(record?.controller);
+  const result = parseInjectedDirectControlResult(record?.result);
+  return record?.kind === "sw.main-world-control-result" &&
+    activationId &&
+    (record.operation === "activate" ||
+      record.operation === "deactivate" ||
+      record.operation === "drain") &&
+    controller &&
+    result
+    ? {
+        kind: "sw.main-world-control-result",
+        activationId,
+        operation: record.operation,
+        controller,
+        result
+      }
+    : null;
+}
+
+function parseReadyScoped(
+  value: unknown,
+  kind: ContentInactiveMessage["kind"]
+): ContentInactiveMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, ["kind", "readyId"]);
+  const readyId = parseContentReadyId(record?.readyId);
+  return record?.kind === kind && readyId ? { kind, readyId } : null;
+}
+
+function parseActivationScoped<
+  Message extends ContentActivatedMessage | ContentBoundMessage | ContentQuiesceMessage,
+  Kind extends Message["kind"]
+>(value: unknown, kind: Kind): Message | null {
+  const record = parseExactPlainOwnDataRecord(value, ["kind", "activationId"]);
+  const activationId = parseContentActivationId(record?.activationId);
+  return record?.kind === kind && activationId ? ({ kind, activationId } as Message) : null;
+}
+
+function parseDrain(value: unknown): ContentDrainMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, [
+    "kind",
+    "activationId",
+    "sid",
+    "token",
+    "deadline",
+    "documentUrl"
+  ]);
+  const activationId = parseContentActivationId(record?.activationId);
+
+  if (
+    record?.kind !== "sw.content-drain" ||
+    !activationId ||
+    !isNonEmptyString(record.sid) ||
+    !isStopDrainToken(record.token) ||
+    typeof record.deadline !== "number" ||
+    !Number.isFinite(record.deadline) ||
+    !isAbsoluteUrl(record.documentUrl)
+  ) {
+    return null;
+  }
+
+  return {
+    kind: "sw.content-drain",
+    activationId,
+    sid: record.sid,
+    token: record.token,
+    deadline: record.deadline,
+    documentUrl: record.documentUrl
+  };
+}
+
+function parseContentEventsAck(value: unknown): ContentEventBatchAckMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, ["kind", "activationId", "batchId"]);
+  const activationId = parseContentActivationId(record?.activationId);
+  const batchId = parseContentEventBatchId(record?.batchId);
+
+  return record?.kind === "sw.content-events-ack" && activationId && batchId
+    ? { kind: "sw.content-events-ack", activationId, batchId }
+    : null;
+}
+
+function parseContentUrl(value: unknown): ContentUrlChangedMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, [
+    "kind",
+    "activationId",
+    "documentUrl",
+    "revision"
+  ]);
+  const activationId = parseContentActivationId(record?.activationId);
+
+  return record?.kind === "sw.content-url" &&
+    activationId &&
+    isAbsoluteUrl(record.documentUrl) &&
+    Number.isSafeInteger(record.revision) &&
+    (record.revision as number) >= 0
+    ? {
+        kind: "sw.content-url",
+        activationId,
+        documentUrl: record.documentUrl,
+        revision: record.revision as number
+      }
+    : null;
+}
+
+function parseRevoked(value: unknown): ContentRevokedMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, ["kind", "activationId", "reason"]);
+  const activationId = parseContentActivationId(record?.activationId);
+  return record?.kind === "sw.content-revoked" && activationId && isNonEmptyString(record.reason)
+    ? { kind: "sw.content-revoked", activationId, reason: record.reason }
+    : null;
+}
+
+function parseReset(value: unknown): ContentResetMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, ["kind", "reason"]);
+  return record?.kind === "sw.content-reset" && isNonEmptyString(record.reason)
+    ? { kind: "sw.content-reset", reason: record.reason }
+    : null;
+}
+
+function parseFreeze(value: unknown): FreezeNoticeMessage | null {
+  const record = parseExactPlainOwnDataRecord(value, ["kind", "sid", "reason"]);
+  return record?.kind === "sw.freeze" &&
+    isNonEmptyString(record.sid) &&
+    isNonEmptyString(record.reason)
+    ? (record as unknown as FreezeNoticeMessage)
+    : null;
+}
+
+function parseExactPlainOwnDataRecordWithAnyKeys(
+  value: unknown
+): Readonly<Record<string, unknown>> | null {
+  try {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+      return null;
+    }
+
+    const keys = Reflect.ownKeys(value);
+    if (keys.some((key) => typeof key !== "string")) {
+      return null;
+    }
+
+    return parseExactPlainOwnDataRecord(value, keys as string[]);
+  } catch {
+    return null;
+  }
+}
+
+function parseSampling(value: unknown): ContentPrepareMessage["sampling"] | null {
+  const record = parseExactPlainOwnDataRecord(value, [
+    "mousemoveHz",
+    "scrollHz",
+    "domFlushMs",
+    "snapshotIntervalMs",
+    "screenshotIdleMs",
+    "bodyCaptureMaxBytes"
+  ]);
+
+  if (
+    !record ||
+    Object.values(record).some(
+      (item) => typeof item !== "number" || !Number.isFinite(item) || item < 0
+    )
+  ) {
+    return null;
+  }
+
+  return {
+    mousemoveHz: record.mousemoveHz as number,
+    scrollHz: record.scrollHz as number,
+    domFlushMs: record.domFlushMs as number,
+    snapshotIntervalMs: record.snapshotIntervalMs as number,
+    screenshotIdleMs: record.screenshotIdleMs as number,
+    bodyCaptureMaxBytes: record.bodyCaptureMaxBytes as number
+  };
+}
+
+function parseCapturePolicy(value: unknown): CapturePolicy | null {
+  const record = parseAllowedRecord(
+    value,
+    [
+      "schemaVersion",
+      "mode",
+      "captureContext",
+      "consent",
+      "unmaskPolicySource",
+      "scope",
+      "categories",
+      "redaction",
+      "encryption",
+      "retention"
+    ],
+    ["captureContextEvidenceRef"]
+  );
+  const consent = parseCaptureConsent(record?.consent);
+  const scope = parseCaptureScope(record?.scope);
+  const categories = parseCaptureCategories(record?.categories);
+  const redaction = parseCaptureRedaction(record?.redaction);
+  const encryption = parseCaptureEncryption(record?.encryption);
+  const retention = parseCaptureRetention(record?.retention);
+  const evidenceRef = record?.captureContextEvidenceRef;
+
+  if (
+    record?.schemaVersion !== 2 ||
+    !isOneOf(record.mode, ["private", "debug", "lab"] as const) ||
+    !isOneOf(record.captureContext, ["real-user", "synthetic", "local-debug"] as const) ||
+    (evidenceRef !== undefined && !isNonEmptyString(evidenceRef)) ||
+    !consent ||
+    !isOneOf(record.unmaskPolicySource, [
+      "none",
+      "extension-managed",
+      "enterprise",
+      "signed-site-owner"
+    ] as const) ||
+    !scope ||
+    !categories ||
+    !redaction ||
+    !encryption ||
+    !retention
+  ) {
+    return null;
+  }
+
+  return {
+    schemaVersion: 2,
+    mode: record.mode,
+    captureContext: record.captureContext,
+    ...(evidenceRef === undefined ? {} : { captureContextEvidenceRef: evidenceRef }),
+    consent,
+    unmaskPolicySource: record.unmaskPolicySource,
+    scope,
+    categories,
+    redaction,
+    encryption,
+    retention
+  };
+}
+
+function parseCaptureConsent(value: unknown): CapturePolicy["consent"] | null {
+  const record = parseAllowedRecord(
+    value,
+    ["id", "provenance", "purpose", "grantedAt"],
+    ["grantedBy", "expiresAt", "revocationRef"]
+  );
+  if (
+    !isNonEmptyString(record?.id) ||
+    !isOneOf(record.provenance, [
+      "self-recording",
+      "support-assisted",
+      "enterprise-admin-policy"
+    ] as const) ||
+    !isOneOf(record.purpose, [
+      "debugging",
+      "support",
+      "qa",
+      "incident-response",
+      "other"
+    ] as const) ||
+    !isOptionalNonEmptyString(record.grantedBy) ||
+    !isIsoDateTime(record.grantedAt) ||
+    (record.expiresAt !== undefined && !isIsoDateTime(record.expiresAt)) ||
+    !isOptionalNonEmptyString(record.revocationRef)
+  ) {
+    return null;
+  }
+
+  return {
+    id: record.id,
+    provenance: record.provenance,
+    purpose: record.purpose,
+    ...(record.grantedBy === undefined ? {} : { grantedBy: record.grantedBy }),
+    grantedAt: record.grantedAt,
+    ...(record.expiresAt === undefined ? {} : { expiresAt: record.expiresAt }),
+    ...(record.revocationRef === undefined ? {} : { revocationRef: record.revocationRef })
+  };
+}
+
+function parseCaptureScope(value: unknown): CapturePolicy["scope"] | null {
+  const record = parseAllowedRecord(value, [
+    "tabId",
+    "origin",
+    "allowedOrigins",
+    "deniedOrigins",
+    "includeSubframes",
+    "stopOnOriginChange",
+    "excludedUrlPatterns"
+  ]);
+  const allowedOrigins = parseStringArray(record?.allowedOrigins);
+  const deniedOrigins = parseStringArray(record?.deniedOrigins);
+  const excludedUrlPatterns = parseStringArray(record?.excludedUrlPatterns);
+  if (
+    !record ||
+    !Number.isSafeInteger(record.tabId) ||
+    (record.tabId as number) < 0 ||
+    typeof record.origin !== "string" ||
+    !allowedOrigins ||
+    !deniedOrigins ||
+    typeof record.includeSubframes !== "boolean" ||
+    typeof record.stopOnOriginChange !== "boolean" ||
+    !excludedUrlPatterns
+  ) {
+    return null;
+  }
+
+  return {
+    tabId: record.tabId as number,
+    origin: record.origin,
+    allowedOrigins,
+    deniedOrigins,
+    includeSubframes: record.includeSubframes,
+    stopOnOriginChange: record.stopOnOriginChange,
+    excludedUrlPatterns
+  };
+}
+
+function parseCaptureCategories(value: unknown): CapturePolicy["categories"] | null {
+  const record = parseAllowedRecord(value, [
+    "actions",
+    "inputs",
+    "dom",
+    "screenshots",
+    "screenRecordings",
+    "console",
+    "network",
+    "storage",
+    "indexedDb",
+    "cookies",
+    "cdp",
+    "heapProfiles"
+  ]);
+  if (
+    !isOneOf(record?.actions, ["metadata", "masked", "allow"] as const) ||
+    !isOneOf(record.inputs, ["none", "length-only", "masked", "allow"] as const) ||
+    !isOneOf(record.dom, ["off", "wireframe", "masked", "allow"] as const) ||
+    !isOneOf(record.screenshots, ["off", "masked", "allow"] as const) ||
+    !isOneOf(record.screenRecordings, ["off", "allow"] as const) ||
+    !isOneOf(record.console, ["off", "metadata", "sanitized", "allow"] as const) ||
+    !isOneOf(record.network, ["metadata", "headers-allowlist", "body-allowlist"] as const) ||
+    !isOneOf(record.storage, [
+      "off",
+      "counts-only",
+      "names-only",
+      "lengths-only",
+      "allow"
+    ] as const) ||
+    !isOneOf(record.indexedDb, ["off", "counts-only", "names-only"] as const) ||
+    !isOneOf(record.cookies, ["off", "count-only", "names-only"] as const) ||
+    !isOneOf(record.cdp, ["off", "safe-subset", "full"] as const) ||
+    !isOneOf(record.heapProfiles, ["off", "lab-only"] as const)
+  ) {
+    return null;
+  }
+
+  return {
+    actions: record.actions,
+    inputs: record.inputs,
+    dom: record.dom,
+    screenshots: record.screenshots,
+    screenRecordings: record.screenRecordings,
+    console: record.console,
+    network: record.network,
+    storage: record.storage,
+    indexedDb: record.indexedDb,
+    cookies: record.cookies,
+    cdp: record.cdp,
+    heapProfiles: record.heapProfiles
+  };
+}
+
+function parseCaptureRedaction(value: unknown): CapturePolicy["redaction"] | null {
+  const record = parseAllowedRecord(value, [
+    "redactHeaders",
+    "redactCookieNames",
+    "redactBodyPatterns",
+    "blockedSelectors",
+    "hashSensitiveValues"
+  ]);
+  const redactHeaders = parseStringArray(record?.redactHeaders);
+  const redactCookieNames = parseStringArray(record?.redactCookieNames);
+  const redactBodyPatterns = parseStringArray(record?.redactBodyPatterns);
+  const blockedSelectors = parseStringArray(record?.blockedSelectors);
+  if (
+    !record ||
+    !redactHeaders ||
+    !redactCookieNames ||
+    !redactBodyPatterns ||
+    !blockedSelectors ||
+    typeof record.hashSensitiveValues !== "boolean"
+  ) {
+    return null;
+  }
+
+  return {
+    redactHeaders,
+    redactCookieNames,
+    redactBodyPatterns,
+    blockedSelectors,
+    hashSensitiveValues: record.hashSensitiveValues
+  };
+}
+
+function parseCaptureEncryption(value: unknown): CapturePolicy["encryption"] | null {
+  const record = parseAllowedRecord(
+    value,
+    ["localAtRest", "archive", "archiveKeyEnvelope"],
+    ["overrideReasonRef"]
+  );
+  if (
+    record?.localAtRest !== "required" ||
+    !isOneOf(record.archive, [
+      "required",
+      "synthetic-local-debug-exempt",
+      "explicit-low-risk-override"
+    ] as const) ||
+    !isOneOf(record.archiveKeyEnvelope, [
+      "passphrase",
+      "enterprise-managed",
+      "client-side-share-fragment",
+      "none"
+    ] as const) ||
+    !isOptionalNonEmptyString(record.overrideReasonRef)
+  ) {
+    return null;
+  }
+
+  return {
+    localAtRest: "required",
+    archive: record.archive,
+    archiveKeyEnvelope: record.archiveKeyEnvelope,
+    ...(record.overrideReasonRef === undefined
+      ? {}
+      : { overrideReasonRef: record.overrideReasonRef })
+  };
+}
+
+function parseCaptureRetention(value: unknown): CapturePolicy["retention"] | null {
+  const record = parseAllowedRecord(value, ["localTtlMs"], ["shareTtlMs"]);
+  if (
+    !isPositiveInteger(record?.localTtlMs) ||
+    (record.shareTtlMs !== undefined && !isPositiveInteger(record.shareTtlMs))
+  ) {
+    return null;
+  }
+
+  return {
+    localTtlMs: record.localTtlMs,
+    ...(record.shareTtlMs === undefined ? {} : { shareTtlMs: record.shareTtlMs })
+  };
+}
+
+function parseAllowedRecord(
+  value: unknown,
+  requiredKeys: readonly string[],
+  optionalKeys: readonly string[] = []
+): Readonly<Record<string, unknown>> | null {
+  const record = parseExactPlainOwnDataRecordWithAnyKeys(value);
+  if (!record) {
+    return null;
+  }
+  const allowedKeys = new Set([...requiredKeys, ...optionalKeys]);
+  const actualKeys = Object.keys(record);
+  return requiredKeys.every((key) => Object.hasOwn(record, key)) &&
+    actualKeys.every((key) => allowedKeys.has(key))
+    ? record
+    : null;
+}
+
+function isOneOf<const Values extends readonly string[]>(
+  value: unknown,
+  values: Values
+): value is Values[number] {
+  return typeof value === "string" && values.includes(value as Values[number]);
+}
+
+function parseStringArray(value: unknown): string[] | null {
+  try {
+    if (!Array.isArray(value)) {
+      return null;
+    }
+
+    const lengthDescriptor = Object.getOwnPropertyDescriptor(value, "length");
+    if (
+      !lengthDescriptor ||
+      !("value" in lengthDescriptor) ||
+      !Number.isSafeInteger(lengthDescriptor.value) ||
+      lengthDescriptor.value < 0
+    ) {
+      return null;
+    }
+
+    const length = lengthDescriptor.value as number;
+    if (Reflect.ownKeys(value).length !== length + 1) {
+      return null;
+    }
+
+    const result = new Array<string>(length);
+    for (let index = 0; index < length; index += 1) {
+      const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+      if (!descriptor || !("value" in descriptor) || typeof descriptor.value !== "string") {
+        return null;
+      }
+      result[index] = descriptor.value;
+    }
+    return result;
+  } catch {
+    return null;
+  }
+}
+
+function isOptionalNonEmptyString(value: unknown): value is string | undefined {
+  return value === undefined || isNonEmptyString(value);
+}
+
+function isIsoDateTime(value: unknown): value is string {
+  if (typeof value !== "string") {
+    return false;
+  }
+
+  const match = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2})(?::(\d{2})(?:\.\d+)?)?Z$/u.exec(value);
+  if (!match) {
+    return false;
+  }
+
+  const year = Number(match[1]);
+  const month = Number(match[2]);
+  const day = Number(match[3]);
+  const hour = Number(match[4]);
+  const minute = Number(match[5]);
+  const second = match[6] === undefined ? 0 : Number(match[6]);
+  const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+  const daysInMonth = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+
+  return (
+    month >= 1 &&
+    month <= 12 &&
+    day >= 1 &&
+    day <= (daysInMonth[month - 1] ?? 0) &&
+    hour >= 0 &&
+    hour <= 23 &&
+    minute >= 0 &&
+    minute <= 59 &&
+    second >= 0 &&
+    second <= 59
+  );
+}
+
+function isPositiveInteger(value: unknown): value is number {
+  return Number.isSafeInteger(value) && (value as number) > 0;
+}
+
+function isNonEmptyString(value: unknown): value is string {
+  return typeof value === "string" && value.length > 0;
+}
+
+function isAbsoluteUrl(value: unknown): value is string {
+  if (!isNonEmptyString(value)) {
+    return false;
+  }
+
+  try {
+    new URL(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
diff --git a/apps/extension/src/content/page-lifecycle.test.ts b/apps/extension/src/content/page-lifecycle.test.ts
new file mode 100644
index 0000000..46aa4c1
--- /dev/null
+++ b/apps/extension/src/content/page-lifecycle.test.ts
@@ -0,0 +1,78 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { acquireContentBootstrapLease } from "./bootstrap-lease.js";
+import { bindContentPageLifecycle } from "./page-lifecycle.js";
+
+describe("content page lifecycle", () => {
+  it("ignores a canceled beforeunload and keeps the singleton active", () => {
+    const target = new EventTarget();
+    const documentWorld = {};
+    const owner = acquireContentBootstrapLease(documentWorld);
+    const dispose = vi.fn(() => owner?.dispose());
+    const unbind = bindContentPageLifecycle(target, {
+      dispose,
+      resume: vi.fn(),
+      suspend: vi.fn()
+    });
+
+    target.dispatchEvent(new Event("beforeunload", { cancelable: true }));
+
+    expect(dispose).not.toHaveBeenCalled();
+    expect(owner?.isActive()).toBe(true);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+    unbind();
+  });
+
+  it("suspends one owner for BFCache and resynchronizes it on persisted pageshow", () => {
+    const target = new EventTarget();
+    const documentWorld = {};
+    const owner = acquireContentBootstrapLease(documentWorld);
+    const resync = vi.fn();
+    const unbind = bindContentPageLifecycle(target, {
+      dispose: () => owner?.dispose(),
+      resume: () => {
+        if (owner?.resume()) {
+          resync();
+        }
+      },
+      suspend: () => owner?.suspend()
+    });
+
+    target.dispatchEvent(pageTransition("pagehide", true));
+
+    expect(owner?.isActive()).toBe(false);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+
+    target.dispatchEvent(pageTransition("pageshow", true));
+
+    expect(owner?.isActive()).toBe(true);
+    expect(resync).toHaveBeenCalledOnce();
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+    unbind();
+  });
+
+  it("disposes only on a non-persisted pagehide", () => {
+    const target = new EventTarget();
+    const documentWorld = {};
+    const owner = acquireContentBootstrapLease(documentWorld);
+    const unbind = bindContentPageLifecycle(target, {
+      dispose: () => owner?.dispose(),
+      resume: () => owner?.resume(),
+      suspend: () => owner?.suspend()
+    });
+
+    target.dispatchEvent(pageTransition("pagehide", false));
+    target.dispatchEvent(pageTransition("pageshow", true));
+
+    expect(owner?.isActive()).toBe(false);
+    expect(owner?.resume()).toBe(false);
+    expect(acquireContentBootstrapLease(documentWorld)).toBeNull();
+    unbind();
+  });
+});
+
+function pageTransition(type: "pagehide" | "pageshow", persisted: boolean): Event {
+  const event = new Event(type);
+  Object.defineProperty(event, "persisted", { value: persisted });
+  return event;
+}
diff --git a/apps/extension/src/content/page-lifecycle.ts b/apps/extension/src/content/page-lifecycle.ts
new file mode 100644
index 0000000..a72acff
--- /dev/null
+++ b/apps/extension/src/content/page-lifecycle.ts
@@ -0,0 +1,42 @@
+type ContentPageLifecycleTarget = {
+  addEventListener(type: string, listener: EventListener): void;
+  removeEventListener(type: string, listener: EventListener): void;
+};
+
+export type ContentPageLifecycleHooks = {
+  dispose(): void;
+  resume(): void;
+  suspend(): void;
+};
+
+/**
+ * Binds only definitive page lifecycle transitions. `beforeunload` is
+ * deliberately excluded because the navigation can still be canceled.
+ */
+export function bindContentPageLifecycle(
+  target: ContentPageLifecycleTarget,
+  hooks: ContentPageLifecycleHooks
+): () => void {
+  const onPageHide: EventListener = (event) => {
+    if ((event as PageTransitionEvent).persisted === true) {
+      hooks.suspend();
+      return;
+    }
+
+    hooks.dispose();
+  };
+
+  const onPageShow: EventListener = (event) => {
+    if ((event as PageTransitionEvent).persisted === true) {
+      hooks.resume();
+    }
+  };
+
+  target.addEventListener("pagehide", onPageHide);
+  target.addEventListener("pageshow", onPageShow);
+
+  return () => {
+    target.removeEventListener("pagehide", onPageHide);
+    target.removeEventListener("pageshow", onPageShow);
+  };
+}
diff --git a/apps/extension/src/content/stop-drain.test.ts b/apps/extension/src/content/stop-drain.test.ts
new file mode 100644
index 0000000..9ee30d5
--- /dev/null
+++ b/apps/extension/src/content/stop-drain.test.ts
@@ -0,0 +1,49 @@
+import { describe, expect, it } from "vitest";
+
+import type { ContentDrainMessage } from "../shared/messages.js";
+import {
+  buildContentStopDrainedMessage,
+  resolveContentStopDrainContext,
+  stopDrainEventFields
+} from "./stop-drain.js";
+
+const ACTIVATION_ID = `a1_${"b".repeat(64)}` as ContentDrainMessage["activationId"];
+const STATUS: ContentDrainMessage = {
+  kind: "sw.content-drain",
+  activationId: ACTIVATION_ID,
+  sid: "S-stop-drain",
+  token: "a".repeat(64),
+  deadline: 2_000,
+  documentUrl: "https://app.example.test/dashboard#bound"
+};
+
+describe("content stop-drain passthrough", () => {
+  it("freezes the capability URL into event batches and the acknowledgement", () => {
+    const context = resolveContentStopDrainContext(STATUS, 1_000);
+
+    expect(stopDrainEventFields(context, "https://app.example.test/changed")).toEqual({
+      documentUrl: "https://app.example.test/dashboard#bound",
+      stopDrainToken: "a".repeat(64)
+    });
+    expect(buildContentStopDrainedMessage(context)).toEqual({
+      kind: "content.stop-drained",
+      activationId: ACTIVATION_ID,
+      sid: "S-stop-drain",
+      token: "a".repeat(64),
+      documentUrl: "https://app.example.test/dashboard#bound",
+      expectedArtifacts: [],
+      emittedArtifacts: [],
+      omittedArtifacts: [],
+      degradationReasons: []
+    });
+  });
+
+  it("accepts child-frame drains and rejects expired or malformed capabilities", () => {
+    expect(resolveContentStopDrainContext(STATUS, 1_000)).not.toBeNull();
+    expect(resolveContentStopDrainContext(STATUS, 2_001)).toBeNull();
+    expect(
+      resolveContentStopDrainContext({ ...STATUS, documentUrl: "not a url" }, 1_000)
+    ).toBeNull();
+    expect(buildContentStopDrainedMessage(null)).toBeNull();
+  });
+});
diff --git a/apps/extension/src/content/stop-drain.ts b/apps/extension/src/content/stop-drain.ts
new file mode 100644
index 0000000..2db8176
--- /dev/null
+++ b/apps/extension/src/content/stop-drain.ts
@@ -0,0 +1,100 @@
+import {
+  parseContentActivationId,
+  type ContentActivationId
+} from "../shared/content-activation-protocol.js";
+import type { ContentDrainMessage, ContentStopDrainedMessage } from "../shared/messages.js";
+import type {
+  ContentStopDrainArtifact,
+  ContentStopDrainDegradationReason
+} from "../shared/messages.js";
+import { isStopDrainToken } from "../shared/stop-drain-token.js";
+
+export type ContentStopDrainContext = {
+  activationId: ContentActivationId;
+  sid: string;
+  token: string;
+  deadline: number;
+  documentUrl: string;
+};
+
+export function resolveContentStopDrainContext(
+  message: ContentDrainMessage,
+  now = Date.now()
+): ContentStopDrainContext | null {
+  const activationId = parseContentActivationId(message.activationId);
+
+  if (
+    !activationId ||
+    !isStopDrainToken(message.token) ||
+    !Number.isFinite(message.deadline) ||
+    message.deadline < now ||
+    !isAbsoluteUrl(message.documentUrl) ||
+    typeof message.sid !== "string" ||
+    message.sid.length === 0
+  ) {
+    return null;
+  }
+
+  return {
+    activationId,
+    sid: message.sid,
+    token: message.token,
+    deadline: message.deadline,
+    documentUrl: message.documentUrl
+  };
+}
+
+export function stopDrainEventFields(
+  context: ContentStopDrainContext | null,
+  fallbackDocumentUrl?: string
+): { documentUrl?: string; stopDrainToken?: string } {
+  if (context) {
+    return { documentUrl: context.documentUrl, stopDrainToken: context.token };
+  }
+
+  return fallbackDocumentUrl ? { documentUrl: fallbackDocumentUrl } : {};
+}
+
+export function buildContentStopDrainedMessage(
+  context: ContentStopDrainContext | null,
+  evidence: Readonly<{
+    expectedArtifacts: readonly ContentStopDrainArtifact[];
+    emittedArtifacts: readonly ContentStopDrainArtifact[];
+    omittedArtifacts: readonly ContentStopDrainArtifact[];
+    degradationReasons: readonly ContentStopDrainDegradationReason[];
+  }> = {
+    expectedArtifacts: [],
+    emittedArtifacts: [],
+    omittedArtifacts: [],
+    degradationReasons: []
+  }
+): ContentStopDrainedMessage | null {
+  if (!context) {
+    return null;
+  }
+
+  return {
+    kind: "content.stop-drained",
+    activationId: context.activationId,
+    sid: context.sid,
+    token: context.token,
+    documentUrl: context.documentUrl,
+    expectedArtifacts: [...new Set(evidence.expectedArtifacts)],
+    emittedArtifacts: [...new Set(evidence.emittedArtifacts)],
+    omittedArtifacts: [...new Set(evidence.omittedArtifacts)],
+    degradationReasons: [...new Set(evidence.degradationReasons)]
+  };
+}
+
+function isAbsoluteUrl(value: unknown): value is string {
+  if (typeof value !== "string" || value.length === 0) {
+    return false;
+  }
+
+  try {
+    new URL(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
diff --git a/apps/extension/src/injected/index.test.ts b/apps/extension/src/injected/index.test.ts
new file mode 100644
index 0000000..01d1954
--- /dev/null
+++ b/apps/extension/src/injected/index.test.ts
@@ -0,0 +1,24 @@
+import { describe, expect, it, vi } from "vitest";
+
+const directHooks = vi.hoisted(() => ({
+  bootstrap: vi.fn(),
+  control: vi.fn()
+}));
+
+vi.mock("webblackbox/injected-hooks", () => ({
+  bootstrapInjectedLiteCaptureDirect: directHooks.bootstrap,
+  controlInjectedLiteCaptureDirect: directHooks.control
+}));
+
+import { bootstrap, control } from "./index.js";
+
+describe("direct injected module entry", () => {
+  it("only re-exports bootstrap and control without invoking either function", () => {
+    expect({ bootstrap, control }).toEqual({
+      bootstrap: directHooks.bootstrap,
+      control: directHooks.control
+    });
+    expect(directHooks.bootstrap).not.toHaveBeenCalled();
+    expect(directHooks.control).not.toHaveBeenCalled();
+  });
+});
diff --git a/apps/extension/src/injected/index.ts b/apps/extension/src/injected/index.ts
index bbf12b4..ad3bdc6 100644
--- a/apps/extension/src/injected/index.ts
+++ b/apps/extension/src/injected/index.ts
@@ -1,7 +1,4 @@
-import { installInjectedLiteCaptureHooks } from "webblackbox/injected-hooks";
-
-installInjectedLiteCaptureHooks({
-  active: false,
-  bodyCaptureMaxBytes: 0,
-  captureNetwork: false
-});
+export {
+  bootstrapInjectedLiteCaptureDirect as bootstrap,
+  controlInjectedLiteCaptureDirect as control
+} from "webblackbox/injected-hooks";
diff --git a/apps/extension/src/offscreen/index.ts b/apps/extension/src/offscreen/index.ts
index ab7851a..167957a 100644
--- a/apps/extension/src/offscreen/index.ts
+++ b/apps/extension/src/offscreen/index.ts
@@ -1,4 +1,9 @@
-import { FlightRecorderPipeline, IndexedDbPipelineStorage } from "@webblackbox/pipeline";
+import {
+  FlightRecorderPipeline,
+  type PipelineDeliveryEventProvenance,
+  type PipelineDeliveryNoOutputChange,
+  type PipelineDeliveryReceiptQuery
+} from "@webblackbox/pipeline";
 import type {
   CapturePolicy,
   PrivacyScannerResult,
@@ -9,7 +14,32 @@ import type {
 
 import { getChromeApi } from "../shared/chrome-api.js";
 import { createExtensionI18n } from "../shared/i18n.js";
-import { PORT_NAMES } from "../shared/messages.js";
+import { PORT_NAMES, type OffscreenScreenRecordingChunkMessage } from "../shared/messages.js";
+import {
+  IngestIdempotencyRegistry,
+  executeIngestOperation,
+  normalizeOptionalIngestOperationId
+} from "./ingest-idempotency.js";
+import { closeOffscreenPipelineSession } from "./pipeline-close.js";
+import {
+  PipelineRequestCoordinator,
+  runAfterPipelineClose,
+  runTwoPhasePipelineClose
+} from "./pipeline-request-coordinator.js";
+import {
+  assertMatchingPipelineStartIdentity,
+  createPipelineStartIdentity
+} from "./pipeline-start-identity.js";
+import { getExtensionPipelineStorage } from "./pipeline-storage.js";
+import { ResilientRuntimePort } from "./runtime-port.js";
+import {
+  ScreenRecordingChunkDeliveryRegistry,
+  parseActiveScreenRecordingSessionIds,
+  pauseScreenRecordingForPortDisconnect,
+  quiesceExpectedScreenRecordingForStop,
+  reconcileScreenRecordingsWithWorkerSessions
+} from "./screen-recording-port.js";
+import { ScreenRecordingTerminalResultRegistry } from "./screen-recording-terminal-results.js";
 
 type OffscreenPipelineRequest = {
   kind: "sw.pipeline-request";
@@ -18,26 +48,40 @@ type OffscreenPipelineRequest = {
     | "start"
     | "ingest"
     | "ingestBatch"
+    | "ingestBatchDurably"
+    | "ingestBatchWithDelivery"
     | "flush"
+    | "getResumeState"
+    | "getDeliveryReceipt"
+    | "commitDeliveryProgress"
     | "putBlob"
     | "exportDownload"
     | "close"
+    | "getScreenRecordingStatus"
+    | "quiesceScreenRecording"
     | "startScreenRecording"
     | "stopScreenRecording";
   sid: string;
+  operationId?: string;
   session?: SessionMetadata;
   redactionProfile?: RedactionProfile;
   capturePolicy?: CapturePolicy;
   event?: WebBlackboxEvent;
   events?: WebBlackboxEvent[];
+  deliverySidecar?: Array<{
+    eventId: string;
+    provenance: PipelineDeliveryEventProvenance;
+  }>;
+  deliveryProgress?: PipelineDeliveryNoOutputChange[];
+  deliveryQuery?: PipelineDeliveryReceiptQuery;
   mime?: string;
   bytes?: Uint8Array;
+  screenRecordingFinalization?: boolean;
   passphrase?: string;
   includeScreenshots?: boolean;
   includeScreenRecordings?: boolean;
   maxArchiveBytes?: number;
   recentWindowMs?: number;
-  allowPlaintextLocalExport?: boolean;
   purge?: boolean;
   recordingId?: string;
   streamId?: string;
@@ -74,6 +118,10 @@ type OffscreenScreenRecordingStopResult = {
   mime: string;
   chunkCount: number;
   size: number;
+  durableChunkCount: number;
+  durableSize: number;
+  degraded: boolean;
+  degradationReason?: "screen-chunk-durability-mismatch";
   durationMs: number;
   width?: number;
   height?: number;
@@ -92,10 +140,15 @@ type OffscreenScreenRecordingState = {
   height?: number;
   frameRate?: number;
   nextChunkIndex: number;
-  postedChunkCount: number;
-  sizeBytes: number;
+  producedChunkCount: number;
+  producedSizeBytes: number;
+  durableChunkCount: number;
+  durableSizeBytes: number;
+  durabilityFailed: boolean;
   pendingChunks: Set<Promise<void>>;
   stopping: boolean;
+  pausedForPortDisconnect: boolean;
+  quiescedForStop: boolean;
   stopPromise: Promise<OffscreenScreenRecordingStopResult> | null;
 };
 
@@ -103,15 +156,26 @@ const chromeApi = getChromeApi();
 createExtensionI18n({
   pageTitleKey: "pageTitleOffscreen"
 });
-const port = chromeApi?.runtime?.connect({ name: PORT_NAMES.offscreen });
 const pipelines = new Map<string, FlightRecorderPipeline>();
+const pipelineStartIdentities = new Map<string, string>();
+const pipelineRequestCoordinator = new PipelineRequestCoordinator();
+const mediaControlCoordinator = new PipelineRequestCoordinator();
+const pendingPipelineCloseTasks = new Map<string, Promise<unknown>>();
+const ingestIdempotencyRegistry = new IngestIdempotencyRegistry();
 const screenRecordings = new Map<string, OffscreenScreenRecordingState>();
+const screenRecordingChunkDeliveries = new ScreenRecordingChunkDeliveryRegistry();
+const screenRecordingTerminalResults =
+  new ScreenRecordingTerminalResultRegistry<OffscreenScreenRecordingStopResult>();
 const EXPORT_OBJECT_URL_TTL_MS = 90_000;
 const SERVICE_WORKER_KEEPALIVE_INTERVAL_MS = 20_000;
 const SCREEN_RECORDING_TIMESLICE_MS = 1_000;
 const SCREEN_RECORDING_STOP_TIMEOUT_MS = 10_000;
+const SCREEN_RECORDING_CHUNK_RETRY_MS = 500;
 const SCREEN_RECORDING_MAX_FRAME_RATE = 30;
 const SCREEN_RECORDING_VIDEO_BITS_PER_SECOND = 3_500_000;
+const OFFSCREEN_PORT_RECONNECT_INITIAL_MS = 250;
+const OFFSCREEN_PORT_RECONNECT_MAX_MS = 2_000;
+const OFFSCREEN_PORT_DISCONNECT_DEADLINE_MS = 30_000;
 const SCREEN_RECORDING_MIME_CANDIDATES = [
   "video/webm;codecs=vp9",
   "video/webm;codecs=vp8",
@@ -125,13 +189,23 @@ const state: OffscreenState = {
 };
 
 let keepaliveTimer: ReturnType<typeof setInterval> | null = null;
+let screenRecordingHandshakeTimer: ReturnType<typeof setTimeout> | null = null;
+let screenRecordingChunkRetryTimer: ReturnType<typeof setTimeout> | null = null;
+let runtimePort: ResilientRuntimePort | null = null;
 
 console.info("[WebBlackbox] offscreen pipeline initialized");
 
-port?.onMessage.addListener((message) => {
+function handleRuntimePortMessage(message: unknown): void {
   if (message && typeof message === "object") {
     const kind = (message as { kind?: unknown }).kind;
 
+    if (kind === "sw.screen-recording-chunk-ack") {
+      if (screenRecordingChunkDeliveries.acknowledge(message)) {
+        syncScreenRecordingChunkRetry();
+      }
+      return;
+    }
+
     if (kind === "sw.recording-status") {
       const active = (message as { active?: unknown }).active;
       state.active = active === true;
@@ -141,11 +215,15 @@ port?.onMessage.addListener((message) => {
 
     if (kind === "sw.pipeline-status") {
       const activeSessions = (message as { activeSessions?: unknown }).activeSessions;
+      const activeScreenRecordingSessionIds = parseActiveScreenRecordingSessionIds(message);
       const updatedAt = (message as { updatedAt?: unknown }).updatedAt;
 
       state.activeSessions =
         typeof activeSessions === "number" && Number.isFinite(activeSessions) ? activeSessions : 0;
       state.updatedAt = typeof updatedAt === "number" ? updatedAt : Date.now();
+      if (activeScreenRecordingSessionIds) {
+        reconcileScreenRecordingsAfterWorkerHandshake(activeScreenRecordingSessionIds);
+      }
       syncServiceWorkerKeepalive();
 
       console.info("[WebBlackbox] offscreen pipeline status", {
@@ -160,20 +238,106 @@ port?.onMessage.addListener((message) => {
       void handlePipelineRequest(message as OffscreenPipelineRequest);
     }
   }
-});
+}
 
-port?.onDisconnect?.addListener(() => {
+function handleRuntimePortDisconnect(): void {
   stopServiceWorkerKeepalive();
-});
+  let needsHandshake = false;
+  for (const recording of screenRecordings.values()) {
+    if (!pauseScreenRecordingForPortDisconnect(recording)) {
+      void stopOffscreenScreenRecording(
+        recording.sid,
+        recording.recordingId,
+        "service-worker-disconnected",
+        false
+      );
+    } else if (!recording.stopping) {
+      needsHandshake = true;
+    }
+  }
+  if (needsHandshake) {
+    startScreenRecordingHandshakeDeadline();
+  }
+}
 
-postToSw({
-  kind: "offscreen.ready",
-  t: Date.now()
-});
+function handleRuntimePortReconnect(): void {
+  postToSw({
+    kind: "offscreen.ready",
+    t: Date.now()
+  });
+  replayPendingScreenRecordingChunks();
+  syncServiceWorkerKeepalive();
+}
+
+function reconcileScreenRecordingsAfterWorkerHandshake(
+  activeSessionIds: ReadonlySet<string>
+): void {
+  clearScreenRecordingHandshakeDeadline();
+  const failures = reconcileScreenRecordingsWithWorkerSessions(
+    [...screenRecordings.values()].filter(
+      (recording) => !recording.quiescedForStop || !activeSessionIds.has(recording.sid)
+    ),
+    activeSessionIds
+  );
+  for (const { recording, reason } of failures) {
+    void stopOffscreenScreenRecording(recording.sid, recording.recordingId, reason, true);
+  }
+}
+
+function startScreenRecordingHandshakeDeadline(): void {
+  if (screenRecordingHandshakeTimer !== null) {
+    return;
+  }
+
+  screenRecordingHandshakeTimer = setTimeout(() => {
+    screenRecordingHandshakeTimer = null;
+    handleRuntimePortDisconnectDeadline();
+  }, OFFSCREEN_PORT_DISCONNECT_DEADLINE_MS);
+}
+
+function clearScreenRecordingHandshakeDeadline(): void {
+  if (screenRecordingHandshakeTimer === null) {
+    return;
+  }
+
+  clearTimeout(screenRecordingHandshakeTimer);
+  screenRecordingHandshakeTimer = null;
+}
+
+function handleRuntimePortDisconnectDeadline(): void {
+  clearScreenRecordingHandshakeDeadline();
+  for (const recording of screenRecordings.values()) {
+    void stopOffscreenScreenRecording(
+      recording.sid,
+      recording.recordingId,
+      "service-worker-reconnect-timeout",
+      true
+    );
+  }
+}
+
+if (chromeApi?.runtime) {
+  runtimePort = new ResilientRuntimePort({
+    connect: () => chromeApi.runtime!.connect({ name: PORT_NAMES.offscreen }),
+    onMessage: handleRuntimePortMessage,
+    onConnected: handleRuntimePortReconnect,
+    onDisconnected: handleRuntimePortDisconnect,
+    onDisconnectDeadline: handleRuntimePortDisconnectDeadline,
+    reconnectInitialMs: OFFSCREEN_PORT_RECONNECT_INITIAL_MS,
+    reconnectMaxMs: OFFSCREEN_PORT_RECONNECT_MAX_MS,
+    disconnectDeadlineMs: OFFSCREEN_PORT_DISCONNECT_DEADLINE_MS
+  });
+  runtimePort.start();
+}
 
 async function handlePipelineRequest(message: OffscreenPipelineRequest): Promise<void> {
   try {
-    const result = await processPipelineRequest(message);
+    const result =
+      message.op === "close"
+        ? await processTwoPhasePipelineClose(message)
+        : isScreenRecordingControl(message.op)
+          ? await processMediaControlRequest(message)
+          : await processSerializedPipelineRequest(message);
     postPipelineResponse({
       kind: "offscreen.pipeline-response",
       requestId: message.requestId,
@@ -190,17 +354,115 @@ async function handlePipelineRequest(message: OffscreenPipelineRequest): Promise
   }
 }
 
+function isScreenRecordingControl(op: OffscreenPipelineRequest["op"]): boolean {
+  return (
+    op === "getScreenRecordingStatus" ||
+    op === "quiesceScreenRecording" ||
+    op === "startScreenRecording" ||
+    op === "stopScreenRecording"
+  );
+}
+
+function processSerializedPipelineRequest(message: OffscreenPipelineRequest): Promise<unknown> {
+  const pendingClose = pendingPipelineCloseTasks.get(message.sid);
+  if (
+    pendingClose &&
+    message.screenRecordingFinalization === true &&
+    (message.op === "putBlob" ||
+      message.op === "ingestBatchDurably" ||
+      message.op === "ingestBatchWithDelivery")
+  ) {
+    return pipelineRequestCoordinator.run(message.sid, () => processPipelineRequest(message));
+  }
+
+  return runAfterPipelineClose({
+    coordinator: pipelineRequestCoordinator,
+    sid: message.sid,
+    pendingClose,
+    operation: () => processPipelineRequest(message)
+  });
+}
+
+function processMediaControlRequest(message: OffscreenPipelineRequest): Promise<unknown> {
+  return mediaControlCoordinator.run(message.sid, async () => {
+    if (message.op === "startScreenRecording") {
+      await runAfterPipelineClose({
+        coordinator: pipelineRequestCoordinator,
+        sid: message.sid,
+        pendingClose: pendingPipelineCloseTasks.get(message.sid),
+        operation: async () => {
+          if (!pipelines.has(message.sid)) {
+            throw new Error(`Pipeline session not found: ${message.sid}`);
+          }
+        }
+      });
+    }
+    return processPipelineRequest(message);
+  });
+}
+
+async function processTwoPhasePipelineClose(message: OffscreenPipelineRequest): Promise<unknown> {
+  const existing = pendingPipelineCloseTasks.get(message.sid);
+  if (existing) {
+    return existing;
+  }
+
+  const task = runTwoPhasePipelineClose({
+    coordinator: pipelineRequestCoordinator,
+    sid: message.sid,
+    stopScreenRecording: () =>
+      mediaControlCoordinator.run(message.sid, async () => {
+        const recording = screenRecordings.get(message.sid);
+        if (recording) {
+          await stopOffscreenScreenRecording(
+            message.sid,
+            recording.recordingId,
+            message.purge === true ? "pipeline-purge" : "pipeline-close",
+            false
+          );
+        }
+      }),
+    closePipeline: () => processPipelineRequest(message),
+    onScreenRecordingStopError: (error) => {
+      console.warn("[WebBlackbox] failed to stop offscreen screen recording", error);
+    }
+  });
+  const clearTask = () => {
+    if (pendingPipelineCloseTasks.get(message.sid) === task) {
+      pendingPipelineCloseTasks.delete(message.sid);
+    }
+  };
+  pendingPipelineCloseTasks.set(message.sid, task);
+  void task.then(clearTask, clearTask);
+  return task;
+}
+
 async function processPipelineRequest(message: OffscreenPipelineRequest): Promise<unknown> {
+  const operationId = normalizeOptionalIngestOperationId(message.operationId);
+
   if (message.op === "start") {
     if (!message.session) {
       throw new Error("Missing session metadata for pipeline start.");
     }
 
+    const startIdentity = createPipelineStartIdentity({
+      sid: message.sid,
+      session: message.session,
+      redactionProfile: message.redactionProfile,
+      capturePolicy: message.capturePolicy
+    });
+
     if (pipelines.has(message.sid)) {
+      assertMatchingPipelineStartIdentity(
+        message.sid,
+        pipelineStartIdentities.get(message.sid),
+        startIdentity
+      );
+      await pipelines.get(message.sid)!.rebindSessionMetadata(message.session);
       return null;
     }
 
-    const storage = new IndexedDbPipelineStorage("webblackbox-flight-recorder");
+    const storage = await getExtensionPipelineStorage();
     const pipeline = new FlightRecorderPipeline({
       session: message.session,
       storage,
@@ -211,6 +473,25 @@ async function processPipelineRequest(message: OffscreenPipelineRequest): Promis
 
     await pipeline.start();
     pipelines.set(message.sid, pipeline);
+    pipelineStartIdentities.set(message.sid, startIdentity);
+    return null;
+  }
+
+  if (message.op === "close") {
+    await closeOffscreenPipelineSession({
+      sid: message.sid,
+      purge: message.purge === true,
+      pipelines,
+      stopScreenRecording: () => undefined,
+      ingestIdempotencyRegistry,
+      screenRecordingTerminalResults,
+      onScreenRecordingStopError: (error) => {
+        console.warn("[WebBlackbox] failed to stop offscreen screen recording", error);
+      }
+    });
+    if (!pipelines.has(message.sid)) {
+      pipelineStartIdentities.delete(message.sid);
+    }
     return null;
   }
 
@@ -220,10 +501,54 @@ async function processPipelineRequest(message: OffscreenPipelineRequest): Promis
     throw new Error(`Pipeline session not found: ${message.sid}`);
   }
 
+  if (message.op === "getResumeState") {
+    return pipeline.getResumeState();
+  }
+
+  if (message.op === "getDeliveryReceipt") {
+    if (!message.deliveryQuery) {
+      throw new Error("Missing delivery receipt query.");
+    }
+    return pipeline.getDeliveryReceipt(message.deliveryQuery);
+  }
+
+  if (message.op === "commitDeliveryProgress") {
+    if (!Array.isArray(message.deliveryProgress) || message.deliveryProgress.length === 0) {
+      throw new Error("Missing metadata-only delivery progress.");
+    }
+    await pipeline.commitDeliveryProgress(message.deliveryProgress);
+    return null;
+  }
+
+  if (message.op === "getScreenRecordingStatus") {
+    const recording = screenRecordings.get(message.sid);
+
+    if (!recording) {
+      return { active: false };
+    }
+
+    return {
+      active: true,
+      recordingId: recording.recordingId,
+      mime: recording.mime,
+      quiescedForStop: recording.quiescedForStop,
+      ...(recording.width === undefined ? {} : { width: recording.width }),
+      ...(recording.height === undefined ? {} : { height: recording.height }),
+      ...(recording.frameRate === undefined ? {} : { frameRate: recording.frameRate })
+    };
+  }
+
   if (message.op === "startScreenRecording") {
     return startOffscreenScreenRecording(message);
   }
 
+  if (message.op === "quiesceScreenRecording") {
+    const recording = screenRecordings.get(message.sid);
+    return {
+      quiesced: quiesceExpectedScreenRecordingForStop(recording, message.recordingId)
+    };
+  }
+
   if (message.op === "stopScreenRecording") {
     return stopOffscreenScreenRecording(
       message.sid,
@@ -238,16 +563,65 @@ async function processPipelineRequest(message: OffscreenPipelineRequest): Promis
       throw new Error("Missing event payload for pipeline ingest.");
     }
 
-    await pipeline.ingest(message.event);
+    await executeIngestOperation({
+      sid: message.sid,
+      op: message.op,
+      operationId,
+      events: [message.event],
+      pipeline,
+      registry: ingestIdempotencyRegistry
+    });
     return null;
   }
 
-  if (message.op === "ingestBatch") {
+  if (message.op === "ingestBatch" || message.op === "ingestBatchDurably") {
     if (!Array.isArray(message.events) || message.events.length === 0) {
       return null;
     }
 
-    await pipeline.ingestBatch(message.events);
+    await executeIngestOperation({
+      sid: message.sid,
+      op: message.op,
+      operationId,
+      events: message.events,
+      pipeline,
+      registry: ingestIdempotencyRegistry
+    });
+    return null;
+  }
+
+  if (message.op === "ingestBatchWithDelivery") {
+    if (!Array.isArray(message.events) || message.events.length === 0) {
+      throw new Error("Missing delivery-aware ingest events.");
+    }
+    if (!Array.isArray(message.deliverySidecar) || message.deliverySidecar.length === 0) {
+      throw new Error("Missing delivery-aware ingest sidecar.");
+    }
+
+    const deliveryByEventId = new Map<string, PipelineDeliveryEventProvenance>();
+    for (const entry of message.deliverySidecar) {
+      if (
+        !entry ||
+        typeof entry !== "object" ||
+        typeof entry.eventId !== "string" ||
+        entry.eventId.length === 0 ||
+        !entry.provenance ||
+        deliveryByEventId.has(entry.eventId)
+      ) {
+        throw new Error("Invalid delivery-aware ingest sidecar.");
+      }
+      deliveryByEventId.set(entry.eventId, entry.provenance);
+    }
+
+    await executeIngestOperation({
+      sid: message.sid,
+      op: message.op,
+      operationId,
+      events: message.events,
+      deliveryByEventId,
+      pipeline,
+      registry: ingestIdempotencyRegistry
+    });
     return null;
   }
 
@@ -276,8 +650,7 @@ async function processPipelineRequest(message: OffscreenPipelineRequest): Promis
       includeScreenshots: message.includeScreenshots,
       includeScreenRecordings: message.includeScreenRecordings,
       maxArchiveBytes: message.maxArchiveBytes,
-      recentWindowMs: message.recentWindowMs,
-      allowPlaintextLocalExport: message.allowPlaintextLocalExport
+      recentWindowMs: message.recentWindowMs
     });
     return downloadExportedBundle(
       exported.fileName,
@@ -287,22 +660,6 @@ async function processPipelineRequest(message: OffscreenPipelineRequest): Promis
     );
   }
 
-  if (message.op === "close") {
-    await stopOffscreenScreenRecording(
-      message.sid,
-      undefined,
-      message.purge === true ? "pipeline-purge" : "pipeline-close",
-      false
-    ).catch((error) => {
-      console.warn("[WebBlackbox] failed to stop offscreen screen recording", error);
-    });
-    await pipeline.close({
-      purge: message.purge === true
-    });
-    pipelines.delete(message.sid);
-    return null;
-  }
-
   throw new Error(`Unsupported pipeline operation: ${message.op}`);
 }
 
@@ -310,12 +667,30 @@ function postPipelineResponse(message: OffscreenPipelineResponse): void {
   postToSw(message);
 }
 
-function postToSw(message: unknown): void {
-  try {
-    port?.postMessage(message);
-  } catch {
-    void 0;
+function postToSw(message: unknown): boolean {
+  return runtimePort?.post(message) ?? false;
+}
+
+function replayPendingScreenRecordingChunks(): void {
+  screenRecordingChunkDeliveries.replay((message) => postToSw(message));
+  syncScreenRecordingChunkRetry();
+}
+
+function syncScreenRecordingChunkRetry(): void {
+  if (screenRecordingChunkDeliveries.size === 0) {
+    if (screenRecordingChunkRetryTimer !== null) {
+      clearTimeout(screenRecordingChunkRetryTimer);
+      screenRecordingChunkRetryTimer = null;
+    }
+    return;
   }
+  if (screenRecordingChunkRetryTimer !== null) {
+    return;
+  }
+  screenRecordingChunkRetryTimer = setTimeout(() => {
+    screenRecordingChunkRetryTimer = null;
+    replayPendingScreenRecordingChunks();
+  }, SCREEN_RECORDING_CHUNK_RETRY_MS);
 }
 
 function syncServiceWorkerKeepalive(): void {
@@ -358,6 +733,7 @@ async function startOffscreenScreenRecording(
 ): Promise<OffscreenScreenRecordingStartResult> {
   const recordingId = normalizeRequiredString(message.recordingId, "recording id");
   const streamId = normalizeRequiredString(message.streamId, "tab capture stream id");
+  screenRecordingTerminalResults.assertStartAllowed(message.sid, recordingId);
   const existing = screenRecordings.get(message.sid);
 
   if (existing) {
@@ -365,6 +741,10 @@ async function startOffscreenScreenRecording(
       throw new Error(`Screen recording already active for session: ${message.sid}`);
     }
 
+    if (existing.stopping) {
+      throw new Error(`Screen recording is already stopping for session: ${message.sid}`);
+    }
+
     return toScreenRecordingStartResult(existing);
   }
 
@@ -399,10 +779,15 @@ async function startOffscreenScreenRecording(
       height: normalizePositiveInteger(settings.height),
       frameRate: normalizePositiveNumber(settings.frameRate),
       nextChunkIndex: 0,
-      postedChunkCount: 0,
-      sizeBytes: 0,
+      producedChunkCount: 0,
+      producedSizeBytes: 0,
+      durableChunkCount: 0,
+      durableSizeBytes: 0,
+      durabilityFailed: false,
       pendingChunks: new Set(),
       stopping: false,
+      pausedForPortDisconnect: false,
+      quiescedForStop: false,
       stopPromise: null
     };
 
@@ -446,21 +831,18 @@ async function stopOffscreenScreenRecording(
   reason: string,
   notifyEnded: boolean
 ): Promise<OffscreenScreenRecordingStopResult> {
-  const recording = screenRecordings.get(sid);
+  if (recordingId) {
+    const terminalResult = screenRecordingTerminalResults.get(sid, recordingId);
 
-  if (!recording) {
-    if (!recordingId) {
-      throw new Error(`Screen recording not found for session: ${sid}`);
+    if (terminalResult) {
+      return terminalResult;
     }
+  }
 
-    return {
-      recordingId,
-      mime: "video/webm",
-      chunkCount: 0,
-      size: 0,
-      durationMs: 0,
-      reason
-    };
+  const recording = screenRecordings.get(sid);
+
+  if (!recording) {
+    throw new Error(`Screen recording not found for session: ${sid}`);
   }
 
   if (recordingId && recording.recordingId !== recordingId) {
@@ -492,6 +874,7 @@ async function stopActiveOffscreenScreenRecording(
 
   return new Promise((resolve) => {
     let finished = false;
+    const stopDeadline = Date.now() + SCREEN_RECORDING_STOP_TIMEOUT_MS;
     const timeout = setTimeout(() => {
       void finish();
     }, SCREEN_RECORDING_STOP_TIMEOUT_MS);
@@ -503,9 +886,21 @@ async function stopActiveOffscreenScreenRecording(
 
       finished = true;
       clearTimeout(timeout);
-      await waitForOffscreenScreenRecordingChunks(recording);
+      const durable = await waitForOffscreenScreenRecordingChunks(recording, stopDeadline);
+      if (!durable) {
+        recording.durabilityFailed = true;
+        screenRecordingChunkDeliveries.failRecording(
+          recording.sid,
+          recording.recordingId,
+          new Error("Timed out waiting for durable screen recording chunk acknowledgements.")
+        );
+        syncScreenRecordingChunkRetry();
+        await Promise.allSettled([...recording.pendingChunks]);
+      }
+      const result = toScreenRecordingStopResult(recording, reason);
       cleanupOffscreenScreenRecording(recording);
-      resolve(toScreenRecordingStopResult(recording, reason));
+      screenRecordingTerminalResults.remember(recording.sid, recording.recordingId, result);
+      resolve(result);
     };
 
     recording.recorder.addEventListener(
@@ -545,10 +940,7 @@ function handleScreenRecordingData(
   const task = (async () => {
     const bytes = new Uint8Array(await blob.arrayBuffer());
     const endOffsetMs = Math.max(0, Math.round(performance.now() - recording.startedAt));
-    recording.postedChunkCount += 1;
-    recording.sizeBytes += bytes.byteLength;
-
-    postToSw({
+    const message: OffscreenScreenRecordingChunkMessage = {
       kind: "offscreen.screen-recording-chunk",
       sid: recording.sid,
       recordingId: recording.recordingId,
@@ -559,7 +951,15 @@ function handleScreenRecordingData(
       startOffsetMs,
       endOffsetMs,
       durationMs: Math.max(0, endOffsetMs - startOffsetMs)
-    });
+    };
+    recording.producedChunkCount += 1;
+    recording.producedSizeBytes += bytes.byteLength;
+    const acknowledgement = screenRecordingChunkDeliveries.track(message);
+    postToSw(message);
+    syncScreenRecordingChunkRetry();
+    await acknowledgement;
+    recording.durableChunkCount += 1;
+    recording.durableSizeBytes += bytes.byteLength;
   })();
 
   recording.pendingChunks.add(task);
@@ -569,17 +969,30 @@ function handleScreenRecordingData(
     },
     (error) => {
       recording.pendingChunks.delete(task);
+      recording.durabilityFailed = true;
       postScreenRecordingError(recording.sid, recording.recordingId, error, "chunk");
     }
   );
 }
 
 async function waitForOffscreenScreenRecordingChunks(
-  recording: OffscreenScreenRecordingState
-): Promise<void> {
+  recording: OffscreenScreenRecordingState,
+  deadline: number
+): Promise<boolean> {
   while (recording.pendingChunks.size > 0) {
-    await Promise.allSettled([...recording.pendingChunks]);
+    const remaining = deadline - Date.now();
+    if (remaining <= 0) {
+      return false;
+    }
+    const settled = Promise.allSettled([...recording.pendingChunks]).then(() => true);
+    const timedOut = new Promise<false>((resolve) => {
+      setTimeout(() => resolve(false), remaining);
+    });
+    if (!(await Promise.race([settled, timedOut]))) {
+      return false;
+    }
   }
+  return true;
 }
 
 function cleanupOffscreenScreenRecording(recording: OffscreenScreenRecordingState): void {
@@ -589,6 +1002,10 @@ function cleanupOffscreenScreenRecording(recording: OffscreenScreenRecordingStat
     screenRecordings.delete(recording.sid);
   }
 
+  if (screenRecordings.size === 0) {
+    clearScreenRecordingHandshakeDeadline();
+  }
+
   syncServiceWorkerKeepalive();
 }
 
@@ -640,11 +1057,19 @@ function toScreenRecordingStopResult(
   recording: OffscreenScreenRecordingState,
   reason: string
 ): OffscreenScreenRecordingStopResult {
+  const degraded =
+    recording.durabilityFailed ||
+    recording.producedChunkCount !== recording.durableChunkCount ||
+    recording.producedSizeBytes !== recording.durableSizeBytes;
   return {
     recordingId: recording.recordingId,
     mime: recording.mime,
-    chunkCount: recording.postedChunkCount,
-    size: recording.sizeBytes,
+    chunkCount: recording.producedChunkCount,
+    size: recording.producedSizeBytes,
+    durableChunkCount: recording.durableChunkCount,
+    durableSize: recording.durableSizeBytes,
+    degraded,
+    ...(degraded ? { degradationReason: "screen-chunk-durability-mismatch" as const } : {}),
     durationMs: Math.max(0, Math.round(performance.now() - recording.startedAt)),
     width: recording.width,
     height: recording.height,
diff --git a/apps/extension/src/offscreen/ingest-idempotency.test.ts b/apps/extension/src/offscreen/ingest-idempotency.test.ts
new file mode 100644
index 0000000..11e0513
--- /dev/null
+++ b/apps/extension/src/offscreen/ingest-idempotency.test.ts
@@ -0,0 +1,518 @@
+import { describe, expect, it, vi } from "vitest";
+import type { PipelineDeliveryEventProvenance } from "@webblackbox/pipeline";
+
+import {
+  INGEST_IDEMPOTENCY_MAX_OPERATION_ID_LENGTH,
+  INGEST_IDEMPOTENCY_MAX_SESSION_ID_LENGTH,
+  IngestIdempotencyRegistry,
+  createIngestOperationFingerprint,
+  executeIngestOperation,
+  normalizeOptionalIngestOperationId,
+  selectContiguousIngestSuffix,
+  type IngestIdempotencyOperation,
+  type IngestOperationFingerprint
+} from "./ingest-idempotency.js";
+
+type TestEvent = { id: string; value?: string };
+
+const SINGLE_FINGERPRINT: IngestOperationFingerprint = {
+  op: "ingest",
+  count: 1,
+  firstId: "E-00000001",
+  lastId: "E-00000001"
+};
+
+function operation(
+  operationId: string,
+  fingerprint: IngestOperationFingerprint = SINGLE_FINGERPRINT,
+  sid = "S-session-1"
+): IngestIdempotencyOperation {
+  return { sid, operationId, fingerprint };
+}
+
+function deferred(): {
+  promise: Promise<void>;
+  resolve: () => void;
+  reject: (error: Error) => void;
+} {
+  let resolve!: () => void;
+  let reject!: (error: Error) => void;
+  const promise = new Promise<void>((resolvePromise, rejectPromise) => {
+    resolve = resolvePromise;
+    reject = rejectPromise;
+  });
+  return { promise, resolve, reject };
+}
+
+describe("IngestIdempotencyRegistry", () => {
+  it("joins concurrent retries and acknowledges a completed operation during its TTL", async () => {
+    let now = 1_000;
+    const pending = deferred();
+    const task = vi.fn(() => pending.promise);
+    const registry = new IngestIdempotencyRegistry({ ttlMs: 100, now: () => now });
+    const first = registry.execute(operation("I-operation-1"), task);
+    const concurrentRetry = registry.execute(operation("I-operation-1"), task);
+
+    expect(concurrentRetry).toBe(first);
+    expect(task).toHaveBeenCalledTimes(0);
+    await Promise.resolve();
+    expect(task).toHaveBeenCalledTimes(1);
+
+    pending.resolve();
+    await expect(Promise.all([first, concurrentRetry])).resolves.toEqual([undefined, undefined]);
+    await expect(registry.execute(operation("I-operation-1"), task)).resolves.toBeUndefined();
+    expect(task).toHaveBeenCalledTimes(1);
+
+    now += 101;
+    await registry.execute(operation("I-operation-1"), task);
+    expect(task).toHaveBeenCalledTimes(2);
+  });
+
+  it("removes failed operations so the same key can be retried", async () => {
+    const registry = new IngestIdempotencyRegistry();
+    const failure = new Error("commit failed");
+    const task = vi.fn<() => Promise<void>>().mockRejectedValueOnce(failure).mockResolvedValue();
+
+    await expect(registry.execute(operation("I-retryable"), task)).rejects.toBe(failure);
+    await expect(registry.execute(operation("I-retryable"), task)).resolves.toBeUndefined();
+    expect(task).toHaveBeenCalledTimes(2);
+  });
+
+  it("fails closed when an in-flight or completed key is reused with another fingerprint", async () => {
+    const pending = deferred();
+    const registry = new IngestIdempotencyRegistry();
+    const original = registry.execute(operation("I-collision"), () => pending.promise);
+    const different: IngestOperationFingerprint = {
+      op: "ingestBatch",
+      count: 2,
+      firstId: "E-00000001",
+      lastId: "E-00000002"
+    };
+
+    await expect(
+      registry.execute(operation("I-collision", different), async () => undefined)
+    ).rejects.toThrow("different fingerprint");
+    pending.resolve();
+    await original;
+    await expect(
+      registry.execute(operation("I-collision", different), async () => undefined)
+    ).rejects.toThrow("different fingerprint");
+  });
+
+  it("evicts completed operations but never in-flight work at its global limit", async () => {
+    const registry = new IngestIdempotencyRegistry({ maxEntries: 2 });
+    await registry.execute(operation("I-completed"), async () => undefined);
+    const second = deferred();
+    const third = deferred();
+    const secondPromise = registry.execute(operation("I-second"), () => second.promise);
+    const thirdPromise = registry.execute(operation("I-third"), () => third.promise);
+    const rejectedTask = vi.fn(async () => undefined);
+
+    await expect(registry.execute(operation("I-fourth"), rejectedTask)).rejects.toThrow(
+      "full of in-flight operations"
+    );
+    expect(rejectedTask).not.toHaveBeenCalled();
+    expect(registry.execute(operation("I-second"), () => Promise.resolve())).toBe(secondPromise);
+
+    second.resolve();
+    third.resolve();
+    await Promise.all([secondPromise, thirdPromise]);
+  });
+
+  it("clears only the requested session, including its in-flight entries", async () => {
+    const registry = new IngestIdempotencyRegistry();
+    const abandoned = deferred();
+    const original = registry.execute(
+      operation("I-same", SINGLE_FINGERPRINT, "S-one"),
+      () => abandoned.promise
+    );
+    const retainedTask = vi.fn(async () => undefined);
+    await registry.execute(operation("I-same", SINGLE_FINGERPRINT, "S-two"), retainedTask);
+
+    registry.clearSession("S-one");
+    const replacementTask = vi.fn(async () => undefined);
+    await registry.execute(operation("I-same", SINGLE_FINGERPRINT, "S-one"), replacementTask);
+    await registry.execute(operation("I-same", SINGLE_FINGERPRINT, "S-two"), retainedTask);
+
+    expect(replacementTask).toHaveBeenCalledTimes(1);
+    expect(retainedTask).toHaveBeenCalledTimes(1);
+    abandoned.resolve();
+    await original;
+  });
+
+  it("enforces bounded, unambiguous session and operation ids", async () => {
+    const registry = new IngestIdempotencyRegistry();
+    const task = vi.fn(async () => undefined);
+
+    expect(() => registry.execute(operation("I-invalid|delimiter"), task)).toThrow(
+      "Invalid ingest idempotency operation id"
+    );
+    expect(() =>
+      registry.execute(
+        operation(`I-${"a".repeat(INGEST_IDEMPOTENCY_MAX_OPERATION_ID_LENGTH)}`),
+        task
+      )
+    ).toThrow("Invalid ingest idempotency operation id");
+    expect(() =>
+      registry.execute(
+        operation(
+          "I-valid",
+          SINGLE_FINGERPRINT,
+          `S-${"a".repeat(INGEST_IDEMPOTENCY_MAX_SESSION_ID_LENGTH)}`
+        ),
+        task
+      )
+    ).toThrow("Invalid ingest idempotency session id");
+    expect(task).not.toHaveBeenCalled();
+  });
+
+  it("rejects invalid constructor bounds and a non-finite clock", () => {
+    expect(() => new IngestIdempotencyRegistry({ maxEntries: 0 })).toThrow(
+      "entry limit must be a positive safe integer"
+    );
+    expect(() => new IngestIdempotencyRegistry({ ttlMs: Number.NaN })).toThrow(
+      "TTL must be a positive safe integer"
+    );
+    const registry = new IngestIdempotencyRegistry({ now: () => Number.POSITIVE_INFINITY });
+    expect(() => registry.execute(operation("I-clock"), async () => undefined)).toThrow(
+      "clock must return a finite number"
+    );
+  });
+});
+
+describe("createIngestOperationFingerprint", () => {
+  it("includes operation, count, first id, and last id", () => {
+    expect(
+      createIngestOperationFingerprint("ingestBatch", [{ id: "E-00000009" }, { id: "E-00000010" }])
+    ).toEqual({
+      op: "ingestBatch",
+      count: 2,
+      firstId: "E-00000009",
+      lastId: "E-00000010"
+    });
+  });
+
+  it("requires exactly one event for a single ingest operation", () => {
+    expect(() =>
+      createIngestOperationFingerprint("ingest", [{ id: "E-00000001" }, { id: "E-00000002" }])
+    ).toThrow("exactly one event");
+  });
+});
+
+describe("selectContiguousIngestSuffix", () => {
+  const events: TestEvent[] = [
+    { id: "E-00000001", value: "one" },
+    { id: "E-00000002", value: "two" },
+    { id: "E-00000003", value: "three" },
+    { id: "E-00000004", value: "four" }
+  ];
+
+  it("returns the full batch when no event is durable", () => {
+    expect(selectContiguousIngestSuffix(events, 0)).toEqual(events);
+  });
+
+  it("returns a contiguous suffix after a partially durable batch", () => {
+    expect(selectContiguousIngestSuffix(events, 2)).toEqual(events.slice(2));
+  });
+
+  it("returns an empty suffix when every event was already accepted", () => {
+    expect(selectContiguousIngestSuffix(events, 4)).toEqual([]);
+    expect(selectContiguousIngestSuffix(events, 10)).toEqual([]);
+  });
+
+  it("rejects non-canonical or unsafe event ids", () => {
+    expect(() => selectContiguousIngestSuffix([{ id: "event-1" }], 0)).toThrow(
+      "Invalid canonical ingest event id"
+    );
+    expect(() => selectContiguousIngestSuffix([{ id: "E-9999999999999999" }], 0)).toThrow(
+      "Invalid canonical ingest event id"
+    );
+  });
+
+  it("rejects gaps in a batch", () => {
+    expect(() =>
+      selectContiguousIngestSuffix([{ id: "E-00000001" }, { id: "E-00000003" }], 0)
+    ).toThrow("strictly increasing contiguous sequence");
+  });
+
+  it("rejects duplicate and descending event ids", () => {
+    expect(() =>
+      selectContiguousIngestSuffix([{ id: "E-00000002" }, { id: "E-00000002" }], 1)
+    ).toThrow("strictly increasing contiguous sequence");
+    expect(() =>
+      selectContiguousIngestSuffix([{ id: "E-00000002" }, { id: "E-00000001" }], 0)
+    ).toThrow("strictly increasing contiguous sequence");
+  });
+
+  it("accepts a new batch after an intentional recorder sequence gap", () => {
+    expect(selectContiguousIngestSuffix([{ id: "E-00000003" }, { id: "E-00000004" }], 1)).toEqual([
+      { id: "E-00000003" },
+      { id: "E-00000004" }
+    ]);
+  });
+
+  it("rejects an empty batch and invalid watermark", () => {
+    expect(() => selectContiguousIngestSuffix([], 0)).toThrow("at least one event");
+    expect(() => selectContiguousIngestSuffix(events, -1)).toThrow(
+      "watermark must be a non-negative safe integer"
+    );
+  });
+});
+
+describe("executeIngestOperation", () => {
+  function createPipeline(watermark: number) {
+    return {
+      getSequenceWatermark: vi.fn(async () => ({ event: watermark })),
+      ingest: vi.fn<(event: TestEvent) => Promise<void>>(async () => undefined),
+      ingestBatch: vi.fn<(events: TestEvent[]) => Promise<void>>(async () => undefined),
+      ingestBatchWithDelivery: vi.fn<
+        (
+          events: TestEvent[],
+          delivery: ReadonlyMap<string, PipelineDeliveryEventProvenance>
+        ) => Promise<void>
+      >(async () => undefined),
+      flush: vi.fn<() => Promise<void>>(async () => undefined)
+    };
+  }
+
+  const events: TestEvent[] = [
+    { id: "E-00000001" },
+    { id: "E-00000002" },
+    { id: "E-00000003" },
+    { id: "E-00000004" }
+  ];
+
+  it("executes the underlying ingest only once when the same operation response is lost", async () => {
+    const registry = new IngestIdempotencyRegistry();
+    const pipeline = createPipeline(0);
+    const options = {
+      sid: "S-session-1",
+      op: "ingestBatch" as const,
+      operationId: "I-response-lost",
+      events,
+      pipeline,
+      registry
+    };
+
+    await executeIngestOperation(options);
+    await executeIngestOperation(options);
+
+    expect(pipeline.getSequenceWatermark).toHaveBeenCalledTimes(1);
+    expect(pipeline.ingestBatch).toHaveBeenCalledTimes(1);
+    expect(pipeline.ingestBatch).toHaveBeenCalledWith(events);
+  });
+
+  it("filters a partially durable batch after the registry cache is lost", async () => {
+    const pipeline = createPipeline(2);
+
+    await executeIngestOperation({
+      sid: "S-session-1",
+      op: "ingestBatch",
+      operationId: "I-new-offscreen",
+      events,
+      pipeline,
+      registry: new IngestIdempotencyRegistry()
+    });
+
+    expect(pipeline.ingestBatch).toHaveBeenCalledTimes(1);
+    expect(pipeline.ingestBatch).toHaveBeenCalledWith(events.slice(2));
+  });
+
+  it("slices delivery provenance with a partially durable event suffix", async () => {
+    const pipeline = createPipeline(2);
+    const deliveryByEventId = new Map<string, PipelineDeliveryEventProvenance>(
+      events.map((event, eventIndex) => [
+        event.id,
+        {
+          tabId: 1,
+          frameId: 0,
+          documentId: "document-1",
+          batchId: "batch-1",
+          fingerprint: "a".repeat(64),
+          eventCount: events.length,
+          eventIndex
+        }
+      ])
+    );
+
+    await executeIngestOperation({
+      sid: "S-session-1",
+      op: "ingestBatchWithDelivery",
+      operationId: "I-delivery-suffix",
+      events,
+      deliveryByEventId,
+      pipeline,
+      registry: new IngestIdempotencyRegistry()
+    });
+
+    expect(pipeline.ingestBatchWithDelivery).toHaveBeenCalledOnce();
+    const [suffix, suffixSidecar] = pipeline.ingestBatchWithDelivery.mock.calls[0]!;
+    expect(suffix).toEqual(events.slice(2));
+    expect([...suffixSidecar.keys()]).toEqual(["E-00000003", "E-00000004"]);
+    expect(pipeline.flush).toHaveBeenCalledOnce();
+  });
+
+  it("rejects an operation-id replay whose delivery sidecar changed", async () => {
+    const registry = new IngestIdempotencyRegistry();
+    const pipeline = createPipeline(0);
+    const createSidecar = (fingerprint: string) =>
+      new Map<string, PipelineDeliveryEventProvenance>([
+        [
+          events[0]!.id,
+          {
+            tabId: 1,
+            frameId: 0,
+            documentId: "document-1",
+            batchId: "batch-1",
+            fingerprint,
+            eventCount: 1,
+            eventIndex: 0
+          }
+        ]
+      ]);
+    const firstEvents = events.slice(0, 1);
+
+    await executeIngestOperation({
+      sid: "S-session-1",
+      op: "ingestBatchWithDelivery",
+      operationId: "I-delivery-fingerprint",
+      events: firstEvents,
+      deliveryByEventId: createSidecar("a".repeat(64)),
+      pipeline,
+      registry
+    });
+    await expect(
+      executeIngestOperation({
+        sid: "S-session-1",
+        op: "ingestBatchWithDelivery",
+        operationId: "I-delivery-fingerprint",
+        events: firstEvents,
+        deliveryByEventId: createSidecar("b".repeat(64)),
+        pipeline,
+        registry
+      })
+    ).rejects.toThrow(/different fingerprint/i);
+    expect(pipeline.ingestBatchWithDelivery).toHaveBeenCalledOnce();
+  });
+
+  it("acknowledges a fully durable replay without ingesting it again", async () => {
+    const pipeline = createPipeline(4);
+
+    await executeIngestOperation({
+      sid: "S-session-1",
+      op: "ingestBatch",
+      operationId: "I-full-replay",
+      events,
+      pipeline,
+      registry: new IngestIdempotencyRegistry()
+    });
+
+    expect(pipeline.ingestBatch).not.toHaveBeenCalled();
+    expect(pipeline.ingest).not.toHaveBeenCalled();
+  });
+
+  it("uses durable watermark filtering for legacy requests without an operation id", async () => {
+    const pipeline = createPipeline(3);
+
+    await executeIngestOperation({
+      sid: "S-session-1",
+      op: "ingestBatch",
+      events,
+      pipeline,
+      registry: new IngestIdempotencyRegistry()
+    });
+
+    expect(pipeline.ingestBatch).toHaveBeenCalledWith(events.slice(3));
+  });
+
+  it("preserves single-event ingest behavior", async () => {
+    const pipeline = createPipeline(0);
+
+    await executeIngestOperation({
+      sid: "S-session-1",
+      op: "ingest",
+      operationId: "I-single",
+      events: events.slice(0, 1),
+      pipeline,
+      registry: new IngestIdempotencyRegistry()
+    });
+
+    expect(pipeline.ingest).toHaveBeenCalledWith(events[0]);
+    expect(pipeline.ingestBatch).not.toHaveBeenCalled();
+  });
+
+  it("retries a failed durable flush without appending the in-memory batch twice", async () => {
+    let watermark = 0;
+    let flushAttempts = 0;
+    const pipeline = {
+      getSequenceWatermark: vi.fn(async () => ({ event: watermark })),
+      ingest: vi.fn<(event: TestEvent) => Promise<void>>(async () => undefined),
+      ingestBatch: vi.fn(async (batch: TestEvent[]) => {
+        watermark = Number(batch.at(-1)!.id.slice(2));
+      }),
+      flush: vi.fn(async () => {
+        flushAttempts += 1;
+        if (flushAttempts === 1) {
+          throw new Error("durable chunk commit failed");
+        }
+      })
+    };
+    const options = {
+      sid: "S-session-1",
+      op: "ingestBatchDurably" as const,
+      operationId: "I-durable-retry",
+      events,
+      pipeline,
+      registry: new IngestIdempotencyRegistry()
+    };
+
+    await expect(executeIngestOperation(options)).rejects.toThrow("durable chunk commit failed");
+    await expect(executeIngestOperation(options)).resolves.toBeUndefined();
+    expect(pipeline.ingestBatch).toHaveBeenCalledOnce();
+    expect(pipeline.flush).toHaveBeenCalledTimes(2);
+  });
+
+  it("replays the full durable batch after an offscreen restart loses only memory", async () => {
+    const first = createPipeline(0);
+    first.flush.mockRejectedValueOnce(new Error("offscreen crashed before commit"));
+    await expect(
+      executeIngestOperation({
+        sid: "S-session-1",
+        op: "ingestBatchDurably",
+        operationId: "I-offscreen-restart",
+        events,
+        pipeline: first,
+        registry: new IngestIdempotencyRegistry()
+      })
+    ).rejects.toThrow("offscreen crashed before commit");
+
+    const restored = createPipeline(0);
+    await executeIngestOperation({
+      sid: "S-session-1",
+      op: "ingestBatchDurably",
+      operationId: "I-offscreen-restart",
+      events,
+      pipeline: restored,
+      registry: new IngestIdempotencyRegistry()
+    });
+
+    expect(restored.ingestBatch).toHaveBeenCalledWith(events);
+    expect(restored.flush).toHaveBeenCalledOnce();
+  });
+});
+
+describe("normalizeOptionalIngestOperationId", () => {
+  it("accepts an absent or canonical operation id", () => {
+    expect(normalizeOptionalIngestOperationId(undefined)).toBeUndefined();
+    expect(normalizeOptionalIngestOperationId("I-operation-1")).toBe("I-operation-1");
+  });
+
+  it("rejects malformed and non-string operation ids", () => {
+    expect(() => normalizeOptionalIngestOperationId(null)).toThrow(
+      "Invalid ingest idempotency operation id"
+    );
+    expect(() => normalizeOptionalIngestOperationId("operation-1")).toThrow(
+      "Invalid ingest idempotency operation id"
+    );
+  });
+});
diff --git a/apps/extension/src/offscreen/ingest-idempotency.ts b/apps/extension/src/offscreen/ingest-idempotency.ts
new file mode 100644
index 0000000..c801152
--- /dev/null
+++ b/apps/extension/src/offscreen/ingest-idempotency.ts
@@ -0,0 +1,489 @@
+const SESSION_ID_PATTERN = /^S-[A-Za-z0-9]+(?:[._-][A-Za-z0-9]+)*$/;
+const OPERATION_ID_PATTERN = /^I-[A-Za-z0-9]+(?:[._-][A-Za-z0-9]+)*$/;
+const EVENT_ID_PATTERN = /^E-([0-9]{1,16})$/;
+
+export const INGEST_IDEMPOTENCY_DEFAULT_TTL_MS = 5 * 60_000;
+export const INGEST_IDEMPOTENCY_DEFAULT_MAX_ENTRIES = 2_048;
+export const INGEST_IDEMPOTENCY_MAX_SESSION_ID_LENGTH = 128;
+export const INGEST_IDEMPOTENCY_MAX_OPERATION_ID_LENGTH = 128;
+
+export type IngestOperation =
+  | "ingest"
+  | "ingestBatch"
+  | "ingestBatchDurably"
+  | "ingestBatchWithDelivery";
+
+export type IngestOperationFingerprint = Readonly<{
+  op: IngestOperation;
+  count: number;
+  firstId: string;
+  lastId: string;
+  deliveryFingerprint?: string;
+}>;
+
+export type IngestIdempotencyOperation = Readonly<{
+  sid: string;
+  operationId: string;
+  fingerprint: IngestOperationFingerprint;
+}>;
+
+export type IngestIdempotencyRegistryOptions = Readonly<{
+  ttlMs?: number;
+  maxEntries?: number;
+  now?: () => number;
+}>;
+
+type InFlightEntry = {
+  state: "in-flight";
+  sid: string;
+  fingerprint: string;
+  promise: Promise<void>;
+};
+
+type CompletedEntry = {
+  state: "completed";
+  sid: string;
+  fingerprint: string;
+  expiresAt: number;
+};
+
+type IdempotencyEntry = InFlightEntry | CompletedEntry;
+
+type EventWithId = Readonly<{ id: string }>;
+
+export type SequenceAwareIngestPipeline<TEvent extends EventWithId> = Readonly<{
+  getSequenceWatermark: () => Promise<Readonly<{ event: number }>>;
+  ingest: (event: TEvent) => Promise<void>;
+  ingestBatch: (events: TEvent[]) => Promise<void>;
+  ingestBatchWithDelivery?: (
+    events: TEvent[],
+    deliveryByEventId: PipelineDeliverySidecar
+  ) => Promise<void>;
+  flush: () => Promise<void>;
+}>;
+
+export type ExecuteIngestOperationOptions<TEvent extends EventWithId> = Readonly<{
+  sid: string;
+  op: IngestOperation;
+  operationId?: unknown;
+  events: readonly TEvent[];
+  deliveryByEventId?: PipelineDeliverySidecar;
+  pipeline: SequenceAwareIngestPipeline<TEvent>;
+  registry: IngestIdempotencyRegistry;
+}>;
+
+/**
+ * Bounds duplicate ingest work across lost offscreen responses and reconnect retries.
+ * Completed operations are retained briefly; in-flight operations are never evicted.
+ */
+export class IngestIdempotencyRegistry {
+  private readonly entries = new Map<string, IdempotencyEntry>();
+
+  private readonly ttlMs: number;
+
+  private readonly maxEntries: number;
+
+  private readonly now: () => number;
+
+  public constructor(options: IngestIdempotencyRegistryOptions = {}) {
+    this.ttlMs = requirePositiveSafeInteger(
+      options.ttlMs ?? INGEST_IDEMPOTENCY_DEFAULT_TTL_MS,
+      "Ingest idempotency TTL"
+    );
+    this.maxEntries = requirePositiveSafeInteger(
+      options.maxEntries ?? INGEST_IDEMPOTENCY_DEFAULT_MAX_ENTRIES,
+      "Ingest idempotency entry limit"
+    );
+    this.now = options.now ?? Date.now;
+  }
+
+  public execute(operation: IngestIdempotencyOperation, task: () => Promise<void>): Promise<void> {
+    assertSessionId(operation.sid);
+    assertOperationId(operation.operationId);
+    const fingerprint = serializeFingerprint(operation.fingerprint);
+    const key = serializeOperationKey(operation.sid, operation.operationId);
+    const now = this.readNow();
+
+    this.pruneExpired(now);
+
+    const existing = this.entries.get(key);
+    if (existing) {
+      if (existing.fingerprint !== fingerprint) {
+        return Promise.reject(
+          new Error("Ingest idempotency key was reused with a different fingerprint.")
+        );
+      }
+
+      return existing.state === "in-flight" ? existing.promise : Promise.resolve();
+    }
+
+    if (!this.makeCapacity()) {
+      return Promise.reject(
+        new Error("Ingest idempotency registry is full of in-flight operations.")
+      );
+    }
+
+    const entry: InFlightEntry = {
+      state: "in-flight",
+      sid: operation.sid,
+      fingerprint,
+      promise: Promise.resolve()
+    };
+    const promise = Promise.resolve()
+      .then(task)
+      .then(
+        () => {
+          if (this.entries.get(key) !== entry) {
+            return;
+          }
+
+          this.entries.set(key, {
+            state: "completed",
+            sid: operation.sid,
+            fingerprint,
+            expiresAt: this.readNow() + this.ttlMs
+          });
+        },
+        (error: unknown) => {
+          if (this.entries.get(key) === entry) {
+            this.entries.delete(key);
+          }
+
+          throw error;
+        }
+      );
+    entry.promise = promise;
+    this.entries.set(key, entry);
+    return promise;
+  }
+
+  public clearSession(sid: string): void {
+    assertSessionId(sid);
+
+    for (const [key, entry] of this.entries) {
+      if (entry.sid === sid) {
+        this.entries.delete(key);
+      }
+    }
+  }
+
+  private makeCapacity(): boolean {
+    while (this.entries.size >= this.maxEntries) {
+      const completedKey = [...this.entries].find(([, entry]) => entry.state === "completed")?.[0];
+
+      if (!completedKey) {
+        return false;
+      }
+
+      this.entries.delete(completedKey);
+    }
+
+    return true;
+  }
+
+  private pruneExpired(now: number): void {
+    for (const [key, entry] of this.entries) {
+      if (entry.state === "completed" && entry.expiresAt <= now) {
+        this.entries.delete(key);
+      }
+    }
+  }
+
+  private readNow(): number {
+    const value = this.now();
+
+    if (!Number.isFinite(value)) {
+      throw new Error("Ingest idempotency clock must return a finite number.");
+    }
+
+    return value;
+  }
+}
+
+/**
+ * Runs an ingest request against only the suffix not represented by durable pipeline state.
+ * The optional operation id additionally coalesces concurrent retries and caches their ack.
+ */
+export async function executeIngestOperation<TEvent extends EventWithId>(
+  options: ExecuteIngestOperationOptions<TEvent>
+): Promise<void> {
+  const operationId = normalizeOptionalIngestOperationId(options.operationId);
+  const fingerprint = createIngestOperationFingerprint(
+    options.op,
+    options.events,
+    options.deliveryByEventId
+  );
+  const task = async (): Promise<void> => {
+    const watermark = await options.pipeline.getSequenceWatermark();
+    const suffix = selectContiguousIngestSuffix(options.events, watermark.event);
+
+    if (
+      suffix.length === 0 &&
+      options.op !== "ingestBatchDurably" &&
+      options.op !== "ingestBatchWithDelivery"
+    ) {
+      return;
+    }
+
+    if (options.op === "ingest") {
+      await options.pipeline.ingest(suffix[0]!);
+      return;
+    }
+
+    if (suffix.length > 0 && options.op === "ingestBatchWithDelivery") {
+      if (!options.pipeline.ingestBatchWithDelivery) {
+        throw new Error("Pipeline does not support delivery-aware ingest.");
+      }
+      await options.pipeline.ingestBatchWithDelivery(
+        suffix,
+        selectDeliverySidecar(options.deliveryByEventId!, suffix)
+      );
+    } else if (suffix.length > 0) {
+      await options.pipeline.ingestBatch(suffix);
+    }
+    if (options.op === "ingestBatchDurably" || options.op === "ingestBatchWithDelivery") {
+      await options.pipeline.flush();
+    }
+  };
+
+  if (operationId === undefined) {
+    await task();
+    return;
+  }
+
+  await options.registry.execute(
+    {
+      sid: options.sid,
+      operationId,
+      fingerprint
+    },
+    task
+  );
+}
+
+export function normalizeOptionalIngestOperationId(value: unknown): string | undefined {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  if (typeof value !== "string") {
+    throw new Error("Invalid ingest idempotency operation id.");
+  }
+
+  assertOperationId(value);
+  return value;
+}
+
+export function createIngestOperationFingerprint<TEvent extends EventWithId>(
+  op: IngestOperation,
+  events: readonly TEvent[],
+  deliveryByEventId?: PipelineDeliverySidecar
+): IngestOperationFingerprint {
+  const sequences = parseStrictlyContiguousSequences(events);
+
+  if (op === "ingest" && events.length !== 1) {
+    throw new Error("A single ingest operation must contain exactly one event.");
+  }
+
+  const deliveryFingerprint = serializeDeliverySidecar(op, events, deliveryByEventId);
+
+  return {
+    op,
+    count: events.length,
+    firstId: events[0]!.id,
+    lastId: events[sequences.length - 1]!.id,
+    ...(deliveryFingerprint === undefined ? {} : { deliveryFingerprint })
+  };
+}
+
+/**
+ * Validates a retry batch and selects only events newer than the pipeline watermark.
+ * A batch may begin above the watermark because a durable recorder counter can outlive
+ * an unflushed service-worker buffer; only ordering inside the retry batch must be contiguous.
+ */
+export function selectContiguousIngestSuffix<TEvent extends EventWithId>(
+  events: readonly TEvent[],
+  watermark: number
+): TEvent[] {
+  if (!Number.isSafeInteger(watermark) || watermark < 0) {
+    throw new Error("Pipeline event sequence watermark must be a non-negative safe integer.");
+  }
+
+  const sequences = parseStrictlyContiguousSequences(events);
+  const suffixIndex = sequences.findIndex((sequence) => sequence > watermark);
+
+  if (suffixIndex === -1) {
+    return [];
+  }
+
+  return events.slice(suffixIndex);
+}
+
+function parseStrictlyContiguousSequences<TEvent extends EventWithId>(
+  events: readonly TEvent[]
+): number[] {
+  if (events.length === 0) {
+    throw new Error("Ingest operation must contain at least one event.");
+  }
+
+  const sequences = events.map((event) => parseCanonicalEventSequence(event.id));
+
+  for (let index = 1; index < sequences.length; index += 1) {
+    if (sequences[index] !== sequences[index - 1]! + 1) {
+      throw new Error("Ingest event ids must form a strictly increasing contiguous sequence.");
+    }
+  }
+
+  return sequences;
+}
+
+function parseCanonicalEventSequence(eventId: string): number {
+  const match = EVENT_ID_PATTERN.exec(eventId);
+  const sequence = match?.[1] ? Number(match[1]) : Number.NaN;
+
+  if (!Number.isSafeInteger(sequence) || sequence <= 0) {
+    throw new Error(`Invalid canonical ingest event id: ${eventId}`);
+  }
+
+  return sequence;
+}
+
+function serializeFingerprint(fingerprint: IngestOperationFingerprint): string {
+  if (
+    fingerprint.op !== "ingest" &&
+    fingerprint.op !== "ingestBatch" &&
+    fingerprint.op !== "ingestBatchDurably" &&
+    fingerprint.op !== "ingestBatchWithDelivery"
+  ) {
+    throw new Error("Invalid ingest operation fingerprint type.");
+  }
+
+  const firstSequence = parseCanonicalEventSequence(fingerprint.firstId);
+  const lastSequence = parseCanonicalEventSequence(fingerprint.lastId);
+
+  if (!Number.isSafeInteger(fingerprint.count) || fingerprint.count <= 0) {
+    throw new Error("Ingest operation fingerprint count must be a positive safe integer.");
+  }
+
+  if (lastSequence - firstSequence + 1 !== fingerprint.count) {
+    throw new Error("Ingest operation fingerprint ids do not match its event count.");
+  }
+
+  if (fingerprint.op === "ingest" && fingerprint.count !== 1) {
+    throw new Error("A single ingest fingerprint must describe exactly one event.");
+  }
+
+  if (
+    fingerprint.op === "ingestBatchWithDelivery" &&
+    (typeof fingerprint.deliveryFingerprint !== "string" ||
+      fingerprint.deliveryFingerprint.length === 0)
+  ) {
+    throw new Error("A delivery-aware ingest fingerprint must include its sidecar.");
+  }
+  if (
+    fingerprint.op !== "ingestBatchWithDelivery" &&
+    fingerprint.deliveryFingerprint !== undefined
+  ) {
+    throw new Error("A non-delivery ingest fingerprint cannot include a delivery sidecar.");
+  }
+
+  return JSON.stringify([
+    fingerprint.op,
+    fingerprint.count,
+    fingerprint.firstId,
+    fingerprint.lastId,
+    fingerprint.deliveryFingerprint ?? null
+  ]);
+}
+
+function serializeDeliverySidecar<TEvent extends EventWithId>(
+  op: IngestOperation,
+  events: readonly TEvent[],
+  deliveryByEventId: PipelineDeliverySidecar | undefined
+): string | undefined {
+  if (op !== "ingestBatchWithDelivery") {
+    if (deliveryByEventId && deliveryByEventId.size > 0) {
+      throw new Error("A non-delivery ingest operation cannot include a delivery sidecar.");
+    }
+    return undefined;
+  }
+
+  if (!deliveryByEventId || deliveryByEventId.size === 0) {
+    throw new Error("A delivery-aware ingest operation requires a delivery sidecar.");
+  }
+
+  const eventIds = new Set(events.map((event) => event.id));
+  for (const eventId of deliveryByEventId.keys()) {
+    if (!eventIds.has(eventId)) {
+      throw new Error("Delivery sidecar references an event outside its ingest batch.");
+    }
+  }
+
+  return JSON.stringify(
+    events.map((event) => {
+      const provenance = deliveryByEventId.get(event.id);
+      return provenance ? serializeDeliveryProvenance(event.id, provenance) : null;
+    })
+  );
+}
+
+function serializeDeliveryProvenance(
+  eventId: string,
+  provenance: PipelineDeliveryEventProvenance
+): readonly unknown[] {
+  return [
+    eventId,
+    provenance.tabId,
+    provenance.frameId,
+    provenance.documentId,
+    provenance.batchId,
+    provenance.fingerprint,
+    provenance.eventCount,
+    provenance.eventIndex
+  ];
+}
+
+function selectDeliverySidecar<TEvent extends EventWithId>(
+  deliveryByEventId: PipelineDeliverySidecar,
+  events: readonly TEvent[]
+): PipelineDeliverySidecar {
+  const selected = new Map<string, PipelineDeliveryEventProvenance>();
+  for (const event of events) {
+    const provenance = deliveryByEventId.get(event.id);
+    if (provenance) {
+      selected.set(event.id, provenance);
+    }
+  }
+  return selected;
+}
+
+function serializeOperationKey(sid: string, operationId: string): string {
+  return JSON.stringify([sid, operationId]);
+}
+
+function assertSessionId(sid: string): void {
+  if (sid.length > INGEST_IDEMPOTENCY_MAX_SESSION_ID_LENGTH || !SESSION_ID_PATTERN.test(sid)) {
+    throw new Error("Invalid ingest idempotency session id.");
+  }
+}
+
+function assertOperationId(operationId: string): void {
+  if (
+    operationId.length > INGEST_IDEMPOTENCY_MAX_OPERATION_ID_LENGTH ||
+    !OPERATION_ID_PATTERN.test(operationId)
+  ) {
+    throw new Error("Invalid ingest idempotency operation id.");
+  }
+}
+
+function requirePositiveSafeInteger(value: number, label: string): number {
+  if (!Number.isSafeInteger(value) || value <= 0) {
+    throw new Error(`${label} must be a positive safe integer.`);
+  }
+
+  return value;
+}
+import type {
+  PipelineDeliveryEventProvenance,
+  PipelineDeliverySidecar
+} from "@webblackbox/pipeline";
diff --git a/apps/extension/src/offscreen/pipeline-close.test.ts b/apps/extension/src/offscreen/pipeline-close.test.ts
new file mode 100644
index 0000000..dc628a6
--- /dev/null
+++ b/apps/extension/src/offscreen/pipeline-close.test.ts
@@ -0,0 +1,58 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { closeOffscreenPipelineSession, type ClosableOffscreenPipeline } from "./pipeline-close.js";
+
+function createHarness() {
+  return {
+    pipelines: new Map<string, ClosableOffscreenPipeline>(),
+    stopScreenRecording: vi.fn().mockResolvedValue(undefined),
+    ingestIdempotencyRegistry: { clearSession: vi.fn() },
+    screenRecordingTerminalResults: { clearSession: vi.fn() }
+  };
+}
+
+describe("offscreen pipeline close", () => {
+  it("purges an unknown session idempotently", async () => {
+    const harness = createHarness();
+
+    await closeOffscreenPipelineSession({ sid: "missing", purge: true, ...harness });
+    await closeOffscreenPipelineSession({ sid: "missing", purge: true, ...harness });
+
+    expect(harness.stopScreenRecording).toHaveBeenCalledTimes(2);
+    expect(harness.ingestIdempotencyRegistry.clearSession).toHaveBeenCalledTimes(2);
+    expect(harness.screenRecordingTerminalResults.clearSession).toHaveBeenCalledTimes(2);
+  });
+
+  it("stops recording, closes the pipeline, and clears session registries", async () => {
+    const harness = createHarness();
+    const close = vi.fn().mockResolvedValue(undefined);
+    harness.pipelines.set("session-1", { close });
+
+    await closeOffscreenPipelineSession({ sid: "session-1", purge: true, ...harness });
+
+    expect(harness.stopScreenRecording).toHaveBeenCalledOnce();
+    expect(close).toHaveBeenCalledWith({ purge: true });
+    expect(harness.pipelines.has("session-1")).toBe(false);
+    expect(harness.ingestIdempotencyRegistry.clearSession).toHaveBeenCalledWith("session-1");
+    expect(harness.screenRecordingTerminalResults.clearSession).toHaveBeenCalledWith("session-1");
+  });
+
+  it("still closes and clears when recording teardown reports an error", async () => {
+    const harness = createHarness();
+    const close = vi.fn().mockResolvedValue(undefined);
+    const onScreenRecordingStopError = vi.fn();
+    harness.pipelines.set("session-1", { close });
+    harness.stopScreenRecording.mockRejectedValueOnce(new Error("recorder failed"));
+
+    await closeOffscreenPipelineSession({
+      sid: "session-1",
+      purge: true,
+      ...harness,
+      onScreenRecordingStopError
+    });
+
+    expect(onScreenRecordingStopError).toHaveBeenCalledOnce();
+    expect(close).toHaveBeenCalledOnce();
+    expect(harness.pipelines.has("session-1")).toBe(false);
+  });
+});
diff --git a/apps/extension/src/offscreen/pipeline-close.ts b/apps/extension/src/offscreen/pipeline-close.ts
new file mode 100644
index 0000000..4f68dde
--- /dev/null
+++ b/apps/extension/src/offscreen/pipeline-close.ts
@@ -0,0 +1,35 @@
+export type ClosableOffscreenPipeline = {
+  close(options: { purge: boolean }): void | Promise<void>;
+};
+
+export type SessionRegistry = {
+  clearSession(sid: string): void;
+};
+
+export async function closeOffscreenPipelineSession<
+  TPipeline extends ClosableOffscreenPipeline
+>(input: {
+  sid: string;
+  purge: boolean;
+  pipelines: Map<string, TPipeline>;
+  stopScreenRecording: () => unknown | Promise<unknown>;
+  ingestIdempotencyRegistry: SessionRegistry;
+  screenRecordingTerminalResults: SessionRegistry;
+  onScreenRecordingStopError?: (error: unknown) => void;
+}): Promise<void> {
+  try {
+    await input.stopScreenRecording();
+  } catch (error) {
+    input.onScreenRecordingStopError?.(error);
+  }
+
+  const pipeline = input.pipelines.get(input.sid);
+
+  if (pipeline) {
+    await pipeline.close({ purge: input.purge });
+  }
+
+  input.pipelines.delete(input.sid);
+  input.ingestIdempotencyRegistry.clearSession(input.sid);
+  input.screenRecordingTerminalResults.clearSession(input.sid);
+}
diff --git a/apps/extension/src/offscreen/pipeline-request-coordinator.test.ts b/apps/extension/src/offscreen/pipeline-request-coordinator.test.ts
new file mode 100644
index 0000000..e1cd059
--- /dev/null
+++ b/apps/extension/src/offscreen/pipeline-request-coordinator.test.ts
@@ -0,0 +1,148 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  PipelineRequestCoordinator,
+  runAfterPipelineClose,
+  runTwoPhasePipelineClose
+} from "./pipeline-request-coordinator.js";
+
+function deferred(): { promise: Promise<void>; resolve: () => void } {
+  let resolve!: () => void;
+  const promise = new Promise<void>((resolvePromise) => {
+    resolve = resolvePromise;
+  });
+  return { promise, resolve };
+}
+
+describe("PipelineRequestCoordinator", () => {
+  it("orders delayed start, ingest, and close for one exact sid", async () => {
+    const coordinator = new PipelineRequestCoordinator();
+    const startGate = deferred();
+    const order: string[] = [];
+    const start = coordinator.run("S-one", async () => {
+      order.push("start:begin");
+      await startGate.promise;
+      order.push("start:end");
+    });
+    const ingest = coordinator.run("S-one", async () => {
+      order.push("ingest");
+    });
+    const close = coordinator.run("S-one", async () => {
+      order.push("close");
+    });
+
+    await vi.waitFor(() => expect(order).toEqual(["start:begin"]));
+    startGate.resolve();
+    await Promise.all([start, ingest, close]);
+    expect(order).toEqual(["start:begin", "start:end", "ingest", "close"]);
+    await vi.waitFor(() => expect(coordinator.hasPending("S-one")).toBe(false));
+  });
+
+  it("lets different sessions proceed independently", async () => {
+    const coordinator = new PipelineRequestCoordinator();
+    const firstGate = deferred();
+    const first = coordinator.run("S-first", () => firstGate.promise);
+    const second = vi.fn(async () => "ready");
+
+    await expect(coordinator.run("S-second", second)).resolves.toBe("ready");
+    expect(second).toHaveBeenCalledOnce();
+    firstGate.resolve();
+    await first;
+  });
+
+  it("continues the FIFO after a failed request", async () => {
+    const coordinator = new PipelineRequestCoordinator();
+    const failed = coordinator.run("S-retry", () => Promise.reject(new Error("start failed")));
+    const next = coordinator.run("S-retry", async () => "closed");
+
+    await expect(failed).rejects.toThrow("start failed");
+    await expect(next).resolves.toBe("closed");
+  });
+
+  it("lets a close persist its final reentrant chunk before entering the destructive FIFO", async () => {
+    const coordinator = new PipelineRequestCoordinator();
+    const order: string[] = [];
+
+    await runTwoPhasePipelineClose({
+      coordinator,
+      sid: "S-recording",
+      stopScreenRecording: async () => {
+        order.push("stop:begin");
+        await coordinator.run("S-recording", async () => {
+          order.push("putBlob:final");
+        });
+        await coordinator.run("S-recording", async () => {
+          order.push("ingest:final");
+        });
+        order.push("stop:end");
+      },
+      closePipeline: async () => {
+        order.push("close");
+      }
+    });
+
+    expect(order).toEqual(["stop:begin", "putBlob:final", "ingest:final", "stop:end", "close"]);
+  });
+
+  it("keeps later start and ingest behind a close reservation", async () => {
+    const coordinator = new PipelineRequestCoordinator();
+    const stopGate = deferred();
+    const order: string[] = [];
+    const close = runTwoPhasePipelineClose({
+      coordinator,
+      sid: "S-close-order",
+      stopScreenRecording: async () => {
+        order.push("stop");
+        await stopGate.promise;
+      },
+      closePipeline: async () => {
+        order.push("close");
+      }
+    });
+    const start = runAfterPipelineClose({
+      coordinator,
+      sid: "S-close-order",
+      pendingClose: close,
+      operation: async () => {
+        order.push("start");
+      }
+    });
+    const ingest = runAfterPipelineClose({
+      coordinator,
+      sid: "S-close-order",
+      pendingClose: close,
+      operation: async () => {
+        order.push("ingest");
+      }
+    });
+
+    await vi.waitFor(() => expect(order).toEqual(["stop"]));
+    stopGate.resolve();
+    await Promise.all([close, start, ingest]);
+    expect(order).toEqual(["stop", "close", "start", "ingest"]);
+  });
+
+  it("orders delayed pipeline readiness before screen start and media start before stop", async () => {
+    const pipeline = new PipelineRequestCoordinator();
+    const media = new PipelineRequestCoordinator();
+    const pipelineGate = deferred();
+    const order: string[] = [];
+    const startPipeline = pipeline.run("S-media", async () => {
+      order.push("pipeline:begin");
+      await pipelineGate.promise;
+      order.push("pipeline:end");
+    });
+    const startScreen = media.run("S-media", async () => {
+      await pipeline.run("S-media", async () => undefined);
+      order.push("screen:start");
+    });
+    const stopScreen = media.run("S-media", async () => {
+      order.push("screen:stop");
+    });
+
+    await vi.waitFor(() => expect(order).toEqual(["pipeline:begin"]));
+    pipelineGate.resolve();
+    await Promise.all([startPipeline, startScreen, stopScreen]);
+    expect(order).toEqual(["pipeline:begin", "pipeline:end", "screen:start", "screen:stop"]);
+  });
+});
diff --git a/apps/extension/src/offscreen/pipeline-request-coordinator.ts b/apps/extension/src/offscreen/pipeline-request-coordinator.ts
new file mode 100644
index 0000000..f94681a
--- /dev/null
+++ b/apps/extension/src/offscreen/pipeline-request-coordinator.ts
@@ -0,0 +1,58 @@
+/** Serializes every pipeline operation for one sid while allowing unrelated sessions to proceed. */
+export class PipelineRequestCoordinator {
+  private readonly tails = new Map<string, Promise<void>>();
+
+  public run<Result>(sid: string, operation: () => Promise<Result>): Promise<Result> {
+    if (typeof sid !== "string" || sid.length === 0 || sid.length > 256) {
+      return Promise.reject(new Error("Invalid pipeline request session identity."));
+    }
+
+    const predecessor = this.tails.get(sid) ?? Promise.resolve();
+    const task = predecessor.catch(() => undefined).then(operation);
+    const tail = task.then(
+      () => undefined,
+      () => undefined
+    );
+    this.tails.set(sid, tail);
+    void tail.then(() => {
+      if (this.tails.get(sid) === tail) {
+        this.tails.delete(sid);
+      }
+    });
+    return task;
+  }
+
+  public hasPending(sid: string): boolean {
+    return this.tails.has(sid);
+  }
+}
+
+/**
+ * Stops media outside the data FIFO so its final chunk can re-enter through
+ * putBlob/ingest, then places the destructive close behind that durable tail.
+ */
+export async function runTwoPhasePipelineClose<Result>(options: {
+  coordinator: PipelineRequestCoordinator;
+  sid: string;
+  stopScreenRecording: () => Promise<void>;
+  closePipeline: () => Promise<Result>;
+  onScreenRecordingStopError?: (error: unknown) => void;
+}): Promise<Result> {
+  try {
+    await options.stopScreenRecording();
+  } catch (error) {
+    options.onScreenRecordingStopError?.(error);
+  }
+  return options.coordinator.run(options.sid, options.closePipeline);
+}
+
+/** Places later work after an already-reserved close, preserving arrival order. */
+export async function runAfterPipelineClose<Result>(options: {
+  coordinator: PipelineRequestCoordinator;
+  sid: string;
+  pendingClose: Promise<unknown> | undefined;
+  operation: () => Promise<Result>;
+}): Promise<Result> {
+  await options.pendingClose?.catch(() => undefined);
+  return options.coordinator.run(options.sid, options.operation);
+}
diff --git a/apps/extension/src/offscreen/pipeline-start-identity.test.ts b/apps/extension/src/offscreen/pipeline-start-identity.test.ts
new file mode 100644
index 0000000..4b5836f
--- /dev/null
+++ b/apps/extension/src/offscreen/pipeline-start-identity.test.ts
@@ -0,0 +1,77 @@
+import {
+  DEFAULT_CAPTURE_POLICY,
+  type CapturePolicy,
+  type SessionMetadata
+} from "@webblackbox/protocol";
+import { describe, expect, it } from "vitest";
+
+import {
+  assertMatchingPipelineStartIdentity,
+  createPipelineStartIdentity
+} from "./pipeline-start-identity.js";
+
+const session: SessionMetadata = {
+  sid: "S-1767225600001-start",
+  tabId: 7,
+  startedAt: 1_767_225_600_001,
+  mode: "lite",
+  url: "https://app.example",
+  tags: []
+};
+
+const policy: CapturePolicy = {
+  ...DEFAULT_CAPTURE_POLICY,
+  redaction: {
+    ...DEFAULT_CAPTURE_POLICY.redaction,
+    redactHeaders: ["authorization"]
+  }
+};
+
+describe("pipeline start identity", () => {
+  it("is stable across plain-object key order", () => {
+    const first = createPipelineStartIdentity({ sid: session.sid, session, capturePolicy: policy });
+    const reordered = createPipelineStartIdentity({
+      capturePolicy: { ...policy, categories: { ...policy.categories } },
+      session: { ...session },
+      sid: session.sid
+    });
+
+    expect(reordered).toBe(first);
+    expect(
+      createPipelineStartIdentity({
+        sid: session.sid,
+        session: {
+          ...session,
+          url: "https://app.example/after-navigation",
+          title: "Updated title",
+          tags: ["triaged"],
+          endedAt: session.startedAt + 1_000
+        },
+        capturePolicy: policy
+      })
+    ).toBe(first);
+  });
+
+  it("fails closed when a surviving pipeline has a stale policy contract", () => {
+    const first = createPipelineStartIdentity({ sid: session.sid, session, capturePolicy: policy });
+    const stricter = createPipelineStartIdentity({
+      sid: session.sid,
+      session,
+      capturePolicy: {
+        ...policy,
+        categories: { ...policy.categories, dom: "off" }
+      }
+    });
+
+    expect(stricter).not.toBe(first);
+    expect(() => assertMatchingPipelineStartIdentity(session.sid, first, stricter)).toThrow(
+      /contract changed/
+    );
+  });
+
+  it("rejects a request/session identity mismatch", () => {
+    expect(() => createPipelineStartIdentity({ sid: "S-1767225600001-other", session })).toThrow(
+      /does not match/
+    );
+  });
+});
diff --git a/apps/extension/src/offscreen/pipeline-start-identity.ts b/apps/extension/src/offscreen/pipeline-start-identity.ts
new file mode 100644
index 0000000..806d09f
--- /dev/null
+++ b/apps/extension/src/offscreen/pipeline-start-identity.ts
@@ -0,0 +1,97 @@
+import type { CapturePolicy, RedactionProfile, SessionMetadata } from "@webblackbox/protocol";
+
+export type PipelineStartIdentityInput = Readonly<{
+  sid: string;
+  session: SessionMetadata;
+  redactionProfile?: RedactionProfile;
+  capturePolicy?: CapturePolicy;
+}>;
+
+/** Canonicalizes the full immutable pipeline start contract for exact reconnect validation. */
+export function createPipelineStartIdentity(input: PipelineStartIdentityInput): string {
+  if (input.sid.length === 0 || input.session.sid !== input.sid) {
+    throw new Error("Pipeline start session identity does not match its request.");
+  }
+
+  return canonicalJson({
+    sid: input.sid,
+    session: {
+      sid: input.session.sid,
+      tabId: input.session.tabId,
+      startedAt: input.session.startedAt,
+      mode: input.session.mode
+    },
+    redactionProfile: input.redactionProfile,
+    capturePolicy: input.capturePolicy
+  });
+}
+
+export function assertMatchingPipelineStartIdentity(
+  sid: string,
+  existing: string | undefined,
+  candidate: string
+): void {
+  if (existing !== candidate) {
+    throw new Error(`Pipeline start contract changed for surviving session: ${sid}`);
+  }
+}
+
+function canonicalJson(value: unknown): string {
+  const seen = new WeakSet<object>();
+  let entries = 0;
+
+  const visit = (candidate: unknown, depth: number): unknown => {
+    if (depth > 32 || entries > 20_000) {
+      throw new Error("Pipeline start identity exceeds canonicalization limits.");
+    }
+    if (candidate === null || typeof candidate === "string" || typeof candidate === "boolean") {
+      return candidate;
+    }
+    if (typeof candidate === "number") {
+      if (!Number.isFinite(candidate)) {
+        throw new Error("Pipeline start identity contains a non-finite number.");
+      }
+      return candidate;
+    }
+    if (candidate === undefined) {
+      return undefined;
+    }
+    if (typeof candidate !== "object") {
+      throw new Error("Pipeline start identity contains a non-serializable value.");
+    }
+    if (seen.has(candidate)) {
+      throw new Error("Pipeline start identity contains a cycle.");
+    }
+    seen.add(candidate);
+    entries += 1;
+
+    try {
+      if (Array.isArray(candidate)) {
+        return candidate.map((entry) => {
+          const normalized = visit(entry, depth + 1);
+          if (normalized === undefined) {
+            throw new Error("Pipeline start identity contains an undefined array entry.");
+          }
+          return normalized;
+        });
+      }
+
+      const prototype = Object.getPrototypeOf(candidate);
+      if (prototype !== Object.prototype && prototype !== null) {
+        throw new Error("Pipeline start identity contains a non-plain object.");
+      }
+      const normalized: Record<string, unknown> = {};
+      for (const key of Object.keys(candidate).sort()) {
+        const entry = visit((candidate as Record<string, unknown>)[key], depth + 1);
+        if (entry !== undefined) {
+          normalized[key] = entry;
+        }
+      }
+      return normalized;
+    } finally {
+      seen.delete(candidate);
+    }
+  };
+
+  return JSON.stringify(visit(value, 0));
+}
diff --git a/apps/extension/src/offscreen/pipeline-storage.test.ts b/apps/extension/src/offscreen/pipeline-storage.test.ts
new file mode 100644
index 0000000..19b3313
--- /dev/null
+++ b/apps/extension/src/offscreen/pipeline-storage.test.ts
@@ -0,0 +1,111 @@
+import "fake-indexeddb/auto";
+
+import {
+  EncryptedPipelineStorage,
+  IndexedDbPipelineStorage,
+  getOrCreateIndexedDbPipelineStorageKey,
+  type StoredBlob,
+  type StoredChunk
+} from "@webblackbox/pipeline";
+import type { SessionMetadata } from "@webblackbox/protocol";
+import { describe, expect, it } from "vitest";
+
+import {
+  EXTENSION_PIPELINE_DATABASE,
+  EXTENSION_PIPELINE_KEY_PURPOSE,
+  EXTENSION_PIPELINE_KEYRING_DATABASE,
+  LEGACY_PLAINTEXT_PIPELINE_DATABASE,
+  getExtensionPipelineStorage
+} from "./pipeline-storage.js";
+
+const SESSION: SessionMetadata = {
+  sid: "S-extension-at-rest-test",
+  tabId: 1,
+  startedAt: 1,
+  mode: "full",
+  url: "https://example.test/",
+  tags: []
+};
+
+function createChunk(text: string): StoredChunk {
+  const bytes = new TextEncoder().encode(text);
+
+  return {
+    sid: SESSION.sid,
+    meta: {
+      chunkId: "C-extension-at-rest",
+      seq: 1,
+      tStart: 1,
+      tEnd: 1,
+      monoStart: 1,
+      monoEnd: 1,
+      eventCount: 1,
+      byteLength: bytes.byteLength,
+      codec: "none",
+      sha256: "a".repeat(64)
+    },
+    bytes
+  };
+}
+
+function createBlob(text: string): StoredBlob {
+  const bytes = new TextEncoder().encode(text);
+
+  return {
+    hash: "b".repeat(64),
+    mime: "text/plain",
+    size: bytes.byteLength,
+    bytes,
+    createdAt: 1,
+    refCount: 1
+  };
+}
+
+describe("extension offscreen pipeline storage", () => {
+  it("purges legacy plaintext, encrypts payloads, and recovers the persisted key", async () => {
+    const eventSecret = "EXTENSION_EVENT_SECRET";
+    const blobSecret = "EXTENSION_BLOB_SECRET";
+    const legacy = new IndexedDbPipelineStorage(LEGACY_PLAINTEXT_PIPELINE_DATABASE);
+    await legacy.putSession(SESSION);
+    await legacy.putChunk(createChunk("LEGACY_PLAINTEXT_EVENT"));
+
+    const storage = await getExtensionPipelineStorage();
+    await storage.putSession(SESSION);
+    await storage.putChunk(createChunk(eventSecret));
+    await storage.putBlob(createBlob(blobSecret), SESSION.sid);
+
+    const legacyAfterPurge = new IndexedDbPipelineStorage(LEGACY_PLAINTEXT_PIPELINE_DATABASE);
+    expect(await legacyAfterPurge.getSession(SESSION.sid)).toBeUndefined();
+
+    const rawStorage = new IndexedDbPipelineStorage(EXTENSION_PIPELINE_DATABASE);
+    const rawChunk = await rawStorage.getChunk(SESSION.sid, "C-extension-at-rest");
+    const rawBlob = await rawStorage.getBlob("b".repeat(64));
+    expect(new TextDecoder().decode(rawChunk?.bytes ?? new Uint8Array())).not.toContain(
+      eventSecret
+    );
+    expect(new TextDecoder().decode(rawBlob?.bytes ?? new Uint8Array())).not.toContain(blobSecret);
+
+    const recoveredKey = await getOrCreateIndexedDbPipelineStorageKey({
+      databaseName: EXTENSION_PIPELINE_KEYRING_DATABASE,
+      purpose: EXTENSION_PIPELINE_KEY_PURPOSE
+    });
+    const restartedStorage = new EncryptedPipelineStorage(
+      new IndexedDbPipelineStorage(EXTENSION_PIPELINE_DATABASE),
+      { key: recoveredKey.key }
+    );
+
+    expect(recoveredKey.created).toBe(false);
+    await restartedStorage.assertReady();
+    expect(
+      new TextDecoder().decode(
+        (await restartedStorage.getChunk(SESSION.sid, "C-extension-at-rest"))?.bytes ??
+          new Uint8Array()
+      )
+    ).toBe(eventSecret);
+    expect(
+      new TextDecoder().decode(
+        (await restartedStorage.getBlob("b".repeat(64)))?.bytes ?? new Uint8Array()
+      )
+    ).toBe(blobSecret);
+  });
+});
diff --git a/apps/extension/src/offscreen/pipeline-storage.ts b/apps/extension/src/offscreen/pipeline-storage.ts
new file mode 100644
index 0000000..abc6205
--- /dev/null
+++ b/apps/extension/src/offscreen/pipeline-storage.ts
@@ -0,0 +1,49 @@
+import {
+  EncryptedPipelineStorage,
+  IndexedDbPipelineStorage,
+  deleteIndexedDbDatabase,
+  getOrCreateIndexedDbPipelineStorageKey,
+  type PipelineStorage
+} from "@webblackbox/pipeline";
+
+export const EXTENSION_PIPELINE_DATABASE = "webblackbox-flight-recorder-encrypted-v1";
+export const EXTENSION_PIPELINE_KEYRING_DATABASE = "webblackbox-flight-recorder-keyring-v1";
+export const LEGACY_PLAINTEXT_PIPELINE_DATABASE = "webblackbox-flight-recorder";
+export const EXTENSION_PIPELINE_KEY_PURPOSE = "webblackbox-extension:pipeline-payload:aes-gcm:v1";
+
+let storagePromise: Promise<PipelineStorage> | null = null;
+
+/**
+ * Returns the shared encrypted storage used by all offscreen pipelines.
+ *
+ * The non-extractable key survives offscreen/service-worker restarts in a
+ * purpose-specific IndexedDB keyring. If that key is newly created, any data
+ * database that may contain legacy plaintext or payloads encrypted with a lost
+ * key is purged before it is opened.
+ */
+export function getExtensionPipelineStorage(): Promise<PipelineStorage> {
+  storagePromise ??= initializeExtensionPipelineStorage();
+  return storagePromise;
+}
+
+async function initializeExtensionPipelineStorage(): Promise<PipelineStorage> {
+  await deleteIndexedDbDatabase(LEGACY_PLAINTEXT_PIPELINE_DATABASE);
+
+  const managedKey = await getOrCreateIndexedDbPipelineStorageKey({
+    databaseName: EXTENSION_PIPELINE_KEYRING_DATABASE,
+    purpose: EXTENSION_PIPELINE_KEY_PURPOSE
+  });
+
+  if (managedKey.created) {
+    await deleteIndexedDbDatabase(EXTENSION_PIPELINE_DATABASE);
+  }
+
+  const storage = new EncryptedPipelineStorage(
+    new IndexedDbPipelineStorage(EXTENSION_PIPELINE_DATABASE),
+    {
+      key: managedKey.key
+    }
+  );
+  await storage.assertReady();
+  return storage;
+}
diff --git a/apps/extension/src/offscreen/runtime-port.test.ts b/apps/extension/src/offscreen/runtime-port.test.ts
new file mode 100644
index 0000000..9e2ceba
--- /dev/null
+++ b/apps/extension/src/offscreen/runtime-port.test.ts
@@ -0,0 +1,116 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { PortDisconnectHandler, PortLike, PortMessageHandler } from "../shared/chrome-api.js";
+import { ResilientRuntimePort } from "./runtime-port.js";
+
+class FakePort implements PortLike {
+  public readonly name = "webblackbox:offscreen";
+
+  public readonly messages: unknown[] = [];
+
+  private readonly messageHandlers = new Set<PortMessageHandler>();
+
+  private readonly disconnectHandlers = new Set<PortDisconnectHandler>();
+
+  public readonly onMessage = {
+    addListener: (handler: PortMessageHandler) => this.messageHandlers.add(handler),
+    removeListener: (handler: PortMessageHandler) => this.messageHandlers.delete(handler)
+  };
+
+  public readonly onDisconnect = {
+    addListener: (handler: PortDisconnectHandler) => this.disconnectHandlers.add(handler),
+    removeListener: (handler: PortDisconnectHandler) => this.disconnectHandlers.delete(handler)
+  };
+
+  public postMessage(message: unknown): void {
+    this.messages.push(message);
+  }
+
+  public emitMessage(message: unknown): void {
+    for (const handler of this.messageHandlers) {
+      handler(message);
+    }
+  }
+
+  public emitDisconnect(): void {
+    for (const handler of [...this.disconnectHandlers]) {
+      handler();
+    }
+  }
+}
+
+describe("ResilientRuntimePort", () => {
+  it("reconnects after a service-worker port disconnect before the safety deadline", async () => {
+    vi.useFakeTimers();
+    const first = new FakePort();
+    const second = new FakePort();
+    const ports = [first, second];
+    const onMessage = vi.fn();
+    const onConnected = vi.fn();
+    const onDisconnected = vi.fn();
+    const onDisconnectDeadline = vi.fn();
+    const manager = new ResilientRuntimePort({
+      connect: () => ports.shift() ?? new FakePort(),
+      onMessage,
+      onConnected,
+      onDisconnected,
+      onDisconnectDeadline,
+      reconnectInitialMs: 250,
+      reconnectMaxMs: 1_000,
+      disconnectDeadlineMs: 3_000
+    });
+
+    manager.start();
+    expect(onConnected).toHaveBeenCalledTimes(1);
+    first.emitMessage({ ready: true });
+    expect(onMessage).toHaveBeenCalledWith({ ready: true });
+
+    first.emitDisconnect();
+    expect(onDisconnected).toHaveBeenCalledTimes(1);
+    expect(manager.post({ lost: false })).toBe(false);
+
+    await vi.advanceTimersByTimeAsync(250);
+    expect(onConnected).toHaveBeenCalledTimes(2);
+    expect(manager.post({ recovered: true })).toBe(true);
+    expect(second.messages).toContainEqual({ recovered: true });
+    await vi.advanceTimersByTimeAsync(3_000);
+    expect(onDisconnectDeadline).not.toHaveBeenCalled();
+    manager.stop();
+    vi.useRealTimers();
+  });
+
+  it("fires one fail-closed deadline while reconnect attempts remain bounded", async () => {
+    vi.useFakeTimers();
+    const first = new FakePort();
+    let attempts = 0;
+    const onDisconnectDeadline = vi.fn();
+    const manager = new ResilientRuntimePort({
+      connect: () => {
+        attempts += 1;
+        if (attempts === 1) {
+          return first;
+        }
+        throw new Error("worker unavailable");
+      },
+      onMessage: vi.fn(),
+      onConnected: vi.fn(),
+      onDisconnected: vi.fn(),
+      onDisconnectDeadline,
+      reconnectInitialMs: 100,
+      reconnectMaxMs: 400,
+      disconnectDeadlineMs: 1_000
+    });
+
+    manager.start();
+    first.emitDisconnect();
+    await vi.advanceTimersByTimeAsync(1_000);
+
+    expect(onDisconnectDeadline).toHaveBeenCalledTimes(1);
+    expect(attempts).toBeGreaterThan(1);
+    expect(attempts).toBeLessThanOrEqual(5);
+    await vi.advanceTimersByTimeAsync(2_000);
+    expect(onDisconnectDeadline).toHaveBeenCalledTimes(1);
+    manager.stop();
+    vi.useRealTimers();
+  });
+});
diff --git a/apps/extension/src/offscreen/runtime-port.ts b/apps/extension/src/offscreen/runtime-port.ts
new file mode 100644
index 0000000..5d286b2
--- /dev/null
+++ b/apps/extension/src/offscreen/runtime-port.ts
@@ -0,0 +1,166 @@
+import type { PortLike } from "../shared/chrome-api.js";
+
+export type ResilientRuntimePortOptions = {
+  connect: () => PortLike;
+  onMessage: (message: unknown) => void;
+  onConnected: () => void;
+  onDisconnected: () => void;
+  onDisconnectDeadline: () => void;
+  reconnectInitialMs: number;
+  reconnectMaxMs: number;
+  disconnectDeadlineMs: number;
+};
+
+type BoundPort = {
+  port: PortLike;
+  onMessage: (message: unknown) => void;
+  onDisconnect: () => void;
+};
+
+/** Keeps an offscreen document attached across service-worker restarts. */
+export class ResilientRuntimePort {
+  private bound: BoundPort | null = null;
+
+  private reconnectTimer: ReturnType<typeof setTimeout> | null = null;
+
+  private disconnectDeadlineTimer: ReturnType<typeof setTimeout> | null = null;
+
+  private reconnectAttempts = 0;
+
+  private stopped = true;
+
+  public constructor(private readonly options: ResilientRuntimePortOptions) {}
+
+  public start(): void {
+    if (!this.stopped) {
+      return;
+    }
+
+    this.stopped = false;
+    this.connect();
+  }
+
+  public stop(): void {
+    this.stopped = true;
+    this.clearReconnectTimer();
+    this.clearDisconnectDeadline();
+    this.reconnectAttempts = 0;
+
+    const bound = this.bound;
+    if (!bound) {
+      return;
+    }
+
+    this.unbind(bound);
+    this.bound = null;
+    try {
+      bound.port.disconnect?.();
+    } catch {
+      void 0;
+    }
+  }
+
+  public post(message: unknown): boolean {
+    const bound = this.bound;
+    if (!bound) {
+      return false;
+    }
+
+    try {
+      bound.port.postMessage(message);
+      return true;
+    } catch {
+      this.handleDisconnect(bound);
+      return false;
+    }
+  }
+
+  private connect(): void {
+    if (this.stopped || this.bound) {
+      return;
+    }
+
+    try {
+      const port = this.options.connect();
+      const bound: BoundPort = {
+        port,
+        onMessage: (message) => this.options.onMessage(message),
+        onDisconnect: () => this.handleDisconnect(bound)
+      };
+      port.onMessage.addListener(bound.onMessage);
+      port.onDisconnect.addListener(bound.onDisconnect);
+      this.bound = bound;
+      this.reconnectAttempts = 0;
+      this.clearReconnectTimer();
+      this.clearDisconnectDeadline();
+      this.options.onConnected();
+    } catch {
+      this.scheduleReconnect();
+    }
+  }
+
+  private handleDisconnect(bound: BoundPort): void {
+    if (this.bound !== bound) {
+      return;
+    }
+
+    this.unbind(bound);
+    this.bound = null;
+    this.options.onDisconnected();
+    this.scheduleDisconnectDeadline();
+    this.scheduleReconnect();
+  }
+
+  private unbind(bound: BoundPort): void {
+    bound.port.onMessage.removeListener(bound.onMessage);
+    bound.port.onDisconnect.removeListener(bound.onDisconnect);
+  }
+
+  private scheduleReconnect(): void {
+    if (this.stopped || this.bound || this.reconnectTimer !== null) {
+      return;
+    }
+
+    const exponent = Math.min(this.reconnectAttempts, 8);
+    const delay = Math.min(
+      this.options.reconnectInitialMs * 2 ** exponent,
+      this.options.reconnectMaxMs
+    );
+    this.reconnectAttempts += 1;
+    this.reconnectTimer = setTimeout(() => {
+      this.reconnectTimer = null;
+      this.connect();
+    }, delay);
+  }
+
+  private scheduleDisconnectDeadline(): void {
+    if (this.stopped || this.disconnectDeadlineTimer !== null) {
+      return;
+    }
+
+    this.disconnectDeadlineTimer = setTimeout(() => {
+      this.disconnectDeadlineTimer = null;
+      if (!this.bound && !this.stopped) {
+        this.options.onDisconnectDeadline();
+      }
+    }, this.options.disconnectDeadlineMs);
+  }
+
+  private clearReconnectTimer(): void {
+    if (this.reconnectTimer === null) {
+      return;
+    }
+
+    clearTimeout(this.reconnectTimer);
+    this.reconnectTimer = null;
+  }
+
+  private clearDisconnectDeadline(): void {
+    if (this.disconnectDeadlineTimer === null) {
+      return;
+    }
+
+    clearTimeout(this.disconnectDeadlineTimer);
+    this.disconnectDeadlineTimer = null;
+  }
+}
diff --git a/apps/extension/src/offscreen/screen-recording-port.test.ts b/apps/extension/src/offscreen/screen-recording-port.test.ts
new file mode 100644
index 0000000..d804dea
--- /dev/null
+++ b/apps/extension/src/offscreen/screen-recording-port.test.ts
@@ -0,0 +1,205 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  ScreenRecordingChunkDeliveryRegistry,
+  parseActiveScreenRecordingSessionIds,
+  pauseScreenRecordingForPortDisconnect,
+  quiesceExpectedScreenRecordingForStop,
+  quiesceScreenRecordingForStop,
+  reconcileScreenRecordingsWithWorkerSessions,
+  resumeScreenRecordingAfterPortReconnect,
+  type PortBoundScreenRecording
+} from "./screen-recording-port.js";
+
+const CHUNK_HASH = "a".repeat(64);
+
+function createRecording(): PortBoundScreenRecording & {
+  recorder: PortBoundScreenRecording["recorder"] & { state: RecordingState };
+} {
+  const tracks = [{ enabled: true }, { enabled: true }] as MediaStreamTrack[];
+  const recorder = {
+    state: "recording" as RecordingState,
+    pause: vi.fn(() => {
+      recorder.state = "paused";
+    }),
+    resume: vi.fn(() => {
+      recorder.state = "recording";
+    })
+  };
+
+  return {
+    recorder,
+    stream: {
+      getTracks: () => tracks
+    },
+    stopping: false,
+    pausedForPortDisconnect: false
+  };
+}
+
+describe("screen recording port lifecycle", () => {
+  it("retains and replays an exact chunk until the worker durably acknowledges it", async () => {
+    const registry = new ScreenRecordingChunkDeliveryRegistry();
+    const message = {
+      kind: "offscreen.screen-recording-chunk" as const,
+      sid: "S-durable",
+      recordingId: "VR-durable",
+      index: 3,
+      mime: "video/webm",
+      bytes: new Uint8Array([1, 2, 3]),
+      size: 3,
+      startOffsetMs: 10,
+      endOffsetMs: 20,
+      durationMs: 10
+    };
+    const delivery = registry.track(message);
+    const post = vi.fn(() => true);
+
+    expect(registry.replay(post)).toBe(1);
+    expect(registry.replay(post)).toBe(1);
+    expect(post).toHaveBeenNthCalledWith(1, message);
+    expect(post).toHaveBeenNthCalledWith(2, message);
+    expect(registry.size).toBe(1);
+    expect(
+      registry.acknowledge({
+        kind: "sw.screen-recording-chunk-ack",
+        sid: message.sid,
+        recordingId: message.recordingId,
+        index: message.index,
+        size: 4,
+        chunkId: CHUNK_HASH
+      })
+    ).toBe(false);
+    expect(registry.size).toBe(1);
+
+    expect(
+      registry.acknowledge({
+        kind: "sw.screen-recording-chunk-ack",
+        sid: message.sid,
+        recordingId: message.recordingId,
+        index: message.index,
+        size: message.size,
+        chunkId: CHUNK_HASH
+      })
+    ).toBe(true);
+    await expect(delivery).resolves.toMatchObject({ chunkId: CHUNK_HASH });
+    expect(registry.size).toBe(0);
+  });
+
+  it("rejects retained chunks explicitly when durable delivery times out", async () => {
+    const registry = new ScreenRecordingChunkDeliveryRegistry();
+    const delivery = registry.track({
+      kind: "offscreen.screen-recording-chunk",
+      sid: "S-timeout",
+      recordingId: "VR-timeout",
+      index: 0,
+      mime: "video/webm",
+      bytes: new Uint8Array([9]),
+      size: 1
+    });
+
+    expect(
+      registry.failRecording("S-timeout", "VR-timeout", new Error("durable ack timeout"))
+    ).toBe(1);
+    await expect(delivery).rejects.toThrow("durable ack timeout");
+    expect(registry.size).toBe(0);
+  });
+
+  it("accepts only an authoritative bounded list of active session ids", () => {
+    expect(
+      parseActiveScreenRecordingSessionIds({
+        runtimeStateRestored: true,
+        sessions: [
+          { sid: "S-active-1", active: true, tabId: 1 },
+          { sid: "S-active-2", active: true, tabId: 2 }
+        ]
+      })
+    ).toEqual(new Set(["S-active-1", "S-active-2"]));
+    expect(
+      parseActiveScreenRecordingSessionIds({
+        runtimeStateRestored: false,
+        sessions: [{ sid: "S-active-1", active: true }]
+      })
+    ).toBeNull();
+    expect(
+      parseActiveScreenRecordingSessionIds({
+        runtimeStateRestored: true,
+        sessions: [{ sid: "S-stopped", active: false }]
+      })
+    ).toBeNull();
+    expect(
+      parseActiveScreenRecordingSessionIds({
+        runtimeStateRestored: true,
+        sessions: [{ sid: "", active: true }]
+      })
+    ).toBeNull();
+    expect(parseActiveScreenRecordingSessionIds({ sid: "S-not-an-array" })).toBeNull();
+  });
+
+  it("disables tracks and pauses until the worker port reconnects", () => {
+    const recording = createRecording();
+
+    expect(pauseScreenRecordingForPortDisconnect(recording)).toBe(true);
+    expect(recording.recorder.pause).toHaveBeenCalledOnce();
+    expect(recording.stream.getTracks().every((track) => !track.enabled)).toBe(true);
+    expect(resumeScreenRecordingAfterPortReconnect(recording)).toBe(true);
+    expect(recording.recorder.resume).toHaveBeenCalledOnce();
+    expect(recording.stream.getTracks().every((track) => track.enabled)).toBe(true);
+  });
+
+  it("fails closed when an inactive recorder cannot be suspended", () => {
+    const recording = createRecording();
+    recording.recorder.state = "inactive";
+
+    expect(pauseScreenRecordingForPortDisconnect(recording)).toBe(false);
+    expect(recording.stream.getTracks().every((track) => !track.enabled)).toBe(true);
+  });
+
+  it("quiesces pixel production without destroying the recorder before durable stop", () => {
+    const recording = { ...createRecording(), quiescedForStop: false };
+
+    expect(quiesceScreenRecordingForStop(recording)).toBe(true);
+    expect(recording.quiescedForStop).toBe(true);
+    expect(recording.recorder.state).toBe("paused");
+    expect(recording.stream.getTracks().every((track) => !track.enabled)).toBe(true);
+  });
+
+  it("quiesces the actual recorder before rejecting a stale expected identity", () => {
+    const recording = {
+      ...createRecording(),
+      recordingId: "VR-actual",
+      quiescedForStop: false
+    };
+
+    expect(() => quiesceExpectedScreenRecordingForStop(recording, "VR-stale")).toThrow(
+      "identity changed"
+    );
+    expect(recording.quiescedForStop).toBe(true);
+    expect(recording.recorder.state).toBe("paused");
+    expect(recording.stream.getTracks().every((track) => !track.enabled)).toBe(true);
+    expect(quiesceExpectedScreenRecordingForStop(undefined, "VR-missing")).toBe(true);
+  });
+
+  it("resumes only recordings claimed by the restored worker handshake", () => {
+    const claimed = { ...createRecording(), sid: "S-claimed" };
+    const unclaimed = { ...createRecording(), sid: "S-unclaimed" };
+    pauseScreenRecordingForPortDisconnect(claimed);
+    pauseScreenRecordingForPortDisconnect(unclaimed);
+
+    const failures = reconcileScreenRecordingsWithWorkerSessions(
+      [claimed, unclaimed],
+      new Set(["S-claimed"])
+    );
+
+    expect(claimed.recorder.resume).toHaveBeenCalledOnce();
+    expect(claimed.stream.getTracks().every((track) => track.enabled)).toBe(true);
+    expect(unclaimed.recorder.resume).not.toHaveBeenCalled();
+    expect(unclaimed.stream.getTracks().every((track) => !track.enabled)).toBe(true);
+    expect(failures).toEqual([
+      {
+        recording: unclaimed,
+        reason: "service-worker-session-not-active"
+      }
+    ]);
+  });
+});
diff --git a/apps/extension/src/offscreen/screen-recording-port.ts b/apps/extension/src/offscreen/screen-recording-port.ts
new file mode 100644
index 0000000..c158df6
--- /dev/null
+++ b/apps/extension/src/offscreen/screen-recording-port.ts
@@ -0,0 +1,316 @@
+import type {
+  OffscreenScreenRecordingChunkMessage,
+  ScreenRecordingChunkAckMessage
+} from "../shared/messages.js";
+
+const SCREEN_RECORDING_CHUNK_DELIVERY_MAX_PENDING = 64;
+const SCREEN_RECORDING_CHUNK_MAX_BYTES = 64 * 1024 * 1024;
+const SCREEN_RECORDING_CHUNK_HASH_PATTERN = /^[a-f0-9]{64}$/u;
+
+export type PortBoundScreenRecording = {
+  recorder: Pick<MediaRecorder, "state" | "pause" | "resume">;
+  stream: Pick<MediaStream, "getTracks">;
+  stopping: boolean;
+  pausedForPortDisconnect: boolean;
+};
+
+export type SessionBoundScreenRecording = PortBoundScreenRecording & { sid: string };
+export type StopQuiescedScreenRecording = PortBoundScreenRecording & { quiescedForStop: boolean };
+
+export type ScreenRecordingHandshakeFailure<TRecording extends SessionBoundScreenRecording> = {
+  recording: TRecording;
+  reason: "service-worker-session-not-active" | "service-worker-reconnect-failed";
+};
+
+type PendingScreenRecordingChunkDelivery = {
+  readonly message: OffscreenScreenRecordingChunkMessage;
+  readonly promise: Promise<ScreenRecordingChunkAckMessage>;
+  readonly resolve: (ack: ScreenRecordingChunkAckMessage) => void;
+  readonly reject: (error: Error) => void;
+};
+
+/** Retains exact video chunks until the worker proves their durable pipeline commit. */
+export class ScreenRecordingChunkDeliveryRegistry {
+  private readonly pending = new Map<string, PendingScreenRecordingChunkDelivery>();
+
+  public track(
+    message: OffscreenScreenRecordingChunkMessage
+  ): Promise<ScreenRecordingChunkAckMessage> {
+    assertScreenRecordingChunkMessage(message);
+    const key = screenRecordingChunkDeliveryKey(message.sid, message.recordingId, message.index);
+    const existing = this.pending.get(key);
+
+    if (existing) {
+      if (!sameScreenRecordingChunkMessage(existing.message, message)) {
+        throw new Error(
+          "Screen recording chunk identity was reused with different payload metadata."
+        );
+      }
+      return existing.promise;
+    }
+    if (this.pending.size >= SCREEN_RECORDING_CHUNK_DELIVERY_MAX_PENDING) {
+      throw new Error("Screen recording durable delivery backlog is full.");
+    }
+
+    let resolve!: (ack: ScreenRecordingChunkAckMessage) => void;
+    let reject!: (error: Error) => void;
+    const promise = new Promise<ScreenRecordingChunkAckMessage>((resolvePromise, rejectPromise) => {
+      resolve = resolvePromise;
+      reject = rejectPromise;
+    });
+    this.pending.set(key, { message, promise, resolve, reject });
+    return promise;
+  }
+
+  public acknowledge(raw: unknown): boolean {
+    const ack = parseScreenRecordingChunkAck(raw);
+    if (!ack) {
+      return false;
+    }
+
+    const key = screenRecordingChunkDeliveryKey(ack.sid, ack.recordingId, ack.index);
+    const delivery = this.pending.get(key);
+    if (!delivery || delivery.message.size !== ack.size) {
+      return false;
+    }
+
+    this.pending.delete(key);
+    delivery.resolve(ack);
+    return true;
+  }
+
+  public replay(post: (message: OffscreenScreenRecordingChunkMessage) => boolean): number {
+    let posted = 0;
+    for (const delivery of this.pending.values()) {
+      try {
+        if (post(delivery.message)) {
+          posted += 1;
+        }
+      } catch {
+        // The resilient port reconnect path will invoke replay again.
+      }
+    }
+    return posted;
+  }
+
+  public failRecording(sid: string, recordingId: string, error: Error): number {
+    let failed = 0;
+    for (const [key, delivery] of this.pending) {
+      if (delivery.message.sid !== sid || delivery.message.recordingId !== recordingId) {
+        continue;
+      }
+      this.pending.delete(key);
+      delivery.reject(error);
+      failed += 1;
+    }
+    return failed;
+  }
+
+  public get size(): number {
+    return this.pending.size;
+  }
+}
+
+/** Parses an active-session list only after the current worker has finished state restoration. */
+export function parseActiveScreenRecordingSessionIds(status: unknown): ReadonlySet<string> | null {
+  if (status === null || typeof status !== "object" || Array.isArray(status)) {
+    return null;
+  }
+
+  const record = status as Record<string, unknown>;
+  const sessions = record.sessions;
+  if (
+    record.runtimeStateRestored !== true ||
+    !Array.isArray(sessions) ||
+    sessions.length > 10_000
+  ) {
+    return null;
+  }
+
+  const activeSessionIds = new Set<string>();
+  for (const item of sessions) {
+    if (item === null || typeof item !== "object" || Array.isArray(item)) {
+      return null;
+    }
+
+    const record = item as Record<string, unknown>;
+    if (typeof record.sid !== "string" || record.sid.length === 0 || record.sid.length > 256) {
+      return null;
+    }
+    if (record.active !== true) {
+      return null;
+    }
+    activeSessionIds.add(record.sid);
+  }
+
+  return activeSessionIds;
+}
+
+/** Resumes only recordings claimed by the restored worker and reports every fail-closed stop. */
+export function reconcileScreenRecordingsWithWorkerSessions<
+  TRecording extends SessionBoundScreenRecording
+>(
+  recordings: Iterable<TRecording>,
+  activeSessionIds: ReadonlySet<string>
+): ScreenRecordingHandshakeFailure<TRecording>[] {
+  const failures: ScreenRecordingHandshakeFailure<TRecording>[] = [];
+  for (const recording of recordings) {
+    if (!activeSessionIds.has(recording.sid)) {
+      failures.push({ recording, reason: "service-worker-session-not-active" });
+      continue;
+    }
+    if (!resumeScreenRecordingAfterPortReconnect(recording)) {
+      failures.push({ recording, reason: "service-worker-reconnect-failed" });
+    }
+  }
+  return failures;
+}
+
+/** Suspends sensitive media production while the service worker cannot receive chunks. */
+export function pauseScreenRecordingForPortDisconnect(
+  recording: PortBoundScreenRecording
+): boolean {
+  if (recording.stopping) {
+    return true;
+  }
+
+  for (const track of recording.stream.getTracks()) {
+    track.enabled = false;
+  }
+
+  try {
+    if (recording.recorder.state === "recording") {
+      recording.recorder.pause();
+    } else if (recording.recorder.state !== "paused") {
+      return false;
+    }
+    recording.pausedForPortDisconnect = true;
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/** Pauses pixel production at stop intent without destroying the recorder
+ * before the service worker has persisted its stopping tombstone. */
+export function quiesceScreenRecordingForStop(recording: StopQuiescedScreenRecording): boolean {
+  recording.quiescedForStop = true;
+  return pauseScreenRecordingForPortDisconnect(recording);
+}
+
+export function quiesceExpectedScreenRecordingForStop(
+  recording: (StopQuiescedScreenRecording & { recordingId: string }) | undefined,
+  expectedRecordingId?: string
+): boolean {
+  if (!recording) {
+    return true;
+  }
+
+  const quiesced = quiesceScreenRecordingForStop(recording);
+  if (expectedRecordingId && recording.recordingId !== expectedRecordingId) {
+    throw new Error("Screen recording identity changed while stop quiescence was requested.");
+  }
+  if (!quiesced) {
+    throw new Error("Screen recording could not be quiesced for stop.");
+  }
+  return true;
+}
+
+/** Resumes only recordings that this disconnect path suspended. */
+export function resumeScreenRecordingAfterPortReconnect(
+  recording: PortBoundScreenRecording
+): boolean {
+  if (!recording.pausedForPortDisconnect || recording.stopping) {
+    return true;
+  }
+
+  try {
+    if (recording.recorder.state === "paused") {
+      recording.recorder.resume();
+    } else if (recording.recorder.state !== "recording") {
+      return false;
+    }
+    for (const track of recording.stream.getTracks()) {
+      track.enabled = true;
+    }
+    recording.pausedForPortDisconnect = false;
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function parseScreenRecordingChunkAck(raw: unknown): ScreenRecordingChunkAckMessage | null {
+  if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+    return null;
+  }
+
+  const row = raw as Record<string, unknown>;
+  if (
+    Object.keys(row).some(
+      (key) => !["chunkId", "index", "kind", "recordingId", "sid", "size"].includes(key)
+    ) ||
+    row.kind !== "sw.screen-recording-chunk-ack" ||
+    !isBoundedNonEmptyString(row.sid, 256) ||
+    !isBoundedNonEmptyString(row.recordingId, 256) ||
+    !Number.isSafeInteger(row.index) ||
+    (row.index as number) < 0 ||
+    !Number.isSafeInteger(row.size) ||
+    (row.size as number) <= 0 ||
+    typeof row.chunkId !== "string" ||
+    !SCREEN_RECORDING_CHUNK_HASH_PATTERN.test(row.chunkId)
+  ) {
+    return null;
+  }
+
+  return {
+    kind: "sw.screen-recording-chunk-ack",
+    sid: row.sid,
+    recordingId: row.recordingId,
+    index: row.index as number,
+    size: row.size as number,
+    chunkId: row.chunkId
+  };
+}
+
+function assertScreenRecordingChunkMessage(message: OffscreenScreenRecordingChunkMessage): void {
+  if (
+    message.kind !== "offscreen.screen-recording-chunk" ||
+    !isBoundedNonEmptyString(message.sid, 256) ||
+    !isBoundedNonEmptyString(message.recordingId, 256) ||
+    !Number.isSafeInteger(message.index) ||
+    message.index < 0 ||
+    !isBoundedNonEmptyString(message.mime, 256) ||
+    !(message.bytes instanceof Uint8Array) ||
+    message.bytes.byteLength <= 0 ||
+    message.bytes.byteLength > SCREEN_RECORDING_CHUNK_MAX_BYTES ||
+    message.size !== message.bytes.byteLength
+  ) {
+    throw new Error("Invalid screen recording chunk delivery.");
+  }
+}
+
+function sameScreenRecordingChunkMessage(
+  first: OffscreenScreenRecordingChunkMessage,
+  second: OffscreenScreenRecordingChunkMessage
+): boolean {
+  return (
+    first.sid === second.sid &&
+    first.recordingId === second.recordingId &&
+    first.index === second.index &&
+    first.mime === second.mime &&
+    first.size === second.size &&
+    Object.is(first.startOffsetMs, second.startOffsetMs) &&
+    Object.is(first.endOffsetMs, second.endOffsetMs) &&
+    Object.is(first.durationMs, second.durationMs) &&
+    first.bytes === second.bytes
+  );
+}
+
+function screenRecordingChunkDeliveryKey(sid: string, recordingId: string, index: number): string {
+  return JSON.stringify([sid, recordingId, index]);
+}
+
+function isBoundedNonEmptyString(value: unknown, maxLength: number): value is string {
+  return typeof value === "string" && value.length > 0 && value.length <= maxLength;
+}
diff --git a/apps/extension/src/offscreen/screen-recording-terminal-results.test.ts b/apps/extension/src/offscreen/screen-recording-terminal-results.test.ts
new file mode 100644
index 0000000..9ab30d0
--- /dev/null
+++ b/apps/extension/src/offscreen/screen-recording-terminal-results.test.ts
@@ -0,0 +1,111 @@
+import { describe, expect, it } from "vitest";
+
+import { ScreenRecordingTerminalResultRegistry } from "./screen-recording-terminal-results.js";
+
+type TestStopResult = Readonly<{
+  recordingId: string;
+  mime: string;
+  chunkCount: number;
+  size: number;
+  durationMs: number;
+  reason: string;
+}>;
+
+function result(recordingId: string, chunkCount: number): TestStopResult {
+  return {
+    recordingId,
+    mime: "video/webm;codecs=vp9",
+    chunkCount,
+    size: chunkCount * 1_024,
+    durationMs: chunkCount * 1_000,
+    reason: "requested"
+  };
+}
+
+describe("ScreenRecordingTerminalResultRegistry", () => {
+  it("returns the complete successful result when a stop response is lost and retried", () => {
+    const registry = new ScreenRecordingTerminalResultRegistry<TestStopResult>();
+    const completed = result("VR-response-lost", 7);
+
+    expect(registry.remember("S-session", completed.recordingId, completed)).toBe(completed);
+    expect(registry.get("S-session", completed.recordingId)).toBe(completed);
+    expect(registry.get("S-session", completed.recordingId)).toEqual({
+      recordingId: "VR-response-lost",
+      mime: "video/webm;codecs=vp9",
+      chunkCount: 7,
+      size: 7_168,
+      durationMs: 7_000,
+      reason: "requested"
+    });
+  });
+
+  it("rejects reuse of a completed recording id until its terminal result expires", () => {
+    let now = 1_000;
+    const registry = new ScreenRecordingTerminalResultRegistry<TestStopResult>({
+      ttlMs: 100,
+      now: () => now
+    });
+    const completed = result("VR-completed", 2);
+    registry.remember("S-session", completed.recordingId, completed);
+
+    expect(() => registry.assertStartAllowed("S-session", completed.recordingId)).toThrow(
+      "already completed"
+    );
+
+    now += 101;
+    expect(() => registry.assertStartAllowed("S-session", completed.recordingId)).not.toThrow();
+    expect(registry.get("S-session", completed.recordingId)).toBeUndefined();
+  });
+
+  it("evicts the oldest terminal result at its capacity limit", () => {
+    const registry = new ScreenRecordingTerminalResultRegistry<TestStopResult>({ maxEntries: 2 });
+    registry.remember("S-session", "VR-one", result("VR-one", 1));
+    registry.remember("S-session", "VR-two", result("VR-two", 2));
+    registry.remember("S-session", "VR-three", result("VR-three", 3));
+
+    expect(registry.get("S-session", "VR-one")).toBeUndefined();
+    expect(registry.get("S-session", "VR-two")?.chunkCount).toBe(2);
+    expect(registry.get("S-session", "VR-three")?.chunkCount).toBe(3);
+  });
+
+  it("isolates equal recording ids by session and clears only the closed session", () => {
+    const registry = new ScreenRecordingTerminalResultRegistry<TestStopResult>();
+    const first = result("VR-shared", 1);
+    const second = result("VR-shared", 9);
+    registry.remember("S-one", first.recordingId, first);
+    registry.remember("S-two", second.recordingId, second);
+
+    expect(registry.get("S-one", "VR-shared")).toBe(first);
+    expect(registry.get("S-two", "VR-shared")).toBe(second);
+
+    registry.clearSession("S-one");
+
+    expect(registry.get("S-one", "VR-shared")).toBeUndefined();
+    expect(registry.get("S-two", "VR-shared")).toBe(second);
+  });
+
+  it("keeps the first successful result and rejects mismatched cache keys", () => {
+    const registry = new ScreenRecordingTerminalResultRegistry<TestStopResult>();
+    const first = result("VR-stable", 4);
+    const conflicting = result("VR-stable", 8);
+
+    registry.remember("S-session", first.recordingId, first);
+    expect(registry.remember("S-session", conflicting.recordingId, conflicting)).toBe(first);
+    expect(() => registry.remember("S-session", "VR-other", first)).toThrow("does not match");
+  });
+
+  it("validates registry bounds and its clock", () => {
+    expect(() => new ScreenRecordingTerminalResultRegistry({ ttlMs: 0 })).toThrow(
+      "TTL must be a positive safe integer"
+    );
+    expect(() => new ScreenRecordingTerminalResultRegistry({ maxEntries: 0 })).toThrow(
+      "entry limit must be a positive safe integer"
+    );
+    const registry = new ScreenRecordingTerminalResultRegistry({
+      now: () => Number.NaN
+    });
+    expect(() => registry.get("S-session", "VR-recording")).toThrow(
+      "clock must return a finite number"
+    );
+  });
+});
diff --git a/apps/extension/src/offscreen/screen-recording-terminal-results.ts b/apps/extension/src/offscreen/screen-recording-terminal-results.ts
new file mode 100644
index 0000000..d33b29b
--- /dev/null
+++ b/apps/extension/src/offscreen/screen-recording-terminal-results.ts
@@ -0,0 +1,130 @@
+export const SCREEN_RECORDING_TERMINAL_RESULT_DEFAULT_TTL_MS = 5 * 60_000;
+export const SCREEN_RECORDING_TERMINAL_RESULT_DEFAULT_MAX_ENTRIES = 256;
+
+export type ScreenRecordingTerminalResult = Readonly<{
+  recordingId: string;
+}>;
+
+export type ScreenRecordingTerminalResultRegistryOptions = Readonly<{
+  ttlMs?: number;
+  maxEntries?: number;
+  now?: () => number;
+}>;
+
+type TerminalResultEntry<TResult extends ScreenRecordingTerminalResult> = Readonly<{
+  sid: string;
+  result: TResult;
+  expiresAt: number;
+}>;
+
+/**
+ * Retains successful screen-recording stop results long enough for the service worker to retry a
+ * request whose response was lost. Entries are isolated by session and recording id, expire after
+ * a bounded TTL, and are evicted oldest-first at the global capacity limit.
+ */
+export class ScreenRecordingTerminalResultRegistry<TResult extends ScreenRecordingTerminalResult> {
+  private readonly entries = new Map<string, TerminalResultEntry<TResult>>();
+
+  private readonly ttlMs: number;
+
+  private readonly maxEntries: number;
+
+  private readonly now: () => number;
+
+  public constructor(options: ScreenRecordingTerminalResultRegistryOptions = {}) {
+    this.ttlMs = requirePositiveSafeInteger(
+      options.ttlMs ?? SCREEN_RECORDING_TERMINAL_RESULT_DEFAULT_TTL_MS,
+      "Screen-recording terminal-result TTL"
+    );
+    this.maxEntries = requirePositiveSafeInteger(
+      options.maxEntries ?? SCREEN_RECORDING_TERMINAL_RESULT_DEFAULT_MAX_ENTRIES,
+      "Screen-recording terminal-result entry limit"
+    );
+    this.now = options.now ?? Date.now;
+  }
+
+  public get(sid: string, recordingId: string): TResult | undefined {
+    const now = this.readNow();
+    this.pruneExpired(now);
+    return this.entries.get(serializeKey(sid, recordingId))?.result;
+  }
+
+  public remember(sid: string, recordingId: string, result: TResult): TResult {
+    if (result.recordingId !== recordingId) {
+      throw new Error("Screen-recording terminal result id does not match its cache key.");
+    }
+
+    const now = this.readNow();
+    this.pruneExpired(now);
+    const key = serializeKey(sid, recordingId);
+    const existing = this.entries.get(key);
+
+    if (existing) {
+      return existing.result;
+    }
+
+    this.makeCapacity();
+    this.entries.set(key, {
+      sid,
+      result,
+      expiresAt: now + this.ttlMs
+    });
+    return result;
+  }
+
+  public assertStartAllowed(sid: string, recordingId: string): void {
+    if (this.get(sid, recordingId)) {
+      throw new Error(`Screen recording id was already completed for session: ${sid}`);
+    }
+  }
+
+  public clearSession(sid: string): void {
+    for (const [key, entry] of this.entries) {
+      if (entry.sid === sid) {
+        this.entries.delete(key);
+      }
+    }
+  }
+
+  private makeCapacity(): void {
+    while (this.entries.size >= this.maxEntries) {
+      const oldestKey = this.entries.keys().next().value;
+
+      if (oldestKey === undefined) {
+        return;
+      }
+
+      this.entries.delete(oldestKey);
+    }
+  }
+
+  private pruneExpired(now: number): void {
+    for (const [key, entry] of this.entries) {
+      if (entry.expiresAt <= now) {
+        this.entries.delete(key);
+      }
+    }
+  }
+
+  private readNow(): number {
+    const value = this.now();
+
+    if (!Number.isFinite(value)) {
+      throw new Error("Screen-recording terminal-result clock must return a finite number.");
+    }
+
+    return value;
+  }
+}
+
+function serializeKey(sid: string, recordingId: string): string {
+  return JSON.stringify([sid, recordingId]);
+}
+
+function requirePositiveSafeInteger(value: number, label: string): number {
+  if (!Number.isSafeInteger(value) || value <= 0) {
+    throw new Error(`${label} must be a positive safe integer.`);
+  }
+
+  return value;
+}
diff --git a/apps/extension/src/options/index.test.ts b/apps/extension/src/options/index.test.ts
index e56daf0..6fc29cd 100644
--- a/apps/extension/src/options/index.test.ts
+++ b/apps/extension/src/options/index.test.ts
@@ -5,8 +5,25 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 const STORAGE_KEY = "webblackbox.options";
 
 type StoragePayload = Record<string, unknown>;
+type RuntimeFixture = "dev" | "store-safe" | "cdp-no-tab-capture";
 
-function installChromeStub(initialValue: unknown) {
+function installChromeStub(
+  initialValue: unknown,
+  { runtimeFixture = "dev" }: { runtimeFixture?: RuntimeFixture } = {}
+) {
+  const hasCdp = runtimeFixture !== "store-safe";
+  const hasTabCapture = runtimeFixture !== "cdp-no-tab-capture";
+  const permissions = [
+    runtimeFixture === "store-safe" ? "activeTab" : undefined,
+    "scripting",
+    hasCdp ? "debugger" : undefined,
+    hasTabCapture ? "tabCapture" : undefined,
+    runtimeFixture === "dev" ? "webRequest" : undefined
+  ].filter((permission): permission is string => typeof permission === "string");
+  const runtimeEvent = {
+    addListener: vi.fn(),
+    removeListener: vi.fn()
+  };
   const get = vi.fn(async () => ({
     [STORAGE_KEY]: initialValue
   }));
@@ -16,6 +33,42 @@ function installChromeStub(initialValue: unknown) {
     configurable: true,
     writable: true,
     value: {
+      runtime: {
+        getManifest: vi.fn(() => ({
+          permissions,
+          ...(runtimeFixture === "store-safe" ? {} : { host_permissions: ["<all_urls>"] })
+        }))
+      },
+      scripting: {
+        executeScript: vi.fn(async () => [])
+      },
+      ...(hasCdp
+        ? {
+            debugger: {
+              attach: vi.fn(async () => undefined),
+              detach: vi.fn(async () => undefined),
+              sendCommand: vi.fn(async () => ({})),
+              onEvent: runtimeEvent,
+              onDetach: runtimeEvent
+            }
+          }
+        : {}),
+      ...(hasTabCapture
+        ? {
+            tabCapture: {
+              getMediaStreamId: vi.fn(async () => "stream-id")
+            }
+          }
+        : {}),
+      ...(runtimeFixture === "dev"
+        ? {
+            webRequest: {
+              onBeforeRequest: runtimeEvent,
+              onCompleted: runtimeEvent,
+              onErrorOccurred: runtimeEvent
+            }
+          }
+        : {}),
       storage: {
         local: {
           get,
@@ -86,4 +139,133 @@ describe("options page rendering", () => {
 
     expect(document.querySelector("[style]")).toBeNull();
   });
+
+  it("renders Lite and Full controls in a fully capable development runtime", async () => {
+    installChromeStub(undefined, { runtimeFixture: "dev" });
+
+    await importOptionsModule();
+
+    const liteProfile = document.querySelector("[data-mode-profile='lite']");
+    expect(liteProfile).not.toBeNull();
+    expect(liteProfile?.textContent).toContain(
+      "Page-side lightweight signals with browser-side network metadata."
+    );
+    expect(liteProfile?.textContent).toContain("browser-side network baseline");
+    expect(document.querySelector("[data-mode-profile='full']")).not.toBeNull();
+    expect(document.querySelector("#screenshotIdleMs")).not.toBeNull();
+    expect(document.querySelector("#bodyCaptureMaxBytes")).not.toBeNull();
+    expect(document.querySelector("#redactHeaders")).not.toBeNull();
+    expect(document.querySelector("#budgetRequestWarnMs")).not.toBeNull();
+    expect(document.querySelector("#budgetErrorRateWarnPct")).not.toBeNull();
+  });
+
+  it("renders Full/CDP controls even when tabCapture is unavailable", async () => {
+    installChromeStub(undefined, { runtimeFixture: "cdp-no-tab-capture" });
+
+    await importOptionsModule();
+
+    expect(document.querySelector("[data-mode-profile='full']")).not.toBeNull();
+    expect(document.querySelector("#screenshotIdleMs")).not.toBeNull();
+    expect(document.querySelector("#bodyCaptureMaxBytes")).not.toBeNull();
+    expect(document.querySelector("#redactHeaders")).not.toBeNull();
+    expect(document.querySelector("#budgetRequestWarnMs")).not.toBeNull();
+    expect(document.querySelector("#budgetErrorRateWarnPct")).not.toBeNull();
+  });
+
+  it("shows only Lite-relevant controls in a store-safe runtime", async () => {
+    installChromeStub(undefined, { runtimeFixture: "store-safe" });
+
+    await importOptionsModule();
+
+    const liteProfile = document.querySelector("[data-mode-profile='lite']");
+    expect(liteProfile).not.toBeNull();
+    expect(liteProfile?.textContent).toContain(
+      "This runtime provides no Chrome webRequest coverage."
+    );
+    expect(liteProfile?.textContent).toContain("mutation summary (page-side only)");
+    expect(liteProfile?.textContent).not.toContain(
+      "Page-side lightweight signals with browser-side network metadata."
+    );
+    expect(liteProfile?.textContent).not.toContain("browser-side network baseline");
+    expect(document.querySelector("[data-mode-profile='full']")).toBeNull();
+    expect(document.querySelector("#screenshotIdleMs")).toBeNull();
+    expect(document.querySelector("#bodyCaptureMaxBytes")).toBeNull();
+    expect(document.querySelector("#redactHeaders")).toBeNull();
+    expect(document.querySelector("#budgetRequestWarnMs")).toBeNull();
+    expect(document.querySelector("#budgetErrorRateWarnPct")).toBeNull();
+    expect(document.querySelector("#snapshotIntervalMs")).not.toBeNull();
+    expect(document.querySelector("#budgetLcpWarnMs")).not.toBeNull();
+    expect(document.querySelector("#blockedSelectors")).not.toBeNull();
+    expect(document.querySelector("#redactBodyPatterns")).not.toBeNull();
+    expect(document.querySelector("#hashSensitiveValues")).not.toBeNull();
+    expect(document.body.textContent).toContain(
+      "Available capture profiles are shown according to the capabilities provided by this extension runtime."
+    );
+    expect(document.body.textContent).toContain(
+      "Controls periodic summary-only DOM snapshots. It does not capture page images or schedule screenshots."
+    );
+  });
+
+  it("preserves loaded values for hidden store-safe fields when saving", async () => {
+    const { set } = installChromeStub(
+      {
+        optionsVersion: 1,
+        sampling: {
+          screenshotIdleMs: 8_765,
+          bodyCaptureMaxBytes: 54_321
+        },
+        redaction: {
+          redactHeaders: ["authorization", "x-private-header"]
+        },
+        performanceBudget: {
+          lcpWarnMs: 2_700,
+          requestWarnMs: 9_800,
+          errorRateWarnPct: 42,
+          autoFreezeOnBreach: true
+        }
+      },
+      { runtimeFixture: "store-safe" }
+    );
+
+    await importOptionsModule();
+
+    const snapshotInterval = document.querySelector<HTMLInputElement>("#snapshotIntervalMs");
+
+    if (!snapshotInterval) {
+      throw new Error("missing snapshot interval input");
+    }
+
+    snapshotInterval.value = "4321";
+    document.querySelector<HTMLButtonElement>("#saveConfig")?.click();
+    await flushOptions();
+
+    expect(set).toHaveBeenCalledTimes(1);
+    const saved = set.mock.calls[0]?.[0]?.[STORAGE_KEY] as {
+      sampling: {
+        snapshotIntervalMs: number;
+        screenshotIdleMs: number;
+        bodyCaptureMaxBytes: number;
+      };
+      redaction: { redactHeaders: string[] };
+      performanceBudget: {
+        lcpWarnMs: number;
+        requestWarnMs: number;
+        errorRateWarnPct: number;
+        autoFreezeOnBreach: boolean;
+      };
+    };
+
+    expect(saved.sampling).toMatchObject({
+      snapshotIntervalMs: 4_321,
+      screenshotIdleMs: 8_765,
+      bodyCaptureMaxBytes: 54_321
+    });
+    expect(saved.redaction.redactHeaders).toEqual(["authorization", "x-private-header"]);
+    expect(saved.performanceBudget).toEqual({
+      lcpWarnMs: 2_700,
+      requestWarnMs: 9_800,
+      errorRateWarnPct: 42,
+      autoFreezeOnBreach: true
+    });
+  });
 });
diff --git a/apps/extension/src/options/index.ts b/apps/extension/src/options/index.ts
index 6e556ae..15baa54 100644
--- a/apps/extension/src/options/index.ts
+++ b/apps/extension/src/options/index.ts
@@ -9,10 +9,12 @@ import {
   normalizePerformanceBudget,
   type PerformanceBudgetConfig
 } from "../shared/performance-budget.js";
+import { resolveInstalledRuntimeCapabilities } from "../shared/runtime-capabilities.js";
 
 const STORAGE_KEY = "webblackbox.options";
 
 const chromeApi = getChromeApi();
+const runtimeCapabilities = resolveInstalledRuntimeCapabilities(chromeApi);
 const i18n = createExtensionI18n({
   pageTitleKey: "pageTitleOptions"
 });
@@ -37,6 +39,10 @@ async function bootstrap(container: HTMLElement): Promise<void> {
 
 function render(container: HTMLElement, options: OptionsState): void {
   const { recorderConfig: config, performanceBudget } = options;
+  const hasFullCapture = runtimeCapabilities.fullMode;
+  const hasNetworkCapture =
+    hasFullCapture ||
+    (runtimeCapabilities.pageInjection && runtimeCapabilities.browserNetwork === "webRequest");
   const section = document.createElement("section");
   section.className = "card wb-options-card";
 
@@ -99,31 +105,34 @@ function render(container: HTMLElement, options: OptionsState): void {
       { min: 500, max: 120_000 }
     )
   );
-  section.append(
-    ...createNumberField(
-      t("optionsScreenshotIdleMs"),
-      "screenshotIdleMs",
-      config.sampling.screenshotIdleMs,
-      { min: 0, max: 120_000 }
-    )
-  );
-  section.append(createHelpText([t("optionsScreenshotIdleHelp")]));
-  section.append(
-    ...createNumberField(
-      t("optionsBodyCaptureMaxBytes"),
-      "bodyCaptureMaxBytes",
-      config.sampling.bodyCaptureMaxBytes,
-      { min: 0, max: 1_048_576 }
-    )
-  );
-  section.append(createHelpText([t("optionsBodyCaptureHelp")]));
+  section.append(createHelpText([t("optionsSnapshotIntervalHelp")]));
+  if (hasFullCapture) {
+    section.append(
+      ...createNumberField(
+        t("optionsScreenshotIdleMs"),
+        "screenshotIdleMs",
+        config.sampling.screenshotIdleMs,
+        { min: 0, max: 120_000 }
+      )
+    );
+    section.append(createHelpText([t("optionsScreenshotIdleHelp")]));
+    section.append(
+      ...createNumberField(
+        t("optionsBodyCaptureMaxBytes"),
+        "bodyCaptureMaxBytes",
+        config.sampling.bodyCaptureMaxBytes,
+        { min: 0, max: 1_048_576 }
+      )
+    );
+    section.append(createHelpText([t("optionsBodyCaptureHelp")]));
+  }
   section.append(
     createCheckboxRow("freezeOnError", t("optionsFreezeOnError"), config.freezeOnError, {
       spacious: true
     })
   );
   section.append(createHelpText([t("optionsFreezeHelp")], { variant: "spacious" }));
-  section.append(createPerformanceBudgetSection(performanceBudget));
+  section.append(createPerformanceBudgetSection(performanceBudget, hasNetworkCapture));
   section.append(
     ...createTextareaField(
       t("optionsBlockedSelectors"),
@@ -131,13 +140,15 @@ function render(container: HTMLElement, options: OptionsState): void {
       config.redaction.blockedSelectors.join("\n")
     )
   );
-  section.append(
-    ...createTextareaField(
-      t("optionsRedactedHeaders"),
-      "redactHeaders",
-      config.redaction.redactHeaders.join("\n")
-    )
-  );
+  if (hasNetworkCapture) {
+    section.append(
+      ...createTextareaField(
+        t("optionsRedactedHeaders"),
+        "redactHeaders",
+        config.redaction.redactHeaders.join("\n")
+      )
+    );
+  }
   section.append(
     ...createTextareaField(
       t("optionsBodySensitivePatterns"),
@@ -183,8 +194,8 @@ function render(container: HTMLElement, options: OptionsState): void {
   const resetButton = container.querySelector<HTMLButtonElement>("#resetConfig");
 
   saveButton?.addEventListener("click", async () => {
-    const nextRecorderConfig = readConfigFromForm(container);
-    const nextPerformanceBudget = readPerformanceBudgetFromForm(container);
+    const nextRecorderConfig = readConfigFromForm(container, config);
+    const nextPerformanceBudget = readPerformanceBudgetFromForm(container, performanceBudget);
     await saveOptionsState({
       recorderConfig: nextRecorderConfig,
       performanceBudget: nextPerformanceBudget
@@ -259,77 +270,82 @@ async function saveOptionsState(options: OptionsState): Promise<void> {
   });
 }
 
-function readPerformanceBudgetFromForm(container: HTMLElement): PerformanceBudgetConfig {
+function readPerformanceBudgetFromForm(
+  container: HTMLElement,
+  loaded: PerformanceBudgetConfig
+): PerformanceBudgetConfig {
   const raw = {
-    lcpWarnMs: Number(container.querySelector<HTMLInputElement>("#budgetLcpWarnMs")?.value),
-    requestWarnMs: Number(container.querySelector<HTMLInputElement>("#budgetRequestWarnMs")?.value),
-    errorRateWarnPct: Number(
-      container.querySelector<HTMLInputElement>("#budgetErrorRateWarnPct")?.value
-    ),
-    autoFreezeOnBreach:
-      container.querySelector<HTMLInputElement>("#budgetAutoFreezeOnBreach")?.checked ?? false
+    lcpWarnMs: readNumberInput(container, "budgetLcpWarnMs", loaded.lcpWarnMs),
+    requestWarnMs: readNumberInput(container, "budgetRequestWarnMs", loaded.requestWarnMs),
+    errorRateWarnPct: readNumberInput(container, "budgetErrorRateWarnPct", loaded.errorRateWarnPct),
+    autoFreezeOnBreach: readCheckboxInput(
+      container,
+      "budgetAutoFreezeOnBreach",
+      loaded.autoFreezeOnBreach
+    )
   };
 
   return normalizePerformanceBudget(raw);
 }
 
-function readConfigFromForm(container: HTMLElement): typeof DEFAULT_RECORDER_CONFIG {
-  const ringBufferMinutes = Number(
-    container.querySelector<HTMLInputElement>("#ringBufferMinutes")?.value ??
-      DEFAULT_RECORDER_CONFIG.ringBufferMinutes
-  );
-  const actionWindowMs = Number(
-    container.querySelector<HTMLInputElement>("#actionWindowMs")?.value ??
-      DEFAULT_RECORDER_CONFIG.sampling.actionWindowMs
-  );
-  const mousemoveHz = Number(
-    container.querySelector<HTMLInputElement>("#mousemoveHz")?.value ??
-      DEFAULT_RECORDER_CONFIG.sampling.mousemoveHz
-  );
-  const scrollHz = Number(
-    container.querySelector<HTMLInputElement>("#scrollHz")?.value ??
-      DEFAULT_RECORDER_CONFIG.sampling.scrollHz
+function readConfigFromForm(
+  container: HTMLElement,
+  loaded: typeof DEFAULT_RECORDER_CONFIG
+): typeof DEFAULT_RECORDER_CONFIG {
+  const ringBufferMinutes = readNumberInput(
+    container,
+    "ringBufferMinutes",
+    loaded.ringBufferMinutes
   );
-  const domFlushMs = Number(
-    container.querySelector<HTMLInputElement>("#domFlushMs")?.value ??
-      DEFAULT_RECORDER_CONFIG.sampling.domFlushMs
+  const actionWindowMs = readNumberInput(
+    container,
+    "actionWindowMs",
+    loaded.sampling.actionWindowMs
   );
-  const snapshotIntervalMs = Number(
-    container.querySelector<HTMLInputElement>("#snapshotIntervalMs")?.value ??
-      DEFAULT_RECORDER_CONFIG.sampling.snapshotIntervalMs
+  const mousemoveHz = readNumberInput(container, "mousemoveHz", loaded.sampling.mousemoveHz);
+  const scrollHz = readNumberInput(container, "scrollHz", loaded.sampling.scrollHz);
+  const domFlushMs = readNumberInput(container, "domFlushMs", loaded.sampling.domFlushMs);
+  const snapshotIntervalMs = readNumberInput(
+    container,
+    "snapshotIntervalMs",
+    loaded.sampling.snapshotIntervalMs
   );
-  const screenshotIdleMs = Number(
-    container.querySelector<HTMLInputElement>("#screenshotIdleMs")?.value ??
-      DEFAULT_RECORDER_CONFIG.sampling.screenshotIdleMs
+  const screenshotIdleMs = readNumberInput(
+    container,
+    "screenshotIdleMs",
+    loaded.sampling.screenshotIdleMs
   );
-  const bodyCaptureMaxBytes = Number(
-    container.querySelector<HTMLInputElement>("#bodyCaptureMaxBytes")?.value ??
-      DEFAULT_RECORDER_CONFIG.sampling.bodyCaptureMaxBytes
+  const bodyCaptureMaxBytes = readNumberInput(
+    container,
+    "bodyCaptureMaxBytes",
+    loaded.sampling.bodyCaptureMaxBytes
   );
 
   const blockedSelectors = splitLines(
     container.querySelector<HTMLTextAreaElement>("#blockedSelectors")?.value
   );
-  const redactHeaders = splitLines(
-    container.querySelector<HTMLTextAreaElement>("#redactHeaders")?.value
-  );
+  const redactHeadersInput = container.querySelector<HTMLTextAreaElement>("#redactHeaders");
+  const redactHeaders = redactHeadersInput
+    ? splitLines(redactHeadersInput.value)
+    : [...loaded.redaction.redactHeaders];
   const redactBodyPatterns = splitLines(
     container.querySelector<HTMLTextAreaElement>("#redactBodyPatterns")?.value
   );
-  const hashSensitiveValues =
-    container.querySelector<HTMLInputElement>("#hashSensitiveValues")?.checked ?? true;
-  const freezeOnError =
-    container.querySelector<HTMLInputElement>("#freezeOnError")?.checked ??
-    DEFAULT_RECORDER_CONFIG.freezeOnError;
+  const hashSensitiveValues = readCheckboxInput(
+    container,
+    "hashSensitiveValues",
+    loaded.redaction.hashSensitiveValues
+  );
+  const freezeOnError = readCheckboxInput(container, "freezeOnError", loaded.freezeOnError);
 
   return {
-    ...DEFAULT_RECORDER_CONFIG,
+    ...loaded,
     ringBufferMinutes: Number.isFinite(ringBufferMinutes) ? Math.max(1, ringBufferMinutes) : 10,
     freezeOnError,
     freezeOnNetworkFailure: false,
     freezeOnLongTaskSpike: false,
     sampling: {
-      ...DEFAULT_RECORDER_CONFIG.sampling,
+      ...loaded.sampling,
       actionWindowMs: Number.isFinite(actionWindowMs) ? Math.max(100, actionWindowMs) : 1500,
       mousemoveHz: Number.isFinite(mousemoveHz)
         ? Math.min(240, Math.max(1, mousemoveHz))
@@ -353,7 +369,7 @@ function readConfigFromForm(container: HTMLElement): typeof DEFAULT_RECORDER_CON
         : DEFAULT_RECORDER_CONFIG.sampling.bodyCaptureMaxBytes
     },
     redaction: {
-      ...DEFAULT_RECORDER_CONFIG.redaction,
+      ...loaded.redaction,
       blockedSelectors,
       redactHeaders,
       redactBodyPatterns,
@@ -442,37 +458,62 @@ function createRuntimeProfilesSection(): HTMLElement {
 }
 
 function createModeProfileCards(): HTMLElement[] {
-  return Object.keys(MODE_PRODUCT_PROFILES).map((mode) => {
-    const card = document.createElement("article");
-    card.className = "wb-options-profile-card";
-
-    const title = document.createElement("strong");
-    title.append(mode === "full" ? t("modeFull") : t("modeLite"), " ", createCode(mode));
-
-    const summary = document.createElement("span");
-    summary.className = "wb-options-profile-summary";
-    summary.textContent =
-      mode === "full" ? t("optionsFullProfileSummary") : t("optionsLiteProfileSummary");
-
-    const signals = document.createElement("span");
-    signals.className = "wb-options-profile-meta";
-    signals.textContent = t("optionsProfileSignals", {
-      value: mode === "full" ? t("optionsFullProfileSignals") : t("optionsLiteProfileSignals")
-    });
+  const liteHasBrowserNetwork = runtimeCapabilities.browserNetwork === "webRequest";
 
-    const heavyCapture = document.createElement("span");
-    heavyCapture.className = "wb-options-profile-meta";
-    heavyCapture.textContent = t("optionsProfileHeavyCapture", {
-      value:
-        mode === "full" ? t("optionsFullProfileHeavyCapture") : t("optionsLiteProfileHeavyCapture")
-    });
+  return Object.keys(MODE_PRODUCT_PROFILES)
+    .filter((mode) =>
+      mode === "full" ? runtimeCapabilities.fullMode : runtimeCapabilities.pageInjection
+    )
+    .map((mode) => {
+      const card = document.createElement("article");
+      card.className = "wb-options-profile-card";
+      card.dataset.modeProfile = mode;
+
+      const title = document.createElement("strong");
+      title.append(mode === "full" ? t("modeFull") : t("modeLite"), " ", createCode(mode));
+
+      const summary = document.createElement("span");
+      summary.className = "wb-options-profile-summary";
+      summary.textContent =
+        mode === "full"
+          ? t("optionsFullProfileSummary")
+          : t(
+              liteHasBrowserNetwork
+                ? "optionsLiteProfileSummary"
+                : "optionsLiteProfileSummaryNoBrowserNetwork"
+            );
+
+      const signals = document.createElement("span");
+      signals.className = "wb-options-profile-meta";
+      signals.textContent = t("optionsProfileSignals", {
+        value:
+          mode === "full"
+            ? t("optionsFullProfileSignals")
+            : t(
+                liteHasBrowserNetwork
+                  ? "optionsLiteProfileSignals"
+                  : "optionsLiteProfileSignalsNoBrowserNetwork"
+              )
+      });
 
-    card.append(title, summary, signals, heavyCapture);
-    return card;
-  });
+      const heavyCapture = document.createElement("span");
+      heavyCapture.className = "wb-options-profile-meta";
+      heavyCapture.textContent = t("optionsProfileHeavyCapture", {
+        value:
+          mode === "full"
+            ? t("optionsFullProfileHeavyCapture")
+            : t("optionsLiteProfileHeavyCapture")
+      });
+
+      card.append(title, summary, signals, heavyCapture);
+      return card;
+    });
 }
 
-function createPerformanceBudgetSection(performanceBudget: PerformanceBudgetConfig): HTMLElement {
+function createPerformanceBudgetSection(
+  performanceBudget: PerformanceBudgetConfig,
+  includeNetworkBudgets: boolean
+): HTMLElement {
   const section = createInsetSection("dense");
 
   const title = document.createElement("h2");
@@ -486,29 +527,37 @@ function createPerformanceBudgetSection(performanceBudget: PerformanceBudgetConf
       max: 30_000,
       step: 100,
       compact: true
-    }),
-    ...createNumberField(
-      t("optionsRequestWarnMs"),
-      "budgetRequestWarnMs",
-      performanceBudget.requestWarnMs,
-      {
-        min: 100,
-        max: 60_000,
-        step: 100,
-        compact: true
-      }
-    ),
-    ...createNumberField(
-      t("optionsErrorRateWarnPct"),
-      "budgetErrorRateWarnPct",
-      performanceBudget.errorRateWarnPct,
-      {
-        min: 1,
-        max: 100,
-        step: 1,
-        compact: true
-      }
-    ),
+    })
+  );
+
+  if (includeNetworkBudgets) {
+    section.append(
+      ...createNumberField(
+        t("optionsRequestWarnMs"),
+        "budgetRequestWarnMs",
+        performanceBudget.requestWarnMs,
+        {
+          min: 100,
+          max: 60_000,
+          step: 100,
+          compact: true
+        }
+      ),
+      ...createNumberField(
+        t("optionsErrorRateWarnPct"),
+        "budgetErrorRateWarnPct",
+        performanceBudget.errorRateWarnPct,
+        {
+          min: 1,
+          max: 100,
+          step: 1,
+          compact: true
+        }
+      )
+    );
+  }
+
+  section.append(
     createCheckboxRow(
       "budgetAutoFreezeOnBreach",
       t("optionsAutoFreezeOnBreach"),
@@ -519,6 +568,15 @@ function createPerformanceBudgetSection(performanceBudget: PerformanceBudgetConf
   return section;
 }
 
+function readNumberInput(container: HTMLElement, id: string, fallback: number): number {
+  const input = container.querySelector<HTMLInputElement>(`#${id}`);
+  return input ? Number(input.value) : fallback;
+}
+
+function readCheckboxInput(container: HTMLElement, id: string, fallback: boolean): boolean {
+  return container.querySelector<HTMLInputElement>(`#${id}`)?.checked ?? fallback;
+}
+
 function createInsetSection(variant: "default" | "dense" = "default"): HTMLElement {
   const section = document.createElement("section");
   section.className =
diff --git a/apps/extension/src/popup/index.test.ts b/apps/extension/src/popup/index.test.ts
index ef7d88b..3ed8c70 100644
--- a/apps/extension/src/popup/index.test.ts
+++ b/apps/extension/src/popup/index.test.ts
@@ -23,6 +23,7 @@ const EXPORT_PRIVACY_WARNING = {
 
 type PortMessageHandler = (message: unknown) => void;
 type PortPostMessageHandler = (message: unknown, port: FakePort) => void;
+type RuntimeFixture = "dev" | "store-safe" | "cdp-no-tab-capture";
 
 class FakePort {
   name = "webblackbox:popup";
@@ -65,8 +66,23 @@ function installChromeStub(
   options: {
     sendMessage?: ReturnType<typeof vi.fn>;
     onQuery?: () => void | Promise<void>;
+    runtimeFixture?: RuntimeFixture;
   } = {}
 ): void {
+  const runtimeFixture = options.runtimeFixture ?? "dev";
+  const hasCdp = runtimeFixture !== "store-safe";
+  const hasTabCapture = runtimeFixture !== "cdp-no-tab-capture";
+  const permissions = [
+    runtimeFixture === "store-safe" ? "activeTab" : undefined,
+    "scripting",
+    hasCdp ? "debugger" : undefined,
+    hasTabCapture ? "tabCapture" : undefined,
+    runtimeFixture === "dev" ? "webRequest" : undefined
+  ].filter((permission): permission is string => typeof permission === "string");
+  const runtimeEvent = {
+    addListener: vi.fn(),
+    removeListener: vi.fn()
+  };
   const query = vi.fn(async () => {
     await options.onQuery?.();
     return [
@@ -93,10 +109,42 @@ function installChromeStub(
         connect: vi.fn(() => port),
         getURL,
         getManifest: vi.fn(() => ({
-          version: "0.1.1"
+          version: "0.1.1",
+          permissions,
+          ...(runtimeFixture === "store-safe" ? {} : { host_permissions: ["<all_urls>"] })
         })),
         ...(options.sendMessage ? { sendMessage: options.sendMessage } : {})
       },
+      scripting: {
+        executeScript: vi.fn(async () => [])
+      },
+      ...(hasCdp
+        ? {
+            debugger: {
+              attach: vi.fn(async () => undefined),
+              detach: vi.fn(async () => undefined),
+              sendCommand: vi.fn(async () => ({})),
+              onEvent: runtimeEvent,
+              onDetach: runtimeEvent
+            }
+          }
+        : {}),
+      ...(hasTabCapture
+        ? {
+            tabCapture: {
+              getMediaStreamId: vi.fn(async () => "stream-id")
+            }
+          }
+        : {}),
+      ...(runtimeFixture === "dev"
+        ? {
+            webRequest: {
+              onBeforeRequest: runtimeEvent,
+              onCompleted: runtimeEvent,
+              onErrorOccurred: runtimeEvent
+            }
+          }
+        : {}),
       tabs: {
         create,
         query
@@ -242,6 +290,16 @@ function getLiteStartCancelButton(): HTMLButtonElement {
   return button;
 }
 
+function getLiteReloadBody(): HTMLElement {
+  const body = document.querySelector<HTMLElement>(".wb-confirm-body");
+
+  if (!body) {
+    throw new Error("missing lite reload body");
+  }
+
+  return body;
+}
+
 function getSessionsButton(): HTMLButtonElement {
   const button = document.querySelector<HTMLButtonElement>("[data-action='open-sessions']");
 
@@ -298,6 +356,72 @@ describe("popup export policy form", () => {
     localStorage.clear();
   });
 
+  it("renders all capture controls in a fully capable development runtime", async () => {
+    installChromeStub(new FakePort(), { runtimeFixture: "dev" });
+
+    await importPopupModule();
+
+    expect(getStartLiteButton()).toBeInstanceOf(HTMLButtonElement);
+    expect(getStartFullButton()).toBeInstanceOf(HTMLButtonElement);
+    expect(document.querySelector("[data-section='full-visual-capture']")).not.toBeNull();
+    expect(getFullVisualCaptureRadio("screenshots")).toBeInstanceOf(HTMLInputElement);
+    expect(getFullVisualCaptureRadio("recording")).toBeInstanceOf(HTMLInputElement);
+    expect(getFullVisualCaptureRadio("both")).toBeInstanceOf(HTMLInputElement);
+    expect(getFullVisualCaptureRadio("none")).toBeInstanceOf(HTMLInputElement);
+  });
+
+  it("omits Full and visual capture DOM in a store-safe runtime", async () => {
+    localStorage.setItem(POPUP_FULL_VISUAL_CAPTURE_STORAGE_KEY, "both");
+    installChromeStub(new FakePort(), { runtimeFixture: "store-safe" });
+
+    await importPopupModule();
+
+    expect(getStartLiteButton()).toBeInstanceOf(HTMLButtonElement);
+    expect(document.querySelector("[data-action='start-full']")).toBeNull();
+    expect(document.querySelector("[data-section='full-visual-capture']")).toBeNull();
+    expect(document.querySelector("input[name='full-visual-capture']")).toBeNull();
+    expect(localStorage.getItem(POPUP_FULL_VISUAL_CAPTURE_STORAGE_KEY)).toBe("none");
+  });
+
+  it("limits Full visual capture to screenshots or none without tabCapture", async () => {
+    localStorage.setItem(POPUP_FULL_VISUAL_CAPTURE_STORAGE_KEY, "recording");
+    const port = new FakePort();
+    installChromeStub(port, { runtimeFixture: "cdp-no-tab-capture" });
+
+    await importPopupModule();
+
+    expect(getStartFullButton()).toBeInstanceOf(HTMLButtonElement);
+    expect(document.querySelector("[data-section='full-visual-capture']")).not.toBeNull();
+    expect(getFullVisualCaptureRadio("screenshots").checked).toBe(false);
+    expect(getFullVisualCaptureRadio("none").checked).toBe(true);
+    expect(
+      document.querySelector("input[name='full-visual-capture'][value='recording']")
+    ).toBeNull();
+    expect(document.querySelector("input[name='full-visual-capture'][value='both']")).toBeNull();
+    expect(localStorage.getItem(POPUP_FULL_VISUAL_CAPTURE_STORAGE_KEY)).toBe("none");
+
+    getStartFullButton().click();
+    await flushPopup();
+
+    expect(port.postMessage).toHaveBeenCalledWith({
+      kind: "ui.start",
+      tabId: 17,
+      mode: "full",
+      visualCapture: "none"
+    });
+  });
+
+  it("preserves the screenshot half of a legacy both setting without tabCapture", async () => {
+    localStorage.setItem(POPUP_FULL_VISUAL_CAPTURE_STORAGE_KEY, "both");
+    installChromeStub(new FakePort(), { runtimeFixture: "cdp-no-tab-capture" });
+
+    await importPopupModule();
+
+    expect(getFullVisualCaptureRadio("screenshots").checked).toBe(true);
+    expect(getFullVisualCaptureRadio("none").checked).toBe(false);
+    expect(localStorage.getItem(POPUP_FULL_VISUAL_CAPTURE_STORAGE_KEY)).toBe("screenshots");
+  });
+
   it("preserves archive policy draft fields across popup rerenders and reopen", async () => {
     const port = new FakePort();
     installChromeStub(port);
@@ -659,7 +783,7 @@ describe("popup export policy form", () => {
     expect(getExportButton().disabled).toBe(false);
   });
 
-  it("exports without encryption when the passphrase prompt is left empty", async () => {
+  it("requires an export passphrase before posting the request", async () => {
     const port = new FakePort();
     installChromeStub(port);
 
@@ -679,15 +803,31 @@ describe("popup export policy form", () => {
     });
     await flushPopup();
 
+    port.postMessage.mockClear();
     getExportButton().click();
     await flushPopup();
 
     getPassphraseSubmitButton().click();
     await flushPopup();
 
+    const passphraseInput = document.querySelector<HTMLInputElement>("#wb-passphrase-input");
+
+    if (!passphraseInput) {
+      throw new Error("missing passphrase input");
+    }
+
+    expect(port.postMessage).not.toHaveBeenCalled();
+    expect(passphraseInput.validationMessage).toBe("A passphrase is required for this export.");
+
+    passphraseInput.value = " export-secret ";
+    passphraseInput.dispatchEvent(new Event("input", { bubbles: true }));
+    getPassphraseSubmitButton().click();
+    await flushPopup();
+
     expect(port.postMessage).toHaveBeenCalledWith({
       kind: "ui.export",
       sid: "sid-empty-passphrase",
+      passphrase: " export-secret ",
       saveAs: false,
       policy: {
         includeScreenshots: false,
@@ -832,6 +972,8 @@ describe("popup export policy form", () => {
 
     expect(document.querySelector(".wb-confirm-overlay")).not.toBeNull();
     expect(getLiteReloadStartButton().textContent).toBe("Reload and Start Lite");
+    expect(getLiteReloadBody().textContent).toContain("first network requests");
+    expect(getLiteReloadBody().textContent).not.toContain("no Chrome webRequest");
     expect(port.postMessage).not.toHaveBeenCalledWith(
       expect.objectContaining({
         kind: "ui.start",
@@ -851,6 +993,25 @@ describe("popup export policy form", () => {
     expect(document.querySelector(".wb-confirm-overlay")).toBeNull();
   });
 
+  it("describes page-side-only Lite coverage when browser network capture is unavailable", async () => {
+    const port = new FakePort();
+    installChromeStub(port, { runtimeFixture: "store-safe" });
+
+    await importPopupModule();
+
+    getStartLiteButton().click();
+    await flushPopup();
+
+    expect(getLiteReloadBody().textContent).toContain("records page-side signals only");
+    expect(getLiteReloadBody().textContent).toContain(
+      "no Chrome webRequest or browser-network coverage"
+    );
+    expect(getLiteReloadBody().textContent).not.toContain("first network requests");
+
+    getLiteStartCancelButton().click();
+    await flushPopup();
+  });
+
   it("can start lite without reloading when the user chooses the non-refresh path", async () => {
     const port = new FakePort();
     installChromeStub(port);
@@ -1021,12 +1182,21 @@ describe("popup export policy form", () => {
 
     getExportButton().click();
     await flushPopup();
+    const passphraseInput = document.querySelector<HTMLInputElement>("#wb-passphrase-input");
+
+    if (!passphraseInput) {
+      throw new Error("missing passphrase input");
+    }
+
+    passphraseInput.value = "export-secret";
+    passphraseInput.dispatchEvent(new Event("input", { bubbles: true }));
     getPassphraseSubmitButton().click();
     await flushPopup();
 
     expect(port.postMessage).toHaveBeenCalledWith({
       kind: "ui.export",
       sid: "sid-none-export",
+      passphrase: "export-secret",
       saveAs: false,
       policy: {
         includeScreenshots: false,
diff --git a/apps/extension/src/popup/index.ts b/apps/extension/src/popup/index.ts
index 5eb1192..41a2155 100644
--- a/apps/extension/src/popup/index.ts
+++ b/apps/extension/src/popup/index.ts
@@ -7,6 +7,7 @@ import {
 
 import { getChromeApi } from "../shared/chrome-api.js";
 import { createExtensionI18n } from "../shared/i18n.js";
+import { resolveInstalledRuntimeCapabilities } from "../shared/runtime-capabilities.js";
 import {
   PORT_NAMES,
   type ExportPrivacyWarning,
@@ -17,6 +18,7 @@ import {
 } from "../shared/messages.js";
 
 const chromeApi = getChromeApi();
+const runtimeCapabilities = resolveInstalledRuntimeCapabilities(chromeApi);
 const port = chromeApi?.runtime?.connect({ name: PORT_NAMES.popup });
 const extensionVersion = chromeApi?.runtime?.getManifest?.().version ?? "dev";
 const i18n = createExtensionI18n({
@@ -81,7 +83,8 @@ if (root) {
 async function bootstrap(container: HTMLElement): Promise<void> {
   state.tabId = await getActiveTabId();
   state.exportPolicyForm = loadPopupExportPolicyForm();
-  state.fullModeVisualCapture = loadPopupFullVisualCapture();
+  state.fullModeVisualCapture = normalizeFullModeVisualCapture(loadPopupFullVisualCapture());
+  savePopupFullVisualCapture(state.fullModeVisualCapture);
 
   port?.onMessage.addListener((message) => {
     applyMessage(message as ExtensionOutboundMessage);
@@ -232,20 +235,32 @@ function render(container: HTMLElement): void {
 
   const actions = document.createElement("div");
   actions.className = "wb-popup__actions";
+  if (runtimeCapabilities.pageInjection) {
+    actions.append(
+      createActionButton(t("popupStartLite"), "wb-btn wb-btn--brand", "start-lite", startDisabled)
+    );
+  }
+
+  if (runtimeCapabilities.fullMode) {
+    actions.append(
+      createActionButton(
+        t("popupStartFull"),
+        "wb-btn wb-btn--brand-alt",
+        "start-full",
+        startDisabled
+      )
+    );
+  }
+
   actions.append(
-    createActionButton(t("popupStartLite"), "wb-btn wb-btn--brand", "start-lite", startDisabled),
-    createActionButton(
-      t("popupStartFull"),
-      "wb-btn wb-btn--brand-alt",
-      "start-full",
-      startDisabled
-    ),
     createActionButton(t("popupStop"), "wb-btn wb-btn--muted", "stop", !activeSession),
     createActionButton(t("popupExport"), "wb-btn wb-btn--accent", "export", exportDisabled)
   );
   section.append(actions);
 
-  section.append(createFullModeRecordingSection(startDisabled));
+  if (runtimeCapabilities.fullMode && runtimeCapabilities.globalVisual) {
+    section.append(createFullModeRecordingSection(startDisabled));
+  }
 
   const nav = document.createElement("div");
   nav.className = "wb-popup__nav";
@@ -425,7 +440,11 @@ function openLiteReloadDialog(): Promise<"reload" | "direct" | null> {
 
     const body = document.createElement("p");
     body.className = "wb-confirm-body";
-    body.textContent = t("popupLiteReloadBody");
+    body.textContent = t(
+      runtimeCapabilities.browserNetwork === "webRequest"
+        ? "popupLiteReloadBody"
+        : "popupLiteReloadBodyNoBrowserNetwork"
+    );
 
     const actions = document.createElement("div");
     actions.className = "wb-confirm-actions";
@@ -517,6 +536,7 @@ function openPassphraseDialog(): Promise<string | null> {
     input.type = "password";
     input.className = "wb-input wb-prompt-field";
     input.autocomplete = "off";
+    input.required = true;
 
     const actions = document.createElement("div");
     actions.className = "wb-confirm-actions";
@@ -553,7 +573,14 @@ function openPassphraseDialog(): Promise<string | null> {
     const submitPassphrase = (): void => {
       const passphrase = input.value;
 
-      finish(passphrase.trim().length > 0 ? passphrase : "");
+      if (passphrase.trim().length === 0) {
+        input.setCustomValidity(t("popupPassphraseRequired"));
+        input.reportValidity();
+        input.focus();
+        return;
+      }
+
+      finish(passphrase);
     };
 
     const onKeydown = (event: KeyboardEvent): void => {
@@ -700,7 +727,7 @@ async function exportSessionFromPopup(
       sendUiMessage({
         kind: "ui.export",
         sid,
-        ...(hasDialogPassphrase(passphrase) ? { passphrase } : {}),
+        passphrase,
         saveAs: false,
         policy
       })
@@ -728,10 +755,6 @@ async function exportSessionFromPopup(
   }
 }
 
-function hasDialogPassphrase(passphrase: string): boolean {
-  return passphrase.length > 0;
-}
-
 function isSuccessfulExportResponse(value: unknown): value is {
   ok: true;
   fileName?: string;
@@ -1193,6 +1216,7 @@ function createRingUsageSection(ringUsage: {
 function createFullModeRecordingSection(disabled: boolean): HTMLElement {
   const section = document.createElement("section");
   section.className = "wb-popup__policy";
+  section.dataset.section = "full-visual-capture";
 
   const title = document.createElement("h2");
   title.className = "wb-popup__policy-title";
@@ -1201,8 +1225,12 @@ function createFullModeRecordingSection(disabled: boolean): HTMLElement {
 
   const options: Array<{ value: FullModeVisualCapture; label: string }> = [
     { value: "screenshots", label: t("popupFullVisualScreenshots") },
-    { value: "recording", label: t("popupFullVisualRecording") },
-    { value: "both", label: t("popupFullVisualBoth") },
+    ...(runtimeCapabilities.tabCapture
+      ? [
+          { value: "recording" as const, label: t("popupFullVisualRecording") },
+          { value: "both" as const, label: t("popupFullVisualBoth") }
+        ]
+      : []),
     { value: "none", label: t("popupFullVisualNone") }
   ];
 
@@ -1230,6 +1258,18 @@ function isFullModeVisualCapture(value: string): value is FullModeVisualCapture
   return value === "screenshots" || value === "recording" || value === "both" || value === "none";
 }
 
+function normalizeFullModeVisualCapture(value: FullModeVisualCapture): FullModeVisualCapture {
+  if (!runtimeCapabilities.globalVisual) {
+    return "none";
+  }
+
+  if (runtimeCapabilities.tabCapture || value === "screenshots" || value === "none") {
+    return value;
+  }
+
+  return value === "both" ? "screenshots" : "none";
+}
+
 function createActionButton(
   label: string,
   className: string,
diff --git a/apps/extension/src/sessions/index.test.ts b/apps/extension/src/sessions/index.test.ts
index 8188b35..b711e14 100644
--- a/apps/extension/src/sessions/index.test.ts
+++ b/apps/extension/src/sessions/index.test.ts
@@ -114,7 +114,7 @@ describe("sessions page rendering", () => {
     expect(document.getElementById("pwned")).toBeNull();
   });
 
-  it("exports without encryption when the passphrase prompt is left empty", async () => {
+  it("requires an export passphrase before posting the request", async () => {
     const port = new FakePort();
     installChromeStub(port);
 
@@ -134,28 +134,22 @@ describe("sessions page rendering", () => {
     });
     await flushSessions();
 
+    port.postMessage.mockClear();
     document.querySelector<HTMLButtonElement>("button[data-export]")?.click();
     await flushSessions();
 
     document.querySelector<HTMLButtonElement>("[data-passphrase-submit]")?.click();
     await flushSessions();
 
-    expect(port.postMessage).toHaveBeenCalledWith({
-      kind: "ui.export",
-      sid: "sid-export",
-      saveAs: false
-    });
-
-    port.postMessage.mockClear();
-    document.querySelector<HTMLButtonElement>("button[data-export]")?.click();
-    await flushSessions();
-
     const passphraseInput = document.querySelector<HTMLInputElement>("#wb-passphrase-input");
 
     if (!passphraseInput) {
       throw new Error("missing passphrase input");
     }
 
+    expect(port.postMessage).not.toHaveBeenCalled();
+    expect(passphraseInput.validationMessage).toBe("A passphrase is required for this export.");
+
     passphraseInput.value = " session-secret ";
     passphraseInput.dispatchEvent(new Event("input", { bubbles: true }));
     document.querySelector<HTMLButtonElement>("[data-passphrase-submit]")?.click();
diff --git a/apps/extension/src/sessions/index.ts b/apps/extension/src/sessions/index.ts
index aec2d24..80f2298 100644
--- a/apps/extension/src/sessions/index.ts
+++ b/apps/extension/src/sessions/index.ts
@@ -338,7 +338,7 @@ function bindActions(container: HTMLElement): void {
       postUiMessage({
         kind: "ui.export",
         sid,
-        ...(hasDialogPassphrase(passphrase) ? { passphrase } : {}),
+        passphrase,
         saveAs: false
       });
     });
@@ -438,6 +438,7 @@ function openPassphraseDialog(sid: string): Promise<string | null> {
     input.type = "password";
     input.className = "wb-input wb-prompt-field";
     input.autocomplete = "off";
+    input.required = true;
 
     const actions = document.createElement("div");
     actions.className = "wb-confirm-actions";
@@ -474,7 +475,14 @@ function openPassphraseDialog(sid: string): Promise<string | null> {
     const submitPassphrase = (): void => {
       const passphrase = input.value;
 
-      finish(passphrase.trim().length > 0 ? passphrase : "");
+      if (passphrase.trim().length === 0) {
+        input.setCustomValidity(t("popupPassphraseRequired"));
+        input.reportValidity();
+        input.focus();
+        return;
+      }
+
+      finish(passphrase);
     };
 
     const onKeydown = (event: KeyboardEvent): void => {
@@ -511,10 +519,6 @@ function openPassphraseDialog(sid: string): Promise<string | null> {
   });
 }
 
-function hasDialogPassphrase(passphrase: string): boolean {
-  return passphrase.length > 0;
-}
-
 function openConfirmDialog(message: string): Promise<boolean> {
   return new Promise((resolve) => {
     const overlay = document.createElement("div");
diff --git a/apps/extension/src/shared/chrome-api.ts b/apps/extension/src/shared/chrome-api.ts
index d3d00ab..8ee91bd 100644
--- a/apps/extension/src/shared/chrome-api.ts
+++ b/apps/extension/src/shared/chrome-api.ts
@@ -2,14 +2,34 @@ export type PortMessageHandler = (message: unknown) => void;
 
 export type PortDisconnectHandler = () => void;
 
+export type InjectionResult<TResult = unknown> = {
+  documentId?: string;
+  error?: string;
+  frameId: number;
+  result?: TResult;
+};
+
+export type ScriptInjectionTarget = {
+  allFrames?: boolean;
+  documentIds?: string[];
+  frameIds?: number[];
+  tabId: number;
+};
+
+export type MessageSenderLike = {
+  documentId?: string;
+  frameId?: number;
+  url?: string;
+  origin?: string;
+  tab?: {
+    id?: number;
+    url?: string;
+  };
+};
+
 export type PortLike = {
   name: string;
-  sender?: {
-    frameId?: number;
-    tab?: {
-      id?: number;
-    };
-  };
+  sender?: MessageSenderLike;
   onMessage: {
     addListener(handler: PortMessageHandler): void;
     removeListener(handler: PortMessageHandler): void;
@@ -23,6 +43,14 @@ export type PortLike = {
 };
 
 export type ChromeApi = {
+  alarms?: {
+    create(name: string, alarmInfo: { when: number }): void | Promise<void>;
+    clear(name: string): boolean | Promise<boolean>;
+    getAll?(): Promise<Array<{ name: string; scheduledTime?: number }>>;
+    onAlarm: {
+      addListener(callback: (alarm: { name: string; scheduledTime?: number }) => void): void;
+    };
+  };
   action?: {
     setBadgeText(details: { text: string }): Promise<void>;
     setBadgeBackgroundColor(details: { color: string }): Promise<void>;
@@ -65,6 +93,7 @@ export type ChromeApi = {
     download(options: { url: string; filename: string; saveAs?: boolean }): Promise<number>;
   };
   i18n?: {
+    getMessage?(messageName: string): string;
     getUILanguage(): string;
   };
   offscreen?: {
@@ -101,21 +130,112 @@ export type ChromeApi = {
       addListener(
         callback: (
           message: unknown,
-          sender: { tab?: { id?: number }; frameId?: number },
+          sender: MessageSenderLike,
           sendResponse: (response: unknown) => void
         ) => boolean | void
       ): void;
     };
     sendMessage(message: unknown): Promise<unknown>;
   };
+  webNavigation?: {
+    getAllFrames?: (details: { tabId: number }) => Promise<
+      Array<{
+        frameId: number;
+        parentFrameId: number;
+        documentId?: string;
+        parentDocumentId?: string;
+        url: string;
+      }>
+    >;
+    onCommitted: {
+      addListener(
+        callback: (details: {
+          tabId: number;
+          frameId: number;
+          documentId?: string;
+          documentLifecycle?: "prerender" | "active" | "cached" | "pending_deletion";
+          frameType?: "outermost_frame" | "fenced_frame" | "sub_frame";
+          parentDocumentId?: string;
+          parentFrameId?: number;
+          url: string;
+          timeStamp?: number;
+        }) => void
+      ): void;
+      removeListener(
+        callback: (details: {
+          tabId: number;
+          frameId: number;
+          documentId?: string;
+          documentLifecycle?: "prerender" | "active" | "cached" | "pending_deletion";
+          frameType?: "outermost_frame" | "fenced_frame" | "sub_frame";
+          parentDocumentId?: string;
+          parentFrameId?: number;
+          url: string;
+          timeStamp?: number;
+        }) => void
+      ): void;
+    };
+    onHistoryStateUpdated?: {
+      addListener(
+        callback: (details: {
+          tabId: number;
+          frameId: number;
+          documentId?: string;
+          parentDocumentId?: string;
+          parentFrameId?: number;
+          url: string;
+          timeStamp?: number;
+        }) => void
+      ): void;
+      removeListener(
+        callback: (details: {
+          tabId: number;
+          frameId: number;
+          documentId?: string;
+          parentDocumentId?: string;
+          parentFrameId?: number;
+          url: string;
+          timeStamp?: number;
+        }) => void
+      ): void;
+    };
+    onReferenceFragmentUpdated?: {
+      addListener(
+        callback: (details: {
+          tabId: number;
+          frameId: number;
+          documentId?: string;
+          parentDocumentId?: string;
+          parentFrameId?: number;
+          url: string;
+          timeStamp?: number;
+        }) => void
+      ): void;
+      removeListener(
+        callback: (details: {
+          tabId: number;
+          frameId: number;
+          documentId?: string;
+          parentDocumentId?: string;
+          parentFrameId?: number;
+          url: string;
+          timeStamp?: number;
+        }) => void
+      ): void;
+    };
+  };
   webRequest?: {
     onBeforeRequest: {
       addListener(
         callback: (details: {
           requestId: string;
           tabId: number;
+          documentId?: string;
           frameId?: number;
+          parentDocumentId?: string;
+          parentFrameId?: number;
           method?: string;
+          type?: string;
           url: string;
           timeStamp?: number;
         }) => void,
@@ -125,8 +245,10 @@ export type ChromeApi = {
         callback: (details: {
           requestId: string;
           tabId: number;
+          documentId?: string;
           frameId?: number;
           method?: string;
+          type?: string;
           url: string;
           timeStamp?: number;
         }) => void
@@ -137,8 +259,10 @@ export type ChromeApi = {
         callback: (details: {
           requestId: string;
           tabId: number;
+          documentId?: string;
           frameId?: number;
           method?: string;
+          type?: string;
           url: string;
           statusCode?: number;
           statusLine?: string;
@@ -150,8 +274,10 @@ export type ChromeApi = {
         callback: (details: {
           requestId: string;
           tabId: number;
+          documentId?: string;
           frameId?: number;
           method?: string;
+          type?: string;
           url: string;
           statusCode?: number;
           statusLine?: string;
@@ -164,8 +290,10 @@ export type ChromeApi = {
         callback: (details: {
           requestId: string;
           tabId: number;
+          documentId?: string;
           frameId?: number;
           method?: string;
+          type?: string;
           url: string;
           error?: string;
           timeStamp?: number;
@@ -176,8 +304,10 @@ export type ChromeApi = {
         callback: (details: {
           requestId: string;
           tabId: number;
+          documentId?: string;
           frameId?: number;
           method?: string;
+          type?: string;
           url: string;
           error?: string;
           timeStamp?: number;
@@ -186,11 +316,14 @@ export type ChromeApi = {
     };
   };
   scripting?: {
-    executeScript(options: {
-      target: { tabId: number; allFrames?: boolean };
+    executeScript<TResult = unknown>(options: {
+      target: ScriptInjectionTarget;
       world?: "MAIN" | "ISOLATED";
       files?: string[];
-    }): Promise<void>;
+      func?: (...args: never[]) => unknown;
+      args?: unknown[];
+      injectImmediately?: boolean;
+    }): Promise<InjectionResult<TResult>[]>;
   };
   storage?: {
     local: {
@@ -248,7 +381,11 @@ export type ChromeApi = {
       addListener(callback: (tabId: number) => void): void;
     };
     reload?(tabId: number, reloadProperties?: { bypassCache?: boolean }): Promise<void>;
-    sendMessage(tabId: number, message: unknown): Promise<unknown>;
+    sendMessage(
+      tabId: number,
+      message: unknown,
+      options?: { documentId?: string; frameId?: number }
+    ): Promise<unknown>;
   };
 };
 
diff --git a/apps/extension/src/shared/content-activation-protocol.test.ts b/apps/extension/src/shared/content-activation-protocol.test.ts
new file mode 100644
index 0000000..ca3e407
--- /dev/null
+++ b/apps/extension/src/shared/content-activation-protocol.test.ts
@@ -0,0 +1,148 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  createContentActivationId,
+  createContentEventBatchId,
+  createContentReadyId,
+  isContentActivationId,
+  isContentReadyId,
+  parseContentActivationId,
+  parseContentEventBatchId,
+  parseContentReadyId,
+  parseExactContentActivationIdRecord,
+  parseExactContentReadyIdRecord,
+  parseExactPlainOwnDataRecord,
+  type RandomValuesProvider
+} from "./content-activation-protocol.js";
+
+function deterministicRandom(offset = 0): RandomValuesProvider {
+  return {
+    getRandomValues(bytes) {
+      bytes.forEach((_, index) => {
+        bytes[index] = (index + offset) & 0xff;
+      });
+      return bytes;
+    }
+  };
+}
+
+describe("content activation ids", () => {
+  it("creates versioned 256-bit lowercase crypto ids", () => {
+    const readyId = createContentReadyId(deterministicRandom());
+    const activationId = createContentActivationId(deterministicRandom(16));
+    const batchId = createContentEventBatchId(deterministicRandom(32));
+
+    expect(readyId).toBe("r1_000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f");
+    expect(activationId).toBe(
+      "a1_101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f"
+    );
+    expect(batchId).toBe("b1_202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f");
+    expect(isContentReadyId(readyId)).toBe(true);
+    expect(isContentActivationId(activationId)).toBe(true);
+  });
+
+  it("accepts only fixed-width lowercase event batch ids", () => {
+    expect(parseContentEventBatchId(`b1_${"c".repeat(64)}`)).not.toBeNull();
+    expect(parseContentEventBatchId(`b1_${"C".repeat(64)}`)).toBeNull();
+    expect(parseContentEventBatchId(`b1_${"c".repeat(63)}`)).toBeNull();
+    expect(parseContentEventBatchId(`a1_${"c".repeat(64)}`)).toBeNull();
+  });
+
+  it.each([
+    "r1_",
+    `r1_${"a".repeat(63)}`,
+    `r1_${"a".repeat(65)}`,
+    `r1_${"A".repeat(64)}`,
+    `a1_${"a".repeat(64)}`,
+    `r2_${"a".repeat(64)}`,
+    42,
+    null
+  ])("rejects an invalid ready id %#", (value) => {
+    expect(parseContentReadyId(value)).toBeNull();
+  });
+
+  it.each([
+    "a1_",
+    `a1_${"f".repeat(63)}`,
+    `a1_${"f".repeat(65)}`,
+    `a1_${"F".repeat(64)}`,
+    `r1_${"f".repeat(64)}`,
+    `a2_${"f".repeat(64)}`,
+    {},
+    undefined
+  ])("rejects an invalid activation id %#", (value) => {
+    expect(parseContentActivationId(value)).toBeNull();
+  });
+
+  it("rejects a random provider that replaces the requested buffer", () => {
+    expect(() =>
+      createContentReadyId({
+        getRandomValues: () => new Uint8Array(32)
+      })
+    ).toThrow("invalid activation id buffer");
+  });
+});
+
+describe("strict own-data parsing", () => {
+  it("returns a frozen detached null-prototype copy of exact own data", () => {
+    const input = Object.freeze({ kind: "content.ready", readyId: `r1_${"a".repeat(64)}` });
+    const parsed = parseExactPlainOwnDataRecord(input, ["kind", "readyId"]);
+
+    expect(parsed).toEqual(input);
+    expect(Object.getPrototypeOf(parsed)).toBeNull();
+    expect(Object.isFrozen(parsed)).toBe(true);
+    expect(parsed).not.toBe(input);
+  });
+
+  it("accepts a null-prototype own-data record", () => {
+    const input = Object.assign(Object.create(null), { value: 7 });
+    expect(parseExactPlainOwnDataRecord(input, ["value"])).toEqual({ value: 7 });
+  });
+
+  it("rejects accessors without invoking them", () => {
+    const getter = vi.fn(() => `r1_${"b".repeat(64)}`);
+    const input = {};
+    Object.defineProperty(input, "readyId", { enumerable: true, get: getter });
+
+    expect(parseExactPlainOwnDataRecord(input, ["readyId"])).toBeNull();
+    expect(getter).not.toHaveBeenCalled();
+  });
+
+  it("rejects symbol, extra, missing, hidden, inherited, class, and array input", () => {
+    const symbol = Symbol("hidden");
+    expect(parseExactPlainOwnDataRecord({ readyId: "x", [symbol]: true }, ["readyId"])).toBeNull();
+    expect(parseExactPlainOwnDataRecord({ readyId: "x", extra: true }, ["readyId"])).toBeNull();
+    expect(parseExactPlainOwnDataRecord({}, ["readyId"])).toBeNull();
+
+    const hidden = {};
+    Object.defineProperty(hidden, "readyId", { enumerable: false, value: "x" });
+    expect(parseExactPlainOwnDataRecord(hidden, ["readyId"])).toBeNull();
+
+    expect(parseExactPlainOwnDataRecord(Object.create({ readyId: "x" }), [])).toBeNull();
+    expect(parseExactPlainOwnDataRecord(new (class Envelope {})(), [])).toBeNull();
+    expect(parseExactPlainOwnDataRecord(["x"], ["0"])).toBeNull();
+  });
+
+  it("fails closed for hostile proxy reflection", () => {
+    const proxy = new Proxy(
+      {},
+      {
+        ownKeys() {
+          throw new Error("trap");
+        }
+      }
+    );
+
+    expect(parseExactPlainOwnDataRecord(proxy, [])).toBeNull();
+  });
+
+  it("parses branded ids only from exact own-data envelopes", () => {
+    const readyId = `r1_${"c".repeat(64)}`;
+    const activationId = `a1_${"d".repeat(64)}`;
+
+    expect(parseExactContentReadyIdRecord({ readyId })?.readyId).toBe(readyId);
+    expect(parseExactContentActivationIdRecord({ activationId })?.activationId).toBe(activationId);
+    expect(parseExactContentReadyIdRecord({ readyId, extra: true })).toBeNull();
+    expect(parseExactContentActivationIdRecord({ activationId: readyId })).toBeNull();
+  });
+});
diff --git a/apps/extension/src/shared/content-activation-protocol.ts b/apps/extension/src/shared/content-activation-protocol.ts
new file mode 100644
index 0000000..0f02326
--- /dev/null
+++ b/apps/extension/src/shared/content-activation-protocol.ts
@@ -0,0 +1,196 @@
+const READY_ID_PATTERN = /^r1_[0-9a-f]{64}$/u;
+const ACTIVATION_ID_PATTERN = /^a1_[0-9a-f]{64}$/u;
+const EVENT_BATCH_ID_PATTERN = /^b1_[0-9a-f]{64}$/u;
+const CONTENT_ID_RANDOM_BYTES = 32;
+
+declare const contentReadyIdBrand: unique symbol;
+declare const contentActivationIdBrand: unique symbol;
+declare const contentEventBatchIdBrand: unique symbol;
+
+export type ContentReadyId = string & {
+  readonly [contentReadyIdBrand]: "ContentReadyId";
+};
+
+export type ContentActivationId = string & {
+  readonly [contentActivationIdBrand]: "ContentActivationId";
+};
+
+export type ContentEventBatchId = string & {
+  readonly [contentEventBatchIdBrand]: "ContentEventBatchId";
+};
+
+export type RandomValuesProvider = {
+  getRandomValues(bytes: Uint8Array): Uint8Array;
+};
+
+/**
+ * A detached, accessor-free record copied only from exact own data
+ * properties. Its null prototype prevents inherited-property confusion.
+ */
+export type PlainOwnDataRecord = Readonly<Record<string, unknown>>;
+
+export function createContentReadyId(
+  random: RandomValuesProvider = requireRandomValuesProvider()
+): ContentReadyId {
+  return `r1_${createRandomHex(random)}` as ContentReadyId;
+}
+
+export function createContentActivationId(
+  random: RandomValuesProvider = requireRandomValuesProvider()
+): ContentActivationId {
+  return `a1_${createRandomHex(random)}` as ContentActivationId;
+}
+
+export function createContentEventBatchId(
+  random: RandomValuesProvider = requireRandomValuesProvider()
+): ContentEventBatchId {
+  return `b1_${createRandomHex(random)}` as ContentEventBatchId;
+}
+
+export function parseContentReadyId(value: unknown): ContentReadyId | null {
+  return typeof value === "string" && READY_ID_PATTERN.test(value)
+    ? (value as ContentReadyId)
+    : null;
+}
+
+export function parseContentActivationId(value: unknown): ContentActivationId | null {
+  return typeof value === "string" && ACTIVATION_ID_PATTERN.test(value)
+    ? (value as ContentActivationId)
+    : null;
+}
+
+export function parseContentEventBatchId(value: unknown): ContentEventBatchId | null {
+  return typeof value === "string" && EVENT_BATCH_ID_PATTERN.test(value)
+    ? (value as ContentEventBatchId)
+    : null;
+}
+
+export function isContentReadyId(value: unknown): value is ContentReadyId {
+  return parseContentReadyId(value) !== null;
+}
+
+export function isContentActivationId(value: unknown): value is ContentActivationId {
+  return parseContentActivationId(value) !== null;
+}
+
+/**
+ * Parses untrusted message input without reading properties through ordinary
+ * access. Accessors, symbols, inherited/class instances, missing keys, and
+ * extra keys all fail closed. Getter functions are never invoked.
+ */
+export function parseExactPlainOwnDataRecord(
+  value: unknown,
+  expectedKeys: readonly string[]
+): PlainOwnDataRecord | null {
+  try {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+      return null;
+    }
+
+    const prototype = Object.getPrototypeOf(value);
+
+    if (prototype !== Object.prototype && prototype !== null) {
+      return null;
+    }
+
+    if (!hasUniqueStringKeys(expectedKeys)) {
+      throw new Error("Expected own-data keys must be unique non-empty strings.");
+    }
+
+    const ownKeys = Reflect.ownKeys(value);
+
+    if (ownKeys.length !== expectedKeys.length || ownKeys.some((key) => typeof key !== "string")) {
+      return null;
+    }
+
+    const expected = new Set(expectedKeys);
+
+    if (ownKeys.some((key) => typeof key !== "string" || !expected.has(key))) {
+      return null;
+    }
+
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    const detached = Object.create(null) as Record<string, unknown>;
+
+    for (const key of expectedKeys) {
+      const descriptor = descriptors[key];
+
+      if (!descriptor || !("value" in descriptor) || descriptor.enumerable !== true) {
+        return null;
+      }
+
+      Object.defineProperty(detached, key, {
+        configurable: false,
+        enumerable: true,
+        value: descriptor.value,
+        writable: false
+      });
+    }
+
+    return Object.freeze(detached);
+  } catch {
+    return null;
+  }
+}
+
+export function parseExactContentReadyIdRecord(
+  value: unknown,
+  expectedKeys: readonly string[] = ["readyId"]
+): (PlainOwnDataRecord & { readonly readyId: ContentReadyId }) | null {
+  const record = parseExactPlainOwnDataRecord(value, expectedKeys);
+
+  if (!record || !Object.hasOwn(record, "readyId")) {
+    return null;
+  }
+
+  const readyId = parseContentReadyId(record.readyId);
+  return readyId ? Object.freeze({ ...record, readyId }) : null;
+}
+
+export function parseExactContentActivationIdRecord(
+  value: unknown,
+  expectedKeys: readonly string[] = ["activationId"]
+): (PlainOwnDataRecord & { readonly activationId: ContentActivationId }) | null {
+  const record = parseExactPlainOwnDataRecord(value, expectedKeys);
+
+  if (!record || !Object.hasOwn(record, "activationId")) {
+    return null;
+  }
+
+  const activationId = parseContentActivationId(record.activationId);
+  return activationId ? Object.freeze({ ...record, activationId }) : null;
+}
+
+function requireRandomValuesProvider(): RandomValuesProvider {
+  const random = globalThis.crypto;
+
+  if (!random || typeof random.getRandomValues !== "function") {
+    throw new Error("Cryptographic randomness is unavailable for content activation ids.");
+  }
+
+  return random;
+}
+
+function createRandomHex(random: RandomValuesProvider): string {
+  const bytes = new Uint8Array(CONTENT_ID_RANDOM_BYTES);
+  const filled = random.getRandomValues(bytes);
+
+  if (filled !== bytes || bytes.byteLength !== CONTENT_ID_RANDOM_BYTES) {
+    throw new Error("The random-values provider returned an invalid activation id buffer.");
+  }
+
+  let hex = "";
+
+  for (const byte of bytes) {
+    hex += byte.toString(16).padStart(2, "0");
+  }
+
+  return hex;
+}
+
+function hasUniqueStringKeys(keys: readonly string[]): boolean {
+  return (
+    keys.every((key) => typeof key === "string" && key.length > 0) &&
+    new Set(keys).size === keys.length
+  );
+}
diff --git a/apps/extension/src/shared/extension-build.test.mjs b/apps/extension/src/shared/extension-build.test.mjs
index 9f938ad..397fa0d 100644
--- a/apps/extension/src/shared/extension-build.test.mjs
+++ b/apps/extension/src/shared/extension-build.test.mjs
@@ -5,12 +5,41 @@ import { dirname, resolve } from "node:path";
 import JSZip from "jszip";
 import { describe, expect, it } from "vitest";
 
+import { parseExtensionBuildArgs } from "../../scripts/lib/extension-build-cli.mjs";
 import {
+  assertChromeArchive,
   createChromeArchive,
   createExtensionManifest,
+  validateInjectedModuleBuildSource,
   validateExtensionManifest
 } from "../../scripts/lib/extension-build.mjs";
 
+describe("extension build CLI", () => {
+  it("defaults package builds to release store-safe artifacts", () => {
+    expect(parseExtensionBuildArgs(["--package"])).toMatchObject({
+      release: true,
+      packageArchive: true,
+      profile: "store-safe"
+    });
+  });
+
+  it("requires an explicit dev profile for enterprise packages", () => {
+    expect(parseExtensionBuildArgs(["--package", "--profile", "dev"])).toMatchObject({
+      release: true,
+      packageArchive: true,
+      profile: "dev"
+    });
+  });
+
+  it("keeps ordinary unpacked builds in development mode", () => {
+    expect(parseExtensionBuildArgs([])).toMatchObject({
+      release: false,
+      packageArchive: false,
+      profile: "dev"
+    });
+  });
+});
+
 describe("extension build manifest", () => {
   it("creates a development manifest with explicit CSP", () => {
     const manifest = createExtensionManifest({ version: "1.2.3" });
@@ -21,7 +50,17 @@ describe("extension build manifest", () => {
     expect(manifest.key).toBeTypeOf("string");
     expect(manifest.permissions).not.toContain("activeTab");
     expect(manifest.permissions).not.toContain("cookies");
+    expect(manifest.permissions).toContain("alarms");
     expect(manifest.permissions).toContain("tabCapture");
+    expect(manifest.permissions).toContain("webNavigation");
+    expect(manifest).not.toHaveProperty("content_scripts");
+    expect(manifest.web_accessible_resources).toEqual([
+      {
+        resources: ["content-agent.js", "injected.js"],
+        matches: ["<all_urls>"],
+        use_dynamic_url: true
+      }
+    ]);
     expect(manifest.content_security_policy?.extension_pages).toContain("script-src 'self'");
     expect(manifest.content_security_policy?.extension_pages).not.toContain("'unsafe-inline'");
     expect(validateExtensionManifest(manifest, { version: "1.2.3" })).toEqual([]);
@@ -36,7 +75,9 @@ describe("extension build manifest", () => {
 
     expect(manifest).not.toHaveProperty("key");
     expect(manifest.permissions).toContain("activeTab");
-    expect(manifest.permissions).toContain("tabCapture");
+    expect(manifest.permissions).toContain("alarms");
+    expect(manifest.permissions).not.toContain("tabCapture");
+    expect(manifest.permissions).toContain("webNavigation");
     expect(manifest.permissions).not.toContain("debugger");
     expect(manifest.permissions).not.toContain("tabs");
     expect(manifest.permissions).not.toContain("webRequest");
@@ -51,6 +92,148 @@ describe("extension build manifest", () => {
     ).toEqual([]);
   });
 
+  it.each(["dev", "store-safe"])(
+    "accepts only the exact %s permission set regardless of order",
+    (profile) => {
+      const release = profile === "store-safe";
+      const manifest = createExtensionManifest({ version: "1.2.3", release, profile });
+      manifest.permissions.reverse();
+      manifest.optional_permissions = [];
+      manifest.optional_host_permissions = [];
+
+      if (profile === "store-safe") {
+        manifest.host_permissions = [];
+      }
+
+      expect(
+        validateExtensionManifest(manifest, {
+          version: "1.2.3",
+          release,
+          profile
+        })
+      ).toEqual([]);
+    }
+  );
+
+  it.each([
+    ["dev", "history"],
+    ["dev", "cookies"],
+    ["dev", "management"],
+    ["store-safe", "history"],
+    ["store-safe", "cookies"],
+    ["store-safe", "management"],
+    ["store-safe", "tabCapture"]
+  ])("rejects undeclared %s permission %s", (profile, permission) => {
+    const release = profile === "store-safe";
+    const manifest = createExtensionManifest({ version: "1.2.3", release, profile });
+    manifest.permissions.push(permission);
+
+    const label = profile === "store-safe" ? "Store-safe" : "Dev";
+    expect(
+      validateExtensionManifest(manifest, {
+        version: "1.2.3",
+        release,
+        profile
+      })
+    ).toContain(`${label} manifest must not request undeclared permission '${permission}'.`);
+  });
+
+  it.each(["dev", "store-safe"])("rejects duplicate permissions in the %s profile", (profile) => {
+    const release = profile === "store-safe";
+    const manifest = createExtensionManifest({ version: "1.2.3", release, profile });
+    const duplicate = manifest.permissions[0];
+    manifest.permissions.push(duplicate);
+
+    expect(
+      validateExtensionManifest(manifest, {
+        version: "1.2.3",
+        release,
+        profile
+      })
+    ).toContain(`permissions must not contain duplicate value '${duplicate}'.`);
+  });
+
+  it.each([
+    ["dev", "downloads"],
+    ["store-safe", "scripting"]
+  ])("rejects a missing required %s permission", (profile, permission) => {
+    const release = profile === "store-safe";
+    const manifest = createExtensionManifest({ version: "1.2.3", release, profile });
+    manifest.permissions = manifest.permissions.filter((entry) => entry !== permission);
+
+    const label = profile === "store-safe" ? "Store-safe" : "Dev";
+    expect(
+      validateExtensionManifest(manifest, {
+        version: "1.2.3",
+        release,
+        profile
+      })
+    ).toContain(`${label} manifest must include '${permission}' permission.`);
+  });
+
+  it("rejects missing, duplicate, and undeclared dev host permissions", () => {
+    const base = createExtensionManifest({ version: "1.2.3", profile: "dev" });
+
+    const missing = { ...base, host_permissions: [] };
+    expect(validateExtensionManifest(missing, { version: "1.2.3", profile: "dev" })).toContain(
+      "Dev manifest must include <all_urls> host permission."
+    );
+
+    const duplicate = { ...base, host_permissions: ["<all_urls>", "<all_urls>"] };
+    expect(validateExtensionManifest(duplicate, { version: "1.2.3", profile: "dev" })).toContain(
+      "host_permissions must not contain duplicate value '<all_urls>'."
+    );
+
+    const undeclared = {
+      ...base,
+      host_permissions: ["<all_urls>", "https://example.com/*"]
+    };
+    expect(validateExtensionManifest(undeclared, { version: "1.2.3", profile: "dev" })).toContain(
+      "Dev manifest must not request undeclared host permission 'https://example.com/*'."
+    );
+  });
+
+  it("rejects any persistent host permissions in the store-safe profile", () => {
+    const manifest = createExtensionManifest({
+      version: "1.2.3",
+      release: true,
+      profile: "store-safe"
+    });
+    manifest.host_permissions = ["https://example.com/*"];
+
+    expect(
+      validateExtensionManifest(manifest, {
+        version: "1.2.3",
+        release: true,
+        profile: "store-safe"
+      })
+    ).toContain("Store-safe manifest must not declare persistent host_permissions.");
+  });
+
+  it.each(["optional_permissions", "optional_host_permissions"])(
+    "rejects a non-empty %s allowlist",
+    (fieldName) => {
+      const manifest = createExtensionManifest({ version: "1.2.3", profile: "dev" });
+      manifest[fieldName] = [fieldName === "optional_permissions" ? "history" : "<all_urls>"];
+
+      expect(validateExtensionManifest(manifest, { version: "1.2.3", profile: "dev" })).toContain(
+        `Manifest ${fieldName} must be absent or an empty array.`
+      );
+    }
+  );
+
+  it.each(["optional_permissions", "optional_host_permissions"])(
+    "rejects a non-array %s value",
+    (fieldName) => {
+      const manifest = createExtensionManifest({ version: "1.2.3", profile: "dev" });
+      manifest[fieldName] = null;
+
+      expect(validateExtensionManifest(manifest, { version: "1.2.3", profile: "dev" })).toContain(
+        `Manifest ${fieldName} must be absent or an empty array.`
+      );
+    }
+  );
+
   it("creates a release manifest without the development key", () => {
     const manifest = createExtensionManifest({ version: "1.2.3", release: true });
 
@@ -58,6 +241,82 @@ describe("extension build manifest", () => {
     expect(validateExtensionManifest(manifest, { version: "1.2.3", release: true })).toEqual([]);
   });
 
+  it.each(["1", "0.0.0.1", "65535.65535.65535.65535"])(
+    "accepts Chrome extension version boundary %s",
+    (version) => {
+      const manifest = createExtensionManifest({ version, release: true });
+      expect(validateExtensionManifest(manifest, { version, release: true })).toEqual([]);
+    }
+  );
+
+  it.each([
+    "0",
+    "0.0.0.0",
+    "01.2.3",
+    "1..2",
+    "1.2.65536",
+    "1.2.3.4.5",
+    "1.2.3-beta.1",
+    "1.2.3+build.7"
+  ])("rejects Chrome-incompatible extension version %s", (version) => {
+    const manifest = createExtensionManifest({ version, release: true });
+    expect(validateExtensionManifest(manifest, { version, release: true })).toContain(
+      "Manifest version must use 1-4 dot-separated integers from 0 to 65535, without leading zeroes, and must not be all zero."
+    );
+  });
+
+  it("rejects store-safe packages without restart-safe cleanup alarms", () => {
+    const manifest = createExtensionManifest({
+      version: "1.2.3",
+      release: true,
+      profile: "store-safe"
+    });
+    manifest.permissions = manifest.permissions.filter((permission) => permission !== "alarms");
+
+    expect(
+      validateExtensionManifest(manifest, {
+        version: "1.2.3",
+        release: true,
+        profile: "store-safe"
+      })
+    ).toContain("Store-safe manifest must include 'alarms' permission.");
+  });
+
+  it.each(["dev", "store-safe"])(
+    "requires webNavigation permission in the %s profile",
+    (profile) => {
+      const release = profile === "store-safe";
+      const manifest = createExtensionManifest({ version: "1.2.3", release, profile });
+      manifest.permissions = manifest.permissions.filter(
+        (permission) => permission !== "webNavigation"
+      );
+
+      const label = profile === "store-safe" ? "Store-safe" : "Dev";
+      expect(
+        validateExtensionManifest(manifest, {
+          version: "1.2.3",
+          release,
+          profile
+        })
+      ).toContain(`${label} manifest must include 'webNavigation' permission.`);
+    }
+  );
+
+  it("rejects always-on content scripts in the development profile", () => {
+    const manifest = createExtensionManifest({ version: "1.2.3", profile: "dev" });
+    manifest.content_scripts = [
+      {
+        matches: ["<all_urls>"],
+        js: ["content.js"],
+        all_frames: true
+      }
+    ];
+
+    expect(validateExtensionManifest(manifest, { version: "1.2.3", profile: "dev" })).toContain(
+      "Dev manifest must use policy-scoped dynamic content-script injection."
+    );
+  });
+
   it("fails validation when explicit CSP is removed", () => {
     const manifest = createExtensionManifest({ version: "1.2.3", release: true });
 
@@ -78,6 +337,24 @@ describe("extension build manifest", () => {
     );
   });
 
+  it.each([undefined, false])(
+    "rejects web resources when use_dynamic_url is %s",
+    (useDynamicUrl) => {
+      const manifest = createExtensionManifest({ version: "1.2.3", release: true });
+      const [resourceEntry] = manifest.web_accessible_resources;
+
+      if (useDynamicUrl === undefined) {
+        delete resourceEntry.use_dynamic_url;
+      } else {
+        resourceEntry.use_dynamic_url = useDynamicUrl;
+      }
+
+      expect(validateExtensionManifest(manifest, { version: "1.2.3", release: true })).toContain(
+        "Manifest web resources must use dynamic URLs."
+      );
+    }
+  );
+
   it("packages a release archive without the development key", async () => {
     const root = await mkdtemp(resolve(tmpdir(), "webblackbox-extension-build-test-"));
     const sourceDir = resolve(root, "build");
@@ -104,6 +381,46 @@ describe("extension build manifest", () => {
     }
   });
 
+  it("creates byte-for-byte reproducible archives without generated directory entries", async () => {
+    const root = await mkdtemp(resolve(tmpdir(), "webblackbox-extension-repro-test-"));
+    const sourceDir = resolve(root, "build");
+    const firstArchivePath = resolve(root, "first.zip");
+    const secondArchivePath = resolve(root, "second.zip");
+
+    try {
+      await writeBuildFixture(sourceDir, createExtensionManifest({ version: "1.2.3" }));
+      await createChromeArchive({ sourceDir, outputPath: firstArchivePath });
+      await createChromeArchive({ sourceDir, outputPath: secondArchivePath });
+
+      const firstBytes = await readFile(firstArchivePath);
+      const secondBytes = await readFile(secondArchivePath);
+      expect(firstBytes.equals(secondBytes)).toBe(true);
+
+      const zip = await JSZip.loadAsync(firstBytes);
+      const entries = Object.values(zip.files);
+      expect(entries.some((entry) => entry.dir)).toBe(false);
+      expect(entries.every((entry) => entry.date.getTime() === Date.UTC(1980, 0, 1))).toBe(true);
+    } finally {
+      await rm(root, { recursive: true, force: true });
+    }
+  });
+
+  it("fails closed when stale files remain in the build directory", async () => {
+    const root = await mkdtemp(resolve(tmpdir(), "webblackbox-extension-closed-build-test-"));
+    const sourceDir = resolve(root, "build");
+
+    try {
+      await writeBuildFixture(sourceDir, createExtensionManifest({ version: "1.2.3" }));
+      await writeFile(resolve(sourceDir, "unexpected-debug.txt"), "must not ship\n", "utf8");
+
+      await expect(
+        createChromeArchive({ sourceDir, outputPath: resolve(root, "archive.zip") })
+      ).rejects.toThrow("Unexpected packaged file 'unexpected-debug.txt'");
+    } finally {
+      await rm(root, { recursive: true, force: true });
+    }
+  });
+
   it("packages store-safe archives without reintroducing broad permissions", async () => {
     const root = await mkdtemp(resolve(tmpdir(), "webblackbox-extension-store-test-"));
     const sourceDir = resolve(root, "build");
@@ -127,15 +444,90 @@ describe("extension build manifest", () => {
       const packagedManifest = JSON.parse(await zip.file("manifest.json").async("text"));
 
       expect(packagedManifest).not.toHaveProperty("key");
-      expect(packagedManifest.permissions).toContain("tabCapture");
+      expect(packagedManifest.permissions).not.toContain("tabCapture");
+      expect(packagedManifest.permissions).toContain("webNavigation");
       expect(packagedManifest.permissions).not.toContain("debugger");
+      expect(packagedManifest.permissions).not.toContain("tabs");
       expect(packagedManifest.permissions).not.toContain("webRequest");
       expect(packagedManifest).not.toHaveProperty("host_permissions");
       expect(packagedManifest).not.toHaveProperty("content_scripts");
+      await expect(
+        assertChromeArchive(archive.path, {
+          version: "1.2.3",
+          profile: "store-safe"
+        })
+      ).resolves.toMatchObject({ version: "1.2.3" });
     } finally {
       await rm(root, { recursive: true, force: true });
     }
   });
+
+  it("rejects a dev archive when a store-safe artifact is required", async () => {
+    const root = await mkdtemp(resolve(tmpdir(), "webblackbox-extension-unsafe-store-test-"));
+    const sourceDir = resolve(root, "build");
+    const archivePath = resolve(root, "archive.zip");
+
+    try {
+      await writeBuildFixture(
+        sourceDir,
+        createExtensionManifest({
+          version: "1.2.3",
+          profile: "dev"
+        })
+      );
+
+      const archive = await createChromeArchive({
+        sourceDir,
+        outputPath: archivePath
+      });
+
+      await expect(
+        assertChromeArchive(archive.path, {
+          version: "1.2.3",
+          profile: "store-safe"
+        })
+      ).rejects.toThrow("Store-safe manifest must not request the debugger permission");
+    } finally {
+      await rm(root, { recursive: true, force: true });
+    }
+  });
+});
+
+describe("injected module build output", () => {
+  it("accepts only the direct bootstrap and control ESM exports", () => {
+    expect(
+      validateInjectedModuleBuildSource(`
+        function directBootstrap() {}
+        function directControl() {}
+        export {
+          directBootstrap as bootstrap,
+          directControl as control
+        };
+      `)
+    ).toEqual([]);
+  });
+
+  it.each([
+    ["no exports", "function bootstrap() {}\nfunction control() {}\n"],
+    [
+      "an extra export",
+      "export function bootstrap() {}\nexport function control() {}\nexport const autoInstall = true;\n"
+    ],
+    [
+      "a default export",
+      "export function bootstrap() {}\nexport function control() {}\nexport default bootstrap;\n"
+    ],
+    [
+      "export text inside a string",
+      "const source = 'export function bootstrap() {} export function control() {}';\n"
+    ],
+    [
+      "a star re-export",
+      "export function bootstrap() {}\nexport function control() {}\nexport * from './extra.js';\n"
+    ]
+  ])("rejects %s", (_case, source) => {
+    expect(validateInjectedModuleBuildSource(source)).not.toEqual([]);
+  });
 });
 
 async function writeBuildFixture(outputDir, manifest) {
@@ -145,7 +537,7 @@ async function writeBuildFixture(outputDir, manifest) {
     "_locales/zh_CN/messages.json": '{"extensionName":{"message":"WebBlackbox"}}\n',
     "content-agent.js": "export {};\n",
     "content.js": "export {};\n",
-    "injected.js": "export {};\n",
+    "injected.js": "export function bootstrap() {}\nexport function control() {}\n",
     "offscreen.html": "<!doctype html><title>offscreen</title>\n",
     "offscreen.js": "export {};\n",
     "options.html": "<!doctype html><title>options</title>\n",
diff --git a/apps/extension/src/shared/i18n.ts b/apps/extension/src/shared/i18n.ts
index 31b6110..21c9c33 100644
--- a/apps/extension/src/shared/i18n.ts
+++ b/apps/extension/src/shared/i18n.ts
@@ -56,9 +56,9 @@ const EXTENSION_MESSAGES = {
     popupMarkerHint: "Marker: Ctrl/Cmd + Shift + M",
     popupExportPassphraseTitle: "Export Passphrase",
     popupExportPassphraseBody:
-      "Add an AES-GCM passphrase to encrypt this export. Leave blank to export without encryption.",
+      "Enter an AES-GCM passphrase. Real-user exports cannot be created without encryption.",
     popupPassphraseLabel: "Passphrase",
-    popupPassphraseRequired: "Enter a passphrase to encrypt this export.",
+    popupPassphraseRequired: "A passphrase is required for this export.",
     popupCancel: "Cancel",
     popupExporting: "Exporting...",
     popupExported: "Exported: {name}",
@@ -72,6 +72,8 @@ const EXTENSION_MESSAGES = {
     popupLiteReloadTitle: "Reload Before Lite Capture?",
     popupLiteReloadBody:
       "Reloading the current page lets Lite capture the page startup, first network requests, and early console/errors. Unsaved page changes may be lost.",
+    popupLiteReloadBodyNoBrowserNetwork:
+      "Reloading the current page lets Lite capture page startup and early console/errors. This runtime records page-side signals only and provides no Chrome webRequest or browser-network coverage. Unsaved page changes may be lost.",
     popupLiteReloadStart: "Reload and Start Lite",
     popupLiteStartWithoutReload: "Start Without Reload",
     popupRingBuffer: "Ring buffer",
@@ -79,7 +81,6 @@ const EXTENSION_MESSAGES = {
     popupAlertSensitiveFindings: "Alert when sensitive info is found",
     popupMaxArchiveSizeMb: "Max archive size (MB)",
     popupRecentWindowMinutes: "Recent window (minutes)",
-    contentKeyboardMarker: "Keyboard marker",
     optionsSubtitle: "Configure redaction and sampling defaults per browser profile.",
     optionsRingBufferMinutes: "Ring Buffer (minutes)",
     optionsActionWindowMs: "Action Window (ms)",
@@ -87,6 +88,8 @@ const EXTENSION_MESSAGES = {
     optionsScrollHz: "Scroll Sampling (Hz)",
     optionsDomFlushMs: "DOM Flush Interval (ms)",
     optionsSnapshotIntervalMs: "DOM Snapshot Interval (ms)",
+    optionsSnapshotIntervalHelp:
+      "Controls periodic summary-only DOM snapshots. It does not capture page images or schedule screenshots.",
     optionsScreenshotIdleMs: "Screenshot Idle Interval (ms)",
     optionsScreenshotIdleHelp:
       "Lite screenshots are disabled by default. Set a positive interval only when screenshots are explicitly allowed. Full mode uses this for browser-side screenshot cadence.",
@@ -106,7 +109,7 @@ const EXTENSION_MESSAGES = {
     optionsTitle: "Capture Settings",
     optionsRuntimeProfilesTitle: "Runtime Profiles",
     optionsRuntimeProfilesSummary:
-      "WebBlackbox currently exposes two runtime profiles only: lite and full. There is no balanced mode in the shipped extension build.",
+      "Available capture profiles are shown according to the capabilities provided by this extension runtime.",
     optionsProfileSignals: "Signals: {value}",
     optionsProfileHeavyCapture: "Heavy capture: {value}",
     optionsPerformanceBudgetTitle: "Performance Budget Alerts",
@@ -117,6 +120,10 @@ const EXTENSION_MESSAGES = {
     optionsLiteProfileSummary: "Page-side lightweight signals with browser-side network metadata.",
     optionsLiteProfileSignals:
       "click / input / scroll / pointer samples / mutation summary / browser-side network baseline",
+    optionsLiteProfileSummaryNoBrowserNetwork:
+      "Page-side lightweight signals only. This runtime provides no Chrome webRequest coverage.",
+    optionsLiteProfileSignalsNoBrowserNetwork:
+      "click / input / scroll / pointer samples / mutation summary (page-side only)",
     optionsLiteProfileHeavyCapture:
       "idle screenshots disabled by default, runtime DOM snapshots stay summary-only, page-side response-body capture disabled",
     optionsFullProfileSummary:
@@ -150,7 +157,7 @@ const EXTENSION_MESSAGES = {
     sessionsDeletePrompt: "Delete session {sid}? This removes local archive data.",
     sessionsExportDialogTitle: "Export Session",
     sessionsExportDialogBody:
-      "Add an AES-GCM passphrase to encrypt this export. Leave blank to export without encryption.",
+      "Enter an AES-GCM passphrase. Real-user exports cannot be created without encryption.",
     sessionsConfirmDeleteTitle: "Confirm Delete",
     sessionsTitle: "Sessions"
   },
@@ -203,9 +210,9 @@ const EXTENSION_MESSAGES = {
     popupOptions: "设置",
     popupMarkerHint: "标记快捷键：Ctrl/Cmd + Shift + M",
     popupExportPassphraseTitle: "导出口令",
-    popupExportPassphraseBody: "填写 AES-GCM 口令可加密导出；留空则不加密导出。",
+    popupExportPassphraseBody: "请输入 AES-GCM 口令。真实用户会话必须加密后才能导出。",
     popupPassphraseLabel: "口令",
-    popupPassphraseRequired: "填写口令将加密导出。",
+    popupPassphraseRequired: "此次导出必须填写口令。",
     popupCancel: "取消",
     popupExporting: "正在导出...",
     popupExported: "已导出：{name}",
@@ -218,6 +225,8 @@ const EXTENSION_MESSAGES = {
     popupLiteReloadTitle: "启动轻量模式前刷新页面？",
     popupLiteReloadBody:
       "刷新当前页面可让轻量模式采集页面启动、首轮网络请求和早期 console/error。未保存的页面内容可能会丢失。",
+    popupLiteReloadBodyNoBrowserNetwork:
+      "刷新当前页面可让轻量模式采集页面启动和早期 console/error。当前运行时仅记录页面侧信号，不提供 Chrome webRequest 或浏览器网络覆盖。未保存的页面内容可能会丢失。",
     popupLiteReloadStart: "刷新并开始轻量模式",
     popupLiteStartWithoutReload: "不刷新，直接开始",
     popupRingBuffer: "环形缓冲区",
@@ -225,7 +234,6 @@ const EXTENSION_MESSAGES = {
     popupAlertSensitiveFindings: "发现敏感信息时提醒",
     popupMaxArchiveSizeMb: "归档最大体积（MB）",
     popupRecentWindowMinutes: "最近窗口（分钟）",
-    contentKeyboardMarker: "键盘标记",
     optionsSubtitle: "按浏览器配置文件设置默认脱敏与采样参数。",
     optionsRingBufferMinutes: "环形缓冲区（分钟）",
     optionsActionWindowMs: "动作窗口（毫秒）",
@@ -233,6 +241,8 @@ const EXTENSION_MESSAGES = {
     optionsScrollHz: "滚动采样率（Hz）",
     optionsDomFlushMs: "DOM 刷新间隔（毫秒）",
     optionsSnapshotIntervalMs: "DOM 快照间隔（毫秒）",
+    optionsSnapshotIntervalHelp:
+      "控制仅含摘要的周期性 DOM 快照；它不会采集页面图像，也不会触发截图。",
     optionsScreenshotIdleMs: "空闲截图间隔（毫秒）",
     optionsScreenshotIdleHelp:
       "轻量模式默认关闭空闲截图。仅在明确允许截图时设置为正数。完整模式会将其用于浏览器侧截图节奏。",
@@ -250,8 +260,7 @@ const EXTENSION_MESSAGES = {
     optionsSavedAt: "已保存于 {time}",
     optionsTitle: "采集设置",
     optionsRuntimeProfilesTitle: "运行时配置",
-    optionsRuntimeProfilesSummary:
-      "当前扩展仅提供两种运行时配置：lite 与 full。正式构建中不包含 balanced 模式。",
+    optionsRuntimeProfilesSummary: "下方仅显示当前扩展运行时能力所支持的采集配置。",
     optionsProfileSignals: "信号：{value}",
     optionsProfileHeavyCapture: "重采集能力：{value}",
     optionsPerformanceBudgetTitle: "性能预算告警",
@@ -261,6 +270,10 @@ const EXTENSION_MESSAGES = {
     optionsAutoFreezeOnBreach: "预算超限时自动冻结",
     optionsLiteProfileSummary: "页面侧轻量信号，结合浏览器侧网络元数据。",
     optionsLiteProfileSignals: "点击 / 输入 / 滚动 / 指针采样 / 变更摘要 / 浏览器侧网络基线",
+    optionsLiteProfileSummaryNoBrowserNetwork:
+      "仅采集页面侧轻量信号；当前运行时不提供 Chrome webRequest 覆盖。",
+    optionsLiteProfileSignalsNoBrowserNetwork:
+      "点击 / 输入 / 滚动 / 指针采样 / 变更摘要（仅页面侧）",
     optionsLiteProfileHeavyCapture:
       "默认关闭空闲截图，运行时 DOM 快照保持摘要模式，页面侧响应体采集关闭",
     optionsFullProfileSummary: "浏览器辅助采集，提供 CDP 截图、导航与更丰富的诊断信息。",
@@ -291,7 +304,7 @@ const EXTENSION_MESSAGES = {
     sessionsFallbackTab: "标签页 {tabId}",
     sessionsDeletePrompt: "删除会话 {sid}？这会移除本地归档数据。",
     sessionsExportDialogTitle: "导出会话",
-    sessionsExportDialogBody: "填写 AES-GCM 口令可加密导出；留空则不加密导出。",
+    sessionsExportDialogBody: "请输入 AES-GCM 口令。真实用户会话必须加密后才能导出。",
     sessionsConfirmDeleteTitle: "确认删除",
     sessionsTitle: "会话"
   }
diff --git a/apps/extension/src/shared/inbound-messages.test.ts b/apps/extension/src/shared/inbound-messages.test.ts
new file mode 100644
index 0000000..e01c182
--- /dev/null
+++ b/apps/extension/src/shared/inbound-messages.test.ts
@@ -0,0 +1,550 @@
+import { describe, expect, it } from "vitest";
+
+import type { MessageSenderLike } from "./chrome-api.js";
+import {
+  isAuthorizedExtensionPort,
+  parseExtensionInboundMessage,
+  type ExtensionInboundContext
+} from "./inbound-messages.js";
+import { CONTENT_EVENT_BATCH_MAX, PORT_NAMES } from "./messages.js";
+
+const EXTENSION_BASE_URL = "chrome-extension://webblackbox-test/";
+const STOP_DRAIN_TOKEN = "a".repeat(64);
+const READY_ID = `r1_${"b".repeat(64)}`;
+const ACTIVATION_ID = `a1_${"c".repeat(64)}`;
+const BATCH_ID = `b1_${"d".repeat(64)}`;
+
+const POPUP_SENDER: MessageSenderLike = {
+  url: `${EXTENSION_BASE_URL}popup.html`,
+  origin: "chrome-extension://webblackbox-test"
+};
+
+const SESSIONS_SENDER: MessageSenderLike = {
+  url: `${EXTENSION_BASE_URL}sessions.html`,
+  origin: "chrome-extension://webblackbox-test"
+};
+
+const CONTENT_SENDER: MessageSenderLike = {
+  documentId: "document-42",
+  frameId: 0,
+  url: "https://app.example.test/dashboard",
+  origin: "https://app.example.test",
+  tab: {
+    id: 42,
+    url: "https://app.example.test/dashboard"
+  }
+};
+
+function portContext(portName: string, sender: MessageSenderLike): ExtensionInboundContext {
+  return {
+    transport: "port",
+    portName,
+    sender,
+    extensionBaseUrl: EXTENSION_BASE_URL
+  };
+}
+
+function runtimeContext(sender: MessageSenderLike): ExtensionInboundContext {
+  return {
+    transport: "runtime",
+    sender,
+    extensionBaseUrl: EXTENSION_BASE_URL
+  };
+}
+
+function validRawEvent(overrides: Record<string, unknown> = {}): Record<string, unknown> {
+  return {
+    source: "content",
+    rawType: "click",
+    tabId: 42,
+    sid: "S-content",
+    t: 1_720_000_000_000,
+    mono: 123.5,
+    payload: {
+      x: 14,
+      y: 21,
+      target: {
+        tag: "BUTTON"
+      }
+    },
+    ...overrides
+  };
+}
+
+function contentBatch(events: unknown[]): Record<string, unknown> {
+  return {
+    kind: "content.events",
+    activationId: ACTIVATION_ID,
+    batchId: BATCH_ID,
+    events,
+    documentUrl: "https://app.example.test/dashboard"
+  };
+}
+
+describe("extension inbound source authorization", () => {
+  it("binds named ports to their real extension page or tab/frame sender", () => {
+    expect(
+      isAuthorizedExtensionPort(
+        { name: PORT_NAMES.popup, sender: POPUP_SENDER },
+        EXTENSION_BASE_URL
+      )
+    ).toBe(true);
+    expect(
+      isAuthorizedExtensionPort(
+        { name: PORT_NAMES.sessions, sender: SESSIONS_SENDER },
+        EXTENSION_BASE_URL
+      )
+    ).toBe(true);
+    expect(
+      isAuthorizedExtensionPort(
+        { name: PORT_NAMES.content, sender: CONTENT_SENDER },
+        EXTENSION_BASE_URL
+      )
+    ).toBe(true);
+
+    expect(
+      isAuthorizedExtensionPort(
+        { name: PORT_NAMES.popup, sender: CONTENT_SENDER },
+        EXTENSION_BASE_URL
+      )
+    ).toBe(false);
+    expect(
+      isAuthorizedExtensionPort(
+        { name: PORT_NAMES.content, sender: POPUP_SENDER },
+        EXTENSION_BASE_URL
+      )
+    ).toBe(false);
+    expect(
+      isAuthorizedExtensionPort(
+        {
+          name: PORT_NAMES.popup,
+          sender: { url: `${EXTENSION_BASE_URL}sessions.html` }
+        },
+        EXTENSION_BASE_URL
+      )
+    ).toBe(false);
+    expect(
+      isAuthorizedExtensionPort(
+        { name: "webblackbox:spoofed", sender: POPUP_SENDER },
+        EXTENSION_BASE_URL
+      )
+    ).toBe(false);
+  });
+
+  it("prevents a content sender from forging UI controls", () => {
+    expect(
+      parseExtensionInboundMessage(
+        { kind: "ui.stop", tabId: 42 },
+        portContext(PORT_NAMES.content, CONTENT_SENDER)
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        { kind: "ui.export", sid: "session-1", passphrase: "secret" },
+        runtimeContext(CONTENT_SENDER)
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        contentBatch([validRawEvent()]),
+        portContext(PORT_NAMES.popup, POPUP_SENDER)
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        { kind: "ui.start", mode: "lite", tabId: 42 },
+        portContext(PORT_NAMES.sessions, SESSIONS_SENDER)
+      )
+    ).toBeNull();
+  });
+
+  it("only permits the one-off messages used by each trusted sender", () => {
+    expect(
+      parseExtensionInboundMessage(
+        { kind: "ui.start", mode: "lite", tabId: 42 },
+        runtimeContext(POPUP_SENDER)
+      )
+    ).toEqual({ kind: "ui.start", mode: "lite", tabId: 42 });
+    expect(
+      parseExtensionInboundMessage({ kind: "ui.stop", tabId: 42 }, runtimeContext(POPUP_SENDER))
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          kind: "content.ready",
+          readyId: READY_ID,
+          reason: "recovery",
+          mainWorldController: null,
+          documentUrl: CONTENT_SENDER.url
+        },
+        runtimeContext(CONTENT_SENDER)
+      )
+    ).toEqual({
+      kind: "content.ready",
+      readyId: READY_ID,
+      reason: "recovery",
+      mainWorldController: null,
+      documentUrl: CONTENT_SENDER.url
+    });
+    expect(
+      parseExtensionInboundMessage(
+        {
+          kind: "content.armed",
+          readyId: READY_ID,
+          activationId: ACTIVATION_ID,
+          documentUrl: CONTENT_SENDER.url
+        },
+        runtimeContext(CONTENT_SENDER)
+      )
+    ).not.toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          kind: "content.main-world-control",
+          activationId: ACTIVATION_ID,
+          documentUrl: CONTENT_SENDER.url,
+          operation: "drain"
+        },
+        runtimeContext(CONTENT_SENDER)
+      )
+    ).not.toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          kind: "content.bind",
+          activationId: ACTIVATION_ID,
+          documentUrl: CONTENT_SENDER.url
+        },
+        runtimeContext(CONTENT_SENDER)
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(contentBatch([validRawEvent()]), runtimeContext(CONTENT_SENDER))
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        { kind: "ui.start", mode: "lite", tabId: 42 },
+        runtimeContext({ ...CONTENT_SENDER, url: "https://attacker.example/" })
+      )
+    ).toBeNull();
+  });
+});
+
+describe("extension inbound schema validation", () => {
+  it("accepts canonical UI messages and copies their bounded fields", () => {
+    const start = parseExtensionInboundMessage(
+      {
+        kind: "ui.start",
+        tabId: 42,
+        mode: "full",
+        reloadPage: false,
+        visualCapture: "both",
+        recordScreen: true
+      },
+      portContext(PORT_NAMES.popup, POPUP_SENDER)
+    );
+    const exportMessage = parseExtensionInboundMessage(
+      {
+        kind: "ui.export",
+        sid: "session-1",
+        passphrase: "correct horse battery staple",
+        saveAs: false,
+        policy: {
+          includeScreenshots: true,
+          includeScreenRecordings: false,
+          maxArchiveBytes: 100 * 1024 * 1024,
+          recentWindowMs: 20 * 60 * 1000
+        }
+      },
+      portContext(PORT_NAMES.popup, POPUP_SENDER)
+    );
+    const annotate = parseExtensionInboundMessage(
+      {
+        kind: "ui.annotate",
+        sid: "session-1",
+        tags: [],
+        note: "Reproduced once"
+      },
+      portContext(PORT_NAMES.sessions, SESSIONS_SENDER)
+    );
+
+    expect(start).toEqual({
+      kind: "ui.start",
+      tabId: 42,
+      mode: "full",
+      reloadPage: false,
+      visualCapture: "both",
+      recordScreen: true
+    });
+    expect(exportMessage).toEqual({
+      kind: "ui.export",
+      sid: "session-1",
+      passphrase: "correct horse battery staple",
+      saveAs: false,
+      policy: {
+        includeScreenshots: true,
+        includeScreenRecordings: false,
+        maxArchiveBytes: 100 * 1024 * 1024,
+        recentWindowMs: 20 * 60 * 1000
+      }
+    });
+    expect(annotate).toEqual({
+      kind: "ui.annotate",
+      sid: "session-1",
+      tags: [],
+      note: "Reproduced once"
+    });
+  });
+
+  it("rejects unknown fields, invalid enums, non-finite numbers, and excessive UI data", () => {
+    const popup = portContext(PORT_NAMES.popup, POPUP_SENDER);
+    const sessions = portContext(PORT_NAMES.sessions, SESSIONS_SENDER);
+
+    expect(
+      parseExtensionInboundMessage(
+        { kind: "ui.start", mode: "lite", tabId: 42, admin: true },
+        popup
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage({ kind: "ui.start", mode: "turbo", tabId: 42 }, popup)
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage({ kind: "ui.stop", tabId: Number.POSITIVE_INFINITY }, popup)
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          kind: "ui.export",
+          sid: "session-1",
+          policy: { maxArchiveBytes: Number.NaN }
+        },
+        popup
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          kind: "ui.annotate",
+          sid: "session-1",
+          tags: Array.from({ length: 13 }, (_, index) => `tag-${index}`)
+        },
+        sessions
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage({ kind: "ui.request-session-list", unexpected: "field" }, popup)
+    ).toBeNull();
+  });
+
+  it("accepts a valid bounded RawRecorderEvent batch", () => {
+    expect(
+      parseExtensionInboundMessage(
+        contentBatch([
+          validRawEvent(),
+          validRawEvent({
+            rawType: "networkBody",
+            t: 1_720_000_000_001,
+            mono: 124,
+            frame: "content-frame-2",
+            payload: {
+              reqId: "req-1",
+              mime: "application/json",
+              body: '{"ok":true}',
+              nested: [null, true, undefined, 2]
+            }
+          })
+        ]),
+        portContext(PORT_NAMES.content, CONTENT_SENDER)
+      )
+    ).toEqual(
+      contentBatch([
+        validRawEvent(),
+        validRawEvent({
+          rawType: "networkBody",
+          t: 1_720_000_000_001,
+          mono: 124,
+          frame: "content-frame-2",
+          payload: {
+            reqId: "req-1",
+            mime: "application/json",
+            body: '{"ok":true}',
+            nested: [null, true, undefined, 2]
+          }
+        })
+      ])
+    );
+  });
+
+  it("strictly parses stop-drain tokens and acknowledgements", () => {
+    const context = portContext(PORT_NAMES.content, CONTENT_SENDER);
+    const stopBatch = {
+      ...contentBatch([
+        validRawEvent({
+          rawType: "snapshot",
+          sid: "S-stop-drain",
+          payload: { reason: "stop", html: "<main>done</main>" }
+        })
+      ]),
+      stopDrainToken: STOP_DRAIN_TOKEN
+    };
+    const acknowledgement = {
+      kind: "content.stop-drained",
+      activationId: ACTIVATION_ID,
+      sid: "S-stop-drain",
+      token: STOP_DRAIN_TOKEN,
+      documentUrl: CONTENT_SENDER.url,
+      expectedArtifacts: [],
+      emittedArtifacts: [],
+      omittedArtifacts: [],
+      degradationReasons: []
+    };
+
+    expect(parseExtensionInboundMessage(stopBatch, context)).toEqual(stopBatch);
+    expect(parseExtensionInboundMessage(acknowledgement, context)).toEqual(acknowledgement);
+    expect(
+      parseExtensionInboundMessage(
+        {
+          ...acknowledgement,
+          expectedArtifacts: ["screenshot", "main-world-tail"],
+          omittedArtifacts: ["screenshot", "main-world-tail"],
+          degradationReasons: ["artifact-error"]
+        },
+        context
+      )
+    ).not.toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          ...acknowledgement,
+          expectedArtifacts: ["screenshot"],
+          omittedArtifacts: ["screenshot", "screenshot"]
+        },
+        context
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          ...acknowledgement,
+          expectedArtifacts: ["dom-secret"],
+          omittedArtifacts: ["dom-secret"]
+        },
+        context
+      )
+    ).toBeNull();
+    expect(parseExtensionInboundMessage({ ...acknowledgement, token: "" }, context)).toBeNull();
+    expect(
+      parseExtensionInboundMessage({ ...acknowledgement, token: "a".repeat(63) }, context)
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage({ ...acknowledgement, token: `${"a".repeat(63)}G` }, context)
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage({ ...stopBatch, stopDrainToken: "short" }, context)
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage({ ...acknowledgement, documentUrl: "not a url" }, context)
+    ).toBeNull();
+    expect(parseExtensionInboundMessage({ ...acknowledgement, replay: true }, context)).toBeNull();
+  });
+
+  it("enforces the sender-aligned content batch limit", () => {
+    const context = portContext(PORT_NAMES.content, CONTENT_SENDER);
+    const maximumBatch = Array.from({ length: CONTENT_EVENT_BATCH_MAX }, (_, index) =>
+      validRawEvent({ mono: index })
+    );
+    const oversizedBatch = [...maximumBatch, validRawEvent({ mono: CONTENT_EVENT_BATCH_MAX })];
+
+    expect(parseExtensionInboundMessage(contentBatch(maximumBatch), context)).not.toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        { ...contentBatch(maximumBatch), batchId: `b1_${"D".repeat(64)}` },
+        context
+      )
+    ).toBeNull();
+    expect(parseExtensionInboundMessage(contentBatch(oversizedBatch), context)).toBeNull();
+    expect(parseExtensionInboundMessage(contentBatch([]), context)).toBeNull();
+  });
+
+  it("rejects malformed, spoofed, and non-finite raw events", () => {
+    const context = portContext(PORT_NAMES.content, CONTENT_SENDER);
+
+    for (const event of [
+      validRawEvent({ source: "system" }),
+      validRawEvent({ rawType: "session-start" }),
+      validRawEvent({ tabId: -1 }),
+      validRawEvent({ sid: "" }),
+      validRawEvent({ t: Number.NaN }),
+      validRawEvent({ mono: Number.POSITIVE_INFINITY }),
+      validRawEvent({ payload: new Date() }),
+      validRawEvent({ cdpSessionId: "forged-cdp-session" })
+    ]) {
+      expect(parseExtensionInboundMessage(contentBatch([event]), context)).toBeNull();
+    }
+  });
+
+  it("rejects cyclic, accessor-backed, and excessively deep payload graphs", () => {
+    const context = portContext(PORT_NAMES.content, CONTENT_SENDER);
+    const cyclic: Record<string, unknown> = {};
+    cyclic.self = cyclic;
+
+    let deep: Record<string, unknown> = {};
+    for (let index = 0; index < 24; index += 1) {
+      deep = { child: deep };
+    }
+
+    const accessorPayload = {};
+    Object.defineProperty(accessorPayload, "secret", {
+      enumerable: true,
+      get: () => "should-not-run"
+    });
+
+    expect(
+      parseExtensionInboundMessage(contentBatch([validRawEvent({ payload: cyclic })]), context)
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(contentBatch([validRawEvent({ payload: deep })]), context)
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        contentBatch([validRawEvent({ payload: accessorPayload })]),
+        context
+      )
+    ).toBeNull();
+  });
+
+  it("fails closed on malformed envelopes and document URLs", () => {
+    const context = portContext(PORT_NAMES.content, CONTENT_SENDER);
+    const getterMessage = {};
+    Object.defineProperty(getterMessage, "kind", {
+      enumerable: true,
+      get: () => "content.ready"
+    });
+
+    expect(parseExtensionInboundMessage(null, context)).toBeNull();
+    expect(parseExtensionInboundMessage(["content.ready"], context)).toBeNull();
+    expect(parseExtensionInboundMessage(getterMessage, context)).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          kind: "content.ready",
+          readyId: READY_ID,
+          reason: "requested",
+          documentUrl: "not a url"
+        },
+        context
+      )
+    ).toBeNull();
+    expect(
+      parseExtensionInboundMessage(
+        {
+          kind: "content.bind",
+          activationId: `a1_${"A".repeat(64)}`,
+          documentUrl: CONTENT_SENDER.url
+        },
+        context
+      )
+    ).toBeNull();
+  });
+});
diff --git a/apps/extension/src/shared/inbound-messages.ts b/apps/extension/src/shared/inbound-messages.ts
new file mode 100644
index 0000000..50a4c9d
--- /dev/null
+++ b/apps/extension/src/shared/inbound-messages.ts
@@ -0,0 +1,1065 @@
+import type { RawRecorderEvent } from "@webblackbox/recorder";
+
+import type { MessageSenderLike, PortLike } from "./chrome-api.js";
+import {
+  parseContentActivationId,
+  parseContentEventBatchId,
+  parseContentReadyId
+} from "./content-activation-protocol.js";
+import {
+  CONTENT_EVENT_BATCH_MAX,
+  PORT_NAMES,
+  type ContentEventBatchMessage,
+  type ExtensionInboundMessage,
+  type UiAnnotateSessionMessage,
+  type UiExportSessionMessage,
+  type UiStartSessionMessage
+} from "./messages.js";
+import { parseMainWorldControllerHint } from "./main-world-controller.js";
+import { isStopDrainToken } from "./stop-drain-token.js";
+
+export type ExtensionInboundContext =
+  | {
+      transport: "port";
+      portName: string;
+      sender?: MessageSenderLike;
+      extensionBaseUrl: string;
+    }
+  | {
+      transport: "runtime";
+      sender?: MessageSenderLike;
+      extensionBaseUrl: string;
+    };
+
+type InboundPrincipal = "content" | "offscreen" | "options" | "popup" | "sessions";
+
+type PayloadBudget = {
+  nodes: number;
+  stringChars: number;
+};
+
+const UI_PAGE_BY_PRINCIPAL = {
+  offscreen: "offscreen.html",
+  options: "options.html",
+  popup: "popup.html",
+  sessions: "sessions.html"
+} as const;
+
+const CONTENT_RAW_TYPES = new Set([
+  "blur",
+  "click",
+  "console",
+  "cookieSnapshot",
+  "dblclick",
+  "fetch",
+  "fetchError",
+  "focus",
+  "indexedDbOp",
+  "indexedDbSnapshot",
+  "input",
+  "keydown",
+  "localStorageOp",
+  "localStorageSnapshot",
+  "longtask",
+  "marker",
+  "mousemove",
+  "mutation",
+  "networkBody",
+  "pageError",
+  "privacyViolation",
+  "resize",
+  "resourceError",
+  "rrweb",
+  "screenshot",
+  "scroll",
+  "sessionStorageOp",
+  "snapshot",
+  "sse",
+  "submit",
+  "unhandledrejection",
+  "visibilitychange",
+  "vitals",
+  "xhr"
+]);
+
+const MAX_DOCUMENT_URL_CHARS = 16 * 1024;
+const MAX_IDENTIFIER_CHARS = 256;
+const MAX_MARKER_CHARS = 512;
+const MAX_PASSPHRASE_CHARS = 4 * 1024;
+const MAX_PAYLOAD_DEPTH = 20;
+const MAX_PAYLOAD_NODES = 100_000;
+const MAX_PAYLOAD_OBJECT_KEYS = 2_048;
+const MAX_PAYLOAD_STRING_CHARS = 12 * 1024 * 1024;
+const MAX_BATCH_PAYLOAD_STRING_CHARS = 24 * 1024 * 1024;
+const MAX_TAGS = 12;
+const MAX_TAG_CHARS = 40;
+const MAX_NOTE_CHARS = 500;
+const MAX_EXPORT_BYTES = 5 * 1024 * 1024 * 1024;
+const MAX_EXPORT_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
+
+const UI_START_KEYS = new Set([
+  "kind",
+  "mode",
+  "recordScreen",
+  "reloadPage",
+  "tabId",
+  "visualCapture"
+]);
+const UI_STOP_KEYS = new Set(["kind", "tabId"]);
+const UI_EXPORT_KEYS = new Set(["kind", "passphrase", "policy", "saveAs", "sid"]);
+const UI_DELETE_KEYS = new Set(["kind", "sid"]);
+const UI_ANNOTATE_KEYS = new Set(["kind", "note", "sid", "tags"]);
+const KIND_ONLY_KEYS = new Set(["kind"]);
+const CONTENT_EVENTS_KEYS = new Set([
+  "activationId",
+  "batchId",
+  "documentUrl",
+  "events",
+  "kind",
+  "stopDrainToken"
+]);
+const CONTENT_MARKER_KEYS = new Set(["activationId", "documentUrl", "kind", "message"]);
+const CONTENT_READY_KEYS = new Set([
+  "currentActivationId",
+  "documentUrl",
+  "kind",
+  "mainWorldController",
+  "readyId",
+  "reason"
+]);
+const CONTENT_MAIN_WORLD_CONTROL_KEYS = new Set([
+  "activationId",
+  "documentUrl",
+  "kind",
+  "operation"
+]);
+const CONTENT_ARMED_KEYS = new Set(["activationId", "documentUrl", "kind", "readyId"]);
+const CONTENT_BIND_KEYS = new Set(["activationId", "documentUrl", "kind"]);
+const CONTENT_STOP_DRAINED_KEYS = new Set([
+  "activationId",
+  "degradationReasons",
+  "documentUrl",
+  "emittedArtifacts",
+  "expectedArtifacts",
+  "kind",
+  "omittedArtifacts",
+  "sid",
+  "token"
+]);
+const EXPORT_POLICY_KEYS = new Set([
+  "includeScreenRecordings",
+  "includeScreenshots",
+  "maxArchiveBytes",
+  "recentWindowMs"
+]);
+const RAW_EVENT_KEYS = new Set([
+  "frame",
+  "mono",
+  "payload",
+  "rawType",
+  "sid",
+  "source",
+  "t",
+  "tabId"
+]);
+
+/**
+ * Verifies that a named runtime port really belongs to the extension surface
+ * associated with that name. Content ports are instead bound to a concrete
+ * tab/frame sender and cannot claim an extension UI principal.
+ */
+export function isAuthorizedExtensionPort(
+  port: Pick<PortLike, "name" | "sender">,
+  extensionBaseUrl: string
+): boolean {
+  try {
+    return resolvePortPrincipal(port.name, port.sender, extensionBaseUrl) !== null;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Parses untrusted Chrome runtime input into a fresh, bounded message envelope.
+ * The source principal is authorized before payload traversal, then every
+ * control message and RawRecorderEvent is validated without type assertions.
+ */
+export function parseExtensionInboundMessage(
+  value: unknown,
+  context: ExtensionInboundContext
+): ExtensionInboundMessage | null {
+  try {
+    const principal = resolveInboundPrincipal(context);
+
+    if (!principal) {
+      return null;
+    }
+
+    const row = asPlainRecord(value);
+
+    if (!row) {
+      return null;
+    }
+
+    const kind = row.kind;
+
+    if (typeof kind !== "string" || !isKindAllowed(principal, context.transport, kind)) {
+      return null;
+    }
+
+    switch (kind) {
+      case "ui.start":
+        return parseUiStart(row);
+      case "ui.stop":
+        return parseUiStop(row);
+      case "ui.export":
+        return parseUiExport(row);
+      case "ui.delete":
+        return parseUiDelete(row);
+      case "ui.annotate":
+        return parseUiAnnotate(row);
+      case "ui.request-session-list":
+        return hasExactKeys(row, KIND_ONLY_KEYS) ? { kind } : null;
+      case "content.events":
+        return parseContentEvents(row);
+      case "content.marker":
+        return parseContentMarker(row);
+      case "content.ready":
+        return parseContentReady(row);
+      case "content.main-world-control":
+        return parseContentMainWorldControl(row);
+      case "content.armed":
+        return parseContentArmed(row);
+      case "content.bind":
+        return parseContentBind(row);
+      case "content.stop-drained":
+        return parseContentStopDrained(row);
+      default:
+        return null;
+    }
+  } catch {
+    return null;
+  }
+}
+
+function resolveInboundPrincipal(context: ExtensionInboundContext): InboundPrincipal | null {
+  if (context.transport === "port") {
+    return resolvePortPrincipal(context.portName, context.sender, context.extensionBaseUrl);
+  }
+
+  const uiPrincipal = resolveUiPrincipal(context.sender, context.extensionBaseUrl);
+
+  if (uiPrincipal) {
+    return uiPrincipal;
+  }
+
+  return isContentSender(context.sender, context.extensionBaseUrl) ? "content" : null;
+}
+
+function resolvePortPrincipal(
+  portName: string,
+  sender: MessageSenderLike | undefined,
+  extensionBaseUrl: string
+): InboundPrincipal | null {
+  if (portName === PORT_NAMES.content) {
+    return isContentSender(sender, extensionBaseUrl) ? "content" : null;
+  }
+
+  const uiPrincipal = resolveUiPrincipal(sender, extensionBaseUrl);
+
+  if (portName === PORT_NAMES.popup && uiPrincipal === "popup") {
+    return uiPrincipal;
+  }
+
+  if (portName === PORT_NAMES.sessions && uiPrincipal === "sessions") {
+    return uiPrincipal;
+  }
+
+  if (portName === PORT_NAMES.options && uiPrincipal === "options") {
+    return uiPrincipal;
+  }
+
+  if (portName === PORT_NAMES.offscreen && uiPrincipal === "offscreen") {
+    return uiPrincipal;
+  }
+
+  return null;
+}
+
+function resolveUiPrincipal(
+  sender: MessageSenderLike | undefined,
+  extensionBaseUrl: string
+): Exclude<InboundPrincipal, "content"> | null {
+  if (typeof sender?.url !== "string") {
+    return null;
+  }
+
+  for (const [principal, page] of Object.entries(UI_PAGE_BY_PRINCIPAL) as Array<
+    [Exclude<InboundPrincipal, "content">, string]
+  >) {
+    if (isExactExtensionPage(sender.url, extensionBaseUrl, page)) {
+      return principal;
+    }
+  }
+
+  return null;
+}
+
+function isContentSender(sender: MessageSenderLike | undefined, extensionBaseUrl: string): boolean {
+  const tabId = sender?.tab?.id;
+  const frameId = sender?.frameId;
+  const senderUrl = sender?.url;
+
+  if (
+    !Number.isSafeInteger(tabId) ||
+    (tabId as number) < 0 ||
+    (frameId !== undefined && (!Number.isSafeInteger(frameId) || frameId < 0)) ||
+    typeof senderUrl !== "string" ||
+    senderUrl.length === 0 ||
+    senderUrl.length > MAX_DOCUMENT_URL_CHARS
+  ) {
+    return false;
+  }
+
+  const parsedSenderUrl = parseUrl(senderUrl);
+  const parsedExtensionBase = parseUrl(extensionBaseUrl);
+
+  if (!parsedSenderUrl || !parsedExtensionBase) {
+    return false;
+  }
+
+  return !hasSameUrlAuthority(parsedSenderUrl, parsedExtensionBase);
+}
+
+function isExactExtensionPage(senderUrl: string, extensionBaseUrl: string, page: string): boolean {
+  if (senderUrl.length === 0 || senderUrl.length > MAX_DOCUMENT_URL_CHARS) {
+    return false;
+  }
+
+  const parsedSenderUrl = parseUrl(senderUrl);
+  const expectedUrl = parseUrl(new URL(page, extensionBaseUrl).href);
+
+  return Boolean(
+    parsedSenderUrl &&
+    expectedUrl &&
+    parsedSenderUrl.protocol === expectedUrl.protocol &&
+    parsedSenderUrl.host === expectedUrl.host &&
+    parsedSenderUrl.pathname === expectedUrl.pathname &&
+    parsedSenderUrl.search === "" &&
+    parsedSenderUrl.hash === ""
+  );
+}
+
+function hasSameUrlAuthority(left: URL, right: URL): boolean {
+  return left.protocol === right.protocol && left.host === right.host;
+}
+
+function parseUrl(value: string): URL | null {
+  try {
+    return new URL(value);
+  } catch {
+    return null;
+  }
+}
+
+function isKindAllowed(
+  principal: InboundPrincipal,
+  transport: ExtensionInboundContext["transport"],
+  kind: string
+): boolean {
+  if (principal === "content") {
+    if (transport === "runtime") {
+      return (
+        kind === "content.ready" ||
+        kind === "content.armed" ||
+        kind === "content.main-world-control"
+      );
+    }
+
+    return (
+      kind === "content.bind" ||
+      kind === "content.events" ||
+      kind === "content.marker" ||
+      kind === "content.stop-drained"
+    );
+  }
+
+  if (principal === "popup") {
+    if (transport === "runtime") {
+      return kind === "ui.start" || kind === "ui.export";
+    }
+
+    return (
+      kind === "ui.start" ||
+      kind === "ui.stop" ||
+      kind === "ui.export" ||
+      kind === "ui.request-session-list"
+    );
+  }
+
+  if (principal === "sessions" && transport === "port") {
+    return (
+      kind === "ui.stop" || kind === "ui.export" || kind === "ui.delete" || kind === "ui.annotate"
+    );
+  }
+
+  return false;
+}
+
+function parseUiStart(row: Record<string, unknown>): UiStartSessionMessage | null {
+  if (!hasExactKeys(row, UI_START_KEYS)) {
+    return null;
+  }
+
+  const tabId = parseOptionalTabId(row.tabId);
+  const reloadPage = parseOptionalBoolean(row.reloadPage);
+  const recordScreen = parseOptionalBoolean(row.recordScreen);
+  const visualCapture = row.visualCapture;
+
+  if (
+    tabId === null ||
+    reloadPage === null ||
+    recordScreen === null ||
+    (row.mode !== "lite" && row.mode !== "full") ||
+    (visualCapture !== undefined &&
+      visualCapture !== "screenshots" &&
+      visualCapture !== "recording" &&
+      visualCapture !== "both" &&
+      visualCapture !== "none")
+  ) {
+    return null;
+  }
+
+  return {
+    kind: "ui.start",
+    mode: row.mode,
+    ...(tabId === undefined ? {} : { tabId }),
+    ...(reloadPage === undefined ? {} : { reloadPage }),
+    ...(visualCapture === undefined ? {} : { visualCapture }),
+    ...(recordScreen === undefined ? {} : { recordScreen })
+  };
+}
+
+function parseUiStop(row: Record<string, unknown>): ExtensionInboundMessage | null {
+  if (!hasExactKeys(row, UI_STOP_KEYS)) {
+    return null;
+  }
+
+  const tabId = parseOptionalTabId(row.tabId);
+
+  if (tabId === null) {
+    return null;
+  }
+
+  return {
+    kind: "ui.stop",
+    ...(tabId === undefined ? {} : { tabId })
+  };
+}
+
+function parseUiExport(row: Record<string, unknown>): UiExportSessionMessage | null {
+  if (!hasExactKeys(row, UI_EXPORT_KEYS) || !isIdentifier(row.sid, false)) {
+    return null;
+  }
+
+  const passphrase = parseOptionalBoundedString(row.passphrase, MAX_PASSPHRASE_CHARS);
+  const saveAs = parseOptionalBoolean(row.saveAs);
+  const policy = parseExportPolicy(row.policy);
+
+  if (passphrase === null || saveAs === null || policy === null) {
+    return null;
+  }
+
+  return {
+    kind: "ui.export",
+    sid: row.sid,
+    ...(passphrase === undefined ? {} : { passphrase }),
+    ...(saveAs === undefined ? {} : { saveAs }),
+    ...(policy === undefined ? {} : { policy })
+  };
+}
+
+function parseUiDelete(row: Record<string, unknown>): ExtensionInboundMessage | null {
+  if (!hasExactKeys(row, UI_DELETE_KEYS) || !isIdentifier(row.sid, false)) {
+    return null;
+  }
+
+  return {
+    kind: "ui.delete",
+    sid: row.sid
+  };
+}
+
+function parseUiAnnotate(row: Record<string, unknown>): UiAnnotateSessionMessage | null {
+  if (!hasExactKeys(row, UI_ANNOTATE_KEYS) || !isIdentifier(row.sid, false)) {
+    return null;
+  }
+
+  const tags = parseOptionalTags(row.tags);
+  const note = parseOptionalBoundedString(row.note, MAX_NOTE_CHARS);
+
+  if (tags === null || note === null) {
+    return null;
+  }
+
+  return {
+    kind: "ui.annotate",
+    sid: row.sid,
+    ...(tags === undefined ? {} : { tags }),
+    ...(note === undefined ? {} : { note })
+  };
+}
+
+function parseContentEvents(row: Record<string, unknown>): ContentEventBatchMessage | null {
+  if (!hasExactKeys(row, CONTENT_EVENTS_KEYS)) {
+    return null;
+  }
+
+  const documentUrl = parseDocumentUrl(row.documentUrl);
+  const activationId = parseContentActivationId(row.activationId);
+  const batchId = parseContentEventBatchId(row.batchId);
+  const stopDrainToken = parseOptionalStopDrainToken(row.stopDrainToken);
+
+  if (
+    typeof documentUrl !== "string" ||
+    !activationId ||
+    !batchId ||
+    stopDrainToken === null ||
+    !isDenseArray(row.events, CONTENT_EVENT_BATCH_MAX, 1)
+  ) {
+    return null;
+  }
+
+  const events: RawRecorderEvent[] = [];
+  const budget: PayloadBudget = {
+    nodes: 0,
+    stringChars: 0
+  };
+
+  for (const value of row.events) {
+    const event = parseRawContentEvent(value, budget);
+
+    if (!event) {
+      return null;
+    }
+
+    events.push(event);
+  }
+
+  return {
+    kind: "content.events",
+    activationId,
+    batchId,
+    events,
+    documentUrl,
+    ...(stopDrainToken === undefined ? {} : { stopDrainToken })
+  };
+}
+
+function parseContentMarker(row: Record<string, unknown>): ExtensionInboundMessage | null {
+  if (
+    !hasExactKeys(row, CONTENT_MARKER_KEYS) ||
+    typeof row.message !== "string" ||
+    row.message.length === 0 ||
+    row.message.length > MAX_MARKER_CHARS
+  ) {
+    return null;
+  }
+
+  const documentUrl = parseDocumentUrl(row.documentUrl);
+  const activationId = parseContentActivationId(row.activationId);
+
+  if (typeof documentUrl !== "string" || !activationId) {
+    return null;
+  }
+
+  return {
+    kind: "content.marker",
+    activationId,
+    message: row.message,
+    documentUrl
+  };
+}
+
+function parseContentReady(row: Record<string, unknown>): ExtensionInboundMessage | null {
+  if (!hasExactKeys(row, CONTENT_READY_KEYS)) {
+    return null;
+  }
+
+  const documentUrl = parseDocumentUrl(row.documentUrl);
+  const readyId = parseContentReadyId(row.readyId);
+  const currentActivationId =
+    row.currentActivationId === undefined
+      ? undefined
+      : parseContentActivationId(row.currentActivationId);
+  const mainWorldController =
+    row.mainWorldController === null
+      ? null
+      : (parseMainWorldControllerHint(row.mainWorldController) ?? undefined);
+
+  if (
+    typeof documentUrl !== "string" ||
+    !readyId ||
+    mainWorldController === undefined ||
+    currentActivationId === null ||
+    (row.reason !== "requested" && row.reason !== "pageshow" && row.reason !== "recovery")
+  ) {
+    return null;
+  }
+
+  return {
+    kind: "content.ready",
+    readyId,
+    reason: row.reason,
+    ...(currentActivationId === undefined ? {} : { currentActivationId }),
+    documentUrl,
+    mainWorldController
+  };
+}
+
+function parseContentMainWorldControl(
+  row: Record<string, unknown>
+): ExtensionInboundMessage | null {
+  if (!hasExactKeys(row, CONTENT_MAIN_WORLD_CONTROL_KEYS)) {
+    return null;
+  }
+  const activationId = parseContentActivationId(row.activationId);
+  const documentUrl = parseDocumentUrl(row.documentUrl);
+  return activationId &&
+    typeof documentUrl === "string" &&
+    (row.operation === "activate" || row.operation === "deactivate" || row.operation === "drain")
+    ? {
+        kind: "content.main-world-control",
+        activationId,
+        documentUrl,
+        operation: row.operation
+      }
+    : null;
+}
+
+function parseContentArmed(row: Record<string, unknown>): ExtensionInboundMessage | null {
+  if (!hasExactKeys(row, CONTENT_ARMED_KEYS)) {
+    return null;
+  }
+
+  const readyId = parseContentReadyId(row.readyId);
+  const activationId = parseContentActivationId(row.activationId);
+  const documentUrl = parseDocumentUrl(row.documentUrl);
+
+  return readyId && activationId && typeof documentUrl === "string"
+    ? { kind: "content.armed", readyId, activationId, documentUrl }
+    : null;
+}
+
+function parseContentBind(row: Record<string, unknown>): ExtensionInboundMessage | null {
+  if (!hasExactKeys(row, CONTENT_BIND_KEYS)) {
+    return null;
+  }
+
+  const activationId = parseContentActivationId(row.activationId);
+  const documentUrl = parseDocumentUrl(row.documentUrl);
+
+  return activationId && typeof documentUrl === "string"
+    ? { kind: "content.bind", activationId, documentUrl }
+    : null;
+}
+
+function parseContentStopDrained(row: Record<string, unknown>): ExtensionInboundMessage | null {
+  const expectedArtifacts = parseStopDrainArtifactList(row.expectedArtifacts);
+  const emittedArtifacts = parseStopDrainArtifactList(row.emittedArtifacts);
+  const omittedArtifacts = parseStopDrainArtifactList(row.omittedArtifacts);
+  const degradationReasons = parseStopDrainDegradationReasonList(row.degradationReasons);
+
+  if (
+    !hasExactKeys(row, CONTENT_STOP_DRAINED_KEYS) ||
+    !parseContentActivationId(row.activationId) ||
+    !isIdentifier(row.sid, false) ||
+    !isStopDrainToken(row.token) ||
+    !expectedArtifacts ||
+    !emittedArtifacts ||
+    !omittedArtifacts ||
+    !degradationReasons ||
+    emittedArtifacts.some((artifact) => !expectedArtifacts.includes(artifact)) ||
+    omittedArtifacts.some((artifact) => !expectedArtifacts.includes(artifact)) ||
+    emittedArtifacts.some((artifact) => omittedArtifacts.includes(artifact)) ||
+    expectedArtifacts.some(
+      (artifact) => !emittedArtifacts.includes(artifact) && !omittedArtifacts.includes(artifact)
+    )
+  ) {
+    return null;
+  }
+
+  const documentUrl = parseDocumentUrl(row.documentUrl);
+
+  if (typeof documentUrl !== "string") {
+    return null;
+  }
+
+  return {
+    kind: "content.stop-drained",
+    activationId: parseContentActivationId(row.activationId)!,
+    sid: row.sid,
+    token: row.token,
+    documentUrl,
+    expectedArtifacts,
+    emittedArtifacts,
+    omittedArtifacts,
+    degradationReasons
+  };
+}
+
+const CONTENT_STOP_DRAIN_ARTIFACTS = [
+  "main-world-tail",
+  "snapshot",
+  "localStorageSnapshot",
+  "screenshot"
+] as const;
+const CONTENT_STOP_DRAIN_DEGRADATION_REASONS = [
+  "artifact-error",
+  "disposed",
+  "inactive",
+  "out-of-scope",
+  "main-world-tail-timeout",
+  "content-drain-error"
+] as const;
+
+function parseStopDrainArtifactList(
+  value: unknown
+): Array<(typeof CONTENT_STOP_DRAIN_ARTIFACTS)[number]> | null {
+  return Array.isArray(value) &&
+    value.length <= CONTENT_STOP_DRAIN_ARTIFACTS.length &&
+    new Set(value).size === value.length &&
+    value.every((artifact) => CONTENT_STOP_DRAIN_ARTIFACTS.some((known) => known === artifact))
+    ? (value as Array<(typeof CONTENT_STOP_DRAIN_ARTIFACTS)[number]>)
+    : null;
+}
+
+function parseStopDrainDegradationReasonList(
+  value: unknown
+): Array<(typeof CONTENT_STOP_DRAIN_DEGRADATION_REASONS)[number]> | null {
+  return Array.isArray(value) &&
+    value.length <= CONTENT_STOP_DRAIN_DEGRADATION_REASONS.length &&
+    new Set(value).size === value.length &&
+    value.every((reason) =>
+      CONTENT_STOP_DRAIN_DEGRADATION_REASONS.some((known) => known === reason)
+    )
+    ? (value as Array<(typeof CONTENT_STOP_DRAIN_DEGRADATION_REASONS)[number]>)
+    : null;
+}
+
+function parseOptionalStopDrainToken(value: unknown): string | undefined | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  return isStopDrainToken(value) ? value : null;
+}
+
+function parseRawContentEvent(value: unknown, budget: PayloadBudget): RawRecorderEvent | null {
+  const row = asPlainRecord(value);
+
+  if (
+    !row ||
+    !hasExactKeys(row, RAW_EVENT_KEYS) ||
+    row.source !== "content" ||
+    typeof row.rawType !== "string" ||
+    !CONTENT_RAW_TYPES.has(row.rawType) ||
+    !Number.isSafeInteger(row.tabId) ||
+    (row.tabId as number) < 0 ||
+    !isIdentifier(row.sid, false) ||
+    !isNonNegativeFiniteNumber(row.t) ||
+    !isNonNegativeFiniteNumber(row.mono) ||
+    (row.frame !== undefined && !isIdentifier(row.frame, false)) ||
+    !isPlainRecord(row.payload) ||
+    !isBoundedPayload(row.payload, budget)
+  ) {
+    return null;
+  }
+
+  return {
+    source: "content",
+    rawType: row.rawType,
+    tabId: row.tabId as number,
+    sid: row.sid,
+    t: row.t,
+    mono: row.mono,
+    ...(row.frame === undefined ? {} : { frame: row.frame }),
+    payload: row.payload
+  };
+}
+
+function parseExportPolicy(value: unknown): UiExportSessionMessage["policy"] | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  const row = asPlainRecord(value);
+
+  if (!row || !hasExactKeys(row, EXPORT_POLICY_KEYS)) {
+    return null;
+  }
+
+  const includeScreenshots = parseOptionalBoolean(row.includeScreenshots);
+  const includeScreenRecordings = parseOptionalBoolean(row.includeScreenRecordings);
+  const maxArchiveBytes = parseOptionalBoundedInteger(
+    row.maxArchiveBytes,
+    64 * 1024,
+    MAX_EXPORT_BYTES
+  );
+  const recentWindowMs = parseOptionalBoundedInteger(
+    row.recentWindowMs,
+    60_000,
+    MAX_EXPORT_WINDOW_MS
+  );
+
+  if (
+    includeScreenshots === null ||
+    includeScreenRecordings === null ||
+    maxArchiveBytes === null ||
+    recentWindowMs === null
+  ) {
+    return null;
+  }
+
+  return {
+    ...(includeScreenshots === undefined ? {} : { includeScreenshots }),
+    ...(includeScreenRecordings === undefined ? {} : { includeScreenRecordings }),
+    ...(maxArchiveBytes === undefined ? {} : { maxArchiveBytes }),
+    ...(recentWindowMs === undefined ? {} : { recentWindowMs })
+  };
+}
+
+function isBoundedPayload(value: Record<string, unknown>, budget: PayloadBudget): boolean {
+  const stack: Array<{ value: unknown; depth: number }> = [{ value, depth: 0 }];
+  const seen = new WeakSet<object>();
+
+  while (stack.length > 0) {
+    const current = stack.pop();
+
+    if (!current || current.depth > MAX_PAYLOAD_DEPTH) {
+      return false;
+    }
+
+    const item = current.value;
+    budget.nodes += 1;
+
+    if (budget.nodes > MAX_PAYLOAD_NODES) {
+      return false;
+    }
+
+    if (item === null || item === undefined || typeof item === "boolean") {
+      continue;
+    }
+
+    if (typeof item === "number") {
+      if (!Number.isFinite(item)) {
+        return false;
+      }
+      continue;
+    }
+
+    if (typeof item === "string") {
+      if (item.length > MAX_PAYLOAD_STRING_CHARS) {
+        return false;
+      }
+
+      budget.stringChars += item.length;
+
+      if (budget.stringChars > MAX_BATCH_PAYLOAD_STRING_CHARS) {
+        return false;
+      }
+      continue;
+    }
+
+    if (typeof item !== "object") {
+      return false;
+    }
+
+    if (seen.has(item)) {
+      return false;
+    }
+    seen.add(item);
+
+    if (Array.isArray(item)) {
+      if (!isDenseArray(item, MAX_PAYLOAD_NODES)) {
+        return false;
+      }
+
+      for (let index = item.length - 1; index >= 0; index -= 1) {
+        stack.push({ value: item[index], depth: current.depth + 1 });
+      }
+      continue;
+    }
+
+    const row = asPlainRecord(item);
+
+    if (!row) {
+      return false;
+    }
+
+    const keys = Object.keys(row);
+
+    if (keys.length > MAX_PAYLOAD_OBJECT_KEYS) {
+      return false;
+    }
+
+    for (const key of keys) {
+      if (key.length > MAX_IDENTIFIER_CHARS) {
+        return false;
+      }
+
+      budget.stringChars += key.length;
+
+      if (budget.stringChars > MAX_BATCH_PAYLOAD_STRING_CHARS) {
+        return false;
+      }
+
+      stack.push({ value: row[key], depth: current.depth + 1 });
+    }
+  }
+
+  return true;
+}
+
+function asPlainRecord(value: unknown): Record<string, unknown> | null {
+  if (!isPlainRecord(value)) {
+    return null;
+  }
+
+  const ownKeys = Reflect.ownKeys(value);
+
+  for (const key of ownKeys) {
+    if (typeof key !== "string") {
+      return null;
+    }
+
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+
+    if (!descriptor || !descriptor.enumerable || !("value" in descriptor)) {
+      return null;
+    }
+  }
+
+  return value;
+}
+
+function isPlainRecord(value: unknown): value is Record<string, unknown> {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    return false;
+  }
+
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+
+function hasExactKeys(row: Record<string, unknown>, allowed: ReadonlySet<string>): boolean {
+  const keys = Object.keys(row);
+  return keys.length <= allowed.size && keys.every((key) => allowed.has(key));
+}
+
+function isDenseArray(value: unknown, maxLength: number, minLength = 0): value is unknown[] {
+  if (!Array.isArray(value) || value.length < minLength || value.length > maxLength) {
+    return false;
+  }
+
+  const ownKeys = Reflect.ownKeys(value);
+
+  if (ownKeys.length !== value.length + 1 || !ownKeys.includes("length")) {
+    return false;
+  }
+
+  for (let index = 0; index < value.length; index += 1) {
+    const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+
+    if (!descriptor || !descriptor.enumerable || !("value" in descriptor)) {
+      return false;
+    }
+  }
+
+  return true;
+}
+
+function parseOptionalTabId(value: unknown): number | undefined | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  return Number.isSafeInteger(value) && (value as number) >= 0 ? (value as number) : null;
+}
+
+function parseOptionalBoolean(value: unknown): boolean | undefined | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  return typeof value === "boolean" ? value : null;
+}
+
+function parseOptionalBoundedInteger(
+  value: unknown,
+  min: number,
+  max: number
+): number | undefined | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  return Number.isSafeInteger(value) && (value as number) >= min && (value as number) <= max
+    ? (value as number)
+    : null;
+}
+
+function parseOptionalBoundedString(value: unknown, maxChars: number): string | undefined | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  return typeof value === "string" && value.length <= maxChars ? value : null;
+}
+
+function parseOptionalTags(value: unknown): string[] | undefined | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  if (!isDenseArray(value, MAX_TAGS)) {
+    return null;
+  }
+
+  if (
+    !value.every((tag): tag is string => typeof tag === "string" && tag.length <= MAX_TAG_CHARS)
+  ) {
+    return null;
+  }
+
+  return [...value];
+}
+
+function parseDocumentUrl(value: unknown): string | undefined | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  if (
+    typeof value !== "string" ||
+    value.length === 0 ||
+    value.length > MAX_DOCUMENT_URL_CHARS ||
+    !parseUrl(value)
+  ) {
+    return null;
+  }
+
+  return value;
+}
+
+function isIdentifier(value: unknown, allowEmpty: boolean): value is string {
+  return (
+    typeof value === "string" &&
+    value.length <= MAX_IDENTIFIER_CHARS &&
+    (allowEmpty || value.length > 0)
+  );
+}
+
+function isNonNegativeFiniteNumber(value: unknown): value is number {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0;
+}
diff --git a/apps/extension/src/shared/main-world-controller.test.ts b/apps/extension/src/shared/main-world-controller.test.ts
new file mode 100644
index 0000000..17a1ab3
--- /dev/null
+++ b/apps/extension/src/shared/main-world-controller.test.ts
@@ -0,0 +1,87 @@
+import { describe, expect, it } from "vitest";
+import { parseContentActivationId } from "./content-activation-protocol.js";
+
+import {
+  advanceMainWorldControllerHint,
+  createMainWorldControllerHint,
+  parseMainWorldControllerHint,
+  sameMainWorldControllerCapability
+} from "./main-world-controller.js";
+
+const ACTIVATION_ID = parseContentActivationId(`a1_${"a".repeat(64)}`)!;
+
+describe("MAIN-world controller hints", () => {
+  it("creates document-scoped capabilities from extension-owned randomness", () => {
+    let fill = 1;
+    const hint = createMainWorldControllerHint({
+      getRandomValues(bytes) {
+        new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength).fill(fill);
+        fill += 1;
+        return bytes;
+      }
+    });
+
+    expect(hint).toEqual({
+      secret: "01".repeat(32),
+      moduleNonce: `m1_${"02".repeat(32)}`,
+      revision: 0,
+      phase: "inactive",
+      activationId: null
+    });
+  });
+
+  it("parses exact hints and advances only non-regressing state", () => {
+    const initial = parseMainWorldControllerHint({
+      secret: "a".repeat(64),
+      moduleNonce: `m1_${"b".repeat(64)}`,
+      revision: 0,
+      phase: "inactive",
+      activationId: null
+    });
+    expect(initial).not.toBeNull();
+    expect(
+      advanceMainWorldControllerHint(initial!, {
+        revision: 1,
+        phase: "active",
+        activationId: ACTIVATION_ID
+      })
+    ).toMatchObject({ revision: 1, phase: "active", activationId: ACTIVATION_ID });
+    expect(
+      advanceMainWorldControllerHint(
+        { ...initial!, revision: 2 },
+        { revision: 1, phase: "inactive", activationId: null }
+      )
+    ).toBeNull();
+    expect(
+      advanceMainWorldControllerHint(initial!, {
+        revision: 0,
+        phase: "active",
+        activationId: ACTIVATION_ID
+      })
+    ).toBeNull();
+    expect(
+      parseMainWorldControllerHint({
+        ...initial!,
+        revision: 2,
+        phase: "drained",
+        activationId: null
+      })
+    ).toBeNull();
+  });
+
+  it("rejects malformed state and compares only exact capabilities", () => {
+    const base = parseMainWorldControllerHint({
+      secret: "a".repeat(64),
+      moduleNonce: `m1_${"b".repeat(64)}`,
+      revision: 1,
+      phase: "active",
+      activationId: ACTIVATION_ID
+    })!;
+    expect(parseMainWorldControllerHint({ ...base, extra: true })).toBeNull();
+    expect(parseMainWorldControllerHint({ ...base, activationId: null })).toBeNull();
+    expect(sameMainWorldControllerCapability(base, { ...base })).toBe(true);
+    expect(
+      sameMainWorldControllerCapability(base, { ...base, moduleNonce: `m1_${"c".repeat(64)}` })
+    ).toBe(false);
+  });
+});
diff --git a/apps/extension/src/shared/main-world-controller.ts b/apps/extension/src/shared/main-world-controller.ts
new file mode 100644
index 0000000..4df1bd9
--- /dev/null
+++ b/apps/extension/src/shared/main-world-controller.ts
@@ -0,0 +1,330 @@
+import {
+  parseContentActivationId,
+  type ContentActivationId
+} from "./content-activation-protocol.js";
+import type {
+  InjectedDirectBootstrapResult,
+  InjectedDirectControlResult
+} from "webblackbox/injected-hooks";
+
+const DIRECT_CAPABILITY_PATTERN = /^[0-9a-f]{64}$/u;
+const DIRECT_MODULE_NONCE_PATTERN = /^m1_[0-9a-f]{64}$/u;
+const DIRECT_RANDOM_BYTES = 32;
+
+export type MainWorldControllerPhase = "inactive" | "active" | "drained";
+
+export type MainWorldControllerHint = Readonly<{
+  secret: string;
+  moduleNonce: string;
+  revision: number;
+  phase: MainWorldControllerPhase;
+  activationId: ContentActivationId | null;
+}>;
+
+export type MainWorldControllerSeedMessage = Readonly<{
+  kind: "sw.main-world-controller-seed";
+  controller: MainWorldControllerHint;
+}>;
+
+export type MainWorldControllerSeedAck = Readonly<{
+  kind: "content.main-world-controller-seeded";
+  controller: MainWorldControllerHint;
+}>;
+
+type RandomSource = Pick<Crypto, "getRandomValues">;
+
+export function createMainWorldControllerHint(
+  random: RandomSource | null | undefined = globalThis.crypto
+): MainWorldControllerHint {
+  return {
+    secret: createRandomHex(random, ""),
+    moduleNonce: createRandomHex(random, "m1_"),
+    revision: 0,
+    phase: "inactive",
+    activationId: null
+  };
+}
+
+export function parseMainWorldControllerHint(value: unknown): MainWorldControllerHint | null {
+  try {
+    const row = asPlainRecord(value);
+    if (
+      !row ||
+      !hasExactKeys(row, ["secret", "moduleNonce", "revision", "phase", "activationId"]) ||
+      typeof row.secret !== "string" ||
+      !DIRECT_CAPABILITY_PATTERN.test(row.secret) ||
+      typeof row.moduleNonce !== "string" ||
+      !DIRECT_MODULE_NONCE_PATTERN.test(row.moduleNonce) ||
+      !isRevision(row.revision) ||
+      (row.phase !== "inactive" && row.phase !== "active" && row.phase !== "drained")
+    ) {
+      return null;
+    }
+
+    const activationId =
+      row.activationId === null ? null : parseContentActivationId(row.activationId);
+    if (
+      (row.activationId !== null && !activationId) ||
+      (row.phase === "active" && !activationId) ||
+      (row.phase === "drained" && !activationId) ||
+      (row.phase === "inactive" && activationId !== null)
+    ) {
+      return null;
+    }
+
+    return {
+      secret: row.secret,
+      moduleNonce: row.moduleNonce,
+      revision: row.revision,
+      phase: row.phase,
+      activationId
+    };
+  } catch {
+    return null;
+  }
+}
+
+export function parseMainWorldControllerSeedMessage(
+  value: unknown
+): MainWorldControllerSeedMessage | null {
+  const row = asPlainRecord(value);
+  const controller = parseMainWorldControllerHint(row?.controller);
+  return row &&
+    hasExactKeys(row, ["kind", "controller"]) &&
+    row.kind === "sw.main-world-controller-seed" &&
+    controller
+    ? { kind: "sw.main-world-controller-seed", controller }
+    : null;
+}
+
+export function parseMainWorldControllerSeedAck(value: unknown): MainWorldControllerSeedAck | null {
+  const row = asPlainRecord(value);
+  const controller = parseMainWorldControllerHint(row?.controller);
+  return row &&
+    hasExactKeys(row, ["kind", "controller"]) &&
+    row.kind === "content.main-world-controller-seeded" &&
+    controller
+    ? { kind: "content.main-world-controller-seeded", controller }
+    : null;
+}
+
+export function parseInjectedDirectBootstrapResult(
+  value: unknown
+): InjectedDirectBootstrapResult | null {
+  const row = asPlainRecord(value);
+  if (!row || typeof row.kind !== "string") {
+    return null;
+  }
+  if (row.kind === "rejected" || row.kind === "unavailable") {
+    return hasExactKeys(row, ["kind"]) ? { kind: row.kind } : null;
+  }
+  return (row.kind === "installed" || row.kind === "existing") &&
+    hasExactKeys(row, ["kind", "phase", "revision"]) &&
+    isPhase(row.phase) &&
+    isRevision(row.revision)
+    ? { kind: row.kind, phase: row.phase, revision: row.revision }
+    : null;
+}
+
+export function parseInjectedDirectControlResult(
+  value: unknown
+): InjectedDirectControlResult | null {
+  const row = asPlainRecord(value);
+  if (!row || typeof row.kind !== "string") {
+    return null;
+  }
+  if (row.kind === "unavailable") {
+    return hasExactKeys(row, ["kind"]) ? { kind: "unavailable" } : null;
+  }
+  if (row.kind === "rejected") {
+    return hasExactKeys(row, ["kind", "reason"]) &&
+      (row.reason === "activation-mismatch" ||
+        row.reason === "capability" ||
+        row.reason === "invalid-command" ||
+        row.reason === "stale")
+      ? { kind: "rejected", reason: row.reason }
+      : null;
+  }
+  if (row.kind === "activated" || row.kind === "deactivated") {
+    const activationId = parseContentActivationId(row.activationId);
+    return hasExactKeys(row, ["kind", "activationId", "revision"]) &&
+      activationId &&
+      isPositiveRevision(row.revision)
+      ? { kind: row.kind, activationId, revision: row.revision }
+      : null;
+  }
+  if (row.kind === "probed") {
+    const activationId =
+      row.activationId === null ? null : parseContentActivationId(row.activationId);
+    return hasExactKeys(row, [
+      "kind",
+      "phase",
+      "revision",
+      "activationId",
+      "producedThrough",
+      "truncatedBefore"
+    ]) &&
+      isPhase(row.phase) &&
+      isRevision(row.revision) &&
+      (row.activationId === null || activationId) &&
+      (row.phase === "inactive" ? activationId === null : activationId !== null) &&
+      isRevision(row.producedThrough) &&
+      isRevision(row.truncatedBefore) &&
+      row.truncatedBefore <= row.producedThrough
+      ? {
+          kind: "probed",
+          phase: row.phase,
+          revision: row.revision,
+          activationId,
+          producedThrough: row.producedThrough,
+          truncatedBefore: row.truncatedBefore
+        }
+      : null;
+  }
+  if (row.kind !== "drained") {
+    return null;
+  }
+  const activationId = parseContentActivationId(row.activationId);
+  if (
+    !hasExactKeys(row, [
+      "kind",
+      "activationId",
+      "revision",
+      "events",
+      "producedThrough",
+      "truncatedBefore",
+      "degraded",
+      "replayed"
+    ]) ||
+    !activationId ||
+    !isPositiveRevision(row.revision) ||
+    !Array.isArray(row.events) ||
+    row.events.length > 4_096 ||
+    !isRevision(row.producedThrough) ||
+    !isRevision(row.truncatedBefore) ||
+    row.truncatedBefore > row.producedThrough ||
+    typeof row.degraded !== "boolean" ||
+    row.degraded !== row.truncatedBefore > 0 ||
+    typeof row.replayed !== "boolean"
+  ) {
+    return null;
+  }
+  const events = row.events.map((event) => parseDirectReplayEvent(event, activationId));
+  return events.every((event) => event !== null)
+    ? {
+        kind: "drained",
+        activationId,
+        revision: row.revision,
+        events: events as NonNullable<(typeof events)[number]>[],
+        producedThrough: row.producedThrough,
+        truncatedBefore: row.truncatedBefore,
+        degraded: row.degraded,
+        replayed: row.replayed
+      }
+    : null;
+}
+
+export function sameMainWorldControllerCapability(
+  left: MainWorldControllerHint,
+  right: MainWorldControllerHint
+): boolean {
+  return (
+    constantTimeStringEqual(left.secret, right.secret) &&
+    constantTimeStringEqual(left.moduleNonce, right.moduleNonce)
+  );
+}
+
+export function advanceMainWorldControllerHint(
+  current: MainWorldControllerHint,
+  update: Pick<MainWorldControllerHint, "revision" | "phase" | "activationId">
+): MainWorldControllerHint | null {
+  if (!isRevision(update.revision) || update.revision < current.revision) {
+    return null;
+  }
+  if (update.revision === current.revision) {
+    return update.phase === current.phase && update.activationId === current.activationId
+      ? current
+      : null;
+  }
+  return parseMainWorldControllerHint({
+    ...current,
+    revision: update.revision,
+    phase: update.phase,
+    activationId: update.activationId
+  });
+}
+
+function createRandomHex(random: RandomSource | null | undefined, prefix: "" | "m1_"): string {
+  if (!random || typeof random.getRandomValues !== "function") {
+    throw new Error("Cryptographic randomness is unavailable for MAIN-world control.");
+  }
+  const bytes = new Uint8Array(DIRECT_RANDOM_BYTES);
+  const filled = random.getRandomValues(bytes);
+  if (filled !== bytes) {
+    throw new Error("Cryptographic randomness did not fill the requested MAIN-world capability.");
+  }
+  return `${prefix}${[...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+
+function isRevision(value: unknown): value is number {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+
+function isPositiveRevision(value: unknown): value is number {
+  return isRevision(value) && value > 0;
+}
+
+function isPhase(value: unknown): value is MainWorldControllerPhase {
+  return value === "inactive" || value === "active" || value === "drained";
+}
+
+function parseDirectReplayEvent(value: unknown, activationId: ContentActivationId) {
+  const row = asPlainRecord(value);
+  return row &&
+    hasExactKeys(row, ["activationId", "seq", "rawType", "payload", "t", "mono"]) &&
+    row.activationId === activationId &&
+    isPositiveRevision(row.seq) &&
+    typeof row.rawType === "string" &&
+    row.rawType.length > 0 &&
+    asPlainRecord(row.payload) &&
+    typeof row.t === "number" &&
+    Number.isFinite(row.t) &&
+    typeof row.mono === "number" &&
+    Number.isFinite(row.mono)
+    ? {
+        activationId,
+        seq: row.seq,
+        rawType: row.rawType,
+        payload: row.payload as Record<string, unknown>,
+        t: row.t,
+        mono: row.mono
+      }
+    : null;
+}
+
+function constantTimeStringEqual(left: string, right: string): boolean {
+  let mismatch = left.length === right.length ? 0 : 1;
+  const length = Math.max(left.length, right.length);
+  for (let index = 0; index < length; index += 1) {
+    mismatch |= left.charCodeAt(index) ^ right.charCodeAt(index);
+  }
+  return mismatch === 0;
+}
+
+function asPlainRecord(value: unknown): Record<string, unknown> | null {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    return null;
+  }
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function hasExactKeys(record: Record<string, unknown>, keys: readonly string[]): boolean {
+  const expected = new Set(keys);
+  return (
+    Object.keys(record).length === expected.size &&
+    Object.keys(record).every((key) => expected.has(key))
+  );
+}
diff --git a/apps/extension/src/shared/messages.ts b/apps/extension/src/shared/messages.ts
index eee1117..50e4d26 100644
--- a/apps/extension/src/shared/messages.ts
+++ b/apps/extension/src/shared/messages.ts
@@ -8,6 +8,14 @@ import type {
 } from "@webblackbox/protocol";
 
 import type { RawRecorderEvent } from "@webblackbox/recorder";
+import type { InjectedDirectControlResult } from "webblackbox/injected-hooks";
+
+import type {
+  ContentActivationId,
+  ContentEventBatchId,
+  ContentReadyId
+} from "./content-activation-protocol.js";
+import type { MainWorldControllerHint } from "./main-world-controller.js";
 
 export const PORT_NAMES = {
   content: "webblackbox:content",
@@ -17,6 +25,30 @@ export const PORT_NAMES = {
   offscreen: "webblackbox:offscreen"
 } as const;
 
+export const CONTENT_EVENT_BATCH_MAX = 120;
+
+export type OffscreenScreenRecordingChunkMessage = {
+  kind: "offscreen.screen-recording-chunk";
+  sid: string;
+  recordingId: string;
+  index: number;
+  mime: string;
+  bytes: Uint8Array;
+  size: number;
+  startOffsetMs?: number;
+  endOffsetMs?: number;
+  durationMs?: number;
+};
+
+export type ScreenRecordingChunkAckMessage = {
+  kind: "sw.screen-recording-chunk-ack";
+  sid: string;
+  recordingId: string;
+  index: number;
+  size: number;
+  chunkId: string;
+};
+
 export type FullModeVisualCapture = "screenshots" | "recording" | "both" | "none";
 
 export type UiStartSessionMessage = {
@@ -64,23 +96,81 @@ export type UiRequestSessionListMessage = {
 
 export type ContentEventBatchMessage = {
   kind: "content.events";
+  activationId: ContentActivationId;
+  batchId: ContentEventBatchId;
   events: RawRecorderEvent[];
+  documentUrl: string;
+  stopDrainToken?: string;
+};
+
+export type ContentEventBatchAckMessage = {
+  kind: "sw.content-events-ack";
+  activationId: ContentActivationId;
+  batchId: ContentEventBatchId;
 };
 
 export type ContentMarkerMessage = {
   kind: "content.marker";
+  activationId: ContentActivationId;
   message: string;
+  documentUrl: string;
 };
 
 export type ContentReadyMessage = {
   kind: "content.ready";
+  readyId: ContentReadyId;
+  reason: "requested" | "pageshow" | "recovery";
+  currentActivationId?: ContentActivationId;
+  documentUrl: string;
+  mainWorldController: MainWorldControllerHint | null;
+};
+
+export type ContentMainWorldControlMessage = {
+  kind: "content.main-world-control";
+  activationId: ContentActivationId;
+  documentUrl: string;
+  operation: "activate" | "deactivate" | "drain";
+};
+
+export type ContentArmedMessage = {
+  kind: "content.armed";
+  readyId: ContentReadyId;
+  activationId: ContentActivationId;
+  documentUrl: string;
+};
+
+export type ContentBindMessage = {
+  kind: "content.bind";
+  activationId: ContentActivationId;
+  documentUrl: string;
 };
 
 export type ContentStopDrainedMessage = {
   kind: "content.stop-drained";
+  activationId: ContentActivationId;
   sid: string;
+  token: string;
+  documentUrl: string;
+  expectedArtifacts: ContentStopDrainArtifact[];
+  emittedArtifacts: ContentStopDrainArtifact[];
+  omittedArtifacts: ContentStopDrainOmission[];
+  degradationReasons: ContentStopDrainDegradationReason[];
 };
 
+export type ContentStopDrainArtifact =
+  | "main-world-tail"
+  | "snapshot"
+  | "localStorageSnapshot"
+  | "screenshot";
+export type ContentStopDrainOmission = ContentStopDrainArtifact;
+export type ContentStopDrainDegradationReason =
+  | "artifact-error"
+  | "disposed"
+  | "inactive"
+  | "out-of-scope"
+  | "main-world-tail-timeout"
+  | "content-drain-error";
+
 export type ExtensionInboundMessage =
   | UiStartSessionMessage
   | UiStopSessionMessage
@@ -91,11 +181,15 @@ export type ExtensionInboundMessage =
   | ContentEventBatchMessage
   | ContentMarkerMessage
   | ContentReadyMessage
+  | ContentMainWorldControlMessage
+  | ContentArmedMessage
+  | ContentBindMessage
   | ContentStopDrainedMessage;
 
 export type RecordingStatusMessage = {
   kind: "sw.recording-status";
   active: boolean;
+  tabId?: number;
   sid?: string;
   mode?: CaptureMode;
   sampling?: Pick<
@@ -108,6 +202,92 @@ export type RecordingStatusMessage = {
     | "bodyCaptureMaxBytes"
   >;
   capturePolicy?: CapturePolicy;
+  stopDrain?: {
+    token: string;
+    deadline: number;
+    documentUrl: string;
+  };
+};
+
+export type RequestContentReadyMessage = {
+  kind: "sw.request-content-ready";
+  sameDocumentTransition?: ContentSameDocumentTransition;
+};
+
+export type ContentSameDocumentTransition = {
+  previousActivationId: ContentActivationId;
+  frameId: number;
+  documentId: string;
+  previousDocumentUrl: string;
+  documentUrl: string;
+  revision: number;
+};
+
+export type ContentPrepareMessage = {
+  kind: "sw.content-prepare";
+  readyId: ContentReadyId;
+  activationId: ContentActivationId;
+  sid: string;
+  tabId: number;
+  mode: CaptureMode;
+  sampling: RecordingStatusMessage["sampling"];
+  capturePolicy: CapturePolicy;
+  mainWorldController: MainWorldControllerHint | null;
+};
+
+export type ContentInactiveMessage = {
+  kind: "sw.content-inactive";
+  readyId: ContentReadyId;
+};
+
+export type ContentActivatedMessage = {
+  kind: "sw.content-activated";
+  activationId: ContentActivationId;
+};
+
+export type ContentMainWorldControlResultMessage = {
+  kind: "sw.main-world-control-result";
+  activationId: ContentActivationId;
+  operation: ContentMainWorldControlMessage["operation"];
+  controller: MainWorldControllerHint;
+  result: InjectedDirectControlResult;
+};
+
+export type ContentBoundMessage = {
+  kind: "sw.content-bound";
+  activationId: ContentActivationId;
+};
+
+export type ContentUrlChangedMessage = {
+  kind: "sw.content-url";
+  activationId: ContentActivationId;
+  documentUrl: string;
+  revision: number;
+};
+
+export type ContentDrainMessage = {
+  kind: "sw.content-drain";
+  activationId: ContentActivationId;
+  sid: string;
+  token: string;
+  deadline: number;
+  documentUrl: string;
+};
+
+export type ContentQuiesceMessage = {
+  kind: "sw.content-quiesce";
+  activationId: ContentActivationId;
+};
+
+export type ContentRevokedMessage = {
+  kind: "sw.content-revoked";
+  activationId: ContentActivationId;
+  reason: string;
+};
+
+export type ContentResetMessage = {
+  kind: "sw.content-reset";
+  reason: string;
 };
 
 export type FreezeNoticeMessage = {
@@ -167,6 +347,18 @@ export type PipelineStatusMessage = {
 
 export type ExtensionOutboundMessage =
   | RecordingStatusMessage
+  | RequestContentReadyMessage
+  | ContentPrepareMessage
+  | ContentInactiveMessage
+  | ContentActivatedMessage
+  | ContentMainWorldControlResultMessage
+  | ContentBoundMessage
+  | ContentEventBatchAckMessage
+  | ContentUrlChangedMessage
+  | ContentQuiesceMessage
+  | ContentDrainMessage
+  | ContentRevokedMessage
+  | ContentResetMessage
   | FreezeNoticeMessage
   | SessionListMessage
   | ExportStatusMessage
diff --git a/apps/extension/src/shared/mode-profile.test.ts b/apps/extension/src/shared/mode-profile.test.ts
index ca2848b..c5dd689 100644
--- a/apps/extension/src/shared/mode-profile.test.ts
+++ b/apps/extension/src/shared/mode-profile.test.ts
@@ -4,7 +4,8 @@ import { describe, expect, it } from "vitest";
 import {
   MODE_PRODUCT_PROFILES,
   applyModeProductBoundary,
-  shouldInjectPageHooksForMode
+  shouldInjectIsolatedContentForMode,
+  shouldInjectMainWorldHooksForMode
 } from "./mode-profile.js";
 
 describe("mode-profile", () => {
@@ -68,12 +69,27 @@ describe("mode-profile", () => {
     expect(next.capturePolicy?.categories.cdp).toBe("full");
   });
 
-  it("injects page hooks for both shipped capture modes", () => {
-    expect(shouldInjectPageHooksForMode("lite")).toBe(true);
-    expect(shouldInjectPageHooksForMode("full")).toBe(true);
+  it("keeps isolated interaction agents in both modes", () => {
+    expect(shouldInjectIsolatedContentForMode("lite")).toBe(true);
+    expect(shouldInjectIsolatedContentForMode("full")).toBe(true);
+  });
+
+  it("reserves page MAIN-world hooks for Lite mode", () => {
+    expect(shouldInjectMainWorldHooksForMode("lite")).toBe(true);
+    expect(shouldInjectMainWorldHooksForMode("full")).toBe(false);
   });
 
   it("documents only the shipped runtime profiles", () => {
     expect(Object.keys(MODE_PRODUCT_PROFILES).sort()).toEqual(["full", "lite"]);
   });
+
+  it("keeps static Lite profile copy neutral about optional browser capabilities", () => {
+    const liteCopy = MODE_PRODUCT_PROFILES.lite;
+
+    expect(liteCopy.summary).toContain("runtime-dependent browser integration");
+    expect(liteCopy.signals).toContain("depend on runtime capabilities");
+    expect(`${liteCopy.summary} ${liteCopy.signals}`).not.toContain(
+      "browser-side network baseline"
+    );
+  });
 });
diff --git a/apps/extension/src/shared/mode-profile.ts b/apps/extension/src/shared/mode-profile.ts
index 496b204..2d76c5b 100644
--- a/apps/extension/src/shared/mode-profile.ts
+++ b/apps/extension/src/shared/mode-profile.ts
@@ -15,9 +15,9 @@ export type ModeProductProfile = {
 export const MODE_PRODUCT_PROFILES: Record<CaptureMode, ModeProductProfile> = {
   lite: {
     label: "Lite",
-    summary: "Page-side lightweight signals with browser-side network metadata.",
+    summary: "Page-side lightweight signals with runtime-dependent browser integration.",
     signals:
-      "click / input / scroll / pointer samples / mutation summary / browser-side network baseline",
+      "click / input / scroll / pointer samples / mutation summary; browser-side signals depend on runtime capabilities",
     heavyCapture:
       "idle screenshots disabled by default, runtime DOM snapshots stay summary-only, page-side response-body capture disabled"
   },
@@ -56,10 +56,14 @@ export function applyModeProductBoundary(
   return next;
 }
 
-export function shouldInjectPageHooksForMode(mode: CaptureMode): boolean {
+export function shouldInjectIsolatedContentForMode(mode: CaptureMode): boolean {
   return mode === "lite" || mode === "full";
 }
 
+export function shouldInjectMainWorldHooksForMode(mode: CaptureMode): boolean {
+  return mode === "lite";
+}
+
 function applyFullModeCapturePolicy(policy: CapturePolicy | undefined): CapturePolicy {
   const basePolicy = policy ?? DEFAULT_CAPTURE_POLICY;
 
diff --git a/apps/extension/src/shared/runtime-capabilities.test.ts b/apps/extension/src/shared/runtime-capabilities.test.ts
new file mode 100644
index 0000000..1d4c887
--- /dev/null
+++ b/apps/extension/src/shared/runtime-capabilities.test.ts
@@ -0,0 +1,386 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  RUNTIME_START_CAPABILITY_ERRORS,
+  assertRuntimeStartRequirements,
+  resolveInstalledRuntimeCapabilities,
+  resolveRuntimeCapabilities,
+  type RuntimeCapabilities
+} from "./runtime-capabilities.js";
+
+const STORE_SAFE_MANIFEST = {
+  permissions: [
+    "activeTab",
+    "alarms",
+    "downloads",
+    "offscreen",
+    "scripting",
+    "storage",
+    "tabCapture",
+    "webNavigation"
+  ]
+};
+
+const DEV_MANIFEST = {
+  permissions: [
+    "alarms",
+    "debugger",
+    "downloads",
+    "offscreen",
+    "scripting",
+    "storage",
+    "tabCapture",
+    "tabs",
+    "webNavigation",
+    "webRequest"
+  ],
+  host_permissions: ["<all_urls>"]
+};
+
+function createCompleteChromeApi() {
+  return {
+    scripting: {
+      executeScript: async () => []
+    },
+    debugger: {
+      attach: async () => undefined,
+      detach: async () => undefined,
+      sendCommand: async () => ({}),
+      onEvent: createEvent(),
+      onDetach: createEvent()
+    },
+    tabCapture: {
+      getMediaStreamId: async () => "stream-id"
+    },
+    webRequest: {
+      onBeforeRequest: createEvent(),
+      onCompleted: createEvent(),
+      onErrorOccurred: createEvent()
+    }
+  };
+}
+
+function createEvent() {
+  return {
+    addListener: () => undefined,
+    removeListener: () => undefined
+  };
+}
+
+describe("resolveRuntimeCapabilities", () => {
+  it("keeps the current store-safe profile on Lite core without browser network or Full", () => {
+    const capabilities = resolveRuntimeCapabilities({
+      manifest: STORE_SAFE_MANIFEST,
+      chromeApi: createCompleteChromeApi()
+    });
+
+    expect(capabilities).toEqual({
+      pageInjection: true,
+      browserNetwork: "none",
+      cdp: false,
+      tabCapture: true,
+      fullMode: false,
+      globalVisual: false
+    });
+    expect(Object.isFrozen(capabilities)).toBe(true);
+  });
+
+  it("enables every static capability for the complete dev profile and API surface", () => {
+    expect(
+      resolveRuntimeCapabilities({
+        manifest: DEV_MANIFEST,
+        chromeApi: createCompleteChromeApi()
+      })
+    ).toEqual({
+      pageInjection: true,
+      browserNetwork: "webRequest",
+      cdp: true,
+      tabCapture: true,
+      fullMode: true,
+      globalVisual: true
+    });
+  });
+
+  it.each([
+    ["scripting permission", "scripting", "pageInjection"],
+    ["debugger permission", "debugger", "cdp"],
+    ["tabCapture permission", "tabCapture", "tabCapture"],
+    ["webRequest permission", "webRequest", "browserNetwork"]
+  ] as const)("fails closed when the %s is missing", (_label, permission, capability) => {
+    const manifest = {
+      ...DEV_MANIFEST,
+      permissions: DEV_MANIFEST.permissions.filter((entry) => entry !== permission)
+    };
+
+    const resolved = resolveRuntimeCapabilities({ manifest, chromeApi: createCompleteChromeApi() });
+
+    expect(resolved[capability]).toBe(capability === "browserNetwork" ? "none" : false);
+  });
+
+  it("requires either activeTab or broad host access for page injection", () => {
+    const manifest = {
+      permissions: DEV_MANIFEST.permissions.filter((entry) => entry !== "debugger")
+    };
+
+    expect(
+      resolveRuntimeCapabilities({ manifest, chromeApi: createCompleteChromeApi() }).pageInjection
+    ).toBe(false);
+  });
+
+  it("requires the activeTab permission for store-safe page injection", () => {
+    const manifest = {
+      permissions: STORE_SAFE_MANIFEST.permissions.filter((entry) => entry !== "activeTab")
+    };
+
+    expect(
+      resolveRuntimeCapabilities({ manifest, chromeApi: createCompleteChromeApi() }).pageInjection
+    ).toBe(false);
+  });
+
+  it("requires broad host access for browser-side webRequest capture", () => {
+    const manifest = { permissions: DEV_MANIFEST.permissions };
+
+    expect(
+      resolveRuntimeCapabilities({ manifest, chromeApi: createCompleteChromeApi() }).browserNetwork
+    ).toBe("none");
+  });
+
+  it.each([
+    ["scripting.executeScript", ["scripting", "executeScript"], "pageInjection"],
+    ["debugger.attach", ["debugger", "attach"], "cdp"],
+    ["debugger.detach", ["debugger", "detach"], "cdp"],
+    ["debugger.sendCommand", ["debugger", "sendCommand"], "cdp"],
+    ["debugger.onEvent.addListener", ["debugger", "onEvent", "addListener"], "cdp"],
+    ["debugger.onEvent.removeListener", ["debugger", "onEvent", "removeListener"], "cdp"],
+    ["debugger.onDetach.addListener", ["debugger", "onDetach", "addListener"], "cdp"],
+    ["debugger.onDetach.removeListener", ["debugger", "onDetach", "removeListener"], "cdp"],
+    ["tabCapture.getMediaStreamId", ["tabCapture", "getMediaStreamId"], "tabCapture"],
+    [
+      "webRequest.onBeforeRequest.addListener",
+      ["webRequest", "onBeforeRequest", "addListener"],
+      "browserNetwork"
+    ],
+    [
+      "webRequest.onBeforeRequest.removeListener",
+      ["webRequest", "onBeforeRequest", "removeListener"],
+      "browserNetwork"
+    ],
+    [
+      "webRequest.onCompleted.addListener",
+      ["webRequest", "onCompleted", "addListener"],
+      "browserNetwork"
+    ],
+    [
+      "webRequest.onCompleted.removeListener",
+      ["webRequest", "onCompleted", "removeListener"],
+      "browserNetwork"
+    ],
+    [
+      "webRequest.onErrorOccurred.addListener",
+      ["webRequest", "onErrorOccurred", "addListener"],
+      "browserNetwork"
+    ],
+    [
+      "webRequest.onErrorOccurred.removeListener",
+      ["webRequest", "onErrorOccurred", "removeListener"],
+      "browserNetwork"
+    ]
+  ] as const)("fails closed when API method %s is missing", (_label, path, capability) => {
+    const chromeApi = createCompleteChromeApi() as Record<string, unknown>;
+    deleteNestedProperty(chromeApi, path);
+
+    const resolved = resolveRuntimeCapabilities({ manifest: DEV_MANIFEST, chromeApi });
+
+    expect(resolved[capability]).toBe(capability === "browserNetwork" ? "none" : false);
+  });
+
+  it("does not let undeclared pseudo APIs grant capabilities", () => {
+    const chromeApi = createCompleteChromeApi();
+
+    expect(
+      resolveRuntimeCapabilities({
+        manifest: { permissions: [], host_permissions: [] },
+        chromeApi: {
+          ...chromeApi,
+          pageInjection: true,
+          cdp: true,
+          fullMode: true,
+          globalVisual: true,
+          browserNetwork: "webRequest"
+        }
+      })
+    ).toEqual({
+      pageInjection: false,
+      browserNetwork: "none",
+      cdp: false,
+      tabCapture: false,
+      fullMode: false,
+      globalVisual: false
+    });
+  });
+
+  it.each([
+    null,
+    [],
+    {},
+    { permissions: "scripting" },
+    { permissions: ["scripting", 1] },
+    { permissions: ["scripting", "scripting"] },
+    { permissions: [" scripting"] },
+    { permissions: ["scripting"], host_permissions: "<all_urls>" },
+    { permissions: ["scripting"], host_permissions: ["<all_urls>", "<all_urls>"] }
+  ])("fails closed for malformed manifest input %#", (manifest) => {
+    const capabilities = resolveRuntimeCapabilities({
+      manifest,
+      chromeApi: createCompleteChromeApi()
+    });
+
+    expect(capabilities).toEqual({
+      pageInjection: false,
+      browserNetwork: "none",
+      cdp: false,
+      tabCapture: false,
+      fullMode: false,
+      globalVisual: false
+    });
+  });
+
+  it("fails closed when the API root is malformed", () => {
+    expect(resolveRuntimeCapabilities({ manifest: DEV_MANIFEST, chromeApi: null })).toEqual({
+      pageInjection: false,
+      browserNetwork: "none",
+      cdp: false,
+      tabCapture: false,
+      fullMode: false,
+      globalVisual: false
+    });
+  });
+});
+
+describe("resolveInstalledRuntimeCapabilities", () => {
+  it("reads the installed manifest through the runtime API", () => {
+    const chromeApi = {
+      ...createCompleteChromeApi(),
+      runtime: {
+        getManifest: () => DEV_MANIFEST
+      }
+    };
+
+    expect(resolveInstalledRuntimeCapabilities(chromeApi)).toEqual({
+      pageInjection: true,
+      browserNetwork: "webRequest",
+      cdp: true,
+      tabCapture: true,
+      fullMode: true,
+      globalVisual: true
+    });
+  });
+
+  it.each([
+    {},
+    { runtime: {} },
+    {
+      runtime: {
+        getManifest: () => {
+          throw new Error("manifest unavailable");
+        }
+      }
+    }
+  ])("fails closed when the installed manifest cannot be read %#", (chromeApi) => {
+    expect(resolveInstalledRuntimeCapabilities(chromeApi)).toEqual({
+      pageInjection: false,
+      browserNetwork: "none",
+      cdp: false,
+      tabCapture: false,
+      fullMode: false,
+      globalVisual: false
+    });
+  });
+});
+
+describe("assertRuntimeStartRequirements", () => {
+  const complete: RuntimeCapabilities = Object.freeze({
+    pageInjection: true,
+    browserNetwork: "webRequest",
+    cdp: true,
+    tabCapture: true,
+    fullMode: true,
+    globalVisual: true
+  });
+
+  it("accepts Lite, Full, and screen-recording starts when requirements are present", () => {
+    expect(() =>
+      assertRuntimeStartRequirements(complete, { mode: "lite", screenRecording: false })
+    ).not.toThrow();
+    expect(() =>
+      assertRuntimeStartRequirements(complete, { mode: "full", screenRecording: false })
+    ).not.toThrow();
+    expect(() =>
+      assertRuntimeStartRequirements(complete, { mode: "full", screenRecording: true })
+    ).not.toThrow();
+  });
+
+  it("requires page injection for both modes", () => {
+    const capabilities = { ...complete, pageInjection: false, fullMode: false };
+
+    for (const mode of ["lite", "full"] as const) {
+      expect(() =>
+        assertRuntimeStartRequirements(capabilities, { mode, screenRecording: false })
+      ).toThrow(RUNTIME_START_CAPABILITY_ERRORS.pageInjection);
+    }
+  });
+
+  it("requires CDP for Full mode", () => {
+    const capabilities = { ...complete, cdp: false, fullMode: false, globalVisual: false };
+
+    expect(() =>
+      assertRuntimeStartRequirements(capabilities, { mode: "full", screenRecording: false })
+    ).toThrow(RUNTIME_START_CAPABILITY_ERRORS.fullCdp);
+  });
+
+  it("requires CDP and tabCapture for requested screen recording", () => {
+    expect(() =>
+      assertRuntimeStartRequirements(
+        { ...complete, cdp: false, fullMode: false, globalVisual: false },
+        { mode: "lite", screenRecording: true }
+      )
+    ).toThrow(RUNTIME_START_CAPABILITY_ERRORS.screenRecordingCdp);
+
+    expect(() =>
+      assertRuntimeStartRequirements(
+        { ...complete, tabCapture: false },
+        { mode: "full", screenRecording: true }
+      )
+    ).toThrow(RUNTIME_START_CAPABILITY_ERRORS.screenRecordingTabCapture);
+  });
+
+  it("rejects screen recording for the current store-safe capability set", () => {
+    const capabilities = resolveRuntimeCapabilities({
+      manifest: STORE_SAFE_MANIFEST,
+      chromeApi: createCompleteChromeApi()
+    });
+
+    expect(() =>
+      assertRuntimeStartRequirements(capabilities, { mode: "lite", screenRecording: true })
+    ).toThrow(RUNTIME_START_CAPABILITY_ERRORS.screenRecordingCdp);
+  });
+
+  it("rejects unknown modes fail closed", () => {
+    expect(() =>
+      assertRuntimeStartRequirements(complete, {
+        mode: "future" as "lite",
+        screenRecording: false
+      })
+    ).toThrow(RUNTIME_START_CAPABILITY_ERRORS.unsupportedMode);
+  });
+});
+
+function deleteNestedProperty(root: Record<string, unknown>, path: readonly string[]): void {
+  let current = root;
+
+  for (const segment of path.slice(0, -1)) {
+    current = current[segment] as Record<string, unknown>;
+  }
+
+  delete current[path[path.length - 1]!];
+}
diff --git a/apps/extension/src/shared/runtime-capabilities.ts b/apps/extension/src/shared/runtime-capabilities.ts
new file mode 100644
index 0000000..d67f3a1
--- /dev/null
+++ b/apps/extension/src/shared/runtime-capabilities.ts
@@ -0,0 +1,206 @@
+import type { CaptureMode } from "@webblackbox/protocol";
+
+export type BrowserNetworkCapability = "none" | "webRequest";
+
+export type RuntimeCapabilities = Readonly<{
+  pageInjection: boolean;
+  browserNetwork: BrowserNetworkCapability;
+  cdp: boolean;
+  tabCapture: boolean;
+  fullMode: boolean;
+  globalVisual: boolean;
+}>;
+
+export type RuntimeCapabilityInput = Readonly<{
+  manifest: unknown;
+  chromeApi: unknown;
+}>;
+
+export type RuntimeStartRequirements = Readonly<{
+  mode: CaptureMode;
+  screenRecording: boolean;
+}>;
+
+export const RUNTIME_START_CAPABILITY_ERRORS = Object.freeze({
+  pageInjection: "Capture requires the page injection capability.",
+  fullCdp: "Full capture requires the Chrome debugger capability.",
+  screenRecordingCdp: "Screen recording requires the Chrome debugger capability.",
+  screenRecordingTabCapture: "Screen recording requires the Chrome tabCapture capability.",
+  unsupportedMode: "Unsupported capture mode."
+} as const);
+
+const NO_RUNTIME_CAPABILITIES: RuntimeCapabilities = Object.freeze({
+  pageInjection: false,
+  browserNetwork: "none",
+  cdp: false,
+  tabCapture: false,
+  fullMode: false,
+  globalVisual: false
+});
+
+/**
+ * Resolves only static capabilities declared by the installed manifest and
+ * exposed by the current Chrome runtime. The caller must pass the direct
+ * result of `runtime.getManifest()` as `manifest`.
+ *
+ * `activeTab` makes page injection statically eligible, but does not prove a
+ * grant for a particular tab. Callers must still require a successful,
+ * strictly validated `scripting.executeScript()` result for that document.
+ */
+export function resolveRuntimeCapabilities({
+  manifest,
+  chromeApi
+}: RuntimeCapabilityInput): RuntimeCapabilities {
+  try {
+    const declared = parseManifestCapabilities(manifest);
+    const api = asRecord(chromeApi);
+
+    if (!declared || !api) {
+      return NO_RUNTIME_CAPABILITIES;
+    }
+
+    const hasBroadHostAccess = declared.hostPermissions.has("<all_urls>");
+    const hasPageAccess = hasBroadHostAccess || declared.permissions.has("activeTab");
+    const pageInjection =
+      declared.permissions.has("scripting") &&
+      hasPageAccess &&
+      hasMethod(api.scripting, "executeScript");
+    const hasBrowserNetwork =
+      declared.permissions.has("webRequest") &&
+      hasBroadHostAccess &&
+      hasEvent(api.webRequest, "onBeforeRequest") &&
+      hasEvent(api.webRequest, "onCompleted") &&
+      hasEvent(api.webRequest, "onErrorOccurred");
+    const cdp =
+      declared.permissions.has("debugger") &&
+      hasMethod(api.debugger, "attach") &&
+      hasMethod(api.debugger, "detach") &&
+      hasMethod(api.debugger, "sendCommand") &&
+      hasEvent(api.debugger, "onEvent") &&
+      hasEvent(api.debugger, "onDetach");
+    const tabCapture =
+      declared.permissions.has("tabCapture") && hasMethod(api.tabCapture, "getMediaStreamId");
+
+    return Object.freeze({
+      pageInjection,
+      browserNetwork: hasBrowserNetwork ? "webRequest" : "none",
+      cdp,
+      tabCapture,
+      fullMode: pageInjection && cdp,
+      globalVisual: cdp
+    });
+  } catch {
+    return NO_RUNTIME_CAPABILITIES;
+  }
+}
+
+/** Resolves capabilities from the manifest installed in the current Chrome runtime. */
+export function resolveInstalledRuntimeCapabilities(chromeApi: unknown): RuntimeCapabilities {
+  try {
+    const api = asRecord(chromeApi);
+    const runtime = asRecord(api?.runtime);
+    const getManifest = runtime?.getManifest;
+
+    if (typeof getManifest !== "function") {
+      return NO_RUNTIME_CAPABILITIES;
+    }
+
+    return resolveRuntimeCapabilities({
+      manifest: getManifest.call(runtime),
+      chromeApi
+    });
+  } catch {
+    return NO_RUNTIME_CAPABILITIES;
+  }
+}
+
+export function assertRuntimeStartRequirements(
+  capabilities: RuntimeCapabilities,
+  requirements: RuntimeStartRequirements
+): void {
+  if (requirements.mode !== "lite" && requirements.mode !== "full") {
+    throw new Error(RUNTIME_START_CAPABILITY_ERRORS.unsupportedMode);
+  }
+
+  if (!capabilities.pageInjection) {
+    throw new Error(RUNTIME_START_CAPABILITY_ERRORS.pageInjection);
+  }
+
+  if (requirements.mode === "full" && !capabilities.cdp) {
+    throw new Error(RUNTIME_START_CAPABILITY_ERRORS.fullCdp);
+  }
+
+  if (requirements.screenRecording && !capabilities.cdp) {
+    throw new Error(RUNTIME_START_CAPABILITY_ERRORS.screenRecordingCdp);
+  }
+
+  if (requirements.screenRecording && !capabilities.tabCapture) {
+    throw new Error(RUNTIME_START_CAPABILITY_ERRORS.screenRecordingTabCapture);
+  }
+}
+
+type ManifestCapabilities = Readonly<{
+  permissions: ReadonlySet<string>;
+  hostPermissions: ReadonlySet<string>;
+}>;
+
+function parseManifestCapabilities(value: unknown): ManifestCapabilities | undefined {
+  const manifest = asRecord(value);
+
+  if (!manifest) {
+    return undefined;
+  }
+
+  const permissions = parseStringSet(manifest.permissions, true);
+  const hostPermissions = parseStringSet(manifest.host_permissions, false);
+
+  if (!permissions || !hostPermissions) {
+    return undefined;
+  }
+
+  return { permissions, hostPermissions };
+}
+
+function parseStringSet(value: unknown, required: boolean): ReadonlySet<string> | undefined {
+  if (value === undefined && !required) {
+    return new Set();
+  }
+
+  if (!Array.isArray(value)) {
+    return undefined;
+  }
+
+  const result = new Set<string>();
+
+  for (const entry of value) {
+    if (
+      typeof entry !== "string" ||
+      entry.length === 0 ||
+      entry.trim() !== entry ||
+      result.has(entry)
+    ) {
+      return undefined;
+    }
+
+    result.add(entry);
+  }
+
+  return result;
+}
+
+function hasMethod(value: unknown, name: string): boolean {
+  const record = asRecord(value);
+  return typeof record?.[name] === "function";
+}
+
+function hasEvent(value: unknown, name: string): boolean {
+  const record = asRecord(value);
+  const event = asRecord(record?.[name]);
+  return typeof event?.addListener === "function" && typeof event.removeListener === "function";
+}
+
+function asRecord(value: unknown): Record<string, unknown> | undefined {
+  return typeof value === "object" && value !== null && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : undefined;
+}
diff --git a/apps/extension/src/shared/stop-drain-token.ts b/apps/extension/src/shared/stop-drain-token.ts
new file mode 100644
index 0000000..f049c5e
--- /dev/null
+++ b/apps/extension/src/shared/stop-drain-token.ts
@@ -0,0 +1,5 @@
+const STOP_DRAIN_TOKEN_PATTERN = /^[a-f0-9]{64}$/u;
+
+export function isStopDrainToken(value: unknown): value is string {
+  return typeof value === "string" && STOP_DRAIN_TOKEN_PATTERN.test(value);
+}
diff --git a/apps/extension/src/sw/body-capture-utils.test.ts b/apps/extension/src/sw/body-capture-utils.test.ts
index 90c0661..43a44bb 100644
--- a/apps/extension/src/sw/body-capture-utils.test.ts
+++ b/apps/extension/src/sw/body-capture-utils.test.ts
@@ -62,6 +62,21 @@ describe("body-capture utils", () => {
     expect(rule.mimeAllowlist).toEqual(["application/json"]);
   });
 
+  it("disables full-mode body capture when the response MIME type is missing", () => {
+    const rule = resolveFullBodyCaptureRule(
+      {
+        sampling: {
+          bodyCaptureMaxBytes: 64 * 1024
+        },
+        sitePolicies: []
+      },
+      "https://api.example.com/v1/search",
+      undefined
+    );
+
+    expect(rule.enabled).toBe(false);
+  });
+
   it("keeps lite-mode default capture rule enabled for unmatched policies", () => {
     const rule = resolveLiteBodyCaptureRule(
       {
@@ -95,37 +110,179 @@ describe("body-capture utils", () => {
 
   it("redacts and truncates utf8 response bodies for capture", () => {
     const transformed = transformResponseBodyForCapture({
-      body: `token=secret-123&${"x".repeat(5_000)}`,
+      body: `token=secret-123&message=${"界".repeat(5_000)}`,
       base64Encoded: false,
+      mimeType: "application/x-www-form-urlencoded; charset=utf-8",
       redactPatterns: ["secret-123"],
       maxBytes: 4_096,
       decodeBase64: decodeBase64ForTest
     });
 
+    expect(transformed).not.toBeNull();
+
+    if (!transformed) {
+      throw new Error("Expected response body transformation to succeed");
+    }
+
     const sampledText = new TextDecoder().decode(transformed.sampledBytes);
 
     expect(transformed.redacted).toBe(true);
     expect(transformed.truncated).toBe(true);
-    expect(sampledText).toContain("[REDACTED]");
+    expect(sampledText).toContain("%5BREDACTED%5D");
     expect(transformed.sampledBytes.byteLength).toBe(4_096);
+    expect(() =>
+      new TextDecoder("utf-8", { fatal: true }).decode(transformed.sampledBytes)
+    ).not.toThrow();
     expect(transformed.originalBytes.byteLength).toBeGreaterThan(
       transformed.sampledBytes.byteLength
     );
   });
 
-  it("does not redact base64 response bodies", () => {
+  it("decodes and redacts textual base64 response bodies", () => {
+    const body = JSON.stringify({ profile: { password: "plain-secret" }, status: "ok" });
     const transformed = transformResponseBodyForCapture({
-      body: Buffer.from("plain-secret", "utf8").toString("base64"),
+      body: Buffer.from(body, "utf8").toString("base64"),
       base64Encoded: true,
-      redactPatterns: ["secret"],
+      mimeType: "application/json",
+      redactPatterns: ["password", "secret"],
       maxBytes: 64 * 1024,
       decodeBase64: decodeBase64ForTest
     });
 
-    const sampledText = new TextDecoder().decode(transformed.sampledBytes);
+    expect(transformed).not.toBeNull();
+
+    if (!transformed) {
+      throw new Error("Expected response body transformation to succeed");
+    }
 
-    expect(transformed.redacted).toBe(false);
+    const sampled = JSON.parse(new TextDecoder().decode(transformed.sampledBytes)) as {
+      profile: { password: string };
+      status: string;
+    };
+
+    expect(transformed.redacted).toBe(true);
     expect(transformed.truncated).toBe(false);
-    expect(sampledText).toBe("plain-secret");
+    expect(sampled).toEqual({ profile: { password: "[REDACTED]" }, status: "ok" });
+    expect(JSON.stringify(sampled)).not.toContain("plain-secret");
+  });
+
+  it("redacts nested JSON field values including UTF-8 secrets", () => {
+    const body = JSON.stringify({
+      account: {
+        password: "密碼-不可保留",
+        nested: [{ apiKey: "key-123" }]
+      },
+      displayName: "使用者"
+    });
+    const transformed = transformResponseBodyForCapture({
+      body,
+      base64Encoded: false,
+      mimeType: "application/problem+json",
+      redactPatterns: ["password", "apikey"],
+      maxBytes: 64 * 1024,
+      decodeBase64: decodeBase64ForTest
+    });
+
+    expect(transformed).not.toBeNull();
+
+    if (!transformed) {
+      throw new Error("Expected response body transformation to succeed");
+    }
+
+    const sampled = JSON.parse(new TextDecoder().decode(transformed.sampledBytes)) as {
+      account: { password: string; nested: Array<{ apiKey: string }> };
+      displayName: string;
+    };
+
+    expect(sampled.account.password).toBe("[REDACTED]");
+    expect(sampled.account.nested[0]?.apiKey).toBe("[REDACTED]");
+    expect(sampled.displayName).toBe("使用者");
+    expect(new TextDecoder().decode(transformed.sampledBytes)).not.toContain("不可保留");
+    expect(new TextDecoder().decode(transformed.sampledBytes)).not.toContain("key-123");
+  });
+
+  it("redacts sensitive form field values while retaining safe fields", () => {
+    const transformed = transformResponseBodyForCapture({
+      body: "username=alice&password=hunter2&refresh_token=token-value&locale=zh-CN",
+      base64Encoded: false,
+      mimeType: "application/x-www-form-urlencoded",
+      redactPatterns: ["password", "token"],
+      maxBytes: 64 * 1024,
+      decodeBase64: decodeBase64ForTest
+    });
+
+    expect(transformed).not.toBeNull();
+
+    if (!transformed) {
+      throw new Error("Expected response body transformation to succeed");
+    }
+
+    const sampled = new URLSearchParams(new TextDecoder().decode(transformed.sampledBytes));
+
+    expect(sampled.get("username")).toBe("alice");
+    expect(sampled.get("password")).toBe("[REDACTED]");
+    expect(sampled.get("refresh_token")).toBe("[REDACTED]");
+    expect(sampled.get("locale")).toBe("zh-CN");
+  });
+
+  it("fails closed when structured response parsing fails", () => {
+    expect(
+      transformResponseBodyForCapture({
+        body: '{"password":"unterminated}',
+        base64Encoded: false,
+        mimeType: "application/json",
+        redactPatterns: ["password"],
+        maxBytes: 64 * 1024,
+        decodeBase64: decodeBase64ForTest
+      })
+    ).toBeNull();
+
+    expect(
+      transformResponseBodyForCapture({
+        body: "password=%E0%A4%A",
+        base64Encoded: false,
+        mimeType: "application/x-www-form-urlencoded",
+        redactPatterns: ["password"],
+        maxBytes: 64 * 1024,
+        decodeBase64: decodeBase64ForTest
+      })
+    ).toBeNull();
+  });
+
+  it("fails closed for invalid UTF-8 base64 and non-text MIME bodies", () => {
+    expect(
+      transformResponseBodyForCapture({
+        body: Buffer.from([0xff, 0xfe, 0xfd]).toString("base64"),
+        base64Encoded: true,
+        mimeType: "application/json",
+        redactPatterns: ["password"],
+        maxBytes: 64 * 1024,
+        decodeBase64: decodeBase64ForTest
+      })
+    ).toBeNull();
+
+    expect(
+      transformResponseBodyForCapture({
+        body: Buffer.from("plain-secret", "utf8").toString("base64"),
+        base64Encoded: true,
+        mimeType: "application/octet-stream",
+        redactPatterns: ["secret"],
+        maxBytes: 64 * 1024,
+        decodeBase64: decodeBase64ForTest
+      })
+    ).toBeNull();
+  });
+
+  it("fails closed for unstructured text when sensitive patterns require field redaction", () => {
+    expect(
+      transformResponseBodyForCapture({
+        body: "password: hunter2",
+        base64Encoded: false,
+        mimeType: "text/plain",
+        redactPatterns: ["password"],
+        maxBytes: 64 * 1024,
+        decodeBase64: decodeBase64ForTest
+      })
+    ).toBeNull();
   });
 });
diff --git a/apps/extension/src/sw/body-capture-utils.ts b/apps/extension/src/sw/body-capture-utils.ts
index 2b02630..0c380ac 100644
--- a/apps/extension/src/sw/body-capture-utils.ts
+++ b/apps/extension/src/sw/body-capture-utils.ts
@@ -1,5 +1,7 @@
 import type { CaptureMode, RecorderConfig } from "@webblackbox/protocol";
 
+export { transformResponseBodyForCapture } from "webblackbox/lite-materializer";
+
 export type BodyCaptureRule = {
   enabled: boolean;
   maxBytes: number;
@@ -18,15 +20,6 @@ type RuleResolutionOptions = {
   fallbackMaxBytes?: number;
 };
 
-type TransformResponseBodyArgs = {
-  body: string;
-  base64Encoded: boolean;
-  redactPatterns: string[];
-  maxBytes: number;
-  decodeBase64: (value: string) => Uint8Array;
-  redactionToken?: string;
-};
-
 const DEFAULT_FALLBACK_MAX_BYTES = 256 * 1024;
 const DEFAULT_BODY_MIME_ALLOWLIST = [
   "text/*",
@@ -37,7 +30,6 @@ const DEFAULT_BODY_MIME_ALLOWLIST = [
   "application/javascript",
   "application/x-www-form-urlencoded"
 ];
-const DEFAULT_REDACTION_TOKEN = "[REDACTED]";
 
 export function resolveLiteBodyCaptureRule(
   config: BodyCaptureConfig,
@@ -178,7 +170,7 @@ export function wildcardMatch(value: string, pattern: string): boolean {
 
 export function isMimeAllowed(allowlist: string[], mimeType: string | undefined): boolean {
   if (!mimeType) {
-    return true;
+    return false;
   }
 
   const normalizedMime = mimeType.toLowerCase();
@@ -207,47 +199,6 @@ export function normalizeMimeType(value: string | null | undefined): string | un
   return normalized && normalized.length > 0 ? normalized : undefined;
 }
 
-export function redactBodyText(
-  value: string,
-  patterns: string[],
-  redactionToken: string = DEFAULT_REDACTION_TOKEN
-): {
-  value: string;
-  redacted: boolean;
-} {
-  if (patterns.length === 0 || value.length === 0) {
-    return {
-      value,
-      redacted: false
-    };
-  }
-
-  let output = value;
-  let touched = false;
-
-  for (const pattern of patterns) {
-    const normalized = pattern.trim();
-
-    if (!normalized) {
-      continue;
-    }
-
-    const regex = new RegExp(normalized.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "gi");
-
-    if (!regex.test(output)) {
-      continue;
-    }
-
-    output = output.replace(regex, redactionToken);
-    touched = true;
-  }
-
-  return {
-    value: output,
-    redacted: touched
-  };
-}
-
 export function isTextualMimeType(mimeType: string): boolean {
   return (
     mimeType.startsWith("text/") ||
@@ -269,44 +220,6 @@ export function isLikelyTextualResourceType(resourceType?: string): boolean {
   );
 }
 
-export function transformResponseBodyForCapture(args: TransformResponseBodyArgs): {
-  originalBytes: Uint8Array;
-  sampledBytes: Uint8Array;
-  redacted: boolean;
-  truncated: boolean;
-} {
-  const originalBytes = args.base64Encoded
-    ? args.decodeBase64(args.body)
-    : new TextEncoder().encode(args.body);
-
-  let candidateBytes = originalBytes;
-  let redacted = false;
-
-  if (!args.base64Encoded && args.redactPatterns.length > 0) {
-    const redaction = redactBodyText(
-      args.body,
-      args.redactPatterns,
-      args.redactionToken ?? DEFAULT_REDACTION_TOKEN
-    );
-
-    if (redaction.redacted) {
-      candidateBytes = new TextEncoder().encode(redaction.value);
-      redacted = true;
-    }
-  }
-
-  const maxBytes = normalizeBodyCaptureMaxBytes(args.maxBytes);
-  const truncated = candidateBytes.byteLength > maxBytes;
-  const sampledBytes = truncated ? candidateBytes.slice(0, maxBytes) : candidateBytes;
-
-  return {
-    originalBytes,
-    sampledBytes,
-    redacted,
-    truncated
-  };
-}
-
 function buildDefaultRule(
   config: BodyCaptureConfig,
   options: RuleResolutionOptions
diff --git a/apps/extension/src/sw/capture-scope.test.ts b/apps/extension/src/sw/capture-scope.test.ts
index 8953ed6..5c8ab9c 100644
--- a/apps/extension/src/sw/capture-scope.test.ts
+++ b/apps/extension/src/sw/capture-scope.test.ts
@@ -1,79 +1,183 @@
+import { DEFAULT_CAPTURE_POLICY, type CapturePolicy } from "@webblackbox/protocol";
 import { describe, expect, it } from "vitest";
 
 import {
-  shouldStopForCaptureScopeOriginChange,
+  bindCapturePolicyToSession,
+  evaluateCaptureDocumentScope,
+  isCaptureEventFrameAllowed,
+  resolveContentScriptInjectionTarget,
   shouldStopForEnterpriseOriginPolicy
 } from "./capture-scope.js";
 
+const NOW = Date.parse("2026-07-11T00:00:00.000Z");
+
+function policy(overrides: Partial<CapturePolicy["scope"]> = {}): CapturePolicy {
+  return {
+    ...DEFAULT_CAPTURE_POLICY,
+    consent: {
+      ...DEFAULT_CAPTURE_POLICY.consent,
+      grantedAt: "2026-07-10T00:00:00.000Z"
+    },
+    scope: {
+      ...DEFAULT_CAPTURE_POLICY.scope,
+      tabId: 7,
+      origin: "https://app.example",
+      ...overrides
+    }
+  };
+}
+
 describe("capture-scope", () => {
-  it("honors capture policy origin-change stops outside activeTab builds", () => {
-    expect(
-      shouldStopForCaptureScopeOriginChange({
-        scopeOrigin: "https://app.example",
-        nextOrigin: "https://admin.example",
-        stopOnOriginChange: true,
-        activeTabScopedBuild: false
-      })
-    ).toBe(true);
+  it("binds tab and origin without weakening origin-change or frame policy", () => {
+    const base = policy({
+      tabId: 0,
+      origin: "",
+      stopOnOriginChange: true,
+      includeSubframes: false,
+      allowedOrigins: ["https://app.example"],
+      deniedOrigins: ["https://blocked.example"],
+      excludedUrlPatterns: ["*/private/*"]
+    });
+    const bound = bindCapturePolicyToSession(base, {
+      tabId: 19,
+      origin: "https://app.example"
+    });
+
+    expect(bound.scope).toEqual({
+      ...base.scope,
+      tabId: 19,
+      origin: "https://app.example"
+    });
+    expect(bound.scope.allowedOrigins).not.toBe(base.scope.allowedOrigins);
+    expect(bound.scope.deniedOrigins).not.toBe(base.scope.deniedOrigins);
+    expect(bound.scope.excludedUrlPatterns).not.toBe(base.scope.excludedUrlPatterns);
   });
 
-  it("continues same-origin navigations", () => {
+  it("allows top-frame capture only in the bound tab and origin", () => {
     expect(
-      shouldStopForCaptureScopeOriginChange({
-        scopeOrigin: "https://app.example",
-        nextOrigin: "https://app.example",
-        stopOnOriginChange: true,
-        activeTabScopedBuild: true
-      })
-    ).toBe(false);
+      evaluateCaptureDocumentScope(policy(), {
+        url: "https://app.example/dashboard",
+        tabId: 7,
+        frameId: 0,
+        now: NOW
+      }).allowed
+    ).toBe(true);
+    expect(
+      evaluateCaptureDocumentScope(policy(), {
+        url: "https://app.example/dashboard",
+        tabId: 8,
+        frameId: 0,
+        now: NOW
+      }).reason
+    ).toBe("tab-mismatch");
   });
 
-  it("keeps tab-scoped captures active when origin-change stops are disabled", () => {
+  it("honors allow, deny, and URL exclusion on navigation", () => {
+    const capturePolicy = policy({
+      stopOnOriginChange: false,
+      allowedOrigins: ["*.example"],
+      deniedOrigins: ["https://blocked.example"],
+      excludedUrlPatterns: ["*/private/*"]
+    });
+
     expect(
-      shouldStopForCaptureScopeOriginChange({
-        scopeOrigin: "https://app.example",
-        nextOrigin: "https://admin.example",
-        stopOnOriginChange: false,
-        activeTabScopedBuild: true
-      })
-    ).toBe(false);
+      evaluateCaptureDocumentScope(capturePolicy, {
+        url: "https://admin.example/home",
+        tabId: 7,
+        now: NOW
+      }).allowed
+    ).toBe(true);
+    expect(
+      evaluateCaptureDocumentScope(capturePolicy, {
+        url: "https://blocked.example/home",
+        tabId: 7,
+        now: NOW
+      }).reason
+    ).toBe("origin-denied");
+    expect(
+      evaluateCaptureDocumentScope(capturePolicy, {
+        url: "https://admin.example/private/key",
+        tabId: 7,
+        now: NOW
+      }).reason
+    ).toBe("url-excluded");
   });
 
-  it("keeps tab-scoped captures active on opaque navigations when origin-change stops are disabled", () => {
+  it("rejects child and opaque frame senders by default", () => {
     expect(
-      shouldStopForCaptureScopeOriginChange({
-        scopeOrigin: "https://app.example",
-        nextOrigin: null,
-        stopOnOriginChange: false,
-        activeTabScopedBuild: true
-      })
-    ).toBe(false);
+      evaluateCaptureDocumentScope(policy(), {
+        url: "https://app.example/frame",
+        tabId: 7,
+        frameId: 3,
+        now: NOW
+      }).reason
+    ).toBe("subframes-disabled");
+    expect(
+      evaluateCaptureDocumentScope(policy({ includeSubframes: true }), {
+        url: "about:blank",
+        tabId: 7,
+        frameId: 3,
+        now: NOW
+      }).reason
+    ).toBe("opaque-or-invalid-url");
   });
 
-  it("stops tab-scoped captures when enterprise policy rejects the next origin", () => {
+  it("allows an explicitly scoped child frame", () => {
     expect(
-      shouldStopForEnterpriseOriginPolicy({
-        nextOrigin: "https://blocked.example",
-        isEnterpriseOriginAllowed: (origin) => origin !== "https://blocked.example"
-      })
+      evaluateCaptureDocumentScope(
+        policy({
+          includeSubframes: true,
+          allowedOrigins: ["https://widgets.example"]
+        }),
+        {
+          url: "https://widgets.example/embed",
+          tabId: 7,
+          frameId: 3,
+          now: NOW
+        }
+      ).allowed
     ).toBe(true);
   });
 
-  it("continues tab-scoped captures when enterprise policy allows the next origin", () => {
+  it("drops marked child content and CDP events as a second-line defense", () => {
     expect(
-      shouldStopForEnterpriseOriginPolicy({
-        nextOrigin: "https://app.example",
-        isEnterpriseOriginAllowed: (origin) => origin === "https://app.example"
+      isCaptureEventFrameAllowed(policy(), {
+        source: "content",
+        frame: "content-frame-3"
+      })
+    ).toBe(false);
+    expect(
+      isCaptureEventFrameAllowed(policy(), {
+        source: "cdp",
+        cdpSessionId: "child-session"
       })
     ).toBe(false);
+    expect(
+      isCaptureEventFrameAllowed(policy({ includeSubframes: true }), {
+        source: "cdp",
+        cdpSessionId: "child-session"
+      })
+    ).toBe(true);
   });
 
-  it("keeps tab-scoped captures active on opaque navigations for enterprise policy", () => {
+  it("injects only the top frame unless subframes are explicitly enabled", () => {
+    expect(resolveContentScriptInjectionTarget(policy(), 7)).toEqual({
+      tabId: 7,
+      allFrames: false
+    });
+    expect(resolveContentScriptInjectionTarget(policy({ includeSubframes: true }), 7)).toEqual({
+      tabId: 7,
+      allFrames: true
+    });
+    expect(resolveContentScriptInjectionTarget(undefined, 7).allFrames).toBe(false);
+  });
+
+  it("fails closed for opaque enterprise navigations", () => {
     expect(
       shouldStopForEnterpriseOriginPolicy({
         nextOrigin: null,
-        isEnterpriseOriginAllowed: () => false
+        isEnterpriseOriginAllowed: () => true
       })
-    ).toBe(false);
+    ).toBe(true);
   });
 });
diff --git a/apps/extension/src/sw/capture-scope.ts b/apps/extension/src/sw/capture-scope.ts
index d490a50..be656d3 100644
--- a/apps/extension/src/sw/capture-scope.ts
+++ b/apps/extension/src/sw/capture-scope.ts
@@ -1,8 +1,14 @@
-export type CaptureScopeOriginChangeInput = {
-  scopeOrigin: string | null;
-  nextOrigin: string | null;
-  stopOnOriginChange: boolean;
-  activeTabScopedBuild: boolean;
+import {
+  evaluateCaptureScope,
+  type CapturePolicy,
+  type CaptureScopeDecision
+} from "@webblackbox/protocol";
+
+export type CaptureDocumentScopeInput = {
+  url: string | null | undefined;
+  tabId: number;
+  frameId?: number;
+  now?: number;
 };
 
 export type CaptureScopeEnterpriseOriginPolicyInput = {
@@ -10,26 +16,90 @@ export type CaptureScopeEnterpriseOriginPolicyInput = {
   isEnterpriseOriginAllowed: (origin: string) => boolean;
 };
 
-export function shouldStopForCaptureScopeOriginChange(
-  input: CaptureScopeOriginChangeInput
+export function bindCapturePolicyToSession(
+  policy: CapturePolicy,
+  context: { tabId: number; origin: string }
+): CapturePolicy {
+  return {
+    ...policy,
+    scope: {
+      ...policy.scope,
+      tabId: context.tabId,
+      origin: context.origin,
+      allowedOrigins: [...policy.scope.allowedOrigins],
+      deniedOrigins: [...policy.scope.deniedOrigins],
+      excludedUrlPatterns: [...policy.scope.excludedUrlPatterns]
+    }
+  };
+}
+
+/** Applies the protocol scope model to a Chrome document/frame sender. */
+export function evaluateCaptureDocumentScope(
+  policy: CapturePolicy | null | undefined,
+  input: CaptureDocumentScopeInput
+): CaptureScopeDecision {
+  const frameId = normalizeFrameId(input.frameId);
+
+  return evaluateCaptureScope(policy, {
+    url: input.url,
+    tabId: input.tabId,
+    frameId: frameId ?? -1,
+    topLevel: frameId === 0,
+    now: input.now
+  });
+}
+
+/**
+ * Second-line event defense for sources that carry a child-frame marker even
+ * after the Chrome sender boundary has been checked.
+ */
+export function isCaptureEventFrameAllowed(
+  policy: CapturePolicy | null | undefined,
+  input: { source: string; frame?: string; cdpSessionId?: string }
 ): boolean {
-  if (!input.stopOnOriginChange) {
+  if (!policy) {
     return false;
   }
 
-  if (!input.scopeOrigin) {
+  if (policy.scope.includeSubframes) {
+    return true;
+  }
+
+  if (input.cdpSessionId) {
     return false;
   }
 
-  return input.nextOrigin !== input.scopeOrigin;
+  return input.frame === undefined || input.frame.length === 0;
+}
+
+export function resolveContentScriptInjectionTarget(
+  policy: CapturePolicy | null | undefined,
+  tabId: number
+): { tabId: number; allFrames: boolean } {
+  return {
+    tabId,
+    allFrames: policy?.scope.includeSubframes === true
+  };
 }
 
 export function shouldStopForEnterpriseOriginPolicy(
   input: CaptureScopeEnterpriseOriginPolicyInput
 ): boolean {
   if (!input.nextOrigin) {
-    return false;
+    return true;
   }
 
   return !input.isEnterpriseOriginAllowed(input.nextOrigin);
 }
+
+function normalizeFrameId(value: number | undefined): number | null {
+  if (value === undefined) {
+    return 0;
+  }
+
+  if (!Number.isFinite(value) || value < 0) {
+    return null;
+  }
+
+  return Math.floor(value);
+}
diff --git a/apps/extension/src/sw/cdp-capture-scope.test.ts b/apps/extension/src/sw/cdp-capture-scope.test.ts
new file mode 100644
index 0000000..fe0a88b
--- /dev/null
+++ b/apps/extension/src/sw/cdp-capture-scope.test.ts
@@ -0,0 +1,1341 @@
+import { DEFAULT_CAPTURE_POLICY, type CapturePolicy } from "@webblackbox/protocol";
+import { describe, expect, it } from "vitest";
+
+import {
+  canCaptureGlobalCdpArtifacts,
+  canCaptureGlobalCdpArtifactsForRoot,
+  completeCdpChildFrameTreePrime,
+  createCdpCaptureScopeState,
+  evaluateCdpCaptureScopeEvent,
+  failCdpChildSessionAttachment,
+  filterCdpSnapshotDocuments,
+  hasDisallowedCdpFrames,
+  isCdpChildSessionClaimCurrent,
+  invalidateCdpCaptureFrameTree,
+  isCdpCaptureFrameTreePrimedForRoot,
+  isCdpSessionWithinScope,
+  markCdpChildSessionBaselineReady,
+  primeCdpCaptureFrameTree,
+  refreshCdpCaptureFrameTree
+} from "./cdp-capture-scope.js";
+
+function policy(overrides: Partial<CapturePolicy["scope"]> = {}): CapturePolicy {
+  return {
+    ...DEFAULT_CAPTURE_POLICY,
+    consent: {
+      ...DEFAULT_CAPTURE_POLICY.consent,
+      grantedAt: "2020-01-01T00:00:00.000Z"
+    },
+    scope: {
+      ...DEFAULT_CAPTURE_POLICY.scope,
+      tabId: 7,
+      origin: "https://app.example",
+      ...overrides
+    }
+  };
+}
+
+function state(capturePolicy: CapturePolicy = policy()) {
+  return createCdpCaptureScopeState(capturePolicy, 7, "https://app.example/home");
+}
+
+describe("CDP capture scope", () => {
+  it("starts unprimed and enables global artifacts only after a complete allowed tree", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"]
+      })
+    );
+
+    expect(scope.primed).toBe(false);
+    expect(scope.generation).toBe(0);
+    expect(scope.rootFrameId).toBeUndefined();
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [
+        {
+          frame: { id: "child", url: "https://widgets.example/embed" }
+        }
+      ]
+    });
+
+    expect(scope.primed).toBe(true);
+    expect(scope.generation).toBe(1);
+    expect(scope.rootFrameId).toBe("root");
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(true);
+  });
+
+  it("primes root and child frames with independent scope decisions", () => {
+    const scope = state();
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [
+        {
+          frame: { id: "child", url: "https://widgets.example/embed" }
+        }
+      ]
+    });
+
+    expect(scope.rootFrameId).toBe("root");
+    expect(scope.primed).toBe(true);
+    expect(scope.frameScopes.get("root")).toBe(true);
+    expect(scope.frameScopes.get("child")).toBe(false);
+    expect(hasDisallowedCdpFrames(scope)).toBe(true);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+  });
+
+  it("remains unprimed for missing, malformed, duplicate, or denied root trees", () => {
+    const malformedTrees: unknown[] = [
+      undefined,
+      null,
+      {},
+      { frame: {} },
+      { frame: { id: "root" } },
+      {
+        frame: { id: "root", url: "https://app.example/home" },
+        childFrames: {}
+      },
+      {
+        frame: { id: "root", url: "https://app.example/home" },
+        childFrames: [{ frame: { id: "root", url: "https://app.example/embed" } }]
+      }
+    ];
+
+    for (const frameTree of malformedTrees) {
+      const scope = state();
+      primeCdpCaptureFrameTree(scope, frameTree);
+
+      expect(scope.primed).toBe(false);
+      expect(scope.rootFrameId).toBeUndefined();
+      expect(scope.frameScopes.size).toBe(0);
+      expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+    }
+
+    const deniedScope = state();
+    primeCdpCaptureFrameTree(deniedScope, {
+      frame: { id: "root", url: "https://admin.example/home" }
+    });
+
+    expect(deniedScope.primed).toBe(false);
+    expect(deniedScope.rootFrameId).toBe("root");
+    expect(deniedScope.frameScopes.get("root")).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(deniedScope)).toBe(false);
+  });
+
+  it("invalidates a previous prime when frame-tree refresh fails", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    expect(scope.primed).toBe(true);
+
+    primeCdpCaptureFrameTree(scope, undefined);
+
+    expect(scope.primed).toBe(false);
+    expect(scope.rootFrameId).toBe("root");
+    expect(scope.frameScopes.size).toBe(0);
+  });
+
+  it("fails closed when the frame-tree command rejects", async () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    const previousGeneration = scope.generation;
+
+    await expect(
+      refreshCdpCaptureFrameTree(scope, () => Promise.reject(new Error("CDP unavailable")))
+    ).resolves.toBe(false);
+
+    expect(scope.generation).toBe(previousGeneration + 1);
+    expect(scope.primed).toBe(false);
+    expect(scope.rootFrameId).toBe("root");
+    expect(scope.frameScopes.size).toBe(0);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+  });
+
+  it("rejects a stale frame-tree response after a newer invalidation", async () => {
+    const scope = state();
+    let resolveFrameTree: ((value: unknown) => void) | undefined;
+    const pending = refreshCdpCaptureFrameTree(
+      scope,
+      () =>
+        new Promise((resolve) => {
+          resolveFrameTree = resolve;
+        })
+    );
+    const pendingGeneration = scope.generation;
+
+    invalidateCdpCaptureFrameTree(scope);
+    resolveFrameTree?.({ frame: { id: "stale-root", url: "https://app.example/home" } });
+
+    await expect(pending).resolves.toBe(false);
+    expect(scope.generation).toBe(pendingGeneration + 1);
+    expect(scope.primed).toBe(false);
+    expect(scope.rootFrameId).toBeUndefined();
+  });
+
+  it("rejects a root prime that resolves after a new visual child attaches", async () => {
+    const scope = state(policy({ includeSubframes: true }));
+    let resolveFrameTree: ((value: unknown) => void) | undefined;
+    const pending = refreshCdpCaptureFrameTree(
+      scope,
+      () =>
+        new Promise((resolve) => {
+          resolveFrameTree = resolve;
+        })
+    );
+    const primeGeneration = scope.generation;
+    const childRevision = scope.childMutationRevision;
+
+    evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "late-child",
+      targetInfo: { type: "iframe", url: "https://app.example/embed" }
+    });
+    resolveFrameTree?.({ frame: { id: "root", url: "https://app.example/home" } });
+
+    await expect(pending).resolves.toBe(false);
+    expect(scope.generation).toBeGreaterThan(primeGeneration);
+    expect(scope.childMutationRevision).toBeGreaterThan(childRevision);
+    expect(scope.childSessions.get("late-child")?.status).toBe("pending");
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+  });
+
+  it("keeps a newer successful prime current when an older refresh resolves last", async () => {
+    const scope = state();
+    let resolveOlder: ((value: unknown) => void) | undefined;
+    let resolveNewer: ((value: unknown) => void) | undefined;
+    const older = refreshCdpCaptureFrameTree(
+      scope,
+      () =>
+        new Promise((resolve) => {
+          resolveOlder = resolve;
+        })
+    );
+    const olderGeneration = scope.generation;
+    const newer = refreshCdpCaptureFrameTree(
+      scope,
+      () =>
+        new Promise((resolve) => {
+          resolveNewer = resolve;
+        })
+    );
+
+    resolveNewer?.({ frame: { id: "root-new", url: "https://app.example/new" } });
+    await expect(newer).resolves.toBe(true);
+    const newerGeneration = scope.generation;
+    expect(canCaptureGlobalCdpArtifacts(scope, newerGeneration)).toBe(true);
+
+    resolveOlder?.({ frame: { id: "root-old", url: "https://app.example/old" } });
+    await expect(older).resolves.toBe(false);
+
+    expect(scope.rootFrameId).toBe("root-new");
+    expect(scope.rootUrl).toBe("https://app.example/new");
+    expect(canCaptureGlobalCdpArtifacts(scope, newerGeneration)).toBe(true);
+    expect(canCaptureGlobalCdpArtifacts(scope, olderGeneration)).toBe(false);
+  });
+
+  it("keeps the root identity so same-document navigation invalidates a pending refresh", async () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    let resolveFrameTree: ((value: unknown) => void) | undefined;
+    const pending = refreshCdpCaptureFrameTree(
+      scope,
+      () =>
+        new Promise((resolve) => {
+          resolveFrameTree = resolve;
+        })
+    );
+    const pendingGeneration = scope.generation;
+
+    const navigation = evaluateCdpCaptureScopeEvent(scope, "Page.navigatedWithinDocument", {
+      frameId: "root",
+      url: "https://app.example/home#new"
+    });
+    resolveFrameTree?.({ frame: { id: "root", url: "https://app.example/home" } });
+
+    expect(navigation.topNavigation?.url).toBe("https://app.example/home#new");
+    expect(scope.generation).toBe(pendingGeneration + 1);
+    await expect(pending).resolves.toBe(false);
+    expect(scope.primed).toBe(false);
+  });
+
+  it("does not let a stale refresh overwrite a child navigation decision", async () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"],
+        deniedOrigins: ["https://blocked.example"]
+      })
+    );
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child", url: "https://widgets.example/embed" } }]
+    });
+    let resolveFrameTree: ((value: unknown) => void) | undefined;
+    const pending = refreshCdpCaptureFrameTree(
+      scope,
+      () =>
+        new Promise((resolve) => {
+          resolveFrameTree = resolve;
+        })
+    );
+
+    evaluateCdpCaptureScopeEvent(scope, "Page.frameNavigated", {
+      frame: {
+        id: "child",
+        parentId: "root",
+        url: "https://blocked.example/replacement"
+      }
+    });
+    resolveFrameTree?.({
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child", url: "https://widgets.example/embed" } }]
+    });
+
+    await expect(pending).resolves.toBe(false);
+    expect(scope.primed).toBe(false);
+    expect(scope.frameScopes.get("child")).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+  });
+
+  it("keeps global capture disabled between a parent change and a denied grandchild event", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"],
+        deniedOrigins: ["https://blocked.example"]
+      })
+    );
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [
+        {
+          frame: { id: "parent", url: "https://widgets.example/parent" },
+          childFrames: [{ frame: { id: "grandchild", url: "https://widgets.example/child" } }]
+        }
+      ]
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(true);
+
+    evaluateCdpCaptureScopeEvent(scope, "Page.frameNavigated", {
+      frame: {
+        id: "parent",
+        parentId: "root",
+        url: "https://widgets.example/replacement"
+      }
+    });
+
+    expect(scope.primed).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [
+        {
+          frame: { id: "parent", url: "https://widgets.example/replacement" },
+          childFrames: [{ frame: { id: "grandchild", url: "https://blocked.example/child" } }]
+        }
+      ]
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+  });
+
+  it("binds a global artifact claim to the exact primed generation", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    const claimedGeneration = scope.generation;
+
+    expect(canCaptureGlobalCdpArtifacts(scope, claimedGeneration)).toBe(true);
+
+    invalidateCdpCaptureFrameTree(scope);
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root-next", url: "https://app.example/next" }
+    });
+
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(true);
+    expect(canCaptureGlobalCdpArtifacts(scope, claimedGeneration)).toBe(false);
+  });
+
+  it("rejects an otherwise allowed prime whose root URL is stale", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/old" }
+    });
+
+    expect(
+      canCaptureGlobalCdpArtifactsForRoot(scope, "https://app.example/old", scope.generation)
+    ).toBe(true);
+    expect(
+      canCaptureGlobalCdpArtifactsForRoot(scope, "https://app.example/new", scope.generation)
+    ).toBe(false);
+  });
+
+  it("accepts a frame-tree root that omits the authoritative SPA fragment", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    evaluateCdpCaptureScopeEvent(scope, "Page.navigatedWithinDocument", {
+      frameId: "root",
+      url: "https://app.example/home#/checkout?step=payment"
+    });
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+
+    expect(
+      canCaptureGlobalCdpArtifactsForRoot(
+        scope,
+        "https://app.example/home#/checkout?step=payment",
+        scope.generation
+      )
+    ).toBe(true);
+  });
+
+  it("rejects a conflicting non-empty SPA fragment during root validation", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home#/settings" }
+    });
+
+    expect(
+      canCaptureGlobalCdpArtifactsForRoot(
+        scope,
+        "https://app.example/home#/checkout",
+        scope.generation
+      )
+    ).toBe(false);
+  });
+
+  it("keeps root validity separate from a child that blocks global artifacts", () => {
+    const scope = state(policy({ includeSubframes: false }));
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child", url: "https://widgets.example/embed" } }]
+    });
+
+    expect(
+      isCdpCaptureFrameTreePrimedForRoot(scope, "https://app.example/home", scope.generation)
+    ).toBe(true);
+    expect(
+      canCaptureGlobalCdpArtifactsForRoot(scope, "https://app.example/home", scope.generation)
+    ).toBe(false);
+  });
+
+  it.each([
+    "Page.captureScreenshot",
+    "DOMSnapshot.captureSnapshot",
+    "Performance.getMetrics",
+    "screen recording"
+  ])("fails closed for %s before priming and after navigation invalidation", () => {
+    const scope = state();
+
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    const claimedGeneration = scope.generation;
+    expect(canCaptureGlobalCdpArtifacts(scope, claimedGeneration)).toBe(true);
+
+    evaluateCdpCaptureScopeEvent(scope, "Page.frameNavigated", {
+      frame: { id: "root", url: "https://app.example/next" }
+    });
+
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(scope, claimedGeneration)).toBe(false);
+  });
+
+  it("allows only explicitly scoped child frames", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"],
+        deniedOrigins: ["https://blocked.example"]
+      })
+    );
+
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Page.frameNavigated", {
+        frame: {
+          id: "child-ok",
+          parentId: "root",
+          url: "https://widgets.example/embed"
+        }
+      }).allowed
+    ).toBe(true);
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Page.frameNavigated", {
+        frame: {
+          id: "child-denied",
+          parentId: "root",
+          url: "https://blocked.example/embed"
+        }
+      }).allowed
+    ).toBe(false);
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Page.frameNavigated", {
+        frame: { id: "child-opaque", parentId: "root", url: "about:blank" }
+      }).allowed
+    ).toBe(false);
+  });
+
+  it("stops a disallowed top-level navigation and accepts an allowed one", () => {
+    const stoppingScope = state();
+    primeCdpCaptureFrameTree(stoppingScope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    const stopped = evaluateCdpCaptureScopeEvent(stoppingScope, "Page.frameNavigated", {
+      frame: { id: "root", url: "https://admin.example/home" }
+    });
+
+    expect(stopped.allowed).toBe(false);
+    expect(stoppingScope.primed).toBe(false);
+    expect(stopped.topNavigation?.decision.reason).toBe("origin-changed");
+    expect(stoppingScope.frameScopes.get("root")).toBe(false);
+    expect(hasDisallowedCdpFrames(stoppingScope)).toBe(true);
+    expect(
+      filterCdpSnapshotDocuments(stoppingScope, [
+        { frameId: "root", marker: "must-not-cross-denied-root" }
+      ])
+    ).toEqual([]);
+
+    const continuingScope = state(
+      policy({
+        stopOnOriginChange: false,
+        allowedOrigins: ["https://app.example", "https://admin.example"]
+      })
+    );
+    primeCdpCaptureFrameTree(continuingScope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    const continued = evaluateCdpCaptureScopeEvent(continuingScope, "Page.frameNavigated", {
+      frame: { id: "root", url: "https://admin.example/home" }
+    });
+
+    expect(continued.allowed).toBe(true);
+    expect(continuingScope.primed).toBe(false);
+    expect(continuingScope.captureUrl).toBe("https://admin.example/home");
+  });
+
+  it("invalidates same-document top navigation without letting child updates prime state", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"]
+      })
+    );
+
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Page.frameNavigated", {
+        frame: {
+          id: "child",
+          parentId: "root",
+          url: "https://widgets.example/embed"
+        }
+      }).allowed
+    ).toBe(true);
+    expect(scope.primed).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child", url: "https://widgets.example/embed" } }]
+    });
+    expect(scope.primed).toBe(true);
+
+    const navigated = evaluateCdpCaptureScopeEvent(scope, "Page.navigatedWithinDocument", {
+      frameId: "root",
+      url: "https://app.example/home#details"
+    });
+
+    expect(navigated.allowed).toBe(true);
+    expect(navigated.topNavigation?.url).toBe("https://app.example/home#details");
+    expect(scope.primed).toBe(false);
+
+    evaluateCdpCaptureScopeEvent(scope, "Page.frameNavigated", {
+      frame: {
+        id: "child-2",
+        parentId: "root",
+        url: "https://widgets.example/second"
+      }
+    });
+    expect(scope.primed).toBe(false);
+  });
+
+  it("invalidates priming when the root frame detaches", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+
+    expect(scope.primed).toBe(true);
+    evaluateCdpCaptureScopeEvent(scope, "Page.frameDetached", { frameId: "root" });
+
+    expect(scope.primed).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+  });
+
+  it("binds child target sessions to their target URL", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"]
+      })
+    );
+
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+        sessionId: "allowed-session",
+        targetInfo: { type: "worker", url: "https://widgets.example/worker.js" }
+      }).allowed
+    ).toBe(true);
+    expect(isCdpSessionWithinScope(scope, "allowed-session")).toBe(true);
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Network.requestWillBeSent",
+        {
+          requestId: "worker-allowed",
+          request: { url: "https://widgets.example/api/data" }
+        },
+        "allowed-session"
+      ).allowed
+    ).toBe(true);
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Network.responseReceived",
+        { requestId: "worker-allowed" },
+        "allowed-session"
+      ).allowed
+    ).toBe(true);
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Network.requestWillBeSent",
+        {
+          requestId: "worker-denied",
+          request: { url: "https://blocked.example/api/data" }
+        },
+        "allowed-session"
+      ).allowed
+    ).toBe(false);
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+        sessionId: "opaque-session",
+        targetInfo: { type: "worker", url: "" }
+      }).allowed
+    ).toBe(false);
+  });
+
+  it("fails closed for an OOPIF before its frame event and while its scope is denied", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"],
+        deniedOrigins: ["https://blocked.example"]
+      })
+    );
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+
+    const attached = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "oopif-session",
+      targetInfo: { type: "iframe", url: "https://blocked.example/embed" }
+    });
+
+    expect(attached.globalFrameTreeMutation).toBe(true);
+    expect(scope.childSessions.get("oopif-session")?.status).toBe("pending");
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+    expect(
+      isCdpCaptureFrameTreePrimedForRoot(scope, "https://app.example/home", scope.generation)
+    ).toBe(true);
+
+    const navigated = evaluateCdpCaptureScopeEvent(
+      scope,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "oopif-frame",
+          parentId: "root",
+          url: "https://blocked.example/embed"
+        }
+      },
+      "oopif-session"
+    );
+    expect(navigated.childSessionClaim).toBeDefined();
+    expect(scope.childSessions.get("oopif-session")?.status).toBe("pending");
+    expect(markCdpChildSessionBaselineReady(scope, attached.childSessionClaim!)).toBe(true);
+    expect(
+      completeCdpChildFrameTreePrime(scope, navigated.childSessionClaim!, {
+        frame: { id: "oopif-frame", url: "https://blocked.example/embed" }
+      })
+    ).toBe("denied");
+    expect(scope.childSessions.get("oopif-session")?.status).toBe("denied");
+    expect(scope.childSessions.get("oopif-session")?.frameScopes.get("oopif-frame")).toBe(false);
+    expect(scope.frameScopes.has("oopif-frame")).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    evaluateCdpCaptureScopeEvent(scope, "Target.detachedFromTarget", {
+      sessionId: "oopif-session"
+    });
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    expect(scope.childSessions.has("oopif-session")).toBe(false);
+    expect(scope.frameScopes.has("oopif-frame")).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(true);
+  });
+
+  it("requires an OOPIF frame event and a full-tree prime before restoring global capture", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"]
+      })
+    );
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+
+    const attached = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "oopif-session",
+      targetInfo: { type: "iframe", url: "" }
+    });
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    const navigated = evaluateCdpCaptureScopeEvent(
+      scope,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "oopif-frame",
+          parentId: "root",
+          url: "https://widgets.example/embed"
+        }
+      },
+      "oopif-session"
+    );
+    expect(markCdpChildSessionBaselineReady(scope, attached.childSessionClaim!)).toBe(true);
+    expect(
+      completeCdpChildFrameTreePrime(scope, navigated.childSessionClaim!, {
+        frame: { id: "oopif-frame", url: "https://widgets.example/embed" }
+      })
+    ).toBe("ready");
+    expect(scope.childSessions.get("oopif-session")?.status).toBe("ready");
+    expect(scope.primed).toBe(false);
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "oopif-frame", url: "https://widgets.example/embed" } }]
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(true);
+  });
+
+  it("invalidates an older root prime when a visual child becomes ready", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"]
+      })
+    );
+    const attached = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "oopif-session",
+      targetInfo: {
+        targetId: "oopif-frame",
+        type: "iframe",
+        url: "https://widgets.example/embed"
+      }
+    });
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "oopif-frame", url: "https://widgets.example/embed" } }]
+    });
+    expect(scope.primed).toBe(true);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    expect(markCdpChildSessionBaselineReady(scope, attached.childSessionClaim!)).toBe(true);
+    expect(
+      completeCdpChildFrameTreePrime(scope, attached.childSessionClaim!, {
+        frame: { id: "oopif-frame", url: "https://widgets.example/embed" }
+      })
+    ).toBe("ready");
+    expect(scope.primed).toBe(false);
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "oopif-frame", url: "https://widgets.example/embed" } }]
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(true);
+  });
+
+  it("does not let a page event wash a failed visual child back to readiness", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"]
+      })
+    );
+    const attached = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "failed-child",
+      targetInfo: { type: "iframe", url: "https://widgets.example/embed" }
+    });
+
+    expect(failCdpChildSessionAttachment(scope, attached.childSessionClaim!)).toBe(true);
+    const navigated = evaluateCdpCaptureScopeEvent(
+      scope,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "failed-frame",
+          parentId: "root",
+          url: "https://widgets.example/next"
+        }
+      },
+      "failed-child"
+    );
+
+    expect(scope.childSessions.get("failed-child")?.status).toBe("failed");
+    expect(navigated.childSessionClaim).toBeDefined();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "failed-frame", url: "https://widgets.example/next" } }]
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+  });
+
+  it("rejects stale navigation primes and lets a denied child recover through a new prime", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"],
+        deniedOrigins: ["https://blocked.example"]
+      })
+    );
+    const attached = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "moving-child",
+      targetInfo: { type: "iframe", url: "https://blocked.example/embed" }
+    });
+    expect(markCdpChildSessionBaselineReady(scope, attached.childSessionClaim!)).toBe(true);
+    expect(
+      completeCdpChildFrameTreePrime(scope, attached.childSessionClaim!, {
+        frame: { id: "moving-frame", url: "https://blocked.example/embed" }
+      })
+    ).toBe("denied");
+
+    const allowedNavigation = evaluateCdpCaptureScopeEvent(
+      scope,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "moving-frame",
+          parentId: "root",
+          url: "https://widgets.example/embed"
+        }
+      },
+      "moving-child"
+    );
+
+    expect(isCdpChildSessionClaimCurrent(scope, attached.childSessionClaim!)).toBe(false);
+    expect(
+      completeCdpChildFrameTreePrime(scope, attached.childSessionClaim!, {
+        frame: { id: "moving-frame", url: "https://blocked.example/stale" }
+      })
+    ).toBe("stale");
+    expect(
+      completeCdpChildFrameTreePrime(scope, allowedNavigation.childSessionClaim!, {
+        frame: { id: "moving-frame", url: "https://widgets.example/embed" }
+      })
+    ).toBe("ready");
+  });
+
+  it("does not let a detached child claim mutate a reused session id", () => {
+    const scope = state(policy({ includeSubframes: true }));
+    const first = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "reused",
+      targetInfo: { targetId: "target-a", type: "iframe", url: "https://app.example/a" }
+    });
+    evaluateCdpCaptureScopeEvent(scope, "Target.detachedFromTarget", { sessionId: "reused" });
+    const replacement = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "reused",
+      targetInfo: { targetId: "target-b", type: "iframe", url: "https://app.example/b" }
+    });
+
+    expect(markCdpChildSessionBaselineReady(scope, first.childSessionClaim!)).toBe(false);
+    expect(failCdpChildSessionAttachment(scope, first.childSessionClaim!)).toBe(false);
+    expect(scope.childSessions.get("reused")?.token).toBe(replacement.childSessionClaim?.token);
+    expect(scope.childSessions.get("reused")?.status).toBe("pending");
+
+    const replacementRevision = scope.childSessions.get("reused")?.navigationRevision;
+    const stalePageEvent = evaluateCdpCaptureScopeEvent(
+      scope,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "target-a",
+          parentId: "root",
+          url: "https://app.example/stale-a"
+        }
+      },
+      "reused"
+    );
+    expect(stalePageEvent.allowed).toBe(false);
+    expect(stalePageEvent.globalFrameTreeMutation).toBeUndefined();
+    expect(scope.childSessions.get("reused")?.navigationRevision).toBe(replacementRevision);
+    expect(scope.childSessions.get("reused")?.targetId).toBe("target-b");
+
+    evaluateCdpCaptureScopeEvent(scope, "Target.detachedFromTarget", {
+      sessionId: "reused",
+      targetId: "target-a"
+    });
+    expect(scope.childSessions.get("reused")?.targetId).toBe("target-b");
+  });
+
+  it("retains root re-prime ownership when a visual session id becomes nonvisual", () => {
+    const scope = state(policy({ includeSubframes: true }));
+    evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "reused",
+      targetInfo: {
+        targetId: "visual-frame",
+        type: "iframe",
+        url: "https://app.example/frame"
+      }
+    });
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+
+    const replacement = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "reused",
+      targetInfo: {
+        targetId: "worker-target",
+        type: "worker",
+        url: "https://app.example/worker.js"
+      }
+    });
+    expect(replacement.globalFrameTreeMutation).toBe(true);
+    expect(scope.childSessions.get("reused")).toMatchObject({
+      visual: false,
+      rootReprimeRequired: true
+    });
+
+    evaluateCdpCaptureScopeEvent(
+      scope,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "worker-target",
+          url: "https://app.example/worker.js"
+        }
+      },
+      "reused"
+    );
+    expect(scope.childSessions.get("reused")?.rootReprimeRequired).toBe(true);
+
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    expect(scope.childSessions.get("reused")?.rootReprimeRequired).toBe(false);
+  });
+
+  it("fails closed for an unknown child Page session until its Target detach", () => {
+    const scope = state(policy({ includeSubframes: true }));
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+
+    const unknown = evaluateCdpCaptureScopeEvent(
+      scope,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "unknown-frame",
+          parentId: "root",
+          url: "https://app.example/allowed-but-unowned"
+        }
+      },
+      "unknown-session"
+    );
+
+    expect(unknown.allowed).toBe(false);
+    expect(unknown.globalFrameTreeMutation).toBe(true);
+    expect(scope.childSessions.get("unknown-session")).toMatchObject({
+      visual: true,
+      status: "failed",
+      sessionAllowed: false
+    });
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+
+    evaluateCdpCaptureScopeEvent(scope, "Target.detachedFromTarget", {
+      sessionId: "unknown-session"
+    });
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(true);
+  });
+
+  it("marks a visual target without a child session as a fatal scope violation", () => {
+    const scope = state(policy({ includeSubframes: true }));
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+
+    const malformed = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      targetInfo: {
+        targetId: "unbound-frame",
+        type: "iframe",
+        url: "https://app.example/embed"
+      }
+    });
+
+    expect(malformed).toMatchObject({
+      allowed: false,
+      globalFrameTreeMutation: true,
+      fatalScopeViolation: true
+    });
+    expect(scope.primed).toBe(false);
+  });
+
+  it("requires every live visual child to be ready but ignores a failed worker", () => {
+    const scope = state(policy({ includeSubframes: true }));
+    const readyChild = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "ready",
+      targetInfo: { type: "iframe", url: "https://app.example/ready" }
+    });
+    const pendingChild = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "pending",
+      targetInfo: { type: "iframe", url: "https://app.example/pending" }
+    });
+    const worker = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "worker",
+      targetInfo: { type: "worker", url: "https://app.example/worker.js" }
+    });
+    markCdpChildSessionBaselineReady(scope, readyChild.childSessionClaim!);
+    completeCdpChildFrameTreePrime(scope, readyChild.childSessionClaim!, {
+      frame: { id: "ready-frame", url: "https://app.example/ready" }
+    });
+    failCdpChildSessionAttachment(scope, worker.childSessionClaim!);
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "ready-frame", url: "https://app.example/ready" } }]
+    });
+
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(false);
+    expect(scope.childSessions.get("pending")?.status).toBe("pending");
+    evaluateCdpCaptureScopeEvent(scope, "Target.detachedFromTarget", {
+      sessionId: pendingChild.childSessionClaim?.sessionId
+    });
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "ready-frame", url: "https://app.example/ready" } }]
+    });
+    expect(canCaptureGlobalCdpArtifacts(scope)).toBe(true);
+  });
+
+  it("carries a frame decision through the network request lifecycle", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child", url: "https://widgets.example/embed" } }]
+    });
+
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Network.requestWillBeSent", {
+        requestId: "R-child",
+        frameId: "child",
+        documentURL: "https://widgets.example/embed"
+      }).allowed
+    ).toBe(false);
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Network.responseReceived", {
+        requestId: "R-child"
+      }).allowed
+    ).toBe(false);
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Network.loadingFailed", {
+        requestId: "R-child"
+      }).allowed
+    ).toBe(false);
+    expect(scope.requestScopes.has("R-child")).toBe(false);
+
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Network.requestWillBeSent", {
+        requestId: "R-root",
+        frameId: "root",
+        documentURL: "https://app.example/home"
+      }).allowed
+    ).toBe(true);
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Network.loadingFinished", {
+        requestId: "R-root"
+      }).allowed
+    ).toBe(true);
+  });
+
+  it("does not reuse child request scope across attachment or navigation revisions", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"]
+      })
+    );
+    evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "reused",
+      targetInfo: {
+        targetId: "child-a",
+        type: "iframe",
+        url: "https://widgets.example/a"
+      }
+    });
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Network.requestWillBeSent",
+        {
+          requestId: "request-1",
+          frameId: "child-a",
+          documentURL: "https://widgets.example/a"
+        },
+        "reused"
+      ).allowed
+    ).toBe(true);
+
+    evaluateCdpCaptureScopeEvent(scope, "Target.detachedFromTarget", {
+      sessionId: "reused",
+      targetId: "child-a"
+    });
+    evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "reused",
+      targetInfo: {
+        targetId: "child-b",
+        type: "iframe",
+        url: "https://widgets.example/b"
+      }
+    });
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Network.responseReceived",
+        { requestId: "request-1" },
+        "reused"
+      ).allowed
+    ).toBe(false);
+
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Network.requestWillBeSent",
+        {
+          requestId: "request-2",
+          frameId: "child-b",
+          documentURL: "https://widgets.example/b"
+        },
+        "reused"
+      ).allowed
+    ).toBe(true);
+    evaluateCdpCaptureScopeEvent(
+      scope,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "child-b",
+          parentId: "root",
+          url: "https://widgets.example/b-next"
+        }
+      },
+      "reused"
+    );
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Network.responseReceived",
+        { requestId: "request-2" },
+        "reused"
+      ).allowed
+    ).toBe(false);
+  });
+
+  it("carries frame scope through Runtime execution contexts", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child", url: "https://app.example/embed" } }]
+    });
+
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Runtime.executionContextCreated", {
+        context: { id: 11, origin: "https://app.example", auxData: { frameId: "child" } }
+      }).allowed
+    ).toBe(false);
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Runtime.consoleAPICalled", {
+        executionContextId: 11
+      }).allowed
+    ).toBe(false);
+  });
+
+  it("isolates Runtime execution contexts by child session and refreshes them from its tree", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"],
+        deniedOrigins: ["https://blocked.example"]
+      })
+    );
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "root-denied", url: "https://blocked.example/root" } }]
+    });
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Runtime.executionContextCreated", {
+        context: {
+          id: 11,
+          origin: "https://blocked.example",
+          auxData: { frameId: "root-denied" }
+        }
+      }).allowed
+    ).toBe(false);
+
+    const attached = evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "child",
+      targetInfo: {
+        targetId: "child-frame",
+        type: "iframe",
+        url: "https://widgets.example/embed"
+      }
+    });
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Runtime.executionContextCreated",
+        {
+          context: {
+            id: 11,
+            origin: "https://widgets.example",
+            auxData: { frameId: "child-frame" }
+          }
+        },
+        "child"
+      ).allowed
+    ).toBe(true);
+    expect(
+      evaluateCdpCaptureScopeEvent(scope, "Runtime.consoleAPICalled", {
+        executionContextId: 11
+      }).allowed
+    ).toBe(false);
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Runtime.consoleAPICalled",
+        { executionContextId: 11 },
+        "child"
+      ).allowed
+    ).toBe(true);
+
+    expect(markCdpChildSessionBaselineReady(scope, attached.childSessionClaim!)).toBe(true);
+    expect(
+      completeCdpChildFrameTreePrime(scope, attached.childSessionClaim!, {
+        frame: { id: "child-frame", url: "https://blocked.example/now-denied" }
+      })
+    ).toBe("denied");
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Runtime.consoleAPICalled",
+        { executionContextId: 11 },
+        "child"
+      ).allowed
+    ).toBe(false);
+  });
+
+  it("uses a child context origin instead of its allowed target fallback", () => {
+    const scope = state(
+      policy({
+        includeSubframes: true,
+        allowedOrigins: ["https://app.example", "https://widgets.example"],
+        deniedOrigins: ["https://blocked.example"]
+      })
+    );
+    evaluateCdpCaptureScopeEvent(scope, "Target.attachedToTarget", {
+      sessionId: "child",
+      targetInfo: {
+        targetId: "child-frame",
+        type: "iframe",
+        url: "https://widgets.example/embed"
+      }
+    });
+
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Runtime.executionContextCreated",
+        {
+          context: {
+            id: 12,
+            origin: "https://blocked.example",
+            auxData: { frameId: "unknown-frame" }
+          }
+        },
+        "child"
+      ).allowed
+    ).toBe(false);
+    expect(
+      evaluateCdpCaptureScopeEvent(
+        scope,
+        "Runtime.consoleAPICalled",
+        { executionContextId: 12 },
+        "child"
+      ).allowed
+    ).toBe(false);
+  });
+
+  it("filters DOM snapshot documents to allowed frame IDs", () => {
+    const scope = state();
+    primeCdpCaptureFrameTree(scope, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child", url: "https://app.example/embed" } }]
+    });
+
+    expect(
+      filterCdpSnapshotDocuments(scope, [
+        { frameId: "root", marker: "keep" },
+        { frameId: "child", marker: "drop" },
+        { marker: "ambiguous" }
+      ])
+    ).toEqual([{ frameId: "root", marker: "keep" }]);
+  });
+
+  it("drops unbound Network, Runtime, and Log events", () => {
+    const scope = state();
+
+    expect(evaluateCdpCaptureScopeEvent(scope, "Network.loadingFinished", {}).allowed).toBe(false);
+    expect(evaluateCdpCaptureScopeEvent(scope, "Runtime.consoleAPICalled", {}).allowed).toBe(false);
+    expect(evaluateCdpCaptureScopeEvent(scope, "Log.entryAdded", {}).allowed).toBe(false);
+  });
+});
diff --git a/apps/extension/src/sw/cdp-capture-scope.ts b/apps/extension/src/sw/cdp-capture-scope.ts
new file mode 100644
index 0000000..ee7544d
--- /dev/null
+++ b/apps/extension/src/sw/cdp-capture-scope.ts
@@ -0,0 +1,1144 @@
+import {
+  evaluateCaptureScope,
+  type CapturePolicy,
+  type CaptureScopeDecision
+} from "@webblackbox/protocol";
+
+const CDP_SCOPE_MAX_REQUESTS = 2_000;
+
+export type CdpCaptureScopeState = {
+  policy: CapturePolicy | undefined;
+  tabId: number;
+  captureUrl: string;
+  primed: boolean;
+  generation: number;
+  rootFrameId: string | undefined;
+  rootUrl: string | undefined;
+  childSessionSequence: number;
+  childMutationRevision: number;
+  childSessions: Map<string, CdpChildSessionState>;
+  frameScopes: Map<string, boolean>;
+  executionContextScopes: Map<number, boolean>;
+  requestScopes: Map<string, boolean>;
+};
+
+export type CdpChildSessionStatus = "pending" | "ready" | "failed" | "denied" | "detached";
+
+export type CdpChildSessionState = {
+  token: number;
+  sessionId: string;
+  targetId: string | undefined;
+  parentSessionId: string | undefined;
+  parentToken: number | undefined;
+  visual: boolean;
+  status: CdpChildSessionStatus;
+  baselineReady: boolean;
+  navigationRevision: number;
+  sessionAllowed: boolean;
+  rootReprimeRequired: boolean;
+  frameScopes: Map<string, boolean>;
+  executionContextScopes: Map<number, CdpExecutionContextScope>;
+};
+
+type CdpExecutionContextScope = {
+  allowed: boolean;
+  frameId: string | undefined;
+  origin: string | undefined;
+};
+
+export type CdpChildSessionClaim = Readonly<{
+  sessionId: string;
+  token: number;
+  navigationRevision: number;
+}>;
+
+export type CdpCaptureScopeEvaluation = {
+  allowed: boolean;
+  globalFrameTreeMutation?: boolean;
+  childSessionClaim?: CdpChildSessionClaim;
+  fatalScopeViolation?: boolean;
+  topNavigation?: {
+    url: string;
+    decision: CaptureScopeDecision;
+  };
+};
+
+export function createCdpCaptureScopeState(
+  policy: CapturePolicy | undefined,
+  tabId: number,
+  captureUrl: string
+): CdpCaptureScopeState {
+  return {
+    policy,
+    tabId,
+    captureUrl,
+    primed: false,
+    generation: 0,
+    rootFrameId: undefined,
+    rootUrl: undefined,
+    childSessionSequence: 0,
+    childMutationRevision: 0,
+    childSessions: new Map(),
+    frameScopes: new Map(),
+    executionContextScopes: new Map(),
+    requestScopes: new Map()
+  };
+}
+
+export function evaluateCdpCaptureScopeEvent(
+  state: CdpCaptureScopeState,
+  method: string,
+  params: unknown,
+  sessionId?: string
+): CdpCaptureScopeEvaluation {
+  const payload = asRecord(params);
+
+  if (method === "Target.attachedToTarget") {
+    const childSessionId = asString(payload?.sessionId);
+    const targetInfo = asRecord(payload?.targetInfo);
+    const allowed = evaluateFrameDocument(state, asString(targetInfo?.url), false).allowed;
+    const visual = isPotentiallyVisualTarget(asString(targetInfo?.type));
+    const replaced = childSessionId ? state.childSessions.get(childSessionId) : undefined;
+    const replacementInvalidatedGlobal = replaced
+      ? detachCdpChildSessionSubtree(state, replaced)
+      : false;
+    const globalFrameTreeMutation = visual || replacementInvalidatedGlobal;
+    let childSessionClaim: CdpChildSessionClaim | undefined;
+
+    if (globalFrameTreeMutation) {
+      invalidateCdpCaptureFrameTree(state);
+      state.childMutationRevision += 1;
+    }
+
+    if (visual && !childSessionId) {
+      return {
+        allowed: false,
+        globalFrameTreeMutation: true,
+        fatalScopeViolation: true
+      };
+    }
+
+    if (childSessionId) {
+      const parent = sessionId ? state.childSessions.get(sessionId) : undefined;
+
+      const child: CdpChildSessionState = {
+        token: (state.childSessionSequence += 1),
+        sessionId: childSessionId,
+        targetId: asString(targetInfo?.targetId) ?? undefined,
+        parentSessionId: sessionId,
+        parentToken: parent?.token,
+        visual,
+        status: "pending",
+        baselineReady: false,
+        navigationRevision: 0,
+        sessionAllowed: allowed,
+        rootReprimeRequired: globalFrameTreeMutation,
+        frameScopes: new Map(),
+        executionContextScopes: new Map()
+      };
+      state.childSessions.set(childSessionId, child);
+      childSessionClaim = claimCdpChildSession(child);
+    }
+
+    return { allowed, globalFrameTreeMutation, childSessionClaim };
+  }
+
+  if (method === "Target.detachedFromTarget") {
+    const childSessionId = asString(payload?.sessionId);
+    const detachedTargetId = asString(payload?.targetId);
+    const candidate = childSessionId ? state.childSessions.get(childSessionId) : undefined;
+    const parent = sessionId ? state.childSessions.get(sessionId) : undefined;
+    const child =
+      candidate &&
+      candidate.parentSessionId === sessionId &&
+      candidate.parentToken === parent?.token &&
+      (!detachedTargetId || !candidate.targetId || candidate.targetId === detachedTargetId)
+        ? candidate
+        : undefined;
+    const globalFrameTreeMutation = child ? detachCdpChildSessionSubtree(state, child) : false;
+
+    if (globalFrameTreeMutation) {
+      invalidateCdpCaptureFrameTree(state);
+      state.childMutationRevision += 1;
+    }
+
+    return {
+      allowed: false,
+      globalFrameTreeMutation
+    };
+  }
+
+  if (method === "Page.frameNavigated") {
+    const frame = asRecord(payload?.frame);
+    const frameId = asString(frame?.id);
+    const frameUrl = asString(frame?.url);
+    const parentFrameId = asString(frame?.parentId) ?? asString(frame?.parentFrameId);
+    const topLevel =
+      !sessionId && typeof frame?.parentId !== "string" && typeof frame?.parentFrameId !== "string";
+
+    const child = sessionId ? state.childSessions.get(sessionId) : undefined;
+
+    if (sessionId && !child) {
+      registerUnknownVisualCdpChildSession(state, sessionId);
+      return { allowed: false, globalFrameTreeMutation: true };
+    }
+
+    if (child && !isCdpChildFrameEventOwned(child, frameId, parentFrameId)) {
+      return { allowed: false };
+    }
+
+    const globalFrameTreeMutation = !sessionId || child?.visual !== false;
+
+    if (globalFrameTreeMutation) {
+      invalidateCdpCaptureFrameTree(state);
+
+      if (!topLevel) {
+        state.childMutationRevision += 1;
+      }
+
+      if (child) {
+        child.rootReprimeRequired = true;
+      }
+    }
+
+    const decision = evaluateFrameDocument(state, frameUrl, topLevel);
+
+    const childSessionClaim = child
+      ? advanceCdpChildSessionNavigation(child, decision.allowed)
+      : undefined;
+
+    if (frameId) {
+      (child?.frameScopes ?? state.frameScopes).set(frameId, decision.allowed);
+
+      if (topLevel) {
+        state.rootFrameId = frameId;
+        state.rootUrl = frameUrl ?? undefined;
+      }
+    }
+
+    if (topLevel && frameUrl) {
+      if (decision.allowed) {
+        state.captureUrl = frameUrl;
+      }
+
+      return {
+        allowed: decision.allowed,
+        globalFrameTreeMutation: true,
+        topNavigation: {
+          url: frameUrl,
+          decision
+        }
+      };
+    }
+
+    return {
+      allowed: decision.allowed,
+      globalFrameTreeMutation,
+      childSessionClaim
+    };
+  }
+
+  if (method === "Page.navigatedWithinDocument") {
+    const frameId = asString(payload?.frameId);
+    const frameUrl = asString(payload?.url);
+    const topLevel = !sessionId && frameId !== null && frameId === state.rootFrameId;
+
+    const child = sessionId ? state.childSessions.get(sessionId) : undefined;
+
+    if (sessionId && !child) {
+      registerUnknownVisualCdpChildSession(state, sessionId);
+      return { allowed: false, globalFrameTreeMutation: true };
+    }
+
+    if (child && !isCdpChildFrameEventOwned(child, frameId, null)) {
+      return { allowed: false };
+    }
+
+    const globalFrameTreeMutation = Boolean(frameId) && (!sessionId || child?.visual !== false);
+
+    if (globalFrameTreeMutation) {
+      invalidateCdpCaptureFrameTree(state);
+
+      if (!topLevel) {
+        state.childMutationRevision += 1;
+      }
+
+      if (child) {
+        child.rootReprimeRequired = true;
+      }
+    }
+
+    const decision = evaluateFrameDocument(state, frameUrl, topLevel);
+
+    const childSessionClaim = child
+      ? advanceCdpChildSessionNavigation(child, decision.allowed)
+      : undefined;
+
+    if (frameId) {
+      (child?.frameScopes ?? state.frameScopes).set(frameId, decision.allowed);
+
+      if (topLevel) {
+        state.rootUrl = frameUrl ?? undefined;
+      }
+    }
+
+    if (topLevel && frameUrl) {
+      if (decision.allowed) {
+        state.captureUrl = frameUrl;
+      }
+
+      return {
+        allowed: decision.allowed,
+        globalFrameTreeMutation: true,
+        topNavigation: {
+          url: frameUrl,
+          decision
+        }
+      };
+    }
+
+    return {
+      allowed: decision.allowed,
+      ...(globalFrameTreeMutation ? { globalFrameTreeMutation: true } : {}),
+      ...(childSessionClaim ? { childSessionClaim } : {})
+    };
+  }
+
+  if (method === "Page.frameDetached") {
+    const frameId = asString(payload?.frameId);
+    const child = sessionId ? state.childSessions.get(sessionId) : undefined;
+
+    if (sessionId && !child) {
+      registerUnknownVisualCdpChildSession(state, sessionId);
+      return { allowed: false, globalFrameTreeMutation: true };
+    }
+
+    if (child && !isCdpChildFrameEventOwned(child, frameId, null)) {
+      return { allowed: false };
+    }
+
+    const globalFrameTreeMutation = Boolean(frameId) && (!sessionId || child?.visual !== false);
+    const childSessionClaim = child
+      ? advanceCdpChildSessionNavigation(child, child.sessionAllowed)
+      : undefined;
+
+    if (frameId && child) {
+      child.frameScopes.delete(frameId);
+    }
+
+    if (frameId && globalFrameTreeMutation) {
+      if (sessionId || frameId !== state.rootFrameId) {
+        state.childMutationRevision += 1;
+      }
+
+      if (frameId === state.rootFrameId) {
+        invalidateCdpCaptureFrameTree(state);
+        state.rootFrameId = undefined;
+        state.rootUrl = undefined;
+      } else {
+        invalidateCdpCaptureFrameTree(state);
+      }
+
+      if (child) {
+        child.rootReprimeRequired = true;
+      }
+    }
+
+    return {
+      allowed: false,
+      ...(globalFrameTreeMutation ? { globalFrameTreeMutation: true } : {}),
+      ...(childSessionClaim ? { childSessionClaim } : {})
+    };
+  }
+
+  if (method === "Runtime.executionContextsCleared") {
+    if (sessionId) {
+      state.childSessions.get(sessionId)?.executionContextScopes.clear();
+    } else {
+      state.executionContextScopes.clear();
+    }
+    return { allowed: false };
+  }
+
+  if (method === "Runtime.executionContextDestroyed") {
+    const executionContextId = asFiniteNumber(payload?.executionContextId);
+
+    if (executionContextId !== null) {
+      if (sessionId) {
+        state.childSessions.get(sessionId)?.executionContextScopes.delete(executionContextId);
+      } else {
+        state.executionContextScopes.delete(executionContextId);
+      }
+    }
+
+    return { allowed: false };
+  }
+
+  if (sessionId && state.childSessions.get(sessionId)?.sessionAllowed !== true) {
+    return { allowed: false };
+  }
+
+  if (method === "Runtime.executionContextCreated") {
+    const child = sessionId ? state.childSessions.get(sessionId) : undefined;
+    const context = asRecord(payload?.context);
+    const contextId = asFiniteNumber(context?.id);
+    const auxData = asRecord(context?.auxData);
+    const frameId = asString(auxData?.frameId);
+    const contextOrigin = asString(context?.origin);
+    const allowed = sessionId
+      ? frameId && child?.frameScopes.has(frameId)
+        ? child.frameScopes.get(frameId) === true
+        : contextOrigin !== null
+          ? evaluateFrameDocument(state, contextOrigin, false).allowed
+          : false
+      : frameId && state.frameScopes.has(frameId)
+        ? state.frameScopes.get(frameId) === true
+        : evaluateFrameDocument(
+            state,
+            contextOrigin,
+            frameId !== null && frameId === state.rootFrameId
+          ).allowed;
+
+    if (contextId !== null) {
+      if (child) {
+        child.executionContextScopes.set(contextId, {
+          allowed,
+          frameId: frameId ?? undefined,
+          origin: contextOrigin ?? undefined
+        });
+      } else if (!sessionId) {
+        state.executionContextScopes.set(contextId, allowed);
+      }
+    }
+
+    return { allowed };
+  }
+
+  const executionContextId = resolveExecutionContextId(method, payload);
+
+  if (executionContextId !== null) {
+    const contextScope = sessionId
+      ? state.childSessions.get(sessionId)?.executionContextScopes.get(executionContextId)?.allowed
+      : state.executionContextScopes.get(executionContextId);
+
+    if (contextScope !== undefined) {
+      return { allowed: contextScope };
+    }
+
+    if (method.startsWith("Runtime.")) {
+      return { allowed: false };
+    }
+  }
+
+  const requestId = asString(payload?.requestId);
+  const requestScopeKey = requestId ? buildRequestScopeKey(state, requestId, sessionId) : null;
+
+  if (requestScopeKey && method !== "Network.requestWillBeSent") {
+    const requestScope = state.requestScopes.get(requestScopeKey);
+
+    if (requestScope !== undefined) {
+      if (method === "Network.loadingFinished" || method === "Network.loadingFailed") {
+        state.requestScopes.delete(requestScopeKey);
+      }
+
+      return { allowed: requestScope };
+    }
+  }
+
+  const frameId = resolveFrameId(payload);
+
+  if (frameId) {
+    const knownScope = sessionId
+      ? state.childSessions.get(sessionId)?.frameScopes.get(frameId)
+      : state.frameScopes.get(frameId);
+
+    if (knownScope !== undefined) {
+      return {
+        allowed: rememberRequestScope(state, method, requestScopeKey, knownScope)
+      };
+    }
+
+    const documentUrl = asString(payload?.documentURL) ?? asString(asRecord(payload?.frame)?.url);
+
+    if (!documentUrl) {
+      const allowed = frameId === state.rootFrameId;
+      if (sessionId) {
+        state.childSessions.get(sessionId)?.frameScopes.set(frameId, allowed);
+      } else {
+        state.frameScopes.set(frameId, allowed);
+      }
+      return {
+        allowed: rememberRequestScope(state, method, requestScopeKey, allowed)
+      };
+    }
+
+    const allowed = evaluateFrameDocument(
+      state,
+      documentUrl,
+      frameId === state.rootFrameId
+    ).allowed;
+    if (sessionId) {
+      state.childSessions.get(sessionId)?.frameScopes.set(frameId, allowed);
+    } else {
+      state.frameScopes.set(frameId, allowed);
+    }
+    return {
+      allowed: rememberRequestScope(state, method, requestScopeKey, allowed)
+    };
+  }
+
+  const child = sessionId ? state.childSessions.get(sessionId) : undefined;
+
+  if (method === "Network.requestWillBeSent" && child?.visual === false) {
+    const requestUrl = asString(asRecord(payload?.request)?.url);
+    const allowed = child.sessionAllowed && evaluateFrameDocument(state, requestUrl, false).allowed;
+
+    return {
+      allowed: rememberRequestScope(state, method, requestScopeKey, allowed)
+    };
+  }
+
+  if (
+    method.startsWith("Network.") ||
+    method.startsWith("Runtime.") ||
+    method === "Log.entryAdded"
+  ) {
+    return { allowed: false };
+  }
+
+  return {
+    allowed: evaluateFrameDocument(state, state.captureUrl, true).allowed
+  };
+}
+
+export function primeCdpCaptureFrameTree(state: CdpCaptureScopeState, value: unknown): boolean {
+  const generation = invalidateCdpCaptureFrameTree(state);
+  return completeCdpCaptureFrameTreePrime(state, generation, value);
+}
+
+export async function refreshCdpCaptureFrameTree(
+  state: CdpCaptureScopeState,
+  loadFrameTree: () => Promise<unknown>
+): Promise<boolean> {
+  const generation = invalidateCdpCaptureFrameTree(state);
+  let value: unknown;
+
+  try {
+    value = await loadFrameTree();
+  } catch {
+    return false;
+  }
+
+  return completeCdpCaptureFrameTreePrime(state, generation, value);
+}
+
+export function invalidateCdpCaptureFrameTree(state: CdpCaptureScopeState): number {
+  state.primed = false;
+  state.generation += 1;
+  state.frameScopes.clear();
+  return state.generation;
+}
+
+function completeCdpCaptureFrameTreePrime(
+  state: CdpCaptureScopeState,
+  generation: number,
+  value: unknown
+): boolean {
+  if (state.generation !== generation) {
+    return false;
+  }
+
+  const frameScopes = new Map<string, boolean>();
+  const frameIds = new Set<string>();
+  let rootFrameId: string | undefined;
+  let rootAllowed = false;
+
+  function visit(candidate: unknown, topLevel: boolean): boolean {
+    const tree = asRecord(candidate);
+    const frame = asRecord(tree?.frame);
+    const frameId = asString(frame?.id);
+    const frameUrl = asString(frame?.url);
+
+    if (!tree || !frame || !frameId || frameUrl === null || frameIds.has(frameId)) {
+      return false;
+    }
+
+    frameIds.add(frameId);
+    const allowed = evaluateFrameDocument(state, frameUrl, topLevel).allowed;
+    frameScopes.set(frameId, allowed);
+
+    if (topLevel) {
+      rootFrameId = frameId;
+      rootAllowed = allowed;
+    }
+
+    if (tree.childFrames !== undefined && !Array.isArray(tree.childFrames)) {
+      return false;
+    }
+
+    const children = Array.isArray(tree.childFrames) ? tree.childFrames : [];
+
+    for (const child of children) {
+      if (!visit(child, false)) {
+        return false;
+      }
+    }
+
+    return true;
+  }
+
+  if (!visit(value, true) || !rootFrameId) {
+    return false;
+  }
+
+  state.rootFrameId = rootFrameId;
+  state.rootUrl = asString(asRecord(asRecord(value)?.frame)?.url) ?? undefined;
+
+  for (const [frameId, allowed] of frameScopes) {
+    state.frameScopes.set(frameId, allowed);
+  }
+
+  state.primed = rootAllowed;
+
+  for (const child of state.childSessions.values()) {
+    child.rootReprimeRequired = false;
+  }
+
+  return canCaptureGlobalCdpArtifacts(state, generation);
+}
+
+export function isCdpChildSessionAttachmentCurrent(
+  state: CdpCaptureScopeState,
+  claim: CdpChildSessionClaim
+): boolean {
+  const child = state.childSessions.get(claim.sessionId);
+  return child?.token === claim.token && child.status !== "detached";
+}
+
+export function getCdpChildSessionClaim(
+  state: CdpCaptureScopeState,
+  sessionId: string
+): CdpChildSessionClaim | null {
+  const child = state.childSessions.get(sessionId);
+  return child ? claimCdpChildSession(child) : null;
+}
+
+export function isCdpChildSessionClaimCurrent(
+  state: CdpCaptureScopeState,
+  claim: CdpChildSessionClaim
+): boolean {
+  const child = state.childSessions.get(claim.sessionId);
+  return (
+    child?.token === claim.token &&
+    child.navigationRevision === claim.navigationRevision &&
+    child.status !== "detached"
+  );
+}
+
+export function isCdpChildSessionBaselineReady(
+  state: CdpCaptureScopeState,
+  claim: CdpChildSessionClaim
+): boolean {
+  const child = state.childSessions.get(claim.sessionId);
+  return child?.token === claim.token && child.baselineReady;
+}
+
+export function markCdpChildSessionBaselineReady(
+  state: CdpCaptureScopeState,
+  claim: CdpChildSessionClaim
+): boolean {
+  const child = state.childSessions.get(claim.sessionId);
+
+  if (!child || child.token !== claim.token || child.status === "detached") {
+    return false;
+  }
+
+  child.baselineReady = true;
+  return true;
+}
+
+export function failCdpChildSessionAttachment(
+  state: CdpCaptureScopeState,
+  claim: CdpChildSessionClaim
+): boolean {
+  const child = state.childSessions.get(claim.sessionId);
+
+  if (!child || child.token !== claim.token || child.status === "detached") {
+    return false;
+  }
+
+  setCdpChildSessionStatus(state, child, "failed");
+  return true;
+}
+
+export function failCdpChildSessionClaim(
+  state: CdpCaptureScopeState,
+  claim: CdpChildSessionClaim
+): boolean {
+  const child = state.childSessions.get(claim.sessionId);
+
+  if (!isCdpChildSessionClaimCurrent(state, claim) || !child) {
+    return false;
+  }
+
+  setCdpChildSessionStatus(state, child, "failed");
+  return true;
+}
+
+export type CdpChildFrameTreePrimeOutcome = "ready" | "denied" | "failed" | "stale";
+
+export function completeCdpNonvisualChildBootstrap(
+  state: CdpCaptureScopeState,
+  claim: CdpChildSessionClaim
+): CdpChildFrameTreePrimeOutcome {
+  const child = state.childSessions.get(claim.sessionId);
+
+  if (!child || !isCdpChildSessionClaimCurrent(state, claim)) {
+    return "stale";
+  }
+
+  if (child.visual || !child.baselineReady || child.status === "failed") {
+    setCdpChildSessionStatus(state, child, "failed");
+    return "failed";
+  }
+
+  const outcome = child.sessionAllowed ? "ready" : "denied";
+  setCdpChildSessionStatus(state, child, outcome);
+  return outcome;
+}
+
+export function completeCdpChildFrameTreePrime(
+  state: CdpCaptureScopeState,
+  claim: CdpChildSessionClaim,
+  value: unknown
+): CdpChildFrameTreePrimeOutcome {
+  const child = state.childSessions.get(claim.sessionId);
+
+  if (!child || !isCdpChildSessionClaimCurrent(state, claim)) {
+    return "stale";
+  }
+
+  if (child.status === "failed") {
+    return "failed";
+  }
+
+  if (!child.baselineReady) {
+    setCdpChildSessionStatus(state, child, "failed");
+    return "failed";
+  }
+
+  const frameScopes = new Map<string, boolean>();
+  const frameIds = new Set<string>();
+  let rootAllowed: boolean | undefined;
+  let allAllowed = true;
+
+  function visit(candidate: unknown, root: boolean): boolean {
+    const tree = asRecord(candidate);
+    const frame = asRecord(tree?.frame);
+    const frameId = asString(frame?.id);
+    const frameUrl = asString(frame?.url);
+
+    if (!tree || !frame || !frameId || frameUrl === null || frameIds.has(frameId)) {
+      return false;
+    }
+
+    frameIds.add(frameId);
+    const allowed = evaluateFrameDocument(state, frameUrl, false).allowed;
+    frameScopes.set(frameId, allowed);
+    allAllowed &&= allowed;
+
+    if (root) {
+      rootAllowed = allowed;
+    }
+
+    if (tree.childFrames !== undefined && !Array.isArray(tree.childFrames)) {
+      return false;
+    }
+
+    for (const nested of Array.isArray(tree.childFrames) ? tree.childFrames : []) {
+      if (!visit(nested, false)) {
+        return false;
+      }
+    }
+
+    return true;
+  }
+
+  if (!visit(value, true) || rootAllowed === undefined) {
+    setCdpChildSessionStatus(state, child, "failed");
+    return "failed";
+  }
+
+  child.frameScopes = frameScopes;
+  refreshCdpChildExecutionContextScopes(state, child);
+
+  child.sessionAllowed = rootAllowed;
+  const nextStatus = allAllowed ? "ready" : "denied";
+
+  setCdpChildSessionStatus(state, child, nextStatus);
+  return nextStatus;
+}
+
+export function isCdpSessionWithinScope(state: CdpCaptureScopeState, sessionId: string): boolean {
+  return state.childSessions.get(sessionId)?.sessionAllowed === true;
+}
+
+export function forgetCdpRequestScope(
+  state: CdpCaptureScopeState,
+  requestId: string,
+  sessionId?: string
+): void {
+  const key = buildRequestScopeKey(state, requestId, sessionId);
+
+  if (key) {
+    state.requestScopes.delete(key);
+  }
+}
+
+export function clearCdpCaptureScopeState(state: CdpCaptureScopeState): void {
+  invalidateCdpCaptureFrameTree(state);
+  state.rootFrameId = undefined;
+  state.rootUrl = undefined;
+
+  for (const child of state.childSessions.values()) {
+    child.status = "detached";
+  }
+
+  state.childMutationRevision += 1;
+  state.childSessions.clear();
+  state.executionContextScopes.clear();
+  state.requestScopes.clear();
+}
+
+export function hasDisallowedCdpFrames(state: CdpCaptureScopeState): boolean {
+  for (const allowed of state.frameScopes.values()) {
+    if (!allowed) {
+      return true;
+    }
+  }
+
+  return false;
+}
+
+export function hasBlockingVisualCdpChildSessions(state: CdpCaptureScopeState): boolean {
+  for (const child of state.childSessions.values()) {
+    if (child.visual && child.status !== "ready") {
+      return true;
+    }
+  }
+
+  return false;
+}
+
+function isPotentiallyVisualTarget(targetType: string | null): boolean {
+  return (
+    targetType === null ||
+    targetType === "iframe" ||
+    targetType === "page" ||
+    targetType === "webview"
+  );
+}
+
+export function canCaptureGlobalCdpArtifacts(
+  state: CdpCaptureScopeState,
+  expectedGeneration?: number
+): boolean {
+  return (
+    state.primed &&
+    (expectedGeneration === undefined || state.generation === expectedGeneration) &&
+    !hasBlockingVisualCdpChildSessions(state) &&
+    !hasDisallowedCdpFrames(state)
+  );
+}
+
+export function canCaptureGlobalCdpArtifactsForRoot(
+  state: CdpCaptureScopeState,
+  expectedRootUrl: string,
+  expectedGeneration?: number
+): boolean {
+  return (
+    canCaptureGlobalCdpArtifacts(state, expectedGeneration) &&
+    isCdpCaptureFrameTreePrimedForRoot(state, expectedRootUrl, expectedGeneration)
+  );
+}
+
+/**
+ * Distinguishes a structurally valid, in-scope root prime from global artifact
+ * readiness. A denied or still-pending child may block screenshots and tab
+ * recording without invalidating the root Full-CDP baseline.
+ */
+export function isCdpCaptureFrameTreePrimedForRoot(
+  state: CdpCaptureScopeState,
+  expectedRootUrl: string,
+  expectedGeneration?: number
+): boolean {
+  return (
+    state.primed &&
+    (expectedGeneration === undefined || state.generation === expectedGeneration) &&
+    areEquivalentCaptureUrls(state.rootUrl, expectedRootUrl)
+  );
+}
+
+function areEquivalentCaptureUrls(left: string | undefined, right: string): boolean {
+  if (!left) {
+    return false;
+  }
+
+  try {
+    const leftUrl = new URL(left);
+    const rightUrl = new URL(right);
+
+    if (leftUrl.href === rightUrl.href) {
+      return true;
+    }
+
+    // Page.getFrameTree may omit a hash-router fragment even though
+    // Page.navigatedWithinDocument reported the exact current route. Accept
+    // only that one-sided omission: all network-relevant URL components must
+    // still match, and two conflicting non-empty routes remain fail closed.
+    if (leftUrl.hash && rightUrl.hash) {
+      return false;
+    }
+
+    leftUrl.hash = "";
+    rightUrl.hash = "";
+    return leftUrl.href === rightUrl.href;
+  } catch {
+    return left === right;
+  }
+}
+
+export function filterCdpSnapshotDocuments(
+  state: CdpCaptureScopeState,
+  value: unknown
+): Record<string, unknown>[] {
+  if (!Array.isArray(value)) {
+    return [];
+  }
+
+  return value.filter((entry): entry is Record<string, unknown> => {
+    const document = asRecord(entry);
+    const frameId = asString(document?.frameId);
+
+    if (!document || !frameId) {
+      return false;
+    }
+
+    return state.frameScopes.get(frameId) === true;
+  });
+}
+
+function claimCdpChildSession(child: CdpChildSessionState): CdpChildSessionClaim {
+  return {
+    sessionId: child.sessionId,
+    token: child.token,
+    navigationRevision: child.navigationRevision
+  };
+}
+
+function registerUnknownVisualCdpChildSession(
+  state: CdpCaptureScopeState,
+  sessionId: string
+): void {
+  invalidateCdpCaptureFrameTree(state);
+  state.childMutationRevision += 1;
+  state.childSessions.set(sessionId, {
+    token: (state.childSessionSequence += 1),
+    sessionId,
+    targetId: undefined,
+    parentSessionId: undefined,
+    parentToken: undefined,
+    visual: true,
+    status: "failed",
+    baselineReady: false,
+    navigationRevision: 0,
+    sessionAllowed: false,
+    rootReprimeRequired: true,
+    frameScopes: new Map(),
+    executionContextScopes: new Map()
+  });
+}
+
+function detachCdpChildSessionSubtree(
+  state: CdpCaptureScopeState,
+  root: CdpChildSessionState
+): boolean {
+  const pending = [root];
+  const visited = new Set<string>();
+  let invalidatedGlobal = false;
+
+  while (pending.length > 0) {
+    const child = pending.pop()!;
+
+    if (visited.has(child.sessionId) || state.childSessions.get(child.sessionId) !== child) {
+      continue;
+    }
+
+    visited.add(child.sessionId);
+
+    for (const candidate of state.childSessions.values()) {
+      if (candidate.parentSessionId === child.sessionId && candidate.parentToken === child.token) {
+        pending.push(candidate);
+      }
+    }
+
+    invalidatedGlobal ||= child.visual || child.rootReprimeRequired;
+    child.status = "detached";
+    state.childSessions.delete(child.sessionId);
+  }
+
+  return invalidatedGlobal;
+}
+
+function refreshCdpChildExecutionContextScopes(
+  state: CdpCaptureScopeState,
+  child: CdpChildSessionState
+): void {
+  for (const context of child.executionContextScopes.values()) {
+    context.allowed =
+      context.frameId && child.frameScopes.has(context.frameId)
+        ? child.frameScopes.get(context.frameId) === true
+        : context.origin !== undefined
+          ? evaluateFrameDocument(state, context.origin, false).allowed
+          : false;
+  }
+}
+
+function isCdpChildFrameEventOwned(
+  child: CdpChildSessionState,
+  frameId: string | null,
+  parentFrameId: string | null
+): boolean {
+  if (!frameId) {
+    return false;
+  }
+
+  if (!child.targetId && child.frameScopes.size === 0) {
+    return true;
+  }
+
+  return (
+    frameId === child.targetId ||
+    child.frameScopes.has(frameId) ||
+    (parentFrameId !== null && child.frameScopes.has(parentFrameId))
+  );
+}
+
+function setCdpChildSessionStatus(
+  state: CdpCaptureScopeState,
+  child: CdpChildSessionState,
+  status: CdpChildSessionStatus
+): void {
+  if (child.status === status) {
+    return;
+  }
+
+  child.status = status;
+
+  if (child.visual) {
+    child.rootReprimeRequired = true;
+    invalidateCdpCaptureFrameTree(state);
+    state.childMutationRevision += 1;
+  }
+}
+
+function advanceCdpChildSessionNavigation(
+  child: CdpChildSessionState,
+  allowed: boolean
+): CdpChildSessionClaim | undefined {
+  if (child.status === "detached") {
+    return undefined;
+  }
+
+  child.navigationRevision += 1;
+  child.sessionAllowed = allowed;
+  child.frameScopes.clear();
+  child.executionContextScopes.clear();
+
+  if (child.status !== "failed") {
+    child.status = "pending";
+  }
+
+  return claimCdpChildSession(child);
+}
+
+function evaluateFrameDocument(
+  state: CdpCaptureScopeState,
+  url: string | null | undefined,
+  topLevel: boolean
+): CaptureScopeDecision {
+  return evaluateCaptureScope(state.policy, {
+    url,
+    tabId: state.tabId,
+    frameId: topLevel ? 0 : 1,
+    topLevel
+  });
+}
+
+function resolveFrameId(payload: Record<string, unknown> | null): string | null {
+  return (
+    asString(payload?.frameId) ??
+    asString(asRecord(payload?.frame)?.id) ??
+    asString(asRecord(payload?.request)?.frameId)
+  );
+}
+
+function resolveExecutionContextId(
+  method: string,
+  payload: Record<string, unknown> | null
+): number | null {
+  if (method === "Runtime.exceptionThrown") {
+    return asFiniteNumber(asRecord(payload?.exceptionDetails)?.executionContextId);
+  }
+
+  return asFiniteNumber(payload?.executionContextId);
+}
+
+function rememberRequestScope(
+  state: CdpCaptureScopeState,
+  method: string,
+  requestScopeKey: string | null,
+  allowed: boolean
+): boolean {
+  if (requestScopeKey && method === "Network.requestWillBeSent") {
+    if (state.requestScopes.size >= CDP_SCOPE_MAX_REQUESTS) {
+      const oldestKey = state.requestScopes.keys().next().value;
+
+      if (typeof oldestKey === "string") {
+        state.requestScopes.delete(oldestKey);
+      }
+    }
+
+    state.requestScopes.set(requestScopeKey, allowed);
+  }
+
+  return allowed;
+}
+
+function buildRequestScopeKey(
+  state: CdpCaptureScopeState,
+  requestId: string,
+  sessionId?: string
+): string | null {
+  if (!sessionId) {
+    return requestId;
+  }
+
+  const child = state.childSessions.get(sessionId);
+
+  return child ? `cdp:${sessionId}:${child.token}:${child.navigationRevision}:${requestId}` : null;
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  return value !== null && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function asString(value: unknown): string | null {
+  return typeof value === "string" ? value : null;
+}
+
+function asFiniteNumber(value: unknown): number | null {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
diff --git a/apps/extension/src/sw/cdp-child-bootstrap.test.ts b/apps/extension/src/sw/cdp-child-bootstrap.test.ts
new file mode 100644
index 0000000..86e29dc
--- /dev/null
+++ b/apps/extension/src/sw/cdp-child-bootstrap.test.ts
@@ -0,0 +1,366 @@
+import { DEFAULT_CAPTURE_POLICY, type CapturePolicy } from "@webblackbox/protocol";
+import { describe, expect, it, vi } from "vitest";
+
+import { bootstrapCdpChildSession } from "./cdp-child-bootstrap.js";
+import {
+  canCaptureGlobalCdpArtifacts,
+  createCdpCaptureScopeState,
+  evaluateCdpCaptureScopeEvent,
+  primeCdpCaptureFrameTree,
+  type CdpChildSessionClaim
+} from "./cdp-capture-scope.js";
+
+function policy(): CapturePolicy {
+  return {
+    ...DEFAULT_CAPTURE_POLICY,
+    consent: {
+      ...DEFAULT_CAPTURE_POLICY.consent,
+      grantedAt: "2020-01-01T00:00:00.000Z"
+    },
+    scope: {
+      ...DEFAULT_CAPTURE_POLICY.scope,
+      tabId: 7,
+      origin: "https://app.example",
+      includeSubframes: true,
+      allowedOrigins: ["https://app.example", "https://widgets.example"],
+      deniedOrigins: ["https://blocked.example"]
+    }
+  };
+}
+
+function attached(type = "iframe", url = "https://widgets.example/embed") {
+  const state = createCdpCaptureScopeState(policy(), 7, "https://app.example/home");
+  const evaluation = evaluateCdpCaptureScopeEvent(state, "Target.attachedToTarget", {
+    sessionId: "child",
+    targetInfo: { targetId: "child-frame", type, url }
+  });
+
+  return {
+    state,
+    claim: evaluation.childSessionClaim as CdpChildSessionClaim
+  };
+}
+
+function successfulCommands(calls: string[] = []) {
+  return {
+    send: vi.fn(async (method: string): Promise<unknown> => {
+      calls.push(method);
+
+      if (method === "Page.getFrameTree") {
+        return {
+          frameTree: { frame: { id: "child-frame", url: "https://widgets.example/embed" } }
+        };
+      }
+
+      return undefined;
+    }),
+    enableAutoAttach: vi.fn(async () => {
+      calls.push("Target.setAutoAttach");
+    })
+  };
+}
+
+describe("CDP child bootstrap", () => {
+  it("requires the four baselines, recursive auto-attach, and a strict frame tree", async () => {
+    const { state, claim } = attached();
+    const calls: string[] = [];
+
+    await expect(
+      bootstrapCdpChildSession({
+        state,
+        claim,
+        commands: successfulCommands(calls),
+        isRuntimeCurrent: () => true
+      })
+    ).resolves.toBe("ready");
+    expect(calls).toEqual([
+      "Network.enable",
+      "Runtime.enable",
+      "Log.enable",
+      "Page.enable",
+      "Target.setAutoAttach",
+      "DOMStorage.enable",
+      "Page.getFrameTree"
+    ]);
+    expect(calls).not.toContain("Performance.enable");
+    expect(state.childSessions.get("child")).toMatchObject({
+      status: "ready",
+      baselineReady: true
+    });
+  });
+
+  it("bootstraps an allowed worker without requiring Page-domain commands", async () => {
+    const { state, claim } = attached("worker", "https://widgets.example/worker.js");
+    const calls: string[] = [];
+
+    await expect(
+      bootstrapCdpChildSession({
+        state,
+        claim,
+        commands: successfulCommands(calls),
+        isRuntimeCurrent: () => true
+      })
+    ).resolves.toBe("ready");
+    expect(calls).toEqual([
+      "Network.enable",
+      "Runtime.enable",
+      "Log.enable",
+      "Target.setAutoAttach",
+      "DOMStorage.enable"
+    ]);
+    expect(calls).not.toContain("Page.enable");
+    expect(calls).not.toContain("Page.getFrameTree");
+    expect(state.childSessions.get("child")).toMatchObject({
+      visual: false,
+      status: "ready",
+      baselineReady: true,
+      sessionAllowed: true
+    });
+  });
+
+  it.each(["Network.enable", "Runtime.enable", "Log.enable", "Page.enable"])(
+    "keeps the child failed when %s rejects",
+    async (failedMethod) => {
+      const { state, claim } = attached();
+      const commands = successfulCommands();
+      commands.send.mockImplementation(async (method: string) => {
+        if (method === failedMethod) {
+          throw new Error(`${method} rejected`);
+        }
+
+        return undefined;
+      });
+
+      await expect(
+        bootstrapCdpChildSession({
+          state,
+          claim,
+          commands,
+          isRuntimeCurrent: () => true
+        })
+      ).resolves.toBe("failed");
+      expect(state.childSessions.get("child")?.status).toBe("failed");
+
+      evaluateCdpCaptureScopeEvent(
+        state,
+        "Page.frameNavigated",
+        {
+          frame: {
+            id: "child-frame",
+            parentId: "root",
+            url: "https://widgets.example/next"
+          }
+        },
+        "child"
+      );
+      expect(state.childSessions.get("child")?.status).toBe("failed");
+    }
+  );
+
+  it("treats recursive auto-attach as hard and DOMStorage as best effort", async () => {
+    const autoAttachFailure = attached();
+
+    await expect(
+      bootstrapCdpChildSession({
+        ...autoAttachFailure,
+        commands: {
+          ...successfulCommands(),
+          enableAutoAttach: vi.fn().mockRejectedValue(new Error("auto attach rejected"))
+        },
+        isRuntimeCurrent: () => true
+      })
+    ).resolves.toBe("failed");
+    expect(autoAttachFailure.state.childSessions.get("child")?.status).toBe("failed");
+
+    const domStorageFailure = attached();
+    const commands = successfulCommands();
+    commands.send.mockImplementation(async (method: string) => {
+      if (method === "DOMStorage.enable") {
+        throw new Error("DOMStorage unavailable");
+      }
+
+      if (method === "Page.getFrameTree") {
+        return {
+          frameTree: { frame: { id: "child-frame", url: "https://widgets.example/embed" } }
+        };
+      }
+
+      return undefined;
+    });
+
+    await expect(
+      bootstrapCdpChildSession({
+        ...domStorageFailure,
+        commands,
+        isRuntimeCurrent: () => true
+      })
+    ).resolves.toBe("ready");
+  });
+
+  it("keeps command and malformed frame-tree failures sticky until detach", async () => {
+    const rejected = attached();
+    const rejectedCommands = successfulCommands();
+    rejectedCommands.send.mockImplementation(async (method: string) => {
+      if (method === "Page.getFrameTree") {
+        throw new Error("tree unavailable");
+      }
+
+      return undefined;
+    });
+    await expect(
+      bootstrapCdpChildSession({
+        ...rejected,
+        commands: rejectedCommands,
+        isRuntimeCurrent: () => true
+      })
+    ).resolves.toBe("failed");
+
+    const malformed = attached();
+    const malformedCommands = successfulCommands();
+    malformedCommands.send.mockImplementation(async (method: string) =>
+      method === "Page.getFrameTree" ? { frameTree: { frame: {} } } : undefined
+    );
+    await expect(
+      bootstrapCdpChildSession({
+        ...malformed,
+        commands: malformedCommands,
+        isRuntimeCurrent: () => true
+      })
+    ).resolves.toBe("failed");
+    expect(malformed.state.childSessions.get("child")?.status).toBe("failed");
+  });
+
+  it("discards a frame tree that resolves after a newer child navigation", async () => {
+    const { state, claim } = attached();
+    let resolveTree: ((value: unknown) => void) | undefined;
+    const commands = successfulCommands();
+    commands.send.mockImplementation(async (method: string) => {
+      if (method !== "Page.getFrameTree") {
+        return undefined;
+      }
+
+      return new Promise<unknown>((resolve) => {
+        resolveTree = resolve;
+      });
+    });
+    const task = bootstrapCdpChildSession({
+      state,
+      claim,
+      commands,
+      isRuntimeCurrent: () => true
+    });
+
+    await vi.waitFor(() => expect(resolveTree).toBeTypeOf("function"));
+    const navigation = evaluateCdpCaptureScopeEvent(
+      state,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "child-frame",
+          parentId: "root",
+          url: "https://widgets.example/next"
+        }
+      },
+      "child"
+    );
+    resolveTree?.({
+      frameTree: { frame: { id: "child-frame", url: "https://widgets.example/embed" } }
+    });
+
+    await expect(task).resolves.toBe("stale");
+    expect(state.childSessions.get("child")?.status).toBe("pending");
+    expect(navigation.childSessionClaim?.navigationRevision).toBe(1);
+  });
+
+  it("does not let an old promise mutate a replacement using the same session id", async () => {
+    const { state, claim } = attached();
+    let resolveNetwork: (() => void) | undefined;
+    const commands = successfulCommands();
+    commands.send.mockImplementation(async (method: string) => {
+      if (method === "Network.enable") {
+        await new Promise<void>((resolve) => {
+          resolveNetwork = resolve;
+        });
+      }
+
+      return undefined;
+    });
+    const task = bootstrapCdpChildSession({
+      state,
+      claim,
+      commands,
+      isRuntimeCurrent: () => true
+    });
+    await vi.waitFor(() => expect(resolveNetwork).toBeTypeOf("function"));
+
+    evaluateCdpCaptureScopeEvent(state, "Target.detachedFromTarget", { sessionId: "child" });
+    const replacement = evaluateCdpCaptureScopeEvent(state, "Target.attachedToTarget", {
+      sessionId: "child",
+      targetInfo: {
+        targetId: "replacement",
+        type: "iframe",
+        url: "https://widgets.example/replacement"
+      }
+    });
+    resolveNetwork?.();
+
+    await expect(task).resolves.toBe("stale");
+    expect(state.childSessions.get("child")).toMatchObject({
+      token: replacement.childSessionClaim?.token,
+      status: "pending",
+      baselineReady: false
+    });
+  });
+
+  it("does not mutate child state after the owning runtime becomes stale", async () => {
+    const { state, claim } = attached();
+    let current = true;
+    let resolveNetwork: (() => void) | undefined;
+    const commands = successfulCommands();
+    commands.send.mockImplementation(async (method: string) => {
+      if (method === "Network.enable") {
+        await new Promise<void>((resolve) => {
+          resolveNetwork = resolve;
+        });
+      }
+
+      return undefined;
+    });
+    const task = bootstrapCdpChildSession({
+      state,
+      claim,
+      commands,
+      isRuntimeCurrent: () => current
+    });
+    await vi.waitFor(() => expect(resolveNetwork).toBeTypeOf("function"));
+    current = false;
+    resolveNetwork?.();
+
+    await expect(task).resolves.toBe("stale");
+    expect(state.childSessions.get("child")).toMatchObject({
+      status: "pending",
+      baselineReady: false
+    });
+  });
+
+  it("keeps global capture blocked until every visual child bootstrap is ready", async () => {
+    const { state, claim } = attached();
+    primeCdpCaptureFrameTree(state, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child-frame", url: "https://widgets.example/embed" } }]
+    });
+    expect(canCaptureGlobalCdpArtifacts(state)).toBe(false);
+
+    await bootstrapCdpChildSession({
+      state,
+      claim,
+      commands: successfulCommands(),
+      isRuntimeCurrent: () => true
+    });
+    primeCdpCaptureFrameTree(state, {
+      frame: { id: "root", url: "https://app.example/home" },
+      childFrames: [{ frame: { id: "child-frame", url: "https://widgets.example/embed" } }]
+    });
+    expect(canCaptureGlobalCdpArtifacts(state)).toBe(true);
+  });
+});
diff --git a/apps/extension/src/sw/cdp-child-bootstrap.ts b/apps/extension/src/sw/cdp-child-bootstrap.ts
new file mode 100644
index 0000000..05318e1
--- /dev/null
+++ b/apps/extension/src/sw/cdp-child-bootstrap.ts
@@ -0,0 +1,120 @@
+import {
+  completeCdpChildFrameTreePrime,
+  completeCdpNonvisualChildBootstrap,
+  failCdpChildSessionAttachment,
+  failCdpChildSessionClaim,
+  isCdpChildSessionAttachmentCurrent,
+  isCdpChildSessionBaselineReady,
+  isCdpChildSessionClaimCurrent,
+  markCdpChildSessionBaselineReady,
+  type CdpCaptureScopeState,
+  type CdpChildSessionClaim
+} from "./cdp-capture-scope.js";
+
+const CHILD_BASELINE_METHODS = ["Network.enable", "Runtime.enable", "Log.enable"] as const;
+
+export type CdpChildBootstrapOutcome = "ready" | "denied" | "failed" | "stale";
+
+export type CdpChildBootstrapCommands = {
+  send: (method: string) => Promise<unknown>;
+  enableAutoAttach: () => Promise<void>;
+};
+
+export async function bootstrapCdpChildSession(options: {
+  state: CdpCaptureScopeState;
+  claim: CdpChildSessionClaim;
+  commands: CdpChildBootstrapCommands;
+  isRuntimeCurrent: () => boolean;
+}): Promise<CdpChildBootstrapOutcome> {
+  const { state, claim, commands, isRuntimeCurrent } = options;
+  const child = state.childSessions.get(claim.sessionId);
+
+  if (!child || child.status === "detached" || !isRuntimeCurrent()) {
+    return "stale";
+  }
+
+  if (child.status === "failed") {
+    return "failed";
+  }
+
+  const isAttachmentCurrent = () =>
+    isRuntimeCurrent() && isCdpChildSessionAttachmentCurrent(state, claim);
+  const isClaimCurrent = () => isRuntimeCurrent() && isCdpChildSessionClaimCurrent(state, claim);
+
+  if (!isCdpChildSessionBaselineReady(state, claim)) {
+    const baselineMethods = child.visual
+      ? ([...CHILD_BASELINE_METHODS, "Page.enable"] as const)
+      : CHILD_BASELINE_METHODS;
+
+    for (const method of baselineMethods) {
+      if (!isAttachmentCurrent()) {
+        return "stale";
+      }
+
+      try {
+        await commands.send(method);
+      } catch {
+        if (isAttachmentCurrent()) {
+          failCdpChildSessionAttachment(state, claim);
+          return "failed";
+        }
+
+        return "stale";
+      }
+    }
+
+    if (!isAttachmentCurrent()) {
+      return "stale";
+    }
+
+    try {
+      await commands.enableAutoAttach();
+    } catch {
+      if (isAttachmentCurrent()) {
+        failCdpChildSessionAttachment(state, claim);
+        return "failed";
+      }
+
+      return "stale";
+    }
+
+    if (!isAttachmentCurrent() || !markCdpChildSessionBaselineReady(state, claim)) {
+      return "stale";
+    }
+
+    await commands.send("DOMStorage.enable").catch(() => undefined);
+  }
+
+  if (!isClaimCurrent()) {
+    return "stale";
+  }
+
+  if (!child.visual) {
+    return completeCdpNonvisualChildBootstrap(state, claim);
+  }
+
+  let response: unknown;
+
+  try {
+    response = await commands.send("Page.getFrameTree");
+  } catch {
+    if (isClaimCurrent()) {
+      failCdpChildSessionClaim(state, claim);
+      return "failed";
+    }
+
+    return "stale";
+  }
+
+  if (!isClaimCurrent()) {
+    return "stale";
+  }
+
+  return completeCdpChildFrameTreePrime(state, claim, asRecord(response)?.frameTree);
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  return value !== null && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
diff --git a/apps/extension/src/sw/cdp-event-followup.test.ts b/apps/extension/src/sw/cdp-event-followup.test.ts
new file mode 100644
index 0000000..b278eb4
--- /dev/null
+++ b/apps/extension/src/sw/cdp-event-followup.test.ts
@@ -0,0 +1,246 @@
+import { DEFAULT_CAPTURE_POLICY, type CapturePolicy } from "@webblackbox/protocol";
+import { describe, expect, it } from "vitest";
+
+import {
+  buildCdpFollowupRequestMetaKey,
+  evaluateCdpTargetControlScopeEvent,
+  isCdpFollowupClaimCurrent
+} from "./cdp-event-followup.js";
+import {
+  canCaptureGlobalCdpArtifacts,
+  createCdpCaptureScopeState,
+  evaluateCdpCaptureScopeEvent,
+  getCdpChildSessionClaim,
+  primeCdpCaptureFrameTree
+} from "./cdp-capture-scope.js";
+
+function policy(): CapturePolicy {
+  return {
+    ...DEFAULT_CAPTURE_POLICY,
+    consent: {
+      ...DEFAULT_CAPTURE_POLICY.consent,
+      grantedAt: "2020-01-01T00:00:00.000Z"
+    },
+    scope: {
+      ...DEFAULT_CAPTURE_POLICY.scope,
+      tabId: 7,
+      origin: "https://app.example",
+      includeSubframes: true,
+      allowedOrigins: ["https://app.example"]
+    }
+  };
+}
+
+describe("CDP event follow-up claims", () => {
+  it("keeps root follow-ups root-scoped", () => {
+    const state = createCdpCaptureScopeState(policy(), 7, "https://app.example/home");
+
+    expect(isCdpFollowupClaimCurrent(state, undefined, null)).toBe(true);
+    expect(buildCdpFollowupRequestMetaKey("request", undefined, null)).toBe("request");
+  });
+
+  it("changes request identity and rejects a claim after child navigation", () => {
+    const state = createCdpCaptureScopeState(policy(), 7, "https://app.example/home");
+    evaluateCdpCaptureScopeEvent(state, "Target.attachedToTarget", {
+      sessionId: "child",
+      targetInfo: {
+        targetId: "child-frame",
+        type: "iframe",
+        url: "https://app.example/frame"
+      }
+    });
+    const before = getCdpChildSessionClaim(state, "child")!;
+    const beforeKey = buildCdpFollowupRequestMetaKey("request", "child", before);
+
+    evaluateCdpCaptureScopeEvent(
+      state,
+      "Page.frameNavigated",
+      {
+        frame: {
+          id: "child-frame",
+          parentId: "root",
+          url: "https://app.example/next"
+        }
+      },
+      "child"
+    );
+    const after = getCdpChildSessionClaim(state, "child")!;
+
+    expect(isCdpFollowupClaimCurrent(state, "child", before)).toBe(false);
+    expect(isCdpFollowupClaimCurrent(state, "child", after)).toBe(true);
+    expect(buildCdpFollowupRequestMetaKey("request", "child", after)).not.toBe(beforeKey);
+  });
+
+  it("rejects an attachment claim after the session id is reused", () => {
+    const state = createCdpCaptureScopeState(policy(), 7, "https://app.example/home");
+    evaluateCdpCaptureScopeEvent(state, "Target.attachedToTarget", {
+      sessionId: "child",
+      targetInfo: {
+        targetId: "first",
+        type: "iframe",
+        url: "https://app.example/first"
+      }
+    });
+    const first = getCdpChildSessionClaim(state, "child")!;
+    const firstKey = buildCdpFollowupRequestMetaKey("request", "child", first);
+
+    evaluateCdpCaptureScopeEvent(state, "Target.detachedFromTarget", {
+      sessionId: "child",
+      targetId: "first"
+    });
+    evaluateCdpCaptureScopeEvent(state, "Target.attachedToTarget", {
+      sessionId: "child",
+      targetInfo: {
+        targetId: "replacement",
+        type: "iframe",
+        url: "https://app.example/replacement"
+      }
+    });
+    const replacement = getCdpChildSessionClaim(state, "child")!;
+
+    expect(isCdpFollowupClaimCurrent(state, "child", first)).toBe(false);
+    expect(isCdpFollowupClaimCurrent(state, "child", replacement)).toBe(true);
+    expect(buildCdpFollowupRequestMetaKey("request", "child", replacement)).not.toBe(firstKey);
+  });
+
+  it("does not let an unknown nested Target source mutate child state", () => {
+    const state = createCdpCaptureScopeState(policy(), 7, "https://app.example/home");
+    evaluateCdpCaptureScopeEvent(state, "Target.attachedToTarget", {
+      sessionId: "live-child",
+      targetInfo: {
+        targetId: "live-frame",
+        type: "iframe",
+        url: "https://app.example/live"
+      }
+    });
+    const generation = state.generation;
+    const childMutationRevision = state.childMutationRevision;
+
+    expect(
+      evaluateCdpTargetControlScopeEvent(
+        state,
+        "Target.attachedToTarget",
+        {
+          sessionId: "injected-child",
+          targetInfo: {
+            targetId: "injected-frame",
+            type: "iframe",
+            url: "https://app.example/injected"
+          }
+        },
+        "unknown-parent"
+      )
+    ).toBeNull();
+    expect(
+      evaluateCdpTargetControlScopeEvent(
+        state,
+        "Target.detachedFromTarget",
+        {
+          sessionId: "live-child",
+          targetId: "live-frame"
+        },
+        "unknown-parent"
+      )
+    ).toBeNull();
+    expect(state.childSessions.has("injected-child")).toBe(false);
+    expect(state.childSessions.has("live-child")).toBe(true);
+    expect(state.generation).toBe(generation);
+    expect(state.childMutationRevision).toBe(childMutationRevision);
+  });
+
+  it("accepts nested Target controls only while their parent session is live", () => {
+    const state = createCdpCaptureScopeState(policy(), 7, "https://app.example/home");
+    evaluateCdpCaptureScopeEvent(state, "Target.attachedToTarget", {
+      sessionId: "parent",
+      targetInfo: {
+        targetId: "parent-frame",
+        type: "iframe",
+        url: "https://app.example/parent"
+      }
+    });
+
+    expect(
+      evaluateCdpTargetControlScopeEvent(
+        state,
+        "Target.attachedToTarget",
+        {
+          sessionId: "nested",
+          targetInfo: {
+            targetId: "nested-frame",
+            type: "iframe",
+            url: "https://app.example/nested"
+          }
+        },
+        "parent"
+      )?.childSessionClaim?.sessionId
+    ).toBe("nested");
+
+    evaluateCdpCaptureScopeEvent(state, "Target.detachedFromTarget", {
+      sessionId: "parent",
+      targetId: "parent-frame"
+    });
+    const generation = state.generation;
+    expect(
+      evaluateCdpTargetControlScopeEvent(
+        state,
+        "Target.detachedFromTarget",
+        {
+          sessionId: "nested",
+          targetId: "nested-frame"
+        },
+        "parent"
+      )
+    ).toBeNull();
+    expect(state.childSessions.has("nested")).toBe(false);
+    expect(state.generation).toBe(generation);
+
+    primeCdpCaptureFrameTree(state, {
+      frame: { id: "root", url: "https://app.example/home" }
+    });
+    expect(canCaptureGlobalCdpArtifacts(state)).toBe(true);
+  });
+
+  it("does not let one live parent detach another parent's child", () => {
+    const state = createCdpCaptureScopeState(policy(), 7, "https://app.example/home");
+
+    for (const parent of ["parent-a", "parent-b"]) {
+      evaluateCdpCaptureScopeEvent(state, "Target.attachedToTarget", {
+        sessionId: parent,
+        targetInfo: {
+          targetId: `${parent}-frame`,
+          type: "iframe",
+          url: `https://app.example/${parent}`
+        }
+      });
+    }
+
+    evaluateCdpTargetControlScopeEvent(
+      state,
+      "Target.attachedToTarget",
+      {
+        sessionId: "nested-a",
+        targetInfo: {
+          targetId: "nested-a-frame",
+          type: "iframe",
+          url: "https://app.example/nested-a"
+        }
+      },
+      "parent-a"
+    );
+    const generation = state.generation;
+
+    expect(
+      evaluateCdpTargetControlScopeEvent(
+        state,
+        "Target.detachedFromTarget",
+        {
+          sessionId: "nested-a",
+          targetId: "nested-a-frame"
+        },
+        "parent-b"
+      )
+    ).toBeNull();
+    expect(state.childSessions.has("nested-a")).toBe(true);
+    expect(state.generation).toBe(generation);
+  });
+});
diff --git a/apps/extension/src/sw/cdp-event-followup.ts b/apps/extension/src/sw/cdp-event-followup.ts
new file mode 100644
index 0000000..a3df8c3
--- /dev/null
+++ b/apps/extension/src/sw/cdp-event-followup.ts
@@ -0,0 +1,67 @@
+import {
+  evaluateCdpCaptureScopeEvent,
+  getCdpChildSessionClaim,
+  isCdpChildSessionClaimCurrent,
+  type CdpCaptureScopeEvaluation,
+  type CdpCaptureScopeState,
+  type CdpChildSessionClaim
+} from "./cdp-capture-scope.js";
+import { buildRequestMetaKey } from "./request-meta.js";
+
+export function isCdpFollowupClaimCurrent(
+  state: CdpCaptureScopeState,
+  sessionId: string | undefined,
+  childClaim: CdpChildSessionClaim | null
+): boolean {
+  return sessionId === undefined
+    ? childClaim === null
+    : childClaim !== null && isCdpChildSessionClaimCurrent(state, childClaim);
+}
+
+export function buildCdpFollowupRequestMetaKey(
+  requestId: string,
+  sessionId: string | undefined,
+  childClaim: CdpChildSessionClaim | null
+): string {
+  if (!sessionId || !childClaim) {
+    return buildRequestMetaKey(requestId, sessionId);
+  }
+
+  return buildRequestMetaKey(
+    requestId,
+    `${sessionId}:${childClaim.token}:${childClaim.navigationRevision}`
+  );
+}
+
+export function evaluateCdpTargetControlScopeEvent(
+  state: CdpCaptureScopeState,
+  method: "Target.attachedToTarget" | "Target.detachedFromTarget",
+  params: unknown,
+  sourceSessionId?: string
+): CdpCaptureScopeEvaluation | null {
+  const sourceClaim = sourceSessionId ? getCdpChildSessionClaim(state, sourceSessionId) : null;
+
+  if (!isCdpFollowupClaimCurrent(state, sourceSessionId, sourceClaim)) {
+    return null;
+  }
+
+  const payload = asRecord(params);
+  const affectedSessionId = typeof payload?.sessionId === "string" ? payload.sessionId : undefined;
+  const existing = affectedSessionId ? state.childSessions.get(affectedSessionId) : undefined;
+
+  if (
+    affectedSessionId === sourceSessionId ||
+    (existing &&
+      (existing.parentSessionId !== sourceSessionId || existing.parentToken !== sourceClaim?.token))
+  ) {
+    return null;
+  }
+
+  return evaluateCdpCaptureScopeEvent(state, method, params, sourceSessionId);
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  return value !== null && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
diff --git a/apps/extension/src/sw/cdp-root-bootstrap.test.ts b/apps/extension/src/sw/cdp-root-bootstrap.test.ts
new file mode 100644
index 0000000..c25d182
--- /dev/null
+++ b/apps/extension/src/sw/cdp-root-bootstrap.test.ts
@@ -0,0 +1,358 @@
+import { DEFAULT_CAPTURE_POLICY } from "@webblackbox/protocol";
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  canCaptureGlobalCdpArtifactsForRoot,
+  createCdpCaptureScopeState,
+  isCdpCaptureFrameTreePrimedForRoot,
+  refreshCdpCaptureFrameTree
+} from "./cdp-capture-scope.js";
+
+import {
+  CdpRootBootstrapError,
+  bootstrapCdpRoot,
+  cleanupAndRethrowCdpRootBootstrapFailure,
+  type CdpRootBootstrapCommands,
+  type CdpRootBootstrapStage
+} from "./cdp-root-bootstrap.js";
+
+function commands(overrides: Partial<CdpRootBootstrapCommands> = {}): CdpRootBootstrapCommands {
+  return {
+    attach: vi.fn().mockResolvedValue(undefined),
+    clearExecutionContextScopes: vi.fn(),
+    enableAutoAttach: vi.fn().mockResolvedValue(undefined),
+    primeFrameTree: vi.fn().mockResolvedValue({
+      globalCaptureReady: true,
+      rootValid: true
+    }),
+    send: vi.fn().mockResolvedValue(undefined),
+    ...overrides
+  };
+}
+
+async function expectStageFailure(
+  task: Promise<unknown>,
+  stage: CdpRootBootstrapStage,
+  cause: Error
+): Promise<void> {
+  try {
+    await task;
+    throw new Error("Expected root CDP bootstrap to reject.");
+  } catch (error) {
+    expect(error).toBeInstanceOf(CdpRootBootstrapError);
+    expect(error).toMatchObject({ stage, cause });
+  }
+}
+
+describe("cdp-root-bootstrap", () => {
+  it("runs the strict root bootstrap in dependency order", async () => {
+    const calls: string[] = [];
+    const rootCommands = commands({
+      attach: vi.fn(async () => {
+        calls.push("attach");
+      }),
+      clearExecutionContextScopes: vi.fn(() => {
+        calls.push("clear-contexts");
+      }),
+      enableAutoAttach: vi.fn(async () => {
+        calls.push("auto-attach");
+      }),
+      primeFrameTree: vi.fn(async () => {
+        calls.push("prime-frame-tree");
+        return {
+          globalCaptureReady: true,
+          rootValid: true
+        };
+      }),
+      send: vi.fn(async (method: string) => {
+        calls.push(method);
+      })
+    });
+
+    await expect(
+      bootstrapCdpRoot({
+        cdpLevel: "full",
+        commands: rootCommands,
+        includeSubframes: true
+      })
+    ).resolves.toEqual({
+      domStorageEnabled: true,
+      globalCaptureReady: true,
+      performanceEnabled: true
+    });
+    expect(calls).toEqual([
+      "attach",
+      "Network.enable",
+      "Runtime.enable",
+      "Log.enable",
+      "Page.enable",
+      "auto-attach",
+      "prime-frame-tree",
+      "clear-contexts",
+      "Runtime.disable",
+      "Runtime.enable",
+      "DOMStorage.enable",
+      "Performance.enable"
+    ]);
+  });
+
+  it("preserves an attach failure as the debugger stage", async () => {
+    const failure = new Error("another debugger owns the tab");
+
+    await expectStageFailure(
+      bootstrapCdpRoot({
+        cdpLevel: "safe-subset",
+        commands: commands({ attach: vi.fn().mockRejectedValue(failure) }),
+        includeSubframes: false
+      }),
+      "debugger-attach",
+      failure
+    );
+  });
+
+  it.each([
+    ["Network.enable", "network-enable"],
+    ["Runtime.enable", "runtime-baseline-enable"],
+    ["Log.enable", "log-enable"],
+    ["Page.enable", "page-enable"]
+  ] as const)("makes a rejected %s baseline command fatal", async (rejectedMethod, stage) => {
+    const failure = new Error(`${rejectedMethod} rejected`);
+    const rootCommands = commands({
+      send: vi.fn(async (method: string) => {
+        if (method === rejectedMethod) {
+          throw failure;
+        }
+      })
+    });
+
+    await expectStageFailure(
+      bootstrapCdpRoot({
+        cdpLevel: "safe-subset",
+        commands: rootCommands,
+        includeSubframes: false
+      }),
+      stage,
+      failure
+    );
+  });
+
+  it("requires auto-attach only when subframes are included", async () => {
+    const enableAutoAttach = vi.fn().mockRejectedValue(new Error("auto-attach rejected"));
+    const withoutSubframes = commands({ enableAutoAttach });
+
+    await expect(
+      bootstrapCdpRoot({
+        cdpLevel: "safe-subset",
+        commands: withoutSubframes,
+        includeSubframes: false
+      })
+    ).resolves.toMatchObject({ performanceEnabled: false });
+    expect(enableAutoAttach).not.toHaveBeenCalled();
+
+    const failure = new Error("auto-attach rejected");
+
+    await expectStageFailure(
+      bootstrapCdpRoot({
+        cdpLevel: "safe-subset",
+        commands: commands({ enableAutoAttach: vi.fn().mockRejectedValue(failure) }),
+        includeSubframes: true
+      }),
+      "subframe-auto-attach",
+      failure
+    );
+  });
+
+  it("treats a false strict frame-tree prime as fatal", async () => {
+    await expectStageFailure(
+      bootstrapCdpRoot({
+        cdpLevel: "safe-subset",
+        commands: commands({
+          primeFrameTree: vi.fn().mockResolvedValue({
+            globalCaptureReady: false,
+            rootValid: false
+          })
+        }),
+        includeSubframes: false
+      }),
+      "frame-tree-prime",
+      expect.any(Error) as Error
+    );
+  });
+
+  it.each([
+    ["clear", "execution-context-clear"],
+    ["disable", "runtime-disable"],
+    ["enable", "runtime-enable"]
+  ] as const)("makes Runtime context %s failure fatal", async (operation, stage) => {
+    const failure = new Error(`Runtime ${operation} rejected`);
+    const rootCommands = commands({
+      clearExecutionContextScopes:
+        operation === "clear"
+          ? vi.fn(() => {
+              throw failure;
+            })
+          : vi.fn(),
+      send: vi.fn(async (method: string) => {
+        if (
+          (operation === "disable" && method === "Runtime.disable") ||
+          (operation === "enable" && method === "Runtime.enable")
+        ) {
+          if (operation === "enable" && method === "Runtime.enable") {
+            const runtimeEnableCalls = (
+              rootCommands.send as ReturnType<typeof vi.fn>
+            ).mock.calls.filter(([candidate]) => candidate === "Runtime.enable").length;
+
+            if (runtimeEnableCalls === 1) {
+              return;
+            }
+          }
+
+          throw failure;
+        }
+      })
+    });
+
+    await expectStageFailure(
+      bootstrapCdpRoot({
+        cdpLevel: "safe-subset",
+        commands: rootCommands,
+        includeSubframes: false
+      }),
+      stage,
+      failure
+    );
+  });
+
+  it("keeps DOMStorage enablement best effort", async () => {
+    const rootCommands = commands({
+      send: vi.fn(async (method: string) => {
+        if (method === "DOMStorage.enable") {
+          throw new Error("DOMStorage unavailable");
+        }
+      })
+    });
+
+    await expect(
+      bootstrapCdpRoot({
+        cdpLevel: "safe-subset",
+        commands: rootCommands,
+        includeSubframes: false
+      })
+    ).resolves.toEqual({
+      domStorageEnabled: false,
+      globalCaptureReady: true,
+      performanceEnabled: false
+    });
+  });
+
+  it("keeps a valid root bootstrap successful when a disabled child blocks global capture", async () => {
+    const capturePolicy = {
+      ...DEFAULT_CAPTURE_POLICY,
+      consent: {
+        ...DEFAULT_CAPTURE_POLICY.consent,
+        grantedAt: "2020-01-01T00:00:00.000Z"
+      },
+      scope: {
+        ...DEFAULT_CAPTURE_POLICY.scope,
+        tabId: 7,
+        origin: "https://app.example",
+        includeSubframes: false
+      }
+    };
+    const scope = createCdpCaptureScopeState(capturePolicy, 7, "https://app.example/home");
+    const enableAutoAttach = vi.fn().mockResolvedValue(undefined);
+
+    await expect(
+      bootstrapCdpRoot({
+        cdpLevel: "safe-subset",
+        commands: commands({
+          enableAutoAttach,
+          primeFrameTree: async () => {
+            await refreshCdpCaptureFrameTree(scope, async () => ({
+              frame: { id: "root", url: "https://app.example/home" },
+              childFrames: [{ frame: { id: "child", url: "https://widgets.example/embed" } }]
+            }));
+
+            return {
+              globalCaptureReady: canCaptureGlobalCdpArtifactsForRoot(
+                scope,
+                "https://app.example/home",
+                scope.generation
+              ),
+              rootValid: isCdpCaptureFrameTreePrimedForRoot(
+                scope,
+                "https://app.example/home",
+                scope.generation
+              )
+            };
+          }
+        }),
+        includeSubframes: false
+      })
+    ).resolves.toEqual({
+      domStorageEnabled: true,
+      globalCaptureReady: false,
+      performanceEnabled: false
+    });
+    expect(enableAutoAttach).not.toHaveBeenCalled();
+  });
+
+  it.each(["off", "safe-subset"] as const)(
+    "skips Performance for the %s CDP policy",
+    async (cdpLevel) => {
+      const send = vi.fn().mockResolvedValue(undefined);
+
+      await bootstrapCdpRoot({
+        cdpLevel,
+        commands: commands({ send }),
+        includeSubframes: false
+      });
+
+      expect(send).not.toHaveBeenCalledWith("Performance.enable");
+    }
+  );
+
+  it("makes Performance enablement fatal for the full CDP policy", async () => {
+    const failure = new Error("Performance unavailable");
+
+    await expectStageFailure(
+      bootstrapCdpRoot({
+        cdpLevel: "full",
+        commands: commands({
+          send: vi.fn(async (method: string) => {
+            if (method === "Performance.enable") {
+              throw failure;
+            }
+          })
+        }),
+        includeSubframes: false
+      }),
+      "performance-enable",
+      failure
+    );
+  });
+
+  it("rethrows the original staged failure after successful cleanup", async () => {
+    const failure = new CdpRootBootstrapError("page-enable", new Error("Page rejected"));
+    const cleanup = vi.fn().mockResolvedValue(undefined);
+
+    await expect(cleanupAndRethrowCdpRootBootstrapFailure(failure, cleanup)).rejects.toBe(failure);
+    expect(cleanup).toHaveBeenCalledOnce();
+  });
+
+  it("aggregates bootstrap and cleanup failures", async () => {
+    const failure = new CdpRootBootstrapError("page-enable", new Error("Page rejected"));
+    const cleanupFailure = new Error("detach rejected");
+
+    try {
+      await cleanupAndRethrowCdpRootBootstrapFailure(
+        failure,
+        vi.fn().mockRejectedValue(cleanupFailure)
+      );
+      throw new Error("Expected cleanup to reject.");
+    } catch (error) {
+      expect(error).toBeInstanceOf(AggregateError);
+      expect((error as AggregateError).errors).toEqual([failure, cleanupFailure]);
+    }
+  });
+});
diff --git a/apps/extension/src/sw/cdp-root-bootstrap.ts b/apps/extension/src/sw/cdp-root-bootstrap.ts
new file mode 100644
index 0000000..d94e35c
--- /dev/null
+++ b/apps/extension/src/sw/cdp-root-bootstrap.ts
@@ -0,0 +1,148 @@
+import type { CapturePolicy } from "@webblackbox/protocol";
+
+const ROOT_BASELINE_STAGES = [
+  ["network-enable", "Network.enable"],
+  ["runtime-baseline-enable", "Runtime.enable"],
+  ["log-enable", "Log.enable"],
+  ["page-enable", "Page.enable"]
+] as const;
+
+export type CdpRootBootstrapStage =
+  | "debugger-attach"
+  | (typeof ROOT_BASELINE_STAGES)[number][0]
+  | "subframe-auto-attach"
+  | "frame-tree-prime"
+  | "execution-context-clear"
+  | "runtime-disable"
+  | "runtime-enable"
+  | "performance-enable";
+
+export type CdpRootBootstrapCommands = {
+  attach: () => Promise<void>;
+  clearExecutionContextScopes: () => void;
+  enableAutoAttach: () => Promise<void>;
+  primeFrameTree: () => Promise<CdpRootFrameTreePrime>;
+  send: (method: string) => Promise<unknown>;
+};
+
+export type CdpRootBootstrapOptions = {
+  cdpLevel: CapturePolicy["categories"]["cdp"];
+  commands: CdpRootBootstrapCommands;
+  includeSubframes: boolean;
+};
+
+export type CdpRootBootstrapResult = Readonly<{
+  domStorageEnabled: boolean;
+  globalCaptureReady: boolean;
+  performanceEnabled: boolean;
+}>;
+
+export type CdpRootFrameTreePrime = Readonly<{
+  globalCaptureReady: boolean;
+  rootValid: boolean;
+}>;
+
+export class CdpRootBootstrapError extends Error {
+  public readonly stage: CdpRootBootstrapStage;
+
+  public override readonly cause: unknown;
+
+  public constructor(stage: CdpRootBootstrapStage, cause: unknown) {
+    super(`Full CDP root bootstrap failed at ${stage}: ${describeFailure(cause)}`);
+    this.name = "CdpRootBootstrapError";
+    this.stage = stage;
+    this.cause = cause;
+  }
+}
+
+/**
+ * Establishes the minimum root CDP contract promised by Full mode. Optional
+ * artifact domains stay outside this transaction so they cannot silently
+ * weaken the root network/runtime/page baseline.
+ */
+export async function bootstrapCdpRoot(
+  options: CdpRootBootstrapOptions
+): Promise<CdpRootBootstrapResult> {
+  const { commands } = options;
+
+  await runHardStage("debugger-attach", commands.attach);
+
+  for (const [stage, method] of ROOT_BASELINE_STAGES) {
+    await runHardStage(stage, () => commands.send(method));
+  }
+
+  if (options.includeSubframes) {
+    await runHardStage("subframe-auto-attach", commands.enableAutoAttach);
+  }
+
+  const frameTreePrime = await runHardStage("frame-tree-prime", async () => {
+    const result = await commands.primeFrameTree();
+
+    if (!result.rootValid) {
+      throw new Error("Page.getFrameTree did not produce a valid current root capture scope.");
+    }
+
+    return result;
+  });
+
+  await runHardStage("execution-context-clear", commands.clearExecutionContextScopes);
+  await runHardStage("runtime-disable", () => commands.send("Runtime.disable"));
+  await runHardStage("runtime-enable", () => commands.send("Runtime.enable"));
+
+  let domStorageEnabled = false;
+
+  try {
+    await commands.send("DOMStorage.enable");
+    domStorageEnabled = true;
+  } catch {
+    // DOM storage events are an optional Full artifact; the root baseline is still usable.
+  }
+
+  const performanceEnabled = options.cdpLevel === "full";
+
+  if (performanceEnabled) {
+    await runHardStage("performance-enable", () => commands.send("Performance.enable"));
+  }
+
+  return {
+    domStorageEnabled,
+    globalCaptureReady: frameTreePrime.globalCaptureReady,
+    performanceEnabled
+  };
+}
+
+/** Preserves the bootstrap stage while still surfacing a failed cleanup. */
+export async function cleanupAndRethrowCdpRootBootstrapFailure(
+  failure: unknown,
+  cleanup: () => Promise<void>
+): Promise<never> {
+  try {
+    await cleanup();
+  } catch (cleanupFailure) {
+    throw new AggregateError(
+      [failure, cleanupFailure],
+      "Full CDP root bootstrap and its cleanup both failed."
+    );
+  }
+
+  throw failure;
+}
+
+async function runHardStage<TResult>(
+  stage: CdpRootBootstrapStage,
+  operation: () => Promise<TResult> | TResult
+): Promise<TResult> {
+  try {
+    return await operation();
+  } catch (error) {
+    if (error instanceof CdpRootBootstrapError) {
+      throw error;
+    }
+
+    throw new CdpRootBootstrapError(stage, error);
+  }
+}
+
+function describeFailure(value: unknown): string {
+  return value instanceof Error ? value.message : String(value);
+}
diff --git a/apps/extension/src/sw/content-activation-registry.test.ts b/apps/extension/src/sw/content-activation-registry.test.ts
new file mode 100644
index 0000000..9b7266e
--- /dev/null
+++ b/apps/extension/src/sw/content-activation-registry.test.ts
@@ -0,0 +1,534 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { ContentActivationId, ContentReadyId } from "../shared/content-activation-protocol.js";
+import {
+  ContentActivationRegistry,
+  type ContentActivationBinding,
+  type ContentActivationIdentity,
+  type ContentActivationLookup,
+  type ContentActivationParent,
+  type ContentActivationPreparation
+} from "./content-activation-registry.js";
+
+type TestRuntime = { readonly name: string };
+type TestFence = { readonly name: string };
+type TestPort = { readonly name: string };
+type TestMode = "lite" | "full";
+type TestIdentity = ContentActivationIdentity<TestRuntime, TestFence, TestMode>;
+type TestPreparation = ContentActivationPreparation<TestRuntime, TestFence, TestMode>;
+type TestBinding = ContentActivationBinding<TestRuntime, TestFence, TestMode>;
+type TestLookup = ContentActivationLookup<TestRuntime, TestFence, TestMode>;
+
+function readyId(fill: string): ContentReadyId {
+  return `r1_${fill.repeat(64)}` as ContentReadyId;
+}
+
+function activationId(sequence: number): ContentActivationId {
+  return `a1_${sequence.toString(16).padStart(64, "0")}` as ContentActivationId;
+}
+
+function activationFactory(start = 1): () => ContentActivationId {
+  let sequence = start;
+  return () => activationId(sequence++);
+}
+
+function identity(overrides: Partial<TestIdentity> = {}): TestIdentity {
+  return {
+    runtime: overrides.runtime ?? { name: "runtime-a" },
+    fence: overrides.fence ?? { name: "fence-a" },
+    sid: overrides.sid ?? "S-activation",
+    tabId: overrides.tabId ?? 7,
+    frameId: overrides.frameId ?? 0,
+    documentId: overrides.documentId ?? "document-a",
+    url: overrides.url ?? "https://app.example/a",
+    mode: overrides.mode ?? "lite"
+  };
+}
+
+function prepareInput(
+  exactIdentity: TestIdentity,
+  ready: ContentReadyId,
+  parent?: ContentActivationParent
+): TestPreparation {
+  return {
+    ...exactIdentity,
+    readyId: ready,
+    ...(parent ? { parent } : {})
+  };
+}
+
+function lookup(binding: TestBinding, overrides: Partial<TestLookup> = {}): TestLookup {
+  return {
+    runtime: overrides.runtime ?? binding.runtime,
+    fence: overrides.fence ?? binding.fence,
+    sid: overrides.sid ?? binding.sid,
+    tabId: overrides.tabId ?? binding.tabId,
+    frameId: overrides.frameId ?? binding.frameId,
+    documentId: overrides.documentId ?? binding.documentId,
+    url: overrides.url ?? binding.url,
+    mode: overrides.mode ?? binding.mode,
+    activationId: overrides.activationId ?? binding.activationId
+  };
+}
+
+describe("content activation registry", () => {
+  it("requires arm before activate and follows prepared-active-draining-revoked", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const exactIdentity = identity();
+    const prepared = registry.prepare(prepareInput(exactIdentity, readyId("1")))!;
+
+    expect(prepared).toMatchObject({ state: "prepared", armed: false });
+    expect(Object.isFrozen(prepared)).toBe(true);
+    expect(registry.activate(prepared)).toBeNull();
+    expect(registry.arm(prepared)).toMatchObject({ state: "prepared", armed: true });
+    expect(registry.activate(prepared)).toMatchObject({ state: "active", armed: true });
+    expect(registry.activate(prepared)).toMatchObject({ state: "active" });
+    expect(registry.validate(lookup(prepared))).toMatchObject({ state: "active" });
+    expect(registry.drain(prepared)).toMatchObject({ state: "draining" });
+    expect(registry.drain(prepared)).toMatchObject({ state: "draining" });
+    expect(registry.validate(lookup(prepared))).toBeNull();
+    expect(registry.validate(lookup(prepared), ["draining"])?.state).toBe("draining");
+    expect(registry.revoke(prepared)).toBe(true);
+    expect(registry.revoke(prepared)).toBe(false);
+    expect(registry.activate(prepared)).toBeNull();
+    expect(registry.validate(lookup(prepared), ["revoked"])).toBeNull();
+  });
+
+  it("closes ordinary admission while retaining an exact revocation binding", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const prepared = registry.prepare(prepareInput(identity(), readyId("e")))!;
+    const active = registry.activate(registry.arm(prepared)!)!;
+
+    expect(registry.beginRevocation(active)).toMatchObject({
+      activationId: active.activationId,
+      state: "revoking",
+      armed: false
+    });
+    expect(registry.lookupByActivationId(active.activationId)).toBeNull();
+    expect(registry.lookupByActivationId(active.activationId, ["revoking"])).toMatchObject({
+      activationId: active.activationId
+    });
+    expect(registry.revoke(active)).toBe(true);
+    expect(registry.lookupByActivationId(active.activationId, ["revoking"])).toBeNull();
+  });
+
+  it("requires explicit revocation before A can be replaced by B", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const exactIdentity = identity();
+    const a = registry.prepare(prepareInput(exactIdentity, readyId("a")))!;
+    registry.arm(a);
+    registry.activate(a);
+    const oldPort = { name: "old-port" };
+    expect(registry.bindPort(oldPort, a)).toBe(true);
+
+    expect(registry.prepare(prepareInput(exactIdentity, readyId("b")))).toBeNull();
+    registry.beginRevocation(a);
+    expect(registry.prepare(prepareInput(exactIdentity, readyId("b")))).toBeNull();
+    registry.revoke(a);
+    const b = registry.prepare(prepareInput(exactIdentity, readyId("b")))!;
+
+    expect(b.activationId).not.toBe(a.activationId);
+    expect(registry.validate(lookup(a))).toBeNull();
+    expect(registry.activate(a)).toBeNull();
+    expect(registry.validatePort(oldPort, lookup(a))).toBeNull();
+    expect(registry.currentForDocument(exactIdentity, ["prepared"])?.readyId).toBe(b.readyId);
+    expect(registry.arm(b)?.readyId).toBe(b.readyId);
+    expect(registry.activate(b)?.state).toBe("active");
+  });
+
+  it("treats a duplicate current ready as idempotent but never revives a revoked ready", () => {
+    const createId = vi.fn(activationFactory());
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      createId
+    );
+    const exactIdentity = identity();
+    const input = prepareInput(exactIdentity, readyId("c"));
+    const first = registry.prepare(input)!;
+    const duplicate = registry.prepare(input)!;
+
+    expect(duplicate.activationId).toBe(first.activationId);
+    expect(createId).toHaveBeenCalledOnce();
+    expect(registry.revoke(first)).toBe(true);
+    expect(registry.prepare(input)).toBeNull();
+    expect(registry.arm(first)).toBeNull();
+    expect(registry.activate(first)).toBeNull();
+  });
+
+  it("validates every runtime, fence, and serialized identity field exactly", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const prepared = registry.prepare(prepareInput(identity(), readyId("d")))!;
+    registry.arm(prepared);
+    registry.activate(prepared);
+
+    const mismatches: Partial<TestLookup>[] = [
+      { runtime: { name: "runtime-replacement" } },
+      { fence: { name: "fence-replacement" } },
+      { sid: "S-replacement" },
+      { tabId: prepared.tabId + 1 },
+      { frameId: prepared.frameId + 1 },
+      { documentId: "document-replacement" },
+      { url: "https://app.example/replacement" },
+      { mode: "full" },
+      { activationId: activationId(999) }
+    ];
+
+    for (const mismatch of mismatches) {
+      expect(registry.validate(lookup(prepared, mismatch))).toBeNull();
+    }
+
+    expect(registry.validate(lookup(prepared))?.activationId).toBe(prepared.activationId);
+  });
+
+  it("binds a port to one exact activation and invalidates stale bindings", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const exactIdentity = identity();
+    const first = registry.prepare(prepareInput(exactIdentity, readyId("e")))!;
+    const port = { name: "content-port" };
+    const otherPort = { name: "other-port" };
+
+    expect(registry.bindPort(port, first)).toBe(true);
+    expect(registry.validatePort(port, lookup(first))).toBeNull();
+    expect(registry.validatePort(port, lookup(first), ["prepared"])?.readyId).toBe(first.readyId);
+    expect(registry.validatePort(otherPort, lookup(first), ["prepared"])).toBeNull();
+
+    registry.arm(first);
+    registry.activate(first);
+    expect(registry.validatePort(port, lookup(first))?.state).toBe("active");
+    expect(registry.validatePort(port, lookup(first, { url: "https://evil.example/" }))).toBeNull();
+
+    expect(registry.prepare(prepareInput(exactIdentity, readyId("f")))).toBeNull();
+    registry.beginRevocation(first);
+    registry.revoke(first);
+    const replacement = registry.prepare(prepareInput(exactIdentity, readyId("f")))!;
+    expect(registry.validatePort(port, lookup(first), ["revoked"])).toBeNull();
+    expect(registry.bindPort(port, replacement)).toBe(true);
+    expect((registry as unknown as { byPort: WeakMap<TestPort, unknown> }).byPort.get(port)).toBe(
+      replacement.activationId
+    );
+    expect(registry.unbindPort(port, first)).toBe(false);
+    expect(registry.unbindPort(port, replacement)).toBe(true);
+    expect(registry.validatePort(port, lookup(replacement), ["prepared"])).toBeNull();
+  });
+
+  it("requires an already-armed exact parent and rejects orphan or self-parent children", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const runtime = { name: "runtime-parent" };
+    const fence = { name: "fence-parent" };
+    const root = registry.prepare(
+      prepareInput(identity({ runtime, fence, documentId: "root" }), readyId("1"))
+    )!;
+    const childIdentity = identity({
+      runtime,
+      fence,
+      frameId: 4,
+      documentId: "child",
+      url: "https://app.example/child"
+    });
+
+    expect(
+      registry.prepare(
+        prepareInput(childIdentity, readyId("2"), { frameId: 0, documentId: "root" })
+      )
+    ).toBeNull();
+    registry.arm(root);
+    expect(
+      registry.prepare(
+        prepareInput(childIdentity, readyId("3"), { frameId: 4, documentId: "child" })
+      )
+    ).toBeNull();
+    expect(
+      registry.prepare(
+        prepareInput(childIdentity, readyId("4"), { frameId: 9, documentId: "missing" })
+      )
+    ).toBeNull();
+    expect(
+      registry.prepare(
+        prepareInput(childIdentity, readyId("5"), { frameId: 0, documentId: "root" })
+      )
+    ).not.toBeNull();
+  });
+
+  it("cascades parent replacement and rejects a prepared child's late arm", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const runtime = { name: "runtime-parent-replacement" };
+    const fence = { name: "fence-parent-replacement" };
+    const rootIdentity = identity({ runtime, fence, documentId: "root" });
+    const root = registry.prepare(prepareInput(rootIdentity, readyId("8")))!;
+    registry.arm(root);
+    registry.activate(root);
+    const child = registry.prepare(
+      prepareInput(
+        identity({
+          runtime,
+          fence,
+          frameId: 4,
+          documentId: "child",
+          url: "https://app.example/child"
+        }),
+        readyId("9"),
+        { frameId: 0, documentId: "root" }
+      )
+    )!;
+
+    expect(registry.prepare(prepareInput(rootIdentity, readyId("a")))).toBeNull();
+    registry.beginRevocation(root);
+    registry.revoke(root);
+    const replacement = registry.prepare(prepareInput(rootIdentity, readyId("a")))!;
+
+    expect(replacement.activationId).not.toBe(root.activationId);
+    expect(registry.lookupByActivationId(root.activationId)).toBeNull();
+    expect(registry.lookupByActivationId(child.activationId)).toBeNull();
+    expect(registry.arm(child)).toBeNull();
+    expect(registry.activate(child)).toBeNull();
+    expect(registry.listRuntime(runtime, fence, ["prepared"])).toEqual([replacement]);
+  });
+
+  it("refreshes same-document history without changing activation or port ownership", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const original = registry.prepare(prepareInput(identity(), readyId("0")))!;
+    const port = { name: "history-port" };
+    registry.arm(original);
+    registry.activate(original);
+    registry.bindPort(port, original);
+
+    const refreshed = registry.refreshUrl({
+      runtime: original.runtime,
+      fence: original.fence,
+      sid: original.sid,
+      tabId: original.tabId,
+      frameId: original.frameId,
+      documentId: original.documentId,
+      mode: original.mode,
+      activationId: original.activationId,
+      url: "https://app.example/a#history"
+    })!;
+
+    expect(refreshed.activationId).toBe(original.activationId);
+    expect(refreshed.readyId).toBe(original.readyId);
+    expect(refreshed.url).toBe("https://app.example/a#history");
+    expect(registry.validate(lookup(original))).toBeNull();
+    expect(registry.validate(lookup(refreshed))?.state).toBe("active");
+    expect(registry.validatePort(port, lookup(refreshed))?.url).toBe(refreshed.url);
+    expect(
+      registry.refreshUrl({
+        runtime: { name: "runtime-attacker" },
+        fence: refreshed.fence,
+        sid: refreshed.sid,
+        tabId: refreshed.tabId,
+        frameId: refreshed.frameId,
+        documentId: refreshed.documentId,
+        mode: refreshed.mode,
+        activationId: refreshed.activationId,
+        url: "https://evil.example/"
+      })
+    ).toBeNull();
+  });
+
+  it("looks up ids and lists only exact live runtime/fence snapshots", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const runtime = { name: "runtime-list" };
+    const fenceA = { name: "fence-a" };
+    const fenceB = { name: "fence-b" };
+    const first = registry.prepare(
+      prepareInput(identity({ runtime, fence: fenceA, documentId: "list-a" }), readyId("b"))
+    )!;
+    const second = registry.prepare(
+      prepareInput(identity({ runtime, fence: fenceB, documentId: "list-b" }), readyId("c"))
+    )!;
+
+    expect(registry.lookupByReadyId(first.readyId)?.activationId).toBe(first.activationId);
+    expect(registry.lookupByActivationId(second.activationId)?.readyId).toBe(second.readyId);
+    expect(registry.lookupByReadyId("invalid")).toBeNull();
+    expect(registry.listRuntime(runtime)).toHaveLength(2);
+    expect(registry.listRuntime(runtime, fenceA).map((entry) => entry.documentId)).toEqual([
+      "list-a"
+    ]);
+    expect(registry.revoke(first)).toBe(true);
+    expect(registry.lookupByActivationId(first.activationId)).toBeNull();
+    expect(registry.lookupByActivationId(first.activationId, ["revoked"])).toBeNull();
+    expect(registry.listRuntime(runtime)).toHaveLength(1);
+  });
+
+  it("isolates a restored runtime that reuses the same sid", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const oldRuntime = { name: "runtime-old" };
+    const newRuntime = { name: "runtime-restored" };
+    const oldFence = { name: "fence-old" };
+    const newFence = { name: "fence-restored" };
+    const oldIdentity = identity({ runtime: oldRuntime, fence: oldFence, documentId: "old-doc" });
+    const newIdentity = identity({ runtime: newRuntime, fence: newFence, documentId: "new-doc" });
+    const oldActivation = registry.prepare(prepareInput(oldIdentity, readyId("2")))!;
+    const restoredActivation = registry.prepare(prepareInput(newIdentity, readyId("3")))!;
+    registry.arm(oldActivation);
+    registry.activate(oldActivation);
+    registry.arm(restoredActivation);
+    registry.activate(restoredActivation);
+
+    expect(registry.revokeRuntime(oldRuntime, oldFence)).toBe(1);
+    expect(registry.validate(lookup(oldActivation))).toBeNull();
+    expect(registry.validate(lookup(restoredActivation))?.state).toBe("active");
+    expect(registry.revokeRuntime(oldRuntime)).toBe(0);
+  });
+
+  it("does not let an old runtime revoke a same-document restored activation", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const oldRuntime = { name: "runtime-old" };
+    const restoredRuntime = { name: "runtime-restored" };
+    const oldIdentity = identity({ runtime: oldRuntime, fence: { name: "old-fence" } });
+    const restoredIdentity = identity({
+      runtime: restoredRuntime,
+      fence: { name: "restored-fence" }
+    });
+    const oldActivation = registry.prepare(prepareInput(oldIdentity, readyId("4")))!;
+    registry.beginRevocation(oldActivation);
+    registry.revoke(oldActivation);
+    const restoredActivation = registry.prepare(prepareInput(restoredIdentity, readyId("5")))!;
+
+    expect(registry.revokeDocument(oldIdentity)).toBe(false);
+    expect(registry.arm(oldActivation)).toBeNull();
+    expect(registry.currentForDocument(restoredIdentity, ["prepared"])?.activationId).toBe(
+      restoredActivation.activationId
+    );
+  });
+
+  it("revokes an exact parent activation and its known descendant tree", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const runtime = { name: "runtime-tree" };
+    const fence = { name: "fence-tree" };
+    const rootIdentity = identity({ runtime, fence, documentId: "root", frameId: 0 });
+    const childIdentity = identity({
+      runtime,
+      fence,
+      documentId: "child",
+      frameId: 4,
+      url: "https://app.example/child"
+    });
+    const grandchildIdentity = identity({
+      runtime,
+      fence,
+      documentId: "grandchild",
+      frameId: 8,
+      url: "https://app.example/grandchild"
+    });
+    const root = registry.prepare(prepareInput(rootIdentity, readyId("d")))!;
+    registry.arm(root);
+    registry.activate(root);
+    const child = registry.prepare(
+      prepareInput(childIdentity, readyId("e"), { frameId: 0, documentId: "root" })
+    )!;
+    registry.arm(child);
+    registry.activate(child);
+    const grandchild = registry.prepare(
+      prepareInput(grandchildIdentity, readyId("f"), {
+        frameId: 4,
+        documentId: "child"
+      })
+    )!;
+
+    expect(registry.revokeParent(rootIdentity)).toBe(3);
+    expect(registry.validate(lookup(root), ["revoked"])).toBeNull();
+    expect(registry.validate(lookup(child), ["revoked"])).toBeNull();
+    expect(registry.validate(lookup(grandchild), ["revoked"])).toBeNull();
+    expect(registry.listRuntime(runtime)).toEqual([]);
+  });
+
+  it("does not finalize a revoking parent before its child controller is gone", () => {
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      activationFactory()
+    );
+    const runtime = { name: "runtime-revoking-tree" };
+    const fence = { name: "fence-revoking-tree" };
+    const root = registry.prepare(
+      prepareInput(identity({ runtime, fence, documentId: "root" }), readyId("b"))
+    )!;
+    registry.arm(root);
+    registry.activate(root);
+    const child = registry.prepare(
+      prepareInput(
+        identity({
+          runtime,
+          fence,
+          frameId: 2,
+          documentId: "child",
+          url: "https://app.example/child"
+        }),
+        readyId("c"),
+        { frameId: 0, documentId: "root" }
+      )
+    )!;
+    registry.beginRevocation(root);
+    registry.beginRevocation(child);
+
+    expect(registry.finalizeRevocation(root)).toBe(false);
+    expect(registry.finalizeRevocation(child)).toBe(true);
+    expect(registry.finalizeRevocation(root)).toBe(true);
+  });
+
+  it("rejects reused ready ids across documents and invalid preparation identities", () => {
+    const createId = vi.fn(activationFactory());
+    const registry = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      createId
+    );
+    const firstIdentity = identity();
+    const reusedReady = readyId("6");
+
+    expect(registry.prepare(prepareInput(firstIdentity, reusedReady))).not.toBeNull();
+    expect(
+      registry.prepare(
+        prepareInput(identity({ documentId: "other-document", frameId: 2 }), reusedReady, {
+          frameId: 0,
+          documentId: firstIdentity.documentId
+        })
+      )
+    ).toBeNull();
+    expect(
+      registry.prepare({
+        ...prepareInput(firstIdentity, readyId("7")),
+        tabId: -1
+      })
+    ).toBeNull();
+    expect(createId).toHaveBeenCalledOnce();
+  });
+
+  it("fails closed for invalid or repeatedly colliding activation factories", () => {
+    const invalid = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      () => "invalid" as ContentActivationId
+    );
+    expect(() => invalid.prepare(prepareInput(identity(), readyId("8")))).toThrow(
+      "factory returned an invalid id"
+    );
+
+    const collision = activationId(1);
+    const colliding = new ContentActivationRegistry<TestRuntime, TestFence, TestPort, TestMode>(
+      () => collision
+    );
+    expect(colliding.prepare(prepareInput(identity(), readyId("9")))).not.toBeNull();
+    expect(() =>
+      colliding.prepare(prepareInput(identity({ documentId: "document-b" }), readyId("a")))
+    ).toThrow("Unable to allocate a unique content activation id");
+  });
+});
diff --git a/apps/extension/src/sw/content-activation-registry.ts b/apps/extension/src/sw/content-activation-registry.ts
new file mode 100644
index 0000000..6df88f1
--- /dev/null
+++ b/apps/extension/src/sw/content-activation-registry.ts
@@ -0,0 +1,834 @@
+import {
+  createContentActivationId,
+  parseContentActivationId,
+  parseContentReadyId,
+  type ContentActivationId,
+  type ContentReadyId
+} from "../shared/content-activation-protocol.js";
+
+export type ContentActivationState = "prepared" | "active" | "draining" | "revoking" | "revoked";
+
+export type ContentActivationIdentity<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+> = Readonly<{
+  runtime: Runtime;
+  fence: Fence;
+  sid: string;
+  tabId: number;
+  frameId: number;
+  documentId: string;
+  url: string;
+  mode: Mode;
+}>;
+
+export type ContentActivationParent = Readonly<{
+  frameId: number;
+  documentId: string;
+}>;
+
+export type ContentActivationPreparation<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+> = ContentActivationIdentity<Runtime, Fence, Mode> &
+  Readonly<{
+    readyId: ContentReadyId | string;
+    parent?: ContentActivationParent;
+  }>;
+
+export type ContentActivationBinding<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+> = ContentActivationIdentity<Runtime, Fence, Mode> &
+  Readonly<{
+    readyId: ContentReadyId;
+    activationId: ContentActivationId;
+    parent?: ContentActivationParent;
+  }>;
+
+export type ContentActivationLookup<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+> = ContentActivationIdentity<Runtime, Fence, Mode> &
+  Readonly<{
+    activationId: ContentActivationId | string;
+  }>;
+
+export type ContentActivationSnapshot<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+> = ContentActivationBinding<Runtime, Fence, Mode> &
+  Readonly<{
+    state: ContentActivationState;
+    armed: boolean;
+  }>;
+
+export type ContentActivationUrlRefresh<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+> = Omit<ContentActivationIdentity<Runtime, Fence, Mode>, "url"> &
+  Readonly<{
+    activationId: ContentActivationId | string;
+    url: string;
+  }>;
+
+type ActivationRecord<Runtime extends object, Fence extends object, Mode extends string> = {
+  binding: ContentActivationBinding<Runtime, Fence, Mode>;
+  state: ContentActivationState;
+  armed: boolean;
+  parentActivationId?: ContentActivationId;
+};
+
+const DEFAULT_ACTIVE_STATES = ["active"] as const satisfies readonly ContentActivationState[];
+const PORT_BINDABLE_STATES = [
+  "prepared",
+  "active",
+  "draining"
+] as const satisfies readonly ContentActivationState[];
+const LIVE_STATES = [
+  "prepared",
+  "active",
+  "draining"
+] as const satisfies readonly ContentActivationState[];
+const ACTIVATION_ID_GENERATION_ATTEMPTS = 8;
+const ID_TOMBSTONE_LIMIT = 8_192;
+
+/**
+ * Owns two-phase content activation for exact Chrome documents. Every lookup
+ * binds both object identities (runtime/fence) and all serialized identity
+ * fields, so a restored runtime with the same sid cannot claim prior work.
+ */
+export class ContentActivationRegistry<
+  Runtime extends object,
+  Fence extends object,
+  Port extends object = object,
+  Mode extends string = string
+> {
+  private readonly byActivationId = new Map<
+    ContentActivationId,
+    ActivationRecord<Runtime, Fence, Mode>
+  >();
+  private readonly byReadyId = new Map<ContentReadyId, ActivationRecord<Runtime, Fence, Mode>>();
+  private readonly seenActivationIds = new Set<ContentActivationId>();
+  private readonly seenReadyIds = new Set<ContentReadyId>();
+  private readonly byDocument = new Map<string, ActivationRecord<Runtime, Fence, Mode>>();
+  private readonly byRuntime = new Map<Runtime, Set<ActivationRecord<Runtime, Fence, Mode>>>();
+  private readonly byPort = new WeakMap<Port, ContentActivationId>();
+
+  public constructor(
+    private readonly createActivationId: () => ContentActivationId = createContentActivationId
+  ) {}
+
+  public prepare(
+    input: ContentActivationPreparation<Runtime, Fence, Mode>
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const readyId = parseContentReadyId(input.readyId);
+
+    if (!readyId || !isValidIdentity(input) || !isValidParent(input.parent, input.frameId)) {
+      return null;
+    }
+
+    const parentRecord = input.frameId > 0 ? this.resolveLiveParent(input) : null;
+
+    if (input.frameId > 0 && !parentRecord) {
+      return null;
+    }
+
+    const readyRecord = this.byReadyId.get(readyId);
+
+    if (readyRecord) {
+      return readyRecord.state !== "revoked" && matchesPreparation(readyRecord.binding, input)
+        ? toSnapshot(readyRecord)
+        : null;
+    }
+
+    if (this.seenReadyIds.has(readyId)) {
+      return null;
+    }
+
+    const key = toDocumentKey(input);
+    const previous = this.byDocument.get(key);
+
+    if (previous) {
+      return null;
+    }
+
+    const activationId = this.createUniqueActivationId();
+    const binding = Object.freeze({
+      runtime: input.runtime,
+      fence: input.fence,
+      sid: input.sid,
+      tabId: input.tabId,
+      frameId: input.frameId,
+      documentId: input.documentId,
+      url: input.url,
+      mode: input.mode,
+      readyId,
+      activationId,
+      ...(input.parent ? { parent: Object.freeze({ ...input.parent }) } : {})
+    }) as ContentActivationBinding<Runtime, Fence, Mode>;
+    const record: ActivationRecord<Runtime, Fence, Mode> = {
+      binding,
+      state: "prepared",
+      armed: false,
+      ...(parentRecord ? { parentActivationId: parentRecord.binding.activationId } : {})
+    };
+
+    this.byActivationId.set(activationId, record);
+    this.byReadyId.set(readyId, record);
+    addBoundedTombstone(this.seenActivationIds, activationId);
+    addBoundedTombstone(this.seenReadyIds, readyId);
+    this.byDocument.set(key, record);
+    let runtimeRecords = this.byRuntime.get(input.runtime);
+
+    if (!runtimeRecords) {
+      runtimeRecords = new Set();
+      this.byRuntime.set(input.runtime, runtimeRecords);
+    }
+
+    runtimeRecords.add(record);
+    return toSnapshot(record);
+  }
+
+  public arm(
+    binding: ContentActivationBinding<Runtime, Fence, Mode>
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const record = this.resolveBinding(binding);
+
+    if (!record || record.state !== "prepared") {
+      return null;
+    }
+
+    if (!this.hasArmableParent(record)) {
+      this.revokeRecord(record);
+      return null;
+    }
+
+    record.armed = true;
+    return toSnapshot(record);
+  }
+
+  public activate(
+    binding: ContentActivationBinding<Runtime, Fence, Mode>
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const record = this.resolveBinding(binding);
+
+    if (!record) {
+      return null;
+    }
+
+    if (record.state === "active") {
+      return toSnapshot(record);
+    }
+
+    if (record.state !== "prepared" || !record.armed) {
+      return null;
+    }
+
+    if (!this.hasActiveParent(record)) {
+      this.revokeRecord(record);
+      return null;
+    }
+
+    record.state = "active";
+    return toSnapshot(record);
+  }
+
+  public drain(
+    binding: ContentActivationBinding<Runtime, Fence, Mode>
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const record = this.resolveBinding(binding);
+
+    if (!record) {
+      return null;
+    }
+
+    if (record.state === "draining") {
+      return toSnapshot(record);
+    }
+
+    if (record.state !== "active") {
+      return null;
+    }
+
+    record.state = "draining";
+    return toSnapshot(record);
+  }
+
+  /**
+   * Closes every ordinary registry admission while retaining the exact binding
+   * long enough for the service worker to deactivate its MAIN-world controller.
+   */
+  public beginRevocation(
+    binding: ContentActivationBinding<Runtime, Fence, Mode>
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const record = this.resolveBinding(binding, true);
+
+    if (!record || record.state === "revoked") {
+      return null;
+    }
+
+    if (record.state !== "revoking") {
+      record.state = "revoking";
+      record.armed = false;
+    }
+
+    return toSnapshot(record);
+  }
+
+  /** Removes one deactivated binding only after every descendant has also left the registry. */
+  public finalizeRevocation(binding: ContentActivationBinding<Runtime, Fence, Mode>): boolean {
+    const record = this.resolveBinding(binding, true);
+    if (!record || record.state !== "revoking") {
+      return false;
+    }
+
+    const runtimeRecords = this.byRuntime.get(record.binding.runtime);
+    if (
+      [...(runtimeRecords ?? [])].some(
+        (child) =>
+          child !== record &&
+          child.state !== "revoked" &&
+          child.parentActivationId === record.binding.activationId
+      )
+    ) {
+      return false;
+    }
+
+    this.removeRecord(record);
+    return true;
+  }
+
+  public revoke(binding: ContentActivationBinding<Runtime, Fence, Mode>): boolean {
+    const record = this.resolveBinding(binding, true);
+
+    if (!record || record.state === "revoked") {
+      return false;
+    }
+
+    return this.revokeRecord(record) > 0;
+  }
+
+  public revokeDocument(identity: ContentActivationIdentity<Runtime, Fence, Mode>): boolean {
+    if (!isValidIdentity(identity)) {
+      return false;
+    }
+
+    const record = this.byDocument.get(toDocumentKey(identity));
+
+    if (!record || !matchesIdentity(record.binding, identity)) {
+      return false;
+    }
+
+    return this.revokeRecord(record) > 0;
+  }
+
+  public revokeRuntime(runtime: Runtime, fence?: Fence): number {
+    const records = this.byRuntime.get(runtime);
+
+    if (!records) {
+      return 0;
+    }
+
+    let revoked = 0;
+
+    for (const record of [...records]) {
+      if (record.state === "revoked" || (fence !== undefined && record.binding.fence !== fence)) {
+        continue;
+      }
+
+      revoked += this.revokeRecord(record);
+    }
+
+    return revoked;
+  }
+
+  public revokeParent(identity: ContentActivationIdentity<Runtime, Fence, Mode>): number {
+    if (!isValidIdentity(identity)) {
+      return 0;
+    }
+
+    const parent = this.byDocument.get(toDocumentKey(identity));
+
+    if (!parent || !matchesIdentity(parent.binding, identity)) {
+      return 0;
+    }
+
+    return this.revokeRecord(parent);
+  }
+
+  public refreshUrl(
+    input: ContentActivationUrlRefresh<Runtime, Fence, Mode>
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const activationId = parseContentActivationId(input.activationId);
+
+    if (!activationId || !isValidIdentity(input)) {
+      return null;
+    }
+
+    const record = this.byActivationId.get(activationId);
+
+    if (
+      !record ||
+      record.state === "revoked" ||
+      this.byDocument.get(toDocumentKey(input)) !== record ||
+      !matchesStableIdentity(record.binding, input)
+    ) {
+      return null;
+    }
+
+    record.binding = Object.freeze({
+      ...record.binding,
+      url: input.url
+    });
+    return toSnapshot(record);
+  }
+
+  public lookupByReadyId(
+    value: ContentReadyId | string,
+    allowedStates: readonly ContentActivationState[] = LIVE_STATES
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const readyId = parseContentReadyId(value);
+    const record = readyId ? this.byReadyId.get(readyId) : undefined;
+    return record && allowedStates.includes(record.state) ? toSnapshot(record) : null;
+  }
+
+  public lookupByActivationId(
+    value: ContentActivationId | string,
+    allowedStates: readonly ContentActivationState[] = LIVE_STATES
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const activationId = parseContentActivationId(value);
+    const record = activationId ? this.byActivationId.get(activationId) : undefined;
+    return record && allowedStates.includes(record.state) ? toSnapshot(record) : null;
+  }
+
+  public listRuntime(
+    runtime: Runtime,
+    fence?: Fence,
+    allowedStates: readonly ContentActivationState[] = LIVE_STATES
+  ): ContentActivationSnapshot<Runtime, Fence, Mode>[] {
+    const records = this.byRuntime.get(runtime);
+
+    if (!records) {
+      return [];
+    }
+
+    return [...records]
+      .filter(
+        (record) =>
+          (fence === undefined || record.binding.fence === fence) &&
+          allowedStates.includes(record.state)
+      )
+      .map(toSnapshot);
+  }
+
+  public validate(
+    input: ContentActivationLookup<Runtime, Fence, Mode>,
+    allowedStates: readonly ContentActivationState[] = DEFAULT_ACTIVE_STATES
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    const record = this.resolveLookup(input);
+    return record && allowedStates.includes(record.state) ? toSnapshot(record) : null;
+  }
+
+  public currentForDocument(
+    identity: ContentActivationIdentity<Runtime, Fence, Mode>,
+    allowedStates: readonly ContentActivationState[] = LIVE_STATES
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    if (!isValidIdentity(identity)) {
+      return null;
+    }
+
+    const record = this.byDocument.get(toDocumentKey(identity));
+    return record &&
+      matchesIdentity(record.binding, identity) &&
+      allowedStates.includes(record.state)
+      ? toSnapshot(record)
+      : null;
+  }
+
+  public bindPort(port: Port, binding: ContentActivationBinding<Runtime, Fence, Mode>): boolean {
+    const record = this.resolveBinding(binding);
+
+    if (
+      !isObject(port) ||
+      !record ||
+      !PORT_BINDABLE_STATES.includes(record.state as "prepared" | "active" | "draining")
+    ) {
+      return false;
+    }
+
+    this.byPort.set(port, record.binding.activationId);
+    return true;
+  }
+
+  public validatePort(
+    port: Port,
+    input: ContentActivationLookup<Runtime, Fence, Mode>,
+    allowedStates: readonly ContentActivationState[] = DEFAULT_ACTIVE_STATES
+  ): ContentActivationSnapshot<Runtime, Fence, Mode> | null {
+    if (!isObject(port)) {
+      return null;
+    }
+
+    const record = this.resolveLookup(input);
+
+    return record &&
+      this.byPort.get(port) === record.binding.activationId &&
+      allowedStates.includes(record.state)
+      ? toSnapshot(record)
+      : null;
+  }
+
+  public unbindPort(port: Port, binding?: ContentActivationBinding<Runtime, Fence, Mode>): boolean {
+    if (!isObject(port)) {
+      return false;
+    }
+
+    const activationId = this.byPort.get(port);
+
+    if (!activationId || (binding && activationId !== binding.activationId)) {
+      return false;
+    }
+
+    return this.byPort.delete(port);
+  }
+
+  private resolveLookup(
+    input: ContentActivationLookup<Runtime, Fence, Mode>
+  ): ActivationRecord<Runtime, Fence, Mode> | null {
+    if (!isValidIdentity(input)) {
+      return null;
+    }
+
+    const activationId = parseContentActivationId(input.activationId);
+
+    if (!activationId) {
+      return null;
+    }
+
+    const record = this.byActivationId.get(activationId);
+    return record && matchesIdentity(record.binding, input) ? record : null;
+  }
+
+  private resolveBinding(
+    binding: ContentActivationBinding<Runtime, Fence, Mode>,
+    includeRevoked = false
+  ): ActivationRecord<Runtime, Fence, Mode> | null {
+    if (!isValidIdentity(binding)) {
+      return null;
+    }
+
+    const activationId = parseContentActivationId(binding.activationId);
+    const readyId = parseContentReadyId(binding.readyId);
+
+    if (!activationId || !readyId) {
+      return null;
+    }
+
+    const record = this.byActivationId.get(activationId);
+
+    if (
+      !record ||
+      (!includeRevoked && record.state === "revoked") ||
+      !matchesBinding(record.binding, { ...binding, activationId, readyId })
+    ) {
+      return null;
+    }
+
+    return record;
+  }
+
+  private createUniqueActivationId(): ContentActivationId {
+    for (let attempt = 0; attempt < ACTIVATION_ID_GENERATION_ATTEMPTS; attempt += 1) {
+      const activationId = parseContentActivationId(this.createActivationId());
+
+      if (!activationId) {
+        throw new Error("Content activation id factory returned an invalid id.");
+      }
+
+      if (!this.seenActivationIds.has(activationId) && !this.byActivationId.has(activationId)) {
+        return activationId;
+      }
+    }
+
+    throw new Error("Unable to allocate a unique content activation id.");
+  }
+
+  private resolveLiveParent(
+    input: ContentActivationPreparation<Runtime, Fence, Mode>
+  ): ActivationRecord<Runtime, Fence, Mode> | null {
+    const parent = input.parent;
+
+    if (!parent) {
+      return null;
+    }
+
+    const record = this.byDocument.get(
+      toDocumentKey({ tabId: input.tabId, frameId: parent.frameId, documentId: parent.documentId })
+    );
+
+    if (
+      !record ||
+      record.state === "revoked" ||
+      !record.armed ||
+      !matchesRuntimeTreeIdentity(record.binding, input)
+    ) {
+      return null;
+    }
+
+    const visited = new Set<ActivationRecord<Runtime, Fence, Mode>>();
+    let current: ActivationRecord<Runtime, Fence, Mode> | undefined = record;
+
+    while (current && !visited.has(current)) {
+      visited.add(current);
+      if (
+        current.binding.frameId === input.frameId &&
+        current.binding.documentId === input.documentId
+      ) {
+        return null;
+      }
+
+      const ancestor: ContentActivationParent | undefined = current.binding.parent;
+      current = ancestor
+        ? this.byDocument.get(
+            toDocumentKey({
+              tabId: input.tabId,
+              frameId: ancestor.frameId,
+              documentId: ancestor.documentId
+            })
+          )
+        : undefined;
+    }
+
+    return current ? null : record;
+  }
+
+  private hasArmableParent(record: ActivationRecord<Runtime, Fence, Mode>): boolean {
+    if (record.binding.frameId === 0) {
+      return record.parentActivationId === undefined;
+    }
+
+    const parent = record.parentActivationId
+      ? this.byActivationId.get(record.parentActivationId)
+      : undefined;
+    return Boolean(
+      parent &&
+      parent.binding.runtime === record.binding.runtime &&
+      parent.binding.fence === record.binding.fence &&
+      parent.armed &&
+      (parent.state === "prepared" || parent.state === "active")
+    );
+  }
+
+  private hasActiveParent(record: ActivationRecord<Runtime, Fence, Mode>): boolean {
+    if (record.binding.frameId === 0) {
+      return record.parentActivationId === undefined;
+    }
+
+    const parent = record.parentActivationId
+      ? this.byActivationId.get(record.parentActivationId)
+      : undefined;
+    return Boolean(
+      parent &&
+      parent.binding.runtime === record.binding.runtime &&
+      parent.binding.fence === record.binding.fence &&
+      parent.state === "active"
+    );
+  }
+
+  private revokeRecord(record: ActivationRecord<Runtime, Fence, Mode>): number {
+    if (record.state === "revoked") {
+      return 0;
+    }
+
+    let revoked = 1;
+    const runtimeRecords = this.byRuntime.get(record.binding.runtime);
+    for (const child of [...(runtimeRecords ?? [])]) {
+      if (
+        child !== record &&
+        child.state !== "revoked" &&
+        child.parentActivationId === record.binding.activationId
+      ) {
+        revoked += this.revokeRecord(child);
+      }
+    }
+
+    this.removeRecord(record);
+    return revoked;
+  }
+
+  private removeRecord(record: ActivationRecord<Runtime, Fence, Mode>): void {
+    const runtimeRecords = this.byRuntime.get(record.binding.runtime);
+    record.state = "revoked";
+    record.armed = false;
+    if (this.byActivationId.get(record.binding.activationId) === record) {
+      this.byActivationId.delete(record.binding.activationId);
+    }
+    if (this.byReadyId.get(record.binding.readyId) === record) {
+      this.byReadyId.delete(record.binding.readyId);
+    }
+    const key = toDocumentKey(record.binding);
+
+    if (this.byDocument.get(key) === record) {
+      this.byDocument.delete(key);
+    }
+
+    runtimeRecords?.delete(record);
+
+    if (runtimeRecords?.size === 0) {
+      this.byRuntime.delete(record.binding.runtime);
+    }
+  }
+}
+
+function isValidIdentity<Runtime extends object, Fence extends object, Mode extends string>(
+  input: ContentActivationIdentity<Runtime, Fence, Mode>
+): boolean {
+  return (
+    isObject(input.runtime) &&
+    isObject(input.fence) &&
+    isNonEmptyString(input.sid) &&
+    Number.isSafeInteger(input.tabId) &&
+    input.tabId >= 0 &&
+    Number.isSafeInteger(input.frameId) &&
+    input.frameId >= 0 &&
+    isNonEmptyString(input.documentId) &&
+    isNonEmptyString(input.url) &&
+    isNonEmptyString(input.mode)
+  );
+}
+
+function matchesIdentity<Runtime extends object, Fence extends object, Mode extends string>(
+  expected: ContentActivationIdentity<Runtime, Fence, Mode>,
+  actual: ContentActivationIdentity<Runtime, Fence, Mode>
+): boolean {
+  return (
+    expected.runtime === actual.runtime &&
+    expected.fence === actual.fence &&
+    expected.sid === actual.sid &&
+    expected.tabId === actual.tabId &&
+    expected.frameId === actual.frameId &&
+    expected.documentId === actual.documentId &&
+    expected.url === actual.url &&
+    expected.mode === actual.mode
+  );
+}
+
+function matchesBinding<Runtime extends object, Fence extends object, Mode extends string>(
+  expected: ContentActivationBinding<Runtime, Fence, Mode>,
+  actual: ContentActivationBinding<Runtime, Fence, Mode>
+): boolean {
+  return (
+    matchesIdentity(expected, actual) &&
+    expected.readyId === actual.readyId &&
+    expected.activationId === actual.activationId &&
+    matchesParent(expected.parent, actual.parent)
+  );
+}
+
+function matchesPreparation<Runtime extends object, Fence extends object, Mode extends string>(
+  expected: ContentActivationBinding<Runtime, Fence, Mode>,
+  actual: ContentActivationPreparation<Runtime, Fence, Mode>
+): boolean {
+  return matchesIdentity(expected, actual) && matchesParent(expected.parent, actual.parent);
+}
+
+function matchesParent(
+  expected: ContentActivationParent | undefined,
+  actual: ContentActivationParent | undefined
+): boolean {
+  return (
+    expected === actual ||
+    (expected !== undefined &&
+      actual !== undefined &&
+      expected.frameId === actual.frameId &&
+      expected.documentId === actual.documentId)
+  );
+}
+
+function matchesStableIdentity<Runtime extends object, Fence extends object, Mode extends string>(
+  expected: ContentActivationIdentity<Runtime, Fence, Mode>,
+  actual: Omit<ContentActivationIdentity<Runtime, Fence, Mode>, "url">
+): boolean {
+  return (
+    expected.runtime === actual.runtime &&
+    expected.fence === actual.fence &&
+    expected.sid === actual.sid &&
+    expected.tabId === actual.tabId &&
+    expected.frameId === actual.frameId &&
+    expected.documentId === actual.documentId &&
+    expected.mode === actual.mode
+  );
+}
+
+function matchesRuntimeTreeIdentity<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+>(
+  candidate: ContentActivationIdentity<Runtime, Fence, Mode>,
+  root: ContentActivationIdentity<Runtime, Fence, Mode>
+): boolean {
+  return (
+    candidate.runtime === root.runtime &&
+    candidate.fence === root.fence &&
+    candidate.sid === root.sid &&
+    candidate.tabId === root.tabId &&
+    candidate.mode === root.mode
+  );
+}
+
+function toDocumentKey(input: { tabId: number; frameId: number; documentId: string }): string {
+  return JSON.stringify([input.tabId, input.frameId, input.documentId]);
+}
+
+function toSnapshot<Runtime extends object, Fence extends object, Mode extends string>(
+  record: ActivationRecord<Runtime, Fence, Mode>
+): ContentActivationSnapshot<Runtime, Fence, Mode> {
+  return Object.freeze({
+    ...record.binding,
+    state: record.state,
+    armed: record.armed
+  });
+}
+
+function isNonEmptyString(value: unknown): value is string {
+  return typeof value === "string" && value.length > 0;
+}
+
+function isValidParent(parent: ContentActivationParent | undefined, frameId: number): boolean {
+  if (frameId === 0) {
+    return parent === undefined;
+  }
+
+  return (
+    parent !== undefined &&
+    Number.isSafeInteger(parent.frameId) &&
+    parent.frameId >= 0 &&
+    parent.frameId !== frameId &&
+    isNonEmptyString(parent.documentId)
+  );
+}
+
+function isObject(value: unknown): value is object {
+  return (typeof value === "object" && value !== null) || typeof value === "function";
+}
+
+function addBoundedTombstone<Value>(tombstones: Set<Value>, value: Value): void {
+  tombstones.delete(value);
+  tombstones.add(value);
+
+  while (tombstones.size > ID_TOMBSTONE_LIMIT) {
+    const oldest = tombstones.values().next().value as Value | undefined;
+    if (oldest === undefined) {
+      break;
+    }
+    tombstones.delete(oldest);
+  }
+}
diff --git a/apps/extension/src/sw/content-document-authorization.test.ts b/apps/extension/src/sw/content-document-authorization.test.ts
new file mode 100644
index 0000000..71072a3
--- /dev/null
+++ b/apps/extension/src/sw/content-document-authorization.test.ts
@@ -0,0 +1,1379 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  ContentDocumentAuthorization,
+  TOP_CONTENT_FRAME_ID,
+  type ContentDocumentScopeDecision
+} from "./content-document-authorization.js";
+
+const TAB_ID = 7;
+const TOP_URL = "https://app.example/dashboard";
+
+describe("ContentDocumentAuthorization", () => {
+  it("requires an exact top document sender after bootstrap", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: TOP_URL });
+
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: TOP_CONTENT_FRAME_ID,
+        url: TOP_URL
+      })
+    ).toBeNull();
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: TOP_CONTENT_FRAME_ID,
+        documentId: "top-document",
+        url: "https://other.example/"
+      })
+    ).toBeNull();
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: TOP_CONTENT_FRAME_ID,
+        documentId: "top-document",
+        url: TOP_URL
+      })
+    ).toEqual({
+      frameId: TOP_CONTENT_FRAME_ID,
+      documentId: "top-document",
+      url: TOP_URL
+    });
+  });
+
+  it("requires an explicit policy-approved URL refresh without invalidating child documents", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: TOP_URL });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document",
+      url: TOP_URL
+    });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 3,
+      documentId: "child-document",
+      url: "https://widgets.example/embed"
+    });
+
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document",
+        url: "https://app.example/next"
+      })
+    ).toBeNull();
+    expect(
+      authorization.refreshKnownDocumentUrl({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document",
+        url: "https://app.example/next"
+      })
+    ).toBe(true);
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document",
+        url: "https://app.example/next"
+      })
+    ).toMatchObject({ url: "https://app.example/next" });
+    expect(authorization.get(3)?.documentId).toBe("child-document");
+  });
+
+  it("accepts a lagging sender URL only for an exact same-origin document refresh", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: TOP_URL });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document",
+      url: TOP_URL
+    });
+    const currentUrl = "https://app.example/checkout?step=payment#/confirm";
+    expect(
+      authorization.refreshKnownDocumentUrl({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document",
+        url: currentUrl
+      })
+    ).toBe(true);
+
+    expect(
+      authorization.matchesSameDocumentSender(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document",
+          url: currentUrl
+        },
+        TOP_URL
+      )
+    ).toBe(true);
+    expect(
+      authorization.matchesSameDocumentSender(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document",
+          url: currentUrl
+        },
+        "https://other.example/dashboard"
+      )
+    ).toBe(false);
+    expect(
+      authorization.matchesSameDocumentSender(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "stale-document",
+          url: currentUrl
+        },
+        TOP_URL
+      )
+    ).toBe(false);
+  });
+
+  it("lets store-safe top B prove navigation before tabs policy resolution", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: "https://app.example/a" });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url: "https://app.example/a"
+    });
+
+    expect(
+      authorization.authorizeTopSender(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document-b",
+          url: "https://app.example/b"
+        },
+        {
+          allowNavigationFallback: true,
+          currentCaptureUrl: "https://app.example/a"
+        }
+      )
+    ).toMatchObject({ documentId: "top-document-b" });
+  });
+
+  it("does not let exact-navigation mode reset pending B for stale A", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+
+    expect(
+      authorization.authorizeTopSender(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document-a",
+          url: "https://app.example/a"
+        },
+        {
+          allowNavigationFallback: false,
+          currentCaptureUrl: "https://app.example/b"
+        }
+      )
+    ).toBeNull();
+    expect(authorization.getPending(0)?.documentId).toBe("top-document-b");
+  });
+
+  it("snapshots exact active document identities for targeted deactivation", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 4,
+      documentId: "child-document",
+      url: "https://widgets.example/embed"
+    });
+
+    const documents = authorization.activeDocuments();
+    documents[0] = { ...documents[0]!, documentId: "mutated-copy" };
+
+    expect(authorization.activeDocuments()).toEqual([
+      {
+        frameId: 4,
+        documentId: "child-document",
+        url: "https://widgets.example/embed"
+      }
+    ]);
+  });
+
+  it("binds child sender matching to documentId and URL", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 4,
+      documentId: "child-document",
+      url: "https://widgets.example/embed"
+    });
+
+    expect(
+      authorization.matchesSender({
+        tabId: TAB_ID,
+        frameId: 4,
+        documentId: "child-document",
+        url: "https://widgets.example/embed"
+      })
+    ).toBe(true);
+    expect(
+      authorization.matchesSender({
+        tabId: TAB_ID,
+        frameId: 4,
+        documentId: "child-document",
+        url: "https://widgets.example/replaced"
+      })
+    ).toBe(false);
+    expect(authorization.matchesSender({ tabId: TAB_ID, frameId: 4 })).toBe(false);
+  });
+
+  it("requires webRequest events to match the exact active document", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 2,
+      documentId: "child-document",
+      url: "https://widgets.example/embed"
+    });
+
+    expect(
+      authorization.matchesWebRequest({
+        tabId: TAB_ID,
+        frameId: 2,
+        documentId: "child-document"
+      })
+    ).toBe(true);
+    expect(authorization.matchesWebRequest({ tabId: TAB_ID, frameId: 2 })).toBe(false);
+    expect(
+      authorization.matchesWebRequest({
+        tabId: TAB_ID,
+        frameId: 2,
+        documentId: "old-document"
+      })
+    ).toBe(false);
+  });
+
+  it("conditionally revokes so a late failure cannot remove its replacement", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const prepared = await prepare(authorization, 5, "new-document");
+    expect(prepared.prepared).toBe(true);
+    authorization.completePendingInjection(5, "new-document");
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 5,
+      documentId: "new-document",
+      url: "https://widgets.example/new-document"
+    });
+
+    expect(authorization.revoke(5, "old-document")).toBe(false);
+    expect(authorization.get(5)?.documentId).toBe("new-document");
+    expect(authorization.activeFrameIds()).toEqual([5]);
+    expect(authorization.revoke(5, "new-document")).toBe(true);
+    expect(authorization.get(5)).toBeNull();
+  });
+
+  it("keeps a policy-blocked child closed until a new committed navigation", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 5,
+      documentId: "blocked-child",
+      url: "https://widgets.example/blocked"
+    });
+
+    expect(authorization.blockDocument(5, "blocked-child")).toBe(true);
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 5,
+        documentId: "blocked-child",
+        url: "https://widgets.example/blocked"
+      })
+    ).toBeNull();
+  });
+
+  it("revokes a failed current top document but permits the same exact document to reconnect", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: TOP_URL });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document",
+      url: TOP_URL
+    });
+
+    expect(authorization.revoke(0, "top-document")).toBe(true);
+    expect(authorization.get(0)).toBeNull();
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document",
+        url: TOP_URL
+      })
+    ).toMatchObject({ documentId: "top-document" });
+  });
+
+  it("keeps an allowed committed navigation pending until exact content.ready", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 8,
+      documentId: "old-document",
+      url: "https://widgets.example/old"
+    });
+
+    const result = await prepare(authorization, 8, "committed-document");
+
+    expect(result).toEqual({
+      prepared: true,
+      reason: "prepared",
+      document: {
+        frameId: 8,
+        documentId: "committed-document",
+        url: "https://widgets.example/committed-document"
+      },
+      target: {
+        tabId: TAB_ID,
+        documentIds: ["committed-document"]
+      }
+    });
+    expect(authorization.get(8)).toBeNull();
+    expect(
+      authorization.matchesWebRequest({
+        tabId: TAB_ID,
+        frameId: 8,
+        documentId: "committed-document"
+      })
+    ).toBe(false);
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 8,
+        documentId: "wrong-document",
+        url: "https://widgets.example/committed-document"
+      })
+    ).toBeNull();
+    expect(authorization.completePendingInjection(8, "committed-document")).toBe(true);
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 8,
+        documentId: "committed-document",
+        url: "https://widgets.example/committed-document"
+      })
+    ).toMatchObject({ documentId: "committed-document" });
+    expect(
+      authorization.matchesWebRequest({
+        tabId: TAB_ID,
+        frameId: 8,
+        documentId: "committed-document"
+      })
+    ).toBe(true);
+  });
+
+  it("revokes before scope evaluation and keeps denied frames closed", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 6,
+      documentId: "old-document",
+      url: "https://widgets.example/old"
+    });
+
+    const result = await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 6,
+        documentId: "denied-document",
+        url: "https://denied.example/embed"
+      },
+      () => {
+        expect(authorization.get(6)).toBeNull();
+        return false;
+      }
+    );
+
+    expect(result).toMatchObject({ prepared: false, reason: "scope-denied" });
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 6,
+        documentId: "old-document",
+        url: "https://widgets.example/old"
+      })
+    ).toBeNull();
+  });
+
+  it("fails closed when a committed child omits documentId", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 9,
+      documentId: "old-document",
+      url: "https://widgets.example/old"
+    });
+
+    await expect(
+      authorization.prepareCommittedNavigation(
+        {
+          tabId: TAB_ID,
+          frameId: 9,
+          url: "https://widgets.example/new"
+        },
+        () => true
+      )
+    ).resolves.toMatchObject({ prepared: false, reason: "invalid-navigation" });
+    expect(authorization.get(9)).toBeNull();
+  });
+
+  it("does not let late B scope completion overwrite C", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const bDecision = deferred<ContentDocumentScopeDecision>();
+    const navigationB = authorization.prepareCommittedNavigation(
+      navigation(10, "document-b"),
+      () => bDecision.promise
+    );
+    const navigationC = await authorization.prepareCommittedNavigation(
+      navigation(10, "document-c"),
+      () => true
+    );
+
+    bDecision.resolve(true);
+
+    await expect(navigationB).resolves.toMatchObject({
+      prepared: false,
+      reason: "stale-navigation"
+    });
+    expect(navigationC).toMatchObject({ prepared: true });
+    expect(authorization.getPending(10)?.documentId).toBe("document-c");
+  });
+
+  it("re-evaluates the latest preparing URL before committing policy", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const firstDecision = deferred<ContentDocumentScopeDecision>();
+    const evaluated: string[] = [];
+    const preparation = authorization.prepareCommittedNavigation(
+      navigation(10, "document-b"),
+      ({ url }) => {
+        evaluated.push(url);
+        return evaluated.length === 1 ? firstDecision.promise : true;
+      }
+    );
+
+    await Promise.resolve();
+    expect(authorization.matchesKnownDocument({ frameId: 10, documentId: "document-b" })).toBe(
+      true
+    );
+    expect(
+      authorization.refreshKnownDocumentUrl({
+        tabId: TAB_ID,
+        frameId: 10,
+        documentId: "document-b",
+        url: "https://widgets.example/document-c"
+      })
+    ).toBe(true);
+    firstDecision.resolve(true);
+
+    await expect(preparation).resolves.toMatchObject({
+      prepared: true,
+      document: { url: "https://widgets.example/document-c" }
+    });
+    expect(evaluated).toEqual([
+      "https://widgets.example/document-b",
+      "https://widgets.example/document-c"
+    ]);
+  });
+
+  it("exposes preparing and pending parents without authorizing them early", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const decision = deferred<ContentDocumentScopeDecision>();
+    const preparation = authorization.prepareCommittedNavigation(
+      navigation(12, "parent-document"),
+      () => decision.promise
+    );
+
+    await Promise.resolve();
+    expect(authorization.getKnownFrameDocument(12)).toMatchObject({
+      documentId: "parent-document",
+      state: "preparing"
+    });
+    const activation = authorization.waitForKnownDocumentActivation({
+      frameId: 12,
+      documentId: "parent-document"
+    });
+    expect(activation).not.toBeNull();
+
+    decision.resolve(true);
+    await preparation;
+    expect(authorization.getKnownFrameDocument(12)).toMatchObject({
+      documentId: "parent-document",
+      state: "pending"
+    });
+    authorization.completePendingInjection(12, "parent-document");
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 12,
+      documentId: "parent-document",
+      url: "https://widgets.example/parent-document"
+    });
+
+    await expect(activation).resolves.toBe(true);
+    expect(authorization.getKnownFrameDocument(12)).toMatchObject({ state: "active" });
+  });
+
+  it("promotes only the refreshed pending URL", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    await authorization.prepareCommittedNavigation(navigation(11, "document-b"), () => true);
+    expect(
+      authorization.refreshKnownDocumentUrl({
+        tabId: TAB_ID,
+        frameId: 11,
+        documentId: "document-b",
+        url: "https://widgets.example/document-c"
+      })
+    ).toBe(true);
+    expect(authorization.completePendingInjection(11, "document-b")).toBe(true);
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 11,
+        documentId: "document-b",
+        url: "https://widgets.example/document-b"
+      })
+    ).toBeNull();
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 11,
+        documentId: "document-b",
+        url: "https://widgets.example/document-c"
+      })
+    ).toMatchObject({ url: "https://widgets.example/document-c" });
+  });
+
+  it("promotes only exact top B after A enters the navigation window", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: "https://app.example/a" });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url: "https://app.example/a"
+    });
+
+    const started = authorization.beginNavigation(0);
+    expect(started).not.toBeNull();
+    expect(authorization.get(0)).toBeNull();
+
+    const prepared = await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+
+    expect(prepared).toMatchObject({ prepared: true });
+    expect(authorization.get(0)).toBeNull();
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-a",
+        url: "https://app.example/a"
+      })
+    ).toBeNull();
+    expect(authorization.completePendingInjection(0, "top-document-b")).toBe(true);
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      })
+    ).toMatchObject({ documentId: "top-document-b" });
+  });
+
+  it("keeps a request token valid after exact commit without a webRequest documentId", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const navigationB = authorization.beginNavigation(0, "https://app.example/b");
+
+    expect(navigationB).not.toBeNull();
+    await expect(
+      authorization.prepareCommittedNavigation(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document-b",
+          url: "https://app.example/b"
+        },
+        () => true
+      )
+    ).resolves.toMatchObject({ prepared: true });
+    expect(
+      authorization.matchesNavigationCompletion({
+        authorization: navigationB!,
+        frameId: 0
+      })
+    ).toBe(true);
+  });
+
+  it("associates redirect URLs with one current request token", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const navigation = authorization.beginNavigation(0, "https://app.example/start");
+
+    expect(navigation).not.toBeNull();
+    expect(authorization.continueNavigation(navigation!, "https://app.example/final")).toEqual(
+      navigation
+    );
+    await expect(
+      authorization.prepareCommittedNavigation(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document-final",
+          url: "https://app.example/final"
+        },
+        () => true
+      )
+    ).resolves.toMatchObject({ prepared: true });
+    expect(
+      authorization.matchesNavigationCompletion({
+        authorization: navigation!,
+        frameId: 0
+      })
+    ).toBe(true);
+  });
+
+  it("lets an exact commit supersede a request lineage that missed its final redirect", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: "https://app.example/a" });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url: "https://app.example/a"
+    });
+    const request = authorization.beginNavigation(0, "https://app.example/b");
+    expect(request).not.toBeNull();
+
+    await expect(
+      authorization.prepareCommittedNavigation(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document-c",
+          url: "https://app.example/c"
+        },
+        () => true
+      )
+    ).resolves.toMatchObject({
+      prepared: true,
+      document: { documentId: "top-document-c", url: "https://app.example/c" }
+    });
+    expect(
+      authorization.matchesNavigationCompletion({
+        authorization: request!,
+        frameId: 0
+      })
+    ).toBe(false);
+  });
+
+  it("finalizes B request lineage before a later BFCache A commit", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const navigationB = authorization.beginNavigation(0, "https://app.example/b");
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+
+    expect(authorization.finalizeNavigation(navigationB!)).toBe(true);
+    expect(
+      authorization.matchesNavigationCompletion({
+        authorization: navigationB!,
+        frameId: 0
+      })
+    ).toBe(false);
+    await expect(
+      authorization.prepareCommittedNavigation(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document-a-restored",
+          url: "https://app.example/a"
+        },
+        () => true
+      )
+    ).resolves.toMatchObject({ prepared: true });
+    expect(authorization.getPending(0)?.documentId).toBe("top-document-a-restored");
+  });
+
+  it("treats same-URL store-safe commits as distinct exact documents", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const url = "https://app.example/dashboard";
+    authorization.reset({ url });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url
+    });
+
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url
+      },
+      () => true
+    );
+    expect(authorization.get(0)).toBeNull();
+    expect(authorization.completePendingInjection(0, "top-document-b")).toBe(true);
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-b",
+      url
+    });
+    expect(authorization.get(0)?.documentId).toBe("top-document-b");
+
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-c",
+        url
+      },
+      () => true
+    );
+    expect(authorization.get(0)).toBeNull();
+    expect(authorization.getPending(0)?.documentId).toBe("top-document-c");
+  });
+
+  it("records early exact ready during policy evaluation and promotes only after allow", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.beginNavigation(0, "https://app.example/b");
+    const policy = deferred<ContentDocumentScopeDecision>();
+    const preparation = authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => policy.promise
+    );
+
+    await Promise.resolve();
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      })
+    ).toBeNull();
+    const recognizedReady = authorization.waitForPreparingAuthorization({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-b",
+      url: "https://app.example/b"
+    });
+    expect(recognizedReady).not.toBeNull();
+    expect(
+      authorization.shouldStopRuntimeForDeniedSender({
+        frameId: 0,
+        documentId: "top-document-b"
+      })
+    ).toBe(false);
+    expect(authorization.get(0)).toBeNull();
+
+    policy.resolve(true);
+    await expect(preparation).resolves.toMatchObject({ prepared: true });
+    let readyResolved = false;
+    void recognizedReady?.then(() => {
+      readyResolved = true;
+    });
+    await Promise.resolve();
+    expect(readyResolved).toBe(false);
+    expect(authorization.get(0)).toBeNull();
+    expect(authorization.completePendingInjection(0, "top-document-b")).toBe(true);
+    await expect(recognizedReady).resolves.toBe(true);
+    expect(authorization.get(0)?.documentId).toBe("top-document-b");
+  });
+
+  it("recovers a pageshow ready sent before preparing through the post-injection request", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: "https://app.example/a" });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url: "https://app.example/a"
+    });
+
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      })
+    ).toBeNull();
+
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+    expect(authorization.getPending(0)?.documentId).toBe("top-document-b");
+
+    // The exact status-request delivered after duplicate-safe injection causes
+    // the singleton to send ready again while injection is not yet committed.
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      })
+    ).toBeNull();
+    const requestedReady = authorization.waitForPreparingAuthorization({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-b",
+      url: "https://app.example/b"
+    });
+    expect(requestedReady).not.toBeNull();
+    expect(authorization.completePendingInjection(0, "top-document-b")).toBe(true);
+    await expect(requestedReady).resolves.toBe(true);
+    expect(authorization.get(0)?.documentId).toBe("top-document-b");
+  });
+
+  it("keeps an acknowledged suspended singleton pending until pageshow ready", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+
+    // The suspended singleton acknowledges the exact status request without
+    // sending ready. Injection can complete, but capture stays pending.
+    expect(authorization.completePendingInjection(0, "top-document-b")).toBe(true);
+    expect(authorization.get(0)).toBeNull();
+    expect(authorization.getPending(0)?.documentId).toBe("top-document-b");
+
+    // pageshow resumes the singleton and its existing lifecycle hook requests
+    // status, which is now the only operation allowed to promote the document.
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      })
+    ).toMatchObject({ documentId: "top-document-b" });
+  });
+
+  it("cannot resurrect a preparing document after stop cancellation", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.beginNavigation(0, "https://app.example/b");
+    const policy = deferred<ContentDocumentScopeDecision>();
+    const preparation = authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => policy.promise
+    );
+
+    await Promise.resolve();
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-b",
+      url: "https://app.example/b"
+    });
+    const recognizedReady = authorization.waitForPreparingAuthorization({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-b",
+      url: "https://app.example/b"
+    });
+    expect(recognizedReady).not.toBeNull();
+    authorization.cancelPendingNavigations();
+    policy.resolve(true);
+
+    await expect(recognizedReady).resolves.toBe(false);
+    await expect(preparation).resolves.toMatchObject({
+      prepared: false,
+      reason: "stale-navigation"
+    });
+    expect(authorization.get(0)).toBeNull();
+    expect(authorization.getPending(0)).toBeNull();
+  });
+
+  it("keeps stale A children closed and recognizes only B as their parent", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: "https://app.example/a" });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url: "https://app.example/a"
+    });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 4,
+      documentId: "child-document-a",
+      url: "https://widgets.example/a"
+    });
+
+    authorization.beginNavigation(0, "https://app.example/b");
+    expect(authorization.matchesKnownDocument({ frameId: 0, documentId: "top-document-a" })).toBe(
+      false
+    );
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 4,
+        documentId: "child-document-a",
+        url: "https://widgets.example/a"
+      })
+    ).toBeNull();
+
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+    expect(authorization.matchesKnownDocument({ frameId: 0, documentId: "top-document-b" })).toBe(
+      true
+    );
+  });
+
+  it("keeps denied top B closed without restoring A", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: "https://app.example/a" });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url: "https://app.example/a"
+    });
+
+    await expect(
+      authorization.prepareCommittedNavigation(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document-b",
+          url: "https://denied.example/b"
+        },
+        () => false
+      )
+    ).resolves.toMatchObject({ prepared: false, reason: "scope-denied" });
+    expect(authorization.get(0)).toBeNull();
+    expect(authorization.getPending(0)).toBeNull();
+    expect(
+      authorization.shouldStopRuntimeForDeniedSender({
+        frameId: 0,
+        documentId: "top-document-b"
+      })
+    ).toBe(false);
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-a",
+        url: "https://app.example/a"
+      })
+    ).toBeNull();
+  });
+
+  it("does not let stale top A stop an active replacement B", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+    authorization.completePendingInjection(0, "top-document-b");
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-b",
+      url: "https://app.example/b"
+    });
+
+    expect(
+      authorization.authorize({
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-a",
+        url: "https://app.example/a"
+      })
+    ).toBeNull();
+    expect(
+      authorization.shouldStopRuntimeForDeniedSender({
+        frameId: 0,
+        documentId: "top-document-a"
+      })
+    ).toBe(false);
+    expect(
+      authorization.shouldStopRuntimeForDeniedSender({
+        frameId: 0,
+        documentId: "top-document-b"
+      })
+    ).toBe(true);
+    expect(authorization.get(0)?.documentId).toBe("top-document-b");
+  });
+
+  it("stops only the exact pending top sender, never stale A", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+
+    expect(
+      authorization.shouldStopRuntimeForDeniedSender({
+        frameId: 0,
+        documentId: "top-document-b"
+      })
+    ).toBe(true);
+    expect(
+      authorization.shouldStopRuntimeForDeniedSender({
+        frameId: 0,
+        documentId: "top-document-a"
+      })
+    ).toBe(false);
+  });
+
+  it("allows a denied top sender to fail closed only without active or pending identity", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+
+    expect(authorization.shouldStopRuntimeForDeniedSender({ frameId: 0 })).toBe(true);
+    expect(authorization.shouldStopRuntimeForDeniedSender({ frameId: 4 })).toBe(false);
+  });
+
+  it("classifies a current scope failure without letting a late B failure stop C", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+
+    await expect(
+      authorization.prepareCommittedNavigation(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          documentId: "top-document-b",
+          url: "https://app.example/b"
+        },
+        () => Promise.reject(new Error("policy unavailable"))
+      )
+    ).resolves.toMatchObject({ prepared: false, reason: "scope-error" });
+
+    const bPolicy = deferred<ContentDocumentScopeDecision>();
+    const navigationB = authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => bPolicy.promise
+    );
+    const navigationC = await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-c",
+        url: "https://app.example/c"
+      },
+      () => true
+    );
+
+    bPolicy.reject(new Error("late B policy failure"));
+    await expect(navigationB).resolves.toMatchObject({
+      prepared: false,
+      reason: "stale-navigation"
+    });
+    expect(navigationC).toMatchObject({ prepared: true });
+    expect(authorization.getPending(0)?.documentId).toBe("top-document-c");
+  });
+
+  it("keeps a superseded top navigation token and completion stale", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const navigationB = authorization.beginNavigation(0);
+    expect(navigationB).not.toBeNull();
+
+    const navigationC = authorization.beginNavigation(0);
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-c",
+        url: "https://app.example/c"
+      },
+      () => true
+    );
+
+    expect(navigationB).not.toBeNull();
+    expect(navigationC).not.toBeNull();
+    expect(
+      authorization.matchesNavigationCompletion({
+        authorization: navigationB!,
+        frameId: 0,
+        documentId: "top-document-b"
+      })
+    ).toBe(false);
+    expect(authorization.getPending(0)?.documentId).toBe("top-document-c");
+  });
+
+  it("fails closed when a committed top document omits documentId", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+
+    await expect(
+      authorization.prepareCommittedNavigation(
+        {
+          tabId: TAB_ID,
+          frameId: 0,
+          url: "https://app.example/b"
+        },
+        () => true
+      )
+    ).resolves.toMatchObject({ prepared: false, reason: "invalid-navigation" });
+    expect(authorization.get(0)).toBeNull();
+    expect(authorization.getPending(0)).toBeNull();
+  });
+
+  it("does not let a late B injection failure cancel pending or active C", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    await prepare(authorization, 10, "document-b");
+    await prepare(authorization, 10, "document-c");
+
+    expect(authorization.failNavigation(10, "document-b")).toBe(false);
+    expect(authorization.getPending(10)?.documentId).toBe("document-c");
+
+    authorization.completePendingInjection(10, "document-c");
+    authorization.authorize(navigation(10, "document-c"));
+    expect(authorization.failNavigation(10, "document-b")).toBe(false);
+    expect(authorization.get(10)?.documentId).toBe("document-c");
+  });
+
+  it("atomically blocks an exact parent and all active, pending, and preparing descendants", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: TOP_URL });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document",
+      url: TOP_URL
+    });
+    authorization.authorize(navigation(4, "parent-document"));
+    authorization.authorize(navigation(8, "unrelated-sibling"));
+    await prepare(authorization, 5, "pending-child");
+    await prepare(authorization, 6, "pending-grandchild");
+    const preparingDecision = deferred<ContentDocumentScopeDecision>();
+    const preparingGreatGrandchild = authorization.prepareCommittedNavigation(
+      navigation(7, "preparing-great-grandchild"),
+      () => preparingDecision.promise
+    );
+    await Promise.resolve();
+
+    authorization.authorize(navigation(5, "pending-child"));
+    authorization.authorize(navigation(6, "pending-grandchild"));
+    const pendingChildOutcome = authorization.waitForPreparingAuthorization(
+      navigation(5, "pending-child")
+    );
+    const pendingGrandchildOutcome = authorization.waitForPreparingAuthorization(
+      navigation(6, "pending-grandchild")
+    );
+    const parents = new Map([
+      ["4:parent-document", { frameId: 0, documentId: "top-document" }],
+      ["5:pending-child", { frameId: 4, documentId: "parent-document" }],
+      ["6:pending-grandchild", { frameId: 5, documentId: "pending-child" }],
+      ["7:preparing-great-grandchild", { frameId: 6, documentId: "pending-grandchild" }],
+      ["8:unrelated-sibling", { frameId: 0, documentId: "top-document" }]
+    ]);
+
+    const removed = authorization.blockKnownDocumentSubtree(
+      { frameId: 4, documentId: "parent-document" },
+      (document) => parents.get(`${document.frameId}:${document.documentId}`)
+    );
+
+    for (const document of removed) {
+      parents.delete(`${document.frameId}:${document.documentId}`);
+    }
+
+    expect(removed).toEqual([
+      expect.objectContaining({ frameId: 4, documentId: "parent-document", state: "active" }),
+      expect.objectContaining({ frameId: 5, documentId: "pending-child", state: "pending" }),
+      expect.objectContaining({ frameId: 6, documentId: "pending-grandchild", state: "pending" }),
+      expect.objectContaining({
+        frameId: 7,
+        documentId: "preparing-great-grandchild",
+        state: "preparing"
+      })
+    ]);
+    await expect(pendingChildOutcome).resolves.toBe(false);
+    await expect(pendingGrandchildOutcome).resolves.toBe(false);
+    expect(authorization.beginNavigation(4, "https://widgets.example/replacement")).not.toBeNull();
+    expect(authorization.get(4)).toBeNull();
+    expect(authorization.getPending(5)).toBeNull();
+    expect(authorization.getPending(6)).toBeNull();
+    expect(
+      authorization.matchesKnownDocument({
+        frameId: 6,
+        documentId: "pending-grandchild"
+      })
+    ).toBe(false);
+    expect(authorization.get(8)?.documentId).toBe("unrelated-sibling");
+    expect(parents).toEqual(
+      new Map([["8:unrelated-sibling", { frameId: 0, documentId: "top-document" }]])
+    );
+
+    preparingDecision.resolve(true);
+    await expect(preparingGreatGrandchild).resolves.toMatchObject({
+      prepared: false,
+      reason: "stale-navigation"
+    });
+  });
+
+  it("fails closed for missing or cyclic exact ancestry during subtree cleanup", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: TOP_URL });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document",
+      url: TOP_URL
+    });
+    authorization.authorize(navigation(4, "parent-document"));
+    authorization.authorize(navigation(8, "valid-sibling"));
+    authorization.authorize(navigation(9, "missing-parent"));
+    authorization.authorize(navigation(10, "cycle-a"));
+    authorization.authorize(navigation(11, "cycle-b"));
+    const parents = new Map([
+      ["4:parent-document", { frameId: 0, documentId: "top-document" }],
+      ["8:valid-sibling", { frameId: 0, documentId: "top-document" }],
+      ["10:cycle-a", { frameId: 11, documentId: "cycle-b" }],
+      ["11:cycle-b", { frameId: 10, documentId: "cycle-a" }]
+    ]);
+
+    const removed = authorization.blockKnownDocumentSubtree(
+      { frameId: 4, documentId: "parent-document" },
+      (document) => parents.get(`${document.frameId}:${document.documentId}`)
+    );
+
+    expect(removed.map(({ documentId }) => documentId)).toEqual([
+      "parent-document",
+      "missing-parent",
+      "cycle-a",
+      "cycle-b"
+    ]);
+    expect(authorization.get(8)?.documentId).toBe("valid-sibling");
+    for (const documentId of ["parent-document", "missing-parent", "cycle-a", "cycle-b"]) {
+      expect(
+        authorization.matchesKnownDocument({
+          frameId:
+            documentId === "parent-document"
+              ? 4
+              : documentId === "missing-parent"
+                ? 9
+                : documentId === "cycle-a"
+                  ? 10
+                  : 11,
+          documentId
+        })
+      ).toBe(false);
+    }
+  });
+
+  it("revokes a sender promoted during a failed exact injection", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    await prepare(authorization, 12, "document-d");
+    authorization.authorize(navigation(12, "document-d"));
+
+    expect(authorization.failNavigation(12, "document-d")).toBe(true);
+    expect(authorization.get(12)).toBeNull();
+    expect(authorization.authorize(navigation(12, "document-d"))).toBeNull();
+  });
+});
+
+function navigation(frameId: number, documentId: string) {
+  return {
+    tabId: TAB_ID,
+    frameId,
+    documentId,
+    url: `https://widgets.example/${documentId}`
+  };
+}
+
+function prepare(authorization: ContentDocumentAuthorization, frameId: number, documentId: string) {
+  return authorization.prepareCommittedNavigation(navigation(frameId, documentId), () => true);
+}
+
+function deferred<T>(): {
+  promise: Promise<T>;
+  resolve: (value: T) => void;
+  reject: (reason?: unknown) => void;
+} {
+  let resolve!: (value: T) => void;
+  let reject!: (reason?: unknown) => void;
+  const promise = new Promise<T>((resolvePromise, rejectPromise) => {
+    resolve = resolvePromise;
+    reject = rejectPromise;
+  });
+
+  return { promise, resolve, reject };
+}
diff --git a/apps/extension/src/sw/content-document-authorization.ts b/apps/extension/src/sw/content-document-authorization.ts
new file mode 100644
index 0000000..3a3d741
--- /dev/null
+++ b/apps/extension/src/sw/content-document-authorization.ts
@@ -0,0 +1,1270 @@
+export const TOP_CONTENT_FRAME_ID = 0;
+
+export type AuthorizedContentDocument = Readonly<{
+  frameId: number;
+  documentId: string;
+  url: string;
+}>;
+
+export type ExactContentDocumentIdentity = Readonly<{
+  frameId: number;
+  documentId: string;
+}>;
+
+export type KnownContentDocument = AuthorizedContentDocument &
+  Readonly<{
+    state: "active" | "pending" | "preparing";
+  }>;
+
+export type ContentDocumentParentResolver = (
+  document: AuthorizedContentDocument
+) => ExactContentDocumentIdentity | null | undefined;
+
+export type ContentDocumentAuthorizationInput = {
+  tabId: number;
+  frameId: number;
+  documentId?: string;
+  url: string;
+};
+
+export type ContentDocumentIdentityInput = {
+  tabId: number;
+  frameId?: number;
+  documentId?: string;
+  url?: string;
+};
+
+export type ContentDocumentScopeInput = Readonly<{
+  tabId: number;
+  frameId: number;
+  documentId: string;
+  url: string;
+  topLevel: boolean;
+}>;
+
+export type ContentDocumentScopeDecision = boolean | Readonly<{ allowed: boolean }>;
+
+export type ContentDocumentScopeEvaluator = (
+  input: ContentDocumentScopeInput
+) => ContentDocumentScopeDecision | Promise<ContentDocumentScopeDecision>;
+
+export type ExactDocumentInjectionTarget = Readonly<{
+  tabId: number;
+  documentIds: [string];
+}>;
+
+export type CommittedDocumentPreparationResult =
+  | Readonly<{
+      prepared: true;
+      reason: "prepared";
+      document: AuthorizedContentDocument;
+      target: ExactDocumentInjectionTarget;
+    }>
+  | Readonly<{
+      prepared: false;
+      reason: "invalid-navigation" | "scope-denied" | "scope-error" | "stale-navigation";
+      document: null;
+      target: null;
+    }>;
+
+type AuthorizationRevision = Readonly<{
+  epoch: number;
+  frameRevision: number;
+}>;
+
+export type ContentNavigationAuthorization = Readonly<{
+  frameId: number;
+  epoch: number;
+  frameRevision: number;
+}>;
+
+type PendingContentDocument = {
+  document: AuthorizedContentDocument;
+  revision: AuthorizationRevision;
+  ready: boolean;
+  injectionComplete: boolean;
+  outcome: PreparingAuthorizationOutcome;
+};
+
+type PreparingContentDocument = {
+  document: AuthorizedContentDocument;
+  revision: AuthorizationRevision;
+  ready: boolean;
+  outcome: PreparingAuthorizationOutcome;
+};
+
+type PreparingAuthorizationOutcome = Readonly<{
+  promise: Promise<boolean>;
+  resolve: (allowed: boolean) => void;
+}>;
+
+type NavigationStart = Readonly<{
+  authorization: ContentNavigationAuthorization;
+  source: "request" | "commit";
+  urls: Set<string>;
+}>;
+
+/**
+ * Tracks the exact Chrome document authorized in every frame.
+ *
+ * Committed navigations remain pending until an exact content-script sender
+ * proves the new document identity. WebRequest matching only consults active
+ * documents, so navigation commit cannot open an early subresource window.
+ */
+export class ContentDocumentAuthorization {
+  readonly tabId: number;
+
+  private epoch = 0;
+  private topBootstrapUrl: string | null = null;
+  private readonly frameRevisions = new Map<number, number>();
+  private readonly documents = new Map<number, AuthorizedContentDocument>();
+  private readonly pendingDocuments = new Map<number, PendingContentDocument>();
+  private readonly preparingDocuments = new Map<number, PreparingContentDocument>();
+  private readonly navigationStarts = new Map<number, NavigationStart>();
+  private readonly navigationBlockedFrames = new Set<number>();
+  private requireCommittedChildNavigation = false;
+
+  constructor(tabId: number) {
+    if (!isFrameOrTabId(tabId)) {
+      throw new TypeError("Content document authorization requires a valid tabId.");
+    }
+
+    this.tabId = tabId;
+  }
+
+  /**
+   * Authorizes an exact content-script sender. A pending navigation can only be
+   * promoted by the same documentId and URL. Initial child injection is allowed
+   * only before that frame has entered a navigation-blocked state.
+   */
+  authorize(input: ContentDocumentAuthorizationInput): AuthorizedContentDocument | null {
+    return this.authorizeInput(input, true);
+  }
+
+  authorizeEvent(input: ContentDocumentAuthorizationInput): AuthorizedContentDocument | null {
+    return this.authorizeInput(input, false);
+  }
+
+  private authorizeInput(
+    input: ContentDocumentAuthorizationInput,
+    ready: boolean
+  ): AuthorizedContentDocument | null {
+    const normalized = normalizeAuthorizationInput(this.tabId, input);
+
+    if (!normalized) {
+      return null;
+    }
+
+    const current = this.documents.get(normalized.frameId);
+
+    if (current) {
+      if (current.documentId !== normalized.documentId || current.url !== normalized.url) {
+        return null;
+      }
+
+      return { ...current };
+    }
+
+    const pending = this.pendingDocuments.get(normalized.frameId);
+
+    if (pending) {
+      if (!sameDocument(pending.document, normalized)) {
+        return null;
+      }
+
+      if (ready) {
+        pending.ready = true;
+      }
+
+      if (!pending.ready || !pending.injectionComplete) {
+        return null;
+      }
+
+      this.pendingDocuments.delete(normalized.frameId);
+      this.navigationBlockedFrames.delete(normalized.frameId);
+      const authorized = this.store(normalized);
+      pending.outcome.resolve(true);
+      return authorized;
+    }
+
+    const preparing = this.preparingDocuments.get(normalized.frameId);
+
+    if (preparing) {
+      if (!sameDocument(preparing.document, normalized)) {
+        return null;
+      }
+
+      if (ready) {
+        preparing.ready = true;
+      }
+      return null;
+    }
+
+    if (normalized.frameId === TOP_CONTENT_FRAME_ID) {
+      if (this.topBootstrapUrl !== normalized.url) {
+        return null;
+      }
+
+      this.topBootstrapUrl = null;
+      return this.store(normalized);
+    }
+
+    if (
+      this.navigationBlockedFrames.has(normalized.frameId) ||
+      this.requireCommittedChildNavigation
+    ) {
+      return null;
+    }
+
+    return this.store(normalized);
+  }
+
+  /**
+   * Runtimes without exact webNavigation tracking may use a new top sender as
+   * fallback navigation proof. Exact-tracked runtimes must never use this reset
+   * because it would bypass the committed-document gate.
+   */
+  authorizeTopSender(
+    input: ContentDocumentAuthorizationInput,
+    options: { allowNavigationFallback: boolean; currentCaptureUrl: string; ready?: boolean }
+  ): AuthorizedContentDocument | null {
+    const normalized = normalizeAuthorizationInput(this.tabId, input);
+
+    if (!normalized || normalized.frameId !== TOP_CONTENT_FRAME_ID) {
+      return null;
+    }
+
+    if (options.allowNavigationFallback) {
+      const current = this.documents.get(TOP_CONTENT_FRAME_ID);
+
+      if (
+        (current && current.documentId !== normalized.documentId) ||
+        (current && current.url !== normalized.url) ||
+        (!current && options.currentCaptureUrl !== normalized.url)
+      ) {
+        this.reset({ url: normalized.url });
+      }
+    }
+
+    const authorizedInput = { tabId: this.tabId, ...normalized };
+    return options.ready === false
+      ? this.authorizeEvent(authorizedInput)
+      : this.authorize(authorizedInput);
+  }
+
+  /**
+   * Revokes an active frame after an explicit document-lifecycle failure.
+   * documentId keeps a late failure from removing a replacement document in
+   * the reused frame. Transport disconnects must not call this method.
+   */
+  revoke(frameId: number, documentId?: string): boolean {
+    const normalizedFrameId = normalizeFrameId(frameId);
+
+    if (normalizedFrameId === null) {
+      return false;
+    }
+
+    const expectedDocumentId =
+      documentId === undefined ? undefined : normalizeDocumentId(documentId);
+    if (documentId !== undefined && expectedDocumentId === null) {
+      return false;
+    }
+
+    const current = this.documents.get(normalizedFrameId);
+    if (
+      !current ||
+      (expectedDocumentId !== undefined && current.documentId !== expectedDocumentId)
+    ) {
+      return false;
+    }
+
+    if (normalizedFrameId === TOP_CONTENT_FRAME_ID) {
+      const reconnectUrl = current.url;
+      this.invalidateAll();
+      this.topBootstrapUrl = reconnectUrl;
+    } else {
+      this.documents.delete(normalizedFrameId);
+      this.navigationBlockedFrames.delete(normalizedFrameId);
+      this.bumpFrameRevision(normalizedFrameId);
+    }
+
+    return true;
+  }
+
+  /**
+   * Removes an exact child document while keeping its frame closed until a
+   * later committed navigation establishes a new trusted parent chain.
+   */
+  blockDocument(frameId: number, documentId: string): boolean {
+    const normalizedFrameId = normalizeFrameId(frameId);
+    const normalizedDocumentId = normalizeDocumentId(documentId);
+
+    if (
+      normalizedFrameId === null ||
+      normalizedFrameId === TOP_CONTENT_FRAME_ID ||
+      normalizedDocumentId === null
+    ) {
+      return false;
+    }
+
+    const activeMatches =
+      this.documents.get(normalizedFrameId)?.documentId === normalizedDocumentId;
+    const pendingMatches =
+      this.pendingDocuments.get(normalizedFrameId)?.document.documentId === normalizedDocumentId;
+    const preparingMatches =
+      this.preparingDocuments.get(normalizedFrameId)?.document.documentId === normalizedDocumentId;
+
+    if (!activeMatches && !pendingMatches && !preparingMatches) {
+      return false;
+    }
+
+    if (activeMatches) {
+      this.documents.delete(normalizedFrameId);
+    }
+    if (pendingMatches) {
+      this.rejectPendingDocument(normalizedFrameId);
+    }
+    if (preparingMatches) {
+      this.rejectPreparingDocument(normalizedFrameId);
+    }
+    this.navigationStarts.delete(normalizedFrameId);
+    this.navigationBlockedFrames.add(normalizedFrameId);
+    this.bumpFrameRevision(normalizedFrameId);
+    return true;
+  }
+
+  /**
+   * Synchronously blocks an exact document and every known descendant across
+   * active, pending, and preparing state. Parentage comes exclusively from the
+   * supplied exact-identity resolver; non-top documents with missing, invalid,
+   * or cyclic ancestry are also removed fail closed.
+   *
+   * The returned snapshots let callers remove companion state keyed by the
+   * same identities without retaining a stale document as a future parent.
+   */
+  blockKnownDocumentSubtree(
+    root: ExactContentDocumentIdentity,
+    resolveParent: ContentDocumentParentResolver
+  ): KnownContentDocument[] {
+    const rootFrameId = normalizeFrameId(root.frameId);
+    const rootDocumentId = normalizeDocumentId(root.documentId);
+
+    if (rootFrameId === null || rootDocumentId === null) {
+      return [];
+    }
+
+    const rootKey = exactDocumentIdentityKey({
+      frameId: rootFrameId,
+      documentId: rootDocumentId
+    });
+    const known = this.snapshotKnownDocuments();
+    const documentsByKey = new Map(
+      known.map((document) => [exactDocumentIdentityKey(document), document] as const)
+    );
+    const parentsByKey = new Map<string, ExactContentDocumentIdentity | null | "invalid">();
+
+    for (const document of known) {
+      const key = exactDocumentIdentityKey(document);
+
+      if (key === rootKey || document.frameId === TOP_CONTENT_FRAME_ID) {
+        parentsByKey.set(key, null);
+        continue;
+      }
+
+      try {
+        const parent = resolveParent(document);
+        const parentFrameId = parent ? normalizeFrameId(parent.frameId) : null;
+        const parentDocumentId = parent ? normalizeDocumentId(parent.documentId) : null;
+
+        parentsByKey.set(
+          key,
+          parentFrameId === null || parentDocumentId === null
+            ? "invalid"
+            : { frameId: parentFrameId, documentId: parentDocumentId }
+        );
+      } catch {
+        parentsByKey.set(key, "invalid");
+      }
+    }
+
+    type Ancestry = "descendant" | "unrelated" | "invalid";
+    const ancestryByKey = new Map<string, Ancestry>();
+    const visiting = new Set<string>();
+    const classify = (key: string): Ancestry => {
+      if (key === rootKey) {
+        return "descendant";
+      }
+
+      const classified = ancestryByKey.get(key);
+      if (classified) {
+        return classified;
+      }
+
+      if (visiting.has(key)) {
+        return "invalid";
+      }
+
+      const document = documentsByKey.get(key);
+      if (!document) {
+        return "invalid";
+      }
+
+      if (document.frameId === TOP_CONTENT_FRAME_ID) {
+        ancestryByKey.set(key, "unrelated");
+        return "unrelated";
+      }
+
+      const parent = parentsByKey.get(key);
+      if (!parent || parent === "invalid") {
+        ancestryByKey.set(key, "invalid");
+        return "invalid";
+      }
+
+      const parentKey = exactDocumentIdentityKey(parent);
+      visiting.add(key);
+      const result = parentKey === rootKey ? "descendant" : classify(parentKey);
+      visiting.delete(key);
+      ancestryByKey.set(key, result);
+      return result;
+    };
+
+    const removed = known.filter((document) => {
+      const ancestry = classify(exactDocumentIdentityKey(document));
+      return ancestry === "descendant" || ancestry === "invalid";
+    });
+
+    for (const document of removed) {
+      if (this.documents.get(document.frameId)?.documentId === document.documentId) {
+        this.documents.delete(document.frameId);
+      }
+
+      if (
+        this.pendingDocuments.get(document.frameId)?.document.documentId === document.documentId
+      ) {
+        this.rejectPendingDocument(document.frameId);
+      }
+
+      if (
+        this.preparingDocuments.get(document.frameId)?.document.documentId === document.documentId
+      ) {
+        this.rejectPreparingDocument(document.frameId);
+      }
+
+      this.navigationStarts.delete(document.frameId);
+      this.navigationBlockedFrames.add(document.frameId);
+      this.bumpFrameRevision(document.frameId);
+    }
+
+    if (removed.some((document) => document.frameId === TOP_CONTENT_FRAME_ID)) {
+      this.topBootstrapUrl = null;
+      this.requireCommittedChildNavigation = true;
+    }
+
+    return removed.map((document) => ({ ...document }));
+  }
+
+  /** Clears all identities and seeds the URL that an exact top sender must prove. */
+  reset(topDocument?: { url: string }): void {
+    this.invalidateAll();
+    this.topBootstrapUrl = isNonEmptyString(topDocument?.url) ? topDocument.url : null;
+  }
+
+  get(frameId: number): AuthorizedContentDocument | null {
+    const normalizedFrameId = normalizeFrameId(frameId);
+    const document = normalizedFrameId === null ? undefined : this.documents.get(normalizedFrameId);
+    return document ? { ...document } : null;
+  }
+
+  getPending(frameId: number): AuthorizedContentDocument | null {
+    const normalizedFrameId = normalizeFrameId(frameId);
+    const pending =
+      normalizedFrameId === null ? undefined : this.pendingDocuments.get(normalizedFrameId);
+    return pending ? { ...pending.document } : null;
+  }
+
+  getKnownDocument(frameId: number, documentId: string): AuthorizedContentDocument | null {
+    const normalizedFrameId = normalizeFrameId(frameId);
+    const normalizedDocumentId = normalizeDocumentId(documentId);
+
+    if (normalizedFrameId === null || normalizedDocumentId === null) {
+      return null;
+    }
+
+    const candidates = [
+      this.documents.get(normalizedFrameId),
+      this.pendingDocuments.get(normalizedFrameId)?.document,
+      this.preparingDocuments.get(normalizedFrameId)?.document
+    ];
+    const document = candidates.find((candidate) => candidate?.documentId === normalizedDocumentId);
+    return document ? { ...document } : null;
+  }
+
+  /** Returns the single current exact identity regardless of activation stage. */
+  getKnownFrameDocument(frameId: number): KnownContentDocument | null {
+    const normalizedFrameId = normalizeFrameId(frameId);
+
+    if (normalizedFrameId === null) {
+      return null;
+    }
+
+    const active = this.documents.get(normalizedFrameId);
+    if (active) {
+      return { ...active, state: "active" };
+    }
+
+    const pending = this.pendingDocuments.get(normalizedFrameId)?.document;
+    if (pending) {
+      return { ...pending, state: "pending" };
+    }
+
+    const preparing = this.preparingDocuments.get(normalizedFrameId)?.document;
+    return preparing ? { ...preparing, state: "preparing" } : null;
+  }
+
+  /**
+   * Lets a committed child wait for its exact parent to finish policy,
+   * injection, and sender promotion instead of dropping the child commit while
+   * the parent is still preparing or pending.
+   */
+  waitForKnownDocumentActivation(input: ExactContentDocumentIdentity): Promise<boolean> | null {
+    const frameId = normalizeFrameId(input.frameId);
+    const documentId = normalizeDocumentId(input.documentId);
+
+    if (frameId === null || documentId === null) {
+      return null;
+    }
+
+    if (this.documents.get(frameId)?.documentId === documentId) {
+      return Promise.resolve(true);
+    }
+
+    const pending = this.pendingDocuments.get(frameId);
+    if (pending?.document.documentId === documentId) {
+      return pending.outcome.promise;
+    }
+
+    const preparing = this.preparingDocuments.get(frameId);
+    return preparing?.document.documentId === documentId ? preparing.outcome.promise : null;
+  }
+
+  /**
+   * Refreshes only the URL of an already-known exact document. This preserves
+   * pending injection gates during early SPA bootstrap without authorizing a
+   * new document or frame identity.
+   */
+  refreshKnownDocumentUrl(input: ContentDocumentAuthorizationInput): boolean {
+    const normalized = normalizeAuthorizationInput(this.tabId, input);
+
+    if (!normalized) {
+      return false;
+    }
+
+    const current = this.documents.get(normalized.frameId);
+    if (current?.documentId === normalized.documentId) {
+      this.store(normalized);
+      return true;
+    }
+
+    const pending = this.pendingDocuments.get(normalized.frameId);
+    if (pending?.document.documentId === normalized.documentId) {
+      pending.document = Object.freeze({ ...normalized });
+      this.navigationStarts.get(normalized.frameId)?.urls.add(normalized.url);
+      return true;
+    }
+
+    const preparing = this.preparingDocuments.get(normalized.frameId);
+    if (preparing?.document.documentId === normalized.documentId) {
+      preparing.document = Object.freeze({ ...normalized });
+      this.navigationStarts.get(normalized.frameId)?.urls.add(normalized.url);
+      return true;
+    }
+
+    return false;
+  }
+
+  waitForPreparingAuthorization(input: ContentDocumentAuthorizationInput): Promise<boolean> | null {
+    const normalized = normalizeAuthorizationInput(this.tabId, input);
+
+    if (!normalized) {
+      return null;
+    }
+
+    const preparing = this.preparingDocuments.get(normalized.frameId);
+
+    if (preparing?.ready === true && sameDocument(preparing.document, normalized)) {
+      return preparing.outcome.promise;
+    }
+
+    const pending = this.pendingDocuments.get(normalized.frameId);
+    return pending?.ready === true && sameDocument(pending.document, normalized)
+      ? pending.outcome.promise
+      : null;
+  }
+
+  /**
+   * A denied top sender may stop capture when it is the exact active/pending
+   * document, or when no top identity/navigation window exists. Stale A
+   * senders must never be able to stop an active or pending replacement B/C.
+   */
+  shouldStopRuntimeForDeniedSender(input: { frameId: number; documentId?: string }): boolean {
+    const normalizedFrameId = normalizeFrameId(input.frameId);
+
+    if (normalizedFrameId !== TOP_CONTENT_FRAME_ID) {
+      return false;
+    }
+
+    const documentId = normalizeDocumentId(input.documentId);
+    const preparing = this.preparingDocuments.get(TOP_CONTENT_FRAME_ID);
+
+    if (preparing) {
+      return (
+        documentId !== null && preparing.document.documentId === documentId && !preparing.ready
+      );
+    }
+
+    const pending = this.pendingDocuments.get(TOP_CONTENT_FRAME_ID)?.document;
+
+    if (pending) {
+      const pendingState = this.pendingDocuments.get(TOP_CONTENT_FRAME_ID)!;
+      return documentId !== null && pending.documentId === documentId && !pendingState.ready;
+    }
+
+    const active = this.documents.get(TOP_CONTENT_FRAME_ID);
+
+    if (active) {
+      return documentId !== null && active.documentId === documentId;
+    }
+
+    return !this.navigationBlockedFrames.has(TOP_CONTENT_FRAME_ID);
+  }
+
+  activeFrameIds(): number[] {
+    return [...this.documents.keys()].sort((left, right) => left - right);
+  }
+
+  activeDocuments(): AuthorizedContentDocument[] {
+    return [...this.documents.values()]
+      .sort((left, right) => left.frameId - right.frameId)
+      .map((document) => ({ ...document }));
+  }
+
+  matchesSender(input: ContentDocumentIdentityInput): boolean {
+    const identity = normalizeIdentityInput(this.tabId, input, true);
+
+    if (!identity) {
+      return false;
+    }
+
+    const authorized = this.documents.get(identity.frameId);
+    return authorized ? sameDocument(authorized, identity) : false;
+  }
+
+  /**
+   * Chrome may retain MessageSender.url from document creation after a
+   * history/hash navigation. Exact webNavigation ownership can accept that
+   * lag only for the same active document and same origin.
+   */
+  matchesSameDocumentSender(
+    input: ContentDocumentAuthorizationInput,
+    senderUrl: string | undefined
+  ): boolean {
+    const normalized = normalizeAuthorizationInput(this.tabId, input);
+
+    if (
+      !normalized ||
+      typeof senderUrl !== "string" ||
+      senderUrl.length === 0 ||
+      senderUrl === normalized.url
+    ) {
+      return false;
+    }
+
+    const authorized = this.documents.get(normalized.frameId);
+    return Boolean(
+      authorized &&
+      sameDocument(authorized, normalized) &&
+      haveSameUrlOrigin(senderUrl, normalized.url)
+    );
+  }
+
+  /** WebRequest access always requires an exact active documentId match. */
+  matchesWebRequest(input: ContentDocumentIdentityInput): boolean {
+    const identity = normalizeIdentityInput(this.tabId, input, false);
+
+    if (!identity) {
+      return false;
+    }
+
+    return this.documents.get(identity.frameId)?.documentId === identity.documentId;
+  }
+
+  matchesKnownDocument(input: { frameId: number; documentId?: string }): boolean {
+    const frameId = normalizeFrameId(input.frameId);
+    const documentId = normalizeDocumentId(input.documentId);
+
+    if (frameId === null || documentId === null) {
+      return false;
+    }
+
+    return (
+      this.documents.get(frameId)?.documentId === documentId ||
+      this.pendingDocuments.get(frameId)?.document.documentId === documentId ||
+      this.preparingDocuments.get(frameId)?.document.documentId === documentId
+    );
+  }
+
+  /** Immediately closes a frame while a sub-frame navigation is unresolved. */
+  beginNavigation(frameId: number, url?: string): ContentNavigationAuthorization | null {
+    return this.beginNavigationWithSource(frameId, url, "request");
+  }
+
+  continueNavigation(
+    authorization: ContentNavigationAuthorization,
+    url: string
+  ): ContentNavigationAuthorization | null {
+    if (!isNonEmptyString(url) || !this.matchesNavigationRevision(authorization)) {
+      return null;
+    }
+
+    const start = this.navigationStarts.get(authorization.frameId);
+
+    if (!start || !sameNavigationAuthorization(start.authorization, authorization)) {
+      return null;
+    }
+
+    start.urls.add(url);
+    return { ...authorization };
+  }
+
+  finalizeNavigation(authorization: ContentNavigationAuthorization): boolean {
+    const start = this.navigationStarts.get(authorization.frameId);
+
+    if (
+      !start ||
+      !sameNavigationAuthorization(start.authorization, authorization) ||
+      !this.matchesNavigationRevision(authorization)
+    ) {
+      return false;
+    }
+
+    this.navigationStarts.delete(authorization.frameId);
+    return true;
+  }
+
+  private beginNavigationWithSource(
+    frameId: number,
+    url: string | undefined,
+    source: NavigationStart["source"]
+  ): ContentNavigationAuthorization | null {
+    const normalizedFrameId = normalizeFrameId(frameId);
+
+    if (normalizedFrameId === null) {
+      return null;
+    }
+
+    if (normalizedFrameId === TOP_CONTENT_FRAME_ID) {
+      this.invalidateAll();
+      this.requireCommittedChildNavigation = true;
+      this.navigationBlockedFrames.add(TOP_CONTENT_FRAME_ID);
+      this.bumpFrameRevision(TOP_CONTENT_FRAME_ID);
+      const authorization = this.toNavigationAuthorization(
+        TOP_CONTENT_FRAME_ID,
+        this.currentRevision(TOP_CONTENT_FRAME_ID)
+      );
+      this.storeNavigationStart(authorization, url, source);
+      return authorization;
+    }
+
+    this.documents.delete(normalizedFrameId);
+    this.rejectPendingDocument(normalizedFrameId);
+    this.rejectPreparingDocument(normalizedFrameId);
+    this.navigationStarts.delete(normalizedFrameId);
+    this.navigationBlockedFrames.add(normalizedFrameId);
+    this.bumpFrameRevision(normalizedFrameId);
+    const authorization = this.toNavigationAuthorization(
+      normalizedFrameId,
+      this.currentRevision(normalizedFrameId)
+    );
+    this.storeNavigationStart(authorization, url, source);
+    return authorization;
+  }
+
+  /**
+   * Accepts a navigation completion only while its start revision is still
+   * current, or after the exact committed document has become pending/active.
+   * This keeps a superseded request completion from reopening an older URL.
+   */
+  matchesNavigationCompletion(input: {
+    authorization: ContentNavigationAuthorization;
+    frameId: number;
+    documentId?: string;
+  }): boolean {
+    const frameId = normalizeFrameId(input.frameId);
+
+    if (frameId === null || input.authorization.frameId !== frameId) {
+      return false;
+    }
+
+    const start = this.navigationStarts.get(frameId);
+    return (
+      start !== undefined &&
+      sameNavigationAuthorization(start.authorization, input.authorization) &&
+      this.matchesNavigationRevision(input.authorization)
+    );
+  }
+
+  /**
+   * Revokes the old frame before evaluating a committed destination. Allowed
+   * destinations become pending exact injection targets, never active capture.
+   */
+  async prepareCommittedNavigation(
+    input: ContentDocumentAuthorizationInput,
+    evaluateScope: ContentDocumentScopeEvaluator
+  ): Promise<CommittedDocumentPreparationResult> {
+    if (input.tabId !== this.tabId) {
+      return denied("invalid-navigation");
+    }
+
+    const frameId = normalizeFrameId(input.frameId);
+    if (frameId === null) {
+      return denied("invalid-navigation");
+    }
+
+    const normalized = normalizeAuthorizationInput(this.tabId, input);
+    const currentStart = this.navigationStarts.get(frameId);
+
+    if (currentStart) {
+      if (currentStart.urls.size === 0 && isNonEmptyString(input.url)) {
+        currentStart.urls.add(input.url);
+      } else if (!currentStart.urls.has(input.url)) {
+        const authorization = this.beginNavigationWithSource(frameId, input.url, "commit");
+        if (!authorization) {
+          return denied("invalid-navigation");
+        }
+      }
+    } else {
+      const authorization = this.beginNavigationWithSource(frameId, input.url, "commit");
+      if (!authorization) {
+        return denied("invalid-navigation");
+      }
+    }
+
+    if (this.navigationStarts.get(frameId)?.source === "commit") {
+      this.navigationStarts.delete(frameId);
+    }
+
+    const revision = this.currentRevision(frameId);
+
+    if (!normalized) {
+      return denied("invalid-navigation");
+    }
+
+    const preparing: PreparingContentDocument = {
+      document: normalized,
+      revision,
+      ready: false,
+      outcome: createPreparingAuthorizationOutcome()
+    };
+    this.preparingDocuments.set(frameId, preparing);
+
+    let scopeDecision: ContentDocumentScopeDecision | null = null;
+
+    for (let attempt = 0; attempt < 8; attempt += 1) {
+      const evaluatedDocument = preparing.document;
+
+      try {
+        scopeDecision = await evaluateScope({
+          tabId: this.tabId,
+          frameId,
+          documentId: evaluatedDocument.documentId,
+          url: evaluatedDocument.url,
+          topLevel: frameId === TOP_CONTENT_FRAME_ID
+        });
+      } catch {
+        if (!this.isCurrentPreparing(frameId, preparing)) {
+          return denied("stale-navigation");
+        }
+
+        this.preparingDocuments.delete(frameId);
+        preparing.outcome.resolve(false);
+        return denied("scope-error");
+      }
+
+      if (!this.isCurrentPreparing(frameId, preparing)) {
+        return denied("stale-navigation");
+      }
+
+      if (preparing.document.url === evaluatedDocument.url) {
+        break;
+      }
+
+      scopeDecision = null;
+    }
+
+    if (scopeDecision === null) {
+      this.preparingDocuments.delete(frameId);
+      preparing.outcome.resolve(false);
+      return denied("scope-error");
+    }
+
+    if (!isScopeAllowed(scopeDecision)) {
+      this.preparingDocuments.delete(frameId);
+      preparing.outcome.resolve(false);
+      return denied("scope-denied");
+    }
+
+    this.preparingDocuments.delete(frameId);
+
+    const preparedDocument = preparing.document;
+    this.pendingDocuments.set(frameId, {
+      document: preparedDocument,
+      revision,
+      ready: preparing.ready,
+      injectionComplete: false,
+      outcome: preparing.outcome
+    });
+
+    return {
+      prepared: true,
+      reason: "prepared",
+      document: { ...preparedDocument },
+      target: {
+        tabId: this.tabId,
+        documentIds: [preparedDocument.documentId]
+      }
+    };
+  }
+
+  /** True while the exact navigation is pending or has just been promoted. */
+  isCurrentNavigation(frameId: number, documentId: string): boolean {
+    const normalizedFrameId = normalizeFrameId(frameId);
+    const normalizedDocumentId = normalizeDocumentId(documentId);
+
+    if (normalizedFrameId === null || normalizedDocumentId === null) {
+      return false;
+    }
+
+    return (
+      this.pendingDocuments.get(normalizedFrameId)?.document.documentId === normalizedDocumentId ||
+      this.preparingDocuments.get(normalizedFrameId)?.document.documentId ===
+        normalizedDocumentId ||
+      this.documents.get(normalizedFrameId)?.documentId === normalizedDocumentId
+    );
+  }
+
+  completePendingInjection(frameId: number, documentId: string): boolean {
+    const normalizedFrameId = normalizeFrameId(frameId);
+    const normalizedDocumentId = normalizeDocumentId(documentId);
+
+    if (normalizedFrameId === null || normalizedDocumentId === null) {
+      return false;
+    }
+
+    const pending = this.pendingDocuments.get(normalizedFrameId);
+
+    if (!pending || pending.document.documentId !== normalizedDocumentId) {
+      return false;
+    }
+
+    pending.injectionComplete = true;
+
+    if (pending.ready) {
+      this.pendingDocuments.delete(normalizedFrameId);
+      this.navigationBlockedFrames.delete(normalizedFrameId);
+      this.store(pending.document);
+      pending.outcome.resolve(true);
+    }
+
+    return true;
+  }
+
+  /**
+   * Fails one exact navigation without touching a newer document in the same
+   * frame. A matching sender promoted during executeScript is revoked too.
+   */
+  failNavigation(frameId: number, documentId: string): boolean {
+    const normalizedFrameId = normalizeFrameId(frameId);
+    const normalizedDocumentId = normalizeDocumentId(documentId);
+
+    if (normalizedFrameId === null || normalizedDocumentId === null) {
+      return false;
+    }
+
+    const pendingMatches =
+      this.pendingDocuments.get(normalizedFrameId)?.document.documentId === normalizedDocumentId;
+    const activeMatches =
+      this.documents.get(normalizedFrameId)?.documentId === normalizedDocumentId;
+
+    if (!pendingMatches && !activeMatches) {
+      return false;
+    }
+
+    if (pendingMatches) {
+      this.rejectPendingDocument(normalizedFrameId);
+    }
+    if (activeMatches) {
+      this.documents.delete(normalizedFrameId);
+    }
+    this.navigationBlockedFrames.add(normalizedFrameId);
+    this.bumpFrameRevision(normalizedFrameId);
+    return true;
+  }
+
+  cancelPendingNavigations(): void {
+    this.epoch += 1;
+
+    for (const frameId of new Set([
+      ...this.pendingDocuments.keys(),
+      ...this.preparingDocuments.keys(),
+      ...this.navigationStarts.keys(),
+      ...this.navigationBlockedFrames
+    ])) {
+      this.navigationBlockedFrames.add(frameId);
+    }
+
+    this.rejectAllPendingDocuments();
+    this.rejectAllPreparingDocuments();
+    this.navigationStarts.clear();
+  }
+
+  private invalidateAll(): void {
+    this.rejectAllPreparingDocuments();
+    this.epoch += 1;
+    this.topBootstrapUrl = null;
+    this.documents.clear();
+    this.rejectAllPendingDocuments();
+    this.preparingDocuments.clear();
+    this.navigationStarts.clear();
+    this.navigationBlockedFrames.clear();
+    this.frameRevisions.clear();
+    this.requireCommittedChildNavigation = false;
+  }
+
+  private rejectPreparingDocument(frameId: number): void {
+    const preparing = this.preparingDocuments.get(frameId);
+
+    if (preparing) {
+      this.preparingDocuments.delete(frameId);
+      preparing.outcome.resolve(false);
+    }
+  }
+
+  private rejectPendingDocument(frameId: number): void {
+    const pending = this.pendingDocuments.get(frameId);
+
+    if (pending) {
+      this.pendingDocuments.delete(frameId);
+      pending.outcome.resolve(false);
+    }
+  }
+
+  private rejectAllPendingDocuments(): void {
+    for (const pending of this.pendingDocuments.values()) {
+      pending.outcome.resolve(false);
+    }
+    this.pendingDocuments.clear();
+  }
+
+  private rejectAllPreparingDocuments(): void {
+    for (const preparing of this.preparingDocuments.values()) {
+      preparing.outcome.resolve(false);
+    }
+    this.preparingDocuments.clear();
+  }
+
+  private currentRevision(frameId: number): AuthorizationRevision {
+    return {
+      epoch: this.epoch,
+      frameRevision: this.frameRevisions.get(frameId) ?? 0
+    };
+  }
+
+  private bumpFrameRevision(frameId: number): number {
+    const revision = (this.frameRevisions.get(frameId) ?? 0) + 1;
+    this.frameRevisions.set(frameId, revision);
+    return revision;
+  }
+
+  private isCurrentRevision(frameId: number, revision: AuthorizationRevision): boolean {
+    return (
+      revision.epoch === this.epoch && revision.frameRevision === this.frameRevisions.get(frameId)
+    );
+  }
+
+  private isCurrentPreparing(frameId: number, preparing: PreparingContentDocument): boolean {
+    return (
+      this.preparingDocuments.get(frameId) === preparing &&
+      this.isCurrentRevision(frameId, preparing.revision)
+    );
+  }
+
+  private matchesNavigationRevision(authorization: ContentNavigationAuthorization): boolean {
+    return this.isCurrentRevision(authorization.frameId, {
+      epoch: authorization.epoch,
+      frameRevision: authorization.frameRevision
+    });
+  }
+
+  private storeNavigationStart(
+    authorization: ContentNavigationAuthorization,
+    url: string | undefined,
+    source: NavigationStart["source"]
+  ): void {
+    this.navigationStarts.set(authorization.frameId, {
+      authorization,
+      source,
+      urls: new Set(isNonEmptyString(url) ? [url] : [])
+    });
+  }
+
+  private toNavigationAuthorization(
+    frameId: number,
+    revision: AuthorizationRevision
+  ): ContentNavigationAuthorization {
+    return {
+      frameId,
+      epoch: revision.epoch,
+      frameRevision: revision.frameRevision
+    };
+  }
+
+  private store(document: AuthorizedContentDocument): AuthorizedContentDocument {
+    const stored = { ...document };
+    this.documents.set(stored.frameId, stored);
+    return { ...stored };
+  }
+
+  private snapshotKnownDocuments(): KnownContentDocument[] {
+    return [
+      ...[...this.documents.values()].map((document) => ({
+        ...document,
+        state: "active" as const
+      })),
+      ...[...this.pendingDocuments.values()].map(({ document }) => ({
+        ...document,
+        state: "pending" as const
+      })),
+      ...[...this.preparingDocuments.values()].map(({ document }) => ({
+        ...document,
+        state: "preparing" as const
+      }))
+    ];
+  }
+}
+
+function normalizeAuthorizationInput(
+  expectedTabId: number,
+  input: ContentDocumentAuthorizationInput
+): AuthorizedContentDocument | null {
+  const frameId = normalizeFrameId(input.frameId);
+  const documentId = normalizeDocumentId(input.documentId);
+
+  if (
+    input.tabId !== expectedTabId ||
+    frameId === null ||
+    documentId === null ||
+    !isNonEmptyString(input.url)
+  ) {
+    return null;
+  }
+
+  return {
+    frameId,
+    documentId,
+    url: input.url
+  };
+}
+
+function normalizeIdentityInput(
+  expectedTabId: number,
+  input: ContentDocumentIdentityInput,
+  requireUrl: boolean
+): AuthorizedContentDocument | null {
+  const frameId =
+    input.frameId === undefined ? TOP_CONTENT_FRAME_ID : normalizeFrameId(input.frameId);
+  const documentId = normalizeDocumentId(input.documentId);
+  const url = isNonEmptyString(input.url) ? input.url : null;
+
+  if (
+    input.tabId !== expectedTabId ||
+    frameId === null ||
+    documentId === null ||
+    (requireUrl && url === null)
+  ) {
+    return null;
+  }
+
+  return {
+    frameId,
+    documentId,
+    url: url ?? ""
+  };
+}
+
+function sameDocument(left: AuthorizedContentDocument, right: AuthorizedContentDocument): boolean {
+  return (
+    left.frameId === right.frameId && left.documentId === right.documentId && left.url === right.url
+  );
+}
+
+function haveSameUrlOrigin(left: string, right: string): boolean {
+  try {
+    return new URL(left).origin === new URL(right).origin;
+  } catch {
+    return false;
+  }
+}
+
+function exactDocumentIdentityKey(document: ExactContentDocumentIdentity): string {
+  return JSON.stringify([document.frameId, document.documentId]);
+}
+
+function sameNavigationAuthorization(
+  left: ContentNavigationAuthorization,
+  right: ContentNavigationAuthorization
+): boolean {
+  return (
+    left.frameId === right.frameId &&
+    left.epoch === right.epoch &&
+    left.frameRevision === right.frameRevision
+  );
+}
+
+function normalizeFrameId(value: number): number | null {
+  return isFrameOrTabId(value) ? value : null;
+}
+
+function normalizeDocumentId(value: string | undefined): string | null {
+  return isNonEmptyString(value) ? value : null;
+}
+
+function isFrameOrTabId(value: number): boolean {
+  return Number.isSafeInteger(value) && value >= 0;
+}
+
+function isNonEmptyString(value: unknown): value is string {
+  return typeof value === "string" && value.length > 0;
+}
+
+function isScopeAllowed(decision: ContentDocumentScopeDecision): boolean {
+  return typeof decision === "boolean" ? decision : decision.allowed === true;
+}
+
+function createPreparingAuthorizationOutcome(): PreparingAuthorizationOutcome {
+  let resolve!: (allowed: boolean) => void;
+  const promise = new Promise<boolean>((resolvePromise) => {
+    resolve = resolvePromise;
+  });
+  return { promise, resolve };
+}
+
+function denied(
+  reason: Exclude<CommittedDocumentPreparationResult["reason"], "prepared">
+): CommittedDocumentPreparationResult {
+  return {
+    prepared: false,
+    reason,
+    document: null,
+    target: null
+  };
+}
diff --git a/apps/extension/src/sw/content-event-batch-ledger.test.ts b/apps/extension/src/sw/content-event-batch-ledger.test.ts
new file mode 100644
index 0000000..b0f1888
--- /dev/null
+++ b/apps/extension/src/sw/content-event-batch-ledger.test.ts
@@ -0,0 +1,284 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  CONTENT_EVENT_BATCH_COMPLETED_LIMIT,
+  ContentEventBatchLedger,
+  classifyContentEventBatchReceipt,
+  fingerprintContentEventBatch,
+  isContentEventBatchAdmissionLive,
+  processContentEventBatchAttempt,
+  readContentEventBatchReceiptAfterBarrier
+} from "./content-event-batch-ledger.js";
+
+describe("content event batch ledger", () => {
+  it("retries only missing indexes after a processing failure", () => {
+    const ledger = new ContentEventBatchLedger<object>();
+    const firstPort = {};
+    const first = ledger.begin("activation", "batch", "payload", firstPort);
+    expect(first.kind).toBe("process");
+    if (first.kind !== "process") {
+      return;
+    }
+
+    first.record.completedEventIndexes.add(0);
+    expect(ledger.retry("activation", "batch", first.record)).toBe(true);
+
+    const retryPort = {};
+    const retry = ledger.begin("activation", "batch", "payload", retryPort);
+    expect(retry.kind).toBe("process");
+    if (retry.kind !== "process") {
+      return;
+    }
+    expect(retry.record).toBe(first.record);
+    expect(retry.record.completedEventIndexes).toEqual(new Set([0]));
+    retry.record.completedEventIndexes.add(1);
+    expect(ledger.complete("activation", "batch", retry.record)).toEqual([retryPort]);
+    expect(ledger.begin("activation", "batch", "payload", {}).kind).toBe("completed");
+  });
+
+  it("coalesces concurrent duplicates and rejects changed payloads", () => {
+    const ledger = new ContentEventBatchLedger<object>();
+    const first = ledger.begin("activation", "batch", "payload-a", {});
+    expect(first.kind).toBe("process");
+    expect(ledger.begin("activation", "batch", "payload-a", {}).kind).toBe("processing");
+    expect(ledger.begin("activation", "batch", "payload-b", {}).kind).toBe("mismatch");
+  });
+
+  it("bounds completed tombstones per activation", () => {
+    const ledger = new ContentEventBatchLedger<object>();
+
+    for (let index = 0; index <= CONTENT_EVENT_BATCH_COMPLETED_LIMIT; index += 1) {
+      const batchId = `batch-${index}`;
+      const result = ledger.begin("activation", batchId, batchId, {});
+      expect(result.kind).toBe("process");
+      if (result.kind === "process") {
+        ledger.complete("activation", batchId, result.record);
+      }
+    }
+
+    expect(ledger.begin("activation", "batch-0", "batch-0", {}).kind).toBe("process");
+    expect(
+      ledger.begin(
+        "activation",
+        `batch-${CONTENT_EVENT_BATCH_COMPLETED_LIMIT}`,
+        `batch-${CONTENT_EVENT_BATCH_COMPLETED_LIMIT}`,
+        {}
+      ).kind
+    ).toBe("completed");
+  });
+
+  it("fingerprints canonical event content and order with SHA-256", async () => {
+    const first = await fingerprintContentEventBatch([{ t: 1, payload: { b: 2, a: 1 } }, { t: 2 }]);
+
+    expect(first).toMatch(/^[a-f0-9]{64}$/);
+    expect(first).toBe(
+      await fingerprintContentEventBatch([{ payload: { a: 1, b: 2 }, t: 1 }, { t: 2 }])
+    );
+    expect(first).not.toBe(await fingerprintContentEventBatch([{ t: 2 }, { t: 1 }]));
+    expect(first).not.toBe(await fingerprintContentEventBatch([{ t: 1 }]));
+    expect(await fingerprintContentEventBatch([{ payload: { value: undefined } }])).not.toBe(
+      await fingerprintContentEventBatch([{ payload: {} }])
+    );
+  });
+
+  it("classifies durable receipts for direct ack, partial replay, and mismatch", () => {
+    const expected = {
+      tabId: 7,
+      frameId: 2,
+      documentId: "document-1",
+      batchId: "batch-1",
+      fingerprint: "a".repeat(64),
+      eventCount: 2
+    };
+    const partial = {
+      ...expected,
+      indexes: [{ eventIndex: 0, outcome: "event" as const, eventId: "E-1" }],
+      complete: false
+    };
+
+    expect(classifyContentEventBatchReceipt(undefined, expected)).toEqual({
+      kind: "missing",
+      committedEventIndexes: []
+    });
+    expect(classifyContentEventBatchReceipt(partial, expected)).toEqual({
+      kind: "partial",
+      committedEventIndexes: [0]
+    });
+    expect(
+      classifyContentEventBatchReceipt(
+        {
+          ...partial,
+          indexes: [...partial.indexes, { eventIndex: 1, outcome: "no-output" as const }],
+          complete: true
+        },
+        expected
+      )
+    ).toEqual({ kind: "complete", committedEventIndexes: [0, 1] });
+    expect(
+      classifyContentEventBatchReceipt({ ...partial, fingerprint: "b".repeat(64) }, expected)
+    ).toEqual({ kind: "mismatch", committedEventIndexes: [] });
+  });
+
+  it("flushes predecessor activation output before a replacement reads its receipt", async () => {
+    const order: string[] = [];
+    let durableReceipt: { complete: boolean } | undefined;
+    const result = await readContentEventBatchReceiptAfterBarrier({
+      flushPendingDelivery: async () => {
+        order.push("flush-old-output");
+        durableReceipt = { complete: true };
+      },
+      isOwnerCurrent: () => true,
+      readReceipt: async () => {
+        order.push("read-replacement-receipt");
+        return durableReceipt;
+      }
+    });
+
+    expect(order).toEqual(["flush-old-output", "read-replacement-receipt"]);
+    expect(result).toEqual({ kind: "current", receipt: { complete: true } });
+  });
+
+  it("does not read or reuse a receipt after the replacement owner becomes stale", async () => {
+    const readReceipt = vi.fn();
+    expect(
+      await readContentEventBatchReceiptAfterBarrier({
+        flushPendingDelivery: () => undefined,
+        isOwnerCurrent: () => false,
+        readReceipt
+      })
+    ).toEqual({ kind: "stale" });
+    expect(readReceipt).not.toHaveBeenCalled();
+  });
+
+  it("does not reprocess successful indexes after an event failure", async () => {
+    const ledger = new ContentEventBatchLedger<object>();
+    const begin = ledger.begin("activation", "batch", "payload", {});
+    expect(begin.kind).toBe("process");
+    if (begin.kind !== "process") {
+      return;
+    }
+    let failSecond = true;
+    const processed: number[] = [];
+    const first = await processContentEventBatchAttempt({
+      record: begin.record,
+      eventCount: 2,
+      processEvent: (index) => {
+        processed.push(index);
+        if (index === 1 && failSecond) {
+          throw new Error("putBlob failed");
+        }
+      },
+      flush: () => undefined
+    });
+
+    expect(first.completed).toBe(false);
+    expect(first.failures).toHaveLength(1);
+    expect(begin.record.completedEventIndexes).toEqual(new Set([0]));
+    ledger.retry("activation", "batch", begin.record);
+    const retry = ledger.begin("activation", "batch", "payload", {});
+    expect(retry.kind).toBe("process");
+    failSecond = false;
+    if (retry.kind === "process") {
+      expect(
+        await processContentEventBatchAttempt({
+          record: retry.record,
+          eventCount: 2,
+          processEvent: (index) => {
+            processed.push(index);
+          },
+          flush: () => undefined
+        })
+      ).toMatchObject({ completed: true, failures: [] });
+    }
+    expect(processed).toEqual([0, 1, 1]);
+  });
+
+  it("withholds completion until a failed durable flush succeeds", async () => {
+    const ledger = new ContentEventBatchLedger<object>();
+    const begin = ledger.begin("activation", "batch", "payload", {});
+    expect(begin.kind).toBe("process");
+    if (begin.kind !== "process") {
+      return;
+    }
+    let flushFails = true;
+    const processEvent = vi.fn();
+    const flush = vi.fn(() => {
+      if (flushFails) {
+        throw new Error("pipeline ingest failed");
+      }
+    });
+
+    expect(
+      await processContentEventBatchAttempt({
+        record: begin.record,
+        eventCount: 1,
+        processEvent,
+        flush
+      })
+    ).toMatchObject({ completed: false });
+    expect(begin.record.completedEventIndexes).toEqual(new Set([0]));
+    ledger.retry("activation", "batch", begin.record);
+    const retry = ledger.begin("activation", "batch", "payload", {});
+    flushFails = false;
+    if (retry.kind === "process") {
+      expect(
+        await processContentEventBatchAttempt({
+          record: retry.record,
+          eventCount: 1,
+          processEvent,
+          flush
+        })
+      ).toMatchObject({ completed: true, failures: [] });
+    }
+    expect(processEvent).toHaveBeenCalledOnce();
+    expect(flush).toHaveBeenCalledTimes(2);
+  });
+
+  it("rejects an in-flight child batch after its parent revokes the activation tree", () => {
+    const runtime = {};
+    const fence = {};
+    const admission = {
+      valid: true,
+      runtime,
+      fence,
+      activationId: "child-activation",
+      batchId: "batch",
+      sid: "S-tree",
+      tabId: 7,
+      frameId: 4,
+      documentId: "child-document",
+      documentUrl: "https://app.example/child",
+      mode: "lite"
+    } as const;
+    let childActivation = {
+      runtime,
+      fence,
+      activationId: admission.activationId,
+      sid: admission.sid,
+      tabId: admission.tabId,
+      frameId: admission.frameId,
+      documentId: admission.documentId,
+      url: admission.documentUrl,
+      mode: admission.mode
+    } as {
+      runtime: typeof runtime;
+      fence: typeof fence;
+      activationId: string;
+      sid: string;
+      tabId: number;
+      frameId: number;
+      documentId: string;
+      url: string;
+      mode: "lite";
+    } | null;
+
+    expect(isContentEventBatchAdmissionLive(admission, runtime, fence, () => childActivation)).toBe(
+      true
+    );
+
+    childActivation = null;
+    expect(isContentEventBatchAdmissionLive(admission, runtime, fence, () => childActivation)).toBe(
+      false
+    );
+  });
+});
diff --git a/apps/extension/src/sw/content-event-batch-ledger.ts b/apps/extension/src/sw/content-event-batch-ledger.ts
new file mode 100644
index 0000000..1604cfd
--- /dev/null
+++ b/apps/extension/src/sw/content-event-batch-ledger.ts
@@ -0,0 +1,346 @@
+export const CONTENT_EVENT_BATCH_COMPLETED_LIMIT = 256;
+
+export type ContentEventBatchRecord<Port extends object> = {
+  status: "processing" | "retryable" | "completed";
+  readonly fingerprint: string;
+  readonly completedEventIndexes: Set<number>;
+  readonly ackPorts: Set<Port>;
+};
+
+export type ContentEventBatchBeginResult<Port extends object> =
+  | { kind: "process"; record: ContentEventBatchRecord<Port> }
+  | { kind: "processing"; record: ContentEventBatchRecord<Port> }
+  | { kind: "completed"; record: ContentEventBatchRecord<Port> }
+  | { kind: "mismatch"; record: ContentEventBatchRecord<Port> };
+
+export type ContentEventBatchAttemptFailure = Readonly<{
+  eventIndex?: number;
+  error: unknown;
+}>;
+
+export type ContentEventBatchAttemptResult = Readonly<{
+  completed: boolean;
+  failures: readonly ContentEventBatchAttemptFailure[];
+}>;
+
+export type ContentEventBatchReceiptDecision =
+  | Readonly<{ kind: "missing"; committedEventIndexes: readonly number[] }>
+  | Readonly<{ kind: "partial"; committedEventIndexes: readonly number[] }>
+  | Readonly<{ kind: "complete"; committedEventIndexes: readonly number[] }>
+  | Readonly<{ kind: "mismatch"; committedEventIndexes: readonly number[] }>;
+
+export async function readContentEventBatchReceiptAfterBarrier<Receipt>(input: {
+  flushPendingDelivery: () => void | Promise<void>;
+  isOwnerCurrent: () => boolean;
+  readReceipt: () => Receipt | Promise<Receipt>;
+}): Promise<Readonly<{ kind: "stale" }> | Readonly<{ kind: "current"; receipt: Receipt }>> {
+  await input.flushPendingDelivery();
+  if (!input.isOwnerCurrent()) {
+    return { kind: "stale" };
+  }
+
+  const receipt = await input.readReceipt();
+  return input.isOwnerCurrent() ? { kind: "current", receipt } : { kind: "stale" };
+}
+
+export function classifyContentEventBatchReceipt(
+  receipt: PipelineDeliveryReceipt | undefined,
+  expected: Readonly<{
+    tabId: number;
+    frameId: number;
+    documentId: string;
+    batchId: string;
+    fingerprint: string;
+    eventCount: number;
+  }>
+): ContentEventBatchReceiptDecision {
+  if (!receipt) {
+    return { kind: "missing", committedEventIndexes: [] };
+  }
+
+  const committedEventIndexes = receipt.indexes.map((index) => index.eventIndex);
+  if (
+    receipt.tabId !== expected.tabId ||
+    receipt.frameId !== expected.frameId ||
+    receipt.documentId !== expected.documentId ||
+    receipt.batchId !== expected.batchId ||
+    receipt.fingerprint !== expected.fingerprint ||
+    receipt.eventCount !== expected.eventCount ||
+    committedEventIndexes.some(
+      (eventIndex) =>
+        !Number.isSafeInteger(eventIndex) || eventIndex < 0 || eventIndex >= expected.eventCount
+    ) ||
+    new Set(committedEventIndexes).size !== committedEventIndexes.length ||
+    receipt.complete !== (committedEventIndexes.length === expected.eventCount)
+  ) {
+    return { kind: "mismatch", committedEventIndexes: [] };
+  }
+
+  return {
+    kind: receipt.complete ? "complete" : "partial",
+    committedEventIndexes
+  };
+}
+
+export type ContentEventBatchAdmissionIdentity<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+> = Readonly<{
+  valid: boolean;
+  runtime: Runtime;
+  fence: Fence;
+  activationId: string;
+  batchId: string;
+  sid: string;
+  tabId: number;
+  frameId: number;
+  documentId: string;
+  documentUrl: string;
+  mode: Mode;
+}>;
+
+export type ContentEventBatchActivationIdentity<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+> = Readonly<{
+  runtime: Runtime;
+  fence: Fence;
+  activationId: string;
+  sid: string;
+  tabId: number;
+  frameId: number;
+  documentId: string;
+  url: string;
+  mode: Mode;
+}>;
+
+/** Revalidates the exact live activation at every asynchronous admission point. */
+export function isContentEventBatchAdmissionLive<
+  Runtime extends object,
+  Fence extends object,
+  Mode extends string
+>(
+  admission: ContentEventBatchAdmissionIdentity<Runtime, Fence, Mode>,
+  runtime: Runtime,
+  fence: Fence,
+  lookupActivation: (
+    activationId: string
+  ) => ContentEventBatchActivationIdentity<Runtime, Fence, Mode> | null
+): boolean {
+  if (
+    !admission.valid ||
+    admission.runtime !== runtime ||
+    admission.fence !== fence ||
+    admission.activationId.length === 0 ||
+    admission.batchId.length === 0
+  ) {
+    return false;
+  }
+
+  const activation = lookupActivation(admission.activationId);
+  return Boolean(
+    activation &&
+    activation.runtime === runtime &&
+    activation.fence === fence &&
+    activation.activationId === admission.activationId &&
+    activation.sid === admission.sid &&
+    activation.tabId === admission.tabId &&
+    activation.frameId === admission.frameId &&
+    activation.documentId === admission.documentId &&
+    activation.url === admission.documentUrl &&
+    activation.mode === admission.mode
+  );
+}
+
+/**
+ * Keeps one retryable delivery ledger per exact activation. Event indexes are
+ * retained across a failed attempt so a replay can finish the missing suffix
+ * without ingesting already accepted records twice.
+ */
+export class ContentEventBatchLedger<Port extends object> {
+  private readonly byActivation = new Map<string, Map<string, ContentEventBatchRecord<Port>>>();
+
+  public begin(
+    activationId: string,
+    batchId: string,
+    fingerprint: string,
+    port: Port
+  ): ContentEventBatchBeginResult<Port> {
+    let batches = this.byActivation.get(activationId);
+
+    if (!batches) {
+      batches = new Map();
+      this.byActivation.set(activationId, batches);
+    }
+
+    const existing = batches.get(batchId);
+    if (existing) {
+      if (existing.fingerprint !== fingerprint) {
+        return { kind: "mismatch", record: existing };
+      }
+      if (existing.status === "completed") {
+        return { kind: "completed", record: existing };
+      }
+
+      existing.ackPorts.add(port);
+      if (existing.status === "processing") {
+        return { kind: "processing", record: existing };
+      }
+
+      existing.status = "processing";
+      return { kind: "process", record: existing };
+    }
+
+    const record: ContentEventBatchRecord<Port> = {
+      status: "processing",
+      fingerprint,
+      completedEventIndexes: new Set(),
+      ackPorts: new Set([port])
+    };
+    batches.set(batchId, record);
+    return { kind: "process", record };
+  }
+
+  public retry(
+    activationId: string,
+    batchId: string,
+    record: ContentEventBatchRecord<Port>
+  ): boolean {
+    const current = this.byActivation.get(activationId)?.get(batchId);
+
+    if (current !== record || record.status !== "processing") {
+      return false;
+    }
+
+    record.status = "retryable";
+    record.ackPorts.clear();
+    return true;
+  }
+
+  public complete(
+    activationId: string,
+    batchId: string,
+    record: ContentEventBatchRecord<Port>
+  ): Port[] {
+    const batches = this.byActivation.get(activationId);
+
+    if (batches?.get(batchId) !== record || record.status !== "processing") {
+      return [];
+    }
+
+    record.status = "completed";
+    const ports = [...record.ackPorts];
+    record.ackPorts.clear();
+    let completedCount = [...batches.values()].filter(
+      (candidate) => candidate.status === "completed"
+    ).length;
+
+    for (const [candidateId, candidate] of batches) {
+      if (completedCount <= CONTENT_EVENT_BATCH_COMPLETED_LIMIT) {
+        break;
+      }
+      if (candidate.status === "completed") {
+        batches.delete(candidateId);
+        completedCount -= 1;
+      }
+    }
+
+    return ports;
+  }
+
+  public invalidate(activationId: string): void {
+    this.byActivation.delete(activationId);
+  }
+}
+
+/** Processes only missing indexes and requires the resulting pipeline buffer to
+ * flush before the caller is allowed to complete and acknowledge the batch. */
+export async function processContentEventBatchAttempt<Port extends object>(input: {
+  record: ContentEventBatchRecord<Port>;
+  eventCount: number;
+  processEvent: (eventIndex: number) => void | Promise<void>;
+  flush: () => void | Promise<void>;
+}): Promise<ContentEventBatchAttemptResult> {
+  const failures: ContentEventBatchAttemptFailure[] = [];
+
+  for (let eventIndex = 0; eventIndex < input.eventCount; eventIndex += 1) {
+    if (input.record.completedEventIndexes.has(eventIndex)) {
+      continue;
+    }
+
+    try {
+      await input.processEvent(eventIndex);
+      input.record.completedEventIndexes.add(eventIndex);
+    } catch (error) {
+      failures.push({ eventIndex, error });
+    }
+  }
+
+  if (failures.length === 0 && input.record.completedEventIndexes.size === input.eventCount) {
+    try {
+      await input.flush();
+    } catch (error) {
+      failures.push({ error });
+    }
+  }
+
+  return {
+    completed:
+      failures.length === 0 && input.record.completedEventIndexes.size === input.eventCount,
+    failures
+  };
+}
+
+export async function fingerprintContentEventBatch(events: readonly unknown[]): Promise<string> {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) {
+    throw new Error("SHA-256 is unavailable for content event batch fingerprinting.");
+  }
+
+  const digest = await subtle.digest(
+    "SHA-256",
+    new TextEncoder().encode(canonicalizeContentEventBatchValue(events))
+  );
+  return [...new Uint8Array(digest)].map((value) => value.toString(16).padStart(2, "0")).join("");
+}
+
+function canonicalizeContentEventBatchValue(value: unknown): string {
+  if (value === undefined) {
+    return "u";
+  }
+  if (value === null) {
+    return "n";
+  }
+  if (typeof value === "boolean") {
+    return value ? "b1" : "b0";
+  }
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      throw new Error("Content event batch fingerprint cannot encode a non-finite number.");
+    }
+    return `d${Object.is(value, -0) ? "-0" : String(value)};`;
+  }
+  if (typeof value === "string") {
+    return `s${JSON.stringify(value)};`;
+  }
+  if (Array.isArray(value)) {
+    return `a${value.length}[${value.map(canonicalizeContentEventBatchValue).join("")}]`;
+  }
+  if (typeof value !== "object") {
+    throw new Error("Content event batch fingerprint encountered an unsupported value.");
+  }
+
+  const record = value as Record<string, unknown>;
+  const keys = Object.keys(record).sort((left, right) =>
+    left < right ? -1 : left > right ? 1 : 0
+  );
+  return `o${keys.length}{${keys
+    .map(
+      (key) =>
+        `${canonicalizeContentEventBatchValue(key)}${canonicalizeContentEventBatchValue(record[key])}`
+    )
+    .join("")}}`;
+}
+import type { PipelineDeliveryReceipt } from "@webblackbox/pipeline";
diff --git a/apps/extension/src/sw/content-main-world-revocation.test.ts b/apps/extension/src/sw/content-main-world-revocation.test.ts
new file mode 100644
index 0000000..20d7c9e
--- /dev/null
+++ b/apps/extension/src/sw/content-main-world-revocation.test.ts
@@ -0,0 +1,54 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  canFinalizeMainWorldRevocation,
+  runBoundedMainWorldDeactivation
+} from "./content-main-world-revocation.js";
+
+describe("bounded MAIN-world revocation", () => {
+  it("waits for a required exact deactivation", async () => {
+    const deactivate = vi.fn(async () => undefined);
+
+    await expect(
+      runBoundedMainWorldDeactivation({ deactivate, timeoutMs: 1_000 })
+    ).resolves.toEqual({ kind: "deactivated" });
+    expect(deactivate).toHaveBeenCalledOnce();
+  });
+
+  it("reports a controller failure without rejecting the revocation task", async () => {
+    const error = new Error("controller rejected");
+
+    await expect(
+      runBoundedMainWorldDeactivation({
+        deactivate: () => Promise.reject(error),
+        timeoutMs: 1_000
+      })
+    ).resolves.toEqual({ kind: "failed", error });
+  });
+
+  it("releases registry cleanup at the bounded deadline", async () => {
+    vi.useFakeTimers();
+    try {
+      const pending = runBoundedMainWorldDeactivation({
+        deactivate: () => new Promise<void>(() => undefined),
+        timeoutMs: 250
+      });
+
+      await vi.advanceTimersByTimeAsync(250);
+      await expect(pending).resolves.toEqual({ kind: "timed-out" });
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
+  it("retains authorization when an exact live document did not deactivate", () => {
+    expect(
+      canFinalizeMainWorldRevocation(
+        { kind: "failed", error: new Error("executeScript failed") },
+        true
+      )
+    ).toBe(false);
+    expect(canFinalizeMainWorldRevocation({ kind: "timed-out" }, true)).toBe(false);
+    expect(canFinalizeMainWorldRevocation({ kind: "timed-out" }, false)).toBe(true);
+  });
+});
diff --git a/apps/extension/src/sw/content-main-world-revocation.ts b/apps/extension/src/sw/content-main-world-revocation.ts
new file mode 100644
index 0000000..89bc873
--- /dev/null
+++ b/apps/extension/src/sw/content-main-world-revocation.ts
@@ -0,0 +1,46 @@
+export type BoundedMainWorldDeactivationResult =
+  | Readonly<{ kind: "deactivated" }>
+  | Readonly<{ kind: "failed"; error: unknown }>
+  | Readonly<{ kind: "timed-out" }>;
+
+/** Never drops the controller binding after a live document failed to deactivate. */
+export function canFinalizeMainWorldRevocation(
+  outcome: BoundedMainWorldDeactivationResult,
+  documentReachable: boolean
+): boolean {
+  return outcome.kind === "deactivated" || !documentReachable;
+}
+
+/**
+ * Waits only for the bounded revocation window while still observing a late
+ * controller rejection so it never becomes an unhandled promise rejection.
+ */
+export async function runBoundedMainWorldDeactivation(options: {
+  deactivate: () => Promise<void>;
+  timeoutMs: number;
+  setTimer?: (callback: () => void, delayMs: number) => ReturnType<typeof setTimeout>;
+  clearTimer?: (timer: ReturnType<typeof setTimeout>) => void;
+}): Promise<BoundedMainWorldDeactivationResult> {
+  if (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs <= 0) {
+    throw new Error("MAIN-world deactivation timeout must be a positive safe integer.");
+  }
+
+  const setTimer = options.setTimer ?? setTimeout;
+  const clearTimer = options.clearTimer ?? clearTimeout;
+  let timer: ReturnType<typeof setTimeout> | null = null;
+  const operation = Promise.resolve()
+    .then(options.deactivate)
+    .then(
+      (): BoundedMainWorldDeactivationResult => ({ kind: "deactivated" }),
+      (error: unknown): BoundedMainWorldDeactivationResult => ({ kind: "failed", error })
+    );
+  const timeout = new Promise<BoundedMainWorldDeactivationResult>((resolve) => {
+    timer = setTimer(() => resolve({ kind: "timed-out" }), options.timeoutMs);
+  });
+  const result = await Promise.race([operation, timeout]);
+
+  if (timer !== null) {
+    clearTimer(timer);
+  }
+  return result;
+}
diff --git a/apps/extension/src/sw/content-port-lifecycle.test.ts b/apps/extension/src/sw/content-port-lifecycle.test.ts
new file mode 100644
index 0000000..d99dfcd
--- /dev/null
+++ b/apps/extension/src/sw/content-port-lifecycle.test.ts
@@ -0,0 +1,93 @@
+import { describe, expect, it } from "vitest";
+
+import { ContentDocumentAuthorization } from "./content-document-authorization.js";
+import { disconnectContentPort } from "./content-port-lifecycle.js";
+
+const TAB_ID = 7;
+
+describe("disconnectContentPort", () => {
+  it("releases a top-frame port without reopening document authorization bootstrap", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const topUrl = "https://app.example/dashboard";
+    const topSender = {
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document",
+      url: topUrl
+    } as const;
+    authorization.reset({ url: topUrl });
+    authorization.authorize(topSender);
+    const port = { sender: topSender };
+    const connectedPorts = new Set([port]);
+
+    disconnectContentPort(connectedPorts, port);
+
+    expect(connectedPorts.has(port)).toBe(false);
+    expect(authorization.get(0)).toEqual({
+      frameId: 0,
+      documentId: "top-document",
+      url: topUrl
+    });
+    expect(authorization.matchesSender(topSender)).toBe(true);
+  });
+
+  it("keeps child authorization alive when its transient port disconnects", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const childSender = {
+      tabId: TAB_ID,
+      frameId: 4,
+      documentId: "child-document",
+      url: "https://widgets.example/embed"
+    } as const;
+    authorization.authorize(childSender);
+    const port = { sender: childSender };
+    const connectedPorts = new Set([port]);
+
+    disconnectContentPort(connectedPorts, port);
+
+    expect(connectedPorts.has(port)).toBe(false);
+    expect(authorization.matchesSender(childSender)).toBe(true);
+  });
+
+  it("does not let a stale port disconnect affect its frame's replacement document", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const oldSender = {
+      tabId: TAB_ID,
+      frameId: 5,
+      documentId: "old-document",
+      url: "https://widgets.example/old"
+    } as const;
+    authorization.authorize(oldSender);
+    const oldPort = { sender: oldSender };
+    const connectedPorts = new Set([oldPort]);
+
+    const replacementUrl = "https://widgets.example/new";
+    const prepared = await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 5,
+        documentId: "new-document",
+        url: replacementUrl
+      },
+      () => true
+    );
+    expect(prepared.prepared).toBe(true);
+    authorization.completePendingInjection(5, "new-document");
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 5,
+      documentId: "new-document",
+      url: replacementUrl
+    });
+
+    disconnectContentPort(connectedPorts, oldPort);
+
+    expect(connectedPorts.has(oldPort)).toBe(false);
+    expect(authorization.get(5)).toEqual({
+      frameId: 5,
+      documentId: "new-document",
+      url: replacementUrl
+    });
+    expect(authorization.matchesSender(oldSender)).toBe(false);
+  });
+});
diff --git a/apps/extension/src/sw/content-port-lifecycle.ts b/apps/extension/src/sw/content-port-lifecycle.ts
new file mode 100644
index 0000000..e66c500
--- /dev/null
+++ b/apps/extension/src/sw/content-port-lifecycle.ts
@@ -0,0 +1,9 @@
+/**
+ * Releases transport-scoped state for a disconnected content port.
+ *
+ * Exact document authorization is session-scoped and must outlive transient
+ * ports. Navigation, tab removal, and capture shutdown own that lifecycle.
+ */
+export function disconnectContentPort<TPort>(connectedPorts: Set<TPort>, port: TPort): void {
+  connectedPorts.delete(port);
+}
diff --git a/apps/extension/src/sw/durable-removal.test.ts b/apps/extension/src/sw/durable-removal.test.ts
new file mode 100644
index 0000000..0234b6e
--- /dev/null
+++ b/apps/extension/src/sw/durable-removal.test.ts
@@ -0,0 +1,34 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { commitDurableRemoval } from "./durable-removal.js";
+
+describe("durable removal", () => {
+  it("restores the retryable tombstone when the absence checkpoint fails", async () => {
+    let present = true;
+    const restore = vi.fn(() => {
+      present = true;
+    });
+
+    await expect(
+      commitDurableRemoval({
+        remove: () => {
+          present = false;
+          return true;
+        },
+        persist: () => Promise.reject(new Error("storage set failed")),
+        restore
+      })
+    ).rejects.toThrow("storage set failed");
+    expect(present).toBe(true);
+    expect(restore).toHaveBeenCalledOnce();
+  });
+
+  it("does not write an absence checkpoint for a stale identity", async () => {
+    const persist = vi.fn(async () => undefined);
+
+    await expect(
+      commitDurableRemoval({ remove: () => false, persist, restore: vi.fn() })
+    ).resolves.toBe(false);
+    expect(persist).not.toHaveBeenCalled();
+  });
+});
diff --git a/apps/extension/src/sw/durable-removal.ts b/apps/extension/src/sw/durable-removal.ts
new file mode 100644
index 0000000..ad6ae99
--- /dev/null
+++ b/apps/extension/src/sw/durable-removal.ts
@@ -0,0 +1,18 @@
+/** Removes in memory only when the absence checkpoint can be made durable, rolling back on failure. */
+export async function commitDurableRemoval(options: {
+  remove: () => boolean;
+  persist: () => Promise<void>;
+  restore: () => void;
+}): Promise<boolean> {
+  if (!options.remove()) {
+    return false;
+  }
+
+  try {
+    await options.persist();
+    return true;
+  } catch (error) {
+    options.restore();
+    throw error;
+  }
+}
diff --git a/apps/extension/src/sw/dynamic-content-injection.test.ts b/apps/extension/src/sw/dynamic-content-injection.test.ts
new file mode 100644
index 0000000..27cbb48
--- /dev/null
+++ b/apps/extension/src/sw/dynamic-content-injection.test.ts
@@ -0,0 +1,350 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { ChromeApi, InjectionResult } from "../shared/chrome-api.js";
+import { ContentDocumentAuthorization } from "./content-document-authorization.js";
+import { injectPendingContentDocument } from "./dynamic-content-injection.js";
+
+const TAB_ID = 7;
+const FRAME_ID = 4;
+
+describe("injectPendingContentDocument", () => {
+  it("injects ISOLATED, seeds its singleton, then bootstraps MAIN by exact documentId", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const document = await pending(authorization, "document-a");
+    const executeScript = vi.fn(async (options: { target: { documentIds?: string[] } }) => [
+      result(options.target.documentIds?.[0] ?? "")
+    ]);
+
+    await expect(
+      injectPendingContentDocument({
+        chromeApi: chromeWithExecuteScript(executeScript),
+        authorization,
+        document,
+        isRuntimeActive: () => true,
+        mode: "lite"
+      })
+    ).resolves.toMatchObject({
+      status: "injected",
+      mainWorldController: {
+        revision: 0,
+        phase: "inactive",
+        activationId: null
+      }
+    });
+
+    expect(executeScript).toHaveBeenNthCalledWith(1, {
+      target: { tabId: TAB_ID, documentIds: ["document-a"] },
+      world: "ISOLATED",
+      files: ["content.js"]
+    });
+    expect(executeScript).toHaveBeenNthCalledWith(2, {
+      target: { tabId: TAB_ID, documentIds: ["document-a"] },
+      world: "MAIN",
+      func: expect.any(Function),
+      args: [
+        expect.stringMatching(/injected\.js#m1_[0-9a-f]{64}$/u),
+        expect.stringMatching(/^[0-9a-f]{64}$/u)
+      ]
+    });
+    expect(executeScript).toHaveBeenNthCalledWith(3, {
+      target: { tabId: TAB_ID, documentIds: ["document-a"] },
+      world: "MAIN",
+      func: expect.any(Function),
+      args: [
+        expect.stringMatching(/injected\.js#m1_[0-9a-f]{64}$/u),
+        expect.stringMatching(/^[0-9a-f]{64}$/u),
+        { kind: "probe" }
+      ]
+    });
+    expect(authorization.get(FRAME_ID)).toBeNull();
+    expect(authorization.getPending(FRAME_ID)?.documentId).toBe("document-a");
+  });
+
+  it("does not let a late B failure cancel C or inject B content", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const documentB = await pending(authorization, "document-b");
+    const executeScript = vi.fn(
+      async (options: { target: { documentIds?: string[] }; world?: string }) => {
+        const documentId = options.target.documentIds?.[0] ?? "";
+        return [result(documentId)];
+      }
+    );
+    const chromeApi = chromeWithExecuteScript(executeScript);
+    const injectionB = injectPendingContentDocument({
+      chromeApi,
+      authorization,
+      document: documentB,
+      isRuntimeActive: () => true,
+      mode: "lite"
+    });
+    await Promise.resolve();
+
+    const documentC = await pending(authorization, "document-c");
+    await expect(
+      injectPendingContentDocument({
+        chromeApi,
+        authorization,
+        document: documentC,
+        isRuntimeActive: () => true,
+        mode: "lite"
+      })
+    ).resolves.toMatchObject({ status: "injected", mainWorldController: { revision: 0 } });
+
+    await expect(injectionB).resolves.toEqual({ status: "stale" });
+
+    expect(authorization.getPending(FRAME_ID)?.documentId).toBe("document-c");
+    expect(
+      executeScript.mock.calls.filter(
+        ([options]) => options.target.documentIds?.[0] === "document-b"
+      )
+    ).toHaveLength(1);
+    expect(
+      executeScript.mock.calls.some(
+        ([options]) => options.world === "MAIN" && options.target.documentIds?.[0] === "document-b"
+      )
+    ).toBe(false);
+  });
+
+  it("revokes an exact sender promoted before a failed content injection resolves", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const document = await pending(authorization, "document-d");
+    const contentError = new Error("content execution failed");
+    const executeScript = vi.fn(
+      async (options: { target: { documentIds?: string[] }; world?: string }) => {
+        if (options.world === "ISOLATED") {
+          authorization.authorize({ tabId: TAB_ID, ...document });
+          throw contentError;
+        }
+
+        return [result("document-d")];
+      }
+    );
+
+    await expect(
+      injectPendingContentDocument({
+        chromeApi: chromeWithExecuteScript(executeScript),
+        authorization,
+        document,
+        isRuntimeActive: () => true,
+        mode: "lite"
+      })
+    ).resolves.toEqual({
+      status: "failed",
+      failedCurrentNavigation: true,
+      error: contentError
+    });
+    expect(authorization.get(FRAME_ID)).toBeNull();
+  });
+
+  it("does not inject after the runtime becomes inactive", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const document = await pending(authorization, "document-e");
+    const executeScript = vi.fn();
+
+    await expect(
+      injectPendingContentDocument({
+        chromeApi: chromeWithExecuteScript(executeScript),
+        authorization,
+        document,
+        isRuntimeActive: () => false,
+        mode: "lite"
+      })
+    ).resolves.toEqual({ status: "stale" });
+    expect(executeScript).not.toHaveBeenCalled();
+  });
+
+  it("stops after an exact seed when the document is replaced before MAIN bootstrap", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const document = await pending(authorization, "document-seed-old");
+    const executeScript = vi.fn(async () => [result("document-seed-old")]);
+    const chromeApi = {
+      runtime: { getURL: () => "chrome-extension://dynamic-id/injected.js" },
+      scripting: { executeScript },
+      tabs: {
+        sendMessage: vi.fn(async (_tabId: number, message: { controller: unknown }) => {
+          await pending(authorization, "document-seed-new");
+          return {
+            kind: "content.main-world-controller-seeded",
+            controller: message.controller
+          };
+        })
+      }
+    } as unknown as ChromeApi;
+
+    await expect(
+      injectPendingContentDocument({
+        chromeApi,
+        authorization,
+        document,
+        isRuntimeActive: () => true,
+        mode: "lite"
+      })
+    ).resolves.toEqual({ status: "stale" });
+    expect(executeScript).toHaveBeenCalledTimes(1);
+  });
+
+  it("does not probe an old module after replacement during MAIN bootstrap", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const document = await pending(authorization, "document-main-old");
+    const executeScript = vi.fn(async (options: { world?: string }) => {
+      if (options.world === "MAIN") {
+        await pending(authorization, "document-main-new");
+        return [
+          {
+            ...result("document-main-old"),
+            result: { kind: "installed", phase: "inactive", revision: 0 }
+          }
+        ];
+      }
+      return [result("document-main-old")];
+    });
+    const chromeApi = {
+      runtime: { getURL: () => "chrome-extension://dynamic-id/injected.js" },
+      scripting: { executeScript },
+      tabs: {
+        sendMessage: vi.fn(async (_tabId: number, message: { controller: unknown }) => ({
+          kind: "content.main-world-controller-seeded",
+          controller: message.controller
+        }))
+      }
+    } as unknown as ChromeApi;
+
+    await expect(
+      injectPendingContentDocument({
+        chromeApi,
+        authorization,
+        document,
+        isRuntimeActive: () => true,
+        mode: "lite"
+      })
+    ).resolves.toEqual({ status: "stale" });
+    expect(executeScript).toHaveBeenCalledTimes(2);
+  });
+
+  it("injects only the isolated content agent in Full without touching page globals", async () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    const document = await pending(authorization, "document-full");
+    const originalConsole = () => undefined;
+    const originalFetch = () => Promise.resolve();
+    const originalStorage = { getItem: () => null };
+    const pageGlobals: {
+      console: () => void;
+      fetch: () => Promise<unknown>;
+      localStorage: { getItem: () => string | null };
+    } = {
+      console: originalConsole,
+      fetch: originalFetch,
+      localStorage: originalStorage
+    };
+    const executeScript = vi.fn(
+      async (options: {
+        target: { documentIds?: string[] };
+        world?: "MAIN" | "ISOLATED";
+        files?: string[];
+      }) => {
+        if (options.files?.includes("injected.js")) {
+          pageGlobals.console = () => undefined;
+          pageGlobals.fetch = () => Promise.reject(new Error("hooked"));
+          pageGlobals.localStorage = { getItem: () => "hooked" };
+        }
+
+        return [result(options.target.documentIds?.[0] ?? "")];
+      }
+    );
+
+    await expect(
+      injectPendingContentDocument({
+        chromeApi: chromeWithExecuteScript(executeScript),
+        authorization,
+        document,
+        isRuntimeActive: () => true,
+        mode: "full"
+      })
+    ).resolves.toEqual({ status: "injected" });
+
+    expect(executeScript).toHaveBeenCalledTimes(1);
+    expect(executeScript).toHaveBeenCalledWith({
+      target: { tabId: TAB_ID, documentIds: ["document-full"] },
+      world: "ISOLATED",
+      files: ["content.js"]
+    });
+    expect(pageGlobals).toEqual({
+      console: originalConsole,
+      fetch: originalFetch,
+      localStorage: originalStorage
+    });
+  });
+});
+
+async function pending(authorization: ContentDocumentAuthorization, documentId: string) {
+  const prepared = await authorization.prepareCommittedNavigation(
+    {
+      tabId: TAB_ID,
+      frameId: FRAME_ID,
+      documentId,
+      url: `https://widgets.example/${documentId}`
+    },
+    () => true
+  );
+
+  if (!prepared.prepared) {
+    throw new Error(`Expected a pending document, received ${prepared.reason}.`);
+  }
+
+  return prepared.document;
+}
+
+function result(documentId: string): InjectionResult {
+  return { frameId: FRAME_ID, documentId };
+}
+
+function chromeWithExecuteScript(
+  executeScript: (options: {
+    target: { documentIds?: string[] };
+    world?: "MAIN" | "ISOLATED";
+    files?: string[];
+    func?: (...args: never[]) => unknown;
+    args?: unknown[];
+  }) => Promise<InjectionResult[]>
+) {
+  return {
+    runtime: {
+      getURL: () => "chrome-extension://dynamic-id/injected.js"
+    },
+    tabs: {
+      sendMessage: async (_tabId: number, message: unknown) => ({
+        kind: "content.main-world-controller-seeded",
+        controller: (message as { controller: unknown }).controller
+      })
+    },
+    scripting: {
+      executeScript: async (options: {
+        target: { documentIds?: string[] };
+        world?: "MAIN" | "ISOLATED";
+        files?: string[];
+        func?: (...args: never[]) => unknown;
+        args?: unknown[];
+      }) => {
+        const results = await executeScript(options);
+        if (options.world === "MAIN" && options.func) {
+          for (const result of results) {
+            if (result.result === undefined) {
+              result.result =
+                options.args?.length === 3
+                  ? {
+                      kind: "probed",
+                      phase: "inactive",
+                      revision: 0,
+                      activationId: null,
+                      producedThrough: 0,
+                      truncatedBefore: 0
+                    }
+                  : { kind: "installed", phase: "inactive", revision: 0 };
+            }
+          }
+        }
+        return results;
+      }
+    }
+  } as unknown as ChromeApi;
+}
diff --git a/apps/extension/src/sw/dynamic-content-injection.ts b/apps/extension/src/sw/dynamic-content-injection.ts
new file mode 100644
index 0000000..7e81ed8
--- /dev/null
+++ b/apps/extension/src/sw/dynamic-content-injection.ts
@@ -0,0 +1,107 @@
+import type { CaptureMode } from "@webblackbox/protocol";
+
+import type { ChromeApi } from "../shared/chrome-api.js";
+import type { MainWorldControllerHint } from "../shared/main-world-controller.js";
+import {
+  shouldInjectIsolatedContentForMode,
+  shouldInjectMainWorldHooksForMode
+} from "../shared/mode-profile.js";
+import {
+  ContentDocumentAuthorization,
+  type AuthorizedContentDocument
+} from "./content-document-authorization.js";
+import {
+  advanceControllerFromControl,
+  bootstrapMainWorldDirectController,
+  controlMainWorldDirectController,
+  createMainWorldControllerHint,
+  injectContentScript,
+  seedMainWorldControllerHint
+} from "./script-injection.js";
+
+export type DynamicContentInjectionResult =
+  | Readonly<{ status: "injected"; mainWorldController?: MainWorldControllerHint }>
+  | Readonly<{ status: "stale" }>
+  | Readonly<{ status: "failed"; failedCurrentNavigation: boolean; error: unknown }>;
+
+/**
+ * Injects the mode-allowed worlds into one exact committed document. Every
+ * async boundary rechecks the navigation identity so a late B result cannot
+ * touch C.
+ */
+export async function injectPendingContentDocument(input: {
+  chromeApi: ChromeApi | null | undefined;
+  authorization: ContentDocumentAuthorization;
+  document: AuthorizedContentDocument;
+  isRuntimeActive: () => boolean;
+  mode: CaptureMode;
+}): Promise<DynamicContentInjectionResult> {
+  const { frameId, documentId } = input.document;
+  const isCurrent = () =>
+    input.isRuntimeActive() && input.authorization.isCurrentNavigation(frameId, documentId);
+
+  if (!isCurrent()) {
+    return { status: "stale" };
+  }
+
+  try {
+    if (shouldInjectIsolatedContentForMode(input.mode)) {
+      await injectContentScript(input.chromeApi, {
+        tabId: input.authorization.tabId,
+        frameId,
+        documentId
+      });
+
+      if (!isCurrent()) {
+        return { status: "stale" };
+      }
+    }
+
+    let mainWorldController: MainWorldControllerHint | undefined;
+    if (shouldInjectMainWorldHooksForMode(input.mode)) {
+      const target = {
+        tabId: input.authorization.tabId,
+        frameId,
+        documentId
+      };
+      const generated = createMainWorldControllerHint();
+      const seeded = await seedMainWorldControllerHint(input.chromeApi, target, generated);
+
+      if (!isCurrent()) {
+        return { status: "stale" };
+      }
+
+      const bootstrap = await bootstrapMainWorldDirectController(input.chromeApi, target, seeded);
+      if (bootstrap.kind !== "installed" && bootstrap.kind !== "existing") {
+        throw new Error("MAIN-world direct bootstrap was rejected.");
+      }
+      if (!isCurrent()) {
+        return { status: "stale" };
+      }
+      const probe = await controlMainWorldDirectController(input.chromeApi, target, seeded, {
+        kind: "probe"
+      });
+      const advanced = advanceControllerFromControl(seeded, probe);
+      if (!advanced) {
+        throw new Error("MAIN-world direct probe did not match its isolated controller.");
+      }
+      mainWorldController = advanced;
+
+      if (!isCurrent()) {
+        return { status: "stale" };
+      }
+    }
+
+    if (!isCurrent()) {
+      return { status: "stale" };
+    }
+
+    return {
+      status: "injected",
+      ...(mainWorldController === undefined ? {} : { mainWorldController })
+    };
+  } catch (error) {
+    const failedCurrentNavigation = input.authorization.failNavigation(frameId, documentId);
+    return { status: "failed", failedCurrentNavigation, error };
+  }
+}
diff --git a/apps/extension/src/sw/index.ts b/apps/extension/src/sw/index.ts
index c9d317b..f3281a5 100644
--- a/apps/extension/src/sw/index.ts
+++ b/apps/extension/src/sw/index.ts
@@ -3,6 +3,15 @@ import {
   createChromeDebuggerTransport,
   type CdpRouter
 } from "@webblackbox/cdp-router";
+import type {
+  PipelineDeliveryEventProvenance,
+  PipelineDeliveryNoOutputChange,
+  PipelineDeliveryReceipt,
+  PipelineDeliveryReceiptQuery,
+  PipelineDeliverySidecar,
+  PipelineResumeState,
+  ScreenRecordingChunkReference
+} from "@webblackbox/pipeline";
 import {
   createSessionId,
   DEFAULT_CAPTURE_POLICY,
@@ -23,17 +32,31 @@ import {
 } from "@webblackbox/protocol";
 import {
   createDefaultRecorderPlugins,
+  normalizeWebSocketFramePayload,
   type RawRecorderEvent,
   WebBlackboxRecorder
 } from "@webblackbox/recorder";
 
-import { getChromeApi, type PortLike } from "../shared/chrome-api.js";
+import { normalizeOptionalIngestOperationId } from "../offscreen/ingest-idempotency.js";
+import { getChromeApi, type MessageSenderLike, type PortLike } from "../shared/chrome-api.js";
+import type {
+  ContentActivationId,
+  ContentEventBatchId
+} from "../shared/content-activation-protocol.js";
 import {
+  isAuthorizedExtensionPort,
+  parseExtensionInboundMessage
+} from "../shared/inbound-messages.js";
+import {
+  CONTENT_EVENT_BATCH_MAX,
   PORT_NAMES,
+  type ContentSameDocumentTransition,
   type ExportPrivacyWarning,
   type ExtensionInboundMessage,
   type ExtensionOutboundMessage,
   type FullModeVisualCapture,
+  type OffscreenScreenRecordingChunkMessage,
+  type ScreenRecordingChunkAckMessage,
   type SessionListMessage,
   type SessionListItem
 } from "../shared/messages.js";
@@ -42,7 +65,11 @@ import {
   normalizePerformanceBudget,
   type PerformanceBudgetConfig
 } from "../shared/performance-budget.js";
-import { shouldInjectPageHooksForMode } from "../shared/mode-profile.js";
+import {
+  assertRuntimeStartRequirements,
+  resolveInstalledRuntimeCapabilities
+} from "../shared/runtime-capabilities.js";
+import { shouldInjectIsolatedContentForMode } from "../shared/mode-profile.js";
 import {
   applyEnterprisePolicyToRecorderConfig,
   ENTERPRISE_POLICY_STORAGE_KEY,
@@ -57,23 +84,137 @@ import {
   normalizeBodyCaptureMaxBytes as normalizeBodyCaptureMaxBytesUtil,
   isTextualMimeType as isTextualMimeTypeUtil,
   normalizeMimeType as normalizeMimeTypeUtil,
-  redactBodyText as redactBodyTextUtil,
   resolveFullBodyCaptureRule as resolveFullBodyCaptureRuleUtil,
   resolveLiteBodyCaptureRule as resolveLiteBodyCaptureRuleUtil,
   transformResponseBodyForCapture
 } from "./body-capture-utils.js";
 import {
-  shouldStopForCaptureScopeOriginChange,
+  bindCapturePolicyToSession,
+  evaluateCaptureDocumentScope,
+  isCaptureEventFrameAllowed,
+  resolveContentScriptInjectionTarget,
   shouldStopForEnterpriseOriginPolicy as shouldStopForEnterpriseOriginPolicyInput
 } from "./capture-scope.js";
+import {
+  canCaptureGlobalCdpArtifactsForRoot,
+  clearCdpCaptureScopeState,
+  createCdpCaptureScopeState,
+  evaluateCdpCaptureScopeEvent,
+  filterCdpSnapshotDocuments,
+  forgetCdpRequestScope,
+  getCdpChildSessionClaim,
+  invalidateCdpCaptureFrameTree,
+  isCdpCaptureFrameTreePrimedForRoot,
+  isCdpChildSessionClaimCurrent,
+  refreshCdpCaptureFrameTree,
+  type CdpCaptureScopeState,
+  type CdpChildSessionClaim
+} from "./cdp-capture-scope.js";
+import { bootstrapCdpChildSession } from "./cdp-child-bootstrap.js";
 import { withCdpCommandTimeout, type CdpCommandOutcome } from "./cdp-command.js";
+import {
+  buildCdpFollowupRequestMetaKey,
+  evaluateCdpTargetControlScopeEvent,
+  isCdpFollowupClaimCurrent
+} from "./cdp-event-followup.js";
+import {
+  bootstrapCdpRoot,
+  cleanupAndRethrowCdpRootBootstrapFailure,
+  type CdpRootFrameTreePrime
+} from "./cdp-root-bootstrap.js";
+import { ContentDocumentAuthorization } from "./content-document-authorization.js";
+import {
+  ContentActivationRegistry,
+  type ContentActivationSnapshot,
+  type ContentActivationState
+} from "./content-activation-registry.js";
+import {
+  canFinalizeMainWorldRevocation,
+  runBoundedMainWorldDeactivation
+} from "./content-main-world-revocation.js";
+import {
+  ContentEventBatchLedger,
+  classifyContentEventBatchReceipt,
+  fingerprintContentEventBatch,
+  isContentEventBatchAdmissionLive,
+  processContentEventBatchAttempt,
+  readContentEventBatchReceiptAfterBarrier,
+  type ContentEventBatchAdmissionIdentity,
+  type ContentEventBatchRecord
+} from "./content-event-batch-ledger.js";
+import { disconnectContentPort } from "./content-port-lifecycle.js";
+import { commitDurableRemoval } from "./durable-removal.js";
+import { injectPendingContentDocument } from "./dynamic-content-injection.js";
 import {
   buildLiteNetworkFailureRawEvent,
   buildLiteNetworkRequestRawEvent,
   buildLiteNetworkResponseRawEvent
 } from "./lite-network-baseline.js";
-import { shouldUpdateSessionMetadataFromNavigation } from "./navigation-metadata.js";
+import {
+  authorizeLiteWebRequest,
+  isLiteWebRequestDocumentUrlUnambiguous,
+  type LiteWebRequestAuthorizationDecision
+} from "./lite-web-request-authorization.js";
+import {
+  advanceCdpRestoreEpoch,
+  cancelExactWebNavigationCommitObservation,
+  canUseExactLiteTopDocumentAuthorization,
+  classifyActiveCommittedDocument,
+  createExactTopNavigationObservationState,
+  isCdpRestoreEpochCurrent,
+  observeExactCdpTopNavigation,
+  observeExactWebNavigationCommit,
+  resolveCurrentTabUrlPolicyDecision,
+  resolveCdpRestorePredecessor,
+  resolveCdpTopNavigationOwnership,
+  resolveExactInitialContentParent,
+  shouldContentSenderClaimCaptureUrl,
+  shouldUpdateSessionMetadataFromNavigation,
+  type ExactTopNavigationObservationState
+} from "./navigation-metadata.js";
+import { runRootNavigationInstrumentationTransaction } from "./root-navigation-instrumentation.js";
+import {
+  claimRuntimeNavigation,
+  isRuntimeNavigationClaimCurrent as isNavigationClaimCurrent,
+  snapshotRuntimeNavigation,
+  type RuntimeNavigationClaim,
+  type RuntimeNavigationSource
+} from "./runtime-navigation-claim.js";
+import {
+  canOperateOnExpectedNavigationResource,
+  didGuardedNavigationOperationRun,
+  launchDetachedNavigationTask,
+  reconcileAmbiguousNavigationResourceStart,
+  resolveCdpNavigationPrimeOutcome,
+  resolveTabNavigationSignal,
+  runGuardedNavigationStep,
+  runRuntimeNavigationTask
+} from "./runtime-navigation-operations.js";
 import { extractPerformanceBudgetNetworkSample } from "./performance-budget.js";
+import {
+  sameMainWorldControllerCapability,
+  type MainWorldControllerHint
+} from "../shared/main-world-controller.js";
+import {
+  acknowledgePipelineBatch,
+  acquirePipelineBatch,
+  shouldRecoverOffscreenPipeline,
+  shouldRetryOffscreenPipelineRequest,
+  type PipelineBatchInFlight
+} from "./pipeline-batch.js";
+import {
+  ScreenRecordingChunkWriteLedger,
+  ScreenRecordingFinalizationGate,
+  retryScreenRecordingFinalization,
+  runDurableScreenRecordingFinalization
+} from "./screen-recording-chunk-write.js";
+import { OffscreenDocumentLifecycle } from "./offscreen-document-lifecycle.js";
+import { SameDocumentTransitionLedger } from "./same-document-transition-ledger.js";
+import {
+  commitSessionAnnotationMutation,
+  mergePersistedSessionAnnotation,
+  SessionAnnotationMutationCoordinator
+} from "./session-annotation-state.js";
 import {
   buildRequestMetaKey,
   deleteRequestMeta,
@@ -81,29 +222,117 @@ import {
   upsertRequestMeta,
   type RequestMetaEntry
 } from "./request-meta.js";
+import {
+  advanceControllerFromControl,
+  bootstrapMainWorldDirectController,
+  controlMainWorldDirectController,
+  injectRootPageAgentsForMode
+} from "./script-injection.js";
 import {
   FULL_MODE_STORAGE_SNAPSHOT_MAX_ITEMS,
   buildLocalStorageSnapshotExpression,
   parseStorageSnapshotMeta,
   type LocalStorageSnapshotMode
 } from "./storage-snapshot.js";
+import {
+  acknowledgeStopDrain,
+  canAdmitStopDrainBatch,
+  claimStopDrainEvent,
+  closeStopDrain,
+  commitStopDrainBatchClaims,
+  commitStopDrainClaim,
+  createStopDrainCapability,
+  dropUnclaimableStopDrainOrdinaryEvent,
+  getCommittedStopDrainArtifactTypes,
+  isStopDrainClaimValid,
+  releaseStopDrainClaim,
+  resolveStopDrainTimeoutEvidence,
+  runStopDrainBlobOperation,
+  type StopDrainCapability,
+  type StopDrainClaim
+} from "./stop-drain.js";
+import {
+  RuntimeCleanupScheduler,
+  DurableRuntimeRecoveryCheckpoint,
+  MAX_PERSISTED_RUNTIME_SESSIONS,
+  RuntimeStartCancelledError,
+  RuntimeStartCoordinator,
+  type RuntimeStartToken,
+  beginVolatileCaptureQuiescence,
+  blockVolatileCapture,
+  buildInterruptedScreenRecordingRecoveries,
+  capCleanupDeadline,
+  compactScreenRecordingChunkHashes,
+  commitRestoredRuntimeActivation,
+  createVolatileCaptureFence,
+  createRuntimeStateSnapshot,
+  createStoppedRuntimeTombstone,
+  createStoppingRuntimeTombstone,
+  deleteMapEntryIfSame,
+  disposeListenersBeforeTeardown,
+  establishDurableRuntimeRestorationReadiness,
+  evaluateActiveRuntimeRestoration,
+  extractPersistedRuntimeIdentities,
+  isMapEntrySame,
+  isRuntimeActivationProvisional,
+  isRuntimeCaptureAdmitted,
+  isVolatileCaptureOpen,
+  mergeRuntimeStateWithStoppingTombstones,
+  mergeRuntimeCountersWithSequenceWatermark,
+  normalizeOffscreenScreenRecordingStatus,
+  parseRuntimeStateSnapshot,
+  planRuntimeRestoration,
+  preserveRuntimeRowsAfterGlobalRestoreFailure,
+  persistDurableStopTombstone,
+  reconcileScreenRecordingResumeState,
+  recoverStoppingRuntimeFailClosed,
+  recoverStoppingRuntimeForRetention,
+  restoreScreenRecordingChunkHashes,
+  runActiveRuntimeRestorationTransaction,
+  runDurableFailedRuntimeRetention,
+  runDurableRuntimeStopWorkflow,
+  runProvisionalRuntimeStartTransaction,
+  runVolatileCaptureOperation,
+  type PersistedActiveRuntime,
+  type PersistedRuntime,
+  type PersistedRuntimeCounters,
+  type PersistedScreenRecording,
+  type PersistedStoppedRuntime,
+  type PersistedStoppingRuntime,
+  type RuntimeActivationState,
+  type VolatileCaptureFence
+} from "./runtime-state.js";
+import {
+  RuntimeTaskCoordinator,
+  cancelOwnedRuntimeStart,
+  resolveRuntimeEventOwner
+} from "./runtime-identity.js";
 
 type SessionRuntime = {
   sid: string;
   tabId: number;
   mode: CaptureMode;
   url: string;
-  scopeOrigin: string | null;
+  captureUrl: string;
   title?: string;
   tags: string[];
   note?: string;
   config: typeof DEFAULT_RECORDER_CONFIG;
   startedAt: number;
+  stopRequestedAt?: number;
   stoppedAt?: number;
   recorder: WebBlackboxRecorder;
   pipeline: SessionPipelineClient;
   cdpRouter: CdpRouter | null;
-  enabledCdpSessions: Set<string>;
+  cdpScope: CdpCaptureScopeState;
+  contentDocuments: ContentDocumentAuthorization;
+  contentActivationParents: Map<string, { frameId: number; documentId: string }>;
+  contentMainWorldProofs: Map<string, MainWorldControllerHint>;
+  contentNavigationRevisions: Map<string, number>;
+  sameDocumentTransitions: SameDocumentTransitionLedger;
+  pendingContentPolicyRevisions: Map<string, number>;
+  pendingLiteNetworkPolicyRevisions: Map<string, number>;
+  authorizedContentFrames: Set<number>;
   requestMeta: Map<string, RequestMetaEntry>;
   screenshotInterval: ReturnType<typeof setInterval> | null;
   screenRecording: ScreenRecordingRuntime | null;
@@ -112,11 +341,30 @@ type SessionRuntime = {
   lastActionScreenshotMono: number;
   lastIncidentCaptureAt: number;
   lastNavigationSnapshotAt: number;
+  navigationRevision: number;
   queueDepth: number;
   droppedBestEffortTasks: number;
-  pipelineEventBuffer: WebBlackboxEvent[];
+  pipelineEventBuffer: BufferedPipelineEvent[];
+  pipelineBatchInFlight: PipelineBatchInFlight<BufferedPipelineEvent> | null;
+  activePipelineDelivery: PipelineDeliveryEventProvenance | null;
   pipelineFlushTimer: ReturnType<typeof setTimeout> | null;
   pipelineFlushQueued: boolean;
+  captureFence: VolatileCaptureFence;
+  cdpPayloadAdmissionBlocked: boolean;
+  cdpRestoreCheckpoint: {
+    navigationRevision: number;
+    captureUrl: string;
+    childMutationRevision: number;
+    restoreEpoch: number;
+    generation: number;
+  } | null;
+  cdpRestoreEpoch: number;
+  cdpRestoreTail: Promise<void>;
+  cdpRestoreTailEpoch: number;
+  exactTopNavigationObservations: ExactTopNavigationObservationState;
+  exactWebNavigationTransactions: Map<number, ExactWebNavigationCommitTransaction>;
+  activationState: RuntimeActivationState;
+  startToken: RuntimeStartToken | null;
   stopping: boolean;
   responseBodyCaptures: number;
   responseBodyCaptureTimestamps: number[];
@@ -132,13 +380,28 @@ type SessionRuntime = {
   lastFreezeNotices: Map<string, number>;
   lastBudgetBreachAt: Map<string, number>;
   queue: Promise<void>;
+  queueAccepting: boolean;
   removeCdpListeners: Array<() => void>;
   heapSnapshotCapture: HeapSnapshotCaptureState | null;
-  cleanupTimer: ReturnType<typeof setTimeout> | null;
+  cleanupDeadline?: number;
+  consentExpiryTimer: ReturnType<typeof setTimeout> | null;
+};
+
+type SessionNavigationClaim = RuntimeNavigationClaim<SessionRuntime>;
+
+type ExactWebNavigationCommitTransaction = {
+  token: number;
+  restoreEpoch: number;
+  claim: SessionNavigationClaim;
+  phase: "running" | "restoring" | "completed";
+  cdpObserved: boolean;
+  detachedRestorePending: boolean;
 };
 
 type ScreenRecordingRuntime = {
   recordingId: string;
+  cdpScopeGeneration: number | null;
+  provisional: boolean;
   source: "tab";
   startedAt: number;
   startedMono: number;
@@ -150,7 +413,12 @@ type ScreenRecordingRuntime = {
   chunkCount: number;
   sizeBytes: number;
   pendingWrites: Set<Promise<void>>;
+  chunkWrites: ScreenRecordingChunkWriteLedger;
   stopPromise: Promise<void> | null;
+  finalization: ScreenRecordingFinalizationGate;
+  finalizing: boolean;
+  durabilityEvidenceQueued: boolean;
+  terminalEvidenceQueued: boolean;
 };
 
 type PointerState = {
@@ -167,6 +435,7 @@ type ViewportState = {
 };
 
 type HeapSnapshotCaptureState = {
+  cdpScopeGeneration: number;
   chunks: string[];
   bytes: number;
   truncated: boolean;
@@ -202,23 +471,46 @@ type SessionAnnotation = {
   note?: string;
 };
 
+type BufferedPipelineEvent = Readonly<{
+  event: WebBlackboxEvent;
+  delivery?: PipelineDeliveryEventProvenance;
+}>;
+
 type SessionPipelineClient = {
   start: (
     session: SessionMetadata,
     redactionProfile: RedactionProfile,
     capturePolicy?: CapturePolicy
   ) => Promise<void>;
-  ingest: (event: WebBlackboxEvent) => Promise<void>;
-  ingestBatch: (events: WebBlackboxEvent[]) => Promise<void>;
+  ingest: (event: WebBlackboxEvent, operationId?: string) => Promise<void>;
+  ingestBatch: (
+    events: readonly WebBlackboxEvent[],
+    operationId?: string,
+    options?: { screenRecordingFinalization?: boolean }
+  ) => Promise<void>;
+  ingestBatchWithDelivery: (
+    events: readonly WebBlackboxEvent[],
+    deliveryByEventId: PipelineDeliverySidecar,
+    operationId?: string,
+    options?: { screenRecordingFinalization?: boolean }
+  ) => Promise<void>;
+  getDeliveryReceipt: (
+    query: PipelineDeliveryReceiptQuery
+  ) => Promise<PipelineDeliveryReceipt | undefined>;
+  commitDeliveryProgress: (changes: readonly PipelineDeliveryNoOutputChange[]) => Promise<void>;
   flush: () => Promise<void>;
-  putBlob: (mime: string, bytes: Uint8Array) => Promise<string>;
+  getResumeState: () => Promise<PipelineResumeState>;
+  putBlob: (
+    mime: string,
+    bytes: Uint8Array,
+    options?: { screenRecordingFinalization?: boolean }
+  ) => Promise<string>;
   exportAndDownload: (options?: {
     passphrase?: string;
     includeScreenshots?: boolean;
     includeScreenRecordings?: boolean;
     maxArchiveBytes?: number;
     recentWindowMs?: number;
-    allowPlaintextLocalExport?: boolean;
   }) => Promise<PipelineExportDownloadResult>;
   close: (options?: { purge?: boolean }) => Promise<void>;
 };
@@ -230,26 +522,40 @@ type OffscreenPipelineRequest = {
     | "start"
     | "ingest"
     | "ingestBatch"
+    | "ingestBatchDurably"
+    | "ingestBatchWithDelivery"
     | "flush"
+    | "getResumeState"
+    | "getDeliveryReceipt"
+    | "commitDeliveryProgress"
     | "putBlob"
     | "exportDownload"
     | "close"
+    | "getScreenRecordingStatus"
+    | "quiesceScreenRecording"
     | "startScreenRecording"
     | "stopScreenRecording";
   sid: string;
+  operationId?: string;
   session?: SessionMetadata;
   redactionProfile?: RedactionProfile;
   capturePolicy?: CapturePolicy;
   event?: WebBlackboxEvent;
-  events?: WebBlackboxEvent[];
+  events?: readonly WebBlackboxEvent[];
+  deliverySidecar?: Array<{
+    eventId: string;
+    provenance: PipelineDeliveryEventProvenance;
+  }>;
+  deliveryProgress?: readonly PipelineDeliveryNoOutputChange[];
+  deliveryQuery?: PipelineDeliveryReceiptQuery;
   mime?: string;
   bytes?: Uint8Array;
+  screenRecordingFinalization?: boolean;
   passphrase?: string;
   includeScreenshots?: boolean;
   includeScreenRecordings?: boolean;
   maxArchiveBytes?: number;
   recentWindowMs?: number;
-  allowPlaintextLocalExport?: boolean;
   purge?: boolean;
   recordingId?: string;
   streamId?: string;
@@ -280,25 +586,16 @@ type OffscreenScreenRecordingStopResult = {
   mime: string;
   chunkCount: number;
   size: number;
+  durableChunkCount?: number;
+  durableSize?: number;
+  degraded?: boolean;
+  degradationReason?: string;
   durationMs: number;
   width?: number;
   height?: number;
   reason?: string;
 };
 
-type OffscreenScreenRecordingChunkMessage = {
-  kind: "offscreen.screen-recording-chunk";
-  sid: string;
-  recordingId: string;
-  index: number;
-  mime: string;
-  bytes: unknown;
-  size?: number;
-  startOffsetMs?: number;
-  endOffsetMs?: number;
-  durationMs?: number;
-};
-
 type OffscreenScreenRecordingEndedMessage = {
   kind: "offscreen.screen-recording-ended";
   sid: string;
@@ -323,6 +620,38 @@ type RecordingSampling = {
   bodyCaptureMaxBytes: number;
 };
 
+type SessionContentActivation = ContentActivationSnapshot<
+  SessionRuntime,
+  VolatileCaptureFence,
+  CaptureMode
+>;
+
+type StopDrainNotice = Extract<ExtensionOutboundMessage, { kind: "sw.content-drain" }>;
+
+type PendingStopDrainAck = {
+  sid: string;
+  runtime: SessionRuntime;
+  capabilities: Map<ContentActivationId, StopDrainCapability>;
+  acknowledged: Set<ContentActivationId>;
+  settling: boolean;
+  timeoutFinalizing: boolean;
+  timeoutNoticeQueued: boolean;
+  resolve: () => void;
+  timeout: ReturnType<typeof setTimeout>;
+  retryTimer: ReturnType<typeof setInterval>;
+};
+
+type ContentEventBatchAdmission = ContentEventBatchAdmissionIdentity<
+  SessionRuntime,
+  VolatileCaptureFence,
+  CaptureMode
+> & {
+  readonly kind: "content-event-batch";
+  readonly activationId: ContentActivationId;
+  readonly batchId: ContentEventBatchId;
+  valid: boolean;
+};
+
 type LiteBodyCaptureRule = {
   enabled: boolean;
   maxBytes: number;
@@ -330,23 +659,59 @@ type LiteBodyCaptureRule = {
 };
 
 const chromeApi = getChromeApi();
+const extensionBaseUrl = chromeApi?.runtime?.getURL("") ?? "";
 
 const sessionsByTab = new Map<number, SessionRuntime>();
 const sessionsBySid = new Map<string, SessionRuntime>();
+const offscreenDocumentLifecycle = new OffscreenDocumentLifecycle();
+const sessionStartCoordinator = new RuntimeStartCoordinator();
+const runtimeStopTasks = new RuntimeTaskCoordinator<SessionRuntime>();
+const runtimeDisposeTasks = new RuntimeTaskCoordinator<SessionRuntime>();
+const contentActivations = new ContentActivationRegistry<
+  SessionRuntime,
+  VolatileCaptureFence,
+  PortLike,
+  CaptureMode
+>();
+const retainedStoppingRuntimesBySid = new Map<string, PersistedStoppingRuntime>();
+const pendingRuntimeRestorationsBySid = new Map<string, PersistedRuntime>();
+const runtimeRestorationSourceRowsBySid = new Map<string, PersistedRuntime>();
+let runtimeRestorationCheckpointRewriteAllowed = false;
 const sessionAnnotations = new Map<string, SessionAnnotation>();
+const sessionAnnotationMutations = new SessionAnnotationMutationCoordinator();
 const connectedPorts = new Set<PortLike>();
 let offscreenPort: PortLike | null = null;
-const pendingStopDrainAcks = new Map<
-  string,
+const pendingStopDrainAcks = new Map<string, PendingStopDrainAck>();
+const preparedStopDrainPlans = new WeakMap<
+  SessionRuntime,
   {
-    sid: string;
-    tabId: number;
-    ackReceived: boolean;
-    resolve: () => void;
-    timeout: ReturnType<typeof setTimeout>;
+    wait: Promise<void>;
+    notification: Promise<void>;
   }
 >();
-const inFlightContentMessagesByTab = new Map<number, number>();
+const inFlightContentMessagesByActivation = new Map<ContentActivationId, number>();
+const contentEventBatchLedger = new ContentEventBatchLedger<PortLike>();
+const contentEventBatchAdmissionsByActivation = new Map<
+  ContentActivationId,
+  Set<ContentEventBatchAdmission>
+>();
+const pendingContentRevocations = new Map<ContentActivationId, Promise<void>>();
+const contentRevocationControllers = new Map<
+  ContentActivationId,
+  { key: string; controller: MainWorldControllerHint }
+>();
+const contentRevocationRetryTimers = new Map<ContentActivationId, ReturnType<typeof setTimeout>>();
+const pendingContentArmWaiters = new Set<{
+  runtime: SessionRuntime;
+  fence: VolatileCaptureFence;
+  frameId: number;
+  documentId?: string;
+  excludedDocumentId?: string;
+  awaitingCommittedDocument?: boolean;
+  resolve: (activation: SessionContentActivation) => void;
+  reject: (error: Error) => void;
+  timeout: ReturnType<typeof setTimeout>;
+}>();
 const pendingOffscreenRequests = new Map<
   string,
   {
@@ -359,6 +724,8 @@ const offscreenSessionRecovery = new Map<string, Promise<void>>();
 let offscreenRequestSeq = 0;
 let freezeBadgeTimer: ReturnType<typeof setTimeout> | null = null;
 let liteWebRequestCaptureCleanup: (() => void) | null = null;
+let runtimeStatePersistTail: Promise<void> = Promise.resolve();
+let runtimeStatePersistTimer: ReturnType<typeof setTimeout> | null = null;
 
 const OFFSCREEN_PATH = "offscreen.html";
 const SCREENSHOT_ACTION_COOLDOWN_MS = 2_000;
@@ -409,7 +776,8 @@ const FULL_MODE_FOLLOWUP_METHODS = new Set([
   "Network.loadingFinished",
   "Network.loadingFailed",
   "Runtime.exceptionThrown",
-  "Page.frameNavigated"
+  "Page.frameNavigated",
+  "Page.navigatedWithinDocument"
 ]);
 const LITE_DEFAULT_BODY_MIME_ALLOWLIST = [
   "text/*",
@@ -432,15 +800,10 @@ const ACTIVE_SESSION_STORAGE_KEY = "webblackbox.runtime.sessions";
 const SESSION_ANNOTATIONS_STORAGE_KEY = "webblackbox.runtime.sessionAnnotations";
 const EXPORT_AUDIT_STORAGE_KEY = "webblackbox.audit.exports";
 const EXPORT_AUDIT_MAX_EVENTS = 200;
-const STOPPED_SESSION_TTL_MS = 10 * 60_000;
+const RUNTIME_STATE_PERSIST_DEBOUNCE_MS = 500;
+const RUNTIME_RESTORATION_RETRY_MS = 1_000;
+const RETAINED_STOPPING_RETRY_DELAY_MS = 30_000;
 const ACTION_SCREENSHOT_RAW_TYPES = new Set(["click", "dblclick", "submit", "marker"]);
-const STOP_DRAIN_CONTENT_RAW_TYPES = new Set([
-  "snapshot",
-  "localStorageSnapshot",
-  "indexedDbSnapshot",
-  "cookieSnapshot",
-  "screenshot"
-]);
 const PERF_LOG_FLAG = "__WEBBLACKBOX_PERF__";
 const PORT_DEBUG_LOG_FLAG = "__WEBBLACKBOX_DEBUG_PORT__";
 const PERF_WARN_MS = 40;
@@ -448,23 +811,83 @@ const OFFSCREEN_REQUEST_TIMEOUT_DEFAULT_MS = 30_000;
 const OFFSCREEN_REQUEST_TIMEOUT_EXPORT_MS = 12 * 60_000;
 const OFFSCREEN_PORT_READY_MAX_ATTEMPTS = 200;
 const OFFSCREEN_PORT_READY_WAIT_MS = 25;
-const STOP_DRAIN_ACK_TIMEOUT_MS = 3_000;
+const STOP_DRAIN_ACK_TIMEOUT_MS = 15_000;
+const STOP_DRAIN_NOTIFICATION_TIMEOUT_MS = 2_000;
+const STOP_DRAIN_NOTIFICATION_RETRY_MS = 500;
+const STOP_DRAIN_QUEUE_SETTLE_TIMEOUT_MS = 1_500;
+const MAIN_WORLD_REVOCATION_TIMEOUT_MS = 2_000;
+const MAIN_WORLD_REVOCATION_RETRY_MS = 500;
+const SCREEN_RECORDING_FINALIZATION_MAX_ATTEMPTS = 5;
+const SCREEN_RECORDING_FINALIZATION_RETRY_INITIAL_MS = 250;
+const CONTENT_ARM_TIMEOUT_MS = 5_000;
 const CDP_ARTIFACT_TIMEOUT_MS = 5_000;
 const CDP_HEAP_SNAPSHOT_TIMEOUT_MS = 8_000;
+const CDP_CHILD_SETTLE_TIMEOUT_MS = 15_000;
 const SCREEN_RECORDING_OFFSCREEN_SOURCE = "tab";
+const PIPELINE_RESUME_MAX_SCREEN_CHUNKS = 500_000;
 
 console.info("[WebBlackbox] service worker booted");
 
-void restoreRuntimeState();
+const runtimeCleanupScheduler = new RuntimeCleanupScheduler({
+  alarms: chromeApi?.alarms,
+  onDue: async (sid) => {
+    const retainedStopping = retainedStoppingRuntimesBySid.get(sid);
+
+    if (retainedStopping) {
+      await retryRetainedStoppingRuntimeRecovery(retainedStopping);
+      return;
+    }
+
+    const retainedStopped = pendingRuntimeRestorationsBySid.get(sid);
+
+    if (retainedStopped?.state === "stopped") {
+      await retryRetainedStoppedRuntimeRecovery(retainedStopped);
+      return;
+    }
+
+    const runtime = sessionsBySid.get(sid);
+
+    if (runtime?.stoppedAt) {
+      await disposeStoppedSession(runtime);
+    }
+  }
+});
+let runtimeStateRestored = false;
+const runtimeStateRestorePromise = establishDurableRuntimeRestorationReadiness({
+  restore: restoreRuntimeState,
+  failClosed: failClosedRuntimeRestoration,
+  waitForRetry: () => wait(RUNTIME_RESTORATION_RETRY_MS),
+  shouldRetryRestore: () =>
+    !runtimeRestorationCheckpointRewriteAllowed &&
+    runtimeRestorationSourceRowsBySid.size === 0 &&
+    pendingRuntimeRestorationsBySid.size === 0 &&
+    retainedStoppingRuntimesBySid.size === 0 &&
+    sessionsBySid.size === 0,
+  markReady: () => {
+    runtimeStateRestored = true;
+    notifyOffscreenPipelineStatus();
+  },
+  onRestoreFailure: (error) => {
+    console.warn("[WebBlackbox] runtime state restoration failed closed", error);
+  },
+  onFailClosedRetry: (error) => {
+    console.warn("[WebBlackbox] durable fail-closed checkpoint retry scheduled", error);
+  }
+});
+
+chromeApi?.alarms?.onAlarm.addListener((alarm) => {
+  void runtimeCleanupScheduler.handleAlarm(alarm.name).catch((error) => {
+    console.warn("[WebBlackbox] stopped-session cleanup alarm failed", error);
+  });
+});
 
 chromeApi?.runtime?.onInstalled.addListener(() => {
   void setIdleBadge();
 });
 
 chromeApi?.runtime?.onConnect.addListener((port) => {
-  if (
-    !Object.values(PORT_NAMES).includes(port.name as (typeof PORT_NAMES)[keyof typeof PORT_NAMES])
-  ) {
+  if (!isAuthorizedExtensionPort(port, extensionBaseUrl)) {
+    port.disconnect?.();
     return;
   }
 
@@ -475,12 +898,6 @@ chromeApi?.runtime?.onConnect.addListener((port) => {
     notifyOffscreenPipelineStatus();
   }
 
-  if (port.name === PORT_NAMES.content) {
-    void syncContentPortStateOnConnect(port).catch((error) => {
-      logInboundMessageFailure("content.connect", error, port);
-    });
-  }
-
   pushSessionList();
 
   const onMessage = (rawMessage: unknown) => {
@@ -488,7 +905,12 @@ chromeApi?.runtime?.onConnect.addListener((port) => {
       return;
     }
 
-    const message = parseInboundMessage(rawMessage);
+    const message = parseExtensionInboundMessage(rawMessage, {
+      transport: "port",
+      portName: port.name,
+      sender: port.sender,
+      extensionBaseUrl
+    });
 
     if (!message) {
       return;
@@ -498,7 +920,12 @@ chromeApi?.runtime?.onConnect.addListener((port) => {
   };
 
   const onDisconnect = () => {
-    connectedPorts.delete(port);
+    if (port.name === PORT_NAMES.content) {
+      contentActivations.unbindPort(port);
+      disconnectContentPort(connectedPorts, port);
+    } else {
+      connectedPorts.delete(port);
+    }
 
     if (offscreenPort === port) {
       offscreenPort = null;
@@ -519,67 +946,18 @@ chromeApi?.runtime?.onConnect.addListener((port) => {
   port.onDisconnect.addListener(onDisconnect);
 });
 
-async function syncContentPortStateOnConnect(port: PortLike): Promise<void> {
-  const tabId = port.sender?.tab?.id;
-
-  if (typeof tabId !== "number") {
-    return;
-  }
-
-  const runtime = sessionsByTab.get(tabId);
-
-  if (!runtime || runtime.stoppedAt) {
-    return;
-  }
-
-  if (shouldInjectHooksForMode(runtime.mode)) {
-    await ensureInjectedHooks(tabId);
-  }
-
-  syncContentPortRecordingState(port);
-}
-
-function syncContentPortRecordingState(port: PortLike): void {
-  const tabId = port.sender?.tab?.id;
-
-  if (typeof tabId !== "number") {
-    return;
-  }
-
-  const runtime = sessionsByTab.get(tabId);
-
-  if (!runtime || runtime.stoppedAt) {
-    return;
-  }
-
-  const sampling = toStatusSampling(runtime);
-
-  try {
-    port.postMessage({
-      kind: "sw.recording-status",
-      active: true,
-      sid: runtime.sid,
-      mode: runtime.mode,
-      sampling,
-      capturePolicy: runtime.config.capturePolicy
-    });
-  } catch (error) {
-    logPortSendFailure("sw.recording-status", error, {
-      tabId,
-      sid: runtime.sid,
-      mode: runtime.mode
-    });
-  }
-}
-
 chromeApi?.runtime?.onMessage.addListener((rawMessage, sender, sendResponse) => {
-  const message = parseInboundMessage(rawMessage);
+  const message = parseExtensionInboundMessage(rawMessage, {
+    transport: "runtime",
+    sender,
+    extensionBaseUrl
+  });
 
   if (!message) {
     return;
   }
 
-  void handleInboundMessage(message, undefined, sender.tab?.id, sender.frameId)
+  void handleInboundMessage(message, undefined, sender)
     .then((result) => {
       sendResponse(result ?? { ok: true });
     })
@@ -600,13 +978,12 @@ chromeApi?.runtime?.onMessage.addListener((rawMessage, sender, sendResponse) =>
 function dispatchInboundMessage(
   message: ExtensionInboundMessage,
   port?: PortLike,
-  senderTabId?: number,
-  senderFrameId?: number
+  sender: MessageSenderLike | undefined = port?.sender
 ): void {
-  void handleInboundMessage(message, port, senderTabId, senderFrameId).catch((error) => {
+  void handleInboundMessage(message, port, sender).catch((error) => {
     logInboundMessageFailure(message.kind, error, port, {
-      tabId: senderTabId,
-      frameId: senderFrameId
+      tabId: sender?.tab?.id,
+      frameId: sender?.frameId
     });
   });
 }
@@ -620,30 +997,181 @@ chromeApi?.commands?.onCommand.addListener((command) => {
 });
 
 chromeApi?.tabs?.onUpdated?.addListener((tabId, changeInfo) => {
-  if (typeof changeInfo.url !== "string" || changeInfo.url.length === 0) {
-    if (changeInfo.status === "complete") {
-      void restoreTabInstrumentationAfterNavigation(tabId);
+  const runtime = sessionsByTab.get(tabId);
+  const signal = resolveTabNavigationSignal(changeInfo);
+
+  if (!runtime || !signal) {
+    return;
+  }
+
+  if (usesExactLiteTopDocumentAuthorization(runtime)) {
+    if (signal.candidateUrl) {
+      const hintClaim = claimCurrentRuntimeNavigation(runtime, signal.source, signal.candidateUrl);
+
+      if (!hintClaim) {
+        return;
+      }
+
+      void handleExactLiteTabUrlChanged(hintClaim, signal.candidateUrl).catch((error) => {
+        console.warn("[WebBlackbox] failed to apply exact Lite tab URL change", {
+          tabId,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      });
+    }
+
+    if (signal.completed) {
+      void restoreExactLiteTabMetadataAfterNavigation(runtime).catch((error) => {
+        console.warn("[WebBlackbox] failed to restore exact Lite tab metadata", {
+          tabId,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      });
     }
     return;
   }
 
-  void handleTabUrlChanged(tabId, changeInfo.url);
+  if (runtime.mode === "full" && hasExactWebNavigationTracking()) {
+    return;
+  }
 
-  if (changeInfo.status === "complete") {
-    void restoreTabInstrumentationAfterNavigation(tabId);
+  const claim = claimCurrentRuntimeNavigation(runtime, signal.source, signal.candidateUrl);
+
+  if (!claim) {
+    return;
   }
+
+  suspendFullCaptureForNavigation(claim);
+  enqueueNavigationClaim(claim, async () => {
+    if (signal.candidateUrl && !(await handleTabUrlChanged(claim, signal.candidateUrl))) {
+      return;
+    }
+
+    if (signal.completed) {
+      await restoreTabInstrumentationAfterNavigation(claim);
+    }
+  });
 });
 
 chromeApi?.tabs?.onRemoved?.addListener((tabId) => {
   void stopSession(tabId);
 });
 
+chromeApi?.webNavigation?.onCommitted.addListener((details) => {
+  const owner = sessionsByTab.get(details.tabId);
+  const task = handleCommittedContentDocument(details);
+  // The handler claims top-level ownership synchronously before its first
+  // policy await. Snapshot afterward so the catch path is fenced from later
+  // same-URL commits and replacement runtimes.
+  const navigationClaim = owner
+    ? snapshotCurrentRuntimeNavigation(owner, "web-navigation-commit", details.url)
+    : null;
+  const exactTransaction =
+    owner && navigationClaim
+      ? [...owner.exactWebNavigationTransactions.values()].find(
+          (candidate) => candidate.claim.revision === navigationClaim.revision
+        )
+      : undefined;
+  const documentRevisionKey =
+    owner && typeof details.documentId === "string" && details.documentId.length > 0
+      ? contentActivationParentKey(details.frameId, details.documentId)
+      : null;
+  const failureClaim = navigationClaim
+    ? {
+        navigation: navigationClaim,
+        documentRevisionKey,
+        documentRevision: documentRevisionKey
+          ? (owner?.contentNavigationRevisions.get(documentRevisionKey) ?? 0)
+          : 0,
+        cdpRestoreEpoch: owner?.cdpRestoreEpoch ?? 0,
+        ...(exactTransaction ? { exactTransaction } : {})
+      }
+    : null;
+
+  void task.catch((error) => {
+    console.warn("[WebBlackbox] committed document handling failed closed", {
+      tabId: details.tabId,
+      frameId: details.frameId,
+      documentId: details.documentId,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    if (failureClaim) {
+      void failCommittedContentDocument(details, failureClaim);
+    }
+  });
+});
+
+chromeApi?.webNavigation?.onHistoryStateUpdated?.addListener((details) => {
+  const runtime = sessionsByTab.get(details.tabId);
+  if (details.frameId === 0 && runtime?.mode === "full" && runtime.cdpRouter) {
+    return;
+  }
+
+  dispatchSameDocumentNavigation(details, "history-state");
+});
+
+chromeApi?.webNavigation?.onReferenceFragmentUpdated?.addListener((details) => {
+  const runtime = sessionsByTab.get(details.tabId);
+  if (details.frameId === 0 && runtime?.mode === "full" && runtime.cdpRouter) {
+    return;
+  }
+
+  dispatchSameDocumentNavigation(details, "fragment");
+});
+
+function dispatchSameDocumentNavigation(
+  details: { tabId: number; frameId: number; documentId?: string; url: string },
+  source: "history-state" | "fragment"
+): void {
+  const owner = sessionsByTab.get(details.tabId);
+  const task = handleSameDocumentNavigation(details);
+  const revisionKey =
+    typeof details.documentId === "string" && details.documentId.length > 0
+      ? contentActivationParentKey(details.frameId, details.documentId)
+      : null;
+  // Async functions run synchronously until their first await, so this
+  // snapshots the exact revision installed by handleSameDocumentNavigation.
+  const contentRevision = revisionKey
+    ? owner?.contentNavigationRevisions.get(revisionKey)
+    : undefined;
+  const navigationRevision = owner?.navigationRevision;
+  const cdpRestoreEpoch = owner?.cdpRestoreEpoch;
+
+  void task.catch((error) => {
+    console.warn(`[WebBlackbox] ${source} activation refresh failed closed`, {
+      tabId: details.tabId,
+      frameId: details.frameId,
+      documentId: details.documentId,
+      error: error instanceof Error ? error.message : String(error)
+    });
+
+    if (
+      owner &&
+      revisionKey &&
+      contentRevision !== undefined &&
+      navigationRevision !== undefined &&
+      cdpRestoreEpoch !== undefined
+    ) {
+      void failSameDocumentNavigationIfCurrent(details, {
+        runtime: owner,
+        revisionKey,
+        contentRevision,
+        navigationRevision,
+        cdpRestoreEpoch
+      });
+    }
+  });
+}
+
 async function handleInboundMessage(
   message: ExtensionInboundMessage,
   port?: PortLike,
-  senderTabId?: number,
-  senderFrameId?: number
+  sender: MessageSenderLike | undefined = port?.sender
 ): Promise<unknown> {
+  if (message.kind.startsWith("ui.") && message.kind !== "ui.start") {
+    await runtimeStateRestorePromise;
+  }
+
   if (message.kind === "ui.start") {
     const tabId = await resolveUiActionTabId(message.tabId);
 
@@ -652,16 +1180,9 @@ async function handleInboundMessage(
     }
 
     await startSession(tabId, message.mode, {
-      visualCapture: resolveFullModeVisualCapture(message)
+      visualCapture: resolveFullModeVisualCapture(message),
+      reloadPage: message.mode === "lite" && message.reloadPage === true
     });
-    if (message.mode === "lite" && message.reloadPage) {
-      try {
-        await reloadRecordingTab(tabId);
-      } catch (error) {
-        await stopSession(tabId);
-        throw error;
-      }
-    }
     return;
   }
 
@@ -707,2422 +1228,7075 @@ async function handleInboundMessage(
   }
 
   if (message.kind === "content.marker") {
-    const tabId = senderTabId ?? port?.sender?.tab?.id;
-    const frame = normalizeContentFrameId(senderFrameId ?? port?.sender?.frameId);
+    const activation = resolveBoundContentActivation(
+      message.activationId,
+      message.documentUrl,
+      port,
+      sender,
+      ["active"]
+    );
 
-    if (typeof tabId === "number") {
-      ingestRawEvent({
-        source: "content",
-        rawType: "marker",
-        tabId,
-        sid: sessionsByTab.get(tabId)?.sid ?? "",
-        t: Date.now(),
-        mono: monotonicTime(),
-        frame,
-        payload: {
-          message: message.message
-        }
-      });
+    if (!activation) {
+      return;
     }
 
+    ingestRawEvent({
+      source: "content",
+      rawType: "marker",
+      tabId: activation.tabId,
+      sid: activation.sid,
+      t: Date.now(),
+      mono: monotonicTime(),
+      frame: normalizeContentFrameId(activation.frameId),
+      payload: {
+        message: message.message
+      }
+    });
+
     return;
   }
 
   if (message.kind === "content.ready") {
-    const tabId = senderTabId ?? port?.sender?.tab?.id;
-
-    if (typeof tabId !== "number") {
-      return {
-        kind: "sw.recording-status",
-        active: false
-      };
-    }
-
-    const runtime = sessionsByTab.get(tabId);
-
-    if (!runtime || runtime.stoppedAt) {
-      return {
-        kind: "sw.recording-status",
-        active: false
-      };
-    }
-
-    if (shouldInjectHooksForMode(runtime.mode)) {
-      await ensureInjectedHooks(tabId);
-    }
+    return prepareContentActivation(message, sender);
+  }
 
-    const sampling = toStatusSampling(runtime);
+  if (message.kind === "content.main-world-control") {
+    return controlContentMainWorld(message, sender);
+  }
 
-    if (port?.name === PORT_NAMES.content) {
-      syncContentPortRecordingState(port);
-      return {
-        ok: true
-      };
-    }
+  if (message.kind === "content.armed") {
+    return armContentActivation(message, sender);
+  }
 
-    return {
-      kind: "sw.recording-status",
-      active: true,
-      sid: runtime.sid,
-      mode: runtime.mode,
-      sampling,
-      capturePolicy: runtime.config.capturePolicy
-    };
+  if (message.kind === "content.bind") {
+    bindContentActivationPort(message, port, sender);
+    return;
   }
 
   if (message.kind === "content.stop-drained") {
-    markStopDrainAckReceived(message.sid);
+    await markStopDrainAckReceived(message, port, sender);
     return;
   }
 
   if (message.kind === "content.events") {
-    const tabId = senderTabId ?? port?.sender?.tab?.id;
-    const frame = normalizeContentFrameId(senderFrameId ?? port?.sender?.frameId);
-
-    if (
-      typeof tabId !== "number" ||
-      !Array.isArray(message.events) ||
-      message.events.length === 0
-    ) {
+    const activeActivation = resolveBoundContentActivation(
+      message.activationId,
+      message.documentUrl,
+      port,
+      sender,
+      ["active"]
+    );
+    const drainingActivation = activeActivation
+      ? null
+      : resolveBoundContentActivation(message.activationId, message.documentUrl, port, sender, [
+          "draining"
+        ]);
+    const activation = activeActivation ?? drainingActivation;
+
+    if (!activation || message.events.length === 0) {
       return;
     }
 
-    adjustInFlightContentMessages(tabId, 1);
-    let sliceStartedAt = perfNow();
+    const runtime = activation.runtime;
+    if (activeActivation && runtime.stopRequestedAt !== undefined) {
+      return;
+    }
 
-    try {
-      for (const rawEvent of message.events) {
-        ingestRawEvent({
-          ...rawEvent,
-          tabId,
-          frame: rawEvent.frame ?? frame
-        });
+    const stopDrain = drainingActivation
+      ? getStopDrainCapability(runtime.sid, activation.activationId)
+      : undefined;
 
-        if (perfNow() - sliceStartedAt >= CONTENT_EVENT_SLICE_BUDGET_MS) {
-          await wait(0);
-          sliceStartedAt = perfNow();
-        }
+    if (
+      drainingActivation &&
+      (!stopDrain ||
+        !canAdmitStopDrainBatch(stopDrain, {
+          runtime,
+          fence: runtime.captureFence,
+          activationId: activation.activationId,
+          token: message.stopDrainToken,
+          sid: activation.sid,
+          tabId: activation.tabId,
+          frameId: activation.frameId,
+          documentId: activation.documentId,
+          documentUrl: message.documentUrl
+        }))
+    ) {
+      if (stopDrain) {
+        sendStopDrainNotice(port!, stopDrain);
       }
-    } finally {
-      adjustInFlightContentMessages(tabId, -1);
+      return;
     }
-  }
-}
-
-async function deleteSessionBySid(sid: string): Promise<void> {
-  const runtime = sessionsBySid.get(sid);
 
-  if (!runtime) {
-    if (sessionAnnotations.delete(sid)) {
-      await persistSessionAnnotations().catch(() => undefined);
-    }
-    return;
-  }
-
-  if (!runtime.stoppedAt) {
-    await stopSession(runtime.tabId);
-  }
+    const isDeliveryOwnerCurrent = (): boolean => {
+      const current = resolveBoundContentActivation(
+        message.activationId,
+        message.documentUrl,
+        port,
+        sender,
+        activeActivation ? ["active"] : ["draining"]
+      );
+      if (
+        !current ||
+        current.runtime !== runtime ||
+        current.fence !== activation.fence ||
+        current.sid !== activation.sid ||
+        current.tabId !== activation.tabId ||
+        current.frameId !== activation.frameId ||
+        current.documentId !== activation.documentId ||
+        current.url !== activation.url ||
+        current.mode !== activation.mode
+      ) {
+        return false;
+      }
+      if (activeActivation) {
+        return runtime.stopRequestedAt === undefined;
+      }
+      return Boolean(
+        stopDrain &&
+        canAdmitStopDrainBatch(stopDrain, {
+          runtime,
+          fence: runtime.captureFence,
+          activationId: activation.activationId,
+          token: message.stopDrainToken,
+          sid: activation.sid,
+          tabId: activation.tabId,
+          frameId: activation.frameId,
+          documentId: activation.documentId,
+          documentUrl: message.documentUrl
+        })
+      );
+    };
+    const fingerprint = await fingerprintContentEventBatch(message.events);
+    if (!isDeliveryOwnerCurrent()) {
+      return;
+    }
+    // Serialize behind any delivery output admitted by a predecessor activation. Its receipt
+    // must become durable before a replacement activation decides which raw indexes to replay.
+    const deliveryBatch = {
+      tabId: activation.tabId,
+      frameId: activation.frameId,
+      documentId: activation.documentId,
+      batchId: message.batchId,
+      fingerprint,
+      eventCount: message.events.length
+    } as const;
+    const deliveryQuery: PipelineDeliveryReceiptQuery = {
+      tabId: deliveryBatch.tabId,
+      frameId: deliveryBatch.frameId,
+      documentId: deliveryBatch.documentId,
+      batchId: deliveryBatch.batchId
+    };
+    const receiptRead = await readContentEventBatchReceiptAfterBarrier({
+      flushPendingDelivery: () => flushContentEventBatchDurably(runtime),
+      isOwnerCurrent: isDeliveryOwnerCurrent,
+      readReceipt: () => runtime.pipeline.getDeliveryReceipt(deliveryQuery)
+    });
+    if (receiptRead.kind === "stale") {
+      return;
+    }
+    const durableReceipt = receiptRead.receipt;
+    const durableReceiptDecision = classifyContentEventBatchReceipt(durableReceipt, deliveryBatch);
+    if (durableReceiptDecision.kind === "mismatch") {
+      await revokeContentActivationSnapshots([activation], "content-delivery-mismatch");
+      return;
+    }
+    if (durableReceiptDecision.kind === "complete") {
+      if (
+        stopDrain &&
+        !commitStopDrainBatchClaims(stopDrain, message.batchId, runtime, runtime.captureFence)
+      ) {
+        logInboundMessageFailure(
+          "content.events",
+          new Error("Stop-drain claims remain incomplete for a durable content batch."),
+          port,
+          { activationId: activation.activationId, batchId: message.batchId }
+        );
+        return;
+      }
+      sendContentEventBatchAck(port!, activation.activationId, message.batchId);
+      return;
+    }
 
-  await disposeStoppedSession(runtime);
+    const batchLookup = getOrCreateContentEventBatchRecord(
+      activation.activationId,
+      message.batchId,
+      fingerprint,
+      port!
+    );
+    const batchRecord = batchLookup.record;
 
-  if (sessionAnnotations.delete(sid)) {
-    await persistSessionAnnotations().catch(() => undefined);
-    pushSessionList();
-  }
-}
+    if (batchRecord.fingerprint !== fingerprint) {
+      return;
+    }
 
-async function startSession(
-  tabId: number,
-  mode: CaptureMode,
-  options: { visualCapture?: FullModeVisualCapture } = {}
-): Promise<void> {
-  const existing = sessionsByTab.get(tabId);
+    if (batchRecord.status === "completed") {
+      await revokeContentActivationSnapshots([activation], "content-delivery-inconsistent");
+      return;
+    }
 
-  if (existing) {
-    await stopSession(tabId);
-  }
+    if (!batchLookup.process) {
+      return;
+    }
 
-  await ensureOffscreenDocument();
+    for (const eventIndex of durableReceiptDecision.committedEventIndexes) {
+      batchRecord.completedEventIndexes.add(eventIndex);
+    }
 
-  const sid = createSessionId();
-  const startedAt = Date.now();
-  const tabMetadata = await resolveTabSessionMetadata(tabId);
-  const sessionOrigin = resolveUrlOrigin(sanitizeUrlForPrivacy(tabMetadata.url)) ?? "";
-  const enterprisePolicy = await loadEnterprisePolicy();
+    const batchAdmission: ContentEventBatchAdmission | null = activeActivation
+      ? {
+          kind: "content-event-batch",
+          runtime,
+          fence: runtime.captureFence,
+          activationId: activation.activationId,
+          batchId: message.batchId,
+          sid: activation.sid,
+          tabId: activation.tabId,
+          documentUrl: message.documentUrl,
+          frameId: activation.frameId,
+          documentId: activation.documentId,
+          mode: activation.mode,
+          valid: true
+        }
+      : null;
+    if (batchAdmission) {
+      let admissions = contentEventBatchAdmissionsByActivation.get(activation.activationId);
+      if (!admissions) {
+        admissions = new Set();
+        contentEventBatchAdmissionsByActivation.set(activation.activationId, admissions);
+      }
+      admissions.add(batchAdmission);
+    }
+    adjustInFlightContentMessages(activation.activationId, 1);
+    let sliceStartedAt = perfNow();
+    let completed = false;
+    const commitNoOutput = async (eventIndex: number): Promise<void> => {
+      if (!isDeliveryOwnerCurrent()) {
+        throw new Error("Content delivery owner changed before no-output commit.");
+      }
+      await runtime.pipeline.commitDeliveryProgress([
+        { ...deliveryBatch, eventIndex, outcome: "no-output" }
+      ]);
+      if (!isDeliveryOwnerCurrent()) {
+        throw new Error("Content delivery owner changed after no-output commit.");
+      }
+    };
 
-  if (!isEnterpriseOriginAllowed(sessionOrigin, enterprisePolicy)) {
-    throw new Error("Recording is blocked by enterprise site policy.");
-  }
+    try {
+      const attempt = await processContentEventBatchAttempt({
+        record: batchRecord,
+        eventCount: message.events.length,
+        processEvent: async (eventIndex) => {
+          const rawEvent = message.events[eventIndex]!;
+          if (rawEvent.sid !== activation.sid || rawEvent.tabId !== activation.tabId) {
+            if (drainingActivation) {
+              throw new Error("Stop-drain event identity does not match its activation.");
+            }
+            await commitNoOutput(eventIndex);
+            return;
+          }
 
-  const loadedRecorderConfig = applyFullModeVisualCapture(
-    await loadRecorderConfig(mode),
-    mode,
-    options.visualCapture
-  );
-  const recorderConfig = applyEnterprisePolicyToRecorderConfig(
-    withSessionCapturePolicy(loadedRecorderConfig, {
-      tabId,
-      origin: sessionOrigin,
-      startedAt
-    }),
-    enterprisePolicy
-  );
-  const performanceBudget = await loadPerformanceBudgetConfig();
-  const annotation = getSessionAnnotation(sid);
-  const metadata: SessionMetadata = {
-    sid,
-    tabId,
-    startedAt,
-    mode,
-    url: sanitizeUrlForPrivacy(tabMetadata.url),
-    title: tabMetadata.title,
-    tags: [...annotation.tags]
-  };
+          const stopDrainEventBinding = stopDrain
+            ? {
+                runtime,
+                fence: runtime.captureFence,
+                activationId: activation.activationId,
+                token: message.stopDrainToken,
+                sid: rawEvent.sid,
+                tabId: activation.tabId,
+                frameId: activation.frameId,
+                documentId: activation.documentId,
+                documentUrl: message.documentUrl,
+                batchId: message.batchId,
+                eventIndex,
+                rawType: rawEvent.rawType,
+                reason: asRecord(rawEvent.payload)?.reason,
+                capturedAt: rawEvent.t
+              }
+            : null;
+          const stopDrainClaim = activeActivation
+            ? null
+            : stopDrain && stopDrainEventBinding
+              ? claimStopDrainEvent(stopDrain, stopDrainEventBinding)
+              : null;
+
+          if (drainingActivation && !stopDrainClaim) {
+            if (
+              stopDrain &&
+              stopDrainEventBinding &&
+              dropUnclaimableStopDrainOrdinaryEvent(stopDrain, stopDrainEventBinding)
+            ) {
+              await commitNoOutput(eventIndex);
+              return;
+            }
+            throw new Error("Stop-drain event could not reserve its exact capability claim.");
+          }
 
-  const recorderPlugins = createDefaultRecorderPlugins();
-  const pipeline = createOffscreenPipelineClient(sid);
-  await pipeline.start(metadata, recorderConfig.redaction, recorderConfig.capturePolicy);
+          if (activeActivation || stopDrainClaim) {
+            try {
+              const producedOutput = await ingestRawEvent(
+                {
+                  ...rawEvent,
+                  frame: normalizeContentFrameId(activation.frameId)
+                },
+                stopDrainClaim,
+                batchAdmission,
+                { ...deliveryBatch, eventIndex }
+              );
+              if (!producedOutput) {
+                if (
+                  (batchAdmission && !isContentEventBatchAdmissionValid(batchAdmission, runtime)) ||
+                  (stopDrainClaim &&
+                    !isStopDrainClaimValid(stopDrainClaim, runtime, runtime.captureFence))
+                ) {
+                  throw new Error("Content event admission changed before materialization.");
+                }
+                await commitNoOutput(eventIndex);
+              }
+            } catch (error) {
+              if (stopDrainClaim) {
+                releaseStopDrainClaim(stopDrainClaim);
+              }
+              throw error;
+            }
+          }
 
-  const runtime: SessionRuntime = {
-    sid,
-    tabId,
-    mode,
-    url: metadata.url,
-    scopeOrigin: resolveUrlOrigin(metadata.url),
-    title: metadata.title,
-    tags: [...annotation.tags],
-    note: annotation.note,
-    config: recorderConfig,
-    startedAt,
-    stoppedAt: undefined,
-    recorder: new WebBlackboxRecorder(
-      {
-        ...recorderConfig,
-        mode
-      },
-      {},
-      undefined,
-      recorderPlugins
-    ),
-    pipeline,
-    cdpRouter: null,
-    enabledCdpSessions: new Set<string>(),
-    requestMeta: new Map(),
-    screenshotInterval: null,
-    screenRecording: null,
-    lastPointer: null,
-    lastViewport: null,
-    lastActionScreenshotMono: Number.NEGATIVE_INFINITY,
-    lastIncidentCaptureAt: Number.NEGATIVE_INFINITY,
-    lastNavigationSnapshotAt: Number.NEGATIVE_INFINITY,
-    queueDepth: 0,
-    droppedBestEffortTasks: 0,
-    pipelineEventBuffer: [],
-    pipelineFlushTimer: null,
-    pipelineFlushQueued: false,
-    stopping: false,
-    responseBodyCaptures: 0,
-    responseBodyCaptureTimestamps: [],
-    capturedEventCount: 0,
-    capturedErrorCount: 0,
-    capturedSizeBytes: 0,
-    budgetAlertCount: 0,
-    performanceBudget,
-    networkBudgetSample: {
-      total: 0,
-      failed: 0
-    },
-    lastFreezeNotices: new Map<string, number>(),
-    lastBudgetBreachAt: new Map<string, number>(),
-    queue: Promise.resolve(),
-    removeCdpListeners: [],
-    heapSnapshotCapture: null,
-    cleanupTimer: null
-  };
+          if (perfNow() - sliceStartedAt >= CONTENT_EVENT_SLICE_BUDGET_MS) {
+            await wait(0);
+            sliceStartedAt = perfNow();
+          }
+        },
+        flush: () => flushContentEventBatchDurably(runtime)
+      });
 
-  runtime.recorder = new WebBlackboxRecorder(
-    {
-      ...recorderConfig,
-      mode
-    },
-    {
-      onEvent: (event) => {
-        updateSessionMetadataFromEvent(runtime, event);
-        trackSessionCounters(runtime, event);
-        evaluatePerformanceBudget(runtime, event);
-        enqueuePipelineEvent(runtime, event);
-      },
-      onFreeze: (reason) => {
-        handleFreezeNotice(runtime, reason);
+      if (attempt.completed) {
+        const committedReceipt = await runtime.pipeline.getDeliveryReceipt(deliveryQuery);
+        const committedReceiptDecision = classifyContentEventBatchReceipt(
+          committedReceipt,
+          deliveryBatch
+        );
+        if (!isDeliveryOwnerCurrent() || committedReceiptDecision.kind !== "complete") {
+          throw new Error("Content event batch lacks a complete durable delivery receipt.");
+        }
+        if (
+          stopDrain &&
+          !commitStopDrainBatchClaims(stopDrain, message.batchId, runtime, runtime.captureFence)
+        ) {
+          throw new Error("Stop-drain batch claims could not be committed after durable flush.");
+        }
       }
-    },
-    undefined,
-    recorderPlugins
-  );
-
-  sessionsByTab.set(tabId, runtime);
-  sessionsBySid.set(sid, runtime);
+      completed = attempt.completed;
+      for (const failure of attempt.failures) {
+        logInboundMessageFailure("content.events", failure.error, port, {
+          activationId: activation.activationId,
+          batchId: message.batchId,
+          ...(failure.eventIndex === undefined ? {} : { eventIndex: failure.eventIndex })
+        });
+      }
+    } catch (error) {
+      logInboundMessageFailure("content.events", error, port, {
+        activationId: activation.activationId,
+        batchId: message.batchId
+      });
+    } finally {
+      if (batchAdmission) {
+        batchAdmission.valid = false;
+        const admissions = contentEventBatchAdmissionsByActivation.get(activation.activationId);
+        admissions?.delete(batchAdmission);
+        if (admissions?.size === 0) {
+          contentEventBatchAdmissionsByActivation.delete(activation.activationId);
+        }
+      }
+      if (completed) {
+        completeContentEventBatch(activation.activationId, message.batchId, batchRecord);
+      } else {
+        retryContentEventBatch(activation.activationId, message.batchId, batchRecord);
+      }
+      adjustInFlightContentMessages(activation.activationId, -1);
+    }
 
-  if (mode === "lite") {
-    installLiteWebRequestCapture();
+    return;
   }
+}
 
-  ingestRawEvent({
-    source: "system",
-    rawType: "config",
-    sid,
-    tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: recorderConfig
-  });
+async function prepareContentActivation(
+  message: Extract<ExtensionInboundMessage, { kind: "content.ready" }>,
+  sender: MessageSenderLike | undefined
+): Promise<unknown> {
+  const tabId = sender?.tab?.id;
+  const runtime = typeof tabId === "number" ? sessionsByTab.get(tabId) : undefined;
 
-  if (shouldInjectHooksForMode(mode)) {
-    await ensureContentScriptInjected(tabId);
-    await ensureInjectedHooks(tabId);
+  if (!runtime || !isRuntimeCurrentCaptureOpen(runtime)) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
   }
 
-  if (mode === "full" && recorderConfig.capturePolicy?.categories.cdp !== "off") {
-    await attachCdp(runtime);
+  const frameId = normalizeSenderFrameId(sender);
+  const documentId = sender?.documentId;
+
+  if (frameId < 0 || typeof documentId !== "string" || documentId.length === 0) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
   }
 
-  if (shouldStartScreenRecording(runtime)) {
-    try {
-      await startScreenRecording(runtime);
-    } catch (error) {
-      await stopSession(tabId);
-      throw error;
-    }
+  if (
+    sender?.url !== message.documentUrl &&
+    !(
+      hasExactWebNavigationTracking() &&
+      runtime.contentDocuments.matchesSameDocumentSender(
+        {
+          tabId: runtime.tabId,
+          frameId,
+          documentId,
+          url: message.documentUrl
+        },
+        sender?.url
+      )
+    )
+  ) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
   }
 
-  const sampling = toStatusSampling(runtime);
+  const policyRevisionKey = contentActivationParentKey(frameId, documentId);
+  if (runtime.pendingContentPolicyRevisions.has(policyRevisionKey)) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
+  }
 
-  await setRecordingBadge();
-  await notifyTabStatus(tabId, true, sid, mode, sampling, recorderConfig.capturePolicy);
-  broadcast({
-    kind: "sw.recording-status",
-    active: true,
-    sid,
-    mode,
-    sampling,
-    capturePolicy: recorderConfig.capturePolicy
-  });
-  pushSessionList();
-  await persistRuntimeState();
-  notifyOffscreenPipelineStatus();
-}
+  if (runtime.mode === "full" && message.mainWorldController !== null) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
+  }
 
-async function reloadRecordingTab(tabId: number): Promise<void> {
-  if (!chromeApi?.tabs?.reload) {
-    throw new Error("Current Chrome API cannot reload the active tab.");
+  const parent = runtime.contentActivationParents.get(policyRevisionKey);
+  if (frameId > 0 && (!parent || !isContentParentReady(runtime, parent))) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
   }
 
-  await chromeApi.tabs.reload(tabId);
-}
+  const currentActivation = message.currentActivationId
+    ? contentActivations.lookupByActivationId(message.currentActivationId)
+    : null;
 
-async function restoreTabInstrumentationAfterNavigation(tabId: number): Promise<void> {
-  const runtime = sessionsByTab.get(tabId);
+  if (currentActivation && !matchesContentActivationStableSender(currentActivation, sender)) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
+  }
 
-  if (
-    !runtime ||
-    runtime.stopping ||
-    runtime.stoppedAt ||
-    !shouldInjectHooksForMode(runtime.mode)
-  ) {
-    return;
+  const activeDocument = runtime.contentDocuments.get(frameId);
+  const awaitingExactSameDocumentPolicy =
+    hasExactWebNavigationTracking() &&
+    activeDocument?.documentId === documentId &&
+    activeDocument.url !== message.documentUrl;
+
+  if (!(await authorizeContentSenderForReady(runtime, sender, message.documentUrl))) {
+    if (awaitingExactSameDocumentPolicy) {
+      return { kind: "sw.content-inactive", readyId: message.readyId };
+    }
+    await deactivateDeniedContentFrame(runtime, sender);
+    rejectContentArmWaiters(runtime, sender, "Content document authorization was denied.");
+    return { kind: "sw.content-inactive", readyId: message.readyId };
   }
 
-  await ensureContentScriptInjected(tabId);
-  await ensureInjectedHooks(tabId);
-  await notifyTabStatus(
-    tabId,
-    true,
-    runtime.sid,
-    runtime.mode,
-    toStatusSampling(runtime),
-    runtime.config.capturePolicy
-  );
-}
+  if (!isRuntimeCurrentCaptureOpen(runtime)) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
+  }
 
-async function stopSession(tabId: number): Promise<void> {
-  const runtime = sessionsByTab.get(tabId);
+  if (runtime.pendingContentPolicyRevisions.has(policyRevisionKey)) {
+    return { kind: "sw.content-inactive", readyId: message.readyId };
+  }
 
-  if (!runtime || runtime.stopping) {
-    return;
+  if (runtime.mode === "lite") {
+    const controller = await resolveMainWorldControllerForReady(
+      runtime,
+      { tabId: runtime.tabId, frameId, documentId },
+      message.mainWorldController
+    );
+    if (!controller || !isRuntimeCurrentCaptureOpen(runtime)) {
+      return { kind: "sw.content-inactive", readyId: message.readyId };
+    }
+    if (!rememberMainWorldController(runtime, policyRevisionKey, controller)) {
+      return { kind: "sw.content-inactive", readyId: message.readyId };
+    }
   }
 
-  runtime.stopping = true;
-  const stopDrainAck = createStopDrainAck(runtime);
-  await stopScreenRecording(runtime, "session-stop").catch((error) => {
-    console.warn("[WebBlackbox] failed to stop screen recording", error);
-  });
-  await flushBufferedPipelineEvents(runtime);
-  await teardownCaptureInstrumentation(runtime);
-  sessionsByTab.delete(runtime.tabId);
-  uninstallLiteWebRequestCaptureIfUnused();
-  runtime.stoppedAt = Date.now();
-  scheduleStoppedRuntimeCleanup(runtime);
+  if (frameId > 0 && (!parent || !isContentParentReady(runtime, parent))) {
+    runtime.contentDocuments.blockDocument(frameId, documentId);
+    syncAuthorizedContentFrames(runtime);
+    return { kind: "sw.content-inactive", readyId: message.readyId };
+  }
 
-  if (sessionsByTab.size === 0) {
-    await setIdleBadge();
-  } else {
-    await setRecordingBadge();
+  const existingForDocument = contentActivations
+    .listRuntime(runtime, runtime.captureFence)
+    .find((candidate) => candidate.frameId === frameId && candidate.documentId === documentId);
+  if (existingForDocument && existingForDocument.readyId !== message.readyId) {
+    await revokeContentFrameActivations(runtime, frameId, "activation-replaced", documentId);
   }
 
-  await notifyTabStatus(
-    tabId,
-    false,
-    runtime.sid,
-    runtime.mode,
-    toStatusSampling(runtime),
-    runtime.config.capturePolicy
-  );
-  broadcast({
-    kind: "sw.recording-status",
-    active: false,
+  const activation = contentActivations.prepare({
+    runtime,
+    fence: runtime.captureFence,
     sid: runtime.sid,
+    tabId: runtime.tabId,
+    frameId,
+    documentId,
+    url: message.documentUrl,
     mode: runtime.mode,
-    capturePolicy: runtime.config.capturePolicy
+    readyId: message.readyId,
+    ...(parent ? { parent } : {})
   });
-  pushSessionList();
-  await persistRuntimeState();
-  notifyOffscreenPipelineStatus();
-  await stopDrainAck;
-  await flushBufferedPipelineEvents(runtime);
+
+  if (!activation) {
+    rejectContentArmWaiters(runtime, sender, "Content activation preparation failed closed.");
+    return { kind: "sw.content-inactive", readyId: message.readyId };
+  }
+
+  return {
+    kind: "sw.content-prepare",
+    readyId: activation.readyId,
+    activationId: activation.activationId,
+    sid: activation.sid,
+    tabId: activation.tabId,
+    mode: activation.mode,
+    sampling: toStatusSampling(runtime),
+    capturePolicy: runtime.config.capturePolicy,
+    mainWorldController:
+      runtime.mode === "lite"
+        ? (runtime.contentMainWorldProofs.get(policyRevisionKey) ?? null)
+        : null
+  };
 }
 
-async function exportSession(
-  sid: string,
-  passphrase: string | undefined,
-  saveAs = true,
-  policy: ExportPolicy = DEFAULT_EXPORT_POLICY
-): Promise<
-  | { ok: true; fileName: string; privacyWarning?: ExportPrivacyWarning }
-  | { ok: false; error: string }
-> {
-  const runtime = sessionsBySid.get(sid);
-
-  if (!runtime) {
-    const error = "Session not found for export.";
-    console.warn("[WebBlackbox] export ignored; unknown session", sid);
-    broadcast({
-      kind: "sw.export-status",
-      sid,
-      ok: false,
-      error
-    });
-    return {
-      ok: false,
-      error
-    };
-  }
-
-  const effectivePolicy = resolveSessionExportPolicy(runtime, policy);
+async function resolveMainWorldControllerForReady(
+  runtime: SessionRuntime,
+  target: { tabId: number; frameId: number; documentId: string },
+  isolatedHint: MainWorldControllerHint | null
+): Promise<MainWorldControllerHint | null> {
+  if (!isolatedHint) {
+    return null;
+  }
+  const key = contentActivationParentKey(target.frameId, target.documentId);
+  const installed = runtime.contentMainWorldProofs.get(key);
+  if (installed && !sameMainWorldControllerCapability(installed, isolatedHint)) {
+    return null;
+  }
+  if (
+    installed &&
+    installed.revision === isolatedHint.revision &&
+    installed.phase === isolatedHint.phase &&
+    installed.activationId === isolatedHint.activationId
+  ) {
+    return installed;
+  }
 
   try {
-    if (!runtime.stoppedAt) {
-      await stopSession(runtime.tabId);
-    }
-
-    await flushBufferedPipelineEvents(runtime);
-    const encrypted = hasExportPassphrase(passphrase);
-
-    const exported = await enqueueWithResult(runtime, async () => {
-      return runtime.pipeline.exportAndDownload({
-        passphrase: encrypted ? passphrase : undefined,
-        includeScreenshots: effectivePolicy.includeScreenshots,
-        includeScreenRecordings: effectivePolicy.includeScreenRecordings,
-        maxArchiveBytes: effectivePolicy.maxArchiveBytes,
-        recentWindowMs: effectivePolicy.recentWindowMs,
-        allowPlaintextLocalExport: !encrypted
-      });
-    });
-
-    await downloadExportedBundle(exported, saveAs);
-    const privacyWarning = buildExportPrivacyWarning(exported.privacyScanner);
-    await appendExportAuditEvent({
-      schemaVersion: 1,
-      timestamp: new Date().toISOString(),
-      sid,
-      mode: runtime.mode,
-      outcome: "ok",
-      encrypted,
-      includeScreenshots: effectivePolicy.includeScreenshots,
-      includeScreenRecordings: effectivePolicy.includeScreenRecordings,
-      maxArchiveBytes: effectivePolicy.maxArchiveBytes,
-      recentWindowMs: effectivePolicy.recentWindowMs,
-      sizeBytes: exported.sizeBytes,
-      downloadId: exported.downloadId
-    });
-    broadcast({
-      kind: "sw.export-status",
-      sid,
-      ok: true,
-      fileName: exported.fileName,
-      privacyWarning
-    });
-
-    if (runtime.stoppedAt) {
-      await disposeStoppedSession(runtime);
+    const bootstrap = await bootstrapMainWorldDirectController(chromeApi, target, isolatedHint);
+    if (bootstrap.kind !== "installed" && bootstrap.kind !== "existing") {
+      return null;
     }
-
-    return {
-      ok: true,
-      fileName: exported.fileName,
-      privacyWarning
-    };
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    await appendExportAuditEvent({
-      schemaVersion: 1,
-      timestamp: new Date().toISOString(),
-      sid,
-      mode: runtime.mode,
-      outcome: "error",
-      encrypted: hasExportPassphrase(passphrase),
-      includeScreenshots: effectivePolicy.includeScreenshots,
-      includeScreenRecordings: effectivePolicy.includeScreenRecordings,
-      maxArchiveBytes: effectivePolicy.maxArchiveBytes,
-      recentWindowMs: effectivePolicy.recentWindowMs,
-      error: redactOperationalMessage(message)
-    });
-    console.warn("[WebBlackbox] export failed", error);
-    broadcast({
-      kind: "sw.export-status",
-      sid,
-      ok: false,
-      error: message
+    const probed = await controlMainWorldDirectController(chromeApi, target, isolatedHint, {
+      kind: "probe"
     });
-    return {
-      ok: false,
-      error: message
-    };
+    const recovered = advanceControllerFromControl(isolatedHint, probed);
+    return recovered && sameMainWorldControllerCapability(recovered, isolatedHint)
+      ? recovered
+      : null;
+  } catch {
+    return null;
   }
 }
 
-function resolveSessionExportPolicy(runtime: SessionRuntime, policy: ExportPolicy): ExportPolicy {
-  if (runtime.mode !== "full") {
-    return policy;
+function rememberMainWorldController(
+  runtime: SessionRuntime,
+  key: string,
+  candidate: MainWorldControllerHint
+): boolean {
+  const current = runtime.contentMainWorldProofs.get(key);
+  if (!current) {
+    runtime.contentMainWorldProofs.set(key, candidate);
+    return true;
   }
+  if (!sameMainWorldControllerCapability(current, candidate)) {
+    return false;
+  }
+  if (candidate.revision < current.revision) {
+    return true;
+  }
+  if (
+    candidate.revision === current.revision &&
+    (candidate.phase !== current.phase || candidate.activationId !== current.activationId)
+  ) {
+    return false;
+  }
+  runtime.contentMainWorldProofs.set(key, candidate);
+  return true;
+}
 
-  const categories = runtime.config.capturePolicy?.categories;
-
-  if (!categories) {
-    return policy;
+async function controlContentMainWorld(
+  message: Extract<ExtensionInboundMessage, { kind: "content.main-world-control" }>,
+  sender: MessageSenderLike | undefined
+): Promise<unknown> {
+  const activation = contentActivations.lookupByActivationId(message.activationId, [
+    "prepared",
+    "active",
+    "draining"
+  ]);
+  const stopIntentOwnsActiveDrain =
+    activation?.state === "active" &&
+    message.operation === "drain" &&
+    activation.runtime.stopRequestedAt !== undefined &&
+    isMapEntrySame(sessionsByTab, activation.tabId, activation.runtime) &&
+    isMapEntrySame(sessionsBySid, activation.sid, activation.runtime);
+  if (
+    !activation ||
+    !matchesContentActivationSender(activation, sender, message.documentUrl) ||
+    (message.operation === "activate" && activation.state !== "prepared") ||
+    (message.operation === "drain" &&
+      activation.state !== "active" &&
+      activation.state !== "draining") ||
+    (activation.state === "draining"
+      ? getStopDrainCapability(activation.sid, activation.activationId) === undefined
+      : !stopIntentOwnsActiveDrain && !isRuntimeCurrentCaptureOpen(activation.runtime))
+  ) {
+    return null;
   }
 
+  const key = contentActivationParentKey(activation.frameId, activation.documentId);
+  const controller = activation.runtime.contentMainWorldProofs.get(key);
+  if (!controller) {
+    return null;
+  }
+  const target = {
+    tabId: activation.tabId,
+    frameId: activation.frameId,
+    documentId: activation.documentId
+  };
+  const outcome = await runMainWorldControlWithRecovery(target, controller, (revision) =>
+    message.operation === "activate"
+      ? {
+          kind: "activate" as const,
+          revision,
+          config: {
+            active: true,
+            activationId: activation.activationId,
+            bodyCaptureMaxBytes: resolveMainWorldBodyCaptureBudget(activation.runtime),
+            capturePolicy: activation.runtime.config.capturePolicy ?? DEFAULT_CAPTURE_POLICY
+          }
+        }
+      : {
+          kind: message.operation,
+          revision,
+          activationId: activation.activationId
+        }
+  );
+  if (!outcome) {
+    return null;
+  }
+  const expectedKind =
+    message.operation === "activate"
+      ? "activated"
+      : message.operation === "deactivate"
+        ? "deactivated"
+        : "drained";
+  if (outcome.result.kind !== expectedKind) {
+    return null;
+  }
+  if (!rememberMainWorldController(activation.runtime, key, outcome.controller)) {
+    return null;
+  }
   return {
-    ...policy,
-    includeScreenshots: categories.screenshots !== "off",
-    includeScreenRecordings: categories.screenRecordings === "allow"
+    kind: "sw.main-world-control-result",
+    activationId: activation.activationId,
+    operation: message.operation,
+    controller: outcome.controller,
+    result: outcome.result
   };
 }
 
-function hasExportPassphrase(passphrase: string | undefined): passphrase is string {
-  return typeof passphrase === "string" && passphrase.length > 0;
+async function runMainWorldControlWithRecovery(
+  target: { tabId: number; frameId: number; documentId: string },
+  initialController: MainWorldControllerHint,
+  createCommand: (revision: number) =>
+    | {
+        kind: "activate";
+        revision: number;
+        config: {
+          active: true;
+          activationId: ContentActivationId;
+          bodyCaptureMaxBytes: number;
+          capturePolicy: CapturePolicy;
+        };
+      }
+    | {
+        kind: "deactivate" | "drain";
+        revision: number;
+        activationId: ContentActivationId;
+      }
+): Promise<{
+  controller: MainWorldControllerHint;
+  result: Exclude<
+    Awaited<ReturnType<typeof controlMainWorldDirectController>>,
+    { kind: "rejected" | "unavailable" | "probed" }
+  >;
+} | null> {
+  let controller = initialController;
+  for (let attempt = 0; attempt < 2; attempt += 1) {
+    if (controller.revision >= Number.MAX_SAFE_INTEGER) {
+      return null;
+    }
+    try {
+      const result = await controlMainWorldDirectController(
+        chromeApi,
+        target,
+        controller,
+        createCommand(controller.revision + 1)
+      );
+      const advanced = advanceControllerFromControl(controller, result);
+      if (
+        advanced &&
+        result.kind !== "rejected" &&
+        result.kind !== "unavailable" &&
+        result.kind !== "probed"
+      ) {
+        return { controller: advanced, result };
+      }
+      if (result.kind !== "rejected" || result.reason !== "stale") {
+        return null;
+      }
+    } catch {
+      // The command may have committed before executeScript lost its result.
+    }
+
+    try {
+      const probe = await controlMainWorldDirectController(chromeApi, target, controller, {
+        kind: "probe"
+      });
+      const recovered = advanceControllerFromControl(controller, probe);
+      if (!recovered) {
+        return null;
+      }
+      controller = recovered;
+      const intended = createCommand(
+        recovered.revision < Number.MAX_SAFE_INTEGER ? recovered.revision + 1 : recovered.revision
+      );
+      if (
+        intended.kind === "deactivate" &&
+        recovered.phase === "inactive" &&
+        recovered.activationId === null
+      ) {
+        return {
+          controller: recovered,
+          result: {
+            kind: "deactivated",
+            activationId: intended.activationId,
+            revision: recovered.revision
+          }
+        };
+      }
+    } catch {
+      return null;
+    }
+  }
+  return null;
 }
 
-function ingestRawEvent(rawEvent: RawRecorderEvent): void {
-  const runtime =
-    sessionsByTab.get(rawEvent.tabId) ??
-    (typeof rawEvent.sid === "string" ? sessionsBySid.get(rawEvent.sid) : undefined);
+function resolveMainWorldBodyCaptureBudget(runtime: SessionRuntime): number {
+  const value = toStatusSampling(runtime)?.bodyCaptureMaxBytes;
+  return runtime.mode === "lite" &&
+    (runtime.config.capturePolicy ?? DEFAULT_CAPTURE_POLICY).categories.network ===
+      "body-allowlist" &&
+    typeof value === "number" &&
+    Number.isFinite(value) &&
+    value > 0
+    ? Math.max(4 * 1024, Math.min(8 * 1024 * 1024, Math.round(value)))
+    : 0;
+}
 
-  if (!runtime) {
-    return;
-  }
+function isContentParentReady(
+  runtime: SessionRuntime,
+  parent: { frameId: number; documentId: string }
+): boolean {
+  return contentActivations
+    .listRuntime(runtime, runtime.captureFence)
+    .some(
+      (candidate) =>
+        candidate.frameId === parent.frameId &&
+        candidate.documentId === parent.documentId &&
+        (isRuntimeCaptureAdmitted(runtime.activationState)
+          ? candidate.state === "active"
+          : candidate.state === "prepared" && candidate.armed)
+    );
+}
+
+function armContentActivation(
+  message: Extract<ExtensionInboundMessage, { kind: "content.armed" }>,
+  sender: MessageSenderLike | undefined
+): unknown {
+  const prepared = contentActivations.lookupByReadyId(message.readyId, ["prepared", "active"]);
 
   if (
-    runtime.stopping &&
-    rawEvent.source !== "system" &&
-    !shouldAllowStopDrainContentEvent(runtime, rawEvent)
+    !prepared ||
+    prepared.activationId !== message.activationId ||
+    !isRuntimeCurrentCaptureOpen(prepared.runtime) ||
+    !matchesContentActivationSender(prepared, sender, message.documentUrl)
   ) {
-    return;
+    return { kind: "sw.content-revoked", activationId: message.activationId, reason: "stale" };
   }
 
-  if (shouldSkipFullModeContentRawEvent(runtime, rawEvent)) {
-    return;
+  if (prepared.state === "active") {
+    return { kind: "sw.content-activated", activationId: prepared.activationId };
   }
 
-  const nextRawEvent: RawRecorderEvent = {
-    ...rawEvent,
-    sid: runtime.sid
-  };
+  const armed = contentActivations.arm(prepared);
 
-  updateRuntimeInteractionState(runtime, nextRawEvent);
+  if (!armed) {
+    return { kind: "sw.content-revoked", activationId: message.activationId, reason: "invalid" };
+  }
 
-  if (shouldMaterializeLiteContentEvent(runtime, nextRawEvent)) {
-    enqueue(runtime, async () => {
-      const materialized = await materializeLiteContentEvent(runtime, nextRawEvent);
+  resolveContentArmWaiters(armed);
 
-      if (!materialized) {
-        return;
-      }
+  if (!isRuntimeCaptureAdmitted(armed.runtime.activationState)) {
+    return { ok: true };
+  }
 
-      runtime.recorder.ingest(materialized);
-    });
+  const active = contentActivations.activate(armed);
+  return active
+    ? { kind: "sw.content-activated", activationId: active.activationId }
+    : { kind: "sw.content-revoked", activationId: message.activationId, reason: "activation" };
+}
+
+function bindContentActivationPort(
+  message: Extract<ExtensionInboundMessage, { kind: "content.bind" }>,
+  port: PortLike | undefined,
+  sender: MessageSenderLike | undefined
+): void {
+  const activation = contentActivations.lookupByActivationId(message.activationId, [
+    "active",
+    "draining"
+  ]);
+  const activationOwnerCurrent = activation
+    ? activation.state === "active"
+      ? isRuntimeActiveContentOwner(activation.runtime)
+      : getStopDrainCapability(activation.sid, activation.activationId) !== undefined
+    : false;
 
+  if (
+    !port ||
+    port.name !== PORT_NAMES.content ||
+    !activation ||
+    !activationOwnerCurrent ||
+    !matchesContentActivationStableSender(activation, sender) ||
+    !contentActivations.bindPort(port, activation)
+  ) {
+    port?.disconnect?.();
     return;
   }
 
-  if (runtime.mode === "full" && shouldCaptureActionScreenshot(nextRawEvent, runtime)) {
-    runtime.lastActionScreenshotMono = nextRawEvent.mono;
-    enqueue(
-      runtime,
-      async () => {
-        await captureScreenshot(runtime, `action:${nextRawEvent.rawType}`);
-      },
-      { bestEffort: true }
-    );
+  try {
+    if (message.documentUrl !== activation.url) {
+      port.postMessage({
+        kind: "sw.content-url",
+        activationId: activation.activationId,
+        documentUrl: activation.url,
+        revision:
+          activation.runtime.contentNavigationRevisions.get(
+            contentActivationParentKey(activation.frameId, activation.documentId)
+          ) ?? 0
+      });
+    }
+    port.postMessage({ kind: "sw.content-bound", activationId: activation.activationId });
+    if (activation.state === "draining") {
+      const capability = getStopDrainCapability(activation.sid, activation.activationId);
+      if (capability) {
+        sendStopDrainNotice(port, capability);
+      }
+    }
+  } catch (error) {
+    contentActivations.unbindPort(port, activation);
+    logPortSendFailure("sw.content-bound", error, {
+      sid: activation.sid,
+      tabId: activation.tabId,
+      frameId: activation.frameId
+    });
+  }
+}
+
+function resolveBoundContentActivation(
+  activationId: ContentActivationId,
+  documentUrl: string,
+  port: PortLike | undefined,
+  sender: MessageSenderLike | undefined,
+  allowedStates: readonly ContentActivationState[]
+): SessionContentActivation | null {
+  if (!port || port.name !== PORT_NAMES.content) {
+    return null;
+  }
+
+  const activation = contentActivations.lookupByActivationId(activationId, allowedStates);
+
+  if (!activation || !matchesContentActivationStableSender(activation, sender)) {
+    return null;
+  }
+
+  if (
+    !matchesContentActivationStableSender(activation, sender) ||
+    activation.url !== documentUrl ||
+    (activation.state === "active"
+      ? !isRuntimeActiveContentOwner(activation.runtime)
+      : getStopDrainCapability(activation.sid, activation.activationId) === undefined)
+  ) {
+    return null;
   }
 
-  runtime.recorder.ingest(nextRawEvent);
+  return contentActivations.validatePort(port, activation, allowedStates);
 }
 
-function shouldAllowStopDrainContentEvent(
-  runtime: SessionRuntime,
-  rawEvent: RawRecorderEvent
+function matchesContentActivationStableSender(
+  activation: SessionContentActivation,
+  sender: MessageSenderLike | undefined
 ): boolean {
   return (
-    rawEvent.source === "content" &&
-    rawEvent.sid === runtime.sid &&
-    STOP_DRAIN_CONTENT_RAW_TYPES.has(rawEvent.rawType)
+    sender?.tab?.id === activation.tabId &&
+    normalizeSenderFrameId(sender) === activation.frameId &&
+    sender?.documentId === activation.documentId &&
+    activation.runtime.captureFence === activation.fence &&
+    activation.runtime.sid === activation.sid &&
+    activation.runtime.mode === activation.mode
   );
 }
 
-function shouldSkipFullModeContentRawEvent(
-  runtime: SessionRuntime,
-  rawEvent: RawRecorderEvent
+function matchesContentActivationSender(
+  activation: SessionContentActivation,
+  sender: MessageSenderLike | undefined,
+  documentUrl: string
 ): boolean {
   return (
-    runtime.mode === "full" &&
-    rawEvent.source === "content" &&
-    SKIPPED_FULL_MODE_CONTENT_RAW_TYPES.has(rawEvent.rawType)
+    matchesContentActivationStableSender(activation, sender) &&
+    activation.url === documentUrl &&
+    (sender?.url === documentUrl ||
+      (hasExactWebNavigationTracking() &&
+        activation.runtime.contentDocuments.matchesSameDocumentSender(
+          {
+            tabId: activation.tabId,
+            frameId: activation.frameId,
+            documentId: activation.documentId,
+            url: documentUrl
+          },
+          sender?.url
+        )))
   );
 }
 
-function shouldMaterializeLiteContentEvent(
-  runtime: SessionRuntime,
-  rawEvent: RawRecorderEvent
-): boolean {
-  if (runtime.mode !== "lite") {
-    return false;
-  }
+function isRuntimeActiveContentOwner(runtime: SessionRuntime): boolean {
+  return (
+    isRuntimeCurrentCaptureOpen(runtime) &&
+    isMapEntrySame(sessionsBySid, runtime.sid, runtime) &&
+    isRuntimeCaptureAdmitted(runtime.activationState)
+  );
+}
 
-  if (rawEvent.source !== "content") {
-    return false;
+function requireArmedRootContentActivation(runtime: SessionRuntime): SessionContentActivation {
+  const activeDocument = runtime.contentDocuments.get(0);
+  const roots = contentActivations
+    .listRuntime(runtime, runtime.captureFence, ["prepared"])
+    .filter(
+      (activation) =>
+        activation.frameId === 0 &&
+        activation.armed &&
+        activeDocument?.documentId === activation.documentId &&
+        activeDocument.url === activation.url
+    );
+
+  if (roots.length !== 1) {
+    throw new Error("The runtime has no unique armed root content activation.");
   }
 
-  const payload = asRecord(rawEvent.payload);
+  return roots[0]!;
+}
 
-  if (!payload) {
-    return false;
-  }
+function activateArmedRuntimeContent(
+  runtime: SessionRuntime,
+  requiredRootActivationId?: ContentActivationId
+): SessionContentActivation[] {
+  const prepared = contentActivations
+    .listRuntime(runtime, runtime.captureFence, ["prepared"])
+    .filter((activation) => activation.armed);
+  const preparedByDocument = new Map(
+    prepared.map((activation) => [
+      contentActivationParentKey(activation.frameId, activation.documentId),
+      activation
+    ])
+  );
+  const resolveDepth = (activation: SessionContentActivation): number => {
+    let depth = 0;
+    let parent = activation.parent;
+    const visited = new Set<string>();
+
+    while (parent) {
+      const key = contentActivationParentKey(parent.frameId, parent.documentId);
+      if (visited.has(key)) {
+        return Number.MAX_SAFE_INTEGER;
+      }
+      visited.add(key);
+      depth += 1;
+      parent = preparedByDocument.get(key)?.parent;
+    }
 
-  if (rawEvent.rawType === "screenshot") {
-    return typeof payload.dataUrl === "string" && payload.dataUrl.length > 0;
-  }
+    return depth;
+  };
+  prepared.sort((left, right) => resolveDepth(left) - resolveDepth(right));
+  const activated: SessionContentActivation[] = [];
 
-  if (rawEvent.rawType === "snapshot") {
-    return typeof payload.html === "string" && payload.html.length > 0;
-  }
+  for (const activation of prepared) {
+    const active = contentActivations.activate(activation);
 
-  if (rawEvent.rawType === "localStorageSnapshot") {
-    return asRecord(payload.entries) !== null;
+    if (active) {
+      activated.push(active);
+    }
   }
 
-  if (rawEvent.rawType === "indexedDbSnapshot") {
-    return Array.isArray(payload.databaseNames);
+  if (
+    requiredRootActivationId &&
+    !activated.some(
+      (activation) =>
+        activation.frameId === 0 && activation.activationId === requiredRootActivationId
+    )
+  ) {
+    throw new Error("The armed root content activation changed at runtime commit.");
   }
 
-  if (rawEvent.rawType === "cookieSnapshot") {
-    return Array.isArray(payload.names);
+  for (const activation of activated) {
+    void sendContentActivationMessage(activation, {
+      kind: "sw.content-activated",
+      activationId: activation.activationId
+    });
   }
 
-  if (rawEvent.rawType === "networkBody") {
-    return (
-      (typeof payload.reqId === "string" || typeof payload.requestId === "string") &&
-      typeof payload.body === "string"
-    );
-  }
+  return activated;
+}
 
-  return false;
+function contentActivationParentKey(frameId: number, documentId: string): string {
+  return JSON.stringify([frameId, documentId]);
 }
 
-async function materializeLiteContentEvent(
+function revokeContentFrameActivations(
   runtime: SessionRuntime,
-  rawEvent: RawRecorderEvent
-): Promise<RawRecorderEvent | null> {
-  if (rawEvent.rawType === "screenshot") {
-    return materializeLiteScreenshot(runtime, rawEvent);
+  frameId: number,
+  reason: string,
+  documentId?: string
+): Promise<void> {
+  const live = contentActivations.listRuntime(runtime, runtime.captureFence);
+  const revoked =
+    frameId === 0 && documentId === undefined
+      ? live
+      : collectContentActivationSubtree(
+          live,
+          live.filter(
+            (activation) =>
+              activation.frameId === frameId &&
+              (documentId === undefined || activation.documentId === documentId)
+          )
+        );
+
+  return revokeContentActivationSnapshots(revoked, reason);
+}
+
+function revokeRuntimeContent(runtime: SessionRuntime, reason: string): void {
+  cancelContentArmWaiters(runtime, `Content activation revoked: ${reason}.`);
+  void revokeContentActivationSnapshots(
+    contentActivations.listRuntime(runtime, runtime.captureFence),
+    reason
+  );
+}
+
+async function revokeContentActivationSnapshots(
+  snapshots: readonly SessionContentActivation[],
+  reason: string
+): Promise<void> {
+  const unique = new Map<ContentActivationId, SessionContentActivation>();
+  for (const root of snapshots) {
+    const live = contentActivations.listRuntime(root.runtime, root.fence);
+    for (const activation of collectContentActivationSubtree(live, [root])) {
+      unique.set(activation.activationId, activation);
+    }
   }
+  const byDocument = new Map(
+    [...unique.values()].map((activation) => [
+      contentActivationParentKey(activation.frameId, activation.documentId),
+      activation
+    ])
+  );
+  const depth = (activation: SessionContentActivation): number => {
+    let parent = activation.parent;
+    let value = 0;
+    const visited = new Set<string>();
+    while (parent) {
+      const key = contentActivationParentKey(parent.frameId, parent.documentId);
+      if (visited.has(key)) {
+        return Number.MAX_SAFE_INTEGER;
+      }
+      visited.add(key);
+      value += 1;
+      parent = byDocument.get(key)?.parent;
+    }
+    return value;
+  };
+  const ordered = [...unique.values()].sort((left, right) => depth(right) - depth(left));
+  // Start every revocation synchronously before the first await. Callers such as runtime reset
+  // clear the shared proof map immediately after this function yields; eager start guarantees
+  // that each exact frame has already retained its controller authorization by then.
+  const tasks = ordered.map((activation) => revokeContentActivationOnce(activation, reason));
+  for (const task of tasks) {
+    await task;
+  }
+}
 
-  if (rawEvent.rawType === "snapshot") {
-    return materializeLiteDomSnapshot(runtime, rawEvent);
+function revokeContentActivationOnce(
+  activation: SessionContentActivation,
+  reason: string
+): Promise<void> {
+  const existing = pendingContentRevocations.get(activation.activationId);
+  if (existing) {
+    return existing;
   }
 
+  const revoking = contentActivations.beginRevocation(activation);
+  if (!revoking) {
+    return Promise.resolve();
+  }
+  invalidateContentEventBatchAdmissions(revoking.activationId);
+  const controllerKey = contentActivationParentKey(revoking.frameId, revoking.documentId);
+  const controller = revoking.runtime.contentMainWorldProofs.get(controllerKey);
   if (
-    rawEvent.rawType === "localStorageSnapshot" ||
-    rawEvent.rawType === "indexedDbSnapshot" ||
-    rawEvent.rawType === "cookieSnapshot"
+    controller?.phase === "active" &&
+    controller.activationId === revoking.activationId &&
+    !contentRevocationControllers.has(revoking.activationId)
   ) {
-    return materializeLiteStorageSnapshot(runtime, rawEvent);
+    contentRevocationControllers.set(revoking.activationId, {
+      key: controllerKey,
+      controller
+    });
   }
 
-  if (rawEvent.rawType === "networkBody") {
-    return materializeLiteNetworkBody(runtime, rawEvent);
-  }
+  const task = (async () => {
+    const outcome = await deactivateRevokingMainWorldController(revoking);
+    const documentReachable =
+      outcome.kind === "deactivated" ? false : await isExactContentDocumentReachable(revoking);
+    if (!canFinalizeMainWorldRevocation(outcome, documentReachable)) {
+      console.warn("[WebBlackbox] MAIN-world revocation did not confirm deactivation", {
+        sid: revoking.sid,
+        tabId: revoking.tabId,
+        frameId: revoking.frameId,
+        activationId: revoking.activationId,
+        reason,
+        outcome: outcome.kind,
+        ...(outcome.kind === "failed"
+          ? {
+              error: outcome.error instanceof Error ? outcome.error.message : String(outcome.error)
+            }
+          : {})
+      });
+      scheduleContentRevocationRetry(revoking, reason);
+      return;
+    }
 
-  return rawEvent;
+    if (!contentActivations.finalizeRevocation(revoking)) {
+      if (contentActivations.lookupByActivationId(revoking.activationId, ["revoking"])) {
+        scheduleContentRevocationRetry(revoking, reason);
+      }
+      return;
+    }
+    contentRevocationControllers.delete(revoking.activationId);
+    const retryTimer = contentRevocationRetryTimers.get(revoking.activationId);
+    if (retryTimer) {
+      clearTimeout(retryTimer);
+      contentRevocationRetryTimers.delete(revoking.activationId);
+    }
+    await sendContentActivationMessage(revoking, {
+      kind: "sw.content-revoked",
+      activationId: revoking.activationId,
+      reason
+    });
+  })().finally(() => {
+    if (pendingContentRevocations.get(revoking.activationId) === task) {
+      pendingContentRevocations.delete(revoking.activationId);
+    }
+  });
+  pendingContentRevocations.set(revoking.activationId, task);
+  return task;
 }
 
-async function materializeLiteScreenshot(
-  runtime: SessionRuntime,
-  rawEvent: RawRecorderEvent
-): Promise<RawRecorderEvent | null> {
-  const payload = asRecord(rawEvent.payload);
-  const dataUrl = asString(payload?.dataUrl);
-
-  if (!payload || !dataUrl || dataUrl.length > LITE_SCREENSHOT_MAX_DATA_URL_LENGTH) {
-    return null;
-  }
-
-  const decoded = decodeDataUrl(dataUrl);
-
+async function deactivateRevokingMainWorldController(
+  activation: SessionContentActivation
+): Promise<Awaited<ReturnType<typeof runBoundedMainWorldDeactivation>>> {
+  const authorization = contentRevocationControllers.get(activation.activationId);
+  const controller = authorization?.controller;
   if (
-    !decoded ||
-    decoded.bytes.byteLength === 0 ||
-    decoded.bytes.byteLength > LITE_SCREENSHOT_MAX_BYTES
+    activation.mode !== "lite" ||
+    !authorization ||
+    !controller ||
+    controller.phase !== "active" ||
+    controller.activationId !== activation.activationId
   ) {
-    return null;
+    return { kind: "deactivated" };
   }
 
-  const shotId = await runtime.pipeline.putBlob(decoded.mime, decoded.bytes);
-  const width = normalizePositiveInt(payload.w) ?? normalizePositiveInt(payload.width);
-  const height = normalizePositiveInt(payload.h) ?? normalizePositiveInt(payload.height);
-  const quality = normalizePositiveInt(payload.quality);
-  const reason = asString(payload.reason) ?? undefined;
-  const viewport = normalizeScreenshotViewport(payload.viewport);
-  const pointer = normalizeScreenshotPointer(payload.pointer);
-  const format = decoded.mime.includes("png") ? "png" : "webp";
+  const target = {
+    tabId: activation.tabId,
+    frameId: activation.frameId,
+    documentId: activation.documentId
+  };
+  return runBoundedMainWorldDeactivation({
+    timeoutMs: MAIN_WORLD_REVOCATION_TIMEOUT_MS,
+    deactivate: async () => {
+      const outcome = await runMainWorldControlWithRecovery(target, controller, (revision) => ({
+        kind: "deactivate",
+        revision,
+        activationId: activation.activationId
+      }));
+      if (!outcome || outcome.result.kind !== "deactivated") {
+        throw new Error("Exact MAIN-world controller did not confirm revocation deactivation.");
+      }
 
-  return {
-    ...rawEvent,
-    payload: {
-      shotId,
-      format,
-      w: width,
-      h: height,
-      quality: format === "webp" ? quality : undefined,
-      size: decoded.bytes.byteLength,
-      reason,
-      viewport,
-      pointer
+      const stillRevoking = contentActivations.lookupByActivationId(activation.activationId, [
+        "revoking"
+      ]);
+      if (
+        stillRevoking &&
+        !rememberMainWorldController(activation.runtime, authorization.key, outcome.controller)
+      ) {
+        throw new Error("MAIN-world revocation controller conflicted with its exact proof.");
+      }
+      authorization.controller = outcome.controller;
     }
-  };
+  });
 }
 
-async function materializeLiteDomSnapshot(
-  runtime: SessionRuntime,
-  rawEvent: RawRecorderEvent
-): Promise<RawRecorderEvent | null> {
-  const payload = asRecord(rawEvent.payload);
-  const html = asString(payload?.html);
+async function isExactContentDocumentReachable(
+  activation: SessionContentActivation
+): Promise<boolean> {
+  const sendMessage = chromeApi?.tabs?.sendMessage;
+  if (!sendMessage) {
+    return true;
+  }
 
-  if (!payload || !html) {
-    return null;
+  try {
+    await sendMessage.call(
+      chromeApi.tabs,
+      activation.tabId,
+      { kind: "sw.content-document-probe" },
+      { frameId: activation.frameId, documentId: activation.documentId }
+    );
+    return true;
+  } catch {
+    return false;
   }
+}
 
-  const encoded = encodeTextWithByteLimit(html, LITE_DOM_SNAPSHOT_MAX_BYTES);
-  const contentHash = await runtime.pipeline.putBlob("text/html", encoded.bytes);
-  const snapshotId = asString(payload.snapshotId) ?? `D-${Math.round(rawEvent.mono)}`;
-  const nodeCount = normalizeNonNegativeInt(payload.nodeCount);
-  const reason = asString(payload.reason) ?? undefined;
-  const htmlLength = normalizeNonNegativeInt(payload.htmlLength) ?? html.length;
-  const truncated = payload.truncated === true || encoded.truncated;
+function scheduleContentRevocationRetry(
+  activation: SessionContentActivation,
+  reason: string
+): void {
+  if (contentRevocationRetryTimers.has(activation.activationId)) {
+    return;
+  }
 
-  return {
-    ...rawEvent,
-    payload: {
-      snapshotId,
-      contentHash,
-      source: "html",
-      nodeCount,
-      reason,
-      htmlLength,
-      truncated
+  const timer = setTimeout(() => {
+    contentRevocationRetryTimers.delete(activation.activationId);
+    const revoking = contentActivations.lookupByActivationId(activation.activationId, ["revoking"]);
+    if (revoking) {
+      void revokeContentActivationOnce(revoking, reason);
     }
-  };
+  }, MAIN_WORLD_REVOCATION_RETRY_MS);
+  contentRevocationRetryTimers.set(activation.activationId, timer);
 }
 
-async function materializeLiteStorageSnapshot(
-  runtime: SessionRuntime,
-  rawEvent: RawRecorderEvent
-): Promise<RawRecorderEvent | null> {
-  const payload = asRecord(rawEvent.payload);
-
-  if (!payload) {
-    return null;
-  }
+function collectContentActivationSubtree(
+  live: readonly SessionContentActivation[],
+  roots: readonly SessionContentActivation[]
+): SessionContentActivation[] {
+  const selected = new Set<SessionContentActivation>(roots);
+  const pending = roots.map((root) => ({ frameId: root.frameId, documentId: root.documentId }));
 
-  const reason = asString(payload.reason) ?? undefined;
+  while (pending.length > 0) {
+    const parent = pending.shift();
 
-  if (rawEvent.rawType === "localStorageSnapshot") {
-    const entries = asRecord(payload.entries) ?? {};
-    const serialized = JSON.stringify(entries);
-    const encoded = encodeTextWithByteLimit(serialized, LITE_STORAGE_SNAPSHOT_MAX_BYTES);
-    const hash =
-      encoded.bytes.byteLength > 0
-        ? await runtime.pipeline.putBlob("application/json", encoded.bytes)
-        : undefined;
-    const count = normalizeNonNegativeInt(payload.count) ?? Object.keys(entries).length;
+    if (!parent) {
+      break;
+    }
 
-    return {
-      ...rawEvent,
-      payload: {
-        hash,
-        count,
-        mode: "sample",
-        redacted: true,
-        reason,
-        truncated: payload.truncated === true || encoded.truncated
+    for (const activation of live) {
+      if (
+        !selected.has(activation) &&
+        activation.parent?.frameId === parent.frameId &&
+        activation.parent.documentId === parent.documentId
+      ) {
+        selected.add(activation);
+        pending.push({ frameId: activation.frameId, documentId: activation.documentId });
       }
-    };
+    }
   }
 
-  if (rawEvent.rawType === "indexedDbSnapshot") {
-    const names = asStringArray(payload.databaseNames, 400);
-    const serialized = JSON.stringify(names);
-    const encoded = encodeTextWithByteLimit(serialized, LITE_STORAGE_SNAPSHOT_MAX_BYTES);
-    const hash =
-      encoded.bytes.byteLength > 0
-        ? await runtime.pipeline.putBlob("application/json", encoded.bytes)
-        : undefined;
-    const count = normalizeNonNegativeInt(payload.count) ?? names.length;
+  return [...selected];
+}
 
-    return {
-      ...rawEvent,
-      payload: {
-        hash,
-        count,
-        mode: "schema-only",
-        redacted: true,
-        reason,
-        truncated: payload.truncated === true || encoded.truncated
-      }
-    };
+async function sendContentActivationMessage(
+  activation: SessionContentActivation,
+  message: ExtensionOutboundMessage,
+  options: { required?: boolean } = {}
+): Promise<void> {
+  if (!chromeApi?.tabs?.sendMessage) {
+    if (options.required) {
+      throw new Error("Chrome tabs messaging is unavailable for exact content delivery.");
+    }
+    return;
   }
 
-  if (rawEvent.rawType === "cookieSnapshot") {
-    const names = asStringArray(payload.names, 400);
-    const serialized = JSON.stringify(names);
-    const encoded = encodeTextWithByteLimit(serialized, LITE_STORAGE_SNAPSHOT_MAX_BYTES);
-    const hash =
-      encoded.bytes.byteLength > 0
-        ? await runtime.pipeline.putBlob("application/json", encoded.bytes)
-        : undefined;
-    const count = normalizeNonNegativeInt(payload.count) ?? names.length;
-
-    return {
-      ...rawEvent,
-      payload: {
-        hash,
-        count,
-        mode: "sample",
-        redacted: true,
-        reason,
-        truncated: payload.truncated === true || encoded.truncated
-      }
-    };
+  try {
+    await chromeApi.tabs.sendMessage(activation.tabId, message, {
+      frameId: activation.frameId,
+      documentId: activation.documentId
+    });
+  } catch (error) {
+    if (options.required) {
+      throw error;
+    }
   }
-
-  return rawEvent;
 }
 
-async function materializeLiteNetworkBody(
+function waitForContentArm(
   runtime: SessionRuntime,
-  rawEvent: RawRecorderEvent
-): Promise<RawRecorderEvent | null> {
-  const payload = asRecord(rawEvent.payload);
-
-  if (!payload) {
-    return null;
+  input: {
+    frameId: number;
+    documentId?: string;
+    excludedDocumentId?: string;
+    awaitCommittedDocument?: boolean;
   }
+): {
+  promise: Promise<SessionContentActivation>;
+  cancel: (reason?: Error) => void;
+} {
+  let waiter:
+    | (typeof pendingContentArmWaiters extends Set<infer Value> ? Value : never)
+    | undefined;
+  let settled = false;
+  const promise = new Promise<SessionContentActivation>((resolve, reject) => {
+    const timeout = setTimeout(() => {
+      if (!waiter || settled) {
+        return;
+      }
 
-  const reqId = asString(payload.reqId) ?? asString(payload.requestId);
-  const body = asString(payload.body);
-  const encoding = asString(payload.encoding) ?? "utf8";
-  const url = asString(payload.url) ?? "";
-  const mimeType = normalizeMimeType(asString(payload.mimeType));
-
-  if (!reqId || !body || (encoding !== "utf8" && encoding !== "base64")) {
-    return null;
-  }
+      settled = true;
+      pendingContentArmWaiters.delete(waiter);
+      reject(new Error("Timed out waiting for exact content activation acknowledgement."));
+    }, CONTENT_ARM_TIMEOUT_MS);
 
-  const captureRule = resolveLiteBodyCaptureRule(runtime, url, mimeType);
+    waiter = {
+      runtime,
+      fence: runtime.captureFence,
+      frameId: input.frameId,
+      ...(input.documentId ? { documentId: input.documentId } : {}),
+      ...(input.excludedDocumentId ? { excludedDocumentId: input.excludedDocumentId } : {}),
+      ...(input.awaitCommittedDocument ? { awaitingCommittedDocument: true } : {}),
+      resolve: (activation) => {
+        if (settled) {
+          return;
+        }
 
-  if (!captureRule.enabled || !isMimeAllowed(captureRule.mimeAllowlist, mimeType)) {
-    return null;
-  }
+        settled = true;
+        clearTimeout(timeout);
+        pendingContentArmWaiters.delete(waiter!);
+        resolve(activation);
+      },
+      reject: (error) => {
+        if (settled) {
+          return;
+        }
 
-  let bytes: Uint8Array;
-  let redacted = payload.redacted === true;
+        settled = true;
+        clearTimeout(timeout);
+        pendingContentArmWaiters.delete(waiter!);
+        reject(error);
+      },
+      timeout
+    };
+    pendingContentArmWaiters.add(waiter);
+  });
 
-  if (encoding === "utf8") {
-    const redaction = redactBodyText(body, runtime.config.redaction.redactBodyPatterns);
-    redacted = redacted || redaction.redacted;
-    bytes = new TextEncoder().encode(redaction.value);
-  } else {
-    bytes = decodeBase64(body);
-  }
+  return {
+    promise,
+    cancel: (reason = new Error("Content activation wait was cancelled.")) => waiter?.reject(reason)
+  };
+}
 
-  if (bytes.byteLength === 0) {
-    return null;
-  }
-
-  const size = normalizeNonNegativeInt(payload.size) ?? bytes.byteLength;
-  const truncatedByInput = payload.truncated === true;
-  const maxBytes = captureRule.maxBytes;
-  const truncatedByLimit = bytes.byteLength > maxBytes;
-  const sampledBytes = truncatedByLimit ? bytes.slice(0, maxBytes) : bytes;
-  const contentHash = await runtime.pipeline.putBlob(
-    mimeType ?? "application/octet-stream",
-    sampledBytes
-  );
-
-  return {
-    ...rawEvent,
-    payload: {
-      reqId,
-      requestId: reqId,
-      contentHash,
-      mimeType,
-      size,
-      sampledSize: sampledBytes.byteLength,
-      truncated: truncatedByInput || truncatedByLimit || sampledBytes.byteLength < size,
-      redacted
+function resolveContentArmWaiters(activation: SessionContentActivation): void {
+  for (const waiter of [...pendingContentArmWaiters]) {
+    if (
+      waiter.runtime === activation.runtime &&
+      waiter.fence === activation.fence &&
+      waiter.frameId === activation.frameId &&
+      waiter.awaitingCommittedDocument !== true &&
+      (waiter.documentId === undefined || waiter.documentId === activation.documentId) &&
+      (waiter.excludedDocumentId === undefined ||
+        waiter.excludedDocumentId !== activation.documentId)
+    ) {
+      waiter.resolve(activation);
     }
-  };
+  }
 }
 
-function updateRuntimeInteractionState(runtime: SessionRuntime, rawEvent: RawRecorderEvent): void {
-  if (rawEvent.source !== "content") {
-    return;
+function bindCommittedDocumentToContentArmWaiters(
+  runtime: SessionRuntime,
+  frameId: number,
+  documentId: string
+): void {
+  for (const waiter of pendingContentArmWaiters) {
+    if (
+      waiter.runtime === runtime &&
+      waiter.fence === runtime.captureFence &&
+      waiter.frameId === frameId &&
+      waiter.awaitingCommittedDocument === true
+    ) {
+      waiter.documentId = documentId;
+      waiter.awaitingCommittedDocument = false;
+    }
   }
+}
 
-  const payload = asRecord(rawEvent.payload);
+function rejectContentArmWaiters(
+  runtime: SessionRuntime,
+  sender: MessageSenderLike | undefined,
+  reason: string
+): void {
+  const frameId = normalizeSenderFrameId(sender);
+  const documentId = sender?.documentId;
 
-  if (!payload) {
-    return;
+  for (const waiter of [...pendingContentArmWaiters]) {
+    if (
+      waiter.runtime === runtime &&
+      waiter.fence === runtime.captureFence &&
+      waiter.frameId === frameId &&
+      waiter.awaitingCommittedDocument !== true &&
+      (waiter.documentId === undefined || waiter.documentId === documentId)
+    ) {
+      waiter.reject(new Error(reason));
+    }
   }
+}
 
-  if (rawEvent.rawType === "resize") {
-    const width = asFiniteNumber(payload.width);
-    const height = asFiniteNumber(payload.height);
-    const dpr = asFiniteNumber(payload.dpr) ?? runtime.lastViewport?.dpr ?? 1;
-
-    if (typeof width === "number" && typeof height === "number" && width > 0 && height > 0) {
-      runtime.lastViewport = {
-        width: Math.round(width),
-        height: Math.round(height),
-        dpr: Number(dpr.toFixed(2))
-      };
+function cancelContentArmWaiters(runtime: SessionRuntime, reason: string): void {
+  for (const waiter of [...pendingContentArmWaiters]) {
+    if (waiter.runtime === runtime) {
+      waiter.reject(new Error(reason));
     }
-
-    return;
   }
+}
 
-  if (
-    rawEvent.rawType === "mousemove" ||
-    rawEvent.rawType === "click" ||
-    rawEvent.rawType === "dblclick"
-  ) {
-    const x = asFiniteNumber(payload.x);
-    const y = asFiniteNumber(payload.y);
+async function requestFreshContentActivation(
+  runtime: SessionRuntime,
+  input: {
+    frameId: number;
+    documentId?: string;
+    excludedDocumentId?: string;
+    assertCurrent?: () => void;
+    sendRequest?: boolean;
+    sameDocumentTransition?: ContentSameDocumentTransition;
+  }
+): Promise<SessionContentActivation> {
+  input.assertCurrent?.();
+  const waiter = waitForContentArm(runtime, input);
 
-    if (typeof x === "number" && typeof y === "number") {
-      runtime.lastPointer = {
-        x: Number(x.toFixed(2)),
-        y: Number(y.toFixed(2)),
-        t: rawEvent.t,
-        mono: rawEvent.mono
+  try {
+    if (input.sendRequest !== false) {
+      if (!chromeApi?.tabs?.sendMessage) {
+        throw new Error("Chrome tabs messaging is unavailable for content activation.");
+      }
+
+      const target = {
+        frameId: input.frameId,
+        ...(input.documentId ? { documentId: input.documentId } : {})
       };
+      const acknowledgement = await chromeApi.tabs.sendMessage(
+        runtime.tabId,
+        {
+          kind: "sw.request-content-ready",
+          ...(input.sameDocumentTransition
+            ? { sameDocumentTransition: input.sameDocumentTransition }
+            : {})
+        },
+        target
+      );
+
+      if (
+        typeof acknowledgement !== "object" ||
+        acknowledgement === null ||
+        Array.isArray(acknowledgement) ||
+        (acknowledgement as { kind?: unknown }).kind !== "content.ready-requested"
+      ) {
+        throw new Error("Exact content document did not acknowledge activation request.");
+      }
     }
+
+    const activation = await waiter.promise;
+    input.assertCurrent?.();
+    return activation;
+  } catch (error) {
+    waiter.cancel(error instanceof Error ? error : new Error(String(error)));
+    await waiter.promise.catch(() => undefined);
+    throw error;
   }
 }
 
-function shouldCaptureActionScreenshot(
-  rawEvent: RawRecorderEvent,
-  runtime: SessionRuntime
-): boolean {
-  if (rawEvent.source !== "content") {
-    return false;
-  }
+async function deleteSessionBySid(sid: string): Promise<void> {
+  const runtime = sessionsBySid.get(sid);
 
-  if (!ACTION_SCREENSHOT_RAW_TYPES.has(rawEvent.rawType)) {
-    return false;
+  if (!runtime) {
+    await deleteSessionAnnotationDurably(sid);
+    return;
   }
 
-  if (runtime.config.capturePolicy?.categories.screenshots === "off") {
-    return false;
-  }
+  if (!runtime.stoppedAt) {
+    await stopRuntimeIfCurrent(runtime);
 
-  if (rawEvent.mono - runtime.lastActionScreenshotMono < SCREENSHOT_ACTION_COOLDOWN_MS) {
-    return false;
+    if (!runtime.stoppedAt) {
+      return;
+    }
   }
 
-  if (runtime.queueDepth >= Math.floor(BEST_EFFORT_QUEUE_MAX_PENDING / 3)) {
-    return false;
-  }
+  await disposeStoppedSession(runtime);
+}
 
-  return true;
+async function startSession(
+  tabId: number,
+  mode: CaptureMode,
+  options: { visualCapture?: FullModeVisualCapture; reloadPage?: boolean } = {}
+): Promise<void> {
+  const startKey = JSON.stringify([
+    mode,
+    options.visualCapture ?? null,
+    options.reloadPage === true
+  ]);
+  await sessionStartCoordinator.run(tabId, startKey, async (token) => {
+    token.assertActive();
+    await runtimeStateRestorePromise;
+    token.assertActive();
+    await startSessionUnlocked(tabId, mode, options, token);
+  });
 }
 
-function trackSessionCounters(runtime: SessionRuntime, event: WebBlackboxEvent): void {
-  runtime.capturedEventCount += 1;
-  runtime.capturedSizeBytes += estimateSessionEventBytes(event);
+async function startSessionUnlocked(
+  tabId: number,
+  mode: CaptureMode,
+  options: { visualCapture?: FullModeVisualCapture; reloadPage?: boolean },
+  startToken: RuntimeStartToken
+): Promise<void> {
+  const sid = createSessionId();
+  const startedAt = Date.now();
+  startToken.assertActive();
+  const tabMetadata = await resolveTabSessionMetadata(tabId);
+  startToken.assertActive();
+  const sessionOrigin = resolveUrlOrigin(tabMetadata.captureUrl) ?? "";
+  const enterprisePolicy = await loadEnterprisePolicy();
+  startToken.assertActive();
 
-  if (event.type === "error.exception" || event.type === "error.unhandledrejection") {
-    runtime.capturedErrorCount += 1;
-    pushSessionList();
-    return;
+  const loadedRecorderConfig = applyFullModeVisualCapture(
+    await loadRecorderConfig(mode),
+    mode,
+    options.visualCapture
+  );
+  startToken.assertActive();
+  const recorderConfig = applyEnterprisePolicyToRecorderConfig(
+    withSessionCapturePolicy(loadedRecorderConfig, {
+      tabId,
+      origin: sessionOrigin,
+      startedAt
+    }),
+    enterprisePolicy
+  );
+  const startScope = evaluateCaptureDocumentScope(recorderConfig.capturePolicy, {
+    url: tabMetadata.captureUrl,
+    tabId,
+    frameId: 0,
+    now: startedAt
+  });
+
+  if (!startScope.allowed) {
+    throw new Error(`Recording is outside the permitted capture scope (${startScope.reason}).`);
   }
 
-  if (runtime.capturedEventCount % 50 === 0) {
-    pushSessionList();
+  const screenRecordingRequested =
+    mode === "full" && recorderConfig.capturePolicy?.categories.screenRecordings === "allow";
+  assertRuntimeStartRequirements(resolveInstalledRuntimeCapabilities(chromeApi), {
+    mode,
+    screenRecording: screenRecordingRequested
+  });
+
+  if (mode === "lite" && options.reloadPage === true && !hasExactWebNavigationTracking()) {
+    throw new Error("Reload-before-recording requires exact webNavigation document tracking.");
   }
-}
 
-function evaluatePerformanceBudget(runtime: SessionRuntime, event: WebBlackboxEvent): void {
-  const budget = runtime.performanceBudget;
-  let updated = false;
+  const performanceBudget = await loadPerformanceBudgetConfig();
+  startToken.assertActive();
+  const annotation = getSessionAnnotation(sid);
+  const metadata: SessionMetadata = {
+    sid,
+    tabId,
+    startedAt,
+    mode,
+    url: sanitizeUrlForPrivacy(tabMetadata.url),
+    title: tabMetadata.title,
+    tags: [...annotation.tags]
+  };
+  assertRuntimeCheckpointCapacityFor(sid);
 
-  if (event.type === "perf.vitals") {
-    const lcpMs = readLcpFromVitalsEvent(event.data);
+  const pipeline = createOffscreenPipelineClient(sid);
+  const provisionalActive = createInitialPersistedActiveRuntime({
+    sid,
+    tabId,
+    mode,
+    metadata,
+    config: recorderConfig,
+    startedAt
+  });
+  const existing = sessionsByTab.get(tabId);
+  const runtime = await runProvisionalRuntimeStartTransaction({
+    token: startToken,
+    checkpointStopping: () => checkpointProvisionalRuntimeStart(provisionalActive),
+    startPipeline: async () => {
+      startToken.assertActive();
+      await ensureOffscreenDocument();
+      startToken.assertActive();
+      await pipeline.start(metadata, recorderConfig.redaction, recorderConfig.capturePolicy);
+    },
+    stopExisting: async () => {
+      startToken.assertActive();
 
-    if (lcpMs !== null && lcpMs >= budget.lcpWarnMs) {
-      updated =
-        registerPerformanceBudgetBreach(runtime, "lcp", `LCP ${Math.round(lcpMs)}ms`) || updated;
-    }
-  }
+      if (existing && isMapEntrySame(sessionsByTab, tabId, existing)) {
+        await requestSessionStop(tabId);
+      } else if (sessionsByTab.has(tabId)) {
+        throw new Error("The tab recording changed while a replacement start was pending.");
+      }
+    },
+    prepareRuntime: () =>
+      createSessionRuntime({
+        sid,
+        tabId,
+        mode,
+        url: metadata.url,
+        captureUrl: tabMetadata.captureUrl,
+        title: metadata.title,
+        tags: annotation.tags,
+        note: annotation.note,
+        config: recorderConfig,
+        startedAt,
+        pipeline,
+        performanceBudget,
+        activationState: "starting",
+        startToken
+      }),
+    registerRuntime: (candidate) => {
+      if (sessionsByTab.has(tabId) || sessionsBySid.has(sid)) {
+        throw new Error("The provisional runtime identity is already registered.");
+      }
 
-  if (event.type === "network.response") {
-    const { duration, failed } = extractPerformanceBudgetNetworkSample(event.data);
+      sessionsByTab.set(tabId, candidate);
+      sessionsBySid.set(sid, candidate);
+      scheduleConsentExpiry(candidate);
 
-    runtime.networkBudgetSample.total += 1;
+      if (mode === "lite") {
+        installLiteWebRequestCapture();
+      }
 
-    if (failed) {
-      runtime.networkBudgetSample.failed += 1;
-    }
+      notifyOffscreenPipelineStatus();
+    },
+    completeRuntime: async (candidate) => {
+      ingestRawEvent({
+        source: "system",
+        rawType: "config",
+        sid,
+        tabId,
+        t: Date.now(),
+        mono: monotonicTime(),
+        payload: recorderConfig
+      });
+      await flushBufferedPipelineEvents(candidate);
+      startToken.assertActive();
+      await candidate.pipeline.flush();
+
+      if (
+        shouldInjectIsolatedContentForMode(mode) &&
+        !(mode === "lite" && options.reloadPage === true)
+      ) {
+        startToken.assertActive();
+        await ensureRootPageAgentsInjected(candidate, {
+          assertCurrent: () => startToken.assertActive()
+        });
+      }
 
-    if (typeof duration === "number" && duration >= budget.requestWarnMs) {
-      updated =
-        registerPerformanceBudgetBreach(
-          runtime,
-          "slow-request",
-          `Slow request ${Math.round(duration)}ms`
-        ) || updated;
-    }
+      if (mode === "full" && recorderConfig.capturePolicy?.categories.cdp !== "off") {
+        startToken.assertActive();
+        await attachCdp(candidate);
+      }
 
-    if (runtime.networkBudgetSample.total >= PERFORMANCE_BUDGET_ERROR_RATE_MIN_SAMPLES) {
-      const errorRatePct =
-        (runtime.networkBudgetSample.failed / runtime.networkBudgetSample.total) * 100;
+      if (screenRecordingRequested) {
+        if (!shouldStartScreenRecording(candidate, true)) {
+          throw new Error("Screen recording prerequisites are not ready before activation.");
+        }
 
-      if (errorRatePct >= budget.errorRateWarnPct) {
-        updated =
-          registerPerformanceBudgetBreach(
-            runtime,
-            "error-rate",
-            `Error rate ${errorRatePct.toFixed(1)}%`
-          ) || updated;
+        startToken.assertActive();
+        await startScreenRecording(candidate, true);
+
+        if (!candidate.screenRecording) {
+          throw new Error("Screen recording did not start before runtime activation.");
+        }
+
+        startToken.assertActive();
+        await flushBufferedPipelineEvents(candidate);
+        startToken.assertActive();
+        await candidate.pipeline.flush();
+      }
+
+      if (mode === "lite" && options.reloadPage === true) {
+        startToken.assertActive();
+        await reloadRecordingTabAndWaitForContentActivation(candidate, startToken);
       }
+    },
+    commitRuntime: (candidate, tombstone) =>
+      commitProvisionalRuntimeStart(candidate, tombstone, startToken),
+    cleanupPipeline: (tombstone) =>
+      cleanupFailedProvisionalPipelineStart(provisionalActive, tombstone, pipeline),
+    cleanupRuntime: (candidate, tombstone) =>
+      cleanupFailedProvisionalRuntimeStart(provisionalActive, tombstone, candidate)
+  });
+
+  if (!startToken.isActive()) {
+    if (isMapEntrySame(sessionsByTab, tabId, runtime)) {
+      await requestSessionStop(tabId);
     }
+    throw new RuntimeStartCancelledError();
   }
 
-  if (updated) {
-    pushSessionList();
+  scheduleFullModeSessionStartArtifacts(runtime);
+  publishCommittedRuntimeStart(runtime);
+}
+
+function assertRuntimeCheckpointCapacityFor(sid: string): void {
+  const identities = new Set([
+    ...sessionsBySid.keys(),
+    ...retainedStoppingRuntimesBySid.keys(),
+    ...pendingRuntimeRestorationsBySid.keys(),
+    ...runtimeRestorationSourceRowsBySid.keys()
+  ]);
+  if (identities.has(sid)) {
+    throw new Error("The new session identity already exists in the runtime checkpoint.");
+  }
+  if (identities.size >= MAX_PERSISTED_RUNTIME_SESSIONS) {
+    throw new Error(
+      `Retained session capacity is full (${MAX_PERSISTED_RUNTIME_SESSIONS}); delete an older stopped session before starting another recording.`
+    );
   }
 }
 
-function readLcpFromVitalsEvent(payload: unknown): number | null {
-  const record = asRecord(payload);
-  const metric = asString(record?.metric) ?? asString(record?.name);
+function createInitialPersistedActiveRuntime(input: {
+  sid: string;
+  tabId: number;
+  mode: CaptureMode;
+  metadata: SessionMetadata;
+  config: typeof DEFAULT_RECORDER_CONFIG;
+  startedAt: number;
+}): PersistedActiveRuntime {
+  return {
+    state: "active",
+    sid: input.sid,
+    tabId: input.tabId,
+    mode: input.mode,
+    url: sanitizeUrlForPrivacy(input.metadata.url),
+    ...(input.metadata.title ? { title: input.metadata.title.slice(0, 1_024) } : {}),
+    tags: normalizeSessionTags(input.metadata.tags),
+    config: input.config,
+    startedAt: input.startedAt,
+    counters: {
+      recorderEventSequence: 0,
+      recorderActionSequence: 0,
+      eventCount: 0,
+      errorCount: 0,
+      sizeBytes: 0,
+      budgetAlertCount: 0,
+      droppedBestEffortTasks: 0,
+      responseBodyCaptures: 0,
+      networkTotal: 0,
+      networkFailed: 0
+    }
+  };
+}
 
-  if (
-    metric &&
-    metric !== "largest-contentful-paint" &&
-    metric !== "largest-contentful-paint-render-time" &&
-    metric !== "largest-contentful-paint-load-time" &&
-    metric !== "lcp"
-  ) {
-    return null;
+async function checkpointProvisionalRuntimeStart(
+  active: PersistedActiveRuntime
+): Promise<PersistedStoppingRuntime> {
+  const stopRequestedAt = Date.now();
+  const cleanupDeadline = stopRequestedAt + resolveRuntimeLocalTtlMs(active.config.capturePolicy);
+  const tombstone = createStoppingRuntimeTombstone(active, stopRequestedAt, cleanupDeadline);
+  retainedStoppingRuntimesBySid.set(tombstone.sid, tombstone);
+
+  try {
+    await persistRuntimeState({ required: true });
+  } catch (error) {
+    await scheduleRetainedStoppingRuntimeRecovery(tombstone).catch(() => undefined);
+    throw error;
   }
 
-  const value = asFiniteNumber(record?.value);
-  const startTime = asFiniteNumber(record?.startTime);
-  const duration = asFiniteNumber(record?.duration);
-  const candidate = Math.max(
-    value ?? Number.NEGATIVE_INFINITY,
-    startTime ?? Number.NEGATIVE_INFINITY,
-    duration ?? Number.NEGATIVE_INFINITY
-  );
-
-  return Number.isFinite(candidate) ? candidate : null;
+  await scheduleRetainedStoppingRuntimeRecovery(tombstone).catch((error) => {
+    console.warn("[WebBlackbox] failed to schedule provisional start cleanup", {
+      sid: tombstone.sid,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
+  return tombstone;
 }
 
-function registerPerformanceBudgetBreach(
+async function commitProvisionalRuntimeStart(
   runtime: SessionRuntime,
-  key: string,
-  detail: string
-): boolean {
-  const now = Date.now();
-  const lastBreachAt = runtime.lastBudgetBreachAt.get(key) ?? Number.NEGATIVE_INFINITY;
+  tombstone: PersistedStoppingRuntime,
+  startToken: RuntimeStartToken
+): Promise<void> {
+  startToken.assertActive();
+  const armedRoot = requireArmedRootContentActivation(runtime);
 
-  if (now - lastBreachAt < PERFORMANCE_BUDGET_BREACH_COOLDOWN_MS) {
-    return false;
+  if (
+    runtime.activationState !== "starting" ||
+    !isMapEntrySame(sessionsByTab, runtime.tabId, runtime) ||
+    !isMapEntrySame(sessionsBySid, runtime.sid, runtime) ||
+    !deleteMapEntryIfSame(retainedStoppingRuntimesBySid, tombstone.sid, tombstone)
+  ) {
+    throw new Error("The provisional runtime lost its activation identity.");
   }
 
-  runtime.lastBudgetBreachAt.set(key, now);
-  runtime.budgetAlertCount += 1;
-  console.info("[WebBlackbox] performance budget breach", {
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    key,
-    detail
+  try {
+    await persistRuntimeState({ required: true });
+  } catch (error) {
+    if (!retainedStoppingRuntimesBySid.has(tombstone.sid)) {
+      retainedStoppingRuntimesBySid.set(tombstone.sid, tombstone);
+    }
+    await scheduleRetainedStoppingRuntimeRecovery(tombstone).catch(() => undefined);
+    throw error;
+  }
+
+  let armedRootStillCurrent = false;
+
+  try {
+    armedRootStillCurrent =
+      requireArmedRootContentActivation(runtime).activationId === armedRoot.activationId;
+  } catch {
+    armedRootStillCurrent = false;
+  }
+
+  if (
+    !startToken.isActive() ||
+    !isMapEntrySame(sessionsByTab, runtime.tabId, runtime) ||
+    !isMapEntrySame(sessionsBySid, runtime.sid, runtime) ||
+    !armedRootStillCurrent
+  ) {
+    retainedStoppingRuntimesBySid.set(tombstone.sid, tombstone);
+    throw new RuntimeStartCancelledError();
+  }
+
+  try {
+    activateArmedRuntimeContent(runtime, armedRoot.activationId);
+  } catch (error) {
+    retainedStoppingRuntimesBySid.set(tombstone.sid, tombstone);
+    throw error;
+  }
+
+  // The required storage write and the synchronous activation transition above
+  // are the only active-state commit point. Nothing below may reject it.
+  runtime.activationState = "active";
+  runtime.startToken = null;
+
+  if (runtime.screenRecording) {
+    runtime.screenRecording.provisional = false;
+  }
+  void Promise.resolve()
+    .then(() => runtimeCleanupScheduler.cancel(tombstone.sid))
+    .catch(() => undefined);
+}
+
+function publishCommittedRuntimeStart(runtime: SessionRuntime): void {
+  void setRecordingBadge().catch(() => undefined);
+  void notifyAuthorizedContentFrames(runtime, true).catch(() => undefined);
+
+  try {
+    broadcast({
+      kind: "sw.recording-status",
+      active: true,
+      tabId: runtime.tabId,
+      sid: runtime.sid,
+      mode: runtime.mode,
+      sampling: toStatusSampling(runtime),
+      capturePolicy: runtime.config.capturePolicy
+    });
+    pushSessionList();
+    notifyOffscreenPipelineStatus();
+  } catch (error) {
+    console.warn("[WebBlackbox] failed to publish committed runtime status", error);
+  }
+}
+
+function cleanupFailedProvisionalPipelineStart(
+  active: PersistedActiveRuntime,
+  tombstone: PersistedStoppingRuntime,
+  pipeline: SessionPipelineClient
+): Promise<void> {
+  return cleanupFailedPipelineRestoration(active, pipeline, tombstone);
+}
+
+function cleanupFailedProvisionalRuntimeStart(
+  active: PersistedActiveRuntime,
+  tombstone: PersistedStoppingRuntime,
+  runtime: SessionRuntime
+): Promise<void> {
+  return cleanupFailedActiveRuntimeRestoration(active, runtime, tombstone);
+}
+
+function createSessionRuntime(input: {
+  sid: string;
+  tabId: number;
+  mode: CaptureMode;
+  url: string;
+  captureUrl: string;
+  title?: string;
+  tags: readonly string[];
+  note?: string;
+  config: typeof DEFAULT_RECORDER_CONFIG;
+  startedAt: number;
+  stoppedAt?: number;
+  cleanupDeadline?: number;
+  pipeline: SessionPipelineClient;
+  performanceBudget: PerformanceBudgetConfig;
+  counters?: PersistedRuntimeCounters;
+  screenRecording?: PersistedScreenRecording;
+  screenRecordingChunks?: readonly ScreenRecordingChunkReference[];
+  activationState?: RuntimeActivationState;
+  startToken?: RuntimeStartToken;
+}): SessionRuntime {
+  const counters = input.counters ?? {
+    recorderEventSequence: 0,
+    recorderActionSequence: 0,
+    eventCount: 0,
+    errorCount: 0,
+    sizeBytes: 0,
+    budgetAlertCount: 0,
+    droppedBestEffortTasks: 0,
+    responseBodyCaptures: 0,
+    networkTotal: 0,
+    networkFailed: 0
+  };
+  const recorderPlugins = createDefaultRecorderPlugins();
+  const runtimeRef: { current?: SessionRuntime } = {};
+  const recorder = new WebBlackboxRecorder(
+    {
+      ...input.config,
+      mode: input.mode
+    },
+    {
+      onEvent: (event) => {
+        const runtime = runtimeRef.current;
+
+        if (!runtime) {
+          return;
+        }
+
+        updateSessionMetadataFromEvent(runtime, event);
+        trackSessionCounters(runtime, event);
+        evaluatePerformanceBudget(runtime, event);
+        enqueuePipelineEvent(runtime, event, runtime.activePipelineDelivery ?? undefined);
+      },
+      onFreeze: (reason) => {
+        if (runtimeRef.current) {
+          handleFreezeNotice(runtimeRef.current, reason);
+        }
+      }
+    },
+    undefined,
+    recorderPlugins
+  );
+  recorder.restoreSequenceState({
+    event: counters.recorderEventSequence,
+    action: counters.recorderActionSequence
   });
+  const restoredScreenRecordingChunks = input.screenRecording
+    ? restoreScreenRecordingChunkHashes(
+        input.screenRecording.chunkCount,
+        input.screenRecordingChunks ?? []
+      )
+    : null;
+  const contentDocuments = new ContentDocumentAuthorization(input.tabId);
 
-  if (runtime.performanceBudget.autoFreezeOnBreach) {
-    handleFreezeNotice(runtime, "perf");
+  if (!input.stoppedAt) {
+    contentDocuments.reset({ url: input.captureUrl });
   }
 
-  return true;
+  const runtime: SessionRuntime = {
+    sid: input.sid,
+    tabId: input.tabId,
+    mode: input.mode,
+    url: input.url,
+    captureUrl: input.captureUrl,
+    title: input.title,
+    tags: [...input.tags],
+    note: input.note,
+    config: input.config,
+    startedAt: input.startedAt,
+    stopRequestedAt: undefined,
+    stoppedAt: input.stoppedAt,
+    recorder,
+    pipeline: input.pipeline,
+    cdpRouter: null,
+    cdpScope: createCdpCaptureScopeState(input.config.capturePolicy, input.tabId, input.captureUrl),
+    contentDocuments,
+    contentActivationParents: new Map(),
+    contentMainWorldProofs: new Map(),
+    contentNavigationRevisions: new Map(),
+    sameDocumentTransitions: new SameDocumentTransitionLedger(),
+    pendingContentPolicyRevisions: new Map(),
+    pendingLiteNetworkPolicyRevisions: new Map(),
+    authorizedContentFrames: new Set<number>(),
+    requestMeta: new Map(),
+    screenshotInterval: null,
+    screenRecording: input.screenRecording
+      ? {
+          recordingId: input.screenRecording.recordingId,
+          cdpScopeGeneration: null,
+          provisional: isRuntimeActivationProvisional(input.activationState ?? "active"),
+          source: SCREEN_RECORDING_OFFSCREEN_SOURCE,
+          startedAt: input.screenRecording.startedAt,
+          startedMono: input.screenRecording.startedMono,
+          mime: input.screenRecording.mime,
+          width: input.screenRecording.width,
+          height: input.screenRecording.height,
+          frameRate: input.screenRecording.frameRate,
+          chunks: restoredScreenRecordingChunks ?? [],
+          chunkCount: restoredScreenRecordingChunks?.length ?? input.screenRecording.chunkCount,
+          sizeBytes: input.screenRecording.sizeBytes,
+          pendingWrites: new Set(),
+          chunkWrites: new ScreenRecordingChunkWriteLedger(),
+          stopPromise: null,
+          finalization: new ScreenRecordingFinalizationGate(),
+          finalizing: false,
+          durabilityEvidenceQueued: false,
+          terminalEvidenceQueued: false
+        }
+      : null,
+    lastPointer: null,
+    lastViewport: null,
+    lastActionScreenshotMono: Number.NEGATIVE_INFINITY,
+    lastIncidentCaptureAt: Number.NEGATIVE_INFINITY,
+    lastNavigationSnapshotAt: Number.NEGATIVE_INFINITY,
+    navigationRevision: 0,
+    queueDepth: 0,
+    droppedBestEffortTasks: counters.droppedBestEffortTasks,
+    pipelineEventBuffer: [],
+    pipelineBatchInFlight: null,
+    activePipelineDelivery: null,
+    pipelineFlushTimer: null,
+    pipelineFlushQueued: false,
+    captureFence: createVolatileCaptureFence(input.stoppedAt !== undefined),
+    cdpPayloadAdmissionBlocked: false,
+    cdpRestoreCheckpoint: null,
+    cdpRestoreEpoch: 0,
+    cdpRestoreTail: Promise.resolve(),
+    cdpRestoreTailEpoch: 0,
+    exactTopNavigationObservations: createExactTopNavigationObservationState(),
+    exactWebNavigationTransactions: new Map(),
+    activationState: input.activationState ?? "active",
+    startToken: input.startToken ?? null,
+    stopping: false,
+    responseBodyCaptures: counters.responseBodyCaptures,
+    responseBodyCaptureTimestamps: [],
+    capturedEventCount: counters.eventCount,
+    capturedErrorCount: counters.errorCount,
+    capturedSizeBytes: counters.sizeBytes,
+    budgetAlertCount: counters.budgetAlertCount,
+    performanceBudget: input.performanceBudget,
+    networkBudgetSample: {
+      total: counters.networkTotal,
+      failed: counters.networkFailed
+    },
+    lastFreezeNotices: new Map<string, number>(),
+    lastBudgetBreachAt: new Map<string, number>(),
+    queue: Promise.resolve(),
+    queueAccepting: true,
+    removeCdpListeners: [],
+    heapSnapshotCapture: null,
+    cleanupDeadline: input.cleanupDeadline,
+    consentExpiryTimer: null
+  };
+  runtimeRef.current = runtime;
+
+  return runtime;
 }
 
-function enqueuePipelineEvent(runtime: SessionRuntime, event: WebBlackboxEvent): void {
-  runtime.pipelineEventBuffer.push(event);
+async function reloadRecordingTab(tabId: number): Promise<void> {
+  if (!chromeApi?.tabs?.reload) {
+    throw new Error("Current Chrome API cannot reload the active tab.");
+  }
 
-  if (runtime.pipelineEventBuffer.length >= PIPELINE_BATCH_MAX_EVENTS) {
-    queuePipelineBatchFlush(runtime);
+  await chromeApi.tabs.reload(tabId);
+}
+
+async function reloadRecordingTabAndWaitForContentActivation(
+  runtime: SessionRuntime,
+  startToken: RuntimeStartToken
+): Promise<SessionContentActivation> {
+  const waiter = waitForContentArm(runtime, {
+    frameId: 0,
+    awaitCommittedDocument: true
+  });
+
+  try {
+    startToken.assertActive();
+    await reloadRecordingTab(runtime.tabId);
+    startToken.assertActive();
+    const activation = await waiter.promise;
+    startToken.assertActive();
+    return activation;
+  } catch (error) {
+    waiter.cancel(error instanceof Error ? error : new Error(String(error)));
+    await waiter.promise.catch(() => undefined);
+    throw error;
+  }
+}
+
+async function restoreExactLiteTabMetadataAfterNavigation(runtime: SessionRuntime): Promise<void> {
+  if (!isRuntimeCurrentCaptureOpen(runtime) || !usesExactLiteTopDocumentAuthorization(runtime)) {
     return;
   }
 
-  if (runtime.pipelineFlushTimer !== null || runtime.pipelineFlushQueued) {
+  const tabMetadata = await resolveTabSessionMetadata(runtime.tabId);
+  const exactRoot = runtime.contentDocuments.get(0);
+
+  if (
+    !isRuntimeCurrentCaptureOpen(runtime) ||
+    exactRoot?.url !== tabMetadata.captureUrl ||
+    runtime.captureUrl !== exactRoot.url
+  ) {
     return;
   }
 
-  runtime.pipelineFlushTimer = setTimeout(() => {
-    runtime.pipelineFlushTimer = null;
-    queuePipelineBatchFlush(runtime);
-  }, PIPELINE_BATCH_FLUSH_MS);
+  runtime.url = tabMetadata.url;
+  runtime.title = tabMetadata.title;
+  pushSessionList();
+  scheduleRuntimeStatePersist();
 }
 
-function queuePipelineBatchFlush(runtime: SessionRuntime): void {
-  if (runtime.pipelineFlushTimer !== null) {
-    clearTimeout(runtime.pipelineFlushTimer);
-    runtime.pipelineFlushTimer = null;
+async function restoreTabInstrumentationAfterNavigation(
+  claim: SessionNavigationClaim
+): Promise<void> {
+  const runtime = claim.runtime;
+
+  if (
+    !isSessionNavigationClaimCurrent(claim) ||
+    !shouldInjectIsolatedContentForMode(runtime.mode) ||
+    usesExactLiteTopDocumentAuthorization(runtime)
+  ) {
+    return;
   }
 
-  if (runtime.pipelineFlushQueued || runtime.pipelineEventBuffer.length === 0) {
+  const tabMetadata = await resolveTabSessionMetadata(runtime.tabId);
+
+  if (
+    !isSessionNavigationClaimCurrent(claim) ||
+    (claim.candidateUrl !== undefined && claim.candidateUrl !== tabMetadata.captureUrl)
+  ) {
     return;
   }
 
-  runtime.pipelineFlushQueued = true;
+  const policy = await runGuardedNavigationStep(
+    () => isSessionNavigationClaimCurrent(claim),
+    () => isRuntimeTopDocumentAllowed(runtime, tabMetadata.captureUrl)
+  );
 
-  enqueue(runtime, async () => {
-    try {
-      await drainPipelineBufferBatches(runtime, "queue");
-    } finally {
-      runtime.pipelineFlushQueued = false;
+  if (policy.status !== "current") {
+    return;
+  }
 
-      if (runtime.pipelineEventBuffer.length > 0 && !runtime.stopping) {
-        queuePipelineBatchFlush(runtime);
+  if (!policy.value) {
+    await stopRuntimeIfNavigationClaimCurrent(claim);
+    return;
+  }
+
+  runtime.captureUrl = tabMetadata.captureUrl;
+  runtime.cdpScope.captureUrl = tabMetadata.captureUrl;
+  runtime.url = tabMetadata.url;
+  resetAuthorizedContentFrames(runtime);
+
+  const instrumentation = await runRootNavigationInstrumentationTransaction({
+    isCurrent: () => isSessionNavigationClaimCurrent(claim),
+    inject: (assertCurrent) => ensureRootPageAgentsInjected(runtime, { assertCurrent }),
+    stopCurrent: () => stopRuntimeIfNavigationClaimCurrent(claim),
+    continueAfterInjection: async (assertCurrent) => {
+      assertCurrent();
+
+      if (runtime.mode === "full" && runtime.cdpRouter) {
+        launchCdpNavigationRestore(claim);
       }
+
+      await notifyAuthorizedContentFrames(runtime, true);
+      assertCurrent();
     }
   });
+
+  if (instrumentation.kind === "failed-closed") {
+    console.warn("[WebBlackbox] root navigation injection failed closed", {
+      tabId: runtime.tabId,
+      sid: runtime.sid,
+      error:
+        instrumentation.error instanceof Error
+          ? instrumentation.error.message
+          : String(instrumentation.error)
+    });
+  }
 }
 
-async function flushBufferedPipelineEvents(runtime: SessionRuntime): Promise<void> {
-  if (runtime.pipelineFlushTimer !== null) {
-    clearTimeout(runtime.pipelineFlushTimer);
-    runtime.pipelineFlushTimer = null;
+async function handleSameDocumentNavigation(
+  details: {
+    tabId: number;
+    frameId: number;
+    documentId?: string;
+    url: string;
+  },
+  isNavigationCurrent: () => boolean = () => true
+): Promise<void> {
+  const runtime = sessionsByTab.get(details.tabId);
+  const documentId = details.documentId;
+  const currentDocument =
+    runtime && typeof documentId === "string" && documentId.length > 0
+      ? runtime.contentDocuments.getKnownDocument(details.frameId, documentId)
+      : null;
+  const activeDocument = runtime?.contentDocuments.get(details.frameId);
+
+  if (
+    !runtime ||
+    !isRuntimeCurrentCaptureOpen(runtime) ||
+    !isNavigationCurrent() ||
+    typeof documentId !== "string" ||
+    documentId.length === 0 ||
+    currentDocument?.documentId !== documentId
+  ) {
+    return;
   }
 
-  if (runtime.pipelineEventBuffer.length === 0 && !runtime.pipelineFlushQueued) {
+  if (
+    details.frameId === 0 &&
+    usesExactLiteTopDocumentAuthorization(runtime) &&
+    !claimCurrentRuntimeNavigation(runtime, "content-navigation", details.url)
+  ) {
     return;
   }
 
-  await enqueueWithResult(runtime, async () => {
-    await drainPipelineBufferBatches(runtime, "drain");
+  const revisionKey = contentActivationParentKey(details.frameId, documentId);
+  const revision = (runtime.contentNavigationRevisions.get(revisionKey) ?? 0) + 1;
+  runtime.contentNavigationRevisions.set(revisionKey, revision);
+  runtime.pendingContentPolicyRevisions.set(revisionKey, revision);
+  runtime.pendingLiteNetworkPolicyRevisions.set(revisionKey, revision);
+  const documentsToReactivate =
+    activeDocument?.documentId === documentId
+      ? collectAuthorizedContentDocumentSubtree(runtime, activeDocument)
+      : [];
+  const previousRootActivation = contentActivations.currentForDocument(
+    {
+      runtime,
+      fence: runtime.captureFence,
+      sid: runtime.sid,
+      tabId: runtime.tabId,
+      frameId: details.frameId,
+      documentId,
+      url: currentDocument.url,
+      mode: runtime.mode
+    },
+    ["active"]
+  );
+  const sameDocumentTransition = runtime.sameDocumentTransitions.begin({
+    frameId: details.frameId,
+    documentId,
+    currentDocumentUrl: currentDocument.url,
+    nextDocumentUrl: details.url,
+    revision,
+    ...(previousRootActivation ? { activeActivationId: previousRootActivation.activationId } : {})
   });
-}
 
-async function drainPipelineBufferBatches(
-  runtime: SessionRuntime,
-  reason: "queue" | "drain"
-): Promise<void> {
-  let flushed = 0;
+  // Close old identities before the first async policy operation. A delayed or
+  // lost renderer control message cannot keep them useful because registry
+  // admission is revoked synchronously in the service worker.
+  await revokeContentFrameActivations(
+    runtime,
+    details.frameId,
+    "same-document-policy-pending",
+    documentId
+  );
 
-  while (runtime.pipelineEventBuffer.length > 0) {
-    const batchSize = Math.min(
-      runtime.pipelineEventBuffer.length,
-      PIPELINE_BATCH_DRAIN_CHUNK_EVENTS
-    );
-    const batch = runtime.pipelineEventBuffer.slice(0, batchSize);
+  const policyDecision =
+    details.frameId === 0
+      ? await resolveCurrentTabUrlPolicyDecision({
+          candidateUrl: details.url,
+          evaluateAllowed: () => isRuntimeTopDocumentAllowed(runtime, details.url),
+          resolveCurrentUrl: () => resolveCurrentTabCaptureUrl(runtime.tabId)
+        })
+      : evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+            url: details.url,
+            tabId: runtime.tabId,
+            frameId: details.frameId
+          }).allowed
+        ? "allowed"
+        : "denied";
 
-    if (batch.length === 0) {
-      break;
-    }
+  if (
+    !isNavigationCurrent() ||
+    !isRuntimeCurrentCaptureOpen(runtime) ||
+    runtime.contentNavigationRevisions.get(revisionKey) !== revision ||
+    runtime.pendingContentPolicyRevisions.get(revisionKey) !== revision ||
+    runtime.contentDocuments.getKnownDocument(details.frameId, documentId)?.documentId !==
+      documentId
+  ) {
+    runtime.sameDocumentTransitions.complete(details.frameId, documentId, revision);
+    return;
+  }
 
-    await runtime.pipeline.ingestBatch(batch);
-    runtime.pipelineEventBuffer.splice(0, batch.length);
-    flushed += batch.length;
+  if (policyDecision === "stale") {
+    runtime.sameDocumentTransitions.complete(details.frameId, documentId, revision);
+    runtime.pendingContentPolicyRevisions.delete(revisionKey);
+    runtime.pendingLiteNetworkPolicyRevisions.delete(revisionKey);
+    return;
+  }
 
-    if (runtime.pipelineEventBuffer.length > 0) {
-      await wait(0);
+  if (policyDecision === "denied") {
+    runtime.sameDocumentTransitions.complete(details.frameId, documentId, revision);
+    runtime.pendingContentPolicyRevisions.delete(revisionKey);
+    runtime.pendingLiteNetworkPolicyRevisions.delete(revisionKey);
+    if (details.frameId === 0) {
+      await stopRuntimeIfCurrent(runtime);
+    } else {
+      blockKnownContentSubtree(runtime, currentDocument, "same-document-scope-denied");
     }
+    return;
   }
 
-  if (shouldLogPerf() && flushed > 0) {
-    console.info("[WebBlackbox][perf] pipeline buffer flushed", {
-      sid: runtime.sid,
-      reason,
-      flushed,
-      queueDepth: runtime.queueDepth,
-      stopping: runtime.stopping
-    });
-  }
-}
-
-function createOffscreenPipelineClient(sid: string): SessionPipelineClient {
-  return {
-    start: async (session, redactionProfile, capturePolicy) => {
-      await requestOffscreenPipeline<void>({
-        op: "start",
-        sid,
-        session,
-        redactionProfile,
-        capturePolicy
-      });
-    },
-    ingest: async (event) => {
-      await requestOffscreenPipeline<void>({
-        op: "ingest",
-        sid,
-        event
-      });
-    },
-    ingestBatch: async (events) => {
-      await requestOffscreenPipeline<void>({
-        op: "ingestBatch",
-        sid,
-        events
-      });
-    },
-    flush: async () => {
-      await requestOffscreenPipeline<void>({
-        op: "flush",
-        sid
-      });
-    },
-    putBlob: async (mime, bytes) => {
-      return requestOffscreenPipeline<string>({
-        op: "putBlob",
-        sid,
-        mime,
-        bytes
-      });
-    },
-    exportAndDownload: async (options = {}) => {
-      const exported = await requestOffscreenPipeline<unknown>({
-        op: "exportDownload",
-        sid,
-        passphrase: options.passphrase,
-        includeScreenshots: options.includeScreenshots,
-        includeScreenRecordings: options.includeScreenRecordings,
-        maxArchiveBytes: options.maxArchiveBytes,
-        recentWindowMs: options.recentWindowMs,
-        allowPlaintextLocalExport: options.allowPlaintextLocalExport
-      });
-
-      return normalizePipelineExportDownloadResult(exported);
-    },
-    close: async (options = {}) => {
-      await requestOffscreenPipeline<void>({
-        op: "close",
-        sid,
-        purge: options.purge
-      });
-    }
-  };
-}
+  const authorized = runtime.contentDocuments.refreshKnownDocumentUrl({
+    tabId: runtime.tabId,
+    frameId: details.frameId,
+    documentId: details.documentId,
+    url: details.url
+  });
 
-async function requestOffscreenPipeline<TResult>(
-  request: Omit<OffscreenPipelineRequest, "kind" | "requestId">
-): Promise<TResult> {
-  const startedAt = perfNow();
-  const result = await requestOffscreenPipelineWithRecovery<TResult>(request);
+  if (!authorized) {
+    runtime.sameDocumentTransitions.complete(details.frameId, documentId, revision);
+    runtime.pendingContentPolicyRevisions.delete(revisionKey);
+    runtime.pendingLiteNetworkPolicyRevisions.delete(revisionKey);
+    await failSameDocumentReactivation(runtime, currentDocument);
+    return;
+  }
 
-  const durationMs = perfNow() - startedAt;
+  if (details.frameId === 0) {
+    runtime.captureUrl = details.url;
+    runtime.cdpScope.captureUrl = details.url;
+    runtime.url = sanitizeUrlForPrivacy(details.url);
+    pushSessionList();
+    scheduleRuntimeStatePersist();
+  }
 
-  if (durationMs >= PERF_WARN_MS && shouldLogPerf()) {
-    console.info("[WebBlackbox][perf] offscreen request", {
-      op: request.op,
-      durationMs: Number(durationMs.toFixed(2)),
-      queuePending: pendingOffscreenRequests.size
-    });
+  if (activeDocument?.documentId !== documentId) {
+    runtime.sameDocumentTransitions.complete(details.frameId, documentId, revision);
+    runtime.pendingContentPolicyRevisions.delete(revisionKey);
+    runtime.pendingLiteNetworkPolicyRevisions.delete(revisionKey);
+    return;
   }
 
-  return result as TResult;
-}
+  runtime.pendingContentPolicyRevisions.delete(revisionKey);
 
-async function requestOffscreenPipelineWithRecovery<TResult>(
-  request: Omit<OffscreenPipelineRequest, "kind" | "requestId">
-): Promise<TResult> {
   try {
-    return await requestOffscreenPipelineOnce<TResult>(request);
+    const reactivated = await reactivateSameDocumentSubtree(
+      runtime,
+      documentsToReactivate,
+      revisionKey,
+      revision,
+      sameDocumentTransition,
+      isNavigationCurrent
+    );
+
+    if (
+      !reactivated &&
+      isNavigationCurrent() &&
+      runtime.contentNavigationRevisions.get(revisionKey) === revision
+    ) {
+      runtime.sameDocumentTransitions.complete(details.frameId, documentId, revision);
+      runtime.pendingLiteNetworkPolicyRevisions.delete(revisionKey);
+      await failSameDocumentReactivation(runtime, currentDocument);
+    } else if (reactivated) {
+      runtime.sameDocumentTransitions.complete(details.frameId, documentId, revision);
+      runtime.pendingLiteNetworkPolicyRevisions.delete(revisionKey);
+    }
   } catch (error) {
-    if (!shouldRetryOffscreenRequest(request, error)) {
+    if (isNavigationCurrent() && runtime.contentNavigationRevisions.get(revisionKey) === revision) {
+      runtime.sameDocumentTransitions.complete(details.frameId, documentId, revision);
+      runtime.pendingLiteNetworkPolicyRevisions.delete(revisionKey);
+      await failSameDocumentReactivation(runtime, currentDocument);
       throw error;
     }
-
-    await recoverOffscreenSession(request.sid);
-    return await requestOffscreenPipelineOnce<TResult>(request);
   }
 }
 
-async function requestOffscreenPipelineOnce<TResult>(
-  request: Omit<OffscreenPipelineRequest, "kind" | "requestId">
-): Promise<TResult> {
-  const port = await ensureOffscreenPortReady();
-  const requestId = `off-${Date.now()}-${offscreenRequestSeq}`;
-  const timeoutMs = resolveOffscreenRequestTimeoutMs(request.op);
-  offscreenRequestSeq += 1;
+function collectAuthorizedContentDocumentSubtree(
+  runtime: SessionRuntime,
+  root: { frameId: number; documentId: string; url: string }
+): Array<{ frameId: number; documentId: string; url: string }> {
+  const documents = runtime.contentDocuments.activeDocuments();
+  const selected = new Map<string, { frameId: number; documentId: string; url: string }>([
+    [contentActivationParentKey(root.frameId, root.documentId), root]
+  ]);
+  const pending = [{ frameId: root.frameId, documentId: root.documentId }];
 
-  const result = await new Promise<unknown>((resolve, reject) => {
-    const timeout = setTimeout(() => {
-      pendingOffscreenRequests.delete(requestId);
-      reject(new Error(`Timed out waiting for offscreen response: ${request.op}`));
-    }, timeoutMs);
+  while (pending.length > 0) {
+    const parent = pending.shift();
 
-    pendingOffscreenRequests.set(requestId, {
-      resolve,
-      reject,
-      timeout
-    });
+    if (!parent) {
+      break;
+    }
 
-    try {
-      port.postMessage({
-        kind: "sw.pipeline-request",
-        requestId,
-        ...request
-      });
-    } catch (error) {
-      clearTimeout(timeout);
-      pendingOffscreenRequests.delete(requestId);
-      reject(error instanceof Error ? error : new Error(String(error)));
+    for (const document of documents) {
+      const key = contentActivationParentKey(document.frameId, document.documentId);
+      const relationship = runtime.contentActivationParents.get(key);
+
+      if (
+        !selected.has(key) &&
+        relationship?.frameId === parent.frameId &&
+        relationship.documentId === parent.documentId
+      ) {
+        selected.set(key, document);
+        pending.push(document);
+      }
     }
-  });
+  }
 
-  return result as TResult;
+  return [...selected.values()];
 }
 
-function shouldRetryOffscreenRequest(
-  request: Omit<OffscreenPipelineRequest, "kind" | "requestId">,
-  error: unknown
-): boolean {
-  if (request.op === "start") {
-    return false;
+function blockKnownContentSubtree(
+  runtime: SessionRuntime,
+  root: { frameId: number; documentId: string },
+  reason: string
+): void {
+  const removed = runtime.contentDocuments.blockKnownDocumentSubtree(root, (document) =>
+    runtime.contentActivationParents.get(
+      contentActivationParentKey(document.frameId, document.documentId)
+    )
+  );
+
+  for (const document of removed) {
+    clearContentDocumentCompanionState(runtime, document, reason);
   }
 
-  const message = error instanceof Error ? error.message : String(error);
+  syncAuthorizedContentFrames(runtime);
+}
 
-  return (
-    message.includes("Pipeline session not found") ||
-    message.includes("Offscreen pipeline disconnected") ||
-    message.includes("Offscreen pipeline is unavailable")
-  );
+function clearContentDocumentCompanionState(
+  runtime: SessionRuntime,
+  document: { frameId: number; documentId: string },
+  reason: string
+): void {
+  void revokeContentFrameActivations(runtime, document.frameId, reason, document.documentId);
+  const key = contentActivationParentKey(document.frameId, document.documentId);
+  runtime.contentMainWorldProofs.delete(key);
+  runtime.contentActivationParents.delete(key);
+  clearContentNavigationRevisions(runtime, document.frameId);
 }
 
-function resolveOffscreenRequestTimeoutMs(requestOp: OffscreenPipelineRequest["op"]): number {
-  if (requestOp === "exportDownload") {
-    return OFFSCREEN_REQUEST_TIMEOUT_EXPORT_MS;
-  }
+async function reactivateSameDocumentSubtree(
+  runtime: SessionRuntime,
+  documents: readonly { frameId: number; documentId: string; url: string }[],
+  revisionKey: string,
+  revision: number,
+  sameDocumentTransition?: ContentSameDocumentTransition,
+  isNavigationCurrent: () => boolean = () => true
+): Promise<boolean> {
+  const pending = [...documents];
+  const isCurrent = () =>
+    isNavigationCurrent() &&
+    isRuntimeCurrentCaptureOpen(runtime) &&
+    runtime.contentNavigationRevisions.get(revisionKey) === revision;
+
+  while (pending.length > 0) {
+    if (!isCurrent()) {
+      return false;
+    }
 
-  return OFFSCREEN_REQUEST_TIMEOUT_DEFAULT_MS;
-}
+    const live = contentActivations.listRuntime(runtime, runtime.captureFence);
+    const ready = pending.filter((document) => {
+      if (document.frameId === 0) {
+        return true;
+      }
 
-async function ensureOffscreenPortReady(): Promise<PortLike> {
-  if (offscreenPort) {
-    return offscreenPort;
-  }
+      const parent = runtime.contentActivationParents.get(
+        contentActivationParentKey(document.frameId, document.documentId)
+      );
+      return (
+        parent !== undefined &&
+        live.some(
+          (activation) =>
+            activation.frameId === parent.frameId &&
+            activation.documentId === parent.documentId &&
+            activation.state === "active"
+        )
+      );
+    });
 
-  await ensureOffscreenDocument();
+    if (ready.length === 0) {
+      return false;
+    }
 
-  for (let attempt = 0; attempt < OFFSCREEN_PORT_READY_MAX_ATTEMPTS; attempt += 1) {
-    if (offscreenPort) {
-      return offscreenPort;
+    for (const document of ready) {
+      pending.splice(pending.indexOf(document), 1);
     }
 
-    await wait(OFFSCREEN_PORT_READY_WAIT_MS);
+    await Promise.all(
+      ready.map((document) =>
+        requestFreshContentActivation(runtime, {
+          frameId: document.frameId,
+          documentId: document.documentId,
+          ...(sameDocumentTransition &&
+          document.frameId === sameDocumentTransition.frameId &&
+          document.documentId === sameDocumentTransition.documentId
+            ? { sameDocumentTransition }
+            : {}),
+          assertCurrent: () => {
+            if (
+              !isCurrent() ||
+              runtime.contentDocuments.get(document.frameId)?.documentId !== document.documentId
+            ) {
+              throw new Error("Same-document activation rotation became stale.");
+            }
+          }
+        })
+      )
+    );
   }
 
-  throw new Error("Offscreen pipeline is unavailable.");
+  return isCurrent();
 }
 
-function handleOffscreenRuntimeMessage(rawMessage: unknown, port: PortLike): boolean {
-  if (port.name !== PORT_NAMES.offscreen) {
-    return false;
-  }
-
-  if (rawMessage === null || typeof rawMessage !== "object" || Array.isArray(rawMessage)) {
-    return false;
+async function failSameDocumentReactivation(
+  runtime: SessionRuntime,
+  root: { frameId: number; documentId: string }
+): Promise<void> {
+  if (root.frameId === 0) {
+    await stopRuntimeIfCurrent(runtime);
+    return;
   }
 
-  const kind = (rawMessage as { kind?: unknown }).kind;
+  blockKnownContentSubtree(runtime, root, "same-document-reactivation-failed");
+}
 
-  if (kind === "offscreen.ready") {
-    notifyOffscreenPipelineStatus();
-    return true;
+async function failSameDocumentNavigationIfCurrent(
+  details: { tabId: number; frameId: number; documentId?: string; url: string },
+  claim: {
+    runtime: SessionRuntime;
+    revisionKey: string;
+    contentRevision: number;
+    navigationRevision: number;
+    cdpRestoreEpoch: number;
   }
+): Promise<void> {
+  const runtime = claim.runtime;
+  const documentId = details.documentId;
 
-  if (kind === "offscreen.keepalive") {
-    return true;
+  if (
+    sessionsByTab.get(details.tabId) !== runtime ||
+    !isRuntimeCurrentCaptureOpen(runtime) ||
+    runtime.navigationRevision !== claim.navigationRevision ||
+    !isCdpRestoreEpochCurrent(runtime, claim.cdpRestoreEpoch) ||
+    runtime.contentNavigationRevisions.get(claim.revisionKey) !== claim.contentRevision ||
+    typeof documentId !== "string" ||
+    runtime.contentDocuments.getKnownDocument(details.frameId, documentId)?.documentId !==
+      documentId
+  ) {
+    return;
   }
 
-  if (kind === "offscreen.screen-recording-chunk") {
-    void handleOffscreenScreenRecordingChunk(
-      rawMessage as OffscreenScreenRecordingChunkMessage
-    ).catch((error) => {
-      console.warn("[WebBlackbox] failed to persist screen recording chunk", error);
-    });
-    return true;
-  }
+  if (details.frameId === 0) {
+    const currentUrl = await resolveCurrentTabCaptureUrl(details.tabId);
 
-  if (kind === "offscreen.screen-recording-ended") {
-    void handleOffscreenScreenRecordingEnded(
-      rawMessage as OffscreenScreenRecordingEndedMessage
-    ).catch((error) => {
-      console.warn("[WebBlackbox] failed to finalize screen recording", error);
-    });
-    return true;
+    if (
+      currentUrl === details.url &&
+      sessionsByTab.get(details.tabId) === runtime &&
+      runtime.navigationRevision === claim.navigationRevision &&
+      isCdpRestoreEpochCurrent(runtime, claim.cdpRestoreEpoch) &&
+      runtime.contentNavigationRevisions.get(claim.revisionKey) === claim.contentRevision
+    ) {
+      await stopRuntimeIfCurrent(runtime);
+    }
+    return;
   }
 
-  if (kind === "offscreen.screen-recording-error") {
-    handleOffscreenScreenRecordingError(rawMessage as OffscreenScreenRecordingErrorMessage);
-    return true;
+  const known = runtime.contentDocuments.getKnownDocument(details.frameId, documentId);
+  if (known) {
+    blockKnownContentSubtree(runtime, known, "same-document-policy-failed");
   }
+}
 
-  if (kind !== "offscreen.pipeline-response") {
-    return false;
+function clearContentNavigationRevisions(runtime: SessionRuntime, frameId: number): void {
+  if (frameId === 0) {
+    runtime.contentNavigationRevisions.clear();
+    runtime.pendingContentPolicyRevisions.clear();
+    runtime.pendingLiteNetworkPolicyRevisions.clear();
+    runtime.sameDocumentTransitions.clear();
+    return;
   }
 
-  const response = rawMessage as OffscreenPipelineResponse;
-  const pending = pendingOffscreenRequests.get(response.requestId);
+  runtime.sameDocumentTransitions.clearFrame(frameId);
 
-  if (!pending) {
-    return true;
+  for (const revisions of [
+    runtime.contentNavigationRevisions,
+    runtime.pendingContentPolicyRevisions,
+    runtime.pendingLiteNetworkPolicyRevisions
+  ]) {
+    for (const key of revisions.keys()) {
+      try {
+        const parsed = JSON.parse(key) as unknown;
+        if (Array.isArray(parsed) && parsed[0] === frameId) {
+          revisions.delete(key);
+        }
+      } catch {
+        revisions.delete(key);
+      }
+    }
   }
+}
 
-  clearTimeout(pending.timeout);
-  pendingOffscreenRequests.delete(response.requestId);
-
-  if (response.ok) {
-    pending.resolve(response.result);
-  } else {
-    pending.reject(new Error(response.error ?? "Offscreen pipeline request failed."));
-  }
+async function waitForLiveParentContentActivation(
+  runtime: SessionRuntime,
+  parent: { frameId: number; documentId: string }
+): Promise<boolean> {
+  const deadline = Date.now() + CONTENT_ARM_TIMEOUT_MS;
 
-  return true;
-}
+  while (Date.now() <= deadline) {
+    if (!isRuntimeCurrentCaptureOpen(runtime)) {
+      return false;
+    }
 
-function estimateSessionEventBytes(event: WebBlackboxEvent): number {
-  try {
-    return new TextEncoder().encode(JSON.stringify(event)).byteLength;
-  } catch {
-    return 0;
-  }
-}
+    if (isContentParentReady(runtime, parent)) {
+      return true;
+    }
 
-function rejectPendingOffscreenRequests(message: string): void {
-  for (const pending of pendingOffscreenRequests.values()) {
-    clearTimeout(pending.timeout);
-    pending.reject(new Error(message));
+    await wait(25);
   }
 
-  pendingOffscreenRequests.clear();
+  return false;
 }
 
-async function recoverAllActiveOffscreenPipelines(): Promise<void> {
-  for (const runtime of sessionsByTab.values()) {
-    if (runtime.stopping || runtime.stoppedAt) {
-      continue;
-    }
-
-    await recoverOffscreenSession(runtime.sid);
-  }
-}
-
-async function recoverOffscreenSession(sid: string): Promise<void> {
-  const existing = offscreenSessionRecovery.get(sid);
-
-  if (existing) {
-    await existing;
-    return;
-  }
+async function handleCommittedContentDocument(details: {
+  tabId: number;
+  frameId: number;
+  documentId?: string;
+  documentLifecycle?: string;
+  frameType?: string;
+  parentDocumentId?: string;
+  parentFrameId?: number;
+  url: string;
+}): Promise<void> {
+  const runtime = sessionsByTab.get(details.tabId);
+  let exactTransaction: ExactWebNavigationCommitTransaction | null = null;
+  let transactionFailed = false;
 
-  const task = (async () => {
-    const runtime = sessionsBySid.get(sid);
+  try {
+    const committedKind = classifyActiveCommittedDocument(details);
+    const topContentDocument =
+      committedKind === "top" &&
+      runtime !== undefined &&
+      (runtime.mode === "full"
+        ? hasExactWebNavigationTracking()
+        : usesExactLiteTopDocumentAuthorization(runtime));
+    const parentDocument =
+      committedKind === "child" &&
+      runtime &&
+      details.parentFrameId !== undefined &&
+      typeof details.parentDocumentId === "string" &&
+      details.parentDocumentId.length > 0
+        ? runtime.contentDocuments.getKnownDocument(details.parentFrameId, details.parentDocumentId)
+        : null;
+    const includedChildDocument = Boolean(
+      committedKind === "child" &&
+      runtime?.config.capturePolicy?.scope.includeSubframes === true &&
+      details.parentFrameId !== undefined &&
+      parentDocument !== null &&
+      parentDocument.documentId === details.parentDocumentId
+    );
 
-    if (!runtime || runtime.stopping || runtime.stoppedAt) {
+    if (
+      !runtime ||
+      (!topContentDocument && !includedChildDocument) ||
+      !isVolatileCaptureOpen(runtime.captureFence) ||
+      runtime.stopping ||
+      runtime.stoppedAt
+    ) {
       return;
     }
 
-    await requestOffscreenPipelineOnce<void>({
-      op: "start",
-      sid,
-      session: toSessionMetadata(runtime),
-      redactionProfile: runtime.config.redaction,
-      capturePolicy: runtime.config.capturePolicy
-    });
-    notifyOffscreenPipelineStatus();
-  })()
-    .catch((error) => {
-      console.warn("[WebBlackbox] failed to recover offscreen pipeline session", {
-        sid,
-        error: error instanceof Error ? error.message : String(error)
-      });
-      throw error;
-    })
-    .finally(() => {
-      offscreenSessionRecovery.delete(sid);
-    });
+    const exactObservation =
+      topContentDocument && runtime.mode === "full"
+        ? observeExactWebNavigationCommit(runtime.exactTopNavigationObservations, details.url, () =>
+            advanceCdpRestoreEpoch(runtime)
+          )
+        : null;
+    if (exactObservation) {
+      evictExactWebNavigationTransactions(runtime, exactObservation.evictedWebTokens);
+    }
 
-  offscreenSessionRecovery.set(sid, task);
-  await task;
-}
+    const topCommitClaim = topContentDocument
+      ? claimCurrentRuntimeNavigation(runtime, "web-navigation-commit", details.url)
+      : null;
 
-async function attachCdp(runtime: SessionRuntime): Promise<void> {
-  let router: CdpRouter | null = null;
+    if (exactObservation && topCommitClaim) {
+      exactTransaction = {
+        token: exactObservation.token,
+        restoreEpoch: exactObservation.restoreEpoch,
+        claim: topCommitClaim,
+        phase: "running",
+        cdpObserved: exactObservation.cdpObserved,
+        detachedRestorePending: false
+      };
+      runtime.exactWebNavigationTransactions.set(exactTransaction.token, exactTransaction);
+    } else if (exactObservation && !exactObservation.cdpObserved) {
+      cancelExactWebNavigationCommitObservation(
+        runtime.exactTopNavigationObservations,
+        exactObservation.token
+      );
+    }
 
-  try {
-    router = createCdpRouter(createChromeDebuggerTransport());
+    if (topCommitClaim && runtime.mode === "full") {
+      suspendFullCaptureForNavigation(topCommitClaim);
+    }
 
-    const unsubscribeEvent = router.onEvent((event) => {
-      const normalizedPayload = normalizeFullModePayload(event.method, event.params ?? {});
+    clearContentNavigationRevisions(runtime, details.frameId);
 
-      if (event.method === "HeapProfiler.addHeapSnapshotChunk") {
-        const payload = asRecord(normalizedPayload);
-        const chunk = typeof payload?.chunk === "string" ? payload.chunk : undefined;
+    if (
+      topContentDocument &&
+      runtime.mode === "lite" &&
+      typeof details.documentId === "string" &&
+      details.documentId.length > 0
+    ) {
+      bindCommittedDocumentToContentArmWaiters(runtime, 0, details.documentId);
+    }
 
-        if (chunk && runtime.heapSnapshotCapture) {
-          const chunkBytes = new TextEncoder().encode(chunk).byteLength;
-          const nextBytes = runtime.heapSnapshotCapture.bytes + chunkBytes;
+    const previousDocument = runtime.contentDocuments.get(details.frameId);
+    if (previousDocument) {
+      blockKnownContentSubtree(runtime, previousDocument, "navigation");
+    }
 
-          if (nextBytes <= HEAP_SNAPSHOT_MAX_BYTES) {
-            runtime.heapSnapshotCapture.chunks.push(chunk);
-            runtime.heapSnapshotCapture.bytes = nextBytes;
-          } else {
-            runtime.heapSnapshotCapture.truncated = true;
-          }
+    const preparation = await runtime.contentDocuments
+      .prepareCommittedNavigation(details, async ({ url, frameId }) => {
+        if (frameId === 0) {
+          return isRuntimeTopDocumentAllowed(runtime, url);
         }
-      }
 
-      ingestRawEvent({
-        source: "cdp",
-        rawType: event.method,
-        tabId: runtime.tabId,
-        sid: runtime.sid,
-        t: Date.now(),
-        mono: monotonicTime(),
-        cdpSessionId: event.sessionId,
-        payload: normalizedPayload
+        return evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+          url,
+          tabId: runtime.tabId,
+          frameId
+        });
+      })
+      .finally(() => {
+        syncAuthorizedContentFrames(runtime);
       });
 
-      if (!FULL_MODE_FOLLOWUP_METHODS.has(event.method)) {
-        return;
+    if (
+      !isRuntimeCurrentCaptureOpen(runtime) ||
+      (exactTransaction && !isExactWebNavigationTransactionCurrent(runtime, exactTransaction))
+    ) {
+      return;
+    }
+
+    if (!preparation.prepared) {
+      if (
+        topContentDocument &&
+        (preparation.reason === "invalid-navigation" ||
+          preparation.reason === "scope-denied" ||
+          preparation.reason === "scope-error")
+      ) {
+        await stopRuntimeIfCurrent(runtime);
       }
+      return;
+    }
 
-      enqueue(
-        runtime,
-        async () => {
-          await processFullModeEvent(runtime, event.method, event.params ?? {}, event.sessionId);
-        },
-        { bestEffort: true }
+    if (
+      !runtime.contentDocuments.isCurrentNavigation(
+        preparation.document.frameId,
+        preparation.document.documentId
+      )
+    ) {
+      return;
+    }
+
+    if (
+      preparation.document.frameId > 0 &&
+      details.parentFrameId !== undefined &&
+      typeof details.parentDocumentId === "string" &&
+      details.parentDocumentId.length > 0
+    ) {
+      runtime.contentActivationParents.set(
+        contentActivationParentKey(preparation.document.frameId, preparation.document.documentId),
+        {
+          frameId: details.parentFrameId,
+          documentId: details.parentDocumentId
+        }
       );
-    });
+    }
 
-    const unsubscribeDetach = router.onDetach((event) => {
-      if (event.tabId === runtime.tabId) {
-        void stopSession(runtime.tabId);
-      }
-    });
+    const currentPreparedDocument = runtime.contentDocuments.getKnownDocument(
+      preparation.document.frameId,
+      preparation.document.documentId
+    );
 
-    runtime.removeCdpListeners.push(unsubscribeEvent, unsubscribeDetach);
+    if (!currentPreparedDocument) {
+      return;
+    }
 
-    await router.attach(runtime.tabId);
-    runtime.enabledCdpSessions.clear();
-    await router.enableBaseline(runtime.tabId);
-    runtime.enabledCdpSessions.add("root");
-    await router.enableAutoAttach(runtime.tabId);
-    await router.send({ tabId: runtime.tabId }, "DOMStorage.enable").catch(() => undefined);
-    await router.send({ tabId: runtime.tabId }, "Performance.enable").catch(() => undefined);
+    if (
+      topContentDocument &&
+      (!exactTransaction || isExactWebNavigationTransactionCurrent(runtime, exactTransaction))
+    ) {
+      runtime.captureUrl = currentPreparedDocument.url;
+      runtime.cdpScope.captureUrl = currentPreparedDocument.url;
+      runtime.url = sanitizeUrlForPrivacy(currentPreparedDocument.url);
+      pushSessionList();
+      scheduleRuntimeStatePersist();
+    }
 
-    runtime.cdpRouter = router;
+    if (currentPreparedDocument.frameId > 0) {
+      const parent = runtime.contentActivationParents.get(
+        contentActivationParentKey(
+          currentPreparedDocument.frameId,
+          currentPreparedDocument.documentId
+        )
+      );
 
-    enqueue(
-      runtime,
-      async () => {
-        await captureFullModeArtifacts(runtime, "session-start");
-      },
-      { bestEffort: true }
-    );
+      const parentActivation = parent
+        ? runtime.contentDocuments.waitForKnownDocumentActivation(parent)
+        : null;
+
+      if (
+        !parent ||
+        !parentActivation ||
+        !(await parentActivation) ||
+        !(await waitForLiveParentContentActivation(runtime, parent)) ||
+        (exactTransaction && !isExactWebNavigationTransactionCurrent(runtime, exactTransaction))
+      ) {
+        blockKnownContentSubtree(runtime, currentPreparedDocument, "committed-parent-missing");
+        return;
+      }
+    }
 
-    const normalizedScreenshotIntervalMs = normalizeOptionalSamplingInterval(
-      runtime.config.sampling.screenshotIdleMs,
-      DEFAULT_RECORDER_CONFIG.sampling.screenshotIdleMs
-    );
+    const result = await injectPendingContentDocument({
+      chromeApi,
+      authorization: runtime.contentDocuments,
+      document: currentPreparedDocument,
+      isRuntimeActive: () =>
+        isVolatileCaptureOpen(runtime.captureFence) &&
+        !runtime.stopping &&
+        !runtime.stoppedAt &&
+        sessionsByTab.get(runtime.tabId) === runtime &&
+        (!exactTransaction || isExactWebNavigationTransactionCurrent(runtime, exactTransaction)),
+      mode: runtime.mode
+    });
 
-    if (normalizedScreenshotIntervalMs > 0) {
-      const screenshotIntervalMs = Math.max(
-        FULL_MODE_MIN_SCREENSHOT_INTERVAL_MS,
-        normalizedScreenshotIntervalMs
+    if (result.status === "injected") {
+      if (runtime.mode === "lite") {
+        if (!result.mainWorldController) {
+          throw new Error("Lite document injection omitted its MAIN-world controller.");
+        }
+        if (
+          !rememberMainWorldController(
+            runtime,
+            contentActivationParentKey(
+              preparation.document.frameId,
+              preparation.document.documentId
+            ),
+            result.mainWorldController
+          )
+        ) {
+          throw new Error("Lite document controller conflicted with its isolated singleton.");
+        }
+      }
+      runtime.contentDocuments.completePendingInjection(
+        preparation.document.frameId,
+        preparation.document.documentId
       );
+      syncAuthorizedContentFrames(runtime);
 
-      runtime.screenshotInterval = globalThis.setInterval(() => {
-        enqueue(
-          runtime,
-          async () => {
-            await captureScreenshot(runtime, "interval");
-          },
-          { bestEffort: true }
+      try {
+        await requestFreshContentActivation(runtime, {
+          frameId: preparation.document.frameId,
+          documentId: preparation.document.documentId,
+          assertCurrent: () => {
+            if (
+              !isRuntimeCurrentCaptureOpen(runtime) ||
+              (exactTransaction &&
+                !isExactWebNavigationTransactionCurrent(runtime, exactTransaction)) ||
+              !runtime.contentDocuments.isCurrentNavigation(
+                preparation.document.frameId,
+                preparation.document.documentId
+              )
+            ) {
+              throw new Error("The prepared content document changed during activation.");
+            }
+          }
+        });
+      } catch (error) {
+        const failedCurrentNavigation = runtime.contentDocuments.isCurrentNavigation(
+          preparation.document.frameId,
+          preparation.document.documentId
         );
-      }, screenshotIntervalMs);
+        blockKnownContentSubtree(runtime, preparation.document, "prepared-activation-failed");
+        syncAuthorizedContentFrames(runtime);
+        console.warn("[WebBlackbox] prepared document status request failed closed", {
+          tabId: runtime.tabId,
+          frameId: preparation.document.frameId,
+          documentId: preparation.document.documentId,
+          error: error instanceof Error ? error.message : String(error)
+        });
+
+        if (
+          topContentDocument &&
+          failedCurrentNavigation &&
+          (!exactTransaction || isExactWebNavigationTransactionCurrent(runtime, exactTransaction))
+        ) {
+          await stopRuntimeIfCurrent(runtime);
+        }
+        return;
+      }
+    } else if (result.status === "stale") {
+      runtime.contentDocuments.failNavigation(
+        preparation.document.frameId,
+        preparation.document.documentId
+      );
+      clearContentDocumentCompanionState(runtime, preparation.document, "injection-stale");
+    }
+    syncAuthorizedContentFrames(runtime);
+
+    if (result.status === "failed") {
+      clearContentDocumentCompanionState(runtime, preparation.document, "injection-failed");
+      console.warn("[WebBlackbox] dynamic document injection failed closed", {
+        tabId: runtime.tabId,
+        frameId: preparation.document.frameId,
+        documentId: preparation.document.documentId,
+        error: result.error instanceof Error ? result.error.message : String(result.error)
+      });
+
+      if (
+        topContentDocument &&
+        result.failedCurrentNavigation &&
+        (!exactTransaction || isExactWebNavigationTransactionCurrent(runtime, exactTransaction))
+      ) {
+        await stopRuntimeIfCurrent(runtime);
+      }
+    }
+
+    if (
+      result.status === "injected" &&
+      topCommitClaim &&
+      isSessionNavigationClaimCurrent(topCommitClaim) &&
+      (!exactTransaction || isExactWebNavigationTransactionCurrent(runtime, exactTransaction)) &&
+      runtime.cdpRouter
+    ) {
+      if (exactTransaction) {
+        exactTransaction.phase = "restoring";
+      }
+      await restoreCdpGlobalCaptureAfterNavigation(topCommitClaim, true, {
+        ...(exactTransaction ? { expectedRestoreEpoch: exactTransaction.restoreEpoch } : {})
+      });
     }
   } catch (error) {
-    await cleanupCdpInstrumentation(runtime, router);
-    console.warn("[WebBlackbox] failed to attach debugger", error);
+    transactionFailed = true;
+    throw error;
+  } finally {
+    if (runtime && exactTransaction) {
+      finishExactWebNavigationTransaction(runtime, exactTransaction, transactionFailed);
+    }
   }
 }
 
-async function processFullModeEvent(
-  runtime: SessionRuntime,
-  method: string,
-  params: unknown,
-  sessionId?: string
+async function failCommittedContentDocument(
+  details: {
+    tabId: number;
+    frameId: number;
+    documentId?: string;
+    url: string;
+  },
+  claim: {
+    navigation: SessionNavigationClaim;
+    documentRevisionKey: string | null;
+    documentRevision: number;
+    cdpRestoreEpoch: number;
+    exactTransaction?: ExactWebNavigationCommitTransaction;
+  }
 ): Promise<void> {
-  if (runtime.stopping) {
+  const runtime = claim.navigation.runtime;
+  const expectedRestoreEpoch = claim.exactTransaction?.restoreEpoch ?? claim.cdpRestoreEpoch;
+
+  if (
+    !isSessionNavigationClaimCurrent(claim.navigation) ||
+    !isCdpRestoreEpochCurrent(runtime, expectedRestoreEpoch) ||
+    (claim.documentRevisionKey !== null &&
+      (runtime.contentNavigationRevisions.get(claim.documentRevisionKey) ?? 0) !==
+        claim.documentRevision)
+  ) {
     return;
   }
 
-  const payload = asRecord(params);
-
-  if (method === "Target.attachedToTarget") {
-    const childSessionId = typeof payload?.sessionId === "string" ? payload.sessionId : undefined;
-
-    if (childSessionId) {
-      await primeChildCdpSession(runtime, childSessionId);
+  if (details.frameId === 0) {
+    const currentUrl = await resolveCurrentTabCaptureUrl(details.tabId);
+    if (
+      currentUrl === details.url &&
+      isSessionNavigationClaimCurrent(claim.navigation) &&
+      isCdpRestoreEpochCurrent(runtime, expectedRestoreEpoch)
+    ) {
+      await stopRuntimeIfNavigationClaimCurrent(claim.navigation);
     }
-
     return;
   }
 
-  if (method === "Target.detachedFromTarget") {
-    const childSessionId = typeof payload?.sessionId === "string" ? payload.sessionId : undefined;
-
-    if (childSessionId) {
-      runtime.enabledCdpSessions.delete(childSessionId);
-    }
-
+  if (typeof details.documentId !== "string" || details.documentId.length === 0) {
     return;
   }
 
-  if (method === "Network.responseReceived") {
-    const requestId = typeof payload?.requestId === "string" ? payload.requestId : undefined;
-    const response = asRecord(payload?.response);
-    const resourceType = typeof payload?.type === "string" ? payload.type : undefined;
-
-    if (requestId) {
-      upsertRequestMeta(runtime.requestMeta, buildRequestMetaKey(requestId, sessionId), {
-        url: typeof response?.url === "string" ? response.url : undefined,
-        mimeType: typeof response?.mimeType === "string" ? response.mimeType : undefined,
-        status: typeof response?.status === "number" ? response.status : undefined,
-        resourceType
-      });
-    }
-
-    return;
+  const known = runtime.contentDocuments.getKnownDocument(details.frameId, details.documentId);
+  if (known) {
+    blockKnownContentSubtree(runtime, known, "committed-navigation-failed");
   }
+}
 
-  if (method === "Network.loadingFinished") {
-    const requestId = typeof payload?.requestId === "string" ? payload.requestId : undefined;
+async function stopRuntimeIfCurrent(runtime: SessionRuntime): Promise<void> {
+  await requestRuntimeStop(runtime);
+}
 
-    if (requestId && shouldCaptureResponseBody(runtime, requestId, payload, sessionId)) {
-      await captureResponseBody(runtime, requestId, sessionId);
-    }
+function isRuntimeCurrentCaptureOpen(runtime: SessionRuntime): boolean {
+  return (
+    sessionsByTab.get(runtime.tabId) === runtime &&
+    isVolatileCaptureOpen(runtime.captureFence) &&
+    !runtime.stopping &&
+    !runtime.stoppedAt
+  );
+}
 
-    if (requestId) {
-      deleteRequestMeta(runtime.requestMeta, buildRequestMetaKey(requestId, sessionId));
-    }
+function isRuntimeNavigationOpen(runtime: SessionRuntime): boolean {
+  return (
+    isRuntimeCurrentCaptureOpen(runtime) &&
+    sessionsBySid.get(runtime.sid) === runtime &&
+    isRuntimeCaptureAdmitted(runtime.activationState)
+  );
+}
 
-    return;
+function claimCurrentRuntimeNavigation(
+  runtime: SessionRuntime,
+  source: RuntimeNavigationSource,
+  candidateUrl?: string
+): SessionNavigationClaim | null {
+  if (!isRuntimeNavigationOpen(runtime)) {
+    return null;
   }
 
-  if (method === "Runtime.exceptionThrown" || method === "Network.loadingFailed") {
-    if (method === "Network.loadingFailed") {
-      const requestId = typeof payload?.requestId === "string" ? payload.requestId : undefined;
+  return claimRuntimeNavigation(runtime, source, candidateUrl);
+}
 
-      if (requestId) {
-        deleteRequestMeta(runtime.requestMeta, buildRequestMetaKey(requestId, sessionId));
-      }
-    }
+function snapshotCurrentRuntimeNavigation(
+  runtime: SessionRuntime,
+  source: RuntimeNavigationSource,
+  candidateUrl?: string
+): SessionNavigationClaim | null {
+  if (!isRuntimeNavigationOpen(runtime)) {
+    return null;
+  }
 
-    if (shouldCaptureIncidentArtifacts(runtime)) {
-      await captureIncidentArtifacts(runtime, method);
-    }
+  return snapshotRuntimeNavigation(runtime, source, candidateUrl);
+}
 
-    return;
-  }
+function isSessionNavigationClaimCurrent(claim: SessionNavigationClaim): boolean {
+  return isNavigationClaimCurrent(
+    claim,
+    sessionsByTab.get(claim.runtime.tabId),
+    isRuntimeNavigationOpen
+  );
+}
 
-  if (method === "Page.frameNavigated" && shouldCaptureNavigationSnapshot(runtime)) {
-    await captureDomSnapshot(runtime, "navigation");
-  }
+function isExactWebNavigationTransactionCurrent(
+  runtime: SessionRuntime,
+  transaction: ExactWebNavigationCommitTransaction
+): boolean {
+  return (
+    runtime.exactWebNavigationTransactions.get(transaction.token) === transaction &&
+    isSessionNavigationClaimCurrent(transaction.claim) &&
+    isCdpRestoreEpochCurrent(runtime, transaction.restoreEpoch)
+  );
 }
 
-async function primeChildCdpSession(
+function finishExactWebNavigationTransaction(
   runtime: SessionRuntime,
-  childSessionId: string
-): Promise<void> {
-  if (!runtime.cdpRouter || runtime.enabledCdpSessions.has(childSessionId)) {
+  transaction: ExactWebNavigationCommitTransaction,
+  failed: boolean
+): void {
+  if (runtime.exactWebNavigationTransactions.get(transaction.token) !== transaction) {
     return;
   }
 
-  runtime.enabledCdpSessions.add(childSessionId);
+  if (failed) {
+    cancelExactWebNavigationCommitObservation(
+      runtime.exactTopNavigationObservations,
+      transaction.token
+    );
+    runtime.exactWebNavigationTransactions.delete(transaction.token);
+    return;
+  }
 
-  try {
-    await runtime.cdpRouter.enableBaseline(runtime.tabId, childSessionId);
-    await runtime.cdpRouter.enableAutoAttach(runtime.tabId, undefined, childSessionId);
-    await runtime.cdpRouter
-      .send({ tabId: runtime.tabId, sessionId: childSessionId }, "DOMStorage.enable")
-      .catch(() => undefined);
-    await runtime.cdpRouter
-      .send({ tabId: runtime.tabId, sessionId: childSessionId }, "Performance.enable")
-      .catch(() => undefined);
-  } catch {
-    runtime.enabledCdpSessions.delete(childSessionId);
+  transaction.phase = "completed";
+  if (transaction.cdpObserved && !transaction.detachedRestorePending) {
+    runtime.exactWebNavigationTransactions.delete(transaction.token);
   }
 }
 
-async function captureResponseBody(
+function evictExactWebNavigationTransactions(
   runtime: SessionRuntime,
-  requestId: string,
-  sessionId?: string
-): Promise<void> {
-  if (!runtime.cdpRouter || runtime.stopping) {
-    return;
+  tokens: readonly number[]
+): void {
+  for (const token of tokens) {
+    runtime.exactWebNavigationTransactions.delete(token);
   }
+}
 
-  const target = sessionId ? { tabId: runtime.tabId, sessionId } : { tabId: runtime.tabId };
-  const response = await sendCdpCommand<{
-    body?: string;
-    base64Encoded?: boolean;
-  }>(runtime, target, "Network.getResponseBody", { requestId });
-
-  if (!response?.body) {
+async function stopRuntimeIfNavigationClaimCurrent(claim: SessionNavigationClaim): Promise<void> {
+  if (!isSessionNavigationClaimCurrent(claim)) {
     return;
   }
 
-  const metadata = getRequestMeta(runtime.requestMeta, buildRequestMetaKey(requestId, sessionId));
-  const normalizedMime = normalizeMimeType(metadata?.mimeType ?? null);
-  const captureRule = resolveFullBodyCaptureRule(runtime, metadata?.url ?? "", normalizedMime);
-
-  if (!captureRule.enabled) {
-    return;
-  }
+  await stopRuntimeIfCurrent(claim.runtime);
+}
 
-  const transformed = transformResponseBodyForCapture({
-    body: response.body,
-    base64Encoded: response.base64Encoded === true,
-    redactPatterns: runtime.config.redaction.redactBodyPatterns,
-    maxBytes: captureRule.maxBytes,
-    redactionToken: LITE_BODY_REDACTED_TOKEN,
-    decodeBase64
+function requestStopRuntimeIfNavigationClaimCurrent(
+  claim: SessionNavigationClaim,
+  reason: string
+): void {
+  void stopRuntimeIfNavigationClaimCurrent(claim).catch((error) => {
+    console.warn("[WebBlackbox] failed to stop current navigation", {
+      tabId: claim.runtime.tabId,
+      sid: claim.runtime.sid,
+      revision: claim.revision,
+      reason,
+      error: error instanceof Error ? error.message : String(error)
+    });
   });
-  const hash = await runtime.pipeline.putBlob(
-    metadata?.mimeType ?? "application/octet-stream",
-    transformed.sampledBytes
-  );
+}
 
-  runtime.responseBodyCaptures += 1;
+function enqueueNavigationClaim(claim: SessionNavigationClaim, task: () => Promise<void>): boolean {
+  const accepted = enqueue(claim.runtime, async () => {
+    const result = await runRuntimeNavigationTask(
+      () => isSessionNavigationClaimCurrent(claim),
+      task,
+      () => stopRuntimeIfNavigationClaimCurrent(claim)
+    );
 
-  ingestRawEvent({
-    source: "system",
-    rawType: "cdp.network.body",
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: {
-      reqId: requestId,
-      contentHash: hash,
-      mimeType: metadata?.mimeType,
-      size: transformed.originalBytes.byteLength,
-      sampledSize: transformed.sampledBytes.byteLength,
-      redacted: transformed.redacted,
-      truncated: transformed.truncated
+    if (result.kind === "failed-closed") {
+      console.warn("[WebBlackbox] current navigation task failed closed", {
+        tabId: claim.runtime.tabId,
+        sid: claim.runtime.sid,
+        revision: claim.revision,
+        source: claim.source,
+        error: result.error instanceof Error ? result.error.message : String(result.error)
+      });
     }
   });
-}
-
-function shouldCaptureResponseBody(
-  runtime: SessionRuntime,
-  requestId: string,
-  loadingFinishedPayload: Record<string, unknown> | null,
-  sessionId?: string
-): boolean {
-  if (runtime.mode !== "full" || runtime.stopping) {
-    return false;
-  }
 
-  if (runtime.config.capturePolicy?.categories.network !== "body-allowlist") {
-    return false;
+  if (!accepted) {
+    requestStopRuntimeIfNavigationClaimCurrent(claim, "navigation-queue-closed");
   }
 
-  if (runtime.responseBodyCaptures >= FULL_MODE_BODY_CAPTURE_MAX_PER_SESSION) {
-    return false;
-  }
+  return accepted;
+}
 
-  const metadata = getRequestMeta(runtime.requestMeta, buildRequestMetaKey(requestId, sessionId));
+function suspendFullCaptureForNavigation(
+  claim: SessionNavigationClaim,
+  options: { cdpScopeAlreadyInvalidated?: boolean } = {}
+): void {
+  const runtime = claim.runtime;
 
-  if (!metadata) {
-    return false;
+  if (!isSessionNavigationClaimCurrent(claim) || runtime.mode !== "full" || !runtime.cdpRouter) {
+    return;
   }
 
-  if (metadata.resourceType && SKIPPED_FULL_MODE_BODY_RESOURCE_TYPES.has(metadata.resourceType)) {
-    return false;
+  runtime.cdpPayloadAdmissionBlocked = true;
+
+  if (options.cdpScopeAlreadyInvalidated !== true) {
+    invalidateCdpCaptureFrameTree(runtime.cdpScope);
   }
 
-  const normalizedMime = normalizeMimeType(metadata.mimeType ?? null);
-  const captureRule = resolveFullBodyCaptureRule(runtime, metadata.url ?? "", normalizedMime);
+  const recording = runtime.screenRecording;
+  void stopScreenRecording(runtime, "navigation-scope", recording, () =>
+    isSessionNavigationClaimCurrent(claim)
+  ).catch(() => {
+    requestStopRuntimeIfNavigationClaimCurrent(claim, "navigation-screen-stop");
+  });
+}
 
-  if (!captureRule.enabled) {
-    return false;
-  }
+function isCdpChildRuntimeCurrent(runtime: SessionRuntime, router: CdpRouter): boolean {
+  return (
+    isMapEntrySame(sessionsByTab, runtime.tabId, runtime) &&
+    isMapEntrySame(sessionsBySid, runtime.sid, runtime) &&
+    runtime.cdpRouter === router &&
+    isVolatileCaptureOpen(runtime.captureFence) &&
+    !runtime.stopping &&
+    !runtime.stoppedAt
+  );
+}
 
-  if (normalizedMime && !isTextualMimeType(normalizedMime)) {
-    return false;
-  }
+function enqueueCdpChildSessionControl(
+  runtime: SessionRuntime,
+  router: CdpRouter,
+  childClaim: CdpChildSessionClaim
+): void {
+  const accepted = enqueue(runtime, async () => {
+    const isRuntimeCurrent = () => isCdpChildRuntimeCurrent(runtime, router);
+    const outcome = await bootstrapCdpChildSession({
+      state: runtime.cdpScope,
+      claim: childClaim,
+      commands: {
+        send: (method) =>
+          requireCdpCommand(
+            router.send({ tabId: runtime.tabId, sessionId: childClaim.sessionId }, method),
+            `child ${method}`
+          ),
+        enableAutoAttach: () =>
+          requireCdpCommand(
+            router.enableAutoAttach(runtime.tabId, undefined, childClaim.sessionId),
+            "child Target.setAutoAttach"
+          )
+      },
+      isRuntimeCurrent
+    });
 
-  if (!normalizedMime && !isLikelyTextualResourceType(metadata.resourceType)) {
-    return false;
-  }
+    if (
+      outcome === "stale" ||
+      !isRuntimeCurrent() ||
+      !isCdpChildSessionClaimCurrent(runtime.cdpScope, childClaim)
+    ) {
+      return;
+    }
 
-  const encodedDataLength = asFiniteNumber(loadingFinishedPayload?.encodedDataLength);
+    const child = runtime.cdpScope.childSessions.get(childClaim.sessionId);
 
-  if (
-    encodedDataLength !== null &&
-    Number.isFinite(encodedDataLength) &&
-    encodedDataLength > captureRule.maxBytes * 2
-  ) {
-    return false;
-  }
+    if (!child?.rootReprimeRequired || !isRuntimeCaptureAdmitted(runtime.activationState)) {
+      return;
+    }
 
-  const now = Date.now();
-  const threshold = now - 60_000;
-  runtime.responseBodyCaptureTimestamps = runtime.responseBodyCaptureTimestamps.filter(
-    (timestamp) => timestamp >= threshold
-  );
+    const navigationClaim = snapshotCurrentRuntimeNavigation(
+      runtime,
+      "cdp-child-mutation",
+      runtime.captureUrl
+    );
 
-  if (runtime.responseBodyCaptureTimestamps.length >= FULL_MODE_BODY_CAPTURE_MAX_PER_MINUTE) {
-    return false;
-  }
+    if (!navigationClaim) {
+      return;
+    }
 
-  runtime.responseBodyCaptureTimestamps.push(now);
-  return true;
-}
+    const expectedChildMutationRevision = runtime.cdpScope.childMutationRevision;
+    const expectedRestoreEpoch = runtime.cdpRestoreEpoch;
 
-function isTextualMimeType(mimeType: string): boolean {
-  return isTextualMimeTypeUtil(mimeType);
-}
+    launchCdpNavigationRestore(
+      navigationClaim,
+      {
+        expectedChildMutationRevision,
+        expectedRestoreEpoch
+      },
+      undefined,
+      () =>
+        isSessionNavigationClaimCurrent(navigationClaim) &&
+        isCdpChildSessionClaimCurrent(runtime.cdpScope, childClaim) &&
+        runtime.cdpScope.childMutationRevision === expectedChildMutationRevision &&
+        isCdpRestoreEpochCurrent(runtime, expectedRestoreEpoch)
+    );
+  });
 
-function isLikelyTextualResourceType(resourceType?: string): boolean {
-  return isLikelyTextualResourceTypeUtil(resourceType);
+  if (!accepted && isRuntimeCaptureAdmitted(runtime.activationState)) {
+    requestStopRuntimeIfCurrent(runtime, "cdp-child-control-queue-closed");
+  }
 }
 
-function shouldCaptureIncidentArtifacts(runtime: SessionRuntime): boolean {
-  if (runtime.stopping) {
+async function drainCurrentRuntimeQueue(
+  runtime: SessionRuntime,
+  deadline: number
+): Promise<boolean> {
+  if (!isRuntimeCurrentCaptureOpen(runtime)) {
     return false;
   }
 
-  if (
-    runtime.config.capturePolicy?.categories.screenshots === "off" &&
-    runtime.config.capturePolicy?.categories.cdp !== "full"
-  ) {
-    return false;
+  const currentTail = runtime.queue;
+  const remainingMs = deadline - Date.now();
+
+  if (remainingMs <= 0) {
+    throw new Error("Child CDP controls exceeded their settle deadline.");
   }
 
-  const now = Date.now();
+  const outcome = await withCdpCommandTimeout(currentTail, remainingMs);
 
-  if (now - runtime.lastIncidentCaptureAt < FULL_MODE_INCIDENT_CAPTURE_COOLDOWN_MS) {
-    return false;
+  if (!outcome.ok) {
+    throw new Error("Child CDP controls did not drain before their settle deadline.");
   }
 
-  runtime.lastIncidentCaptureAt = now;
-  return true;
+  return runtime.queue === currentTail;
 }
 
-async function captureIncidentArtifacts(runtime: SessionRuntime, reason: string): Promise<void> {
-  await Promise.allSettled([
-    captureScreenshot(runtime, reason),
-    captureTraceMetrics(runtime, reason)
-  ]);
-}
+async function primeCdpRootAfterChildControls(
+  runtime: SessionRuntime,
+  router: CdpRouter
+): Promise<CdpRootFrameTreePrime> {
+  const deadline = Date.now() + CDP_CHILD_SETTLE_TIMEOUT_MS;
 
-function shouldCaptureNavigationSnapshot(runtime: SessionRuntime): boolean {
-  if (runtime.stopping) {
-    return false;
-  }
+  for (let attempt = 0; attempt < 8; attempt += 1) {
+    if (!(await drainCurrentRuntimeQueue(runtime, deadline))) {
+      continue;
+    }
 
-  if (runtime.config.capturePolicy?.categories.dom !== "allow") {
-    return false;
-  }
+    if (!isCdpChildRuntimeCurrent(runtime, router)) {
+      throw new Error("The runtime changed while child CDP sessions were becoming ready.");
+    }
 
-  if (runtime.queueDepth >= Math.floor(BEST_EFFORT_QUEUE_MAX_PENDING / 4)) {
-    return false;
-  }
+    const expectedChildMutationRevision = runtime.cdpScope.childMutationRevision;
+    const settledQueue = runtime.queue;
+    const remainingMs = deadline - Date.now();
 
-  const now = Date.now();
+    if (remainingMs <= 0) {
+      throw new Error("Child CDP controls exceeded their settle deadline.");
+    }
 
-  if (now - runtime.lastNavigationSnapshotAt < FULL_MODE_NAV_SNAPSHOT_COOLDOWN_MS) {
-    return false;
+    const result = await primeCdpFrameTreeScopes(
+      runtime,
+      router,
+      Math.min(CDP_ARTIFACT_TIMEOUT_MS, remainingMs)
+    );
+
+    if (
+      expectedChildMutationRevision === runtime.cdpScope.childMutationRevision &&
+      settledQueue === runtime.queue
+    ) {
+      return result;
+    }
   }
 
-  runtime.lastNavigationSnapshotAt = now;
-  return true;
+  throw new Error("Child CDP sessions did not settle during root frame-tree priming.");
 }
 
-function handleFreezeNotice(runtime: SessionRuntime, reason: FreezeReason): void {
-  if (runtime.stopping) {
-    return;
+async function requireCdpCommand<TResult>(
+  task: Promise<TResult>,
+  label: string,
+  timeoutMs = CDP_ARTIFACT_TIMEOUT_MS
+): Promise<TResult> {
+  const outcome = await withCdpCommandTimeout(task, timeoutMs);
+
+  if (!outcome.ok) {
+    throw new Error(`${label} failed or timed out.`);
   }
 
-  const now = Date.now();
-  const lastNotifiedAt = runtime.lastFreezeNotices.get(reason) ?? Number.NEGATIVE_INFINITY;
+  return outcome.value;
+}
 
-  if (now - lastNotifiedAt < FREEZE_NOTICE_COOLDOWN_MS) {
-    return;
-  }
+function requestStopRuntimeIfCurrent(runtime: SessionRuntime, reason: string): void {
+  void stopRuntimeIfCurrent(runtime).catch((error) => {
+    console.warn("[WebBlackbox] failed to stop current runtime", {
+      tabId: runtime.tabId,
+      sid: runtime.sid,
+      reason,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
+}
 
-  runtime.lastFreezeNotices.set(reason, now);
-  broadcast({ kind: "sw.freeze", sid: runtime.sid, reason });
-  void setFreezeBadge();
+function stopSession(tabId: number): Promise<void> {
+  sessionStartCoordinator.cancel(tabId);
+  const runtime = sessionsByTab.get(tabId);
+
+  return runtime ? requestRuntimeStop(runtime) : Promise.resolve();
 }
 
-async function captureFullModeArtifacts(runtime: SessionRuntime, reason: string): Promise<void> {
-  const tasks: Array<Promise<void>> = [
-    captureScreenshot(runtime, reason),
-    captureTraceMetrics(runtime, reason)
-  ];
+function requestSessionStop(tabId: number): Promise<void> {
+  const runtime = sessionsByTab.get(tabId);
 
-  if (reason !== "session-start") {
-    tasks.push(captureDomSnapshot(runtime, reason), captureStorageSnapshots(runtime, reason));
+  return runtime ? requestRuntimeStop(runtime) : Promise.resolve();
+}
+
+function requestRuntimeStop(runtime: SessionRuntime): Promise<void> {
+  if (
+    !isMapEntrySame(sessionsByTab, runtime.tabId, runtime) ||
+    !isMapEntrySame(sessionsBySid, runtime.sid, runtime)
+  ) {
+    return Promise.resolve();
   }
 
-  if (shouldCaptureAdvancedProfiles(reason)) {
-    tasks.push(captureAdvancedProfiles(runtime, reason));
+  runtime.stopRequestedAt ??= Date.now();
+  beginVolatileCaptureQuiescence(runtime.captureFence, () => {
+    runtime.contentDocuments.cancelPendingNavigations();
+    cancelContentArmWaiters(runtime, "Runtime stop cancelled pending content activation.");
+    quiesceRuntimeContentProducers(runtime);
+    if (runtime.activationState !== "starting") {
+      void quiesceScreenRecordingForStop(runtime).catch((error) => {
+        console.warn("[WebBlackbox] failed to quiesce screen recording at stop intent", {
+          sid: runtime.sid,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      });
+    }
+  });
+
+  if (runtime.activationState === "starting") {
+    revokeRuntimeContent(runtime, "runtime-start-cancelled");
+    cancelOwnedRuntimeStart(runtime.startToken);
+    return Promise.resolve();
   }
 
-  await Promise.allSettled(tasks);
+  return runtimeStopTasks.run(runtime, () => stopSessionOnce(runtime));
 }
 
-async function captureScreenshot(runtime: SessionRuntime, reason: string): Promise<void> {
-  if (!runtime.cdpRouter) {
+async function stopSessionOnce(runtime: SessionRuntime): Promise<void> {
+  if (
+    runtime.stoppedAt ||
+    !isMapEntrySame(sessionsByTab, runtime.tabId, runtime) ||
+    !isMapEntrySame(sessionsBySid, runtime.sid, runtime)
+  ) {
     return;
   }
 
-  if (runtime.config.capturePolicy?.categories.screenshots === "off") {
-    return;
-  }
+  const stopRequestedAt = runtime.stopRequestedAt ?? Date.now();
+  const cleanupDeadline =
+    runtime.cleanupDeadline ??
+    stopRequestedAt + resolveRuntimeLocalTtlMs(runtime.config.capturePolicy);
+  let stopDrainPlan:
+    | {
+        wait: Promise<void>;
+        notification: Promise<void>;
+      }
+    | undefined = preparedStopDrainPlans.get(runtime);
 
-  const screenshot = await sendCdpCommand<{ data?: string }>(
-    runtime,
-    { tabId: runtime.tabId },
-    "Page.captureScreenshot",
-    {
-      format: "webp",
-      quality: 62,
-      fromSurface: true
+  try {
+    await runDurableRuntimeStopWorkflow({
+      captureFence: runtime.captureFence,
+      persistStopping: runtime.stopping
+        ? () => undefined
+        : () => persistRuntimeStoppingTombstone(runtime, stopRequestedAt, cleanupDeadline),
+      teardownSteps: [
+        async () => {
+          await runBestEffortStopStep(runtime, "screen-recording-quiesce", () =>
+            quiesceScreenRecordingForStop(runtime)
+          );
+          stopDrainPlan ??= prepareRuntimeStopDrain(runtime);
+          await runBestEffortStopStep(
+            runtime,
+            "content-notification",
+            () => stopDrainPlan!.notification
+          );
+        },
+        () => stopScreenRecording(runtime, "session-stop"),
+        () =>
+          runBestEffortStopStep(runtime, "pipeline-buffer", () =>
+            flushBufferedPipelineEvents(runtime)
+          ),
+        () => teardownCaptureInstrumentation(runtime),
+        async () => {
+          await stopDrainPlan?.wait;
+          await flushBufferedPipelineEvents(runtime);
+          await runtime.pipeline.flush();
+        }
+      ],
+      persistStopped: () =>
+        persistRuntimeStoppedCheckpoint(runtime, stopRequestedAt, cleanupDeadline)
+    });
+    await finalizeRuntimeStopped(runtime, stopRequestedAt, cleanupDeadline);
+    runtime.stopping = false;
+  } catch (error) {
+    if (runtime.stopping) {
+      notifyOffscreenPipelineStatus();
+      await runBestEffortStopStep(runtime, "failed-stop-notification", () =>
+        notifyAuthorizedContentFrames(runtime, false)
+      );
     }
-  );
 
-  if (!screenshot?.data) {
-    return;
+    if (runtime.stoppedAt) {
+      scheduleRuntimeStatePersist();
+    }
+
+    throw error;
   }
+  notifyOffscreenPipelineStatus();
+}
 
-  const bytes = decodeBase64(screenshot.data);
-  const hash = await runtime.pipeline.putBlob("image/webp", bytes);
-  const viewport = runtime.lastViewport;
-  const pointer =
-    runtime.lastPointer && Date.now() - runtime.lastPointer.t <= POINTER_STALE_MS
-      ? runtime.lastPointer
-      : null;
+async function finalizeRuntimeStopped(
+  runtime: SessionRuntime,
+  stoppedAt: number,
+  cleanupDeadline: number
+): Promise<void> {
+  deleteMapEntryIfSame(sessionsByTab, runtime.tabId, runtime);
+  resetAuthorizedContentFrames(runtime);
+  uninstallLiteWebRequestCaptureIfUnused();
+  runtime.stoppedAt = stoppedAt;
+  runtime.stopRequestedAt = undefined;
+  runtime.cleanupDeadline = cleanupDeadline;
+  preparedStopDrainPlans.delete(runtime);
+  await scheduleStoppedRuntimeCleanup(runtime).catch((error) => {
+    console.warn("[WebBlackbox] alarm setup failed; restart recovery remains armed", {
+      sid: runtime.sid,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
 
-  ingestRawEvent({
-    source: "system",
-    rawType: "cdp.screen.screenshot",
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: {
-      shotId: hash,
-      format: "webp",
-      quality: 62,
-      w: viewport?.width,
-      h: viewport?.height,
-      viewport: viewport
-        ? {
-            width: viewport.width,
-            height: viewport.height,
-            dpr: viewport.dpr
-          }
-        : undefined,
-      pointer: pointer
-        ? {
-            x: pointer.x,
-            y: pointer.y,
-            t: pointer.t,
-            mono: pointer.mono
-          }
-        : undefined,
-      size: bytes.byteLength,
-      reason
+  await runBestEffortStopStep(runtime, "badge", async () => {
+    if (sessionsByTab.size === 0) {
+      await setIdleBadge();
+    } else {
+      await setRecordingBadge();
     }
   });
-}
 
-function shouldStartScreenRecording(runtime: SessionRuntime): boolean {
-  return (
-    runtime.mode === "full" && runtime.config.capturePolicy?.categories.screenRecordings === "allow"
-  );
+  broadcast({
+    kind: "sw.recording-status",
+    active: false,
+    tabId: runtime.tabId,
+    sid: runtime.sid,
+    mode: runtime.mode,
+    capturePolicy: runtime.config.capturePolicy
+  });
+  pushSessionList();
 }
 
-async function startScreenRecording(runtime: SessionRuntime): Promise<void> {
-  if (!chromeApi?.tabCapture?.getMediaStreamId) {
-    throw new Error("Chrome tabCapture API is unavailable for screen recording.");
-  }
-
-  if (runtime.screenRecording) {
-    return;
+async function runBestEffortStopStep(
+  runtime: SessionRuntime,
+  stage: string,
+  step: () => void | Promise<void>
+): Promise<void> {
+  try {
+    await step();
+  } catch (error) {
+    console.warn("[WebBlackbox] stop step failed closed", {
+      sid: runtime.sid,
+      stage,
+      error: error instanceof Error ? error.message : String(error)
+    });
   }
+}
 
-  const recordingId = createScreenRecordingId(runtime.sid);
-  const startedAt = Date.now();
-  const startedMono = monotonicTime();
-  const streamId = await chromeApi.tabCapture.getMediaStreamId({
-    targetTabId: runtime.tabId
-  });
+async function exportSession(
+  sid: string,
+  passphrase: string | undefined,
+  saveAs = true,
+  policy: ExportPolicy = DEFAULT_EXPORT_POLICY
+): Promise<
+  | { ok: true; fileName: string; privacyWarning?: ExportPrivacyWarning }
+  | { ok: false; error: string }
+> {
+  const runtime = sessionsBySid.get(sid);
 
-  if (!streamId) {
-    throw new Error("Chrome did not grant a tab capture stream.");
+  if (!runtime) {
+    const error = "Session not found for export.";
+    console.warn("[WebBlackbox] export ignored; unknown session", sid);
+    broadcast({
+      kind: "sw.export-status",
+      sid,
+      ok: false,
+      error
+    });
+    return {
+      ok: false,
+      error
+    };
   }
 
-  const recording: ScreenRecordingRuntime = {
-    recordingId,
-    source: SCREEN_RECORDING_OFFSCREEN_SOURCE,
-    startedAt,
-    startedMono,
-    mime: "video/webm",
-    chunks: [],
-    chunkCount: 0,
-    sizeBytes: 0,
-    pendingWrites: new Set(),
-    stopPromise: null
-  };
-  runtime.screenRecording = recording;
+  const effectivePolicy = resolveSessionExportPolicy(runtime, policy);
 
   try {
-    const result = await requestOffscreenPipeline<OffscreenScreenRecordingStartResult>({
-      op: "startScreenRecording",
-      sid: runtime.sid,
-      recordingId,
-      streamId,
-      source: SCREEN_RECORDING_OFFSCREEN_SOURCE
-    });
-
-    recording.mime = result.mime;
-    recording.width = result.width;
-    recording.height = result.height;
-    recording.frameRate = result.frameRate;
+    if (!runtime.stoppedAt) {
+      await stopRuntimeIfCurrent(runtime);
 
-    ingestRawEvent({
-      source: "system",
-      rawType: "screen.recording.start",
-      sid: runtime.sid,
-      tabId: runtime.tabId,
-      t: startedAt,
-      mono: startedMono,
-      payload: {
-        recordingId,
-        source: result.source,
-        mime: result.mime,
-        width: result.width,
-        height: result.height,
-        frameRate: result.frameRate,
-        audio: result.audio
+      if (!runtime.stoppedAt) {
+        throw new Error("Session identity changed before export could stop it.");
       }
+    }
+
+    await flushBufferedPipelineEvents(runtime);
+    const encrypted = hasExportPassphrase(passphrase);
+
+    const exported = await enqueueWithResult(runtime, async () => {
+      return runtime.pipeline.exportAndDownload({
+        passphrase: encrypted ? passphrase : undefined,
+        includeScreenshots: effectivePolicy.includeScreenshots,
+        includeScreenRecordings: effectivePolicy.includeScreenRecordings,
+        maxArchiveBytes: effectivePolicy.maxArchiveBytes,
+        recentWindowMs: effectivePolicy.recentWindowMs
+      });
+    });
+
+    await downloadExportedBundle(exported, saveAs);
+    const privacyWarning = buildExportPrivacyWarning(exported.privacyScanner);
+    await appendExportAuditEvent({
+      schemaVersion: 1,
+      timestamp: new Date().toISOString(),
+      sid,
+      mode: runtime.mode,
+      outcome: "ok",
+      encrypted,
+      includeScreenshots: effectivePolicy.includeScreenshots,
+      includeScreenRecordings: effectivePolicy.includeScreenRecordings,
+      maxArchiveBytes: effectivePolicy.maxArchiveBytes,
+      recentWindowMs: effectivePolicy.recentWindowMs,
+      sizeBytes: exported.sizeBytes,
+      downloadId: exported.downloadId
+    });
+    broadcast({
+      kind: "sw.export-status",
+      sid,
+      ok: true,
+      fileName: exported.fileName,
+      privacyWarning
     });
+
+    if (runtime.stoppedAt) {
+      await disposeStoppedSession(runtime);
+    }
+
+    return {
+      ok: true,
+      fileName: exported.fileName,
+      privacyWarning
+    };
   } catch (error) {
-    ingestScreenRecordingError(runtime, recording, error, "start");
-    runtime.screenRecording = null;
-    throw error;
+    const message = error instanceof Error ? error.message : String(error);
+    await appendExportAuditEvent({
+      schemaVersion: 1,
+      timestamp: new Date().toISOString(),
+      sid,
+      mode: runtime.mode,
+      outcome: "error",
+      encrypted: hasExportPassphrase(passphrase),
+      includeScreenshots: effectivePolicy.includeScreenshots,
+      includeScreenRecordings: effectivePolicy.includeScreenRecordings,
+      maxArchiveBytes: effectivePolicy.maxArchiveBytes,
+      recentWindowMs: effectivePolicy.recentWindowMs,
+      error: redactOperationalMessage(message)
+    });
+    console.warn("[WebBlackbox] export failed", error);
+    broadcast({
+      kind: "sw.export-status",
+      sid,
+      ok: false,
+      error: message
+    });
+    return {
+      ok: false,
+      error: message
+    };
   }
 }
 
-async function stopScreenRecording(runtime: SessionRuntime, reason: string): Promise<void> {
-  const recording = runtime.screenRecording;
-
-  if (!recording) {
-    return;
+function resolveSessionExportPolicy(runtime: SessionRuntime, policy: ExportPolicy): ExportPolicy {
+  if (runtime.mode !== "full") {
+    return policy;
   }
 
-  if (recording.stopPromise) {
-    await recording.stopPromise;
-    return;
+  const categories = runtime.config.capturePolicy?.categories;
+
+  if (!categories) {
+    return policy;
   }
 
-  recording.stopPromise = (async () => {
-    const result = await requestOffscreenPipeline<OffscreenScreenRecordingStopResult>({
-      op: "stopScreenRecording",
-      sid: runtime.sid,
-      recordingId: recording.recordingId,
-      reason
-    });
-    await finalizeScreenRecording(runtime, result);
-  })();
+  return {
+    ...policy,
+    includeScreenshots: categories.screenshots === "allow",
+    includeScreenRecordings: categories.screenRecordings === "allow"
+  };
+}
 
-  await recording.stopPromise;
+function hasExportPassphrase(passphrase: string | undefined): passphrase is string {
+  return typeof passphrase === "string" && passphrase.length > 0;
 }
 
-async function handleOffscreenScreenRecordingChunk(
-  message: OffscreenScreenRecordingChunkMessage
-): Promise<void> {
-  const runtime = sessionsBySid.get(message.sid);
-  const recording = runtime?.screenRecording;
+function ingestRawEvent(
+  rawEvent: RawRecorderEvent,
+  stopDrainClaim: StopDrainClaim | null = null,
+  batchAdmission: ContentEventBatchAdmission | null = null,
+  delivery: PipelineDeliveryEventProvenance | null = null
+): Promise<boolean> {
+  const runtime = resolveRuntimeEventOwner(sessionsBySid, sessionsByTab, rawEvent);
+  const stopDrainAuthorized = Boolean(
+    runtime &&
+    stopDrainClaim &&
+    isStopDrainClaimValid(stopDrainClaim, runtime, runtime.captureFence)
+  );
+  const batchAuthorized = Boolean(
+    runtime && batchAdmission && isContentEventBatchAdmissionValid(batchAdmission, runtime)
+  );
+  const provisionalSystemEvent = Boolean(
+    runtime &&
+    runtime.activationState === "starting" &&
+    rawEvent.source === "system" &&
+    (rawEvent.rawType === "config" || rawEvent.rawType.startsWith("screen.recording.")) &&
+    rawEvent.sid === runtime.sid
+  );
 
-  if (!runtime || !recording || recording.recordingId !== message.recordingId) {
-    return;
+  if (
+    !runtime ||
+    ((!isVolatileCaptureOpen(runtime.captureFence) ||
+      !isRuntimeCaptureAdmitted(runtime.activationState)) &&
+      !provisionalSystemEvent &&
+      !stopDrainAuthorized &&
+      !batchAuthorized &&
+      !isCaptureClosureEvent(rawEvent))
+  ) {
+    return Promise.resolve(false);
   }
 
-  const bytes = asUint8Array(message.bytes);
+  const admittedDocumentUrl =
+    batchAdmission?.documentUrl ?? stopDrainClaim?.capability.documentUrl ?? runtime.captureUrl;
+  const admittedFrameId = batchAdmission?.frameId ?? stopDrainClaim?.capability.frameId ?? 0;
+  const runtimeScope = evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+    url: admittedDocumentUrl,
+    tabId: runtime.tabId,
+    frameId: admittedFrameId
+  });
 
-  if (!bytes || bytes.byteLength === 0) {
-    return;
+  if (!runtimeScope.allowed) {
+    if (!runtime.stopping && !runtime.stoppedAt) {
+      requestStopRuntimeIfCurrent(runtime, "capture-scope-denied");
+    }
+
+    return Promise.resolve(false);
   }
 
-  const index = resolveScreenRecordingChunkIndex(message.index, recording.chunkCount);
-  const task = (async () => {
-    const mime = typeof message.mime === "string" && message.mime ? message.mime : recording.mime;
-    const hash = await runtime.pipeline.putBlob(mime, bytes);
-    const size = bytes.byteLength;
-    recording.chunks[index] = hash;
-    recording.chunkCount = Math.max(recording.chunkCount, index + 1);
-    recording.sizeBytes += size;
+  if (!isCaptureEventFrameAllowed(runtime.config.capturePolicy, rawEvent)) {
+    return Promise.resolve(false);
+  }
 
-    ingestRawEvent({
-      source: "system",
-      rawType: "screen.recording.chunk",
-      sid: runtime.sid,
-      tabId: runtime.tabId,
-      t: Date.now(),
-      mono: monotonicTime(),
-      payload: {
-        recordingId: recording.recordingId,
-        chunkId: hash,
-        index,
-        mime,
-        size,
-        startOffsetMs: normalizeRecordingOffset(message.startOffsetMs),
-        endOffsetMs: normalizeRecordingOffset(message.endOffsetMs),
-        durationMs: normalizeRecordingOffset(message.durationMs)
-      }
-    });
-  })();
+  if (
+    runtime.stopping &&
+    rawEvent.source !== "system" &&
+    !stopDrainAuthorized &&
+    !batchAuthorized
+  ) {
+    return Promise.resolve(false);
+  }
 
-  recording.pendingWrites.add(task);
-  task.then(
-    () => {
-      recording.pendingWrites.delete(task);
-    },
-    (error) => {
-      recording.pendingWrites.delete(task);
-      ingestScreenRecordingError(runtime, recording, error, "chunk");
-    }
-  );
+  if (shouldSkipFullModeContentRawEvent(runtime, rawEvent)) {
+    return Promise.resolve(false);
+  }
 
-  await task;
-}
+  const nextRawEvent: RawRecorderEvent = {
+    ...rawEvent,
+    sid: runtime.sid
+  };
 
-async function handleOffscreenScreenRecordingEnded(
-  message: OffscreenScreenRecordingEndedMessage
-): Promise<void> {
-  const runtime = sessionsBySid.get(message.sid);
+  updateRuntimeInteractionState(runtime, nextRawEvent);
 
-  if (!runtime?.screenRecording) {
-    return;
-  }
+  if (shouldMaterializeLiteContentEvent(runtime, nextRawEvent)) {
+    return enqueueWithResult(runtime, async () => {
+      if (!isRuntimeEventMaterializationAllowed(runtime, stopDrainClaim, batchAdmission)) {
+        return false;
+      }
 
-  await finalizeScreenRecording(runtime, message.result);
-}
+      const materialized = await materializeLiteContentEvent(
+        runtime,
+        nextRawEvent,
+        stopDrainClaim,
+        batchAdmission
+      );
 
-function handleOffscreenScreenRecordingError(message: OffscreenScreenRecordingErrorMessage): void {
-  const runtime = sessionsBySid.get(message.sid);
-  const recording = runtime?.screenRecording;
+      if (
+        !materialized ||
+        !isRuntimeEventMaterializationAllowed(runtime, stopDrainClaim, batchAdmission)
+      ) {
+        return false;
+      }
 
-  if (!runtime) {
-    return;
+      return ingestRecorderEvent(runtime, materialized, delivery);
+    });
   }
 
-  ingestRawEvent({
-    source: "system",
-    rawType: "screen.recording.error",
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: {
-      recordingId: message.recordingId ?? recording?.recordingId,
-      name: message.name,
-      message: message.message,
-      stage: message.stage
-    }
-  });
+  if (runtime.mode === "full" && shouldCaptureActionScreenshot(nextRawEvent, runtime)) {
+    runtime.lastActionScreenshotMono = nextRawEvent.mono;
+    enqueue(
+      runtime,
+      async () => {
+        await captureScreenshot(runtime, `action:${nextRawEvent.rawType}`);
+      },
+      { bestEffort: true }
+    );
+  }
+
+  return Promise.resolve(ingestRecorderEvent(runtime, nextRawEvent, delivery));
 }
 
-async function finalizeScreenRecording(
+function ingestRecorderEvent(
   runtime: SessionRuntime,
-  result: OffscreenScreenRecordingStopResult
-): Promise<void> {
-  const recording = runtime.screenRecording;
-
-  if (!recording || recording.recordingId !== result.recordingId) {
-    return;
+  rawEvent: RawRecorderEvent,
+  delivery: PipelineDeliveryEventProvenance | null
+): boolean {
+  const previous = runtime.activePipelineDelivery;
+  runtime.activePipelineDelivery = delivery;
+  try {
+    return runtime.recorder.ingest(rawEvent).event !== undefined;
+  } finally {
+    runtime.activePipelineDelivery = previous;
   }
+}
 
-  await waitForScreenRecordingChunkWrites(recording);
-  const chunks = recording.chunks.filter(
-    (chunk): chunk is string => typeof chunk === "string" && chunk.length > 0
+function isCaptureClosureEvent(rawEvent: RawRecorderEvent): boolean {
+  // These records close already-captured video state and contain no new page payload.
+  return (
+    rawEvent.source === "system" &&
+    (rawEvent.rawType === "screen.recording.end" || rawEvent.rawType === "screen.recording.error")
   );
-
-  ingestRawEvent({
-    source: "system",
-    rawType: "screen.recording.end",
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: {
-      recordingId: recording.recordingId,
-      mime: result.mime || recording.mime,
-      chunks,
-      chunkCount: chunks.length,
-      size: recording.sizeBytes,
-      durationMs: Math.max(0, Math.round(result.durationMs)),
-      width: result.width ?? recording.width,
-      height: result.height ?? recording.height,
-      reason: result.reason
-    }
-  });
-
-  runtime.screenRecording = null;
 }
 
-function ingestScreenRecordingError(
+function shouldSkipFullModeContentRawEvent(
   runtime: SessionRuntime,
-  recording: ScreenRecordingRuntime | null,
-  error: unknown,
-  stage: string
-): void {
-  ingestRawEvent({
-    source: "system",
-    rawType: "screen.recording.error",
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: {
-      recordingId: recording?.recordingId,
-      name: error instanceof Error ? error.name : undefined,
-      message: error instanceof Error ? error.message : String(error),
-      stage
-    }
-  });
+  rawEvent: RawRecorderEvent
+): boolean {
+  return (
+    runtime.mode === "full" &&
+    rawEvent.source === "content" &&
+    SKIPPED_FULL_MODE_CONTENT_RAW_TYPES.has(rawEvent.rawType)
+  );
 }
 
-async function waitForScreenRecordingChunkWrites(recording: ScreenRecordingRuntime): Promise<void> {
-  while (recording.pendingWrites.size > 0) {
-    await Promise.allSettled([...recording.pendingWrites]);
+function shouldMaterializeLiteContentEvent(
+  runtime: SessionRuntime,
+  rawEvent: RawRecorderEvent
+): boolean {
+  if (runtime.mode !== "lite") {
+    return false;
   }
-}
 
-function resolveScreenRecordingChunkIndex(value: unknown, fallback: number): number {
-  const numberValue = asFiniteNumber(value);
-  return numberValue === null ? Math.max(0, fallback) : Math.max(0, Math.round(numberValue));
-}
+  if (rawEvent.source !== "content") {
+    return false;
+  }
 
-function normalizeRecordingOffset(value: unknown): number | undefined {
-  const numberValue = asFiniteNumber(value);
-  return numberValue === null ? undefined : Math.max(0, Math.round(numberValue));
-}
+  const payload = asRecord(rawEvent.payload);
 
-function createScreenRecordingId(sid: string): string {
-  const random =
-    typeof crypto?.randomUUID === "function"
-      ? crypto.randomUUID().replace(/-/g, "").slice(0, 12)
-      : Math.random().toString(36).slice(2, 14);
-  return `VR-${sid}-${Date.now()}-${random}`;
-}
+  if (!payload) {
+    return false;
+  }
 
-async function captureDomSnapshot(runtime: SessionRuntime, reason: string): Promise<void> {
-  if (!runtime.cdpRouter) {
-    return;
+  if (rawEvent.rawType === "screenshot") {
+    return typeof payload.dataUrl === "string" && payload.dataUrl.length > 0;
   }
 
-  if (runtime.config.capturePolicy?.categories.dom !== "allow") {
-    return;
+  if (rawEvent.rawType === "snapshot") {
+    return typeof payload.html === "string" && payload.html.length > 0;
   }
 
-  const snapshot = await sendCdpCommand<Record<string, unknown>>(
-    runtime,
-    { tabId: runtime.tabId },
-    "DOMSnapshot.captureSnapshot",
-    {
-      computedStyles: [],
-      includeDOMRects: false,
-      includePaintOrder: false
-    }
-  );
+  if (rawEvent.rawType === "localStorageSnapshot") {
+    return true;
+  }
 
-  if (!snapshot) {
-    return;
+  if (rawEvent.rawType === "indexedDbSnapshot") {
+    return Array.isArray(payload.databaseNames);
   }
 
-  const bytes = new TextEncoder().encode(JSON.stringify(snapshot));
-  const hash = await runtime.pipeline.putBlob("application/json", bytes);
-  const documents = Array.isArray(snapshot.documents) ? snapshot.documents : [];
-  const firstDocument = documents[0] as Record<string, unknown> | undefined;
-  const nodes = firstDocument ? asRecord(firstDocument.nodes) : null;
-  const nodeNameArray = Array.isArray(nodes?.nodeName) ? nodes.nodeName : [];
+  if (rawEvent.rawType === "cookieSnapshot") {
+    return Array.isArray(payload.names);
+  }
 
-  ingestRawEvent({
-    source: "system",
-    rawType: "cdp.dom.snapshot",
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: {
-      snapshotId: `D-${Date.now()}`,
-      contentHash: hash,
-      source: "cdp",
-      nodeCount: nodeNameArray.length,
-      reason
-    }
-  });
+  if (rawEvent.rawType === "networkBody") {
+    return (
+      (typeof payload.reqId === "string" || typeof payload.requestId === "string") &&
+      typeof payload.body === "string"
+    );
+  }
+
+  return false;
 }
 
-async function captureStorageSnapshots(runtime: SessionRuntime, reason: string): Promise<void> {
-  if (!runtime.cdpRouter) {
-    return;
+async function materializeLiteContentEvent(
+  runtime: SessionRuntime,
+  rawEvent: RawRecorderEvent,
+  stopDrainClaim: StopDrainClaim | null = null,
+  batchAdmission: ContentEventBatchAdmission | null = null
+): Promise<RawRecorderEvent | null> {
+  if (!isRuntimeEventMaterializationAllowed(runtime, stopDrainClaim, batchAdmission)) {
+    return null;
   }
 
-  const policy = runtime.config.capturePolicy;
-
-  const cookies =
-    policy?.categories.cookies === "names-only"
-      ? await sendCdpCommand<{ cookies?: unknown[] }>(
-          runtime,
-          { tabId: runtime.tabId },
-          "Storage.getCookies"
-        )
-      : null;
+  if (rawEvent.rawType === "screenshot") {
+    return materializeLiteScreenshot(runtime, rawEvent, stopDrainClaim, batchAdmission);
+  }
 
-  if (cookies?.cookies) {
-    const cookieNames = cookies.cookies
-      .map((entry) => asString(asRecord(entry)?.name))
-      .filter((entry): entry is string => typeof entry === "string" && entry.length > 0)
-      .slice(0, FULL_MODE_STORAGE_SNAPSHOT_MAX_ITEMS);
-    const bytes = new TextEncoder().encode(JSON.stringify(cookieNames));
-    const hash = await runtime.pipeline.putBlob("application/json", bytes);
+  if (rawEvent.rawType === "snapshot") {
+    return materializeLiteDomSnapshot(runtime, rawEvent, stopDrainClaim, batchAdmission);
+  }
 
-    ingestRawEvent({
-      source: "system",
-      rawType: "cdp.storage.cookie.snapshot",
-      sid: runtime.sid,
-      tabId: runtime.tabId,
-      t: Date.now(),
-      mono: monotonicTime(),
-      payload: {
-        hash,
-        count: cookies.cookies.length,
-        sampledCount: cookieNames.length,
-        truncated: cookies.cookies.length > cookieNames.length,
-        redacted: true,
-        reason
-      }
-    });
+  if (
+    rawEvent.rawType === "localStorageSnapshot" ||
+    rawEvent.rawType === "indexedDbSnapshot" ||
+    rawEvent.rawType === "cookieSnapshot"
+  ) {
+    return materializeLiteStorageSnapshot(runtime, rawEvent, stopDrainClaim, batchAdmission);
   }
 
-  const localStorageMode = resolveLocalStorageSnapshotMode(policy);
-  const localStorageData = localStorageMode
-    ? await evaluateExpression(runtime, buildLocalStorageSnapshotExpression(localStorageMode))
-    : null;
+  if (rawEvent.rawType === "networkBody") {
+    return materializeLiteNetworkBody(runtime, rawEvent, stopDrainClaim, batchAdmission);
+  }
 
-  if (typeof localStorageData === "string") {
-    const bytes = new TextEncoder().encode(localStorageData);
-    const hash = await runtime.pipeline.putBlob("application/json", bytes);
-    const parsed = parseStorageSnapshotMeta(localStorageData);
+  return rawEvent;
+}
 
-    ingestRawEvent({
-      source: "system",
-      rawType: "cdp.storage.local.snapshot",
-      sid: runtime.sid,
-      tabId: runtime.tabId,
-      t: Date.now(),
-      mono: monotonicTime(),
+async function materializeLiteScreenshot(
+  runtime: SessionRuntime,
+  rawEvent: RawRecorderEvent,
+  stopDrainClaim: StopDrainClaim | null,
+  batchAdmission: ContentEventBatchAdmission | null
+): Promise<RawRecorderEvent | null> {
+  if (runtime.config.capturePolicy?.categories.screenshots !== "allow") {
+    return null;
+  }
+
+  const payload = asRecord(rawEvent.payload);
+  const dataUrl = asString(payload?.dataUrl);
+
+  if (!payload || !dataUrl || dataUrl.length > LITE_SCREENSHOT_MAX_DATA_URL_LENGTH) {
+    return null;
+  }
+
+  const decoded = decodeDataUrl(dataUrl);
+
+  if (
+    !decoded ||
+    decoded.bytes.byteLength === 0 ||
+    decoded.bytes.byteLength > LITE_SCREENSHOT_MAX_BYTES
+  ) {
+    return null;
+  }
+
+  const shotId = await putRuntimeCaptureBlob(
+    runtime,
+    decoded.mime,
+    decoded.bytes,
+    stopDrainClaim,
+    batchAdmission
+  );
+
+  if (!shotId) {
+    return null;
+  }
+  const width = normalizePositiveInt(payload.w) ?? normalizePositiveInt(payload.width);
+  const height = normalizePositiveInt(payload.h) ?? normalizePositiveInt(payload.height);
+  const quality = normalizePositiveInt(payload.quality);
+  const reason = asString(payload.reason) ?? undefined;
+  const viewport = normalizeScreenshotViewport(payload.viewport);
+  const pointer = normalizeScreenshotPointer(payload.pointer);
+  const format = decoded.mime.includes("png") ? "png" : "webp";
+
+  return {
+    ...rawEvent,
+    payload: {
+      shotId,
+      format,
+      w: width,
+      h: height,
+      quality: format === "webp" ? quality : undefined,
+      size: decoded.bytes.byteLength,
+      reason,
+      viewport,
+      pointer
+    }
+  };
+}
+
+async function materializeLiteDomSnapshot(
+  runtime: SessionRuntime,
+  rawEvent: RawRecorderEvent,
+  stopDrainClaim: StopDrainClaim | null,
+  batchAdmission: ContentEventBatchAdmission | null
+): Promise<RawRecorderEvent | null> {
+  const payload = asRecord(rawEvent.payload);
+  const html = asString(payload?.html);
+
+  if (!payload || !html) {
+    return null;
+  }
+
+  const encoded = encodeTextWithByteLimit(html, LITE_DOM_SNAPSHOT_MAX_BYTES);
+  const contentHash = await putRuntimeCaptureBlob(
+    runtime,
+    "text/html",
+    encoded.bytes,
+    stopDrainClaim,
+    batchAdmission
+  );
+
+  if (!contentHash) {
+    return null;
+  }
+  const snapshotId = asString(payload.snapshotId) ?? `D-${Math.round(rawEvent.mono)}`;
+  const nodeCount = normalizeNonNegativeInt(payload.nodeCount);
+  const reason = asString(payload.reason) ?? undefined;
+  const htmlLength = normalizeNonNegativeInt(payload.htmlLength) ?? html.length;
+  const truncated = payload.truncated === true || encoded.truncated;
+
+  return {
+    ...rawEvent,
+    payload: {
+      snapshotId,
+      contentHash,
+      source: "html",
+      nodeCount,
+      reason,
+      htmlLength,
+      truncated
+    }
+  };
+}
+
+async function materializeLiteStorageSnapshot(
+  runtime: SessionRuntime,
+  rawEvent: RawRecorderEvent,
+  stopDrainClaim: StopDrainClaim | null,
+  batchAdmission: ContentEventBatchAdmission | null
+): Promise<RawRecorderEvent | null> {
+  const payload = asRecord(rawEvent.payload);
+
+  if (!payload) {
+    return null;
+  }
+
+  const reason = asString(payload.reason) ?? undefined;
+
+  if (rawEvent.rawType === "localStorageSnapshot") {
+    const entries = asRecord(payload.entries);
+    const encoded = entries
+      ? encodeTextWithByteLimit(JSON.stringify(entries), LITE_STORAGE_SNAPSHOT_MAX_BYTES)
+      : null;
+    const hash =
+      encoded && encoded.bytes.byteLength > 0
+        ? await putRuntimeCaptureBlob(
+            runtime,
+            "application/json",
+            encoded.bytes,
+            stopDrainClaim,
+            batchAdmission
+          )
+        : undefined;
+
+    if (encoded && encoded.bytes.byteLength > 0 && !hash) {
+      return null;
+    }
+    const count = normalizeNonNegativeInt(payload.count) ?? Object.keys(entries ?? {}).length;
+
+    return {
+      ...rawEvent,
       payload: {
         hash,
-        count: parsed?.count,
-        sampledCount: parsed?.sampledCount,
-        truncated: parsed?.truncated,
-        mode: localStorageMode,
-        redacted: localStorageMode !== "allow",
-        reason
+        count,
+        mode: entries ? "sample" : "schema-only",
+        redacted: true,
+        reason,
+        truncated: payload.truncated === true || encoded?.truncated === true
       }
-    });
+    };
   }
 
-  const origin =
-    policy?.categories.indexedDb === "names-only"
-      ? await evaluateExpression(runtime, "location.origin")
-      : null;
+  if (rawEvent.rawType === "indexedDbSnapshot") {
+    const names = asStringArray(payload.databaseNames, 400);
+    const serialized = JSON.stringify(names);
+    const encoded = encodeTextWithByteLimit(serialized, LITE_STORAGE_SNAPSHOT_MAX_BYTES);
+    const hash =
+      encoded.bytes.byteLength > 0
+        ? await putRuntimeCaptureBlob(
+            runtime,
+            "application/json",
+            encoded.bytes,
+            stopDrainClaim,
+            batchAdmission
+          )
+        : undefined;
 
-  if (typeof origin === "string") {
-    const dbNames = await sendCdpCommand<{ databaseNames?: string[] }>(
-      runtime,
-      { tabId: runtime.tabId },
-      "IndexedDB.requestDatabaseNames",
-      {
-        securityOrigin: origin
+    if (encoded.bytes.byteLength > 0 && !hash) {
+      return null;
+    }
+    const count = normalizeNonNegativeInt(payload.count) ?? names.length;
+
+    return {
+      ...rawEvent,
+      payload: {
+        hash,
+        count,
+        mode: "schema-only",
+        redacted: true,
+        reason,
+        truncated: payload.truncated === true || encoded.truncated
+      }
+    };
+  }
+
+  if (rawEvent.rawType === "cookieSnapshot") {
+    const names = asStringArray(payload.names, 400);
+    const serialized = JSON.stringify(names);
+    const encoded = encodeTextWithByteLimit(serialized, LITE_STORAGE_SNAPSHOT_MAX_BYTES);
+    const hash =
+      encoded.bytes.byteLength > 0
+        ? await putRuntimeCaptureBlob(
+            runtime,
+            "application/json",
+            encoded.bytes,
+            stopDrainClaim,
+            batchAdmission
+          )
+        : undefined;
+
+    if (encoded.bytes.byteLength > 0 && !hash) {
+      return null;
+    }
+    const count = normalizeNonNegativeInt(payload.count) ?? names.length;
+
+    return {
+      ...rawEvent,
+      payload: {
+        hash,
+        count,
+        mode: "sample",
+        redacted: true,
+        reason,
+        truncated: payload.truncated === true || encoded.truncated
       }
+    };
+  }
+
+  return rawEvent;
+}
+
+async function materializeLiteNetworkBody(
+  runtime: SessionRuntime,
+  rawEvent: RawRecorderEvent,
+  stopDrainClaim: StopDrainClaim | null,
+  batchAdmission: ContentEventBatchAdmission | null
+): Promise<RawRecorderEvent | null> {
+  const payload = asRecord(rawEvent.payload);
+
+  if (!payload) {
+    return null;
+  }
+
+  const reqId = asString(payload.reqId) ?? asString(payload.requestId);
+  const body = asString(payload.body);
+  const encoding = asString(payload.encoding) ?? "utf8";
+  const url = asString(payload.url) ?? "";
+  const mimeType = normalizeMimeType(asString(payload.mimeType));
+
+  if (!reqId || !body || !mimeType || (encoding !== "utf8" && encoding !== "base64")) {
+    return null;
+  }
+
+  const captureRule = resolveLiteBodyCaptureRule(runtime, url, mimeType);
+
+  if (!captureRule.enabled || !isMimeAllowed(captureRule.mimeAllowlist, mimeType)) {
+    return null;
+  }
+
+  const transformed = transformResponseBodyForCapture({
+    body,
+    base64Encoded: encoding === "base64",
+    mimeType,
+    redactPatterns: runtime.config.redaction.redactBodyPatterns,
+    maxBytes: captureRule.maxBytes,
+    redactionToken: LITE_BODY_REDACTED_TOKEN,
+    decodeBase64
+  });
+
+  if (!transformed) {
+    return null;
+  }
+
+  const size = normalizeNonNegativeInt(payload.size) ?? transformed.originalBytes.byteLength;
+  const truncatedByInput = payload.truncated === true;
+  const contentHash = await putRuntimeCaptureBlob(
+    runtime,
+    mimeType,
+    transformed.sampledBytes,
+    stopDrainClaim,
+    batchAdmission
+  );
+
+  if (!contentHash) {
+    return null;
+  }
+
+  return {
+    ...rawEvent,
+    payload: {
+      reqId,
+      requestId: reqId,
+      contentHash,
+      mimeType,
+      size,
+      sampledSize: transformed.sampledBytes.byteLength,
+      truncated: truncatedByInput || transformed.truncated,
+      redacted: payload.redacted === true || transformed.redacted
+    }
+  };
+}
+
+async function putRuntimeCaptureBlob(
+  runtime: SessionRuntime,
+  mime: string,
+  bytes: Uint8Array,
+  stopDrainClaim: StopDrainClaim | null = null,
+  batchAdmission: ContentEventBatchAdmission | null = null
+): Promise<string | null> {
+  if (stopDrainClaim) {
+    return runStopDrainBlobOperation(stopDrainClaim, runtime, runtime.captureFence, () =>
+      runtime.pipeline.putBlob(mime, bytes)
     );
+  }
 
-    if (dbNames?.databaseNames) {
-      const bytes = new TextEncoder().encode(JSON.stringify(dbNames.databaseNames));
-      const hash = await runtime.pipeline.putBlob("application/json", bytes);
+  if (batchAdmission) {
+    if (!isContentEventBatchAdmissionValid(batchAdmission, runtime)) {
+      return null;
+    }
 
-      ingestRawEvent({
-        source: "system",
-        rawType: "cdp.storage.idb.snapshot",
-        sid: runtime.sid,
+    const hash = await runtime.pipeline.putBlob(mime, bytes);
+    return isContentEventBatchAdmissionValid(batchAdmission, runtime) ? hash : null;
+  }
+
+  if (!isRuntimeCaptureScopeActive(runtime)) {
+    return null;
+  }
+
+  const hash = await runVolatileCaptureOperation(runtime.captureFence, () =>
+    runtime.pipeline.putBlob(mime, bytes)
+  );
+  return isRuntimeCaptureScopeActive(runtime) ? hash : null;
+}
+
+function updateRuntimeInteractionState(runtime: SessionRuntime, rawEvent: RawRecorderEvent): void {
+  if (rawEvent.source !== "content") {
+    return;
+  }
+
+  const payload = asRecord(rawEvent.payload);
+
+  if (!payload) {
+    return;
+  }
+
+  if (rawEvent.rawType === "resize") {
+    const width = asFiniteNumber(payload.width);
+    const height = asFiniteNumber(payload.height);
+    const dpr = asFiniteNumber(payload.dpr) ?? runtime.lastViewport?.dpr ?? 1;
+
+    if (typeof width === "number" && typeof height === "number" && width > 0 && height > 0) {
+      runtime.lastViewport = {
+        width: Math.round(width),
+        height: Math.round(height),
+        dpr: Number(dpr.toFixed(2))
+      };
+    }
+
+    return;
+  }
+
+  if (
+    rawEvent.rawType === "mousemove" ||
+    rawEvent.rawType === "click" ||
+    rawEvent.rawType === "dblclick"
+  ) {
+    const x = asFiniteNumber(payload.x);
+    const y = asFiniteNumber(payload.y);
+
+    if (typeof x === "number" && typeof y === "number") {
+      runtime.lastPointer = {
+        x: Number(x.toFixed(2)),
+        y: Number(y.toFixed(2)),
+        t: rawEvent.t,
+        mono: rawEvent.mono
+      };
+    }
+  }
+}
+
+function shouldCaptureActionScreenshot(
+  rawEvent: RawRecorderEvent,
+  runtime: SessionRuntime
+): boolean {
+  if (rawEvent.source !== "content") {
+    return false;
+  }
+
+  if (!ACTION_SCREENSHOT_RAW_TYPES.has(rawEvent.rawType)) {
+    return false;
+  }
+
+  if (runtime.config.capturePolicy?.categories.screenshots !== "allow") {
+    return false;
+  }
+
+  if (rawEvent.mono - runtime.lastActionScreenshotMono < SCREENSHOT_ACTION_COOLDOWN_MS) {
+    return false;
+  }
+
+  if (runtime.queueDepth >= Math.floor(BEST_EFFORT_QUEUE_MAX_PENDING / 3)) {
+    return false;
+  }
+
+  return true;
+}
+
+function trackSessionCounters(runtime: SessionRuntime, event: WebBlackboxEvent): void {
+  runtime.capturedEventCount += 1;
+  runtime.capturedSizeBytes += estimateSessionEventBytes(event);
+
+  if (event.type === "error.exception" || event.type === "error.unhandledrejection") {
+    runtime.capturedErrorCount += 1;
+    pushSessionList();
+    scheduleRuntimeStatePersist();
+    return;
+  }
+
+  if (runtime.capturedEventCount % 50 === 0) {
+    pushSessionList();
+    scheduleRuntimeStatePersist();
+  }
+}
+
+function evaluatePerformanceBudget(runtime: SessionRuntime, event: WebBlackboxEvent): void {
+  const budget = runtime.performanceBudget;
+  let updated = false;
+
+  if (event.type === "perf.vitals") {
+    const lcpMs = readLcpFromVitalsEvent(event.data);
+
+    if (lcpMs !== null && lcpMs >= budget.lcpWarnMs) {
+      updated =
+        registerPerformanceBudgetBreach(runtime, "lcp", `LCP ${Math.round(lcpMs)}ms`) || updated;
+    }
+  }
+
+  if (event.type === "network.response") {
+    const { duration, failed } = extractPerformanceBudgetNetworkSample(event.data);
+
+    runtime.networkBudgetSample.total += 1;
+
+    if (failed) {
+      runtime.networkBudgetSample.failed += 1;
+    }
+
+    if (typeof duration === "number" && duration >= budget.requestWarnMs) {
+      updated =
+        registerPerformanceBudgetBreach(
+          runtime,
+          "slow-request",
+          `Slow request ${Math.round(duration)}ms`
+        ) || updated;
+    }
+
+    if (runtime.networkBudgetSample.total >= PERFORMANCE_BUDGET_ERROR_RATE_MIN_SAMPLES) {
+      const errorRatePct =
+        (runtime.networkBudgetSample.failed / runtime.networkBudgetSample.total) * 100;
+
+      if (errorRatePct >= budget.errorRateWarnPct) {
+        updated =
+          registerPerformanceBudgetBreach(
+            runtime,
+            "error-rate",
+            `Error rate ${errorRatePct.toFixed(1)}%`
+          ) || updated;
+      }
+    }
+  }
+
+  if (updated) {
+    pushSessionList();
+    scheduleRuntimeStatePersist();
+  }
+}
+
+function readLcpFromVitalsEvent(payload: unknown): number | null {
+  const record = asRecord(payload);
+  const metric = asString(record?.metric) ?? asString(record?.name);
+
+  if (
+    metric &&
+    metric !== "largest-contentful-paint" &&
+    metric !== "largest-contentful-paint-render-time" &&
+    metric !== "largest-contentful-paint-load-time" &&
+    metric !== "lcp"
+  ) {
+    return null;
+  }
+
+  const value = asFiniteNumber(record?.value);
+  const startTime = asFiniteNumber(record?.startTime);
+  const duration = asFiniteNumber(record?.duration);
+  const candidate = Math.max(
+    value ?? Number.NEGATIVE_INFINITY,
+    startTime ?? Number.NEGATIVE_INFINITY,
+    duration ?? Number.NEGATIVE_INFINITY
+  );
+
+  return Number.isFinite(candidate) ? candidate : null;
+}
+
+function registerPerformanceBudgetBreach(
+  runtime: SessionRuntime,
+  key: string,
+  detail: string
+): boolean {
+  const now = Date.now();
+  const lastBreachAt = runtime.lastBudgetBreachAt.get(key) ?? Number.NEGATIVE_INFINITY;
+
+  if (now - lastBreachAt < PERFORMANCE_BUDGET_BREACH_COOLDOWN_MS) {
+    return false;
+  }
+
+  runtime.lastBudgetBreachAt.set(key, now);
+  runtime.budgetAlertCount += 1;
+  console.info("[WebBlackbox] performance budget breach", {
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    key,
+    detail
+  });
+
+  if (runtime.performanceBudget.autoFreezeOnBreach) {
+    handleFreezeNotice(runtime, "perf");
+  }
+
+  return true;
+}
+
+function enqueuePipelineEvent(
+  runtime: SessionRuntime,
+  event: WebBlackboxEvent,
+  delivery?: PipelineDeliveryEventProvenance
+): void {
+  runtime.pipelineEventBuffer.push({ event, ...(delivery ? { delivery } : {}) });
+
+  if (runtime.pipelineEventBuffer.length >= PIPELINE_BATCH_MAX_EVENTS) {
+    queuePipelineBatchFlush(runtime);
+    return;
+  }
+
+  if (runtime.pipelineFlushTimer !== null || runtime.pipelineFlushQueued) {
+    return;
+  }
+
+  runtime.pipelineFlushTimer = setTimeout(() => {
+    runtime.pipelineFlushTimer = null;
+    queuePipelineBatchFlush(runtime);
+  }, PIPELINE_BATCH_FLUSH_MS);
+}
+
+function queuePipelineBatchFlush(runtime: SessionRuntime): void {
+  if (runtime.pipelineFlushTimer !== null) {
+    clearTimeout(runtime.pipelineFlushTimer);
+    runtime.pipelineFlushTimer = null;
+  }
+
+  if (runtime.pipelineFlushQueued || runtime.pipelineEventBuffer.length === 0) {
+    return;
+  }
+
+  runtime.pipelineFlushQueued = true;
+
+  enqueue(runtime, async () => {
+    try {
+      await drainPipelineBufferBatches(runtime, "queue");
+    } finally {
+      runtime.pipelineFlushQueued = false;
+
+      if (
+        runtime.pipelineEventBuffer.length > 0 &&
+        isVolatileCaptureOpen(runtime.captureFence) &&
+        !runtime.stopping
+      ) {
+        queuePipelineBatchFlush(runtime);
+      }
+    }
+  });
+}
+
+async function flushBufferedPipelineEvents(
+  runtime: SessionRuntime,
+  options: { screenRecordingFinalization?: boolean } = {}
+): Promise<void> {
+  if (runtime.pipelineFlushTimer !== null) {
+    clearTimeout(runtime.pipelineFlushTimer);
+    runtime.pipelineFlushTimer = null;
+  }
+
+  if (runtime.pipelineEventBuffer.length === 0 && !runtime.pipelineFlushQueued) {
+    return;
+  }
+
+  await enqueueWithResult(runtime, async () => {
+    await drainPipelineBufferBatches(runtime, "drain", options);
+  });
+}
+
+async function flushContentEventBatchDurably(runtime: SessionRuntime): Promise<void> {
+  if (runtime.pipelineFlushTimer !== null) {
+    clearTimeout(runtime.pipelineFlushTimer);
+    runtime.pipelineFlushTimer = null;
+  }
+
+  // Always enter the runtime queue, even when the buffer currently looks empty. A prior
+  // activation can still be finishing an admitted async materialization ahead of this barrier.
+  await enqueueWithResult(runtime, async () => {
+    await drainPipelineBufferBatches(runtime, "drain");
+  });
+}
+
+async function drainPipelineBufferBatches(
+  runtime: SessionRuntime,
+  reason: "queue" | "drain",
+  options: { screenRecordingFinalization?: boolean } = {}
+): Promise<void> {
+  let flushed = 0;
+
+  while (runtime.pipelineBatchInFlight || runtime.pipelineEventBuffer.length > 0) {
+    runtime.pipelineBatchInFlight = acquirePipelineBatch(
+      runtime.pipelineBatchInFlight,
+      runtime.pipelineEventBuffer,
+      PIPELINE_BATCH_DRAIN_CHUNK_EVENTS,
+      createPipelineIngestOperationId,
+      requireIngestOperationId
+    );
+    const batch = runtime.pipelineBatchInFlight;
+
+    if (!batch) {
+      break;
+    }
+
+    const events = batch.events.map((entry) => entry.event);
+    const deliveryByEventId = new Map<string, PipelineDeliveryEventProvenance>();
+    for (const entry of batch.events) {
+      if (entry.delivery) {
+        deliveryByEventId.set(entry.event.id, entry.delivery);
+      }
+    }
+
+    if (deliveryByEventId.size > 0) {
+      await runtime.pipeline.ingestBatchWithDelivery(
+        events,
+        deliveryByEventId,
+        batch.operationId,
+        options
+      );
+    } else {
+      await runtime.pipeline.ingestBatch(events, batch.operationId, options);
+    }
+    acknowledgePipelineBatch(runtime.pipelineEventBuffer, batch);
+    runtime.pipelineBatchInFlight = null;
+    flushed += batch.events.length;
+
+    if (runtime.pipelineEventBuffer.length > 0) {
+      await wait(0);
+    }
+  }
+
+  if (shouldLogPerf() && flushed > 0) {
+    console.info("[WebBlackbox][perf] pipeline buffer flushed", {
+      sid: runtime.sid,
+      reason,
+      flushed,
+      queueDepth: runtime.queueDepth,
+      stopping: runtime.stopping
+    });
+  }
+}
+
+function createPipelineIngestOperationId(): string {
+  return `I-${crypto.randomUUID()}`;
+}
+
+function requireIngestOperationId(value: unknown): string {
+  const operationId = normalizeOptionalIngestOperationId(value);
+
+  if (!operationId) {
+    throw new Error("Missing ingest idempotency operation id.");
+  }
+
+  return operationId;
+}
+
+function createOffscreenPipelineClient(sid: string): SessionPipelineClient {
+  return {
+    start: async (session, redactionProfile, capturePolicy) => {
+      await requestOffscreenPipeline<void>({
+        op: "start",
+        sid,
+        session,
+        redactionProfile,
+        capturePolicy
+      });
+    },
+    ingest: async (event, operationId) => {
+      const normalizedOperationId = normalizeOptionalIngestOperationId(operationId);
+      await requestOffscreenPipeline<void>({
+        op: "ingest",
+        sid,
+        event,
+        ...(normalizedOperationId === undefined ? {} : { operationId: normalizedOperationId })
+      });
+    },
+    ingestBatch: async (events, operationId, options = {}) => {
+      const normalizedOperationId = normalizeOptionalIngestOperationId(operationId);
+      await requestOffscreenPipeline<void>({
+        op: "ingestBatchDurably",
+        sid,
+        events,
+        ...(normalizedOperationId === undefined ? {} : { operationId: normalizedOperationId }),
+        ...(options.screenRecordingFinalization === true
+          ? { screenRecordingFinalization: true }
+          : {})
+      });
+    },
+    ingestBatchWithDelivery: async (events, deliveryByEventId, operationId, options = {}) => {
+      const normalizedOperationId = normalizeOptionalIngestOperationId(operationId);
+      await requestOffscreenPipeline<void>({
+        op: "ingestBatchWithDelivery",
+        sid,
+        events,
+        deliverySidecar: [...deliveryByEventId.entries()].map(([eventId, provenance]) => ({
+          eventId,
+          provenance
+        })),
+        ...(normalizedOperationId === undefined ? {} : { operationId: normalizedOperationId }),
+        ...(options.screenRecordingFinalization === true
+          ? { screenRecordingFinalization: true }
+          : {})
+      });
+    },
+    getDeliveryReceipt: async (deliveryQuery) => {
+      const result = await requestOffscreenPipeline<unknown>({
+        op: "getDeliveryReceipt",
+        sid,
+        deliveryQuery
+      });
+      return normalizePipelineDeliveryReceipt(result, deliveryQuery);
+    },
+    commitDeliveryProgress: async (deliveryProgress) => {
+      await requestOffscreenPipeline<void>({
+        op: "commitDeliveryProgress",
+        sid,
+        deliveryProgress
+      });
+    },
+    flush: async () => {
+      await requestOffscreenPipeline<void>({
+        op: "flush",
+        sid
+      });
+    },
+    getResumeState: async () => {
+      const result = await requestOffscreenPipeline<unknown>({
+        op: "getResumeState",
+        sid
+      });
+      return normalizePipelineResumeState(result);
+    },
+    putBlob: async (mime, bytes, options = {}) => {
+      return requestOffscreenPipeline<string>({
+        op: "putBlob",
+        sid,
+        mime,
+        bytes,
+        ...(options.screenRecordingFinalization === true
+          ? { screenRecordingFinalization: true }
+          : {})
+      });
+    },
+    exportAndDownload: async (options = {}) => {
+      const exported = await requestOffscreenPipeline<unknown>({
+        op: "exportDownload",
+        sid,
+        passphrase: options.passphrase,
+        includeScreenshots: options.includeScreenshots,
+        includeScreenRecordings: options.includeScreenRecordings,
+        maxArchiveBytes: options.maxArchiveBytes,
+        recentWindowMs: options.recentWindowMs
+      });
+
+      return normalizePipelineExportDownloadResult(exported);
+    },
+    close: async (options = {}) => {
+      await requestOffscreenPipeline<void>({
+        op: "close",
+        sid,
+        purge: options.purge
+      });
+    }
+  };
+}
+
+async function requestOffscreenPipeline<TResult>(
+  request: Omit<OffscreenPipelineRequest, "kind" | "requestId">
+): Promise<TResult> {
+  const startedAt = perfNow();
+  const result = await requestOffscreenPipelineWithRecovery<TResult>(request);
+
+  const durationMs = perfNow() - startedAt;
+
+  if (durationMs >= PERF_WARN_MS && shouldLogPerf()) {
+    console.info("[WebBlackbox][perf] offscreen request", {
+      op: request.op,
+      durationMs: Number(durationMs.toFixed(2)),
+      queuePending: pendingOffscreenRequests.size
+    });
+  }
+
+  return result as TResult;
+}
+
+async function requestOffscreenPipelineWithRecovery<TResult>(
+  request: Omit<OffscreenPipelineRequest, "kind" | "requestId">
+): Promise<TResult> {
+  try {
+    return await requestOffscreenPipelineOnce<TResult>(request);
+  } catch (error) {
+    if (!shouldRetryOffscreenRequest(request, error)) {
+      throw error;
+    }
+
+    await recoverOffscreenSession(request.sid);
+    return await requestOffscreenPipelineOnce<TResult>(request);
+  }
+}
+
+async function requestOffscreenPipelineOnce<TResult>(
+  request: Omit<OffscreenPipelineRequest, "kind" | "requestId">
+): Promise<TResult> {
+  const port = await ensureOffscreenPortReady();
+  const requestId = `off-${Date.now()}-${offscreenRequestSeq}`;
+  const timeoutMs = resolveOffscreenRequestTimeoutMs(request.op);
+  offscreenRequestSeq += 1;
+
+  const result = await new Promise<unknown>((resolve, reject) => {
+    const timeout = setTimeout(() => {
+      pendingOffscreenRequests.delete(requestId);
+      reject(new Error(`Timed out waiting for offscreen response: ${request.op}`));
+    }, timeoutMs);
+
+    pendingOffscreenRequests.set(requestId, {
+      resolve,
+      reject,
+      timeout
+    });
+
+    try {
+      port.postMessage({
+        kind: "sw.pipeline-request",
+        requestId,
+        ...request
+      });
+    } catch (error) {
+      clearTimeout(timeout);
+      pendingOffscreenRequests.delete(requestId);
+      reject(error instanceof Error ? error : new Error(String(error)));
+    }
+  });
+
+  return result as TResult;
+}
+
+function shouldRetryOffscreenRequest(
+  request: Omit<OffscreenPipelineRequest, "kind" | "requestId">,
+  error: unknown
+): boolean {
+  if (request.op === "quiesceScreenRecording") {
+    return false;
+  }
+  return shouldRetryOffscreenPipelineRequest(request.op, error);
+}
+
+function resolveOffscreenRequestTimeoutMs(requestOp: OffscreenPipelineRequest["op"]): number {
+  if (requestOp === "exportDownload") {
+    return OFFSCREEN_REQUEST_TIMEOUT_EXPORT_MS;
+  }
+
+  return OFFSCREEN_REQUEST_TIMEOUT_DEFAULT_MS;
+}
+
+async function ensureOffscreenPortReady(): Promise<PortLike> {
+  if (offscreenPort) {
+    return offscreenPort;
+  }
+
+  await ensureOffscreenDocument();
+
+  for (let attempt = 0; attempt < OFFSCREEN_PORT_READY_MAX_ATTEMPTS; attempt += 1) {
+    if (offscreenPort) {
+      return offscreenPort;
+    }
+
+    await wait(OFFSCREEN_PORT_READY_WAIT_MS);
+  }
+
+  throw new Error("Offscreen pipeline is unavailable.");
+}
+
+function handleOffscreenRuntimeMessage(rawMessage: unknown, port: PortLike): boolean {
+  if (port.name !== PORT_NAMES.offscreen) {
+    return false;
+  }
+
+  if (rawMessage === null || typeof rawMessage !== "object" || Array.isArray(rawMessage)) {
+    return false;
+  }
+
+  const kind = (rawMessage as { kind?: unknown }).kind;
+
+  if (kind === "offscreen.ready") {
+    notifyOffscreenPipelineStatus();
+    return true;
+  }
+
+  if (kind === "offscreen.keepalive") {
+    return true;
+  }
+
+  if (kind === "offscreen.screen-recording-chunk") {
+    void handleOffscreenScreenRecordingChunk(
+      rawMessage as OffscreenScreenRecordingChunkMessage,
+      port
+    ).catch((error) => {
+      console.warn("[WebBlackbox] failed to persist screen recording chunk", error);
+    });
+    return true;
+  }
+
+  if (kind === "offscreen.screen-recording-ended") {
+    void handleOffscreenScreenRecordingEnded(
+      rawMessage as OffscreenScreenRecordingEndedMessage
+    ).catch((error) => {
+      console.warn("[WebBlackbox] failed to finalize screen recording", error);
+    });
+    return true;
+  }
+
+  if (kind === "offscreen.screen-recording-error") {
+    handleOffscreenScreenRecordingError(rawMessage as OffscreenScreenRecordingErrorMessage);
+    return true;
+  }
+
+  if (kind !== "offscreen.pipeline-response") {
+    return false;
+  }
+
+  const response = rawMessage as OffscreenPipelineResponse;
+  const pending = pendingOffscreenRequests.get(response.requestId);
+
+  if (!pending) {
+    return true;
+  }
+
+  clearTimeout(pending.timeout);
+  pendingOffscreenRequests.delete(response.requestId);
+
+  if (response.ok) {
+    pending.resolve(response.result);
+  } else {
+    pending.reject(new Error(response.error ?? "Offscreen pipeline request failed."));
+  }
+
+  return true;
+}
+
+function estimateSessionEventBytes(event: WebBlackboxEvent): number {
+  try {
+    return new TextEncoder().encode(JSON.stringify(event)).byteLength;
+  } catch {
+    return 0;
+  }
+}
+
+function rejectPendingOffscreenRequests(message: string): void {
+  for (const pending of pendingOffscreenRequests.values()) {
+    clearTimeout(pending.timeout);
+    pending.reject(new Error(message));
+  }
+
+  pendingOffscreenRequests.clear();
+}
+
+async function recoverAllActiveOffscreenPipelines(): Promise<void> {
+  for (const runtime of sessionsByTab.values()) {
+    if (!shouldRecoverOffscreenPipeline(toOffscreenPipelineRecoveryState(runtime), "automatic")) {
+      continue;
+    }
+
+    await recoverOffscreenSession(runtime.sid);
+  }
+}
+
+async function recoverOffscreenSession(sid: string): Promise<void> {
+  const existing = offscreenSessionRecovery.get(sid);
+
+  if (existing) {
+    await existing;
+    return;
+  }
+
+  const task = (async () => {
+    const runtime = sessionsBySid.get(sid);
+
+    if (
+      !runtime ||
+      !runtime.queueAccepting ||
+      !shouldRecoverOffscreenPipeline(toOffscreenPipelineRecoveryState(runtime), "request")
+    ) {
+      return;
+    }
+
+    await requestOffscreenPipelineOnce<void>({
+      op: "start",
+      sid,
+      session: toSessionMetadata(runtime),
+      redactionProfile: runtime.config.redaction,
+      capturePolicy: runtime.config.capturePolicy
+    });
+    notifyOffscreenPipelineStatus();
+  })()
+    .catch((error) => {
+      console.warn("[WebBlackbox] failed to recover offscreen pipeline session", {
+        sid,
+        error: error instanceof Error ? error.message : String(error)
+      });
+      throw error;
+    })
+    .finally(() => {
+      offscreenSessionRecovery.delete(sid);
+    });
+
+  offscreenSessionRecovery.set(sid, task);
+  await task;
+}
+
+function toOffscreenPipelineRecoveryState(runtime: SessionRuntime) {
+  return {
+    captureOpen:
+      isRuntimeCaptureAdmitted(runtime.activationState) &&
+      isVolatileCaptureOpen(runtime.captureFence),
+    stopping: runtime.stopping,
+    stopped: runtime.stoppedAt !== undefined
+  };
+}
+
+async function attachCdp(runtime: SessionRuntime): Promise<void> {
+  let router: CdpRouter | null = null;
+
+  try {
+    const candidateRouter = createCdpRouter(createChromeDebuggerTransport());
+    router = candidateRouter;
+
+    const unsubscribeEvent = candidateRouter.onEvent((event) => {
+      if (!isMapEntrySame(sessionsByTab, runtime.tabId, runtime)) {
+        return;
+      }
+
+      const normalizedPayload = normalizeFullModePayload(
+        event.method,
+        event.params ?? {},
+        runtime.config.capturePolicy?.categories.network
+      );
+      const preliminaryFrame =
+        event.method === "Page.frameNavigated" && !event.sessionId
+          ? asRecord(asRecord(event.params)?.frame)
+          : null;
+      const preliminaryTopNavigationUrl =
+        preliminaryFrame &&
+        typeof preliminaryFrame.parentId !== "string" &&
+        typeof preliminaryFrame.parentFrameId !== "string"
+          ? asString(preliminaryFrame.url)
+          : null;
+      const preliminaryExactCdpObservation =
+        preliminaryTopNavigationUrl &&
+        hasExactWebNavigationTracking() &&
+        !isRuntimeActivationProvisional(runtime.activationState)
+          ? observeExactCdpTopNavigation(
+              runtime.exactTopNavigationObservations,
+              preliminaryTopNavigationUrl,
+              () => advanceCdpRestoreEpoch(runtime),
+              (token, restoreEpoch) => {
+                const transaction = runtime.exactWebNavigationTransactions.get(token);
+                return Boolean(
+                  transaction &&
+                  transaction.restoreEpoch === restoreEpoch &&
+                  isExactWebNavigationTransactionCurrent(runtime, transaction)
+                );
+              }
+            )
+          : null;
+
+      if (preliminaryExactCdpObservation) {
+        evictExactWebNavigationTransactions(
+          runtime,
+          preliminaryExactCdpObservation.evictedWebTokens
+        );
+        if (preliminaryExactCdpObservation.kind === "ignored-stale") {
+          if (preliminaryExactCdpObservation.ignoredWebToken !== undefined) {
+            runtime.exactWebNavigationTransactions.delete(
+              preliminaryExactCdpObservation.ignoredWebToken
+            );
+          }
+          return;
+        }
+      }
+      const targetControlMethod =
+        event.method === "Target.attachedToTarget" || event.method === "Target.detachedFromTarget"
+          ? event.method
+          : null;
+      const scopeEvaluation = targetControlMethod
+        ? evaluateCdpTargetControlScopeEvent(
+            runtime.cdpScope,
+            targetControlMethod,
+            event.params ?? {},
+            event.sessionId
+          )
+        : evaluateCdpCaptureScopeEvent(
+            runtime.cdpScope,
+            event.method,
+            event.params ?? {},
+            event.sessionId
+          );
+
+      if (!scopeEvaluation) {
+        return;
+      }
+
+      if (scopeEvaluation.fatalScopeViolation) {
+        requestStopRuntimeIfCurrent(runtime, "cdp-malformed-visual-target");
+        return;
+      }
+
+      const childSessionClaim = scopeEvaluation.childSessionClaim;
+      const eventChildClaim = event.sessionId
+        ? getCdpChildSessionClaim(runtime.cdpScope, event.sessionId)
+        : null;
+
+      if (childSessionClaim) {
+        enqueueCdpChildSessionControl(runtime, candidateRouter, childSessionClaim);
+      }
+
+      // Bootstrap events may prime the provisional CDP scope, but they must
+      // not enter navigation ownership, capture, or follow-up queues until the
+      // restoration transaction commits active.
+      if (isRuntimeActivationProvisional(runtime.activationState)) {
+        return;
+      }
+
+      const cdpFrameTreeMutated = scopeEvaluation.globalFrameTreeMutation === true;
+      if (scopeEvaluation.topNavigation || cdpFrameTreeMutated) {
+        runtime.cdpPayloadAdmissionBlocked = true;
+      }
+
+      const scopeAllowed = scopeEvaluation.allowed;
+      const captureAllowed =
+        scopeAllowed &&
+        isRuntimeCaptureAdmitted(runtime.activationState) &&
+        isVolatileCaptureOpen(runtime.captureFence) &&
+        !runtime.cdpPayloadAdmissionBlocked &&
+        claimRuntimeGlobalCdpCapture(runtime) !== null;
+      let frameTreeNavigationClaim: SessionNavigationClaim | null = null;
+
+      if (scopeEvaluation.topNavigation) {
+        const { url, decision } = scopeEvaluation.topNavigation;
+        const withinDocument = event.method === "Page.navigatedWithinDocument";
+        const exactCrossDocumentOwner = !withinDocument && hasExactWebNavigationTracking();
+        const exactCdpObservation = exactCrossDocumentOwner ? preliminaryExactCdpObservation : null;
+
+        // A top-frame event starts a new URL-independent restore generation
+        // immediately. This lets the new owner bypass an older hung restore,
+        // while every continuation of that older task remains fenced out.
+        if (!exactCdpObservation) {
+          advanceCdpRestoreEpoch(runtime);
+        }
+
+        const matchedExactTransaction =
+          exactCdpObservation?.matchedWebToken === undefined
+            ? undefined
+            : runtime.exactWebNavigationTransactions.get(exactCdpObservation.matchedWebToken);
+        if (matchedExactTransaction) {
+          matchedExactTransaction.restoreEpoch = exactCdpObservation!.restoreEpoch;
+          matchedExactTransaction.cdpObserved = true;
+        }
+
+        const ownership = resolveCdpTopNavigationOwnership({
+          navigationKind: withinDocument ? "same-document" : "cross-document",
+          usesExactWebNavigationDocumentOwnership: hasExactWebNavigationTracking(),
+          childMutationRevision: runtime.cdpScope.childMutationRevision,
+          restoreEpoch: exactCdpObservation?.restoreEpoch ?? runtime.cdpRestoreEpoch
+        });
+
+        if (withinDocument) {
+          const document = runtime.contentDocuments.getKnownFrameDocument(0);
+          const claim = claimCurrentRuntimeNavigation(runtime, "cdp-within-document", url);
+          frameTreeNavigationClaim = claim;
+
+          if (!claim) {
+            // A provisional root is reconciled by its start/restore transaction.
+          } else if (!decision.allowed) {
+            requestStopRuntimeIfNavigationClaimCurrent(claim, "cdp-same-document-denied");
+          } else if (document) {
+            suspendFullCaptureForNavigation(claim, { cdpScopeAlreadyInvalidated: true });
+            enqueueNavigationClaim(claim, async () => {
+              await handleSameDocumentNavigation(
+                {
+                  tabId: runtime.tabId,
+                  frameId: 0,
+                  documentId: document.documentId,
+                  url
+                },
+                () => isSessionNavigationClaimCurrent(claim)
+              );
+
+              if (!isSessionNavigationClaimCurrent(claim) || runtime.captureUrl !== url) {
+                return;
+              }
+
+              const documentActivation = runtime.contentDocuments.waitForKnownDocumentActivation({
+                frameId: 0,
+                documentId: document.documentId
+              });
+
+              if (
+                !documentActivation ||
+                !(await documentActivation) ||
+                !(await waitForLiveParentContentActivation(runtime, {
+                  frameId: 0,
+                  documentId: document.documentId
+                }))
+              ) {
+                requestStopRuntimeIfNavigationClaimCurrent(
+                  claim,
+                  "cdp-same-document-root-activation-failed"
+                );
+                return;
+              }
+
+              if (!isSessionNavigationClaimCurrent(claim) || runtime.captureUrl !== url) {
+                return;
+              }
+
+              launchCdpNavigationRestore(claim, ownership.restore ?? {});
+            });
+          } else {
+            requestStopRuntimeIfNavigationClaimCurrent(
+              claim,
+              "cdp-same-document-without-active-root"
+            );
+          }
+        } else {
+          const source: RuntimeNavigationSource = "cdp-frame-navigated";
+          const exactDocumentOwner = ownership.urlOwner === "web-navigation";
+          const claim = exactDocumentOwner
+            ? (matchedExactTransaction?.claim ??
+              snapshotCurrentRuntimeNavigation(runtime, source, url))
+            : claimCurrentRuntimeNavigation(runtime, source, url);
+          frameTreeNavigationClaim = claim;
+
+          if (!claim) {
+            // Root bootstrap has its own atomic transaction and is intentionally
+            // not folded into active-runtime navigation ownership.
+          } else if (!decision.allowed) {
+            requestStopRuntimeIfNavigationClaimCurrent(claim, "cdp-navigation-denied");
+          } else {
+            suspendFullCaptureForNavigation(claim, { cdpScopeAlreadyInvalidated: true });
+            if (!ownership.restore) {
+              if (
+                matchedExactTransaction &&
+                matchedExactTransaction.phase !== "running" &&
+                isExactWebNavigationTransactionCurrent(runtime, matchedExactTransaction)
+              ) {
+                matchedExactTransaction.detachedRestorePending = true;
+                launchCdpNavigationRestore(
+                  claim,
+                  {
+                    expectedRestoreEpoch: matchedExactTransaction.restoreEpoch
+                  },
+                  () => {
+                    matchedExactTransaction.detachedRestorePending = false;
+                    if (
+                      matchedExactTransaction.phase === "completed" &&
+                      runtime.exactWebNavigationTransactions.get(matchedExactTransaction.token) ===
+                        matchedExactTransaction
+                    ) {
+                      runtime.exactWebNavigationTransactions.delete(matchedExactTransaction.token);
+                    }
+                  }
+                );
+              }
+              return;
+            }
+            enqueueNavigationClaim(claim, async () => {
+              if (!exactDocumentOwner) {
+                if (!(await handleTabUrlChanged(claim, url))) {
+                  return;
+                }
+              } else if (!isSessionNavigationClaimCurrent(claim)) {
+                return;
+              }
+
+              launchCdpNavigationRestore(claim, ownership.restore);
+            });
+          }
+        }
+      } else if (cdpFrameTreeMutated) {
+        const mutationGeneration = runtime.cdpScope.generation;
+        const childMutationRevision = runtime.cdpScope.childMutationRevision;
+        const claim = snapshotCurrentRuntimeNavigation(
+          runtime,
+          "cdp-child-mutation",
+          runtime.captureUrl
+        );
+        frameTreeNavigationClaim = claim;
+        const activeRecording = runtime.screenRecording;
+        const recordingGeneration = activeRecording?.cdpScopeGeneration;
+
+        if (
+          claim &&
+          recordingGeneration !== undefined &&
+          (recordingGeneration === null ||
+            !isRuntimeGlobalCdpCaptureClaimValid(
+              runtime,
+              recordingGeneration,
+              activeRecording?.provisional === true
+            ))
+        ) {
+          void stopScreenRecording(runtime, "navigation-scope", activeRecording, () =>
+            isSessionNavigationClaimCurrent(claim)
+          ).catch(() => undefined);
+        }
+
+        if (claim && !childSessionClaim) {
+          enqueueNavigationClaim(claim, async () => {
+            if (runtime.cdpScope.generation !== mutationGeneration) {
+              return;
+            }
+
+            launchCdpNavigationRestore(claim, {
+              expectedChildMutationRevision: childMutationRevision
+            });
+          });
+        }
+      }
+
+      if (captureAllowed && event.method === "HeapProfiler.addHeapSnapshotChunk") {
+        const payload = asRecord(normalizedPayload);
+        const chunk = typeof payload?.chunk === "string" ? payload.chunk : undefined;
+
+        if (
+          chunk &&
+          runtime.heapSnapshotCapture &&
+          isRuntimeGlobalCdpCaptureClaimValid(
+            runtime,
+            runtime.heapSnapshotCapture.cdpScopeGeneration
+          )
+        ) {
+          const chunkBytes = new TextEncoder().encode(chunk).byteLength;
+          const nextBytes = runtime.heapSnapshotCapture.bytes + chunkBytes;
+
+          if (nextBytes <= HEAP_SNAPSHOT_MAX_BYTES) {
+            runtime.heapSnapshotCapture.chunks.push(chunk);
+            runtime.heapSnapshotCapture.bytes = nextBytes;
+          } else {
+            runtime.heapSnapshotCapture.truncated = true;
+          }
+        }
+      }
+
+      if (captureAllowed) {
+        ingestRawEvent({
+          source: "cdp",
+          rawType: event.method,
+          tabId: runtime.tabId,
+          sid: runtime.sid,
+          t: Date.now(),
+          mono: monotonicTime(),
+          cdpSessionId: event.sessionId,
+          payload: normalizedPayload
+        });
+      }
+
+      if (
+        !FULL_MODE_FOLLOWUP_METHODS.has(event.method) ||
+        (!captureAllowed &&
+          event.method !== "Target.attachedToTarget" &&
+          event.method !== "Target.detachedFromTarget")
+      ) {
+        return;
+      }
+
+      if (
+        event.method === "Target.attachedToTarget" ||
+        event.method === "Target.detachedFromTarget"
+      ) {
+        return;
+      }
+
+      enqueue(
+        runtime,
+        async () => {
+          if (
+            frameTreeNavigationClaim &&
+            !isSessionNavigationClaimCurrent(frameTreeNavigationClaim)
+          ) {
+            return;
+          }
+
+          if (!isCdpFollowupClaimCurrent(runtime.cdpScope, event.sessionId, eventChildClaim)) {
+            return;
+          }
+
+          await processFullModeEvent(
+            runtime,
+            event.method,
+            event.params ?? {},
+            event.sessionId,
+            eventChildClaim
+          );
+        },
+        { bestEffort: true }
+      );
+    });
+
+    const unsubscribeDetach = candidateRouter.onDetach((event) => {
+      if (event.tabId === runtime.tabId && isMapEntrySame(sessionsByTab, runtime.tabId, runtime)) {
+        requestStopRuntimeIfCurrent(runtime, "cdp-detach");
+      }
+    });
+
+    runtime.removeCdpListeners.push(unsubscribeEvent, unsubscribeDetach);
+
+    await bootstrapCdpRoot({
+      cdpLevel: runtime.config.capturePolicy?.categories.cdp ?? "off",
+      commands: {
+        attach: async () => {
+          await candidateRouter.attach(runtime.tabId);
+
+          if (!isMapEntrySame(sessionsByTab, runtime.tabId, runtime)) {
+            throw new Error("The runtime changed while its root debugger was attaching.");
+          }
+
+          runtime.cdpRouter = candidateRouter;
+          clearCdpCaptureScopeState(runtime.cdpScope);
+        },
+        clearExecutionContextScopes: () => {
+          runtime.cdpScope.executionContextScopes.clear();
+        },
+        enableAutoAttach: () => candidateRouter.enableAutoAttach(runtime.tabId),
+        primeFrameTree: () => primeCdpFrameTreeScopes(runtime, candidateRouter),
+        send: (method) => candidateRouter.send({ tabId: runtime.tabId }, method)
+      },
+      includeSubframes: runtime.config.capturePolicy?.scope.includeSubframes === true
+    });
+    const settledFrameTreePrime = await primeCdpRootAfterChildControls(runtime, candidateRouter);
+
+    if (!settledFrameTreePrime.rootValid) {
+      throw new Error("The root frame tree became invalid while child CDP sessions settled.");
+    }
+
+    if (runtime.screenRecording) {
+      if (settledFrameTreePrime.globalCaptureReady) {
+        runtime.screenRecording.cdpScopeGeneration = runtime.cdpScope.generation;
+      } else {
+        await stopScreenRecording(runtime, "capture-scope");
+      }
+    }
+
+    const normalizedScreenshotIntervalMs = normalizeOptionalSamplingInterval(
+      runtime.config.sampling.screenshotIdleMs,
+      DEFAULT_RECORDER_CONFIG.sampling.screenshotIdleMs
+    );
+
+    if (normalizedScreenshotIntervalMs > 0) {
+      const screenshotIntervalMs = Math.max(
+        FULL_MODE_MIN_SCREENSHOT_INTERVAL_MS,
+        normalizedScreenshotIntervalMs
+      );
+
+      runtime.screenshotInterval = globalThis.setInterval(() => {
+        enqueue(
+          runtime,
+          async () => {
+            await captureScreenshot(runtime, "interval");
+          },
+          { bestEffort: true }
+        );
+      }, screenshotIntervalMs);
+    }
+  } catch (error) {
+    console.warn("[WebBlackbox] failed to bootstrap root debugger", error);
+    await cleanupAndRethrowCdpRootBootstrapFailure(error, () =>
+      cleanupCdpInstrumentation(runtime, router)
+    );
+  }
+}
+
+function scheduleFullModeSessionStartArtifacts(runtime: SessionRuntime): void {
+  if (
+    runtime.mode !== "full" ||
+    !runtime.cdpRouter ||
+    !isMapEntrySame(sessionsByTab, runtime.tabId, runtime)
+  ) {
+    return;
+  }
+
+  enqueue(
+    runtime,
+    async () => {
+      await captureFullModeArtifacts(runtime, "session-start");
+    },
+    { bestEffort: true }
+  );
+}
+
+async function primeCdpFrameTreeScopes(
+  runtime: SessionRuntime,
+  router: CdpRouter | null = runtime.cdpRouter,
+  timeoutMs = CDP_ARTIFACT_TIMEOUT_MS
+): Promise<CdpRootFrameTreePrime> {
+  if (!router) {
+    invalidateCdpCaptureFrameTree(runtime.cdpScope);
+    return {
+      globalCaptureReady: false,
+      rootValid: false
+    };
+  }
+
+  await refreshCdpCaptureFrameTree(runtime.cdpScope, async () => {
+    const response = await requireCdpCommand(
+      router.send<{ frameTree?: unknown }>({ tabId: runtime.tabId }, "Page.getFrameTree"),
+      "root Page.getFrameTree",
+      timeoutMs
+    );
+    return response?.frameTree;
+  });
+
+  const generation = runtime.cdpScope.generation;
+  const rootValid = isCdpCaptureFrameTreePrimedForRoot(
+    runtime.cdpScope,
+    runtime.captureUrl,
+    generation
+  );
+
+  if (!rootValid) {
+    invalidateCdpCaptureFrameTree(runtime.cdpScope);
+  }
+
+  return {
+    globalCaptureReady:
+      rootValid &&
+      canCaptureGlobalCdpArtifactsForRoot(runtime.cdpScope, runtime.captureUrl, generation),
+    rootValid
+  };
+}
+
+function launchCdpNavigationRestore(
+  claim: SessionNavigationClaim,
+  options: { expectedChildMutationRevision?: number; expectedRestoreEpoch?: number } = {},
+  onSettled: (() => void) | undefined = undefined,
+  isFailureCurrent: (() => boolean) | undefined = undefined
+): void {
+  const runtime = claim.runtime;
+  const restoreOptions = {
+    expectedChildMutationRevision:
+      options.expectedChildMutationRevision ?? runtime.cdpScope.childMutationRevision,
+    expectedRestoreEpoch: options.expectedRestoreEpoch ?? runtime.cdpRestoreEpoch
+  };
+  const failureCurrent =
+    isFailureCurrent ??
+    (() =>
+      isSessionNavigationClaimCurrent(claim) &&
+      runtime.cdpScope.childMutationRevision === restoreOptions.expectedChildMutationRevision &&
+      isCdpRestoreEpochCurrent(runtime, restoreOptions.expectedRestoreEpoch));
+
+  launchDetachedNavigationTask({
+    run: () => restoreCdpGlobalCaptureAfterNavigation(claim, true, restoreOptions),
+    onFailure: async (error) => {
+      if (failureCurrent()) {
+        await stopRuntimeIfNavigationClaimCurrent(claim);
+      }
+
+      console.warn("[WebBlackbox] detached CDP navigation restore failed closed", {
+        tabId: runtime.tabId,
+        sid: runtime.sid,
+        revision: claim.revision,
+        restoreEpoch: restoreOptions.expectedRestoreEpoch,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    },
+    ...(onSettled ? { onSettled } : {}),
+    onUnhandledFailure: (error) => {
+      console.warn("[WebBlackbox] detached CDP restore cleanup failed", {
+        tabId: runtime.tabId,
+        sid: runtime.sid,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  });
+}
+
+async function restoreCdpGlobalCaptureAfterNavigation(
+  claim: SessionNavigationClaim,
+  _forceRefresh = false,
+  options: { expectedChildMutationRevision?: number; expectedRestoreEpoch?: number } = {}
+): Promise<void> {
+  const runtime = claim.runtime;
+  const restoreOptions = {
+    expectedChildMutationRevision:
+      options.expectedChildMutationRevision ?? runtime.cdpScope.childMutationRevision,
+    expectedRestoreEpoch: options.expectedRestoreEpoch ?? runtime.cdpRestoreEpoch
+  };
+  const previousTail = resolveCdpRestorePredecessor({
+    tail: runtime.cdpRestoreTail,
+    tailEpoch: runtime.cdpRestoreTailEpoch,
+    expectedRestoreEpoch: restoreOptions.expectedRestoreEpoch
+  });
+  const task = previousTail
+    .catch(() => undefined)
+    .then(() => restoreCdpGlobalCaptureAfterNavigationOnce(claim, _forceRefresh, restoreOptions));
+
+  if (isCdpRestoreEpochCurrent(runtime, restoreOptions.expectedRestoreEpoch)) {
+    runtime.cdpRestoreTailEpoch = restoreOptions.expectedRestoreEpoch;
+    runtime.cdpRestoreTail = task.catch(() => undefined);
+  }
+
+  try {
+    await task;
+  } catch (error) {
+    if (
+      !isSessionNavigationClaimCurrent(claim) ||
+      runtime.cdpScope.childMutationRevision !== restoreOptions.expectedChildMutationRevision ||
+      !isCdpRestoreEpochCurrent(runtime, restoreOptions.expectedRestoreEpoch)
+    ) {
+      return;
+    }
+
+    throw error;
+  }
+
+  if (
+    runtime.cdpScope.childMutationRevision === restoreOptions.expectedChildMutationRevision &&
+    isCdpRestoreEpochCurrent(runtime, restoreOptions.expectedRestoreEpoch) &&
+    canOpenFullCdpPayloadAdmission(claim, restoreOptions.expectedRestoreEpoch)
+  ) {
+    runtime.cdpPayloadAdmissionBlocked = false;
+  }
+}
+
+async function restoreCdpGlobalCaptureAfterNavigationOnce(
+  claim: SessionNavigationClaim,
+  forceRefresh: boolean,
+  options: { expectedChildMutationRevision?: number; expectedRestoreEpoch?: number } = {}
+): Promise<void> {
+  const runtime = claim.runtime;
+  const expectedUrl = claim.candidateUrl ?? runtime.captureUrl;
+  const expectedRestoreEpoch = options.expectedRestoreEpoch ?? runtime.cdpRestoreEpoch;
+  const isRestoreCurrent = () =>
+    isSessionNavigationClaimCurrent(claim) &&
+    isCdpRestoreEpochCurrent(runtime, expectedRestoreEpoch) &&
+    (options.expectedChildMutationRevision === undefined ||
+      runtime.cdpScope.childMutationRevision === options.expectedChildMutationRevision);
+  const stopRuntimeIfRestoreCurrent = async () => {
+    if (isRestoreCurrent()) {
+      await stopRuntimeIfNavigationClaimCurrent(claim);
+    }
+  };
+
+  if (
+    !isRestoreCurrent() ||
+    runtime.mode !== "full" ||
+    !runtime.cdpRouter ||
+    !isRuntimeCaptureScopeActive(runtime) ||
+    runtime.captureUrl !== expectedUrl
+  ) {
+    return;
+  }
+
+  const initialRecording = runtime.screenRecording;
+  const currentGeneration = claimRuntimeGlobalCdpCapture(runtime, false, true);
+  const expectedChildMutationRevision =
+    options.expectedChildMutationRevision ?? runtime.cdpScope.childMutationRevision;
+  const checkpoint = runtime.cdpRestoreCheckpoint;
+  const checkpointCurrent =
+    currentGeneration !== null &&
+    checkpoint?.navigationRevision === claim.revision &&
+    checkpoint.captureUrl === expectedUrl &&
+    checkpoint.childMutationRevision === expectedChildMutationRevision &&
+    checkpoint.restoreEpoch === expectedRestoreEpoch &&
+    checkpoint.generation === currentGeneration;
+  const refreshRequired =
+    currentGeneration === null ||
+    (forceRefresh && !checkpointCurrent) ||
+    !isCdpCaptureFrameTreePrimedForRoot(runtime.cdpScope, runtime.captureUrl, currentGeneration);
+
+  if (
+    initialRecording &&
+    (refreshRequired || initialRecording.cdpScopeGeneration !== currentGeneration)
+  ) {
+    try {
+      await stopScreenRecording(runtime, "navigation-scope", initialRecording, () =>
+        isRestoreCurrent()
+      );
+    } catch {
+      await stopRuntimeIfRestoreCurrent();
+      return;
+    }
+
+    if (!isRestoreCurrent()) {
+      return;
+    }
+  }
+
+  if (refreshRequired || claimRuntimeGlobalCdpCapture(runtime, false, true) === null) {
+    const prime = await runGuardedNavigationStep(isRestoreCurrent, () =>
+      primeCdpFrameTreeScopes(runtime)
+    );
+
+    if (prime.status !== "current" || !isRestoreCurrent() || runtime.captureUrl !== expectedUrl) {
+      return;
+    }
+
+    const frameTreePrime = prime.value;
+    const primeOutcome = resolveCdpNavigationPrimeOutcome(frameTreePrime);
+
+    if (primeOutcome === "root-invalid") {
+      const invalidRootRecording = runtime.screenRecording;
+
+      await stopScreenRecording(runtime, "capture-scope", invalidRootRecording, () =>
+        isRestoreCurrent()
+      ).catch(() => undefined);
+      await stopRuntimeIfRestoreCurrent();
+      return;
+    }
+
+    if (primeOutcome === "global-blocked") {
+      const childBlockedRecording = runtime.screenRecording;
+
+      try {
+        await stopScreenRecording(runtime, "capture-scope", childBlockedRecording, () =>
+          isRestoreCurrent()
+        );
+      } catch {
+        await stopRuntimeIfRestoreCurrent();
+      }
+
+      return;
+    }
+  }
+
+  const finalGeneration = claimRuntimeGlobalCdpCapture(runtime, false, true);
+
+  if (
+    finalGeneration !== null &&
+    isRestoreCurrent() &&
+    canOpenFullCdpPayloadAdmission(claim, expectedRestoreEpoch)
+  ) {
+    runtime.cdpRestoreCheckpoint = {
+      navigationRevision: claim.revision,
+      captureUrl: expectedUrl,
+      childMutationRevision: expectedChildMutationRevision,
+      restoreEpoch: expectedRestoreEpoch,
+      generation: finalGeneration
+    };
+    runtime.cdpPayloadAdmissionBlocked = false;
+  }
+
+  const activeRecording = runtime.screenRecording;
+
+  if (
+    activeRecording &&
+    (finalGeneration === null || activeRecording.cdpScopeGeneration !== finalGeneration)
+  ) {
+    try {
+      await stopScreenRecording(runtime, "navigation-scope", activeRecording, () =>
+        isRestoreCurrent()
+      );
+    } catch {
+      await stopRuntimeIfRestoreCurrent();
+      return;
+    }
+
+    if (!isRestoreCurrent()) {
+      return;
+    }
+  }
+
+  const screenRecordingRequested =
+    runtime.config.capturePolicy?.categories.screenRecordings === "allow";
+
+  if (!runtime.screenRecording && screenRecordingRequested) {
+    try {
+      await startScreenRecording(runtime, false, claim, isRestoreCurrent);
+    } catch (error) {
+      console.warn("[WebBlackbox] failed to restart screen recording after navigation", {
+        sid: runtime.sid,
+        error: error instanceof Error ? error.message : String(error)
+      });
+
+      await stopRuntimeIfRestoreCurrent();
+      return;
+    }
+
+    if (!isRestoreCurrent()) {
+      return;
+    }
+
+    if (!runtime.screenRecording) {
+      // A child-target mutation can invalidate global capture while the
+      // requested start is in flight without superseding the top navigation.
+      // Its queued snapshot owns the next prime and decides whether the valid
+      // root is merely global-blocked or actually invalid.
+      if (claimRuntimeGlobalCdpCapture(runtime, false, true) === null) {
+        return;
+      }
+
+      await stopRuntimeIfRestoreCurrent();
+    }
+  }
+}
+
+function canOpenFullCdpPayloadAdmission(
+  claim: SessionNavigationClaim,
+  expectedRestoreEpoch: number = claim.runtime.cdpRestoreEpoch
+): boolean {
+  const runtime = claim.runtime;
+  const rootDocument = runtime.contentDocuments.get(0);
+  const rootActivation = contentActivations
+    .listRuntime(runtime, runtime.captureFence, ["active"])
+    .find(
+      (activation) =>
+        activation.frameId === 0 &&
+        activation.documentId === rootDocument?.documentId &&
+        activation.url === runtime.captureUrl
+    );
+
+  return (
+    isSessionNavigationClaimCurrent(claim) &&
+    isCdpRestoreEpochCurrent(runtime, expectedRestoreEpoch) &&
+    runtime.mode === "full" &&
+    runtime.cdpRouter !== null &&
+    rootDocument?.url === runtime.captureUrl &&
+    rootActivation !== undefined &&
+    !runtime.pendingContentPolicyRevisions.has(
+      contentActivationParentKey(rootDocument.frameId, rootDocument.documentId)
+    ) &&
+    claimRuntimeGlobalCdpCapture(runtime, false, true) !== null
+  );
+}
+
+function evaluateRuntimeFrameDocument(
+  runtime: SessionRuntime,
+  url: string | null | undefined,
+  topLevel: boolean
+): boolean {
+  return evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+    url,
+    tabId: runtime.tabId,
+    frameId: topLevel ? 0 : 1
+  }).allowed;
+}
+
+function isRuntimeCaptureScopeActive(runtime: SessionRuntime): boolean {
+  return (
+    isVolatileCaptureOpen(runtime.captureFence) &&
+    !runtime.stopping &&
+    !runtime.stoppedAt &&
+    isRuntimeDocumentWithinScope(runtime)
+  );
+}
+
+function claimRuntimeGlobalCdpCapture(
+  runtime: SessionRuntime,
+  allowStarting = false,
+  allowNavigationBlocked = false
+): number | null {
+  const provisionalIdentityCurrent =
+    allowStarting &&
+    isRuntimeActivationProvisional(runtime.activationState) &&
+    isMapEntrySame(sessionsByTab, runtime.tabId, runtime) &&
+    isMapEntrySame(sessionsBySid, runtime.sid, runtime);
+
+  if (
+    (!isRuntimeCaptureAdmitted(runtime.activationState) && !provisionalIdentityCurrent) ||
+    (runtime.cdpPayloadAdmissionBlocked && !allowNavigationBlocked) ||
+    !isRuntimeCaptureScopeActive(runtime) ||
+    !canCaptureGlobalCdpArtifactsForRoot(runtime.cdpScope, runtime.captureUrl)
+  ) {
+    return null;
+  }
+
+  return runtime.cdpScope.generation;
+}
+
+function isRuntimeGlobalCdpCaptureClaimValid(
+  runtime: SessionRuntime,
+  generation: number,
+  allowStarting = false,
+  allowNavigationBlocked = false
+): boolean {
+  const provisionalIdentityCurrent =
+    allowStarting &&
+    isRuntimeActivationProvisional(runtime.activationState) &&
+    isMapEntrySame(sessionsByTab, runtime.tabId, runtime) &&
+    isMapEntrySame(sessionsBySid, runtime.sid, runtime);
+
+  return (
+    (isRuntimeCaptureAdmitted(runtime.activationState) || provisionalIdentityCurrent) &&
+    (!runtime.cdpPayloadAdmissionBlocked || allowNavigationBlocked) &&
+    isRuntimeCaptureScopeActive(runtime) &&
+    canCaptureGlobalCdpArtifactsForRoot(runtime.cdpScope, runtime.captureUrl, generation)
+  );
+}
+
+function isRuntimeEventMaterializationAllowed(
+  runtime: SessionRuntime,
+  stopDrainClaim: StopDrainClaim | null,
+  batchAdmission: ContentEventBatchAdmission | null = null
+): boolean {
+  if (stopDrainClaim) {
+    return (
+      isStopDrainClaimValid(stopDrainClaim, runtime, runtime.captureFence) &&
+      evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+        url: stopDrainClaim.capability.documentUrl,
+        tabId: runtime.tabId,
+        frameId: stopDrainClaim.capability.frameId
+      }).allowed
+    );
+  }
+
+  if (batchAdmission) {
+    return (
+      isContentEventBatchAdmissionValid(batchAdmission, runtime) &&
+      evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+        url: batchAdmission.documentUrl,
+        tabId: runtime.tabId,
+        frameId: batchAdmission.frameId
+      }).allowed
+    );
+  }
+
+  return (
+    isRuntimeCaptureScopeActive(runtime) &&
+    (runtime.mode !== "full" || !runtime.cdpPayloadAdmissionBlocked)
+  );
+}
+
+function isContentEventBatchAdmissionValid(
+  admission: ContentEventBatchAdmission,
+  runtime: SessionRuntime
+): boolean {
+  return isContentEventBatchAdmissionLive(
+    admission,
+    runtime,
+    runtime.captureFence,
+    (activationId) => contentActivations.lookupByActivationId(activationId, ["active", "draining"])
+  );
+}
+
+function isRuntimeDocumentWithinScope(runtime: SessionRuntime): boolean {
+  return evaluateRuntimeFrameDocument(runtime, runtime.captureUrl, true);
+}
+
+async function processFullModeEvent(
+  runtime: SessionRuntime,
+  method: string,
+  params: unknown,
+  sessionId: string | undefined,
+  childClaim: CdpChildSessionClaim | null
+): Promise<void> {
+  const isEventCurrent = () =>
+    isRuntimeCaptureScopeActive(runtime) &&
+    !runtime.cdpPayloadAdmissionBlocked &&
+    claimRuntimeGlobalCdpCapture(runtime) !== null &&
+    isCdpFollowupClaimCurrent(runtime.cdpScope, sessionId, childClaim);
+
+  if (!isEventCurrent()) {
+    return;
+  }
+
+  const payload = asRecord(params);
+
+  if (method === "Network.responseReceived") {
+    const requestId = typeof payload?.requestId === "string" ? payload.requestId : undefined;
+    const response = asRecord(payload?.response);
+    const resourceType = typeof payload?.type === "string" ? payload.type : undefined;
+
+    if (requestId) {
+      upsertRequestMeta(
+        runtime.requestMeta,
+        buildCdpFollowupRequestMetaKey(requestId, sessionId, childClaim),
+        {
+          url: typeof response?.url === "string" ? response.url : undefined,
+          mimeType: typeof response?.mimeType === "string" ? response.mimeType : undefined,
+          status: typeof response?.status === "number" ? response.status : undefined,
+          resourceType
+        }
+      );
+    }
+
+    return;
+  }
+
+  if (method === "Network.loadingFinished") {
+    const requestId = typeof payload?.requestId === "string" ? payload.requestId : undefined;
+    const requestMetaKey = requestId
+      ? buildCdpFollowupRequestMetaKey(requestId, sessionId, childClaim)
+      : null;
+
+    if (
+      requestId &&
+      requestMetaKey &&
+      shouldCaptureResponseBody(runtime, requestMetaKey, payload)
+    ) {
+      await captureResponseBody(runtime, requestId, requestMetaKey, sessionId, isEventCurrent);
+    }
+
+    if (requestId && requestMetaKey) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+
+      if (isEventCurrent()) {
+        forgetCdpRequestScope(runtime.cdpScope, requestId, sessionId);
+      }
+    }
+
+    return;
+  }
+
+  if (method === "Runtime.exceptionThrown" || method === "Network.loadingFailed") {
+    if (method === "Network.loadingFailed") {
+      const requestId = typeof payload?.requestId === "string" ? payload.requestId : undefined;
+
+      if (requestId) {
+        deleteRequestMeta(
+          runtime.requestMeta,
+          buildCdpFollowupRequestMetaKey(requestId, sessionId, childClaim)
+        );
+
+        if (isEventCurrent()) {
+          forgetCdpRequestScope(runtime.cdpScope, requestId, sessionId);
+        }
+      }
+    }
+
+    if (isEventCurrent() && shouldCaptureIncidentArtifacts(runtime)) {
+      await captureIncidentArtifacts(runtime, method, isEventCurrent);
+    }
+
+    return;
+  }
+
+  const frame = asRecord(payload?.frame);
+  const isTopFrameNavigation =
+    !sessionId &&
+    ((method === "Page.frameNavigated" &&
+      typeof frame?.parentId !== "string" &&
+      typeof frame?.parentFrameId !== "string") ||
+      (method === "Page.navigatedWithinDocument" &&
+        typeof payload?.frameId === "string" &&
+        payload.frameId === runtime.cdpScope.rootFrameId));
+
+  if (isTopFrameNavigation && shouldCaptureNavigationSnapshot(runtime)) {
+    await captureDomSnapshot(runtime, "navigation");
+  }
+}
+
+async function captureResponseBody(
+  runtime: SessionRuntime,
+  requestId: string,
+  requestMetaKey: string,
+  sessionId: string | undefined,
+  isEventCurrent: () => boolean
+): Promise<void> {
+  if (!runtime.cdpRouter || !isEventCurrent()) {
+    return;
+  }
+
+  const target = sessionId ? { tabId: runtime.tabId, sessionId } : { tabId: runtime.tabId };
+  const response = await sendCdpCommand<{
+    body?: string;
+    base64Encoded?: boolean;
+  }>(runtime, target, "Network.getResponseBody", { requestId });
+
+  if (!response?.body || !isEventCurrent()) {
+    return;
+  }
+
+  const metadata = getRequestMeta(runtime.requestMeta, requestMetaKey);
+  const normalizedMime = normalizeMimeType(metadata?.mimeType ?? null);
+  const captureRule = resolveFullBodyCaptureRule(runtime, metadata?.url ?? "", normalizedMime);
+
+  if (!captureRule.enabled) {
+    return;
+  }
+
+  const transformed = transformResponseBodyForCapture({
+    body: response.body,
+    base64Encoded: response.base64Encoded === true,
+    mimeType: normalizedMime,
+    redactPatterns: runtime.config.redaction.redactBodyPatterns,
+    maxBytes: captureRule.maxBytes,
+    redactionToken: LITE_BODY_REDACTED_TOKEN,
+    decodeBase64
+  });
+
+  if (!transformed) {
+    return;
+  }
+
+  if (!isEventCurrent()) {
+    return;
+  }
+
+  const hash = await putRuntimeCaptureBlob(
+    runtime,
+    metadata?.mimeType ?? "application/octet-stream",
+    transformed.sampledBytes
+  );
+
+  if (!hash || !isEventCurrent()) {
+    return;
+  }
+
+  runtime.responseBodyCaptures += 1;
+
+  ingestRawEvent({
+    source: "system",
+    rawType: "cdp.network.body",
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    t: Date.now(),
+    mono: monotonicTime(),
+    payload: {
+      reqId: requestId,
+      contentHash: hash,
+      mimeType: metadata?.mimeType,
+      size: transformed.originalBytes.byteLength,
+      sampledSize: transformed.sampledBytes.byteLength,
+      redacted: transformed.redacted,
+      truncated: transformed.truncated
+    }
+  });
+}
+
+function shouldCaptureResponseBody(
+  runtime: SessionRuntime,
+  requestMetaKey: string,
+  loadingFinishedPayload: Record<string, unknown> | null
+): boolean {
+  if (runtime.mode !== "full" || !isRuntimeCaptureScopeActive(runtime)) {
+    return false;
+  }
+
+  if (runtime.config.capturePolicy?.categories.network !== "body-allowlist") {
+    return false;
+  }
+
+  if (runtime.responseBodyCaptures >= FULL_MODE_BODY_CAPTURE_MAX_PER_SESSION) {
+    return false;
+  }
+
+  const metadata = getRequestMeta(runtime.requestMeta, requestMetaKey);
+
+  if (!metadata) {
+    return false;
+  }
+
+  if (metadata.resourceType && SKIPPED_FULL_MODE_BODY_RESOURCE_TYPES.has(metadata.resourceType)) {
+    return false;
+  }
+
+  const normalizedMime = normalizeMimeType(metadata.mimeType ?? null);
+  const captureRule = resolveFullBodyCaptureRule(runtime, metadata.url ?? "", normalizedMime);
+
+  if (!captureRule.enabled) {
+    return false;
+  }
+
+  if (normalizedMime && !isTextualMimeType(normalizedMime)) {
+    return false;
+  }
+
+  if (!normalizedMime && !isLikelyTextualResourceType(metadata.resourceType)) {
+    return false;
+  }
+
+  const encodedDataLength = asFiniteNumber(loadingFinishedPayload?.encodedDataLength);
+
+  if (
+    encodedDataLength !== null &&
+    Number.isFinite(encodedDataLength) &&
+    encodedDataLength > captureRule.maxBytes * 2
+  ) {
+    return false;
+  }
+
+  const now = Date.now();
+  const threshold = now - 60_000;
+  runtime.responseBodyCaptureTimestamps = runtime.responseBodyCaptureTimestamps.filter(
+    (timestamp) => timestamp >= threshold
+  );
+
+  if (runtime.responseBodyCaptureTimestamps.length >= FULL_MODE_BODY_CAPTURE_MAX_PER_MINUTE) {
+    return false;
+  }
+
+  runtime.responseBodyCaptureTimestamps.push(now);
+  return true;
+}
+
+function isTextualMimeType(mimeType: string): boolean {
+  return isTextualMimeTypeUtil(mimeType);
+}
+
+function isLikelyTextualResourceType(resourceType?: string): boolean {
+  return isLikelyTextualResourceTypeUtil(resourceType);
+}
+
+function shouldCaptureIncidentArtifacts(runtime: SessionRuntime): boolean {
+  if (claimRuntimeGlobalCdpCapture(runtime) === null) {
+    return false;
+  }
+
+  if (
+    runtime.config.capturePolicy?.categories.screenshots === "off" &&
+    runtime.config.capturePolicy?.categories.cdp !== "full"
+  ) {
+    return false;
+  }
+
+  const now = Date.now();
+
+  if (now - runtime.lastIncidentCaptureAt < FULL_MODE_INCIDENT_CAPTURE_COOLDOWN_MS) {
+    return false;
+  }
+
+  runtime.lastIncidentCaptureAt = now;
+  return true;
+}
+
+async function captureIncidentArtifacts(
+  runtime: SessionRuntime,
+  reason: string,
+  additionalCurrent: () => boolean = () => true
+): Promise<void> {
+  if (!additionalCurrent()) {
+    return;
+  }
+
+  await Promise.allSettled([
+    captureScreenshot(runtime, reason, additionalCurrent),
+    captureTraceMetrics(runtime, reason, additionalCurrent)
+  ]);
+}
+
+function shouldCaptureNavigationSnapshot(runtime: SessionRuntime): boolean {
+  if (claimRuntimeGlobalCdpCapture(runtime) === null) {
+    return false;
+  }
+
+  if (runtime.config.capturePolicy?.categories.dom !== "allow") {
+    return false;
+  }
+
+  if (runtime.queueDepth >= Math.floor(BEST_EFFORT_QUEUE_MAX_PENDING / 4)) {
+    return false;
+  }
+
+  const now = Date.now();
+
+  if (now - runtime.lastNavigationSnapshotAt < FULL_MODE_NAV_SNAPSHOT_COOLDOWN_MS) {
+    return false;
+  }
+
+  runtime.lastNavigationSnapshotAt = now;
+  return true;
+}
+
+function handleFreezeNotice(runtime: SessionRuntime, reason: FreezeReason): void {
+  if (!isRuntimeCaptureScopeActive(runtime)) {
+    return;
+  }
+
+  const now = Date.now();
+  const lastNotifiedAt = runtime.lastFreezeNotices.get(reason) ?? Number.NEGATIVE_INFINITY;
+
+  if (now - lastNotifiedAt < FREEZE_NOTICE_COOLDOWN_MS) {
+    return;
+  }
+
+  runtime.lastFreezeNotices.set(reason, now);
+  broadcast({ kind: "sw.freeze", sid: runtime.sid, reason });
+  void setFreezeBadge();
+}
+
+async function captureFullModeArtifacts(runtime: SessionRuntime, reason: string): Promise<void> {
+  if (claimRuntimeGlobalCdpCapture(runtime) === null) {
+    await stopScreenRecording(runtime, "capture-scope").catch(() => undefined);
+    return;
+  }
+
+  const tasks: Array<Promise<void>> = [
+    captureScreenshot(runtime, reason),
+    captureTraceMetrics(runtime, reason)
+  ];
+
+  if (reason !== "session-start") {
+    tasks.push(captureDomSnapshot(runtime, reason), captureStorageSnapshots(runtime, reason));
+  }
+
+  if (shouldCaptureAdvancedProfiles(reason)) {
+    tasks.push(captureAdvancedProfiles(runtime, reason));
+  }
+
+  await Promise.allSettled(tasks);
+}
+
+async function captureScreenshot(
+  runtime: SessionRuntime,
+  reason: string,
+  additionalCurrent: () => boolean = () => true
+): Promise<void> {
+  const cdpScopeGeneration = claimRuntimeGlobalCdpCapture(runtime);
+
+  if (!additionalCurrent() || !runtime.cdpRouter || cdpScopeGeneration === null) {
+    return;
+  }
+
+  if (runtime.config.capturePolicy?.categories.screenshots !== "allow") {
+    return;
+  }
+
+  const screenshot = await sendCdpCommand<{ data?: string }>(
+    runtime,
+    { tabId: runtime.tabId },
+    "Page.captureScreenshot",
+    {
+      format: "webp",
+      quality: 62,
+      fromSurface: true
+    }
+  );
+
+  if (
+    !screenshot?.data ||
+    !additionalCurrent() ||
+    !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)
+  ) {
+    return;
+  }
+
+  const bytes = decodeBase64(screenshot.data);
+  const hash = await putRuntimeCaptureBlob(runtime, "image/webp", bytes);
+
+  if (
+    !hash ||
+    !additionalCurrent() ||
+    !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)
+  ) {
+    return;
+  }
+
+  const viewport = runtime.lastViewport;
+  const pointer =
+    runtime.lastPointer && Date.now() - runtime.lastPointer.t <= POINTER_STALE_MS
+      ? runtime.lastPointer
+      : null;
+
+  ingestRawEvent({
+    source: "system",
+    rawType: "cdp.screen.screenshot",
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    t: Date.now(),
+    mono: monotonicTime(),
+    payload: {
+      shotId: hash,
+      format: "webp",
+      quality: 62,
+      w: viewport?.width,
+      h: viewport?.height,
+      viewport: viewport
+        ? {
+            width: viewport.width,
+            height: viewport.height,
+            dpr: viewport.dpr
+          }
+        : undefined,
+      pointer: pointer
+        ? {
+            x: pointer.x,
+            y: pointer.y,
+            t: pointer.t,
+            mono: pointer.mono
+          }
+        : undefined,
+      size: bytes.byteLength,
+      reason
+    }
+  });
+}
+
+function shouldStartScreenRecording(runtime: SessionRuntime, allowStarting = false): boolean {
+  return (
+    runtime.mode === "full" &&
+    claimRuntimeGlobalCdpCapture(runtime, allowStarting) !== null &&
+    runtime.config.capturePolicy?.categories.screenRecordings === "allow"
+  );
+}
+
+async function startScreenRecording(
+  runtime: SessionRuntime,
+  provisional = false,
+  navigationClaim?: SessionNavigationClaim,
+  additionalCurrent: () => boolean = () => true
+): Promise<void> {
+  const isCurrentNavigation = () =>
+    additionalCurrent() &&
+    (navigationClaim === undefined || isSessionNavigationClaimCurrent(navigationClaim));
+  const navigationRestore = navigationClaim !== undefined;
+  const cdpScopeGeneration = claimRuntimeGlobalCdpCapture(runtime, provisional, navigationRestore);
+
+  if (!isCurrentNavigation() || runtime.screenRecording || cdpScopeGeneration === null) {
+    return;
+  }
+
+  if (!chromeApi?.tabCapture?.getMediaStreamId) {
+    throw new Error("Chrome tabCapture API is unavailable for screen recording.");
+  }
+
+  const recordingId = createScreenRecordingId(runtime.sid);
+  const startedAt = Date.now();
+  const startedMono = monotonicTime();
+  const stream = await runGuardedNavigationStep(isCurrentNavigation, () =>
+    chromeApi.tabCapture!.getMediaStreamId!({
+      targetTabId: runtime.tabId
+    })
+  );
+
+  if (
+    stream.status !== "current" ||
+    runtime.screenRecording !== null ||
+    !isRuntimeGlobalCdpCaptureClaimValid(
+      runtime,
+      cdpScopeGeneration,
+      provisional,
+      navigationRestore
+    )
+  ) {
+    return;
+  }
+
+  const streamId = stream.value;
+
+  if (!streamId) {
+    throw new Error("Chrome did not grant a tab capture stream.");
+  }
+
+  const recording: ScreenRecordingRuntime = {
+    recordingId,
+    cdpScopeGeneration,
+    provisional,
+    source: SCREEN_RECORDING_OFFSCREEN_SOURCE,
+    startedAt,
+    startedMono,
+    mime: "video/webm",
+    chunks: [],
+    chunkCount: 0,
+    sizeBytes: 0,
+    pendingWrites: new Set(),
+    chunkWrites: new ScreenRecordingChunkWriteLedger(),
+    stopPromise: null,
+    finalization: new ScreenRecordingFinalizationGate(),
+    finalizing: false,
+    durabilityEvidenceQueued: false,
+    terminalEvidenceQueued: false
+  };
+  runtime.screenRecording = recording;
+
+  try {
+    const offscreenStart = await runGuardedNavigationStep(isCurrentNavigation, () =>
+      requestOffscreenPipeline<OffscreenScreenRecordingStartResult>({
+        op: "startScreenRecording",
+        sid: runtime.sid,
+        recordingId,
+        streamId,
+        source: SCREEN_RECORDING_OFFSCREEN_SOURCE
+      })
+    );
+
+    if (
+      offscreenStart.status !== "current" ||
+      runtime.screenRecording !== recording ||
+      !isRuntimeGlobalCdpCaptureClaimValid(
+        runtime,
+        cdpScopeGeneration,
+        provisional,
+        navigationRestore
+      )
+    ) {
+      if (didGuardedNavigationOperationRun(offscreenStart)) {
+        await stopScreenRecording(runtime, "capture-fence", recording);
+      } else if (runtime.screenRecording === recording) {
+        runtime.screenRecording = null;
+      }
+      return;
+    }
+
+    const result = offscreenStart.value;
+
+    recording.mime = result.mime;
+    recording.width = result.width;
+    recording.height = result.height;
+    recording.frameRate = result.frameRate;
+
+    ingestRawEvent({
+      source: "system",
+      rawType: "screen.recording.start",
+      sid: runtime.sid,
+      tabId: runtime.tabId,
+      t: startedAt,
+      mono: startedMono,
+      payload: {
+        recordingId,
+        source: result.source,
+        mime: result.mime,
+        width: result.width,
+        height: result.height,
+        frameRate: result.frameRate,
+        audio: result.audio
+      }
+    });
+  } catch (error) {
+    if (runtime.screenRecording === recording) {
+      ingestScreenRecordingError(runtime, recording, error, "start");
+      const reconciliation = await reconcileAmbiguousNavigationResourceStart({
+        current: () => runtime.screenRecording,
+        expected: recording,
+        stop: (expected) => stopScreenRecording(runtime, "start-failed", expected)
+      });
+
+      if (reconciliation.kind === "retained") {
+        // Keep the exact local identity so the surrounding start/restore
+        // transaction can retry cleanup after an ambiguous offscreen result.
+        console.warn("[WebBlackbox] failed to reconcile ambiguous screen start", {
+          sid: runtime.sid,
+          recordingId: recording.recordingId,
+          error:
+            reconciliation.error instanceof Error
+              ? reconciliation.error.message
+              : String(reconciliation.error)
+        });
+      }
+    }
+    throw error;
+  }
+}
+
+async function stopScreenRecording(
+  runtime: SessionRuntime,
+  reason: string,
+  expectedRecording: ScreenRecordingRuntime | null = runtime.screenRecording,
+  isCurrent: () => boolean = () => true
+): Promise<void> {
+  const recording = expectedRecording;
+
+  if (!canOperateOnExpectedNavigationResource(isCurrent, runtime.screenRecording, recording)) {
+    return;
+  }
+
+  if (reason !== "session-stop" && isRuntimeAwaitingDurableStop(runtime)) {
+    await quiesceScreenRecordingForStop(runtime).catch(() => undefined);
+    return;
+  }
+
+  if (recording.stopPromise) {
+    await recording.stopPromise;
+    return;
+  }
+
+  const stopPromise = (async () => {
+    const result = await requestOffscreenPipeline<OffscreenScreenRecordingStopResult>({
+      op: "stopScreenRecording",
+      sid: runtime.sid,
+      recordingId: recording.recordingId,
+      reason
+    });
+    await finalizeScreenRecording(runtime, result);
+  })();
+  recording.stopPromise = stopPromise;
+
+  try {
+    await stopPromise;
+  } catch (error) {
+    if (recording.stopPromise === stopPromise) {
+      recording.stopPromise = null;
+    }
+
+    throw error;
+  }
+}
+
+async function quiesceScreenRecordingForStop(runtime: SessionRuntime): Promise<void> {
+  const recording = runtime.screenRecording;
+
+  if (!recording) {
+    return;
+  }
+
+  const result = await requestOffscreenPipeline<{ quiesced: boolean }>({
+    op: "quiesceScreenRecording",
+    sid: runtime.sid,
+    recordingId: recording.recordingId
+  });
+  if (result.quiesced !== true) {
+    throw new Error("Offscreen screen recording did not confirm stop quiescence.");
+  }
+}
+
+function isRuntimeAwaitingDurableStop(runtime: SessionRuntime): boolean {
+  return (
+    runtime.activationState === "active" &&
+    runtime.stopRequestedAt !== undefined &&
+    !runtime.stopping &&
+    !runtime.stoppedAt &&
+    isMapEntrySame(sessionsByTab, runtime.tabId, runtime) &&
+    isMapEntrySame(sessionsBySid, runtime.sid, runtime)
+  );
+}
+
+async function handleOffscreenScreenRecordingChunk(
+  message: OffscreenScreenRecordingChunkMessage,
+  port: PortLike
+): Promise<void> {
+  const runtime = sessionsBySid.get(message.sid);
+  const recording = runtime?.screenRecording;
+
+  if (!runtime || !recording || recording.recordingId !== message.recordingId) {
+    return;
+  }
+
+  const activeAdmission =
+    recording.cdpScopeGeneration !== null &&
+    isRuntimeGlobalCdpCaptureClaimValid(
+      runtime,
+      recording.cdpScopeGeneration,
+      recording.provisional
+    );
+  const stopAdmission = isRuntimeOwnedScreenRecordingStopAdmission(runtime, recording);
+  if (!activeAdmission && !stopAdmission) {
+    await stopScreenRecording(runtime, "capture-scope").catch(() => undefined);
+    return;
+  }
+
+  const bytes = asUint8Array(message.bytes);
+
+  if (
+    !bytes ||
+    bytes.byteLength === 0 ||
+    message.size !== bytes.byteLength ||
+    !Number.isSafeInteger(message.index) ||
+    message.index < 0 ||
+    message.index >= PIPELINE_RESUME_MAX_SCREEN_CHUNKS ||
+    typeof message.mime !== "string" ||
+    message.mime.length === 0 ||
+    message.mime.length > 256
+  ) {
+    return;
+  }
+
+  const index = message.index;
+  const fingerprint = JSON.stringify([
+    message.mime,
+    message.size,
+    normalizeRecordingOffset(message.startOffsetMs),
+    normalizeRecordingOffset(message.endOffsetMs),
+    normalizeRecordingOffset(message.durationMs)
+  ]);
+  const task = recording.chunkWrites.execute({
+    index,
+    fingerprint,
+    putBlob: async () => {
+      const hash = stopAdmission
+        ? await runtime.pipeline.putBlob(message.mime, bytes, {
+            screenRecordingFinalization: true
+          })
+        : await putRuntimeCaptureBlob(runtime, message.mime, bytes);
+      if (!hash) {
+        throw new Error("Screen recording chunk blob was not admitted.");
+      }
+      return hash;
+    },
+    enqueueEvent: async (hash) => {
+      const rawEvent: RawRecorderEvent = {
+        source: "system",
+        rawType: "screen.recording.chunk",
+        sid: runtime.sid,
+        tabId: runtime.tabId,
+        t: Date.now(),
+        mono: monotonicTime(),
+        payload: {
+          recordingId: recording.recordingId,
+          chunkId: hash,
+          index,
+          mime: message.mime,
+          size: message.size,
+          startOffsetMs: normalizeRecordingOffset(message.startOffsetMs),
+          endOffsetMs: normalizeRecordingOffset(message.endOffsetMs),
+          durationMs: normalizeRecordingOffset(message.durationMs)
+        }
+      };
+      if (stopAdmission) {
+        if (!isRuntimeOwnedScreenRecordingStopAdmission(runtime, recording)) {
+          throw new Error("Screen recording stop-chunk admission expired.");
+        }
+        runtime.recorder.ingest(rawEvent);
+      } else if (!(await ingestRawEvent(rawEvent))) {
+        throw new Error("Screen recording chunk event was not admitted.");
+      }
+    },
+    flush: () =>
+      flushBufferedPipelineEvents(runtime, {
+        screenRecordingFinalization: stopAdmission
+      }),
+    getDurableHash: () => recording.chunks[index],
+    commitDurable: (hash) => {
+      if (runtime.screenRecording !== recording) {
+        throw new Error("Screen recording changed before its chunk became durable.");
+      }
+      recording.chunks[index] = hash;
+      recording.chunkCount = Math.max(recording.chunkCount, index + 1);
+      recording.sizeBytes += message.size;
+    }
+  });
+  const pendingWrite = task.then(
+    () => undefined,
+    () => undefined
+  );
+  recording.pendingWrites.add(pendingWrite);
+  void task.then(
+    () => recording.pendingWrites.delete(pendingWrite),
+    () => {
+      recording.pendingWrites.delete(pendingWrite);
+    }
+  );
+  const hash = await task;
+  const acknowledgement: ScreenRecordingChunkAckMessage = {
+    kind: "sw.screen-recording-chunk-ack",
+    sid: runtime.sid,
+    recordingId: recording.recordingId,
+    index,
+    size: message.size,
+    chunkId: hash
+  };
+
+  try {
+    port.postMessage(acknowledgement);
+  } catch {
+    // The offscreen delivery registry keeps the exact bytes and replays them
+    // after the resilient port binds to the next worker.
+  }
+}
+
+function isRuntimeOwnedScreenRecordingStopAdmission(
+  runtime: SessionRuntime,
+  recording: ScreenRecordingRuntime
+): boolean {
+  return (
+    runtime.screenRecording === recording &&
+    runtime.stoppedAt === undefined &&
+    isRuntimeCaptureAdmitted(runtime.activationState) &&
+    isMapEntrySame(sessionsByTab, runtime.tabId, runtime) &&
+    isMapEntrySame(sessionsBySid, runtime.sid, runtime) &&
+    (recording.stopPromise !== null ||
+      (runtime.stopRequestedAt !== undefined && !isVolatileCaptureOpen(runtime.captureFence)))
+  );
+}
+
+async function handleOffscreenScreenRecordingEnded(
+  message: OffscreenScreenRecordingEndedMessage
+): Promise<void> {
+  const runtime = sessionsBySid.get(message.sid);
+  const recording = runtime?.screenRecording;
+
+  if (!runtime || !recording || recording.recordingId !== message.result.recordingId) {
+    return;
+  }
+
+  await retryScreenRecordingFinalization({
+    maxAttempts: SCREEN_RECORDING_FINALIZATION_MAX_ATTEMPTS,
+    isCurrent: () => runtime.screenRecording === recording,
+    finalize: () => finalizeScreenRecording(runtime, message.result),
+    waitForRetry: (attempt) =>
+      wait(Math.min(SCREEN_RECORDING_FINALIZATION_RETRY_INITIAL_MS * 2 ** (attempt - 1), 2_000))
+  });
+}
+
+function handleOffscreenScreenRecordingError(message: OffscreenScreenRecordingErrorMessage): void {
+  const runtime = sessionsBySid.get(message.sid);
+  const recording = runtime?.screenRecording;
+
+  if (!runtime) {
+    return;
+  }
+
+  ingestRawEvent({
+    source: "system",
+    rawType: "screen.recording.error",
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    t: Date.now(),
+    mono: monotonicTime(),
+    payload: {
+      recordingId: message.recordingId ?? recording?.recordingId,
+      name: message.name,
+      message: message.message,
+      stage: message.stage
+    }
+  });
+}
+
+async function finalizeScreenRecording(
+  runtime: SessionRuntime,
+  result: OffscreenScreenRecordingStopResult
+): Promise<void> {
+  const recording = runtime.screenRecording;
+
+  if (!recording || recording.recordingId !== result.recordingId) {
+    return;
+  }
+
+  await recording.finalization.run(() => finalizeScreenRecordingOnce(runtime, recording, result));
+}
+
+async function finalizeScreenRecordingOnce(
+  runtime: SessionRuntime,
+  recording: ScreenRecordingRuntime,
+  result: OffscreenScreenRecordingStopResult
+): Promise<void> {
+  if (runtime.screenRecording !== recording || recording.recordingId !== result.recordingId) {
+    return;
+  }
+
+  await waitForScreenRecordingChunkWrites(recording);
+  const chunks = compactScreenRecordingChunkHashes(recording.chunks);
+  const reportedChunkCount = normalizeNonNegativeInt(result.chunkCount);
+  const reportedSize = normalizeNonNegativeInt(result.size);
+  const acknowledgedChunkCount = normalizeNonNegativeInt(result.durableChunkCount);
+  const acknowledgedSize = normalizeNonNegativeInt(result.durableSize);
+  const durabilityMismatch =
+    result.degraded === true ||
+    reportedChunkCount === null ||
+    reportedSize === null ||
+    reportedChunkCount !== chunks.length ||
+    reportedSize !== recording.sizeBytes ||
+    (acknowledgedChunkCount !== null && acknowledgedChunkCount !== chunks.length) ||
+    (acknowledgedSize !== null && acknowledgedSize !== recording.sizeBytes);
+
+  const mismatchError = durabilityMismatch
+    ? new Error(
+        `Offscreen screen recording durability mismatch: reported=${reportedChunkCount ?? "invalid"}/${reportedSize ?? "invalid"}, acknowledged=${acknowledgedChunkCount ?? "invalid"}/${acknowledgedSize ?? "invalid"}, durable=${chunks.length}/${recording.sizeBytes}.`
+      )
+    : null;
+
+  await runDurableScreenRecordingFinalization({
+    beginCompletionCheckpoint: () => {
+      recording.finalizing = true;
+    },
+    rollbackCompletionCheckpoint: () => {
+      recording.finalizing = false;
+    },
+    persistCompletionCheckpoint: () => persistRuntimeState({ required: true }),
+    writeTerminalEvidence: async () => {
+      if (
+        mismatchError &&
+        !recording.durabilityEvidenceQueued &&
+        !(await ingestRawEvent({
+          source: "system",
+          rawType: "screen.recording.error",
+          sid: runtime.sid,
+          tabId: runtime.tabId,
+          t: Date.now(),
+          mono: monotonicTime(),
+          payload: {
+            recordingId: recording.recordingId,
+            name: mismatchError.name,
+            message: mismatchError.message,
+            stage: "durability"
+          }
+        }))
+      ) {
+        throw new Error("Screen recording durability evidence was not admitted.");
+      }
+      if (mismatchError) {
+        recording.durabilityEvidenceQueued = true;
+      }
+
+      if (!recording.terminalEvidenceQueued) {
+        const ended = await ingestRawEvent({
+          source: "system",
+          rawType: "screen.recording.end",
+          sid: runtime.sid,
+          tabId: runtime.tabId,
+          t: Date.now(),
+          mono: monotonicTime(),
+          payload: {
+            recordingId: recording.recordingId,
+            mime: result.mime || recording.mime,
+            chunks,
+            chunkCount: chunks.length,
+            size: recording.sizeBytes,
+            durationMs: Math.max(0, Math.round(result.durationMs)),
+            width: result.width ?? recording.width,
+            height: result.height ?? recording.height,
+            reason: durabilityMismatch ? "screen-chunk-durability-mismatch" : result.reason
+          }
+        });
+        if (!ended) {
+          throw new Error("Screen recording terminal evidence was not admitted.");
+        }
+        recording.terminalEvidenceQueued = true;
+      }
+      await flushBufferedPipelineEvents(runtime);
+      await runtime.pipeline.flush();
+    },
+    commit: () => {
+      if (runtime.screenRecording !== recording) {
+        throw new Error("Screen recording changed before finalization committed.");
+      }
+      runtime.screenRecording = null;
+    }
+  });
+}
+
+function ingestScreenRecordingError(
+  runtime: SessionRuntime,
+  recording: ScreenRecordingRuntime | null,
+  error: unknown,
+  stage: string
+): void {
+  ingestRawEvent({
+    source: "system",
+    rawType: "screen.recording.error",
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    t: Date.now(),
+    mono: monotonicTime(),
+    payload: {
+      recordingId: recording?.recordingId,
+      name: error instanceof Error ? error.name : undefined,
+      message: error instanceof Error ? error.message : String(error),
+      stage
+    }
+  });
+}
+
+async function waitForScreenRecordingChunkWrites(recording: ScreenRecordingRuntime): Promise<void> {
+  while (recording.pendingWrites.size > 0) {
+    await Promise.allSettled([...recording.pendingWrites]);
+  }
+}
+
+function normalizeRecordingOffset(value: unknown): number | undefined {
+  const numberValue = asFiniteNumber(value);
+  return numberValue === null ? undefined : Math.max(0, Math.round(numberValue));
+}
+
+function createScreenRecordingId(sid: string): string {
+  const random =
+    typeof crypto?.randomUUID === "function"
+      ? crypto.randomUUID().replace(/-/g, "").slice(0, 12)
+      : Math.random().toString(36).slice(2, 14);
+  return `VR-${sid}-${Date.now()}-${random}`;
+}
+
+async function captureDomSnapshot(runtime: SessionRuntime, reason: string): Promise<void> {
+  const cdpScopeGeneration = claimRuntimeGlobalCdpCapture(runtime);
+
+  if (!runtime.cdpRouter || cdpScopeGeneration === null) {
+    return;
+  }
+
+  if (runtime.config.capturePolicy?.categories.dom !== "allow") {
+    return;
+  }
+
+  const snapshot = await sendCdpCommand<Record<string, unknown>>(
+    runtime,
+    { tabId: runtime.tabId },
+    "DOMSnapshot.captureSnapshot",
+    {
+      computedStyles: [],
+      includeDOMRects: false,
+      includePaintOrder: false
+    }
+  );
+
+  if (!snapshot || !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+    return;
+  }
+
+  const scopedDocuments = filterCdpSnapshotDocuments(runtime.cdpScope, snapshot.documents);
+  const scopedSnapshot = {
+    ...snapshot,
+    documents: scopedDocuments
+  };
+  const bytes = new TextEncoder().encode(JSON.stringify(scopedSnapshot));
+  const hash = await putRuntimeCaptureBlob(runtime, "application/json", bytes);
+
+  if (!hash || !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+    return;
+  }
+
+  const firstDocument = scopedDocuments[0] as Record<string, unknown> | undefined;
+  const nodes = firstDocument ? asRecord(firstDocument.nodes) : null;
+  const nodeNameArray = Array.isArray(nodes?.nodeName) ? nodes.nodeName : [];
+
+  ingestRawEvent({
+    source: "system",
+    rawType: "cdp.dom.snapshot",
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    t: Date.now(),
+    mono: monotonicTime(),
+    payload: {
+      snapshotId: `D-${Date.now()}`,
+      contentHash: hash,
+      source: "cdp",
+      nodeCount: nodeNameArray.length,
+      reason
+    }
+  });
+}
+
+async function captureStorageSnapshots(runtime: SessionRuntime, reason: string): Promise<void> {
+  const cdpScopeGeneration = claimRuntimeGlobalCdpCapture(runtime);
+
+  if (!runtime.cdpRouter || cdpScopeGeneration === null) {
+    return;
+  }
+
+  const policy = runtime.config.capturePolicy;
+
+  const cookies =
+    policy?.categories.cookies === "names-only"
+      ? await sendCdpCommand<{ cookies?: unknown[] }>(
+          runtime,
+          { tabId: runtime.tabId },
+          "Network.getCookies",
+          {
+            urls: [runtime.captureUrl]
+          }
+        )
+      : null;
+
+  if (!isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+    return;
+  }
+
+  if (cookies?.cookies) {
+    const cookieNames = cookies.cookies
+      .map((entry) => asString(asRecord(entry)?.name))
+      .filter((entry): entry is string => typeof entry === "string" && entry.length > 0)
+      .slice(0, FULL_MODE_STORAGE_SNAPSHOT_MAX_ITEMS);
+    const bytes = new TextEncoder().encode(JSON.stringify(cookieNames));
+    const hash = await putRuntimeCaptureBlob(runtime, "application/json", bytes);
+
+    if (!hash || !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+      return;
+    }
+
+    ingestRawEvent({
+      source: "system",
+      rawType: "cdp.storage.cookie.snapshot",
+      sid: runtime.sid,
+      tabId: runtime.tabId,
+      t: Date.now(),
+      mono: monotonicTime(),
+      payload: {
+        hash,
+        count: cookies.cookies.length,
+        sampledCount: cookieNames.length,
+        truncated: cookies.cookies.length > cookieNames.length,
+        redacted: true,
+        reason
+      }
+    });
+  }
+
+  const localStorageMode = resolveLocalStorageSnapshotMode(policy);
+  const localStorageData = localStorageMode
+    ? await evaluateExpression(runtime, buildLocalStorageSnapshotExpression(localStorageMode))
+    : null;
+
+  if (!isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+    return;
+  }
+
+  if (typeof localStorageData === "string") {
+    const bytes = new TextEncoder().encode(localStorageData);
+    const hash = await putRuntimeCaptureBlob(runtime, "application/json", bytes);
+
+    if (!hash || !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+      return;
+    }
+
+    const parsed = parseStorageSnapshotMeta(localStorageData);
+
+    ingestRawEvent({
+      source: "system",
+      rawType: "cdp.storage.local.snapshot",
+      sid: runtime.sid,
+      tabId: runtime.tabId,
+      t: Date.now(),
+      mono: monotonicTime(),
+      payload: {
+        hash,
+        count: parsed?.count,
+        sampledCount: parsed?.sampledCount,
+        truncated: parsed?.truncated,
+        mode: localStorageMode,
+        redacted: localStorageMode !== "allow",
+        reason
+      }
+    });
+  }
+
+  const origin =
+    policy?.categories.indexedDb === "names-only"
+      ? await evaluateExpression(runtime, "location.origin")
+      : null;
+
+  if (!isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+    return;
+  }
+
+  if (typeof origin === "string") {
+    const dbNames = await sendCdpCommand<{ databaseNames?: string[] }>(
+      runtime,
+      { tabId: runtime.tabId },
+      "IndexedDB.requestDatabaseNames",
+      {
+        securityOrigin: origin
+      }
+    );
+
+    if (!isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+      return;
+    }
+
+    if (dbNames?.databaseNames) {
+      const bytes = new TextEncoder().encode(JSON.stringify(dbNames.databaseNames));
+      const hash = await putRuntimeCaptureBlob(runtime, "application/json", bytes);
+
+      if (!hash || !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+        return;
+      }
+
+      ingestRawEvent({
+        source: "system",
+        rawType: "cdp.storage.idb.snapshot",
+        sid: runtime.sid,
         tabId: runtime.tabId,
         t: Date.now(),
         mono: monotonicTime(),
@@ -3132,1776 +8306,4545 @@ async function captureStorageSnapshots(runtime: SessionRuntime, reason: string):
           mode: "schema-only",
           reason
         }
-      });
+      });
+    }
+  }
+}
+
+function resolveLocalStorageSnapshotMode(
+  policy: CapturePolicy | undefined
+): LocalStorageSnapshotMode | null {
+  if (policy?.categories.storage === "allow" || policy?.categories.storage === "lengths-only") {
+    return policy.categories.storage;
+  }
+
+  return null;
+}
+
+async function captureTraceMetrics(
+  runtime: SessionRuntime,
+  reason: string,
+  additionalCurrent: () => boolean = () => true
+): Promise<void> {
+  const cdpScopeGeneration = claimRuntimeGlobalCdpCapture(runtime);
+
+  if (!additionalCurrent() || !runtime.cdpRouter || cdpScopeGeneration === null) {
+    return;
+  }
+
+  if (runtime.config.capturePolicy?.categories.cdp !== "full") {
+    return;
+  }
+
+  const metrics = await sendCdpCommand<Record<string, unknown>>(
+    runtime,
+    { tabId: runtime.tabId },
+    "Performance.getMetrics"
+  );
+
+  if (
+    !metrics ||
+    !additionalCurrent() ||
+    !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)
+  ) {
+    return;
+  }
+
+  const bytes = new TextEncoder().encode(JSON.stringify(metrics));
+  const hash = await putRuntimeCaptureBlob(runtime, "application/json", bytes);
+
+  if (
+    !hash ||
+    !additionalCurrent() ||
+    !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)
+  ) {
+    return;
+  }
+
+  ingestRawEvent({
+    source: "system",
+    rawType: "cdp.perf.trace",
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    t: Date.now(),
+    mono: monotonicTime(),
+    payload: {
+      traceHash: hash,
+      durationMs: 0,
+      mode: "reportEvents",
+      categories: "metrics",
+      reason
+    }
+  });
+}
+
+async function captureAdvancedProfiles(runtime: SessionRuntime, reason: string): Promise<void> {
+  await Promise.allSettled([
+    captureCpuProfile(runtime, reason),
+    captureHeapSnapshot(runtime, reason)
+  ]);
+}
+
+async function captureCpuProfile(runtime: SessionRuntime, reason: string): Promise<void> {
+  const cdpScopeGeneration = claimRuntimeGlobalCdpCapture(runtime);
+
+  if (!runtime.cdpRouter || cdpScopeGeneration === null) {
+    return;
+  }
+
+  if (runtime.config.capturePolicy?.categories.cdp !== "full") {
+    return;
+  }
+
+  await sendCdpCommand(runtime, { tabId: runtime.tabId }, "Profiler.enable");
+
+  try {
+    const started = await sendCdpCommandOutcome(
+      runtime,
+      { tabId: runtime.tabId },
+      "Profiler.start"
+    );
+
+    if (!started.ok) {
+      return;
+    }
+
+    await wait(CPU_PROFILE_SAMPLE_MS);
+
+    const profileResult = await sendCdpCommand<{ profile?: unknown }>(
+      runtime,
+      { tabId: runtime.tabId },
+      "Profiler.stop"
+    );
+
+    if (
+      !profileResult?.profile ||
+      !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)
+    ) {
+      return;
+    }
+
+    const bytes = new TextEncoder().encode(JSON.stringify(profileResult.profile));
+    const hash = await putRuntimeCaptureBlob(runtime, "application/json", bytes);
+
+    if (!hash || !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+      return;
+    }
+
+    ingestRawEvent({
+      source: "system",
+      rawType: "cdp.perf.cpu.profile",
+      sid: runtime.sid,
+      tabId: runtime.tabId,
+      t: Date.now(),
+      mono: monotonicTime(),
+      payload: {
+        profileHash: hash,
+        sampleMs: CPU_PROFILE_SAMPLE_MS,
+        size: bytes.byteLength,
+        reason
+      }
+    });
+  } finally {
+    await sendCdpCommand(runtime, { tabId: runtime.tabId }, "Profiler.disable");
+  }
+}
+
+async function captureHeapSnapshot(runtime: SessionRuntime, reason: string): Promise<void> {
+  const cdpScopeGeneration = claimRuntimeGlobalCdpCapture(runtime);
+
+  if (!runtime.cdpRouter || cdpScopeGeneration === null) {
+    return;
+  }
+
+  if (
+    runtime.config.capturePolicy?.mode !== "lab" ||
+    runtime.config.capturePolicy.categories.heapProfiles !== "lab-only"
+  ) {
+    return;
+  }
+
+  runtime.heapSnapshotCapture = {
+    cdpScopeGeneration,
+    chunks: [],
+    bytes: 0,
+    truncated: false
+  };
+
+  await sendCdpCommand(runtime, { tabId: runtime.tabId }, "HeapProfiler.enable");
+
+  const completed = await sendCdpCommandOutcome(
+    runtime,
+    { tabId: runtime.tabId },
+    "HeapProfiler.takeHeapSnapshot",
+    {
+      reportProgress: false,
+      captureNumericValue: true
+    },
+    CDP_HEAP_SNAPSHOT_TIMEOUT_MS
+  );
+
+  const snapshot = runtime.heapSnapshotCapture;
+  runtime.heapSnapshotCapture = null;
+
+  if (
+    !completed.ok ||
+    !snapshot ||
+    snapshot.chunks.length === 0 ||
+    !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)
+  ) {
+    await sendCdpCommand(runtime, { tabId: runtime.tabId }, "HeapProfiler.disable");
+    return;
+  }
+
+  const joined = snapshot.chunks.join("");
+  const bytes = new TextEncoder().encode(joined);
+  const hash = await putRuntimeCaptureBlob(runtime, "application/json", bytes);
+
+  if (!hash || !isRuntimeGlobalCdpCaptureClaimValid(runtime, cdpScopeGeneration)) {
+    await sendCdpCommand(runtime, { tabId: runtime.tabId }, "HeapProfiler.disable");
+    return;
+  }
+
+  ingestRawEvent({
+    source: "system",
+    rawType: "cdp.perf.heap.snapshot",
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    t: Date.now(),
+    mono: monotonicTime(),
+    payload: {
+      snapshotHash: hash,
+      size: bytes.byteLength,
+      chunkCount: snapshot.chunks.length,
+      truncated: snapshot.truncated,
+      reason
+    }
+  });
+
+  await sendCdpCommand(runtime, { tabId: runtime.tabId }, "HeapProfiler.disable");
+}
+
+function shouldCaptureAdvancedProfiles(reason: string): boolean {
+  return reason === "manual";
+}
+
+function wait(durationMs: number): Promise<void> {
+  return new Promise((resolve) => {
+    setTimeout(resolve, durationMs);
+  });
+}
+
+async function sendCdpCommand<TResult = unknown>(
+  runtime: SessionRuntime,
+  target: { tabId: number; sessionId?: string },
+  method: string,
+  params?: Record<string, unknown>,
+  timeoutMs = CDP_ARTIFACT_TIMEOUT_MS
+): Promise<TResult | undefined> {
+  const outcome = await sendCdpCommandOutcome<TResult>(runtime, target, method, params, timeoutMs);
+  return outcome.ok ? outcome.value : undefined;
+}
+
+async function sendCdpCommandOutcome<TResult = unknown>(
+  runtime: SessionRuntime,
+  target: { tabId: number; sessionId?: string },
+  method: string,
+  params?: Record<string, unknown>,
+  timeoutMs = CDP_ARTIFACT_TIMEOUT_MS
+): Promise<CdpCommandOutcome<TResult>> {
+  if (!runtime.cdpRouter || !isRuntimeCaptureScopeActive(runtime)) {
+    return { ok: false };
+  }
+
+  return withCdpCommandTimeout(runtime.cdpRouter.send<TResult>(target, method, params), timeoutMs);
+}
+
+async function evaluateExpression(runtime: SessionRuntime, expression: string): Promise<unknown> {
+  if (!runtime.cdpRouter) {
+    return undefined;
+  }
+
+  const result = await sendCdpCommand<{
+    result?: {
+      value?: unknown;
+    };
+  }>(runtime, { tabId: runtime.tabId }, "Runtime.evaluate", {
+    expression,
+    returnByValue: true,
+    awaitPromise: true
+  });
+
+  return result?.result?.value;
+}
+
+function decodeBase64(value: string): Uint8Array {
+  if (typeof atob !== "function") {
+    return new TextEncoder().encode(value);
+  }
+
+  const binary = atob(value);
+  const bytes = new Uint8Array(binary.length);
+
+  for (let index = 0; index < binary.length; index += 1) {
+    bytes[index] = binary.charCodeAt(index);
+  }
+
+  return bytes;
+}
+
+function decodeDataUrl(dataUrl: string): { mime: string; bytes: Uint8Array } | null {
+  if (!dataUrl.startsWith("data:")) {
+    return null;
+  }
+
+  const commaIndex = dataUrl.indexOf(",");
+
+  if (commaIndex <= 5) {
+    return null;
+  }
+
+  const header = dataUrl.slice(5, commaIndex);
+  const encoded = dataUrl.slice(commaIndex + 1);
+  const segments = header.split(";");
+  const mime = segments[0] && segments[0].length > 0 ? segments[0] : "application/octet-stream";
+  const isBase64 = segments.includes("base64");
+
+  try {
+    if (isBase64) {
+      return {
+        mime,
+        bytes: decodeBase64(encoded)
+      };
+    }
+
+    return {
+      mime,
+      bytes: new TextEncoder().encode(decodeURIComponent(encoded))
+    };
+  } catch {
+    return null;
+  }
+}
+
+function resolveLiteBodyCaptureRule(
+  runtime: SessionRuntime,
+  url: string,
+  mimeType: string | undefined
+): LiteBodyCaptureRule {
+  return resolveLiteBodyCaptureRuleUtil(runtime.config, url, mimeType, {
+    defaultMimeAllowlist: LITE_DEFAULT_BODY_MIME_ALLOWLIST,
+    fallbackMaxBytes: NETWORK_BODY_MAX_BYTES
+  });
+}
+
+function resolveFullBodyCaptureRule(
+  runtime: SessionRuntime,
+  url: string,
+  mimeType: string | undefined
+): LiteBodyCaptureRule {
+  return resolveFullBodyCaptureRuleUtil(runtime.config, url, mimeType, {
+    defaultMimeAllowlist: LITE_DEFAULT_BODY_MIME_ALLOWLIST,
+    fallbackMaxBytes: NETWORK_BODY_MAX_BYTES
+  });
+}
+
+function isMimeAllowed(allowlist: string[], mimeType: string | undefined): boolean {
+  return isMimeAllowedUtil(allowlist, mimeType);
+}
+
+function normalizeMimeType(value: string | null): string | undefined {
+  return normalizeMimeTypeUtil(value);
+}
+
+function normalizeFullModePayload(
+  method: string,
+  params: unknown,
+  networkPolicy: CapturePolicy["categories"]["network"] | undefined
+): unknown {
+  const payload = asRecord(params);
+
+  if (!payload) {
+    return params;
+  }
+
+  if (method === "Network.webSocketFrameReceived" || method === "Network.webSocketFrameSent") {
+    return normalizeWebSocketFramePayload(method, payload, networkPolicy);
+  }
+
+  return payload;
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  return value !== null && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function asFiniteNumber(value: unknown): number | null {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+
+function asUint8Array(value: unknown): Uint8Array | null {
+  if (value instanceof Uint8Array) {
+    return value;
+  }
+
+  if (value instanceof ArrayBuffer) {
+    return new Uint8Array(value);
+  }
+
+  if (ArrayBuffer.isView(value)) {
+    return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+  }
+
+  if (Array.isArray(value)) {
+    return Uint8Array.from(value, (entry) =>
+      typeof entry === "number" && Number.isFinite(entry) ? entry & 0xff : 0
+    );
+  }
+
+  const record = asRecord(value);
+
+  if (!record) {
+    return null;
+  }
+
+  const numericKeys = Object.keys(record)
+    .filter((key) => /^\d+$/.test(key))
+    .map((key) => Number(key))
+    .sort((left, right) => left - right);
+
+  if (numericKeys.length === 0) {
+    return null;
+  }
+
+  const maxIndex = numericKeys[numericKeys.length - 1];
+
+  if (typeof maxIndex !== "number" || !Number.isFinite(maxIndex)) {
+    return null;
+  }
+
+  const bytes = new Uint8Array(maxIndex + 1);
+
+  for (const index of numericKeys) {
+    const byte = record[String(index)];
+
+    if (typeof byte !== "number" || !Number.isFinite(byte)) {
+      return null;
+    }
+
+    bytes[index] = byte & 0xff;
+  }
+
+  return bytes;
+}
+
+function normalizeContentFrameId(value: unknown): string | undefined {
+  const candidate = asFiniteNumber(value);
+
+  if (candidate === null) {
+    return undefined;
+  }
+
+  const frameId = Math.max(0, Math.floor(candidate));
+
+  if (frameId <= 0) {
+    return undefined;
+  }
+
+  return `content-frame-${frameId}`;
+}
+
+function normalizeSenderFrameId(sender: MessageSenderLike | undefined): number {
+  const candidate = asFiniteNumber(sender?.frameId);
+
+  if (candidate === null) {
+    return sender?.frameId === undefined ? 0 : -1;
+  }
+
+  return candidate >= 0 ? Math.floor(candidate) : -1;
+}
+
+function authorizeContentSender(
+  runtime: SessionRuntime,
+  sender: MessageSenderLike | undefined,
+  documentUrl?: string,
+  ready = false
+): boolean {
+  if (!isVolatileCaptureOpen(runtime.captureFence)) {
+    return false;
+  }
+
+  const tabId = sender?.tab?.id;
+  const frameId = normalizeSenderFrameId(sender);
+
+  if (typeof tabId !== "number" || tabId !== runtime.tabId || frameId < 0) {
+    return false;
+  }
+
+  const documentId = sender?.documentId;
+
+  if (typeof documentId !== "string" || documentId.length === 0) {
+    return false;
+  }
+
+  const senderUrl =
+    typeof documentUrl === "string" && documentUrl.length > 0
+      ? documentUrl
+      : typeof sender?.url === "string" && sender.url.length > 0
+        ? sender.url
+        : null;
+  const decision = evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+    url: senderUrl,
+    tabId,
+    frameId
+  });
+
+  if (!decision.allowed) {
+    return false;
+  }
+
+  if (!senderUrl) {
+    return false;
+  }
+
+  const authorizationInput = {
+    tabId,
+    frameId,
+    documentId,
+    url: senderUrl
+  };
+  const authorized =
+    frameId === 0
+      ? runtime.contentDocuments.authorizeTopSender(authorizationInput, {
+          allowNavigationFallback: !usesExactContentTopDocumentAuthorization(runtime),
+          currentCaptureUrl: runtime.captureUrl,
+          ready
+        })
+      : ready
+        ? runtime.contentDocuments.authorize(authorizationInput)
+        : runtime.contentDocuments.authorizeEvent(authorizationInput);
+
+  if (!authorized) {
+    return false;
+  }
+
+  if (
+    shouldContentSenderClaimCaptureUrl({
+      frameId,
+      senderUrl,
+      currentCaptureUrl: runtime.captureUrl,
+      usesExactTopDocumentAuthorization: usesExactContentTopDocumentAuthorization(runtime)
+    })
+  ) {
+    runtime.captureUrl = senderUrl;
+    runtime.cdpScope.captureUrl = senderUrl;
+    runtime.url = sanitizeUrlForPrivacy(senderUrl);
+  }
+
+  syncAuthorizedContentFrames(runtime);
+  return true;
+}
+
+function shouldStopRuntimeForDeniedContentSender(
+  runtime: SessionRuntime,
+  sender: MessageSenderLike | undefined
+): boolean {
+  return runtime.contentDocuments.shouldStopRuntimeForDeniedSender({
+    frameId: normalizeSenderFrameId(sender),
+    documentId: sender?.documentId
+  });
+}
+
+async function authorizeContentSenderForReady(
+  runtime: SessionRuntime,
+  sender: MessageSenderLike | undefined,
+  documentUrl?: string
+): Promise<boolean> {
+  if (!authorizeContentSender(runtime, sender, documentUrl, true)) {
+    const frameId = normalizeSenderFrameId(sender);
+    const senderUrl =
+      typeof documentUrl === "string" && documentUrl.length > 0
+        ? documentUrl
+        : typeof sender?.url === "string" && sender.url.length > 0
+          ? sender.url
+          : null;
+    const preparing =
+      typeof sender?.tab?.id === "number" &&
+      frameId >= 0 &&
+      typeof sender.documentId === "string" &&
+      senderUrl
+        ? runtime.contentDocuments.waitForPreparingAuthorization({
+            tabId: sender.tab.id,
+            frameId,
+            documentId: sender.documentId,
+            url: senderUrl
+          })
+        : null;
+
+    if (
+      !(
+        preparing &&
+        (await preparing) &&
+        isRuntimeCurrentCaptureOpen(runtime) &&
+        authorizeContentSender(runtime, sender, documentUrl, true)
+      )
+    ) {
+      return false;
+    }
+  }
+
+  return true;
+}
+
+function failContentSender(
+  runtime: SessionRuntime,
+  sender: MessageSenderLike | undefined
+): boolean {
+  const frameId = normalizeSenderFrameId(sender);
+  const documentId = sender?.documentId;
+
+  if (frameId < 0 || typeof documentId !== "string" || documentId.length === 0) {
+    return false;
+  }
+
+  void revokeContentFrameActivations(runtime, frameId, "document-failed", documentId);
+  runtime.contentMainWorldProofs.delete(contentActivationParentKey(frameId, documentId));
+  const navigationFailed = runtime.contentDocuments.failNavigation(frameId, documentId);
+  const activeRevoked =
+    frameId === 0
+      ? runtime.contentDocuments.revoke(frameId, documentId)
+      : runtime.contentDocuments.blockDocument(frameId, documentId);
+  syncAuthorizedContentFrames(runtime);
+  return navigationFailed || activeRevoked;
+}
+
+function syncAuthorizedContentFrames(runtime: SessionRuntime): void {
+  runtime.authorizedContentFrames.clear();
+
+  for (const frameId of runtime.contentDocuments.activeFrameIds()) {
+    runtime.authorizedContentFrames.add(frameId);
+  }
+}
+
+async function deactivateDeniedContentFrame(
+  runtime: SessionRuntime,
+  sender: MessageSenderLike | undefined
+): Promise<void> {
+  if (shouldStopRuntimeForDeniedContentSender(runtime, sender)) {
+    await stopRuntimeIfCurrent(runtime);
+    return;
+  }
+
+  const frameId = normalizeSenderFrameId(sender);
+
+  if (frameId < 0) {
+    return;
+  }
+
+  failContentSender(runtime, sender);
+}
+
+function resetAuthorizedContentFrames(
+  runtime: SessionRuntime,
+  topDocumentUrl = runtime.captureUrl
+): void {
+  revokeRuntimeContent(runtime, "authorization-reset");
+  runtime.contentActivationParents.clear();
+  runtime.contentMainWorldProofs.clear();
+  runtime.contentNavigationRevisions.clear();
+  runtime.pendingContentPolicyRevisions.clear();
+  runtime.pendingLiteNetworkPolicyRevisions.clear();
+  runtime.sameDocumentTransitions.clear();
+  runtime.contentDocuments.reset({ url: topDocumentUrl });
+  syncAuthorizedContentFrames(runtime);
+}
+
+function usesExactLiteTopDocumentAuthorization(runtime: SessionRuntime): boolean {
+  try {
+    return canUseExactLiteTopDocumentAuthorization({
+      mode: runtime.mode,
+      permissions: chromeApi?.runtime?.getManifest?.().permissions,
+      hasWebNavigationApi: typeof chromeApi?.webNavigation?.onCommitted?.addListener === "function",
+      hasSameDocumentNavigationApi:
+        typeof chromeApi?.webNavigation?.onHistoryStateUpdated?.addListener === "function" &&
+        typeof chromeApi?.webNavigation?.onReferenceFragmentUpdated?.addListener === "function",
+      hasScriptingApi: typeof chromeApi?.scripting?.executeScript === "function"
+    });
+  } catch {
+    return false;
+  }
+}
+
+function hasExactWebNavigationTracking(): boolean {
+  const permissions = chromeApi?.runtime?.getManifest?.().permissions;
+  return (
+    Array.isArray(permissions) &&
+    permissions.includes("webNavigation") &&
+    typeof chromeApi?.webNavigation?.onCommitted?.addListener === "function" &&
+    typeof chromeApi?.webNavigation?.onHistoryStateUpdated?.addListener === "function" &&
+    typeof chromeApi?.webNavigation?.onReferenceFragmentUpdated?.addListener === "function" &&
+    typeof chromeApi?.scripting?.executeScript === "function"
+  );
+}
+
+function usesExactContentTopDocumentAuthorization(runtime: SessionRuntime): boolean {
+  return runtime.mode === "full"
+    ? hasExactWebNavigationTracking()
+    : usesExactLiteTopDocumentAuthorization(runtime);
+}
+
+function asString(value: unknown): string | null {
+  return typeof value === "string" ? value : null;
+}
+
+function normalizePositiveInt(value: unknown): number | undefined {
+  const candidate = asFiniteNumber(value);
+
+  if (candidate === null || candidate <= 0) {
+    return undefined;
+  }
+
+  return Math.max(1, Math.round(candidate));
+}
+
+function normalizeNonNegativeInt(value: unknown): number | undefined {
+  const candidate = asFiniteNumber(value);
+
+  if (candidate === null || candidate < 0) {
+    return undefined;
+  }
+
+  return Math.max(0, Math.round(candidate));
+}
+
+function asStringArray(value: unknown, limit: number): string[] {
+  if (!Array.isArray(value)) {
+    return [];
+  }
+
+  const output: string[] = [];
+
+  for (const entry of value) {
+    if (typeof entry !== "string" || entry.length === 0) {
+      continue;
+    }
+
+    output.push(entry);
+
+    if (output.length >= limit) {
+      break;
+    }
+  }
+
+  return output;
+}
+
+function encodeTextWithByteLimit(
+  value: string,
+  maxBytes: number
+): { bytes: Uint8Array; truncated: boolean } {
+  const encoder = new TextEncoder();
+  const fullBytes = encoder.encode(value);
+
+  if (fullBytes.byteLength <= maxBytes) {
+    return {
+      bytes: fullBytes,
+      truncated: false
+    };
+  }
+
+  const roughRatio = Math.max(0.05, maxBytes / fullBytes.byteLength);
+  let targetChars = Math.max(1, Math.floor(value.length * roughRatio));
+  let clipped = value.slice(0, targetChars);
+  let clippedBytes = encoder.encode(clipped);
+
+  while (clippedBytes.byteLength > maxBytes && targetChars > 1) {
+    targetChars = Math.max(1, Math.floor(targetChars * 0.9));
+    clipped = value.slice(0, targetChars);
+    clippedBytes = encoder.encode(clipped);
+  }
+
+  return {
+    bytes: clippedBytes,
+    truncated: true
+  };
+}
+
+function normalizeScreenshotViewport(
+  value: unknown
+): { width: number; height: number; dpr: number } | undefined {
+  const row = asRecord(value);
+
+  if (!row) {
+    return undefined;
+  }
+
+  const width = normalizePositiveInt(row.width);
+  const height = normalizePositiveInt(row.height);
+  const dpr = asFiniteNumber(row.dpr);
+
+  if (!width || !height || dpr === null || dpr <= 0) {
+    return undefined;
+  }
+
+  return {
+    width,
+    height,
+    dpr: Number(dpr.toFixed(3))
+  };
+}
+
+function normalizeScreenshotPointer(
+  value: unknown
+): { x: number; y: number; t?: number; mono?: number } | undefined {
+  const row = asRecord(value);
+
+  if (!row) {
+    return undefined;
+  }
+
+  const x = asFiniteNumber(row.x);
+  const y = asFiniteNumber(row.y);
+  const t = asFiniteNumber(row.t);
+  const mono = asFiniteNumber(row.mono);
+
+  if (x === null || y === null) {
+    return undefined;
+  }
+
+  return {
+    x: Number(x.toFixed(2)),
+    y: Number(y.toFixed(2)),
+    t: t === null ? undefined : t,
+    mono: mono === null ? undefined : mono
+  };
+}
+
+function normalizeSamplingInterval(candidate: unknown, fallback: number): number {
+  const value = asFiniteNumber(candidate);
+
+  if (value === null) {
+    return fallback;
+  }
+
+  return Math.max(250, Math.round(value));
+}
+
+function normalizeOptionalSamplingInterval(candidate: unknown, fallback: number): number {
+  const value = asFiniteNumber(candidate);
+
+  if (value === null) {
+    return fallback;
+  }
+
+  if (value <= 0) {
+    return 0;
+  }
+
+  return Math.max(250, Math.round(value));
+}
+
+function resolveExportPolicy(value: unknown): ExportPolicy {
+  const row = asRecord(value);
+  const includeScreenshots =
+    typeof row?.includeScreenshots === "boolean"
+      ? row.includeScreenshots
+      : DEFAULT_EXPORT_POLICY.includeScreenshots;
+  const includeScreenRecordings =
+    typeof row?.includeScreenRecordings === "boolean"
+      ? row.includeScreenRecordings
+      : DEFAULT_EXPORT_POLICY.includeScreenRecordings;
+
+  return {
+    includeScreenshots,
+    includeScreenRecordings,
+    maxArchiveBytes: normalizeExportBoundedInt(
+      row?.maxArchiveBytes,
+      DEFAULT_EXPORT_POLICY.maxArchiveBytes,
+      64 * 1024,
+      5 * 1024 * 1024 * 1024
+    ),
+    recentWindowMs: normalizeExportBoundedInt(
+      row?.recentWindowMs,
+      DEFAULT_EXPORT_POLICY.recentWindowMs,
+      1 * 60 * 1000,
+      30 * 24 * 60 * 60 * 1000
+    )
+  };
+}
+
+function normalizeExportBoundedInt(
+  candidate: unknown,
+  fallback: number,
+  min: number,
+  max: number
+): number {
+  const value = asFiniteNumber(candidate);
+
+  if (value === null || value <= 0) {
+    return fallback;
+  }
+
+  return Math.min(max, Math.max(min, Math.round(value)));
+}
+
+function toStatusSampling(runtime: SessionRuntime): RecordingSampling {
+  const sampling = runtime.config.sampling;
+
+  return {
+    mousemoveHz: Math.max(1, Math.round(asFiniteNumber(sampling.mousemoveHz) ?? 20)),
+    scrollHz: Math.max(1, Math.round(asFiniteNumber(sampling.scrollHz) ?? 15)),
+    domFlushMs: normalizeSamplingInterval(sampling.domFlushMs, 100),
+    snapshotIntervalMs: normalizeSamplingInterval(sampling.snapshotIntervalMs, 20_000),
+    screenshotIdleMs: normalizeOptionalSamplingInterval(
+      sampling.screenshotIdleMs,
+      DEFAULT_RECORDER_CONFIG.sampling.screenshotIdleMs
+    ),
+    bodyCaptureMaxBytes:
+      runtime.config.capturePolicy?.categories.network === "body-allowlist"
+        ? normalizeBodyCaptureMaxBytesUtil(sampling.bodyCaptureMaxBytes, 0)
+        : 0
+  };
+}
+
+function normalizePipelineDeliveryReceipt(
+  raw: unknown,
+  query: PipelineDeliveryReceiptQuery
+): PipelineDeliveryReceipt | undefined {
+  if (raw === undefined) {
+    return undefined;
+  }
+
+  const row = asRecord(raw);
+  if (
+    !row ||
+    Object.keys(row).length !== 8 ||
+    row.tabId !== query.tabId ||
+    row.frameId !== query.frameId ||
+    row.documentId !== query.documentId ||
+    row.batchId !== query.batchId ||
+    typeof row.fingerprint !== "string" ||
+    !/^[a-f0-9]{64}$/.test(row.fingerprint) ||
+    !Number.isSafeInteger(row.eventCount) ||
+    (row.eventCount as number) <= 0 ||
+    (row.eventCount as number) > CONTENT_EVENT_BATCH_MAX ||
+    !Array.isArray(row.indexes) ||
+    row.indexes.length > (row.eventCount as number) ||
+    typeof row.complete !== "boolean"
+  ) {
+    throw new Error("Invalid offscreen pipeline delivery receipt.");
+  }
+
+  const indexes: PipelineDeliveryReceipt["indexes"] = [];
+  const seen = new Set<number>();
+  for (const candidate of row.indexes) {
+    const index = asRecord(candidate);
+    if (
+      !index ||
+      !Number.isSafeInteger(index.eventIndex) ||
+      (index.eventIndex as number) < 0 ||
+      (index.eventIndex as number) >= (row.eventCount as number) ||
+      seen.has(index.eventIndex as number)
+    ) {
+      throw new Error("Invalid offscreen pipeline delivery receipt index.");
+    }
+    seen.add(index.eventIndex as number);
+
+    if (index.outcome === "no-output" && Object.keys(index).length === 2) {
+      indexes.push({ eventIndex: index.eventIndex as number, outcome: "no-output" });
+      continue;
+    }
+    if (
+      index.outcome === "event" &&
+      Object.keys(index).length === 3 &&
+      typeof index.eventId === "string" &&
+      /^E-[0-9]{1,16}$/.test(index.eventId)
+    ) {
+      indexes.push({
+        eventIndex: index.eventIndex as number,
+        outcome: "event",
+        eventId: index.eventId
+      });
+      continue;
+    }
+    throw new Error("Invalid offscreen pipeline delivery receipt outcome.");
+  }
+  indexes.sort((left, right) => left.eventIndex - right.eventIndex);
+  if (row.complete !== (indexes.length === row.eventCount)) {
+    throw new Error("Offscreen pipeline delivery receipt completion is inconsistent.");
+  }
+
+  return {
+    tabId: query.tabId,
+    frameId: query.frameId,
+    documentId: query.documentId,
+    batchId: query.batchId,
+    fingerprint: row.fingerprint,
+    eventCount: row.eventCount as number,
+    indexes,
+    complete: row.complete
+  };
+}
+
+function normalizePipelineResumeState(raw: unknown): PipelineResumeState {
+  const row = asRecord(raw);
+  const sequence = asRecord(row?.sequenceWatermark);
+  const event = sequence?.event;
+  const action = sequence?.action;
+
+  if (
+    !row ||
+    Object.keys(row).length !== 2 ||
+    !sequence ||
+    Object.keys(sequence).length !== 2 ||
+    !Number.isSafeInteger(event) ||
+    (event as number) < 0 ||
+    !Number.isSafeInteger(action) ||
+    (action as number) < 0 ||
+    !Array.isArray(row.screenRecordings) ||
+    row.screenRecordings.length > 32
+  ) {
+    throw new Error("Invalid offscreen pipeline resume state.");
+  }
+
+  const screenRecordings: PipelineResumeState["screenRecordings"] = [];
+  const recordingIds = new Set<string>();
+  let totalChunks = 0;
+
+  for (const candidate of row.screenRecordings) {
+    const recording = asRecord(candidate);
+
+    if (
+      !recording ||
+      Object.keys(recording).length !== 2 ||
+      typeof recording.recordingId !== "string" ||
+      recording.recordingId.length === 0 ||
+      recording.recordingId.length > 256 ||
+      recordingIds.has(recording.recordingId) ||
+      !Array.isArray(recording.chunks)
+    ) {
+      throw new Error("Invalid offscreen screen-recording resume state.");
+    }
+
+    recordingIds.add(recording.recordingId);
+    totalChunks += recording.chunks.length;
+
+    if (totalChunks > PIPELINE_RESUME_MAX_SCREEN_CHUNKS) {
+      throw new Error("Offscreen screen-recording resume state is too large.");
+    }
+
+    const chunks: ScreenRecordingChunkReference[] = [];
+    const indexes = new Set<number>();
+
+    for (const chunkCandidate of recording.chunks) {
+      const chunk = asRecord(chunkCandidate);
+      const index = chunk?.index;
+      const hash = chunk?.hash;
+      const size = chunk?.size;
+      const chunkKeys = chunk ? Object.keys(chunk) : [];
+
+      if (
+        !chunk ||
+        (chunkKeys.length !== 2 && chunkKeys.length !== 3) ||
+        (chunkKeys.length === 3 && (!chunkKeys.includes("size") || size === undefined)) ||
+        !Number.isSafeInteger(index) ||
+        (index as number) < 0 ||
+        (index as number) >= PIPELINE_RESUME_MAX_SCREEN_CHUNKS ||
+        indexes.has(index as number) ||
+        typeof hash !== "string" ||
+        !/^[a-f0-9]{64}$/u.test(hash) ||
+        (size !== undefined && (!Number.isSafeInteger(size) || (size as number) < 0))
+      ) {
+        throw new Error("Invalid offscreen screen-recording chunk reference.");
+      }
+
+      indexes.add(index as number);
+      chunks.push({
+        index: index as number,
+        hash,
+        ...(size === undefined ? {} : { size: size as number })
+      });
+    }
+
+    screenRecordings.push({
+      recordingId: recording.recordingId,
+      chunks: chunks.sort((left, right) => left.index - right.index)
+    });
+  }
+
+  return {
+    sequenceWatermark: {
+      event: event as number,
+      action: action as number
+    },
+    screenRecordings
+  };
+}
+
+function normalizePipelineExportDownloadResult(raw: unknown): PipelineExportDownloadResult {
+  const row = asRecord(raw);
+
+  if (!row) {
+    throw new Error("Invalid offscreen export payload.");
+  }
+
+  const fileName =
+    typeof row.fileName === "string" && row.fileName.length > 0
+      ? row.fileName
+      : "session.webblackbox";
+
+  const sizeBytes = asFiniteNumber(row.sizeBytes);
+  const downloadUrl =
+    typeof row.downloadUrl === "string" && row.downloadUrl.length > 0 ? row.downloadUrl : null;
+
+  if (sizeBytes === null || sizeBytes <= 0) {
+    throw new Error("Offscreen export payload did not include valid archive size.");
+  }
+
+  if (!downloadUrl) {
+    throw new Error("Offscreen export payload did not include download URL.");
+  }
+
+  return {
+    fileName,
+    sizeBytes: Math.round(sizeBytes),
+    downloadUrl,
+    downloadId: asFiniteNumber(row.downloadId) ?? undefined,
+    integrity: normalizeHashesManifest(row.integrity),
+    privacyScanner: normalizePrivacyScannerResult(row.privacyScanner)
+  };
+}
+
+function normalizePrivacyScannerResult(raw: unknown): PrivacyScannerResult | undefined {
+  const row = asRecord(raw);
+
+  if (!row) {
+    return undefined;
+  }
+
+  const status = row.status === "blocked" ? "blocked" : row.status === "passed" ? "passed" : null;
+  const scannedAt = typeof row.scannedAt === "string" ? row.scannedAt : new Date().toISOString();
+  const preEncryption = row.preEncryption === true;
+  const findings = Array.isArray(row.findings)
+    ? row.findings.map(normalizePrivacyScannerFinding).filter((finding) => finding !== null)
+    : [];
+
+  if (!status) {
+    return undefined;
+  }
+
+  return {
+    scannedAt,
+    preEncryption,
+    status,
+    findings
+  };
+}
+
+function normalizePrivacyScannerFinding(raw: unknown): PrivacyScannerFinding | null {
+  const row = asRecord(raw);
+
+  if (!row) {
+    return null;
+  }
+
+  const kind = normalizePrivacyScannerFindingKind(row.kind);
+  const path = typeof row.path === "string" && row.path.length > 0 ? row.path : null;
+  const matchCount = asFiniteNumber(row.matchCount);
+  const sampleSha256 =
+    typeof row.sampleSha256 === "string" && /^[a-f0-9]{64}$/u.test(row.sampleSha256)
+      ? row.sampleSha256
+      : "0".repeat(64);
+
+  if (!kind || !path || matchCount === null || matchCount <= 0) {
+    return null;
+  }
+
+  return {
+    kind,
+    severity: "high",
+    path,
+    matchCount: Math.round(matchCount),
+    sampleSha256
+  };
+}
+
+function normalizePrivacyScannerFindingKind(raw: unknown): PrivacyScannerFindingKind | null {
+  if (typeof raw !== "string") {
+    return null;
+  }
+
+  switch (raw) {
+    case "jwt":
+    case "bearer-token":
+    case "api-key":
+    case "oauth-code":
+    case "session-cookie":
+    case "email":
+    case "phone":
+    case "credit-card":
+    case "ssn":
+    case "private-key":
+    case "long-secret":
+      return raw;
+    default:
+      return null;
+  }
+}
+
+function buildExportPrivacyWarning(
+  scanner: PrivacyScannerResult | undefined
+): ExportPrivacyWarning | undefined {
+  if (scanner?.status !== "blocked" || scanner.findings.length === 0) {
+    return undefined;
+  }
+
+  const findings = scanner.findings.slice(0, 8).map((finding) => ({
+    kind: finding.kind,
+    path: finding.path,
+    matchCount: finding.matchCount
+  }));
+  const summary = findings
+    .slice(0, 5)
+    .map((finding) => `${finding.kind} in ${finding.path}`)
+    .join(", ");
+
+  return {
+    findingCount: scanner.findings.length,
+    summary,
+    findings
+  };
+}
+
+function normalizeHashesManifest(value: unknown): HashesManifest {
+  const row = asRecord(value);
+  const filesRow = asRecord(row?.files);
+  const files: Record<string, string> = {};
+
+  if (filesRow) {
+    for (const [name, digest] of Object.entries(filesRow)) {
+      if (typeof digest === "string") {
+        files[name] = digest;
+      }
+    }
+  }
+
+  return {
+    manifestSha256: typeof row?.manifestSha256 === "string" ? row.manifestSha256 : "",
+    files
+  };
+}
+
+async function ensureRootPageAgentsInjected(
+  runtime: SessionRuntime,
+  guards: {
+    assertCurrent?: () => void;
+    beforeEach?: (step: "isolated-content" | "main-world-hook") => Promise<void> | void;
+  } = {}
+): Promise<void> {
+  const contentTarget = resolveContentScriptInjectionTarget(
+    runtime.config.capturePolicy,
+    runtime.tabId
+  );
+  const injection = await injectRootPageAgentsForMode(chromeApi, {
+    mode: runtime.mode,
+    contentTarget,
+    mainWorldTarget: contentTarget.allFrames
+      ? { tabId: runtime.tabId, allFrames: true }
+      : { tabId: runtime.tabId, frameId: 0 },
+    ...guards
+  });
+  const { contentResults, mainWorldResults } = injection;
+  guards.assertCurrent?.();
+  const rootResult = contentResults.find((result) => result.frameId === 0);
+
+  if (
+    !rootResult ||
+    typeof rootResult.documentId !== "string" ||
+    rootResult.documentId.length === 0 ||
+    rootResult.error
+  ) {
+    throw new Error("Exact root content injection did not return a document identity.");
+  }
+
+  if (runtime.mode === "lite") {
+    for (const contentResult of contentResults) {
+      if (
+        typeof contentResult.documentId !== "string" ||
+        contentResult.documentId.length === 0 ||
+        contentResult.error
+      ) {
+        continue;
+      }
+
+      const mainWorldResult = mainWorldResults.find(
+        (candidate) =>
+          candidate.frameId === contentResult.frameId &&
+          candidate.documentId === contentResult.documentId &&
+          !candidate.error
+      );
+
+      if (mainWorldResult) {
+        if (
+          !rememberMainWorldController(
+            runtime,
+            contentActivationParentKey(contentResult.frameId, contentResult.documentId),
+            mainWorldResult.controller
+          )
+        ) {
+          throw new Error("Root MAIN-world controller conflicted with its isolated singleton.");
+        }
+      }
     }
-  }
-}
 
-function resolveLocalStorageSnapshotMode(
-  policy: CapturePolicy | undefined
-): LocalStorageSnapshotMode | null {
-  if (policy?.categories.storage === "allow" || policy?.categories.storage === "lengths-only") {
-    return policy.categories.storage;
+    if (
+      !runtime.contentMainWorldProofs.has(
+        contentActivationParentKey(rootResult.frameId, rootResult.documentId)
+      )
+    ) {
+      throw new Error("Exact root MAIN-world injection did not match the content document.");
+    }
   }
 
-  return null;
+  await populateInitialContentActivationParents(runtime, contentResults);
+  guards.assertCurrent?.();
+  await requestFreshContentActivation(runtime, {
+    frameId: 0,
+    documentId: rootResult.documentId,
+    assertCurrent: guards.assertCurrent
+  });
+  guards.assertCurrent?.();
+
+  const pendingChildren = contentResults.filter(
+    (result): result is typeof result & { documentId: string } =>
+      result.frameId > 0 &&
+      typeof result.documentId === "string" &&
+      result.documentId.length > 0 &&
+      !result.error &&
+      (runtime.mode === "full" ||
+        runtime.contentMainWorldProofs.has(
+          contentActivationParentKey(result.frameId, result.documentId)
+        )) &&
+      runtime.contentActivationParents.has(
+        contentActivationParentKey(result.frameId, result.documentId)
+      )
+  );
+
+  while (pendingChildren.length > 0) {
+    const live = contentActivations.listRuntime(runtime, runtime.captureFence);
+    const readyChildren = pendingChildren.filter((result) => {
+      const parent = runtime.contentActivationParents.get(
+        contentActivationParentKey(result.frameId, result.documentId)
+      );
+      return live.some(
+        (activation) =>
+          activation.frameId === parent?.frameId && activation.documentId === parent.documentId
+      );
+    });
+
+    if (readyChildren.length === 0) {
+      break;
+    }
+
+    for (const child of readyChildren) {
+      pendingChildren.splice(pendingChildren.indexOf(child), 1);
+    }
+
+    await Promise.all(
+      readyChildren.map((result) =>
+        requestFreshContentActivation(runtime, {
+          frameId: result.frameId,
+          documentId: result.documentId,
+          assertCurrent: guards.assertCurrent
+        }).catch(() => null)
+      )
+    );
+  }
+  guards.assertCurrent?.();
 }
 
-async function captureTraceMetrics(runtime: SessionRuntime, reason: string): Promise<void> {
-  if (!runtime.cdpRouter) {
+async function populateInitialContentActivationParents(
+  runtime: SessionRuntime,
+  results: readonly { frameId: number; documentId?: string }[]
+): Promise<void> {
+  if (!chromeApi?.webNavigation?.getAllFrames) {
     return;
   }
 
-  if (runtime.config.capturePolicy?.categories.cdp !== "full") {
+  let frames: Awaited<ReturnType<NonNullable<typeof chromeApi.webNavigation.getAllFrames>>>;
+
+  try {
+    frames = await chromeApi.webNavigation.getAllFrames({ tabId: runtime.tabId });
+  } catch {
     return;
   }
 
-  const metrics = await sendCdpCommand<Record<string, unknown>>(
-    runtime,
-    { tabId: runtime.tabId },
-    "Performance.getMetrics"
+  const resultDocumentByFrame = new Map(
+    results.flatMap((result) =>
+      typeof result.documentId === "string" && result.documentId.length > 0
+        ? [[result.frameId, result.documentId] as const]
+        : []
+    )
   );
 
-  if (!metrics) {
-    return;
-  }
+  for (const frame of frames) {
+    if (frame.frameId <= 0 || frame.parentFrameId < 0) {
+      continue;
+    }
 
-  const bytes = new TextEncoder().encode(JSON.stringify(metrics));
-  const hash = await runtime.pipeline.putBlob("application/json", bytes);
+    const documentId = frame.documentId;
+    const parent = resolveExactInitialContentParent({
+      frameId: frame.frameId,
+      parentFrameId: frame.parentFrameId,
+      documentId,
+      parentDocumentId: frame.parentDocumentId,
+      injectedDocumentId: resultDocumentByFrame.get(frame.frameId),
+      injectedParentDocumentId: resultDocumentByFrame.get(frame.parentFrameId)
+    });
 
-  ingestRawEvent({
-    source: "system",
-    rawType: "cdp.perf.trace",
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: {
-      traceHash: hash,
-      durationMs: 0,
-      mode: "reportEvents",
-      categories: "metrics",
-      reason
+    if (!documentId || !parent) {
+      continue;
     }
-  });
-}
 
-async function captureAdvancedProfiles(runtime: SessionRuntime, reason: string): Promise<void> {
-  await Promise.allSettled([
-    captureCpuProfile(runtime, reason),
-    captureHeapSnapshot(runtime, reason)
-  ]);
+    runtime.contentActivationParents.set(
+      contentActivationParentKey(frame.frameId, documentId),
+      parent
+    );
+  }
 }
 
-async function captureCpuProfile(runtime: SessionRuntime, reason: string): Promise<void> {
-  if (!runtime.cdpRouter) {
+function installLiteWebRequestCapture(): void {
+  if (
+    resolveInstalledRuntimeCapabilities(chromeApi).browserNetwork !== "webRequest" ||
+    !chromeApi?.webRequest ||
+    liteWebRequestCaptureCleanup
+  ) {
     return;
   }
 
-  if (runtime.config.capturePolicy?.categories.cdp !== "full") {
-    return;
-  }
+  const filter = { urls: ["<all_urls>"] };
+  const onBeforeRequest = (details: {
+    requestId: string;
+    tabId: number;
+    documentId?: string;
+    frameId?: number;
+    parentDocumentId?: string;
+    parentFrameId?: number;
+    method?: string;
+    type?: string;
+    url: string;
+    timeStamp?: number;
+  }) => {
+    const runtime = resolveActiveLiteRuntime(details.tabId);
 
-  await sendCdpCommand(runtime, { tabId: runtime.tabId }, "Profiler.enable");
+    if (!runtime) {
+      return;
+    }
 
-  try {
-    const started = await sendCdpCommandOutcome(
-      runtime,
-      { tabId: runtime.tabId },
-      "Profiler.start"
-    );
+    const requestMetaKey = buildRequestMetaKey(details.requestId);
+    if (!isLiteWebRequestPolicyAdmissionOpen(runtime)) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
+    if (
+      !isLiteWebRequestDocumentUrlUnambiguous(
+        runtime.config.capturePolicy?.scope.excludedUrlPatterns ?? [],
+        details.type
+      )
+    ) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
+    const existingMetadata = getRequestMeta(runtime.requestMeta, requestMetaKey);
+    const navigationFrameId =
+      typeof details.frameId === "number" && Number.isSafeInteger(details.frameId)
+        ? Math.max(0, details.frameId)
+        : 0;
+    const previousNavigationDocument =
+      details.type === "main_frame" || details.type === "sub_frame"
+        ? runtime.contentDocuments.get(navigationFrameId)
+        : null;
+
+    if (previousNavigationDocument) {
+      blockKnownContentSubtree(runtime, previousNavigationDocument, "navigation-start");
+    }
 
-    if (!started.ok) {
+    const authorization = authorizeLiteWebRequest({
+      authorization: runtime.contentDocuments,
+      details,
+      phase: "before",
+      navigationAuthorization: existingMetadata?.liteNavigationAuthorization,
+      evaluateScope: (documentUrl, frameId) =>
+        evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+          url: documentUrl,
+          tabId: runtime.tabId,
+          frameId
+        }).allowed
+    });
+
+    if (authorization.kind === "subframe-navigation" || authorization.kind === "top-navigation") {
+      syncAuthorizedContentFrames(runtime);
+    }
+
+    if (!authorization.allowed) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+
+      if (authorization.kind === "top-navigation" && authorization.navigationCurrent === true) {
+        requestStopRuntimeIfCurrent(runtime, "navigation-before-denied");
+      }
       return;
     }
 
-    await wait(CPU_PROFILE_SAMPLE_MS);
+    if (
+      !isLiteWebRequestActivationAuthorized(
+        runtime,
+        authorization,
+        details.parentFrameId,
+        details.parentDocumentId
+      )
+    ) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
 
-    const profileResult = await sendCdpCommand<{ profile?: unknown }>(
-      runtime,
-      { tabId: runtime.tabId },
-      "Profiler.stop"
+    const startedAt = normalizeLiteNetworkTimestamp(details.timeStamp);
+    upsertRequestMeta(runtime.requestMeta, requestMetaKey, {
+      url: details.url,
+      method: details.method,
+      startedAt,
+      resourceType: details.type,
+      liteNavigationAuthorization:
+        authorization.kind === "subframe-navigation" || authorization.kind === "top-navigation"
+          ? authorization.navigationAuthorization
+          : undefined
+    });
+
+    if (authorization.kind === "top-navigation" || authorization.kind === "subframe-navigation") {
+      return;
+    }
+
+    void ingestRawEvent(
+      buildLiteNetworkRequestRawEvent(
+        {
+          sid: runtime.sid,
+          tabId: runtime.tabId,
+          frame: normalizeContentFrameId(details.frameId)
+        },
+        {
+          requestId: details.requestId,
+          method: details.method,
+          url: details.url,
+          timeStamp: startedAt,
+          mono: monotonicTime()
+        }
+      )
     );
+  };
+
+  const onCompleted = (details: {
+    requestId: string;
+    tabId: number;
+    documentId?: string;
+    frameId?: number;
+    method?: string;
+    type?: string;
+    url: string;
+    statusCode?: number;
+    statusLine?: string;
+    timeStamp?: number;
+  }) => {
+    const runtime = resolveActiveLiteRuntime(details.tabId);
 
-    if (!profileResult?.profile) {
+    if (!runtime) {
       return;
     }
 
-    const bytes = new TextEncoder().encode(JSON.stringify(profileResult.profile));
-    const hash = await runtime.pipeline.putBlob("application/json", bytes);
+    const requestMetaKey = buildRequestMetaKey(details.requestId);
+    const metadata = getRequestMeta(runtime.requestMeta, requestMetaKey);
+    if (!isLiteWebRequestPolicyAdmissionOpen(runtime)) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
+    if (
+      !isLiteWebRequestDocumentUrlUnambiguous(
+        runtime.config.capturePolicy?.scope.excludedUrlPatterns ?? [],
+        details.type ?? metadata?.resourceType
+      )
+    ) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
+    const authorization = authorizeLiteWebRequest({
+      authorization: runtime.contentDocuments,
+      details: {
+        ...details,
+        type: details.type ?? metadata?.resourceType
+      },
+      phase: "completion",
+      navigationAuthorization: metadata?.liteNavigationAuthorization,
+      evaluateScope: (documentUrl, frameId) =>
+        evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+          url: documentUrl,
+          tabId: runtime.tabId,
+          frameId
+        }).allowed
+    });
+    finalizeLiteNavigation(runtime, metadata?.liteNavigationAuthorization);
 
-    ingestRawEvent({
-      source: "system",
-      rawType: "cdp.perf.cpu.profile",
-      sid: runtime.sid,
-      tabId: runtime.tabId,
-      t: Date.now(),
-      mono: monotonicTime(),
-      payload: {
-        profileHash: hash,
-        sampleMs: CPU_PROFILE_SAMPLE_MS,
-        size: bytes.byteLength,
-        reason
+    if (!authorization.allowed) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+
+      if (authorization.kind === "top-navigation" && authorization.navigationCurrent === true) {
+        requestStopRuntimeIfCurrent(runtime, "navigation-completion-denied");
       }
-    });
-  } finally {
-    await sendCdpCommand(runtime, { tabId: runtime.tabId }, "Profiler.disable");
-  }
-}
+      return;
+    }
 
-async function captureHeapSnapshot(runtime: SessionRuntime, reason: string): Promise<void> {
-  if (!runtime.cdpRouter) {
-    return;
-  }
+    if (!isLiteWebRequestActivationAuthorized(runtime, authorization)) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
 
-  if (
-    runtime.config.capturePolicy?.mode !== "lab" ||
-    runtime.config.capturePolicy.categories.heapProfiles !== "lab-only"
-  ) {
-    return;
-  }
+    if (authorization.kind === "top-navigation" || authorization.kind === "subframe-navigation") {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
 
-  runtime.heapSnapshotCapture = {
-    chunks: [],
-    bytes: 0,
-    truncated: false
+    const endedAt = normalizeLiteNetworkTimestamp(details.timeStamp);
+
+    void ingestRawEvent(
+      buildLiteNetworkResponseRawEvent(
+        {
+          sid: runtime.sid,
+          tabId: runtime.tabId,
+          frame: normalizeContentFrameId(details.frameId)
+        },
+        {
+          requestId: details.requestId,
+          method: details.method ?? metadata?.method,
+          url: details.url ?? metadata?.url ?? "unknown://request",
+          statusCode: details.statusCode,
+          statusLine: details.statusLine,
+          timeStamp: endedAt,
+          mono: monotonicTime(),
+          duration:
+            typeof metadata?.startedAt === "number"
+              ? Math.max(0, endedAt - metadata.startedAt)
+              : undefined
+        }
+      )
+    );
+
+    deleteRequestMeta(runtime.requestMeta, requestMetaKey);
   };
 
-  await sendCdpCommand(runtime, { tabId: runtime.tabId }, "HeapProfiler.enable");
+  const onErrorOccurred = (details: {
+    requestId: string;
+    tabId: number;
+    documentId?: string;
+    frameId?: number;
+    method?: string;
+    type?: string;
+    url: string;
+    error?: string;
+    timeStamp?: number;
+  }) => {
+    const runtime = resolveActiveLiteRuntime(details.tabId);
+
+    if (!runtime) {
+      return;
+    }
+
+    const requestMetaKey = buildRequestMetaKey(details.requestId);
+    const metadata = getRequestMeta(runtime.requestMeta, requestMetaKey);
+    if (!isLiteWebRequestPolicyAdmissionOpen(runtime)) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
+    if (
+      !isLiteWebRequestDocumentUrlUnambiguous(
+        runtime.config.capturePolicy?.scope.excludedUrlPatterns ?? [],
+        details.type ?? metadata?.resourceType
+      )
+    ) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
+    const authorization = authorizeLiteWebRequest({
+      authorization: runtime.contentDocuments,
+      details: {
+        ...details,
+        type: details.type ?? metadata?.resourceType
+      },
+      phase: "completion",
+      navigationAuthorization: metadata?.liteNavigationAuthorization,
+      evaluateScope: (documentUrl, frameId) =>
+        evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+          url: documentUrl,
+          tabId: runtime.tabId,
+          frameId
+        }).allowed
+    });
+    finalizeLiteNavigation(runtime, metadata?.liteNavigationAuthorization);
+
+    if (!authorization.allowed) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
 
-  const completed = await sendCdpCommandOutcome(
-    runtime,
-    { tabId: runtime.tabId },
-    "HeapProfiler.takeHeapSnapshot",
-    {
-      reportProgress: false,
-      captureNumericValue: true
-    },
-    CDP_HEAP_SNAPSHOT_TIMEOUT_MS
-  );
+      if (authorization.kind === "top-navigation" && authorization.navigationCurrent === true) {
+        requestStopRuntimeIfCurrent(runtime, "navigation-error");
+      }
+      return;
+    }
 
-  const snapshot = runtime.heapSnapshotCapture;
-  runtime.heapSnapshotCapture = null;
+    if (!isLiteWebRequestActivationAuthorized(runtime, authorization)) {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      return;
+    }
 
-  if (!completed.ok || !snapshot || snapshot.chunks.length === 0) {
-    await sendCdpCommand(runtime, { tabId: runtime.tabId }, "HeapProfiler.disable");
-    return;
-  }
+    if (authorization.kind === "top-navigation" || authorization.kind === "subframe-navigation") {
+      deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+      if (authorization.kind === "top-navigation" && authorization.navigationCurrent === true) {
+        requestStopRuntimeIfCurrent(runtime, "navigation-error");
+      }
+      return;
+    }
 
-  const joined = snapshot.chunks.join("");
-  const bytes = new TextEncoder().encode(joined);
-  const hash = await runtime.pipeline.putBlob("application/json", bytes);
+    const endedAt = normalizeLiteNetworkTimestamp(details.timeStamp);
 
-  ingestRawEvent({
-    source: "system",
-    rawType: "cdp.perf.heap.snapshot",
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    t: Date.now(),
-    mono: monotonicTime(),
-    payload: {
-      snapshotHash: hash,
-      size: bytes.byteLength,
-      chunkCount: snapshot.chunks.length,
-      truncated: snapshot.truncated,
-      reason
-    }
-  });
+    void ingestRawEvent(
+      buildLiteNetworkFailureRawEvent(
+        {
+          sid: runtime.sid,
+          tabId: runtime.tabId,
+          frame: normalizeContentFrameId(details.frameId)
+        },
+        {
+          requestId: details.requestId,
+          method: details.method ?? metadata?.method,
+          url: details.url ?? metadata?.url ?? "unknown://request",
+          timeStamp: endedAt,
+          mono: monotonicTime(),
+          duration:
+            typeof metadata?.startedAt === "number"
+              ? Math.max(0, endedAt - metadata.startedAt)
+              : undefined,
+          error: details.error
+        }
+      )
+    );
 
-  await sendCdpCommand(runtime, { tabId: runtime.tabId }, "HeapProfiler.disable");
-}
+    deleteRequestMeta(runtime.requestMeta, requestMetaKey);
+  };
 
-function shouldCaptureAdvancedProfiles(reason: string): boolean {
-  return reason === "manual";
-}
+  chromeApi.webRequest.onBeforeRequest.addListener(onBeforeRequest, filter);
+  chromeApi.webRequest.onCompleted.addListener(onCompleted, filter);
+  chromeApi.webRequest.onErrorOccurred.addListener(onErrorOccurred, filter);
 
-function wait(durationMs: number): Promise<void> {
-  return new Promise((resolve) => {
-    setTimeout(resolve, durationMs);
-  });
+  liteWebRequestCaptureCleanup = () => {
+    chromeApi.webRequest?.onBeforeRequest.removeListener(onBeforeRequest);
+    chromeApi.webRequest?.onCompleted.removeListener(onCompleted);
+    chromeApi.webRequest?.onErrorOccurred.removeListener(onErrorOccurred);
+    liteWebRequestCaptureCleanup = null;
+  };
 }
 
-async function sendCdpCommand<TResult = unknown>(
+function finalizeLiteNavigation(
   runtime: SessionRuntime,
-  target: { tabId: number; sessionId?: string },
-  method: string,
-  params?: Record<string, unknown>,
-  timeoutMs = CDP_ARTIFACT_TIMEOUT_MS
-): Promise<TResult | undefined> {
-  const outcome = await sendCdpCommandOutcome<TResult>(runtime, target, method, params, timeoutMs);
-  return outcome.ok ? outcome.value : undefined;
+  authorization: RequestMetaEntry["liteNavigationAuthorization"]
+): void {
+  if (authorization) {
+    runtime.contentDocuments.finalizeNavigation(authorization);
+  }
 }
 
-async function sendCdpCommandOutcome<TResult = unknown>(
-  runtime: SessionRuntime,
-  target: { tabId: number; sessionId?: string },
-  method: string,
-  params?: Record<string, unknown>,
-  timeoutMs = CDP_ARTIFACT_TIMEOUT_MS
-): Promise<CdpCommandOutcome<TResult>> {
-  if (!runtime.cdpRouter || runtime.stopping) {
-    return { ok: false };
+function uninstallLiteWebRequestCaptureIfUnused(): void {
+  if (!liteWebRequestCaptureCleanup || hasActiveLiteRuntime()) {
+    return;
   }
 
-  return withCdpCommandTimeout(runtime.cdpRouter.send<TResult>(target, method, params), timeoutMs);
+  liteWebRequestCaptureCleanup();
 }
 
-async function evaluateExpression(runtime: SessionRuntime, expression: string): Promise<unknown> {
-  if (!runtime.cdpRouter) {
-    return undefined;
+function hasActiveLiteRuntime(): boolean {
+  for (const runtime of sessionsByTab.values()) {
+    if (
+      runtime.mode === "lite" &&
+      isRuntimeCaptureAdmitted(runtime.activationState) &&
+      isVolatileCaptureOpen(runtime.captureFence) &&
+      !runtime.stopping &&
+      !runtime.stoppedAt
+    ) {
+      return true;
+    }
   }
 
-  const result = await sendCdpCommand<{
-    result?: {
-      value?: unknown;
-    };
-  }>(runtime, { tabId: runtime.tabId }, "Runtime.evaluate", {
-    expression,
-    returnByValue: true,
-    awaitPromise: true
-  });
-
-  return result?.result?.value;
+  return false;
 }
 
-function decodeBase64(value: string): Uint8Array {
-  if (typeof atob !== "function") {
-    return new TextEncoder().encode(value);
+function resolveActiveLiteRuntime(tabId: number): SessionRuntime | undefined {
+  if (!Number.isFinite(tabId) || tabId < 0) {
+    return undefined;
   }
 
-  const binary = atob(value);
-  const bytes = new Uint8Array(binary.length);
+  const runtime = sessionsByTab.get(tabId);
 
-  for (let index = 0; index < binary.length; index += 1) {
-    bytes[index] = binary.charCodeAt(index);
+  if (
+    !runtime ||
+    runtime.mode !== "lite" ||
+    !isRuntimeCaptureAdmitted(runtime.activationState) ||
+    !isVolatileCaptureOpen(runtime.captureFence) ||
+    runtime.stopping ||
+    runtime.stoppedAt
+  ) {
+    return undefined;
   }
 
-  return bytes;
+  return runtime;
 }
 
-function decodeDataUrl(dataUrl: string): { mime: string; bytes: Uint8Array } | null {
-  if (!dataUrl.startsWith("data:")) {
-    return null;
-  }
+function isLiteWebRequestPolicyAdmissionOpen(runtime: SessionRuntime): boolean {
+  return (
+    runtime.pendingContentPolicyRevisions.size === 0 &&
+    runtime.pendingLiteNetworkPolicyRevisions.size === 0
+  );
+}
 
-  const commaIndex = dataUrl.indexOf(",");
+function isLiteWebRequestActivationAuthorized(
+  runtime: SessionRuntime,
+  decision: LiteWebRequestAuthorizationDecision,
+  parentFrameId?: number,
+  parentDocumentId?: string
+): boolean {
+  if (decision.kind === "top-navigation") {
+    return true;
+  }
 
-  if (commaIndex <= 5) {
-    return null;
+  if (decision.kind === "subframe-navigation") {
+    return (
+      typeof parentFrameId === "number" &&
+      typeof parentDocumentId === "string" &&
+      hasLiveContentActivationAncestry(runtime, parentFrameId, parentDocumentId)
+    );
   }
 
-  const header = dataUrl.slice(5, commaIndex);
-  const encoded = dataUrl.slice(commaIndex + 1);
-  const segments = header.split(";");
-  const mime = segments[0] && segments[0].length > 0 ? segments[0] : "application/octet-stream";
-  const isBase64 = segments.includes("base64");
+  const document = runtime.contentDocuments.get(decision.frameId);
+  return (
+    document !== null &&
+    hasLiveContentActivationAncestry(runtime, document.frameId, document.documentId)
+  );
+}
 
-  try {
-    if (isBase64) {
-      return {
-        mime,
-        bytes: decodeBase64(encoded)
-      };
+function hasLiveContentActivationAncestry(
+  runtime: SessionRuntime,
+  frameId: number,
+  documentId: string
+): boolean {
+  const active = contentActivations.listRuntime(runtime, runtime.captureFence, ["active"]);
+  const byDocument = new Map(
+    active.map((activation) => [
+      contentActivationParentKey(activation.frameId, activation.documentId),
+      activation
+    ])
+  );
+  let current = byDocument.get(contentActivationParentKey(frameId, documentId));
+  const visited = new Set<string>();
+
+  while (current) {
+    const key = contentActivationParentKey(current.frameId, current.documentId);
+    if (visited.has(key)) {
+      return false;
     }
+    visited.add(key);
 
-    return {
-      mime,
-      bytes: new TextEncoder().encode(decodeURIComponent(encoded))
-    };
-  } catch {
-    return null;
+    if (current.frameId === 0) {
+      return current.parent === undefined;
+    }
+    const parent = current.parent;
+    if (!parent) {
+      return false;
+    }
+    current = byDocument.get(contentActivationParentKey(parent.frameId, parent.documentId));
   }
+
+  return false;
 }
 
-function resolveLiteBodyCaptureRule(
-  runtime: SessionRuntime,
-  url: string,
-  mimeType: string | undefined
-): LiteBodyCaptureRule {
-  return resolveLiteBodyCaptureRuleUtil(runtime.config, url, mimeType, {
-    defaultMimeAllowlist: LITE_DEFAULT_BODY_MIME_ALLOWLIST,
-    fallbackMaxBytes: NETWORK_BODY_MAX_BYTES
-  });
+function normalizeLiteNetworkTimestamp(candidate: unknown): number {
+  return typeof candidate === "number" && Number.isFinite(candidate) && candidate > 0
+    ? candidate
+    : Date.now();
 }
 
-function resolveFullBodyCaptureRule(
-  runtime: SessionRuntime,
-  url: string,
-  mimeType: string | undefined
-): LiteBodyCaptureRule {
-  return resolveFullBodyCaptureRuleUtil(runtime.config, url, mimeType, {
-    defaultMimeAllowlist: LITE_DEFAULT_BODY_MIME_ALLOWLIST,
-    fallbackMaxBytes: NETWORK_BODY_MAX_BYTES
+async function ensureOffscreenDocument(): Promise<void> {
+  if (!chromeApi?.offscreen?.createDocument || !chromeApi.runtime?.getURL) {
+    return;
+  }
+
+  const offscreenUrl = chromeApi.runtime.getURL(OFFSCREEN_PATH);
+  await offscreenDocumentLifecycle.ensure({
+    exists: async () => {
+      const contexts = chromeApi.runtime?.getContexts
+        ? await chromeApi.runtime.getContexts({
+            contextTypes: ["OFFSCREEN_DOCUMENT"],
+            documentUrls: [offscreenUrl]
+          })
+        : [];
+      return contexts.length > 0;
+    },
+    create: () =>
+      chromeApi.offscreen!.createDocument!({
+        url: OFFSCREEN_PATH,
+        reasons: ["DOM_PARSER", "USER_MEDIA"],
+        justification:
+          "WebBlackbox uses offscreen document for persistent local recording pipeline and optional tab video capture."
+      })
   });
 }
 
-function isMimeAllowed(allowlist: string[], mimeType: string | undefined): boolean {
-  return isMimeAllowedUtil(allowlist, mimeType);
-}
+function enqueue(
+  runtime: SessionRuntime,
+  task: () => Promise<void>,
+  options: { bestEffort?: boolean } = {}
+): boolean {
+  if (!runtime.queueAccepting) {
+    return false;
+  }
 
-function normalizeMimeType(value: string | null): string | undefined {
-  return normalizeMimeTypeUtil(value);
-}
+  if (options.bestEffort) {
+    if (
+      !isRuntimeCaptureAdmitted(runtime.activationState) ||
+      !isVolatileCaptureOpen(runtime.captureFence) ||
+      runtime.stopping ||
+      runtime.queueDepth >= BEST_EFFORT_QUEUE_MAX_PENDING
+    ) {
+      runtime.droppedBestEffortTasks += 1;
+
+      if (shouldLogPerf() && runtime.droppedBestEffortTasks % 50 === 0) {
+        console.info("[WebBlackbox][perf] dropped best-effort queue tasks", {
+          sid: runtime.sid,
+          dropped: runtime.droppedBestEffortTasks,
+          queueDepth: runtime.queueDepth
+        });
+      }
+
+      return false;
+    }
+  }
+
+  runtime.queueDepth += 1;
+  runtime.queue = runtime.queue
+    .then(task)
+    .catch((error) => {
+      console.warn("[WebBlackbox] session queue error", error);
+    })
+    .finally(() => {
+      runtime.queueDepth = Math.max(0, runtime.queueDepth - 1);
+    });
 
-function redactBodyText(
-  value: string,
-  patterns: string[]
-): {
-  value: string;
-  redacted: boolean;
-} {
-  return redactBodyTextUtil(value, patterns, LITE_BODY_REDACTED_TOKEN);
+  return true;
 }
 
-function normalizeFullModePayload(method: string, params: unknown): unknown {
-  const payload = asRecord(params);
+function enqueueWithResult<TResult>(
+  runtime: SessionRuntime,
+  task: () => Promise<TResult>
+): Promise<TResult> {
+  return new Promise<TResult>((resolve, reject) => {
+    const accepted = enqueue(runtime, async () => {
+      try {
+        resolve(await task());
+      } catch (error) {
+        reject(error instanceof Error ? error : new Error(String(error)));
+      }
+    });
 
-  if (!payload) {
-    return params;
-  }
+    if (!accepted) {
+      reject(new Error("Session queue is closed."));
+    }
+  });
+}
 
-  if (method === "Network.webSocketFrameReceived" || method === "Network.webSocketFrameSent") {
-    const response = asRecord(payload.response);
-    const rawData = typeof response?.payloadData === "string" ? response.payloadData : "";
+async function teardownCaptureInstrumentation(runtime: SessionRuntime): Promise<void> {
+  if (runtime.consentExpiryTimer !== null) {
+    clearTimeout(runtime.consentExpiryTimer);
+    runtime.consentExpiryTimer = null;
+  }
 
-    return {
-      ...payload,
-      direction: method.endsWith("Sent") ? "sent" : "received",
-      frame: {
-        opcode: typeof response?.opcode === "number" ? response.opcode : undefined,
-        masked: response?.mask === true,
-        payloadLength: rawData.length,
-        payloadPreview: rawData.slice(0, 512)
-      }
-    };
+  if (runtime.pipelineFlushTimer !== null) {
+    clearTimeout(runtime.pipelineFlushTimer);
+    runtime.pipelineFlushTimer = null;
   }
 
-  return payload;
+  await cleanupCdpInstrumentation(runtime, runtime.cdpRouter);
 }
 
-function asRecord(value: unknown): Record<string, unknown> | null {
-  return value !== null && typeof value === "object" && !Array.isArray(value)
-    ? (value as Record<string, unknown>)
-    : null;
-}
+function scheduleConsentExpiry(runtime: SessionRuntime): void {
+  if (runtime.consentExpiryTimer !== null) {
+    clearTimeout(runtime.consentExpiryTimer);
+    runtime.consentExpiryTimer = null;
+  }
 
-function asFiniteNumber(value: unknown): number | null {
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
-}
+  const expiresAt = runtime.config.capturePolicy?.consent.expiresAt;
 
-function asUint8Array(value: unknown): Uint8Array | null {
-  if (value instanceof Uint8Array) {
-    return value;
+  if (!expiresAt) {
+    return;
   }
 
-  if (value instanceof ArrayBuffer) {
-    return new Uint8Array(value);
-  }
+  const delay = Date.parse(expiresAt) - Date.now();
 
-  if (ArrayBuffer.isView(value)) {
-    return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+  if (!Number.isFinite(delay) || delay <= 0) {
+    requestStopRuntimeIfCurrent(runtime, "consent-expired");
+    return;
   }
 
-  if (Array.isArray(value)) {
-    return Uint8Array.from(value, (entry) =>
-      typeof entry === "number" && Number.isFinite(entry) ? entry & 0xff : 0
-    );
-  }
+  runtime.consentExpiryTimer = setTimeout(
+    () => {
+      runtime.consentExpiryTimer = null;
 
-  const record = asRecord(value);
+      if (Date.now() >= Date.parse(expiresAt)) {
+        requestStopRuntimeIfCurrent(runtime, "consent-expired");
+        return;
+      }
 
-  if (!record) {
-    return null;
+      scheduleConsentExpiry(runtime);
+    },
+    Math.min(delay, 2_147_000_000)
+  );
+}
+
+async function cleanupCdpInstrumentation(
+  runtime: SessionRuntime,
+  router: CdpRouter | null
+): Promise<void> {
+  if (runtime.screenshotInterval !== null) {
+    clearInterval(runtime.screenshotInterval);
+    runtime.screenshotInterval = null;
   }
 
-  const numericKeys = Object.keys(record)
-    .filter((key) => /^\d+$/.test(key))
-    .map((key) => Number(key))
-    .sort((left, right) => left - right);
+  await disposeListenersBeforeTeardown(
+    runtime.removeCdpListeners.splice(0, runtime.removeCdpListeners.length),
+    () => router?.detach(runtime.tabId).catch(() => undefined)
+  );
 
-  if (numericKeys.length === 0) {
-    return null;
+  router?.dispose();
+
+  if (runtime.cdpRouter === router) {
+    runtime.cdpRouter = null;
   }
 
-  const maxIndex = numericKeys[numericKeys.length - 1];
+  clearCdpCaptureScopeState(runtime.cdpScope);
+  runtime.requestMeta.clear();
+  runtime.responseBodyCaptureTimestamps.length = 0;
+  runtime.heapSnapshotCapture = null;
+}
 
-  if (typeof maxIndex !== "number" || !Number.isFinite(maxIndex)) {
-    return null;
+async function scheduleStoppedRuntimeCleanup(runtime: SessionRuntime): Promise<void> {
+  if (!runtime.stoppedAt || !runtime.cleanupDeadline) {
+    throw new Error("Stopped session is missing its absolute cleanup deadline.");
   }
 
-  const bytes = new Uint8Array(maxIndex + 1);
-
-  for (const index of numericKeys) {
-    const byte = record[String(index)];
+  await runtimeCleanupScheduler.schedule(runtime.sid, runtime.cleanupDeadline);
+}
 
-    if (typeof byte !== "number" || !Number.isFinite(byte)) {
-      return null;
-    }
+function disposeStoppedSession(runtime: SessionRuntime): Promise<void> {
+  return runtimeDisposeTasks.run(runtime, () => disposeStoppedSessionOnce(runtime));
+}
 
-    bytes[index] = byte & 0xff;
+async function disposeStoppedSessionOnce(runtime: SessionRuntime): Promise<void> {
+  if (!runtime.stoppedAt || !isMapEntrySame(sessionsBySid, runtime.sid, runtime)) {
+    return;
   }
 
-  return bytes;
-}
+  const previousCleanupDeadline = runtime.cleanupDeadline;
+  const retryDeadline = Date.now() + RETAINED_STOPPING_RETRY_DELAY_MS;
+  runtime.cleanupDeadline = retryDeadline;
+  try {
+    await persistRuntimeState({ required: true });
+  } catch (error) {
+    runtime.cleanupDeadline = previousCleanupDeadline;
+    throw error;
+  }
 
-function normalizeContentFrameId(value: unknown): string | undefined {
-  const candidate = asFiniteNumber(value);
+  try {
+    await flushBufferedPipelineEvents(runtime).catch((error) => {
+      console.warn("[WebBlackbox] stopped-session buffer flush failed during purge", error);
+    });
+    await runtime.queue.catch((error) => {
+      console.warn("[WebBlackbox] stopped-session queue drain failed during purge", error);
+    });
+    await runtime.pipeline.flush().catch(() => undefined);
+    await runtime.pipeline.close({
+      purge: true
+    });
 
-  if (candidate === null) {
-    return undefined;
+    if (!(await persistStoppedRuntimeRemoval(runtime))) {
+      throw new Error("The stopped runtime changed before its removal checkpoint.");
+    }
+  } catch (error) {
+    if (isMapEntrySame(sessionsBySid, runtime.sid, runtime)) {
+      await runtimeCleanupScheduler.schedule(runtime.sid, retryDeadline).catch(() => undefined);
+    }
+    throw error;
   }
 
-  const frameId = Math.max(0, Math.floor(candidate));
+  await runtimeCleanupScheduler.cancel(runtime.sid).catch(() => undefined);
 
-  if (frameId <= 0) {
-    return undefined;
+  if (sessionsByTab.size === 0) {
+    await setIdleBadge();
+  } else {
+    await setRecordingBadge();
   }
 
-  return `content-frame-${frameId}`;
+  await closeOffscreenIfUnused().catch(() => undefined);
+  pushSessionList();
+  notifyOffscreenPipelineStatus();
 }
 
-function asString(value: unknown): string | null {
-  return typeof value === "string" ? value : null;
+async function persistStoppedRuntimeRemoval(runtime: SessionRuntime): Promise<boolean> {
+  if (!chromeApi?.storage?.local?.set) {
+    throw new Error("Chrome storage is unavailable for the stopped-session removal checkpoint.");
+  }
+  return sessionAnnotationMutations.run(runtime.sid, async () => {
+    const previousAnnotation = sessionAnnotations.get(runtime.sid);
+    return commitDurableRemoval({
+      remove: () => {
+        if (!deleteMapEntryIfSame(sessionsBySid, runtime.sid, runtime)) {
+          return false;
+        }
+        sessionAnnotations.delete(runtime.sid);
+        return true;
+      },
+      persist: () =>
+        enqueueRuntimeStatePersist(async () => {
+          await chromeApi.storage!.local.set({
+            [ACTIVE_SESSION_STORAGE_KEY]: createCurrentRuntimeStateSnapshot(),
+            [SESSION_ANNOTATIONS_STORAGE_KEY]: serializeSessionAnnotations()
+          });
+        }),
+      restore: () => {
+        if (sessionsBySid.has(runtime.sid)) {
+          throw new Error("Stopped runtime identity was replaced during removal rollback.");
+        }
+        sessionsBySid.set(runtime.sid, runtime);
+        if (previousAnnotation) {
+          sessionAnnotations.set(runtime.sid, previousAnnotation);
+        }
+      }
+    });
+  });
 }
 
-function normalizePositiveInt(value: unknown): number | undefined {
-  const candidate = asFiniteNumber(value);
+function resolveRuntimeLocalTtlMs(policy: CapturePolicy | null | undefined): number {
+  const ttl = policy?.retention.localTtlMs;
 
-  if (candidate === null || candidate <= 0) {
-    return undefined;
+  if (typeof ttl === "number" && Number.isSafeInteger(ttl) && ttl > 0) {
+    return ttl;
   }
 
-  return Math.max(1, Math.round(candidate));
+  return (
+    DEFAULT_RECORDER_CONFIG.capturePolicy?.retention.localTtlMs ??
+    DEFAULT_CAPTURE_POLICY.retention.localTtlMs
+  );
 }
 
-function normalizeNonNegativeInt(value: unknown): number | undefined {
-  const candidate = asFiniteNumber(value);
+async function closeOffscreenIfUnused(): Promise<void> {
+  await offscreenDocumentLifecycle
+    .closeIfUnused({
+      isUnused: () =>
+        sessionsBySid.size === 0 &&
+        retainedStoppingRuntimesBySid.size === 0 &&
+        pendingRuntimeRestorationsBySid.size === 0 &&
+        runtimeRestorationSourceRowsBySid.size === 0 &&
+        offscreenSessionRecovery.size === 0,
+      close: async () => {
+        await chromeApi?.offscreen?.closeDocument?.();
+      }
+    })
+    .catch(() => undefined);
+}
 
-  if (candidate === null || candidate < 0) {
-    return undefined;
+async function downloadExportedBundle(
+  exported: PipelineExportDownloadResult,
+  saveAs: boolean
+): Promise<void> {
+  if (!chromeApi?.downloads?.download) {
+    throw new Error("Downloads API is unavailable in service worker context.");
   }
 
-  return Math.max(0, Math.round(candidate));
+  const downloadId = await chromeApi.downloads.download({
+    url: exported.downloadUrl,
+    filename: `webblackbox/${exported.fileName}`,
+    saveAs
+  });
+
+  exported.downloadId = downloadId;
 }
 
-function asStringArray(value: unknown, limit: number): string[] {
-  if (!Array.isArray(value)) {
-    return [];
-  }
+function toSessionListItem(runtime: SessionRuntime): SessionListItem {
+  const activeRuntime = sessionsByTab.get(runtime.tabId);
+  const active =
+    activeRuntime?.sid === runtime.sid &&
+    isRuntimeCaptureAdmitted(runtime.activationState) &&
+    isVolatileCaptureOpen(runtime.captureFence) &&
+    !runtime.stopping &&
+    !runtime.stoppedAt;
 
-  const output: string[] = [];
+  return {
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    mode: runtime.mode,
+    startedAt: runtime.startedAt,
+    active,
+    stoppedAt: runtime.stoppedAt,
+    url: sanitizeUrlForPrivacy(runtime.url),
+    title: runtime.title,
+    ringBufferMinutes: runtime.config.ringBufferMinutes,
+    eventCount: runtime.capturedEventCount,
+    errorCount: runtime.capturedErrorCount,
+    budgetAlertCount: runtime.budgetAlertCount,
+    sizeBytes: runtime.capturedSizeBytes,
+    tags: [...runtime.tags],
+    note: runtime.note
+  };
+}
 
-  for (const entry of value) {
-    if (typeof entry !== "string" || entry.length === 0) {
-      continue;
-    }
+function toSessionMetadata(runtime: SessionRuntime): SessionMetadata {
+  return {
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    startedAt: runtime.startedAt,
+    endedAt: runtime.stoppedAt,
+    mode: runtime.mode,
+    url: sanitizeUrlForPrivacy(runtime.url),
+    title: runtime.title,
+    tags: [...runtime.tags]
+  };
+}
 
-    output.push(entry);
+async function resolveTabSessionMetadata(
+  tabId: number
+): Promise<Pick<SessionMetadata, "url" | "title"> & { captureUrl: string }> {
+  const fallbackUrl = `tab:${tabId}`;
 
-    if (output.length >= limit) {
-      break;
-    }
+  if (!chromeApi?.tabs?.get) {
+    return {
+      url: fallbackUrl,
+      captureUrl: fallbackUrl
+    };
   }
 
-  return output;
-}
-
-function encodeTextWithByteLimit(
-  value: string,
-  maxBytes: number
-): { bytes: Uint8Array; truncated: boolean } {
-  const encoder = new TextEncoder();
-  const fullBytes = encoder.encode(value);
+  try {
+    const tab = await chromeApi.tabs.get(tabId);
+    const captureUrl = typeof tab?.url === "string" && tab.url.length > 0 ? tab.url : fallbackUrl;
+    const url = sanitizeUrlForPrivacy(captureUrl);
+    const title =
+      typeof tab?.title === "string" && tab.title.trim().length > 0 ? tab.title.trim() : undefined;
 
-  if (fullBytes.byteLength <= maxBytes) {
     return {
-      bytes: fullBytes,
-      truncated: false
+      url,
+      captureUrl,
+      title
     };
+  } catch {
+    return {
+      url: fallbackUrl,
+      captureUrl: fallbackUrl
+    };
+  }
+}
+
+function updateSessionMetadataFromEvent(runtime: SessionRuntime, event: WebBlackboxEvent): void {
+  if (
+    event.type !== "nav.commit" &&
+    event.type !== "nav.history.push" &&
+    event.type !== "nav.history.replace" &&
+    event.type !== "nav.hash"
+  ) {
+    return;
+  }
+
+  const payload = asRecord(event.data);
+
+  if (!shouldUpdateSessionMetadataFromNavigation(event, payload)) {
+    return;
   }
 
-  const roughRatio = Math.max(0.05, maxBytes / fullBytes.byteLength);
-  let targetChars = Math.max(1, Math.floor(value.length * roughRatio));
-  let clipped = value.slice(0, targetChars);
-  let clippedBytes = encoder.encode(clipped);
+  const frame = asRecord(payload?.frame);
+  const nextUrl = asString(payload?.url) ?? asString(frame?.url);
 
-  while (clippedBytes.byteLength > maxBytes && targetChars > 1) {
-    targetChars = Math.max(1, Math.floor(targetChars * 0.9));
-    clipped = value.slice(0, targetChars);
-    clippedBytes = encoder.encode(clipped);
+  if (nextUrl && !usesExactContentTopDocumentAuthorization(runtime)) {
+    const claim = claimCurrentRuntimeNavigation(runtime, "content-navigation", nextUrl);
+
+    if (!claim) {
+      return;
+    }
+
+    suspendFullCaptureForNavigation(claim);
+    enqueueNavigationClaim(claim, () => updateSessionMetadataFromEventAsync(runtime, event, claim));
+    return;
   }
 
-  return {
-    bytes: clippedBytes,
-    truncated: true
-  };
+  void updateSessionMetadataFromEventAsync(runtime, event).catch((error) => {
+    console.warn("[WebBlackbox] failed to update session navigation metadata", error);
+  });
 }
 
-function normalizeScreenshotViewport(
-  value: unknown
-): { width: number; height: number; dpr: number } | undefined {
-  const row = asRecord(value);
-
-  if (!row) {
-    return undefined;
+async function updateSessionMetadataFromEventAsync(
+  runtime: SessionRuntime,
+  event: WebBlackboxEvent,
+  navigationClaim?: SessionNavigationClaim
+): Promise<void> {
+  if (
+    event.type !== "nav.commit" &&
+    event.type !== "nav.history.push" &&
+    event.type !== "nav.history.replace" &&
+    event.type !== "nav.hash"
+  ) {
+    return;
   }
 
-  const width = normalizePositiveInt(row.width);
-  const height = normalizePositiveInt(row.height);
-  const dpr = asFiniteNumber(row.dpr);
+  const payload = asRecord(event.data);
 
-  if (!width || !height || dpr === null || dpr <= 0) {
-    return undefined;
+  if (!shouldUpdateSessionMetadataFromNavigation(event, payload)) {
+    return;
   }
 
-  return {
-    width,
-    height,
-    dpr: Number(dpr.toFixed(3))
-  };
-}
+  const frame = asRecord(payload?.frame);
+  const nextUrl = asString(payload?.url) ?? asString(frame?.url);
+  const nextTitle = asString(payload?.title) ?? asString(payload?.documentTitle);
+  const globalCdpNavigationChanged = Boolean(
+    nextUrl && runtime.mode === "full" && runtime.cdpRouter
+  );
+  let changed = false;
 
-function normalizeScreenshotPointer(
-  value: unknown
-): { x: number; y: number; t?: number; mono?: number } | undefined {
-  const row = asRecord(value);
+  if (nextUrl) {
+    const exactTopDocument = usesExactContentTopDocumentAuthorization(runtime);
+    const exactDocument = exactTopDocument ? runtime.contentDocuments.get(0) : null;
 
-  if (!row) {
-    return undefined;
-  }
+    if (exactTopDocument && (!exactDocument || exactDocument.url !== nextUrl)) {
+      return;
+    }
 
-  const x = asFiniteNumber(row.x);
-  const y = asFiniteNumber(row.y);
-  const t = asFiniteNumber(row.t);
-  const mono = asFiniteNumber(row.mono);
+    const policy = navigationClaim
+      ? await runGuardedNavigationStep(
+          () => isSessionNavigationClaimCurrent(navigationClaim),
+          () => isRuntimeTopDocumentAllowed(runtime, nextUrl)
+        )
+      : ({
+          status: "current",
+          value: await isRuntimeTopDocumentAllowed(runtime, nextUrl)
+        } as const);
 
-  if (x === null || y === null) {
-    return undefined;
-  }
+    if (
+      policy.status !== "current" ||
+      (!navigationClaim && !isRuntimeCurrentCaptureOpen(runtime))
+    ) {
+      return;
+    }
 
-  return {
-    x: Number(x.toFixed(2)),
-    y: Number(y.toFixed(2)),
-    t: t === null ? undefined : t,
-    mono: mono === null ? undefined : mono
-  };
-}
+    if (
+      exactDocument &&
+      !runtime.contentDocuments.matchesSender({
+        tabId: runtime.tabId,
+        frameId: 0,
+        documentId: exactDocument.documentId,
+        url: exactDocument.url
+      })
+    ) {
+      return;
+    }
 
-function normalizeSamplingInterval(candidate: unknown, fallback: number): number {
-  const value = asFiniteNumber(candidate);
+    if (!policy.value) {
+      if (exactTopDocument) {
+        await stopRuntimeIfCurrent(runtime);
+      } else if (navigationClaim) {
+        await stopRuntimeIfNavigationClaimCurrent(navigationClaim);
+      }
+      return;
+    }
 
-  if (value === null) {
-    return fallback;
+    const sanitizedNextUrl = sanitizeUrlForPrivacy(nextUrl);
+
+    if (sanitizedNextUrl !== runtime.url || nextUrl !== runtime.captureUrl) {
+      runtime.url = sanitizedNextUrl;
+      runtime.captureUrl = nextUrl;
+      runtime.cdpScope.captureUrl = nextUrl;
+      if (!exactTopDocument) {
+        resetAuthorizedContentFrames(runtime);
+      }
+      changed = true;
+    }
   }
 
-  return Math.max(250, Math.round(value));
-}
+  if (nextTitle && nextTitle.trim().length > 0 && nextTitle !== runtime.title) {
+    if (
+      navigationClaim
+        ? !isSessionNavigationClaimCurrent(navigationClaim)
+        : !isRuntimeCurrentCaptureOpen(runtime)
+    ) {
+      return;
+    }
 
-function normalizeOptionalSamplingInterval(candidate: unknown, fallback: number): number {
-  const value = asFiniteNumber(candidate);
+    runtime.title = nextTitle.trim();
+    changed = true;
+  }
 
-  if (value === null) {
-    return fallback;
+  if (changed) {
+    pushSessionList();
+    scheduleRuntimeStatePersist();
   }
 
-  if (value <= 0) {
-    return 0;
+  if (globalCdpNavigationChanged && nextUrl && navigationClaim) {
+    launchCdpNavigationRestore(navigationClaim);
   }
+}
 
-  return Math.max(250, Math.round(value));
+function pushSessionList(): void {
+  broadcast(buildSessionListMessage());
 }
 
-function resolveExportPolicy(value: unknown): ExportPolicy {
-  const row = asRecord(value);
-  const includeScreenshots =
-    typeof row?.includeScreenshots === "boolean"
-      ? row.includeScreenshots
-      : DEFAULT_EXPORT_POLICY.includeScreenshots;
-  const includeScreenRecordings =
-    typeof row?.includeScreenRecordings === "boolean"
-      ? row.includeScreenRecordings
-      : DEFAULT_EXPORT_POLICY.includeScreenRecordings;
+function buildSessionListMessage(): SessionListMessage {
+  const sessions: SessionListItem[] = [...sessionsBySid.values()]
+    .filter((runtime) => isRuntimeCaptureAdmitted(runtime.activationState))
+    .map((runtime) => toSessionListItem(runtime))
+    .sort((left, right) => {
+      const activeDiff = Number(right.active) - Number(left.active);
+
+      if (activeDiff !== 0) {
+        return activeDiff;
+      }
+
+      return right.startedAt - left.startedAt;
+    });
 
   return {
-    includeScreenshots,
-    includeScreenRecordings,
-    maxArchiveBytes: normalizeExportBoundedInt(
-      row?.maxArchiveBytes,
-      DEFAULT_EXPORT_POLICY.maxArchiveBytes,
-      64 * 1024,
-      5 * 1024 * 1024 * 1024
-    ),
-    recentWindowMs: normalizeExportBoundedInt(
-      row?.recentWindowMs,
-      DEFAULT_EXPORT_POLICY.recentWindowMs,
-      1 * 60 * 1000,
-      30 * 24 * 60 * 60 * 1000
-    )
+    kind: "sw.session-list",
+    sessions
   };
 }
 
-function normalizeExportBoundedInt(
-  candidate: unknown,
-  fallback: number,
-  min: number,
-  max: number
-): number {
-  const value = asFiniteNumber(candidate);
+async function handleExactLiteTabUrlChanged(
+  claim: SessionNavigationClaim,
+  rawUrl: string
+): Promise<void> {
+  const runtime = claim.runtime;
 
-  if (value === null || value <= 0) {
-    return fallback;
+  if (!isSessionNavigationClaimCurrent(claim) || !usesExactLiteTopDocumentAuthorization(runtime)) {
+    return;
   }
 
-  return Math.min(max, Math.max(min, Math.round(value)));
-}
+  const decision = await resolveCurrentTabUrlPolicyDecision({
+    candidateUrl: rawUrl,
+    evaluateAllowed: () => isRuntimeTopDocumentAllowed(runtime, rawUrl),
+    resolveCurrentUrl: () => resolveCurrentTabCaptureUrl(runtime.tabId)
+  });
 
-function toStatusSampling(runtime: SessionRuntime): RecordingSampling {
-  const sampling = runtime.config.sampling;
+  if (!isSessionNavigationClaimCurrent(claim) || decision === "stale") {
+    return;
+  }
 
-  return {
-    mousemoveHz: Math.max(1, Math.round(asFiniteNumber(sampling.mousemoveHz) ?? 20)),
-    scrollHz: Math.max(1, Math.round(asFiniteNumber(sampling.scrollHz) ?? 15)),
-    domFlushMs: normalizeSamplingInterval(sampling.domFlushMs, 100),
-    snapshotIntervalMs: normalizeSamplingInterval(sampling.snapshotIntervalMs, 20_000),
-    screenshotIdleMs: normalizeOptionalSamplingInterval(
-      sampling.screenshotIdleMs,
-      DEFAULT_RECORDER_CONFIG.sampling.screenshotIdleMs
-    ),
-    bodyCaptureMaxBytes:
-      runtime.config.capturePolicy?.categories.network === "body-allowlist"
-        ? normalizeBodyCaptureMaxBytesUtil(sampling.bodyCaptureMaxBytes, 0)
-        : 0
-  };
-}
+  if (decision === "denied") {
+    await stopRuntimeIfNavigationClaimCurrent(claim);
+    return;
+  }
 
-function shouldInjectHooksForMode(mode: CaptureMode): boolean {
-  return shouldInjectPageHooksForMode(mode);
+  // tabs.onUpdated is only an early-deny signal in exact mode. The exact
+  // webNavigation document transaction is the sole owner of captureUrl.
 }
 
-function normalizePipelineExportDownloadResult(raw: unknown): PipelineExportDownloadResult {
-  const row = asRecord(raw);
+async function handleTabUrlChanged(
+  claim: SessionNavigationClaim,
+  rawUrl: string
+): Promise<boolean> {
+  const runtime = claim.runtime;
 
-  if (!row) {
-    throw new Error("Invalid offscreen export payload.");
+  if (
+    !isSessionNavigationClaimCurrent(claim) ||
+    usesExactContentTopDocumentAuthorization(runtime)
+  ) {
+    return false;
   }
 
-  const fileName =
-    typeof row.fileName === "string" && row.fileName.length > 0
-      ? row.fileName
-      : "session.webblackbox";
+  const policy = await runGuardedNavigationStep(
+    () => isSessionNavigationClaimCurrent(claim),
+    () => isRuntimeTopDocumentAllowed(runtime, rawUrl)
+  );
 
-  const sizeBytes = asFiniteNumber(row.sizeBytes);
-  const downloadUrl =
-    typeof row.downloadUrl === "string" && row.downloadUrl.length > 0 ? row.downloadUrl : null;
+  if (policy.status !== "current") {
+    return false;
+  }
 
-  if (sizeBytes === null || sizeBytes <= 0) {
-    throw new Error("Offscreen export payload did not include valid archive size.");
+  if (!policy.value) {
+    await stopRuntimeIfNavigationClaimCurrent(claim);
+    return false;
   }
 
-  if (!downloadUrl) {
-    throw new Error("Offscreen export payload did not include download URL.");
+  const nextUrl = sanitizeUrlForPrivacy(rawUrl);
+
+  if (nextUrl !== runtime.url || rawUrl !== runtime.captureUrl) {
+    runtime.url = nextUrl;
+    runtime.captureUrl = rawUrl;
+    runtime.cdpScope.captureUrl = rawUrl;
+    resetAuthorizedContentFrames(runtime);
+    pushSessionList();
+    scheduleRuntimeStatePersist();
   }
 
-  return {
-    fileName,
-    sizeBytes: Math.round(sizeBytes),
-    downloadUrl,
-    downloadId: asFiniteNumber(row.downloadId) ?? undefined,
-    integrity: normalizeHashesManifest(row.integrity),
-    privacyScanner: normalizePrivacyScannerResult(row.privacyScanner)
-  };
+  return isSessionNavigationClaimCurrent(claim);
 }
 
-function normalizePrivacyScannerResult(raw: unknown): PrivacyScannerResult | undefined {
-  const row = asRecord(raw);
+async function resolveCurrentTabCaptureUrl(tabId: number): Promise<string | null> {
+  if (!chromeApi?.tabs?.get) {
+    return null;
+  }
 
-  if (!row) {
-    return undefined;
+  try {
+    const tab = await chromeApi.tabs.get(tabId);
+    return typeof tab?.url === "string" && tab.url.length > 0 ? tab.url : null;
+  } catch {
+    return null;
   }
+}
 
-  const status = row.status === "blocked" ? "blocked" : row.status === "passed" ? "passed" : null;
-  const scannedAt = typeof row.scannedAt === "string" ? row.scannedAt : new Date().toISOString();
-  const preEncryption = row.preEncryption === true;
-  const findings = Array.isArray(row.findings)
-    ? row.findings.map(normalizePrivacyScannerFinding).filter((finding) => finding !== null)
-    : [];
+async function isRuntimeTopDocumentAllowed(
+  runtime: SessionRuntime,
+  rawUrl: string
+): Promise<boolean> {
+  const decision = evaluateCaptureDocumentScope(runtime.config.capturePolicy, {
+    url: rawUrl,
+    tabId: runtime.tabId,
+    frameId: 0
+  });
 
-  if (!status) {
-    return undefined;
+  if (!decision.allowed) {
+    return false;
   }
 
-  return {
-    scannedAt,
-    preEncryption,
-    status,
-    findings
-  };
+  return !(await shouldStopForEnterpriseOriginPolicy(decision.origin));
 }
 
-function normalizePrivacyScannerFinding(raw: unknown): PrivacyScannerFinding | null {
-  const row = asRecord(raw);
+async function shouldStopForEnterpriseOriginPolicy(nextOrigin: string | null): Promise<boolean> {
+  const enterprisePolicy = await loadEnterprisePolicy();
 
-  if (!row) {
+  return shouldStopForEnterpriseOriginPolicyInput({
+    nextOrigin,
+    isEnterpriseOriginAllowed: (origin) => isEnterpriseOriginAllowed(origin, enterprisePolicy)
+  });
+}
+
+function resolveUrlOrigin(value: string): string | null {
+  try {
+    const url = new URL(value);
+    return url.origin === "null" ? null : url.origin;
+  } catch {
     return null;
   }
+}
 
-  const kind = normalizePrivacyScannerFindingKind(row.kind);
-  const path = typeof row.path === "string" && row.path.length > 0 ? row.path : null;
-  const matchCount = asFiniteNumber(row.matchCount);
-  const sampleSha256 =
-    typeof row.sampleSha256 === "string" && /^[a-f0-9]{64}$/u.test(row.sampleSha256)
-      ? row.sampleSha256
-      : "0".repeat(64);
+function broadcast(message: ExtensionOutboundMessage): void {
+  for (const port of connectedPorts) {
+    if (port.name === PORT_NAMES.content && message.kind === "sw.recording-status") {
+      continue;
+    }
 
-  if (!kind || !path || matchCount === null || matchCount <= 0) {
-    return null;
+    sendPortMessage(port, message);
   }
-
-  return {
-    kind,
-    severity: "high",
-    path,
-    matchCount: Math.round(matchCount),
-    sampleSha256
-  };
 }
 
-function normalizePrivacyScannerFindingKind(raw: unknown): PrivacyScannerFindingKind | null {
-  if (typeof raw !== "string") {
-    return null;
-  }
+function sendPortMessage(port: PortLike, message: ExtensionOutboundMessage): void {
+  try {
+    port.postMessage(message);
+  } catch (error) {
+    connectedPorts.delete(port);
 
-  switch (raw) {
-    case "jwt":
-    case "bearer-token":
-    case "api-key":
-    case "oauth-code":
-    case "session-cookie":
-    case "email":
-    case "phone":
-    case "credit-card":
-    case "ssn":
-    case "private-key":
-    case "long-secret":
-      return raw;
-    default:
-      return null;
+    if (offscreenPort === port) {
+      offscreenPort = null;
+    }
+
+    logPortSendFailure(message.kind, error, {
+      portName: port.name
+    });
   }
 }
 
-function buildExportPrivacyWarning(
-  scanner: PrivacyScannerResult | undefined
-): ExportPrivacyWarning | undefined {
-  if (scanner?.status !== "blocked" || scanner.findings.length === 0) {
+async function loadRecorderConfig(mode: CaptureMode): Promise<typeof DEFAULT_RECORDER_CONFIG> {
+  const baseConfig = resolveModeBaseConfig(mode);
+
+  const storedValues = await chromeApi?.storage?.local?.get(OPTIONS_STORAGE_KEY);
+
+  return resolveModeRecorderConfig(mode, baseConfig, storedValues?.[OPTIONS_STORAGE_KEY]);
+}
+
+function resolveFullModeVisualCapture(
+  message: ExtensionInboundMessage
+): FullModeVisualCapture | undefined {
+  if (message.kind !== "ui.start" || message.mode !== "full") {
     return undefined;
   }
 
-  const findings = scanner.findings.slice(0, 8).map((finding) => ({
-    kind: finding.kind,
-    path: finding.path,
-    matchCount: finding.matchCount
-  }));
-  const summary = findings
-    .slice(0, 5)
-    .map((finding) => `${finding.kind} in ${finding.path}`)
-    .join(", ");
+  if (isFullModeVisualCapture(message.visualCapture)) {
+    return message.visualCapture;
+  }
 
-  return {
-    findingCount: scanner.findings.length,
-    summary,
-    findings
-  };
+  return message.recordScreen === true ? "both" : undefined;
 }
 
-function normalizeHashesManifest(value: unknown): HashesManifest {
-  const row = asRecord(value);
-  const filesRow = asRecord(row?.files);
-  const files: Record<string, string> = {};
+function isFullModeVisualCapture(value: unknown): value is FullModeVisualCapture {
+  return value === "screenshots" || value === "recording" || value === "both" || value === "none";
+}
 
-  if (filesRow) {
-    for (const [name, digest] of Object.entries(filesRow)) {
-      if (typeof digest === "string") {
-        files[name] = digest;
-      }
-    }
+function applyFullModeVisualCapture(
+  config: typeof DEFAULT_RECORDER_CONFIG,
+  mode: CaptureMode,
+  visualCapture: FullModeVisualCapture | undefined
+): typeof DEFAULT_RECORDER_CONFIG {
+  if (mode !== "full" || !visualCapture) {
+    return config;
   }
 
+  const basePolicy =
+    config.capturePolicy ?? DEFAULT_RECORDER_CONFIG.capturePolicy ?? DEFAULT_CAPTURE_POLICY;
+  const screenshots = visualCapture === "screenshots" || visualCapture === "both" ? "allow" : "off";
+  const screenRecordings =
+    visualCapture === "recording" || visualCapture === "both" ? "allow" : "off";
+
   return {
-    manifestSha256: typeof row?.manifestSha256 === "string" ? row.manifestSha256 : "",
-    files
+    ...config,
+    capturePolicy: {
+      ...basePolicy,
+      categories: {
+        ...basePolicy.categories,
+        screenshots,
+        screenRecordings
+      }
+    }
   };
 }
 
-async function ensureInjectedHooks(tabId: number): Promise<void> {
-  await chromeApi?.scripting
-    ?.executeScript({
-      target: { tabId },
-      world: "MAIN",
-      files: ["injected.js"]
-    })
-    .catch(() => undefined);
-}
+async function loadEnterprisePolicy(): Promise<EnterpriseRecorderPolicy> {
+  try {
+    const values = await chromeApi?.storage?.managed?.get(ENTERPRISE_POLICY_STORAGE_KEY);
+    const scoped = asRecord(values?.[ENTERPRISE_POLICY_STORAGE_KEY]);
 
-async function ensureContentScriptInjected(tabId: number): Promise<void> {
-  if (manifestDeclaresStaticContentScript()) {
-    return;
+    return normalizeEnterprisePolicy(scoped ?? values ?? {});
+  } catch {
+    return normalizeEnterprisePolicy({});
   }
-
-  await chromeApi?.scripting
-    ?.executeScript({
-      target: { tabId, allFrames: true },
-      world: "ISOLATED",
-      files: ["content.js"]
-    })
-    .catch(() => undefined);
 }
 
-function manifestDeclaresStaticContentScript(): boolean {
-  const manifest = chromeApi?.runtime?.getManifest?.();
-  const contentScripts = Array.isArray(manifest?.content_scripts) ? manifest.content_scripts : [];
+function withSessionCapturePolicy(
+  config: typeof DEFAULT_RECORDER_CONFIG,
+  context: {
+    tabId: number;
+    origin: string;
+    startedAt: number;
+  }
+): typeof DEFAULT_RECORDER_CONFIG {
+  const basePolicy =
+    config.capturePolicy ?? DEFAULT_RECORDER_CONFIG.capturePolicy ?? DEFAULT_CAPTURE_POLICY;
+  const sessionPolicy = bindCapturePolicyToSession(basePolicy, {
+    tabId: context.tabId,
+    origin: context.origin
+  });
+  const capturePolicy: CapturePolicy = {
+    ...sessionPolicy,
+    consent: {
+      ...sessionPolicy.consent,
+      grantedAt: new Date(context.startedAt).toISOString()
+    },
+    redaction: config.redaction
+  };
 
-  return contentScripts.some(
-    (entry) => Array.isArray(entry?.js) && entry.js.includes("content.js")
-  );
+  return {
+    ...config,
+    capturePolicy
+  };
 }
 
-function installLiteWebRequestCapture(): void {
-  if (!chromeApi?.webRequest || liteWebRequestCaptureCleanup) {
-    return;
+async function loadPerformanceBudgetConfig(): Promise<PerformanceBudgetConfig> {
+  const storedValues = await chromeApi?.storage?.local?.get(OPTIONS_STORAGE_KEY);
+  const stored = asRecord(storedValues?.[OPTIONS_STORAGE_KEY]);
+
+  if (!stored) {
+    return { ...DEFAULT_PERFORMANCE_BUDGET };
   }
 
-  const filter = { urls: ["<all_urls>"] };
-  const onBeforeRequest = (details: {
-    requestId: string;
-    tabId: number;
-    frameId?: number;
-    method?: string;
-    url: string;
-    timeStamp?: number;
-  }) => {
-    const runtime = resolveLiteRuntimeForWebRequest(details.tabId);
+  return normalizePerformanceBudget(stored.performanceBudget);
+}
 
-    if (!runtime) {
-      return;
-    }
+function resolveModeBaseConfig(mode: CaptureMode): typeof DEFAULT_RECORDER_CONFIG {
+  const base: typeof DEFAULT_RECORDER_CONFIG = {
+    ...DEFAULT_RECORDER_CONFIG,
+    mode
+  };
 
-    const startedAt = normalizeLiteNetworkTimestamp(details.timeStamp);
-    upsertRequestMeta(runtime.requestMeta, buildRequestMetaKey(details.requestId), {
-      url: details.url,
-      method: details.method,
-      startedAt
-    });
+  if (mode === "full") {
+    return {
+      ...base,
+      freezeOnNetworkFailure: false,
+      freezeOnLongTaskSpike: false,
+      sampling: {
+        ...base.sampling,
+        mousemoveHz: 12,
+        scrollHz: 10,
+        domFlushMs: 180,
+        snapshotIntervalMs: 30_000,
+        screenshotIdleMs: 12_000,
+        bodyCaptureMaxBytes: FULL_MODE_BODY_CAPTURE_MAX_BYTES
+      }
+    };
+  }
 
-    ingestRawEvent(
-      buildLiteNetworkRequestRawEvent(
-        {
-          sid: runtime.sid,
-          tabId: runtime.tabId,
-          frame: normalizeContentFrameId(details.frameId)
-        },
-        {
-          requestId: details.requestId,
-          method: details.method,
-          url: details.url,
-          timeStamp: startedAt
-        }
-      )
-    );
+  return {
+    ...base,
+    freezeOnNetworkFailure: false,
+    freezeOnLongTaskSpike: false,
+    sampling: {
+      ...base.sampling,
+      mousemoveHz: 14,
+      scrollHz: 10,
+      domFlushMs: 160,
+      snapshotIntervalMs: 30_000,
+      screenshotIdleMs: base.sampling.screenshotIdleMs,
+      bodyCaptureMaxBytes: 0
+    }
   };
+}
 
-  const onCompleted = (details: {
-    requestId: string;
-    tabId: number;
-    frameId?: number;
-    method?: string;
-    url: string;
-    statusCode?: number;
-    statusLine?: string;
-    timeStamp?: number;
-  }) => {
-    const runtime = resolveLiteRuntimeForWebRequest(details.tabId);
-
+async function updateSessionAnnotation(
+  sid: string,
+  tagsInput: unknown,
+  noteInput: unknown
+): Promise<void> {
+  const tags = normalizeSessionTags(tagsInput);
+  const note = normalizeSessionNote(noteInput);
+  await sessionAnnotationMutations.run(sid, async () => {
+    const runtime = sessionsBySid.get(sid);
     if (!runtime) {
       return;
     }
+    const previousRuntimeAnnotation = { tags: [...runtime.tags], note: runtime.note };
+    const previousAnnotation = sessionAnnotations.get(sid);
+
+    await commitSessionAnnotationMutation({
+      apply: () => {
+        if (runtime) {
+          runtime.tags = [...tags];
+          runtime.note = note;
+        }
+        sessionAnnotations.set(sid, {
+          tags: [...tags],
+          note
+        });
+      },
+      rollback: () => {
+        runtime.tags = previousRuntimeAnnotation.tags;
+        runtime.note = previousRuntimeAnnotation.note;
+        if (previousAnnotation) {
+          sessionAnnotations.set(sid, previousAnnotation);
+        } else {
+          sessionAnnotations.delete(sid);
+        }
+      },
+      persist: persistRuntimeAndAnnotations
+    });
+  });
+  pushSessionList();
+}
 
-    const metadata = getRequestMeta(runtime.requestMeta, buildRequestMetaKey(details.requestId));
-    const endedAt = normalizeLiteNetworkTimestamp(details.timeStamp);
+function getSessionAnnotation(sid: string): SessionAnnotation {
+  const annotation = sessionAnnotations.get(sid);
 
-    ingestRawEvent(
-      buildLiteNetworkResponseRawEvent(
-        {
-          sid: runtime.sid,
-          tabId: runtime.tabId,
-          frame: normalizeContentFrameId(details.frameId)
-        },
-        {
-          requestId: details.requestId,
-          method: details.method ?? metadata?.method,
-          url: details.url ?? metadata?.url ?? "unknown://request",
-          statusCode: details.statusCode,
-          statusLine: details.statusLine,
-          timeStamp: endedAt,
-          duration:
-            typeof metadata?.startedAt === "number"
-              ? Math.max(0, endedAt - metadata.startedAt)
-              : undefined
-        }
-      )
-    );
+  if (!annotation) {
+    return {
+      tags: []
+    };
+  }
 
-    deleteRequestMeta(runtime.requestMeta, buildRequestMetaKey(details.requestId));
+  return {
+    tags: [...annotation.tags],
+    note: annotation.note
   };
+}
 
-  const onErrorOccurred = (details: {
-    requestId: string;
-    tabId: number;
-    frameId?: number;
-    method?: string;
-    url: string;
-    error?: string;
-    timeStamp?: number;
-  }) => {
-    const runtime = resolveLiteRuntimeForWebRequest(details.tabId);
+function mergeStoredSessionAnnotation(runtime: PersistedRuntime): PersistedRuntime {
+  return mergePersistedSessionAnnotation(runtime, sessionAnnotations.get(runtime.sid));
+}
 
-    if (!runtime) {
-      return;
+async function deleteSessionAnnotationDurably(sid: string): Promise<boolean> {
+  return sessionAnnotationMutations.run(sid, async () => {
+    const previous = sessionAnnotations.get(sid);
+    if (!previous) {
+      return false;
     }
 
-    const metadata = getRequestMeta(runtime.requestMeta, buildRequestMetaKey(details.requestId));
-    const endedAt = normalizeLiteNetworkTimestamp(details.timeStamp);
-
-    ingestRawEvent(
-      buildLiteNetworkFailureRawEvent(
-        {
-          sid: runtime.sid,
-          tabId: runtime.tabId,
-          frame: normalizeContentFrameId(details.frameId)
-        },
-        {
-          requestId: details.requestId,
-          method: details.method ?? metadata?.method,
-          url: details.url ?? metadata?.url ?? "unknown://request",
-          timeStamp: endedAt,
-          duration:
-            typeof metadata?.startedAt === "number"
-              ? Math.max(0, endedAt - metadata.startedAt)
-              : undefined,
-          error: details.error
-        }
-      )
-    );
+    sessionAnnotations.delete(sid);
+    try {
+      await persistSessionAnnotations();
+      return true;
+    } catch (error) {
+      if (!sessionAnnotations.has(sid)) {
+        sessionAnnotations.set(sid, previous);
+      }
+      throw error;
+    }
+  });
+}
 
-    deleteRequestMeta(runtime.requestMeta, buildRequestMetaKey(details.requestId));
-  };
+async function loadSessionAnnotations(): Promise<void> {
+  sessionAnnotations.clear();
 
-  chromeApi.webRequest.onBeforeRequest.addListener(onBeforeRequest, filter);
-  chromeApi.webRequest.onCompleted.addListener(onCompleted, filter);
-  chromeApi.webRequest.onErrorOccurred.addListener(onErrorOccurred, filter);
+  if (!chromeApi?.storage?.local?.get) {
+    return;
+  }
 
-  liteWebRequestCaptureCleanup = () => {
-    chromeApi.webRequest?.onBeforeRequest.removeListener(onBeforeRequest);
-    chromeApi.webRequest?.onCompleted.removeListener(onCompleted);
-    chromeApi.webRequest?.onErrorOccurred.removeListener(onErrorOccurred);
-    liteWebRequestCaptureCleanup = null;
-  };
-}
+  const values = await chromeApi.storage.local.get(SESSION_ANNOTATIONS_STORAGE_KEY);
+  const raw = asRecord(values?.[SESSION_ANNOTATIONS_STORAGE_KEY]);
 
-function uninstallLiteWebRequestCaptureIfUnused(): void {
-  if (!liteWebRequestCaptureCleanup || hasActiveLiteRuntime()) {
+  if (!raw) {
     return;
   }
 
-  liteWebRequestCaptureCleanup();
-}
+  for (const [sid, payload] of Object.entries(raw)) {
+    const row = asRecord(payload);
+    const tags = normalizeSessionTags(row?.tags);
+    const note = normalizeSessionNote(row?.note);
 
-function hasActiveLiteRuntime(): boolean {
-  for (const runtime of sessionsByTab.values()) {
-    if (runtime.mode === "lite" && !runtime.stopping && !runtime.stoppedAt) {
-      return true;
-    }
+    sessionAnnotations.set(sid, {
+      tags,
+      note
+    });
   }
-
-  return false;
 }
 
-function resolveLiteRuntimeForWebRequest(tabId: number): SessionRuntime | undefined {
-  if (!Number.isFinite(tabId) || tabId < 0) {
-    return undefined;
+async function persistSessionAnnotations(): Promise<void> {
+  if (!chromeApi?.storage?.local?.set) {
+    throw new Error("Chrome storage is unavailable for session annotations.");
   }
 
-  const runtime = sessionsByTab.get(tabId);
+  await enqueueRuntimeStatePersist(async () => {
+    await chromeApi.storage!.local.set({
+      [SESSION_ANNOTATIONS_STORAGE_KEY]: serializeSessionAnnotations()
+    });
+  });
+}
 
-  if (!runtime || runtime.mode !== "lite" || runtime.stopping) {
-    return undefined;
+async function persistRuntimeAndAnnotations(): Promise<void> {
+  if (!chromeApi?.storage?.local?.set) {
+    throw new Error("Chrome storage is unavailable for the session annotation checkpoint.");
   }
 
-  return runtime;
+  await enqueueRuntimeStatePersist(async () => {
+    await chromeApi.storage!.local.set({
+      [ACTIVE_SESSION_STORAGE_KEY]: createCurrentRuntimeStateSnapshot(),
+      [SESSION_ANNOTATIONS_STORAGE_KEY]: serializeSessionAnnotations()
+    });
+  });
 }
 
-function normalizeLiteNetworkTimestamp(candidate: unknown): number {
-  return typeof candidate === "number" && Number.isFinite(candidate) && candidate > 0
-    ? Math.round(candidate)
-    : Date.now();
-}
+function serializeSessionAnnotations(): Record<string, SessionAnnotation> {
+  const serialized: Record<string, SessionAnnotation> = {};
 
-async function ensureOffscreenDocument(): Promise<void> {
-  if (!chromeApi?.offscreen?.createDocument || !chromeApi.runtime?.getURL) {
-    return;
+  for (const [sid, annotation] of sessionAnnotations.entries()) {
+    serialized[sid] = {
+      tags: [...annotation.tags],
+      note: annotation.note
+    };
   }
 
-  const offscreenUrl = chromeApi.runtime.getURL(OFFSCREEN_PATH);
-  const contexts = chromeApi.runtime.getContexts
-    ? await chromeApi.runtime.getContexts({
-        contextTypes: ["OFFSCREEN_DOCUMENT"],
-        documentUrls: [offscreenUrl]
-      })
-    : [];
+  return serialized;
+}
 
-  if (contexts.length > 0) {
-    return;
+function normalizeSessionTags(input: unknown): string[] {
+  if (!Array.isArray(input)) {
+    return [];
   }
 
-  await chromeApi.offscreen.createDocument({
-    url: OFFSCREEN_PATH,
-    reasons: ["DOM_PARSER", "USER_MEDIA"],
-    justification:
-      "WebBlackbox uses offscreen document for persistent local recording pipeline and optional tab video capture."
-  });
-}
+  const seen = new Set<string>();
+  const tags: string[] = [];
 
-function enqueue(
-  runtime: SessionRuntime,
-  task: () => Promise<void>,
-  options: { bestEffort?: boolean } = {}
-): boolean {
-  if (options.bestEffort) {
-    if (runtime.stopping || runtime.queueDepth >= BEST_EFFORT_QUEUE_MAX_PENDING) {
-      runtime.droppedBestEffortTasks += 1;
+  for (const raw of input) {
+    if (typeof raw !== "string") {
+      continue;
+    }
 
-      if (shouldLogPerf() && runtime.droppedBestEffortTasks % 50 === 0) {
-        console.info("[WebBlackbox][perf] dropped best-effort queue tasks", {
-          sid: runtime.sid,
-          dropped: runtime.droppedBestEffortTasks,
-          queueDepth: runtime.queueDepth
-        });
-      }
+    const normalized = raw.trim().slice(0, 40);
 
-      return false;
+    if (normalized.length === 0 || seen.has(normalized)) {
+      continue;
     }
-  }
 
-  runtime.queueDepth += 1;
-  runtime.queue = runtime.queue
-    .then(task)
-    .catch((error) => {
-      console.warn("[WebBlackbox] session queue error", error);
-    })
-    .finally(() => {
-      runtime.queueDepth = Math.max(0, runtime.queueDepth - 1);
-    });
+    seen.add(normalized);
+    tags.push(normalized);
 
-  return true;
-}
+    if (tags.length >= 12) {
+      break;
+    }
+  }
 
-function enqueueWithResult<TResult>(
-  runtime: SessionRuntime,
-  task: () => Promise<TResult>
-): Promise<TResult> {
-  return new Promise<TResult>((resolve, reject) => {
-    enqueue(runtime, async () => {
-      try {
-        resolve(await task());
-      } catch (error) {
-        reject(error instanceof Error ? error : new Error(String(error)));
-      }
-    });
-  });
+  return tags;
 }
 
-async function teardownCaptureInstrumentation(runtime: SessionRuntime): Promise<void> {
-  if (runtime.pipelineFlushTimer !== null) {
-    clearTimeout(runtime.pipelineFlushTimer);
-    runtime.pipelineFlushTimer = null;
+function normalizeSessionNote(input: unknown): string | undefined {
+  if (typeof input !== "string") {
+    return undefined;
   }
 
-  await cleanupCdpInstrumentation(runtime, runtime.cdpRouter);
-}
+  const normalized = input.trim();
 
-async function cleanupCdpInstrumentation(
-  runtime: SessionRuntime,
-  router: CdpRouter | null
-): Promise<void> {
-  if (runtime.screenshotInterval !== null) {
-    clearInterval(runtime.screenshotInterval);
-    runtime.screenshotInterval = null;
+  if (normalized.length === 0) {
+    return undefined;
   }
 
-  if (router) {
-    await router.detach(runtime.tabId).catch(() => undefined);
-  }
+  return normalized.slice(0, 500);
+}
+
+async function persistRuntimeState(options: { required?: boolean } = {}): Promise<void> {
+  if (!chromeApi?.storage?.local?.set) {
+    if (options.required) {
+      throw new Error("Chrome storage is unavailable for the runtime checkpoint.");
+    }
 
-  for (const dispose of runtime.removeCdpListeners.splice(0, runtime.removeCdpListeners.length)) {
-    dispose();
+    return;
   }
 
-  router?.dispose();
+  await enqueueRuntimeStatePersist(async () => {
+    const snapshot = createCurrentRuntimeStateSnapshot();
+    await chromeApi.storage!.local.set({
+      [ACTIVE_SESSION_STORAGE_KEY]: snapshot
+    });
+  });
+}
 
-  if (runtime.cdpRouter === router) {
-    runtime.cdpRouter = null;
+async function persistRuntimeStoppingTombstone(
+  runtime: SessionRuntime,
+  stopRequestedAt: number,
+  cleanupDeadline: number
+): Promise<void> {
+  if (!chromeApi?.storage?.local?.set) {
+    throw new Error("Chrome storage is unavailable for the stop checkpoint.");
   }
 
-  runtime.enabledCdpSessions.clear();
-  runtime.requestMeta.clear();
-  runtime.responseBodyCaptureTimestamps.length = 0;
-  runtime.heapSnapshotCapture = null;
+  await enqueueRuntimeStatePersist(async () => {
+    await persistDurableStopTombstone({
+      persist: async () => {
+        const snapshot = createCurrentRuntimeStateSnapshot({
+          state: "stopping",
+          runtime,
+          stopRequestedAt,
+          cleanupDeadline
+        });
+        await chromeApi.storage!.local.set({
+          [ACTIVE_SESSION_STORAGE_KEY]: snapshot
+        });
+      },
+      activate: () => {
+        runtime.stopping = true;
+        runtime.stopRequestedAt = stopRequestedAt;
+        runtime.cleanupDeadline = cleanupDeadline;
+      }
+    });
+  });
 }
 
-function scheduleStoppedRuntimeCleanup(runtime: SessionRuntime): void {
-  if (runtime.cleanupTimer !== null) {
-    clearTimeout(runtime.cleanupTimer);
+async function persistRuntimeStoppedCheckpoint(
+  runtime: SessionRuntime,
+  stoppedAt: number,
+  cleanupDeadline: number
+): Promise<void> {
+  if (!chromeApi?.storage?.local?.set) {
+    throw new Error("Chrome storage is unavailable for the stopped checkpoint.");
   }
 
-  runtime.cleanupTimer = setTimeout(() => {
-    void disposeStoppedSession(runtime);
-  }, STOPPED_SESSION_TTL_MS);
+  await enqueueRuntimeStatePersist(async () => {
+    const snapshot = createCurrentRuntimeStateSnapshot({
+      state: "stopped",
+      runtime,
+      stoppedAt,
+      cleanupDeadline
+    });
+    await chromeApi.storage!.local.set({
+      [ACTIVE_SESSION_STORAGE_KEY]: snapshot
+    });
+  });
 }
 
-async function disposeStoppedSession(runtime: SessionRuntime): Promise<void> {
-  if (!sessionsBySid.has(runtime.sid)) {
-    return;
-  }
+function createCurrentRuntimeStateSnapshot(
+  checkpoint?:
+    | {
+        state: "stopping";
+        runtime: SessionRuntime;
+        stopRequestedAt: number;
+        cleanupDeadline: number;
+      }
+    | {
+        state: "stopped";
+        runtime: SessionRuntime;
+        stoppedAt: number;
+        cleanupDeadline: number;
+      }
+) {
+  const finalizingScreenRecordings = new Set(
+    [...sessionsBySid.values()]
+      .filter((runtime) => runtime.screenRecording?.finalizing === true)
+      .map((runtime) => runtime.sid)
+  );
+  const omitCompletedScreenRecording = <Runtime extends PersistedRuntime>(
+    runtime: Runtime
+  ): Runtime => {
+    if (!finalizingScreenRecordings.has(runtime.sid) || !runtime.screenRecording) {
+      return runtime;
+    }
+    const { screenRecording: _completed, ...base } = runtime;
+    void _completed;
+    return base as Runtime;
+  };
+  const liveSessions = [...sessionsBySid.values()].map((runtime) => {
+    const persisted = toPersistedRuntime(runtime);
 
-  if (runtime.cleanupTimer !== null) {
-    clearTimeout(runtime.cleanupTimer);
-    runtime.cleanupTimer = null;
-  }
+    if (checkpoint?.runtime !== runtime) {
+      return persisted;
+    }
 
-  await flushBufferedPipelineEvents(runtime);
-  await runtime.queue;
-  await runtime.pipeline.flush().catch(() => undefined);
-  await runtime.pipeline
-    .close({
-      purge: true
-    })
-    .catch(() => undefined);
-  sessionsBySid.delete(runtime.sid);
+    if (checkpoint.state === "stopped") {
+      if (persisted.state !== "active" && persisted.state !== "stopping") {
+        throw new Error("Only a live runtime can enter the stopped checkpoint.");
+      }
 
-  if (sessionsByTab.size === 0) {
-    await setIdleBadge();
-  } else {
-    await setRecordingBadge();
-  }
+      return createStoppedRuntimeTombstone(
+        persisted,
+        checkpoint.stoppedAt,
+        checkpoint.cleanupDeadline
+      );
+    }
 
-  await closeOffscreenIfUnused();
-  pushSessionList();
-  await persistRuntimeState();
-  notifyOffscreenPipelineStatus();
+    if (persisted.state !== "active") {
+      throw new Error("Only an active runtime can enter the stopping checkpoint.");
+    }
+    return createStoppingRuntimeTombstone(
+      persisted,
+      checkpoint.stopRequestedAt,
+      checkpoint.cleanupDeadline
+    );
+  });
+  return createRuntimeStateSnapshot(
+    mergeRuntimeStateWithStoppingTombstones(
+      [
+        ...[...pendingRuntimeRestorationsBySid.values()].map(omitCompletedScreenRecording),
+        ...liveSessions
+      ],
+      [...retainedStoppingRuntimesBySid.values()].map(omitCompletedScreenRecording)
+    )
+  );
 }
 
-async function closeOffscreenIfUnused(): Promise<void> {
-  if (sessionsBySid.size > 0) {
-    return;
-  }
-
-  await chromeApi?.offscreen?.closeDocument?.().catch(() => undefined);
+function enqueueRuntimeStatePersist(operationFactory: () => Promise<void>): Promise<void> {
+  const operation = runtimeStatePersistTail.catch(() => undefined).then(operationFactory);
+  runtimeStatePersistTail = operation;
+  return operation;
 }
 
-async function downloadExportedBundle(
-  exported: PipelineExportDownloadResult,
-  saveAs: boolean
-): Promise<void> {
-  if (!chromeApi?.downloads?.download) {
-    throw new Error("Downloads API is unavailable in service worker context.");
+function scheduleRuntimeStatePersist(): void {
+  if (runtimeStatePersistTimer !== null) {
+    return;
   }
 
-  const downloadId = await chromeApi.downloads.download({
-    url: exported.downloadUrl,
-    filename: `webblackbox/${exported.fileName}`,
-    saveAs
-  });
-
-  exported.downloadId = downloadId;
+  runtimeStatePersistTimer = setTimeout(() => {
+    runtimeStatePersistTimer = null;
+    void persistRuntimeState().catch((error) => {
+      console.warn("[WebBlackbox] failed to persist runtime checkpoint", error);
+    });
+  }, RUNTIME_STATE_PERSIST_DEBOUNCE_MS);
 }
 
-function toSessionListItem(runtime: SessionRuntime): SessionListItem {
-  const activeRuntime = sessionsByTab.get(runtime.tabId);
-  const active = activeRuntime?.sid === runtime.sid;
-
-  return {
-    sid: runtime.sid,
-    tabId: runtime.tabId,
-    mode: runtime.mode,
-    startedAt: runtime.startedAt,
-    active,
-    stoppedAt: runtime.stoppedAt,
-    url: sanitizeUrlForPrivacy(runtime.url),
-    title: runtime.title,
-    ringBufferMinutes: runtime.config.ringBufferMinutes,
+function toPersistedRuntime(runtime: SessionRuntime): PersistedRuntime {
+  const recorderSequence = runtime.recorder.getSequenceState();
+  const counters: PersistedRuntimeCounters = {
+    recorderEventSequence: recorderSequence.event,
+    recorderActionSequence: recorderSequence.action,
     eventCount: runtime.capturedEventCount,
     errorCount: runtime.capturedErrorCount,
-    budgetAlertCount: runtime.budgetAlertCount,
     sizeBytes: runtime.capturedSizeBytes,
-    tags: [...runtime.tags],
-    note: runtime.note
+    budgetAlertCount: runtime.budgetAlertCount,
+    droppedBestEffortTasks: runtime.droppedBestEffortTasks,
+    responseBodyCaptures: runtime.responseBodyCaptures,
+    networkTotal: runtime.networkBudgetSample.total,
+    networkFailed: runtime.networkBudgetSample.failed
   };
-}
-
-function toSessionMetadata(runtime: SessionRuntime): SessionMetadata {
-  return {
+  const screenRecording: PersistedScreenRecording | undefined =
+    runtime.screenRecording && !runtime.screenRecording.finalizing
+      ? {
+          recordingId: runtime.screenRecording.recordingId,
+          startedAt: runtime.screenRecording.startedAt,
+          startedMono: runtime.screenRecording.startedMono,
+          mime: runtime.screenRecording.mime,
+          ...(runtime.screenRecording.width ? { width: runtime.screenRecording.width } : {}),
+          ...(runtime.screenRecording.height ? { height: runtime.screenRecording.height } : {}),
+          ...(runtime.screenRecording.frameRate
+            ? { frameRate: runtime.screenRecording.frameRate }
+            : {}),
+          chunkCount: runtime.screenRecording.chunkCount,
+          sizeBytes: runtime.screenRecording.sizeBytes
+        }
+      : undefined;
+  const base = {
     sid: runtime.sid,
     tabId: runtime.tabId,
-    startedAt: runtime.startedAt,
     mode: runtime.mode,
     url: sanitizeUrlForPrivacy(runtime.url),
-    title: runtime.title,
-    tags: [...runtime.tags]
+    ...(runtime.title ? { title: runtime.title.slice(0, 1_024) } : {}),
+    tags: normalizeSessionTags(runtime.tags),
+    ...(runtime.note ? { note: normalizeSessionNote(runtime.note) } : {}),
+    config: runtime.config,
+    startedAt: runtime.startedAt,
+    counters,
+    ...(screenRecording ? { screenRecording } : {})
   };
-}
-
-async function resolveTabSessionMetadata(
-  tabId: number
-): Promise<Pick<SessionMetadata, "url" | "title">> {
-  const fallbackUrl = `tab:${tabId}`;
 
-  if (!chromeApi?.tabs?.get) {
+  if (runtime.stoppedAt) {
+    const cleanupDeadline =
+      runtime.cleanupDeadline ??
+      runtime.stoppedAt + resolveRuntimeLocalTtlMs(runtime.config.capturePolicy);
     return {
-      url: fallbackUrl
+      ...base,
+      state: "stopped",
+      stoppedAt: runtime.stoppedAt,
+      cleanupDeadline
     };
   }
 
-  try {
-    const tab = await chromeApi.tabs.get(tabId);
-    const url =
-      typeof tab?.url === "string" && tab.url.length > 0
-        ? sanitizeUrlForPrivacy(tab.url)
-        : fallbackUrl;
-    const title =
-      typeof tab?.title === "string" && tab.title.trim().length > 0 ? tab.title.trim() : undefined;
+  if (runtime.stopping) {
+    if (runtime.stopRequestedAt === undefined || runtime.cleanupDeadline === undefined) {
+      throw new Error("Stopping session is missing its durable stop checkpoint metadata.");
+    }
 
     return {
-      url,
-      title
-    };
-  } catch {
-    return {
-      url: fallbackUrl
+      ...base,
+      state: "stopping",
+      stopRequestedAt: runtime.stopRequestedAt,
+      cleanupDeadline: runtime.cleanupDeadline
     };
   }
-}
 
-function updateSessionMetadataFromEvent(runtime: SessionRuntime, event: WebBlackboxEvent): void {
-  void updateSessionMetadataFromEventAsync(runtime, event).catch((error) => {
-    console.warn("[WebBlackbox] failed to update session navigation metadata", error);
-  });
+  return {
+    ...base,
+    state: "active"
+  };
 }
 
-async function updateSessionMetadataFromEventAsync(
-  runtime: SessionRuntime,
-  event: WebBlackboxEvent
-): Promise<void> {
-  if (
-    event.type !== "nav.commit" &&
-    event.type !== "nav.history.push" &&
-    event.type !== "nav.history.replace" &&
-    event.type !== "nav.hash"
-  ) {
+async function appendExportAuditEvent(event: ExportAuditEvent): Promise<void> {
+  if (!chromeApi?.storage?.local?.get || !chromeApi.storage.local.set) {
     return;
   }
 
-  const payload = asRecord(event.data);
+  const values = await chromeApi.storage.local.get(EXPORT_AUDIT_STORAGE_KEY);
+  const current = Array.isArray(values[EXPORT_AUDIT_STORAGE_KEY])
+    ? (values[EXPORT_AUDIT_STORAGE_KEY] as unknown[])
+    : [];
+  const events = [...current.slice(-EXPORT_AUDIT_MAX_EVENTS + 1), event];
 
-  if (!shouldUpdateSessionMetadataFromNavigation(event, payload)) {
+  await chromeApi.storage.local.set({
+    [EXPORT_AUDIT_STORAGE_KEY]: events
+  });
+}
+
+function redactOperationalMessage(message: string): string {
+  return message
+    .replaceAll(/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, "[redacted-email]")
+    .replaceAll(/Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi, "Bearer [redacted-token]")
+    .replaceAll(/\b(?:https?|file):\/\/[^\s)]+/gi, "[redacted-url]")
+    .slice(0, 240);
+}
+
+async function restoreRuntimeState(): Promise<void> {
+  await loadSessionAnnotations();
+  pendingRuntimeRestorationsBySid.clear();
+  runtimeRestorationSourceRowsBySid.clear();
+  runtimeRestorationCheckpointRewriteAllowed = false;
+
+  if (!chromeApi?.storage?.local?.get) {
     return;
   }
 
-  const frame = asRecord(payload?.frame);
-  const nextUrl = asString(payload?.url) ?? asString(frame?.url);
-  const nextTitle = asString(payload?.title) ?? asString(payload?.documentTitle);
-  let changed = false;
+  const values = await chromeApi.storage.local.get(ACTIVE_SESSION_STORAGE_KEY);
+  const persisted = values?.[ACTIVE_SESSION_STORAGE_KEY];
+  const snapshot = parseRuntimeStateSnapshot(persisted);
+  runtimeRestorationCheckpointRewriteAllowed = persisted === undefined || snapshot !== null;
 
-  const sanitizedNextUrl = nextUrl ? sanitizeUrlForPrivacy(nextUrl) : undefined;
+  if (persisted !== undefined && !snapshot) {
+    const identities = extractPersistedRuntimeIdentities(persisted);
 
-  if (sanitizedNextUrl && sanitizedNextUrl !== runtime.url) {
-    const nextOrigin = resolveUrlOrigin(sanitizedNextUrl);
+    for (const identity of identities) {
+      await notifyTabContentReset(identity.tabId, "invalid-runtime-snapshot");
+      await purgePersistedRuntimeData(
+        {
+          ...identity,
+          mode: "lite",
+          url: "https://invalid.invalid/",
+          title: undefined,
+          tags: [],
+          config: withSessionCapturePolicy(resolveModeBaseConfig("lite"), {
+            tabId: identity.tabId,
+            origin: "https://invalid.invalid",
+            startedAt: identity.startedAt
+          })
+        },
+        {
+          rethrow: true
+        }
+      );
+    }
 
-    if (shouldStopOnOriginChange(runtime, nextOrigin)) {
-      await stopSession(runtime.tabId);
-      return;
+    sessionAnnotations.clear();
+    await persistSessionAnnotations();
+    await chromeApi.storage.local.set({
+      [ACTIVE_SESSION_STORAGE_KEY]: createRuntimeStateSnapshot([])
+    });
+    runtimeRestorationCheckpointRewriteAllowed = true;
+    await clearStaleRuntimeCleanupAlarms(new Set());
+  } else if (snapshot) {
+    const restoredSessions = snapshot.sessions.map(mergeStoredSessionAnnotation);
+    runtimeRestorationSourceRowsBySid.clear();
+    for (const runtime of restoredSessions) {
+      runtimeRestorationSourceRowsBySid.set(runtime.sid, runtime);
+      pendingRuntimeRestorationsBySid.set(runtime.sid, runtime);
     }
 
-    if (await shouldStopForEnterpriseOriginPolicy(nextOrigin)) {
-      await stopSession(runtime.tabId);
-      return;
+    const enterprisePolicy = await loadEnterprisePolicy();
+    const performanceBudget = await loadPerformanceBudgetConfig();
+    const stoppedRuntimes: SessionRuntime[] = [];
+    const restorationOrder = [
+      ...restoredSessions.filter((runtime) => runtime.state === "stopping"),
+      ...restoredSessions.filter((runtime) => runtime.state !== "stopping")
+    ];
+
+    for (const persistedRuntime of restorationOrder) {
+      let keepPendingRestoration = false;
+      const config = applyEnterprisePolicyToRecorderConfig(
+        persistedRuntime.config,
+        enterprisePolicy
+      );
+
+      try {
+        const restorationPlan = planRuntimeRestoration(persistedRuntime);
+
+        if (restorationPlan.kind === "retain-stopped") {
+          const runtime = await restoreStoppedRuntime(
+            restorationPlan.runtime,
+            config,
+            performanceBudget
+          );
+          stoppedRuntimes.push(runtime);
+          continue;
+        }
+
+        if (restorationPlan.kind === "finalize-stopping") {
+          const retainedTombstone: PersistedStoppingRuntime = {
+            ...restorationPlan.runtime,
+            config
+          };
+          retainedStoppingRuntimesBySid.set(retainedTombstone.sid, retainedTombstone);
+          await notifyTabContentReset(restorationPlan.runtime.tabId, "stopping-runtime-recovery");
+          const runtime = await finalizeRetainedStoppingRuntime(
+            retainedTombstone,
+            config,
+            performanceBudget
+          );
+          stoppedRuntimes.push(runtime);
+          continue;
+        }
+
+        const restoration = await restoreActiveRuntime(
+          restorationPlan.runtime,
+          config,
+          performanceBudget
+        );
+
+        if (restoration.kind === "rejected") {
+          await notifyTabContentReset(restorationPlan.runtime.tabId, "runtime-restore-rejected");
+          const retained = await checkpointFailedActiveRuntimeCleanup({
+            ...restorationPlan.runtime,
+            config
+          });
+          const runtime = await finalizeRetainedStoppingRuntime(
+            retained,
+            config,
+            performanceBudget
+          );
+          stoppedRuntimes.push(runtime);
+          continue;
+        }
+
+        if (restoration.kind === "failed-cleaned") {
+          const retained = retainedStoppingRuntimesBySid.get(restorationPlan.runtime.sid);
+
+          if (!retained) {
+            throw new Error("Failed active restoration is missing its retained stopping row.");
+          }
+
+          const runtime = await finalizeRetainedStoppingRuntime(
+            retained,
+            config,
+            performanceBudget
+          );
+          stoppedRuntimes.push(runtime);
+        }
+      } catch (error) {
+        console.warn("[WebBlackbox] failed closed while restoring session", {
+          sid: persistedRuntime.sid,
+          error: error instanceof Error ? error.message : String(error)
+        });
+        await notifyTabContentReset(persistedRuntime.tabId, "runtime-restore-failed");
+
+        if (persistedRuntime.state === "stopping") {
+          console.warn("[WebBlackbox] retained stopping tombstone for recovery retry", {
+            sid: persistedRuntime.sid
+          });
+          const retained = retainedStoppingRuntimesBySid.get(persistedRuntime.sid) ?? {
+            ...persistedRuntime,
+            config
+          };
+          retainedStoppingRuntimesBySid.set(retained.sid, retained);
+          await scheduleRetainedStoppingRuntimeRecovery(retained).catch((scheduleError) => {
+            console.warn("[WebBlackbox] stopping recovery retry schedule failed", {
+              sid: persistedRuntime.sid,
+              error: scheduleError instanceof Error ? scheduleError.message : String(scheduleError)
+            });
+          });
+          continue;
+        }
+
+        if (persistedRuntime.state === "stopped") {
+          const retainedStopped: PersistedStoppedRuntime = {
+            ...persistedRuntime,
+            config
+          };
+          pendingRuntimeRestorationsBySid.set(retainedStopped.sid, retainedStopped);
+          keepPendingRestoration = true;
+          await scheduleRetainedStoppedRuntimeRecovery(retainedStopped).catch(() => undefined);
+          continue;
+        }
+
+        const retained =
+          retainedStoppingRuntimesBySid.get(persistedRuntime.sid) ??
+          (await checkpointFailedActiveRuntimeCleanup({ ...persistedRuntime, config }));
+
+        try {
+          const runtime = await finalizeRetainedStoppingRuntime(
+            retained,
+            config,
+            performanceBudget
+          );
+          stoppedRuntimes.push(runtime);
+        } catch (retentionError) {
+          console.warn("[WebBlackbox] active restoration retention remains pending", {
+            sid: persistedRuntime.sid,
+            error: retentionError instanceof Error ? retentionError.message : String(retentionError)
+          });
+          await scheduleRetainedStoppingRuntimeRecovery(retained).catch(() => undefined);
+        }
+      } finally {
+        if (!keepPendingRestoration) {
+          pendingRuntimeRestorationsBySid.delete(persistedRuntime.sid);
+        }
+      }
     }
 
-    runtime.url = sanitizedNextUrl;
-    changed = true;
-  }
+    await clearStaleRuntimeCleanupAlarms(
+      new Set([
+        ...stoppedRuntimes.map((runtime) => runtime.sid),
+        ...retainedStoppingRuntimesBySid.keys()
+      ])
+    );
 
-  if (nextTitle && nextTitle.trim().length > 0 && nextTitle !== runtime.title) {
-    runtime.title = nextTitle.trim();
-    changed = true;
-  }
+    for (const runtime of stoppedRuntimes) {
+      if (sessionsBySid.get(runtime.sid) === runtime) {
+        await scheduleStoppedRuntimeCleanup(runtime).catch((error) => {
+          console.warn("[WebBlackbox] stopped-session cleanup scheduled for retry", {
+            sid: runtime.sid,
+            error: error instanceof Error ? error.message : String(error)
+          });
+        });
+      }
+    }
 
-  if (changed) {
-    pushSessionList();
+    await persistRuntimeState();
+    runtimeRestorationSourceRowsBySid.clear();
   }
-}
 
-function pushSessionList(): void {
-  broadcast(buildSessionListMessage());
+  if (sessionsByTab.size > 0) {
+    await setRecordingBadge();
+  } else {
+    await setIdleBadge();
+  }
+  pushSessionList();
+  notifyOffscreenPipelineStatus();
 }
 
-function buildSessionListMessage(): SessionListMessage {
-  const sessions: SessionListItem[] = [...sessionsBySid.values()]
-    .map((runtime) => toSessionListItem(runtime))
-    .sort((left, right) => {
-      const activeDiff = Number(right.active) - Number(left.active);
+async function failClosedRuntimeRestoration(): Promise<void> {
+  const runtimes = [...sessionsBySid.values()];
+  const durableRecoveryCheckpoint = new DurableRuntimeRecoveryCheckpoint();
+  const currentRows: PersistedRuntime[] = [];
+  for (const runtime of runtimes) {
+    try {
+      currentRows.push(toPersistedRuntime(runtime));
+    } catch (error) {
+      console.warn("[WebBlackbox] failed to snapshot a partial restored runtime", {
+        sid: runtime.sid,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  const recoveryRows = preserveRuntimeRowsAfterGlobalRestoreFailure({
+    rows: [
+      ...runtimeRestorationSourceRowsBySid.values(),
+      ...pendingRuntimeRestorationsBySid.values(),
+      ...currentRows,
+      ...retainedStoppingRuntimesBySid.values()
+    ],
+    failedAt: Date.now(),
+    resolveLocalTtlMs: (runtime) => resolveRuntimeLocalTtlMs(runtime.config.capturePolicy)
+  });
 
-      if (activeDiff !== 0) {
-        return activeDiff;
+  if (runtimeRestorationCheckpointRewriteAllowed || recoveryRows.length > 0) {
+    let checkpointError: unknown;
+    const persisted = await durableRecoveryCheckpoint.attempt(async () => {
+      try {
+        if (!chromeApi?.storage?.local?.set) {
+          throw new Error("Chrome storage is unavailable for fail-closed restoration.");
+        }
+        await chromeApi.storage.local.set({
+          [ACTIVE_SESSION_STORAGE_KEY]: createRuntimeStateSnapshot(recoveryRows)
+        });
+      } catch (error) {
+        checkpointError = error;
+        throw error;
       }
-
-      return right.startedAt - left.startedAt;
     });
+    if (!persisted) {
+      console.warn(
+        "[WebBlackbox] failed to persist fail-closed restoration identities",
+        checkpointError
+      );
+    }
+  } else {
+    console.warn(
+      "[WebBlackbox] left the unread runtime checkpoint untouched after restore failure"
+    );
+  }
 
-  return {
-    kind: "sw.session-list",
-    sessions
-  };
-}
+  sessionsByTab.clear();
+  uninstallLiteWebRequestCaptureIfUnused();
 
-async function handleTabUrlChanged(tabId: number, rawUrl: string): Promise<void> {
-  const runtime = sessionsByTab.get(tabId);
+  for (const runtime of runtimes) {
+    await runtimeCleanupScheduler.cancel(runtime.sid).catch(() => undefined);
+    blockVolatileCapture(runtime.captureFence);
+    runtime.queueAccepting = false;
+    cancelRuntimeStopDrain(runtime);
 
-  if (!runtime || runtime.stoppedAt) {
-    return;
-  }
+    if (!runtime.stoppedAt) {
+      await notifyAuthorizedContentFrames(runtime, false).catch(() => undefined);
+      await teardownCaptureInstrumentation(runtime).catch(() => undefined);
+    }
 
-  const nextUrl = sanitizeUrlForPrivacy(rawUrl);
-  const nextOrigin = resolveUrlOrigin(nextUrl);
+    resetAuthorizedContentFrames(runtime);
 
-  if (shouldStopOnOriginChange(runtime, nextOrigin)) {
-    await stopSession(tabId);
-    return;
+    await runtime.pipeline.close({ purge: false }).catch((error) => {
+      console.warn("[WebBlackbox] failed to retain a partial restored pipeline", {
+        sid: runtime.sid,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    });
+    deleteMapEntryIfSame(sessionsBySid, runtime.sid, runtime);
   }
 
-  if (await shouldStopForEnterpriseOriginPolicy(nextOrigin)) {
-    await stopSession(tabId);
-    return;
+  sessionsBySid.clear();
+  retainedStoppingRuntimesBySid.clear();
+  pendingRuntimeRestorationsBySid.clear();
+  runtimeRestorationSourceRowsBySid.clear();
+
+  for (const runtime of recoveryRows) {
+    if (runtime.state === "stopping") {
+      retainedStoppingRuntimesBySid.set(runtime.sid, runtime);
+      await scheduleRetainedStoppingRuntimeRecovery(runtime).catch(() => undefined);
+    } else if (runtime.state === "stopped") {
+      pendingRuntimeRestorationsBySid.set(runtime.sid, runtime);
+      await scheduleRetainedStoppedRuntimeRecovery(runtime).catch(() => undefined);
+    }
   }
 
-  if (nextUrl !== runtime.url) {
-    runtime.url = nextUrl;
-    pushSessionList();
+  if (runtimeRestorationCheckpointRewriteAllowed || recoveryRows.length > 0) {
+    let checkpointError: unknown;
+    const persisted = await durableRecoveryCheckpoint.attempt(async () => {
+      try {
+        await persistRuntimeState({ required: true });
+      } catch (error) {
+        checkpointError = error;
+        throw error;
+      }
+    });
+    if (!persisted) {
+      console.warn(
+        "[WebBlackbox] fail-closed restoration checkpoint remains pending",
+        checkpointError
+      );
+    }
   }
-}
 
-function shouldStopOnOriginChange(runtime: SessionRuntime, nextOrigin: string | null): boolean {
-  return shouldStopForCaptureScopeOriginChange({
-    scopeOrigin: runtime.scopeOrigin,
-    nextOrigin,
-    stopOnOriginChange: runtime.config.capturePolicy?.scope.stopOnOriginChange === true,
-    activeTabScopedBuild: isActiveTabScopedBuild()
-  });
-}
+  for (const port of connectedPorts) {
+    if (port.name === PORT_NAMES.content) {
+      contentActivations.unbindPort(port);
+      port.disconnect?.();
+    }
+  }
 
-async function shouldStopForEnterpriseOriginPolicy(nextOrigin: string | null): Promise<boolean> {
-  const enterprisePolicy = await loadEnterprisePolicy();
+  await setIdleBadge();
+  pushSessionList();
+  notifyOffscreenPipelineStatus();
 
-  return shouldStopForEnterpriseOriginPolicyInput({
-    nextOrigin,
-    isEnterpriseOriginAllowed: (origin) => isEnterpriseOriginAllowed(origin, enterprisePolicy)
-  });
+  durableRecoveryCheckpoint.requirePersisted();
 }
 
-function isActiveTabScopedBuild(): boolean {
-  const manifest = chromeApi?.runtime?.getManifest?.();
-  const permissions = new Set(manifest?.permissions ?? []);
-  const hostPermissions = manifest?.host_permissions ?? [];
-
-  return permissions.has("activeTab") && hostPermissions.length === 0;
-}
+async function restoreActiveRuntime(
+  persisted: PersistedActiveRuntime,
+  config: typeof DEFAULT_RECORDER_CONFIG,
+  performanceBudget: PerformanceBudgetConfig
+): Promise<
+  | Readonly<{ kind: "restored"; runtime: SessionRuntime }>
+  | Readonly<{ kind: "rejected" }>
+  | Readonly<{ kind: "failed-cleaned" }>
+> {
+  let tab: {
+    id?: number;
+    active?: boolean;
+    url?: string;
+    title?: string;
+    lastAccessed?: number;
+  } | null = null;
 
-function resolveUrlOrigin(value: string): string | null {
   try {
-    const url = new URL(value);
-    return url.origin === "null" ? null : url.origin;
+    tab = chromeApi?.tabs?.get ? await chromeApi.tabs.get(persisted.tabId) : null;
   } catch {
-    return null;
-  }
-}
-
-function broadcast(message: ExtensionOutboundMessage): void {
-  for (const port of connectedPorts) {
-    sendPortMessage(port, message);
+    tab = null;
   }
-}
 
-function sendPortMessage(port: PortLike, message: ExtensionOutboundMessage): void {
+  const candidate: PersistedActiveRuntime = {
+    ...persisted,
+    config
+  };
   try {
-    port.postMessage(message);
+    assertRuntimeStartRequirements(resolveInstalledRuntimeCapabilities(chromeApi), {
+      mode: persisted.mode,
+      screenRecording:
+        persisted.mode === "full" && config.capturePolicy?.categories.screenRecordings === "allow"
+    });
   } catch (error) {
-    connectedPorts.delete(port);
-
-    if (offscreenPort === port) {
-      offscreenPort = null;
-    }
+    console.warn("[WebBlackbox] active session capability checkpoint rejected", {
+      sid: persisted.sid,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return { kind: "rejected" };
+  }
+  const decision = evaluateActiveRuntimeRestoration(candidate, tab, Date.now());
 
-    logPortSendFailure(message.kind, error, {
-      portName: port.name
+  if (!decision.allowed) {
+    console.warn("[WebBlackbox] active session checkpoint rejected", {
+      sid: persisted.sid,
+      reason: decision.reason
     });
+    return { kind: "rejected" };
   }
-}
 
-async function loadRecorderConfig(mode: CaptureMode): Promise<typeof DEFAULT_RECORDER_CONFIG> {
-  const baseConfig = resolveModeBaseConfig(mode);
+  const pipeline = createOffscreenPipelineClient(persisted.sid);
+  const transaction = await runActiveRuntimeRestorationTransaction({
+    startPipeline: async () => {
+      await ensureOffscreenDocument();
+      await pipeline.start(
+        {
+          sid: persisted.sid,
+          tabId: persisted.tabId,
+          startedAt: persisted.startedAt,
+          mode: persisted.mode,
+          url: decision.sanitizedUrl,
+          title: persisted.title,
+          tags: [...persisted.tags]
+        },
+        config.redaction,
+        config.capturePolicy
+      );
+    },
+    prepareRuntime: async () => {
+      const resumeState = await pipeline.getResumeState();
+      const restoredCounters = mergeRuntimeCountersWithSequenceWatermark(
+        persisted.counters,
+        resumeState.sequenceWatermark
+      );
+      const screenRecordingResume = persisted.screenRecording
+        ? resumeState.screenRecordings.find(
+            (recording) => recording.recordingId === persisted.screenRecording?.recordingId
+          )
+        : undefined;
+      const screenRecordingStatus = normalizeOffscreenScreenRecordingStatus(
+        await requestOffscreenPipeline<unknown>({
+          op: "getScreenRecordingStatus",
+          sid: persisted.sid
+        })
+      );
+      if (screenRecordingStatus.active && screenRecordingStatus.quiescedForStop) {
+        throw new Error("Recovered screen recording carries an unfinished stop intent.");
+      }
+      const reconciledScreenRecording = reconcileScreenRecordingResumeState(
+        persisted.screenRecording,
+        screenRecordingResume
+      );
+      const screenRecordingAllowedByCurrentPolicy =
+        persisted.mode === "full" && config.capturePolicy?.categories.screenRecordings === "allow";
+      const recorderSurvived = Boolean(
+        screenRecordingAllowedByCurrentPolicy &&
+        persisted.screenRecording &&
+        screenRecordingStatus.active &&
+        screenRecordingStatus.recordingId === persisted.screenRecording.recordingId &&
+        reconciledScreenRecording.screenRecording
+      );
+      let policyStoppedRecordingId: string | undefined;
+
+      if (screenRecordingStatus.active && !screenRecordingAllowedByCurrentPolicy) {
+        await requestOffscreenPipeline<OffscreenScreenRecordingStopResult>({
+          op: "stopScreenRecording",
+          sid: persisted.sid,
+          recordingId: screenRecordingStatus.recordingId,
+          reason: "policy-disabled-after-restart"
+        });
+        policyStoppedRecordingId = screenRecordingStatus.recordingId;
+      }
 
-  const storedValues = await chromeApi?.storage?.local?.get(OPTIONS_STORAGE_KEY);
+      const statusResume = screenRecordingStatus.active
+        ? resumeState.screenRecordings.find(
+            (recording) => recording.recordingId === screenRecordingStatus.recordingId
+          )
+        : undefined;
+      const provisionalPersistedScreenRecording =
+        screenRecordingStatus.active && screenRecordingAllowedByCurrentPolicy && !recorderSurvived
+          ? screenRecordingStatus.recordingId === persisted.screenRecording?.recordingId
+            ? persisted.screenRecording
+            : {
+                recordingId: screenRecordingStatus.recordingId,
+                startedAt: Date.now(),
+                startedMono: monotonicTime(),
+                mime: screenRecordingStatus.mime,
+                width: screenRecordingStatus.width,
+                height: screenRecordingStatus.height,
+                frameRate: screenRecordingStatus.frameRate,
+                chunkCount: 0,
+                sizeBytes: 0
+              }
+          : undefined;
+      const provisionalScreenRecording = reconcileScreenRecordingResumeState(
+        provisionalPersistedScreenRecording,
+        statusResume
+      );
+      const screenRecording = recorderSurvived
+        ? reconciledScreenRecording.screenRecording
+        : provisionalPersistedScreenRecording
+          ? (provisionalScreenRecording.screenRecording ?? {
+              ...provisionalPersistedScreenRecording,
+              chunkCount: 0,
+              sizeBytes: 0
+            })
+          : undefined;
+      const screenRecordingChunks = recorderSurvived
+        ? reconciledScreenRecording.chunks
+        : provisionalPersistedScreenRecording
+          ? (provisionalScreenRecording.chunks ?? [])
+          : undefined;
+      const runtime = createSessionRuntime({
+        sid: persisted.sid,
+        tabId: persisted.tabId,
+        mode: persisted.mode,
+        url: decision.sanitizedUrl,
+        captureUrl: decision.captureUrl,
+        title:
+          typeof tab?.title === "string" && tab.title.trim().length > 0
+            ? tab.title.trim().slice(0, 1_024)
+            : persisted.title,
+        tags: persisted.tags,
+        note: persisted.note,
+        config,
+        startedAt: persisted.startedAt,
+        pipeline,
+        performanceBudget,
+        counters: restoredCounters,
+        screenRecording,
+        screenRecordingChunks,
+        activationState: "starting"
+      });
 
-  return resolveModeRecorderConfig(mode, baseConfig, storedValues?.[OPTIONS_STORAGE_KEY]);
-}
+      return {
+        runtime,
+        resumeState,
+        screenRecordingStatus,
+        screenRecordingAllowedByCurrentPolicy,
+        recorderSurvived,
+        policyStoppedRecordingId
+      };
+    },
+    registerRuntime: ({ runtime }) => {
+      sessionsByTab.set(runtime.tabId, runtime);
+      sessionsBySid.set(runtime.sid, runtime);
+      scheduleConsentExpiry(runtime);
+    },
+    completeRuntime: async ({
+      runtime,
+      resumeState,
+      screenRecordingStatus,
+      screenRecordingAllowedByCurrentPolicy,
+      recorderSurvived,
+      policyStoppedRecordingId
+    }) => {
+      let recoveredRecordingId = policyStoppedRecordingId;
+
+      if (
+        screenRecordingStatus.active &&
+        screenRecordingAllowedByCurrentPolicy &&
+        !recorderSurvived
+      ) {
+        const stopped = await requestOffscreenPipeline<OffscreenScreenRecordingStopResult>({
+          op: "stopScreenRecording",
+          sid: persisted.sid,
+          recordingId: screenRecordingStatus.recordingId,
+          reason: "resume-state-not-durable"
+        });
+        await finalizeScreenRecording(runtime, stopped);
+        await flushBufferedPipelineEvents(runtime);
+        await runtime.pipeline.flush();
+        recoveredRecordingId = screenRecordingStatus.recordingId;
+      }
 
-function resolveFullModeVisualCapture(
-  message: ExtensionInboundMessage
-): FullModeVisualCapture | undefined {
-  if (message.kind !== "ui.start" || message.mode !== "full") {
-    return undefined;
-  }
+      const interruptedScreenRecordings = buildInterruptedScreenRecordingRecoveries({
+        persisted: persisted.screenRecording,
+        resumeState,
+        status: screenRecordingStatus,
+        claimedRecordingId:
+          recoveredRecordingId ??
+          (recorderSurvived ? persisted.screenRecording?.recordingId : undefined)
+      });
 
-  if (isFullModeVisualCapture(message.visualCapture)) {
-    return message.visualCapture;
-  }
+      if (runtime.mode === "lite") {
+        installLiteWebRequestCapture();
+      }
 
-  return message.recordScreen === true ? "both" : undefined;
-}
+      if (shouldInjectIsolatedContentForMode(runtime.mode)) {
+        await ensureRootPageAgentsInjected(runtime, {
+          assertCurrent: () => {
+            if (!isRuntimeCurrentCaptureOpen(runtime)) {
+              throw new Error("The restoring runtime changed during root script injection.");
+            }
+          }
+        });
+      }
 
-function isFullModeVisualCapture(value: unknown): value is FullModeVisualCapture {
-  return value === "screenshots" || value === "recording" || value === "both" || value === "none";
-}
+      if (runtime.mode === "full" && runtime.config.capturePolicy?.categories.cdp !== "off") {
+        await attachCdp(runtime);
+      }
 
-function applyFullModeVisualCapture(
-  config: typeof DEFAULT_RECORDER_CONFIG,
-  mode: CaptureMode,
-  visualCapture: FullModeVisualCapture | undefined
-): typeof DEFAULT_RECORDER_CONFIG {
-  if (mode !== "full" || !visualCapture) {
-    return config;
-  }
+      if (runtime.screenRecording && claimRuntimeGlobalCdpCapture(runtime, true) === null) {
+        await stopScreenRecording(runtime, "capture-scope");
+      }
 
-  const basePolicy =
-    config.capturePolicy ?? DEFAULT_RECORDER_CONFIG.capturePolicy ?? DEFAULT_CAPTURE_POLICY;
-  const screenshots = visualCapture === "screenshots" || visualCapture === "both" ? "allow" : "off";
-  const screenRecordings =
-    visualCapture === "recording" || visualCapture === "both" ? "allow" : "off";
+      if (interruptedScreenRecordings.length > 0) {
+        for (const interrupted of interruptedScreenRecordings) {
+          const hashes = [...interrupted.chunks]
+            .sort((left, right) => left.index - right.index)
+            .map((chunk) => chunk.hash);
+          const endedAt = Date.now();
+
+          ingestRawEvent({
+            source: "system",
+            rawType: "screen.recording.end",
+            sid: runtime.sid,
+            tabId: runtime.tabId,
+            t: endedAt,
+            mono: monotonicTime(),
+            payload: {
+              recordingId: interrupted.recordingId,
+              mime: interrupted.mime,
+              chunks: hashes,
+              chunkCount: hashes.length,
+              size: interrupted.sizeBytes,
+              durationMs: interrupted.startedAt
+                ? Math.max(0, Math.round(endedAt - interrupted.startedAt))
+                : 0,
+              width: interrupted.width,
+              height: interrupted.height,
+              reason: "offscreen-restart"
+            }
+          });
+          ingestRawEvent({
+            source: "system",
+            rawType: "screen.recording.error",
+            sid: runtime.sid,
+            tabId: runtime.tabId,
+            t: endedAt,
+            mono: monotonicTime(),
+            payload: {
+              recordingId: interrupted.recordingId,
+              name: "OffscreenRecordingInterrupted",
+              message: "Screen recording was interrupted while the extension runtime restarted.",
+              stage: "restart"
+            }
+          });
+        }
 
-  return {
-    ...config,
-    capturePolicy: {
-      ...basePolicy,
-      categories: {
-        ...basePolicy.categories,
-        screenshots,
-        screenRecordings
+        await flushBufferedPipelineEvents(runtime);
+        await runtime.pipeline.flush();
       }
-    }
-  };
-}
 
-async function loadEnterprisePolicy(): Promise<EnterpriseRecorderPolicy> {
-  try {
-    const values = await chromeApi?.storage?.managed?.get(ENTERPRISE_POLICY_STORAGE_KEY);
-    const scoped = asRecord(values?.[ENTERPRISE_POLICY_STORAGE_KEY]);
+      if (!runtime.screenRecording && shouldStartScreenRecording(runtime, true)) {
+        await startScreenRecording(runtime, true);
 
-    return normalizeEnterprisePolicy(scoped ?? values ?? {});
-  } catch {
-    return normalizeEnterprisePolicy({});
-  }
-}
+        if (!runtime.screenRecording && shouldStartScreenRecording(runtime, true)) {
+          throw new Error("Screen recording did not restart before runtime restoration committed.");
+        }
 
-function withSessionCapturePolicy(
-  config: typeof DEFAULT_RECORDER_CONFIG,
-  context: {
-    tabId: number;
-    origin: string;
-    startedAt: number;
-  }
-): typeof DEFAULT_RECORDER_CONFIG {
-  const basePolicy =
-    config.capturePolicy ?? DEFAULT_RECORDER_CONFIG.capturePolicy ?? DEFAULT_CAPTURE_POLICY;
-  const capturePolicy: CapturePolicy = {
-    ...basePolicy,
-    consent: {
-      ...basePolicy.consent,
-      grantedAt: new Date(context.startedAt).toISOString()
+        await flushBufferedPipelineEvents(runtime);
+        await runtime.pipeline.flush();
+      }
+
+      // This is the last fallible restoration stage. It also drains a
+      // survived recording that was stopped because the restored frame tree
+      // is globally blocked, even when there were no interrupted rows.
+      await flushBufferedPipelineEvents(runtime);
+      await runtime.pipeline.flush();
     },
-    scope: {
-      ...basePolicy.scope,
-      tabId: context.tabId,
-      origin: context.origin,
-      allowedOrigins: [...basePolicy.scope.allowedOrigins],
-      stopOnOriginChange: false
+    activateRuntime: ({ runtime }) => {
+      const armedRoot = requireArmedRootContentActivation(runtime);
+
+      if (
+        !isMapEntrySame(sessionsByTab, runtime.tabId, runtime) ||
+        !isMapEntrySame(sessionsBySid, runtime.sid, runtime) ||
+        !isVolatileCaptureOpen(runtime.captureFence) ||
+        runtime.activationState !== "starting" ||
+        runtime.stopping ||
+        runtime.stoppedAt !== undefined ||
+        (runtime.screenRecording !== null && !runtime.screenRecording.provisional)
+      ) {
+        throw new Error("The restoring runtime lost its content activation identity.");
+      }
+
+      activateArmedRuntimeContent(runtime, armedRoot.activationId);
+      commitRestoredRuntimeActivation(runtime, {
+        currentByTab: isMapEntrySame(sessionsByTab, runtime.tabId, runtime),
+        currentBySid: isMapEntrySame(sessionsBySid, runtime.sid, runtime)
+      });
     },
-    redaction: config.redaction
-  };
+    cleanupPipeline: () => cleanupFailedPipelineRestoration(candidate, pipeline),
+    cleanupRuntime: ({ runtime }) => cleanupFailedActiveRuntimeRestoration(candidate, runtime)
+  });
 
-  return {
-    ...config,
-    capturePolicy
-  };
-}
+  if (transaction.kind === "restored") {
+    await notifyAuthorizedContentFrames(transaction.runtime.runtime, true).catch(() => undefined);
+    scheduleFullModeSessionStartArtifacts(transaction.runtime.runtime);
+    return { kind: "restored", runtime: transaction.runtime.runtime };
+  }
+
+  console.warn("[WebBlackbox] partial active runtime restoration retained as stopping", {
+    sid: persisted.sid,
+    phase: transaction.phase,
+    error:
+      transaction.error instanceof Error ? transaction.error.message : String(transaction.error),
+    cleanupError:
+      transaction.cleanupError instanceof Error
+        ? transaction.cleanupError.message
+        : transaction.cleanupError === undefined
+          ? undefined
+          : String(transaction.cleanupError)
+  });
 
-async function loadPerformanceBudgetConfig(): Promise<PerformanceBudgetConfig> {
-  const storedValues = await chromeApi?.storage?.local?.get(OPTIONS_STORAGE_KEY);
-  const stored = asRecord(storedValues?.[OPTIONS_STORAGE_KEY]);
+  return { kind: "failed-cleaned" };
+}
 
-  if (!stored) {
-    return { ...DEFAULT_PERFORMANCE_BUDGET };
-  }
+async function cleanupFailedPipelineRestoration(
+  persisted: PersistedActiveRuntime,
+  pipeline: SessionPipelineClient,
+  existingTombstone?: PersistedStoppingRuntime
+): Promise<void> {
+  await runDurableFailedRuntimeRetention({
+    persistStopping: async () => {
+      await checkpointFailedActiveRuntimeCleanup(persisted, undefined, existingTombstone);
+    },
+    retain: () => pipeline.close({ purge: false })
+  });
+}
 
-  return normalizePerformanceBudget(stored.performanceBudget);
+async function cleanupFailedActiveRuntimeRestoration(
+  persisted: PersistedActiveRuntime,
+  runtime: SessionRuntime,
+  existingTombstone?: PersistedStoppingRuntime
+): Promise<void> {
+  await runDurableFailedRuntimeRetention({
+    persistStopping: async () => {
+      await checkpointFailedActiveRuntimeCleanup(persisted, runtime, existingTombstone);
+    },
+    retain: () => retainFailedActiveRuntimeRestoration(runtime)
+  });
 }
 
-function resolveModeBaseConfig(mode: CaptureMode): typeof DEFAULT_RECORDER_CONFIG {
-  const base: typeof DEFAULT_RECORDER_CONFIG = {
-    ...DEFAULT_RECORDER_CONFIG,
-    mode
-  };
+async function checkpointFailedActiveRuntimeCleanup(
+  persisted: PersistedActiveRuntime,
+  runtime?: SessionRuntime,
+  existingTombstone?: PersistedStoppingRuntime
+): Promise<PersistedStoppingRuntime> {
+  const stopRequestedAt = existingTombstone?.stopRequestedAt ?? Date.now();
+  const cleanupDeadline =
+    existingTombstone?.cleanupDeadline ??
+    stopRequestedAt + resolveRuntimeLocalTtlMs(persisted.config.capturePolicy);
+  let recoverySource = persisted;
 
-  if (mode === "full") {
-    return {
-      ...base,
-      freezeOnNetworkFailure: false,
-      freezeOnLongTaskSpike: false,
-      sampling: {
-        ...base.sampling,
-        mousemoveHz: 12,
-        scrollHz: 10,
-        domFlushMs: 180,
-        snapshotIntervalMs: 30_000,
-        screenshotIdleMs: 12_000,
-        bodyCaptureMaxBytes: FULL_MODE_BODY_CAPTURE_MAX_BYTES
-      }
-    };
-  }
+  if (runtime && !existingTombstone) {
+    const snapshot = toPersistedRuntime(runtime);
 
-  return {
-    ...base,
-    freezeOnNetworkFailure: false,
-    freezeOnLongTaskSpike: false,
-    sampling: {
-      ...base.sampling,
-      mousemoveHz: 14,
-      scrollHz: 10,
-      domFlushMs: 160,
-      snapshotIntervalMs: 30_000,
-      screenshotIdleMs: base.sampling.screenshotIdleMs,
-      bodyCaptureMaxBytes: 0
+    if (snapshot.state === "active") {
+      recoverySource = snapshot;
     }
-  };
-}
+  }
 
-async function updateSessionAnnotation(
-  sid: string,
-  tagsInput: unknown,
-  noteInput: unknown
-): Promise<void> {
-  const tags = normalizeSessionTags(tagsInput);
-  const note = normalizeSessionNote(noteInput);
-  const runtime = sessionsBySid.get(sid);
+  const tombstone =
+    existingTombstone ??
+    createStoppingRuntimeTombstone(recoverySource, stopRequestedAt, cleanupDeadline);
+
+  if (!existingTombstone) {
+    pendingRuntimeRestorationsBySid.delete(persisted.sid);
+  }
 
   if (runtime) {
-    runtime.tags = [...tags];
-    runtime.note = note;
+    blockVolatileCapture(runtime.captureFence);
+    runtime.stopping = true;
+    runtime.stopRequestedAt = stopRequestedAt;
+    runtime.cleanupDeadline = cleanupDeadline;
+    runtime.queueAccepting = false;
+    runtime.contentDocuments.cancelPendingNavigations();
+
+    if (runtime.consentExpiryTimer !== null) {
+      clearTimeout(runtime.consentExpiryTimer);
+      runtime.consentExpiryTimer = null;
+    }
+
+    if (runtime.pipelineFlushTimer !== null) {
+      clearTimeout(runtime.pipelineFlushTimer);
+      runtime.pipelineFlushTimer = null;
+    }
+
+    cancelRuntimeStopDrain(runtime);
+
+    deleteMapEntryIfSame(sessionsByTab, runtime.tabId, runtime);
+    deleteMapEntryIfSame(sessionsBySid, runtime.sid, runtime);
+    uninstallLiteWebRequestCaptureIfUnused();
+    pushSessionList();
+    notifyOffscreenPipelineStatus();
+    void (sessionsByTab.size === 0 ? setIdleBadge() : setRecordingBadge()).catch(() => undefined);
+  }
+
+  retainedStoppingRuntimesBySid.set(tombstone.sid, tombstone);
+
+  try {
+    await persistRuntimeState({ required: true });
+  } catch (error) {
+    await scheduleRetainedStoppingRuntimeRecovery(tombstone).catch(() => undefined);
+    throw error;
   }
 
-  sessionAnnotations.set(sid, {
-    tags: [...tags],
-    note
+  await scheduleRetainedStoppingRuntimeRecovery(tombstone).catch((error) => {
+    console.warn("[WebBlackbox] failed to schedule restoration cleanup retry", {
+      sid: tombstone.sid,
+      error: error instanceof Error ? error.message : String(error)
+    });
   });
-
-  await persistSessionAnnotations().catch(() => undefined);
-  pushSessionList();
+  return tombstone;
 }
 
-function getSessionAnnotation(sid: string): SessionAnnotation {
-  const annotation = sessionAnnotations.get(sid);
+async function retainFailedActiveRuntimeRestoration(runtime: SessionRuntime): Promise<void> {
+  blockVolatileCapture(runtime.captureFence);
+  runtime.stopping = true;
+  runtime.queueAccepting = false;
+  runtime.contentDocuments.cancelPendingNavigations();
 
-  if (!annotation) {
-    return {
-      tags: []
-    };
+  if (runtime.consentExpiryTimer !== null) {
+    clearTimeout(runtime.consentExpiryTimer);
+    runtime.consentExpiryTimer = null;
   }
 
-  return {
-    tags: [...annotation.tags],
-    note: annotation.note
-  };
-}
-
-async function loadSessionAnnotations(): Promise<void> {
-  sessionAnnotations.clear();
-
-  if (!chromeApi?.storage?.local?.get) {
-    return;
+  if (runtime.pipelineFlushTimer !== null) {
+    clearTimeout(runtime.pipelineFlushTimer);
+    runtime.pipelineFlushTimer = null;
   }
 
-  const values = await chromeApi.storage.local
-    .get(SESSION_ANNOTATIONS_STORAGE_KEY)
-    .catch(() => undefined);
-  const raw = asRecord(values?.[SESSION_ANNOTATIONS_STORAGE_KEY]);
+  cancelRuntimeStopDrain(runtime);
+  const queueToDrain = runtime.queue;
+  const recoveryToDrain = offscreenSessionRecovery.get(runtime.sid);
 
-  if (!raw) {
-    return;
-  }
+  deleteMapEntryIfSame(sessionsByTab, runtime.tabId, runtime);
+  deleteMapEntryIfSame(sessionsBySid, runtime.sid, runtime);
+  uninstallLiteWebRequestCaptureIfUnused();
+  pushSessionList();
+  notifyOffscreenPipelineStatus();
 
-  for (const [sid, payload] of Object.entries(raw)) {
-    const row = asRecord(payload);
-    const tags = normalizeSessionTags(row?.tags);
-    const note = normalizeSessionNote(row?.note);
+  await notifyAuthorizedContentFrames(runtime, false).catch(() => undefined);
+  await Promise.allSettled([queueToDrain, ...(recoveryToDrain ? [recoveryToDrain] : [])]);
+  runtime.queue = Promise.resolve();
+  runtime.queueDepth = 0;
 
-    sessionAnnotations.set(sid, {
-      tags,
-      note
+  await quiesceScreenRecordingForStop(runtime).catch((error) => {
+    console.warn("[WebBlackbox] failed to quiesce recorder during retained restoration cleanup", {
+      sid: runtime.sid,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
+  await teardownCaptureInstrumentation(runtime).catch((error) => {
+    console.warn("[WebBlackbox] instrumentation cleanup failed after restoration", {
+      sid: runtime.sid,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
+
+  runtime.contentDocuments.reset();
+  runtime.authorizedContentFrames.clear();
+  runtime.requestMeta.clear();
+  await drainPipelineBufferBatches(runtime, "drain").catch((error) => {
+    console.warn("[WebBlackbox] failed to retain the provisional pipeline tail", {
+      sid: runtime.sid,
+      error: error instanceof Error ? error.message : String(error)
     });
+  });
+  runtime.pipelineEventBuffer.length = 0;
+  runtime.pipelineBatchInFlight = null;
+  runtime.pipelineFlushQueued = false;
+  runtime.responseBodyCaptureTimestamps.length = 0;
+  runtime.heapSnapshotCapture = null;
+
+  if (sessionsByTab.size === 0) {
+    await setIdleBadge().catch(() => undefined);
+  } else {
+    await setRecordingBadge().catch(() => undefined);
   }
+
+  await runtime.pipeline.close({ purge: false });
 }
 
-async function persistSessionAnnotations(): Promise<void> {
-  if (!chromeApi?.storage?.local?.set) {
+function cancelRuntimeStopDrain(runtime: SessionRuntime): void {
+  const pending = pendingStopDrainAcks.get(runtime.sid);
+
+  preparedStopDrainPlans.delete(runtime);
+
+  if (!pending || pending.runtime !== runtime) {
     return;
   }
 
-  const serialized: Record<string, SessionAnnotation> = {};
-
-  for (const [sid, annotation] of sessionAnnotations.entries()) {
-    serialized[sid] = {
-      tags: [...annotation.tags],
-      note: annotation.note
-    };
+  pendingStopDrainAcks.delete(runtime.sid);
+  clearTimeout(pending.timeout);
+  clearInterval(pending.retryTimer);
+  for (const capability of pending.capabilities.values()) {
+    closeStopDrain(capability);
   }
+  pending.resolve();
+}
 
-  await chromeApi.storage.local.set({
-    [SESSION_ANNOTATIONS_STORAGE_KEY]: serialized
+async function restoreStoppedRuntime(
+  persisted: PersistedStoppedRuntime,
+  config: typeof DEFAULT_RECORDER_CONFIG,
+  performanceBudget: PerformanceBudgetConfig
+): Promise<SessionRuntime> {
+  const cleanupDeadline = capCleanupDeadline(
+    persisted.stoppedAt,
+    persisted.cleanupDeadline,
+    resolveRuntimeLocalTtlMs(config.capturePolicy)
+  );
+  await ensureOffscreenDocument();
+  const pipeline = createOffscreenPipelineClient(persisted.sid);
+  await pipeline.start(
+    {
+      sid: persisted.sid,
+      tabId: persisted.tabId,
+      startedAt: persisted.startedAt,
+      endedAt: persisted.stoppedAt,
+      mode: persisted.mode,
+      url: persisted.url,
+      title: persisted.title,
+      tags: [...persisted.tags]
+    },
+    config.redaction,
+    config.capturePolicy
+  );
+  const runtime = createSessionRuntime({
+    sid: persisted.sid,
+    tabId: persisted.tabId,
+    mode: persisted.mode,
+    url: persisted.url,
+    captureUrl: persisted.url,
+    title: persisted.title,
+    tags: persisted.tags,
+    note: persisted.note,
+    config,
+    startedAt: persisted.startedAt,
+    stoppedAt: persisted.stoppedAt,
+    cleanupDeadline,
+    pipeline,
+    performanceBudget,
+    counters: persisted.counters
   });
+  sessionsBySid.set(runtime.sid, runtime);
+  return runtime;
 }
 
-function normalizeSessionTags(input: unknown): string[] {
-  if (!Array.isArray(input)) {
-    return [];
+async function finalizeRetainedStoppingRuntime(
+  tombstone: PersistedStoppingRuntime,
+  config: typeof DEFAULT_RECORDER_CONFIG,
+  performanceBudget: PerformanceBudgetConfig
+): Promise<SessionRuntime> {
+  if (retainedStoppingRuntimesBySid.get(tombstone.sid) !== tombstone) {
+    throw new Error("Stopping recovery lost its durable tombstone identity.");
   }
 
-  const seen = new Set<string>();
-  const tags: string[] = [];
+  await ensureOffscreenDocument();
+  const pipeline = createOffscreenPipelineClient(tombstone.sid);
+  await pipeline.start(
+    {
+      sid: tombstone.sid,
+      tabId: tombstone.tabId,
+      startedAt: tombstone.startedAt,
+      endedAt: tombstone.stopRequestedAt,
+      mode: tombstone.mode,
+      url: tombstone.url,
+      title: tombstone.title,
+      tags: [...tombstone.tags]
+    },
+    config.redaction,
+    config.capturePolicy
+  );
+  const resumeState = await pipeline.getResumeState();
+  const restoredCounters = mergeRuntimeCountersWithSequenceWatermark(
+    tombstone.counters,
+    resumeState.sequenceWatermark
+  );
+  const terminalRecoveryConfig = config.capturePolicy
+    ? {
+        ...config,
+        capturePolicy: {
+          ...config.capturePolicy,
+          categories: {
+            ...config.capturePolicy.categories,
+            screenRecordings: "allow" as const
+          }
+        }
+      }
+    : config;
+  let recoveryRuntime: SessionRuntime | null = null;
+  let claimedRecordingId: string | undefined;
+  let stoppedCounters = restoredCounters;
+
+  await recoverStoppingRuntimeForRetention({
+    getScreenRecordingStatus: async () =>
+      normalizeOffscreenScreenRecordingStatus(
+        await requestOffscreenPipeline<unknown>({
+          op: "getScreenRecordingStatus",
+          sid: tombstone.sid
+        })
+      ),
+    claimRuntime: (status) => {
+      if (recoveryRuntime) {
+        throw new Error("Stopping recovery already owns a runtime claim.");
+      }
+      if (sessionsBySid.has(tombstone.sid) || sessionsByTab.has(tombstone.tabId)) {
+        throw new Error("Stopping recovery runtime identity conflicts with a live session.");
+      }
 
-  for (const raw of input) {
-    if (typeof raw !== "string") {
-      continue;
-    }
+      const durable = status.active
+        ? resumeState.screenRecordings.find(
+            (recording) => recording.recordingId === status.recordingId
+          )
+        : undefined;
+      const persisted =
+        status.active && tombstone.screenRecording?.recordingId === status.recordingId
+          ? tombstone.screenRecording
+          : undefined;
+      const provisionalScreenRecording = status.active
+        ? (persisted ?? {
+            recordingId: status.recordingId,
+            startedAt: tombstone.screenRecording?.startedAt ?? tombstone.startedAt,
+            startedMono: tombstone.screenRecording?.startedMono ?? 0,
+            mime: status.mime,
+            width: status.width,
+            height: status.height,
+            frameRate: status.frameRate,
+            chunkCount: 0,
+            sizeBytes: 0
+          })
+        : undefined;
+      const reconciled = reconcileScreenRecordingResumeState(provisionalScreenRecording, durable);
+      const screenRecording = provisionalScreenRecording
+        ? (reconciled.screenRecording ?? {
+            ...provisionalScreenRecording,
+            chunkCount: 0,
+            sizeBytes: 0
+          })
+        : undefined;
+      const runtime = createSessionRuntime({
+        sid: tombstone.sid,
+        tabId: tombstone.tabId,
+        mode: tombstone.mode,
+        url: tombstone.url,
+        captureUrl: tombstone.url,
+        title: tombstone.title,
+        tags: tombstone.tags,
+        note: tombstone.note,
+        config: terminalRecoveryConfig,
+        startedAt: tombstone.startedAt,
+        pipeline,
+        performanceBudget,
+        counters: restoredCounters,
+        screenRecording,
+        screenRecordingChunks: reconciled.chunks
+      });
+      blockVolatileCapture(runtime.captureFence);
+      runtime.stopping = true;
+      runtime.stopRequestedAt = tombstone.stopRequestedAt;
+      runtime.cleanupDeadline = tombstone.cleanupDeadline;
+      sessionsByTab.set(runtime.tabId, runtime);
+      sessionsBySid.set(runtime.sid, runtime);
+      recoveryRuntime = runtime;
+      claimedRecordingId = status.active ? status.recordingId : undefined;
+    },
+    stopScreenRecording: async (status) => {
+      const runtime = recoveryRuntime;
+      const recording = runtime?.screenRecording;
 
-    const normalized = raw.trim().slice(0, 40);
+      if (!runtime || !recording || recording.recordingId !== status.recordingId) {
+        throw new Error("Stopping recovery lost its exact screen-recording claim.");
+      }
 
-    if (normalized.length === 0 || seen.has(normalized)) {
-      continue;
+      await stopScreenRecording(runtime, "stop-tombstone-recovery", recording);
+    },
+    retain: async () => {
+      const runtime = recoveryRuntime;
+
+      if (!runtime) {
+        throw new Error("Stopping recovery is missing its runtime claim.");
+      }
+
+      const interrupted = buildInterruptedScreenRecordingRecoveries({
+        persisted: tombstone.screenRecording,
+        resumeState,
+        status: claimedRecordingId
+          ? {
+              active: true,
+              recordingId: claimedRecordingId,
+              mime: runtime.screenRecording?.mime ?? tombstone.screenRecording?.mime ?? "video/webm"
+            }
+          : { active: false },
+        claimedRecordingId
+      });
+
+      for (const recording of interrupted) {
+        await appendInterruptedScreenRecordingTerminalEvents(
+          runtime,
+          recording,
+          "stop-tombstone-recovery-incomplete"
+        );
+      }
+
+      await flushBufferedPipelineEvents(runtime);
+      await pipeline.flush();
+      stoppedCounters = toPersistedRuntime(runtime).counters;
+      await pipeline.close({ purge: false });
+    },
+    releaseRuntimeClaim: () => {
+      const runtime = recoveryRuntime;
+
+      if (!runtime) {
+        return;
+      }
+
+      if (runtime.pipelineFlushTimer !== null) {
+        clearTimeout(runtime.pipelineFlushTimer);
+        runtime.pipelineFlushTimer = null;
+      }
+      blockVolatileCapture(runtime.captureFence);
+      runtime.queueAccepting = false;
+      deleteMapEntryIfSame(sessionsByTab, runtime.tabId, runtime);
+      deleteMapEntryIfSame(sessionsBySid, runtime.sid, runtime);
+      recoveryRuntime = null;
     }
+  });
 
-    seen.add(normalized);
-    tags.push(normalized);
+  const { screenRecording: completedScreenRecording, ...terminalizedBase } = tombstone;
+  void completedScreenRecording;
+  const terminalizedTombstone: PersistedStoppingRuntime = {
+    ...terminalizedBase,
+    counters: stoppedCounters
+  };
 
-    if (tags.length >= 12) {
-      break;
+  if (retainedStoppingRuntimesBySid.get(tombstone.sid) !== tombstone) {
+    throw new Error("Stopping recovery tombstone changed before terminal evidence checkpointing.");
+  }
+  retainedStoppingRuntimesBySid.set(tombstone.sid, terminalizedTombstone);
+
+  try {
+    await persistRuntimeState({ required: true });
+  } catch (error) {
+    if (retainedStoppingRuntimesBySid.get(tombstone.sid) === terminalizedTombstone) {
+      retainedStoppingRuntimesBySid.set(tombstone.sid, tombstone);
     }
+    throw error;
   }
 
-  return tags;
-}
+  const stopped = createStoppedRuntimeTombstone(
+    terminalizedTombstone,
+    tombstone.stopRequestedAt,
+    tombstone.cleanupDeadline
+  );
+  const restored = await restoreStoppedRuntime(stopped, config, performanceBudget);
+  const pending = pendingRuntimeRestorationsBySid.get(tombstone.sid);
 
-function normalizeSessionNote(input: unknown): string | undefined {
-  if (typeof input !== "string") {
-    return undefined;
+  if (!deleteMapEntryIfSame(retainedStoppingRuntimesBySid, tombstone.sid, terminalizedTombstone)) {
+    deleteMapEntryIfSame(sessionsBySid, restored.sid, restored);
+    await restored.pipeline.close({ purge: false }).catch(() => undefined);
+    throw new Error("Stopping recovery tombstone changed before its stopped checkpoint.");
   }
+  pendingRuntimeRestorationsBySid.delete(tombstone.sid);
 
-  const normalized = input.trim();
-
-  if (normalized.length === 0) {
-    return undefined;
+  try {
+    await persistRuntimeState({ required: true });
+  } catch (error) {
+    deleteMapEntryIfSame(sessionsBySid, restored.sid, restored);
+    await restored.pipeline.close({ purge: false }).catch(() => undefined);
+    retainedStoppingRuntimesBySid.set(tombstone.sid, terminalizedTombstone);
+    if (pending) {
+      pendingRuntimeRestorationsBySid.set(tombstone.sid, pending);
+    }
+    await scheduleRetainedStoppingRuntimeRecovery(terminalizedTombstone).catch(() => undefined);
+    throw error;
   }
 
-  return normalized.slice(0, 500);
+  await scheduleStoppedRuntimeCleanup(restored).catch((error) => {
+    console.warn("[WebBlackbox] recovered stopped-session cleanup scheduled for retry", {
+      sid: restored.sid,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  });
+  return restored;
 }
 
-async function persistRuntimeState(): Promise<void> {
-  if (!chromeApi?.storage?.local?.set) {
-    return;
-  }
-
-  const sessions = [...sessionsByTab.values()].map((runtime) => ({
+async function appendInterruptedScreenRecordingTerminalEvents(
+  runtime: SessionRuntime,
+  interrupted: ReturnType<typeof buildInterruptedScreenRecordingRecoveries>[number],
+  reason: string
+): Promise<void> {
+  const hashes = [...interrupted.chunks]
+    .sort((left, right) => left.index - right.index)
+    .map((chunk) => chunk.hash);
+  const endedAt = Date.now();
+  const endAccepted = await ingestRawEvent({
+    source: "system",
+    rawType: "screen.recording.end",
     sid: runtime.sid,
     tabId: runtime.tabId,
-    mode: runtime.mode,
-    startedAt: runtime.startedAt
-  }));
-
-  await chromeApi.storage.local.set({
-    [ACTIVE_SESSION_STORAGE_KEY]: sessions
+    t: endedAt,
+    mono: monotonicTime(),
+    payload: {
+      recordingId: interrupted.recordingId,
+      mime: interrupted.mime,
+      chunks: hashes,
+      chunkCount: hashes.length,
+      size: interrupted.sizeBytes,
+      durationMs: interrupted.startedAt
+        ? Math.max(0, Math.round(endedAt - interrupted.startedAt))
+        : 0,
+      width: interrupted.width,
+      height: interrupted.height,
+      reason
+    }
+  });
+  const errorAccepted = await ingestRawEvent({
+    source: "system",
+    rawType: "screen.recording.error",
+    sid: runtime.sid,
+    tabId: runtime.tabId,
+    t: endedAt,
+    mono: monotonicTime(),
+    payload: {
+      recordingId: interrupted.recordingId,
+      name: "OffscreenRecordingInterrupted",
+      message: "Screen recording was interrupted while a stopping runtime was recovered.",
+      stage: "restart"
+    }
   });
+
+  if (!endAccepted || !errorAccepted) {
+    throw new Error("Stopping recovery could not persist screen-recording terminal evidence.");
+  }
 }
 
-async function appendExportAuditEvent(event: ExportAuditEvent): Promise<void> {
-  if (!chromeApi?.storage?.local?.get || !chromeApi.storage.local.set) {
-    return;
+async function purgePersistedRuntimeData(
+  runtime: {
+    sid: string;
+    tabId: number;
+    startedAt: number;
+    mode: CaptureMode;
+    url: string;
+    title?: string;
+    tags: readonly string[];
+    config: typeof DEFAULT_RECORDER_CONFIG;
+  },
+  options: {
+    stopScreenRecording?: boolean;
+    rethrow?: boolean;
+  } = {}
+): Promise<void> {
+  try {
+    await deleteSessionAnnotationDurably(runtime.sid);
+  } catch (error) {
+    if (options.rethrow) {
+      throw error;
+    }
+    console.warn("[WebBlackbox] failed to delete purged-session annotation", error);
   }
 
-  const values = await chromeApi.storage.local.get(EXPORT_AUDIT_STORAGE_KEY);
-  const current = Array.isArray(values[EXPORT_AUDIT_STORAGE_KEY])
-    ? (values[EXPORT_AUDIT_STORAGE_KEY] as unknown[])
-    : [];
-  const events = [...current.slice(-EXPORT_AUDIT_MAX_EVENTS + 1), event];
+  try {
+    await ensureOffscreenDocument();
+    const pipeline = createOffscreenPipelineClient(runtime.sid);
+    const metadata: SessionMetadata = {
+      sid: runtime.sid,
+      tabId: runtime.tabId,
+      startedAt: runtime.startedAt,
+      mode: runtime.mode,
+      url: sanitizeUrlForPrivacy(runtime.url),
+      title: runtime.title,
+      tags: [...runtime.tags]
+    };
+    try {
+      await pipeline.start(metadata, runtime.config.redaction, runtime.config.capturePolicy);
+    } catch {
+      // A surviving offscreen pipeline may carry a now-untrusted policy
+      // fingerprint. Purge that exact instance, then recreate an empty client
+      // so storage cleanup remains possible without accepting the old policy.
+      await pipeline.close({ purge: true });
+      await pipeline.start(metadata, runtime.config.redaction, runtime.config.capturePolicy);
+    }
 
-  await chromeApi.storage.local.set({
-    [EXPORT_AUDIT_STORAGE_KEY]: events
-  });
+    if (options.stopScreenRecording) {
+      await recoverStoppingRuntimeFailClosed({
+        getScreenRecordingStatus: async () =>
+          normalizeOffscreenScreenRecordingStatus(
+            await requestOffscreenPipeline<unknown>({
+              op: "getScreenRecordingStatus",
+              sid: runtime.sid
+            })
+          ),
+        stopScreenRecording: async (status) => {
+          await requestOffscreenPipeline<OffscreenScreenRecordingStopResult>({
+            op: "stopScreenRecording",
+            sid: runtime.sid,
+            recordingId: status.recordingId,
+            reason: "stop-tombstone-recovery"
+          });
+        },
+        purge: () => pipeline.close({ purge: true })
+      });
+    } else {
+      await pipeline.close({ purge: true });
+    }
+  } catch (error) {
+    console.warn("[WebBlackbox] persisted session purge failed", {
+      sid: runtime.sid,
+      error: error instanceof Error ? error.message : String(error)
+    });
+
+    if (options.rethrow) {
+      throw error;
+    }
+  }
 }
 
-function redactOperationalMessage(message: string): string {
-  return message
-    .replaceAll(/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, "[redacted-email]")
-    .replaceAll(/Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi, "Bearer [redacted-token]")
-    .replaceAll(/\b(?:https?|file):\/\/[^\s)]+/gi, "[redacted-url]")
-    .slice(0, 240);
+async function scheduleRetainedStoppingRuntimeRecovery(
+  runtime: PersistedStoppingRuntime
+): Promise<void> {
+  const retryAt = Math.min(runtime.cleanupDeadline, Date.now() + RETAINED_STOPPING_RETRY_DELAY_MS);
+  await runtimeCleanupScheduler.schedule(runtime.sid, retryAt);
 }
 
-async function restoreRuntimeState(): Promise<void> {
-  await loadSessionAnnotations();
+async function scheduleRetainedStoppedRuntimeRecovery(
+  runtime: PersistedStoppedRuntime
+): Promise<void> {
+  const retryAt = Math.min(runtime.cleanupDeadline, Date.now() + RETAINED_STOPPING_RETRY_DELAY_MS);
+  await runtimeCleanupScheduler.schedule(runtime.sid, retryAt);
+}
 
-  if (!chromeApi?.storage?.local?.get) {
+async function retryRetainedStoppingRuntimeRecovery(
+  runtime: PersistedStoppingRuntime
+): Promise<void> {
+  const enterprisePolicy = await loadEnterprisePolicy();
+  const config = applyEnterprisePolicyToRecorderConfig(runtime.config, enterprisePolicy);
+  const performanceBudget = await loadPerformanceBudgetConfig();
+  await finalizeRetainedStoppingRuntime(runtime, config, performanceBudget);
+  pushSessionList();
+  notifyOffscreenPipelineStatus();
+}
+
+async function retryRetainedStoppedRuntimeRecovery(
+  runtime: PersistedStoppedRuntime
+): Promise<void> {
+  if (pendingRuntimeRestorationsBySid.get(runtime.sid) !== runtime) {
+    return;
+  }
+
+  if (Date.now() >= runtime.cleanupDeadline) {
+    await purgePersistedRuntimeData(runtime, { rethrow: true });
+    pendingRuntimeRestorationsBySid.delete(runtime.sid);
+
+    try {
+      await persistRuntimeState({ required: true });
+    } catch (error) {
+      pendingRuntimeRestorationsBySid.set(runtime.sid, runtime);
+      throw error;
+    }
     return;
   }
 
-  const values = await chromeApi.storage.local.get(ACTIVE_SESSION_STORAGE_KEY);
-  const persisted = values?.[ACTIVE_SESSION_STORAGE_KEY];
+  const enterprisePolicy = await loadEnterprisePolicy();
+  const config = applyEnterprisePolicyToRecorderConfig(runtime.config, enterprisePolicy);
+  const performanceBudget = await loadPerformanceBudgetConfig();
+  const restored = await restoreStoppedRuntime(runtime, config, performanceBudget);
+  pendingRuntimeRestorationsBySid.delete(runtime.sid);
+
+  try {
+    await persistRuntimeState({ required: true });
+  } catch (error) {
+    deleteMapEntryIfSame(sessionsBySid, restored.sid, restored);
+    await restored.pipeline.close({ purge: false }).catch(() => undefined);
+    pendingRuntimeRestorationsBySid.set(runtime.sid, runtime);
+    throw error;
+  }
+
+  await scheduleStoppedRuntimeCleanup(restored);
+  pushSessionList();
+}
+
+async function clearStaleRuntimeCleanupAlarms(validSids: ReadonlySet<string>): Promise<void> {
+  const alarms = await chromeApi?.alarms?.getAll?.().catch(() => []);
+
+  for (const alarm of alarms ?? []) {
+    const prefix = "webblackbox.runtime.cleanup:";
 
-  if (Array.isArray(persisted) && persisted.length > 0) {
-    await chromeApi.storage.local
-      .set({
-        [ACTIVE_SESSION_STORAGE_KEY]: []
-      })
-      .catch(() => undefined);
+    if (!alarm.name.startsWith(prefix)) {
+      continue;
+    }
 
-    for (const item of persisted) {
-      const row = asRecord(item);
-      const tabId = typeof row?.tabId === "number" ? row.tabId : undefined;
+    const sid = alarm.name.slice(prefix.length);
 
-      if (typeof tabId === "number") {
-        await notifyTabStatus(tabId, false);
-      }
+    if (!validSids.has(sid)) {
+      await chromeApi?.alarms?.clear(alarm.name);
     }
   }
-
-  await setIdleBadge();
-  pushSessionList();
-  notifyOffscreenPipelineStatus();
 }
 
 function notifyOffscreenPipelineStatus(): void {
@@ -4911,11 +12854,20 @@ function notifyOffscreenPipelineStatus(): void {
     return;
   }
 
+  const activeRuntimes = [...sessionsByTab.values()].filter(
+    (runtime) =>
+      isRuntimeCaptureAdmitted(runtime.activationState) &&
+      !runtime.stoppedAt &&
+      ((isVolatileCaptureOpen(runtime.captureFence) && !runtime.stopping) ||
+        isRuntimeAwaitingDurableStop(runtime))
+  );
+
   try {
     port.postMessage({
       kind: "sw.pipeline-status",
-      activeSessions: sessionsByTab.size,
-      sessions: [...sessionsByTab.values()].map((runtime) => ({
+      runtimeStateRestored,
+      activeSessions: activeRuntimes.length,
+      sessions: activeRuntimes.map((runtime) => ({
         sid: runtime.sid,
         tabId: runtime.tabId,
         mode: runtime.mode,
@@ -4939,118 +12891,643 @@ function notifyOffscreenPipelineStatus(): void {
     }
 
     logPortSendFailure("sw.pipeline-status", error, {
-      activeSessions: sessionsByTab.size
+      activeSessions: activeRuntimes.length
     });
   }
 }
 
-async function notifyTabStatus(
-  tabId: number,
-  active: boolean,
-  sid?: string,
-  mode?: CaptureMode,
-  sampling?: RecordingSampling,
-  capturePolicy?: CapturePolicy
-): Promise<void> {
+async function notifyTabContentReset(tabId: number, reason: string): Promise<void> {
   if (!chromeApi?.tabs?.sendMessage) {
     return;
   }
 
   await chromeApi.tabs
-    .sendMessage(tabId, {
-      kind: "sw.recording-status",
-      active,
-      sid,
-      mode,
-      sampling,
-      capturePolicy
-    })
+    .sendMessage(tabId, { kind: "sw.content-reset", reason })
     .catch(() => undefined);
 }
 
-function adjustInFlightContentMessages(tabId: number, delta: 1 | -1): void {
-  const next = (inFlightContentMessagesByTab.get(tabId) ?? 0) + delta;
+function quiesceRuntimeContentProducers(runtime: SessionRuntime): void {
+  for (const activation of contentActivations.listRuntime(runtime, runtime.captureFence, [
+    "active"
+  ])) {
+    const message = {
+      kind: "sw.content-quiesce" as const,
+      activationId: activation.activationId
+    };
+    let deliveredToPort = false;
+
+    for (const port of connectedPorts) {
+      if (
+        port.name !== PORT_NAMES.content ||
+        !contentActivations.validatePort(port, activation, ["active"])
+      ) {
+        continue;
+      }
+
+      try {
+        port.postMessage(message);
+        deliveredToPort = true;
+        break;
+      } catch (error) {
+        logPortSendFailure("sw.content-quiesce", error, {
+          activationId: activation.activationId,
+          frameId: activation.frameId
+        });
+      }
+    }
+
+    if (!deliveredToPort) {
+      void sendContentActivationMessage(activation, message, { required: true }).catch((error) => {
+        logInboundMessageFailure("sw.content-quiesce", error, undefined, {
+          activationId: activation.activationId,
+          frameId: activation.frameId
+        });
+      });
+    }
+  }
+}
+
+async function notifyAuthorizedContentFrames(
+  runtime: SessionRuntime,
+  active: boolean,
+  stopDrains?: ReadonlyMap<ContentActivationId, StopDrainNotice>
+): Promise<void> {
+  if (active) {
+    const activated = isRuntimeCaptureAdmitted(runtime.activationState)
+      ? activateArmedRuntimeContent(runtime)
+      : [];
+    const current = [
+      ...activated,
+      ...contentActivations.listRuntime(runtime, runtime.captureFence, ["active"])
+    ];
+    const unique = new Map(current.map((activation) => [activation.activationId, activation]));
+    await Promise.all(
+      [...unique.values()].map((activation) =>
+        sendContentActivationMessage(activation, {
+          kind: "sw.content-activated",
+          activationId: activation.activationId
+        })
+      )
+    );
+    return;
+  }
+
+  const live = contentActivations.listRuntime(runtime, runtime.captureFence);
+  const shouldDrain = (activation: SessionContentActivation): boolean =>
+    activation.state === "draining" && stopDrains?.has(activation.activationId) === true;
+
+  await Promise.all(
+    live.map(async (activation) => {
+      const stopDrain = stopDrains?.get(activation.activationId);
+
+      if (stopDrain && shouldDrain(activation)) {
+        await sendContentActivationMessage(activation, stopDrain, { required: true });
+        return;
+      }
+
+      await revokeContentActivationOnce(activation, "runtime-stop");
+    })
+  );
+}
+
+function adjustInFlightContentMessages(activationId: ContentActivationId, delta: 1 | -1): void {
+  const next = (inFlightContentMessagesByActivation.get(activationId) ?? 0) + delta;
 
   if (next <= 0) {
-    inFlightContentMessagesByTab.delete(tabId);
-    resolveStopDrainAcksForTab(tabId);
+    inFlightContentMessagesByActivation.delete(activationId);
+    resolveStopDrainAckForActivation(activationId);
     return;
   }
 
-  inFlightContentMessagesByTab.set(tabId, next);
+  inFlightContentMessagesByActivation.set(activationId, next);
+}
+
+function getOrCreateContentEventBatchRecord(
+  activationId: ContentActivationId,
+  batchId: ContentEventBatchId,
+  fingerprint: string,
+  port: PortLike
+): { record: ContentEventBatchRecord<PortLike>; process: boolean } {
+  const result = contentEventBatchLedger.begin(activationId, batchId, fingerprint, port);
+  return { record: result.record, process: result.kind === "process" };
+}
+
+function retryContentEventBatch(
+  activationId: ContentActivationId,
+  batchId: ContentEventBatchId,
+  record: ContentEventBatchRecord<PortLike>
+): void {
+  contentEventBatchLedger.retry(activationId, batchId, record);
+}
+
+function completeContentEventBatch(
+  activationId: ContentActivationId,
+  batchId: ContentEventBatchId,
+  record: ContentEventBatchRecord<PortLike>
+): void {
+  for (const port of contentEventBatchLedger.complete(activationId, batchId, record)) {
+    sendContentEventBatchAck(port, activationId, batchId);
+  }
+}
+
+function sendContentEventBatchAck(
+  port: PortLike,
+  activationId: ContentActivationId,
+  batchId: ContentEventBatchId
+): void {
+  try {
+    port.postMessage({
+      kind: "sw.content-events-ack",
+      activationId,
+      batchId
+    });
+  } catch (error) {
+    logPortSendFailure("sw.content-events-ack", error, { activationId, batchId });
+  }
+}
+
+function invalidateContentEventBatchAdmissions(activationId: ContentActivationId): void {
+  const admissions = contentEventBatchAdmissionsByActivation.get(activationId);
+  if (admissions) {
+    for (const admission of admissions) {
+      admission.valid = false;
+    }
+    contentEventBatchAdmissionsByActivation.delete(activationId);
+  }
+  contentEventBatchLedger.invalidate(activationId);
 }
 
-function createStopDrainAck(runtime: SessionRuntime): Promise<void> {
+function createStopDrainAck(runtime: SessionRuntime): {
+  wait: Promise<void>;
+  notices: ReadonlyMap<ContentActivationId, StopDrainNotice>;
+} {
   const existing = pendingStopDrainAcks.get(runtime.sid);
 
   if (existing) {
     clearTimeout(existing.timeout);
+    clearInterval(existing.retryTimer);
     pendingStopDrainAcks.delete(runtime.sid);
+    for (const capability of existing.capabilities.values()) {
+      closeStopDrain(capability);
+    }
+    existing.resolve();
   }
 
-  return new Promise((resolve) => {
+  const deadline = Date.now() + STOP_DRAIN_ACK_TIMEOUT_MS;
+  const ordinaryEventCutoff = runtime.stopRequestedAt ?? Date.now();
+  const capabilities = new Map<ContentActivationId, StopDrainCapability>();
+  const notices = new Map<ContentActivationId, StopDrainNotice>();
+
+  for (const activation of contentActivations.listRuntime(runtime, runtime.captureFence, [
+    "active"
+  ])) {
+    const draining = contentActivations.drain(activation);
+
+    if (!draining) {
+      continue;
+    }
+
+    try {
+      const capability = createStopDrainCapability({
+        runtime,
+        fence: runtime.captureFence,
+        activationId: draining.activationId,
+        sid: runtime.sid,
+        tabId: runtime.tabId,
+        frameId: draining.frameId,
+        documentId: draining.documentId,
+        documentUrl: draining.url,
+        deadline,
+        ordinaryEventCutoff
+      });
+      capabilities.set(capability.activationId, capability);
+      notices.set(capability.activationId, toStopDrainNotice(capability));
+    } catch (error) {
+      console.warn("[WebBlackbox] stop-drain capability creation failed closed", {
+        sid: runtime.sid,
+        frameId: draining.frameId,
+        error: error instanceof Error ? error.message : String(error)
+      });
+      void revokeContentFrameActivations(
+        runtime,
+        draining.frameId,
+        "stop-drain-capability-failed",
+        draining.documentId
+      );
+    }
+  }
+
+  if (capabilities.size === 0) {
+    return { wait: Promise.resolve(), notices };
+  }
+
+  let pending!: PendingStopDrainAck;
+  const wait = new Promise<void>((resolve) => {
     const timeout = setTimeout(() => {
-      pendingStopDrainAcks.delete(runtime.sid);
-      resolve();
+      void finalizeExpiredStopDrain(pending);
     }, STOP_DRAIN_ACK_TIMEOUT_MS);
+    const retryTimer = setInterval(() => {
+      retryPendingStopDrainNotices(pending);
+    }, STOP_DRAIN_NOTIFICATION_RETRY_MS);
 
-    pendingStopDrainAcks.set(runtime.sid, {
+    pending = {
       sid: runtime.sid,
-      tabId: runtime.tabId,
-      ackReceived: false,
+      runtime,
+      capabilities,
+      acknowledged: new Set(),
+      settling: false,
+      timeoutFinalizing: false,
+      timeoutNoticeQueued: false,
       resolve,
-      timeout
-    });
+      timeout,
+      retryTimer
+    };
+    pendingStopDrainAcks.set(runtime.sid, pending);
   });
+
+  return {
+    wait,
+    notices
+  };
+}
+
+async function finalizeExpiredStopDrain(pending: PendingStopDrainAck): Promise<void> {
+  if (
+    pendingStopDrainAcks.get(pending.sid) !== pending ||
+    pending.settling ||
+    pending.timeoutFinalizing
+  ) {
+    return;
+  }
+
+  pending.timeoutFinalizing = true;
+  const expired = [...pending.capabilities].filter(
+    ([activationId]) => !pending.acknowledged.has(activationId)
+  );
+
+  try {
+    if (!pending.timeoutNoticeQueued && expired.length > 0) {
+      for (const [activationId, capability] of expired) {
+        capability.accepting = false;
+        const expectedArtifacts = resolveExpectedStopDrainArtifactsForCapability(
+          pending.runtime,
+          capability
+        );
+        const timeoutEvidence = resolveStopDrainTimeoutEvidence(capability, expectedArtifacts);
+        pending.runtime.recorder.ingest({
+          source: "system",
+          rawType: "notice",
+          sid: pending.runtime.sid,
+          tabId: pending.runtime.tabId,
+          t: Date.now(),
+          mono: monotonicTime(),
+          frame: normalizeContentFrameId(capability.frameId),
+          payload: {
+            message: "stop-drain-timeout",
+            activationId,
+            frameId: capability.frameId,
+            documentId: capability.documentId,
+            documentUrl: sanitizeUrlForPrivacy(capability.documentUrl),
+            ...timeoutEvidence,
+            droppedOrdinaryEvents: capability.droppedOrdinaryEvents
+          }
+        });
+      }
+      pending.timeoutNoticeQueued = true;
+    }
+
+    await flushContentEventBatchDurably(pending.runtime);
+  } catch (error) {
+    logInboundMessageFailure("stop-drain-timeout", error, undefined, {
+      sid: pending.sid,
+      frames: expired.length
+    });
+    pending.timeoutFinalizing = false;
+    pending.timeout = setTimeout(() => {
+      void finalizeExpiredStopDrain(pending);
+    }, STOP_DRAIN_NOTIFICATION_RETRY_MS);
+    return;
+  }
+
+  for (const [activationId, capability] of expired) {
+    capability.accepting = false;
+    capability.acknowledged = true;
+    pending.acknowledged.add(activationId);
+    invalidateContentEventBatchAdmissions(activationId);
+  }
+  pending.timeoutFinalizing = false;
+  resolveStopDrainAckIfReady(pending, true);
+}
+
+function prepareRuntimeStopDrain(runtime: SessionRuntime): {
+  wait: Promise<void>;
+  notification: Promise<void>;
+} {
+  const existing = preparedStopDrainPlans.get(runtime);
+
+  if (existing) {
+    return existing;
+  }
+
+  const drain = createStopDrainAck(runtime);
+  const rawNotification = notifyAuthorizedContentFrames(runtime, false, drain.notices);
+  const plan = {
+    wait: drain.wait,
+    notification: withCdpCommandTimeout(rawNotification, STOP_DRAIN_NOTIFICATION_TIMEOUT_MS).then(
+      (outcome) => {
+        if (!outcome.ok) {
+          throw new Error("Timed out notifying exact content documents to drain.");
+        }
+      }
+    )
+  };
+  preparedStopDrainPlans.set(runtime, plan);
+  return plan;
+}
+
+function getStopDrainCapability(
+  sid: string,
+  activationId: ContentActivationId
+): StopDrainCapability | undefined {
+  return pendingStopDrainAcks.get(sid)?.capabilities.get(activationId);
+}
+
+function toStopDrainNotice(capability: StopDrainCapability): StopDrainNotice {
+  return {
+    kind: "sw.content-drain",
+    activationId: capability.activationId,
+    sid: capability.sid,
+    token: capability.token,
+    deadline: capability.deadline,
+    documentUrl: capability.documentUrl
+  };
+}
+
+function sendStopDrainNotice(port: PortLike, capability: StopDrainCapability): boolean {
+  try {
+    port.postMessage(toStopDrainNotice(capability));
+    return true;
+  } catch (error) {
+    logPortSendFailure("sw.content-drain", error, {
+      activationId: capability.activationId,
+      sid: capability.sid
+    });
+    return false;
+  }
+}
+
+function retryPendingStopDrainNotices(pending: PendingStopDrainAck): void {
+  if (pendingStopDrainAcks.get(pending.sid) !== pending || pending.settling) {
+    return;
+  }
+
+  for (const [activationId, capability] of pending.capabilities) {
+    if (pending.acknowledged.has(activationId)) {
+      continue;
+    }
+    const activation = contentActivations.lookupByActivationId(activationId, ["draining"]);
+    if (!activation) {
+      continue;
+    }
+
+    let deliveredToPort = false;
+    for (const port of connectedPorts) {
+      if (
+        port.name === PORT_NAMES.content &&
+        contentActivations.validatePort(port, activation, ["draining"])
+      ) {
+        deliveredToPort = sendStopDrainNotice(port, capability);
+        if (deliveredToPort) {
+          break;
+        }
+      }
+    }
+
+    if (!deliveredToPort) {
+      void sendContentActivationMessage(activation, toStopDrainNotice(capability), {
+        required: true
+      }).catch((error) => {
+        logInboundMessageFailure("sw.content-drain", error, undefined, {
+          activationId,
+          stage: "retry"
+        });
+      });
+    }
+  }
 }
 
-function markStopDrainAckReceived(sid: string): void {
-  const pending = pendingStopDrainAcks.get(sid);
+async function markStopDrainAckReceived(
+  message: Extract<ExtensionInboundMessage, { kind: "content.stop-drained" }>,
+  port: PortLike | undefined,
+  sender: MessageSenderLike | undefined
+): Promise<void> {
+  const pending = pendingStopDrainAcks.get(message.sid);
 
   if (!pending) {
     return;
   }
 
-  pending.ackReceived = true;
+  const runtime = sessionsBySid.get(message.sid);
+  const capability = pending.capabilities.get(message.activationId);
+  const activation = resolveBoundContentActivation(
+    message.activationId,
+    message.documentUrl,
+    port,
+    sender,
+    ["draining"]
+  );
+  const binding = runtime
+    ? {
+        runtime,
+        fence: runtime.captureFence,
+        activationId: message.activationId,
+        token: message.token,
+        sid: message.sid,
+        tabId: sender?.tab?.id ?? -1,
+        frameId: normalizeSenderFrameId(sender),
+        documentId: sender?.documentId ?? "",
+        documentUrl: message.documentUrl
+      }
+    : null;
+
+  if (
+    !runtime ||
+    runtime !== pending.runtime ||
+    !capability ||
+    !activation ||
+    activation.runtime !== runtime ||
+    !binding ||
+    !canAdmitStopDrainBatch(capability, binding)
+  ) {
+    return;
+  }
+
+  const expectedArtifacts = resolveExpectedStopDrainArtifacts(runtime, activation);
+  const committedArtifacts = new Set(getCommittedStopDrainArtifactTypes(capability));
+  const emittedArtifacts = expectedArtifacts.filter((artifact) =>
+    artifact === "main-world-tail"
+      ? message.emittedArtifacts.includes(artifact)
+      : committedArtifacts.has(artifact)
+  );
+  const omittedArtifacts = expectedArtifacts.filter(
+    (artifact) => !emittedArtifacts.includes(artifact)
+  );
+  const evidenceMismatch =
+    !sameStringSet(message.expectedArtifacts, expectedArtifacts) ||
+    !sameStringSet(message.emittedArtifacts, emittedArtifacts) ||
+    !sameStringSet(message.omittedArtifacts, omittedArtifacts);
+
+  if (
+    omittedArtifacts.length > 0 ||
+    message.degradationReasons.length > 0 ||
+    evidenceMismatch ||
+    capability.droppedOrdinaryEvents > 0
+  ) {
+    const noticeClaim = claimStopDrainEvent(capability, {
+      ...binding,
+      batchId: `b1_${capability.token}`,
+      eventIndex: 0,
+      rawType: "notice",
+      reason: "stop"
+    });
+    if (!noticeClaim) {
+      return;
+    }
+
+    try {
+      const persisted = await ingestRawEvent(
+        {
+          source: "system",
+          rawType: "notice",
+          sid: runtime.sid,
+          tabId: runtime.tabId,
+          t: Date.now(),
+          mono: monotonicTime(),
+          frame: normalizeContentFrameId(activation.frameId),
+          payload: {
+            message: "stop-artifacts-omitted",
+            expectedArtifacts,
+            emittedArtifacts,
+            omittedArtifacts,
+            degradationReasons: message.degradationReasons,
+            evidenceMismatch,
+            droppedOrdinaryEvents: capability.droppedOrdinaryEvents
+          }
+        },
+        noticeClaim
+      );
+      if (!persisted) {
+        throw new Error("Stop-drain degradation notice was not accepted.");
+      }
+      await flushContentEventBatchDurably(runtime);
+      if (!commitStopDrainClaim(noticeClaim, runtime, runtime.captureFence)) {
+        throw new Error("Stop-drain degradation notice could not be committed.");
+      }
+    } catch (error) {
+      releaseStopDrainClaim(noticeClaim);
+      logInboundMessageFailure("content.stop-drained", error, port, {
+        activationId: activation.activationId,
+        stage: "degradation-notice"
+      });
+      return;
+    }
+  }
+
+  if (!acknowledgeStopDrain(capability, binding)) {
+    return;
+  }
+
+  pending.acknowledged.add(message.activationId);
   resolveStopDrainAckIfReady(pending);
 }
 
-function resolveStopDrainAcksForTab(tabId: number): void {
+function resolveExpectedStopDrainArtifacts(
+  runtime: SessionRuntime,
+  activation: Pick<SessionContentActivation, "frameId">
+): Array<"main-world-tail" | "snapshot" | "localStorageSnapshot" | "screenshot"> {
+  if (runtime.mode !== "lite") {
+    return [];
+  }
+
+  const expected: Array<"main-world-tail" | "snapshot" | "localStorageSnapshot" | "screenshot"> = [
+    "main-world-tail"
+  ];
+  if (activation.frameId !== 0) {
+    return expected;
+  }
+  if (runtime.config.capturePolicy?.categories.dom !== "off") {
+    expected.push("snapshot");
+  }
+  if (runtime.config.capturePolicy?.categories.storage !== "off") {
+    expected.push("localStorageSnapshot");
+  }
+  if (
+    runtime.config.sampling.screenshotIdleMs > 0 &&
+    runtime.config.capturePolicy?.categories.screenshots === "allow"
+  ) {
+    expected.push("screenshot");
+  }
+  return expected;
+}
+
+function resolveExpectedStopDrainArtifactsForCapability(
+  runtime: SessionRuntime,
+  capability: StopDrainCapability
+): Array<"main-world-tail" | "snapshot" | "localStorageSnapshot" | "screenshot"> {
+  return resolveExpectedStopDrainArtifacts(runtime, capability);
+}
+
+function sameStringSet(first: readonly string[], second: readonly string[]): boolean {
+  return first.length === second.length && first.every((value) => second.includes(value));
+}
+
+function resolveStopDrainAckForActivation(activationId: ContentActivationId): void {
   for (const pending of pendingStopDrainAcks.values()) {
-    if (pending.tabId === tabId) {
+    if (pending.capabilities.has(activationId)) {
       resolveStopDrainAckIfReady(pending);
     }
   }
 }
 
-function resolveStopDrainAckIfReady(pending: {
-  sid: string;
-  tabId: number;
-  ackReceived: boolean;
-  resolve: () => void;
-  timeout: ReturnType<typeof setTimeout>;
-}): void {
-  if (!pending.ackReceived) {
+function resolveStopDrainAckIfReady(pending: PendingStopDrainAck, force = false): void {
+  if (pending.acknowledged.size !== pending.capabilities.size || pending.settling) {
     return;
   }
 
-  if ((inFlightContentMessagesByTab.get(pending.tabId) ?? 0) > 0) {
+  if (
+    !force &&
+    [...pending.capabilities.keys()].some(
+      (activationId) => (inFlightContentMessagesByActivation.get(activationId) ?? 0) > 0
+    )
+  ) {
     return;
   }
 
-  pendingStopDrainAcks.delete(pending.sid);
-  clearTimeout(pending.timeout);
+  pending.settling = true;
 
-  const runtime = sessionsBySid.get(pending.sid);
+  const finalize = () => {
+    if (pendingStopDrainAcks.get(pending.sid) === pending) {
+      pendingStopDrainAcks.delete(pending.sid);
+    }
 
-  if (!runtime) {
+    clearTimeout(pending.timeout);
+    clearInterval(pending.retryTimer);
+    const drainingSnapshots = [...pending.capabilities.keys()]
+      .map((activationId) => contentActivations.lookupByActivationId(activationId, ["draining"]))
+      .filter((activation): activation is SessionContentActivation => activation !== null);
+
+    for (const [activationId, capability] of pending.capabilities) {
+      closeStopDrain(capability);
+      invalidateContentEventBatchAdmissions(activationId);
+    }
+    void revokeContentActivationSnapshots(drainingSnapshots, "stop-drained");
     pending.resolve();
-    return;
-  }
+  };
 
-  void runtime.queue.finally(() => {
-    pending.resolve();
-  });
+  void withCdpCommandTimeout(pending.runtime.queue, STOP_DRAIN_QUEUE_SETTLE_TIMEOUT_MS).then(
+    finalize,
+    finalize
+  );
 }
 
 async function relayMarkerCommand(): Promise<void> {
@@ -5061,7 +13538,9 @@ async function relayMarkerCommand(): Promise<void> {
     return;
   }
 
-  await chromeApi?.tabs?.sendMessage(tabId, { kind: "sw.marker-command" }).catch(() => undefined);
+  await chromeApi?.tabs
+    ?.sendMessage(tabId, { kind: "sw.marker-command" }, { frameId: 0 })
+    .catch(() => undefined);
 }
 
 async function resolveUiActionTabId(tabId?: number): Promise<number | undefined> {
@@ -5079,20 +13558,6 @@ async function resolveUiActionTabId(tabId?: number): Promise<number | undefined>
   return sessionsByTab.keys().next().value;
 }
 
-function parseInboundMessage(message: unknown): ExtensionInboundMessage | null {
-  if (message === null || typeof message !== "object" || Array.isArray(message)) {
-    return null;
-  }
-
-  const kind = (message as { kind?: unknown }).kind;
-
-  if (typeof kind !== "string") {
-    return null;
-  }
-
-  return message as ExtensionInboundMessage;
-}
-
 async function setIdleBadge(): Promise<void> {
   await chromeApi?.action?.setBadgeText({ text: "" }).catch(() => undefined);
 }
diff --git a/apps/extension/src/sw/lite-network-baseline.test.ts b/apps/extension/src/sw/lite-network-baseline.test.ts
index 33ac55c..29b3024 100644
--- a/apps/extension/src/sw/lite-network-baseline.test.ts
+++ b/apps/extension/src/sw/lite-network-baseline.test.ts
@@ -18,7 +18,8 @@ describe("lite-network-baseline", () => {
       requestId: "123",
       method: "post",
       url: "https://example.com/api/items/123?token=secret#frag",
-      timeStamp: 101
+      timeStamp: 101.25,
+      mono: 501.75
     });
 
     expect(rawEvent).toMatchObject({
@@ -27,8 +28,8 @@ describe("lite-network-baseline", () => {
       sid: "S-lite-network",
       tabId: 7,
       frame: "content-frame-2",
-      t: 101,
-      mono: 101,
+      t: 101.25,
+      mono: 501.75,
       payload: {
         phase: "start",
         reqId: "123",
@@ -47,6 +48,7 @@ describe("lite-network-baseline", () => {
       method: "get",
       url: "https://example.com/api/items",
       timeStamp: 205,
+      mono: 605,
       statusCode: 204,
       statusLine: "HTTP/1.1 204 No Content",
       duration: 104
@@ -54,6 +56,8 @@ describe("lite-network-baseline", () => {
 
     expect(rawEvent).toMatchObject({
       rawType: "fetch",
+      t: 205,
+      mono: 605,
       payload: {
         phase: "end",
         reqId: "123",
@@ -76,12 +80,15 @@ describe("lite-network-baseline", () => {
       method: "get",
       url: "https://example.com/api/items",
       timeStamp: 215,
+      mono: 615,
       duration: 114,
       error: "net::ERR_ABORTED"
     });
 
     expect(rawEvent).toMatchObject({
       rawType: "fetchError",
+      t: 215,
+      mono: 615,
       payload: {
         reqId: "123",
         requestId: "123",
diff --git a/apps/extension/src/sw/lite-network-baseline.ts b/apps/extension/src/sw/lite-network-baseline.ts
index 2898e65..46cdc4c 100644
--- a/apps/extension/src/sw/lite-network-baseline.ts
+++ b/apps/extension/src/sw/lite-network-baseline.ts
@@ -13,6 +13,7 @@ type LiteNetworkStartDetails = {
   method?: string;
   url: string;
   timeStamp?: number;
+  mono: number;
 };
 
 type LiteNetworkEndDetails = LiteNetworkStartDetails & {
@@ -32,7 +33,7 @@ export function buildLiteNetworkRequestRawEvent(
   context: LiteNetworkRuntimeContext,
   details: LiteNetworkStartDetails
 ): RawRecorderEvent {
-  const { t, mono } = normalizeNetworkTime(details.timeStamp);
+  const { t, mono } = normalizeNetworkTime(details.timeStamp, details.mono);
 
   return {
     source: "content",
@@ -56,7 +57,7 @@ export function buildLiteNetworkResponseRawEvent(
   context: LiteNetworkRuntimeContext,
   details: LiteNetworkEndDetails
 ): RawRecorderEvent {
-  const { t, mono } = normalizeNetworkTime(details.timeStamp);
+  const { t, mono } = normalizeNetworkTime(details.timeStamp, details.mono);
   const status = normalizeStatusCode(details.statusCode);
 
   return {
@@ -87,7 +88,7 @@ export function buildLiteNetworkFailureRawEvent(
   context: LiteNetworkRuntimeContext,
   details: LiteNetworkErrorDetails
 ): RawRecorderEvent {
-  const { t, mono } = normalizeNetworkTime(details.timeStamp);
+  const { t, mono } = normalizeNetworkTime(details.timeStamp, details.mono);
   const message =
     typeof details.error === "string" && details.error.length > 0
       ? details.error
@@ -117,18 +118,22 @@ function sanitizeOptionalUrl(value: string | undefined): string | undefined {
   return value ? sanitizeUrlForPrivacy(value) : undefined;
 }
 
-function normalizeNetworkTime(candidate?: number): { t: number; mono: number } {
-  const value =
-    typeof candidate === "number" && Number.isFinite(candidate) && candidate > 0
-      ? Math.round(candidate)
-      : Date.now();
-
+function normalizeNetworkTime(
+  wallClockCandidate: number | undefined,
+  monotonicCandidate: number
+): { t: number; mono: number } {
   return {
-    t: value,
-    mono: value
+    t: normalizePositiveTimestamp(wallClockCandidate),
+    mono: normalizePositiveTimestamp(monotonicCandidate)
   };
 }
 
+function normalizePositiveTimestamp(candidate: number | undefined): number {
+  return typeof candidate === "number" && Number.isFinite(candidate) && candidate > 0
+    ? candidate
+    : Date.now();
+}
+
 function normalizeMethod(candidate?: string): string {
   return typeof candidate === "string" && candidate.length > 0 ? candidate.toUpperCase() : "GET";
 }
diff --git a/apps/extension/src/sw/lite-web-request-authorization.test.ts b/apps/extension/src/sw/lite-web-request-authorization.test.ts
new file mode 100644
index 0000000..57228ba
--- /dev/null
+++ b/apps/extension/src/sw/lite-web-request-authorization.test.ts
@@ -0,0 +1,446 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  ContentDocumentAuthorization,
+  type ContentNavigationAuthorization
+} from "./content-document-authorization.js";
+import {
+  authorizeLiteWebRequest,
+  isLiteWebRequestDocumentUrlUnambiguous
+} from "./lite-web-request-authorization.js";
+
+const TAB_ID = 7;
+
+describe("Lite webRequest document URL sufficiency", () => {
+  it("disables subresource capture for path-sensitive policy but keeps document navigation", () => {
+    expect(isLiteWebRequestDocumentUrlUnambiguous([], "fetch")).toBe(true);
+    expect(isLiteWebRequestDocumentUrlUnambiguous(["/private/*"], "fetch")).toBe(false);
+    expect(isLiteWebRequestDocumentUrlUnambiguous(["/private/*"], "main_frame")).toBe(true);
+    expect(isLiteWebRequestDocumentUrlUnambiguous(["/private/*"], "sub_frame")).toBe(true);
+  });
+});
+
+describe("authorizeLiteWebRequest", () => {
+  it("requires ordinary child requests to match the exact active document", () => {
+    const authorization = authorizedChild("document-a", "https://widgets.example/document-a");
+    const evaluateScope = vi.fn().mockReturnValue(true);
+
+    expect(
+      decide(
+        authorization,
+        {
+          frameId: 4,
+          documentId: "document-a",
+          url: "https://api.example/resource"
+        },
+        { evaluateScope }
+      ).allowed
+    ).toBe(true);
+    expect(evaluateScope).toHaveBeenLastCalledWith("https://widgets.example/document-a", 4);
+    expect(
+      decide(authorization, {
+        frameId: 4,
+        documentId: "stale-document",
+        url: "https://api.example/resource"
+      }).allowed
+    ).toBe(false);
+    expect(
+      decide(authorization, {
+        frameId: 4,
+        url: "https://api.example/resource"
+      }).allowed
+    ).toBe(false);
+  });
+
+  it("revokes the old child only in sub_frame onBefore", () => {
+    const authorization = authorizedChild("document-a", "https://widgets.example/document-a");
+
+    const before = decide(authorization, {
+      frameId: 4,
+      documentId: "document-a",
+      type: "sub_frame",
+      url: "https://widgets.example/document-b"
+    });
+
+    expect(before).toMatchObject({ allowed: true, frameId: 4, kind: "subframe-navigation" });
+    expect(before.navigationAuthorization).toBeDefined();
+    expect(authorization.get(4)).toBeNull();
+  });
+
+  it("drops completion for a denied sub_frame onBefore", () => {
+    const authorization = authorizedChild("document-a", "https://widgets.example/document-a");
+    const details = {
+      frameId: 4,
+      type: "sub_frame",
+      url: "https://blocked.example/document-b"
+    };
+
+    const before = decide(authorization, details, { evaluateScope: () => false });
+    expect(before.allowed).toBe(false);
+    expect(
+      decide(authorization, details, {
+        phase: "completion",
+        navigationAuthorization: before.navigationAuthorization
+      }).allowed
+    ).toBe(false);
+  });
+
+  it("allows an approved navigation completion without revoking the new document", async () => {
+    const authorization = authorizedChild("document-a", "https://widgets.example/document-a");
+    const details = {
+      frameId: 4,
+      type: "sub_frame",
+      url: "https://widgets.example/document-b"
+    };
+    const before = decide(authorization, details);
+    expect(before.allowed).toBe(true);
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 4,
+        documentId: "document-b",
+        url: details.url
+      },
+      () => true
+    );
+    authorization.completePendingInjection(4, "document-b");
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 4,
+      documentId: "document-b",
+      url: details.url
+    });
+
+    expect(
+      decide(authorization, details, {
+        phase: "completion",
+        navigationAuthorization: before.navigationAuthorization
+      }).allowed
+    ).toBe(true);
+    expect(authorization.get(4)?.documentId).toBe("document-b");
+  });
+
+  it("requires ordinary top requests to match the exact active top document", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: "https://app.example/current" });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url: "https://app.example/current"
+    });
+    const evaluateScope = vi.fn().mockReturnValue(true);
+
+    expect(
+      decide(
+        authorization,
+        {
+          frameId: 0,
+          documentId: "top-document-a",
+          type: "xmlhttprequest",
+          url: "https://api.example/data"
+        },
+        { evaluateScope }
+      )
+    ).toEqual({ allowed: true, frameId: 0, kind: "top-document" });
+    expect(evaluateScope).toHaveBeenCalledWith("https://app.example/current", 0);
+    expect(
+      decide(authorization, {
+        frameId: 0,
+        documentId: "stale-top-document",
+        type: "xmlhttprequest",
+        url: "https://api.example/stale"
+      }).allowed
+    ).toBe(false);
+    expect(
+      decide(authorization, {
+        frameId: 0,
+        type: "xmlhttprequest",
+        url: "https://api.example/missing-document-id"
+      }).allowed
+    ).toBe(false);
+  });
+
+  it("rejects a subframe navigation without an exact current parent document", () => {
+    const authorization = authorizedChild("document-a", "https://widgets.example/document-a");
+
+    expect(
+      decide(authorization, {
+        frameId: 4,
+        parentFrameId: 0,
+        parentDocumentId: "stale-top-document",
+        type: "sub_frame",
+        url: "https://widgets.example/document-b"
+      }).allowed
+    ).toBe(false);
+    expect(authorization.get(4)?.documentId).toBe("document-a");
+  });
+
+  it("rejects pending and preparing documents as subframe parents", async () => {
+    const pendingParent = authorizedTop("top-document-a", "https://app.example/a");
+    await pendingParent.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: "https://app.example/b"
+      },
+      () => true
+    );
+
+    expect(
+      decide(pendingParent, {
+        frameId: 4,
+        parentFrameId: 0,
+        parentDocumentId: "top-document-b",
+        type: "sub_frame",
+        url: "https://widgets.example/pending-child"
+      }).allowed
+    ).toBe(false);
+
+    const preparingParent = authorizedTop("top-document-a", "https://app.example/a");
+    let release!: (allowed: boolean) => void;
+    const policy = new Promise<boolean>((resolve) => {
+      release = resolve;
+    });
+    const preparation = preparingParent.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-c",
+        url: "https://app.example/c"
+      },
+      () => policy
+    );
+
+    expect(
+      decide(preparingParent, {
+        frameId: 5,
+        parentFrameId: 0,
+        parentDocumentId: "top-document-c",
+        type: "sub_frame",
+        url: "https://widgets.example/preparing-child"
+      }).allowed
+    ).toBe(false);
+    release(true);
+    await preparation;
+  });
+
+  it("closes A synchronously when top navigation B starts", () => {
+    const authorization = new ContentDocumentAuthorization(TAB_ID);
+    authorization.reset({ url: "https://app.example/current" });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 0,
+      documentId: "top-document-a",
+      url: "https://app.example/current"
+    });
+    authorization.authorize({
+      tabId: TAB_ID,
+      frameId: 3,
+      documentId: "child-document-a",
+      url: "https://widgets.example/a"
+    });
+    const evaluateScope = vi.fn((url: string) => url.startsWith("https://app.example/"));
+    const navigation = {
+      frameId: 0,
+      type: "main_frame",
+      url: "https://app.example/document-b"
+    };
+
+    const before = decide(authorization, navigation, { evaluateScope });
+
+    expect(before).toMatchObject({ allowed: true, frameId: 0, kind: "top-navigation" });
+    expect(before.navigationAuthorization).toBeDefined();
+    expect(authorization.activeFrameIds()).toEqual([]);
+    expect(authorization.getPending(0)).toBeNull();
+    expect(evaluateScope).toHaveBeenCalledWith("https://app.example/document-b", 0);
+  });
+
+  it("keeps a denied top navigation closed through completion", () => {
+    const authorization = authorizedTop("top-document-a", "https://app.example/current");
+    const deniedNavigation = {
+      frameId: 0,
+      type: "main_frame",
+      url: "https://denied.example/private"
+    };
+    const evaluateScope = (url: string) => url.startsWith("https://app.example/");
+    const before = decide(authorization, deniedNavigation, { evaluateScope });
+
+    expect(before.allowed).toBe(false);
+    expect(authorization.get(0)).toBeNull();
+    expect(
+      decide(authorization, deniedNavigation, {
+        phase: "completion",
+        navigationAuthorization: before.navigationAuthorization,
+        evaluateScope
+      }).allowed
+    ).toBe(false);
+  });
+
+  it("drops an allowed top navigation completion that redirects out of scope", () => {
+    const authorization = authorizedTop("top-document-a", "https://app.example/current");
+    const before = decide(authorization, {
+      frameId: 0,
+      type: "main_frame",
+      url: "https://app.example/redirecting"
+    });
+
+    expect(
+      decide(
+        authorization,
+        { frameId: 0, type: "main_frame", url: "https://denied.example/final" },
+        {
+          phase: "completion",
+          navigationAuthorization: before.navigationAuthorization,
+          evaluateScope: (url) => url.startsWith("https://app.example/")
+        }
+      ).allowed
+    ).toBe(false);
+  });
+
+  it("accepts current top completion after onCommitted without a documentId", async () => {
+    const authorization = authorizedTop("top-document-a", "https://app.example/a");
+    const details = {
+      frameId: 0,
+      type: "main_frame",
+      url: "https://app.example/b"
+    };
+    const before = decide(authorization, details);
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-b",
+        url: details.url
+      },
+      () => true
+    );
+
+    expect(
+      decide(authorization, details, {
+        phase: "completion",
+        navigationAuthorization: before.navigationAuthorization
+      })
+    ).toMatchObject({ allowed: true, navigationCurrent: true });
+  });
+
+  it("rejects B completion after top navigation C supersedes it", async () => {
+    const authorization = authorizedTop("top-document-a", "https://app.example/a");
+    const navigationB = {
+      frameId: 0,
+      type: "main_frame",
+      url: "https://app.example/b"
+    };
+    const beforeB = decide(authorization, navigationB);
+    const beforeC = decide(authorization, {
+      frameId: 0,
+      type: "main_frame",
+      url: "https://app.example/c"
+    });
+
+    await authorization.prepareCommittedNavigation(
+      {
+        tabId: TAB_ID,
+        frameId: 0,
+        documentId: "top-document-c",
+        url: "https://app.example/c"
+      },
+      () => true
+    );
+
+    expect(beforeC.allowed).toBe(true);
+    expect(
+      decide(
+        authorization,
+        { ...navigationB, documentId: "top-document-b" },
+        {
+          phase: "completion",
+          navigationAuthorization: beforeB.navigationAuthorization
+        }
+      ).allowed
+    ).toBe(false);
+    expect(authorization.getPending(0)?.documentId).toBe("top-document-c");
+  });
+
+  it("recognizes a current top navigation error without documentId but rejects stale B", () => {
+    const authorization = authorizedTop("top-document-a", "https://app.example/a");
+    const navigationB = {
+      frameId: 0,
+      type: "main_frame",
+      url: "https://app.example/b"
+    };
+    const beforeB = decide(authorization, navigationB);
+
+    expect(
+      decide(authorization, navigationB, {
+        phase: "completion",
+        navigationAuthorization: beforeB.navigationAuthorization
+      }).allowed
+    ).toBe(true);
+
+    decide(authorization, {
+      frameId: 0,
+      type: "main_frame",
+      url: "https://app.example/c"
+    });
+
+    expect(
+      decide(authorization, navigationB, {
+        phase: "completion",
+        navigationAuthorization: beforeB.navigationAuthorization
+      }).allowed
+    ).toBe(false);
+  });
+});
+
+function authorizedChild(documentId: string, url: string): ContentDocumentAuthorization {
+  const authorization = new ContentDocumentAuthorization(TAB_ID);
+  authorization.reset({ url: "https://app.example/current" });
+  authorization.authorize({
+    tabId: TAB_ID,
+    frameId: 0,
+    documentId: "top-document",
+    url: "https://app.example/current"
+  });
+  authorization.authorize({ tabId: TAB_ID, frameId: 4, documentId, url });
+  return authorization;
+}
+
+function authorizedTop(documentId: string, url: string): ContentDocumentAuthorization {
+  const authorization = new ContentDocumentAuthorization(TAB_ID);
+  authorization.reset({ url });
+  authorization.authorize({ tabId: TAB_ID, frameId: 0, documentId, url });
+  return authorization;
+}
+
+function decide(
+  authorization: ContentDocumentAuthorization,
+  details: {
+    frameId?: number;
+    documentId?: string;
+    parentFrameId?: number;
+    parentDocumentId?: string;
+    type?: string;
+    url: string;
+  },
+  options: {
+    phase?: "before" | "completion";
+    navigationAuthorization?: ContentNavigationAuthorization;
+    evaluateScope?: (url: string, frameId: number) => boolean;
+  } = {}
+) {
+  return authorizeLiteWebRequest({
+    authorization,
+    details: {
+      tabId: TAB_ID,
+      ...(details.type === "sub_frame"
+        ? { parentFrameId: 0, parentDocumentId: "top-document" }
+        : {}),
+      ...details
+    },
+    phase: options.phase ?? "before",
+    navigationAuthorization: options.navigationAuthorization,
+    evaluateScope: options.evaluateScope ?? (() => true)
+  });
+}
diff --git a/apps/extension/src/sw/lite-web-request-authorization.ts b/apps/extension/src/sw/lite-web-request-authorization.ts
new file mode 100644
index 0000000..7c775cd
--- /dev/null
+++ b/apps/extension/src/sw/lite-web-request-authorization.ts
@@ -0,0 +1,175 @@
+import {
+  ContentDocumentAuthorization,
+  type ContentNavigationAuthorization
+} from "./content-document-authorization.js";
+
+export type LiteWebRequestAuthorizationPhase = "before" | "completion";
+
+export type LiteWebRequestAuthorizationDetails = Readonly<{
+  tabId: number;
+  frameId?: number;
+  documentId?: string;
+  parentFrameId?: number;
+  parentDocumentId?: string;
+  type?: string;
+  url: string;
+}>;
+
+export type LiteWebRequestAuthorizationDecision = Readonly<{
+  allowed: boolean;
+  frameId: number;
+  kind: "top-document" | "top-navigation" | "child-document" | "subframe-navigation";
+  navigationAuthorization?: ContentNavigationAuthorization;
+  navigationCurrent?: boolean;
+}>;
+
+/** Browser webRequest exposes documentId/origin but not the live SPA path. */
+export function isLiteWebRequestDocumentUrlUnambiguous(
+  excludedUrlPatterns: readonly string[],
+  resourceType: string | undefined
+): boolean {
+  return (
+    resourceType === "main_frame" ||
+    resourceType === "sub_frame" ||
+    excludedUrlPatterns.length === 0
+  );
+}
+
+export function authorizeLiteWebRequest(input: {
+  authorization: ContentDocumentAuthorization;
+  details: LiteWebRequestAuthorizationDetails;
+  phase: LiteWebRequestAuthorizationPhase;
+  navigationAuthorization?: ContentNavigationAuthorization;
+  evaluateScope: (documentUrl: string, frameId: number) => boolean;
+}): LiteWebRequestAuthorizationDecision {
+  const frameId = normalizeFrameId(input.details.frameId);
+
+  if (input.details.tabId !== input.authorization.tabId || frameId === null) {
+    return denied(frameId ?? 0, "child-document");
+  }
+
+  if (frameId === 0) {
+    if (input.details.type === "main_frame") {
+      if (input.phase === "before") {
+        const navigationAuthorization = input.navigationAuthorization
+          ? input.authorization.continueNavigation(input.navigationAuthorization, input.details.url)
+          : input.authorization.beginNavigation(frameId, input.details.url);
+        const allowed =
+          navigationAuthorization !== null && input.evaluateScope(input.details.url, frameId);
+
+        return {
+          allowed,
+          frameId,
+          kind: "top-navigation",
+          navigationCurrent: navigationAuthorization !== null,
+          ...(allowed ? { navigationAuthorization } : {})
+        };
+      }
+
+      const navigationCurrent =
+        input.navigationAuthorization !== undefined &&
+        input.authorization.matchesNavigationCompletion({
+          authorization: input.navigationAuthorization,
+          frameId,
+          documentId: input.details.documentId
+        });
+
+      return {
+        allowed: navigationCurrent && input.evaluateScope(input.details.url, frameId),
+        frameId,
+        kind: "top-navigation",
+        navigationCurrent
+      };
+    }
+
+    const document = input.authorization.get(frameId);
+    return {
+      allowed:
+        document !== null &&
+        input.authorization.matchesWebRequest({
+          tabId: input.details.tabId,
+          frameId,
+          documentId: input.details.documentId
+        }) &&
+        input.evaluateScope(document.url, frameId),
+      frameId,
+      kind: "top-document"
+    };
+  }
+
+  if (input.details.type === "sub_frame") {
+    if (input.phase === "before") {
+      const parentDocument =
+        input.details.parentFrameId === undefined
+          ? null
+          : input.authorization.get(input.details.parentFrameId);
+      if (!parentDocument || parentDocument.documentId !== input.details.parentDocumentId) {
+        return {
+          allowed: false,
+          frameId,
+          kind: "subframe-navigation",
+          navigationCurrent: false
+        };
+      }
+
+      const navigationAuthorization = input.navigationAuthorization
+        ? input.authorization.continueNavigation(input.navigationAuthorization, input.details.url)
+        : input.authorization.beginNavigation(frameId, input.details.url);
+      const allowed =
+        navigationAuthorization !== null && input.evaluateScope(input.details.url, frameId);
+      return {
+        allowed,
+        frameId,
+        kind: "subframe-navigation",
+        navigationCurrent: navigationAuthorization !== null,
+        ...(allowed ? { navigationAuthorization } : {})
+      };
+    }
+
+    const navigationCurrent =
+      input.navigationAuthorization !== undefined &&
+      input.authorization.matchesNavigationCompletion({
+        authorization: input.navigationAuthorization,
+        frameId,
+        documentId: input.details.documentId
+      });
+
+    return {
+      allowed: navigationCurrent && input.evaluateScope(input.details.url, frameId),
+      frameId,
+      kind: "subframe-navigation",
+      navigationCurrent
+    };
+  }
+
+  const document = input.authorization.get(frameId);
+  const allowed =
+    document !== null &&
+    input.authorization.matchesWebRequest({
+      tabId: input.details.tabId,
+      frameId,
+      documentId: input.details.documentId
+    }) &&
+    input.evaluateScope(document.url, frameId);
+
+  return {
+    allowed,
+    frameId,
+    kind: "child-document"
+  };
+}
+
+function normalizeFrameId(value: number | undefined): number | null {
+  if (value === undefined) {
+    return 0;
+  }
+
+  return Number.isSafeInteger(value) && value >= 0 ? value : null;
+}
+
+function denied(
+  frameId: number,
+  kind: LiteWebRequestAuthorizationDecision["kind"]
+): LiteWebRequestAuthorizationDecision {
+  return { allowed: false, frameId, kind };
+}
diff --git a/apps/extension/src/sw/navigation-metadata.test.ts b/apps/extension/src/sw/navigation-metadata.test.ts
index d5e2965..7b3a143 100644
--- a/apps/extension/src/sw/navigation-metadata.test.ts
+++ b/apps/extension/src/sw/navigation-metadata.test.ts
@@ -1,8 +1,435 @@
 import { describe, expect, it } from "vitest";
 
-import { shouldUpdateSessionMetadataFromNavigation } from "./navigation-metadata.js";
+import {
+  advanceCdpRestoreEpoch,
+  cancelExactWebNavigationCommitObservation,
+  canUseExactLiteTopDocumentAuthorization,
+  captureCdpTopNavigationRestoreContract,
+  classifyActiveCommittedDocument,
+  createExactTopNavigationObservationState,
+  isCdpRestoreEpochCurrent,
+  observeExactCdpTopNavigation,
+  observeExactWebNavigationCommit,
+  resolveCurrentTabUrlPolicyDecision,
+  resolveCdpRestorePredecessor,
+  resolveCdpTopNavigationOwnership,
+  resolveExactInitialContentParent,
+  shouldContentSenderClaimCaptureUrl,
+  shouldUpdateSessionMetadataFromNavigation
+} from "./navigation-metadata.js";
 
 describe("navigation-metadata", () => {
+  it("uses exact webNavigation commits in store-safe Lite without webRequest", () => {
+    expect(
+      canUseExactLiteTopDocumentAuthorization({
+        mode: "lite",
+        permissions: ["activeTab", "scripting", "webNavigation"],
+        hasWebNavigationApi: true,
+        hasSameDocumentNavigationApi: true,
+        hasScriptingApi: true
+      })
+    ).toBe(true);
+  });
+
+  it("fails closed without the declared webNavigation capability", () => {
+    expect(
+      canUseExactLiteTopDocumentAuthorization({
+        mode: "lite",
+        permissions: ["activeTab", "scripting"],
+        hasWebNavigationApi: true,
+        hasSameDocumentNavigationApi: true,
+        hasScriptingApi: true
+      })
+    ).toBe(false);
+  });
+
+  it("fails closed without same-document navigation callbacks", () => {
+    expect(
+      canUseExactLiteTopDocumentAuthorization({
+        mode: "lite",
+        permissions: ["activeTab", "scripting", "webNavigation"],
+        hasWebNavigationApi: true,
+        hasSameDocumentNavigationApi: false,
+        hasScriptingApi: true
+      })
+    ).toBe(false);
+  });
+
+  it("classifies only active outermost and subframe commits", () => {
+    expect(
+      classifyActiveCommittedDocument({
+        frameId: 0,
+        documentLifecycle: "active",
+        frameType: "outermost_frame"
+      })
+    ).toBe("top");
+    expect(
+      classifyActiveCommittedDocument({
+        frameId: 3,
+        documentLifecycle: "active",
+        frameType: "sub_frame"
+      })
+    ).toBe("child");
+  });
+
+  it("rejects prerender, fenced, cached, and incomplete commit identities", () => {
+    expect(
+      classifyActiveCommittedDocument({
+        frameId: 8,
+        documentLifecycle: "prerender",
+        frameType: "outermost_frame"
+      })
+    ).toBeNull();
+    expect(
+      classifyActiveCommittedDocument({
+        frameId: 9,
+        documentLifecycle: "active",
+        frameType: "fenced_frame"
+      })
+    ).toBeNull();
+    expect(
+      classifyActiveCommittedDocument({
+        frameId: 0,
+        documentLifecycle: "cached",
+        frameType: "outermost_frame"
+      })
+    ).toBeNull();
+    expect(classifyActiveCommittedDocument({ frameId: 0 })).toBeNull();
+  });
+
+  it("leaves exact Full cross-document CDP navigation and restore to webNavigation", () => {
+    expect(
+      resolveCdpTopNavigationOwnership({
+        navigationKind: "cross-document",
+        usesExactWebNavigationDocumentOwnership: true,
+        childMutationRevision: 7,
+        restoreEpoch: 4
+      })
+    ).toEqual({
+      urlOwner: "web-navigation",
+      restore: null
+    });
+  });
+
+  it("keeps same-document CDP navigation authoritative in exact mode", () => {
+    expect(
+      resolveCdpTopNavigationOwnership({
+        navigationKind: "same-document",
+        usesExactWebNavigationDocumentOwnership: true,
+        childMutationRevision: 11,
+        restoreEpoch: 5
+      })
+    ).toEqual({
+      urlOwner: "cdp",
+      restore: {
+        expectedChildMutationRevision: 11,
+        expectedRestoreEpoch: 5
+      }
+    });
+  });
+
+  it("lets fallback cross-document CDP navigation own URL adoption and restore", () => {
+    expect(
+      resolveCdpTopNavigationOwnership({
+        navigationKind: "cross-document",
+        usesExactWebNavigationDocumentOwnership: false,
+        childMutationRevision: 3,
+        restoreEpoch: 6
+      })
+    ).toEqual({
+      urlOwner: "cdp",
+      restore: {
+        expectedChildMutationRevision: 3,
+        expectedRestoreEpoch: 6
+      }
+    });
+  });
+
+  it("captures the child mutation revision before a queued top CDP restore", () => {
+    const scope = { childMutationRevision: 19, restoreEpoch: 8 };
+    const restore = captureCdpTopNavigationRestoreContract(scope);
+
+    scope.childMutationRevision += 1;
+
+    expect(restore).toEqual({
+      expectedChildMutationRevision: 19,
+      expectedRestoreEpoch: 8
+    });
+    expect(Object.isFrozen(restore)).toBe(true);
+  });
+
+  it("invalidates an old restore for a same-URL cross-document replacement", () => {
+    const runtime = { cdpRestoreEpoch: 12 };
+    const oldRestore = captureCdpTopNavigationRestoreContract({
+      childMutationRevision: 3,
+      restoreEpoch: runtime.cdpRestoreEpoch
+    });
+
+    expect(isCdpRestoreEpochCurrent(runtime, oldRestore.expectedRestoreEpoch)).toBe(true);
+    expect(advanceCdpRestoreEpoch(runtime)).toBe(13);
+    expect(isCdpRestoreEpochCurrent(runtime, oldRestore.expectedRestoreEpoch)).toBe(false);
+
+    const replacementRestore = captureCdpTopNavigationRestoreContract({
+      childMutationRevision: 3,
+      restoreEpoch: runtime.cdpRestoreEpoch
+    });
+    expect(isCdpRestoreEpochCurrent(runtime, replacementRestore.expectedRestoreEpoch)).toBe(true);
+  });
+
+  it("rejects invalid or exhausted CDP restore epochs", () => {
+    expect(() => advanceCdpRestoreEpoch({ cdpRestoreEpoch: -1 })).toThrow(
+      "CDP restore epoch is invalid or exhausted."
+    );
+    expect(() => advanceCdpRestoreEpoch({ cdpRestoreEpoch: Number.MAX_SAFE_INTEGER })).toThrow(
+      "CDP restore epoch is invalid or exhausted."
+    );
+  });
+
+  it("does not queue a replacement restore behind a hung prior epoch", async () => {
+    const hung = new Promise<void>(() => undefined);
+
+    expect(
+      resolveCdpRestorePredecessor({
+        tail: hung,
+        tailEpoch: 20,
+        expectedRestoreEpoch: 20
+      })
+    ).toBe(hung);
+    await expect(
+      resolveCdpRestorePredecessor({
+        tail: hung,
+        tailEpoch: 20,
+        expectedRestoreEpoch: 21
+      })
+    ).resolves.toBeUndefined();
+  });
+
+  it("shares one restore epoch when CDP observes a cross-document commit first", () => {
+    const state = createExactTopNavigationObservationState();
+    let restoreEpoch = 40;
+    const allocate = () => (restoreEpoch += 1);
+
+    const cdp = observeExactCdpTopNavigation(state, "https://app.example/b", allocate);
+    const web = observeExactWebNavigationCommit(state, "https://app.example/b", allocate);
+
+    expect(cdp).toMatchObject({ restoreEpoch: 41 });
+    expect(web).toMatchObject({ restoreEpoch: 41, cdpObserved: true });
+    expect(restoreEpoch).toBe(41);
+    expect(state.pendingCdp).toEqual([]);
+    expect(state.pendingWeb).toEqual([]);
+  });
+
+  it("matches canonically equivalent final URLs across Chrome event surfaces", () => {
+    const state = createExactTopNavigationObservationState();
+    let restoreEpoch = 50;
+    const allocate = () => (restoreEpoch += 1);
+
+    const cdp = observeExactCdpTopNavigation(state, "https://app.example", allocate);
+    const web = observeExactWebNavigationCommit(state, "https://app.example/", allocate);
+
+    expect(cdp.kind).toBe("current");
+    if (cdp.kind !== "current") throw new Error("Expected a current CDP observation.");
+    expect(web).toMatchObject({ restoreEpoch: cdp.restoreEpoch, cdpObserved: true });
+    expect(restoreEpoch).toBe(51);
+  });
+
+  it("moves a web-first commit to a fresh epoch when its CDP observation arrives", () => {
+    const state = createExactTopNavigationObservationState();
+    let restoreEpoch = 7;
+    const allocate = () => (restoreEpoch += 1);
+
+    const web = observeExactWebNavigationCommit(state, "https://app.example/b", allocate);
+    const cdp = observeExactCdpTopNavigation(state, "https://app.example/b", allocate);
+
+    expect(cdp.kind).toBe("current");
+    if (cdp.kind !== "current") throw new Error("Expected a current CDP observation.");
+    expect(web).toMatchObject({ restoreEpoch: 8, cdpObserved: false });
+    expect(cdp).toMatchObject({
+      restoreEpoch: 9,
+      matchedWebToken: web.token
+    });
+    expect(restoreEpoch).toBe(9);
+    expect(isCdpRestoreEpochCurrent({ cdpRestoreEpoch: restoreEpoch }, web.restoreEpoch)).toBe(
+      false
+    );
+    expect(isCdpRestoreEpochCurrent({ cdpRestoreEpoch: restoreEpoch }, cdp.restoreEpoch)).toBe(
+      true
+    );
+    expect(state.pendingWeb).toEqual([]);
+  });
+
+  it("ignores a delayed superseded web match without advancing the current epoch", () => {
+    const state = createExactTopNavigationObservationState();
+    let restoreEpoch = 70;
+    const allocate = () => (restoreEpoch += 1);
+    const webB = observeExactWebNavigationCommit(state, "https://app.example/b", allocate);
+    const webC = observeExactWebNavigationCommit(state, "https://app.example/c", allocate);
+
+    const delayedB = observeExactCdpTopNavigation(
+      state,
+      "https://app.example/b",
+      allocate,
+      (token, epoch) => token === webC.token && epoch === webC.restoreEpoch
+    );
+
+    expect(delayedB).toEqual({
+      kind: "ignored-stale",
+      ignoredWebToken: webB.token,
+      evictedWebTokens: []
+    });
+    expect(restoreEpoch).toBe(webC.restoreEpoch);
+
+    const currentC = observeExactCdpTopNavigation(
+      state,
+      "https://app.example/c",
+      allocate,
+      (token, epoch) => token === webC.token && epoch === webC.restoreEpoch
+    );
+    expect(currentC).toMatchObject({
+      kind: "current",
+      matchedWebToken: webC.token,
+      restoreEpoch: webC.restoreEpoch + 1
+    });
+  });
+
+  it("consumes an evicted web observation without mutating the restore epoch", () => {
+    const state = createExactTopNavigationObservationState();
+    let restoreEpoch = 100;
+    const allocate = () => (restoreEpoch += 1);
+
+    for (let index = 0; index < 17; index += 1) {
+      observeExactWebNavigationCommit(state, `https://app.example/navigation-${index}`, allocate);
+    }
+    const beforeDelayedCdp = restoreEpoch;
+
+    expect(
+      observeExactCdpTopNavigation(state, "https://app.example/navigation-0", allocate, () => false)
+    ).toEqual({ kind: "ignored-stale", evictedWebTokens: [] });
+    expect(restoreEpoch).toBe(beforeDelayedCdp);
+    expect(state.pendingCdp).toEqual([]);
+  });
+
+  it("gives C a new epoch instead of adopting delayed B when URLs differ", () => {
+    const state = createExactTopNavigationObservationState();
+    let restoreEpoch = 2;
+    const allocate = () => (restoreEpoch += 1);
+
+    const webB = observeExactWebNavigationCommit(state, "https://app.example/b", allocate);
+    const cdpC = observeExactCdpTopNavigation(state, "https://app.example/c", allocate);
+
+    expect(cdpC.kind).toBe("current");
+    if (cdpC.kind !== "current") throw new Error("Expected a current CDP observation.");
+    expect(webB.restoreEpoch).toBe(3);
+    expect(cdpC).toMatchObject({ restoreEpoch: 4 });
+    expect(cdpC.matchedWebToken).toBeUndefined();
+    expect(state.pendingWeb).toHaveLength(1);
+    expect(state.pendingCdp).toHaveLength(1);
+    expect(isCdpRestoreEpochCurrent({ cdpRestoreEpoch: restoreEpoch }, webB.restoreEpoch)).toBe(
+      false
+    );
+  });
+
+  it("keeps same-URL replacements FIFO and supports explicit cancellation", () => {
+    const state = createExactTopNavigationObservationState();
+    let restoreEpoch = 10;
+    const allocate = () => (restoreEpoch += 1);
+    const first = observeExactWebNavigationCommit(state, "https://app.example/same", allocate);
+    const second = observeExactWebNavigationCommit(state, "https://app.example/same", allocate);
+
+    const matched = observeExactCdpTopNavigation(state, "https://app.example/same", allocate);
+    expect(matched.kind).toBe("current");
+    expect(matched.kind === "current" ? matched.matchedWebToken : undefined).toBe(first.token);
+    cancelExactWebNavigationCommitObservation(state, second.token);
+    expect(state.pendingWeb).toEqual([]);
+  });
+
+  it("prevents exact top content senders from claiming capture URL ownership", () => {
+    expect(
+      shouldContentSenderClaimCaptureUrl({
+        frameId: 0,
+        senderUrl: "https://example.test/next",
+        currentCaptureUrl: "https://example.test/current",
+        usesExactTopDocumentAuthorization: true
+      })
+    ).toBe(false);
+  });
+
+  it("allows only changed fallback top content URLs to claim ownership", () => {
+    expect(
+      shouldContentSenderClaimCaptureUrl({
+        frameId: 0,
+        senderUrl: "https://example.test/next",
+        currentCaptureUrl: "https://example.test/current",
+        usesExactTopDocumentAuthorization: false
+      })
+    ).toBe(true);
+    expect(
+      shouldContentSenderClaimCaptureUrl({
+        frameId: 4,
+        senderUrl: "https://frame.example.test/next",
+        currentCaptureUrl: "https://example.test/current",
+        usesExactTopDocumentAuthorization: false
+      })
+    ).toBe(false);
+    expect(
+      shouldContentSenderClaimCaptureUrl({
+        frameId: 0,
+        senderUrl: "https://example.test/current",
+        currentCaptureUrl: "https://example.test/current",
+        usesExactTopDocumentAuthorization: false
+      })
+    ).toBe(false);
+  });
+
+  it("requires exact child and parent document identities for initial ancestry", () => {
+    const exact = {
+      frameId: 4,
+      parentFrameId: 0,
+      documentId: "child-document",
+      parentDocumentId: "root-document",
+      injectedDocumentId: "child-document",
+      injectedParentDocumentId: "root-document"
+    };
+
+    expect(resolveExactInitialContentParent(exact)).toEqual({
+      frameId: 0,
+      documentId: "root-document"
+    });
+    expect(resolveExactInitialContentParent({ ...exact, documentId: undefined })).toBeNull();
+    expect(resolveExactInitialContentParent({ ...exact, parentDocumentId: undefined })).toBeNull();
+    expect(
+      resolveExactInitialContentParent({ ...exact, injectedDocumentId: "replacement-child" })
+    ).toBeNull();
+    expect(
+      resolveExactInitialContentParent({
+        ...exact,
+        injectedParentDocumentId: "replacement-root"
+      })
+    ).toBeNull();
+  });
+
+  it("keeps a current same-document denied URL fail closed", async () => {
+    await expect(
+      resolveCurrentTabUrlPolicyDecision({
+        candidateUrl: "https://denied.example/next",
+        evaluateAllowed: () => false,
+        resolveCurrentUrl: () => "https://denied.example/next"
+      })
+    ).resolves.toBe("denied");
+  });
+
+  it("ignores a late B policy result after the tab advances to C", async () => {
+    const policy = deferred<boolean>();
+    const decision = resolveCurrentTabUrlPolicyDecision({
+      candidateUrl: "https://app.example/b",
+      evaluateAllowed: () => policy.promise,
+      resolveCurrentUrl: () => "https://app.example/c"
+    });
+
+    policy.resolve(false);
+    await expect(decision).resolves.toBe("stale");
+  });
+
   it("accepts root target main-frame navigations", () => {
     expect(
       shouldUpdateSessionMetadataFromNavigation(
@@ -48,3 +475,11 @@ describe("navigation-metadata", () => {
     ).toBe(false);
   });
 });
+
+function deferred<T>(): { promise: Promise<T>; resolve: (value: T) => void } {
+  let resolve!: (value: T) => void;
+  const promise = new Promise<T>((resolvePromise) => {
+    resolve = resolvePromise;
+  });
+  return { promise, resolve };
+}
diff --git a/apps/extension/src/sw/navigation-metadata.ts b/apps/extension/src/sw/navigation-metadata.ts
index 2ca0454..a235b10 100644
--- a/apps/extension/src/sw/navigation-metadata.ts
+++ b/apps/extension/src/sw/navigation-metadata.ts
@@ -1,5 +1,377 @@
 import type { WebBlackboxEvent } from "@webblackbox/protocol";
 
+export type CurrentTabUrlPolicyDecision = "allowed" | "denied" | "stale";
+export type ActiveCommittedDocumentKind = "top" | "child";
+export type CdpTopNavigationKind = "same-document" | "cross-document";
+export type ExactInitialContentParent = Readonly<{ frameId: number; documentId: string }>;
+
+const EXACT_TOP_NAVIGATION_OBSERVATION_LIMIT = 16;
+
+export type ExactTopNavigationObservationState = {
+  sequence: number;
+  pendingCdp: Array<Readonly<{ url: string; restoreEpoch: number }>>;
+  pendingWeb: Array<Readonly<{ token: number; url: string; restoreEpoch: number }>>;
+  evictedWebUrls: string[];
+};
+
+export type ExactWebNavigationCommitObservation = Readonly<{
+  token: number;
+  restoreEpoch: number;
+  cdpObserved: boolean;
+  evictedWebTokens: readonly number[];
+}>;
+
+export type ExactCdpTopNavigationObservation =
+  | Readonly<{
+      kind: "current";
+      restoreEpoch: number;
+      matchedWebToken?: number;
+      evictedWebTokens: readonly number[];
+    }>
+  | Readonly<{
+      kind: "ignored-stale";
+      ignoredWebToken?: number;
+      evictedWebTokens: readonly number[];
+    }>;
+
+export interface CdpTopNavigationRestoreContract {
+  readonly expectedChildMutationRevision: number;
+  readonly expectedRestoreEpoch: number;
+}
+
+export type CdpTopNavigationOwnershipContract =
+  | {
+      readonly urlOwner: "web-navigation";
+      readonly restore: null;
+    }
+  | {
+      readonly urlOwner: "cdp";
+      readonly restore: CdpTopNavigationRestoreContract;
+    };
+
+export function canUseExactLiteTopDocumentAuthorization(input: {
+  mode: string;
+  permissions: readonly string[] | undefined;
+  hasWebNavigationApi: boolean;
+  hasSameDocumentNavigationApi: boolean;
+  hasScriptingApi: boolean;
+}): boolean {
+  return (
+    input.mode === "lite" &&
+    input.permissions?.includes("webNavigation") === true &&
+    input.hasWebNavigationApi &&
+    input.hasSameDocumentNavigationApi &&
+    input.hasScriptingApi
+  );
+}
+
+export function classifyActiveCommittedDocument(input: {
+  frameId: number;
+  documentLifecycle?: string;
+  frameType?: string;
+}): ActiveCommittedDocumentKind | null {
+  if (input.documentLifecycle !== "active") {
+    return null;
+  }
+
+  if (input.frameType === "outermost_frame" && input.frameId === 0) {
+    return "top";
+  }
+
+  if (input.frameType === "sub_frame" && input.frameId > 0) {
+    return "child";
+  }
+
+  return null;
+}
+
+/**
+ * Resolves the single owner of a top-document CDP navigation. In exact mode,
+ * webNavigation owns cross-document URL adoption and the matching CDP event
+ * must not launch a competing restore. CDP remains the owner of
+ * same-document navigation because it has the exact frame identity there.
+ */
+export function resolveCdpTopNavigationOwnership(input: {
+  navigationKind: CdpTopNavigationKind;
+  usesExactWebNavigationDocumentOwnership: boolean;
+  childMutationRevision: number;
+  restoreEpoch: number;
+}): CdpTopNavigationOwnershipContract {
+  if (input.navigationKind === "cross-document" && input.usesExactWebNavigationDocumentOwnership) {
+    return {
+      urlOwner: "web-navigation",
+      restore: null
+    };
+  }
+
+  return {
+    urlOwner: "cdp",
+    restore: captureCdpTopNavigationRestoreContract({
+      childMutationRevision: input.childMutationRevision,
+      restoreEpoch: input.restoreEpoch
+    })
+  };
+}
+
+/**
+ * Takes the child-frame revision snapshot at navigation observation time so a
+ * queued top-navigation restore cannot silently absorb a later child mutation.
+ */
+export function captureCdpTopNavigationRestoreContract(input: {
+  childMutationRevision: number;
+  restoreEpoch: number;
+}): CdpTopNavigationRestoreContract {
+  return Object.freeze({
+    expectedChildMutationRevision: input.childMutationRevision,
+    expectedRestoreEpoch: input.restoreEpoch
+  });
+}
+
+/**
+ * Advances the document-generation guard used by serialized CDP restores.
+ * This is deliberately independent from URL and child-frame generations: an
+ * exact cross-document replacement can keep both values unchanged while an
+ * older restore is still in flight.
+ */
+export function advanceCdpRestoreEpoch(input: { cdpRestoreEpoch: number }): number {
+  if (
+    !Number.isSafeInteger(input.cdpRestoreEpoch) ||
+    input.cdpRestoreEpoch < 0 ||
+    input.cdpRestoreEpoch === Number.MAX_SAFE_INTEGER
+  ) {
+    throw new Error("CDP restore epoch is invalid or exhausted.");
+  }
+
+  input.cdpRestoreEpoch += 1;
+  return input.cdpRestoreEpoch;
+}
+
+export function isCdpRestoreEpochCurrent(
+  input: { cdpRestoreEpoch: number },
+  expectedRestoreEpoch: number
+): boolean {
+  return (
+    Number.isSafeInteger(expectedRestoreEpoch) &&
+    expectedRestoreEpoch >= 0 &&
+    input.cdpRestoreEpoch === expectedRestoreEpoch
+  );
+}
+
+/**
+ * Correlates the two independently delivered observations of one exact
+ * cross-document navigation. Matching by final URL handles redirects while
+ * the FIFO tie-breaker keeps same-URL document replacements distinct.
+ */
+export function createExactTopNavigationObservationState(): ExactTopNavigationObservationState {
+  return {
+    sequence: 0,
+    pendingCdp: [],
+    pendingWeb: [],
+    evictedWebUrls: []
+  };
+}
+
+export function observeExactWebNavigationCommit(
+  state: ExactTopNavigationObservationState,
+  url: string,
+  allocateRestoreEpoch: () => number
+): ExactWebNavigationCommitObservation {
+  const observationUrl = normalizeExactTopNavigationObservationUrl(url);
+  const matchedCdpIndex = state.pendingCdp.findIndex(
+    (candidate) => candidate.url === observationUrl
+  );
+  const matchedCdp =
+    matchedCdpIndex >= 0 ? state.pendingCdp.splice(matchedCdpIndex, 1)[0] : undefined;
+  const token = advanceExactTopNavigationObservationSequence(state);
+  const restoreEpoch = matchedCdp?.restoreEpoch ?? allocateRestoreEpoch();
+
+  if (!matchedCdp) {
+    state.pendingWeb.push(Object.freeze({ token, url: observationUrl, restoreEpoch }));
+  }
+
+  return Object.freeze({
+    token,
+    restoreEpoch,
+    cdpObserved: matchedCdp !== undefined,
+    evictedWebTokens: trimExactTopNavigationObservations(state)
+  });
+}
+
+export function observeExactCdpTopNavigation(
+  state: ExactTopNavigationObservationState,
+  url: string,
+  allocateRestoreEpoch: () => number,
+  isMatchedWebCurrent: (token: number, restoreEpoch: number) => boolean = () => true
+): ExactCdpTopNavigationObservation {
+  const observationUrl = normalizeExactTopNavigationObservationUrl(url);
+  const matchedWebIndex = state.pendingWeb.findIndex(
+    (candidate) => candidate.url === observationUrl
+  );
+  const matchedWeb =
+    matchedWebIndex >= 0 ? state.pendingWeb.splice(matchedWebIndex, 1)[0] : undefined;
+
+  if (matchedWeb) {
+    if (!isMatchedWebCurrent(matchedWeb.token, matchedWeb.restoreEpoch)) {
+      return Object.freeze({
+        kind: "ignored-stale",
+        ignoredWebToken: matchedWeb.token,
+        evictedWebTokens: trimExactTopNavigationObservations(state)
+      });
+    }
+
+    return Object.freeze({
+      kind: "current",
+      // A CDP event delivered after webNavigation may invalidate a restore
+      // already in flight. Transfer the matched transaction to a fresh epoch
+      // so that old continuation becomes stale and a compensating restore can
+      // run without waiting for it.
+      restoreEpoch: allocateRestoreEpoch(),
+      matchedWebToken: matchedWeb.token,
+      evictedWebTokens: trimExactTopNavigationObservations(state)
+    });
+  }
+
+  const evictedIndex = state.evictedWebUrls.indexOf(observationUrl);
+  if (evictedIndex >= 0) {
+    state.evictedWebUrls.splice(evictedIndex, 1);
+    return Object.freeze({
+      kind: "ignored-stale",
+      evictedWebTokens: trimExactTopNavigationObservations(state)
+    });
+  }
+
+  const restoreEpoch = allocateRestoreEpoch();
+  state.pendingCdp.push(Object.freeze({ url: observationUrl, restoreEpoch }));
+  return Object.freeze({
+    kind: "current",
+    restoreEpoch,
+    evictedWebTokens: trimExactTopNavigationObservations(state)
+  });
+}
+
+export function cancelExactWebNavigationCommitObservation(
+  state: ExactTopNavigationObservationState,
+  token: number
+): void {
+  const index = state.pendingWeb.findIndex((candidate) => candidate.token === token);
+  if (index >= 0) {
+    state.pendingWeb.splice(index, 1);
+  }
+}
+
+function advanceExactTopNavigationObservationSequence(
+  state: ExactTopNavigationObservationState
+): number {
+  if (
+    !Number.isSafeInteger(state.sequence) ||
+    state.sequence < 0 ||
+    state.sequence === Number.MAX_SAFE_INTEGER
+  ) {
+    throw new Error("Exact top-navigation observation sequence is invalid or exhausted.");
+  }
+
+  state.sequence += 1;
+  return state.sequence;
+}
+
+function trimExactTopNavigationObservations(
+  state: ExactTopNavigationObservationState
+): readonly number[] {
+  const evictedWebTokens: number[] = [];
+
+  while (state.pendingCdp.length > EXACT_TOP_NAVIGATION_OBSERVATION_LIMIT) {
+    state.pendingCdp.shift();
+  }
+  while (state.pendingWeb.length > EXACT_TOP_NAVIGATION_OBSERVATION_LIMIT) {
+    const evicted = state.pendingWeb.shift();
+    if (evicted) {
+      evictedWebTokens.push(evicted.token);
+      state.evictedWebUrls.push(evicted.url);
+    }
+  }
+  while (state.evictedWebUrls.length > EXACT_TOP_NAVIGATION_OBSERVATION_LIMIT) {
+    state.evictedWebUrls.shift();
+  }
+
+  return evictedWebTokens;
+}
+
+function normalizeExactTopNavigationObservationUrl(url: string): string {
+  try {
+    return new URL(url).href;
+  } catch {
+    return url;
+  }
+}
+
+/** Serializes restores only within one document epoch; a replacement must not
+ * wait forever behind an abandoned restore owned by the previous document. */
+export function resolveCdpRestorePredecessor(input: {
+  tail: Promise<void>;
+  tailEpoch: number;
+  expectedRestoreEpoch: number;
+}): Promise<void> {
+  return input.tailEpoch === input.expectedRestoreEpoch ? input.tail : Promise.resolve();
+}
+
+/**
+ * Content senders may adopt a top URL only in the legacy fallback path. Exact
+ * document authorization leaves URL ownership with webNavigation.
+ */
+export function shouldContentSenderClaimCaptureUrl(input: {
+  frameId: number;
+  senderUrl: string;
+  currentCaptureUrl: string;
+  usesExactTopDocumentAuthorization: boolean;
+}): boolean {
+  return (
+    input.frameId === 0 &&
+    !input.usesExactTopDocumentAuthorization &&
+    input.senderUrl !== input.currentCaptureUrl
+  );
+}
+
+/** Requires webNavigation and scripting to agree on both child and parent
+ * document identities; frame ids alone are reusable and never sufficient. */
+export function resolveExactInitialContentParent(input: {
+  frameId: number;
+  parentFrameId: number;
+  documentId?: string;
+  parentDocumentId?: string;
+  injectedDocumentId?: string;
+  injectedParentDocumentId?: string;
+}): ExactInitialContentParent | null {
+  return input.frameId > 0 &&
+    input.parentFrameId >= 0 &&
+    typeof input.documentId === "string" &&
+    input.documentId.length > 0 &&
+    input.documentId === input.injectedDocumentId &&
+    typeof input.parentDocumentId === "string" &&
+    input.parentDocumentId.length > 0 &&
+    input.parentDocumentId === input.injectedParentDocumentId
+    ? { frameId: input.parentFrameId, documentId: input.parentDocumentId }
+    : null;
+}
+
+/**
+ * Revalidates the visible tab URL after an asynchronous policy lookup. A late
+ * B decision is stale once the tab has already advanced to C.
+ */
+export async function resolveCurrentTabUrlPolicyDecision(input: {
+  candidateUrl: string;
+  evaluateAllowed: () => boolean | Promise<boolean>;
+  resolveCurrentUrl: () => string | null | Promise<string | null>;
+}): Promise<CurrentTabUrlPolicyDecision> {
+  const allowed = await input.evaluateAllowed();
+  const currentUrl = await input.resolveCurrentUrl();
+
+  if (currentUrl !== input.candidateUrl) {
+    return "stale";
+  }
+
+  return allowed ? "allowed" : "denied";
+}
+
 export function shouldUpdateSessionMetadataFromNavigation(
   event: Pick<WebBlackboxEvent, "cdp">,
   payload: unknown
diff --git a/apps/extension/src/sw/offscreen-document-lifecycle.test.ts b/apps/extension/src/sw/offscreen-document-lifecycle.test.ts
new file mode 100644
index 0000000..5d37ad4
--- /dev/null
+++ b/apps/extension/src/sw/offscreen-document-lifecycle.test.ts
@@ -0,0 +1,60 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { OffscreenDocumentLifecycle } from "./offscreen-document-lifecycle.js";
+
+describe("OffscreenDocumentLifecycle", () => {
+  it("shares one context check and creation across concurrent tab starts", async () => {
+    const lifecycle = new OffscreenDocumentLifecycle();
+    let releaseCreate!: () => void;
+    const exists = vi.fn(async () => false);
+    const create = vi.fn(
+      () =>
+        new Promise<void>((resolve) => {
+          releaseCreate = resolve;
+        })
+    );
+
+    const first = lifecycle.ensure({ exists, create });
+    const second = lifecycle.ensure({ exists, create });
+    expect(second).toBe(first);
+    await vi.waitFor(() => expect(create).toHaveBeenCalledOnce());
+    releaseCreate();
+    await Promise.all([first, second]);
+    expect(exists).toHaveBeenCalledOnce();
+  });
+
+  it("rechecks owners after an in-flight creation before closing", async () => {
+    const lifecycle = new OffscreenDocumentLifecycle();
+    let releaseCreate!: () => void;
+    let owned = false;
+    const create = vi.fn(
+      () =>
+        new Promise<void>((resolve) => {
+          releaseCreate = resolve;
+        })
+    );
+    const close = vi.fn(async () => undefined);
+
+    const ensure = lifecycle.ensure({ exists: async () => false, create });
+    const pendingClose = lifecycle.closeIfUnused({ isUnused: () => !owned, close });
+    await vi.waitFor(() => expect(create).toHaveBeenCalledOnce());
+    owned = true;
+    releaseCreate();
+    await Promise.all([ensure, pendingClose]);
+    expect(close).not.toHaveBeenCalled();
+  });
+
+  it("clears a failed creation so a later attempt can recover", async () => {
+    const lifecycle = new OffscreenDocumentLifecycle();
+    const create = vi
+      .fn<() => Promise<void>>()
+      .mockRejectedValueOnce(new Error("create failed"))
+      .mockResolvedValue();
+
+    await expect(lifecycle.ensure({ exists: async () => false, create })).rejects.toThrow(
+      "create failed"
+    );
+    await expect(lifecycle.ensure({ exists: async () => false, create })).resolves.toBeUndefined();
+    expect(create).toHaveBeenCalledTimes(2);
+  });
+});
diff --git a/apps/extension/src/sw/offscreen-document-lifecycle.ts b/apps/extension/src/sw/offscreen-document-lifecycle.ts
new file mode 100644
index 0000000..650809e
--- /dev/null
+++ b/apps/extension/src/sw/offscreen-document-lifecycle.ts
@@ -0,0 +1,55 @@
+export type EnsureOffscreenDocumentOptions = Readonly<{
+  exists: () => Promise<boolean>;
+  create: () => Promise<void>;
+}>;
+
+export type CloseOffscreenDocumentOptions = Readonly<{
+  isUnused: () => boolean;
+  close: () => Promise<void>;
+}>;
+
+/** Serializes create/close and shares concurrent creation without retaining failed attempts. */
+export class OffscreenDocumentLifecycle {
+  private tail: Promise<void> = Promise.resolve();
+  private ensureTask: Promise<void> | null = null;
+
+  public ensure(options: EnsureOffscreenDocumentOptions): Promise<void> {
+    if (this.ensureTask) {
+      return this.ensureTask;
+    }
+
+    const task = this.enqueue(async () => {
+      if (!(await options.exists())) {
+        await options.create();
+      }
+    });
+    this.ensureTask = task;
+    void task.then(
+      () => {
+        if (this.ensureTask === task) {
+          this.ensureTask = null;
+        }
+      },
+      () => {
+        if (this.ensureTask === task) {
+          this.ensureTask = null;
+        }
+      }
+    );
+    return task;
+  }
+
+  public closeIfUnused(options: CloseOffscreenDocumentOptions): Promise<void> {
+    return this.enqueue(async () => {
+      if (options.isUnused()) {
+        await options.close();
+      }
+    });
+  }
+
+  private enqueue(operation: () => Promise<void>): Promise<void> {
+    const task = this.tail.catch(() => undefined).then(operation);
+    this.tail = task;
+    return task;
+  }
+}
diff --git a/apps/extension/src/sw/pipeline-batch.test.ts b/apps/extension/src/sw/pipeline-batch.test.ts
new file mode 100644
index 0000000..e4fc24c
--- /dev/null
+++ b/apps/extension/src/sw/pipeline-batch.test.ts
@@ -0,0 +1,112 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  acknowledgePipelineBatch,
+  acquirePipelineBatch,
+  shouldRecoverOffscreenPipeline,
+  shouldRetryOffscreenPipelineRequest,
+  type PipelineBatchInFlight
+} from "./pipeline-batch.js";
+
+describe("pipeline batch retry state", () => {
+  it("recovers closed pipeline sessions only for an explicit finishing request", () => {
+    const active = { captureOpen: true, stopping: false, stopped: false };
+    const stopping = { captureOpen: false, stopping: true, stopped: false };
+    const stopped = { captureOpen: false, stopping: false, stopped: true };
+
+    expect(shouldRecoverOffscreenPipeline(active, "automatic")).toBe(true);
+    expect(shouldRecoverOffscreenPipeline(stopping, "automatic")).toBe(false);
+    expect(shouldRecoverOffscreenPipeline(stopped, "automatic")).toBe(false);
+    expect(shouldRecoverOffscreenPipeline(stopping, "request")).toBe(true);
+    expect(shouldRecoverOffscreenPipeline(stopped, "request")).toBe(true);
+    expect(shouldRecoverOffscreenPipeline(null, "request")).toBe(false);
+  });
+
+  it("keeps a failed batch fixed while new events append, then advances after acknowledgement", () => {
+    const buffer = [{ id: 1 }, { id: 2 }];
+    let sequence = 0;
+    const createOperationId = (): string => `I-operation-${++sequence}`;
+    const validateOperationId = (value: unknown): string => String(value);
+    let inFlight: PipelineBatchInFlight<{ id: number }> | null = acquirePipelineBatch(
+      null,
+      buffer,
+      2,
+      createOperationId,
+      validateOperationId
+    );
+
+    expect(inFlight).toEqual({
+      operationId: "I-operation-1",
+      events: [{ id: 1 }, { id: 2 }]
+    });
+
+    buffer.push({ id: 3 });
+    const retry = acquirePipelineBatch(inFlight, buffer, 2, createOperationId, validateOperationId);
+    expect(retry).toBe(inFlight);
+    expect(retry?.events).toEqual([{ id: 1 }, { id: 2 }]);
+
+    acknowledgePipelineBatch(buffer, inFlight!);
+    inFlight = null;
+    expect(buffer).toEqual([{ id: 3 }]);
+
+    const next = acquirePipelineBatch(inFlight, buffer, 2, createOperationId, validateOperationId);
+    expect(next).toEqual({ operationId: "I-operation-2", events: [{ id: 3 }] });
+  });
+
+  it("fails closed if the buffered prefix changes before acknowledgement", () => {
+    const original = { id: 1 };
+    const buffer = [original];
+    const batch = acquirePipelineBatch(null, buffer, 1, () => "I-one", String)!;
+    buffer[0] = { id: 1 };
+
+    expect(() => acknowledgePipelineBatch(buffer, batch)).toThrow(
+      "changed before the in-flight batch was acknowledged"
+    );
+  });
+
+  it("retries ingest timeouts without retrying timeouts for other side effects", () => {
+    const timeout = new Error("Timed out waiting for offscreen response: ingestBatch");
+
+    expect(shouldRetryOffscreenPipelineRequest("ingest", timeout)).toBe(true);
+    expect(shouldRetryOffscreenPipelineRequest("ingestBatch", timeout)).toBe(true);
+    expect(shouldRetryOffscreenPipelineRequest("ingestBatchDurably", timeout)).toBe(true);
+    expect(shouldRetryOffscreenPipelineRequest("ingestBatchWithDelivery", timeout)).toBe(true);
+    expect(shouldRetryOffscreenPipelineRequest("commitDeliveryProgress", timeout)).toBe(true);
+    expect(shouldRetryOffscreenPipelineRequest("getDeliveryReceipt", timeout)).toBe(true);
+    expect(shouldRetryOffscreenPipelineRequest("putBlob", timeout)).toBe(false);
+    expect(shouldRetryOffscreenPipelineRequest("exportDownload", timeout)).toBe(false);
+    expect(shouldRetryOffscreenPipelineRequest("close", timeout)).toBe(false);
+  });
+
+  it("does not replay an export after a disconnect with an unknown result", () => {
+    const disconnected = new Error("Offscreen pipeline disconnected.");
+    const unavailable = new Error("Offscreen pipeline is unavailable.");
+    const missingSession = new Error("Pipeline session not found: session-1");
+    const replaySafeAfterDisconnect = [
+      "ingest",
+      "ingestBatch",
+      "ingestBatchDurably",
+      "ingestBatchWithDelivery",
+      "commitDeliveryProgress",
+      "flush",
+      "getResumeState",
+      "getDeliveryReceipt",
+      "putBlob",
+      "close",
+      "getScreenRecordingStatus",
+      "startScreenRecording",
+      "stopScreenRecording"
+    ] as const;
+
+    for (const op of replaySafeAfterDisconnect) {
+      expect(shouldRetryOffscreenPipelineRequest(op, disconnected)).toBe(true);
+    }
+
+    expect(shouldRetryOffscreenPipelineRequest("exportDownload", disconnected)).toBe(false);
+    expect(shouldRetryOffscreenPipelineRequest("exportDownload", unavailable)).toBe(true);
+    expect(shouldRetryOffscreenPipelineRequest("exportDownload", missingSession)).toBe(true);
+    expect(shouldRetryOffscreenPipelineRequest("start", disconnected)).toBe(false);
+    expect(shouldRetryOffscreenPipelineRequest("start", unavailable)).toBe(false);
+    expect(shouldRetryOffscreenPipelineRequest("start", missingSession)).toBe(false);
+  });
+});
diff --git a/apps/extension/src/sw/pipeline-batch.ts b/apps/extension/src/sw/pipeline-batch.ts
new file mode 100644
index 0000000..8e09ff7
--- /dev/null
+++ b/apps/extension/src/sw/pipeline-batch.ts
@@ -0,0 +1,119 @@
+export type PipelineBatchInFlight<TEvent> = Readonly<{
+  operationId: string;
+  events: readonly TEvent[];
+}>;
+
+type OffscreenPipelineOperation =
+  | "start"
+  | "ingest"
+  | "ingestBatch"
+  | "ingestBatchDurably"
+  | "ingestBatchWithDelivery"
+  | "flush"
+  | "getResumeState"
+  | "getDeliveryReceipt"
+  | "commitDeliveryProgress"
+  | "putBlob"
+  | "exportDownload"
+  | "close"
+  | "getScreenRecordingStatus"
+  | "quiesceScreenRecording"
+  | "startScreenRecording"
+  | "stopScreenRecording";
+
+export type OffscreenPipelineRecoveryState = Readonly<{
+  captureOpen: boolean;
+  stopping: boolean;
+  stopped: boolean;
+}>;
+
+export function shouldRecoverOffscreenPipeline(
+  state: OffscreenPipelineRecoveryState | null,
+  trigger: "automatic" | "request"
+): boolean {
+  if (!state) {
+    return false;
+  }
+
+  // Automatic reconnects must not revive closed capture. An explicit pipeline
+  // request still needs its durable storage session while stop/export/purge is
+  // finishing, even though the page-capture fence is already closed.
+  return trigger === "request" || (state.captureOpen && !state.stopping && !state.stopped);
+}
+
+export function acquirePipelineBatch<TEvent>(
+  current: PipelineBatchInFlight<TEvent> | null,
+  buffer: readonly TEvent[],
+  maxEvents: number,
+  createOperationId: () => string,
+  validateOperationId: (operationId: unknown) => string
+): PipelineBatchInFlight<TEvent> | null {
+  if (current) {
+    return current;
+  }
+
+  if (!Number.isSafeInteger(maxEvents) || maxEvents <= 0) {
+    throw new Error("Pipeline batch size must be a positive safe integer.");
+  }
+
+  if (buffer.length === 0) {
+    return null;
+  }
+
+  return Object.freeze({
+    operationId: validateOperationId(createOperationId()),
+    events: Object.freeze(buffer.slice(0, maxEvents))
+  });
+}
+
+export function acknowledgePipelineBatch<TEvent>(
+  buffer: TEvent[],
+  batch: PipelineBatchInFlight<TEvent>
+): void {
+  if (buffer.length < batch.events.length) {
+    throw new Error("Pipeline buffer no longer contains the acknowledged batch.");
+  }
+
+  for (let index = 0; index < batch.events.length; index += 1) {
+    if (buffer[index] !== batch.events[index]) {
+      throw new Error("Pipeline buffer changed before the in-flight batch was acknowledged.");
+    }
+  }
+
+  buffer.splice(0, batch.events.length);
+}
+
+export function shouldRetryOffscreenPipelineRequest(
+  op: OffscreenPipelineOperation,
+  error: unknown
+): boolean {
+  if (op === "start") {
+    return false;
+  }
+
+  const message = error instanceof Error ? error.message : String(error);
+
+  if (
+    message.includes("Pipeline session not found") ||
+    message.includes("Offscreen pipeline is unavailable")
+  ) {
+    return true;
+  }
+
+  if (message.includes("Offscreen pipeline disconnected")) {
+    // A disconnect can happen after the offscreen document has started the
+    // operation. Replaying a download with an unknown result can create a
+    // duplicate user-visible file, so require the caller to resolve it.
+    return op !== "exportDownload";
+  }
+
+  return (
+    (op === "ingest" ||
+      op === "ingestBatch" ||
+      op === "ingestBatchDurably" ||
+      op === "ingestBatchWithDelivery" ||
+      op === "commitDeliveryProgress" ||
+      op === "getDeliveryReceipt") &&
+    message.includes("Timed out waiting for offscreen response")
+  );
+}
diff --git a/apps/extension/src/sw/request-meta.ts b/apps/extension/src/sw/request-meta.ts
index 15da0a2..82268a1 100644
--- a/apps/extension/src/sw/request-meta.ts
+++ b/apps/extension/src/sw/request-meta.ts
@@ -1,3 +1,5 @@
+import type { ContentNavigationAuthorization } from "./content-document-authorization.js";
+
 export type RequestMetaEntry = {
   url?: string;
   method?: string;
@@ -5,6 +7,7 @@ export type RequestMetaEntry = {
   mimeType?: string;
   status?: number;
   resourceType?: string;
+  liteNavigationAuthorization?: ContentNavigationAuthorization;
   updatedAt: number;
 };
 
diff --git a/apps/extension/src/sw/root-navigation-instrumentation.test.ts b/apps/extension/src/sw/root-navigation-instrumentation.test.ts
new file mode 100644
index 0000000..e4442f5
--- /dev/null
+++ b/apps/extension/src/sw/root-navigation-instrumentation.test.ts
@@ -0,0 +1,147 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { runRootNavigationInstrumentationTransaction } from "./root-navigation-instrumentation.js";
+import {
+  claimRuntimeNavigation,
+  isRuntimeNavigationClaimCurrent
+} from "./runtime-navigation-claim.js";
+
+describe("root navigation instrumentation transaction", () => {
+  it("stops the current runtime after injection fails and skips all continuation", async () => {
+    const injectionFailure = new Error("root content injection failed");
+    const stopCurrent = vi.fn(async () => undefined);
+    const continueAfterInjection = vi.fn(async () => undefined);
+
+    await expect(
+      runRootNavigationInstrumentationTransaction({
+        isCurrent: () => true,
+        inject: async () => {
+          throw injectionFailure;
+        },
+        stopCurrent,
+        continueAfterInjection
+      })
+    ).resolves.toEqual({ kind: "failed-closed", error: injectionFailure });
+    expect(stopCurrent).toHaveBeenCalledOnce();
+    expect(continueAfterInjection).not.toHaveBeenCalled();
+  });
+
+  it("does not stop a replacement runtime after stale injection rejects", async () => {
+    let current = true;
+    const stopCurrent = vi.fn(async () => undefined);
+    const continueAfterInjection = vi.fn(async () => undefined);
+
+    await expect(
+      runRootNavigationInstrumentationTransaction({
+        isCurrent: () => current,
+        inject: async () => {
+          current = false;
+          throw new Error("old document disappeared");
+        },
+        stopCurrent,
+        continueAfterInjection
+      })
+    ).resolves.toEqual({ kind: "stale" });
+    expect(stopCurrent).not.toHaveBeenCalled();
+    expect(continueAfterInjection).not.toHaveBeenCalled();
+  });
+
+  it("turns an injection cancellation fence into a stale result", async () => {
+    let current = true;
+    const stopCurrent = vi.fn(async () => undefined);
+    const continueAfterInjection = vi.fn(async () => undefined);
+
+    await expect(
+      runRootNavigationInstrumentationTransaction({
+        isCurrent: () => current,
+        inject: async (assertCurrent) => {
+          current = false;
+          assertCurrent();
+        },
+        stopCurrent,
+        continueAfterInjection
+      })
+    ).resolves.toEqual({ kind: "stale" });
+    expect(stopCurrent).not.toHaveBeenCalled();
+    expect(continueAfterInjection).not.toHaveBeenCalled();
+  });
+
+  it("does not stop a newer navigation in the same runtime after stale injection rejects", async () => {
+    const runtime = { navigationRevision: 0, open: true };
+    const oldNavigation = claimRuntimeNavigation(
+      runtime,
+      "tabs-url-complete",
+      "https://example.test/a"
+    );
+    const stopCurrent = vi.fn(async () => undefined);
+
+    await expect(
+      runRootNavigationInstrumentationTransaction({
+        isCurrent: () =>
+          isRuntimeNavigationClaimCurrent(oldNavigation, runtime, (candidate) => candidate.open),
+        inject: async () => {
+          claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/b");
+          throw new Error("old document disappeared");
+        },
+        stopCurrent,
+        continueAfterInjection: async () => undefined
+      })
+    ).resolves.toEqual({ kind: "stale" });
+    expect(stopCurrent).not.toHaveBeenCalled();
+  });
+
+  it("continues only after successful current injection", async () => {
+    const steps: string[] = [];
+
+    await expect(
+      runRootNavigationInstrumentationTransaction({
+        isCurrent: () => true,
+        inject: async (assertCurrent) => {
+          assertCurrent();
+          steps.push("inject");
+        },
+        stopCurrent: async () => undefined,
+        continueAfterInjection: async (assertCurrent) => {
+          assertCurrent();
+          steps.push("cdp");
+          assertCurrent();
+          steps.push("notify");
+        }
+      })
+    ).resolves.toEqual({ kind: "completed" });
+    expect(steps).toEqual(["inject", "cdp", "notify"]);
+  });
+
+  it("abandons continuation without stopping when the runtime is replaced", async () => {
+    let current = true;
+    const stopCurrent = vi.fn(async () => undefined);
+
+    await expect(
+      runRootNavigationInstrumentationTransaction({
+        isCurrent: () => current,
+        inject: async () => undefined,
+        stopCurrent,
+        continueAfterInjection: async (assertCurrent) => {
+          current = false;
+          assertCurrent();
+        }
+      })
+    ).resolves.toEqual({ kind: "stale" });
+    expect(stopCurrent).not.toHaveBeenCalled();
+  });
+
+  it("propagates a current continuation failure for caller-level reporting", async () => {
+    const cdpFailure = new Error("CDP restore failed");
+
+    await expect(
+      runRootNavigationInstrumentationTransaction({
+        isCurrent: () => true,
+        inject: async () => undefined,
+        stopCurrent: async () => undefined,
+        continueAfterInjection: async () => {
+          throw cdpFailure;
+        }
+      })
+    ).rejects.toBe(cdpFailure);
+  });
+});
diff --git a/apps/extension/src/sw/root-navigation-instrumentation.ts b/apps/extension/src/sw/root-navigation-instrumentation.ts
new file mode 100644
index 0000000..e609188
--- /dev/null
+++ b/apps/extension/src/sw/root-navigation-instrumentation.ts
@@ -0,0 +1,60 @@
+export type RootNavigationInstrumentationResult =
+  | { kind: "completed" }
+  | { kind: "failed-closed"; error: unknown }
+  | { kind: "stale" };
+
+export type RootNavigationInstrumentationOptions = {
+  continueAfterInjection: (assertCurrent: () => void) => Promise<void>;
+  inject: (assertCurrent: () => void) => Promise<void>;
+  isCurrent: () => boolean;
+  stopCurrent: () => Promise<void>;
+};
+
+class StaleRootNavigationError extends Error {
+  public constructor() {
+    super("The root navigation runtime was replaced.");
+    this.name = "StaleRootNavigationError";
+  }
+}
+
+/**
+ * Keeps post-navigation root injection identity-safe. Injection failures stop
+ * only the runtime that requested the work, while a replacement makes the
+ * result stale and never reaches CDP restoration or content notification.
+ */
+export async function runRootNavigationInstrumentationTransaction(
+  options: RootNavigationInstrumentationOptions
+): Promise<RootNavigationInstrumentationResult> {
+  const assertCurrent = () => {
+    if (!options.isCurrent()) {
+      throw new StaleRootNavigationError();
+    }
+  };
+
+  try {
+    assertCurrent();
+    await options.inject(assertCurrent);
+    assertCurrent();
+  } catch (error) {
+    if (error instanceof StaleRootNavigationError || !options.isCurrent()) {
+      return { kind: "stale" };
+    }
+
+    await options.stopCurrent();
+    return { kind: "failed-closed", error };
+  }
+
+  try {
+    assertCurrent();
+    await options.continueAfterInjection(assertCurrent);
+    assertCurrent();
+  } catch (error) {
+    if (error instanceof StaleRootNavigationError || !options.isCurrent()) {
+      return { kind: "stale" };
+    }
+
+    throw error;
+  }
+
+  return { kind: "completed" };
+}
diff --git a/apps/extension/src/sw/runtime-identity.test.ts b/apps/extension/src/sw/runtime-identity.test.ts
new file mode 100644
index 0000000..1d4b6c1
--- /dev/null
+++ b/apps/extension/src/sw/runtime-identity.test.ts
@@ -0,0 +1,75 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  RuntimeTaskCoordinator,
+  cancelOwnedRuntimeStart,
+  resolveRuntimeEventOwner
+} from "./runtime-identity.js";
+import { deleteMapEntryIfSame } from "./runtime-state.js";
+
+type Runtime = {
+  sid: string;
+  tabId: number;
+};
+
+describe("runtime identity ownership", () => {
+  it("cancels only the start token owned by the stopped runtime", () => {
+    const owned = { cancel: vi.fn() };
+    const replacement = { cancel: vi.fn() };
+
+    cancelOwnedRuntimeStart(owned);
+    expect(owned.cancel).toHaveBeenCalledOnce();
+    expect(replacement.cancel).not.toHaveBeenCalled();
+    expect(() => cancelOwnedRuntimeStart(null)).not.toThrow();
+  });
+
+  it("uses a supplied sid as authoritative instead of falling back to the current tab runtime", () => {
+    const retained = { sid: "old", tabId: 7 };
+    const replacement = { sid: "new", tabId: 7 };
+    const bySid = new Map([
+      [retained.sid, retained],
+      [replacement.sid, replacement]
+    ]);
+    const byTab = new Map([[replacement.tabId, replacement]]);
+
+    expect(resolveRuntimeEventOwner(bySid, byTab, { sid: "old", tabId: 7 })).toBe(retained);
+    expect(resolveRuntimeEventOwner(bySid, byTab, { sid: "missing", tabId: 7 })).toBeUndefined();
+    expect(resolveRuntimeEventOwner(bySid, byTab, { sid: "old", tabId: 8 })).toBeUndefined();
+    expect(resolveRuntimeEventOwner(bySid, byTab, { tabId: 7 })).toBe(replacement);
+  });
+
+  it("deletes a map entry only while the expected runtime still owns it", () => {
+    const first = { sid: "first", tabId: 7 };
+    const replacement = { sid: "replacement", tabId: 7 };
+    const map = new Map<number, Runtime>([[7, replacement]]);
+
+    expect(deleteMapEntryIfSame(map, 7, first)).toBe(false);
+    expect(map.get(7)).toBe(replacement);
+    expect(deleteMapEntryIfSame(map, 7, replacement)).toBe(true);
+    expect(map.has(7)).toBe(false);
+  });
+
+  it("deduplicates only the same runtime task, not a same-tab replacement", async () => {
+    const coordinator = new RuntimeTaskCoordinator<Runtime>();
+    const first = { sid: "first", tabId: 7 };
+    const replacement = { sid: "replacement", tabId: 7 };
+    let releaseFirst: (() => void) | undefined;
+    const firstTask = vi.fn(
+      () =>
+        new Promise<void>((resolve) => {
+          releaseFirst = resolve;
+        })
+    );
+    const replacementTask = vi.fn(async () => undefined);
+
+    const pendingFirst = coordinator.run(first, firstTask);
+    expect(coordinator.run(first, firstTask)).toBe(pendingFirst);
+    const pendingReplacement = coordinator.run(replacement, replacementTask);
+
+    await pendingReplacement;
+    expect(firstTask).toHaveBeenCalledTimes(1);
+    expect(replacementTask).toHaveBeenCalledTimes(1);
+    releaseFirst?.();
+    await pendingFirst;
+  });
+});
diff --git a/apps/extension/src/sw/runtime-identity.ts b/apps/extension/src/sw/runtime-identity.ts
new file mode 100644
index 0000000..6794408
--- /dev/null
+++ b/apps/extension/src/sw/runtime-identity.ts
@@ -0,0 +1,43 @@
+export type RuntimeIdentity = {
+  sid: string;
+  tabId: number;
+};
+
+export function cancelOwnedRuntimeStart(token: { cancel(): void } | null): void {
+  token?.cancel();
+}
+
+export function resolveRuntimeEventOwner<TRuntime extends RuntimeIdentity>(
+  sessionsBySid: ReadonlyMap<string, TRuntime>,
+  sessionsByTab: ReadonlyMap<number, TRuntime>,
+  event: { sid?: string; tabId: number }
+): TRuntime | undefined {
+  if (typeof event.sid === "string") {
+    const runtime = sessionsBySid.get(event.sid);
+    return runtime?.tabId === event.tabId ? runtime : undefined;
+  }
+
+  return sessionsByTab.get(event.tabId);
+}
+
+export class RuntimeTaskCoordinator<TRuntime extends object> {
+  readonly #tasks = new WeakMap<TRuntime, Promise<void>>();
+
+  public run(runtime: TRuntime, task: () => Promise<void>): Promise<void> {
+    const existing = this.#tasks.get(runtime);
+
+    if (existing) {
+      return existing;
+    }
+
+    const pending = Promise.resolve()
+      .then(task)
+      .finally(() => {
+        if (this.#tasks.get(runtime) === pending) {
+          this.#tasks.delete(runtime);
+        }
+      });
+    this.#tasks.set(runtime, pending);
+    return pending;
+  }
+}
diff --git a/apps/extension/src/sw/runtime-navigation-claim.test.ts b/apps/extension/src/sw/runtime-navigation-claim.test.ts
new file mode 100644
index 0000000..4768974
--- /dev/null
+++ b/apps/extension/src/sw/runtime-navigation-claim.test.ts
@@ -0,0 +1,118 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  claimRuntimeNavigation,
+  isRuntimeNavigationClaimCurrent,
+  snapshotRuntimeNavigation
+} from "./runtime-navigation-claim.js";
+
+type TestRuntime = {
+  id: string;
+  navigationRevision: number;
+  open: boolean;
+};
+
+function createRuntime(id: string): TestRuntime {
+  return {
+    id,
+    navigationRevision: 0,
+    open: true
+  };
+}
+
+describe("runtime navigation claims", () => {
+  it("advances a monotonic revision and freezes each claim", () => {
+    const runtime = createRuntime("runtime-a");
+    const first = claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/a");
+    const second = claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/b");
+
+    expect(first).toMatchObject({ runtime, revision: 1, source: "tabs-url" });
+    expect(second).toMatchObject({ runtime, revision: 2, source: "tabs-url" });
+    expect(runtime.navigationRevision).toBe(2);
+    expect(Object.isFrozen(first)).toBe(true);
+    expect(Reflect.set(first, "revision", 99)).toBe(false);
+    expect(first.revision).toBe(1);
+  });
+
+  it("does not revive A1 after an A1 to B2 to A3 URL sequence", () => {
+    const runtime = createRuntime("runtime-a");
+    const isOpen = (candidate: TestRuntime) => candidate.open;
+    const a1 = claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/a");
+    const b2 = claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/b");
+    const a3 = claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/a");
+
+    expect(isRuntimeNavigationClaimCurrent(a1, runtime, isOpen)).toBe(false);
+    expect(isRuntimeNavigationClaimCurrent(b2, runtime, isOpen)).toBe(false);
+    expect(isRuntimeNavigationClaimCurrent(a3, runtime, isOpen)).toBe(true);
+    expect(a1.candidateUrl).toBe(a3.candidateUrl);
+    expect(a1.revision).not.toBe(a3.revision);
+  });
+
+  it("rejects a replacement runtime even when its revision is identical", () => {
+    const original = createRuntime("runtime-a");
+    const replacement = createRuntime("runtime-b");
+    const claim = claimRuntimeNavigation(original, "tabs-complete");
+    claimRuntimeNavigation(replacement, "tabs-complete");
+
+    expect(original.navigationRevision).toBe(replacement.navigationRevision);
+    expect(isRuntimeNavigationClaimCurrent(claim, replacement, () => true)).toBe(false);
+    expect(isRuntimeNavigationClaimCurrent(claim, undefined, () => true)).toBe(false);
+  });
+
+  it("rejects an inactive runtime through the caller-provided open predicate", () => {
+    const runtime = createRuntime("runtime-a");
+    const claim = claimRuntimeNavigation(runtime, "content-navigation");
+
+    runtime.open = false;
+
+    expect(isRuntimeNavigationClaimCurrent(claim, runtime, (candidate) => candidate.open)).toBe(
+      false
+    );
+  });
+
+  it("snapshots child mutation work without advancing the top navigation", () => {
+    const runtime = createRuntime("runtime-a");
+    const root = claimRuntimeNavigation(runtime, "cdp-frame-navigated", "https://example.test/a");
+    const child = snapshotRuntimeNavigation(
+      runtime,
+      "cdp-child-mutation",
+      "https://child.example.test/frame"
+    );
+
+    expect(child.revision).toBe(root.revision);
+    expect(runtime.navigationRevision).toBe(1);
+    expect(isRuntimeNavigationClaimCurrent(child, runtime, () => true)).toBe(true);
+
+    claimRuntimeNavigation(runtime, "cdp-within-document", "https://example.test/a#next");
+
+    expect(isRuntimeNavigationClaimCurrent(child, runtime, () => true)).toBe(false);
+  });
+
+  it("does not consult the open predicate for stale ownership or revision", () => {
+    const runtime = createRuntime("runtime-a");
+    const replacement = createRuntime("runtime-b");
+    const open = vi.fn(() => true);
+    const claim = claimRuntimeNavigation(runtime, "tabs-url-complete");
+
+    expect(isRuntimeNavigationClaimCurrent(claim, replacement, open)).toBe(false);
+    expect(open).not.toHaveBeenCalled();
+
+    claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/next");
+    expect(isRuntimeNavigationClaimCurrent(claim, runtime, open)).toBe(false);
+    expect(open).not.toHaveBeenCalled();
+  });
+
+  it("rejects invalid or exhausted runtime revisions", () => {
+    const invalid = createRuntime("invalid");
+    invalid.navigationRevision = -1;
+    expect(() => claimRuntimeNavigation(invalid, "tabs-url")).toThrow(
+      "Runtime navigation revision must be a non-negative safe integer."
+    );
+
+    const exhausted = createRuntime("exhausted");
+    exhausted.navigationRevision = Number.MAX_SAFE_INTEGER;
+    expect(() => claimRuntimeNavigation(exhausted, "tabs-url")).toThrow(
+      "Runtime navigation revision is exhausted."
+    );
+  });
+});
diff --git a/apps/extension/src/sw/runtime-navigation-claim.ts b/apps/extension/src/sw/runtime-navigation-claim.ts
new file mode 100644
index 0000000..1cedda9
--- /dev/null
+++ b/apps/extension/src/sw/runtime-navigation-claim.ts
@@ -0,0 +1,94 @@
+export type RuntimeNavigationOwner = {
+  navigationRevision: number;
+};
+
+export type RuntimeNavigationSource =
+  | "tabs-url"
+  | "tabs-complete"
+  | "tabs-url-complete"
+  | "cdp-frame-navigated"
+  | "cdp-within-document"
+  | "web-navigation-commit"
+  | "content-navigation"
+  | "cdp-child-mutation";
+
+export type RuntimeNavigationClaim<Runtime extends RuntimeNavigationOwner> = Readonly<{
+  runtime: Runtime;
+  revision: number;
+  source: RuntimeNavigationSource;
+  /** Diagnostic context only. A URL is never evidence that a claim is current. */
+  candidateUrl?: string;
+}>;
+
+/**
+ * Claims a new top-level navigation for a runtime.
+ *
+ * Revisions are monotonic for the lifetime of the runtime, so returning to the
+ * same URL cannot revive work from an earlier navigation.
+ */
+export function claimRuntimeNavigation<Runtime extends RuntimeNavigationOwner>(
+  runtime: Runtime,
+  source: RuntimeNavigationSource,
+  candidateUrl?: string
+): RuntimeNavigationClaim<Runtime> {
+  const currentRevision = validateRuntimeNavigationRevision(runtime.navigationRevision);
+
+  if (currentRevision === Number.MAX_SAFE_INTEGER) {
+    throw new Error("Runtime navigation revision is exhausted.");
+  }
+
+  runtime.navigationRevision = currentRevision + 1;
+  return createRuntimeNavigationClaim(runtime, source, candidateUrl);
+}
+
+/**
+ * Snapshots the current top-level navigation without advancing it.
+ *
+ * This is intended for child-frame or target work that must be abandoned when
+ * any later top-level navigation is claimed.
+ */
+export function snapshotRuntimeNavigation<Runtime extends RuntimeNavigationOwner>(
+  runtime: Runtime,
+  source: RuntimeNavigationSource,
+  candidateUrl?: string
+): RuntimeNavigationClaim<Runtime> {
+  validateRuntimeNavigationRevision(runtime.navigationRevision);
+  return createRuntimeNavigationClaim(runtime, source, candidateUrl);
+}
+
+/**
+ * Validates both runtime ownership and navigation generation before consulting
+ * the caller's runtime-specific active/open predicate.
+ */
+export function isRuntimeNavigationClaimCurrent<Runtime extends RuntimeNavigationOwner>(
+  claim: RuntimeNavigationClaim<Runtime>,
+  currentRuntime: Runtime | null | undefined,
+  isOpen: (runtime: Runtime) => boolean
+): boolean {
+  return (
+    currentRuntime === claim.runtime &&
+    claim.runtime.navigationRevision === claim.revision &&
+    isOpen(claim.runtime)
+  );
+}
+
+function createRuntimeNavigationClaim<Runtime extends RuntimeNavigationOwner>(
+  runtime: Runtime,
+  source: RuntimeNavigationSource,
+  candidateUrl?: string
+): RuntimeNavigationClaim<Runtime> {
+  return Object.freeze({
+    runtime,
+    revision: runtime.navigationRevision,
+    source,
+    ...(candidateUrl === undefined ? {} : { candidateUrl })
+  });
+}
+
+function validateRuntimeNavigationRevision(revision: number): number {
+  if (!Number.isSafeInteger(revision) || revision < 0) {
+    throw new Error("Runtime navigation revision must be a non-negative safe integer.");
+  }
+
+  return revision;
+}
diff --git a/apps/extension/src/sw/runtime-navigation-operations.test.ts b/apps/extension/src/sw/runtime-navigation-operations.test.ts
new file mode 100644
index 0000000..1a158d2
--- /dev/null
+++ b/apps/extension/src/sw/runtime-navigation-operations.test.ts
@@ -0,0 +1,194 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  claimRuntimeNavigation,
+  isRuntimeNavigationClaimCurrent
+} from "./runtime-navigation-claim.js";
+import {
+  canOperateOnExpectedNavigationResource,
+  didGuardedNavigationOperationRun,
+  launchDetachedNavigationTask,
+  reconcileAmbiguousNavigationResourceStart,
+  resolveCdpNavigationPrimeOutcome,
+  resolveTabNavigationSignal,
+  runGuardedNavigationStep,
+  runRuntimeNavigationTask
+} from "./runtime-navigation-operations.js";
+
+describe("runtime navigation operations", () => {
+  it("creates one URL-complete signal for one tabs callback", () => {
+    expect(
+      resolveTabNavigationSignal({ url: "https://example.test/a", status: "complete" })
+    ).toEqual({
+      candidateUrl: "https://example.test/a",
+      completed: true,
+      source: "tabs-url-complete"
+    });
+    expect(resolveTabNavigationSignal({ status: "loading" })).toBeNull();
+  });
+
+  it("drops a delayed policy result after its claim becomes stale", async () => {
+    const runtime = { navigationRevision: 0, open: true };
+    const a1 = claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/a");
+    const isCurrent = () =>
+      isRuntimeNavigationClaimCurrent(a1, runtime, (candidate) => candidate.open);
+    let resolvePolicy!: (allowed: boolean) => void;
+    const policy = new Promise<boolean>((resolve) => {
+      resolvePolicy = resolve;
+    });
+    const pending = runGuardedNavigationStep(isCurrent, () => policy);
+
+    claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/b");
+    claimRuntimeNavigation(runtime, "tabs-url", "https://example.test/a");
+    resolvePolicy(true);
+
+    await expect(pending).resolves.toEqual({ status: "stale", value: true });
+  });
+
+  it("does not run a queued operation after runtime replacement", async () => {
+    const original = { navigationRevision: 0, open: true };
+    const replacement = { navigationRevision: 0, open: true };
+    const claim = claimRuntimeNavigation(original, "cdp-frame-navigated");
+    const operation = vi.fn(async () => "must-not-run");
+
+    await expect(
+      runGuardedNavigationStep(
+        () => isRuntimeNavigationClaimCurrent(claim, replacement, (candidate) => candidate.open),
+        operation
+      )
+    ).resolves.toEqual({ status: "skipped" });
+    expect(operation).not.toHaveBeenCalled();
+  });
+
+  it("fails a current queued navigation closed without stopping a replacement", async () => {
+    const failure = new Error("prime failed");
+    const stopCurrent = vi.fn(async () => undefined);
+
+    await expect(
+      runRuntimeNavigationTask(
+        () => true,
+        async () => {
+          throw failure;
+        },
+        stopCurrent
+      )
+    ).resolves.toEqual({ kind: "failed-closed", error: failure });
+    expect(stopCurrent).toHaveBeenCalledOnce();
+
+    let current = true;
+    stopCurrent.mockClear();
+    await expect(
+      runRuntimeNavigationTask(
+        () => current,
+        async () => {
+          current = false;
+          throw failure;
+        },
+        stopCurrent
+      )
+    ).resolves.toEqual({ kind: "stale" });
+    expect(stopCurrent).not.toHaveBeenCalled();
+  });
+
+  it.each(["frame-tree-prime", "stream-id", "offscreen-start", "offscreen-stop"])(
+    "reports a stale %s completion for exact cleanup",
+    async (value) => {
+      let current = true;
+      const pending = runGuardedNavigationStep(
+        () => current,
+        async () => {
+          await Promise.resolve();
+          current = false;
+          return value;
+        }
+      );
+
+      await expect(pending).resolves.toEqual({ status: "stale", value });
+    }
+  );
+
+  it("requires exact cleanup whenever a guarded start operation actually ran", () => {
+    expect(didGuardedNavigationOperationRun({ status: "skipped" })).toBe(false);
+    expect(didGuardedNavigationOperationRun({ status: "current", value: "started" })).toBe(true);
+    expect(didGuardedNavigationOperationRun({ status: "stale", value: "started" })).toBe(true);
+  });
+
+  it("does not let a hung detached restore hold the general runtime queue", async () => {
+    const hungRestore = new Promise<void>(() => undefined);
+    const oldRestoreStarted = vi.fn();
+    const replacementRestore = vi.fn(async () => undefined);
+    let runtimeQueue = Promise.resolve();
+
+    runtimeQueue = runtimeQueue.then(() => {
+      launchDetachedNavigationTask({
+        run: async () => {
+          oldRestoreStarted();
+          await hungRestore;
+        },
+        onFailure: () => undefined
+      });
+    });
+    runtimeQueue = runtimeQueue.then(() => {
+      launchDetachedNavigationTask({
+        run: replacementRestore,
+        onFailure: () => undefined
+      });
+    });
+
+    await runtimeQueue;
+    await vi.waitFor(() => expect(replacementRestore).toHaveBeenCalledOnce());
+    expect(oldRestoreStarted).toHaveBeenCalledOnce();
+  });
+
+  it("separates an invalid root from child-only global blocking", () => {
+    expect(resolveCdpNavigationPrimeOutcome({ rootValid: false, globalCaptureReady: false })).toBe(
+      "root-invalid"
+    );
+    expect(resolveCdpNavigationPrimeOutcome({ rootValid: true, globalCaptureReady: false })).toBe(
+      "global-blocked"
+    );
+    expect(resolveCdpNavigationPrimeOutcome({ rootValid: true, globalCaptureReady: true })).toBe(
+      "ready"
+    );
+  });
+
+  it("rejects an expected recording after a replacement wins", () => {
+    const oldRecording = { id: "old" };
+    const replacement = { id: "new" };
+
+    expect(canOperateOnExpectedNavigationResource(() => true, replacement, oldRecording)).toBe(
+      false
+    );
+    expect(canOperateOnExpectedNavigationResource(() => false, oldRecording, oldRecording)).toBe(
+      false
+    );
+    expect(canOperateOnExpectedNavigationResource(() => true, oldRecording, oldRecording)).toBe(
+      true
+    );
+  });
+
+  it("retains an ambiguous exact start identity when cleanup also fails", async () => {
+    const recording = { id: "recording-a" };
+    const stopFailure = new Error("stop response lost");
+
+    await expect(
+      reconcileAmbiguousNavigationResourceStart({
+        current: () => recording,
+        expected: recording,
+        stop: async () => {
+          throw stopFailure;
+        }
+      })
+    ).resolves.toEqual({ kind: "retained", error: stopFailure });
+
+    const stop = vi.fn(async () => undefined);
+    await expect(
+      reconcileAmbiguousNavigationResourceStart({
+        current: () => ({ id: "replacement" }),
+        expected: recording,
+        stop
+      })
+    ).resolves.toEqual({ kind: "stale" });
+    expect(stop).not.toHaveBeenCalled();
+  });
+});
diff --git a/apps/extension/src/sw/runtime-navigation-operations.ts b/apps/extension/src/sw/runtime-navigation-operations.ts
new file mode 100644
index 0000000..74fb3a7
--- /dev/null
+++ b/apps/extension/src/sw/runtime-navigation-operations.ts
@@ -0,0 +1,156 @@
+import type { RuntimeNavigationSource } from "./runtime-navigation-claim.js";
+
+export type TabNavigationSignal = Readonly<{
+  candidateUrl?: string;
+  completed: boolean;
+  source: Extract<RuntimeNavigationSource, "tabs-url" | "tabs-complete" | "tabs-url-complete">;
+}>;
+
+export type GuardedNavigationStepResult<Value> =
+  | Readonly<{ status: "skipped" }>
+  | Readonly<{ status: "stale"; value: Value }>
+  | Readonly<{ status: "current"; value: Value }>;
+
+export type CdpNavigationPrimeOutcome = "root-invalid" | "global-blocked" | "ready";
+
+export type RuntimeNavigationTaskResult =
+  | Readonly<{ kind: "completed" }>
+  | Readonly<{ kind: "stale" }>
+  | Readonly<{ kind: "failed-closed"; error: unknown }>;
+
+export type AmbiguousNavigationResourceStartResult =
+  | Readonly<{ kind: "stale" }>
+  | Readonly<{ kind: "stopped" }>
+  | Readonly<{ kind: "retained"; error: unknown }>;
+
+export type DetachedNavigationTask = Readonly<{
+  run: () => void | Promise<void>;
+  onFailure: (error: unknown) => void | Promise<void>;
+  onSettled?: () => void;
+  onUnhandledFailure?: (error: unknown) => void;
+}>;
+
+/** Normalizes one tabs.onUpdated callback into at most one navigation claim. */
+export function resolveTabNavigationSignal(input: {
+  url?: string;
+  status?: string;
+}): TabNavigationSignal | null {
+  const candidateUrl =
+    typeof input.url === "string" && input.url.length > 0 ? input.url : undefined;
+  const completed = input.status === "complete";
+
+  if (!candidateUrl && !completed) {
+    return null;
+  }
+
+  return Object.freeze({
+    ...(candidateUrl === undefined ? {} : { candidateUrl }),
+    completed,
+    source: candidateUrl ? (completed ? "tabs-url-complete" : "tabs-url") : "tabs-complete"
+  });
+}
+
+/**
+ * Runs one async boundary only while its navigation owner is current and
+ * reports a completion that lost ownership without discarding its value.
+ */
+export async function runGuardedNavigationStep<Value>(
+  isCurrent: () => boolean,
+  operation: () => Value | Promise<Value>
+): Promise<GuardedNavigationStepResult<Value>> {
+  if (!isCurrent()) {
+    return { status: "skipped" };
+  }
+
+  const value = await operation();
+  return isCurrent() ? { status: "current", value } : { status: "stale", value };
+}
+
+/** Distinguishes a completed operation from one skipped before it started. */
+export function didGuardedNavigationOperationRun<Value>(
+  result: GuardedNavigationStepResult<Value>
+): result is Exclude<GuardedNavigationStepResult<Value>, Readonly<{ status: "skipped" }>> {
+  return result.status !== "skipped";
+}
+
+/** Stops only the still-current owner when a queued navigation task rejects. */
+export async function runRuntimeNavigationTask(
+  isCurrent: () => boolean,
+  task: () => void | Promise<void>,
+  stopCurrent: () => void | Promise<void>
+): Promise<RuntimeNavigationTaskResult> {
+  try {
+    const result = await runGuardedNavigationStep(isCurrent, task);
+    return result.status === "current" ? { kind: "completed" } : { kind: "stale" };
+  } catch (error) {
+    if (!isCurrent()) {
+      return { kind: "stale" };
+    }
+
+    await stopCurrent();
+    return { kind: "failed-closed", error };
+  }
+}
+
+/**
+ * Starts a guarded navigation continuation without returning its promise to a
+ * caller's general-purpose queue. This keeps a hung old restore from holding
+ * the queue tail while the restore lane applies its own generation ordering.
+ */
+export function launchDetachedNavigationTask(task: DetachedNavigationTask): void {
+  const running = (async () => {
+    try {
+      await task.run();
+    } catch (error) {
+      await task.onFailure(error);
+    } finally {
+      task.onSettled?.();
+    }
+  })();
+
+  void running.catch((error) => {
+    task.onUnhandledFailure?.(error);
+  });
+}
+
+/** Keeps a valid root usable while distinguishing child-only global blocking. */
+export function resolveCdpNavigationPrimeOutcome(input: {
+  rootValid: boolean;
+  globalCaptureReady: boolean;
+}): CdpNavigationPrimeOutcome {
+  if (!input.rootValid) {
+    return "root-invalid";
+  }
+
+  return input.globalCaptureReady ? "ready" : "global-blocked";
+}
+
+/** Prevents stale stop/start work from operating on a replacement resource. */
+export function canOperateOnExpectedNavigationResource<Resource>(
+  isCurrent: () => boolean,
+  current: Resource | null,
+  expected: Resource | null
+): expected is Resource {
+  return expected !== null && current === expected && isCurrent();
+}
+
+/**
+ * Reconciles an unknown start result by stopping only the exact local resource.
+ * A failed stop deliberately retains the identity for outer transaction cleanup.
+ */
+export async function reconcileAmbiguousNavigationResourceStart<Resource>(input: {
+  current: () => Resource | null;
+  expected: Resource;
+  stop: (expected: Resource) => void | Promise<void>;
+}): Promise<AmbiguousNavigationResourceStartResult> {
+  if (input.current() !== input.expected) {
+    return { kind: "stale" };
+  }
+
+  try {
+    await input.stop(input.expected);
+    return { kind: "stopped" };
+  } catch (error) {
+    return { kind: "retained", error };
+  }
+}
diff --git a/apps/extension/src/sw/runtime-state.integration.test.ts b/apps/extension/src/sw/runtime-state.integration.test.ts
new file mode 100644
index 0000000..d173a5a
--- /dev/null
+++ b/apps/extension/src/sw/runtime-state.integration.test.ts
@@ -0,0 +1,259 @@
+import { DEFAULT_RECORDER_CONFIG, type RecorderConfig } from "@webblackbox/protocol";
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  RuntimeCleanupScheduler,
+  capCleanupDeadline,
+  createRuntimeCleanupAlarmName,
+  createRuntimeStateSnapshot,
+  createStoppedRuntimeTombstone,
+  createStoppingRuntimeTombstone,
+  evaluateActiveRuntimeRestoration,
+  extractPersistedRuntimeIdentities,
+  parseRuntimeStateSnapshot,
+  planRuntimeRestoration,
+  type PersistedActiveRuntime,
+  type PersistedRuntimeCounters,
+  type PersistedStoppedRuntime,
+  type PersistedStoppingRuntime
+} from "./runtime-state.js";
+
+const STARTED_AT = Date.parse("2026-06-01T00:00:00.000Z");
+const COUNTERS: PersistedRuntimeCounters = {
+  recorderEventSequence: 88,
+  recorderActionSequence: 12,
+  eventCount: 88,
+  errorCount: 2,
+  sizeBytes: 10_000,
+  budgetAlertCount: 1,
+  droppedBestEffortTasks: 0,
+  responseBodyCaptures: 3,
+  networkTotal: 30,
+  networkFailed: 2
+};
+
+function config(tabId: number, expiresAt?: string): RecorderConfig {
+  const next = structuredClone(DEFAULT_RECORDER_CONFIG);
+  next.capturePolicy = {
+    ...next.capturePolicy!,
+    consent: {
+      ...next.capturePolicy!.consent,
+      grantedAt: new Date(STARTED_AT).toISOString(),
+      ...(expiresAt ? { expiresAt } : {})
+    },
+    scope: {
+      ...next.capturePolicy!.scope,
+      tabId,
+      origin: "https://app.example"
+    },
+    redaction: structuredClone(next.redaction)
+  };
+  return next;
+}
+
+function active(expiresAt?: string): PersistedActiveRuntime {
+  return {
+    state: "active",
+    sid: "S-1780272000000-active",
+    tabId: 41,
+    mode: "lite",
+    url: "https://app.example/home",
+    title: "App",
+    tags: ["restart"],
+    config: config(41, expiresAt),
+    startedAt: STARTED_AT,
+    counters: { ...COUNTERS }
+  };
+}
+
+function stopped(): PersistedStoppedRuntime {
+  const stoppedAt = STARTED_AT + 60_000;
+  return {
+    ...active(),
+    state: "stopped",
+    sid: "S-1780272060000-stopped",
+    stoppedAt,
+    cleanupDeadline: stoppedAt + 86_400_000
+  };
+}
+
+function stopping(): PersistedStoppingRuntime {
+  const stopRequestedAt = STARTED_AT + 30_000;
+  return {
+    ...active(),
+    state: "stopping",
+    sid: "S-1780272030000-stopping",
+    stopRequestedAt,
+    cleanupDeadline: stopRequestedAt + 86_400_000
+  };
+}
+
+describe("service-worker restart recovery integration", () => {
+  it("restores a valid active checkpoint and re-arms stopped TTL cleanup after restart", async () => {
+    const rawStorageValue = structuredClone(
+      createRuntimeStateSnapshot([active(), stopped()], STARTED_AT + 120_000)
+    );
+    const restored = parseRuntimeStateSnapshot(rawStorageValue);
+    expect(restored?.sessions).toHaveLength(2);
+
+    const activeRow = restored!.sessions[0] as PersistedActiveRuntime;
+    expect(
+      evaluateActiveRuntimeRestoration(
+        activeRow,
+        { id: 41, url: "https://app.example/after-restart" },
+        STARTED_AT + 120_000
+      )
+    ).toMatchObject({ allowed: true });
+    expect(activeRow.counters.recorderEventSequence).toBe(88);
+
+    let now = STARTED_AT + 120_000;
+    const alarmCreate = vi.fn();
+    const purge = vi.fn();
+    const scheduler = new RuntimeCleanupScheduler({
+      alarms: { create: alarmCreate, clear: vi.fn().mockResolvedValue(true) },
+      now: () => now,
+      setTimer: () => 1 as unknown as ReturnType<typeof setTimeout>,
+      onDue: purge
+    });
+    const stoppedRow = restored!.sessions[1] as PersistedStoppedRuntime;
+    const cappedDeadline = capCleanupDeadline(
+      stoppedRow.stoppedAt,
+      stoppedRow.cleanupDeadline,
+      3_600_000
+    );
+
+    await scheduler.schedule(stoppedRow.sid, cappedDeadline);
+    expect(alarmCreate).toHaveBeenCalledWith(createRuntimeCleanupAlarmName(stoppedRow.sid), {
+      when: cappedDeadline
+    });
+    now = cappedDeadline + 1;
+    await scheduler.handleAlarm(createRuntimeCleanupAlarmName(stoppedRow.sid));
+    expect(purge).toHaveBeenCalledWith(stoppedRow.sid);
+  });
+
+  it("rejects missing tabs and expired consent instead of re-enabling capture", () => {
+    expect(evaluateActiveRuntimeRestoration(active(), null, STARTED_AT + 1)).toEqual({
+      allowed: false,
+      reason: "tab-missing"
+    });
+
+    const expiresAt = new Date(STARTED_AT + 30_000).toISOString();
+    expect(
+      evaluateActiveRuntimeRestoration(
+        active(expiresAt),
+        { id: 41, url: "https://app.example/home" },
+        STARTED_AT + 30_001
+      )
+    ).toEqual({ allowed: false, reason: "consent-expired" });
+  });
+
+  it("routes a crash-persisted stopping tombstone to retained stopped finalization", () => {
+    const snapshot = parseRuntimeStateSnapshot(
+      createRuntimeStateSnapshot([stopping()], STARTED_AT + 31_000)
+    );
+    const row = snapshot?.sessions[0];
+
+    expect(row?.state).toBe("stopping");
+    expect(row && planRuntimeRestoration(row)).toMatchObject({
+      kind: "finalize-stopping",
+      runtime: {
+        sid: "S-1780272030000-stopping",
+        stopRequestedAt: STARTED_AT + 30_000
+      }
+    });
+
+    const finalized = createStoppedRuntimeTombstone(
+      row as PersistedStoppingRuntime,
+      (row as PersistedStoppingRuntime).stopRequestedAt,
+      (row as PersistedStoppingRuntime).cleanupDeadline
+    );
+    expect(finalized).toMatchObject({
+      state: "stopped",
+      sid: "S-1780272030000-stopping",
+      stoppedAt: STARTED_AT + 30_000,
+      counters: COUNTERS
+    });
+    expect(parseRuntimeStateSnapshot(createRuntimeStateSnapshot([finalized]))?.sessions[0]).toEqual(
+      finalized
+    );
+  });
+
+  it("retains a rejected active restore as exportable stopping data instead of purging it", () => {
+    const rejected = active();
+    rejected.screenRecording = {
+      recordingId: "VR-rejected-restore",
+      startedAt: STARTED_AT + 1_000,
+      startedMono: 1_000,
+      mime: "video/webm",
+      chunkCount: 2,
+      sizeBytes: 512
+    };
+    const failedAt = STARTED_AT + 45_000;
+    const retained = createStoppingRuntimeTombstone(rejected, failedAt, failedAt + 86_400_000);
+    const checkpoint = parseRuntimeStateSnapshot(createRuntimeStateSnapshot([retained]));
+
+    expect(checkpoint?.sessions[0]).toMatchObject({
+      state: "stopping",
+      sid: rejected.sid,
+      counters: COUNTERS,
+      screenRecording: {
+        recordingId: "VR-rejected-restore",
+        chunkCount: 2,
+        sizeBytes: 512
+      }
+    });
+    expect(planRuntimeRestoration(checkpoint!.sessions[0]!)).toMatchObject({
+      kind: "finalize-stopping"
+    });
+
+    const stopped = createStoppedRuntimeTombstone(retained, failedAt, retained.cleanupDeadline);
+    expect(stopped).toMatchObject({
+      state: "stopped",
+      sid: rejected.sid,
+      counters: COUNTERS
+    });
+  });
+
+  it("rejects a corrupt checkpoint while retaining only safe purge identities", () => {
+    const snapshot = createRuntimeStateSnapshot([active()]);
+    const corrupt = {
+      ...snapshot,
+      sessions: [{ ...snapshot.sessions[0], injectedKey: "must-fail-closed" }]
+    };
+
+    expect(parseRuntimeStateSnapshot(corrupt)).toBeNull();
+    expect(extractPersistedRuntimeIdentities(corrupt)).toEqual([
+      {
+        sid: "S-1780272000000-active",
+        tabId: 41,
+        startedAt: STARTED_AT
+      }
+    ]);
+  });
+
+  it("migrates legacy and unsupported storage versions by failing closed to purge identities", () => {
+    const legacy = [
+      {
+        sid: "S-1780272000000-legacy",
+        tabId: 41,
+        mode: "lite",
+        startedAt: STARTED_AT
+      }
+    ];
+    expect(parseRuntimeStateSnapshot(legacy)).toBeNull();
+    expect(extractPersistedRuntimeIdentities(legacy)).toEqual([
+      {
+        sid: "S-1780272000000-legacy",
+        tabId: 41,
+        startedAt: STARTED_AT
+      }
+    ]);
+
+    const futureVersion = {
+      ...createRuntimeStateSnapshot([active()]),
+      schemaVersion: 2
+    };
+    expect(parseRuntimeStateSnapshot(futureVersion)).toBeNull();
+    expect(extractPersistedRuntimeIdentities(futureVersion)).toHaveLength(1);
+  });
+});
diff --git a/apps/extension/src/sw/runtime-state.test.ts b/apps/extension/src/sw/runtime-state.test.ts
new file mode 100644
index 0000000..728b9c8
--- /dev/null
+++ b/apps/extension/src/sw/runtime-state.test.ts
@@ -0,0 +1,1797 @@
+import { DEFAULT_RECORDER_CONFIG, type RecorderConfig } from "@webblackbox/protocol";
+import { WebBlackboxRecorder } from "@webblackbox/recorder";
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  DurableRuntimeRecoveryCheckpoint,
+  MAX_PERSISTED_RUNTIME_SESSIONS,
+  RuntimeCleanupScheduler,
+  RuntimeStartCancelledError,
+  RuntimeStartCoordinator,
+  RuntimeStartToken,
+  beginVolatileCaptureQuiescence,
+  buildInterruptedScreenRecordingRecoveries,
+  capCleanupDeadline,
+  createVolatileCaptureFence,
+  createRuntimeCleanupAlarmName,
+  createRuntimeStateSnapshot,
+  createStoppedRuntimeTombstone,
+  createStoppingRuntimeTombstone,
+  compactScreenRecordingChunkHashes,
+  commitRestoredRuntimeActivation,
+  deleteMapEntryIfSame,
+  deriveDurableScreenRecordingChunkCount,
+  disposeListenersBeforeTeardown,
+  establishDurableRuntimeRestorationReadiness,
+  evaluateActiveRuntimeRestoration,
+  extractPersistedRuntimeIdentities,
+  isMapEntrySame,
+  isRuntimeActivationProvisional,
+  isRuntimeCaptureAdmitted,
+  isVolatileCaptureOpen,
+  mergeRuntimeStateWithStoppingTombstones,
+  mergeRuntimeCountersWithSequenceWatermark,
+  normalizeOffscreenScreenRecordingStatus,
+  parseRuntimeStateSnapshot,
+  persistDurableStopTombstone,
+  planRuntimeRestoration,
+  preserveRuntimeRowsAfterGlobalRestoreFailure,
+  reconcileScreenRecordingResumeState,
+  recoverStoppingRuntimeFailClosed,
+  recoverStoppingRuntimeForRetention,
+  restoreScreenRecordingChunkHashes,
+  runActiveRuntimeRestorationTransaction,
+  runDurableFailedRuntimeCleanup,
+  runDurableFailedRuntimeRetention,
+  runDurableRuntimeStopWorkflow,
+  runProvisionalRuntimeStartTransaction,
+  runVolatileCaptureOperation,
+  type PersistedActiveRuntime,
+  type PersistedRuntime
+} from "./runtime-state.js";
+
+function createConfig(tabId = 7, expiresAt?: string): RecorderConfig {
+  const policy = structuredClone(DEFAULT_RECORDER_CONFIG.capturePolicy!);
+  policy.scope = {
+    ...policy.scope,
+    tabId,
+    origin: "https://example.test"
+  };
+  policy.consent = {
+    ...policy.consent,
+    grantedAt: "2026-01-01T00:00:00.000Z",
+    ...(expiresAt ? { expiresAt } : {})
+  };
+
+  return {
+    ...structuredClone(DEFAULT_RECORDER_CONFIG),
+    capturePolicy: policy,
+    redaction: structuredClone(policy.redaction)
+  };
+}
+
+function createRuntime(
+  state: PersistedRuntime["state"] = "active",
+  overrides: Partial<PersistedRuntime> = {}
+): PersistedRuntime {
+  const base = {
+    state,
+    sid: "S-1767225600000-runtime",
+    tabId: 7,
+    mode: "lite" as const,
+    url: "https://example.test/path",
+    title: "Example",
+    tags: ["recovery"],
+    note: "restart test",
+    config: createConfig(),
+    startedAt: Date.parse("2026-01-01T00:00:00.000Z"),
+    counters: {
+      recorderEventSequence: 30,
+      recorderActionSequence: 4,
+      eventCount: 30,
+      errorCount: 1,
+      sizeBytes: 4_096,
+      budgetAlertCount: 2,
+      droppedBestEffortTasks: 3,
+      responseBodyCaptures: 4,
+      networkTotal: 10,
+      networkFailed: 1
+    },
+    ...overrides
+  };
+
+  if (state === "active") {
+    return { ...base, state: "active" };
+  }
+
+  const stopTime = Date.parse("2026-01-01T01:00:00.000Z");
+  const cleanupDeadline = Date.parse("2026-01-02T01:00:00.000Z");
+
+  return state === "stopping"
+    ? {
+        ...base,
+        state: "stopping",
+        stopRequestedAt: stopTime,
+        cleanupDeadline
+      }
+    : {
+        ...base,
+        state: "stopped",
+        stoppedAt: stopTime,
+        cleanupDeadline
+      };
+}
+
+function createDeferred<T = void>(): {
+  promise: Promise<T>;
+  resolve: (value: T | PromiseLike<T>) => void;
+  reject: (reason?: unknown) => void;
+} {
+  let resolve!: (value: T | PromiseLike<T>) => void;
+  let reject!: (reason?: unknown) => void;
+  const promise = new Promise<T>((resolvePromise, rejectPromise) => {
+    resolve = resolvePromise;
+    reject = rejectPromise;
+  });
+  return { promise, resolve, reject };
+}
+
+describe("runtime state checkpoint", () => {
+  it("round-trips active, stopping, and stopped sessions without events or keys", () => {
+    const snapshot = createRuntimeStateSnapshot(
+      [
+        createRuntime("active"),
+        createRuntime("stopping", { sid: "S-1767225600001-stopping" }),
+        createRuntime("stopped", { sid: "S-1767225600002-stopped" })
+      ],
+      123
+    );
+    const parsed = parseRuntimeStateSnapshot(snapshot);
+
+    expect(parsed).toEqual(snapshot);
+    expect(JSON.stringify(parsed)).not.toMatch(/"events"|"encryptionKey"|"passphrase":/);
+  });
+
+  it("never writes a checkpoint that its own parser rejects at session capacity", () => {
+    const sessions = Array.from({ length: MAX_PERSISTED_RUNTIME_SESSIONS }, (_, index) =>
+      createRuntime("stopped", {
+        sid: `S-1767225600000-capacity-${index}`,
+        tabId: index,
+        config: createConfig(index)
+      })
+    );
+    const snapshot = createRuntimeStateSnapshot(sessions, 123);
+
+    expect(parseRuntimeStateSnapshot(snapshot)?.sessions).toHaveLength(
+      MAX_PERSISTED_RUNTIME_SESSIONS
+    );
+    expect(() =>
+      createRuntimeStateSnapshot([
+        ...sessions,
+        createRuntime("stopped", {
+          sid: "S-1767225600000-capacity-overflow",
+          tabId: MAX_PERSISTED_RUNTIME_SESSIONS,
+          config: createConfig(MAX_PERSISTED_RUNTIME_SESSIONS)
+        })
+      ])
+    ).toThrow(/capacity exceeded/);
+  });
+
+  it("extracts every valid identity from an oversized corrupt checkpoint for fail-closed purge", () => {
+    const sessions = Array.from({ length: MAX_PERSISTED_RUNTIME_SESSIONS + 1 }, (_, index) => ({
+      sid: `S-1767225600000-overflow-${index}`,
+      tabId: index,
+      startedAt: 1_767_225_600_000 + index
+    }));
+    const oversized = {
+      schemaVersion: 1,
+      savedAt: 1_767_225_600_000,
+      sessions
+    };
+
+    expect(parseRuntimeStateSnapshot(oversized)).toBeNull();
+    expect(extractPersistedRuntimeIdentities(oversized)).toHaveLength(
+      MAX_PERSISTED_RUNTIME_SESSIONS + 1
+    );
+  });
+
+  it("never plans active restoration for a durable stopping tombstone", () => {
+    expect(planRuntimeRestoration(createRuntime("active")).kind).toBe("resume-active");
+    expect(planRuntimeRestoration(createRuntime("stopping")).kind).toBe("finalize-stopping");
+    expect(planRuntimeRestoration(createRuntime("stopped")).kind).toBe("retain-stopped");
+  });
+
+  it("promotes a stopping row to stopped without retaining stop-intent fields", () => {
+    const active = createRuntime("active") as PersistedActiveRuntime;
+    const stopping = createStoppingRuntimeTombstone(
+      active,
+      active.startedAt + 1_000,
+      active.startedAt + 10_000
+    );
+    const stopped = createStoppedRuntimeTombstone(
+      stopping,
+      active.startedAt + 2_000,
+      active.startedAt + 10_000
+    );
+
+    expect(stopped).toMatchObject({
+      state: "stopped",
+      stoppedAt: active.startedAt + 2_000,
+      cleanupDeadline: active.startedAt + 10_000
+    });
+    expect(stopped).not.toHaveProperty("stopRequestedAt");
+  });
+
+  it("retains a failed recovery tombstone across later active checkpoint writes", () => {
+    const active = createRuntime("active");
+    const tombstone = createRuntime("stopping", {
+      sid: active.sid
+    }) as Extract<PersistedRuntime, { state: "stopping" }>;
+    const merged = mergeRuntimeStateWithStoppingTombstones([active], [tombstone]);
+
+    expect(merged).toHaveLength(1);
+    expect(merged[0]).toMatchObject({
+      sid: active.sid,
+      state: "stopping",
+      stopRequestedAt: tombstone.stopRequestedAt
+    });
+    expect(planRuntimeRestoration(merged[0]!)).toMatchObject({ kind: "finalize-stopping" });
+  });
+
+  it("preserves every sid and converts active rows to stopping after a global restore crash", () => {
+    const active = createRuntime("active") as PersistedActiveRuntime;
+    const stopping = createRuntime("stopping", {
+      sid: "S-1767225600001-stopping",
+      tabId: 8,
+      config: createConfig(8)
+    });
+    const stopped = createRuntime("stopped", {
+      sid: "S-1767225600002-stopped",
+      tabId: 9,
+      config: createConfig(9)
+    });
+    const failedAt = active.startedAt + 5_000;
+    const rows = preserveRuntimeRowsAfterGlobalRestoreFailure({
+      rows: [active, stopping, stopped],
+      failedAt,
+      resolveLocalTtlMs: () => 60_000
+    });
+
+    expect(rows.map((runtime) => runtime.sid)).toEqual([active.sid, stopping.sid, stopped.sid]);
+    expect(rows[0]).toMatchObject({
+      state: "stopping",
+      stopRequestedAt: failedAt,
+      cleanupDeadline: failedAt + 60_000
+    });
+    expect(rows[1]).toEqual(stopping);
+    expect(rows[2]).toEqual(stopped);
+  });
+
+  it("uses the latest same-sid row without reviving it after a global restore crash", () => {
+    const active = createRuntime("active") as PersistedActiveRuntime;
+    const stopping = createRuntime("stopping", { sid: active.sid });
+    const rows = preserveRuntimeRowsAfterGlobalRestoreFailure({
+      rows: [active, stopping],
+      failedAt: active.startedAt + 5_000,
+      resolveLocalTtlMs: () => 60_000
+    });
+
+    expect(rows).toEqual([stopping]);
+  });
+
+  it("keeps unrelated pending sessions beside a restoration-failure tombstone", () => {
+    const failed = createRuntime("active") as PersistedActiveRuntime;
+    const other = createRuntime("active", {
+      sid: "S-1767225600001-other",
+      tabId: 8,
+      config: createConfig(8)
+    });
+    const tombstone = createStoppingRuntimeTombstone(
+      failed,
+      failed.startedAt + 1_000,
+      failed.startedAt + 10_000
+    );
+    const merged = mergeRuntimeStateWithStoppingTombstones([failed, other], [tombstone]);
+
+    expect(merged).toHaveLength(2);
+    expect(merged.find((runtime) => runtime.sid === failed.sid)?.state).toBe("stopping");
+    expect(merged.find((runtime) => runtime.sid === other.sid)).toEqual(other);
+  });
+
+  it("does not activate a failed first tombstone write and persists again on retry", async () => {
+    let stopping = false;
+    let attempts = 0;
+    const activate = vi.fn(() => {
+      stopping = true;
+    });
+    const persist = vi.fn(async () => {
+      attempts += 1;
+
+      if (attempts === 1) {
+        throw new Error("storage unavailable");
+      }
+    });
+
+    await expect(persistDurableStopTombstone({ activate, persist })).rejects.toThrow(
+      /storage unavailable/
+    );
+    expect(stopping).toBe(false);
+    expect(activate).not.toHaveBeenCalled();
+
+    await persistDurableStopTombstone({ activate, persist });
+    expect(stopping).toBe(true);
+    expect(persist).toHaveBeenCalledTimes(2);
+    expect(activate).toHaveBeenCalledTimes(1);
+  });
+
+  it("writes a serialized stopping row before activating the in-memory marker", async () => {
+    const active = createRuntime("active") as PersistedActiveRuntime;
+    const stopRequestedAt = active.startedAt + 1_000;
+    let activated = false;
+    const storageSet = vi.fn(async (snapshot: ReturnType<typeof createRuntimeStateSnapshot>) => {
+      expect(activated).toBe(false);
+      expect(snapshot.sessions[0]).toMatchObject({
+        sid: active.sid,
+        state: "stopping",
+        stopRequestedAt
+      });
+    });
+
+    await persistDurableStopTombstone({
+      persist: () =>
+        storageSet(
+          createRuntimeStateSnapshot([
+            createStoppingRuntimeTombstone(active, stopRequestedAt, stopRequestedAt + 10_000)
+          ])
+        ),
+      activate: () => {
+        activated = true;
+      }
+    });
+
+    expect(storageSet).toHaveBeenCalledTimes(1);
+    expect(activated).toBe(true);
+  });
+
+  it("closes capture synchronously while the stopping tombstone write is deferred", async () => {
+    const captureFence = createVolatileCaptureFence();
+    const checkpoint = createDeferred();
+    const teardown = vi.fn();
+    const persistStopped = vi.fn();
+    const stopTask = runDurableRuntimeStopWorkflow({
+      captureFence,
+      persistStopping: () => checkpoint.promise,
+      teardownSteps: [teardown],
+      persistStopped
+    });
+
+    expect(isVolatileCaptureOpen(captureFence)).toBe(false);
+    const writes = vi.fn(async () => "hash");
+    const representatives = ["event", "screenshot", "dom", "storage", "indexeddb", "video"];
+    const blockedResults = await Promise.all(
+      representatives.map(() => runVolatileCaptureOperation(captureFence, writes))
+    );
+
+    expect(blockedResults).toEqual(representatives.map(() => null));
+    expect(writes).not.toHaveBeenCalled();
+    expect(teardown).not.toHaveBeenCalled();
+    checkpoint.resolve(undefined);
+    await stopTask;
+    expect(teardown).toHaveBeenCalledTimes(1);
+    expect(persistStopped).toHaveBeenCalledTimes(1);
+  });
+
+  it("quiesces volatile producers before a deferred stopping checkpoint", async () => {
+    const captureFence = createVolatileCaptureFence();
+    const quiesce = vi.fn();
+    const checkpoint = createDeferred();
+
+    beginVolatileCaptureQuiescence(captureFence, quiesce);
+    const stopTask = runDurableRuntimeStopWorkflow({
+      captureFence,
+      persistStopping: () => checkpoint.promise,
+      teardownSteps: [],
+      persistStopped: vi.fn()
+    });
+
+    expect(quiesce).toHaveBeenCalledOnce();
+    expect(isVolatileCaptureOpen(captureFence)).toBe(false);
+    checkpoint.resolve(undefined);
+    await stopTask;
+  });
+
+  it("keeps capture blocked and does not begin teardown when the tombstone write fails", async () => {
+    const captureFence = createVolatileCaptureFence();
+    const teardown = vi.fn();
+    const persistStopped = vi.fn();
+
+    await expect(
+      runDurableRuntimeStopWorkflow({
+        captureFence,
+        persistStopping: () => Promise.reject(new Error("checkpoint failed")),
+        teardownSteps: [teardown],
+        persistStopped
+      })
+    ).rejects.toThrow(/checkpoint failed/);
+
+    expect(isVolatileCaptureOpen(captureFence)).toBe(false);
+    expect(teardown).not.toHaveBeenCalled();
+    expect(persistStopped).not.toHaveBeenCalled();
+  });
+
+  it("drops an in-flight capture result when stop closes the fence", async () => {
+    const captureFence = createVolatileCaptureFence();
+    const captureResult = createDeferred<string>();
+    const write = vi.fn(() => captureResult.promise);
+    const inFlight = runVolatileCaptureOperation(captureFence, write);
+
+    expect(write).toHaveBeenCalledTimes(1);
+    await expect(
+      runDurableRuntimeStopWorkflow({
+        captureFence,
+        persistStopping: () => Promise.reject(new Error("checkpoint failed")),
+        teardownSteps: [],
+        persistStopped: vi.fn()
+      })
+    ).rejects.toThrow(/checkpoint failed/);
+
+    captureResult.resolve("orphaned-hash");
+    await expect(inFlight).resolves.toBeNull();
+    expect(isVolatileCaptureOpen(captureFence)).toBe(false);
+  });
+
+  it("opens a fresh fence only for a newly authorized active runtime", async () => {
+    const blockedFence = createVolatileCaptureFence();
+    await expect(
+      runDurableRuntimeStopWorkflow({
+        captureFence: blockedFence,
+        persistStopping: () => Promise.reject(new Error("checkpoint failed")),
+        teardownSteps: [],
+        persistStopped: vi.fn()
+      })
+    ).rejects.toThrow(/checkpoint failed/);
+    expect(isVolatileCaptureOpen(blockedFence)).toBe(false);
+
+    const restored = evaluateActiveRuntimeRestoration(
+      createRuntime("active") as PersistedActiveRuntime,
+      { id: 7, url: "https://example.test/restored" },
+      Date.parse("2026-01-01T00:30:00.000Z")
+    );
+    expect(restored.allowed).toBe(true);
+
+    const freshFence = createVolatileCaptureFence();
+    const write = vi.fn(async () => "restored-hash");
+    await expect(runVolatileCaptureOperation(freshFence, write)).resolves.toBe("restored-hash");
+    expect(write).toHaveBeenCalledTimes(1);
+  });
+
+  it.each([0, 1, 2])(
+    "keeps the durable stopping state when teardown crash point %i aborts",
+    async (crashPoint) => {
+      let durableState: PersistedRuntime["state"] = "active";
+      const teardownSteps = [0, 1, 2].map((index) => async () => {
+        if (index === crashPoint) {
+          throw new Error(`crash-${index}`);
+        }
+      });
+
+      await expect(
+        runDurableRuntimeStopWorkflow({
+          captureFence: createVolatileCaptureFence(),
+          persistStopping: () => {
+            durableState = "stopping";
+          },
+          teardownSteps,
+          persistStopped: () => {
+            durableState = "stopped";
+          }
+        })
+      ).rejects.toThrow(`crash-${crashPoint}`);
+
+      expect(durableState).toBe("stopping");
+    }
+  );
+
+  it("persists stopped after teardown and can retry a failed final checkpoint", async () => {
+    const order: string[] = [];
+    let durableState: PersistedRuntime["state"] = "active";
+    let finalAttempts = 0;
+    const persistStopped = async () => {
+      finalAttempts += 1;
+
+      if (finalAttempts === 1) {
+        throw new Error("final checkpoint failed");
+      }
+
+      durableState = "stopped";
+      order.push("stopped");
+    };
+
+    await expect(
+      runDurableRuntimeStopWorkflow({
+        captureFence: createVolatileCaptureFence(),
+        persistStopping: () => {
+          durableState = "stopping";
+          order.push("stopping");
+        },
+        teardownSteps: [
+          () => {
+            order.push("teardown");
+          }
+        ],
+        persistStopped
+      })
+    ).rejects.toThrow(/final checkpoint failed/);
+    expect(durableState).toBe("stopping");
+
+    await persistStopped();
+    expect(durableState).toBe("stopped");
+    expect(order).toEqual(["stopping", "teardown", "stopped"]);
+  });
+
+  it("stops an offscreen recorder that survived the stopping checkpoint before purge", async () => {
+    const order: string[] = [];
+
+    await recoverStoppingRuntimeFailClosed({
+      getScreenRecordingStatus: async () => {
+        order.push("status");
+        return {
+          active: true,
+          recordingId: "VR-stopping",
+          mime: "video/webm"
+        };
+      },
+      stopScreenRecording: async (status) => {
+        order.push(`stop:${status.recordingId}`);
+      },
+      purge: async () => {
+        order.push("purge");
+      }
+    });
+
+    expect(order).toEqual(["status", "stop:VR-stopping", "purge"]);
+  });
+
+  it("still purges when stopping an orphaned offscreen recorder fails", async () => {
+    const purge = vi.fn();
+
+    await expect(
+      recoverStoppingRuntimeFailClosed({
+        getScreenRecordingStatus: () => ({
+          active: true,
+          recordingId: "VR-stopping",
+          mime: "video/webm"
+        }),
+        stopScreenRecording: () => Promise.reject(new Error("recorder stop failed")),
+        purge
+      })
+    ).rejects.toThrow(/recorder stop failed/);
+    expect(purge).toHaveBeenCalledTimes(1);
+  });
+
+  it("retains a stopping session only after its surviving recorder is stopped", async () => {
+    const order: string[] = [];
+
+    await recoverStoppingRuntimeForRetention({
+      getScreenRecordingStatus: async () => {
+        order.push("status");
+        return { active: true, recordingId: "VR-retained", mime: "video/webm" };
+      },
+      stopScreenRecording: async (status) => {
+        order.push(`stop:${status.recordingId}`);
+      },
+      retain: async () => {
+        order.push("retain");
+      }
+    });
+
+    expect(order).toEqual(["status", "stop:VR-retained", "retain"]);
+  });
+
+  it("claims the stopping runtime before a surviving recorder can deliver its final chunk", async () => {
+    const order: string[] = [];
+    let claimedRecordingId: string | undefined;
+    const durableChunks: string[] = [];
+    const terminalEvents: string[] = [];
+
+    await recoverStoppingRuntimeForRetention({
+      getScreenRecordingStatus: async () => {
+        order.push("status");
+        return { active: true, recordingId: "VR-final", mime: "video/webm" };
+      },
+      claimRuntime: async (status) => {
+        order.push(`claim:${status.active ? status.recordingId : "none"}`);
+        claimedRecordingId = status.active ? status.recordingId : undefined;
+      },
+      stopScreenRecording: async (status) => {
+        order.push(`stop:${status.recordingId}`);
+        if (claimedRecordingId !== status.recordingId) {
+          throw new Error("final chunk arrived without an exact runtime claim");
+        }
+        durableChunks.push("final-chunk");
+        terminalEvents.push("screen.recording.end");
+      },
+      retain: async () => {
+        order.push("retain");
+        expect(durableChunks).toEqual(["final-chunk"]);
+        expect(terminalEvents).toEqual(["screen.recording.end"]);
+      },
+      releaseRuntimeClaim: async (status) => {
+        order.push(`release:${status.active ? status.recordingId : "none"}`);
+        claimedRecordingId = undefined;
+      }
+    });
+
+    expect(order).toEqual([
+      "status",
+      "claim:VR-final",
+      "stop:VR-final",
+      "retain",
+      "release:VR-final"
+    ]);
+    expect(claimedRecordingId).toBeUndefined();
+  });
+
+  it("keeps the stopping tombstone retryable when the surviving recorder cannot stop", async () => {
+    const retain = vi.fn();
+    const releaseRuntimeClaim = vi.fn();
+
+    await expect(
+      recoverStoppingRuntimeForRetention({
+        getScreenRecordingStatus: () => ({
+          active: true,
+          recordingId: "VR-retained",
+          mime: "video/webm"
+        }),
+        claimRuntime: vi.fn(),
+        stopScreenRecording: () => Promise.reject(new Error("recorder stop failed")),
+        retain,
+        releaseRuntimeClaim
+      })
+    ).rejects.toThrow(/recorder stop failed/);
+    expect(retain).not.toHaveBeenCalled();
+    expect(releaseRuntimeClaim).toHaveBeenCalledOnce();
+  });
+
+  it("rejects the entire checkpoint on unknown fields, invalid policy, or duplicate active tabs", () => {
+    const valid = createRuntimeStateSnapshot([createRuntime()]);
+    expect(
+      parseRuntimeStateSnapshot({
+        ...valid,
+        unexpected: true
+      })
+    ).toBeNull();
+
+    const invalidPolicy = structuredClone(valid);
+    invalidPolicy.sessions[0]!.config.capturePolicy!.scope.tabId = 8;
+    expect(parseRuntimeStateSnapshot(invalidPolicy)).toBeNull();
+
+    const missingCounter = structuredClone(valid) as unknown as {
+      sessions: Array<{ counters: Record<string, unknown> }>;
+    };
+    delete missingCounter.sessions[0]!.counters.recorderEventSequence;
+    expect(parseRuntimeStateSnapshot(missingCounter)).toBeNull();
+
+    const duplicateTab = createRuntimeStateSnapshot([
+      createRuntime(),
+      createRuntime("active", { sid: "S-1767225600001-duplicate" })
+    ]);
+    expect(parseRuntimeStateSnapshot(duplicateTab)).toBeNull();
+  });
+
+  it("fails closed when the tab disappeared or consent expired", () => {
+    const runtime = createRuntime() as PersistedActiveRuntime;
+    expect(
+      evaluateActiveRuntimeRestoration(runtime, null, Date.parse("2026-01-01T00:01:00Z"))
+    ).toEqual({ allowed: false, reason: "tab-missing" });
+
+    runtime.config = createConfig(7, "2026-01-01T00:02:00.000Z");
+    expect(
+      evaluateActiveRuntimeRestoration(
+        runtime,
+        { id: 7, url: "https://example.test/next" },
+        Date.parse("2026-01-01T00:03:00.000Z")
+      )
+    ).toEqual({ allowed: false, reason: "consent-expired" });
+  });
+
+  it("accepts a live same-origin tab and never extends an absolute retention deadline", () => {
+    const runtime = createRuntime() as PersistedActiveRuntime;
+    expect(
+      evaluateActiveRuntimeRestoration(
+        runtime,
+        { id: 7, url: "https://example.test/next?token=secret" },
+        Date.parse("2026-01-01T00:01:00Z")
+      )
+    ).toMatchObject({
+      allowed: true,
+      captureUrl: "https://example.test/next?token=secret"
+    });
+
+    expect(capCleanupDeadline(1_000, 11_000, 2_000)).toBe(3_000);
+    expect(capCleanupDeadline(1_000, 2_000, 5_000)).toBe(2_000);
+  });
+
+  it("advances stale recorder counters to the pipeline high-water", () => {
+    const runtime = createRuntime() as PersistedActiveRuntime;
+    const merged = mergeRuntimeCountersWithSequenceWatermark(runtime.counters, {
+      event: 47,
+      action: 9
+    });
+
+    expect(merged.recorderEventSequence).toBe(47);
+    expect(merged.recorderActionSequence).toBe(9);
+    expect(merged.eventCount).toBe(runtime.counters.eventCount);
+
+    const recorder = new WebBlackboxRecorder(createConfig());
+    recorder.restoreSequenceState({
+      event: merged.recorderEventSequence,
+      action: merged.recorderActionSequence
+    });
+    const next = recorder.ingest({
+      source: "content",
+      rawType: "click",
+      sid: runtime.sid,
+      tabId: runtime.tabId,
+      t: runtime.startedAt + 1,
+      mono: runtime.startedAt + 1,
+      payload: { selector: "button" }
+    });
+    expect(next.event?.id).toBe("E-00000048");
+    expect(next.event?.ref?.act).toBe("A-000010");
+  });
+
+  it("rebuilds restart-spanning video hashes without writing them to chrome.storage", () => {
+    const hashBeforeRestart = "a".repeat(64);
+    const hashAfterRestart = "b".repeat(64);
+    const hashes = restoreScreenRecordingChunkHashes(1, [
+      { index: 0, hash: hashBeforeRestart },
+      { index: 1, hash: hashAfterRestart }
+    ]);
+
+    const endEvent = {
+      type: "screen.recording.end",
+      data: {
+        chunks: compactScreenRecordingChunkHashes(hashes)
+      }
+    };
+    expect(endEvent.data.chunks).toEqual([hashBeforeRestart, hashAfterRestart]);
+
+    const runtime = createRuntime() as PersistedActiveRuntime;
+    runtime.screenRecording = {
+      recordingId: "VR-restart",
+      startedAt: runtime.startedAt,
+      startedMono: runtime.startedAt,
+      mime: "video/webm",
+      chunkCount: 1,
+      sizeBytes: 10
+    };
+    const serialized = JSON.stringify(createRuntimeStateSnapshot([runtime]));
+    expect(serialized).not.toContain(hashBeforeRestart);
+    expect(serialized).not.toContain(hashAfterRestart);
+    expect(serialized).not.toContain('"chunks"');
+  });
+
+  it("reconciles an ahead-of-pipeline MV3 chunk count to durable references", () => {
+    expect(
+      deriveDurableScreenRecordingChunkCount([
+        { index: 0, hash: "a".repeat(64) },
+        { index: 2, hash: "b".repeat(64) }
+      ])
+    ).toBe(3);
+    expect(deriveDurableScreenRecordingChunkCount([])).toBe(0);
+    expect(() =>
+      deriveDurableScreenRecordingChunkCount([{ index: -1, hash: "c".repeat(64) }])
+    ).toThrow(/durable.*range/i);
+
+    const persisted = {
+      recordingId: "VR-reconcile",
+      startedAt: 1,
+      startedMono: 1,
+      mime: "video/webm",
+      chunkCount: 4,
+      sizeBytes: 100
+    };
+    const reconciled = reconcileScreenRecordingResumeState(persisted, {
+      recordingId: persisted.recordingId,
+      chunks: [{ index: 0, hash: "d".repeat(64), size: 10 }]
+    }).screenRecording;
+    expect(reconciled?.chunkCount).toBe(1);
+    expect(reconciled?.sizeBytes).toBe(10);
+    expect(reconcileScreenRecordingResumeState(persisted, undefined)).toEqual({
+      screenRecording: undefined,
+      chunks: undefined
+    });
+  });
+
+  it("validates the offscreen recorder liveness handshake", () => {
+    expect(normalizeOffscreenScreenRecordingStatus({ active: false })).toEqual({
+      active: false
+    });
+    expect(
+      normalizeOffscreenScreenRecordingStatus({
+        active: true,
+        recordingId: "VR-live",
+        mime: "video/webm"
+      })
+    ).toEqual({
+      active: true,
+      recordingId: "VR-live",
+      mime: "video/webm",
+      quiescedForStop: false
+    });
+    expect(
+      normalizeOffscreenScreenRecordingStatus({
+        active: true,
+        recordingId: "VR-stopping",
+        mime: "video/webm",
+        quiescedForStop: true
+      })
+    ).toMatchObject({ active: true, quiescedForStop: true });
+    expect(() =>
+      normalizeOffscreenScreenRecordingStatus({ active: true, recordingId: "", extra: true })
+    ).toThrow(/invalid offscreen/i);
+  });
+
+  it("preserves durable partial video segments when recorder liveness is lost", () => {
+    const persisted = {
+      recordingId: "VR-partial",
+      startedAt: 10,
+      startedMono: 10,
+      mime: "video/webm",
+      chunkCount: 2,
+      sizeBytes: 99
+    };
+    const resumeState = {
+      sequenceWatermark: { event: 2, action: 0 },
+      screenRecordings: [
+        {
+          recordingId: persisted.recordingId,
+          chunks: [
+            { index: 0, hash: "a".repeat(64), size: 11 },
+            { index: 1, hash: "b".repeat(64), size: 13 }
+          ]
+        }
+      ]
+    };
+
+    expect(
+      buildInterruptedScreenRecordingRecoveries({
+        persisted,
+        resumeState,
+        status: { active: false },
+        claimedRecordingId: undefined
+      })
+    ).toEqual([
+      expect.objectContaining({
+        recordingId: persisted.recordingId,
+        mime: "video/webm",
+        sizeBytes: 24,
+        chunks: resumeState.screenRecordings[0]?.chunks
+      })
+    ]);
+    expect(
+      buildInterruptedScreenRecordingRecoveries({
+        persisted,
+        resumeState,
+        status: {
+          active: true,
+          recordingId: persisted.recordingId,
+          mime: "video/webm"
+        },
+        claimedRecordingId: persisted.recordingId
+      })
+    ).toEqual([]);
+    expect(
+      buildInterruptedScreenRecordingRecoveries({
+        persisted: undefined,
+        resumeState: { sequenceWatermark: { event: 0, action: 0 }, screenRecordings: [] },
+        status: { active: true, recordingId: "VR-unclaimed", mime: "video/webm" },
+        claimedRecordingId: undefined
+      })
+    ).toEqual([
+      expect.objectContaining({
+        recordingId: "VR-unclaimed",
+        mime: "video/webm",
+        chunks: [],
+        sizeBytes: 0
+      })
+    ]);
+    expect(
+      buildInterruptedScreenRecordingRecoveries({
+        persisted: undefined,
+        resumeState: { sequenceWatermark: { event: 3, action: 0 }, screenRecordings: [] },
+        status: { active: false },
+        claimedRecordingId: undefined
+      })
+    ).toEqual([]);
+  });
+});
+
+describe("MV3 cleanup scheduling", () => {
+  it("retains a failed stopping recovery and removes it after a bounded retry succeeds", async () => {
+    let now = 1_000;
+    let purgeShouldFail = true;
+    const tombstone = createRuntime("stopping") as Extract<PersistedRuntime, { state: "stopping" }>;
+    const retained = new Map([[tombstone.sid, tombstone]]);
+    const scheduler = new RuntimeCleanupScheduler({
+      alarms: {
+        create: vi.fn(),
+        clear: vi.fn().mockResolvedValue(true)
+      },
+      now: () => now,
+      setTimer: () => 1 as unknown as ReturnType<typeof setTimeout>,
+      retryDelayMs: 100,
+      onDue: async (sid) => {
+        const pending = retained.get(sid);
+
+        if (!pending) {
+          return;
+        }
+
+        await recoverStoppingRuntimeFailClosed({
+          getScreenRecordingStatus: () => ({ active: false }),
+          stopScreenRecording: vi.fn(),
+          purge: async () => {
+            if (purgeShouldFail) {
+              throw new Error("purge failed");
+            }
+          }
+        });
+        retained.delete(sid);
+      }
+    });
+    const alarmName = createRuntimeCleanupAlarmName(tombstone.sid);
+
+    await scheduler.schedule(tombstone.sid, 1_100);
+    now = 1_101;
+    await expect(scheduler.handleAlarm(alarmName)).rejects.toThrow(/purge failed/);
+    expect(retained.has(tombstone.sid)).toBe(true);
+
+    purgeShouldFail = false;
+    now = 1_202;
+    await scheduler.handleAlarm(alarmName);
+    expect(retained.has(tombstone.sid)).toBe(false);
+  });
+
+  it("arms chrome.alarms plus a timer and purges once after restart alarm delivery", async () => {
+    let now = 1_000;
+    let timerCallback: (() => void) | undefined;
+    const alarmCreate = vi.fn();
+    const alarmClear = vi.fn().mockResolvedValue(true);
+    const onDue = vi.fn();
+    const scheduler = new RuntimeCleanupScheduler({
+      alarms: { create: alarmCreate, clear: alarmClear },
+      now: () => now,
+      setTimer: (callback) => {
+        timerCallback = callback;
+        return 1 as unknown as ReturnType<typeof setTimeout>;
+      },
+      clearTimer: vi.fn(),
+      onDue
+    });
+
+    await scheduler.schedule("S-1767225600001-stopped", 2_000);
+    expect(alarmCreate).toHaveBeenCalledWith(
+      createRuntimeCleanupAlarmName("S-1767225600001-stopped"),
+      { when: 2_000 }
+    );
+    expect(timerCallback).toBeTypeOf("function");
+
+    now = 2_001;
+    await scheduler.handleAlarm(createRuntimeCleanupAlarmName("S-1767225600001-stopped"));
+    timerCallback?.();
+    await Promise.resolve();
+    expect(onDue).toHaveBeenCalledTimes(1);
+  });
+
+  it("immediately purges an already-expired restored session", async () => {
+    const sessions = new Map([["S-1767225600001-expired", { stopped: true }]]);
+    const onDue = vi.fn((sid: string) => {
+      sessions.delete(sid);
+    });
+    const scheduler = new RuntimeCleanupScheduler({ now: () => 5_000, onDue });
+
+    await scheduler.schedule("S-1767225600001-expired", 4_999);
+    expect(onDue).toHaveBeenCalledOnce();
+    expect(sessions.has("S-1767225600001-expired")).toBe(false);
+  });
+
+  it("re-arms cleanup after a transient due-time flush failure", async () => {
+    let now = 5_000;
+    const sessions = new Set(["S-1767225600001-retry"]);
+    const alarmCreate = vi.fn();
+    const onDue = vi
+      .fn<(sid: string) => Promise<void>>()
+      .mockRejectedValueOnce(new Error("transient flush failure"))
+      .mockImplementationOnce(async (sid) => {
+        sessions.delete(sid);
+      });
+    const scheduler = new RuntimeCleanupScheduler({
+      alarms: { create: alarmCreate, clear: vi.fn().mockResolvedValue(true) },
+      now: () => now,
+      retryDelayMs: 100,
+      setTimer: () => 1 as unknown as ReturnType<typeof setTimeout>,
+      onDue
+    });
+
+    await expect(scheduler.schedule("S-1767225600001-retry", 4_999)).rejects.toThrow(
+      "transient flush failure"
+    );
+    expect(sessions.has("S-1767225600001-retry")).toBe(true);
+    expect(scheduler.getDeadline("S-1767225600001-retry")).toBe(5_100);
+    expect(alarmCreate).toHaveBeenLastCalledWith(
+      createRuntimeCleanupAlarmName("S-1767225600001-retry"),
+      { when: 5_100 }
+    );
+
+    now = 5_101;
+    await scheduler.handleAlarm(createRuntimeCleanupAlarmName("S-1767225600001-retry"));
+    expect(sessions.has("S-1767225600001-retry")).toBe(false);
+    expect(onDue).toHaveBeenCalledTimes(2);
+  });
+});
+
+describe("active runtime restoration transaction", () => {
+  it("keeps a survived recording provisional until the final activation commit", async () => {
+    const order: string[] = [];
+    const runtime = {
+      activationState: "starting" as const,
+      captureFence: createVolatileCaptureFence(),
+      stopping: false,
+      screenRecording: {
+        provisional: isRuntimeActivationProvisional("starting")
+      }
+    };
+    const cleanupRuntime = vi.fn();
+    const result = await runActiveRuntimeRestorationTransaction({
+      startPipeline: () => {
+        order.push("pipeline");
+      },
+      prepareRuntime: () => {
+        order.push("prepare");
+        return runtime;
+      },
+      registerRuntime: () => {
+        order.push("register");
+      },
+      completeRuntime: () => {
+        expect(isRuntimeCaptureAdmitted(runtime.activationState)).toBe(false);
+        expect(runtime.screenRecording.provisional).toBe(true);
+        order.push("interrupted-events-flushed");
+      },
+      activateRuntime: () => {
+        commitRestoredRuntimeActivation(runtime, {
+          currentByTab: true,
+          currentBySid: true
+        });
+        expect(isRuntimeCaptureAdmitted(runtime.activationState)).toBe(true);
+        expect(runtime.screenRecording.provisional).toBe(false);
+        order.push("commit-active");
+      },
+      cleanupPipeline: vi.fn(),
+      cleanupRuntime
+    });
+
+    expect(result).toEqual({ kind: "restored", runtime });
+    order.push("notify-active");
+    expect(order).toEqual([
+      "pipeline",
+      "prepare",
+      "register",
+      "interrupted-events-flushed",
+      "commit-active",
+      "notify-active"
+    ]);
+    expect(cleanupRuntime).not.toHaveBeenCalled();
+  });
+
+  it.each(["start", "resume"] as const)(
+    "purges pipeline-only state when %s fails before runtime registration",
+    async (fault) => {
+      const cleanupPipeline = vi.fn(async () => undefined);
+      const cleanupRuntime = vi.fn(async () => undefined);
+      const result = await runActiveRuntimeRestorationTransaction({
+        startPipeline: async () => {
+          if (fault === "start") {
+            throw new Error("start failed after pipeline creation");
+          }
+        },
+        prepareRuntime: async () => {
+          throw new Error("resume state failed");
+        },
+        registerRuntime: vi.fn(),
+        completeRuntime: vi.fn(),
+        activateRuntime: vi.fn(),
+        cleanupPipeline,
+        cleanupRuntime
+      });
+
+      expect(result).toMatchObject({ kind: "failed-cleaned", phase: "pipeline" });
+      expect(cleanupPipeline).toHaveBeenCalledOnce();
+      expect(cleanupRuntime).not.toHaveBeenCalled();
+    }
+  );
+
+  it.each(["content", "cdp", "recording", "flush"] as const)(
+    "removes registered state when the %s restoration stage fails",
+    async (fault) => {
+      const runtime = { sid: "failed", tabId: 7 };
+      const other = { sid: "other", tabId: 8 };
+      const sessionsByTab = new Map([[other.tabId, other] as const]);
+      const sessionsBySid = new Map([[other.sid, other] as const]);
+      const cleanupPipeline = vi.fn(async () => undefined);
+      const cleanupRuntime = vi.fn(async (failed: typeof runtime) => {
+        deleteMapEntryIfSame(sessionsByTab, failed.tabId, failed);
+        deleteMapEntryIfSame(sessionsBySid, failed.sid, failed);
+      });
+      const activateRuntime = vi.fn();
+      const stages = ["content", "cdp", "recording", "flush"] as const;
+      const result = await runActiveRuntimeRestorationTransaction({
+        startPipeline: vi.fn(async () => undefined),
+        prepareRuntime: vi.fn(async () => runtime),
+        registerRuntime: (restored) => {
+          sessionsByTab.set(restored.tabId, restored);
+          sessionsBySid.set(restored.sid, restored);
+        },
+        completeRuntime: async () => {
+          for (const stage of stages) {
+            if (stage === fault) {
+              throw new Error(`${stage} failed`);
+            }
+          }
+        },
+        activateRuntime,
+        cleanupPipeline,
+        cleanupRuntime
+      });
+
+      expect(result).toMatchObject({ kind: "failed-cleaned", phase: "runtime" });
+      expect(cleanupRuntime).toHaveBeenCalledOnce();
+      expect(cleanupPipeline).not.toHaveBeenCalled();
+      expect(activateRuntime).not.toHaveBeenCalled();
+      expect(sessionsByTab.has(runtime.tabId)).toBe(false);
+      expect(sessionsBySid.has(runtime.sid)).toBe(false);
+      expect(sessionsByTab.get(other.tabId)).toBe(other);
+      expect(sessionsBySid.get(other.sid)).toBe(other);
+    }
+  );
+
+  it("cleans exactly once without publishing when the activation identity is lost", async () => {
+    const runtime = {
+      activationState: "starting" as const,
+      captureFence: createVolatileCaptureFence(),
+      stopping: false,
+      screenRecording: { provisional: true }
+    };
+    const publishActive = vi.fn();
+    const cleanupRuntime = vi.fn();
+    const result = await runActiveRuntimeRestorationTransaction({
+      startPipeline: vi.fn(),
+      prepareRuntime: () => runtime,
+      registerRuntime: vi.fn(),
+      completeRuntime: vi.fn(),
+      activateRuntime: () => {
+        commitRestoredRuntimeActivation(runtime, {
+          currentByTab: true,
+          currentBySid: false
+        });
+      },
+      cleanupPipeline: vi.fn(),
+      cleanupRuntime
+    });
+
+    if (result.kind === "restored") {
+      publishActive();
+    }
+
+    expect(result).toMatchObject({ kind: "failed-cleaned", phase: "runtime" });
+    expect(runtime.activationState).toBe("starting");
+    expect(runtime.screenRecording.provisional).toBe(true);
+    expect(cleanupRuntime).toHaveBeenCalledOnce();
+    expect(publishActive).not.toHaveBeenCalled();
+  });
+
+  it.each([
+    ["tab registry", { currentByTab: false, currentBySid: true }, false, "starting"],
+    ["sid registry", { currentByTab: true, currentBySid: false }, false, "starting"],
+    ["capture fence", { currentByTab: true, currentBySid: true }, true, "starting"],
+    ["activation state", { currentByTab: true, currentBySid: true }, false, "active"]
+  ] as const)("rejects activation after losing the %s invariant", (_, identity, blocked, state) => {
+    const runtime: {
+      activationState: "starting" | "active";
+      captureFence: { blocked: boolean };
+      stopping: boolean;
+      screenRecording: { provisional: boolean };
+    } = {
+      activationState: state,
+      captureFence: createVolatileCaptureFence(blocked),
+      stopping: false,
+      screenRecording: { provisional: true }
+    };
+
+    expect(() => commitRestoredRuntimeActivation(runtime, identity)).toThrow(
+      "lost its provisional activation identity"
+    );
+    expect(runtime.activationState).toBe(state);
+    expect(runtime.screenRecording.provisional).toBe(true);
+  });
+
+  it("reports purge failure without replaying restoration cleanup", async () => {
+    const purgeError = new Error("purge failed");
+    const cleanupPipeline = vi.fn(async () => {
+      throw purgeError;
+    });
+    const result = await runActiveRuntimeRestorationTransaction({
+      startPipeline: vi.fn(async () => undefined),
+      prepareRuntime: async () => {
+        throw new Error("resume failed");
+      },
+      registerRuntime: vi.fn(),
+      completeRuntime: vi.fn(),
+      activateRuntime: vi.fn(),
+      cleanupPipeline,
+      cleanupRuntime: vi.fn()
+    });
+
+    expect(result).toMatchObject({
+      kind: "failed-cleaned",
+      phase: "pipeline",
+      cleanupError: purgeError
+    });
+    expect(cleanupPipeline).toHaveBeenCalledOnce();
+  });
+
+  it("persists stopping before cleanup and clears it only after purge", async () => {
+    const order: string[] = [];
+
+    await runDurableFailedRuntimeCleanup({
+      persistStopping: () => {
+        order.push("stopping");
+      },
+      cleanup: () => {
+        order.push("purge");
+      },
+      clearStopping: () => {
+        order.push("clear");
+      }
+    });
+
+    expect(order).toEqual(["stopping", "purge", "clear"]);
+  });
+
+  it.each(["checkpoint", "purge", "clear"] as const)(
+    "preserves the durable cleanup boundary when %s fails",
+    async (fault) => {
+      const order: string[] = [];
+      const task = runDurableFailedRuntimeCleanup({
+        persistStopping: () => {
+          order.push("stopping");
+          if (fault === "checkpoint") {
+            throw new Error("checkpoint failed");
+          }
+        },
+        cleanup: () => {
+          order.push("purge");
+          if (fault === "purge") {
+            throw new Error("purge failed");
+          }
+        },
+        clearStopping: () => {
+          order.push("clear");
+          if (fault === "clear") {
+            throw new Error("clear failed");
+          }
+        }
+      });
+
+      await expect(task).rejects.toThrow(`${fault} failed`);
+      expect(order).toEqual(
+        fault === "checkpoint"
+          ? ["stopping"]
+          : fault === "purge"
+            ? ["stopping", "purge"]
+            : ["stopping", "purge", "clear"]
+      );
+    }
+  );
+
+  it("keeps a failed active restoration as stopping after a non-purge pipeline close", async () => {
+    const order: string[] = [];
+    let durableState: "active" | "stopping" = "active";
+    const closePipeline = vi.fn(async (options: { purge: boolean }) => {
+      order.push(`close:${options.purge ? "purge" : "retain"}`);
+    });
+
+    await runDurableFailedRuntimeRetention({
+      persistStopping: () => {
+        order.push("stopping");
+        durableState = "stopping";
+      },
+      retain: () => closePipeline({ purge: false })
+    });
+
+    expect(order).toEqual(["stopping", "close:retain"]);
+    expect(durableState).toBe("stopping");
+    expect(closePipeline).toHaveBeenCalledWith({ purge: false });
+  });
+
+  it("withholds readiness across two failed recovery checkpoints and never replays active restore", async () => {
+    let restoreCalls = 0;
+    let failClosedCalls = 0;
+    let ready = false;
+    let durableState: "active" | "stopping" = "active";
+    const retryResolvers: Array<() => void> = [];
+    const task = establishDurableRuntimeRestorationReadiness({
+      restore: () => {
+        restoreCalls += 1;
+        throw new Error("active restore crashed");
+      },
+      failClosed: () => {
+        failClosedCalls += 1;
+        if (failClosedCalls <= 2) {
+          throw new Error(`checkpoint ${failClosedCalls} failed`);
+        }
+        durableState = "stopping";
+      },
+      waitForRetry: () =>
+        new Promise<void>((resolve) => {
+          retryResolvers.push(resolve);
+        }),
+      markReady: () => {
+        ready = true;
+      }
+    });
+
+    await vi.waitFor(() => expect(failClosedCalls).toBe(1));
+    expect(ready).toBe(false);
+    expect(durableState).toBe("active");
+    expect(restoreCalls).toBe(1);
+
+    retryResolvers.shift()!();
+    await vi.waitFor(() => expect(failClosedCalls).toBe(2));
+    expect(ready).toBe(false);
+    expect(durableState).toBe("active");
+    expect(restoreCalls).toBe(1);
+
+    retryResolvers.shift()!();
+    await task;
+    expect(failClosedCalls).toBe(3);
+    expect(durableState).toBe("stopping");
+    expect(ready).toBe(true);
+    expect(restoreCalls).toBe(1);
+  });
+
+  it("retries a transient checkpoint read only while no restoration state was acquired", async () => {
+    let restoreCalls = 0;
+    let failClosedCalls = 0;
+    let ready = false;
+    const retry = createDeferred();
+    const task = establishDurableRuntimeRestorationReadiness({
+      restore: () => {
+        restoreCalls += 1;
+        if (restoreCalls === 1) {
+          throw new Error("storage get failed");
+        }
+      },
+      failClosed: () => {
+        failClosedCalls += 1;
+        throw new Error("no durable identities were acquired");
+      },
+      shouldRetryRestore: () => true,
+      waitForRetry: () => retry.promise,
+      markReady: () => {
+        ready = true;
+      }
+    });
+
+    await vi.waitFor(() => expect(failClosedCalls).toBe(1));
+    expect(restoreCalls).toBe(1);
+    expect(ready).toBe(false);
+    retry.resolve();
+    await task;
+    expect(restoreCalls).toBe(2);
+    expect(failClosedCalls).toBe(1);
+    expect(ready).toBe(true);
+  });
+
+  it("requires at least one of two fail-closed checkpoint writes to become durable", async () => {
+    const checkpoint = new DurableRuntimeRecoveryCheckpoint();
+
+    expect(
+      await checkpoint.attempt(() => Promise.reject(new Error("pre-teardown write failed")))
+    ).toBe(false);
+    expect(
+      await checkpoint.attempt(() => Promise.reject(new Error("post-teardown write failed")))
+    ).toBe(false);
+    expect(() => checkpoint.requirePersisted()).toThrow("no durable recovery checkpoint");
+
+    expect(await checkpoint.attempt(() => undefined)).toBe(true);
+    expect(() => checkpoint.requirePersisted()).not.toThrow();
+  });
+
+  it.each(["checkpoint", "partially-constructed-pipeline"] as const)(
+    "never clears the stopping row when retained restoration fails at %s",
+    async (fault) => {
+      let durableState: "active" | "stopping" = "active";
+      const retain = vi.fn(async () => {
+        throw new Error("pipeline unavailable");
+      });
+      const task = runDurableFailedRuntimeRetention({
+        persistStopping: () => {
+          if (fault === "checkpoint") {
+            throw new Error("checkpoint unavailable");
+          }
+          durableState = "stopping";
+        },
+        retain
+      });
+
+      await expect(task).rejects.toThrow(
+        fault === "checkpoint" ? "checkpoint unavailable" : "pipeline unavailable"
+      );
+      expect(durableState).toBe(fault === "checkpoint" ? "active" : "stopping");
+      expect(retain).toHaveBeenCalledTimes(fault === "checkpoint" ? 0 : 1);
+    }
+  );
+
+  it("does not delete a replacement runtime that won an identity race", () => {
+    const failed = { sid: "same", tabId: 7, generation: 1 };
+    const replacement = { sid: "same", tabId: 7, generation: 2 };
+    const byTab = new Map([[7, replacement]]);
+    const bySid = new Map([["same", replacement]]);
+
+    expect(isMapEntrySame(byTab, failed.tabId, failed)).toBe(false);
+    expect(deleteMapEntryIfSame(byTab, failed.tabId, failed)).toBe(false);
+    expect(deleteMapEntryIfSame(bySid, failed.sid, failed)).toBe(false);
+    expect(byTab.get(7)).toBe(replacement);
+    expect(bySid.get("same")).toBe(replacement);
+  });
+
+  it("disposes runtime listeners before detach can target a same-tab replacement", async () => {
+    const replacement = { tabId: 7, generation: 2 };
+    const byTab = new Map([[7, replacement]]);
+    let detachListenerActive = true;
+    const stopReplacement = vi.fn();
+
+    await disposeListenersBeforeTeardown(
+      [
+        () => {
+          detachListenerActive = false;
+        }
+      ],
+      () => {
+        if (detachListenerActive) {
+          stopReplacement();
+        }
+      }
+    );
+
+    expect(detachListenerActive).toBe(false);
+    expect(stopReplacement).not.toHaveBeenCalled();
+    expect(byTab.get(7)).toBe(replacement);
+  });
+});
+
+describe("runtime start coordination", () => {
+  it("admits capture only after the active commit", () => {
+    expect(isRuntimeCaptureAdmitted("starting")).toBe(false);
+    expect(isRuntimeCaptureAdmitted("active")).toBe(true);
+  });
+
+  it("coalesces only identical concurrent starts and allows a later start", async () => {
+    const coordinator = new RuntimeStartCoordinator();
+    let release!: () => void;
+    const firstStart = vi.fn(
+      async () =>
+        new Promise<void>((resolve) => {
+          release = resolve;
+        })
+    );
+
+    const first = coordinator.run(7, "lite:none:false", firstStart);
+    const duplicate = coordinator.run(7, "lite:none:false", firstStart);
+    await Promise.resolve();
+    expect(firstStart).toHaveBeenCalledOnce();
+    expect(duplicate).toBe(first);
+    release();
+    await first;
+
+    await coordinator.run(
+      7,
+      "lite:none:false",
+      firstStart.mockImplementation(async () => undefined)
+    );
+    expect(firstStart).toHaveBeenCalledTimes(2);
+  });
+
+  it("cancels and serializes a different concurrent start for the same tab", async () => {
+    const coordinator = new RuntimeStartCoordinator();
+    const order: string[] = [];
+    let release!: () => void;
+
+    const first = coordinator.run(7, "lite:none:false", async (token) => {
+      order.push("first:start");
+      await new Promise<void>((resolve) => {
+        release = resolve;
+      });
+      token.assertActive();
+      order.push("first:commit");
+    });
+    await Promise.resolve();
+    const second = coordinator.run(7, "full:both:false", async () => {
+      order.push("second:start");
+    });
+
+    release();
+    const [firstResult, secondResult] = await Promise.allSettled([first, second]);
+
+    expect(firstResult).toMatchObject({
+      status: "rejected",
+      reason: expect.any(RuntimeStartCancelledError)
+    });
+    expect(secondResult).toEqual({ status: "fulfilled", value: undefined });
+    expect(order).toEqual(["first:start", "second:start"]);
+  });
+
+  it("cancels an in-flight start synchronously for stop or tab removal", async () => {
+    const coordinator = new RuntimeStartCoordinator();
+    let release!: () => void;
+    const task = coordinator.run(7, "lite:none:true", async (token) => {
+      await new Promise<void>((resolve) => {
+        release = resolve;
+      });
+      token.assertActive();
+    });
+    await Promise.resolve();
+
+    coordinator.cancel(7);
+    release();
+
+    await expect(task).rejects.toBeInstanceOf(RuntimeStartCancelledError);
+  });
+});
+
+describe("provisional runtime start transaction", () => {
+  it("starts requested recording before the active commit", async () => {
+    const token = new RuntimeStartToken();
+    const startRecording = vi.fn().mockResolvedValue(undefined);
+    const commit = vi.fn(() => {
+      expect(startRecording).toHaveBeenCalledOnce();
+    });
+
+    await runProvisionalRuntimeStartTransaction({
+      token,
+      checkpointStopping: () => ({ sid: "new" }),
+      startPipeline: () => undefined,
+      stopExisting: () => undefined,
+      prepareRuntime: () => ({ sid: "new" }),
+      registerRuntime: () => undefined,
+      completeRuntime: startRecording,
+      commitRuntime: commit,
+      cleanupPipeline: () => undefined,
+      cleanupRuntime: () => undefined
+    });
+
+    expect(commit).toHaveBeenCalledOnce();
+  });
+
+  it("rolls back instead of committing when requested recording fails", async () => {
+    const token = new RuntimeStartToken();
+    const commit = vi.fn();
+    const cleanupRuntime = vi.fn();
+
+    await expect(
+      runProvisionalRuntimeStartTransaction({
+        token,
+        checkpointStopping: () => ({ sid: "new" }),
+        startPipeline: () => undefined,
+        stopExisting: () => undefined,
+        prepareRuntime: () => ({ sid: "new" }),
+        registerRuntime: () => undefined,
+        completeRuntime: () => {
+          throw new Error("screen recording failed");
+        },
+        commitRuntime: commit,
+        cleanupPipeline: () => undefined,
+        cleanupRuntime
+      })
+    ).rejects.toThrow("screen recording failed");
+
+    expect(commit).not.toHaveBeenCalled();
+    expect(cleanupRuntime).toHaveBeenCalledOnce();
+  });
+
+  it("rolls back a registered runtime when reload fails", async () => {
+    const token = new RuntimeStartToken();
+    const commit = vi.fn();
+    const cleanupRuntime = vi.fn();
+
+    await expect(
+      runProvisionalRuntimeStartTransaction({
+        token,
+        checkpointStopping: () => ({ sid: "new" }),
+        startPipeline: () => undefined,
+        stopExisting: () => undefined,
+        prepareRuntime: () => ({ sid: "new" }),
+        registerRuntime: () => undefined,
+        completeRuntime: async () => {
+          await Promise.resolve();
+          throw new Error("reload failed");
+        },
+        commitRuntime: commit,
+        cleanupPipeline: () => undefined,
+        cleanupRuntime
+      })
+    ).rejects.toThrow("reload failed");
+
+    expect(commit).not.toHaveBeenCalled();
+    expect(cleanupRuntime).toHaveBeenCalledOnce();
+  });
+
+  it("does not run destructive cleanup when the durable checkpoint itself fails", async () => {
+    const token = new RuntimeStartToken();
+    const cleanupPipeline = vi.fn();
+    const cleanupRuntime = vi.fn();
+
+    await expect(
+      runProvisionalRuntimeStartTransaction({
+        token,
+        checkpointStopping: () => {
+          throw new Error("checkpoint failed");
+        },
+        startPipeline: () => undefined,
+        stopExisting: () => undefined,
+        prepareRuntime: () => ({ sid: "new" }),
+        registerRuntime: () => undefined,
+        completeRuntime: () => undefined,
+        commitRuntime: () => undefined,
+        cleanupPipeline,
+        cleanupRuntime
+      })
+    ).rejects.toThrow("checkpoint failed");
+
+    expect(cleanupPipeline).not.toHaveBeenCalled();
+    expect(cleanupRuntime).not.toHaveBeenCalled();
+  });
+
+  it("commits active state only after all provisional stages complete", async () => {
+    const order: string[] = [];
+    const runtime = { sid: "new" };
+    const coordinator = new RuntimeStartCoordinator();
+
+    await coordinator.run(7, "lite:none:true", async (token) => {
+      await runProvisionalRuntimeStartTransaction({
+        token,
+        checkpointStopping: () => {
+          order.push("checkpoint");
+          return { sid: "new", state: "stopping" as const };
+        },
+        startPipeline: () => {
+          order.push("pipeline");
+        },
+        stopExisting: () => {
+          order.push("stop-existing");
+        },
+        prepareRuntime: () => {
+          order.push("prepare");
+          return runtime;
+        },
+        registerRuntime: () => {
+          order.push("register");
+        },
+        completeRuntime: () => {
+          order.push("complete");
+        },
+        commitRuntime: () => {
+          order.push("commit-active");
+        },
+        cleanupPipeline: () => {
+          order.push("cleanup-pipeline");
+        },
+        cleanupRuntime: () => {
+          order.push("cleanup-runtime");
+        }
+      });
+    });
+
+    expect(order).toEqual([
+      "checkpoint",
+      "pipeline",
+      "stop-existing",
+      "prepare",
+      "register",
+      "complete",
+      "commit-active"
+    ]);
+  });
+
+  it.each([
+    ["pipeline", "pipeline"],
+    ["stop-existing", "pipeline"],
+    ["prepare", "pipeline"],
+    ["complete", "runtime"],
+    ["commit", "runtime"]
+  ] as const)("cleans the %s failure through the %s path", async (fault, cleanup) => {
+    const calls: string[] = [];
+    const token = new RuntimeStartToken();
+    const fail = (stage: typeof fault) => {
+      if (fault === stage) {
+        throw new Error(`${stage} failed`);
+      }
+    };
+
+    const task = runProvisionalRuntimeStartTransaction({
+      token,
+      checkpointStopping: () => ({ sid: "new" }),
+      startPipeline: () => fail("pipeline"),
+      stopExisting: () => fail("stop-existing"),
+      prepareRuntime: () => {
+        fail("prepare");
+        return { sid: "new" };
+      },
+      registerRuntime: () => undefined,
+      completeRuntime: () => fail("complete"),
+      commitRuntime: () => fail("commit"),
+      cleanupPipeline: () => {
+        calls.push("pipeline");
+      },
+      cleanupRuntime: () => {
+        calls.push("runtime");
+      }
+    });
+
+    await expect(task).rejects.toThrow(`${fault} failed`);
+    expect(calls).toEqual([cleanup]);
+  });
+
+  it("routes cancellation after checkpoint through provisional cleanup", async () => {
+    const coordinator = new RuntimeStartCoordinator();
+    const cleanup = vi.fn();
+
+    const task = coordinator.run(7, "lite:none:false", async (token) => {
+      await runProvisionalRuntimeStartTransaction({
+        token,
+        checkpointStopping: () => ({ sid: "new" }),
+        startPipeline: () => {
+          coordinator.cancel(7);
+        },
+        stopExisting: () => undefined,
+        prepareRuntime: () => ({ sid: "new" }),
+        registerRuntime: () => undefined,
+        completeRuntime: () => undefined,
+        commitRuntime: () => undefined,
+        cleanupPipeline: cleanup,
+        cleanupRuntime: () => undefined
+      });
+    });
+
+    await expect(task).rejects.toBeInstanceOf(RuntimeStartCancelledError);
+    expect(cleanup).toHaveBeenCalledOnce();
+  });
+
+  it("reports both the start and cleanup failures", async () => {
+    const token = new RuntimeStartToken();
+    const task = runProvisionalRuntimeStartTransaction({
+      token,
+      checkpointStopping: () => ({ sid: "new" }),
+      startPipeline: () => {
+        throw new Error("pipeline failed");
+      },
+      stopExisting: () => undefined,
+      prepareRuntime: () => ({ sid: "new" }),
+      registerRuntime: () => undefined,
+      completeRuntime: () => undefined,
+      commitRuntime: () => undefined,
+      cleanupPipeline: () => {
+        throw new Error("cleanup failed");
+      },
+      cleanupRuntime: () => undefined
+    });
+
+    await expect(task).rejects.toMatchObject({
+      name: "AggregateError",
+      errors: [expect.any(Error), expect.any(Error)]
+    });
+  });
+});
diff --git a/apps/extension/src/sw/runtime-state.ts b/apps/extension/src/sw/runtime-state.ts
new file mode 100644
index 0000000..9b05d93
--- /dev/null
+++ b/apps/extension/src/sw/runtime-state.ts
@@ -0,0 +1,1552 @@
+import type { PipelineResumeState } from "@webblackbox/pipeline";
+import {
+  evaluateCaptureScope,
+  recorderConfigSchema,
+  sanitizeUrlForPrivacy,
+  type CaptureMode,
+  type RecorderConfig
+} from "@webblackbox/protocol";
+
+export const RUNTIME_STATE_SCHEMA_VERSION = 1;
+export const RUNTIME_CLEANUP_ALARM_PREFIX = "webblackbox.runtime.cleanup:";
+
+export const MAX_PERSISTED_RUNTIME_SESSIONS = 512;
+const MAX_TIMER_DELAY_MS = 2_147_000_000;
+const MAX_SCREEN_RECORDING_CHUNKS = 500_000;
+const SESSION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+
+export type PersistedRuntimeCounters = {
+  recorderEventSequence: number;
+  recorderActionSequence: number;
+  eventCount: number;
+  errorCount: number;
+  sizeBytes: number;
+  budgetAlertCount: number;
+  droppedBestEffortTasks: number;
+  responseBodyCaptures: number;
+  networkTotal: number;
+  networkFailed: number;
+};
+
+export type PersistedScreenRecording = {
+  recordingId: string;
+  startedAt: number;
+  startedMono: number;
+  mime: string;
+  width?: number;
+  height?: number;
+  frameRate?: number;
+  chunkCount: number;
+  sizeBytes: number;
+};
+
+type PersistedRuntimeBase = {
+  sid: string;
+  tabId: number;
+  mode: CaptureMode;
+  url: string;
+  title?: string;
+  tags: string[];
+  note?: string;
+  config: RecorderConfig;
+  startedAt: number;
+  counters: PersistedRuntimeCounters;
+  screenRecording?: PersistedScreenRecording;
+};
+
+export type PersistedActiveRuntime = PersistedRuntimeBase & {
+  state: "active";
+};
+
+export type PersistedStoppingRuntime = PersistedRuntimeBase & {
+  state: "stopping";
+  stopRequestedAt: number;
+  cleanupDeadline: number;
+};
+
+export type PersistedStoppedRuntime = PersistedRuntimeBase & {
+  state: "stopped";
+  stoppedAt: number;
+  cleanupDeadline: number;
+};
+
+export type PersistedRuntime =
+  | PersistedActiveRuntime
+  | PersistedStoppingRuntime
+  | PersistedStoppedRuntime;
+
+export type RuntimeStateSnapshot = {
+  schemaVersion: typeof RUNTIME_STATE_SCHEMA_VERSION;
+  savedAt: number;
+  sessions: PersistedRuntime[];
+};
+
+export type ActiveRuntimeRestorationDecision =
+  | { allowed: true; captureUrl: string; sanitizedUrl: string }
+  | { allowed: false; reason: string };
+
+export type RuntimeRestorationPlan =
+  | { kind: "resume-active"; runtime: PersistedActiveRuntime }
+  | { kind: "finalize-stopping"; runtime: PersistedStoppingRuntime }
+  | { kind: "retain-stopped"; runtime: PersistedStoppedRuntime };
+
+export type PersistedRuntimeIdentity = {
+  sid: string;
+  tabId: number;
+  startedAt: number;
+};
+
+export type RuntimeCleanupAlarmApi = {
+  create(name: string, alarmInfo: { when: number }): void | Promise<void>;
+  clear(name: string): boolean | Promise<boolean>;
+};
+
+export type RuntimeSequenceWatermark = {
+  event: number;
+  action: number;
+};
+
+export type RuntimeScreenRecordingChunkReference = {
+  index: number;
+  hash: string;
+  size?: number;
+};
+
+export type RuntimeOffscreenScreenRecordingStatus =
+  | { active: false }
+  | {
+      active: true;
+      recordingId: string;
+      mime: string;
+      quiescedForStop?: boolean;
+      width?: number;
+      height?: number;
+      frameRate?: number;
+    };
+
+export type InterruptedScreenRecordingRecovery = {
+  recordingId: string;
+  mime: string;
+  chunks: readonly RuntimeScreenRecordingChunkReference[];
+  sizeBytes: number;
+  startedAt?: number;
+  width?: number;
+  height?: number;
+  frameRate?: number;
+};
+
+export type RuntimeCleanupSchedulerOptions = {
+  alarms?: RuntimeCleanupAlarmApi;
+  now?: () => number;
+  setTimer?: (callback: () => void, delayMs: number) => ReturnType<typeof setTimeout>;
+  clearTimer?: (timer: ReturnType<typeof setTimeout>) => void;
+  retryDelayMs?: number;
+  onDue: (sid: string) => void | Promise<void>;
+};
+
+export type VolatileCaptureFence = {
+  blocked: boolean;
+};
+
+export type RuntimeActivationState = "starting" | "active";
+
+export function isRuntimeCaptureAdmitted(state: RuntimeActivationState): boolean {
+  return state === "active";
+}
+
+export function isRuntimeActivationProvisional(state: RuntimeActivationState): boolean {
+  return state === "starting";
+}
+
+export type RestoredRuntimeActivationTarget = {
+  activationState: RuntimeActivationState;
+  captureFence: VolatileCaptureFence;
+  stopping: boolean;
+  stoppedAt?: number;
+  screenRecording: { provisional: boolean } | null;
+};
+
+/**
+ * Commits a restored runtime only while both registries still name the same
+ * provisional identity. The validation and mutation are synchronous so no
+ * event can observe an active runtime with a provisional recording resource.
+ */
+export function commitRestoredRuntimeActivation(
+  runtime: RestoredRuntimeActivationTarget,
+  identity: Readonly<{ currentByTab: boolean; currentBySid: boolean }>
+): void {
+  if (
+    !identity.currentByTab ||
+    !identity.currentBySid ||
+    !isVolatileCaptureOpen(runtime.captureFence) ||
+    runtime.activationState !== "starting" ||
+    runtime.stopping ||
+    runtime.stoppedAt !== undefined ||
+    (runtime.screenRecording !== null && !runtime.screenRecording.provisional)
+  ) {
+    throw new Error("The restoring runtime lost its provisional activation identity.");
+  }
+
+  runtime.activationState = "active";
+
+  if (runtime.screenRecording) {
+    runtime.screenRecording.provisional = false;
+  }
+}
+
+export type DurableRuntimeStopWorkflowOptions = {
+  captureFence: VolatileCaptureFence;
+  persistStopping: () => void | Promise<void>;
+  teardownSteps: ReadonlyArray<() => void | Promise<void>>;
+  persistStopped: () => void | Promise<void>;
+};
+
+export type DurableStopTombstoneOptions = {
+  persist: () => void | Promise<void>;
+  activate: () => void;
+};
+
+export type StoppingRuntimeRecoveryOptions = {
+  getScreenRecordingStatus: () =>
+    | RuntimeOffscreenScreenRecordingStatus
+    | Promise<RuntimeOffscreenScreenRecordingStatus>;
+  stopScreenRecording: (
+    status: Extract<RuntimeOffscreenScreenRecordingStatus, { active: true }>
+  ) => void | Promise<void>;
+  purge: () => void | Promise<void>;
+};
+
+export type StoppingRuntimeRetentionRecoveryOptions = {
+  getScreenRecordingStatus: () =>
+    | RuntimeOffscreenScreenRecordingStatus
+    | Promise<RuntimeOffscreenScreenRecordingStatus>;
+  claimRuntime?: (status: RuntimeOffscreenScreenRecordingStatus) => void | Promise<void>;
+  stopScreenRecording: (
+    status: Extract<RuntimeOffscreenScreenRecordingStatus, { active: true }>
+  ) => void | Promise<void>;
+  retain: () => void | Promise<void>;
+  releaseRuntimeClaim?: (status: RuntimeOffscreenScreenRecordingStatus) => void | Promise<void>;
+};
+
+export type ActiveRuntimeRestorationTransactionOptions<TRuntime extends object> = {
+  startPipeline: () => void | Promise<void>;
+  prepareRuntime: () => TRuntime | Promise<TRuntime>;
+  registerRuntime: (runtime: TRuntime) => void;
+  completeRuntime: (runtime: TRuntime) => void | Promise<void>;
+  activateRuntime: (runtime: TRuntime) => void;
+  cleanupPipeline: () => void | Promise<void>;
+  cleanupRuntime: (runtime: TRuntime) => void | Promise<void>;
+};
+
+export type ActiveRuntimeRestorationTransactionResult<TRuntime extends object> =
+  | Readonly<{ kind: "restored"; runtime: TRuntime }>
+  | Readonly<{
+      kind: "failed-cleaned";
+      phase: "pipeline" | "runtime";
+      error: unknown;
+      cleanupError?: unknown;
+    }>;
+
+export type DurableFailedRuntimeCleanupOptions = {
+  persistStopping: () => void | Promise<void>;
+  cleanup: () => void | Promise<void>;
+  clearStopping: () => void | Promise<void>;
+};
+
+export type DurableFailedRuntimeRetentionOptions = {
+  persistStopping: () => void | Promise<void>;
+  retain: () => void | Promise<void>;
+};
+
+export type DurableRuntimeRestorationReadinessOptions = {
+  restore: () => void | Promise<void>;
+  failClosed: () => void | Promise<void>;
+  waitForRetry: () => void | Promise<void>;
+  markReady: () => void;
+  shouldRetryRestore?: () => boolean;
+  onRestoreFailure?: (error: unknown) => void;
+  onFailClosedRetry?: (error: unknown) => void;
+};
+
+/** Tracks multiple checkpoint opportunities separated by teardown work and
+ * rejects readiness unless at least one of them reached durable storage. */
+export class DurableRuntimeRecoveryCheckpoint {
+  private persisted = false;
+
+  private readonly errors: unknown[] = [];
+
+  public async attempt(persist: () => void | Promise<void>): Promise<boolean> {
+    try {
+      await persist();
+      this.persisted = true;
+      return true;
+    } catch (error) {
+      this.errors.push(error);
+      return false;
+    }
+  }
+
+  public requirePersisted(): void {
+    if (!this.persisted) {
+      throw new AggregateError(
+        this.errors,
+        "Fail-closed runtime restoration has no durable recovery checkpoint."
+      );
+    }
+  }
+}
+
+export type ProvisionalRuntimeStartTransactionOptions<TTombstone, TRuntime extends object> = {
+  token: RuntimeStartToken;
+  checkpointStopping: () => TTombstone | Promise<TTombstone>;
+  startPipeline: (tombstone: TTombstone) => void | Promise<void>;
+  stopExisting: (tombstone: TTombstone) => void | Promise<void>;
+  prepareRuntime: (tombstone: TTombstone) => TRuntime | Promise<TRuntime>;
+  registerRuntime: (runtime: TRuntime, tombstone: TTombstone) => void;
+  completeRuntime: (runtime: TRuntime, tombstone: TTombstone) => void | Promise<void>;
+  commitRuntime: (runtime: TRuntime, tombstone: TTombstone) => void | Promise<void>;
+  cleanupPipeline: (tombstone: TTombstone) => void | Promise<void>;
+  cleanupRuntime: (runtime: TRuntime, tombstone: TTombstone) => void | Promise<void>;
+};
+
+export class RuntimeStartCancelledError extends Error {
+  public constructor() {
+    super("Runtime start was cancelled before activation.");
+    this.name = "RuntimeStartCancelledError";
+  }
+}
+
+export class RuntimeStartToken {
+  private cancelled = false;
+
+  public cancel(): void {
+    this.cancelled = true;
+  }
+
+  public isActive(): boolean {
+    return !this.cancelled;
+  }
+
+  public assertActive(): void {
+    if (this.cancelled) {
+      throw new RuntimeStartCancelledError();
+    }
+  }
+}
+
+export class RuntimeStartCoordinator {
+  private readonly inFlight = new Map<
+    number,
+    {
+      key: string;
+      token: RuntimeStartToken;
+      task: Promise<void>;
+    }
+  >();
+
+  public run(
+    tabId: number,
+    key: string,
+    start: (token: RuntimeStartToken) => Promise<void>
+  ): Promise<void> {
+    const existing = this.inFlight.get(tabId);
+
+    if (existing && existing.key === key && existing.token.isActive()) {
+      return existing.task;
+    }
+
+    existing?.token.cancel();
+    const token = new RuntimeStartToken();
+    const preceding = existing?.task.catch(() => undefined) ?? Promise.resolve();
+    const entry = {
+      key,
+      token,
+      task: Promise.resolve() as Promise<void>
+    };
+    const task = preceding
+      .then(() => {
+        token.assertActive();
+        return start(token);
+      })
+      .finally(() => {
+        if (this.inFlight.get(tabId) === entry) {
+          this.inFlight.delete(tabId);
+        }
+      });
+    entry.task = task;
+    this.inFlight.set(tabId, entry);
+    return task;
+  }
+
+  public cancel(tabId: number): void {
+    this.inFlight.get(tabId)?.token.cancel();
+  }
+}
+
+/**
+ * Runs a new-session start behind a durable stopping checkpoint. Anything
+ * after that checkpoint is provisional until the caller's single active
+ * commit succeeds. Failures and cancellation share the same identity-safe
+ * cleanup path, selected by whether a runtime was registered.
+ */
+export async function runProvisionalRuntimeStartTransaction<TTombstone, TRuntime extends object>(
+  options: ProvisionalRuntimeStartTransactionOptions<TTombstone, TRuntime>
+): Promise<TRuntime> {
+  let tombstone: TTombstone | undefined;
+  let runtime: TRuntime | undefined;
+
+  try {
+    options.token.assertActive();
+    tombstone = await options.checkpointStopping();
+    options.token.assertActive();
+    await options.startPipeline(tombstone);
+    options.token.assertActive();
+    await options.stopExisting(tombstone);
+    options.token.assertActive();
+    runtime = await options.prepareRuntime(tombstone);
+    options.token.assertActive();
+    options.registerRuntime(runtime, tombstone);
+    options.token.assertActive();
+    await options.completeRuntime(runtime, tombstone);
+    options.token.assertActive();
+    await options.commitRuntime(runtime, tombstone);
+    return runtime;
+  } catch (error) {
+    if (tombstone === undefined) {
+      throw error;
+    }
+
+    try {
+      if (runtime === undefined) {
+        await options.cleanupPipeline(tombstone);
+      } else {
+        await options.cleanupRuntime(runtime, tombstone);
+      }
+    } catch (cleanupError) {
+      throw new AggregateError(
+        [error, cleanupError],
+        "Runtime start failed and provisional cleanup did not complete."
+      );
+    }
+
+    throw error;
+  }
+}
+
+/**
+ * Treats active-runtime restoration as a two-phase transaction. Once pipeline
+ * creation has been attempted, every failure is paired with exactly one
+ * cleanup path. Callers can therefore distinguish a rejected checkpoint from
+ * a restoration that already removed its partial state and must not be purged
+ * again by an outer recovery loop.
+ */
+export async function runActiveRuntimeRestorationTransaction<TRuntime extends object>(
+  options: ActiveRuntimeRestorationTransactionOptions<TRuntime>
+): Promise<ActiveRuntimeRestorationTransactionResult<TRuntime>> {
+  let runtime: TRuntime | undefined;
+
+  try {
+    await options.startPipeline();
+    runtime = await options.prepareRuntime();
+    options.registerRuntime(runtime);
+    await options.completeRuntime(runtime);
+    options.activateRuntime(runtime);
+    return { kind: "restored", runtime };
+  } catch (error) {
+    try {
+      if (runtime === undefined) {
+        await options.cleanupPipeline();
+      } else {
+        await options.cleanupRuntime(runtime);
+      }
+
+      return {
+        kind: "failed-cleaned",
+        phase: runtime === undefined ? "pipeline" : "runtime",
+        error
+      };
+    } catch (cleanupError) {
+      return {
+        kind: "failed-cleaned",
+        phase: runtime === undefined ? "pipeline" : "runtime",
+        error,
+        cleanupError
+      };
+    }
+  }
+}
+
+/**
+ * Makes the failure tombstone durable before destructive restoration cleanup,
+ * then removes it only after cleanup is complete. A crash at either boundary
+ * therefore resumes as stopping recovery, never as active capture.
+ */
+export async function runDurableFailedRuntimeCleanup(
+  options: DurableFailedRuntimeCleanupOptions
+): Promise<void> {
+  await options.persistStopping();
+  await options.cleanup();
+  await options.clearStopping();
+}
+
+/** Converts a failed active restoration into a durable, non-revivable row
+ * before closing whatever portion of its pipeline was constructed. The
+ * stopping row deliberately remains after `retain` succeeds. */
+export async function runDurableFailedRuntimeRetention(
+  options: DurableFailedRuntimeRetentionOptions
+): Promise<void> {
+  await options.persistStopping();
+  await options.retain();
+}
+
+/** Marks restoration ready only after normal restoration or a fail-closed
+ * recovery checkpoint has become durable. The read phase may be replayed only
+ * while the caller proves that no trusted snapshot or restoration mutation was
+ * acquired; otherwise an old active snapshot is never replayed. */
+export async function establishDurableRuntimeRestorationReadiness(
+  options: DurableRuntimeRestorationReadinessOptions
+): Promise<void> {
+  let attemptRestore = true;
+
+  while (true) {
+    if (attemptRestore) {
+      try {
+        await options.restore();
+        break;
+      } catch (restoreError) {
+        options.onRestoreFailure?.(restoreError);
+      }
+    }
+
+    try {
+      await options.failClosed();
+      break;
+    } catch (recoveryError) {
+      options.onFailClosedRetry?.(recoveryError);
+      await options.waitForRetry();
+      attemptRestore = options.shouldRetryRestore?.() === true;
+    }
+  }
+
+  options.markReady();
+}
+
+/** Prevents teardown callbacks from observing or acting on a replacement runtime. */
+export async function disposeListenersBeforeTeardown(
+  listeners: readonly (() => void)[],
+  teardown: () => void | Promise<void>
+): Promise<void> {
+  for (const dispose of listeners) {
+    dispose();
+  }
+
+  await teardown();
+}
+
+/** Deletes a shared-map entry only when it still names the failed runtime. */
+export function isMapEntrySame<TKey, TValue>(
+  map: ReadonlyMap<TKey, TValue>,
+  key: TKey,
+  expected: TValue
+): boolean {
+  return map.get(key) === expected;
+}
+
+export function deleteMapEntryIfSame<TKey, TValue>(
+  map: Map<TKey, TValue>,
+  key: TKey,
+  expected: TValue
+): boolean {
+  if (!isMapEntrySame(map, key, expected)) {
+    return false;
+  }
+
+  return map.delete(key);
+}
+
+/** Creates the per-runtime fence. Only authoritative session creation may start it open. */
+export function createVolatileCaptureFence(blocked = false): VolatileCaptureFence {
+  return { blocked };
+}
+
+/** Closes capture synchronously. There is intentionally no corresponding reopen operation. */
+export function blockVolatileCapture(fence: VolatileCaptureFence): void {
+  fence.blocked = true;
+}
+
+/** Closes admission and synchronously quiesces volatile producers at stop intent. */
+export function beginVolatileCaptureQuiescence(
+  fence: VolatileCaptureFence,
+  quiesce: () => void
+): void {
+  blockVolatileCapture(fence);
+  quiesce();
+}
+
+export function isVolatileCaptureOpen(fence: VolatileCaptureFence): boolean {
+  return !fence.blocked;
+}
+
+/** Drops the result of work that crosses a fence closure; callers must not publish references. */
+export async function runVolatileCaptureOperation<T>(
+  fence: VolatileCaptureFence,
+  operation: () => Promise<T>
+): Promise<T | null> {
+  if (!isVolatileCaptureOpen(fence)) {
+    return null;
+  }
+
+  const result = await operation();
+  return isVolatileCaptureOpen(fence) ? result : null;
+}
+
+/** Closes capture immediately, then runs no teardown until stop is durably checkpointed. */
+export async function runDurableRuntimeStopWorkflow(
+  options: DurableRuntimeStopWorkflowOptions
+): Promise<void> {
+  blockVolatileCapture(options.captureFence);
+  await options.persistStopping();
+
+  for (const step of options.teardownSteps) {
+    await step();
+  }
+
+  await options.persistStopped();
+}
+
+/** Activates the in-memory stop marker only after its durable write succeeds. */
+export async function persistDurableStopTombstone(
+  options: DurableStopTombstoneOptions
+): Promise<void> {
+  await options.persist();
+  options.activate();
+}
+
+/** Stopping tombstones are never eligible for active capture restoration. */
+export function planRuntimeRestoration(runtime: PersistedRuntime): RuntimeRestorationPlan {
+  if (runtime.state === "active") {
+    return { kind: "resume-active", runtime };
+  }
+
+  if (runtime.state === "stopping") {
+    return { kind: "finalize-stopping", runtime };
+  }
+
+  return { kind: "retain-stopped", runtime };
+}
+
+/**
+ * Finishes volatile recorder ownership before closing the retained pipeline.
+ * A failed status/stop operation deliberately withholds `retain`, leaving the
+ * durable stopping row available for another fail-closed recovery attempt.
+ */
+export async function recoverStoppingRuntimeForRetention(
+  options: StoppingRuntimeRetentionRecoveryOptions
+): Promise<void> {
+  const status = await options.getScreenRecordingStatus();
+  await options.claimRuntime?.(status);
+
+  try {
+    if (status.active) {
+      await options.stopScreenRecording(status);
+    }
+    await options.retain();
+  } finally {
+    await options.releaseRuntimeClaim?.(status);
+  }
+}
+
+/**
+ * Builds a non-revivable snapshot after a global restoration failure. Later
+ * rows for the same sid win, and every active row becomes a stopping row while
+ * existing stopping/stopped retention deadlines remain unchanged.
+ */
+export function preserveRuntimeRowsAfterGlobalRestoreFailure(input: {
+  rows: readonly PersistedRuntime[];
+  failedAt: number;
+  resolveLocalTtlMs: (runtime: PersistedActiveRuntime) => number;
+}): PersistedRuntime[] {
+  if (!isFiniteNonNegativeNumber(input.failedAt)) {
+    throw new Error("Runtime restoration failure time must be finite and non-negative.");
+  }
+
+  const bySid = new Map<string, PersistedRuntime>();
+  for (const runtime of input.rows) {
+    bySid.set(runtime.sid, runtime);
+  }
+
+  return [...bySid.values()].map((runtime) => {
+    if (runtime.state !== "active") {
+      return clonePersistedRuntime(runtime);
+    }
+
+    const localTtlMs = input.resolveLocalTtlMs(runtime);
+    if (!Number.isSafeInteger(localTtlMs) || localTtlMs <= 0) {
+      throw new Error("Runtime restoration recovery TTL must be a positive safe integer.");
+    }
+
+    const stopRequestedAt = Math.max(runtime.startedAt, input.failedAt);
+    return createStoppingRuntimeTombstone(
+      clonePersistedRuntime(runtime) as PersistedActiveRuntime,
+      stopRequestedAt,
+      stopRequestedAt + localTtlMs
+    );
+  });
+}
+
+/** Stops any recorder that survived the worker before purging its stopped session. */
+export async function recoverStoppingRuntimeFailClosed(
+  options: StoppingRuntimeRecoveryOptions
+): Promise<void> {
+  try {
+    const status = await options.getScreenRecordingStatus();
+
+    if (status.active) {
+      await options.stopScreenRecording(status);
+    }
+  } finally {
+    await options.purge();
+  }
+}
+
+/**
+ * Parses the versioned service-worker checkpoint as an all-or-nothing unit.
+ * A single malformed or unexpected field rejects the complete checkpoint so
+ * recovery cannot silently downgrade policy or mix trusted and corrupt rows.
+ */
+export function parseRuntimeStateSnapshot(input: unknown): RuntimeStateSnapshot | null {
+  const record = asStrictRecord(input, ["schemaVersion", "savedAt", "sessions"]);
+
+  if (
+    !record ||
+    record.schemaVersion !== RUNTIME_STATE_SCHEMA_VERSION ||
+    !isFiniteNonNegativeNumber(record.savedAt) ||
+    !Array.isArray(record.sessions) ||
+    record.sessions.length > MAX_PERSISTED_RUNTIME_SESSIONS
+  ) {
+    return null;
+  }
+
+  const sessions: PersistedRuntime[] = [];
+  const seenSids = new Set<string>();
+  const seenActiveTabs = new Set<number>();
+
+  for (const value of record.sessions) {
+    const session = parsePersistedRuntime(value);
+
+    if (!session || seenSids.has(session.sid)) {
+      return null;
+    }
+
+    if (session.state === "active") {
+      if (seenActiveTabs.has(session.tabId)) {
+        return null;
+      }
+      seenActiveTabs.add(session.tabId);
+    }
+
+    seenSids.add(session.sid);
+    sessions.push(session);
+  }
+
+  return {
+    schemaVersion: RUNTIME_STATE_SCHEMA_VERSION,
+    savedAt: record.savedAt,
+    sessions
+  };
+}
+
+export function createRuntimeStateSnapshot(
+  sessions: readonly PersistedRuntime[],
+  savedAt = Date.now()
+): RuntimeStateSnapshot {
+  if (sessions.length > MAX_PERSISTED_RUNTIME_SESSIONS) {
+    throw new Error(
+      `Runtime checkpoint capacity exceeded (${MAX_PERSISTED_RUNTIME_SESSIONS} sessions).`
+    );
+  }
+
+  return {
+    schemaVersion: RUNTIME_STATE_SCHEMA_VERSION,
+    savedAt,
+    sessions: sessions.map(clonePersistedRuntime)
+  };
+}
+
+export function createStoppingRuntimeTombstone(
+  runtime: PersistedActiveRuntime,
+  stopRequestedAt: number,
+  cleanupDeadline: number
+): PersistedStoppingRuntime {
+  return {
+    ...runtime,
+    state: "stopping",
+    stopRequestedAt,
+    cleanupDeadline
+  };
+}
+
+export function createStoppedRuntimeTombstone(
+  runtime: PersistedActiveRuntime | PersistedStoppingRuntime,
+  stoppedAt: number,
+  cleanupDeadline: number
+): PersistedStoppedRuntime {
+  if (runtime.state === "stopping") {
+    const { state, stopRequestedAt, ...base } = runtime;
+    void state;
+    void stopRequestedAt;
+    return {
+      ...base,
+      state: "stopped",
+      stoppedAt,
+      cleanupDeadline
+    };
+  }
+
+  const { state, ...base } = runtime;
+  void state;
+  return {
+    ...base,
+    state: "stopped",
+    stoppedAt,
+    cleanupDeadline
+  };
+}
+
+/** Retained stopping tombstones override same-session rows so later writes cannot revive capture. */
+export function mergeRuntimeStateWithStoppingTombstones(
+  sessions: readonly PersistedRuntime[],
+  tombstones: readonly PersistedStoppingRuntime[]
+): PersistedRuntime[] {
+  const merged = new Map<string, PersistedRuntime>();
+
+  for (const session of sessions) {
+    merged.set(session.sid, session);
+  }
+
+  for (const tombstone of tombstones) {
+    merged.set(tombstone.sid, tombstone);
+  }
+
+  return [...merged.values()];
+}
+
+/** Extracts only non-sensitive identifiers used to fail-closed purge a corrupt checkpoint. */
+export function extractPersistedRuntimeIdentities(input: unknown): PersistedRuntimeIdentity[] {
+  const root = asRecord(input);
+  const values = Array.isArray(input)
+    ? input
+    : root && Array.isArray(root.sessions)
+      ? root.sessions
+      : [];
+  const identities: PersistedRuntimeIdentity[] = [];
+  const seen = new Set<string>();
+
+  for (const value of values) {
+    const record = asRecord(value);
+
+    if (
+      typeof record?.sid !== "string" ||
+      !SESSION_ID_PATTERN.test(record.sid) ||
+      !isNonNegativeSafeInteger(record.tabId) ||
+      !isFiniteNonNegativeNumber(record.startedAt) ||
+      seen.has(record.sid)
+    ) {
+      continue;
+    }
+
+    seen.add(record.sid);
+    identities.push({
+      sid: record.sid,
+      tabId: record.tabId,
+      startedAt: record.startedAt
+    });
+  }
+
+  return identities;
+}
+
+export function evaluateActiveRuntimeRestoration(
+  runtime: PersistedActiveRuntime,
+  tab: { id?: number; url?: string } | null | undefined,
+  now = Date.now()
+): ActiveRuntimeRestorationDecision {
+  if (tab?.id !== runtime.tabId || typeof tab.url !== "string" || tab.url.length === 0) {
+    return { allowed: false, reason: "tab-missing" };
+  }
+
+  const decision = evaluateCaptureScope(runtime.config.capturePolicy, {
+    url: tab.url,
+    tabId: runtime.tabId,
+    frameId: 0,
+    topLevel: true,
+    now
+  });
+
+  if (!decision.allowed) {
+    return { allowed: false, reason: decision.reason };
+  }
+
+  return {
+    allowed: true,
+    captureUrl: tab.url,
+    sanitizedUrl: sanitizeUrlForPrivacy(tab.url)
+  };
+}
+
+/** Never extends an already-persisted retention deadline when policy changes. */
+export function capCleanupDeadline(
+  stoppedAt: number,
+  persistedDeadline: number,
+  localTtlMs: number
+): number {
+  return Math.min(persistedDeadline, stoppedAt + localTtlMs);
+}
+
+export function mergeRuntimeCountersWithSequenceWatermark(
+  counters: PersistedRuntimeCounters,
+  watermark: RuntimeSequenceWatermark
+): PersistedRuntimeCounters {
+  return {
+    ...counters,
+    recorderEventSequence: Math.max(counters.recorderEventSequence, watermark.event),
+    recorderActionSequence: Math.max(counters.recorderActionSequence, watermark.action)
+  };
+}
+
+export function restoreScreenRecordingChunkHashes(
+  persistedChunkCount: number,
+  references: readonly RuntimeScreenRecordingChunkReference[]
+): string[] {
+  if (
+    !Number.isSafeInteger(persistedChunkCount) ||
+    persistedChunkCount < 0 ||
+    persistedChunkCount > MAX_SCREEN_RECORDING_CHUNKS ||
+    references.some(
+      (reference) =>
+        !Number.isSafeInteger(reference.index) ||
+        reference.index < 0 ||
+        reference.index >= MAX_SCREEN_RECORDING_CHUNKS
+    )
+  ) {
+    throw new Error("Invalid screen-recording resume chunk range.");
+  }
+
+  const maxIndex = references.reduce(
+    (maximum, reference) => Math.max(maximum, reference.index),
+    -1
+  );
+  const chunks = new Array<string>(Math.max(persistedChunkCount, maxIndex + 1));
+
+  for (const reference of references) {
+    chunks[reference.index] = reference.hash;
+  }
+
+  return chunks;
+}
+
+/** Pipeline references are the durable source of truth when a debounced MV3 snapshot is ahead. */
+export function deriveDurableScreenRecordingChunkCount(
+  references: readonly RuntimeScreenRecordingChunkReference[]
+): number {
+  if (
+    references.some(
+      (reference) =>
+        !Number.isSafeInteger(reference.index) ||
+        reference.index < 0 ||
+        reference.index >= MAX_SCREEN_RECORDING_CHUNKS
+    )
+  ) {
+    throw new Error("Invalid durable screen-recording chunk range.");
+  }
+
+  return references.reduce((count, reference) => Math.max(count, reference.index + 1), 0);
+}
+
+export function reconcileScreenRecordingResumeState(
+  persisted: PersistedScreenRecording | undefined,
+  durable:
+    | {
+        recordingId: string;
+        chunks: readonly RuntimeScreenRecordingChunkReference[];
+      }
+    | undefined
+): {
+  screenRecording: PersistedScreenRecording | undefined;
+  chunks: readonly RuntimeScreenRecordingChunkReference[] | undefined;
+} {
+  if (!persisted || !durable || durable.recordingId !== persisted.recordingId) {
+    return {
+      screenRecording: undefined,
+      chunks: undefined
+    };
+  }
+
+  return {
+    screenRecording: {
+      ...persisted,
+      chunkCount: deriveDurableScreenRecordingChunkCount(durable.chunks),
+      sizeBytes: deriveDurableScreenRecordingSize(persisted, durable.chunks)
+    },
+    chunks: durable.chunks
+  };
+}
+
+export function normalizeOffscreenScreenRecordingStatus(
+  raw: unknown
+): RuntimeOffscreenScreenRecordingStatus {
+  const row = asRecord(raw);
+
+  if (!row || typeof row.active !== "boolean") {
+    throw new Error("Invalid offscreen screen-recording status.");
+  }
+
+  if (!row.active && Object.keys(row).length === 1) {
+    return { active: false };
+  }
+
+  if (
+    row.active &&
+    Object.keys(row).every((key) =>
+      ["active", "recordingId", "mime", "quiescedForStop", "width", "height", "frameRate"].includes(
+        key
+      )
+    ) &&
+    typeof row.recordingId === "string" &&
+    row.recordingId.length > 0 &&
+    row.recordingId.length <= 256 &&
+    typeof row.mime === "string" &&
+    row.mime.length > 0 &&
+    row.mime.length <= 256 &&
+    (row.quiescedForStop === undefined || typeof row.quiescedForStop === "boolean") &&
+    isOptionalPositiveNumber(row.width) &&
+    isOptionalPositiveNumber(row.height) &&
+    isOptionalPositiveNumber(row.frameRate)
+  ) {
+    return {
+      active: true,
+      recordingId: row.recordingId,
+      mime: row.mime,
+      quiescedForStop: row.quiescedForStop === true,
+      ...(row.width === undefined ? {} : { width: row.width as number }),
+      ...(row.height === undefined ? {} : { height: row.height as number }),
+      ...(row.frameRate === undefined ? {} : { frameRate: row.frameRate as number })
+    };
+  }
+
+  throw new Error("Invalid offscreen screen-recording status.");
+}
+
+export function buildInterruptedScreenRecordingRecoveries(input: {
+  persisted: PersistedScreenRecording | undefined;
+  resumeState: PipelineResumeState;
+  status: RuntimeOffscreenScreenRecordingStatus;
+  claimedRecordingId: string | undefined;
+}): InterruptedScreenRecordingRecovery[] {
+  const recordingIds = new Set(
+    input.resumeState.screenRecordings
+      .map((recording) => recording.recordingId)
+      .filter((recordingId) => recordingId !== input.claimedRecordingId)
+  );
+
+  if (input.persisted && input.persisted.recordingId !== input.claimedRecordingId) {
+    recordingIds.add(input.persisted.recordingId);
+  }
+
+  if (input.status.active && input.status.recordingId !== input.claimedRecordingId) {
+    recordingIds.add(input.status.recordingId);
+  }
+
+  return [...recordingIds]
+    .sort((left, right) => left.localeCompare(right))
+    .map((recordingId) => {
+      const durable = input.resumeState.screenRecordings.find(
+        (recording) => recording.recordingId === recordingId
+      );
+      const persisted = input.persisted?.recordingId === recordingId ? input.persisted : undefined;
+      const status =
+        input.status.active && input.status.recordingId === recordingId ? input.status : undefined;
+      const reconciled = reconcileScreenRecordingResumeState(persisted, durable);
+      const chunks = durable?.chunks ?? [];
+      const knownSize = chunks.reduce(
+        (total, chunk) => Math.min(Number.MAX_SAFE_INTEGER, total + (chunk.size ?? 0)),
+        0
+      );
+
+      return {
+        recordingId,
+        mime: persisted?.mime ?? status?.mime ?? "video/webm",
+        chunks,
+        sizeBytes: reconciled.screenRecording?.sizeBytes ?? knownSize,
+        ...(persisted ? { startedAt: persisted.startedAt } : {}),
+        ...((persisted?.width ?? status?.width)
+          ? { width: persisted?.width ?? status?.width }
+          : {}),
+        ...((persisted?.height ?? status?.height)
+          ? { height: persisted?.height ?? status?.height }
+          : {}),
+        ...((persisted?.frameRate ?? status?.frameRate)
+          ? { frameRate: persisted?.frameRate ?? status?.frameRate }
+          : {})
+      };
+    });
+}
+
+function deriveDurableScreenRecordingSize(
+  persisted: PersistedScreenRecording,
+  references: readonly RuntimeScreenRecordingChunkReference[]
+): number {
+  const knownSize = references.reduce(
+    (total, reference) => Math.min(Number.MAX_SAFE_INTEGER, total + (reference.size ?? 0)),
+    0
+  );
+
+  if (references.every((reference) => reference.size !== undefined)) {
+    return knownSize;
+  }
+
+  const indexes = new Set(references.map((reference) => reference.index));
+  let snapshotMatchesDurablePrefix = references.length === persisted.chunkCount;
+
+  for (let index = 0; snapshotMatchesDurablePrefix && index < persisted.chunkCount; index += 1) {
+    snapshotMatchesDurablePrefix = indexes.has(index);
+  }
+
+  return snapshotMatchesDurablePrefix ? persisted.sizeBytes : knownSize;
+}
+
+export function compactScreenRecordingChunkHashes(chunks: readonly string[]): string[] {
+  return chunks.filter((chunk) => typeof chunk === "string" && chunk.length > 0);
+}
+
+export function createRuntimeCleanupAlarmName(sid: string): string {
+  return `${RUNTIME_CLEANUP_ALARM_PREFIX}${sid}`;
+}
+
+export function parseRuntimeCleanupAlarmName(name: string): string | null {
+  if (!name.startsWith(RUNTIME_CLEANUP_ALARM_PREFIX)) {
+    return null;
+  }
+
+  const sid = name.slice(RUNTIME_CLEANUP_ALARM_PREFIX.length);
+  return SESSION_ID_PATTERN.test(sid) ? sid : null;
+}
+
+/**
+ * Uses both a best-effort in-memory timer and chrome.alarms. The timer gives
+ * prompt cleanup while the alarm is the MV3 restart/suspension-safe source.
+ */
+export class RuntimeCleanupScheduler {
+  private readonly alarms: RuntimeCleanupAlarmApi | undefined;
+  private readonly now: () => number;
+  private readonly setTimer: (
+    callback: () => void,
+    delayMs: number
+  ) => ReturnType<typeof setTimeout>;
+  private readonly clearTimer: (timer: ReturnType<typeof setTimeout>) => void;
+  private readonly onDue: (sid: string) => void | Promise<void>;
+  private readonly retryDelayMs: number;
+  private readonly deadlines = new Map<string, number>();
+  private readonly timers = new Map<string, ReturnType<typeof setTimeout>>();
+  private readonly dueTasks = new Map<string, Promise<void>>();
+
+  public constructor(options: RuntimeCleanupSchedulerOptions) {
+    this.alarms = options.alarms;
+    this.now = options.now ?? Date.now;
+    this.setTimer = options.setTimer ?? setTimeout;
+    this.clearTimer = options.clearTimer ?? clearTimeout;
+    this.onDue = options.onDue;
+    this.retryDelayMs = Math.max(1, Math.round(options.retryDelayMs ?? 60_000));
+  }
+
+  public async schedule(sid: string, deadline: number): Promise<void> {
+    if (!SESSION_ID_PATTERN.test(sid) || !isFiniteNonNegativeNumber(deadline)) {
+      throw new Error("Invalid stopped-session cleanup schedule.");
+    }
+
+    this.cancelTimer(sid);
+    this.deadlines.set(sid, deadline);
+
+    const delay = deadline - this.now();
+
+    if (delay <= 0) {
+      await this.runDue(sid);
+      return;
+    }
+
+    const alarmName = createRuntimeCleanupAlarmName(sid);
+    let alarmError: unknown;
+
+    try {
+      await this.alarms?.clear(alarmName);
+      await this.alarms?.create(alarmName, { when: deadline });
+    } catch (error) {
+      alarmError = error;
+    }
+
+    const timer = this.setTimer(
+      () => {
+        this.timers.delete(sid);
+        void this.handleDueSignal(sid);
+      },
+      Math.min(delay, MAX_TIMER_DELAY_MS)
+    );
+    this.timers.set(sid, timer);
+
+    if (alarmError) {
+      throw alarmError;
+    }
+  }
+
+  public async cancel(sid: string): Promise<void> {
+    this.deadlines.delete(sid);
+    this.cancelTimer(sid);
+    await this.alarms?.clear(createRuntimeCleanupAlarmName(sid));
+  }
+
+  public async handleAlarm(name: string): Promise<boolean> {
+    const sid = parseRuntimeCleanupAlarmName(name);
+
+    if (!sid || !this.deadlines.has(sid)) {
+      return false;
+    }
+
+    await this.handleDueSignal(sid);
+    return true;
+  }
+
+  public getDeadline(sid: string): number | undefined {
+    return this.deadlines.get(sid);
+  }
+
+  private async handleDueSignal(sid: string): Promise<void> {
+    const deadline = this.deadlines.get(sid);
+
+    if (deadline === undefined) {
+      return;
+    }
+
+    if (this.now() < deadline) {
+      await this.schedule(sid, deadline);
+      return;
+    }
+
+    await this.runDue(sid);
+  }
+
+  private async runDue(sid: string): Promise<void> {
+    const existing = this.dueTasks.get(sid);
+
+    if (existing) {
+      await existing;
+      return;
+    }
+
+    this.cancelTimer(sid);
+    const task = Promise.resolve()
+      .then(() => this.onDue(sid))
+      .then(async () => {
+        this.deadlines.delete(sid);
+        this.cancelTimer(sid);
+        await this.alarms?.clear(createRuntimeCleanupAlarmName(sid));
+      })
+      .catch(async (error: unknown) => {
+        if (this.deadlines.has(sid)) {
+          const retryDeadline = this.now() + this.retryDelayMs;
+          this.deadlines.set(sid, retryDeadline);
+          await this.schedule(sid, retryDeadline).catch(() => undefined);
+        }
+
+        throw error;
+      })
+      .finally(() => {
+        this.dueTasks.delete(sid);
+      });
+    this.dueTasks.set(sid, task);
+    await task;
+  }
+
+  private cancelTimer(sid: string): void {
+    const timer = this.timers.get(sid);
+
+    if (timer !== undefined) {
+      this.clearTimer(timer);
+      this.timers.delete(sid);
+    }
+  }
+}
+
+function parsePersistedRuntime(input: unknown): PersistedRuntime | null {
+  const raw = asRecord(input);
+
+  if (raw?.state === "active") {
+    const record = asStrictRecord(input, [
+      "state",
+      "sid",
+      "tabId",
+      "mode",
+      "url",
+      "title",
+      "tags",
+      "note",
+      "config",
+      "startedAt",
+      "counters",
+      "screenRecording"
+    ]);
+    const base = record ? parsePersistedRuntimeBase(record) : null;
+    return base ? { ...base, state: "active" } : null;
+  }
+
+  if (raw?.state === "stopped") {
+    const record = asStrictRecord(input, [
+      "state",
+      "sid",
+      "tabId",
+      "mode",
+      "url",
+      "title",
+      "tags",
+      "note",
+      "config",
+      "startedAt",
+      "counters",
+      "screenRecording",
+      "stoppedAt",
+      "cleanupDeadline"
+    ]);
+    const base = record ? parsePersistedRuntimeBase(record) : null;
+
+    if (
+      !base ||
+      !isFiniteNonNegativeNumber(record?.stoppedAt) ||
+      !isFiniteNonNegativeNumber(record.cleanupDeadline) ||
+      record.stoppedAt < base.startedAt ||
+      record.cleanupDeadline < record.stoppedAt
+    ) {
+      return null;
+    }
+
+    return {
+      ...base,
+      state: "stopped",
+      stoppedAt: record.stoppedAt,
+      cleanupDeadline: record.cleanupDeadline
+    };
+  }
+
+  if (raw?.state === "stopping") {
+    const record = asStrictRecord(input, [
+      "state",
+      "sid",
+      "tabId",
+      "mode",
+      "url",
+      "title",
+      "tags",
+      "note",
+      "config",
+      "startedAt",
+      "counters",
+      "screenRecording",
+      "stopRequestedAt",
+      "cleanupDeadline"
+    ]);
+    const base = record ? parsePersistedRuntimeBase(record) : null;
+
+    if (
+      !base ||
+      !isFiniteNonNegativeNumber(record?.stopRequestedAt) ||
+      !isFiniteNonNegativeNumber(record.cleanupDeadline) ||
+      record.stopRequestedAt < base.startedAt ||
+      record.cleanupDeadline < record.stopRequestedAt
+    ) {
+      return null;
+    }
+
+    return {
+      ...base,
+      state: "stopping",
+      stopRequestedAt: record.stopRequestedAt,
+      cleanupDeadline: record.cleanupDeadline
+    };
+  }
+
+  return null;
+}
+
+function parsePersistedRuntimeBase(record: Record<string, unknown>): PersistedRuntimeBase | null {
+  const parsedConfig = recorderConfigSchema.safeParse(record.config);
+  const mode = record.mode;
+  const config = parsedConfig.success ? parsedConfig.data : null;
+  const counters = parseCounters(record.counters);
+  const screenRecording = parseScreenRecording(record.screenRecording);
+
+  if (
+    typeof record.sid !== "string" ||
+    !SESSION_ID_PATTERN.test(record.sid) ||
+    !isNonNegativeSafeInteger(record.tabId) ||
+    (mode !== "lite" && mode !== "full") ||
+    typeof record.url !== "string" ||
+    record.url.length === 0 ||
+    record.url.length > 4_096 ||
+    (record.title !== undefined &&
+      (typeof record.title !== "string" || record.title.length > 1_024)) ||
+    !isStringList(record.tags, 12, 40) ||
+    (record.note !== undefined && (typeof record.note !== "string" || record.note.length > 500)) ||
+    !config ||
+    config.mode !== mode ||
+    !config.capturePolicy ||
+    config.capturePolicy.scope.tabId !== record.tabId ||
+    JSON.stringify(config.capturePolicy.redaction) !== JSON.stringify(config.redaction) ||
+    !isFiniteNonNegativeNumber(record.startedAt) ||
+    !counters ||
+    (record.screenRecording !== undefined && !screenRecording)
+  ) {
+    return null;
+  }
+
+  return {
+    sid: record.sid,
+    tabId: record.tabId,
+    mode,
+    url: record.url,
+    title: record.title as string | undefined,
+    tags: [...(record.tags as string[])],
+    note: record.note as string | undefined,
+    config,
+    startedAt: record.startedAt,
+    counters,
+    screenRecording: screenRecording ?? undefined
+  };
+}
+
+function parseCounters(input: unknown): PersistedRuntimeCounters | null {
+  const record = asExactRecord(input, [
+    "recorderEventSequence",
+    "recorderActionSequence",
+    "eventCount",
+    "errorCount",
+    "sizeBytes",
+    "budgetAlertCount",
+    "droppedBestEffortTasks",
+    "responseBodyCaptures",
+    "networkTotal",
+    "networkFailed"
+  ]);
+
+  if (!record || !Object.values(record).every(isNonNegativeSafeInteger)) {
+    return null;
+  }
+
+  const counters = record as PersistedRuntimeCounters;
+
+  if (
+    counters.errorCount > counters.eventCount ||
+    counters.networkFailed > counters.networkTotal ||
+    counters.recorderEventSequence < counters.eventCount ||
+    counters.recorderActionSequence > counters.recorderEventSequence
+  ) {
+    return null;
+  }
+
+  return counters;
+}
+
+function parseScreenRecording(input: unknown): PersistedScreenRecording | null {
+  if (input === undefined) {
+    return null;
+  }
+
+  const record = asStrictRecord(input, [
+    "recordingId",
+    "startedAt",
+    "startedMono",
+    "mime",
+    "width",
+    "height",
+    "frameRate",
+    "chunkCount",
+    "sizeBytes"
+  ]);
+
+  if (
+    !record ||
+    typeof record.recordingId !== "string" ||
+    record.recordingId.length === 0 ||
+    record.recordingId.length > 256 ||
+    !isFiniteNonNegativeNumber(record.startedAt) ||
+    !isFiniteNonNegativeNumber(record.startedMono) ||
+    typeof record.mime !== "string" ||
+    record.mime.length === 0 ||
+    record.mime.length > 256 ||
+    !isOptionalPositiveNumber(record.width) ||
+    !isOptionalPositiveNumber(record.height) ||
+    !isOptionalPositiveNumber(record.frameRate) ||
+    !isNonNegativeSafeInteger(record.chunkCount) ||
+    (record.chunkCount as number) > MAX_SCREEN_RECORDING_CHUNKS ||
+    !isNonNegativeSafeInteger(record.sizeBytes)
+  ) {
+    return null;
+  }
+
+  return record as PersistedScreenRecording;
+}
+
+function clonePersistedRuntime(runtime: PersistedRuntime): PersistedRuntime {
+  return structuredClone(runtime);
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  return value !== null && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function asStrictRecord(
+  value: unknown,
+  allowedKeys: readonly string[]
+): Record<string, unknown> | null {
+  const record = asRecord(value);
+
+  if (!record) {
+    return null;
+  }
+
+  const allowed = new Set(allowedKeys);
+
+  return Object.keys(record).every((key) => allowed.has(key)) ? record : null;
+}
+
+function asExactRecord(
+  value: unknown,
+  requiredKeys: readonly string[]
+): Record<string, unknown> | null {
+  const record = asStrictRecord(value, requiredKeys);
+
+  if (!record || requiredKeys.some((key) => !Object.hasOwn(record, key))) {
+    return null;
+  }
+
+  return record;
+}
+
+function isFiniteNonNegativeNumber(value: unknown): value is number {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0;
+}
+
+function isNonNegativeSafeInteger(value: unknown): value is number {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+
+function isOptionalPositiveNumber(value: unknown): boolean {
+  return value === undefined || (typeof value === "number" && Number.isFinite(value) && value > 0);
+}
+
+function isStringList(value: unknown, maxItems: number, maxLength: number): value is string[] {
+  return (
+    Array.isArray(value) &&
+    value.length <= maxItems &&
+    value.every((item) => typeof item === "string" && item.length > 0 && item.length <= maxLength)
+  );
+}
diff --git a/apps/extension/src/sw/same-document-transition-ledger.test.ts b/apps/extension/src/sw/same-document-transition-ledger.test.ts
new file mode 100644
index 0000000..7e0532b
--- /dev/null
+++ b/apps/extension/src/sw/same-document-transition-ledger.test.ts
@@ -0,0 +1,99 @@
+import { describe, expect, it } from "vitest";
+
+import { SameDocumentTransitionLedger } from "./same-document-transition-ledger.js";
+
+const ACTIVATION_A = `a1_${"a".repeat(64)}`;
+const ACTIVATION_B = `a1_${"b".repeat(64)}`;
+
+describe("SameDocumentTransitionLedger", () => {
+  it("chains rapid A-to-B-to-C rotations back to the recoverable A queue", () => {
+    const ledger = new SameDocumentTransitionLedger();
+    const first = ledger.begin({
+      frameId: 0,
+      documentId: "document-1",
+      currentDocumentUrl: "https://app.example/a",
+      nextDocumentUrl: "https://app.example/b",
+      revision: 1,
+      activeActivationId: ACTIVATION_A
+    });
+    const superseding = ledger.begin({
+      frameId: 0,
+      documentId: "document-1",
+      currentDocumentUrl: "https://app.example/a",
+      nextDocumentUrl: "https://app.example/c",
+      revision: 2
+    });
+
+    expect(first).toMatchObject({
+      previousActivationId: ACTIVATION_A,
+      previousDocumentUrl: "https://app.example/a",
+      documentUrl: "https://app.example/b",
+      revision: 1
+    });
+    expect(superseding).toMatchObject({
+      previousActivationId: ACTIVATION_A,
+      previousDocumentUrl: "https://app.example/a",
+      documentUrl: "https://app.example/c",
+      revision: 2
+    });
+  });
+
+  it("prefers a newer active owner and ignores stale completion", () => {
+    const ledger = new SameDocumentTransitionLedger();
+    ledger.begin({
+      frameId: 3,
+      documentId: "document-child",
+      currentDocumentUrl: "https://app.example/a",
+      nextDocumentUrl: "https://app.example/b",
+      revision: 4,
+      activeActivationId: ACTIVATION_A
+    });
+    const current = ledger.begin({
+      frameId: 3,
+      documentId: "document-child",
+      currentDocumentUrl: "https://app.example/b",
+      nextDocumentUrl: "https://app.example/c",
+      revision: 5,
+      activeActivationId: ACTIVATION_B
+    });
+
+    ledger.complete(3, "document-child", 4);
+    expect(
+      ledger.begin({
+        frameId: 3,
+        documentId: "document-child",
+        currentDocumentUrl: "https://app.example/c",
+        nextDocumentUrl: "https://app.example/d",
+        revision: 6
+      })
+    ).toMatchObject({
+      previousActivationId: ACTIVATION_B,
+      previousDocumentUrl: "https://app.example/b",
+      documentUrl: "https://app.example/d"
+    });
+    ledger.complete(3, "document-child", 6);
+    expect(current?.revision).toBe(5);
+  });
+
+  it("drops a superseded transition that returns to the original URL", () => {
+    const ledger = new SameDocumentTransitionLedger();
+    ledger.begin({
+      frameId: 0,
+      documentId: "document-1",
+      currentDocumentUrl: "https://app.example/a",
+      nextDocumentUrl: "https://app.example/b",
+      revision: 1,
+      activeActivationId: ACTIVATION_A
+    });
+
+    expect(
+      ledger.begin({
+        frameId: 0,
+        documentId: "document-1",
+        currentDocumentUrl: "https://app.example/a",
+        nextDocumentUrl: "https://app.example/a",
+        revision: 2
+      })
+    ).toBeUndefined();
+  });
+});
diff --git a/apps/extension/src/sw/same-document-transition-ledger.ts b/apps/extension/src/sw/same-document-transition-ledger.ts
new file mode 100644
index 0000000..6a73227
--- /dev/null
+++ b/apps/extension/src/sw/same-document-transition-ledger.ts
@@ -0,0 +1,100 @@
+import {
+  parseContentActivationId,
+  type ContentActivationId
+} from "../shared/content-activation-protocol.js";
+import type { ContentSameDocumentTransition } from "../shared/messages.js";
+
+export type SameDocumentTransitionInput = Readonly<{
+  frameId: number;
+  documentId: string;
+  currentDocumentUrl: string;
+  nextDocumentUrl: string;
+  revision: number;
+  activeActivationId?: ContentActivationId | string;
+}>;
+
+/** Retains the original recoverable queue owner while async URL rotations supersede one another. */
+export class SameDocumentTransitionLedger {
+  private readonly pending = new Map<string, ContentSameDocumentTransition>();
+
+  public begin(input: SameDocumentTransitionInput): ContentSameDocumentTransition | undefined {
+    assertInput(input);
+    const key = documentKey(input.frameId, input.documentId);
+    const activeActivationId =
+      input.activeActivationId === undefined
+        ? null
+        : parseContentActivationId(input.activeActivationId);
+
+    if (input.activeActivationId !== undefined && !activeActivationId) {
+      throw new Error("Invalid active content activation for a same-document transition.");
+    }
+
+    if (activeActivationId && input.currentDocumentUrl !== input.nextDocumentUrl) {
+      const transition: ContentSameDocumentTransition = {
+        previousActivationId: activeActivationId,
+        frameId: input.frameId,
+        documentId: input.documentId,
+        previousDocumentUrl: input.currentDocumentUrl,
+        documentUrl: input.nextDocumentUrl,
+        revision: input.revision
+      };
+      this.pending.set(key, transition);
+      return transition;
+    }
+
+    const predecessor = this.pending.get(key);
+    if (!predecessor || input.revision <= predecessor.revision) {
+      return undefined;
+    }
+
+    if (predecessor.previousDocumentUrl === input.nextDocumentUrl) {
+      this.pending.delete(key);
+      return undefined;
+    }
+
+    const transition: ContentSameDocumentTransition = {
+      ...predecessor,
+      documentUrl: input.nextDocumentUrl,
+      revision: input.revision
+    };
+    this.pending.set(key, transition);
+    return transition;
+  }
+
+  public complete(frameId: number, documentId: string, revision: number): void {
+    const key = documentKey(frameId, documentId);
+    if (this.pending.get(key)?.revision === revision) {
+      this.pending.delete(key);
+    }
+  }
+
+  public clearFrame(frameId: number): void {
+    for (const [key, transition] of this.pending) {
+      if (transition.frameId === frameId) {
+        this.pending.delete(key);
+      }
+    }
+  }
+
+  public clear(): void {
+    this.pending.clear();
+  }
+}
+
+function assertInput(input: SameDocumentTransitionInput): void {
+  if (
+    !Number.isSafeInteger(input.frameId) ||
+    input.frameId < 0 ||
+    input.documentId.length === 0 ||
+    input.currentDocumentUrl.length === 0 ||
+    input.nextDocumentUrl.length === 0 ||
+    !Number.isSafeInteger(input.revision) ||
+    input.revision <= 0
+  ) {
+    throw new Error("Invalid same-document transition input.");
+  }
+}
+
+function documentKey(frameId: number, documentId: string): string {
+  return JSON.stringify([frameId, documentId]);
+}
diff --git a/apps/extension/src/sw/screen-recording-chunk-write.test.ts b/apps/extension/src/sw/screen-recording-chunk-write.test.ts
new file mode 100644
index 0000000..9f59662
--- /dev/null
+++ b/apps/extension/src/sw/screen-recording-chunk-write.test.ts
@@ -0,0 +1,275 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  ScreenRecordingChunkWriteLedger,
+  ScreenRecordingFinalizationGate,
+  retryScreenRecordingFinalization,
+  runDurableScreenRecordingFinalization
+} from "./screen-recording-chunk-write.js";
+
+const HASH = "a".repeat(64);
+
+describe("ScreenRecordingChunkWriteLedger", () => {
+  it("coalesces concurrent exact retries and commits only after durable flush", async () => {
+    const ledger = new ScreenRecordingChunkWriteLedger();
+    let durableHash: string | undefined;
+    let releaseFlush!: () => void;
+    const flush = vi.fn(
+      () =>
+        new Promise<void>((resolve) => {
+          releaseFlush = resolve;
+        })
+    );
+    const enqueueEvent = vi.fn(async () => undefined);
+    const input = {
+      index: 1,
+      fingerprint: "video/webm:3",
+      putBlob: vi.fn(async () => HASH),
+      enqueueEvent,
+      flush,
+      getDurableHash: () => durableHash,
+      commitDurable: (hash: string) => {
+        durableHash = hash;
+      }
+    };
+
+    const first = ledger.execute(input);
+    const replay = ledger.execute(input);
+    expect(replay).toBe(first);
+    await vi.waitFor(() => expect(flush).toHaveBeenCalledOnce());
+    expect(durableHash).toBeUndefined();
+    releaseFlush();
+    await expect(Promise.all([first, replay])).resolves.toEqual([HASH, HASH]);
+    expect(enqueueEvent).toHaveBeenCalledOnce();
+    expect(durableHash).toBe(HASH);
+  });
+
+  it("retries only the durable flush after an event was already queued", async () => {
+    const ledger = new ScreenRecordingChunkWriteLedger();
+    let durableHash: string | undefined;
+    const flush = vi
+      .fn<() => Promise<void>>()
+      .mockRejectedValueOnce(new Error("flush failed"))
+      .mockResolvedValue();
+    const enqueueEvent = vi.fn(async () => undefined);
+    const input = {
+      index: 2,
+      fingerprint: "video/webm:4",
+      putBlob: vi.fn(async () => HASH),
+      enqueueEvent,
+      flush,
+      getDurableHash: () => durableHash,
+      commitDurable: (hash: string) => {
+        durableHash = hash;
+      }
+    };
+
+    await expect(ledger.execute(input)).rejects.toThrow("flush failed");
+    await expect(ledger.execute(input)).resolves.toBe(HASH);
+    expect(enqueueEvent).toHaveBeenCalledOnce();
+    expect(flush).toHaveBeenCalledTimes(2);
+    expect(durableHash).toBe(HASH);
+  });
+
+  it("verifies a replay against the durable reference without queuing another event", async () => {
+    const ledger = new ScreenRecordingChunkWriteLedger();
+    const enqueueEvent = vi.fn(async () => undefined);
+
+    await expect(
+      ledger.execute({
+        index: 3,
+        fingerprint: "video/webm:5",
+        putBlob: async () => HASH,
+        enqueueEvent,
+        flush: vi.fn(async () => undefined),
+        getDurableHash: () => HASH,
+        commitDurable: vi.fn()
+      })
+    ).resolves.toBe(HASH);
+    expect(enqueueEvent).not.toHaveBeenCalled();
+  });
+
+  it("rejects an index replay with different metadata or bytes", async () => {
+    const ledger = new ScreenRecordingChunkWriteLedger();
+    const first = {
+      index: 4,
+      fingerprint: "video/webm:6",
+      putBlob: vi.fn(async () => HASH),
+      enqueueEvent: vi.fn(async () => undefined),
+      flush: vi.fn(async () => {
+        throw new Error("retry later");
+      }),
+      getDurableHash: () => undefined,
+      commitDurable: vi.fn()
+    };
+
+    await expect(ledger.execute(first)).rejects.toThrow("retry later");
+    await expect(ledger.execute({ ...first, fingerprint: "video/webm:changed" })).rejects.toThrow(
+      "different metadata"
+    );
+    await expect(
+      ledger.execute({
+        ...first,
+        putBlob: async () => "b".repeat(64),
+        flush: vi.fn(async () => undefined)
+      })
+    ).rejects.toThrow("different bytes");
+  });
+});
+
+describe("ScreenRecordingFinalizationGate", () => {
+  it("coalesces a terminal notification with the explicit stop response", async () => {
+    const gate = new ScreenRecordingFinalizationGate();
+    let release!: () => void;
+    const operation = vi.fn(
+      () =>
+        new Promise<void>((resolve) => {
+          release = resolve;
+        })
+    );
+
+    const terminalNotification = gate.run(operation);
+    const stopResponse = gate.run(operation);
+    expect(stopResponse).toBe(terminalNotification);
+    await vi.waitFor(() => expect(operation).toHaveBeenCalledOnce());
+    release();
+    await expect(Promise.all([terminalNotification, stopResponse])).resolves.toEqual([
+      undefined,
+      undefined
+    ]);
+  });
+
+  it("allows one exact retry after a failed finalization", async () => {
+    const gate = new ScreenRecordingFinalizationGate();
+    const operation = vi
+      .fn<() => Promise<void>>()
+      .mockRejectedValueOnce(new Error("chunk flush failed"))
+      .mockResolvedValue();
+
+    await expect(gate.run(operation)).rejects.toThrow("chunk flush failed");
+    await expect(gate.run(operation)).resolves.toBeUndefined();
+    expect(operation).toHaveBeenCalledTimes(2);
+  });
+});
+
+describe("durable screen recording finalization", () => {
+  it("withholds terminal evidence when the completed-recording checkpoint fails", async () => {
+    let finalizing = false;
+    const writeTerminalEvidence = vi.fn(async () => undefined);
+    const commit = vi.fn();
+
+    await expect(
+      runDurableScreenRecordingFinalization({
+        beginCompletionCheckpoint: () => {
+          finalizing = true;
+        },
+        rollbackCompletionCheckpoint: () => {
+          finalizing = false;
+        },
+        persistCompletionCheckpoint: () => Promise.reject(new Error("storage failed")),
+        writeTerminalEvidence,
+        commit
+      })
+    ).rejects.toThrow("storage failed");
+    expect(finalizing).toBe(false);
+    expect(writeTerminalEvidence).not.toHaveBeenCalled();
+    expect(commit).not.toHaveBeenCalled();
+  });
+
+  it("keeps the durable completion checkpoint when terminal evidence must retry", async () => {
+    let finalizing = false;
+    const commit = vi.fn();
+
+    await expect(
+      runDurableScreenRecordingFinalization({
+        beginCompletionCheckpoint: () => {
+          finalizing = true;
+        },
+        rollbackCompletionCheckpoint: () => {
+          finalizing = false;
+        },
+        persistCompletionCheckpoint: async () => undefined,
+        writeTerminalEvidence: () => Promise.reject(new Error("pipeline flush failed")),
+        commit
+      })
+    ).rejects.toThrow("pipeline flush failed");
+    expect(finalizing).toBe(true);
+    expect(commit).not.toHaveBeenCalled();
+  });
+
+  it("commits only after the checkpoint and terminal evidence are durable", async () => {
+    const order: string[] = [];
+
+    await runDurableScreenRecordingFinalization({
+      beginCompletionCheckpoint: () => {
+        order.push("begin");
+      },
+      rollbackCompletionCheckpoint: vi.fn(),
+      persistCompletionCheckpoint: async () => {
+        order.push("checkpoint");
+      },
+      writeTerminalEvidence: async () => {
+        order.push("terminal");
+      },
+      commit: () => {
+        order.push("commit");
+      }
+    });
+
+    expect(order).toEqual(["begin", "checkpoint", "terminal", "commit"]);
+  });
+});
+
+describe("spontaneous screen recording finalization retry", () => {
+  it("retries the exact terminal result with bounded backoff", async () => {
+    const finalize = vi
+      .fn<() => Promise<void>>()
+      .mockRejectedValueOnce(new Error("storage unavailable"))
+      .mockRejectedValueOnce(new Error("pipeline unavailable"))
+      .mockResolvedValue();
+    const waitForRetry = vi.fn(async () => undefined);
+
+    await retryScreenRecordingFinalization({
+      maxAttempts: 4,
+      isCurrent: () => true,
+      finalize,
+      waitForRetry
+    });
+    expect(finalize).toHaveBeenCalledTimes(3);
+    expect(waitForRetry.mock.calls).toEqual([[1], [2]]);
+  });
+
+  it("stops retrying after an explicit stop finalizes the recording", async () => {
+    let current = true;
+    const finalize = vi.fn(async () => {
+      current = false;
+      throw new Error("coalesced stop completed");
+    });
+
+    await expect(
+      retryScreenRecordingFinalization({
+        maxAttempts: 4,
+        isCurrent: () => current,
+        finalize,
+        waitForRetry: vi.fn(async () => undefined)
+      })
+    ).resolves.toBeUndefined();
+    expect(finalize).toHaveBeenCalledOnce();
+  });
+
+  it("surfaces the last failure after the fixed attempt budget", async () => {
+    const finalize = vi.fn(async () => {
+      throw new Error("still unavailable");
+    });
+
+    await expect(
+      retryScreenRecordingFinalization({
+        maxAttempts: 3,
+        isCurrent: () => true,
+        finalize,
+        waitForRetry: async () => undefined
+      })
+    ).rejects.toThrow("still unavailable");
+    expect(finalize).toHaveBeenCalledTimes(3);
+  });
+});
diff --git a/apps/extension/src/sw/screen-recording-chunk-write.ts b/apps/extension/src/sw/screen-recording-chunk-write.ts
new file mode 100644
index 0000000..9de164d
--- /dev/null
+++ b/apps/extension/src/sw/screen-recording-chunk-write.ts
@@ -0,0 +1,179 @@
+export type ScreenRecordingChunkWriteInput = Readonly<{
+  index: number;
+  fingerprint: string;
+  putBlob: () => Promise<string>;
+  enqueueEvent: (hash: string) => void | Promise<void>;
+  flush: () => void | Promise<void>;
+  getDurableHash: () => string | undefined;
+  commitDurable: (hash: string) => void;
+}>;
+
+export type DurableScreenRecordingFinalizationOptions = Readonly<{
+  beginCompletionCheckpoint: () => void;
+  rollbackCompletionCheckpoint: () => void;
+  persistCompletionCheckpoint: () => Promise<void>;
+  writeTerminalEvidence: () => Promise<void>;
+  commit: () => void;
+}>;
+
+export type RetriedScreenRecordingFinalizationOptions = Readonly<{
+  maxAttempts: number;
+  isCurrent: () => boolean;
+  finalize: () => Promise<void>;
+  waitForRetry: (attempt: number) => Promise<void>;
+}>;
+
+type ScreenRecordingChunkWriteState = {
+  readonly fingerprint: string;
+  hash?: string;
+  eventQueued: boolean;
+  task: Promise<string> | null;
+};
+
+/** Coalesces terminal notifications and explicit stop responses for one recording identity. */
+export class ScreenRecordingFinalizationGate {
+  private pending: Promise<void> | null = null;
+
+  public run(operation: () => Promise<void>): Promise<void> {
+    if (this.pending) {
+      return this.pending;
+    }
+
+    const task = Promise.resolve().then(operation);
+    this.pending = task;
+    void task.then(
+      () => {
+        if (this.pending === task) {
+          this.pending = null;
+        }
+      },
+      () => {
+        if (this.pending === task) {
+          this.pending = null;
+        }
+      }
+    );
+    return task;
+  }
+}
+
+/** Checkpoints the absence of a live recorder before its terminal event removes resume evidence. */
+export async function runDurableScreenRecordingFinalization(
+  options: DurableScreenRecordingFinalizationOptions
+): Promise<void> {
+  options.beginCompletionCheckpoint();
+  try {
+    await options.persistCompletionCheckpoint();
+  } catch (error) {
+    options.rollbackCompletionCheckpoint();
+    throw error;
+  }
+
+  await options.writeTerminalEvidence();
+  options.commit();
+}
+
+/** Retries one spontaneous terminal result while its exact runtime identity remains current. */
+export async function retryScreenRecordingFinalization(
+  options: RetriedScreenRecordingFinalizationOptions
+): Promise<void> {
+  if (!Number.isSafeInteger(options.maxAttempts) || options.maxAttempts <= 0) {
+    throw new Error("Screen recording finalization attempts must be a positive safe integer.");
+  }
+
+  let lastError: unknown;
+  for (let attempt = 1; attempt <= options.maxAttempts; attempt += 1) {
+    if (!options.isCurrent()) {
+      return;
+    }
+    try {
+      await options.finalize();
+      return;
+    } catch (error) {
+      lastError = error;
+      if (!options.isCurrent()) {
+        return;
+      }
+      if (attempt === options.maxAttempts) {
+        break;
+      }
+      await options.waitForRetry(attempt);
+    }
+  }
+
+  throw lastError instanceof Error
+    ? lastError
+    : new Error(`Screen recording finalization failed: ${String(lastError)}`);
+}
+
+/** Coalesces exact retries and retains pre-flush progress after a transient failure. */
+export class ScreenRecordingChunkWriteLedger {
+  private readonly writes = new Map<number, ScreenRecordingChunkWriteState>();
+
+  public execute(input: ScreenRecordingChunkWriteInput): Promise<string> {
+    if (!Number.isSafeInteger(input.index) || input.index < 0 || input.fingerprint.length === 0) {
+      return Promise.reject(new Error("Invalid screen recording chunk write identity."));
+    }
+
+    let state = this.writes.get(input.index);
+    if (state && state.fingerprint !== input.fingerprint) {
+      return Promise.reject(
+        new Error("Screen recording chunk index was reused with different metadata.")
+      );
+    }
+    if (!state) {
+      state = {
+        fingerprint: input.fingerprint,
+        eventQueued: false,
+        task: null
+      };
+      this.writes.set(input.index, state);
+    }
+    if (state.task) {
+      return state.task;
+    }
+
+    const write = state;
+    const task = this.executeAttempt(write, input);
+    write.task = task;
+    void task.then(
+      () => {
+        if (write.task === task) {
+          write.task = null;
+          this.writes.delete(input.index);
+        }
+      },
+      () => {
+        if (write.task === task) write.task = null;
+      }
+    );
+    return task;
+  }
+
+  private async executeAttempt(
+    state: ScreenRecordingChunkWriteState,
+    input: ScreenRecordingChunkWriteInput
+  ): Promise<string> {
+    const hash = await input.putBlob();
+    if (state.hash && state.hash !== hash) {
+      throw new Error("Screen recording chunk index was reused with different bytes.");
+    }
+    state.hash = hash;
+
+    const durableHash = input.getDurableHash();
+    if (durableHash) {
+      if (durableHash !== hash) {
+        throw new Error("Durable screen recording chunk identity does not match its replay.");
+      }
+      return hash;
+    }
+
+    if (!state.eventQueued) {
+      await input.enqueueEvent(hash);
+      state.eventQueued = true;
+    }
+    await input.flush();
+    input.commitDurable(hash);
+    return hash;
+  }
+}
diff --git a/apps/extension/src/sw/script-injection.test.ts b/apps/extension/src/sw/script-injection.test.ts
new file mode 100644
index 0000000..aff05d8
--- /dev/null
+++ b/apps/extension/src/sw/script-injection.test.ts
@@ -0,0 +1,307 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { ChromeApi, InjectionResult } from "../shared/chrome-api.js";
+import { parseMainWorldControllerHint } from "../shared/main-world-controller.js";
+import {
+  bootstrapMainWorldDirectController,
+  controlMainWorldDirectController,
+  injectContentScript,
+  injectRootPageAgentsForMode,
+  seedMainWorldControllerHint
+} from "./script-injection.js";
+
+const CONTROLLER = parseMainWorldControllerHint({
+  secret: "a".repeat(64),
+  moduleNonce: `m1_${"b".repeat(64)}`,
+  revision: 0,
+  phase: "inactive",
+  activationId: null
+})!;
+
+describe("script injection", () => {
+  it.each([null, {}, { scripting: {} }])(
+    "fails explicitly when scripting.executeScript is unavailable",
+    async (chromeApi) => {
+      await expect(
+        injectContentScript(chromeApi as ChromeApi | null, { tabId: 7, allFrames: true })
+      ).rejects.toThrow("Chrome scripting.executeScript API is unavailable.");
+    }
+  );
+
+  it("injects isolated content into an exact document", async () => {
+    const results: InjectionResult[] = [{ frameId: 4, documentId: "document-4" }];
+    const executeScript = vi.fn().mockResolvedValue(results);
+
+    await expect(
+      injectContentScript({ scripting: { executeScript } } as ChromeApi, {
+        tabId: 7,
+        frameId: 4,
+        documentId: "document-4"
+      })
+    ).resolves.toBe(results);
+    expect(executeScript).toHaveBeenCalledWith({
+      target: { tabId: 7, documentIds: ["document-4"] },
+      world: "ISOLATED",
+      files: ["content.js"]
+    });
+  });
+
+  it("requires an exact isolated singleton ACK before MAIN bootstrap", async () => {
+    const sendMessage = vi.fn().mockResolvedValue({
+      kind: "content.main-world-controller-seeded",
+      controller: CONTROLLER
+    });
+    const chromeApi = { tabs: { sendMessage } } as unknown as ChromeApi;
+
+    await expect(
+      seedMainWorldControllerHint(
+        chromeApi,
+        { tabId: 7, frameId: 4, documentId: "document-4" },
+        CONTROLLER
+      )
+    ).resolves.toEqual(CONTROLLER);
+    expect(sendMessage).toHaveBeenCalledWith(
+      7,
+      { kind: "sw.main-world-controller-seed", controller: CONTROLLER },
+      { frameId: 4, documentId: "document-4" }
+    );
+
+    sendMessage.mockResolvedValueOnce({ kind: "content.main-world-controller-seed-rejected" });
+    await expect(
+      seedMainWorldControllerHint(
+        chromeApi,
+        { tabId: 7, frameId: 4, documentId: "document-4" },
+        CONTROLLER
+      )
+    ).rejects.toThrow("rejected the exact");
+  });
+
+  it("bootstraps an opaque ESM instance with exact document func and privileged args", async () => {
+    const executeScript = vi.fn().mockResolvedValue([
+      {
+        frameId: 4,
+        documentId: "document-4",
+        result: { kind: "installed", phase: "inactive", revision: 0 }
+      }
+    ]);
+    const getURL = vi.fn(() => "chrome-extension://dynamic-id/injected.js");
+    const chromeApi = {
+      scripting: { executeScript },
+      runtime: { getURL }
+    } as unknown as ChromeApi;
+
+    await expect(
+      bootstrapMainWorldDirectController(
+        chromeApi,
+        { tabId: 7, frameId: 4, documentId: "document-4" },
+        CONTROLLER
+      )
+    ).resolves.toEqual({ kind: "installed", phase: "inactive", revision: 0 });
+    expect(executeScript).toHaveBeenCalledWith({
+      target: { tabId: 7, documentIds: ["document-4"] },
+      world: "MAIN",
+      func: expect.any(Function),
+      args: [
+        `chrome-extension://dynamic-id/injected.js#${CONTROLLER.moduleNonce}`,
+        CONTROLLER.secret
+      ]
+    });
+    expect(executeScript.mock.calls[0]?.[0]).not.toHaveProperty("files");
+  });
+
+  it("strictly validates direct drain results from the exact document", async () => {
+    const activationId = `a1_${"c".repeat(64)}`;
+    const drain = {
+      kind: "drained",
+      activationId,
+      revision: 2,
+      events: [
+        {
+          activationId,
+          seq: 1,
+          rawType: "console",
+          payload: { method: "info" },
+          t: 1,
+          mono: 2
+        }
+      ],
+      producedThrough: 1,
+      truncatedBefore: 0,
+      degraded: false,
+      replayed: false
+    };
+    const executeScript = vi
+      .fn()
+      .mockResolvedValue([{ frameId: 4, documentId: "document-4", result: drain }]);
+    const chromeApi = {
+      scripting: { executeScript },
+      runtime: { getURL: () => "chrome-extension://dynamic-id/injected.js" }
+    } as unknown as ChromeApi;
+
+    await expect(
+      controlMainWorldDirectController(
+        chromeApi,
+        { tabId: 7, frameId: 4, documentId: "document-4" },
+        CONTROLLER,
+        { kind: "drain", revision: 2, activationId }
+      )
+    ).resolves.toEqual(drain);
+
+    executeScript.mockResolvedValueOnce([{ frameId: 5, documentId: "replacement", result: drain }]);
+    await expect(
+      controlMainWorldDirectController(
+        chromeApi,
+        { tabId: 7, frameId: 4, documentId: "document-4" },
+        CONTROLLER,
+        { kind: "drain", revision: 2, activationId }
+      )
+    ).rejects.toThrow("exact document target");
+  });
+
+  it("starts Full with only the isolated content agent", async () => {
+    const executeScript = vi.fn().mockResolvedValue([{ frameId: 0, documentId: "root" }]);
+    const result = await injectRootPageAgentsForMode(
+      { scripting: { executeScript } } as ChromeApi,
+      {
+        mode: "full",
+        contentTarget: { tabId: 7, allFrames: true },
+        mainWorldTarget: { tabId: 7, frameId: 0 }
+      }
+    );
+
+    expect(executeScript).toHaveBeenCalledTimes(1);
+    expect(executeScript).toHaveBeenCalledWith({
+      target: { tabId: 7, allFrames: true },
+      world: "ISOLATED",
+      files: ["content.js"]
+    });
+    expect(result.mainWorldResults).toEqual([]);
+  });
+
+  it("starts Lite in isolated-inject, exact-seed, then MAIN-bootstrap order", async () => {
+    const order: string[] = [];
+    const executeScript = vi.fn(async (options: { world?: string; args?: unknown[] }) => {
+      order.push(options.world === "ISOLATED" ? "content" : "main");
+      return options.world === "ISOLATED"
+        ? [{ frameId: 0, documentId: "root" }]
+        : [
+            {
+              frameId: 0,
+              documentId: "root",
+              result:
+                options.args?.length === 3
+                  ? {
+                      kind: "probed",
+                      phase: "inactive",
+                      revision: 0,
+                      activationId: null,
+                      producedThrough: 0,
+                      truncatedBefore: 0
+                    }
+                  : { kind: "installed", phase: "inactive", revision: 0 }
+            }
+          ];
+    });
+    const sendMessage = vi.fn(async (_tabId, message: { controller: unknown }) => {
+      order.push("seed");
+      return { kind: "content.main-world-controller-seeded", controller: message.controller };
+    });
+    const result = await injectRootPageAgentsForMode(
+      {
+        scripting: { executeScript },
+        tabs: { sendMessage },
+        runtime: { getURL: () => "chrome-extension://dynamic-id/injected.js" }
+      } as unknown as ChromeApi,
+      {
+        mode: "lite",
+        contentTarget: { tabId: 7, allFrames: false },
+        mainWorldTarget: { tabId: 7, frameId: 0 }
+      }
+    );
+
+    expect(order).toEqual(["content", "seed", "main", "main"]);
+    expect(result.contentResults).toEqual([{ frameId: 0, documentId: "root" }]);
+    expect(result.mainWorldResults).toHaveLength(1);
+    expect(result.mainWorldResults[0]?.controller).toMatchObject({
+      revision: 0,
+      phase: "inactive",
+      activationId: null
+    });
+  });
+
+  it("recovers a seeded singleton after SW restart by bootstrapping and probing its exact module", async () => {
+    const activationId = `a1_${"d".repeat(64)}`;
+    const existing = parseMainWorldControllerHint({
+      secret: "c".repeat(64),
+      moduleNonce: `m1_${"d".repeat(64)}`,
+      revision: 3,
+      phase: "active",
+      activationId
+    })!;
+    const executeScript = vi.fn(async (options: { world?: string; args?: unknown[] }) => {
+      if (options.world === "ISOLATED") {
+        return [{ frameId: 0, documentId: "root" }];
+      }
+      return [
+        {
+          frameId: 0,
+          documentId: "root",
+          result:
+            options.args?.length === 3
+              ? {
+                  kind: "probed",
+                  phase: "active",
+                  revision: 3,
+                  activationId,
+                  producedThrough: 4,
+                  truncatedBefore: 0
+                }
+              : { kind: "existing", phase: "active", revision: 3 }
+        }
+      ];
+    });
+    const result = await injectRootPageAgentsForMode(
+      {
+        scripting: { executeScript },
+        tabs: {
+          sendMessage: vi.fn().mockResolvedValue({
+            kind: "content.main-world-controller-seeded",
+            controller: existing
+          })
+        },
+        runtime: { getURL: () => "chrome-extension://dynamic-id/injected.js" }
+      } as unknown as ChromeApi,
+      {
+        mode: "lite",
+        contentTarget: { tabId: 7, allFrames: false },
+        mainWorldTarget: { tabId: 7, frameId: 0 }
+      }
+    );
+
+    expect(result.mainWorldResults[0]?.controller).toEqual(existing);
+    expect(executeScript).toHaveBeenCalledTimes(3);
+    expect(executeScript.mock.calls[1]?.[0].args).toEqual([
+      `chrome-extension://dynamic-id/injected.js#${existing.moduleNonce}`,
+      existing.secret
+    ]);
+  });
+
+  it("fails Lite closed when the isolated seed listener is unavailable", async () => {
+    const executeScript = vi.fn().mockResolvedValue([{ frameId: 0, documentId: "root" }]);
+    await expect(
+      injectRootPageAgentsForMode(
+        {
+          scripting: { executeScript },
+          tabs: { sendMessage: vi.fn().mockRejectedValue(new Error("no listener")) },
+          runtime: { getURL: () => "chrome-extension://dynamic-id/injected.js" }
+        } as unknown as ChromeApi,
+        {
+          mode: "lite",
+          contentTarget: { tabId: 7, allFrames: false },
+          mainWorldTarget: { tabId: 7, frameId: 0 }
+        }
+      )
+    ).rejects.toThrow("no listener");
+    expect(executeScript).toHaveBeenCalledTimes(1);
+  });
+});
diff --git a/apps/extension/src/sw/script-injection.ts b/apps/extension/src/sw/script-injection.ts
new file mode 100644
index 0000000..9ddb5b2
--- /dev/null
+++ b/apps/extension/src/sw/script-injection.ts
@@ -0,0 +1,421 @@
+import type { CaptureMode } from "@webblackbox/protocol";
+import type {
+  InjectedDirectBootstrapResult,
+  InjectedDirectCommand,
+  InjectedDirectControlResult
+} from "webblackbox/injected-hooks";
+
+import type { ChromeApi, InjectionResult, ScriptInjectionTarget } from "../shared/chrome-api.js";
+import { parseContentActivationId } from "../shared/content-activation-protocol.js";
+import {
+  advanceMainWorldControllerHint,
+  createMainWorldControllerHint,
+  parseInjectedDirectBootstrapResult,
+  parseInjectedDirectControlResult,
+  parseMainWorldControllerHint,
+  parseMainWorldControllerSeedAck,
+  type MainWorldControllerHint
+} from "../shared/main-world-controller.js";
+import {
+  shouldInjectIsolatedContentForMode,
+  shouldInjectMainWorldHooksForMode
+} from "../shared/mode-profile.js";
+
+const CONTENT_SCRIPT_FILE = "content.js";
+const MAIN_WORLD_HOOK_FILE = "injected.js";
+
+export type ContentScriptInjectionTarget =
+  | {
+      allFrames: boolean;
+      documentId?: never;
+      frameId?: never;
+      tabId: number;
+    }
+  | {
+      allFrames?: never;
+      documentId: string;
+      frameId: number;
+      tabId: number;
+    };
+
+/**
+ * The frame id remains available even when a document id is supplied so the
+ * caller can keep top-frame failures fatal while treating child-frame failures
+ * as best effort.
+ */
+export type MainWorldHookInjectionTarget =
+  | {
+      documentId?: string;
+      frameId: number;
+      allFrames?: never;
+      tabId: number;
+    }
+  | {
+      allFrames: true;
+      documentId?: never;
+      frameId?: never;
+      tabId: number;
+    };
+
+export type RootPageAgentInjectionStep = "isolated-content" | "main-world-hook";
+
+export type RootPageAgentInjectionOptions = {
+  assertCurrent?: () => void;
+  beforeEach?: (step: RootPageAgentInjectionStep) => Promise<void> | void;
+  contentTarget: ContentScriptInjectionTarget;
+  mainWorldTarget: MainWorldHookInjectionTarget;
+  mode: CaptureMode;
+};
+
+export type RootPageAgentInjectionResult = Readonly<{
+  contentResults: InjectionResult[];
+  mainWorldResults: MainWorldControllerInjectionResult[];
+}>;
+
+export type MainWorldControllerInjectionResult = InjectionResult<InjectedDirectBootstrapResult> & {
+  controller: MainWorldControllerHint;
+};
+
+export type ExactMainWorldDirectTarget = Readonly<{
+  documentId: string;
+  frameId: number;
+  tabId: number;
+}>;
+
+export { createMainWorldControllerHint } from "../shared/main-world-controller.js";
+
+/**
+ * Applies the mode boundary to initial, restored, and post-navigation root
+ * instrumentation. The isolated content agent remains available in Full for
+ * interaction hints, while page MAIN-world hooks are a Lite-only facility.
+ */
+export async function injectRootPageAgentsForMode(
+  chromeApi: ChromeApi | null | undefined,
+  options: RootPageAgentInjectionOptions
+): Promise<RootPageAgentInjectionResult> {
+  let contentResults: InjectionResult[] = [];
+  let mainWorldResults: MainWorldControllerInjectionResult[] = [];
+
+  if (shouldInjectIsolatedContentForMode(options.mode)) {
+    contentResults = await runGuardedRootInjection(options, "isolated-content", () =>
+      injectContentScript(chromeApi, options.contentTarget)
+    );
+  }
+
+  if (shouldInjectMainWorldHooksForMode(options.mode)) {
+    mainWorldResults = await runGuardedRootInjection(options, "main-world-hook", () =>
+      bootstrapMainWorldControllersForContentResults(chromeApi, contentResults, options)
+    );
+  }
+
+  return { contentResults, mainWorldResults };
+}
+
+async function bootstrapMainWorldControllersForContentResults(
+  chromeApi: ChromeApi | null | undefined,
+  contentResults: InjectionResult[],
+  options: RootPageAgentInjectionOptions
+): Promise<MainWorldControllerInjectionResult[]> {
+  const injected: MainWorldControllerInjectionResult[] = [];
+  for (const contentResult of contentResults) {
+    if (
+      contentResult.error ||
+      typeof contentResult.documentId !== "string" ||
+      contentResult.documentId.length === 0
+    ) {
+      continue;
+    }
+    options.assertCurrent?.();
+    const target: ExactMainWorldDirectTarget = {
+      tabId: options.contentTarget.tabId,
+      frameId: contentResult.frameId,
+      documentId: contentResult.documentId
+    };
+    const controller = createMainWorldControllerHint();
+    try {
+      const seeded = await seedMainWorldControllerHint(chromeApi, target, controller);
+      options.assertCurrent?.();
+      const result = await bootstrapMainWorldDirectController(chromeApi, target, seeded);
+      if (result.kind !== "installed" && result.kind !== "existing") {
+        throw new Error("MAIN-world direct bootstrap rejected its seeded controller.");
+      }
+      options.assertCurrent?.();
+      const probe = await controlMainWorldDirectController(chromeApi, target, seeded, {
+        kind: "probe"
+      });
+      const advanced = advanceControllerFromControl(seeded, probe);
+      if (!advanced) {
+        throw new Error("MAIN-world direct bootstrap did not match its seeded controller.");
+      }
+      injected.push({ ...contentResult, result, controller: advanced });
+    } catch (error) {
+      if (contentResult.frameId === 0) {
+        throw error;
+      }
+      injected.push({
+        frameId: contentResult.frameId,
+        ...(contentResult.documentId ? { documentId: contentResult.documentId } : {}),
+        error: error instanceof Error ? error.message : String(error),
+        controller
+      });
+    }
+  }
+  return injected;
+}
+
+async function runGuardedRootInjection<Result>(
+  options: RootPageAgentInjectionOptions,
+  step: RootPageAgentInjectionStep,
+  inject: () => Promise<Result>
+): Promise<Result> {
+  await options.beforeEach?.(step);
+  options.assertCurrent?.();
+  const result = await inject();
+  options.assertCurrent?.();
+  return result;
+}
+
+export async function injectContentScript(
+  chromeApi: ChromeApi | null | undefined,
+  target: ContentScriptInjectionTarget
+): Promise<InjectionResult[]> {
+  const injectionTarget = resolveContentInjectionTarget(target);
+  const results = await executeScript(chromeApi, {
+    target: injectionTarget,
+    world: "ISOLATED",
+    files: [CONTENT_SCRIPT_FILE]
+  });
+  const targetResult = target.documentId
+    ? results.find((result) => result.documentId === target.documentId)
+    : results.find((result) => result.frameId === 0);
+
+  assertSuccessfulResult(
+    targetResult,
+    target.documentId
+      ? "Content script injection did not succeed in its exact document target."
+      : "Content script injection did not succeed in the main frame."
+  );
+
+  return results;
+}
+
+function resolveContentInjectionTarget(
+  target: ContentScriptInjectionTarget
+): ScriptInjectionTarget {
+  if (target.documentId) {
+    return {
+      tabId: target.tabId,
+      documentIds: [target.documentId]
+    };
+  }
+
+  return {
+    tabId: target.tabId,
+    allFrames: target.allFrames
+  };
+}
+
+/** Seeds the capability before any MAIN install so SW restart can recover it from isolated. */
+export async function seedMainWorldControllerHint(
+  chromeApi: ChromeApi | null | undefined,
+  target: ExactMainWorldDirectTarget,
+  controller: MainWorldControllerHint
+): Promise<MainWorldControllerHint> {
+  const parsedController = parseMainWorldControllerHint(controller);
+  const sendMessage = chromeApi?.tabs?.sendMessage;
+  if (!parsedController || !sendMessage) {
+    throw new Error(
+      parsedController
+        ? "Chrome tabs.sendMessage API is unavailable for isolated controller seeding."
+        : "Invalid MAIN-world direct controller hint."
+    );
+  }
+  const response = await sendMessage.call(
+    chromeApi.tabs,
+    target.tabId,
+    { kind: "sw.main-world-controller-seed", controller: parsedController },
+    { frameId: target.frameId, documentId: target.documentId }
+  );
+  const acknowledgement = parseMainWorldControllerSeedAck(response);
+  if (!acknowledgement) {
+    throw new Error("Isolated content singleton rejected the exact MAIN-world controller seed.");
+  }
+  return acknowledgement.controller;
+}
+
+/** Bootstraps one unguessable ESM module instance in one exact MAIN document. */
+export async function bootstrapMainWorldDirectController(
+  chromeApi: ChromeApi | null | undefined,
+  target: ExactMainWorldDirectTarget,
+  controller: MainWorldControllerHint
+): Promise<InjectedDirectBootstrapResult> {
+  const parsedController = parseMainWorldControllerHint(controller);
+  if (!parsedController) {
+    throw new Error("Invalid MAIN-world direct controller hint.");
+  }
+  const moduleUrl = resolveMainWorldDirectModuleUrl(chromeApi, parsedController.moduleNonce);
+  const results = await executeScript<InjectedDirectBootstrapResult>(chromeApi, {
+    target: { tabId: target.tabId, documentIds: [target.documentId] },
+    world: "MAIN",
+    func: invokeMainWorldDirectBootstrap as (...args: never[]) => unknown,
+    args: [moduleUrl, parsedController.secret]
+  });
+  const targetResult = results.find(
+    (result) => result.frameId === target.frameId && result.documentId === target.documentId
+  );
+  assertSuccessfulResult(
+    targetResult,
+    "MAIN-world direct bootstrap did not succeed in its exact document target."
+  );
+  const parsedResult = parseInjectedDirectBootstrapResult(targetResult.result);
+  if (!parsedResult) {
+    throw new Error("MAIN-world direct bootstrap returned an invalid result.");
+  }
+  return parsedResult;
+}
+
+/** Executes one strict command in the exact ESM instance selected by its module nonce. */
+export async function controlMainWorldDirectController(
+  chromeApi: ChromeApi | null | undefined,
+  target: ExactMainWorldDirectTarget,
+  controller: MainWorldControllerHint,
+  command: InjectedDirectCommand
+): Promise<InjectedDirectControlResult> {
+  const parsedController = parseMainWorldControllerHint(controller);
+  if (!parsedController) {
+    throw new Error("Invalid MAIN-world direct controller hint.");
+  }
+  const moduleUrl = resolveMainWorldDirectModuleUrl(chromeApi, parsedController.moduleNonce);
+  const results = await executeScript<InjectedDirectControlResult>(chromeApi, {
+    target: { tabId: target.tabId, documentIds: [target.documentId] },
+    world: "MAIN",
+    func: invokeMainWorldDirectControl as (...args: never[]) => unknown,
+    args: [moduleUrl, parsedController.secret, command]
+  });
+  const targetResult = results.find(
+    (result) => result.frameId === target.frameId && result.documentId === target.documentId
+  );
+  assertSuccessfulResult(
+    targetResult,
+    "MAIN-world direct control did not succeed in its exact document target."
+  );
+  const parsedResult = parseInjectedDirectControlResult(targetResult.result);
+  if (!parsedResult) {
+    throw new Error("MAIN-world direct control returned an invalid result.");
+  }
+  return parsedResult;
+}
+
+export function advanceControllerFromBootstrap(
+  controller: MainWorldControllerHint,
+  result: InjectedDirectBootstrapResult
+): MainWorldControllerHint | null {
+  if (result.kind !== "installed" && result.kind !== "existing") {
+    return null;
+  }
+  const activationId = result.phase === "inactive" ? null : controller.activationId;
+  if (result.phase !== "inactive" && !activationId) {
+    return null;
+  }
+  return advanceMainWorldControllerHint(controller, {
+    revision: result.revision,
+    phase: result.phase,
+    activationId
+  });
+}
+
+export function advanceControllerFromControl(
+  controller: MainWorldControllerHint,
+  result: InjectedDirectControlResult
+): MainWorldControllerHint | null {
+  switch (result.kind) {
+    case "probed": {
+      const activationId =
+        result.activationId === null ? null : parseContentActivationId(result.activationId);
+      if (result.activationId !== null && !activationId) {
+        return null;
+      }
+      return advanceMainWorldControllerHint(controller, {
+        revision: result.revision,
+        phase: result.phase,
+        activationId
+      });
+    }
+    case "activated": {
+      const activationId = parseContentActivationId(result.activationId);
+      if (!activationId) return null;
+      return advanceMainWorldControllerHint(controller, {
+        revision: result.revision,
+        phase: "active",
+        activationId
+      });
+    }
+    case "deactivated":
+      return advanceMainWorldControllerHint(controller, {
+        revision: result.revision,
+        phase: "inactive",
+        activationId: null
+      });
+    case "drained": {
+      const activationId = parseContentActivationId(result.activationId);
+      if (!activationId) return null;
+      return advanceMainWorldControllerHint(controller, {
+        revision: result.revision,
+        phase: "drained",
+        activationId
+      });
+    }
+    default:
+      return null;
+  }
+}
+
+function resolveMainWorldDirectModuleUrl(
+  chromeApi: ChromeApi | null | undefined,
+  moduleNonce: string
+): string {
+  const getURL = chromeApi?.runtime?.getURL;
+  if (!getURL) {
+    throw new Error("Chrome runtime.getURL API is unavailable.");
+  }
+  return `${getURL.call(chromeApi.runtime, MAIN_WORLD_HOOK_FILE)}#${moduleNonce}`;
+}
+
+async function invokeMainWorldDirectBootstrap(moduleUrl: string, secret: string): Promise<unknown> {
+  const namespace = (await import(moduleUrl)) as Record<string, unknown>;
+  const bootstrap = namespace.bootstrap;
+  return typeof bootstrap === "function" ? bootstrap(secret) : { kind: "unavailable" };
+}
+
+async function invokeMainWorldDirectControl(
+  moduleUrl: string,
+  secret: string,
+  command: unknown
+): Promise<unknown> {
+  const namespace = (await import(moduleUrl)) as Record<string, unknown>;
+  const control = namespace.control;
+  return typeof control === "function" ? control(secret, command) : { kind: "unavailable" };
+}
+
+async function executeScript<TResult = unknown>(
+  chromeApi: ChromeApi | null | undefined,
+  options: Parameters<NonNullable<ChromeApi["scripting"]>["executeScript"]>[0]
+): Promise<InjectionResult<TResult>[]> {
+  const scripting = chromeApi?.scripting;
+  const execute = scripting?.executeScript;
+
+  if (!scripting || !execute) {
+    throw new Error("Chrome scripting.executeScript API is unavailable.");
+  }
+
+  return execute.call(scripting, options) as Promise<InjectionResult<TResult>[]>;
+}
+
+function assertSuccessfulResult(
+  result: InjectionResult | undefined,
+  message: string
+): asserts result is InjectionResult {
+  if (!result || (typeof result.error === "string" && result.error.length > 0)) {
+    throw new Error(result?.error ? `${message} ${result.error}` : message);
+  }
+}
diff --git a/apps/extension/src/sw/session-annotation-state.test.ts b/apps/extension/src/sw/session-annotation-state.test.ts
new file mode 100644
index 0000000..78c31c9
--- /dev/null
+++ b/apps/extension/src/sw/session-annotation-state.test.ts
@@ -0,0 +1,129 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  commitSessionAnnotationMutation,
+  mergePersistedSessionAnnotation,
+  SessionAnnotationMutationCoordinator
+} from "./session-annotation-state.js";
+
+describe("session annotation restoration", () => {
+  it("prefers the separately durable annotation after a runtime checkpoint write failed", () => {
+    expect(
+      mergePersistedSessionAnnotation(
+        { sid: "session-1", tags: ["old"], note: "old note" },
+        { tags: ["new"], note: "new note" }
+      )
+    ).toEqual({ sid: "session-1", tags: ["new"], note: "new note" });
+  });
+
+  it("allows a durable annotation row to clear an older note", () => {
+    expect(
+      mergePersistedSessionAnnotation(
+        { sid: "session-1", tags: ["old"], note: "remove me" },
+        { tags: [] }
+      )
+    ).toEqual({ sid: "session-1", tags: [] });
+  });
+
+  it("rolls back the visible annotation when its combined checkpoint fails", async () => {
+    let annotation = "old";
+
+    await expect(
+      commitSessionAnnotationMutation({
+        apply: () => {
+          annotation = "new";
+        },
+        rollback: () => {
+          annotation = "old";
+        },
+        persist: () => Promise.reject(new Error("storage failed"))
+      })
+    ).rejects.toThrow("storage failed");
+    expect(annotation).toBe("old");
+  });
+});
+
+describe("SessionAnnotationMutationCoordinator", () => {
+  it("does not let an older failed rollback clobber a newer same-sid mutation", async () => {
+    const coordinator = new SessionAnnotationMutationCoordinator();
+    let value = "old";
+    let release!: () => void;
+    const first = coordinator.run("S-one", () =>
+      commitSessionAnnotationMutation({
+        apply: () => {
+          value = "first";
+        },
+        rollback: () => {
+          value = "old";
+        },
+        persist: () =>
+          new Promise<void>((_resolve, reject) => {
+            release = () => reject(new Error("first failed"));
+          })
+      })
+    );
+    const second = coordinator.run("S-one", () =>
+      commitSessionAnnotationMutation({
+        apply: () => {
+          value = "second";
+        },
+        rollback: () => {
+          value = "old";
+        },
+        persist: async () => undefined
+      })
+    );
+
+    await vi.waitFor(() => expect(value).toBe("first"));
+    release();
+    await expect(first).rejects.toThrow("first failed");
+    await expect(second).resolves.toBeUndefined();
+    expect(value).toBe("second");
+  });
+
+  it("serializes different sids because they share one persisted annotation object", async () => {
+    const coordinator = new SessionAnnotationMutationCoordinator();
+    const order: string[] = [];
+    let release!: () => void;
+    const first = coordinator.run("S-first", async () => {
+      order.push("first:begin");
+      await new Promise<void>((resolve) => {
+        release = resolve;
+      });
+      order.push("first:end");
+    });
+    const second = coordinator.run("S-second", async () => {
+      order.push("second");
+    });
+
+    await vi.waitFor(() => expect(order).toEqual(["first:begin"]));
+    release();
+    await Promise.all([first, second]);
+    expect(order).toEqual(["first:begin", "first:end", "second"]);
+  });
+
+  it("does not let an annotation queued behind disposal recreate a removed session row", async () => {
+    const coordinator = new SessionAnnotationMutationCoordinator();
+    let release!: () => void;
+    const removalGate = new Promise<void>((resolve) => {
+      release = resolve;
+    });
+    let present = true;
+    let annotation: string | undefined = "old";
+    const removal = coordinator.run("S-disposed", async () => {
+      present = false;
+      annotation = undefined;
+      await removalGate;
+    });
+    const annotate = coordinator.run("S-disposed", async () => {
+      if (present) {
+        annotation = "new";
+      }
+    });
+
+    await vi.waitFor(() => expect(present).toBe(false));
+    release();
+    await Promise.all([removal, annotate]);
+    expect(annotation).toBeUndefined();
+  });
+});
diff --git a/apps/extension/src/sw/session-annotation-state.ts b/apps/extension/src/sw/session-annotation-state.ts
new file mode 100644
index 0000000..65e5a1f
--- /dev/null
+++ b/apps/extension/src/sw/session-annotation-state.ts
@@ -0,0 +1,68 @@
+export type PersistedSessionAnnotation = Readonly<{
+  tags: readonly string[];
+  note?: string;
+}>;
+
+type RuntimeWithPersistedSessionAnnotation<Runtime> = Runtime extends unknown
+  ? Omit<Runtime, "tags" | "note"> & { tags: string[]; note?: string }
+  : never;
+
+/**
+ * Serializes the complete mutation transaction for the shared annotation
+ * checkpoint. A sid remains part of the API so callers cannot accidentally
+ * coalesce an anonymous mutation, while the single tail also protects writes
+ * for different sids that share one chrome.storage object.
+ */
+export class SessionAnnotationMutationCoordinator {
+  private tail: Promise<void> = Promise.resolve();
+
+  public run<Result>(sid: string, operation: () => Promise<Result>): Promise<Result> {
+    if (typeof sid !== "string" || sid.length === 0 || sid.length > 256) {
+      return Promise.reject(new Error("Invalid session annotation identity."));
+    }
+
+    const task = this.tail.catch(() => undefined).then(operation);
+    this.tail = task.then(
+      () => undefined,
+      () => undefined
+    );
+    return task;
+  }
+}
+
+export async function commitSessionAnnotationMutation(options: {
+  apply: () => void;
+  rollback: () => void;
+  persist: () => Promise<void>;
+}): Promise<void> {
+  options.apply();
+  try {
+    await options.persist();
+  } catch (error) {
+    options.rollback();
+    throw error;
+  }
+}
+
+/** Makes the independently durable annotation row authoritative during runtime restoration. */
+export function mergePersistedSessionAnnotation<
+  Runtime extends Readonly<{ tags: readonly string[]; note?: string }>
+>(
+  runtime: Runtime,
+  annotation: PersistedSessionAnnotation | undefined
+): RuntimeWithPersistedSessionAnnotation<Runtime> {
+  if (!annotation) {
+    return {
+      ...runtime,
+      tags: [...runtime.tags]
+    } as unknown as RuntimeWithPersistedSessionAnnotation<Runtime>;
+  }
+
+  const { note: _discardedNote, ...base } = runtime;
+  void _discardedNote;
+  return {
+    ...base,
+    tags: [...annotation.tags],
+    ...(annotation.note ? { note: annotation.note } : {})
+  } as RuntimeWithPersistedSessionAnnotation<Runtime>;
+}
diff --git a/apps/extension/src/sw/stop-drain.test.ts b/apps/extension/src/sw/stop-drain.test.ts
new file mode 100644
index 0000000..4de060a
--- /dev/null
+++ b/apps/extension/src/sw/stop-drain.test.ts
@@ -0,0 +1,531 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  acknowledgeStopDrain,
+  canAdmitStopDrainBatch,
+  claimStopDrainEvent,
+  closeStopDrain,
+  commitStopDrainBatchClaims,
+  commitStopDrainClaim,
+  createStopDrainCapability,
+  dropUnclaimableStopDrainOrdinaryEvent,
+  getCommittedStopDrainArtifactTypes,
+  isStopDrainClaimValid,
+  releaseStopDrainClaim,
+  resolveStopDrainTimeoutEvidence,
+  runStopDrainBlobOperation,
+  STOP_DRAIN_ORDINARY_EVENT_MAX
+} from "./stop-drain.js";
+
+const ACTIVATION_ID = `a1_${"b".repeat(64)}`;
+const BATCH_ID = `b1_${"c".repeat(64)}`;
+const DOCUMENT_ID = "document-1";
+
+function fixture() {
+  let now = 1_000;
+  const runtime = {};
+  const fence = { blocked: true };
+  const capability = createStopDrainCapability({
+    runtime,
+    fence,
+    activationId: ACTIVATION_ID,
+    sid: "S-stop-drain",
+    tabId: 42,
+    frameId: 0,
+    documentUrl: "https://app.example.test/dashboard",
+    documentId: DOCUMENT_ID,
+    deadline: 2_000,
+    now: () => now,
+    tokenFactory: () => "a".repeat(64)
+  });
+  const binding = {
+    runtime,
+    fence,
+    token: capability.token,
+    activationId: capability.activationId,
+    sid: capability.sid,
+    tabId: capability.tabId,
+    frameId: 0,
+    documentUrl: capability.documentUrl,
+    documentId: capability.documentId,
+    batchId: BATCH_ID,
+    eventIndex: 0
+  };
+
+  return {
+    capability,
+    binding,
+    runtime,
+    fence,
+    setNow: (value: number) => {
+      now = value;
+    }
+  };
+}
+
+describe("stop-drain capability", () => {
+  it("generates a fresh 256-bit token for each capability", () => {
+    const first = createStopDrainCapability({
+      runtime: {},
+      fence: { blocked: true },
+      activationId: ACTIVATION_ID,
+      sid: "S-first",
+      tabId: 1,
+      frameId: 0,
+      documentUrl: "https://app.example.test/first",
+      documentId: "document-first",
+      deadline: Date.now() + 1_000
+    });
+    const second = createStopDrainCapability({
+      runtime: {},
+      fence: { blocked: true },
+      activationId: `a1_${"c".repeat(64)}`,
+      sid: "S-second",
+      tabId: 2,
+      frameId: 7,
+      documentUrl: "https://app.example.test/second",
+      documentId: "document-second",
+      deadline: Date.now() + 1_000
+    });
+
+    expect(first.token).toMatch(/^[a-f0-9]{64}$/u);
+    expect(second.token).toMatch(/^[a-f0-9]{64}$/u);
+    expect(second.token).not.toBe(first.token);
+  });
+
+  it("binds one stop artifact of each allowed type to the exact runtime and sender", () => {
+    const { capability, binding, runtime, fence } = fixture();
+
+    for (const [eventIndex, rawType] of [
+      "snapshot",
+      "localStorageSnapshot",
+      "screenshot",
+      "notice"
+    ].entries()) {
+      const eventBinding = { ...binding, eventIndex, rawType, reason: "stop" };
+      const claim = claimStopDrainEvent(capability, eventBinding);
+
+      expect(claim).not.toBeNull();
+      expect(claimStopDrainEvent(capability, eventBinding)).toBe(claim);
+      expect(
+        claimStopDrainEvent(capability, {
+          ...eventBinding,
+          eventIndex: eventIndex + 100
+        })
+      ).toBeNull();
+      expect(commitStopDrainClaim(claim!, runtime, fence)).toBe(true);
+    }
+
+    expect(getCommittedStopDrainArtifactTypes(capability)).toEqual([
+      "snapshot",
+      "localStorageSnapshot",
+      "screenshot",
+      "notice"
+    ]);
+  });
+
+  it("checks exact draining batch admission without consuming an event claim", () => {
+    const { capability, binding } = fixture();
+
+    expect(canAdmitStopDrainBatch(capability, binding)).toBe(true);
+    expect(capability.claims.size).toBe(0);
+    expect(capability.ordinaryClaims.size).toBe(0);
+  });
+
+  it("does not let a missing or wrong batch token consume a later exact claim", () => {
+    const { capability, binding } = fixture();
+
+    expect(canAdmitStopDrainBatch(capability, { ...binding, token: undefined })).toBe(false);
+    expect(canAdmitStopDrainBatch(capability, { ...binding, token: "wrong" })).toBe(false);
+    expect(capability.claims.size).toBe(0);
+    expect(capability.ordinaryClaims.size).toBe(0);
+
+    expect(canAdmitStopDrainBatch(capability, binding)).toBe(true);
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        rawType: "snapshot",
+        reason: "stop"
+      })
+    ).not.toBeNull();
+  });
+
+  it("rejects draining batch admission unless capability state and every binding are exact", () => {
+    const variants = [
+      { activationId: `a1_${"d".repeat(64)}` },
+      { documentId: "document-other" },
+      { token: "wrong" },
+      { runtime: {} },
+      { fence: { blocked: true } },
+      { sid: "S-wrong" },
+      { tabId: 43 },
+      { frameId: 1 },
+      { documentUrl: "https://app.example.test/other" }
+    ];
+
+    for (const variant of variants) {
+      const { capability, binding } = fixture();
+      expect(canAdmitStopDrainBatch(capability, { ...binding, ...variant })).toBe(false);
+    }
+
+    const invalid = fixture();
+    invalid.capability.valid = false;
+    expect(canAdmitStopDrainBatch(invalid.capability, invalid.binding)).toBe(false);
+
+    const closed = fixture();
+    closed.capability.accepting = false;
+    expect(canAdmitStopDrainBatch(closed.capability, closed.binding)).toBe(false);
+
+    const acknowledged = fixture();
+    acknowledged.capability.acknowledged = true;
+    expect(canAdmitStopDrainBatch(acknowledged.capability, acknowledged.binding)).toBe(false);
+
+    const expired = fixture();
+    expired.setNow(expired.capability.deadline + 1);
+    expect(canAdmitStopDrainBatch(expired.capability, expired.binding)).toBe(false);
+  });
+
+  it("rejects the wrong activation, document, token, runtime, fence, sid, tab, frame, URL, reason, and type", () => {
+    const variants = [
+      { activationId: `a1_${"d".repeat(64)}` },
+      { documentId: "document-other" },
+      { token: "wrong" },
+      { runtime: {} },
+      { fence: { blocked: true } },
+      { sid: "S-wrong" },
+      { tabId: 43 },
+      { frameId: 1 },
+      { documentUrl: "https://app.example.test/other" },
+      { reason: "interval" },
+      { rawType: "indexedDbSnapshot" },
+      { batchId: "not-a-content-event-batch" },
+      { eventIndex: -1 }
+    ];
+
+    for (const variant of variants) {
+      const { capability, binding } = fixture();
+      expect(
+        claimStopDrainEvent(capability, {
+          ...binding,
+          rawType: "snapshot",
+          reason: "stop",
+          ...variant
+        })
+      ).toBeNull();
+    }
+  });
+
+  it("closes admission on ack while preserving already claimed in-flight work", () => {
+    const { capability, binding, runtime, fence } = fixture();
+    const claim = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "snapshot",
+      reason: "stop"
+    });
+
+    expect(claim).not.toBeNull();
+    expect(acknowledgeStopDrain(capability, binding)).toBe(false);
+    expect(commitStopDrainClaim(claim!, runtime, fence)).toBe(true);
+    expect(acknowledgeStopDrain(capability, binding)).toBe(true);
+    expect(acknowledgeStopDrain(capability, binding)).toBe(false);
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        rawType: "screenshot",
+        reason: "stop"
+      })
+    ).toBeNull();
+    expect(isStopDrainClaimValid(claim!, runtime, fence)).toBe(true);
+
+    closeStopDrain(capability);
+    expect(isStopDrainClaimValid(claim!, runtime, fence)).toBe(false);
+  });
+
+  it("admits bounded ordinary tail events captured no later than the frozen stop cutoff", () => {
+    const { capability, binding } = fixture();
+
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        rawType: "click",
+        reason: "interaction",
+        capturedAt: capability.ordinaryEventCutoff
+      })
+    ).not.toBeNull();
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        rawType: "click",
+        reason: "interaction",
+        capturedAt: capability.ordinaryEventCutoff + 1
+      })
+    ).toBeNull();
+  });
+
+  it("drops an authenticated post-cutoff ordinary event without consuming artifact claims", () => {
+    const { capability, binding } = fixture();
+    const late = {
+      ...binding,
+      rawType: "click",
+      reason: "interaction",
+      capturedAt: capability.ordinaryEventCutoff + 1
+    };
+
+    expect(claimStopDrainEvent(capability, late)).toBeNull();
+    expect(dropUnclaimableStopDrainOrdinaryEvent(capability, late)).toBe(true);
+    expect(capability.droppedOrdinaryEvents).toBe(1);
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        eventIndex: 1,
+        rawType: "snapshot",
+        reason: "stop"
+      })
+    ).not.toBeNull();
+  });
+
+  it("releases a failed screenshot reservation so the exact event can retry", async () => {
+    const { capability, binding, runtime, fence } = fixture();
+    const eventBinding = {
+      ...binding,
+      rawType: "screenshot",
+      reason: "stop"
+    };
+    const first = claimStopDrainEvent(capability, eventBinding)!;
+    const failure = new Error("blob write failed");
+
+    await expect(
+      runStopDrainBlobOperation(first, runtime, fence, async () => {
+        throw failure;
+      })
+    ).rejects.toBe(failure);
+    expect(getCommittedStopDrainArtifactTypes(capability)).toEqual([]);
+    expect(releaseStopDrainClaim(first)).toBe(true);
+    expect(releaseStopDrainClaim(first)).toBe(false);
+
+    const retry = claimStopDrainEvent(capability, eventBinding)!;
+    expect(retry).not.toBe(first);
+    await expect(
+      runStopDrainBlobOperation(retry, runtime, fence, async () => "sha256:screenshot")
+    ).resolves.toBe("sha256:screenshot");
+    expect(commitStopDrainClaim(retry, runtime, fence)).toBe(true);
+    expect(commitStopDrainClaim(retry, runtime, fence)).toBe(true);
+    expect(releaseStopDrainClaim(retry)).toBe(false);
+    expect(claimStopDrainEvent(capability, eventBinding)).toBeNull();
+    expect(getCommittedStopDrainArtifactTypes(capability)).toEqual(["screenshot"]);
+  });
+
+  it("commits every reserved claim only after its exact batch becomes durable", () => {
+    const { capability, binding, runtime, fence } = fixture();
+    const snapshot = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "snapshot",
+      reason: "stop"
+    })!;
+    const ordinary = claimStopDrainEvent(capability, {
+      ...binding,
+      eventIndex: 1,
+      rawType: "click",
+      reason: "interaction",
+      capturedAt: capability.ordinaryEventCutoff
+    })!;
+
+    expect(snapshot.status).toBe("reserved");
+    expect(ordinary.status).toBe("reserved");
+    expect(commitStopDrainBatchClaims(capability, BATCH_ID, runtime, fence)).toBe(true);
+    expect(snapshot.status).toBe("committed");
+    expect(ordinary.status).toBe("committed");
+    expect(getCommittedStopDrainArtifactTypes(capability)).toEqual(["snapshot"]);
+  });
+
+  it("reports committed timeout artifacts as emitted and MAIN tail only as unconfirmed", () => {
+    const { capability, binding, runtime, fence } = fixture();
+    const snapshot = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "snapshot",
+      reason: "stop"
+    })!;
+    expect(commitStopDrainClaim(snapshot, runtime, fence)).toBe(true);
+
+    expect(
+      resolveStopDrainTimeoutEvidence(capability, [
+        "main-world-tail",
+        "snapshot",
+        "localStorageSnapshot",
+        "screenshot"
+      ])
+    ).toEqual({
+      expectedArtifacts: ["main-world-tail", "snapshot", "localStorageSnapshot", "screenshot"],
+      emittedArtifacts: ["snapshot"],
+      omittedArtifacts: ["localStorageSnapshot", "screenshot"],
+      unconfirmedArtifacts: ["main-world-tail"]
+    });
+  });
+
+  it("does not commit a reservation through the wrong runtime, fence, or deadline", () => {
+    const { capability, binding, runtime, fence, setNow } = fixture();
+    const claim = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "snapshot",
+      reason: "stop"
+    })!;
+
+    expect(commitStopDrainClaim(claim, {}, fence)).toBe(false);
+    expect(commitStopDrainClaim(claim, runtime, { blocked: true })).toBe(false);
+    expect(claim.status).toBe("reserved");
+    setNow(capability.deadline + 1);
+    expect(commitStopDrainClaim(claim, runtime, fence)).toBe(false);
+    expect(getCommittedStopDrainArtifactTypes(capability)).toEqual([]);
+    expect(releaseStopDrainClaim(claim)).toBe(true);
+  });
+
+  it("bounds ordinary tail claims independently for each frame capability", () => {
+    const { capability, binding } = fixture();
+
+    for (let index = 0; index < STOP_DRAIN_ORDINARY_EVENT_MAX; index += 1) {
+      expect(
+        claimStopDrainEvent(capability, {
+          ...binding,
+          eventIndex: index,
+          rawType: "click",
+          reason: "interaction",
+          capturedAt: capability.ordinaryEventCutoff
+        })
+      ).not.toBeNull();
+    }
+
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        eventIndex: STOP_DRAIN_ORDINARY_EVENT_MAX,
+        rawType: "submit",
+        reason: "interaction",
+        capturedAt: capability.ordinaryEventCutoff
+      })
+    ).toBeNull();
+  });
+
+  it("returns released ordinary reservations to the bounded tail budget", () => {
+    const { capability, binding, runtime, fence } = fixture();
+    const claims = Array.from({ length: STOP_DRAIN_ORDINARY_EVENT_MAX }, (_, eventIndex) =>
+      claimStopDrainEvent(capability, {
+        ...binding,
+        eventIndex,
+        rawType: "click",
+        reason: "interaction",
+        capturedAt: capability.ordinaryEventCutoff
+      })
+    );
+
+    expect(claims.every(Boolean)).toBe(true);
+    expect(capability.ordinaryClaims.size).toBe(STOP_DRAIN_ORDINARY_EVENT_MAX);
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        eventIndex: 0,
+        rawType: "click",
+        reason: "interaction",
+        capturedAt: capability.ordinaryEventCutoff
+      })
+    ).toBe(claims[0]);
+    expect(releaseStopDrainClaim(claims[0]!)).toBe(true);
+    expect(capability.ordinaryClaims.size).toBe(STOP_DRAIN_ORDINARY_EVENT_MAX - 1);
+
+    const replacement = claimStopDrainEvent(capability, {
+      ...binding,
+      eventIndex: STOP_DRAIN_ORDINARY_EVENT_MAX,
+      rawType: "submit",
+      reason: "interaction",
+      capturedAt: capability.ordinaryEventCutoff
+    });
+    expect(replacement).not.toBeNull();
+    expect(commitStopDrainClaim(replacement!, runtime, fence)).toBe(true);
+    expect(capability.ordinaryClaims.size).toBe(STOP_DRAIN_ORDINARY_EVENT_MAX);
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        eventIndex: STOP_DRAIN_ORDINARY_EVENT_MAX + 1,
+        rawType: "change",
+        reason: "interaction",
+        capturedAt: capability.ordinaryEventCutoff
+      })
+    ).toBeNull();
+  });
+
+  it("does not let a rejected ordinary event consume a later stop artifact claim", () => {
+    const { capability, binding, runtime, fence } = fixture();
+    const ordinary = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "click",
+      reason: "stop"
+    });
+    const snapshot = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "snapshot",
+      reason: "stop"
+    });
+
+    expect(ordinary).toBeNull();
+    expect(snapshot).not.toBeNull();
+    expect(commitStopDrainClaim(snapshot!, runtime, fence)).toBe(true);
+    expect(acknowledgeStopDrain(capability, binding)).toBe(true);
+    expect(isStopDrainClaimValid(snapshot!, runtime, fence)).toBe(true);
+  });
+
+  it("rejects expired claims and drops blob results that cross the deadline", async () => {
+    const { capability, binding, runtime, fence, setNow } = fixture();
+    const claim = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "screenshot",
+      reason: "stop"
+    })!;
+    const putBlob = vi.fn(async () => {
+      setNow(2_001);
+      return "sha256:orphan";
+    });
+
+    await expect(runStopDrainBlobOperation(claim, runtime, fence, putBlob)).resolves.toBeNull();
+    expect(putBlob).toHaveBeenCalledOnce();
+    expect(isStopDrainClaimValid(claim, runtime, fence)).toBe(false);
+    expect(
+      claimStopDrainEvent(capability, {
+        ...binding,
+        rawType: "snapshot",
+        reason: "stop"
+      })
+    ).toBeNull();
+  });
+
+  it("does not start a blob operation after the fence binding changes", async () => {
+    const { capability, binding, runtime, fence } = fixture();
+    const claim = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "localStorageSnapshot",
+      reason: "stop"
+    })!;
+    const putBlob = vi.fn(async () => "sha256:blob");
+
+    await expect(
+      runStopDrainBlobOperation(claim, runtime, { blocked: true }, putBlob)
+    ).resolves.toBeNull();
+    expect(putBlob).not.toHaveBeenCalled();
+    fence.blocked = false;
+    expect(isStopDrainClaimValid(claim, runtime, fence)).toBe(false);
+  });
+
+  it("drops a blob result when finalization closes the capability in flight", async () => {
+    const { capability, binding, runtime, fence } = fixture();
+    const claim = claimStopDrainEvent(capability, {
+      ...binding,
+      rawType: "snapshot",
+      reason: "stop"
+    })!;
+
+    await expect(
+      runStopDrainBlobOperation(claim, runtime, fence, async () => {
+        closeStopDrain(capability);
+        return "sha256:orphan";
+      })
+    ).resolves.toBeNull();
+  });
+});
diff --git a/apps/extension/src/sw/stop-drain.ts b/apps/extension/src/sw/stop-drain.ts
new file mode 100644
index 0000000..9af7d36
--- /dev/null
+++ b/apps/extension/src/sw/stop-drain.ts
@@ -0,0 +1,435 @@
+import {
+  parseContentActivationId,
+  parseContentEventBatchId,
+  type ContentActivationId,
+  type ContentEventBatchId
+} from "../shared/content-activation-protocol.js";
+import { isStopDrainToken } from "../shared/stop-drain-token.js";
+
+export const STOP_DRAIN_RAW_TYPES = [
+  "snapshot",
+  "localStorageSnapshot",
+  "screenshot",
+  "notice"
+] as const;
+export const STOP_DRAIN_ORDINARY_EVENT_MAX = 1_200;
+
+export type StopDrainRawType = (typeof STOP_DRAIN_RAW_TYPES)[number];
+export type StopDrainExpectedArtifact =
+  | "main-world-tail"
+  | "snapshot"
+  | "localStorageSnapshot"
+  | "screenshot";
+
+type StopDrainFence = {
+  blocked: boolean;
+};
+
+export type StopDrainCapability = {
+  readonly token: string;
+  readonly activationId: ContentActivationId;
+  readonly sid: string;
+  readonly tabId: number;
+  readonly frameId: number;
+  readonly documentUrl: string;
+  readonly documentId: string;
+  readonly deadline: number;
+  readonly ordinaryEventCutoff: number;
+  readonly runtime: object;
+  readonly fence: StopDrainFence;
+  readonly now: () => number;
+  valid: boolean;
+  accepting: boolean;
+  acknowledged: boolean;
+  readonly claims: Map<StopDrainRawType, StopDrainClaim>;
+  readonly ordinaryClaims: Set<StopDrainClaim>;
+  readonly claimsByEvent: Map<string, StopDrainClaim>;
+  readonly committedArtifactTypes: Set<StopDrainRawType>;
+  droppedOrdinaryEvents: number;
+};
+
+export type StopDrainClaim = {
+  readonly capability: StopDrainCapability;
+  readonly rawType: string;
+  readonly batchId: ContentEventBatchId;
+  readonly eventIndex: number;
+  readonly eventKey: string;
+  readonly stopArtifact: boolean;
+  readonly reason: unknown;
+  readonly capturedAt: number | undefined;
+  status: "reserved" | "committed" | "released";
+};
+
+export type StopDrainBinding = {
+  runtime: object;
+  fence: StopDrainFence;
+  token: string | undefined;
+  activationId: ContentActivationId | string;
+  sid: string;
+  tabId: number;
+  frameId: number;
+  documentUrl: string;
+  documentId: string;
+  capturedAt?: number;
+};
+
+export type StopDrainEventBinding = StopDrainBinding & {
+  batchId: ContentEventBatchId | string;
+  eventIndex: number;
+  rawType: string;
+  reason: unknown;
+};
+
+export function createStopDrainCapability(input: {
+  runtime: object;
+  fence: StopDrainFence;
+  activationId: ContentActivationId | string;
+  sid: string;
+  tabId: number;
+  frameId: number;
+  documentUrl: string;
+  documentId: string;
+  deadline: number;
+  ordinaryEventCutoff?: number;
+  now?: () => number;
+  tokenFactory?: () => string;
+}): StopDrainCapability {
+  const now = input.now ?? Date.now;
+  const token = (input.tokenFactory ?? createStopDrainToken)();
+  const activationId = parseContentActivationId(input.activationId);
+  const ordinaryEventCutoff = input.ordinaryEventCutoff ?? now();
+  const frameId = input.frameId ?? 0;
+
+  if (
+    !input.fence.blocked ||
+    input.deadline <= now() ||
+    !isStopDrainToken(token) ||
+    !activationId ||
+    !isNonEmptyString(input.documentId) ||
+    !Number.isFinite(ordinaryEventCutoff) ||
+    ordinaryEventCutoff < 0 ||
+    !Number.isSafeInteger(frameId) ||
+    frameId < 0
+  ) {
+    throw new Error("Stop-drain capability requires a blocked fence and a future deadline.");
+  }
+
+  return {
+    token,
+    activationId,
+    sid: input.sid,
+    tabId: input.tabId,
+    frameId,
+    documentUrl: input.documentUrl,
+    documentId: input.documentId,
+    deadline: input.deadline,
+    ordinaryEventCutoff,
+    runtime: input.runtime,
+    fence: input.fence,
+    now,
+    valid: true,
+    accepting: true,
+    acknowledged: false,
+    claims: new Map(),
+    ordinaryClaims: new Set(),
+    claimsByEvent: new Map(),
+    committedArtifactTypes: new Set(),
+    droppedOrdinaryEvents: 0
+  };
+}
+
+export function claimStopDrainEvent(
+  capability: StopDrainCapability,
+  binding: StopDrainEventBinding
+): StopDrainClaim | null {
+  const batchId = parseContentEventBatchId(binding.batchId);
+  if (!batchId || !Number.isSafeInteger(binding.eventIndex) || binding.eventIndex < 0) {
+    return null;
+  }
+
+  const stopArtifact = binding.reason === "stop" && isStopDrainRawType(binding.rawType);
+  const eventKey = createStopDrainEventKey(batchId, binding.eventIndex);
+  const existingClaim = capability.claimsByEvent.get(eventKey);
+
+  if (
+    !canAdmitStopDrainBatch(capability, binding) ||
+    (existingClaim ? !matchesReservedEvent(existingClaim, binding, stopArtifact) : false) ||
+    (stopArtifact
+      ? capability.claims.has(binding.rawType as StopDrainRawType) && !existingClaim
+      : (!existingClaim && capability.ordinaryClaims.size >= STOP_DRAIN_ORDINARY_EVENT_MAX) ||
+        typeof binding.capturedAt !== "number" ||
+        !Number.isFinite(binding.capturedAt) ||
+        binding.capturedAt > capability.ordinaryEventCutoff)
+  ) {
+    return null;
+  }
+
+  if (existingClaim) {
+    return existingClaim;
+  }
+
+  const claim: StopDrainClaim = {
+    capability,
+    rawType: binding.rawType,
+    batchId,
+    eventIndex: binding.eventIndex,
+    eventKey,
+    stopArtifact,
+    reason: binding.reason,
+    capturedAt: binding.capturedAt,
+    status: "reserved"
+  };
+  if (stopArtifact) {
+    capability.claims.set(binding.rawType as StopDrainRawType, claim);
+  } else {
+    capability.ordinaryClaims.add(claim);
+  }
+  capability.claimsByEvent.set(eventKey, claim);
+  return claim;
+}
+
+/** Drops only authenticated ordinary overflow/tail events so they cannot block final artifacts. */
+export function dropUnclaimableStopDrainOrdinaryEvent(
+  capability: StopDrainCapability,
+  binding: StopDrainEventBinding
+): boolean {
+  const stopArtifact = binding.reason === "stop" && isStopDrainRawType(binding.rawType);
+  if (
+    stopArtifact ||
+    !canAdmitStopDrainBatch(capability, binding) ||
+    typeof binding.capturedAt !== "number" ||
+    !Number.isFinite(binding.capturedAt) ||
+    (binding.capturedAt <= capability.ordinaryEventCutoff &&
+      capability.ordinaryClaims.size < STOP_DRAIN_ORDINARY_EVENT_MAX)
+  ) {
+    return false;
+  }
+
+  capability.droppedOrdinaryEvents = Math.min(
+    Number.MAX_SAFE_INTEGER,
+    capability.droppedOrdinaryEvents + 1
+  );
+  return true;
+}
+
+/**
+ * Commits a successfully materialized event. Artifact types are only exposed
+ * as committed after this transition, while ordinary events keep consuming
+ * the bounded tail budget.
+ */
+export function commitStopDrainClaim(
+  claim: StopDrainClaim,
+  runtime: object,
+  fence: StopDrainFence
+): boolean {
+  if (claim.status === "committed") {
+    return isStopDrainClaimValid(claim, runtime, fence);
+  }
+  if (claim.status !== "reserved" || !isStopDrainClaimValid(claim, runtime, fence)) {
+    return false;
+  }
+
+  claim.status = "committed";
+  if (claim.stopArtifact) {
+    claim.capability.committedArtifactTypes.add(claim.rawType as StopDrainRawType);
+  }
+  return true;
+}
+
+/** Releases a failed reservation so an exact replay can claim it again. */
+export function releaseStopDrainClaim(claim: StopDrainClaim): boolean {
+  if (claim.status !== "reserved" || !isStoredStopDrainClaim(claim)) {
+    return false;
+  }
+
+  claim.status = "released";
+  if (claim.capability.claimsByEvent.get(claim.eventKey) === claim) {
+    claim.capability.claimsByEvent.delete(claim.eventKey);
+  }
+  if (claim.stopArtifact) {
+    if (claim.capability.claims.get(claim.rawType as StopDrainRawType) === claim) {
+      claim.capability.claims.delete(claim.rawType as StopDrainRawType);
+    }
+  } else {
+    claim.capability.ordinaryClaims.delete(claim);
+  }
+  return true;
+}
+
+export function getCommittedStopDrainArtifactTypes(
+  capability: StopDrainCapability
+): readonly StopDrainRawType[] {
+  return STOP_DRAIN_RAW_TYPES.filter((rawType) => capability.committedArtifactTypes.has(rawType));
+}
+
+export function resolveStopDrainTimeoutEvidence(
+  capability: StopDrainCapability,
+  expectedArtifacts: readonly StopDrainExpectedArtifact[]
+): Readonly<{
+  expectedArtifacts: StopDrainExpectedArtifact[];
+  emittedArtifacts: StopDrainExpectedArtifact[];
+  omittedArtifacts: StopDrainExpectedArtifact[];
+  unconfirmedArtifacts: StopDrainExpectedArtifact[];
+}> {
+  const committed = new Set(getCommittedStopDrainArtifactTypes(capability));
+  return {
+    expectedArtifacts: [...expectedArtifacts],
+    emittedArtifacts: expectedArtifacts.filter(
+      (artifact) => artifact !== "main-world-tail" && committed.has(artifact)
+    ),
+    omittedArtifacts: expectedArtifacts.filter(
+      (artifact) => artifact !== "main-world-tail" && !committed.has(artifact)
+    ),
+    unconfirmedArtifacts: expectedArtifacts.filter((artifact) => artifact === "main-world-tail")
+  };
+}
+
+export function commitStopDrainBatchClaims(
+  capability: StopDrainCapability,
+  batchId: ContentEventBatchId | string,
+  runtime: object,
+  fence: StopDrainFence
+): boolean {
+  const normalizedBatchId = parseContentEventBatchId(batchId);
+  if (!normalizedBatchId) {
+    return false;
+  }
+
+  const claims = [...capability.claimsByEvent.values()].filter(
+    (claim) => claim.batchId === normalizedBatchId && claim.status === "reserved"
+  );
+  return claims.every((claim) => commitStopDrainClaim(claim, runtime, fence));
+}
+
+/**
+ * Checks whether an exact draining content batch is allowed to attempt event
+ * claims. This is intentionally side-effect free so an unauthenticated batch
+ * cannot consume either an artifact slot or the bounded ordinary-event budget.
+ */
+export function canAdmitStopDrainBatch(
+  capability: StopDrainCapability,
+  binding: StopDrainBinding
+): boolean {
+  return (
+    capability.valid &&
+    capability.accepting &&
+    !capability.acknowledged &&
+    matchesStopDrainBinding(capability, binding)
+  );
+}
+
+export function acknowledgeStopDrain(
+  capability: StopDrainCapability,
+  binding: StopDrainBinding
+): boolean {
+  if (
+    !canAdmitStopDrainBatch(capability, binding) ||
+    [...capability.claimsByEvent.values()].some((claim) => claim.status === "reserved")
+  ) {
+    return false;
+  }
+
+  capability.accepting = false;
+  capability.acknowledged = true;
+  return true;
+}
+
+export function closeStopDrain(capability: StopDrainCapability): void {
+  capability.accepting = false;
+  capability.valid = false;
+  for (const claim of [...capability.claimsByEvent.values()]) {
+    if (claim.status === "reserved") {
+      releaseStopDrainClaim(claim);
+    }
+  }
+}
+
+export function isStopDrainClaimValid(
+  claim: StopDrainClaim,
+  runtime: object,
+  fence: StopDrainFence
+): boolean {
+  const { capability } = claim;
+
+  return (
+    capability.valid &&
+    capability.runtime === runtime &&
+    capability.fence === fence &&
+    fence.blocked &&
+    capability.now() <= capability.deadline &&
+    claim.status !== "released" &&
+    isStoredStopDrainClaim(claim)
+  );
+}
+
+export async function runStopDrainBlobOperation<T>(
+  claim: StopDrainClaim,
+  runtime: object,
+  fence: StopDrainFence,
+  operation: () => Promise<T>
+): Promise<T | null> {
+  if (!isStopDrainClaimValid(claim, runtime, fence)) {
+    return null;
+  }
+
+  const result = await operation();
+  return isStopDrainClaimValid(claim, runtime, fence) ? result : null;
+}
+
+function matchesStopDrainBinding(
+  capability: StopDrainCapability,
+  binding: StopDrainBinding
+): boolean {
+  return (
+    capability.valid &&
+    capability.now() <= capability.deadline &&
+    capability.runtime === binding.runtime &&
+    capability.fence === binding.fence &&
+    binding.fence.blocked &&
+    capability.token === binding.token &&
+    capability.activationId === binding.activationId &&
+    capability.sid === binding.sid &&
+    capability.tabId === binding.tabId &&
+    capability.frameId === binding.frameId &&
+    capability.documentUrl === binding.documentUrl &&
+    capability.documentId === binding.documentId
+  );
+}
+
+function isStopDrainRawType(value: string): value is StopDrainRawType {
+  return STOP_DRAIN_RAW_TYPES.some((rawType) => rawType === value);
+}
+
+function createStopDrainEventKey(batchId: ContentEventBatchId, eventIndex: number): string {
+  return `${batchId}:${eventIndex}`;
+}
+
+function matchesReservedEvent(
+  claim: StopDrainClaim,
+  binding: StopDrainEventBinding,
+  stopArtifact: boolean
+): boolean {
+  return (
+    claim.status === "reserved" &&
+    claim.rawType === binding.rawType &&
+    claim.stopArtifact === stopArtifact &&
+    Object.is(claim.reason, binding.reason) &&
+    Object.is(claim.capturedAt, binding.capturedAt)
+  );
+}
+
+function isStoredStopDrainClaim(claim: StopDrainClaim): boolean {
+  return claim.stopArtifact
+    ? claim.capability.claims.get(claim.rawType as StopDrainRawType) === claim
+    : claim.capability.ordinaryClaims.has(claim);
+}
+
+function createStopDrainToken(): string {
+  const bytes = new Uint8Array(32);
+  crypto.getRandomValues(bytes);
+  return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+
+function isNonEmptyString(value: unknown): value is string {
+  return typeof value === "string" && value.length > 0;
+}
diff --git a/apps/mcp-server/CHANGELOG.md b/apps/mcp-server/CHANGELOG.md
index e5a1fcf..263a264 100644
--- a/apps/mcp-server/CHANGELOG.md
+++ b/apps/mcp-server/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @webblackbox/mcp-server
 
+## 0.7.0
+
+### Patch Changes
+
+- b3cfda9: Bound archive, HAR, filesystem, and tool-output resource consumption and use canonical archive blob
+  identities when exporting captured response bodies.
+- Updated dependencies [b3cfda9]
+  - @webblackbox/player-sdk@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/apps/mcp-server/LICENSE b/apps/mcp-server/LICENSE
new file mode 100644
index 0000000..fcf7ea4
--- /dev/null
+++ b/apps/mcp-server/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Web LLM
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/apps/mcp-server/README.md b/apps/mcp-server/README.md
index facd6cb..eaed108 100644
--- a/apps/mcp-server/README.md
+++ b/apps/mcp-server/README.md
@@ -90,7 +90,9 @@ node dist/cli.js --version
 
 ## Notes
 
-- Archive paths are resolved from the current working directory if relative.
+- Archive paths are resolved from the current working directory if relative and are limited to 4096 characters. Recursive archive discovery streams directory entries and fails closed after 10,000 entries, 1,000 directories, or five seconds; choose a narrower directory or disable recursion if a scan reaches a ceiling.
+- Archive size is checked against a 64 MiB MCP ceiling on one open file descriptor before bytes are read; the Player SDK then enforces ZIP expansion and event budgets. The production MCP server admits one archive-heavy tool call at a time; excess concurrent calls fail fast instead of multiplying retained Player memory. `compare_sessions` is one admitted operation and can hold its two bounded archives.
+- Serialized tool responses are limited to 4 MiB of UTF-8 JSON. Narrow a time range or result count when an export would exceed that ceiling.
 - Encrypted archives require `passphrase`.
 - `query_events` defaults to payload-hidden output (`includeData=false`) to avoid huge responses.
 - Range-scoped tools (`monoStart` / `monoEnd`) preload only intersecting chunks when opening archives.
diff --git a/apps/mcp-server/package.json b/apps/mcp-server/package.json
index 7ec6db7..9ee7cf9 100644
--- a/apps/mcp-server/package.json
+++ b/apps/mcp-server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@webblackbox/mcp-server",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "MCP stdio server for inspecting and analyzing WebBlackbox archives.",
   "license": "MIT",
   "type": "module",
@@ -50,13 +50,14 @@
     "prepack": "pnpm run build",
     "prestart": "pnpm run build",
     "start": "node dist/cli.js",
-    "inspect": "pnpm run build && npx @modelcontextprotocol/inspector node dist/cli.js",
+    "inspect": "pnpm run build && pnpm dlx @modelcontextprotocol/inspector@0.22.0 node dist/cli.js",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run --config vitest.config.ts"
+    "test": "vitest run --config vitest.config.ts",
+    "test:coverage": "vitest run --config vitest.config.ts --coverage"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.21.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@webblackbox/player-sdk": "workspace:*",
     "jszip": "^3.10.1",
     "zod": "^4.1.11"
diff --git a/apps/mcp-server/src/archive-file-reader.test.ts b/apps/mcp-server/src/archive-file-reader.test.ts
new file mode 100644
index 0000000..66a5fe1
--- /dev/null
+++ b/apps/mcp-server/src/archive-file-reader.test.ts
@@ -0,0 +1,51 @@
+import { appendFile, mkdtemp, open, rename, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, describe, expect, it } from "vitest";
+
+import { readFileHandleBounded } from "./archive-file-reader.js";
+
+const tempDirs: string[] = [];
+
+afterEach(async () => {
+  await Promise.all(tempDirs.splice(0).map((path) => rm(path, { recursive: true, force: true })));
+});
+
+describe("bounded archive file reader", () => {
+  it("detects growth on the same inode without allocating the appended bytes", async () => {
+    const root = await mkdtemp(join(tmpdir(), "wb-mcp-fd-grow-"));
+    tempDirs.push(root);
+    const path = join(root, "archive.webblackbox");
+    await writeFile(path, "1234");
+    const handle = await open(path, "r");
+
+    try {
+      const before = await handle.stat();
+      await appendFile(path, "5".repeat(1024 * 1024));
+      await expect(readFileHandleBounded(handle, before.size, 2 * 1024 * 1024)).rejects.toThrow(
+        /size changed while being read/i
+      );
+    } finally {
+      await handle.close();
+    }
+  });
+
+  it("keeps reading the opened inode when the pathname is replaced", async () => {
+    const root = await mkdtemp(join(tmpdir(), "wb-mcp-fd-swap-"));
+    tempDirs.push(root);
+    const path = join(root, "archive.webblackbox");
+    const originalPath = join(root, "original.webblackbox");
+    await writeFile(path, "safe");
+    const handle = await open(path, "r");
+
+    try {
+      const before = await handle.stat();
+      await rename(path, originalPath);
+      await writeFile(path, "attacker replacement");
+      const bytes = await readFileHandleBounded(handle, before.size, before.size);
+      expect(bytes.toString("utf8")).toBe("safe");
+    } finally {
+      await handle.close();
+    }
+  });
+});
diff --git a/apps/mcp-server/src/archive-file-reader.ts b/apps/mcp-server/src/archive-file-reader.ts
new file mode 100644
index 0000000..3068e89
--- /dev/null
+++ b/apps/mcp-server/src/archive-file-reader.ts
@@ -0,0 +1,47 @@
+import type { FileHandle } from "node:fs/promises";
+
+/** Reads one already-open file descriptor without allocating beyond the observed size. */
+export async function readFileHandleBounded(
+  handle: FileHandle,
+  expectedBytes: number,
+  maxBytes: number
+): Promise<Buffer> {
+  if (!Number.isSafeInteger(expectedBytes) || expectedBytes < 0 || expectedBytes > maxBytes) {
+    throw new Error(`Archive input exceeds the MCP limit (${expectedBytes} > ${maxBytes} bytes).`);
+  }
+
+  const output = Buffer.allocUnsafe(expectedBytes);
+  let offset = 0;
+
+  while (offset < expectedBytes) {
+    const { bytesRead } = await handle.read(output, offset, expectedBytes - offset, offset);
+    if (bytesRead === 0) {
+      break;
+    }
+    offset += bytesRead;
+  }
+
+  if (offset !== expectedBytes) {
+    throw new Error(
+      `Archive file size changed while being read (${offset} bytes read; expected ${expectedBytes}).`
+    );
+  }
+
+  const probe = Buffer.allocUnsafe(1);
+  const { bytesRead: trailingBytes } = await handle.read(probe, 0, 1, expectedBytes);
+  const afterRead = await handle.stat();
+  if (trailingBytes > 0 || afterRead.size !== expectedBytes) {
+    const observedBytes = Math.max(expectedBytes + trailingBytes, afterRead.size);
+    if (observedBytes > maxBytes) {
+      throw new Error(
+        `Archive input exceeds the MCP limit (${observedBytes} > ${maxBytes} bytes).`
+      );
+    }
+
+    throw new Error(
+      `Archive file size changed while being read (${observedBytes} bytes observed; expected ${expectedBytes}).`
+    );
+  }
+
+  return output;
+}
diff --git a/apps/mcp-server/src/archive-operation-admission.test.ts b/apps/mcp-server/src/archive-operation-admission.test.ts
new file mode 100644
index 0000000..fcab55d
--- /dev/null
+++ b/apps/mcp-server/src/archive-operation-admission.test.ts
@@ -0,0 +1,37 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  ArchiveOperationAdmission,
+  ArchiveOperationCapacityError
+} from "./archive-operation-admission.js";
+
+describe("archive operation admission", () => {
+  it("rejects excess work and releases capacity after success", async () => {
+    const admission = new ArchiveOperationAdmission(1);
+    let releaseFirst: (() => void) | undefined;
+    const first = admission.run(
+      () =>
+        new Promise<string>((resolve) => {
+          releaseFirst = () => resolve("first");
+        })
+    );
+
+    await expect(admission.run(async () => "second")).rejects.toBeInstanceOf(
+      ArchiveOperationCapacityError
+    );
+    releaseFirst?.();
+    await expect(first).resolves.toBe("first");
+    await expect(admission.run(async () => "third")).resolves.toBe("third");
+  });
+
+  it("releases capacity when an admitted operation fails", async () => {
+    const admission = new ArchiveOperationAdmission(1);
+
+    await expect(
+      admission.run(async () => {
+        throw new Error("operation failed");
+      })
+    ).rejects.toThrow("operation failed");
+    await expect(admission.run(async () => "recovered")).resolves.toBe("recovered");
+  });
+});
diff --git a/apps/mcp-server/src/archive-operation-admission.ts b/apps/mcp-server/src/archive-operation-admission.ts
new file mode 100644
index 0000000..405a84a
--- /dev/null
+++ b/apps/mcp-server/src/archive-operation-admission.ts
@@ -0,0 +1,34 @@
+/** Raised when another archive-heavy MCP operation already owns the process budget. */
+export class ArchiveOperationCapacityError extends Error {
+  public override readonly name = "ArchiveOperationCapacityError";
+
+  public constructor(public readonly maxConcurrentOperations: number) {
+    super(
+      `Archive operation capacity is exhausted (maximum ${maxConcurrentOperations} concurrent operation${maxConcurrentOperations === 1 ? "" : "s"}).`
+    );
+  }
+}
+
+/** Bounds concurrent operations for the full lifetime of their parsed Player instances. */
+export class ArchiveOperationAdmission {
+  private activeOperations = 0;
+
+  public constructor(private readonly maxConcurrentOperations = 1) {
+    if (!Number.isSafeInteger(maxConcurrentOperations) || maxConcurrentOperations <= 0) {
+      throw new TypeError("Archive operation concurrency must be a positive safe integer.");
+    }
+  }
+
+  public async run<T>(operation: () => Promise<T>): Promise<T> {
+    if (this.activeOperations >= this.maxConcurrentOperations) {
+      throw new ArchiveOperationCapacityError(this.maxConcurrentOperations);
+    }
+
+    this.activeOperations += 1;
+    try {
+      return await operation();
+    } finally {
+      this.activeOperations -= 1;
+    }
+  }
+}
diff --git a/apps/mcp-server/src/index.test.ts b/apps/mcp-server/src/index.test.ts
index bd49244..92838f8 100644
--- a/apps/mcp-server/src/index.test.ts
+++ b/apps/mcp-server/src/index.test.ts
@@ -1,6 +1,13 @@
 import { describe, expect, it } from "vitest";
 
-import { SERVER_NAME, createServer, nowUtcIsoString } from "./index.js";
+import {
+  MAX_MCP_TEXT_PAYLOAD_BYTES,
+  McpOutputLimitError,
+  SERVER_NAME,
+  createServer,
+  nowUtcIsoString,
+  toTextPayload
+} from "./index.js";
 
 describe("mcp-server", () => {
   it("creates server instance", () => {
@@ -11,4 +18,12 @@ describe("mcp-server", () => {
     expect(SERVER_NAME).toBe("webblackbox-mcp-server");
     expect(nowUtcIsoString()).toMatch(/^\d{4}-\d{2}-\d{2}T/);
   });
+
+  it("bounds serialized tool output by UTF-8 byte size", () => {
+    expect(toTextPayload({ status: "ok" }).content[0]?.text).toContain('"status": "ok"');
+
+    expect(() =>
+      toTextPayload({ value: "\u754c".repeat(Math.ceil(MAX_MCP_TEXT_PAYLOAD_BYTES / 3)) })
+    ).toThrow(McpOutputLimitError);
+  });
 });
diff --git a/apps/mcp-server/src/index.ts b/apps/mcp-server/src/index.ts
index e6ba15e..239d8c6 100644
--- a/apps/mcp-server/src/index.ts
+++ b/apps/mcp-server/src/index.ts
@@ -1,5 +1,8 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+
+import { ArchiveOperationAdmission } from "./archive-operation-admission.js";
+import { MAX_MCP_TEXT_PAYLOAD_BYTES } from "./output-limits.js";
 import {
   compareSessions,
   compareSessionsInput,
@@ -27,6 +30,20 @@ export const SERVER_NAME = "webblackbox-mcp-server";
 export const SERVER_VERSION =
   typeof __MCP_SERVER_VERSION__ !== "undefined" ? __MCP_SERVER_VERSION__ : "0.1.0";
 export const nowUtcInput = {};
+export { MAX_MCP_TEXT_PAYLOAD_BYTES } from "./output-limits.js";
+
+export class McpOutputLimitError extends Error {
+  public override readonly name = "McpOutputLimitError";
+
+  public constructor(
+    public readonly actualBytes: number,
+    public readonly maxBytes = MAX_MCP_TEXT_PAYLOAD_BYTES
+  ) {
+    super(
+      `MCP tool output exceeds the ${maxBytes}-byte limit (${actualBytes} bytes). Narrow the requested range or result count.`
+    );
+  }
+}
 
 export function nowUtcIsoString(): string {
   return new Date().toISOString();
@@ -37,6 +54,7 @@ export function createServer(): McpServer {
     name: SERVER_NAME,
     version: SERVER_VERSION
   });
+  const archiveOperations = new ArchiveOperationAdmission(1);
 
   server.tool("health", "Health check", {}, async () => {
     return {
@@ -74,13 +92,15 @@ export function createServer(): McpServer {
     "Open an archive and return session-level summary metrics and top issues.",
     sessionSummaryInput,
     async ({ path, passphrase, slowRequestMs, topN }) => {
-      return toTextPayload(
-        await summarizeSession({
-          path,
-          passphrase,
-          slowRequestMs,
-          topN
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await summarizeSession({
+            path,
+            passphrase,
+            slowRequestMs,
+            topN
+          })
+        )
       );
     }
   );
@@ -103,21 +123,23 @@ export function createServer(): McpServer {
       includeData,
       maxDataChars
     }) => {
-      return toTextPayload(
-        await queryEvents({
-          path,
-          passphrase,
-          text,
-          types,
-          levels,
-          requestId,
-          monoStart,
-          monoEnd,
-          offset,
-          limit,
-          includeData,
-          maxDataChars
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await queryEvents({
+            path,
+            passphrase,
+            text,
+            types,
+            levels,
+            requestId,
+            monoStart,
+            monoEnd,
+            offset,
+            limit,
+            includeData,
+            maxDataChars
+          })
+        )
       );
     }
   );
@@ -127,13 +149,15 @@ export function createServer(): McpServer {
     "Summarize failed and slow network requests from an archive.",
     networkIssuesInput,
     async ({ path, passphrase, minDurationMs, limit }) => {
-      return toTextPayload(
-        await summarizeNetworkIssues({
-          path,
-          passphrase,
-          minDurationMs,
-          limit
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await summarizeNetworkIssues({
+            path,
+            passphrase,
+            minDurationMs,
+            limit
+          })
+        )
       );
     }
   );
@@ -155,20 +179,22 @@ export function createServer(): McpServer {
       projectKey,
       priority
     }) => {
-      return toTextPayload(
-        await generateBugReportBundle({
-          path,
-          passphrase,
-          title,
-          maxItems,
-          monoStart,
-          monoEnd,
-          labels,
-          assignees,
-          issueType,
-          projectKey,
-          priority
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await generateBugReportBundle({
+            path,
+            passphrase,
+            title,
+            maxItems,
+            monoStart,
+            monoEnd,
+            labels,
+            assignees,
+            issueType,
+            projectKey,
+            priority
+          })
+        )
       );
     }
   );
@@ -178,13 +204,15 @@ export function createServer(): McpServer {
     "Export HAR JSON string from an archive, optionally within a mono range.",
     exportHarInput,
     async ({ path, passphrase, monoStart, monoEnd }) => {
-      return toTextPayload(
-        await exportHarFromArchive({
-          path,
-          passphrase,
-          monoStart,
-          monoEnd
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await exportHarFromArchive({
+            path,
+            passphrase,
+            monoStart,
+            monoEnd
+          })
+        )
       );
     }
   );
@@ -203,17 +231,19 @@ export function createServer(): McpServer {
       monoStart,
       monoEnd
     }) => {
-      return toTextPayload(
-        await generatePlaywrightFromArchive({
-          path,
-          passphrase,
-          name,
-          startUrl,
-          maxActions,
-          includeHarReplay,
-          monoStart,
-          monoEnd
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await generatePlaywrightFromArchive({
+            path,
+            passphrase,
+            name,
+            startUrl,
+            maxActions,
+            includeHarReplay,
+            monoStart,
+            monoEnd
+          })
+        )
       );
     }
   );
@@ -223,14 +253,16 @@ export function createServer(): McpServer {
     "Summarize action spans with trigger/duration plus request, error, and screenshot context.",
     summarizeActionsInput,
     async ({ path, passphrase, monoStart, monoEnd, limit }) => {
-      return toTextPayload(
-        await summarizeActions({
-          path,
-          passphrase,
-          monoStart,
-          monoEnd,
-          limit
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await summarizeActions({
+            path,
+            passphrase,
+            monoStart,
+            monoEnd,
+            limit
+          })
+        )
       );
     }
   );
@@ -240,15 +272,17 @@ export function createServer(): McpServer {
     "Find likely root-cause signals around errors (nearby failed requests, warn/error console, AI root cause hints).",
     rootCauseCandidatesInput,
     async ({ path, passphrase, monoStart, monoEnd, limit, windowMs }) => {
-      return toTextPayload(
-        await findRootCauseCandidates({
-          path,
-          passphrase,
-          monoStart,
-          monoEnd,
-          limit,
-          windowMs
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await findRootCauseCandidates({
+            path,
+            passphrase,
+            monoStart,
+            monoEnd,
+            limit,
+            windowMs
+          })
+        )
       );
     }
   );
@@ -269,19 +303,21 @@ export function createServer(): McpServer {
       topPerfDiffs,
       includeStorageHashes
     }) => {
-      return toTextPayload(
-        await compareSessions({
-          leftPath,
-          rightPath,
-          leftPassphrase,
-          rightPassphrase,
-          topTypeDeltas,
-          topRequestDiffs,
-          topErrorDiffs,
-          topActionDiffs,
-          topPerfDiffs,
-          includeStorageHashes
-        })
+      return archiveOperations.run(async () =>
+        toTextPayload(
+          await compareSessions({
+            leftPath,
+            rightPath,
+            leftPassphrase,
+            rightPassphrase,
+            topTypeDeltas,
+            topRequestDiffs,
+            topErrorDiffs,
+            topActionDiffs,
+            topPerfDiffs,
+            includeStorageHashes
+          })
+        )
       );
     }
   );
@@ -295,12 +331,23 @@ export async function startServer(): Promise<void> {
   await server.connect(transport);
 }
 
-function toTextPayload(value: unknown): { content: Array<{ type: "text"; text: string }> } {
+export function toTextPayload(value: unknown): {
+  content: Array<{ type: "text"; text: string }>;
+} {
+  const serialized = JSON.stringify(value, null, 2);
+  if (serialized === undefined) {
+    throw new TypeError("MCP tool output must be JSON-serializable.");
+  }
+  const outputBytes = Buffer.byteLength(serialized, "utf8");
+  if (outputBytes > MAX_MCP_TEXT_PAYLOAD_BYTES) {
+    throw new McpOutputLimitError(outputBytes);
+  }
+
   return {
     content: [
       {
         type: "text",
-        text: JSON.stringify(value, null, 2)
+        text: serialized
       }
     ]
   };
diff --git a/apps/mcp-server/src/output-limits.ts b/apps/mcp-server/src/output-limits.ts
new file mode 100644
index 0000000..a1f12c6
--- /dev/null
+++ b/apps/mcp-server/src/output-limits.ts
@@ -0,0 +1 @@
+export const MAX_MCP_TEXT_PAYLOAD_BYTES = 4 * 1024 * 1024;
diff --git a/apps/mcp-server/src/session-tools.test.ts b/apps/mcp-server/src/session-tools.test.ts
index 90f5a25..0b3fe0a 100644
--- a/apps/mcp-server/src/session-tools.test.ts
+++ b/apps/mcp-server/src/session-tools.test.ts
@@ -1,5 +1,5 @@
 import { createHash } from "node:crypto";
-import { mkdtemp, mkdir, rm, utimes, writeFile } from "node:fs/promises";
+import { mkdtemp, mkdir, rm, truncate, utimes, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import JSZip from "jszip";
@@ -7,17 +7,25 @@ import { afterEach, describe, expect, it } from "vitest";
 import type { ExportManifest, WebBlackboxEvent } from "@webblackbox/protocol";
 
 import {
+  MAX_MCP_PATH_CHARS,
+  MCP_ARCHIVE_SCAN_LIMITS,
+  MCP_HAR_EXPORT_LIMITS,
+  assertArchiveScanBudget,
   compareSessions,
   exportHarFromArchive,
   findRootCauseCandidates,
   generateBugReportBundle,
   generatePlaywrightFromArchive,
   listArchives,
+  sessionSummaryInput,
   summarizeActions
 } from "./session-tools.js";
+import { MAX_MCP_TEXT_PAYLOAD_BYTES } from "./output-limits.js";
 
 const tempDirs: string[] = [];
 
+type HarLimitFailure = Error & { actual: number };
+
 afterEach(async () => {
   await Promise.all(
     tempDirs.splice(0).map((dir) =>
@@ -30,6 +38,25 @@ afterEach(async () => {
 });
 
 describe("session tools", () => {
+  it("rejects oversized paths and bounded-scan exhaustion", async () => {
+    expect(sessionSummaryInput.path.safeParse("x".repeat(MAX_MCP_PATH_CHARS + 1)).success).toBe(
+      false
+    );
+    await expect(
+      listArchives({
+        dir: "x".repeat(MAX_MCP_PATH_CHARS + 1),
+        recursive: false
+      })
+    ).rejects.toThrow(/path exceeds the MCP limit/i);
+
+    expect(() =>
+      assertArchiveScanBudget(Date.now(), MCP_ARCHIVE_SCAN_LIMITS.entries + 1, 1)
+    ).toThrow(/entry limit/i);
+    expect(() =>
+      assertArchiveScanBudget(Date.now(), 1, MCP_ARCHIVE_SCAN_LIMITS.directories + 1)
+    ).toThrow(/directory limit/i);
+  });
+
   it("lists archive files and ignores non-archive files", async () => {
     const root = await mkdtemp(join(tmpdir(), "wb-mcp-list-"));
     tempDirs.push(root);
@@ -95,6 +122,22 @@ describe("session tools", () => {
     expect(result.archives.map((row) => row.path)).toEqual([newer]);
   });
 
+  it("rejects oversized archives from stat metadata before reading them", async () => {
+    const root = await mkdtemp(join(tmpdir(), "wb-mcp-oversized-"));
+    tempDirs.push(root);
+    const archivePath = join(root, "oversized.webblackbox");
+
+    await writeFile(archivePath, "");
+    await truncate(archivePath, 64 * 1024 * 1024 + 1);
+
+    await expect(
+      summarizeActions({
+        path: archivePath,
+        limit: 1
+      })
+    ).rejects.toThrow(/archive input exceeds the MCP limit/i);
+  });
+
   it("summarizes actions from a real archive fixture", async () => {
     const root = await mkdtemp(join(tmpdir(), "wb-mcp-positive-actions-"));
     tempDirs.push(root);
@@ -225,6 +268,114 @@ describe("session tools", () => {
     );
   });
 
+  it("rejects HAR request counts after observing only maxEntries plus one", async () => {
+    const root = await mkdtemp(join(tmpdir(), "wb-mcp-har-entry-limit-"));
+    tempDirs.push(root);
+    const archivePath = join(root, "many-requests.webblackbox");
+    const fixture = createHarFixture(
+      Array.from({ length: MCP_HAR_EXPORT_LIMITS.maxEntries + 1 }, () => 0)
+    );
+    const archiveBytes = await createArchiveFixture(fixture.events, {
+      blobs: fixture.blobs,
+      compression: "DEFLATE"
+    });
+    await writeFile(archivePath, archiveBytes);
+
+    const error = await rejectedError(exportHarFromArchive({ path: archivePath }));
+
+    expect(error).toMatchObject({
+      name: "HarExportResourceLimitError",
+      resource: "maxEntries",
+      limit: MCP_HAR_EXPORT_LIMITS.maxEntries,
+      actual: MCP_HAR_EXPORT_LIMITS.maxEntries + 1,
+      completedEntries: 0,
+      bodyBytesRead: 0
+    });
+  });
+
+  it("stops inflating a single compressed HAR body at its byte budget", async () => {
+    const root = await mkdtemp(join(tmpdir(), "wb-mcp-har-body-limit-"));
+    tempDirs.push(root);
+    const archivePath = join(root, "large-body.webblackbox");
+    const fullBodyBytes = MCP_HAR_EXPORT_LIMITS.maxBodyBytes + 512 * 1024;
+    const fixture = createHarFixture([fullBodyBytes]);
+    const archiveBytes = await createArchiveFixture(fixture.events, {
+      blobs: fixture.blobs,
+      compression: "DEFLATE"
+    });
+    expect(archiveBytes.byteLength).toBeLessThan(fullBodyBytes / 20);
+    await writeFile(archivePath, archiveBytes);
+
+    const error = await rejectedError(exportHarFromArchive({ path: archivePath }));
+
+    expect(error).toMatchObject({
+      name: "HarExportResourceLimitError",
+      resource: "maxBodyBytes",
+      limit: MCP_HAR_EXPORT_LIMITS.maxBodyBytes,
+      completedEntries: 0,
+      bodyBytesRead: MCP_HAR_EXPORT_LIMITS.maxBodyBytes
+    });
+    expect((error as HarLimitFailure).actual).toBeGreaterThan(MCP_HAR_EXPORT_LIMITS.maxBodyBytes);
+    expect((error as HarLimitFailure).actual).toBeLessThan(fullBodyBytes);
+  });
+
+  it("stops a multi-body HAR at the cumulative read budget", async () => {
+    const root = await mkdtemp(join(tmpdir(), "wb-mcp-har-total-body-limit-"));
+    tempDirs.push(root);
+    const archivePath = join(root, "many-bodies.webblackbox");
+    const bodySizes = [900 * 1024, 900 * 1024, 900 * 1024];
+    const fixture = createHarFixture(bodySizes);
+    const archiveBytes = await createArchiveFixture(fixture.events, {
+      blobs: fixture.blobs,
+      compression: "DEFLATE"
+    });
+    const fullBodyBytes = bodySizes.reduce((total, size) => total + size, 0);
+    expect(archiveBytes.byteLength).toBeLessThan(fullBodyBytes / 20);
+    await writeFile(archivePath, archiveBytes);
+
+    const error = await rejectedError(exportHarFromArchive({ path: archivePath }));
+
+    expect(error).toMatchObject({
+      name: "HarExportResourceLimitError",
+      resource: "maxTotalBodyBytes",
+      limit: MCP_HAR_EXPORT_LIMITS.maxTotalBodyBytes,
+      completedEntries: 2,
+      bodyBytesRead: MCP_HAR_EXPORT_LIMITS.maxTotalBodyBytes
+    });
+    expect((error as HarLimitFailure).actual).toBeGreaterThan(
+      MCP_HAR_EXPORT_LIMITS.maxTotalBodyBytes
+    );
+    expect((error as HarLimitFailure).actual).toBeLessThan(fullBodyBytes);
+  });
+
+  it("keeps the final encoded HAR envelope within the MCP text limit", async () => {
+    const root = await mkdtemp(join(tmpdir(), "wb-mcp-har-output-limit-"));
+    tempDirs.push(root);
+    const archivePath = join(root, "bounded-output.webblackbox");
+    const fixture = createHarFixture([256 * 1024]);
+    const archiveBytes = await createArchiveFixture(fixture.events, {
+      blobs: fixture.blobs,
+      compression: "DEFLATE"
+    });
+    await writeFile(archivePath, archiveBytes);
+
+    const result = await exportHarFromArchive({ path: archivePath });
+    const serialized = JSON.stringify(result, null, 2);
+    const emptyEnvelope = JSON.stringify({ ...result, har: "" }, null, 2);
+    const expectedBytes =
+      Buffer.byteLength(emptyEnvelope, "utf8") -
+      2 +
+      Buffer.byteLength(JSON.stringify(result.har), "utf8");
+
+    expect(Buffer.byteLength(serialized, "utf8")).toBe(expectedBytes);
+    expect(Buffer.byteLength(serialized, "utf8")).toBeLessThanOrEqual(MAX_MCP_TEXT_PAYLOAD_BYTES);
+    expect(JSON.parse(result.har)).toMatchObject({
+      log: {
+        entries: [expect.any(Object)]
+      }
+    });
+  });
+
   it("throws helpful errors when report archive is missing", async () => {
     const missing = join(tmpdir(), `wb-mcp-missing-${Date.now()}.webblackbox`);
 
@@ -288,7 +439,13 @@ describe("session tools", () => {
   });
 });
 
-async function createArchiveFixture(events: WebBlackboxEvent[]): Promise<Uint8Array> {
+async function createArchiveFixture(
+  events: WebBlackboxEvent[],
+  options: {
+    blobs?: Record<string, Uint8Array>;
+    compression?: "DEFLATE" | "STORE";
+  } = {}
+): Promise<Uint8Array> {
   const zip = new JSZip();
   const firstEvent = events[0];
   const lastEvent = events[events.length - 1];
@@ -314,6 +471,26 @@ async function createArchiveFixture(events: WebBlackboxEvent[]): Promise<Uint8Ar
     reqId,
     eventIds
   }));
+  const chunkId = "chunk-000001";
+  const eventContent = events.map((event) => JSON.stringify(event)).join("\n");
+  const eventBytes = Buffer.from(eventContent);
+  const timeIndex =
+    firstEvent && lastEvent
+      ? [
+          {
+            chunkId,
+            seq: 1,
+            tStart: firstEvent.t,
+            tEnd: lastEvent.t,
+            monoStart: firstEvent.mono,
+            monoEnd: lastEvent.mono,
+            eventCount: events.length,
+            byteLength: eventBytes.byteLength,
+            codec: "none" as const,
+            sha256: sha256Hex(eventContent)
+          }
+        ]
+      : [];
   const manifest: ExportManifest = {
     protocolVersion: 1,
     createdAt: new Date(0).toISOString(),
@@ -333,30 +510,32 @@ async function createArchiveFixture(events: WebBlackboxEvent[]): Promise<Uint8Ar
     stats: {
       eventCount: events.length,
       chunkCount: 1,
-      blobCount: 0,
+      blobCount: Object.keys(options.blobs ?? {}).length,
       durationMs
     }
   };
 
-  const files = new Map<string, string>();
+  const files = new Map<string, Uint8Array>();
   const addJsonFile = (path: string, value: unknown) => {
-    const content = JSON.stringify(value, null, 2);
+    const content = Buffer.from(JSON.stringify(value, null, 2));
     zip.file(path, content);
     files.set(path, content);
   };
   const addTextFile = (path: string, content: string) => {
-    zip.file(path, content);
-    files.set(path, content);
+    const bytes = Buffer.from(content);
+    zip.file(path, bytes);
+    files.set(path, bytes);
   };
 
   addJsonFile("manifest.json", manifest);
-  addJsonFile("index/time.json", []);
+  addJsonFile("index/time.json", timeIndex);
   addJsonFile("index/req.json", reqIndex);
   addJsonFile("index/inv.json", []);
-  addTextFile(
-    "events/chunk-000001.ndjson",
-    events.map((event) => JSON.stringify(event)).join("\n")
-  );
+  addTextFile(`events/${chunkId}.ndjson`, eventContent);
+  for (const [path, bytes] of Object.entries(options.blobs ?? {})) {
+    zip.file(path, bytes);
+    files.set(path, bytes);
+  }
 
   const fileHashes = Object.fromEntries(
     [...files.entries()].map(([path, content]) => [path, sha256Hex(content)])
@@ -367,13 +546,112 @@ async function createArchiveFixture(events: WebBlackboxEvent[]): Promise<Uint8Ar
     files: fileHashes
   });
 
-  return zip.generateAsync({ type: "uint8array" });
+  return zip.generateAsync({
+    type: "uint8array",
+    compression: options.compression ?? "STORE",
+    compressionOptions: options.compression === "DEFLATE" ? { level: 9 } : undefined
+  });
 }
 
-function sha256Hex(content: string): string {
+function sha256Hex(content: string | Uint8Array): string {
   return createHash("sha256").update(Buffer.from(content)).digest("hex");
 }
 
+function createHarFixture(bodySizes: number[]): {
+  events: WebBlackboxEvent[];
+  blobs: Record<string, Uint8Array>;
+} {
+  const events: WebBlackboxEvent[] = [
+    {
+      v: 1,
+      sid: "S-HAR",
+      tab: 1,
+      t: 1_700_000_000_000,
+      mono: 0,
+      type: "meta.session.start",
+      id: "E-HAR-START",
+      data: {}
+    }
+  ];
+  const blobs: Record<string, Uint8Array> = {};
+
+  bodySizes.forEach((bodySize, index) => {
+    const reqId = `REQ-HAR-${index}`;
+    const mono = index * 10 + 1;
+    events.push(
+      {
+        v: 1,
+        sid: "S-HAR",
+        tab: 1,
+        t: 1_700_000_000_000 + mono,
+        mono,
+        type: "network.request",
+        id: `E-HAR-${index}-REQUEST`,
+        ref: { req: reqId },
+        data: {
+          requestId: reqId,
+          request: {
+            method: "GET",
+            url: `https://example.test/api/${index}`
+          }
+        }
+      },
+      {
+        v: 1,
+        sid: "S-HAR",
+        tab: 1,
+        t: 1_700_000_000_002 + mono,
+        mono: mono + 2,
+        type: "network.response",
+        id: `E-HAR-${index}-RESPONSE`,
+        ref: { req: reqId },
+        data: {
+          requestId: reqId,
+          response: {
+            url: `https://example.test/api/${index}`,
+            status: 200,
+            statusText: "OK",
+            mimeType: "application/json"
+          }
+        }
+      }
+    );
+
+    if (bodySize > 0) {
+      const bodyBytes = new Uint8Array(bodySize).fill(0x78);
+      const hash = sha256Hex(bodyBytes);
+      events.push({
+        v: 1,
+        sid: "S-HAR",
+        tab: 1,
+        t: 1_700_000_000_003 + mono,
+        mono: mono + 3,
+        type: "network.body",
+        id: `E-HAR-${index}-BODY`,
+        ref: { req: reqId },
+        data: {
+          reqId,
+          contentHash: hash,
+          size: bodySize
+        }
+      });
+      blobs[`blobs/sha256-${hash}.json`] = bodyBytes;
+    }
+  });
+
+  return { events, blobs };
+}
+
+async function rejectedError(promise: Promise<unknown>): Promise<Error> {
+  try {
+    await promise;
+  } catch (error) {
+    return error instanceof Error ? error : new Error(String(error));
+  }
+
+  throw new Error("Expected promise to reject.");
+}
+
 function createBaselineEvents(): WebBlackboxEvent[] {
   return [
     {
@@ -438,6 +716,7 @@ function createBaselineEvents(): WebBlackboxEvent[] {
       data: {
         requestId: "REQ-B-1",
         response: {
+          url: "https://example.com/api/items",
           status: 200,
           statusText: "OK",
           mimeType: "application/json"
@@ -560,6 +839,7 @@ function createRegressionEvents(): WebBlackboxEvent[] {
       data: {
         requestId: "REQ-R-1",
         response: {
+          url: "https://example.com/api/items",
           status: 500,
           statusText: "Internal Server Error",
           mimeType: "application/json"
diff --git a/apps/mcp-server/src/session-tools.ts b/apps/mcp-server/src/session-tools.ts
index 67da703..03cfdd8 100644
--- a/apps/mcp-server/src/session-tools.ts
+++ b/apps/mcp-server/src/session-tools.ts
@@ -1,8 +1,11 @@
-import { readdir, readFile, stat } from "node:fs/promises";
+import { open, opendir, stat } from "node:fs/promises";
 import { extname, resolve } from "node:path";
-import { WebBlackboxPlayer } from "@webblackbox/player-sdk";
+import { DEFAULT_ARCHIVE_RESOURCE_LIMITS, WebBlackboxPlayer } from "@webblackbox/player-sdk";
 import { z } from "zod";
 
+import { readFileHandleBounded } from "./archive-file-reader.js";
+import { MAX_MCP_TEXT_PAYLOAD_BYTES } from "./output-limits.js";
+
 const ARCHIVE_EXTENSIONS = new Set([".webblackbox", ".zip"]);
 const DEFAULT_LIST_LIMIT = 50;
 const MAX_LIST_LIMIT = 200;
@@ -15,9 +18,29 @@ const DEFAULT_DATA_PREVIEW_CHARS = 2_000;
 const MAX_DATA_PREVIEW_CHARS = 10_000;
 const DEFAULT_COMPARE_TOP = 15;
 const MAX_COMPARE_TOP = 100;
+const MAX_ARCHIVE_BYTES = Math.min(DEFAULT_ARCHIVE_RESOURCE_LIMITS.maxInputBytes, 64 * 1024 * 1024);
+export const MAX_MCP_PATH_CHARS = 4_096;
+export const MCP_ARCHIVE_SCAN_LIMITS = Object.freeze({
+  entries: 10_000,
+  directories: 1_000,
+  durationMs: 5_000
+});
+export const MCP_HAR_EXPORT_LIMITS = Object.freeze({
+  maxEntries: 2_000,
+  maxBodyBytes: 1024 * 1024,
+  maxTotalBodyBytes: 2 * 1024 * 1024,
+  maxEntryMetadataBytes: 256 * 1024,
+  maxHeaderFields: 512,
+  maxDerivedFields: 1_024,
+  maxHarBytes: 3 * 1024 * 1024
+});
+
+function archivePathSchema(description: string): z.ZodString {
+  return z.string().min(1).max(MAX_MCP_PATH_CHARS).describe(description);
+}
 
 export const listArchivesInput = {
-  dir: z.string().min(1).optional().describe("Directory to scan. Defaults to current working dir."),
+  dir: archivePathSchema("Directory to scan. Defaults to current working dir.").optional(),
   recursive: z.boolean().optional().describe("Recursively scan subdirectories. Defaults to true."),
   limit: z
     .number()
@@ -35,7 +58,7 @@ export type ListArchivesArgs = {
 };
 
 export const sessionSummaryInput = {
-  path: z.string().min(1).describe("Path to a .webblackbox or .zip archive."),
+  path: archivePathSchema("Path to a .webblackbox or .zip archive."),
   passphrase: z.string().min(1).max(4096).optional().describe("Passphrase for encrypted archives."),
   slowRequestMs: z
     .number()
@@ -61,7 +84,7 @@ export type SessionSummaryArgs = {
 };
 
 export const queryEventsInput = {
-  path: z.string().min(1).describe("Path to a .webblackbox or .zip archive."),
+  path: archivePathSchema("Path to a .webblackbox or .zip archive."),
   passphrase: z.string().min(1).max(4096).optional().describe("Passphrase for encrypted archives."),
   text: z.string().min(1).max(512).optional().describe("Free-text query."),
   types: z.array(z.string().min(1).max(128)).max(100).optional().describe("Filter by event types."),
@@ -110,7 +133,7 @@ export type QueryEventsArgs = {
 };
 
 export const networkIssuesInput = {
-  path: z.string().min(1).describe("Path to a .webblackbox or .zip archive."),
+  path: archivePathSchema("Path to a .webblackbox or .zip archive."),
   passphrase: z.string().min(1).max(4096).optional().describe("Passphrase for encrypted archives."),
   minDurationMs: z
     .number()
@@ -136,7 +159,7 @@ export type NetworkIssuesArgs = {
 };
 
 export const generateBugReportInput = {
-  path: z.string().min(1).describe("Path to a .webblackbox or .zip archive."),
+  path: archivePathSchema("Path to a .webblackbox or .zip archive."),
   passphrase: z.string().min(1).max(4096).optional().describe("Passphrase for encrypted archives."),
   title: z.string().min(1).max(512).optional().describe("Optional report title."),
   maxItems: z
@@ -170,7 +193,7 @@ export type GenerateBugReportArgs = {
 };
 
 export const exportHarInput = {
-  path: z.string().min(1).describe("Path to a .webblackbox or .zip archive."),
+  path: archivePathSchema("Path to a .webblackbox or .zip archive."),
   passphrase: z.string().min(1).max(4096).optional().describe("Passphrase for encrypted archives."),
   monoStart: z.number().finite().optional().describe("Optional mono range start."),
   monoEnd: z.number().finite().optional().describe("Optional mono range end.")
@@ -184,7 +207,7 @@ export type ExportHarArgs = {
 };
 
 export const summarizeActionsInput = {
-  path: z.string().min(1).describe("Path to a .webblackbox or .zip archive."),
+  path: archivePathSchema("Path to a .webblackbox or .zip archive."),
   passphrase: z.string().min(1).max(4096).optional().describe("Passphrase for encrypted archives."),
   monoStart: z.number().finite().optional().describe("Optional mono range start."),
   monoEnd: z.number().finite().optional().describe("Optional mono range end."),
@@ -206,7 +229,7 @@ export type SummarizeActionsArgs = {
 };
 
 export const rootCauseCandidatesInput = {
-  path: z.string().min(1).describe("Path to a .webblackbox or .zip archive."),
+  path: archivePathSchema("Path to a .webblackbox or .zip archive."),
   passphrase: z.string().min(1).max(4096).optional().describe("Passphrase for encrypted archives."),
   monoStart: z.number().finite().optional().describe("Optional mono range start."),
   monoEnd: z.number().finite().optional().describe("Optional mono range end."),
@@ -236,7 +259,7 @@ export type RootCauseCandidatesArgs = {
 };
 
 export const generatePlaywrightInput = {
-  path: z.string().min(1).describe("Path to a .webblackbox or .zip archive."),
+  path: archivePathSchema("Path to a .webblackbox or .zip archive."),
   passphrase: z.string().min(1).max(4096).optional().describe("Passphrase for encrypted archives."),
   name: z.string().min(1).max(128).optional().describe("Playwright test name."),
   startUrl: z.string().min(1).max(2048).optional().describe("Optional navigation URL override."),
@@ -267,8 +290,8 @@ export type GeneratePlaywrightArgs = {
 };
 
 export const compareSessionsInput = {
-  leftPath: z.string().min(1).describe("Baseline archive path."),
-  rightPath: z.string().min(1).describe("Compared archive path."),
+  leftPath: archivePathSchema("Baseline archive path."),
+  rightPath: archivePathSchema("Compared archive path."),
   leftPassphrase: z
     .string()
     .min(1)
@@ -693,15 +716,36 @@ export async function exportHarFromArchive(args: ExportHarArgs): Promise<{
 }> {
   const archivePath = resolveArchivePath(args.path);
   const range = buildRange(args.monoStart, args.monoEnd);
+  const outputRange = {
+    monoStart: range?.monoStart ?? null,
+    monoEnd: range?.monoEnd ?? null
+  };
+  const emptyEnvelopeBytes = Buffer.byteLength(
+    JSON.stringify(
+      {
+        archive: archivePath,
+        range: outputRange,
+        har: ""
+      },
+      null,
+      2
+    ),
+    "utf8"
+  );
+  const maxEncodedBytes = MAX_MCP_TEXT_PAYLOAD_BYTES - emptyEnvelopeBytes + 2;
+  if (maxEncodedBytes <= 2) {
+    throw new Error("MCP HAR output envelope leaves no room for a HAR document.");
+  }
+
   const player = await openArchivePlayer(archivePath, args.passphrase, range ?? undefined);
-  const har = player.exportHar(range ?? undefined);
+  const har = await player.exportHarWithLimits(range ?? undefined, {
+    ...MCP_HAR_EXPORT_LIMITS,
+    maxEncodedBytes
+  });
 
   return {
     archive: archivePath,
-    range: {
-      monoStart: range?.monoStart ?? null,
-      monoEnd: range?.monoEnd ?? null
-    },
+    range: outputRange,
     har
   };
 }
@@ -1218,20 +1262,48 @@ async function openArchivePlayer(
   passphrase?: string,
   range?: { monoStart?: number; monoEnd?: number }
 ): Promise<WebBlackboxPlayer> {
+  let handle: Awaited<ReturnType<typeof open>> | null = null;
+
   try {
-    const bytes = await readFile(path);
-    return await WebBlackboxPlayer.open(new Uint8Array(bytes), {
+    handle = await open(path, "r");
+    const archiveStat = await handle.stat();
+    if (!archiveStat.isFile()) {
+      throw new Error("Archive path is not a regular file.");
+    }
+    if (archiveStat.size > MAX_ARCHIVE_BYTES) {
+      throw new Error(
+        `Archive input exceeds the MCP limit (${archiveStat.size} > ${MAX_ARCHIVE_BYTES} bytes).`
+      );
+    }
+
+    const bytes = await readFileHandleBounded(handle, archiveStat.size, MAX_ARCHIVE_BYTES);
+    return await WebBlackboxPlayer.open(bytes, {
       passphrase,
-      range
+      range,
+      resourceLimits: {
+        maxInputBytes: MAX_ARCHIVE_BYTES
+      }
     });
   } catch (error) {
     throw new Error(
       `Failed to open archive '${path}': ${error instanceof Error ? error.message : String(error)}`
     );
+  } finally {
+    await handle?.close();
   }
 }
 
 function resolveArchivePath(pathLike: string): string {
+  if (pathLike.length === 0) {
+    throw new Error("Archive path must not be empty.");
+  }
+  if (pathLike.length > MAX_MCP_PATH_CHARS) {
+    throw new Error(`Archive path exceeds the MCP limit (${MAX_MCP_PATH_CHARS} characters).`);
+  }
+  if (pathLike.includes("\0")) {
+    throw new Error("Archive path must not contain NUL characters.");
+  }
+
   return resolve(process.cwd(), pathLike);
 }
 
@@ -1247,6 +1319,9 @@ async function collectArchiveFiles(
   }>
 > {
   const directories = [rootDir];
+  const scanStartedAt = Date.now();
+  let visitedEntries = 0;
+  let visitedDirectories = 0;
   const rows: Array<{
     path: string;
     sizeBytes: number;
@@ -1260,11 +1335,13 @@ async function collectArchiveFiles(
       break;
     }
 
-    const entries = await readdir(currentDir, {
-      withFileTypes: true
-    });
+    visitedDirectories += 1;
+    assertArchiveScanBudget(scanStartedAt, visitedEntries, visitedDirectories);
+    const directory = await opendir(currentDir);
 
-    for (const entry of entries) {
+    for await (const entry of directory) {
+      visitedEntries += 1;
+      assertArchiveScanBudget(scanStartedAt, visitedEntries, visitedDirectories);
       const fullPath = resolve(currentDir, entry.name);
 
       if (entry.isDirectory()) {
@@ -1296,6 +1373,28 @@ async function collectArchiveFiles(
     .slice(0, limit);
 }
 
+export function assertArchiveScanBudget(
+  scanStartedAt: number,
+  visitedEntries: number,
+  visitedDirectories: number
+): void {
+  if (visitedEntries > MCP_ARCHIVE_SCAN_LIMITS.entries) {
+    throw new Error(
+      `Archive scan exceeded the MCP entry limit (${MCP_ARCHIVE_SCAN_LIMITS.entries}). Choose a narrower directory or disable recursion.`
+    );
+  }
+  if (visitedDirectories > MCP_ARCHIVE_SCAN_LIMITS.directories) {
+    throw new Error(
+      `Archive scan exceeded the MCP directory limit (${MCP_ARCHIVE_SCAN_LIMITS.directories}). Choose a narrower directory or disable recursion.`
+    );
+  }
+  if (Date.now() - scanStartedAt > MCP_ARCHIVE_SCAN_LIMITS.durationMs) {
+    throw new Error(
+      `Archive scan exceeded the MCP time limit (${MCP_ARCHIVE_SCAN_LIMITS.durationMs} ms). Choose a narrower directory or disable recursion.`
+    );
+  }
+}
+
 function isArchiveFile(path: string): boolean {
   const extension = extname(path).toLowerCase();
   return ARCHIVE_EXTENSIONS.has(extension);
diff --git a/apps/mcp-server/vitest.config.ts b/apps/mcp-server/vitest.config.ts
index cd03562..5020bf0 100644
--- a/apps/mcp-server/vitest.config.ts
+++ b/apps/mcp-server/vitest.config.ts
@@ -11,5 +11,20 @@ export default defineConfig({
         new URL("../../packages/protocol/src/index.ts", import.meta.url)
       )
     }
+  },
+  test: {
+    environment: "node",
+    coverage: {
+      provider: "v8",
+      reporter: ["text", "lcov"],
+      include: ["src/**/*.ts"],
+      exclude: ["src/**/*.test.ts", "src/**/*.d.ts"],
+      thresholds: {
+        lines: 65,
+        statements: 65,
+        functions: 55,
+        branches: 45
+      }
+    }
   }
 });
diff --git a/apps/player/CHANGELOG.md b/apps/player/CHANGELOG.md
index d5bd049..21847b6 100644
--- a/apps/player/CHANGELOG.md
+++ b/apps/player/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @webblackbox/player
 
+## 0.7.0
+
+### Patch Changes
+
+- b3cfda9: Keep share credentials out of URLs, require secure share endpoints, bind client privacy claims, bound
+  archive buffering, and make concurrent archive loads deterministic.
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+  - @webblackbox/player-sdk@0.7.0
+  - @webblackbox/protocol@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/apps/player/README.md b/apps/player/README.md
index 309c526..3b7612a 100644
--- a/apps/player/README.md
+++ b/apps/player/README.md
@@ -61,7 +61,8 @@ The deploy script will:
 - build the Player
 - prepare the Pages artifact
 - publish `apps/player/build` to the `gh-pages` branch
-- verify `https://webllm.github.io/webblackbox/` is serving the Player
+- publish a commit-bound `deployment.json` marker
+- verify `https://webllm.github.io/webblackbox/` serves that exact source commit
 
 From the repo root you can also run:
 
@@ -138,6 +139,8 @@ pnpm player:pages:deploy
 - Jira issue templates
 - HAR export
 - Share upload and link-based reload via `@webblackbox/share-server`
+- Share upload stays disabled unless the archive carries a passed pre-encryption scanner result. The Player binds its allowlisted public privacy claim to the exact uploaded bytes with SHA-256; the Share server exposes that claim as client-unverified, not as server attestation.
+- Share API keys are retained only in page memory after a successful request; they are never persisted to `localStorage`, and legacy persisted keys are removed on startup
 
 ### Session Comparison
 
diff --git a/apps/player/package.json b/apps/player/package.json
index 8b2cb64..ff0f675 100644
--- a/apps/player/package.json
+++ b/apps/player/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@webblackbox/player",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "license": "MIT",
   "private": true,
   "type": "module",
@@ -10,7 +10,7 @@
     "e2e:playback": "pnpm run build && node scripts/e2e-playback-regression.mjs",
     "pages:build": "pnpm build && node scripts/prepare-pages-build.mjs",
     "pages:deploy": "node scripts/deploy-gh-pages.mjs",
-    "serve": "npx -y http-server ./ -p 4177",
+    "serve": "vite preview --host 127.0.0.1 --port 4177 --strictPort --outDir build",
     "lint": "eslint src --ext .ts,.tsx",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run --passWithNoTests"
diff --git a/apps/player/scripts/deploy-gh-pages.mjs b/apps/player/scripts/deploy-gh-pages.mjs
index 5fb0491..8c5ff01 100644
--- a/apps/player/scripts/deploy-gh-pages.mjs
+++ b/apps/player/scripts/deploy-gh-pages.mjs
@@ -4,6 +4,8 @@ import { dirname, resolve, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawn } from "node:child_process";
 
+import { createDeploymentMarker, waitForSiteDeployment } from "./lib/pages-deployment.mjs";
+
 const scriptDir = dirname(fileURLToPath(import.meta.url));
 const appRoot = resolve(scriptDir, "..");
 const workspaceRoot = resolve(appRoot, "..", "..");
@@ -15,6 +17,12 @@ const branchName = readFlagValue(args, "--branch") ?? "gh-pages";
 const siteUrl = readFlagValue(args, "--site-url") ?? "https://webllm.github.io/webblackbox/";
 const skipBuild = args.includes("--skip-build");
 const skipVerify = args.includes("--skip-verify");
+const sourceCommit = (
+  await runCommand("git", ["rev-parse", "HEAD"], workspaceRoot, {
+    captureStdout: true
+  })
+).trim();
+const deploymentMarker = createDeploymentMarker(sourceCommit, process.env.RELEASE_TAG);
 const commitMessage =
   readFlagValue(args, "--message") ?? `Deploy player to ${branchName}${await resolveHeadSuffix()}`;
 
@@ -71,6 +79,11 @@ try {
   await clearDirectoryExceptGit(repoDir);
   await copyDirectory(buildDir, repoDir);
   await writeFile(resolve(repoDir, ".nojekyll"), "", "utf8");
+  await writeFile(
+    resolve(repoDir, "deployment.json"),
+    `${JSON.stringify(deploymentMarker, null, 2)}\n`,
+    "utf8"
+  );
 
   await runCommand("git", ["add", "-A"], repoDir);
 
@@ -98,7 +111,10 @@ try {
   }
 
   if (!skipVerify) {
-    await waitForSite(siteUrl, 180_000);
+    await waitForSiteDeployment({
+      siteUrl,
+      expectedCommit: sourceCommit
+    });
   }
 
   console.info(
@@ -109,6 +125,7 @@ try {
         remote: remoteName,
         branch: branchName,
         siteUrl,
+        sourceCommit,
         verified: !skipVerify
       },
       null,
@@ -237,40 +254,6 @@ function normalizeGitHubHttpsRemote(remoteUrl) {
   }
 }
 
-async function waitForSite(url, timeoutMs) {
-  const startedAt = Date.now();
-  let lastStatus = "unknown";
-
-  while (Date.now() - startedAt < timeoutMs) {
-    try {
-      const response = await fetch(url, {
-        redirect: "follow",
-        headers: {
-          "cache-control": "no-cache"
-        }
-      });
-      const body = await response.text();
-      lastStatus = `${response.status}`;
-
-      if (response.ok && body.includes("<title>WebBlackbox Player</title>")) {
-        return;
-      }
-    } catch (error) {
-      lastStatus = error instanceof Error ? error.message : String(error);
-    }
-
-    await sleep(5_000);
-  }
-
-  throw new Error(`Timed out waiting for ${url} to serve the player. Last status: ${lastStatus}`);
-}
-
-function sleep(ms) {
-  return new Promise((resolvePromise) => {
-    setTimeout(resolvePromise, ms);
-  });
-}
-
 function readFlagValue(argv, flagName) {
   const inline = argv.find((entry) => entry.startsWith(`${flagName}=`));
 
diff --git a/apps/player/scripts/e2e-playback-regression.mjs b/apps/player/scripts/e2e-playback-regression.mjs
index b4717a1..873ecad 100644
--- a/apps/player/scripts/e2e-playback-regression.mjs
+++ b/apps/player/scripts/e2e-playback-regression.mjs
@@ -1,26 +1,32 @@
 #!/usr/bin/env node
 
-import { spawn, spawnSync } from "node:child_process";
+import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { createServer } from "node:http";
 import { constants, createWriteStream } from "node:fs";
 import { access, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
 import { createServer as createNetServer } from "node:net";
-import { dirname, extname, isAbsolute, resolve, sep } from "node:path";
+import { dirname, extname, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 
 import JSZip from "jszip";
 
+import {
+  createE2eTempPath,
+  resolveExecutable,
+  terminateProcess
+} from "../../../scripts/e2e-runtime.mjs";
+
 const root = dirname(fileURLToPath(import.meta.url));
 const playerRoot = resolve(root, "..");
 const playerDir = process.env.WB_E2E_PLAYER_DIR ?? resolve(playerRoot, "build");
 const headless = (process.env.WB_E2E_HEADLESS ?? "1") !== "0";
 const profileDir =
-  process.env.WB_E2E_PROFILE_DIR ?? `/tmp/webblackbox-player-playback-profile-${Date.now()}`;
+  process.env.WB_E2E_PROFILE_DIR ?? createE2eTempPath("webblackbox-player-playback-profile");
 const artifactsDir =
-  process.env.WB_E2E_ARTIFACTS_DIR ?? `/tmp/webblackbox-player-playback-artifacts-${Date.now()}`;
+  process.env.WB_E2E_ARTIFACTS_DIR ?? createE2eTempPath("webblackbox-player-playback-artifacts");
 const chromeLogPath =
-  process.env.WB_E2E_LOG ?? `/tmp/webblackbox-player-playback-${Date.now()}.log`;
+  process.env.WB_E2E_LOG ?? createE2eTempPath("webblackbox-player-playback", ".log");
 const chromeReadyTimeoutMs = Number(process.env.WB_E2E_CHROME_READY_TIMEOUT_MS ?? "25000");
 const chromeLaunchAttempts = Number(process.env.WB_E2E_CHROME_LAUNCH_ATTEMPTS ?? "2");
 const requestedRemotePort = process.env.WB_E2E_REMOTE_PORT
@@ -252,7 +258,7 @@ async function createMixedMonoArchive() {
     event(
       "E-030",
       base + 500,
-      base + 900_000,
+      900_000,
       "network.request",
       {
         reqId: "R-mixed",
@@ -272,7 +278,7 @@ async function createMixedMonoArchive() {
     event(
       "E-040",
       base + 820,
-      base + 900_320,
+      900_320,
       "network.response",
       {
         reqId: "R-mixed",
@@ -292,7 +298,7 @@ async function createMixedMonoArchive() {
     event(
       "E-050",
       base + 860,
-      base + 900_360,
+      900_360,
       "network.body",
       {
         reqId: "R-mixed",
@@ -304,14 +310,14 @@ async function createMixedMonoArchive() {
         req: "R-mixed"
       }
     ),
-    event("E-060", base + 900, 900, "user.mousemove", {
+    event("E-060", base + 900, 900_400, "user.mousemove", {
       x: 320,
       y: 210
     }),
     event(
       "E-070",
       base + 1_000,
-      base + 901_000,
+      901_000,
       "screen.screenshot",
       {
         shotId: screenshotHash,
@@ -329,31 +335,31 @@ async function createMixedMonoArchive() {
           x: 330,
           y: 218,
           t: base + 1_000,
-          mono: base + 901_000
+          mono: 901_000
         }
       },
       {
         shot: screenshotHash
       }
     ),
-    event("E-080", base + 1_250, 1_250, "console.entry", {
+    event("E-080", base + 1_250, 901_250, "console.entry", {
       level: "info",
       source: "console-api",
       text: "mixed mono fixture loaded"
     }),
-    event("E-090", base + 1_500, base + 901_500, "error.exception", {
+    event("E-090", base + 1_500, 901_500, "error.exception", {
       message: "Synthetic fixture error",
       name: "Error",
       stack: "Error: Synthetic fixture error"
     }),
-    event("E-100", base + 1_650, 1_650, "user.mousemove", {
+    event("E-100", base + 1_650, 901_650, "user.mousemove", {
       x: 420,
       y: 260
     }),
     event(
       "E-110",
       base + 1_850,
-      1_850,
+      901_850,
       "user.click",
       {
         x: 455,
@@ -371,7 +377,7 @@ async function createMixedMonoArchive() {
     event(
       "E-120",
       base + 2_200,
-      base + 902_200,
+      902_200,
       "screen.screenshot",
       {
         shotId: screenshotHash,
@@ -389,7 +395,7 @@ async function createMixedMonoArchive() {
           x: 455,
           y: 286,
           t: base + 2_200,
-          mono: base + 902_200
+          mono: 902_200
         }
       },
       {
@@ -397,23 +403,28 @@ async function createMixedMonoArchive() {
         shot: screenshotHash
       }
     ),
-    event("E-130", base + 2_400, 2_400, "meta.session.end", {
+    event("E-130", base + 2_400, 902_400, "meta.session.end", {
       reason: "complete"
     })
   ];
   const ndjson = `${events.map((entry) => JSON.stringify(entry)).join("\n")}\n`;
   const chunkBytes = textEncoder.encode(ndjson);
   const chunkHash = sha256Hex(chunkBytes);
-  const rawMonos = events.map((entry) => entry.mono);
-  const wallTimes = events.map((entry) => entry.t);
+  const firstEvent = events[0];
+  const lastEvent = events.at(-1);
+
+  if (!firstEvent || !lastEvent) {
+    throw new Error("Playback regression archive requires at least one event.");
+  }
+
   const timeIndex = [
     {
       chunkId: "C-000001",
       seq: 1,
-      tStart: Math.min(...wallTimes),
-      tEnd: Math.max(...wallTimes),
-      monoStart: Math.min(...rawMonos),
-      monoEnd: Math.max(...rawMonos),
+      tStart: firstEvent.t,
+      tEnd: lastEvent.t,
+      monoStart: firstEvent.mono,
+      monoEnd: lastEvent.mono,
       eventCount: events.length,
       byteLength: chunkBytes.byteLength,
       codec: "none",
@@ -677,51 +688,6 @@ async function resolveChromeBinary(candidates) {
   );
 }
 
-async function resolveExecutable(candidate) {
-  if (!candidate) {
-    return null;
-  }
-
-  const trimmed = candidate.trim();
-
-  if (!trimmed) {
-    return null;
-  }
-
-  if (isAbsolute(trimmed) || trimmed.startsWith(".")) {
-    try {
-      await access(trimmed, constants.X_OK);
-      return trimmed;
-    } catch {
-      return null;
-    }
-  }
-
-  const which = spawnSync("which", [trimmed], {
-    encoding: "utf8"
-  });
-
-  if (which.status !== 0) {
-    return null;
-  }
-
-  const resolved = which.stdout
-    .split("\n")
-    .map((line) => line.trim())
-    .find((line) => line.length > 0);
-
-  if (!resolved) {
-    return null;
-  }
-
-  try {
-    await access(resolved, constants.X_OK);
-    return resolved;
-  } catch {
-    return null;
-  }
-}
-
 async function launchChromeWithRetry(binary, options) {
   let lastError = null;
 
@@ -763,7 +729,7 @@ async function launchChromeWithRetry(binary, options) {
       };
     } catch (error) {
       lastError = error;
-      await terminateChromeProcess(proc);
+      await terminateProcess(proc);
       logStream.end();
 
       if (attempt < options.attempts) {
@@ -1279,30 +1245,6 @@ function sleep(ms) {
   });
 }
 
-async function terminateChromeProcess(proc) {
-  if (!proc || proc.killed || proc.exitCode !== null) {
-    return;
-  }
-
-  proc.kill("SIGTERM");
-  await Promise.race([
-    new Promise((resolvePromise) => {
-      proc.once("exit", resolvePromise);
-    }),
-    sleep(5_000)
-  ]);
-
-  if (proc.exitCode === null && !proc.killed) {
-    proc.kill("SIGKILL");
-    await Promise.race([
-      new Promise((resolvePromise) => {
-        proc.once("exit", resolvePromise);
-      }),
-      sleep(2_000)
-    ]);
-  }
-}
-
 async function cleanup() {
   if (state.client) {
     state.client.close();
@@ -1314,7 +1256,7 @@ async function cleanup() {
     state.targetId = null;
   }
 
-  await terminateChromeProcess(state.chromeProcess);
+  await terminateProcess(state.chromeProcess);
   state.chromeProcess = null;
   state.baseUrl = null;
 
diff --git a/apps/player/scripts/lib/pages-deployment.mjs b/apps/player/scripts/lib/pages-deployment.mjs
new file mode 100644
index 0000000..800e289
--- /dev/null
+++ b/apps/player/scripts/lib/pages-deployment.mjs
@@ -0,0 +1,81 @@
+export function createDeploymentMarker(commit, tag = null) {
+  if (!/^[0-9a-f]{40}$/.test(commit)) {
+    throw new Error(`Invalid deployment commit: ${commit}`);
+  }
+
+  return {
+    schemaVersion: 1,
+    commit,
+    tag: typeof tag === "string" && tag.length > 0 ? tag : null
+  };
+}
+
+export async function waitForSiteDeployment({
+  siteUrl,
+  expectedCommit,
+  timeoutMs = 180_000,
+  pollIntervalMs = 5_000,
+  fetchImplementation = fetch
+}) {
+  const startedAt = Date.now();
+  let lastStatus = "unknown";
+
+  while (Date.now() - startedAt < timeoutMs) {
+    const cacheBuster = `${expectedCommit}-${Date.now()}`;
+    const pageUrl = new URL(siteUrl);
+    pageUrl.searchParams.set("deployment", cacheBuster);
+    const markerUrl = new URL("deployment.json", ensureTrailingSlash(siteUrl));
+    markerUrl.searchParams.set("deployment", cacheBuster);
+
+    try {
+      const [pageResponse, markerResponse] = await Promise.all([
+        fetchImplementation(pageUrl, requestOptions),
+        fetchImplementation(markerUrl, requestOptions)
+      ]);
+      const [pageBody, markerBody] = await Promise.all([
+        pageResponse.text(),
+        markerResponse.json()
+      ]);
+      const markerCommit =
+        markerBody && typeof markerBody === "object" && typeof markerBody.commit === "string"
+          ? markerBody.commit
+          : "missing";
+
+      lastStatus = `page=${pageResponse.status} marker=${markerResponse.status} commit=${markerCommit}`;
+      if (
+        pageResponse.ok &&
+        markerResponse.ok &&
+        pageBody.includes("<title>WebBlackbox Player</title>") &&
+        markerCommit === expectedCommit
+      ) {
+        return;
+      }
+    } catch (error) {
+      lastStatus = error instanceof Error ? error.message : String(error);
+    }
+
+    await sleep(pollIntervalMs);
+  }
+
+  throw new Error(
+    `Timed out waiting for ${siteUrl} to serve commit ${expectedCommit}. Last status: ${lastStatus}`
+  );
+}
+
+const requestOptions = {
+  cache: "no-store",
+  redirect: "follow",
+  headers: {
+    "cache-control": "no-cache"
+  }
+};
+
+function ensureTrailingSlash(url) {
+  return url.endsWith("/") ? url : `${url}/`;
+}
+
+function sleep(ms) {
+  return new Promise((resolvePromise) => {
+    setTimeout(resolvePromise, ms);
+  });
+}
diff --git a/apps/player/scripts/lib/pages-deployment.test.mjs b/apps/player/scripts/lib/pages-deployment.test.mjs
new file mode 100644
index 0000000..e964d32
--- /dev/null
+++ b/apps/player/scripts/lib/pages-deployment.test.mjs
@@ -0,0 +1,59 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { createDeploymentMarker, waitForSiteDeployment } from "./pages-deployment.mjs";
+
+const expectedCommit = "a".repeat(40);
+
+describe("Pages deployment verification", () => {
+  it("creates a deterministic marker bound to the source commit", () => {
+    expect(createDeploymentMarker(expectedCommit, "v1.2.3")).toEqual({
+      schemaVersion: 1,
+      commit: expectedCommit,
+      tag: "v1.2.3"
+    });
+  });
+
+  it("waits until the deployed marker matches instead of accepting stale HTML", async () => {
+    let markerRequests = 0;
+    const fetchImplementation = vi.fn(async (url) => {
+      if (new URL(url).pathname.endsWith("deployment.json")) {
+        markerRequests += 1;
+        return Response.json({
+          schemaVersion: 1,
+          commit: markerRequests === 1 ? "b".repeat(40) : expectedCommit,
+          tag: "v1.2.3"
+        });
+      }
+      return new Response("<title>WebBlackbox Player</title>");
+    });
+
+    await waitForSiteDeployment({
+      siteUrl: "https://example.test/webblackbox/",
+      expectedCommit,
+      timeoutMs: 100,
+      pollIntervalMs: 0,
+      fetchImplementation
+    });
+
+    expect(markerRequests).toBe(2);
+  });
+
+  it("fails when the site never serves the expected commit", async () => {
+    const fetchImplementation = vi.fn(async (url) => {
+      if (new URL(url).pathname.endsWith("deployment.json")) {
+        return Response.json({ commit: "b".repeat(40) });
+      }
+      return new Response("<title>WebBlackbox Player</title>");
+    });
+
+    await expect(
+      waitForSiteDeployment({
+        siteUrl: "https://example.test/webblackbox/",
+        expectedCommit,
+        timeoutMs: 10,
+        pollIntervalMs: 0,
+        fetchImplementation
+      })
+    ).rejects.toThrow(`serve commit ${expectedCommit}`);
+  });
+});
diff --git a/apps/player/src/lib/archive-input.test.ts b/apps/player/src/lib/archive-input.test.ts
new file mode 100644
index 0000000..97fbc14
--- /dev/null
+++ b/apps/player/src/lib/archive-input.test.ts
@@ -0,0 +1,156 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  ArchiveInputLimitError,
+  readArchiveBlobBounded,
+  readArchiveResponseBounded
+} from "./archive-input.js";
+
+describe("bounded Player archive input", () => {
+  it("accepts an exact-size Blob and rejects an oversized Blob before arrayBuffer", async () => {
+    const exactRead = vi.fn(async () => new Uint8Array([1, 2, 3, 4]).buffer);
+    await expect(readArchiveBlobBounded({ size: 4, arrayBuffer: exactRead }, 4)).resolves.toEqual(
+      new Uint8Array([1, 2, 3, 4])
+    );
+    expect(exactRead).toHaveBeenCalledOnce();
+
+    const oversizedRead = vi.fn(async () => new Uint8Array(5).buffer);
+    await expect(
+      readArchiveBlobBounded({ size: 5, arrayBuffer: oversizedRead }, 4)
+    ).rejects.toMatchObject({
+      name: "ArchiveInputLimitError",
+      actualBytes: 5,
+      maxBytes: 4
+    });
+    expect(oversizedRead).not.toHaveBeenCalled();
+  });
+
+  it("streams an exact Content-Length boundary", async () => {
+    const response = archiveResponse([new Uint8Array([1, 2]), new Uint8Array([3, 4])], "4");
+
+    await expect(readArchiveResponseBounded(response, 4)).resolves.toEqual(
+      new Uint8Array([1, 2, 3, 4])
+    );
+  });
+
+  it.each(["-1", "01", "1.5", "1, 1", "9007199254740992"])(
+    "rejects invalid Content-Length %s",
+    async (contentLength) => {
+      const response = archiveResponse([new Uint8Array([1])], contentLength);
+      await expect(readArchiveResponseBounded(response, 4)).rejects.toThrow(
+        /invalid Content-Length/i
+      );
+    }
+  );
+
+  it("rejects an oversized Content-Length before reading", async () => {
+    const getReader = vi.fn();
+    const cancel = vi.fn(async () => undefined);
+    const body = { getReader, cancel } as unknown as ReadableStream<Uint8Array<ArrayBufferLike>>;
+    const response = {
+      headers: new Headers({ "content-length": "5" }),
+      body
+    };
+
+    await expect(readArchiveResponseBounded(response, 4)).rejects.toMatchObject({
+      name: "ArchiveInputLimitError",
+      actualBytes: 5,
+      maxBytes: 4
+    });
+    expect(getReader).not.toHaveBeenCalled();
+    expect(cancel).toHaveBeenCalledOnce();
+  });
+
+  it("cancels a forged short Content-Length stream that exceeds the hard limit", async () => {
+    let canceled = false;
+    const body = new ReadableStream<Uint8Array<ArrayBufferLike>>({
+      start(controller) {
+        controller.enqueue(new Uint8Array([1, 2]));
+        controller.enqueue(new Uint8Array([3, 4, 5]));
+      },
+      cancel() {
+        canceled = true;
+      }
+    });
+    const response = {
+      headers: new Headers({ "content-length": "2" }),
+      body
+    };
+
+    await expect(readArchiveResponseBounded(response, 4)).rejects.toMatchObject({
+      name: "ArchiveInputLimitError",
+      actualBytes: 5,
+      maxBytes: 4
+    });
+    expect(canceled).toBe(true);
+  });
+
+  it("accepts a bounded stream without Content-Length and cancels it on overflow", async () => {
+    await expect(
+      readArchiveResponseBounded(
+        archiveResponse([new Uint8Array([1, 2]), new Uint8Array([3, 4])]),
+        4
+      )
+    ).resolves.toEqual(new Uint8Array([1, 2, 3, 4]));
+
+    let canceled = false;
+    const body = new ReadableStream<Uint8Array<ArrayBufferLike>>({
+      start(controller) {
+        controller.enqueue(new Uint8Array([1, 2, 3]));
+        controller.enqueue(new Uint8Array([4, 5]));
+      },
+      cancel() {
+        canceled = true;
+      }
+    });
+    await expect(
+      readArchiveResponseBounded({ headers: new Headers(), body }, 4)
+    ).rejects.toBeInstanceOf(ArchiveInputLimitError);
+    expect(canceled).toBe(true);
+  });
+
+  it("fails closed for missing, truncated, and errored response bodies", async () => {
+    await expect(
+      readArchiveResponseBounded(
+        {
+          headers: new Headers({ "content-length": "0" }),
+          body: null
+        },
+        4
+      )
+    ).rejects.toThrow(/no readable body/i);
+
+    await expect(
+      readArchiveResponseBounded(archiveResponse([new Uint8Array([1, 2])], "3"), 4)
+    ).rejects.toThrow(/Content-Length mismatch/i);
+
+    const errored = new ReadableStream<Uint8Array<ArrayBufferLike>>({
+      start(controller) {
+        controller.error(new Error("stream failed"));
+      }
+    });
+    await expect(
+      readArchiveResponseBounded({ headers: new Headers(), body: errored }, 4)
+    ).rejects.toThrow("stream failed");
+  });
+});
+
+function archiveResponse(
+  chunks: Array<Uint8Array<ArrayBufferLike>>,
+  contentLength?: string
+): {
+  headers: Headers;
+  body: ReadableStream<Uint8Array<ArrayBufferLike>>;
+} {
+  return {
+    headers: new Headers(contentLength === undefined ? {} : { "content-length": contentLength }),
+    body: new ReadableStream<Uint8Array<ArrayBufferLike>>({
+      start(controller) {
+        for (const chunk of chunks) {
+          controller.enqueue(chunk);
+        }
+        controller.close();
+      }
+    })
+  };
+}
diff --git a/apps/player/src/lib/archive-input.ts b/apps/player/src/lib/archive-input.ts
new file mode 100644
index 0000000..409ce59
--- /dev/null
+++ b/apps/player/src/lib/archive-input.ts
@@ -0,0 +1,185 @@
+import { DEFAULT_ARCHIVE_RESOURCE_LIMITS } from "@webblackbox/player-sdk";
+
+export const MAX_PLAYER_ARCHIVE_INPUT_BYTES = DEFAULT_ARCHIVE_RESOURCE_LIMITS.maxInputBytes;
+
+export class ArchiveInputLimitError extends Error {
+  public override readonly name = "ArchiveInputLimitError";
+
+  public constructor(
+    public readonly actualBytes: number,
+    public readonly maxBytes: number
+  ) {
+    super(`Archive input exceeds the Player limit (${actualBytes} > ${maxBytes} bytes).`);
+  }
+}
+
+type ArchiveBlobInput = Pick<Blob, "size" | "arrayBuffer">;
+
+type ArchiveByteChunk = Uint8Array<ArrayBufferLike>;
+
+type ArchiveResponseInput = {
+  body: ReadableStream<ArchiveByteChunk> | null;
+  headers: Pick<Headers, "get">;
+};
+
+export async function readArchiveBlobBounded(
+  input: ArchiveBlobInput,
+  maxBytes = MAX_PLAYER_ARCHIVE_INPUT_BYTES
+): Promise<Uint8Array> {
+  assertMaxBytes(maxBytes);
+  assertObservedBytes(input.size, maxBytes, "Blob size");
+
+  const bytes = new Uint8Array(await input.arrayBuffer());
+  assertObservedBytes(bytes.byteLength, maxBytes, "Blob contents");
+  if (bytes.byteLength !== input.size) {
+    throw new Error(
+      `Archive Blob size changed while being read (${bytes.byteLength} bytes read; expected ${input.size}).`
+    );
+  }
+  return bytes;
+}
+
+export async function readArchiveResponseBounded(
+  response: ArchiveResponseInput,
+  maxBytes = MAX_PLAYER_ARCHIVE_INPUT_BYTES
+): Promise<Uint8Array> {
+  assertMaxBytes(maxBytes);
+  const body = response.body;
+  let declaredBytes: number | null;
+  try {
+    declaredBytes = parseContentLength(response.headers.get("content-length"), maxBytes);
+  } catch (error) {
+    if (body) {
+      await cancelStream(body, error);
+    }
+    throw error;
+  }
+  if (!body) {
+    throw new Error("Archive response has no readable body.");
+  }
+
+  const reader = body.getReader();
+  const accumulator = new BoundedByteAccumulator(maxBytes, declaredBytes);
+
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) {
+        break;
+      }
+      if (!(value instanceof Uint8Array)) {
+        throw new Error("Archive response stream produced a non-byte chunk.");
+      }
+      accumulator.append(value);
+    }
+
+    return accumulator.finish();
+  } catch (error) {
+    await cancelReader(reader, error);
+    throw error;
+  } finally {
+    reader.releaseLock();
+  }
+}
+
+function parseContentLength(value: string | null, maxBytes: number): number | null {
+  if (value === null) {
+    return null;
+  }
+  if (!/^(?:0|[1-9]\d*)$/.test(value)) {
+    throw new Error(`Archive response has an invalid Content-Length header: ${value}`);
+  }
+
+  const declaredBytes = Number(value);
+  if (!Number.isSafeInteger(declaredBytes)) {
+    throw new Error(`Archive response has an invalid Content-Length header: ${value}`);
+  }
+  if (declaredBytes > maxBytes) {
+    throw new ArchiveInputLimitError(declaredBytes, maxBytes);
+  }
+  return declaredBytes;
+}
+
+class BoundedByteAccumulator {
+  private output: Uint8Array;
+
+  private length = 0;
+
+  public constructor(
+    private readonly maxBytes: number,
+    private readonly declaredBytes: number | null
+  ) {
+    this.output = new Uint8Array(0);
+  }
+
+  public append(chunk: ArchiveByteChunk): void {
+    const nextLength = this.length + chunk.byteLength;
+    if (!Number.isSafeInteger(nextLength) || nextLength > this.maxBytes) {
+      throw new ArchiveInputLimitError(nextLength, this.maxBytes);
+    }
+    if (this.declaredBytes !== null && nextLength > this.declaredBytes) {
+      throw new Error(
+        `Archive response exceeded its Content-Length (${nextLength} > ${this.declaredBytes} bytes).`
+      );
+    }
+
+    if (nextLength > this.output.byteLength) {
+      const grownCapacity = Math.min(
+        this.maxBytes,
+        Math.max(nextLength, Math.ceil(Math.max(1, this.output.byteLength) * 1.5))
+      );
+      const grown = new Uint8Array(grownCapacity);
+      grown.set(this.output.subarray(0, this.length));
+      this.output = grown;
+    }
+
+    this.output.set(chunk, this.length);
+    this.length = nextLength;
+  }
+
+  public finish(): Uint8Array {
+    if (this.declaredBytes !== null && this.length !== this.declaredBytes) {
+      throw new Error(
+        `Archive response Content-Length mismatch (${this.length} bytes read; expected ${this.declaredBytes}).`
+      );
+    }
+    return this.output.byteLength === this.length ? this.output : this.output.slice(0, this.length);
+  }
+}
+
+function assertMaxBytes(maxBytes: number): void {
+  if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0) {
+    throw new TypeError("Archive input limit must be a positive safe integer.");
+  }
+}
+
+function assertObservedBytes(actualBytes: number, maxBytes: number, detail: string): void {
+  if (!Number.isSafeInteger(actualBytes) || actualBytes < 0) {
+    throw new Error(`Archive ${detail} is not a valid byte length.`);
+  }
+  if (actualBytes > maxBytes) {
+    throw new ArchiveInputLimitError(actualBytes, maxBytes);
+  }
+}
+
+async function cancelReader(
+  reader: ReadableStreamDefaultReader<ArchiveByteChunk>,
+  reason: unknown
+): Promise<void> {
+  try {
+    await reader.cancel(reason);
+  } catch {
+    // Preserve the original validation or stream failure.
+  }
+}
+
+async function cancelStream(
+  stream: ReadableStream<ArchiveByteChunk>,
+  reason: unknown
+): Promise<void> {
+  try {
+    await stream.cancel(reason);
+  } catch {
+    // Preserve the Content-Length validation failure.
+  }
+}
diff --git a/apps/player/src/lib/auto-share-location.test.ts b/apps/player/src/lib/auto-share-location.test.ts
new file mode 100644
index 0000000..574d300
--- /dev/null
+++ b/apps/player/src/lib/auto-share-location.test.ts
@@ -0,0 +1,73 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { consumeAutoShareLocation, resolveAutoShareLocation } from "./auto-share-location.js";
+
+const FRAGMENT_REFERENCE = "https://fragment.example.test/share/abcdefgh?key=fragment-secret";
+const QUERY_REFERENCE = "https://query.example.test/share/ijklmnop?key=query-secret";
+
+describe("auto share location", () => {
+  it("prefers the fragment reference and preserves unrelated query and fragment parameters", () => {
+    const href =
+      `https://player.example.test/view?lang=zh-CN&share=${encodeURIComponent(QUERY_REFERENCE)}` +
+      `#panel=network&share=${encodeURIComponent(FRAGMENT_REFERENCE)}&event=E-1`;
+    const resolved = resolveAutoShareLocation(href);
+
+    expect(resolved.reference).toBe(FRAGMENT_REFERENCE);
+    expect(resolved.source).toBe("fragment");
+    expect(resolved.cleanedUrl).toBe(
+      "https://player.example.test/view?lang=zh-CN#panel=network&event=E-1"
+    );
+  });
+
+  it("does not retain a nested query credential from the consumed fragment", () => {
+    const href =
+      `https://player.example.test/?theme=dark#share=${encodeURIComponent(FRAGMENT_REFERENCE)}` +
+      "&panel=details";
+    const resolved = resolveAutoShareLocation(href);
+
+    expect(resolved.reference).toBe(FRAGMENT_REFERENCE);
+    expect(resolved.cleanedUrl).toBe("https://player.example.test/?theme=dark#panel=details");
+    expect(resolved.cleanedUrl).not.toContain("key=");
+    expect(resolved.cleanedUrl).not.toContain("fragment-secret");
+  });
+
+  it("scrubs a legacy query reference while preserving other query and hash parameters", () => {
+    const href =
+      `https://player.example.test/view?lang=en&share=${encodeURIComponent(QUERY_REFERENCE)}` +
+      "#panel=timeline";
+    const resolved = resolveAutoShareLocation(href);
+
+    expect(resolved).toEqual({
+      reference: QUERY_REFERENCE,
+      source: "query",
+      cleanedUrl: "https://player.example.test/view?lang=en#panel=timeline"
+    });
+    expect(resolved.cleanedUrl).not.toContain("key=");
+    expect(resolved.cleanedUrl).not.toContain("query-secret");
+  });
+
+  it("does not mutate history when no non-empty share reference exists", () => {
+    const replaceState = vi.fn();
+
+    expect(
+      consumeAutoShareLocation("https://player.example.test/?lang=en#panel=timeline", replaceState)
+    ).toBeNull();
+    expect(replaceState).not.toHaveBeenCalled();
+  });
+
+  it("replaces history synchronously before the caller starts loading", async () => {
+    const order: string[] = [];
+    const href = `https://player.example.test/?share=${encodeURIComponent(QUERY_REFERENCE)}`;
+    const reference = consumeAutoShareLocation(href, (cleanedUrl) => {
+      order.push("history");
+      expect(cleanedUrl).toBe("https://player.example.test/");
+    });
+
+    await Promise.resolve().then(() => {
+      order.push("load");
+    });
+
+    expect(reference).toBe(QUERY_REFERENCE);
+    expect(order).toEqual(["history", "load"]);
+  });
+});
diff --git a/apps/player/src/lib/auto-share-location.ts b/apps/player/src/lib/auto-share-location.ts
new file mode 100644
index 0000000..e108055
--- /dev/null
+++ b/apps/player/src/lib/auto-share-location.ts
@@ -0,0 +1,75 @@
+export type AutoShareLocationResolution = {
+  reference: string | null;
+  source: "fragment" | "query" | null;
+  cleanedUrl: string | null;
+};
+
+/**
+ * Resolves an auto-load share reference without mutating browser state.
+ * Fragment references take precedence because fragments are not sent in HTTP requests.
+ */
+export function resolveAutoShareLocation(href: string): AutoShareLocationResolution {
+  let url: URL;
+
+  try {
+    url = new URL(href);
+  } catch {
+    return {
+      reference: null,
+      source: null,
+      cleanedUrl: null
+    };
+  }
+
+  const fragmentParams = new URLSearchParams(url.hash.startsWith("#") ? url.hash.slice(1) : "");
+  const fragmentReference = normalizeReference(fragmentParams.get("share"));
+  const queryReference = normalizeReference(url.searchParams.get("share"));
+  const reference = fragmentReference ?? queryReference;
+
+  if (!reference) {
+    return {
+      reference: null,
+      source: null,
+      cleanedUrl: null
+    };
+  }
+
+  const source = fragmentReference ? "fragment" : "query";
+  url.searchParams.delete("share");
+
+  if (fragmentReference) {
+    fragmentParams.delete("share");
+    const remainingFragment = fragmentParams.toString();
+    url.hash = remainingFragment ? `#${remainingFragment}` : "";
+  }
+
+  return {
+    reference,
+    source,
+    cleanedUrl: url.href
+  };
+}
+
+/** Scrubs the consumed reference synchronously before the caller can start asynchronous loading. */
+export function consumeAutoShareLocation(
+  href: string,
+  replaceState: (cleanedUrl: string) => void
+): string | null {
+  const resolution = resolveAutoShareLocation(href);
+
+  if (!resolution.reference || !resolution.cleanedUrl) {
+    return null;
+  }
+
+  replaceState(resolution.cleanedUrl);
+  return resolution.reference;
+}
+
+function normalizeReference(value: string | null): string | null {
+  if (value === null) {
+    return null;
+  }
+
+  const normalized = value.trim();
+  return normalized.length > 0 ? normalized : null;
+}
diff --git a/apps/player/src/lib/hash.test.ts b/apps/player/src/lib/hash.test.ts
index f1de820..b5e7240 100644
--- a/apps/player/src/lib/hash.test.ts
+++ b/apps/player/src/lib/hash.test.ts
@@ -1,10 +1,15 @@
 import { describe, expect, it } from "vitest";
 
-import { sha256HexFromText } from "./hash.js";
+import { sha256HexFromBytes, sha256HexFromText } from "./hash.js";
 
 describe("sha256HexFromText", () => {
   it("returns deterministic sha256 hash for text input", async () => {
     const hash = await sha256HexFromText("abc");
     expect(hash).toBe("ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad");
   });
+
+  it("returns deterministic sha256 hash for archive bytes", async () => {
+    const hash = await sha256HexFromBytes(new Uint8Array([0x61, 0x62, 0x63]));
+    expect(hash).toBe("ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad");
+  });
 });
diff --git a/apps/player/src/lib/hash.ts b/apps/player/src/lib/hash.ts
index 63b6ede..aa89f3e 100644
--- a/apps/player/src/lib/hash.ts
+++ b/apps/player/src/lib/hash.ts
@@ -11,7 +11,19 @@ export async function sha256HexFromText(value: string): Promise<string | null> {
 
   try {
     const bytes = new TextEncoder().encode(value);
-    const digest = await globalThis.crypto.subtle.digest("SHA-256", bytes);
+    return await sha256HexFromBytes(bytes);
+  } catch {
+    return null;
+  }
+}
+
+export async function sha256HexFromBytes(value: BufferSource): Promise<string | null> {
+  if (typeof globalThis.crypto === "undefined" || !globalThis.crypto?.subtle) {
+    return null;
+  }
+
+  try {
+    const digest = await globalThis.crypto.subtle.digest("SHA-256", value);
     return toHex(new Uint8Array(digest));
   } catch {
     return null;
diff --git a/apps/player/src/lib/i18n.ts b/apps/player/src/lib/i18n.ts
index 9d417cd..cacb32c 100644
--- a/apps/player/src/lib/i18n.ts
+++ b/apps/player/src/lib/i18n.ts
@@ -251,6 +251,7 @@ type PlayerMessages = {
   screenRecordingMeta: string;
   feedbackBugReportExported: string;
   feedbackHarExported: string;
+  feedbackHarExportFailed: string;
   feedbackGitHubIssueExported: string;
   feedbackJiraIssueExported: string;
   feedbackQuickTriageDismissed: string;
@@ -267,7 +268,9 @@ type PlayerMessages = {
   feedbackPlaywrightMocksExported: string;
   feedbackLoadArchiveBeforeSharing: string;
   feedbackInvalidShareServerUrl: string;
+  feedbackSharePreflightRequired: string;
   feedbackShareUploadProgress: string;
+  feedbackShareDigestUnavailable: string;
   feedbackShareMissingUrl: string;
   feedbackShareSucceeded: string;
   feedbackShareFailed: string;
@@ -410,7 +413,7 @@ const PLAYER_MESSAGES: Record<PlayerLocale, PlayerMessages> = {
     sharePlaceholderApiKeyRequired: "Required when server auth is enabled",
     sharePrivacyPreflightTitle: "Privacy Preflight",
     sharePrivacyPreflightDescription:
-      "Review redaction coverage and detected sensitive signals before uploading.",
+      "Review redaction coverage and detected sensitive signals before uploading. Sharing requires a passed pre-encryption scanner result.",
     sharePrivacyRedactionProfile: "Redaction profile",
     sharePrivacyDetectedSignals: "Detected signals",
     sharePrivacySensitivePreview: "Sensitive preview",
@@ -539,6 +542,7 @@ const PLAYER_MESSAGES: Record<PlayerLocale, PlayerMessages> = {
       "Recording {current} / {duration} | {chunks} chunks | {size}B | {dimensions}",
     feedbackBugReportExported: "Bug report exported.",
     feedbackHarExported: "HAR exported.",
+    feedbackHarExportFailed: "Failed to export HAR: {error}",
     feedbackGitHubIssueExported: "GitHub issue template exported.",
     feedbackJiraIssueExported: "Jira issue template exported.",
     feedbackQuickTriageDismissed: "Quick triage dismissed.",
@@ -556,8 +560,12 @@ const PLAYER_MESSAGES: Record<PlayerLocale, PlayerMessages> = {
     feedbackPlaywrightMocksExported: "Playwright mock script exported.",
     feedbackLoadArchiveBeforeSharing: "Load an archive before sharing.",
     feedbackInvalidShareServerUrl: "Invalid share server URL.",
+    feedbackSharePreflightRequired:
+      "Sharing requires a passed pre-encryption privacy scanner result.",
     feedbackShareUploadProgress:
       "Uploading share archive... {percent}% ({loadedBytes} / {totalBytes})",
+    feedbackShareDigestUnavailable:
+      "Unable to bind the privacy summary to the archive because SHA-256 is unavailable.",
     feedbackShareMissingUrl: "Share server did not return a share URL.",
     feedbackShareSucceeded: "Shared archive. URL copied: {shareUrl}",
     feedbackShareFailed: "Share failed: {error}",
@@ -728,7 +736,8 @@ const PLAYER_MESSAGES: Record<PlayerLocale, PlayerMessages> = {
     sharePlaceholderServerUrl: "https://share.example.com",
     sharePlaceholderApiKeyRequired: "当服务启用鉴权时必填",
     sharePrivacyPreflightTitle: "隐私预检",
-    sharePrivacyPreflightDescription: "上传前审核脱敏覆盖范围和检测到的敏感信号。",
+    sharePrivacyPreflightDescription:
+      "上传前审核脱敏覆盖范围和检测到的敏感信号；仅预加密扫描通过的归档可从播放器分享。",
     sharePrivacyRedactionProfile: "脱敏配置",
     sharePrivacyDetectedSignals: "检测信号",
     sharePrivacySensitivePreview: "敏感预览",
@@ -854,6 +863,7 @@ const PLAYER_MESSAGES: Record<PlayerLocale, PlayerMessages> = {
     screenRecordingMeta: "录屏 {current} / {duration} | {chunks} 个分片 | {size}B | {dimensions}",
     feedbackBugReportExported: "已导出缺陷报告。",
     feedbackHarExported: "已导出 HAR。",
+    feedbackHarExportFailed: "导出 HAR 失败：{error}",
     feedbackGitHubIssueExported: "已导出 GitHub issue 模板。",
     feedbackJiraIssueExported: "已导出 Jira issue 模板。",
     feedbackQuickTriageDismissed: "已关闭快速分诊。",
@@ -871,7 +881,9 @@ const PLAYER_MESSAGES: Record<PlayerLocale, PlayerMessages> = {
     feedbackPlaywrightMocksExported: "已导出 Playwright Mock 脚本。",
     feedbackLoadArchiveBeforeSharing: "请先加载归档，再执行分享。",
     feedbackInvalidShareServerUrl: "分享服务 URL 无效。",
+    feedbackSharePreflightRequired: "分享前必须有通过的预加密隐私扫描结果。",
     feedbackShareUploadProgress: "正在上传分享归档... {percent}%（{loadedBytes} / {totalBytes}）",
+    feedbackShareDigestUnavailable: "当前环境不支持 SHA-256，无法将隐私摘要绑定到归档。",
     feedbackShareMissingUrl: "分享服务未返回分享 URL。",
     feedbackShareSucceeded: "分享归档已完成，链接已复制：{shareUrl}",
     feedbackShareFailed: "分享失败：{error}",
diff --git a/apps/player/src/lib/latest-task.test.ts b/apps/player/src/lib/latest-task.test.ts
new file mode 100644
index 0000000..0ceda89
--- /dev/null
+++ b/apps/player/src/lib/latest-task.test.ts
@@ -0,0 +1,23 @@
+import { describe, expect, it } from "vitest";
+
+import { LatestTaskGate } from "./latest-task.js";
+
+describe("LatestTaskGate", () => {
+  it("allows only the most recently started task to commit", () => {
+    const gate = new LatestTaskGate();
+    const slowFirst = gate.begin();
+    const fastSecond = gate.begin();
+
+    expect(gate.isCurrent(fastSecond)).toBe(true);
+    expect(gate.isCurrent(slowFirst)).toBe(false);
+  });
+
+  it("invalidates pending tasks when the selection is cleared", () => {
+    const gate = new LatestTaskGate();
+    const pending = gate.begin();
+
+    gate.invalidate();
+
+    expect(gate.isCurrent(pending)).toBe(false);
+  });
+});
diff --git a/apps/player/src/lib/latest-task.ts b/apps/player/src/lib/latest-task.ts
new file mode 100644
index 0000000..6b70048
--- /dev/null
+++ b/apps/player/src/lib/latest-task.ts
@@ -0,0 +1,16 @@
+export class LatestTaskGate {
+  private generation = 0;
+
+  public begin(): number {
+    this.generation += 1;
+    return this.generation;
+  }
+
+  public invalidate(): void {
+    this.generation += 1;
+  }
+
+  public isCurrent(token: number): boolean {
+    return token === this.generation;
+  }
+}
diff --git a/apps/player/src/lib/playwright-script.test.ts b/apps/player/src/lib/playwright-script.test.ts
index f26710f..3c90e66 100644
--- a/apps/player/src/lib/playwright-script.test.ts
+++ b/apps/player/src/lib/playwright-script.test.ts
@@ -1,4 +1,5 @@
 import type { WebBlackboxEvent } from "@webblackbox/protocol";
+import { DiagnosticCategory, ModuleKind, ScriptTarget, transpileModule } from "typescript";
 import { describe, expect, it } from "vitest";
 
 import { generatePlaywrightScriptFromEvents } from "./playwright-script.js";
@@ -21,6 +22,21 @@ function event(
   };
 }
 
+function expectValidTypeScript(source: string): void {
+  const result = transpileModule(source, {
+    compilerOptions: {
+      module: ModuleKind.ESNext,
+      target: ScriptTarget.ES2022
+    },
+    reportDiagnostics: true
+  });
+  const errors = result.diagnostics?.filter(
+    (diagnostic) => diagnostic.category === DiagnosticCategory.Error
+  );
+
+  expect(errors).toEqual([]);
+}
+
 describe("generatePlaywrightScriptFromEvents", () => {
   it("generates Playwright actions from already filtered playback events", () => {
     const script = generatePlaywrightScriptFromEvents(
@@ -71,4 +87,28 @@ describe("generatePlaywrightScriptFromEvents", () => {
     expect(script).toContain("button.first");
     expect(script).not.toContain("button.second");
   });
+
+  it("escapes untrusted names and keeps masked selectors inside one comment line", () => {
+    const script = generatePlaywrightScriptFromEvents(
+      [
+        event("E-malicious", 100, "user.input", {
+          target: {
+            selector: 'input[name=password]\nawait page.goto("https://attacker.invalid")'
+          },
+          value: "[MASKED]"
+        })
+      ],
+      {
+        name: "replay');\nthrow new Error('injected')\u2028//",
+        includeHarReplay: false
+      }
+    );
+
+    expect(script).toContain(`test("replay');\\nthrow new Error('injected')\\u2028//"`);
+    expect(script).toContain(
+      '// input on input[name=password] await page.goto("https://attacker.invalid") was masked in capture'
+    );
+    expect(script).not.toContain('\nawait page.goto("https://attacker.invalid")');
+    expectValidTypeScript(script);
+  });
 });
diff --git a/apps/player/src/lib/playwright-script.ts b/apps/player/src/lib/playwright-script.ts
index 1c195af..ac3a2bf 100644
--- a/apps/player/src/lib/playwright-script.ts
+++ b/apps/player/src/lib/playwright-script.ts
@@ -27,7 +27,7 @@ export function generatePlaywrightScriptFromEvents(
   const lines = [
     "import { test } from '@playwright/test';",
     "",
-    `test('${name}', async ({ browser }) => {`,
+    `test(${toJavaScriptStringLiteral(name)}, async ({ browser }) => {`,
     "  const context = await browser.newContext();",
     includeHarReplay
       ? "  await context.routeFromHAR('./session.har', { notFound: 'fallback' });"
@@ -73,7 +73,7 @@ function toPlaywrightLines(event: WebBlackboxEvent): string[] {
     }
 
     if (!value || value === "[MASKED]") {
-      return [`  // input on ${selector} was masked in capture`];
+      return [`  // input on ${toSingleLineCommentText(selector)} was masked in capture`];
     }
 
     return [`  await page.fill(${JSON.stringify(selector)}, ${JSON.stringify(value)});`];
@@ -105,6 +105,25 @@ function toPlaywrightLines(event: WebBlackboxEvent): string[] {
   return [];
 }
 
+function toJavaScriptStringLiteral(value: string): string {
+  return JSON.stringify(value).replaceAll("\u2028", "\\u2028").replaceAll("\u2029", "\\u2029");
+}
+
+function toSingleLineCommentText(value: string): string {
+  const withoutControls = [...value]
+    .map((character) => {
+      const codePoint = character.codePointAt(0);
+      return codePoint !== undefined &&
+        (codePoint < 32 || codePoint === 127 || codePoint === 0x2028 || codePoint === 0x2029)
+        ? " "
+        : character;
+    })
+    .join("");
+  const sanitized = withoutControls.replace(/\s+/g, " ").trim().slice(0, 240);
+
+  return sanitized || "[redacted selector]";
+}
+
 function readSelector(event: WebBlackboxEvent): string | null {
   const payload = asRecord(event.data);
   const target = asRecord(payload?.target);
diff --git a/apps/player/src/lib/share-api-key.test.ts b/apps/player/src/lib/share-api-key.test.ts
new file mode 100644
index 0000000..d98119f
--- /dev/null
+++ b/apps/player/src/lib/share-api-key.test.ts
@@ -0,0 +1,64 @@
+/* @vitest-environment jsdom */
+
+import { describe, expect, it } from "vitest";
+
+import {
+  bindShareApiKeyInputToTargetOrigin,
+  getShareServerApiKeyForBaseUrl,
+  setShareServerApiKeyForBaseUrl
+} from "./share-api-key.js";
+
+describe("share API key memory", () => {
+  it("keeps keys isolated by normalized origin", () => {
+    const keys: Record<string, string> = {};
+    setShareServerApiKeyForBaseUrl(keys, "https://share-a.example/path", " key-a ");
+    setShareServerApiKeyForBaseUrl(keys, "https://share-b.example", "key-b");
+
+    expect(getShareServerApiKeyForBaseUrl(keys, "https://share-a.example/other")).toBe("key-a");
+    expect(getShareServerApiKeyForBaseUrl(keys, "https://share-b.example")).toBe("key-b");
+  });
+
+  it("replaces an edited key when the target origin changes", () => {
+    const sourceInput = document.createElement("input");
+    const apiKeyInput = document.createElement("input");
+    sourceInput.value = "https://share-a.example/share/one";
+    const keys = {
+      "https://share-a.example": "key-a",
+      "https://share-b.example": "key-b"
+    };
+    const detach = bindShareApiKeyInputToTargetOrigin(
+      sourceInput,
+      apiKeyInput,
+      (value) => value,
+      (baseUrl) => getShareServerApiKeyForBaseUrl(keys, baseUrl)
+    );
+
+    expect(apiKeyInput.value).toBe("key-a");
+    apiKeyInput.value = "unsent-edited-key-a";
+    apiKeyInput.dispatchEvent(new Event("input"));
+    sourceInput.value = "https://share-b.example/share/two";
+    sourceInput.dispatchEvent(new Event("input"));
+
+    expect(apiKeyInput.value).toBe("key-b");
+    detach();
+  });
+
+  it("preserves edits while the target origin remains unchanged", () => {
+    const sourceInput = document.createElement("input");
+    const apiKeyInput = document.createElement("input");
+    sourceInput.value = "https://share.example/share/one";
+    const detach = bindShareApiKeyInputToTargetOrigin(
+      sourceInput,
+      apiKeyInput,
+      (value) => value,
+      () => "stored-key"
+    );
+
+    apiKeyInput.value = "edited-key";
+    sourceInput.value = "https://share.example/share/two";
+    sourceInput.dispatchEvent(new Event("input"));
+
+    expect(apiKeyInput.value).toBe("edited-key");
+    detach();
+  });
+});
diff --git a/apps/player/src/lib/share-api-key.ts b/apps/player/src/lib/share-api-key.ts
index 6ffed48..1ad87f5 100644
--- a/apps/player/src/lib/share-api-key.ts
+++ b/apps/player/src/lib/share-api-key.ts
@@ -39,15 +39,10 @@ export function bindShareApiKeyInputToTargetOrigin(
   resolveBaseUrl: (value: string) => string | null,
   resolveApiKeyForBaseUrl: (baseUrl: string | null) => string
 ): () => void {
-  let apiKeyEdited = false;
   let resolvedBaseUrl = resolveBaseUrl(sourceInput.value);
   let targetOrigin = resolveShareServerOrigin(resolvedBaseUrl);
   apiKeyInput.value = resolveApiKeyForBaseUrl(resolvedBaseUrl);
 
-  const onApiKeyInput = (): void => {
-    apiKeyEdited = true;
-  };
-
   const onSourceInput = (): void => {
     const nextBaseUrl = resolveBaseUrl(sourceInput.value);
     const nextOrigin = resolveShareServerOrigin(nextBaseUrl);
@@ -58,17 +53,12 @@ export function bindShareApiKeyInputToTargetOrigin(
 
     resolvedBaseUrl = nextBaseUrl;
     targetOrigin = nextOrigin;
-
-    if (!apiKeyEdited) {
-      apiKeyInput.value = resolveApiKeyForBaseUrl(resolvedBaseUrl);
-    }
+    apiKeyInput.value = resolveApiKeyForBaseUrl(resolvedBaseUrl);
   };
 
-  apiKeyInput.addEventListener("input", onApiKeyInput);
   sourceInput.addEventListener("input", onSourceInput);
 
   return () => {
-    apiKeyInput.removeEventListener("input", onApiKeyInput);
     sourceInput.removeEventListener("input", onSourceInput);
   };
 }
diff --git a/apps/player/src/lib/share-privacy.test.ts b/apps/player/src/lib/share-privacy.test.ts
new file mode 100644
index 0000000..119134d
--- /dev/null
+++ b/apps/player/src/lib/share-privacy.test.ts
@@ -0,0 +1,13 @@
+import { describe, expect, it } from "vitest";
+
+import { hasPassedSharePrivacyPreflight } from "./share-privacy.js";
+
+describe("hasPassedSharePrivacyPreflight", () => {
+  it("accepts only an explicitly passed pre-encryption scan", () => {
+    expect(hasPassedSharePrivacyPreflight({ preEncryption: true, status: "passed" })).toBe(true);
+    expect(hasPassedSharePrivacyPreflight({ preEncryption: false, status: "passed" })).toBe(false);
+    expect(hasPassedSharePrivacyPreflight({ preEncryption: true, status: "blocked" })).toBe(false);
+    expect(hasPassedSharePrivacyPreflight({ preEncryption: true, status: "unknown" })).toBe(false);
+    expect(hasPassedSharePrivacyPreflight(undefined)).toBe(false);
+  });
+});
diff --git a/apps/player/src/lib/share-privacy.ts b/apps/player/src/lib/share-privacy.ts
new file mode 100644
index 0000000..d7a86c0
--- /dev/null
+++ b/apps/player/src/lib/share-privacy.ts
@@ -0,0 +1,10 @@
+export type SharePrivacyScannerSummary = {
+  preEncryption: boolean;
+  status: string;
+};
+
+export function hasPassedSharePrivacyPreflight(
+  scanner: SharePrivacyScannerSummary | null | undefined
+): boolean {
+  return scanner?.preEncryption === true && scanner.status === "passed";
+}
diff --git a/apps/player/src/lib/share.test.ts b/apps/player/src/lib/share.test.ts
new file mode 100644
index 0000000..f5cdede
--- /dev/null
+++ b/apps/player/src/lib/share.test.ts
@@ -0,0 +1,87 @@
+import { describe, expect, it } from "vitest";
+
+import { normalizeShareServerBaseUrl, resolveShareArchiveRequest } from "./share.js";
+
+describe("resolveShareArchiveRequest", () => {
+  it("resolves a share id against the configured server", () => {
+    expect(resolveShareArchiveRequest("abcdefgh", "https://share.example.test")).toEqual({
+      shareId: "abcdefgh",
+      baseUrl: "https://share.example.test",
+      archiveUrl: "https://share.example.test/api/share/abcdefgh/archive"
+    });
+  });
+
+  it.each([
+    "https://share.example.test/share/abcdefgh?key=query-secret",
+    "https://share.example.test/api/share/abcdefgh/meta?key=query-secret",
+    "https://share.example.test/api/share/abcdefgh/archive?key=query-secret"
+  ])("moves a query key from %s into an API header credential", (reference) => {
+    const resolved = resolveShareArchiveRequest(reference, "https://fallback.invalid");
+
+    expect(resolved).toEqual({
+      shareId: "abcdefgh",
+      baseUrl: "https://share.example.test",
+      archiveUrl: "https://share.example.test/api/share/abcdefgh/archive",
+      queryApiKey: "query-secret"
+    });
+    expect(resolved?.archiveUrl).not.toContain("key=");
+  });
+
+  it("does not propagate unrelated query parameters or fragments", () => {
+    const resolved = resolveShareArchiveRequest(
+      "https://share.example.test/share/abcdefgh?utm_source=test#secret-fragment",
+      "https://fallback.invalid"
+    );
+
+    expect(resolved?.archiveUrl).toBe("https://share.example.test/api/share/abcdefgh/archive");
+    expect(resolved).not.toHaveProperty("queryApiKey");
+  });
+
+  it("rejects unsupported references", () => {
+    expect(
+      resolveShareArchiveRequest("https://share.example.test/other/path", "https://fallback")
+    ).toBeNull();
+  });
+
+  it.each([
+    "http://share.example.test/share/abcdefgh",
+    "ftp://share.example.test/share/abcdefgh",
+    "file:///share/abcdefgh",
+    "https://user:secret@share.example.test/share/abcdefgh"
+  ])("rejects an unsafe share reference %s", (reference) => {
+    expect(resolveShareArchiveRequest(reference, "https://fallback.invalid")).toBeNull();
+  });
+
+  it("rejects an id when its fallback server is unsafe", () => {
+    expect(resolveShareArchiveRequest("abcdefgh", "http://share.example.test")).toBeNull();
+  });
+
+  it("rejects query credentials that cannot be sent as safe headers", () => {
+    expect(
+      resolveShareArchiveRequest(
+        "https://share.example.test/share/abcdefgh?key=line%0Abreak",
+        "https://fallback.invalid"
+      )
+    ).toBeNull();
+  });
+});
+
+describe("normalizeShareServerBaseUrl", () => {
+  it.each([
+    ["https://share.example.test/path?ignored=true", "https://share.example.test"],
+    ["http://localhost:8787", "http://localhost:8787"],
+    ["http://127.42.0.9:8787", "http://127.42.0.9:8787"],
+    ["http://[::1]:8787", "http://[::1]:8787"]
+  ])("normalizes a safe server URL %s", (input, expected) => {
+    expect(normalizeShareServerBaseUrl(input)).toBe(expected);
+  });
+
+  it.each([
+    "http://share.example.test",
+    "ws://localhost:8787",
+    "javascript:alert(1)",
+    "https://user:secret@share.example.test"
+  ])("rejects an unsafe server URL %s", (input) => {
+    expect(normalizeShareServerBaseUrl(input)).toBeNull();
+  });
+});
diff --git a/apps/player/src/lib/share.ts b/apps/player/src/lib/share.ts
index 17107c3..aefe4ef 100644
--- a/apps/player/src/lib/share.ts
+++ b/apps/player/src/lib/share.ts
@@ -2,6 +2,7 @@ export type ShareArchiveRequest = {
   shareId: string;
   baseUrl: string;
   archiveUrl: string;
+  queryApiKey?: string;
 };
 
 export function resolveShareArchiveRequest(
@@ -15,7 +16,12 @@ export function resolveShareArchiveRequest(
   }
 
   if (/^[a-zA-Z0-9_-]{8,}$/.test(trimmed)) {
-    const baseUrl = fallbackBaseUrl;
+    const baseUrl = normalizeShareServerBaseUrl(fallbackBaseUrl);
+
+    if (!baseUrl) {
+      return null;
+    }
+
     return {
       shareId: trimmed,
       baseUrl,
@@ -31,16 +37,27 @@ export function resolveShareArchiveRequest(
     return null;
   }
 
+  const baseUrl = safeShareServerOrigin(parsed);
+
+  if (!baseUrl) {
+    return null;
+  }
+
+  const queryApiKey = readQueryApiKey(parsed);
+
+  if (queryApiKey === null) {
+    return null;
+  }
+
   const sharePageMatch = /^\/share\/([a-zA-Z0-9_-]+)$/.exec(parsed.pathname);
 
   if (sharePageMatch?.[1]) {
     const shareId = sharePageMatch[1];
-    const baseUrl = parsed.origin;
-    const keySuffix = buildAuthQuerySuffix(parsed);
     return {
       shareId,
       baseUrl,
-      archiveUrl: `${baseUrl}/api/share/${encodeURIComponent(shareId)}/archive${keySuffix}`
+      archiveUrl: `${baseUrl}/api/share/${encodeURIComponent(shareId)}/archive`,
+      ...queryApiKey
     };
   }
 
@@ -49,8 +66,9 @@ export function resolveShareArchiveRequest(
   if (archiveMatch?.[1]) {
     return {
       shareId: archiveMatch[1],
-      baseUrl: parsed.origin,
-      archiveUrl: parsed.toString()
+      baseUrl,
+      archiveUrl: `${baseUrl}${parsed.pathname}`,
+      ...queryApiKey
     };
   }
 
@@ -58,11 +76,11 @@ export function resolveShareArchiveRequest(
 
   if (metadataMatch?.[1]) {
     const shareId = metadataMatch[1];
-    const keySuffix = buildAuthQuerySuffix(parsed);
     return {
       shareId,
-      baseUrl: parsed.origin,
-      archiveUrl: `${parsed.origin}/api/share/${encodeURIComponent(shareId)}/archive${keySuffix}`
+      baseUrl,
+      archiveUrl: `${baseUrl}/api/share/${encodeURIComponent(shareId)}/archive`,
+      ...queryApiKey
     };
   }
 
@@ -78,7 +96,7 @@ export function normalizeShareServerBaseUrl(value: string): string | null {
 
   try {
     const url = new URL(trimmed);
-    return url.origin;
+    return safeShareServerOrigin(url);
   } catch {
     return null;
   }
@@ -102,11 +120,65 @@ export function resolveShareServerOrigin(value: string | null): string | null {
   }
 }
 
-function buildAuthQuerySuffix(url: URL): string {
+function safeShareServerOrigin(url: URL): string | null {
+  if (url.username.length > 0 || url.password.length > 0) {
+    return null;
+  }
+
+  if (url.protocol === "https:") {
+    return url.origin;
+  }
+
+  if (url.protocol === "http:" && isLoopbackHostname(url.hostname)) {
+    return url.origin;
+  }
+
+  return null;
+}
+
+function isLoopbackHostname(hostname: string): boolean {
+  const normalized = hostname.toLowerCase();
+
+  if (normalized === "localhost" || normalized === "[::1]" || normalized === "::1") {
+    return true;
+  }
+
+  const octets = normalized.split(".");
+  return (
+    octets.length === 4 &&
+    octets[0] === "127" &&
+    octets.every((octet) => /^\d{1,3}$/.test(octet) && Number(octet) <= 255)
+  );
+}
+
+function readQueryApiKey(url: URL): Pick<ShareArchiveRequest, "queryApiKey"> | null {
   const key = url.searchParams.get("key");
   if (!key) {
-    return "";
+    return {};
+  }
+
+  const normalized = key.trim();
+
+  if (
+    normalized.length === 0 ||
+    normalized.length > 4_096 ||
+    containsAsciiControlCharacter(normalized)
+  ) {
+    return null;
+  }
+
+  return {
+    queryApiKey: normalized
+  };
+}
+
+function containsAsciiControlCharacter(value: string): boolean {
+  for (const character of value) {
+    const codePoint = character.codePointAt(0);
+    if (codePoint !== undefined && (codePoint <= 0x1f || codePoint === 0x7f)) {
+      return true;
+    }
   }
 
-  return `?key=${encodeURIComponent(key)}`;
+  return false;
 }
diff --git a/apps/player/src/main.ts b/apps/player/src/main.ts
index 9a5efec..fbd0b5c 100644
--- a/apps/player/src/main.ts
+++ b/apps/player/src/main.ts
@@ -15,6 +15,8 @@ import { createRoot } from "react-dom/client";
 
 import { hasFilePayload, pickArchiveFile } from "./lib/archive-files.js";
 import { hasPlaybackEvents } from "./lib/archive-health.js";
+import { readArchiveBlobBounded, readArchiveResponseBounded } from "./lib/archive-input.js";
+import { consumeAutoShareLocation } from "./lib/auto-share-location.js";
 import { toArrayBuffer } from "./lib/binary.js";
 import { formatCompareSummary } from "./lib/compare-summary.js";
 import { escapeHtml, getElement } from "./lib/dom.js";
@@ -29,7 +31,7 @@ import {
 } from "./lib/i18n.js";
 import { describeRequestName, resolveNetworkInitiator } from "./lib/network-labels.js";
 import { clamp, readPointerRatio } from "./lib/math.js";
-import { sha256HexFromText } from "./lib/hash.js";
+import { sha256HexFromBytes, sha256HexFromText } from "./lib/hash.js";
 import { formatByteSize, formatNetworkSize, sumNetworkTransferBytes } from "./lib/network-size.js";
 import {
   applyNetworkViewFilters,
@@ -54,6 +56,7 @@ import {
 } from "./lib/replay.js";
 import { decodeResponsePreview, type ResponsePreview } from "./lib/response-decoder.js";
 import { highlightJsonPreview, redactPreviewText } from "./lib/response-preview.js";
+import { LatestTaskGate } from "./lib/latest-task.js";
 import {
   buildActionScopeIndex,
   extractReqIdFromEvent,
@@ -68,11 +71,8 @@ import {
   getShareServerApiKeyForBaseUrl,
   setShareServerApiKeyForBaseUrl
 } from "./lib/share-api-key.js";
-import {
-  normalizeShareServerBaseUrl,
-  resolveShareArchiveRequest,
-  resolveShareServerOrigin
-} from "./lib/share.js";
+import { hasPassedSharePrivacyPreflight } from "./lib/share-privacy.js";
+import { normalizeShareServerBaseUrl, resolveShareArchiveRequest } from "./lib/share.js";
 import {
   readScreenshotContext,
   readScreenshotMarker,
@@ -319,8 +319,9 @@ type PlayerState = {
 };
 
 type PublicShareSummary = {
-  schemaVersion: 1;
+  schemaVersion: 2;
   source: "client";
+  archiveSha256: string;
   analyzed: boolean;
   encrypted: boolean;
   manifest: {
@@ -409,7 +410,11 @@ const ACTION_MARKER_TYPES = new Set([
 
 const initialShareServerBaseUrl =
   readStoredText(SHARE_SERVER_BASE_URL_STORAGE_KEY) ?? DEFAULT_SHARE_SERVER_BASE_URL;
-const initialShareServerApiKeysByOrigin = readStoredShareServerApiKeys(initialShareServerBaseUrl);
+const initialShareServerApiKeysByOrigin: Record<string, string> = {};
+removeStoredItem(SHARE_SERVER_API_KEYS_STORAGE_KEY);
+removeStoredItem(LEGACY_SHARE_SERVER_API_KEY_STORAGE_KEY);
+const primaryArchiveLoadGate = new LatestTaskGate();
+const compareArchiveLoadGate = new LatestTaskGate();
 
 const state: PlayerState = {
   player: null,
@@ -611,9 +616,10 @@ const networkSortButtons = Array.from(
 );
 const panelCards = Array.from(document.querySelectorAll<HTMLElement>("[data-log-panel-target]"));
 
+const autoShareReference = consumeAutoShareReferenceFromLocation();
 bindGlobalActions();
 void renderAll({ forcePanels: true, forceScreenshot: true });
-void maybeAutoLoadSharedArchiveFromLocation();
+void maybeAutoLoadSharedArchiveFromLocation(autoShareReference);
 
 function bindGlobalActions(): void {
   bindStageSplitter();
@@ -1134,8 +1140,15 @@ function bindGlobalActions(): void {
       return;
     }
 
-    downloadTextFile("webblackbox-session.har", player.exportHar(), "application/json");
-    setFeedback(i18n.messages.feedbackHarExported);
+    void player
+      .exportHar()
+      .then((har) => {
+        downloadTextFile("webblackbox-session.har", har, "application/json");
+        setFeedback(i18n.messages.feedbackHarExported);
+      })
+      .catch((error: unknown) => {
+        setFeedback(i18n.t("feedbackHarExportFailed", { error: String(error) }));
+      });
   });
 
   refs.exportPlaywright.addEventListener("click", () => {
@@ -1536,6 +1549,7 @@ async function handlePrimaryArchiveChange(): Promise<void> {
   const file = refs.archiveInput.files?.[0];
 
   if (!file) {
+    primaryArchiveLoadGate.invalidate();
     return;
   }
 
@@ -1543,11 +1557,28 @@ async function handlePrimaryArchiveChange(): Promise<void> {
 }
 
 async function loadPrimaryArchiveFile(file: File): Promise<void> {
-  const bytes = new Uint8Array(await file.arrayBuffer());
-  await loadPrimaryArchiveBytes(bytes, file.name);
+  const loadToken = primaryArchiveLoadGate.begin();
+
+  try {
+    const bytes = await readArchiveBlobBounded(file);
+    await loadPrimaryArchiveBytes(bytes, file.name, loadToken);
+  } catch (error) {
+    if (primaryArchiveLoadGate.isCurrent(loadToken)) {
+      setFeedback(
+        i18n.t("feedbackArchiveLoadFailed", {
+          sourceName: file.name,
+          error: String(error)
+        })
+      );
+    }
+  }
 }
 
-async function loadPrimaryArchiveBytes(bytes: Uint8Array, sourceName: string): Promise<void> {
+async function loadPrimaryArchiveBytes(
+  bytes: Uint8Array,
+  sourceName: string,
+  loadToken: number
+): Promise<boolean> {
   pausePlayback();
   hideProgressHover();
   hideQuickTriagePanel();
@@ -1557,6 +1588,10 @@ async function loadPrimaryArchiveBytes(bytes: Uint8Array, sourceName: string): P
     const player = await openArchiveWithPassphraseFallback(bytes, sourceName);
     const model = buildArchiveModel(player);
 
+    if (!primaryArchiveLoadGate.isCurrent(loadToken)) {
+      return false;
+    }
+
     resetScreenshotResources();
     state.responsePreviewByHash.clear();
 
@@ -1572,23 +1607,33 @@ async function loadPrimaryArchiveBytes(bytes: Uint8Array, sourceName: string): P
     refreshCompareSummary();
 
     await renderAll({ forcePanels: true, forceScreenshot: true });
+
+    if (!primaryArchiveLoadGate.isCurrent(loadToken)) {
+      return false;
+    }
+
     showQuickTriagePanel(model, sourceName);
     const feedbackKey = hasPlaybackEvents(model.events)
       ? "feedbackArchiveLoaded"
       : "feedbackArchiveLoadedWithoutPlayback";
     setFeedback(i18n.t(feedbackKey, { sourceName }));
+    return true;
   } catch (error) {
-    hideQuickTriagePanel();
-    setFeedback(
-      i18n.t("feedbackArchiveLoadFailed", {
-        sourceName,
-        error: String(error)
-      })
-    );
+    if (primaryArchiveLoadGate.isCurrent(loadToken)) {
+      hideQuickTriagePanel();
+      setFeedback(
+        i18n.t("feedbackArchiveLoadFailed", {
+          sourceName,
+          error: String(error)
+        })
+      );
+    }
+    return false;
   }
 }
 
 async function handleCompareArchiveChange(): Promise<void> {
+  const loadToken = compareArchiveLoadGate.begin();
   const file = refs.compareInput.files?.[0];
 
   if (!file) {
@@ -1600,14 +1645,23 @@ async function handleCompareArchiveChange(): Promise<void> {
   }
 
   try {
-    const bytes = new Uint8Array(await file.arrayBuffer());
+    const bytes = await readArchiveBlobBounded(file);
     const comparePlayer = await openArchiveWithPassphraseFallback(bytes, file.name);
+
+    if (!compareArchiveLoadGate.isCurrent(loadToken)) {
+      return;
+    }
+
     state.comparePlayer = comparePlayer;
     state.compareModel = buildArchiveModel(comparePlayer);
     refreshCompareSummary();
     renderSummary();
     setFeedback(i18n.t("feedbackCompareLoaded", { fileName: file.name }));
   } catch (error) {
+    if (!compareArchiveLoadGate.isCurrent(loadToken)) {
+      return;
+    }
+
     state.comparePlayer = null;
     state.compareModel = null;
     setFeedback(
@@ -1842,6 +1896,11 @@ async function shareLoadedArchive(): Promise<void> {
     return;
   }
 
+  if (!hasPassedSharePrivacyPreflight(player.archive.privacyManifest?.scanner)) {
+    setFeedback(i18n.messages.feedbackSharePreflightRequired);
+    return;
+  }
+
   const normalizedBaseUrl = normalizeShareServerBaseUrl(shareConfig.baseUrl);
 
   if (!normalizedBaseUrl) {
@@ -1851,25 +1910,32 @@ async function shareLoadedArchive(): Promise<void> {
 
   state.shareServerBaseUrl = normalizedBaseUrl;
   writeStoredText(SHARE_SERVER_BASE_URL_STORAGE_KEY, normalizedBaseUrl);
-  rememberShareServerApiKey(normalizedBaseUrl, shareConfig.apiKey);
 
-  const headers: Record<string, string> = {
-    "content-type": "application/octet-stream",
-    "x-webblackbox-filename": state.loadedArchiveName ?? "session.webblackbox",
-    [SHARE_SUMMARY_HEADER]: encodeShareSummaryHeader(buildClientShareSummary(player))
-  };
+  try {
+    const archiveBody = toArrayBuffer(bytes);
+    const archiveSha256 = await sha256HexFromBytes(archiveBody);
+    if (!archiveSha256) {
+      throw new Error(i18n.messages.feedbackShareDigestUnavailable);
+    }
 
-  if (shareConfig.apiKey.length > 0) {
-    headers["x-webblackbox-api-key"] = shareConfig.apiKey;
-  }
+    const headers: Record<string, string> = {
+      "content-type": "application/octet-stream",
+      "x-webblackbox-filename": state.loadedArchiveName ?? "session.webblackbox",
+      [SHARE_SUMMARY_HEADER]: encodeShareSummaryHeader(
+        buildClientShareSummary(player, archiveSha256)
+      )
+    };
+
+    if (shareConfig.apiKey.length > 0) {
+      headers["x-webblackbox-api-key"] = shareConfig.apiKey;
+    }
 
-  try {
     const totalBytes = bytes.byteLength;
     let lastProgressUpdate = 0;
     const payload = (await uploadArchiveWithProgress(
       `${normalizedBaseUrl}/api/share/upload`,
       headers,
-      toArrayBuffer(bytes),
+      archiveBody,
       (loadedBytes, uploadTotalBytes) => {
         const targetTotal =
           uploadTotalBytes && uploadTotalBytes > 0 ? uploadTotalBytes : totalBytes;
@@ -1907,6 +1973,7 @@ async function shareLoadedArchive(): Promise<void> {
       throw new Error(i18n.messages.feedbackShareMissingUrl);
     }
 
+    rememberShareServerApiKey(normalizedBaseUrl, shareConfig.apiKey);
     await copyText(shareUrl);
     setFeedback(i18n.t("feedbackShareSucceeded", { shareUrl }));
   } catch (error) {
@@ -1924,7 +1991,12 @@ async function loadArchiveFromSharePrompt(): Promise<void> {
   await loadArchiveFromShareReference(shareInput.reference, shareInput.apiKey);
 }
 
-async function loadArchiveFromShareReference(reference: string, apiKey: string): Promise<void> {
+async function loadArchiveFromShareReference(
+  reference: string,
+  apiKey: string,
+  rememberApiKeyOnSuccess = true
+): Promise<void> {
+  const loadToken = primaryArchiveLoadGate.begin();
   const trimmedReference = reference.trim();
   const trimmedApiKey = apiKey.trim();
 
@@ -1937,12 +2009,12 @@ async function loadArchiveFromShareReference(reference: string, apiKey: string):
 
   state.shareServerBaseUrl = resolved.baseUrl;
   writeStoredText(SHARE_SERVER_BASE_URL_STORAGE_KEY, resolved.baseUrl);
-  rememberShareServerApiKey(resolved.baseUrl, trimmedApiKey);
 
   try {
     const headers: Record<string, string> = {};
-    if (trimmedApiKey.length > 0) {
-      headers["x-webblackbox-api-key"] = trimmedApiKey;
+    const requestApiKey = trimmedApiKey || resolved.queryApiKey || "";
+    if (requestApiKey.length > 0) {
+      headers["x-webblackbox-api-key"] = requestApiKey;
     }
 
     const response = await fetch(resolved.archiveUrl, {
@@ -1954,29 +2026,43 @@ async function loadArchiveFromShareReference(reference: string, apiKey: string):
       throw new Error(message || `HTTP ${response.status}`);
     }
 
-    const bytes = new Uint8Array(await response.arrayBuffer());
-    await loadPrimaryArchiveBytes(bytes, `shared-${resolved.shareId}.webblackbox`);
-    setFeedback(i18n.t("feedbackSharedArchiveLoaded", { shareId: resolved.shareId }));
+    const bytes = await readArchiveResponseBounded(response);
+    const loaded = await loadPrimaryArchiveBytes(
+      bytes,
+      `shared-${resolved.shareId}.webblackbox`,
+      loadToken
+    );
+
+    if (loaded && primaryArchiveLoadGate.isCurrent(loadToken)) {
+      if (rememberApiKeyOnSuccess) {
+        rememberShareServerApiKey(resolved.baseUrl, trimmedApiKey);
+      }
+      setFeedback(i18n.t("feedbackSharedArchiveLoaded", { shareId: resolved.shareId }));
+    }
   } catch (error) {
-    setFeedback(i18n.t("feedbackSharedArchiveLoadFailed", { error: String(error) }));
+    if (primaryArchiveLoadGate.isCurrent(loadToken)) {
+      setFeedback(i18n.t("feedbackSharedArchiveLoadFailed", { error: String(error) }));
+    }
   }
 }
 
-async function maybeAutoLoadSharedArchiveFromLocation(): Promise<void> {
-  let shareRef: string | null = null;
-
+function consumeAutoShareReferenceFromLocation(): string | null {
   try {
-    shareRef = new URL(window.location.href).searchParams.get("share");
+    return consumeAutoShareLocation(window.location.href, (cleanedUrl) => {
+      window.history.replaceState(window.history.state, "", cleanedUrl);
+    });
   } catch {
-    return;
+    return null;
   }
+}
 
-  if (!shareRef || shareRef.trim().length === 0) {
+async function maybeAutoLoadSharedArchiveFromLocation(shareRef: string | null): Promise<void> {
+  if (!shareRef) {
     return;
   }
 
   setFeedback(i18n.messages.feedbackSharedArchiveLoadingFromUrl);
-  await loadArchiveFromShareReference(shareRef, "");
+  await loadArchiveFromShareReference(shareRef, "", false);
 }
 
 async function promptShareUploadConfig(): Promise<{
@@ -2004,17 +2090,21 @@ async function promptShareUploadConfig(): Promise<{
   }
 
   if (result !== "confirm") {
+    refs.shareUploadApiKey.value = "";
     return null;
   }
 
   if (!refs.shareUploadPrivacyReviewed.checked) {
+    refs.shareUploadApiKey.value = "";
     return null;
   }
 
-  return {
+  const config = {
     baseUrl: refs.shareUploadBaseUrl.value.trim(),
     apiKey: refs.shareUploadApiKey.value.trim()
   };
+  refs.shareUploadApiKey.value = "";
+  return config;
 }
 
 function renderSharePrivacyPreflight(): void {
@@ -2081,17 +2171,23 @@ function renderSharePrivacyPreflight(): void {
 }
 
 function updateShareUploadConfirmState(): void {
-  refs.shareUploadConfirm.disabled = !refs.shareUploadPrivacyReviewed.checked;
+  const scanner = state.player?.archive.privacyManifest?.scanner;
+  const scannerPassed = hasPassedSharePrivacyPreflight(scanner);
+  refs.shareUploadConfirm.disabled = !refs.shareUploadPrivacyReviewed.checked || !scannerPassed;
 }
 
-function buildClientShareSummary(player: WebBlackboxPlayer): PublicShareSummary {
+function buildClientShareSummary(
+  player: WebBlackboxPlayer,
+  archiveSha256: string
+): PublicShareSummary {
   const manifest = player.archive.manifest;
   const derived = player.buildDerived();
   const privacyReport = player.getPrivacyProtectionReport();
 
   return {
-    schemaVersion: 1,
+    schemaVersion: 2,
     source: "client",
+    archiveSha256,
     analyzed: true,
     encrypted: Boolean(manifest.encryption),
     manifest: {
@@ -2198,18 +2294,22 @@ async function promptShareReferenceInput(): Promise<{ reference: string; apiKey:
   }
 
   if (result !== "confirm") {
+    refs.shareLoadApiKey.value = "";
     return null;
   }
 
   const reference = refs.shareLoadReference.value.trim();
   if (reference.length === 0) {
+    refs.shareLoadApiKey.value = "";
     return null;
   }
 
-  return {
+  const shareInput = {
     reference,
     apiKey: refs.shareLoadApiKey.value.trim()
   };
+  refs.shareLoadApiKey.value = "";
+  return shareInput;
 }
 
 function togglePlayback(): void {
@@ -5614,92 +5714,4 @@ function setFeedback(text: string): void {
 
 function rememberShareServerApiKey(baseUrl: string, apiKey: string): void {
   setShareServerApiKeyForBaseUrl(state.shareServerApiKeysByOrigin, baseUrl, apiKey);
-  persistShareServerApiKeys(state.shareServerApiKeysByOrigin);
-}
-
-function readStoredShareServerApiKeys(baseUrl: string): Record<string, string> {
-  const parsed = parseStoredShareServerApiKeys(readStoredText(SHARE_SERVER_API_KEYS_STORAGE_KEY));
-  const legacyApiKey = readStoredText(LEGACY_SHARE_SERVER_API_KEY_STORAGE_KEY);
-
-  if (legacyApiKey) {
-    const origin = resolveShareServerOrigin(baseUrl);
-
-    if (origin && !parsed[origin]) {
-      parsed[origin] = legacyApiKey;
-    }
-
-    removeStoredItem(LEGACY_SHARE_SERVER_API_KEY_STORAGE_KEY);
-    persistShareServerApiKeys(parsed);
-  }
-
-  return parsed;
-}
-
-function parseStoredShareServerApiKeys(raw: string | null): Record<string, string> {
-  if (!raw) {
-    return {};
-  }
-
-  try {
-    const candidate = asRecord(JSON.parse(raw));
-
-    if (!candidate) {
-      return {};
-    }
-
-    const parsed: Record<string, string> = {};
-
-    for (const [originCandidate, apiKeyCandidate] of Object.entries(candidate)) {
-      if (typeof apiKeyCandidate !== "string") {
-        continue;
-      }
-
-      const origin = resolveShareServerOrigin(originCandidate);
-      const apiKey = apiKeyCandidate.trim();
-
-      if (!origin || apiKey.length === 0) {
-        continue;
-      }
-
-      parsed[origin] = apiKey;
-    }
-
-    return parsed;
-  } catch {
-    removeStoredItem(SHARE_SERVER_API_KEYS_STORAGE_KEY);
-    return {};
-  }
-}
-
-function persistShareServerApiKeys(apiKeysByOrigin: Record<string, string>): void {
-  const entries: Array<{ origin: string; apiKey: string }> = [];
-
-  for (const [originCandidate, apiKeyCandidate] of Object.entries(apiKeysByOrigin)) {
-    const origin = resolveShareServerOrigin(originCandidate);
-    const apiKey = apiKeyCandidate.trim();
-
-    if (!origin || apiKey.length === 0) {
-      continue;
-    }
-
-    entries.push({
-      origin,
-      apiKey
-    });
-  }
-
-  entries.sort((left, right) => left.origin.localeCompare(right.origin));
-
-  if (entries.length === 0) {
-    removeStoredItem(SHARE_SERVER_API_KEYS_STORAGE_KEY);
-    return;
-  }
-
-  const serialized: Record<string, string> = {};
-
-  for (const entry of entries) {
-    serialized[entry.origin] = entry.apiKey;
-  }
-
-  writeStoredText(SHARE_SERVER_API_KEYS_STORAGE_KEY, JSON.stringify(serialized));
 }
diff --git a/apps/share-server/CHANGELOG.md b/apps/share-server/CHANGELOG.md
index cec1e5a..cddfeee 100644
--- a/apps/share-server/CHANGELOG.md
+++ b/apps/share-server/CHANGELOG.md
@@ -1,5 +1,21 @@
 # @webblackbox/share-server
 
+## 0.7.0
+
+### Minor Changes
+
+- b3cfda9: Add bounded upload-time privacy attestation and harden archive integrity, storage commits, capacity,
+  single-writer locking, proxy trust, audit durability, retention, and shutdown behavior.
+
+### Patch Changes
+
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+  - @webblackbox/player-sdk@0.7.0
+  - @webblackbox/protocol@0.7.0
+  - @webblackbox/pipeline@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/apps/share-server/README.md b/apps/share-server/README.md
index bc8d307..838368d 100644
--- a/apps/share-server/README.md
+++ b/apps/share-server/README.md
@@ -14,7 +14,7 @@ It provides:
 
 ```bash
 cd apps/share-server
-pnpm dev
+WEBBLACKBOX_SHARE_API_KEYS="local-dev:admin" pnpm dev
 ```
 
 By default the server listens on `http://127.0.0.1:8787`.
@@ -23,21 +23,35 @@ By default the server listens on `http://127.0.0.1:8787`.
 
 Set these environment variables for production-like deployments:
 
-- `WEBBLACKBOX_SHARE_API_KEY`: API key for `/api/share/*` and `/share/*` routes. If unset, protected routes are limited to loopback clients (`127.0.0.1` / `::1`). When set, clients can authenticate with either:
+- `WEBBLACKBOX_SHARE_API_KEY`: legacy single admin API key for `/api/share/*` and `/share/*` routes. Protected routes require a configured credential by default, including for direct loopback clients. Clients can authenticate with either:
   - `x-webblackbox-api-key: <key>`, or
   - `authorization: Bearer <key>`
-- `WEBBLACKBOX_SHARE_API_KEYS`: semicolon-separated scoped keys for rotation and least privilege. Format: `secret:scope,scope;next-secret:scope`. Supported scopes are `upload`, `read`, `list`, `revoke`, and `admin`. `admin` covers all scopes. Keep an old key and a new key configured during rotation, then remove the old key after clients are updated.
+- `WEBBLACKBOX_SHARE_API_KEYS`: semicolon-separated scoped keys for rotation and least privilege. Format: `secret:scope,scope;next-secret:scope`. Supported scopes are `upload`, `read`, `list`, `revoke`, and `admin`. `admin` covers all scopes. Unknown or empty scopes and duplicate secrets fail startup instead of falling back to `admin`. A key without `:scope` retains the legacy explicit-admin behavior. Keep an old key and a new key configured during rotation, then remove the old key after clients are updated.
+- `WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK`: development-only opt-out, default `false`. When explicitly enabled, protected routes may be used without a credential only when the actual socket peer, bind host, and public origin are loopback. Startup fails if proxy/forwarded-client configuration is present or either endpoint is non-loopback. Never enable this behind a reverse proxy; use scoped credentials instead.
 - `WEBBLACKBOX_SHARE_ALLOW_QUERY_API_KEY`: optional browser bootstrap for `GET /share/:id?key=<key>`. Keep this disabled in production unless the key is short-lived; when enabled, the server redirects to a clean URL and uses a short HttpOnly read-session cookie for page links.
 - `WEBBLACKBOX_SHARE_BIND_HOST`: bind host for the HTTP server (default `127.0.0.1`).
+- `WEBBLACKBOX_SHARE_PUBLIC_ORIGIN`: canonical external origin used for share URLs, same-origin CORS, and secure-cookie policy. It is required when binding to a non-loopback host, must be HTTPS unless it names a loopback host, and must not include credentials, a path, query, or fragment. A non-loopback public origin also requires an API credential, including when a local reverse proxy fronts a loopback bind. Request `Host` and `X-Forwarded-Proto` headers are never used as public-origin authority.
 - `WEBBLACKBOX_SHARE_ALLOWED_ORIGIN`: CORS allow origin. Defaults to `same-origin`. Use `*` only for trusted environments.
-- `WEBBLACKBOX_SHARE_MAX_UPLOAD_BYTES`: max accepted upload body size in bytes (default `262144000`).
-- `WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS`: default `false`. Public deployments should keep this disabled so uploads must be encrypted before reaching the server.
-- `WEBBLACKBOX_SHARE_DEFAULT_TTL_MS`: default share lifetime in ms (default `604800000`, seven days).
-- `WEBBLACKBOX_SHARE_MAX_TTL_MS`: maximum accepted share lifetime in ms (default `2592000000`, 30 days).
-- `WEBBLACKBOX_SHARE_RETAIN_EXPIRED_MS`: how long expired share records/files are retained before pruning (default `2592000000`, 30 days).
+- `WEBBLACKBOX_SHARE_MAX_UPLOAD_BYTES`: max accepted upload body size in bytes (default `262144000`, hard-capped by the Player SDK's 256 MiB input ceiling).
+- `WEBBLACKBOX_SHARE_MAX_CONCURRENT_INSPECTIONS`: maximum upload bodies that may be received and inspected concurrently (default `1`). Additional uploads receive `503` with `Retry-After`.
+- `WEBBLACKBOX_SHARE_UPLOAD_IDLE_TIMEOUT_MS`: maximum idle time while receiving an upload body (default `15000`).
+- `WEBBLACKBOX_SHARE_UPLOAD_TOTAL_TIMEOUT_MS`: maximum total upload-body receive time (default `120000`).
+- `WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS`: default `false`. Public deployments should keep this disabled so uploads must be encrypted before reaching the server. Disabled plaintext is rejected after bounded envelope inspection and before Player private-content analysis. When enabled, the server ignores any archive-declared `passed` scanner result, strictly decodes bounded UTF-8 content, scans raw JSON plus decoded keys and string values, and stores only its fresh upload-time result (`preEncryption: false`). Invalid archive metadata/event encodings are rejected; undecodable or malformed text-like blobs, binary content, or exhausted scan budgets force `unknown` with `trust.privateContent: "server-partially-analyzed"`, never a full server attestation.
+- `WEBBLACKBOX_SHARE_DEFAULT_TTL_MS`: default share lifetime in ms (default `604800000`, seven days; minimum `1000`).
+- `WEBBLACKBOX_SHARE_MAX_TTL_MS`: maximum accepted share lifetime in ms (default `2592000000`, 30 days; minimum `1000`). It must be greater than or equal to the default TTL.
+- `WEBBLACKBOX_SHARE_RETAIN_EXPIRED_MS`: how long expired share records/files are retained before pruning (default `2592000000`, 30 days). Set it to `0` to prune as soon as a share expires. TTL and retention values must be safe integers whose combined timestamp remains representable; invalid startup configuration is rejected.
+- `WEBBLACKBOX_SHARE_MAX_RECORDS`: upload admission limit for retained record files (default `10000`, with a non-relaxable hard ceiling of `10000`). Uploads fail with `507` before body buffering when capacity remains full after expiry pruning. Lowering this value blocks new uploads at the new limit but does not prevent startup, listing, metadata access, or revocation for existing valid records within the hard ceiling.
+- `WEBBLACKBOX_SHARE_MAX_AUDIT_LOG_BYTES`: rotate the serialized audit log at this byte size (default `16777216`, minimum `512`, hard ceiling `67108864`). Values outside that range are rejected at startup. One previous segment is retained.
+- `WEBBLACKBOX_SHARE_AUDIT_HMAC_SECRET`: optional canonical base64url key for audit client hashes. It must decode to 32–64 bytes and pass the startup entropy floor (at least 128 estimated bits); invalid or weak values fail startup without echoing the value. When omitted, the server atomically creates a random 32-byte mode-`0600` key at `audit/client-hash.hmac.key`. Generate an environment value with `node -e 'console.log(require("node:crypto").randomBytes(32).toString("base64url"))'` and keep it out of logs and command history.
+- `WEBBLACKBOX_SHARE_SHUTDOWN_TIMEOUT_MS`: maximum time to drain in-flight requests and queued audit events after `SIGINT` or `SIGTERM` (default `10000`, hard ceiling `60000`). A timeout forces remaining connections closed and terminates the process.
+- `WEBBLACKBOX_SHARE_MAX_AUDIT_QUEUE_ENTRIES`: maximum in-process audit appends, including the active append (default `128`, hard ceiling `1024`). Events above this capacity are dropped with a rate-limited operational warning instead of extending the request backlog.
+- `WEBBLACKBOX_SHARE_AUDIT_QUEUE_TIMEOUT_MS`: maximum time an admitted audit event may wait to start (default `1000`, hard ceiling `30000`). Stale events are dropped rather than written out of order long after their request.
+- `WEBBLACKBOX_SHARE_AUDIT_WRITE_TIMEOUT_MS`: maximum time a request waits for one audit append (default `2000`, hard ceiling `30000`). Timing out degrades audit logging but does not change an already committed Share operation into an HTTP failure.
+- `WEBBLACKBOX_SHARE_AUDIT_RETRY_COOLDOWN_MS`: delay before one recovery probe is allowed after an audit append error or timeout (default `5000`, hard ceiling `300000`). No probe is attempted while the timed-out filesystem operation remains unsettled, preventing repeated hung writes from accumulating.
 - `WEBBLACKBOX_UPLOAD_RATE_LIMIT_MAX`: max uploads per client in each window (default `10`).
 - `WEBBLACKBOX_UPLOAD_RATE_LIMIT_WINDOW_MS`: upload rate limit window in ms (default `60000`).
-- `WEBBLACKBOX_TRUST_X_FORWARDED_FOR`: set `true` only behind a trusted proxy; otherwise upload rate limiting uses socket IP.
+- `WEBBLACKBOX_TRUST_X_FORWARDED_FOR`: enables proxy-aware client addresses for rate limiting and redacted audit hashes only; authorization never trusts forwarded headers. Forwarded chains are used only when the socket peer is explicitly listed in `WEBBLACKBOX_TRUSTED_PROXY_IPS`, and the first untrusted hop is selected from right to left.
+- `WEBBLACKBOX_TRUSTED_PROXY_IPS`: comma-separated exact proxy IPs allowed to extend the trusted forwarded chain. The edge proxy must append or overwrite `X-Forwarded-For`; invalid IP configuration fails startup. Loopback proxies are not trusted implicitly: list `127.0.0.1` or `::1` explicitly when the proxy connects from that address.
 
 For production, prefer scoped keys over a single admin key:
 
@@ -62,14 +76,19 @@ Headers:
 
 - `content-type: application/octet-stream`
 - `x-webblackbox-filename: <optional>`
-- `x-webblackbox-share-summary: <optional URL-encoded JSON public summary computed client-side>`
+- `x-webblackbox-share-summary: <optional URL-encoded schema-v2 public claim computed client-side>`
 - `x-webblackbox-share-ttl-ms: <optional requested TTL, clamped by WEBBLACKBOX_SHARE_MAX_TTL_MS>`
-- `x-webblackbox-api-key: <optional if WEBBLACKBOX_SHARE_API_KEY is set>`
+- `x-webblackbox-api-key: <required scoped credential unless using an authorized read-session cookie or the explicit loopback development opt-out>`
 
 Body:
 
 - Raw encrypted `.webblackbox` bytes. Public deployments do not accept plaintext uploads by default.
-- Encrypted uploads must include encryption metadata for every private archive path: `events/*`, `blobs/*`, `index/time.json`, `index/req.json`, `index/inv.json`, and `privacy/manifest.json` when present. Legacy encrypted archives that left private indexes in plaintext must be re-exported with the current exporter before public share upload.
+- Outer ZIP entry count, actual per-entry inflater output, metadata bytes, total expanded bytes, compression ratio, closed file-layout membership, canonical blob paths/counts, exact encryption-map/IV coverage, stored-byte integrity, and obvious plaintext private files are checked against non-relaxable safety ceilings before an encrypted upload is retained. Plaintext uploads that opt into server analysis additionally receive Player integrity, event-codec, event-count, index-cardinality, and fresh server-side privacy-scanner checks over decoded events and text-like blobs. The scan has independent per-target, total-byte, finding-count, and elapsed-time ceilings. An embedded archive scanner claim is never treated as server attestation; opaque or incomplete coverage is reported as `unknown` and partial analysis.
+- Encrypted uploads must include encryption metadata for every private archive path: `events/*`, `blobs/*`, `index/time.json`, `index/req.json`, `index/inv.json`, and `privacy/manifest.json` when present. The server scans the full bounded contents of those entries for recognizable plaintext formats. This is a rejection heuristic, not cryptographic proof that opaque bytes are ciphertext. Legacy encrypted archives that left private indexes in plaintext must be re-exported with the current exporter before public share upload.
+
+When the optional client claim is sent, it must use `schemaVersion: 2`, include the SHA-256 of the exact archive bytes in `archiveSha256`, and agree with server-inspected outer manifest facts. A digest mismatch, a conflicting encryption/manifest claim, or any legacy `x-webblackbox-encryption`, `x-webblackbox-policy-eligible`, or `x-webblackbox-redaction-summary` header is rejected. The digest prevents a summary for one archive from being attached to another; it does **not** authenticate the uploader or prove that the claimed pre-encryption scan ran honestly.
+
+The server never receives the passphrase, so it cannot inspect encrypted private content. Bound client fields are isolated under `clientClaim` and returned as `source: "client-unverified"`, `analyzed: false`, with `trust.privateContent: "client-claim-unverified"`; verified server analysis uses the top-level `privacy` field instead. A missing client claim is accepted only as an encrypted envelope and is returned as `source: "unavailable"`. Neither encrypted state is privacy attestation. Legacy stored client summaries are downgraded to the same unverified shape without claiming a digest match. Deployments that require attestation must add a trusted signer or remote pre-encryption scanner and verify its signature outside this protocol.
 
 Response:
 
@@ -81,23 +100,39 @@ Response:
   "fileName": "webblackbox-share-abc123.webblackbox",
   "sizeBytes": 123456,
   "summary": {
-    "schemaVersion": 1,
-    "source": "client",
-    "analyzed": true,
-    "encrypted": true
+    "schemaVersion": 2,
+    "source": "client-unverified",
+    "analyzed": false,
+    "encrypted": true,
+    "trust": {
+      "archiveEnvelope": "server-inspected",
+      "privateContent": "client-claim-unverified",
+      "archiveDigestMatched": true
+    },
+    "clientClaim": {
+      "privacy": {
+        "scanner": {
+          "preEncryption": true,
+          "status": "passed",
+          "findingCount": 0
+        }
+      }
+    }
   }
 }
 ```
 
 ### Metadata and archive
 
-- `GET /api/share/list`
+- `GET /api/share/list?limit=100` (maximum page size `200`; follow the opaque `nextCursor` response value with `?cursor=<nextCursor>&limit=100` for stable pagination)
+- `GET /api/share/list?offset=0&limit=100` remains available for compatibility and returns `nextOffset`, but offset pages can shift when shares are inserted or removed between requests
 - `GET /api/share/:id/meta`
 - `GET /api/share/:id/archive`
 - `GET /share/:id`
 - `POST /api/share/:id/revoke`
 
 Expired or revoked shares return `410`.
+Archive downloads are streamed from disk and the stream is cancelled when the client disconnects.
 
 ## Data storage
 
@@ -106,10 +141,23 @@ The server stores data under:
 - `WEBBLACKBOX_SHARE_DATA_DIR` env var (if provided), otherwise
 - `.webblackbox-share-data/` in the current working directory
 
+Run exactly one Share server process for each data directory. Startup atomically acquires a mode-`0600`, no-follow process lock bound to the directory identity before it creates, migrates, reconciles, prunes, or rotates managed data. A second live process fails startup without touching that directory. Graceful shutdown releases the lock; after a crash, a later process removes it only when its same-host PID is confirmed absent. A lock attributed to another host or with invalid path, ownership, or directory-binding metadata is refused rather than reclaimed, so a data directory must not be shared by concurrently running hosts.
+
 Each share writes:
 
 - `archives/<id>.webblackbox`
 - `records/<id>.json` (redacted public summary only)
 - `audit/share-access.jsonl` (action, outcome, share id, timestamp, and client hash only)
+- `audit/client-hash.hmac.key` (default local audit-HMAC key; absent when an environment key is used)
+
+On POSIX systems, storage directories are enforced as mode `0700`; committed archives, record JSON, the audit-HMAC key, and the active/rotated audit logs are enforced as mode `0600`. Startup migrates legacy `0755`/`0644` installations through no-follow file handles and refuses managed directory or committed-file symlinks and path replacements instead of changing an external target. Uploads are streamed to mode-`0600` temporary files under `archives/`, synced, removed on every rejection or disconnect, and atomically renamed only after validation succeeds. Record JSON is likewise written through a synced mode-`0600` temporary file and atomic rename. At startup the server removes interrupted temporary files, orphan archives, orphan records, and corrupt record/archive pairs before serving requests.
+
+Startup also reconciles both `audit/share-access.jsonl` and `audit/share-access.1.jsonl` before accepting requests. Complete, within-limit segments that cannot prove they use the HMAC audit schema are deleted rather than retaining legacy publicly salted SHA-256 client hashes that permit offline IPv4 enumeration. If either segment exceeds the configured audit-log ceiling or does not end on a complete JSONL line, neither segment is migrated automatically and startup fails with the original files intact. The server never byte-truncates an audit file because that can turn a partial record into a misleading line on the next append. Move or delete the whole reported file, preserving it separately if required by your audit-retention policy, and then restart. Lowering the configured ceiling can therefore require an explicit operator rotation or removal of legacy logs.
+
+Startup also builds a compact, hard-bounded index (at most `10,000` records). List requests select at most one page from that index and only then load and verify those records and archives, so a request never retains every record payload in memory. Expiry pruning walks the compact expiry index one due record at a time. The index is updated after durable uploads, revocations, removals, and startup reconciliation; page entries still receive full record and archive-integrity validation before they are returned.
+
+Audit logs cover successful, blocked, unavailable, and internal-error outcomes for recognized Share routes, including authorization, upload rate/capacity, client-claim, pagination, expiry, and revocation decisions. Client addresses are represented by domain-separated HMAC-SHA256 values, so IPv4 addresses cannot be recovered by enumerating the small address space without the secret. Writes are serialized through a capacity- and time-bounded queue and rotate into one bounded previous segment. Logs must not contain the HMAC secret, raw client addresses, archive plaintext, passphrases, API keys, raw URLs, filenames supplied by the client, or request payloads.
+
+The HMAC key defines a correlation epoch. Restarting with the same data directory (or the same environment key) preserves client hashes. To rotate the generated key, stop every writer, remove `audit/client-hash.hmac.key`, and restart; to rotate an environment key, replace the environment value and restart. Existing HMAC log segments remain readable but their client hashes do not correlate with the new epoch, and one segment can contain events from both sides of a rotation. An environment key overrides a generated key without deleting it, so removing the environment setting later resumes the stored-key epoch.
 
-Audit logs must not contain archive plaintext, passphrases, API keys, raw URLs, filenames supplied by the client, or request payloads.
+Audit queue overflow, expiry, append timeout, and append errors are reported through rate-limited operational warnings. A failed or timed-out sink opens a circuit: queued events are dropped, and after the retry cooldown one recovery probe is admitted only after the physical append has settled. These audit degradations do not turn an already committed upload, revoke, metadata response, page response, or download into a failed HTTP operation.
diff --git a/apps/share-server/package.json b/apps/share-server/package.json
index 221c37b..040b61d 100644
--- a/apps/share-server/package.json
+++ b/apps/share-server/package.json
@@ -1,21 +1,24 @@
 {
   "name": "@webblackbox/share-server",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "license": "MIT",
   "private": true,
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
     "dev": "tsx watch src/index.ts",
+    "prebuild": "pnpm --filter @webblackbox/protocol build && pnpm --filter @webblackbox/pipeline build && pnpm --filter @webblackbox/player-sdk build",
     "build": "tsup src/index.ts --format esm --clean",
-    "e2e:share": "pnpm --filter @webblackbox/player-sdk build && pnpm build && node scripts/e2e-share-flow.mjs",
+    "e2e:share": "pnpm build && node scripts/e2e-share-flow.mjs",
     "start": "node dist/index.js",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run --passWithNoTests"
   },
   "dependencies": {
+    "@webblackbox/pipeline": "workspace:*",
     "@webblackbox/player-sdk": "workspace:*",
-    "jszip": "^3.10.1"
+    "@webblackbox/protocol": "workspace:*",
+    "jszip": "3.10.1"
   }
 }
diff --git a/apps/share-server/scripts/e2e-share-flow.mjs b/apps/share-server/scripts/e2e-share-flow.mjs
index 712ae87..29af5ed 100644
--- a/apps/share-server/scripts/e2e-share-flow.mjs
+++ b/apps/share-server/scripts/e2e-share-flow.mjs
@@ -9,6 +9,8 @@ import { fileURLToPath } from "node:url";
 
 import JSZip from "jszip";
 
+import { terminateProcess } from "../../../scripts/e2e-runtime.mjs";
+
 const root = dirname(fileURLToPath(import.meta.url));
 const appRoot = resolve(root, "..");
 const apiKey = "share-e2e-key";
@@ -54,18 +56,36 @@ async function main() {
       "content-type": "application/octet-stream",
       "x-webblackbox-api-key": apiKey,
       "x-webblackbox-filename": "share-flow.webblackbox",
-      "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(buildPassedShareSummary()))
+      "x-webblackbox-share-summary": encodeURIComponent(
+        JSON.stringify(buildPassedShareSummary(archive))
+      )
     },
     body: archive
   });
 
   assert(typeof upload.shareId === "string", "Upload did not return shareId", upload);
   assert(upload.summary?.encrypted === true, "Upload summary is not encrypted", upload);
-  assert(upload.summary?.privacy, "Upload summary missing privacy preflight", upload);
   assert(
-    upload.summary?.privacy?.scanner?.preEncryption === true &&
-      upload.summary?.privacy?.scanner?.status === "passed",
-    "Upload summary missing passed privacy scanner status",
+    upload.summary?.source === "client-unverified" &&
+      upload.summary?.trust?.privateContent === "client-claim-unverified" &&
+      upload.summary?.trust?.archiveDigestMatched === true,
+    "Upload summary does not expose the client-claim trust boundary",
+    upload
+  );
+  assert(
+    upload.summary?.privacy === undefined,
+    "Unverified client privacy fields leaked into the verified summary namespace",
+    upload
+  );
+  assert(
+    upload.summary?.clientClaim?.privacy,
+    "Upload summary missing client privacy claim",
+    upload
+  );
+  assert(
+    upload.summary?.clientClaim?.privacy?.scanner?.preEncryption === true &&
+      upload.summary?.clientClaim?.privacy?.scanner?.status === "passed",
+    "Upload summary missing passed client privacy scanner claim",
     upload
   );
 
@@ -76,8 +96,8 @@ async function main() {
   });
   assert(
     meta.summary?.encrypted === true &&
-      meta.summary?.privacy?.redaction?.headerRuleCount >= 1 &&
-      meta.summary?.privacy?.detected?.redactedMarkers >= 1,
+      meta.summary?.clientClaim?.privacy?.redaction?.headerRuleCount >= 1 &&
+      meta.summary?.clientClaim?.privacy?.detected?.redactedMarkers >= 1,
     "Metadata redaction summary missing",
     meta
   );
@@ -199,10 +219,11 @@ async function createFixtureArchive() {
   return zip.generateAsync({ type: "uint8array" });
 }
 
-function buildPassedShareSummary() {
+function buildPassedShareSummary(archive) {
   return {
-    schemaVersion: 1,
+    schemaVersion: 2,
     source: "client",
+    archiveSha256: createHash("sha256").update(archive).digest("hex"),
     analyzed: true,
     encrypted: true,
     manifest: {
@@ -280,9 +301,7 @@ function toBase64(bytes) {
 }
 
 async function cleanup() {
-  if (child && !child.killed) {
-    child.kill("SIGTERM");
-  }
+  await terminateProcess(child);
   if (dataDir) {
     await rm(dataDir, { recursive: true, force: true });
   }
diff --git a/apps/share-server/src/audit-writer.test.ts b/apps/share-server/src/audit-writer.test.ts
new file mode 100644
index 0000000..9805b5d
--- /dev/null
+++ b/apps/share-server/src/audit-writer.test.ts
@@ -0,0 +1,193 @@
+import { describe, expect, it } from "vitest";
+
+import { BoundedAuditWriter } from "./audit-writer.js";
+
+describe("BoundedAuditWriter", () => {
+  it("serializes slow writes and rejects work above its hard queue capacity", async () => {
+    const pendingWrites: Array<() => void> = [];
+    let activeWrites = 0;
+    let maximumActiveWrites = 0;
+    const writer = new BoundedAuditWriter({
+      append: () =>
+        new Promise<void>((resolve) => {
+          activeWrites += 1;
+          maximumActiveWrites = Math.max(maximumActiveWrites, activeWrites);
+          pendingWrites.push(() => {
+            activeWrites -= 1;
+            resolve();
+          });
+        }),
+      maxQueuedEntries: 2,
+      queueWaitTimeoutMs: 1_000,
+      writeTimeoutMs: 1_000,
+      retryCooldownMs: 20
+    });
+
+    const first = writer.write("first\n");
+    const second = writer.write("second\n");
+    await waitFor(() => pendingWrites.length === 1);
+
+    await expect(writer.write("overflow\n")).resolves.toEqual({
+      status: "dropped",
+      reason: "queue-capacity"
+    });
+
+    pendingWrites.shift()?.();
+    await waitFor(() => pendingWrites.length === 1);
+    pendingWrites.shift()?.();
+
+    await expect(first).resolves.toEqual({ status: "written", recovered: false });
+    await expect(second).resolves.toEqual({ status: "written", recovered: false });
+    expect(maximumActiveWrites).toBe(1);
+  });
+
+  it("expires queued events instead of starting stale writes", async () => {
+    let appendCalls = 0;
+    const writer = new BoundedAuditWriter({
+      append: async () => {
+        appendCalls += 1;
+        await delay(40);
+      },
+      maxQueuedEntries: 2,
+      queueWaitTimeoutMs: 10,
+      writeTimeoutMs: 100,
+      retryCooldownMs: 20
+    });
+
+    const first = writer.write("first\n");
+    const stale = writer.write("stale\n");
+
+    await expect(first).resolves.toEqual({ status: "written", recovered: false });
+    await expect(stale).resolves.toEqual({
+      status: "dropped",
+      reason: "queue-timeout"
+    });
+    expect(appendCalls).toBe(1);
+  });
+
+  it("bounds hung writes, drops followers, and recovers with one probe", async () => {
+    let releaseHungWrite: (() => void) | undefined;
+    let appendCalls = 0;
+    const writer = new BoundedAuditWriter({
+      append: (_line, signal) => {
+        appendCalls += 1;
+        if (appendCalls > 1) {
+          return Promise.resolve();
+        }
+        return new Promise<void>((resolve) => {
+          releaseHungWrite = resolve;
+          signal.addEventListener("abort", () => undefined, { once: true });
+        });
+      },
+      maxQueuedEntries: 3,
+      queueWaitTimeoutMs: 100,
+      writeTimeoutMs: 20,
+      retryCooldownMs: 20
+    });
+
+    const hung = writer.write("hung\n");
+    const follower = writer.write("follower\n");
+    const anotherFollower = writer.write("another-follower\n");
+
+    await expect(hung).resolves.toEqual({
+      status: "failed",
+      reason: "write-timeout"
+    });
+    await expect(follower).resolves.toEqual({
+      status: "dropped",
+      reason: "circuit-open"
+    });
+    await expect(anotherFollower).resolves.toEqual({
+      status: "dropped",
+      reason: "circuit-open"
+    });
+
+    await delay(25);
+    await expect(writer.write("blocked-while-physical-write-hangs\n")).resolves.toEqual({
+      status: "dropped",
+      reason: "circuit-open"
+    });
+    expect(appendCalls).toBe(1);
+
+    let drained = false;
+    const drain = writer.drain().then(() => {
+      drained = true;
+    });
+    await delay(5);
+    expect(drained).toBe(false);
+
+    releaseHungWrite?.();
+    await drain;
+    expect(drained).toBe(true);
+    await delay(25);
+    await expect(writer.write("recovery-probe\n")).resolves.toEqual({
+      status: "written",
+      recovered: true
+    });
+    await expect(writer.write("after-recovery\n")).resolves.toEqual({
+      status: "written",
+      recovered: false
+    });
+    expect(appendCalls).toBe(3);
+  });
+
+  it("drains every late-settling physical append across recovery attempts", async () => {
+    const pendingWrites: Array<() => void> = [];
+    const writer = new BoundedAuditWriter({
+      append: () =>
+        new Promise<void>((resolve) => {
+          pendingWrites.push(resolve);
+        }),
+      maxQueuedEntries: 1,
+      queueWaitTimeoutMs: 100,
+      writeTimeoutMs: 10,
+      retryCooldownMs: 10
+    });
+
+    await expect(writer.write("first-timeout\n")).resolves.toEqual({
+      status: "failed",
+      reason: "write-timeout"
+    });
+    expect(pendingWrites).toHaveLength(1);
+
+    let firstDrainSettled = false;
+    const firstDrain = writer.drain().then(() => {
+      firstDrainSettled = true;
+    });
+    await delay(5);
+    expect(firstDrainSettled).toBe(false);
+    pendingWrites.shift()?.();
+    await firstDrain;
+
+    await delay(15);
+    await expect(writer.write("recovery-timeout\n")).resolves.toEqual({
+      status: "failed",
+      reason: "write-timeout"
+    });
+    expect(pendingWrites).toHaveLength(1);
+
+    let secondDrainSettled = false;
+    const secondDrain = writer.drain().then(() => {
+      secondDrainSettled = true;
+    });
+    await delay(5);
+    expect(secondDrainSettled).toBe(false);
+    pendingWrites.shift()?.();
+    await secondDrain;
+    expect(secondDrainSettled).toBe(true);
+  });
+});
+
+async function waitFor(predicate: () => boolean): Promise<void> {
+  const deadline = Date.now() + 1_000;
+  while (!predicate()) {
+    if (Date.now() >= deadline) {
+      throw new Error("Timed out waiting for test condition.");
+    }
+    await delay(1);
+  }
+}
+
+function delay(ms: number): Promise<void> {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
diff --git a/apps/share-server/src/audit-writer.ts b/apps/share-server/src/audit-writer.ts
new file mode 100644
index 0000000..d10ec04
--- /dev/null
+++ b/apps/share-server/src/audit-writer.ts
@@ -0,0 +1,220 @@
+export type AuditWriteResult =
+  | {
+      status: "written";
+      recovered: boolean;
+    }
+  | {
+      status: "dropped";
+      reason: "queue-capacity" | "queue-timeout" | "circuit-open";
+    }
+  | {
+      status: "failed";
+      reason: "write-error" | "write-timeout";
+      error?: unknown;
+    };
+
+export type BoundedAuditWriterOptions = {
+  append: (line: string, signal: AbortSignal) => Promise<void>;
+  maxQueuedEntries: number;
+  queueWaitTimeoutMs: number;
+  writeTimeoutMs: number;
+  retryCooldownMs: number;
+};
+
+type CircuitState = "closed" | "open" | "half-open";
+
+/**
+ * Serializes audit appends without allowing a slow filesystem to create an
+ * unbounded request backlog. A timed-out physical append remains counted until
+ * it actually settles, so an uninterruptible filesystem operation cannot cause
+ * repeated probes to accumulate behind it.
+ */
+export class BoundedAuditWriter {
+  private readonly append: BoundedAuditWriterOptions["append"];
+  private readonly maxQueuedEntries: number;
+  private readonly queueWaitTimeoutMs: number;
+  private readonly writeTimeoutMs: number;
+  private readonly retryCooldownMs: number;
+  private readonly pendingPhysicalWrites = new Set<Promise<unknown>>();
+  private tail: Promise<void> = Promise.resolve();
+  private queuedEntries = 0;
+  private activePhysicalWrites = 0;
+  private circuitState: CircuitState = "closed";
+  private circuitRetryAt = 0;
+
+  constructor(options: BoundedAuditWriterOptions) {
+    assertPositiveInteger("maxQueuedEntries", options.maxQueuedEntries);
+    assertPositiveInteger("queueWaitTimeoutMs", options.queueWaitTimeoutMs);
+    assertPositiveInteger("writeTimeoutMs", options.writeTimeoutMs);
+    assertPositiveInteger("retryCooldownMs", options.retryCooldownMs);
+
+    this.append = options.append;
+    this.maxQueuedEntries = options.maxQueuedEntries;
+    this.queueWaitTimeoutMs = options.queueWaitTimeoutMs;
+    this.writeTimeoutMs = options.writeTimeoutMs;
+    this.retryCooldownMs = options.retryCooldownMs;
+  }
+
+  write(line: string): Promise<AuditWriteResult> {
+    const enqueuedAt = performance.now();
+    const probe = this.tryReserveCircuitProbe(enqueuedAt);
+
+    if (probe === null) {
+      return Promise.resolve({
+        status: "dropped",
+        reason: "circuit-open"
+      });
+    }
+
+    if (this.queuedEntries >= this.maxQueuedEntries) {
+      if (probe) {
+        this.reopenCircuit(enqueuedAt);
+      }
+      return Promise.resolve({
+        status: "dropped",
+        reason: "queue-capacity"
+      });
+    }
+
+    this.queuedEntries += 1;
+    const operation = this.tail
+      .then(() => this.runQueuedWrite(line, enqueuedAt, probe))
+      .catch((error: unknown): AuditWriteResult => {
+        this.reopenCircuit(performance.now());
+        return {
+          status: "failed",
+          reason: "write-error",
+          error
+        };
+      });
+
+    this.tail = operation.then(() => undefined);
+
+    return operation.finally(() => {
+      this.queuedEntries -= 1;
+    });
+  }
+
+  async drain(): Promise<void> {
+    while (true) {
+      await this.tail;
+      const pendingPhysicalWrites = [...this.pendingPhysicalWrites];
+      if (pendingPhysicalWrites.length === 0) {
+        return;
+      }
+
+      await Promise.allSettled(pendingPhysicalWrites);
+    }
+  }
+
+  private tryReserveCircuitProbe(now: number): boolean | null {
+    if (this.circuitState === "closed") {
+      return false;
+    }
+
+    if (
+      this.circuitState === "half-open" ||
+      now < this.circuitRetryAt ||
+      this.activePhysicalWrites > 0 ||
+      this.queuedEntries > 0
+    ) {
+      return null;
+    }
+
+    this.circuitState = "half-open";
+    return true;
+  }
+
+  private async runQueuedWrite(
+    line: string,
+    enqueuedAt: number,
+    probe: boolean
+  ): Promise<AuditWriteResult> {
+    const now = performance.now();
+
+    if (!probe && this.circuitState !== "closed") {
+      return {
+        status: "dropped",
+        reason: "circuit-open"
+      };
+    }
+
+    if (now - enqueuedAt >= this.queueWaitTimeoutMs) {
+      if (probe) {
+        this.reopenCircuit(now);
+      }
+      return {
+        status: "dropped",
+        reason: "queue-timeout"
+      };
+    }
+
+    return this.runPhysicalWrite(line, probe);
+  }
+
+  private async runPhysicalWrite(line: string, probe: boolean): Promise<AuditWriteResult> {
+    const abortController = new AbortController();
+    this.activePhysicalWrites += 1;
+
+    const physicalWrite = Promise.resolve()
+      .then(() => this.append(line, abortController.signal))
+      .then(
+        () => ({ status: "written" as const }),
+        (error: unknown) => ({ status: "failed" as const, error })
+      )
+      .finally(() => {
+        this.activePhysicalWrites -= 1;
+        this.pendingPhysicalWrites.delete(physicalWrite);
+      });
+    this.pendingPhysicalWrites.add(physicalWrite);
+
+    let timeout: ReturnType<typeof setTimeout> | undefined;
+    const timedWrite = new Promise<{ status: "timeout" }>((resolve) => {
+      timeout = setTimeout(() => resolve({ status: "timeout" }), this.writeTimeoutMs);
+    });
+    const result = await Promise.race([physicalWrite, timedWrite]);
+
+    if (timeout !== undefined) {
+      clearTimeout(timeout);
+    }
+
+    if (result.status === "timeout") {
+      abortController.abort(new Error("Share audit append timed out."));
+      this.reopenCircuit(performance.now());
+      return {
+        status: "failed",
+        reason: "write-timeout"
+      };
+    }
+
+    if (result.status === "failed") {
+      this.reopenCircuit(performance.now());
+      return {
+        status: "failed",
+        reason: "write-error",
+        error: result.error
+      };
+    }
+
+    const recovered = probe;
+    if (probe) {
+      this.circuitState = "closed";
+      this.circuitRetryAt = 0;
+    }
+    return {
+      status: "written",
+      recovered
+    };
+  }
+
+  private reopenCircuit(now: number): void {
+    this.circuitState = "open";
+    this.circuitRetryAt = now + this.retryCooldownMs;
+  }
+}
+
+function assertPositiveInteger(name: string, value: number): void {
+  if (!Number.isSafeInteger(value) || value <= 0) {
+    throw new Error(`${name} must be a positive safe integer.`);
+  }
+}
diff --git a/apps/share-server/src/auth-config.test.ts b/apps/share-server/src/auth-config.test.ts
new file mode 100644
index 0000000..be3d0d3
--- /dev/null
+++ b/apps/share-server/src/auth-config.test.ts
@@ -0,0 +1,47 @@
+import { describe, expect, it } from "vitest";
+
+import { parseShareApiCredentials } from "./auth-config.js";
+
+describe("share API credential configuration", () => {
+  it("parses explicit least-privilege scopes", () => {
+    const credentials = parseShareApiCredentials(
+      "upload-key:upload;reader-key:read,list;ops-key:revoke",
+      null
+    );
+
+    expect(credentials.map(({ secret, scopes }) => [secret, [...scopes]])).toEqual([
+      ["upload-key", ["upload"]],
+      ["reader-key", ["read", "list"]],
+      ["ops-key", ["revoke"]]
+    ]);
+  });
+
+  it("preserves explicit legacy admin keys without a scope suffix", () => {
+    const credentials = parseShareApiCredentials("legacy-admin", "legacy-env-admin");
+
+    expect(credentials.map(({ secret, scopes }) => [secret, [...scopes]])).toEqual([
+      ["legacy-env-admin", ["admin"]],
+      ["legacy-admin", ["admin"]]
+    ]);
+  });
+
+  it.each([
+    ["unknown scope", "key:uplod", "unknown scope 'uplod'"],
+    ["empty scope", "key:", "must declare at least one scope"],
+    ["mixed valid and invalid scopes", "key:read,typo", "unknown scope 'typo'"],
+    ["empty scope in a list", "key:read,", "unknown scope '(empty)'"],
+    ["empty secret", ":read", "secret cannot be empty"]
+  ])("rejects %s", (_label, value, expectedMessage) => {
+    expect(() => parseShareApiCredentials(value, null)).toThrow(expectedMessage);
+  });
+
+  it("rejects duplicate secrets across legacy and scoped configuration", () => {
+    expect(() => parseShareApiCredentials("duplicate:read", "duplicate")).toThrow(
+      /secrets must be unique/i
+    );
+  });
+
+  it("rejects a non-empty credential list containing only separators", () => {
+    expect(() => parseShareApiCredentials(";;;", null)).toThrow(/at least one credential/i);
+  });
+});
diff --git a/apps/share-server/src/auth-config.ts b/apps/share-server/src/auth-config.ts
new file mode 100644
index 0000000..82989d8
--- /dev/null
+++ b/apps/share-server/src/auth-config.ts
@@ -0,0 +1,103 @@
+export type ShareApiScope = "upload" | "read" | "list" | "revoke" | "admin";
+
+export type ShareApiCredential = {
+  secret: string;
+  scopes: Set<ShareApiScope>;
+};
+
+export function parseShareApiCredentials(
+  rawValue: string | undefined,
+  legacyAdminKey: string | null
+): ShareApiCredential[] {
+  const credentials: ShareApiCredential[] = [];
+  const configuredSecrets = new Set<string>();
+
+  if (legacyAdminKey) {
+    addCredential(credentials, configuredSecrets, legacyAdminKey, new Set(["admin"]));
+  }
+
+  if (typeof rawValue !== "string" || rawValue.trim().length === 0) {
+    return credentials;
+  }
+
+  const initialCredentialCount = credentials.length;
+
+  for (const entry of rawValue.split(";")) {
+    const trimmed = entry.trim();
+
+    if (!trimmed) {
+      continue;
+    }
+
+    const separatorIndex = trimmed.indexOf(":");
+    const secret = separatorIndex >= 0 ? trimmed.slice(0, separatorIndex).trim() : trimmed;
+
+    if (!secret) {
+      throw new Error("Share API credential secret cannot be empty.");
+    }
+
+    if (separatorIndex < 0) {
+      addCredential(credentials, configuredSecrets, secret, new Set(["admin"]));
+      continue;
+    }
+
+    const rawScopes = trimmed.slice(separatorIndex + 1).trim();
+
+    if (!rawScopes) {
+      throw new Error(`Share API credential '${secret}' must declare at least one scope.`);
+    }
+
+    const scopes = new Set<ShareApiScope>();
+
+    for (const rawScope of rawScopes.split(",")) {
+      const scope = rawScope.trim();
+      const normalized = normalizeShareApiScope(scope);
+
+      if (!normalized) {
+        throw new Error(
+          `Share API credential '${secret}' has unknown scope '${scope || "(empty)"}'.`
+        );
+      }
+
+      scopes.add(normalized);
+    }
+
+    addCredential(credentials, configuredSecrets, secret, scopes);
+  }
+
+  if (credentials.length === initialCredentialCount) {
+    throw new Error("WEBBLACKBOX_SHARE_API_KEYS must contain at least one credential.");
+  }
+
+  return credentials;
+}
+
+function addCredential(
+  credentials: ShareApiCredential[],
+  configuredSecrets: Set<string>,
+  secret: string,
+  scopes: Set<ShareApiScope>
+): void {
+  if (configuredSecrets.has(secret)) {
+    throw new Error("Share API credential secrets must be unique.");
+  }
+
+  configuredSecrets.add(secret);
+  credentials.push({ secret, scopes });
+}
+
+function normalizeShareApiScope(value: string): ShareApiScope | null {
+  const normalized = value.toLowerCase();
+
+  if (
+    normalized === "upload" ||
+    normalized === "read" ||
+    normalized === "list" ||
+    normalized === "revoke" ||
+    normalized === "admin"
+  ) {
+    return normalized;
+  }
+
+  return null;
+}
diff --git a/apps/share-server/src/index.test.ts b/apps/share-server/src/index.test.ts
index 9744815..b5fdc96 100644
--- a/apps/share-server/src/index.test.ts
+++ b/apps/share-server/src/index.test.ts
@@ -1,11 +1,26 @@
-import { spawn, type ChildProcess } from "node:child_process";
-import { createHash, randomBytes } from "node:crypto";
+import { spawn, spawnSync, type ChildProcess } from "node:child_process";
+import { createHash, createHmac, randomBytes } from "node:crypto";
+import { constants as fsConstants } from "node:fs";
 import { createRequire } from "node:module";
-import { mkdtemp, readFile, rm } from "node:fs/promises";
+import {
+  chmod,
+  link,
+  mkdir,
+  mkdtemp,
+  open,
+  readFile,
+  readdir,
+  rename,
+  rm,
+  stat,
+  symlink,
+  writeFile
+} from "node:fs/promises";
+import { request as createHttpRequest } from "node:http";
 import { createServer } from "node:net";
 import { tmpdir } from "node:os";
 import { dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 
 import JSZip from "jszip";
 import { afterEach, describe, expect, it } from "vitest";
@@ -14,6 +29,8 @@ const require = createRequire(import.meta.url);
 const tsxCli = require.resolve("tsx/cli");
 const appRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 const apiKey = "share-test-key";
+const testAuditHmacSecretBytes = Buffer.from(Array.from({ length: 32 }, (_, index) => index));
+const testAuditHmacSecret = testAuditHmacSecretBytes.toString("base64url");
 const BLOB_FIXTURE_PATH =
   "blobs/sha256-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.json";
 const TEXT_BLOB_FIXTURE_PATH =
@@ -24,6 +41,7 @@ type RunningShareServer = {
   child: ChildProcess;
   dataDir: string;
   logs: string[];
+  exit: { code: number | null; signal: NodeJS.Signals | null } | null;
 };
 
 let runningServers: RunningShareServer[] = [];
@@ -55,6 +73,194 @@ describe("share-server", () => {
     expect(response.status).toBe(413);
   });
 
+  it("rejects forged-size ZIP bombs from actual inflater output", async () => {
+    const server = await startShareServer();
+    const zip = new JSZip();
+    zip.file("manifest.json", "x".repeat(9 * 1024 * 1024));
+    const archive = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 9 }
+    });
+    forgeZipUncompressedSize(archive, "manifest.json", 1);
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-filename": "compressed-bomb.webblackbox"
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as {
+      error: string;
+      resource: string;
+      limit: number;
+    };
+
+    expect(response.status).toBe(413);
+    expect(payload.resource).toBe("maxMetadataEntryBytes");
+    expect(payload.limit).toBe(8 * 1024 * 1024);
+    expect(payload.error).toMatch(/resource limit exceeded/i);
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+    const archiveFiles = await readdir(resolve(server.dataDir, "archives"));
+    expect(archiveFiles).toEqual([]);
+  });
+
+  it("validates actual output for optional lazy ZIP entries before retention", async () => {
+    const server = await startShareServer();
+    const zip = await JSZip.loadAsync(await createEncryptedEnvelopeArchive());
+    zip.file("integrity/hashes.json", "x".repeat(9 * 1024 * 1024));
+    const archive = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 9 }
+    });
+    forgeZipUncompressedSize(archive, "integrity/hashes.json", 1);
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as { resource: string };
+
+    expect(response.status).toBe(413);
+    expect(payload.resource).toBe("maxMetadataEntryBytes");
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+    await expect(readdir(resolve(server.dataDir, "archives"))).resolves.toEqual([]);
+  });
+
+  it("rejects disabled plaintext before inflating optional archive entries", async () => {
+    const server = await startShareServer();
+    const zip = await JSZip.loadAsync(await createPlaintextEnvelopeArchive());
+    zip.file("integrity/hashes.json", "x".repeat(9 * 1024 * 1024));
+    const archive = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 9 }
+    });
+    forgeZipUncompressedSize(archive, "integrity/hashes.json", 1);
+
+    const response = await uploadRawArchive(server, archive);
+
+    expect(response.status).toBe(422);
+    await expect(response.json()).resolves.toEqual({
+      error: "Public share uploads require encrypted WebBlackbox archives."
+    });
+  });
+
+  it("bounds concurrent upload buffering and inspection", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_MAX_CONCURRENT_INSPECTIONS: "1"
+    });
+    const pendingUpload = createHttpRequest(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "content-length": "1024",
+        "x-webblackbox-api-key": apiKey
+      }
+    });
+    pendingUpload.on("error", () => undefined);
+    pendingUpload.flushHeaders();
+
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey
+      },
+      body: Buffer.from("second")
+    });
+
+    expect(response.status).toBe(503);
+    await expect(response.json()).resolves.toEqual({
+      error: "Archive inspection capacity is temporarily exhausted."
+    });
+    expect(response.headers.get("retry-after")).toBe("1");
+    pendingUpload.destroy();
+  });
+
+  it("releases upload admission before a delayed success audit settles", async () => {
+    const dataDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-admission-audit-"));
+    const auditPath = resolve(dataDir, "audit", "share-access.jsonl");
+    const auditDelayHookPath = resolve(dataDir, "delay-audit-append.mjs");
+    await writeFile(
+      auditDelayHookPath,
+      `import fileSystemPromises from "node:fs/promises";
+import { syncBuiltinESMExports } from "node:module";
+
+const originalOpen = fileSystemPromises.open;
+fileSystemPromises.open = async (...arguments_) => {
+  const handle = await originalOpen(...arguments_);
+  if (String(arguments_[0]) === process.env.WEBBLACKBOX_TEST_DELAY_AUDIT_PATH) {
+    const originalAppendFile = handle.appendFile.bind(handle);
+    handle.appendFile = async (...appendArguments) => {
+      await new Promise((resolvePromise) =>
+        setTimeout(resolvePromise, Number(process.env.WEBBLACKBOX_TEST_AUDIT_DELAY_MS))
+      );
+      return originalAppendFile(...appendArguments);
+    };
+  }
+  return handle;
+};
+syncBuiltinESMExports();
+`
+    );
+    const inheritedNodeOptions = process.env.NODE_OPTIONS?.trim();
+    const server = await startShareServer(
+      {
+        NODE_OPTIONS: [inheritedNodeOptions, `--import=${pathToFileURL(auditDelayHookPath).href}`]
+          .filter((value): value is string => Boolean(value))
+          .join(" "),
+        WEBBLACKBOX_SHARE_MAX_CONCURRENT_INSPECTIONS: "1",
+        WEBBLACKBOX_SHARE_AUDIT_QUEUE_TIMEOUT_MS: "5000",
+        WEBBLACKBOX_SHARE_AUDIT_WRITE_TIMEOUT_MS: "5000",
+        WEBBLACKBOX_TEST_DELAY_AUDIT_PATH: auditPath,
+        WEBBLACKBOX_TEST_AUDIT_DELAY_MS: "1000"
+      },
+      dataDir
+    );
+
+    const first = await uploadEncryptedFixture(server);
+    const second = await uploadEncryptedFixture(server);
+
+    expect(first.shareId).not.toBe(second.shareId);
+  }, 10_000);
+
+  it("releases the upload slot and removes temporary files after an idle timeout", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_UPLOAD_IDLE_TIMEOUT_MS: "50",
+      WEBBLACKBOX_SHARE_UPLOAD_TOTAL_TIMEOUT_MS: "500"
+    });
+    const pendingUpload = createHttpRequest(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "content-length": "1024",
+        "x-webblackbox-api-key": apiKey
+      }
+    });
+    const timedOut = new Promise<void>((resolvePromise) => {
+      pendingUpload.once("error", () => resolvePromise());
+    });
+    pendingUpload.flushHeaders();
+    await timedOut;
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+
+    const upload = await uploadEncryptedFixture(server);
+    expect(upload.shareId).toMatch(/^[a-f0-9]+$/);
+    const archiveFiles = await readdir(resolve(server.dataDir, "archives"));
+    expect(archiveFiles.some((name) => name.endsWith(".upload"))).toBe(false);
+  });
+
   it("does not advertise passphrase upload headers", async () => {
     const server = await startShareServer();
 
@@ -73,18 +279,19 @@ describe("share-server", () => {
     const secret = "customer-alpha.internal/users/reset-token-123";
     const encryptedArchive = await createEncryptedEnvelopeArchive();
     const summary = {
-      schemaVersion: 1,
+      schemaVersion: 2,
       source: "client",
+      archiveSha256: sha256Hex(encryptedArchive),
       analyzed: true,
       encrypted: true,
       manifest: {
         origin: `https://${secret}`,
         mode: "lite",
-        chunkCodec: "ndjson",
+        chunkCodec: "none",
         recordedAt: "2026-02-13T00:00:00.000Z"
       },
       totals: {
-        events: 1,
+        events: 0,
         errors: 0,
         requests: 0,
         actions: 0,
@@ -172,147 +379,1862 @@ describe("share-server", () => {
     expect(response.status).toBe(422);
   });
 
-  it("rejects encrypted public share uploads without a passed client privacy preflight", async () => {
-    const server = await startShareServer();
+  it("server-scans explicitly allowed plaintext uploads instead of trusting archive claims", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS: "true"
+    });
+    const archive = await createPlaintextEnvelopeArchive({
+      includePassedPrivacyManifest: true,
+      blobValue: {
+        note: "-----BEGIN PRIVATE KEY-----"
+      }
+    });
 
     const response = await fetch(`${server.baseUrl}/api/share/upload`, {
       method: "POST",
       headers: {
         "content-type": "application/octet-stream",
-        "x-webblackbox-api-key": apiKey,
-        "x-webblackbox-filename": "encrypted.webblackbox"
+        "x-webblackbox-api-key": apiKey
       },
-      body: Buffer.from(await createEncryptedEnvelopeArchive())
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as {
+      error: string;
+      scanner: { preEncryption: boolean; status: string; findingCount: number };
+    };
+
+    expect(response.status).toBe(422);
+    expect(payload.error).toBe("Share upload blocked by the server privacy scanner.");
+    expect(payload.scanner).toMatchObject({
+      preEncryption: false,
+      status: "blocked",
+      findingCount: 1
+    });
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+    await expect(readdir(resolve(server.dataDir, "archives"))).resolves.toEqual([]);
+  });
+
+  it("rejects invalid UTF-8 event chunks instead of issuing a passed server attestation", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS: "true"
     });
 
+    const response = await uploadRawArchive(
+      server,
+      await createPlaintextArchiveWithInvalidUtf8Event()
+    );
+
+    expect(response.status).toBe(400);
     await expect(response.json()).resolves.toEqual({
-      error: "Encrypted public share uploads require a passed client privacy preflight summary."
+      error: "Upload is not a valid WebBlackbox archive."
     });
-    expect(response.status).toBe(422);
   });
 
-  it("rejects encrypted public share uploads with incomplete encrypted file metadata", async () => {
-    const server = await startShareServer();
+  it("does not attest unscanned opaque plaintext blobs as passed", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS: "true"
+    });
 
     const response = await fetch(`${server.baseUrl}/api/share/upload`, {
       method: "POST",
       headers: {
         "content-type": "application/octet-stream",
-        "x-webblackbox-api-key": apiKey,
-        "x-webblackbox-filename": "encrypted.webblackbox",
-        "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(buildPassedShareSummary()))
+        "x-webblackbox-api-key": apiKey
       },
-      body: Buffer.from(await createEncryptedEnvelopeArchive({ completeEncryptionMap: false }))
+      body: Buffer.from(
+        await createPlaintextEnvelopeArchive({ includePassedPrivacyManifest: true })
+      )
     });
     const payload = (await response.json()) as {
-      error: string;
-      missingEncryptedPaths: string[];
+      summary: {
+        source: string;
+        trust: { privateContent: string };
+        privacy: {
+          scanner: {
+            preEncryption: boolean;
+            status: string;
+            findingCount: number;
+            coverage: {
+              complete: boolean;
+              scannedBlobCount: number;
+              opaqueBlobCount: number;
+              expectedBlobCount: number;
+              incompleteReason: string;
+            };
+          };
+        };
+      };
+      shareId: string;
+    };
+
+    expect(response.status).toBe(201);
+    expect(payload.summary).toMatchObject({
+      source: "server",
+      trust: { privateContent: "server-partially-analyzed" },
+      privacy: {
+        scanner: {
+          preEncryption: false,
+          status: "unknown",
+          findingCount: 0,
+          coverage: {
+            complete: false,
+            scannedBlobCount: 1,
+            opaqueBlobCount: 1,
+            expectedBlobCount: 2,
+            incompleteReason: "opaque-content"
+          }
+        }
+      }
+    });
+
+    const metadataResponse = await fetch(`${server.baseUrl}/api/share/${payload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const metadata = (await metadataResponse.json()) as typeof payload;
+    expect(metadata.summary).toMatchObject(payload.summary);
+  });
+
+  it("scans semantic JSON strings after Unicode escape decoding", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS: "true"
+    });
+    const escapedDash = "\\u002d";
+    const archive = await replaceArchiveFile(
+      await createPlaintextEnvelopeArchive({ includePassedPrivacyManifest: true }),
+      BLOB_FIXTURE_PATH,
+      new TextEncoder().encode(
+        `{"note":"${escapedDash.repeat(5)}BEGIN PRIVATE KEY${escapedDash.repeat(5)}"}`
+      )
+    );
+
+    const response = await uploadRawArchive(server, archive);
+    const payload = (await response.json()) as { error: string; scanner: { status: string } };
+
+    expect(response.status).toBe(422);
+    expect(payload.error).toBe("Share upload blocked by the server privacy scanner.");
+    expect(payload.scanner.status).toBe("blocked");
+  });
+
+  it("marks invalid UTF-8 text candidates opaque instead of attesting them as passed", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS: "true"
+    });
+    const secret = "-----BEGIN PRIVATE KEY-----";
+    const utf16 = new Uint8Array(2 + secret.length * 2);
+    utf16.set([0xff, 0xfe]);
+    for (let index = 0; index < secret.length; index += 1) {
+      utf16[2 + index * 2] = secret.charCodeAt(index);
+    }
+    const archive = await replaceArchiveFile(
+      await createPlaintextEnvelopeArchive({ includePassedPrivacyManifest: true }),
+      BLOB_FIXTURE_PATH,
+      utf16
+    );
+
+    const response = await uploadRawArchive(server, archive);
+    const payload = (await response.json()) as {
+      summary: {
+        trust: { privateContent: string };
+        privacy: { scanner: { status: string; coverage: { opaqueBlobCount: number } } };
+      };
     };
 
+    expect(response.status).toBe(201);
+    expect(payload.summary).toMatchObject({
+      trust: { privateContent: "server-partially-analyzed" },
+      privacy: {
+        scanner: {
+          status: "unknown",
+          coverage: { opaqueBlobCount: 2 }
+        }
+      }
+    });
+  });
+
+  it("rejects every non-canonical plaintext blob path when server analysis is enabled", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS: "true"
+    });
+    const archive = await renameArchiveFile(
+      await createPlaintextEnvelopeArchive(),
+      BLOB_FIXTURE_PATH,
+      "blobs/private.json"
+    );
+
+    const response = await uploadRawArchive(server, archive);
+
     expect(response.status).toBe(400);
-    expect(payload.error).toBe("Encrypted WebBlackbox archive is missing encrypted file metadata.");
-    expect(payload.missingEncryptedPaths).toContain("index/time.json");
+    await expect(response.json()).resolves.toEqual({
+      error: "Upload is not a valid WebBlackbox archive."
+    });
   });
 
-  it("rejects encrypted public share uploads with plaintext private files", async () => {
+  it("rejects unknown archive entries instead of excluding them from scan coverage", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS: "true"
+    });
+    const archive = await renameArchiveFile(
+      await createPlaintextEnvelopeArchive(),
+      BLOB_FIXTURE_PATH,
+      "secrets/private.json"
+    );
+
+    const response = await uploadRawArchive(server, archive);
+
+    expect(response.status).toBe(400);
+    await expect(response.json()).resolves.toEqual({
+      error: "Upload is not a valid WebBlackbox archive."
+    });
+  });
+
+  it("rejects disabled plaintext uploads before Player private-content analysis", async () => {
+    const server = await startShareServer();
+    const playerInvalidPlaintextArchive = await replaceArchiveFile(
+      await createPlaintextEnvelopeArchive(),
+      "index/time.json",
+      new TextEncoder().encode("not-json")
+    );
+
+    const response = await uploadRawArchive(server, playerInvalidPlaintextArchive);
+
+    expect(response.status).toBe(422);
+    await expect(response.json()).resolves.toEqual({
+      error: "Public share uploads require encrypted WebBlackbox archives."
+    });
+  });
+
+  it("rejects encrypted envelopes with contradictory blob totals", async () => {
+    const server = await startShareServer();
+    const archive = await mutateArchiveManifest(
+      await createEncryptedEnvelopeArchive(),
+      (manifest) => {
+        (manifest.stats as Record<string, unknown>).blobCount = 1;
+      }
+    );
+
+    const response = await uploadRawArchive(server, archive);
+
+    expect(response.status).toBe(400);
+    await expect(response.json()).resolves.toEqual({
+      error: "Upload is not a valid WebBlackbox archive."
+    });
+  });
+
+  it("rejects malformed encrypted envelope metadata and stored-byte integrity", async () => {
+    const server = await startShareServer();
+    const source = await createEncryptedEnvelopeArchive();
+    const corruptions: Array<{ name: string; archive: Uint8Array }> = [
+      {
+        name: "missing required index",
+        archive: await removeArchiveFileWithoutIntegrityUpdate(source, "index/inv.json")
+      },
+      {
+        name: "extra encryption mapping",
+        archive: await mutateArchiveManifest(source, (manifest) => {
+          const encryption = manifest.encryption as Record<string, unknown>;
+          const files = encryption.files as Record<string, unknown>;
+          files["manifest.json"] = { ivBase64: toBase64(randomBytes(12)) };
+        })
+      },
+      {
+        name: "reused encryption IV",
+        archive: await mutateArchiveManifest(source, (manifest) => {
+          const encryption = manifest.encryption as Record<string, unknown>;
+          const files = encryption.files as Record<string, { ivBase64: string }>;
+          const paths = Object.keys(files);
+          const firstPath = paths[0];
+          const secondPath = paths[1];
+          const firstFile = firstPath ? files[firstPath] : undefined;
+          if (!firstPath || !secondPath || !firstFile) {
+            throw new Error("Encrypted fixture is missing mapped files.");
+          }
+          files[secondPath] = { ivBase64: firstFile.ivBase64 };
+        })
+      },
+      {
+        name: "tampered ciphertext",
+        archive: await replaceArchiveFileWithoutIntegrityUpdate(
+          source,
+          BLOB_FIXTURE_PATH,
+          randomBytes(64)
+        )
+      }
+    ];
+
+    for (const corruption of corruptions) {
+      const response = await uploadRawArchive(server, corruption.archive);
+      expect(response.status, corruption.name).toBe(400);
+      await expect(response.json(), corruption.name).resolves.toEqual({
+        error: "Upload is not a valid WebBlackbox archive."
+      });
+      await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+    }
+  });
+
+  it("does not present an encrypted upload without a client claim as analyzed", async () => {
     const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive();
 
     const response = await fetch(`${server.baseUrl}/api/share/upload`, {
       method: "POST",
       headers: {
         "content-type": "application/octet-stream",
         "x-webblackbox-api-key": apiKey,
-        "x-webblackbox-filename": "encrypted.webblackbox",
-        "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(buildPassedShareSummary()))
+        "x-webblackbox-filename": "encrypted.webblackbox"
       },
-      body: Buffer.from(
-        await createEncryptedEnvelopeArchive({
-          privateFileMode: "plaintext"
-        })
-      )
+      body: Buffer.from(archive)
     });
     const payload = (await response.json()) as {
-      error: string;
-      plaintextEncryptedPaths: string[];
+      summary: {
+        schemaVersion: number;
+        source: string;
+        analyzed: boolean;
+        trust: { privateContent: string };
+      };
     };
 
-    expect(response.status).toBe(400);
-    expect(payload.error).toBe("Encrypted WebBlackbox archive contains plaintext private files.");
-    expect(payload.plaintextEncryptedPaths).toContain("index/time.json");
+    expect(response.status).toBe(201);
+    expect(payload.summary).toMatchObject({
+      schemaVersion: 2,
+      source: "unavailable",
+      analyzed: false,
+      trust: { privateContent: "not-analyzed" }
+    });
   });
 
-  it("rejects encrypted public share uploads with plaintext private blobs", async () => {
+  it("rejects legacy client privacy assurance headers", async () => {
     const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive();
 
     const response = await fetch(`${server.baseUrl}/api/share/upload`, {
       method: "POST",
       headers: {
         "content-type": "application/octet-stream",
         "x-webblackbox-api-key": apiKey,
-        "x-webblackbox-filename": "encrypted.webblackbox",
-        "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(buildPassedShareSummary()))
+        "x-webblackbox-encryption": "encrypted",
+        "x-webblackbox-policy-eligible": "true",
+        "x-webblackbox-redaction-summary": "passed"
       },
-      body: Buffer.from(
-        await createEncryptedEnvelopeArchive({
-          blobFileMode: "plaintext"
-        })
-      )
+      body: Buffer.from(archive)
     });
-    const payload = (await response.json()) as {
-      error: string;
-      plaintextEncryptedPaths: string[];
-    };
 
+    await expect(response.json()).resolves.toEqual({
+      error: "Legacy client assurance headers are not accepted. Use an archive-bound share summary."
+    });
     expect(response.status).toBe(400);
-    expect(payload.error).toBe("Encrypted WebBlackbox archive contains plaintext private files.");
-    expect(payload.plaintextEncryptedPaths).toContain(BLOB_FIXTURE_PATH);
   });
 
-  it("rejects encrypted public share uploads with plaintext text blobs", async () => {
+  it("rejects client summaries that are not bound to the uploaded archive", async () => {
     const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive();
+    const summary = buildPassedShareSummary(archive) as Record<string, unknown>;
+    summary.archiveSha256 = "0".repeat(64);
 
     const response = await fetch(`${server.baseUrl}/api/share/upload`, {
       method: "POST",
       headers: {
         "content-type": "application/octet-stream",
         "x-webblackbox-api-key": apiKey,
-        "x-webblackbox-filename": "encrypted.webblackbox",
-        "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(buildPassedShareSummary()))
+        "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(summary))
       },
-      body: Buffer.from(
-        await createEncryptedEnvelopeArchive({
-          textBlobFileMode: "plaintext"
-        })
-      )
+      body: Buffer.from(archive)
     });
-    const payload = (await response.json()) as {
-      error: string;
-      plaintextEncryptedPaths: string[];
-    };
 
+    await expect(response.json()).resolves.toEqual({
+      error: "Share summary archive digest does not match the upload."
+    });
     expect(response.status).toBe(400);
-    expect(payload.error).toBe("Encrypted WebBlackbox archive contains plaintext private files.");
-    expect(payload.plaintextEncryptedPaths).toContain(TEXT_BLOB_FIXTURE_PATH);
   });
 
-  it("expires shares and blocks archive download after ttl", async () => {
-    const server = await startShareServer({
-      WEBBLACKBOX_SHARE_DEFAULT_TTL_MS: "1000"
-    });
-    const uploadPayload = await uploadEncryptedFixture(server);
-
-    await new Promise((resolve) => setTimeout(resolve, 1100));
+  it("rejects legacy unbound share-summary schemas on new uploads", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive();
+    const summary = buildPassedShareSummary(archive) as Record<string, unknown>;
+    summary.schemaVersion = 1;
+    delete summary.archiveSha256;
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(summary))
+      },
+      body: Buffer.from(archive)
+    });
+
+    await expect(response.json()).resolves.toEqual({
+      error: "Share summary must use schemaVersion 2 with source 'client'."
+    });
+    expect(response.status).toBe(400);
+  });
+
+  it("rejects archive-bound client summaries that contradict inspected envelope facts", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive();
+    const summary = buildPassedShareSummary(archive) as Record<string, unknown>;
+    summary.encrypted = false;
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(summary))
+      },
+      body: Buffer.from(archive)
+    });
+
+    await expect(response.json()).resolves.toEqual({
+      error: "Share summary conflicts with server-inspected archive envelope facts."
+    });
+    expect(response.status).toBe(400);
+  });
+
+  it("labels bound client privacy fields as unverified claims", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive();
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as {
+      summary: {
+        source: string;
+        analyzed: boolean;
+        archiveSha256?: string;
+        privacy?: unknown;
+        clientClaim?: { privacy?: { scanner?: { status?: string } } };
+        trust: { privateContent: string; archiveDigestMatched?: boolean };
+        analysisError?: string;
+      };
+    };
+
+    expect(response.status).toBe(201);
+    expect(payload.summary).toMatchObject({
+      source: "client-unverified",
+      analyzed: false,
+      trust: {
+        privateContent: "client-claim-unverified",
+        archiveDigestMatched: true
+      }
+    });
+    expect(payload.summary.archiveSha256).toBeUndefined();
+    expect(payload.summary.privacy).toBeUndefined();
+    expect(payload.summary.clientClaim?.privacy?.scanner?.status).toBe("passed");
+    expect(payload.summary.analysisError).toMatch(/unverified client claims/i);
+  });
+
+  it("uses a client's explicit blocked result only to reject, never to attest acceptance", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive();
+    const summary = buildPassedShareSummary(archive) as {
+      privacy: { scanner: { status: string; findingCount: number } };
+    };
+    summary.privacy.scanner.status = "blocked";
+    summary.privacy.scanner.findingCount = 1;
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(summary))
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as { error: string };
+
+    expect(response.status).toBe(422);
+    expect(payload.error).toBe("Share upload blocked by the client's privacy scanner claim.");
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+    await expect(readdir(resolve(server.dataDir, "archives"))).resolves.toEqual([]);
+  });
+
+  it("rebuilds current persisted server summaries from allowlisted public fields", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const initialResponse = await fetch(`${server.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const initialPayload = (await initialResponse.json()) as {
+      summary: {
+        source: string;
+        clientClaim?: { privacy?: { scanner?: { status?: string } } };
+      };
+    };
+    expect(initialResponse.status).toBe(200);
+    expect(initialPayload.summary.source).toBe("client-unverified");
+    expect(initialPayload.summary.clientClaim?.privacy?.scanner?.status).toBe("passed");
+
+    const recordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const record = JSON.parse(await readFile(recordPath, "utf8")) as {
+      summary: Record<string, unknown>;
+    };
+    const extraSecret = "persisted-extra-secret";
+    record.summary = buildPersistedServerSummary(record.summary);
+    record.summary.extraSecret = extraSecret;
+    const privacy = record.summary.privacy as Record<string, unknown>;
+    privacy.extraSecret = extraSecret;
+    const scanner = privacy.scanner as Record<string, unknown>;
+    scanner.extraSecret = extraSecret;
+    await writeFile(recordPath, JSON.stringify(record));
+
+    const response = await fetch(`${server.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const payload = (await response.json()) as {
+      summary: {
+        source: string;
+        analyzed: boolean;
+        extraSecret?: unknown;
+        privacy?: {
+          extraSecret?: unknown;
+          scanner: { status: string; extraSecret?: unknown };
+        };
+      };
+    };
+
+    expect(response.status).toBe(200);
+    expect(payload.summary).toMatchObject({
+      source: "server",
+      analyzed: true,
+      privacy: { scanner: { status: "passed" } }
+    });
+    expect(payload.summary.extraSecret).toBeUndefined();
+    expect(payload.summary.privacy?.extraSecret).toBeUndefined();
+    expect(payload.summary.privacy?.scanner.extraSecret).toBeUndefined();
+    expect(JSON.stringify(payload.summary)).not.toContain(extraSecret);
+  });
+
+  it("downgrades persisted server attestations that predate explicit scan coverage", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const recordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const record = JSON.parse(await readFile(recordPath, "utf8")) as {
+      summary: Record<string, unknown>;
+    };
+    record.summary = buildPersistedServerSummary(record.summary);
+    const privacy = record.summary.privacy as Record<string, unknown>;
+    const scanner = privacy.scanner as Record<string, unknown>;
+    delete scanner.coverage;
+    await writeFile(recordPath, JSON.stringify(record));
+
+    const response = await fetch(`${server.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const payload = (await response.json()) as {
+      summary: {
+        source: string;
+        analyzed: boolean;
+        privacy?: unknown;
+        trust: { privateContent: string };
+      };
+    };
+
+    expect(response.status).toBe(200);
+    expect(payload.summary).toMatchObject({
+      source: "unavailable",
+      analyzed: false,
+      trust: { privateContent: "not-analyzed" }
+    });
+    expect(payload.summary.privacy).toBeUndefined();
+  });
+
+  it("downgrades malformed current persisted server summaries to unavailable", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const recordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const record = JSON.parse(await readFile(recordPath, "utf8")) as {
+      summary: Record<string, unknown>;
+    };
+    const validSummary = buildPersistedServerSummary(record.summary);
+    const mutations: Array<{
+      name: string;
+      mutate: (summary: Record<string, unknown>) => void;
+    }> = [
+      {
+        name: "encrypted type",
+        mutate: (summary) => {
+          summary.encrypted = "true";
+        }
+      },
+      {
+        name: "totals type",
+        mutate: (summary) => {
+          (summary.totals as Record<string, unknown>).events = "0";
+        }
+      },
+      {
+        name: "totals bound",
+        mutate: (summary) => {
+          (summary.totals as Record<string, unknown>).events = Number.MAX_SAFE_INTEGER;
+        }
+      },
+      {
+        name: "privacy type",
+        mutate: (summary) => {
+          const privacy = summary.privacy as Record<string, unknown>;
+          (privacy.scanner as Record<string, unknown>).preEncryption = "true";
+        }
+      },
+      {
+        name: "coverage total mismatch",
+        mutate: (summary) => {
+          const privacy = summary.privacy as Record<string, unknown>;
+          const scanner = privacy.scanner as Record<string, unknown>;
+          const coverage = scanner.coverage as Record<string, unknown>;
+          coverage.expectedBlobCount = 99;
+        }
+      }
+    ];
+
+    for (const { name, mutate } of mutations) {
+      record.summary = structuredClone(validSummary);
+      mutate(record.summary);
+      await writeFile(recordPath, JSON.stringify(record));
+
+      const response = await fetch(`${server.baseUrl}/api/share/${upload.shareId}/meta`, {
+        headers: { "x-webblackbox-api-key": apiKey }
+      });
+      const payload = (await response.json()) as {
+        summary: {
+          source: string;
+          analyzed: boolean;
+          privacy?: unknown;
+          clientClaim?: unknown;
+          trust: { privateContent: string };
+        };
+      };
+
+      expect(response.status, name).toBe(200);
+      expect(payload.summary, name).toMatchObject({
+        source: "unavailable",
+        analyzed: false,
+        trust: { privateContent: "not-analyzed" }
+      });
+      expect(payload.summary.privacy, name).toBeUndefined();
+      expect(payload.summary.clientClaim, name).toBeUndefined();
+    }
+  });
+
+  it("downgrades persisted client claims that forge top-level verified privacy", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const recordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const record = JSON.parse(await readFile(recordPath, "utf8")) as {
+      summary: Record<string, unknown>;
+    };
+    const clientClaim = record.summary.clientClaim as Record<string, unknown>;
+    record.summary.privacy = clientClaim.privacy;
+    await writeFile(recordPath, JSON.stringify(record));
+
+    const response = await fetch(`${server.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const payload = (await response.json()) as {
+      summary: {
+        source: string;
+        analyzed: boolean;
+        privacy?: unknown;
+        clientClaim?: unknown;
+        trust: { privateContent: string };
+      };
+    };
+
+    expect(response.status).toBe(200);
+    expect(payload.summary).toMatchObject({
+      source: "unavailable",
+      analyzed: false,
+      trust: { privateContent: "not-analyzed" }
+    });
+    expect(payload.summary.privacy).toBeUndefined();
+    expect(payload.summary.clientClaim).toBeUndefined();
+  });
+
+  it("downgrades legacy stored client summaries instead of exposing them as analyzed", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const recordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const record = JSON.parse(await readFile(recordPath, "utf8")) as {
+      summary: Record<string, unknown>;
+    };
+    record.summary.schemaVersion = 1;
+    record.summary.source = "client";
+    record.summary.analyzed = true;
+    const storedClientClaim = record.summary.clientClaim as
+      | {
+          totals?: Record<string, unknown>;
+          topActionTriggers?: unknown;
+          privacy?: unknown;
+        }
+      | undefined;
+    record.summary.totals = {
+      ...(record.summary.totals as Record<string, unknown>),
+      ...storedClientClaim?.totals
+    };
+    record.summary.topActionTriggers = storedClientClaim?.topActionTriggers;
+    record.summary.privacy = storedClientClaim?.privacy;
+    delete record.summary.clientClaim;
+    delete record.summary.trust;
+    await writeFile(recordPath, JSON.stringify(record));
+
+    const response = await fetch(`${server.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const payload = (await response.json()) as {
+      summary: {
+        schemaVersion: number;
+        source: string;
+        analyzed: boolean;
+        privacy?: unknown;
+        clientClaim?: { privacy?: unknown };
+        trust: { privateContent: string; archiveDigestMatched?: boolean };
+        analysisError: string;
+      };
+    };
+
+    expect(response.status).toBe(200);
+    expect(payload.summary).toMatchObject({
+      schemaVersion: 2,
+      source: "client-unverified",
+      analyzed: false,
+      trust: { privateContent: "client-claim-unverified" }
+    });
+    expect(payload.summary.privacy).toBeUndefined();
+    expect(payload.summary.clientClaim?.privacy).toBeDefined();
+    expect(payload.summary.trust.archiveDigestMatched).toBeUndefined();
+    expect(payload.summary.analysisError).toMatch(/not archive-digest-bound/i);
+  });
+
+  it("rejects encrypted public share uploads with incomplete encrypted file metadata", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive({ completeEncryptionMap: false });
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-filename": "encrypted.webblackbox",
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as {
+      error: string;
+      missingEncryptedPaths: string[];
+    };
+
+    expect(response.status).toBe(400);
+    expect(payload.error).toBe("Encrypted WebBlackbox archive is missing encrypted file metadata.");
+    expect(payload.missingEncryptedPaths).toContain("index/time.json");
+  });
+
+  it("rejects encrypted public share uploads with plaintext private files", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive({ privateFileMode: "plaintext" });
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-filename": "encrypted.webblackbox",
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as {
+      error: string;
+      plaintextEncryptedPaths: string[];
+    };
+
+    expect(response.status).toBe(400);
+    expect(payload.error).toBe("Encrypted WebBlackbox archive contains plaintext private files.");
+    expect(payload.plaintextEncryptedPaths).toContain("index/time.json");
+  });
+
+  it("rejects encrypted public share uploads with plaintext private blobs", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive({ blobFileMode: "plaintext" });
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-filename": "encrypted.webblackbox",
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as {
+      error: string;
+      plaintextEncryptedPaths: string[];
+    };
+
+    expect(response.status).toBe(400);
+    expect(payload.error).toBe("Encrypted WebBlackbox archive contains plaintext private files.");
+    expect(payload.plaintextEncryptedPaths).toContain(BLOB_FIXTURE_PATH);
+  });
+
+  it("rejects encrypted public share uploads with plaintext text blobs", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive({ textBlobFileMode: "plaintext" });
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-filename": "encrypted.webblackbox",
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as {
+      error: string;
+      plaintextEncryptedPaths: string[];
+    };
+
+    expect(response.status).toBe(400);
+    expect(payload.error).toBe("Encrypted WebBlackbox archive contains plaintext private files.");
+    expect(payload.plaintextEncryptedPaths).toContain(TEXT_BLOB_FIXTURE_PATH);
+  });
+
+  it("scans complete private entries for plaintext beyond the former prefix window", async () => {
+    const server = await startShareServer();
+    const archive = await createEncryptedEnvelopeArchive({
+      privateFileMode: "plaintext",
+      textBlobFileMode: "plaintext",
+      plaintextPrefixBytes: 64 * 1024 + 1
+    });
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+    const payload = (await response.json()) as {
+      plaintextEncryptedPaths: string[];
+    };
+
+    expect(response.status).toBe(400);
+    expect(payload.plaintextEncryptedPaths).toEqual(
+      expect.arrayContaining(["index/time.json", TEXT_BLOB_FIXTURE_PATH])
+    );
+  });
+
+  it("binds persisted records to safe filenames before metadata or cleanup", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const recordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const persisted = JSON.parse(await readFile(recordPath, "utf8")) as Record<string, unknown>;
+    persisted.shareUrl = "https://attacker.example/share/poisoned";
+    persisted.fileName = 'poisoned".zip';
+    await writeFile(recordPath, JSON.stringify(persisted));
+
+    const metadataResponse = await fetch(`${server.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const metadata = (await metadataResponse.json()) as { shareUrl: string; fileName: string };
+    expect(metadataResponse.status).toBe(200);
+    expect(metadata.shareUrl).toBe(`${server.baseUrl}/share/${upload.shareId}`);
+    expect(metadata.fileName).toMatch(/^webblackbox-share-[a-f0-9]+\.zip$/);
+
+    const sentinelPath = resolve(server.dataDir, "sentinel.json");
+    await writeFile(sentinelPath, "keep-me");
+    await writeFile(
+      resolve(server.dataDir, "records", "malicious.json"),
+      JSON.stringify({
+        ...persisted,
+        id: "../sentinel",
+        createdAt: 1,
+        expiresAt: 2
+      })
+    );
+
+    const listResponse = await fetch(`${server.baseUrl}/api/share/list`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    expect(listResponse.status).toBe(200);
+    await expect(readFile(sentinelPath, "utf8")).resolves.toBe("keep-me");
+
+    await writeFile(
+      resolve(server.dataDir, "records", "oversized.json"),
+      " ".repeat(256 * 1024 + 1)
+    );
+    const oversizedResponse = await fetch(`${server.baseUrl}/api/share/oversized/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    expect(oversizedResponse.status).toBe(404);
+  });
+
+  it("paginates bounded share listings with strict query validation", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const sourceRecord = JSON.parse(
+      await readFile(resolve(server.dataDir, "records", `${upload.shareId}.json`), "utf8")
+    ) as Record<string, unknown>;
+    const sourceArchive = await readFile(
+      resolve(server.dataDir, "archives", `${upload.shareId}.webblackbox`)
+    );
+    const createdAt = Number(sourceRecord.createdAt);
+    const cloneIds = ["a".repeat(32), "b".repeat(32)];
+
+    for (const [index, id] of cloneIds.entries()) {
+      await writeFile(
+        resolve(server.dataDir, "records", `${id}.json`),
+        JSON.stringify({
+          ...sourceRecord,
+          id,
+          createdAt: createdAt - index - 1
+        })
+      );
+      await writeFile(resolve(server.dataDir, "archives", `${id}.webblackbox`), sourceArchive);
+    }
+
+    await stopShareServer(server, false);
+    const restarted = await startShareServer({}, server.dataDir);
+
+    const firstResponse = await fetch(`${restarted.baseUrl}/api/share/list?limit=2&offset=0`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const first = (await firstResponse.json()) as {
+      items: Array<{ id: string }>;
+      total: number;
+      offset: number;
+      limit: number;
+      nextOffset: number | null;
+      nextCursor: string | null;
+    };
+    expect(first).toMatchObject({ total: 3, offset: 0, limit: 2, nextOffset: 2 });
+    expect(first.items).toHaveLength(2);
+    expect(first.nextCursor).toMatch(/^[A-Za-z0-9_-]+$/);
+
+    const secondResponse = await fetch(`${restarted.baseUrl}/api/share/list?limit=2&offset=2`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const second = (await secondResponse.json()) as {
+      items: Array<{ id: string }>;
+      nextOffset: number | null;
+    };
+    expect(second.items).toHaveLength(1);
+    expect(second.nextOffset).toBeNull();
+
+    const invalidResponse = await fetch(`${restarted.baseUrl}/api/share/list?limit=201`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    expect(invalidResponse.status).toBe(400);
+
+    const conflictingResponse = await fetch(
+      `${restarted.baseUrl}/api/share/list?cursor=${first.nextCursor}&offset=0`,
+      { headers: { "x-webblackbox-api-key": apiKey } }
+    );
+    expect(conflictingResponse.status).toBe(400);
+  });
+
+  it("keeps cursor pagination stable across insertions and removals", async () => {
+    const server = await startShareServer();
+    const initialUploads = [
+      await uploadEncryptedFixture(server),
+      await uploadEncryptedFixture(server),
+      await uploadEncryptedFixture(server),
+      await uploadEncryptedFixture(server)
+    ];
+
+    const firstResponse = await fetch(`${server.baseUrl}/api/share/list?limit=2`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const first = (await firstResponse.json()) as {
+      items: Array<{ id: string }>;
+      nextCursor: string | null;
+    };
+    expect(firstResponse.status).toBe(200);
+    expect(first.items).toHaveLength(2);
+    expect(first.nextCursor).toMatch(/^[A-Za-z0-9_-]+$/);
+
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 5));
+    const inserted = await uploadEncryptedFixture(server);
+    const removedId = first.items[0]?.id;
+    if (!removedId) {
+      throw new Error("Expected a first-page share to remove.");
+    }
+    await rm(resolve(server.dataDir, "archives", `${removedId}.webblackbox`));
+    const removalResponse = await fetch(`${server.baseUrl}/api/share/${removedId}/archive`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    expect(removalResponse.status).toBe(404);
+
+    const secondResponse = await fetch(
+      `${server.baseUrl}/api/share/list?limit=2&cursor=${first.nextCursor}`,
+      { headers: { "x-webblackbox-api-key": apiKey } }
+    );
+    const second = (await secondResponse.json()) as {
+      items: Array<{ id: string }>;
+      nextCursor: string | null;
+    };
+    const firstIds = first.items.map(({ id }) => id);
+    const secondIds = second.items.map(({ id }) => id);
+    const originalIdsAfterCursor = initialUploads
+      .map(({ shareId }) => shareId)
+      .filter((id) => !firstIds.includes(id));
+
+    expect(secondResponse.status).toBe(200);
+    expect(secondIds.sort()).toEqual(originalIdsAfterCursor.sort());
+    expect(secondIds.some((id) => firstIds.includes(id))).toBe(false);
+    expect(secondIds).not.toContain(inserted.shareId);
+    expect(second.nextCursor).toBeNull();
+  });
+
+  it("loads and validates at most one page of large persisted records per list request", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const sourceRecord = JSON.parse(
+      await readFile(resolve(server.dataDir, "records", `${upload.shareId}.json`), "utf8")
+    ) as Record<string, unknown>;
+    const sourceArchive = await readFile(
+      resolve(server.dataDir, "archives", `${upload.shareId}.webblackbox`)
+    );
+    const createdAt = Number(sourceRecord.createdAt);
+    const cloneIds = Array.from(
+      { length: 12 },
+      (_, index) => `${String(index).padStart(2, "0")}${"c".repeat(30)}`
+    );
+
+    for (const [index, id] of cloneIds.entries()) {
+      await writeFile(
+        resolve(server.dataDir, "records", `${id}.json`),
+        JSON.stringify({
+          ...sourceRecord,
+          id,
+          createdAt: createdAt - index - 1,
+          padding: "x".repeat(220 * 1024)
+        })
+      );
+      await writeFile(resolve(server.dataDir, "archives", `${id}.webblackbox`), sourceArchive);
+    }
+
+    await stopShareServer(server, false);
+    const restarted = await startShareServer({}, server.dataDir);
+
+    for (const id of cloneIds.slice(1)) {
+      await writeFile(resolve(restarted.dataDir, "records", `${id}.json`), " ".repeat(220 * 1024));
+    }
+
+    const firstResponse = await fetch(`${restarted.baseUrl}/api/share/list?limit=2`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const first = (await firstResponse.json()) as {
+      items: Array<{ id: string }>;
+      total: number;
+      nextCursor: string | null;
+    };
+    expect(firstResponse.status).toBe(200);
+    expect(first).toMatchObject({ total: 13 });
+    expect(first.items.map(({ id }) => id)).toEqual([upload.shareId, cloneIds[0]]);
+    expect(first.nextCursor).toMatch(/^[A-Za-z0-9_-]+$/);
+    await expect(readdir(resolve(restarted.dataDir, "records"))).resolves.toHaveLength(13);
+
+    const secondResponse = await fetch(
+      `${restarted.baseUrl}/api/share/list?limit=2&cursor=${first.nextCursor}`,
+      { headers: { "x-webblackbox-api-key": apiKey } }
+    );
+    const second = (await secondResponse.json()) as {
+      items: Array<{ id: string }>;
+      total: number;
+      nextCursor: string | null;
+    };
+    expect(secondResponse.status).toBe(200);
+    expect(second.items).toEqual([]);
+    expect(second.total).toBe(11);
+    expect(second.nextCursor).toMatch(/^[A-Za-z0-9_-]+$/);
+    await expect(readdir(resolve(restarted.dataDir, "records"))).resolves.toHaveLength(11);
+  });
+
+  it("rejects uploads before buffering when retained record capacity is exhausted", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_MAX_RECORDS: "2"
+    });
+    await uploadEncryptedFixture(server);
+    await uploadEncryptedFixture(server);
+    const archive = await createEncryptedEnvelopeArchive();
+
+    const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+
+    expect(response.status).toBe(507);
+    await expect(response.json()).resolves.toEqual({
+      error:
+        "Share record capacity is exhausted (2). Wait for expired records to pass retention and be pruned, remove retained data administratively, or raise the admission limit."
+    });
+    await expect(readdir(resolve(server.dataDir, "archives"))).resolves.toHaveLength(2);
+  });
+
+  it("reserves record capacity across concurrent upload inspections", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_MAX_RECORDS: "1",
+      WEBBLACKBOX_SHARE_MAX_CONCURRENT_INSPECTIONS: "2"
+    });
+    const archive = await createEncryptedEnvelopeArchive();
+    const headers = {
+      "content-type": "application/octet-stream",
+      "x-webblackbox-api-key": apiKey,
+      "x-webblackbox-share-summary": encodeURIComponent(
+        JSON.stringify(buildPassedShareSummary(archive))
+      )
+    };
+
+    const responses = await Promise.all([
+      fetch(`${server.baseUrl}/api/share/upload`, {
+        method: "POST",
+        headers,
+        body: Buffer.from(archive)
+      }),
+      fetch(`${server.baseUrl}/api/share/upload`, {
+        method: "POST",
+        headers,
+        body: Buffer.from(archive)
+      })
+    ]);
+
+    expect(responses.map(({ status }) => status).sort()).toEqual([201, 507]);
+    await expect(readdir(resolve(server.dataDir, "records"))).resolves.toHaveLength(1);
+    await expect(readdir(resolve(server.dataDir, "archives"))).resolves.toHaveLength(1);
+  });
+
+  it("keeps existing shares operable when the upload admission limit is lowered", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_MAX_RECORDS: "4"
+    });
+    const firstUpload = await uploadEncryptedFixture(server);
+    const secondUpload = await uploadEncryptedFixture(server);
+    const thirdUpload = await uploadEncryptedFixture(server);
+
+    await stopShareServer(server, false);
+    const restarted = await startShareServer(
+      {
+        WEBBLACKBOX_SHARE_MAX_RECORDS: "1"
+      },
+      server.dataDir
+    );
+
+    const firstListResponse = await fetch(`${restarted.baseUrl}/api/share/list?limit=2&offset=0`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const firstList = (await firstListResponse.json()) as {
+      items: Array<{ id: string }>;
+      total: number;
+      nextOffset: number | null;
+    };
+    expect(firstListResponse.status).toBe(200);
+    expect(firstList).toMatchObject({ total: 3, nextOffset: 2 });
+    expect(firstList.items).toHaveLength(2);
+
+    const secondListResponse = await fetch(`${restarted.baseUrl}/api/share/list?limit=2&offset=2`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const secondList = (await secondListResponse.json()) as {
+      items: Array<{ id: string }>;
+      total: number;
+      nextOffset: number | null;
+    };
+    expect(secondListResponse.status).toBe(200);
+    expect(secondList).toMatchObject({ total: 3, nextOffset: null });
+    expect(secondList.items).toHaveLength(1);
+    expect([...firstList.items, ...secondList.items].map(({ id }) => id).sort()).toEqual(
+      [firstUpload.shareId, secondUpload.shareId, thirdUpload.shareId].sort()
+    );
+
+    const metadataResponse = await fetch(
+      `${restarted.baseUrl}/api/share/${firstUpload.shareId}/meta`,
+      {
+        headers: { "x-webblackbox-api-key": apiKey }
+      }
+    );
+    expect(metadataResponse.status).toBe(200);
+    await expect(metadataResponse.json()).resolves.toMatchObject({ id: firstUpload.shareId });
+
+    const revokeResponse = await fetch(
+      `${restarted.baseUrl}/api/share/${secondUpload.shareId}/revoke`,
+      {
+        method: "POST",
+        headers: { "x-webblackbox-api-key": apiKey }
+      }
+    );
+    expect(revokeResponse.status).toBe(200);
+    await expect(revokeResponse.json()).resolves.toMatchObject({
+      shareId: secondUpload.shareId
+    });
+
+    const archive = await createEncryptedEnvelopeArchive();
+    const rejectedUploadResponse = await fetch(`${restarted.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+    expect(rejectedUploadResponse.status).toBe(507);
+    await expect(rejectedUploadResponse.json()).resolves.toEqual({
+      error:
+        "Share record capacity is exhausted (1). Wait for expired records to pass retention and be pruned, remove retained data administratively, or raise the admission limit."
+    });
+    await expect(readdir(resolve(restarted.dataDir, "archives"))).resolves.toHaveLength(3);
+  });
+
+  it("atomically persists records and reconciles interrupted storage on restart", async () => {
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const validRecordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const validRecord = JSON.parse(await readFile(validRecordPath, "utf8")) as Record<
+      string,
+      unknown
+    >;
+    expect((await stat(validRecordPath)).mode & 0o777).toBe(0o600);
+
+    const orphanArchiveId = "c".repeat(32);
+    const orphanRecordId = "d".repeat(32);
+    const unsafeExpiryId = "e".repeat(32);
+    await writeFile(
+      resolve(server.dataDir, "archives", `${orphanArchiveId}.webblackbox`),
+      "orphan"
+    );
+    await writeFile(
+      resolve(server.dataDir, "records", `${orphanRecordId}.json`),
+      JSON.stringify({ ...validRecord, id: orphanRecordId })
+    );
+    await writeFile(
+      resolve(server.dataDir, "archives", `${unsafeExpiryId}.webblackbox`),
+      await readFile(resolve(server.dataDir, "archives", `${upload.shareId}.webblackbox`))
+    );
+    await writeFile(
+      resolve(server.dataDir, "records", `${unsafeExpiryId}.json`),
+      JSON.stringify({
+        ...validRecord,
+        id: unsafeExpiryId,
+        expiresAt: Number.MAX_SAFE_INTEGER
+      })
+    );
+    await writeFile(resolve(server.dataDir, "archives", ".interrupted.upload"), "partial");
+    await writeFile(resolve(server.dataDir, "records", ".interrupted.record"), "partial");
+
+    await stopShareServer(server, false);
+    const restarted = await startShareServer({}, server.dataDir);
+
+    await expect(readdir(resolve(restarted.dataDir, "archives"))).resolves.toEqual([
+      `${upload.shareId}.webblackbox`
+    ]);
+    await expect(readdir(resolve(restarted.dataDir, "records"))).resolves.toEqual([
+      `${upload.shareId}.json`
+    ]);
+    const metadataResponse = await fetch(`${restarted.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    expect(metadataResponse.status).toBe(200);
+  });
+
+  it("rejects a second writer without touching the first process storage", async () => {
+    const first = await startShareServer();
+    const archiveTemporaryPath = resolve(first.dataDir, "archives", ".first-writer.upload");
+    const recordTemporaryPath = resolve(first.dataDir, "records", ".first-writer.record");
+    const auditHmacKeyPath = resolve(first.dataDir, "audit", "client-hash.hmac.key");
+    const auditHmacKeyBefore = await readFile(auditHmacKeyPath);
+    const auditHmacTemporaryPath = resolve(
+      first.dataDir,
+      "audit",
+      `.client-hash.${"b".repeat(32)}.hmac-key.tmp`
+    );
+    await writeFile(archiveTemporaryPath, "first-writer-upload");
+    await writeFile(recordTemporaryPath, "first-writer-record");
+    await writeFile(auditHmacTemporaryPath, "first-writer-audit-key-temp");
+
+    const second = await spawnShareServer({}, first.dataDir);
+    const secondExit = await waitForShareServerExit(second);
+
+    expect(secondExit).toEqual({ code: 1, signal: null });
+    expect(second.logs.join("")).toContain("is already in use by a running share-server process");
+    await expect(readFile(archiveTemporaryPath, "utf8")).resolves.toBe("first-writer-upload");
+    await expect(readFile(recordTemporaryPath, "utf8")).resolves.toBe("first-writer-record");
+    await expect(readFile(auditHmacTemporaryPath, "utf8")).resolves.toBe(
+      "first-writer-audit-key-temp"
+    );
+    await expect(readFile(auditHmacKeyPath)).resolves.toEqual(auditHmacKeyBefore);
+
+    const upload = await uploadEncryptedFixture(first);
+    const metadataResponse = await fetch(`${first.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: {
+        "x-webblackbox-api-key": apiKey
+      }
+    });
+    expect(metadataResponse.status).toBe(200);
+
+    await stopShareServer(second, false);
+    await stopShareServer(first, false);
+    const lockPath = resolve(first.dataDir, ".share-server.lock");
+    await expect(stat(lockPath)).rejects.toMatchObject({ code: "ENOENT" });
+    expect(
+      (await readdir(first.dataDir)).filter((name) => name.startsWith(".share-server.lock"))
+    ).toEqual([]);
+
+    const restarted = await startShareServer({}, first.dataDir);
+    await expect(stat(auditHmacTemporaryPath)).rejects.toMatchObject({ code: "ENOENT" });
+    const restartedMetadataResponse = await fetch(
+      `${restarted.baseUrl}/api/share/${upload.shareId}/meta`,
+      {
+        headers: {
+          "x-webblackbox-api-key": apiKey
+        }
+      }
+    );
+    expect(restartedMetadataResponse.status).toBe(200);
+  });
+
+  it("recovers a complete stale writer lock after a crashed process exits", async () => {
+    const crashed = await startShareServer();
+    const lockPath = resolve(crashed.dataDir, ".share-server.lock");
+    const originalLock = JSON.parse(await readFile(lockPath, "utf8")) as {
+      nonce: string;
+      ownerFile: string;
+      pid: number;
+    };
+    const originalLockStat = await stat(lockPath);
+    if (process.platform !== "win32") {
+      expect(originalLockStat.mode & 0o777).toBe(0o600);
+    }
+    expect(originalLockStat.nlink).toBe(2);
+
+    process.kill(originalLock.pid, "SIGKILL");
+    await waitForLocalProcessExit(originalLock.pid);
+    await waitForShareServerExit(crashed);
+    await stopShareServer(crashed, false);
+    await expect(stat(lockPath)).resolves.toBeDefined();
+
+    const restarted = await startShareServer({}, crashed.dataDir);
+    const replacementLock = JSON.parse(await readFile(lockPath, "utf8")) as {
+      nonce: string;
+      ownerFile: string;
+      pid: number;
+    };
+    expect(replacementLock.pid).not.toBe(originalLock.pid);
+    expect(() => process.kill(replacementLock.pid, 0)).not.toThrow();
+    expect(replacementLock.nonce).not.toBe(originalLock.nonce);
+    await expect(stat(resolve(crashed.dataDir, originalLock.ownerFile))).rejects.toMatchObject({
+      code: "ENOENT"
+    });
+
+    const listResponse = await fetch(`${restarted.baseUrl}/api/share/list`, {
+      headers: {
+        "x-webblackbox-api-key": apiKey
+      }
+    });
+    expect(listResponse.status).toBe(200);
+  });
+
+  it("refuses a process-lock symlink without changing its target", async () => {
+    const initialized = await startShareServer();
+    await stopShareServer(initialized, false);
+    const externalDirectory = await mkdtemp(resolve(tmpdir(), "webblackbox-share-lock-target-"));
+    const externalTarget = resolve(externalDirectory, "external-lock-target");
+
+    try {
+      await writeFile(externalTarget, "external-target-must-not-change");
+      await symlink(externalTarget, resolve(initialized.dataDir, ".share-server.lock"));
+
+      const refused = await spawnShareServer({}, initialized.dataDir);
+      const refusedExit = await waitForShareServerExit(refused);
+      expect(refusedExit).toEqual({ code: 1, signal: null });
+      expect(refused.logs.join("")).toContain("Unsafe share data directory lock path");
+      await expect(readFile(externalTarget, "utf8")).resolves.toBe(
+        "external-target-must-not-change"
+      );
+      await stopShareServer(refused, false);
+    } finally {
+      await rm(initialized.dataDir, { recursive: true, force: true });
+      await rm(externalDirectory, { recursive: true, force: true });
+    }
+  });
+
+  it("migrates legacy storage directories and committed files to private modes on restart", async () => {
+    if (process.platform === "win32") {
+      return;
+    }
+
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    await stopShareServer(server, false);
+
+    const archivePath = resolve(server.dataDir, "archives", `${upload.shareId}.webblackbox`);
+    const recordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const activeAuditPath = resolve(server.dataDir, "audit", "share-access.jsonl");
+    const rotatedAuditPath = resolve(server.dataDir, "audit", "share-access.1.jsonl");
+    const auditHmacKeyPath = resolve(server.dataDir, "audit", "client-hash.hmac.key");
+    const directoryPaths = [
+      server.dataDir,
+      resolve(server.dataDir, "archives"),
+      resolve(server.dataDir, "records"),
+      resolve(server.dataDir, "audit")
+    ];
+    const committedFilePaths = [archivePath, recordPath, activeAuditPath, auditHmacKeyPath];
+
+    await writeFile(rotatedAuditPath, '{"legacy":true}\n');
+    await Promise.all(directoryPaths.map((directoryPath) => chmod(directoryPath, 0o755)));
+    await Promise.all(
+      [...committedFilePaths, rotatedAuditPath].map((filePath) => chmod(filePath, 0o644))
+    );
+
+    const restarted = await startShareServer({}, server.dataDir);
+
+    for (const directoryPath of directoryPaths) {
+      expect((await stat(directoryPath)).mode & 0o777).toBe(0o700);
+    }
+    for (const filePath of committedFilePaths) {
+      expect((await stat(filePath)).mode & 0o777).toBe(0o600);
+    }
+    await expect(stat(rotatedAuditPath)).rejects.toMatchObject({ code: "ENOENT" });
+
+    const metadataResponse = await fetch(`${restarted.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    expect(metadataResponse.status).toBe(200);
+  });
+
+  it.each(["share-access.jsonl", "share-access.1.jsonl"])(
+    "refuses to start with an oversized legacy audit log at %s",
+    async (auditFileName) => {
+      const server = await startShareServer();
+      await stopShareServer(server, false);
+
+      const auditDirectory = resolve(server.dataDir, "audit");
+      const auditPath = resolve(auditDirectory, auditFileName);
+      const legacyLine = `${JSON.stringify({ legacy: true, value: "x".repeat(96) })}\n`;
+      const oversizedLog = legacyLine.repeat(8);
+      expect(Buffer.byteLength(oversizedLog)).toBeGreaterThan(512);
+      await writeFile(auditPath, oversizedLog);
+
+      const otherAuditPath = resolve(
+        auditDirectory,
+        auditFileName === "share-access.jsonl" ? "share-access.1.jsonl" : "share-access.jsonl"
+      );
+      const otherAuditLog = `${JSON.stringify({ legacy: "retained" })}\n`;
+      await writeFile(otherAuditPath, otherAuditLog);
+      if (process.platform !== "win32") {
+        await Promise.all([chmod(auditPath, 0o644), chmod(otherAuditPath, 0o644)]);
+      }
+
+      await expect(
+        startShareServer(
+          {
+            WEBBLACKBOX_SHARE_MAX_AUDIT_LOG_BYTES: "512"
+          },
+          server.dataDir
+        )
+      ).rejects.toThrow(new RegExp(`${escapeRegExp(auditFileName)}.*exceeds`));
+
+      await expect(readFile(auditPath, "utf8")).resolves.toBe(oversizedLog);
+      await expect(readFile(otherAuditPath, "utf8")).resolves.toBe(otherAuditLog);
+      if (process.platform !== "win32") {
+        expect((await stat(auditPath)).mode & 0o777).toBe(0o600);
+        expect((await stat(otherAuditPath)).mode & 0o777).toBe(0o600);
+      }
+    }
+  );
+
+  it("refuses to append after an incomplete legacy audit JSONL record", async () => {
+    const server = await startShareServer();
+    await stopShareServer(server, false);
+
+    const auditPath = resolve(server.dataDir, "audit", "share-access.jsonl");
+    const incompleteLog = '{"legacy":true';
+    await writeFile(auditPath, incompleteLog);
+
+    await expect(startShareServer({}, server.dataDir)).rejects.toThrow(
+      /does not end at a complete JSONL record/
+    );
+    await expect(readFile(auditPath, "utf8")).resolves.toBe(incompleteLog);
+  });
+
+  it("rejects an audit log ceiling too small to retain an event", async () => {
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_SHARE_MAX_AUDIT_LOG_BYTES: "1"
+      })
+    ).rejects.toThrow(
+      /WEBBLACKBOX_SHARE_MAX_AUDIT_LOG_BYTES must be an integer between 512 and 67108864/
+    );
+  });
+
+  it("refuses a managed storage directory symlink without changing its external target", async () => {
+    if (process.platform === "win32") {
+      return;
+    }
+
+    const dataDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-symlink-root-"));
+    const outsideDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-outside-"));
+    const outsideSentinel = resolve(outsideDir, "sentinel.txt");
+
+    try {
+      await writeFile(outsideSentinel, "outside", { mode: 0o644 });
+      await chmod(outsideDir, 0o755);
+      await chmod(outsideSentinel, 0o644);
+      await symlink(outsideDir, resolve(dataDir, "records"), "dir");
+
+      await expect(startShareServer({}, dataDir)).rejects.toThrow(
+        /Unsafe share storage path .*records/
+      );
+      expect((await stat(outsideDir)).mode & 0o777).toBe(0o755);
+      expect((await stat(outsideSentinel)).mode & 0o777).toBe(0o644);
+      await expect(readFile(outsideSentinel, "utf8")).resolves.toBe("outside");
+    } finally {
+      await rm(outsideDir, { recursive: true, force: true });
+    }
+  });
+
+  it("refuses a committed file symlink without changing its external target", async () => {
+    if (process.platform === "win32") {
+      return;
+    }
+
+    const server = await startShareServer();
+    const upload = await uploadEncryptedFixture(server);
+    const archivePath = resolve(server.dataDir, "archives", `${upload.shareId}.webblackbox`);
+    const outsideDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-outside-file-"));
+    const outsideFile = resolve(outsideDir, "outside.webblackbox");
+
+    try {
+      await stopShareServer(server, false);
+      await writeFile(outsideFile, "outside", { mode: 0o644 });
+      await chmod(outsideFile, 0o644);
+      await rm(archivePath);
+      await symlink(outsideFile, archivePath, "file");
+
+      await expect(startShareServer({}, server.dataDir)).rejects.toThrow(
+        /Unsafe share storage path .*webblackbox/
+      );
+      expect((await stat(outsideFile)).mode & 0o777).toBe(0o644);
+      await expect(readFile(outsideFile, "utf8")).resolves.toBe("outside");
+    } finally {
+      await rm(outsideDir, { recursive: true, force: true });
+    }
+  });
+
+  it("refuses an upload after the archive directory is replaced at runtime", async () => {
+    if (process.platform === "win32") {
+      return;
+    }
+
+    const server = await startShareServer();
+    const archive = Buffer.from(await createEncryptedEnvelopeArchive());
+    const archivesPath = resolve(server.dataDir, "archives");
+    const originalArchivesPath = resolve(server.dataDir, "archives-before-runtime-swap");
+    const outsideDirectory = await mkdtemp(resolve(tmpdir(), "webblackbox-share-runtime-swap-"));
+    let originalDirectoryMoved = false;
+
+    try {
+      await rename(archivesPath, originalArchivesPath);
+      originalDirectoryMoved = true;
+      await symlink(outsideDirectory, archivesPath, "dir");
+      const response = await fetch(`${server.baseUrl}/api/share/upload`, {
+        method: "POST",
+        headers: {
+          "content-type": "application/octet-stream",
+          "x-webblackbox-api-key": apiKey,
+          "x-webblackbox-share-summary": encodeURIComponent(
+            JSON.stringify(buildPassedShareSummary(archive))
+          )
+        },
+        body: archive
+      });
+
+      expect(response.status).not.toBe(201);
+      await expect(response.json()).resolves.toEqual({ error: "Internal server error." });
+      await expect(readdir(outsideDirectory)).resolves.toEqual([]);
+    } finally {
+      if (originalDirectoryMoved) {
+        await rm(archivesPath, { force: true });
+        await rename(originalArchivesPath, archivesPath);
+      }
+      await rm(outsideDirectory, { recursive: true, force: true });
+    }
+  });
+
+  it.each(["truncated", "same-size replacement"] as const)(
+    "removes a %s persisted archive during restart reconciliation",
+    async (corruption) => {
+      const server = await startShareServer();
+      const upload = await uploadEncryptedFixture(server);
+      const archivePath = resolve(server.dataDir, "archives", `${upload.shareId}.webblackbox`);
+      const storedArchive = await readFile(archivePath);
+      const corruptedArchive =
+        corruption === "truncated"
+          ? storedArchive.subarray(0, storedArchive.byteLength - 1)
+          : Buffer.alloc(storedArchive.byteLength, 0xa5);
+      expect(sha256Hex(corruptedArchive)).not.toBe(sha256Hex(storedArchive));
+
+      await stopShareServer(server, false);
+      await writeFile(archivePath, corruptedArchive);
+      const restarted = await startShareServer({}, server.dataDir);
+
+      const listResponse = await fetch(`${restarted.baseUrl}/api/share/list`, {
+        headers: { "x-webblackbox-api-key": apiKey }
+      });
+      const list = (await listResponse.json()) as { items: unknown[]; total: number };
+      expect(listResponse.status).toBe(200);
+      expect(list).toMatchObject({ items: [], total: 0 });
+      await expect(readdir(resolve(restarted.dataDir, "archives"))).resolves.toEqual([]);
+      await expect(readdir(resolve(restarted.dataDir, "records"))).resolves.toEqual([]);
+
+      const metadataResponse = await fetch(
+        `${restarted.baseUrl}/api/share/${upload.shareId}/meta`,
+        { headers: { "x-webblackbox-api-key": apiKey } }
+      );
+      const downloadResponse = await fetch(
+        `${restarted.baseUrl}/api/share/${upload.shareId}/archive`,
+        { headers: { "x-webblackbox-api-key": apiKey } }
+      );
+      expect(metadataResponse.status).toBe(404);
+      expect(downloadResponse.status).toBe(404);
+    }
+  );
+
+  it("prunes retention-expired archives before reading them during startup reconciliation", async () => {
+    const retentionConfiguration = {
+      WEBBLACKBOX_SHARE_DEFAULT_TTL_MS: "1000",
+      WEBBLACKBOX_SHARE_MAX_TTL_MS: "1000",
+      WEBBLACKBOX_SHARE_RETAIN_EXPIRED_MS: "0"
+    };
+    const server = await startShareServer(retentionConfiguration);
+    const upload = await uploadEncryptedFixture(server);
+    const recordPath = resolve(server.dataDir, "records", `${upload.shareId}.json`);
+    const archivePath = resolve(server.dataDir, "archives", `${upload.shareId}.webblackbox`);
+    const record = JSON.parse(await readFile(recordPath, "utf8")) as { expiresAt?: unknown };
+    const expiresAt = record.expiresAt;
+    if (typeof expiresAt !== "number") {
+      throw new Error("Expected the uploaded Share record to have an expiry timestamp.");
+    }
+
+    await stopShareServer(server, false);
+    await new Promise((resolvePromise) =>
+      setTimeout(resolvePromise, Math.max(0, expiresAt - Date.now() + 25))
+    );
+
+    const readGuardPath = resolve(server.dataDir, "deny-expired-archive-read.mjs");
+    await writeFile(
+      readGuardPath,
+      `import fileSystemPromises from "node:fs/promises";
+import { syncBuiltinESMExports } from "node:module";
+
+const originalOpen = fileSystemPromises.open;
+fileSystemPromises.open = async (...arguments_) => {
+  const handle = await originalOpen(...arguments_);
+  if (String(arguments_[0]) === process.env.WEBBLACKBOX_TEST_DENY_ARCHIVE_READ_PATH) {
+    handle.read = async () => {
+      const error = new Error("Expired archive validation read was attempted.");
+      error.code = "EIO";
+      throw error;
+    };
+  }
+  return handle;
+};
+syncBuiltinESMExports();
+`
+    );
+    const inheritedNodeOptions = process.env.NODE_OPTIONS?.trim();
+    const restarted = await startShareServer(
+      {
+        ...retentionConfiguration,
+        NODE_OPTIONS: [inheritedNodeOptions, `--import=${pathToFileURL(readGuardPath).href}`]
+          .filter((value): value is string => Boolean(value))
+          .join(" "),
+        WEBBLACKBOX_TEST_DENY_ARCHIVE_READ_PATH: archivePath
+      },
+      server.dataDir
+    );
+
+    await expect(stat(recordPath)).rejects.toMatchObject({ code: "ENOENT" });
+    await expect(stat(archivePath)).rejects.toMatchObject({ code: "ENOENT" });
+    const listResponse = await fetch(`${restarted.baseUrl}/api/share/list`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    await expect(listResponse.json()).resolves.toMatchObject({ items: [], total: 0 });
+  });
+
+  it("does not expose stale metadata or downloads after archives change at runtime", async () => {
+    const server = await startShareServer();
+    const truncatedUpload = await uploadEncryptedFixture(server);
+    const truncatedPath = resolve(
+      server.dataDir,
+      "archives",
+      `${truncatedUpload.shareId}.webblackbox`
+    );
+    const truncatedBytes = await readFile(truncatedPath);
+    await writeFile(truncatedPath, truncatedBytes.subarray(0, truncatedBytes.byteLength - 1));
+
+    const metadataResponse = await fetch(
+      `${server.baseUrl}/api/share/${truncatedUpload.shareId}/meta`,
+      { headers: { "x-webblackbox-api-key": apiKey } }
+    );
+    expect(metadataResponse.status).toBe(404);
+
+    const replacedUpload = await uploadEncryptedFixture(server);
+    const replacedPath = resolve(
+      server.dataDir,
+      "archives",
+      `${replacedUpload.shareId}.webblackbox`
+    );
+    const replacedBytes = await readFile(replacedPath);
+    await writeFile(replacedPath, Buffer.alloc(replacedBytes.byteLength, 0x5a));
+
+    const downloadResponse = await fetch(
+      `${server.baseUrl}/api/share/${replacedUpload.shareId}/archive`,
+      { headers: { "x-webblackbox-api-key": apiKey } }
+    );
+    expect(downloadResponse.status).toBe(404);
+    expect(downloadResponse.headers.get("content-type")).toContain("application/json");
+
+    const listResponse = await fetch(`${server.baseUrl}/api/share/list`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const list = (await listResponse.json()) as { items: unknown[]; total: number };
+    expect(list).toMatchObject({ items: [], total: 0 });
+  });
+
+  it("expires shares and blocks archive download after ttl", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_DEFAULT_TTL_MS: "1000"
+    });
+    const uploadPayload = await uploadEncryptedFixture(server);
+
+    await new Promise((resolve) => setTimeout(resolve, 1100));
 
     const response = await fetch(`${server.baseUrl}/api/share/${uploadPayload.shareId}/archive`, {
       headers: {
-        "x-webblackbox-api-key": apiKey
-      }
+        "x-webblackbox-api-key": apiKey
+      }
+    });
+
+    await expect(response.json()).resolves.toEqual({
+      error: "Share has expired."
+    });
+    expect(response.status).toBe(410);
+  });
+
+  it("accepts zero retention and prunes an expired share on restart", async () => {
+    const durationEnv = {
+      WEBBLACKBOX_SHARE_DEFAULT_TTL_MS: "1000",
+      WEBBLACKBOX_SHARE_MAX_TTL_MS: "1000",
+      WEBBLACKBOX_SHARE_RETAIN_EXPIRED_MS: "0"
+    };
+    const server = await startShareServer(durationEnv);
+    await uploadEncryptedFixture(server);
+
+    await stopShareServer(server, false);
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 1_100));
+    const restarted = await startShareServer(durationEnv, server.dataDir);
+
+    await expect(readdir(resolve(restarted.dataDir, "records"))).resolves.toEqual([]);
+    await expect(readdir(resolve(restarted.dataDir, "archives"))).resolves.toEqual([]);
+  });
+
+  it("rejects unsafe or contradictory duration configuration", async () => {
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_SHARE_MAX_TTL_MS: String(Number.MAX_SAFE_INTEGER)
+      })
+    ).rejects.toThrow(/safe timestamp range/);
+
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_SHARE_DEFAULT_TTL_MS: "2000",
+        WEBBLACKBOX_SHARE_MAX_TTL_MS: "1000"
+      })
+    ).rejects.toThrow(/must not exceed/);
+
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_SHARE_RETAIN_EXPIRED_MS: "not-a-duration"
+      })
+    ).rejects.toThrow(/must be an integer/);
+  });
+
+  it("cancels a streamed archive download when the client disconnects", async () => {
+    const server = await startShareServer();
+    const archive = await createLargeEncryptedEnvelopeArchive(8 * 1024 * 1024);
+    const uploadResponse = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(archive))
+        )
+      },
+      body: Buffer.from(archive)
+    });
+    const upload = (await uploadResponse.json()) as { shareId: string };
+    expect(uploadResponse.status).toBe(201);
+
+    await new Promise<void>((resolvePromise, reject) => {
+      const download = createHttpRequest(`${server.baseUrl}/api/share/${upload.shareId}/archive`, {
+        method: "GET",
+        headers: { "x-webblackbox-api-key": apiKey }
+      });
+      download.once("error", () => undefined);
+      download.once("response", (archiveResponse) => {
+        archiveResponse.once("error", () => undefined);
+        archiveResponse.once("data", () => {
+          archiveResponse.destroy();
+          download.destroy();
+          resolvePromise();
+        });
+        archiveResponse.once("end", () => {
+          reject(new Error("Expected to abort before the complete archive was streamed."));
+        });
+      });
+      download.end();
     });
 
-    await expect(response.json()).resolves.toEqual({
-      error: "Share has expired."
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+    const metadataResponse = await fetch(`${server.baseUrl}/api/share/${upload.shareId}/meta`, {
+      headers: { "x-webblackbox-api-key": apiKey }
     });
-    expect(response.status).toBe(410);
+    expect(metadataResponse.status).toBe(200);
+    expect(server.child.exitCode).toBeNull();
   });
 
   it("revokes shares and writes redacted audit events", async () => {
@@ -345,6 +2267,7 @@ describe("share-server", () => {
     });
     expect(archiveResponse.status).toBe(410);
 
+    await waitForAuditEvent(server, "download", uploadPayload.shareId);
     const auditLog = await readFile(resolve(server.dataDir, "audit/share-access.jsonl"), "utf8");
     const auditEvents = auditLog
       .trim()
@@ -359,6 +2282,332 @@ describe("share-server", () => {
     expect(auditLog).not.toContain("webblackbox-share-");
   });
 
+  it("replaces legacy enumerable client hashes with a private HMAC epoch", async () => {
+    const dataDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-audit-migration-"));
+    const auditDir = resolve(dataDir, "audit");
+    const auditPath = resolve(auditDir, "share-access.jsonl");
+    const legacyHash = createHash("sha256")
+      .update("webblackbox-share-audit:ip:127.0.0.1")
+      .digest("hex");
+    await mkdir(auditDir, { recursive: true });
+    await writeFile(
+      auditPath,
+      `${JSON.stringify({
+        schemaVersion: 1,
+        action: "list",
+        outcome: "ok",
+        clientHash: legacyHash
+      })}\n`
+    );
+
+    const server = await startShareServer({}, dataDir);
+    const clientHash = await readLatestAuditClientHash(server, "list");
+    const auditLog = await readFile(auditPath, "utf8");
+    const events = auditLog
+      .trim()
+      .split("\n")
+      .map(
+        (line) =>
+          JSON.parse(line) as {
+            schemaVersion: number;
+            clientHashAlgorithm: string;
+            clientHash: string;
+          }
+      );
+    const keyStat = await stat(resolve(auditDir, "client-hash.hmac.key"));
+
+    expect(clientHash).toMatch(/^[a-f0-9]{64}$/);
+    expect(clientHash).not.toBe(legacyHash);
+    expect(auditLog).not.toContain(legacyHash);
+    expect(auditLog).not.toContain("127.0.0.1");
+    expect(events).not.toHaveLength(0);
+    expect(
+      events.every(
+        (event) => event.schemaVersion === 2 && event.clientHashAlgorithm === "HMAC-SHA256-v1"
+      )
+    ).toBe(true);
+    expect(keyStat.size).toBe(32);
+    if (process.platform !== "win32") {
+      expect(keyStat.mode & 0o777).toBe(0o600);
+    }
+  });
+
+  it("keeps generated audit client hashes stable across data-directory restarts", async () => {
+    const firstServer = await startShareServer();
+    const dataDir = firstServer.dataDir;
+    const firstHash = await readLatestAuditClientHash(firstServer, "list");
+
+    await stopShareServer(firstServer, false);
+    const restartedServer = await startShareServer({}, dataDir);
+    const restartedHash = await readLatestAuditClientHash(restartedServer, "list");
+
+    expect(restartedHash).toBe(firstHash);
+  });
+
+  it("uses independent audit client hash keys for different data directories", async () => {
+    const firstServer = await startShareServer();
+    const secondServer = await startShareServer();
+
+    const [firstHash, secondHash] = await Promise.all([
+      readLatestAuditClientHash(firstServer, "list"),
+      readLatestAuditClientHash(secondServer, "list")
+    ]);
+
+    expect(secondHash).not.toBe(firstHash);
+  });
+
+  it.each([
+    ["short", Buffer.alloc(16, 0x5a).toString("base64url")],
+    ["low-entropy", Buffer.alloc(32, 0x5a).toString("base64url")]
+  ])("rejects %s configured audit HMAC secrets", async (_label, weakSecret) => {
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_SHARE_AUDIT_HMAC_SECRET: weakSecret
+      })
+    ).rejects.toThrow(/must be canonical base64url encoding of 32 to 64 high-entropy bytes/);
+  });
+
+  it("uses a validated environment audit key without exposing it", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_AUDIT_HMAC_SECRET: testAuditHmacSecret
+    });
+    const response = await fetch(`${server.baseUrl}/api/share/list`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    const responseBody = await response.text();
+    const expectedHash = auditClientHmac(testAuditHmacSecretBytes, "ip:127.0.0.1");
+
+    await waitForAuditClientHash(server, "list", expectedHash);
+    const auditLog = await readFile(resolve(server.dataDir, "audit/share-access.jsonl"), "utf8");
+    expect(response.status).toBe(200);
+    expect(responseBody).not.toContain(testAuditHmacSecret);
+    expect(auditLog).not.toContain(testAuditHmacSecret);
+    expect(server.logs.join("")).not.toContain(testAuditHmacSecret);
+    await expect(stat(resolve(server.dataDir, "audit/client-hash.hmac.key"))).rejects.toMatchObject(
+      {
+        code: "ENOENT"
+      }
+    );
+  });
+
+  it("recovers an interrupted atomic audit HMAC key publication", async () => {
+    if (process.platform === "win32") {
+      return;
+    }
+
+    const dataDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-audit-key-recovery-"));
+    const auditDir = resolve(dataDir, "audit");
+    const temporaryKeyPath = resolve(auditDir, `.client-hash.${"a".repeat(32)}.hmac-key.tmp`);
+    const finalKeyPath = resolve(auditDir, "client-hash.hmac.key");
+    await mkdir(auditDir, { recursive: true });
+    await writeFile(temporaryKeyPath, testAuditHmacSecretBytes, { mode: 0o600 });
+    await link(temporaryKeyPath, finalKeyPath);
+
+    const server = await startShareServer({}, dataDir);
+    const expectedHash = auditClientHmac(testAuditHmacSecretBytes, "ip:127.0.0.1");
+
+    await waitForAuditClientHash(server, "list", expectedHash);
+    await expect(stat(temporaryKeyPath)).rejects.toMatchObject({ code: "ENOENT" });
+    expect((await stat(finalKeyPath)).nlink).toBe(1);
+  });
+
+  it("refuses to follow an audit HMAC key symlink", async () => {
+    if (process.platform === "win32") {
+      return;
+    }
+
+    const dataDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-audit-symlink-"));
+    const auditDir = resolve(dataDir, "audit");
+    const outsideKeyPath = resolve(dataDir, "outside.key");
+    const outsideKey = randomBytes(32);
+    await mkdir(auditDir, { recursive: true });
+    await writeFile(outsideKeyPath, outsideKey);
+    await symlink(outsideKeyPath, resolve(auditDir, "client-hash.hmac.key"));
+
+    await expect(startShareServer({}, dataDir)).rejects.toThrow(/Unsafe share storage path/);
+    await expect(readFile(outsideKeyPath)).resolves.toEqual(outsideKey);
+  });
+
+  it("audits authorization failures within a bounded rotating log", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_MAX_AUDIT_LOG_BYTES: "512"
+    });
+    const rejectedKey = "raw-rejected-api-key";
+
+    for (let index = 0; index < 8; index += 1) {
+      const response = await fetch(`${server.baseUrl}/api/share/list`, {
+        headers: {
+          "x-webblackbox-api-key": rejectedKey
+        }
+      });
+      expect(response.status).toBe(401);
+    }
+
+    const auditFiles = (await readdir(resolve(server.dataDir, "audit"))).filter((name) =>
+      name.endsWith(".jsonl")
+    );
+    expect(auditFiles).toEqual(
+      expect.arrayContaining(["share-access.jsonl", "share-access.1.jsonl"])
+    );
+    const auditLogs = await Promise.all(
+      auditFiles.map((name) => readFile(resolve(server.dataDir, "audit", name), "utf8"))
+    );
+    expect(auditLogs.join("\n")).toContain('"outcome":"blocked"');
+    expect(auditLogs.join("\n")).toContain('"reason":"unauthorized"');
+    expect(auditLogs.join("\n")).not.toContain(rejectedKey);
+
+    for (const name of auditFiles) {
+      expect((await stat(resolve(server.dataDir, "audit", name))).size).toBeLessThanOrEqual(512);
+    }
+  });
+
+  it("keeps committed operations successful when the audit sink is unavailable", async () => {
+    const server = await startShareServer();
+    const auditPath = resolve(server.dataDir, "audit/share-access.jsonl");
+    await readLatestAuditClientHash(server, "list");
+    await rm(auditPath, { force: true });
+    await mkdir(auditPath);
+
+    const uploadPayload = await uploadEncryptedFixture(server);
+    const metadataResponse = await fetch(
+      `${server.baseUrl}/api/share/${uploadPayload.shareId}/meta`,
+      {
+        headers: {
+          "x-webblackbox-api-key": apiKey
+        }
+      }
+    );
+
+    expect(metadataResponse.status).toBe(200);
+    expect(server.child.exitCode).toBeNull();
+    expect(server.logs.join("")).toContain("[share-server] audit append failed");
+    await expect(terminateShareServer(server)).resolves.toEqual({ code: 0, signal: null });
+  });
+
+  it("drains an accepted operation audit before exiting on SIGTERM", async () => {
+    const server = await startShareServer();
+    const uploadPayload = await uploadEncryptedFixture(server);
+    const metadataResponse = await fetch(
+      `${server.baseUrl}/api/share/${uploadPayload.shareId}/meta`,
+      {
+        headers: {
+          "x-webblackbox-api-key": apiKey
+        }
+      }
+    );
+
+    expect(metadataResponse.status).toBe(200);
+    await metadataResponse.arrayBuffer();
+
+    const exit = await terminateShareServer(server);
+    const auditLog = await readFile(resolve(server.dataDir, "audit/share-access.jsonl"), "utf8");
+    const auditEvents = auditLog
+      .trim()
+      .split("\n")
+      .map((line) => JSON.parse(line) as { action: string; shareId?: string });
+
+    expect(exit).toEqual({ code: 0, signal: null });
+    expect(auditEvents).toContainEqual(
+      expect.objectContaining({
+        action: "metadata",
+        shareId: uploadPayload.shareId
+      })
+    );
+    expect(server.logs.join("")).toContain("[share-server] shutdown drain complete");
+  });
+
+  it("bounds data-root lock release within the shutdown deadline", async () => {
+    if (process.platform === "win32") {
+      return;
+    }
+
+    const dataDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-lock-shutdown-"));
+    const lockPath = resolve(dataDir, ".share-server.lock");
+    const unlinkDelayHookPath = resolve(dataDir, "delay-lock-unlink.mjs");
+    await writeFile(
+      unlinkDelayHookPath,
+      `import fileSystemPromises from "node:fs/promises";
+import { syncBuiltinESMExports } from "node:module";
+
+const originalUnlink = fileSystemPromises.unlink;
+fileSystemPromises.unlink = async (path) => {
+  if (String(path) === process.env.WEBBLACKBOX_TEST_DELAY_UNLINK_PATH) {
+    await new Promise((resolvePromise) =>
+      setTimeout(resolvePromise, Number(process.env.WEBBLACKBOX_TEST_UNLINK_DELAY_MS))
+    );
+  }
+  return originalUnlink(path);
+};
+syncBuiltinESMExports();
+`
+    );
+    const inheritedNodeOptions = process.env.NODE_OPTIONS?.trim();
+    const server = await startShareServer(
+      {
+        NODE_OPTIONS: [inheritedNodeOptions, `--import=${pathToFileURL(unlinkDelayHookPath).href}`]
+          .filter((value): value is string => Boolean(value))
+          .join(" "),
+        WEBBLACKBOX_SHARE_SHUTDOWN_TIMEOUT_MS: "150",
+        WEBBLACKBOX_TEST_DELAY_UNLINK_PATH: lockPath,
+        WEBBLACKBOX_TEST_UNLINK_DELAY_MS: "1500"
+      },
+      dataDir
+    );
+
+    const startedAt = Date.now();
+    const exit = await terminateShareServer(server);
+
+    expect(exit.signal === "SIGKILL" || exit.code === 128 + 9).toBe(true);
+    expect(Date.now() - startedAt).toBeLessThan(1_000);
+    expect(server.logs.join("")).toContain("shutdown drain timed out after 150ms");
+    await expect(stat(lockPath)).resolves.toBeDefined();
+
+    await stopShareServer(server, false);
+    const restarted = await startShareServer({}, dataDir);
+    const listResponse = await fetch(`${restarted.baseUrl}/api/share/list`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    expect(listResponse.status).toBe(200);
+  }, 10_000);
+
+  it("exits within the shutdown bound when the audit sink is unsafe", async () => {
+    if (process.platform === "win32") {
+      return;
+    }
+
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_SHUTDOWN_TIMEOUT_MS: "150"
+    });
+    const uploadPayload = await uploadEncryptedFixture(server);
+    const auditPath = resolve(server.dataDir, "audit/share-access.jsonl");
+    await waitForAuditEvent(server, "upload", uploadPayload.shareId);
+    await rm(auditPath, { force: true });
+    const auditReader = await createFullNamedPipe(auditPath);
+
+    try {
+      const metadataResponse = await fetch(
+        `${server.baseUrl}/api/share/${uploadPayload.shareId}/meta`,
+        {
+          headers: {
+            "x-webblackbox-api-key": apiKey
+          }
+        }
+      );
+      expect(metadataResponse.status).toBe(200);
+      await metadataResponse.arrayBuffer();
+      await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+
+      const startedAt = Date.now();
+      const exit = await terminateShareServer(server);
+
+      expect(exit).toEqual({ code: 0, signal: null });
+      expect(Date.now() - startedAt).toBeLessThan(2_000);
+      expect(server.logs.join("")).toContain("[share-server] audit append failed");
+    } finally {
+      await auditReader.close();
+    }
+  });
+
   it("enforces scoped API keys", async () => {
     const uploadKey = "upload-scope-key";
     const readKey = "read-scope-key";
@@ -381,50 +2630,347 @@ describe("share-server", () => {
       }
     });
 
-    expect(allowedRead.status).toBe(200);
+    expect(allowedRead.status).toBe(200);
+  });
+
+  it("serves share pages with no-referrer and strict csp headers", async () => {
+    const server = await startShareServer();
+    const uploadPayload = await uploadEncryptedFixture(server);
+
+    const response = await fetch(`${server.baseUrl}/share/${uploadPayload.shareId}`, {
+      headers: {
+        "x-webblackbox-api-key": apiKey
+      }
+    });
+    const html = await response.text();
+    const cookie = readSetCookiePair(response);
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("referrer-policy")).toBe("no-referrer");
+    expect(response.headers.get("content-security-policy")).toContain("default-src 'none'");
+    expect(response.headers.get("content-security-policy")).toContain("frame-ancestors 'none'");
+    expect(html).not.toContain("?key=");
+    expect(html).not.toContain(apiKey);
+    expect(cookie).toMatch(/^webblackbox_share_read=/);
+
+    const archiveResponse = await fetch(
+      `${server.baseUrl}/api/share/${uploadPayload.shareId}/archive`,
+      {
+        headers: {
+          cookie
+        }
+      }
+    );
+    expect(archiveResponse.status).toBe(200);
+    expect((await archiveResponse.arrayBuffer()).byteLength).toBeGreaterThan(0);
+  });
+
+  it("rejects query API keys by default", async () => {
+    const server = await startShareServer();
+    const uploadPayload = await uploadEncryptedFixture(server);
+
+    const response = await fetch(`${server.baseUrl}/share/${uploadPayload.shareId}?key=${apiKey}`, {
+      redirect: "manual"
+    });
+
+    expect(response.status).toBe(401);
+  });
+
+  it("does not create read sessions or success audits for unavailable shares", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_QUERY_API_KEY: "true"
+    });
+    const missingId = "missing-share";
+
+    const queryResponse = await fetch(
+      `${server.baseUrl}/share/${missingId}?key=${encodeURIComponent(apiKey)}`,
+      { redirect: "manual" }
+    );
+    expect(queryResponse.status).toBe(404);
+    expect(queryResponse.headers.get("location")).toBeNull();
+    expect(queryResponse.headers.get("set-cookie")).toBeNull();
+
+    const headerResponse = await fetch(`${server.baseUrl}/share/${missingId}`, {
+      headers: { "x-webblackbox-api-key": apiKey }
+    });
+    expect(headerResponse.status).toBe(404);
+    expect(headerResponse.headers.get("set-cookie")).toBeNull();
+
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 50));
+    const auditLog = await readFile(resolve(server.dataDir, "audit/share-access.jsonl"), "utf8");
+    expect(auditLog).toContain('"outcome":"not-found"');
+    expect(auditLog).not.toContain('"authorization":"query-bootstrap"');
+  });
+
+  it("does not trust Host or forwarded-protocol headers for public URLs and CORS", async () => {
+    const server = await startShareServer();
+    const encryptedArchive = await createEncryptedEnvelopeArchive();
+    const uploadResponse = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "POST",
+      headers: {
+        host: "attacker.example",
+        origin: "https://attacker.example",
+        "x-forwarded-proto": "https",
+        "content-type": "application/octet-stream",
+        "x-webblackbox-api-key": apiKey,
+        "x-webblackbox-share-summary": encodeURIComponent(
+          JSON.stringify(buildPassedShareSummary(encryptedArchive))
+        )
+      },
+      body: Buffer.from(encryptedArchive)
+    });
+    const upload = (await uploadResponse.json()) as { shareUrl: string };
+
+    expect(uploadResponse.status).toBe(201);
+    expect(upload.shareUrl).toMatch(new RegExp(`^${escapeRegExp(server.baseUrl)}/share/`));
+    expect(upload.shareUrl).not.toContain("attacker.example");
+    expect(uploadResponse.headers.get("access-control-allow-origin")).toBeNull();
+
+    const allowedPreflight = await fetch(`${server.baseUrl}/api/share/upload`, {
+      method: "OPTIONS",
+      headers: {
+        host: "attacker.example",
+        origin: server.baseUrl,
+        "x-forwarded-proto": "javascript"
+      }
+    });
+    expect(allowedPreflight.headers.get("access-control-allow-origin")).toBe(server.baseUrl);
+  });
+
+  it("uses the configured HTTPS public origin and secures browser session cookies", async () => {
+    const publicOrigin = "https://shares.example.test";
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_ALLOW_QUERY_API_KEY: "true",
+      WEBBLACKBOX_SHARE_PUBLIC_ORIGIN: publicOrigin
+    });
+    const uploadPayload = await uploadEncryptedFixture(server);
+
+    const metadataResponse = await fetch(
+      `${server.baseUrl}/api/share/${uploadPayload.shareId}/meta`,
+      {
+        headers: {
+          "x-webblackbox-api-key": apiKey
+        }
+      }
+    );
+    const metadata = (await metadataResponse.json()) as { shareUrl: string };
+    expect(metadata.shareUrl).toBe(`${publicOrigin}/share/${uploadPayload.shareId}`);
+
+    const redirectResponse = await fetch(
+      `${server.baseUrl}/share/${uploadPayload.shareId}?key=${apiKey}`,
+      { redirect: "manual" }
+    );
+    expect(redirectResponse.headers.get("set-cookie")).toContain("; Secure");
+  });
+
+  it("requires an explicit secure public origin for non-loopback binds", async () => {
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_SHARE_BIND_HOST: "0.0.0.0",
+        WEBBLACKBOX_SHARE_PUBLIC_ORIGIN: ""
+      })
+    ).rejects.toThrow(/WEBBLACKBOX_SHARE_PUBLIC_ORIGIN is required/);
+
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_SHARE_BIND_HOST: "0.0.0.0",
+        WEBBLACKBOX_SHARE_PUBLIC_ORIGIN: "http://shares.example.test"
+      })
+    ).rejects.toThrow(/must use HTTPS for non-loopback hosts/);
+  });
+
+  it("requires credentials for remote public origins and validates trusted proxy IPs", async () => {
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_SHARE_API_KEY: "",
+        WEBBLACKBOX_SHARE_API_KEYS: "",
+        WEBBLACKBOX_SHARE_PUBLIC_ORIGIN: "https://shares.example.test"
+      })
+    ).rejects.toThrow(/credential is required for a non-loopback public origin/);
+
+    await expect(
+      startShareServer({
+        WEBBLACKBOX_TRUSTED_PROXY_IPS: "not-an-ip"
+      })
+    ).rejects.toThrow(/contains an invalid IP address/);
+  });
+
+  it("denies protected routes from direct loopback clients when no credential is configured", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_API_KEY: "",
+      WEBBLACKBOX_SHARE_API_KEYS: ""
+    });
+    const requests = [
+      ["GET", "/api/share/list"],
+      ["POST", "/api/share/upload"],
+      ["GET", "/api/share/example/meta"],
+      ["GET", "/api/share/example/archive"],
+      ["GET", "/share/example"],
+      ["POST", "/api/share/example/revoke"]
+    ] as const;
+
+    for (const [method, pathname] of requests) {
+      const response = await fetch(`${server.baseUrl}${pathname}`, { method });
+      expect(response.status, `${method} ${pathname}`).toBe(401);
+    }
+  });
+
+  it("allows explicit development-only unauthenticated access from a loopback peer", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_SHARE_API_KEY: "",
+      WEBBLACKBOX_SHARE_API_KEYS: "",
+      WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK: "true"
+    });
+
+    const response = await fetch(`${server.baseUrl}/api/share/list`);
+
+    expect(response.status).toBe(200);
+    expect(server.logs.join("")).toContain(
+      "WARNING: unauthenticated loopback development access is enabled"
+    );
+  });
+
+  it("rejects the unauthenticated loopback development opt-out in proxy modes", async () => {
+    const baseOverrides = {
+      WEBBLACKBOX_SHARE_API_KEY: "",
+      WEBBLACKBOX_SHARE_API_KEYS: "",
+      WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK: "true"
+    };
+
+    await expect(
+      startShareServer({
+        ...baseOverrides,
+        WEBBLACKBOX_TRUST_X_FORWARDED_FOR: "true"
+      })
+    ).rejects.toThrow(/must not be enabled with proxy or forwarded-client configuration/);
+
+    await expect(
+      startShareServer({
+        ...baseOverrides,
+        WEBBLACKBOX_TRUSTED_PROXY_IPS: "203.0.113.10"
+      })
+    ).rejects.toThrow(/must not be enabled with proxy or forwarded-client configuration/);
+  });
+
+  it("rejects the unauthenticated loopback development opt-out for public endpoints", async () => {
+    const baseOverrides = {
+      WEBBLACKBOX_SHARE_API_KEY: "",
+      WEBBLACKBOX_SHARE_API_KEYS: "",
+      WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK: "true",
+      WEBBLACKBOX_SHARE_PUBLIC_ORIGIN: "https://shares.example.test"
+    };
+
+    await expect(startShareServer(baseOverrides)).rejects.toThrow(
+      /requires both a loopback bind host and loopback public origin/
+    );
+
+    await expect(
+      startShareServer({
+        ...baseOverrides,
+        WEBBLACKBOX_SHARE_BIND_HOST: "0.0.0.0"
+      })
+    ).rejects.toThrow(/requires both a loopback bind host and loopback public origin/);
+
+    await expect(
+      startShareServer({
+        ...baseOverrides,
+        WEBBLACKBOX_SHARE_PUBLIC_ORIGIN: "https://127.attacker.example"
+      })
+    ).rejects.toThrow(/requires both a loopback bind host and loopback public origin/);
   });
 
-  it("serves share pages with no-referrer and strict csp headers", async () => {
-    const server = await startShareServer();
-    const uploadPayload = await uploadEncryptedFixture(server);
-
-    const response = await fetch(`${server.baseUrl}/share/${uploadPayload.shareId}`, {
+  it("derives forwarded clients from the first untrusted hop next to trusted proxies", async () => {
+    const server = await startShareServer({
+      WEBBLACKBOX_TRUST_X_FORWARDED_FOR: "true",
+      WEBBLACKBOX_TRUSTED_PROXY_IPS: "127.0.0.1",
+      WEBBLACKBOX_SHARE_AUDIT_HMAC_SECRET: testAuditHmacSecret
+    });
+    const response = await fetch(`${server.baseUrl}/api/share/list`, {
       headers: {
-        "x-webblackbox-api-key": apiKey
+        "x-webblackbox-api-key": apiKey,
+        "x-forwarded-for": "198.51.100.99, 203.0.113.10"
       }
     });
-    const html = await response.text();
-    const cookie = readSetCookiePair(response);
-
     expect(response.status).toBe(200);
-    expect(response.headers.get("referrer-policy")).toBe("no-referrer");
-    expect(response.headers.get("content-security-policy")).toContain("default-src 'none'");
-    expect(response.headers.get("content-security-policy")).toContain("frame-ancestors 'none'");
-    expect(html).not.toContain("?key=");
-    expect(html).not.toContain(apiKey);
-    expect(cookie).toMatch(/^webblackbox_share_read=/);
 
-    const archiveResponse = await fetch(
-      `${server.baseUrl}/api/share/${uploadPayload.shareId}/archive`,
-      {
-        headers: {
-          cookie
-        }
-      }
+    const expectedHash = auditClientHmac(testAuditHmacSecretBytes, "ip:203.0.113.10");
+    const spoofedHash = auditClientHmac(testAuditHmacSecretBytes, "ip:198.51.100.99");
+    await waitForAuditClientHash(server, "list", expectedHash);
+    const refreshedAuditLog = await readFile(
+      resolve(server.dataDir, "audit", "share-access.jsonl"),
+      "utf8"
     );
-    expect(archiveResponse.status).toBe(200);
+    const refreshedEvents = refreshedAuditLog
+      .trim()
+      .split("\n")
+      .map((line) => JSON.parse(line) as { action: string; clientHash: string });
+    expect(refreshedEvents.at(-1)).toMatchObject({ action: "list", clientHash: expectedHash });
+    expect(refreshedEvents.at(-1)?.clientHash).not.toBe(spoofedHash);
   });
 
-  it("rejects query API keys by default", async () => {
-    const server = await startShareServer();
-    const uploadPayload = await uploadEncryptedFixture(server);
+  it.each([
+    ["expanded IPv6", "2001:0db8:0:0:0:0:0:1", "2001:db8::1"],
+    ["IPv4-mapped IPv6", "0:0:0:0:0:ffff:c000:0201", "192.0.2.1"]
+  ])(
+    "canonicalizes %s trusted proxy addresses across equivalent spellings",
+    async (_label, configuredProxy, forwardedProxy) => {
+      const server = await startShareServer({
+        WEBBLACKBOX_TRUST_X_FORWARDED_FOR: "true",
+        WEBBLACKBOX_TRUSTED_PROXY_IPS: `127.0.0.1,${configuredProxy}`,
+        WEBBLACKBOX_SHARE_AUDIT_HMAC_SECRET: testAuditHmacSecret
+      });
+      const clientAddress = "198.51.100.99";
+      const response = await fetch(`${server.baseUrl}/api/share/list`, {
+        headers: {
+          "x-webblackbox-api-key": apiKey,
+          "x-forwarded-for": `${clientAddress}, ${forwardedProxy}`
+        }
+      });
+      expect(response.status).toBe(200);
 
-    const response = await fetch(`${server.baseUrl}/share/${uploadPayload.shareId}?key=${apiKey}`, {
-      redirect: "manual"
-    });
+      const expectedHash = auditClientHmac(testAuditHmacSecretBytes, `ip:${clientAddress}`);
+      await waitForAuditClientHash(server, "list", expectedHash);
+      const refreshedAuditLog = await readFile(
+        resolve(server.dataDir, "audit/share-access.jsonl"),
+        "utf8"
+      );
+      const refreshedEvents = refreshedAuditLog
+        .trim()
+        .split("\n")
+        .map((line) => JSON.parse(line) as { action: string; clientHash: string });
+      expect(refreshedEvents.at(-1)).toMatchObject({ action: "list", clientHash: expectedHash });
+    }
+  );
 
-    expect(response.status).toBe(401);
-  });
+  it.each([
+    ["an unlisted loopback peer", "203.0.113.10", "198.51.100.1", "198.51.100.2"],
+    ["a malformed forwarded chain", "127.0.0.1", "not-an-ip", "also-not-an-ip"]
+  ])(
+    "does not split upload rate limits through %s",
+    async (_label, trustedProxies, firstForwardedFor, secondForwardedFor) => {
+      const server = await startShareServer({
+        WEBBLACKBOX_TRUST_X_FORWARDED_FOR: "true",
+        WEBBLACKBOX_TRUSTED_PROXY_IPS: trustedProxies,
+        WEBBLACKBOX_UPLOAD_RATE_LIMIT_MAX: "1"
+      });
+      const upload = (forwardedFor: string) =>
+        fetch(`${server.baseUrl}/api/share/upload`, {
+          method: "POST",
+          headers: {
+            "content-type": "application/octet-stream",
+            "x-webblackbox-api-key": apiKey,
+            "x-forwarded-for": forwardedFor
+          },
+          body: Buffer.from("not-an-archive")
+        });
+
+      const firstResponse = await upload(firstForwardedFor);
+      const secondResponse = await upload(secondForwardedFor);
+
+      expect(firstResponse.status).toBe(400);
+      expect(secondResponse.status).toBe(429);
+    }
+  );
 
   it("supports opt-in query API key bootstrap without propagating the key", async () => {
     const server = await startShareServer({
@@ -458,19 +3004,192 @@ describe("share-server", () => {
   });
 });
 
+async function terminateShareServer(
+  server: RunningShareServer
+): Promise<{ code: number | null; signal: NodeJS.Signals | null }> {
+  if (server.child.exitCode !== null || server.child.signalCode !== null) {
+    return {
+      code: server.child.exitCode,
+      signal: server.child.signalCode
+    };
+  }
+
+  return await new Promise((resolvePromise, reject) => {
+    const timeout = setTimeout(() => {
+      server.child.kill("SIGKILL");
+      reject(new Error(`share-server did not exit after SIGTERM: ${server.logs.join("")}`));
+    }, 2_500);
+    server.child.once("exit", (code, signal) => {
+      clearTimeout(timeout);
+      resolvePromise({ code, signal });
+    });
+
+    if (!server.child.kill("SIGTERM")) {
+      clearTimeout(timeout);
+      reject(new Error("Failed to send SIGTERM to share-server."));
+    }
+  });
+}
+
+async function waitForAuditEvent(
+  server: RunningShareServer,
+  action: string,
+  shareId: string
+): Promise<void> {
+  const auditPath = resolve(server.dataDir, "audit/share-access.jsonl");
+  const deadline = Date.now() + 2_000;
+
+  while (Date.now() < deadline) {
+    try {
+      const lines = (await readFile(auditPath, "utf8")).trim().split("\n");
+      const found = lines.some((line) => {
+        const event = JSON.parse(line) as { action?: string; shareId?: string };
+        return event.action === action && event.shareId === shareId;
+      });
+      if (found) {
+        return;
+      }
+    } catch {
+      // Audit creation may still be in flight after the HTTP response completes.
+    }
+
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 20));
+  }
+
+  throw new Error(`Timed out waiting for ${action} audit event for ${shareId}.`);
+}
+
+async function waitForAuditClientHash(
+  server: RunningShareServer,
+  action: string,
+  clientHash: string
+): Promise<void> {
+  const auditPath = resolve(server.dataDir, "audit/share-access.jsonl");
+  const deadline = Date.now() + 2_000;
+
+  while (Date.now() < deadline) {
+    try {
+      const lines = (await readFile(auditPath, "utf8")).trim().split("\n");
+      const found = lines.some((line) => {
+        const event = JSON.parse(line) as { action?: string; clientHash?: string };
+        return event.action === action && event.clientHash === clientHash;
+      });
+      if (found) {
+        return;
+      }
+    } catch {
+      // Audit creation may still be in flight after the HTTP response completes.
+    }
+
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 20));
+  }
+
+  throw new Error(`Timed out waiting for ${action} audit event with client hash ${clientHash}.`);
+}
+
+async function readLatestAuditClientHash(
+  server: RunningShareServer,
+  action: string
+): Promise<string> {
+  const auditPath = resolve(server.dataDir, "audit/share-access.jsonl");
+  const deadline = Date.now() + 2_000;
+
+  while (Date.now() < deadline) {
+    try {
+      const events = (await readFile(auditPath, "utf8"))
+        .trim()
+        .split("\n")
+        .map((line) => JSON.parse(line) as { action?: string; clientHash?: string });
+      const clientHash = events.findLast((event) => event.action === action)?.clientHash;
+      if (typeof clientHash === "string") {
+        return clientHash;
+      }
+    } catch {
+      // Audit creation may still be in flight after the HTTP response completes.
+    }
+
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 20));
+  }
+
+  throw new Error(`Timed out waiting for ${action} audit event.`);
+}
+
+function auditClientHmac(secret: Uint8Array, clientKey: string): string {
+  return createHmac("sha256", secret)
+    .update("webblackbox-share-audit:v1\0")
+    .update(clientKey)
+    .digest("hex");
+}
+
+async function createFullNamedPipe(path: string): Promise<Awaited<ReturnType<typeof open>>> {
+  const fifoResult = spawnSync("mkfifo", [path]);
+  if (fifoResult.status !== 0) {
+    throw new Error(`Failed to create audit FIFO: ${String(fifoResult.stderr)}`);
+  }
+
+  const reader = await open(path, fsConstants.O_RDONLY | fsConstants.O_NONBLOCK);
+  const writer = await open(path, fsConstants.O_WRONLY | fsConstants.O_NONBLOCK);
+  const chunk = Buffer.alloc(4 * 1024, 0x78);
+
+  try {
+    for (let written = 0; written < 16 * 1024 * 1024; ) {
+      try {
+        const result = await writer.write(chunk);
+        if (result.bytesWritten <= 0) {
+          break;
+        }
+        written += result.bytesWritten;
+      } catch (error) {
+        if (
+          error instanceof Error &&
+          "code" in error &&
+          ((error as Error & { code?: string }).code === "EAGAIN" ||
+            (error as Error & { code?: string }).code === "EWOULDBLOCK")
+        ) {
+          return reader;
+        }
+        throw error;
+      }
+    }
+  } catch (error) {
+    await reader.close();
+    throw error;
+  } finally {
+    await writer.close();
+  }
+
+  await reader.close();
+  throw new Error("Failed to fill audit FIFO before the safety limit.");
+}
+
 async function startShareServer(
-  envOverrides: Record<string, string> = {}
+  envOverrides: Record<string, string> = {},
+  existingDataDir?: string
+): Promise<RunningShareServer> {
+  const server = await spawnShareServer(envOverrides, existingDataDir);
+  await waitForShareServer(server);
+  return server;
+}
+
+async function spawnShareServer(
+  envOverrides: Record<string, string> = {},
+  existingDataDir?: string
 ): Promise<RunningShareServer> {
   const port = await reservePort();
-  const dataDir = await mkdtemp(resolve(tmpdir(), "webblackbox-share-test-"));
+  const dataDir = existingDataDir ?? (await mkdtemp(resolve(tmpdir(), "webblackbox-share-test-")));
   const child = spawn(process.execPath, [tsxCli, resolve(appRoot, "src/index.ts")], {
     cwd: appRoot,
     env: {
       ...process.env,
       PORT: String(port),
       WEBBLACKBOX_SHARE_API_KEY: apiKey,
+      WEBBLACKBOX_SHARE_API_KEYS: "",
+      WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK: "false",
       WEBBLACKBOX_SHARE_BIND_HOST: "127.0.0.1",
+      WEBBLACKBOX_SHARE_PUBLIC_ORIGIN: "",
       WEBBLACKBOX_SHARE_DATA_DIR: dataDir,
+      WEBBLACKBOX_TRUST_X_FORWARDED_FOR: "false",
+      WEBBLACKBOX_TRUSTED_PROXY_IPS: "",
       ...envOverrides
     },
     stdio: ["ignore", "pipe", "pipe"]
@@ -479,9 +3198,13 @@ async function startShareServer(
     baseUrl: `http://127.0.0.1:${port}`,
     child,
     dataDir,
-    logs: []
+    logs: [],
+    exit: null
   };
 
+  child.once("exit", (code, signal) => {
+    server.exit = { code, signal };
+  });
   child.stdout?.on("data", (chunk) => {
     server.logs.push(String(chunk));
   });
@@ -489,12 +3212,45 @@ async function startShareServer(
     server.logs.push(String(chunk));
   });
   runningServers.push(server);
-
-  await waitForShareServer(server);
   return server;
 }
 
-async function stopShareServer(server: RunningShareServer): Promise<void> {
+async function waitForShareServerExit(
+  server: RunningShareServer,
+  timeoutMs = 5_000
+): Promise<{ code: number | null; signal: NodeJS.Signals | null }> {
+  if (server.exit) {
+    return server.exit;
+  }
+
+  return await new Promise((resolvePromise, reject) => {
+    const timeout = setTimeout(() => {
+      reject(new Error(`share-server did not exit: ${server.logs.join("")}`));
+    }, timeoutMs);
+    server.child.once("exit", (code, signal) => {
+      clearTimeout(timeout);
+      resolvePromise({ code, signal });
+    });
+  });
+}
+
+async function waitForLocalProcessExit(pid: number, timeoutMs = 5_000): Promise<void> {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    try {
+      process.kill(pid, 0);
+    } catch (error) {
+      if (error instanceof Error && "code" in error && error.code === "ESRCH") {
+        return;
+      }
+      throw error;
+    }
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 20));
+  }
+  throw new Error(`Process ${pid} did not exit within ${timeoutMs}ms.`);
+}
+
+async function stopShareServer(server: RunningShareServer, removeData = true): Promise<void> {
   if (server.child.exitCode === null && !server.child.killed) {
     server.child.kill("SIGTERM");
     await new Promise((resolve) => {
@@ -506,10 +3262,16 @@ async function stopShareServer(server: RunningShareServer): Promise<void> {
     });
   }
 
-  await rm(server.dataDir, {
-    recursive: true,
-    force: true
-  });
+  if (!removeData) {
+    runningServers = runningServers.filter((candidate) => candidate !== server);
+  }
+
+  if (removeData) {
+    await rm(server.dataDir, {
+      recursive: true,
+      force: true
+    });
+  }
 }
 
 async function waitForShareServer(server: RunningShareServer): Promise<void> {
@@ -523,15 +3285,13 @@ async function waitForShareServer(server: RunningShareServer): Promise<void> {
     }
 
     try {
-      const response = await fetch(`${server.baseUrl}/api/share/list`, {
+      await fetch(`${server.baseUrl}/api/share/list`, {
         headers: {
           "x-webblackbox-api-key": apiKey
         }
       });
 
-      if (response.ok) {
-        return;
-      }
+      return;
     } catch {
       // retry until the process binds the port
     }
@@ -576,34 +3336,206 @@ function readSetCookiePair(response: Response): string {
   return response.headers.get("set-cookie")?.split(";")[0] ?? "";
 }
 
+function escapeRegExp(value: string): string {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
 async function uploadEncryptedFixture(
   server: RunningShareServer,
   credential = apiKey
 ): Promise<{ shareId: string }> {
+  const archive = await createEncryptedEnvelopeArchive();
   const response = await fetch(`${server.baseUrl}/api/share/upload`, {
     method: "POST",
     headers: {
       "content-type": "application/octet-stream",
       "x-webblackbox-api-key": credential,
       "x-webblackbox-filename": "fixture.webblackbox",
-      "x-webblackbox-share-summary": encodeURIComponent(JSON.stringify(buildPassedShareSummary()))
+      "x-webblackbox-share-summary": encodeURIComponent(
+        JSON.stringify(buildPassedShareSummary(archive))
+      )
     },
-    body: Buffer.from(await createEncryptedEnvelopeArchive())
+    body: Buffer.from(archive)
   });
 
   expect(response.status).toBe(201);
   return (await response.json()) as { shareId: string };
 }
 
-function buildPassedShareSummary(): unknown {
+async function uploadRawArchive(
+  server: RunningShareServer,
+  archive: Uint8Array
+): Promise<Response> {
+  return fetch(`${server.baseUrl}/api/share/upload`, {
+    method: "POST",
+    headers: {
+      "content-type": "application/octet-stream",
+      "x-webblackbox-api-key": apiKey
+    },
+    body: Buffer.from(archive)
+  });
+}
+
+async function replaceArchiveFile(
+  archive: Uint8Array,
+  path: string,
+  bytes: Uint8Array
+): Promise<Uint8Array> {
+  const zip = await JSZip.loadAsync(archive);
+  const integrityFile = zip.file("integrity/hashes.json");
+  if (!integrityFile || !zip.file(path)) {
+    throw new Error(`Fixture archive is missing ${path}.`);
+  }
+  const integrity = JSON.parse(await integrityFile.async("string")) as {
+    manifestSha256: string;
+    files: Record<string, string>;
+  };
+  zip.file(path, bytes);
+  integrity.files[path] = createHash("sha256").update(bytes).digest("hex");
+  zip.file("integrity/hashes.json", JSON.stringify(integrity));
+  return zip.generateAsync({ type: "uint8array" });
+}
+
+async function replaceArchiveFileWithoutIntegrityUpdate(
+  archive: Uint8Array,
+  path: string,
+  bytes: Uint8Array
+): Promise<Uint8Array> {
+  const zip = await JSZip.loadAsync(archive);
+  if (!zip.file(path)) {
+    throw new Error(`Fixture archive is missing ${path}.`);
+  }
+  zip.file(path, bytes);
+  return zip.generateAsync({ type: "uint8array" });
+}
+
+async function removeArchiveFileWithoutIntegrityUpdate(
+  archive: Uint8Array,
+  path: string
+): Promise<Uint8Array> {
+  const zip = await JSZip.loadAsync(archive);
+  if (!zip.file(path)) {
+    throw new Error(`Fixture archive is missing ${path}.`);
+  }
+  zip.remove(path);
+  return zip.generateAsync({ type: "uint8array" });
+}
+
+async function mutateArchiveManifest(
+  archive: Uint8Array,
+  mutate: (manifest: Record<string, unknown>) => void
+): Promise<Uint8Array> {
+  const zip = await JSZip.loadAsync(archive);
+  const manifestFile = zip.file("manifest.json");
+  const integrityFile = zip.file("integrity/hashes.json");
+  if (!manifestFile || !integrityFile) {
+    throw new Error("Fixture archive is missing manifest metadata.");
+  }
+  const manifest = JSON.parse(await manifestFile.async("string")) as Record<string, unknown>;
+  const integrity = JSON.parse(await integrityFile.async("string")) as {
+    manifestSha256: string;
+    files: Record<string, string>;
+  };
+
+  mutate(manifest);
+  const content = JSON.stringify(manifest);
+  const hash = createHash("sha256").update(content).digest("hex");
+  zip.file("manifest.json", content);
+  integrity.manifestSha256 = hash;
+  integrity.files["manifest.json"] = hash;
+  zip.file("integrity/hashes.json", JSON.stringify(integrity));
+  return zip.generateAsync({ type: "uint8array" });
+}
+
+async function renameArchiveFile(
+  archive: Uint8Array,
+  fromPath: string,
+  toPath: string
+): Promise<Uint8Array> {
+  const zip = await JSZip.loadAsync(archive);
+  const source = zip.file(fromPath);
+  const integrityFile = zip.file("integrity/hashes.json");
+  if (!source || !integrityFile) {
+    throw new Error(`Fixture archive is missing ${fromPath}.`);
+  }
+  const bytes = await source.async("uint8array");
+  const integrity = JSON.parse(await integrityFile.async("string")) as {
+    manifestSha256: string;
+    files: Record<string, string>;
+  };
+  const hash = integrity.files[fromPath];
+  if (!hash) {
+    throw new Error(`Fixture integrity manifest is missing ${fromPath}.`);
+  }
+
+  zip.remove(fromPath);
+  zip.file(toPath, bytes);
+  delete integrity.files[fromPath];
+  integrity.files[toPath] = hash;
+  zip.file("integrity/hashes.json", JSON.stringify(integrity));
+  return zip.generateAsync({ type: "uint8array" });
+}
+
+function buildPersistedServerSummary(
+  clientSummary: Record<string, unknown>
+): Record<string, unknown> {
+  const envelopeTotals = clientSummary.totals as Record<string, unknown>;
+  const clientClaim = clientSummary.clientClaim as Record<string, unknown>;
+  const clientPrivacy = clientClaim.privacy as Record<string, unknown>;
+  const clientScanner = clientPrivacy.scanner as Record<string, unknown>;
+  const expectedEventCount = envelopeTotals.events as number;
+  const expectedBlobCount = envelopeTotals.blobs as number;
+
+  return {
+    schemaVersion: 2,
+    source: "server",
+    analyzed: true,
+    encrypted: clientSummary.encrypted,
+    trust: {
+      archiveEnvelope: "server-inspected",
+      privateContent: "server-analyzed"
+    },
+    manifest: clientSummary.manifest,
+    totals: {
+      events: envelopeTotals.events,
+      blobs: envelopeTotals.blobs,
+      privacyViolations: 0,
+      errors: 0,
+      requests: 0,
+      actions: 0,
+      durationMs: envelopeTotals.durationMs
+    },
+    topActionTriggers: [],
+    privacy: {
+      ...clientPrivacy,
+      scanner: {
+        ...clientScanner,
+        status: "passed",
+        findingCount: 0,
+        coverage: {
+          complete: true,
+          scannedEventCount: expectedEventCount,
+          scannedBlobCount: expectedBlobCount,
+          opaqueBlobCount: 0,
+          inspectedBytes: 0,
+          expectedEventCount,
+          expectedBlobCount
+        }
+      }
+    }
+  };
+}
+
+function buildPassedShareSummary(archive: Uint8Array): unknown {
   return {
-    schemaVersion: 1,
+    schemaVersion: 2,
     source: "client",
+    archiveSha256: sha256Hex(archive),
     analyzed: true,
     encrypted: true,
     manifest: {
       mode: "lite",
-      chunkCodec: "ndjson",
+      chunkCodec: "none",
       recordedAt: "2026-02-13T00:00:00.000Z"
     },
     totals: {
@@ -635,19 +3567,109 @@ function buildPassedShareSummary(): unknown {
   };
 }
 
+function sha256Hex(bytes: Uint8Array): string {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+
 async function createEncryptedEnvelopeArchive(
   options: {
     completeEncryptionMap?: boolean;
     privateFileMode?: "ciphertext" | "plaintext";
     blobFileMode?: "ciphertext" | "plaintext";
     textBlobFileMode?: "ciphertext" | "plaintext";
+    plaintextPrefixBytes?: number;
   } = {}
 ): Promise<Uint8Array> {
   return createEnvelopeArchive(true, options);
 }
 
-async function createPlaintextEnvelopeArchive(): Promise<Uint8Array> {
-  return createEnvelopeArchive(false);
+async function createPlaintextEnvelopeArchive(
+  options: {
+    blobValue?: unknown;
+    includePassedPrivacyManifest?: boolean;
+  } = {}
+): Promise<Uint8Array> {
+  return createEnvelopeArchive(false, options);
+}
+
+async function createPlaintextArchiveWithInvalidUtf8Event(): Promise<Uint8Array> {
+  const zip = await JSZip.loadAsync(await createPlaintextEnvelopeArchive());
+  const manifestFile = zip.file("manifest.json");
+  const integrityFile = zip.file("integrity/hashes.json");
+  if (!manifestFile || !integrityFile) {
+    throw new Error("Plaintext fixture is missing archive metadata.");
+  }
+  const manifest = JSON.parse(await manifestFile.async("string")) as Record<string, unknown>;
+  const stats = manifest.stats as Record<string, unknown>;
+  stats.eventCount = 1;
+  stats.chunkCount = 1;
+  const event = {
+    v: 1,
+    sid: "S-invalid-utf8",
+    tab: 1,
+    t: 1_000,
+    mono: 1,
+    type: "console.entry",
+    id: "E-invalid-utf8",
+    data: { text: "-----BEGIN PRIVATE KEY-----" }
+  };
+  const eventBytes = new TextEncoder().encode(JSON.stringify(event));
+  const marker = Buffer.from("PRIVATE", "utf8");
+  const markerOffset = Buffer.from(eventBytes).indexOf(marker);
+  if (markerOffset < 0) {
+    throw new Error("Invalid UTF-8 fixture marker was not found.");
+  }
+  eventBytes[markerOffset + 3] = 0xff;
+  const eventHash = createHash("sha256").update(eventBytes).digest("hex");
+  const timeIndex = JSON.stringify([
+    {
+      chunkId: "chunk-000001",
+      seq: 1,
+      tStart: 1_000,
+      tEnd: 1_000,
+      monoStart: 1,
+      monoEnd: 1,
+      eventCount: 1,
+      byteLength: eventBytes.byteLength,
+      codec: "none",
+      sha256: eventHash
+    }
+  ]);
+  const manifestText = JSON.stringify(manifest);
+  zip.file("manifest.json", manifestText);
+  zip.file("index/time.json", timeIndex);
+  zip.file("events/chunk-000001.ndjson", eventBytes);
+
+  const integrity = JSON.parse(await integrityFile.async("string")) as {
+    manifestSha256: string;
+    files: Record<string, string>;
+  };
+  const manifestHash = createHash("sha256").update(manifestText).digest("hex");
+  integrity.manifestSha256 = manifestHash;
+  integrity.files["manifest.json"] = manifestHash;
+  integrity.files["index/time.json"] = createHash("sha256").update(timeIndex).digest("hex");
+  integrity.files["events/chunk-000001.ndjson"] = eventHash;
+  zip.file("integrity/hashes.json", JSON.stringify(integrity));
+  return zip.generateAsync({ type: "uint8array" });
+}
+
+async function createLargeEncryptedEnvelopeArchive(blobBytes: number): Promise<Uint8Array> {
+  const source = await createEncryptedEnvelopeArchive();
+  const zip = await JSZip.loadAsync(source);
+  const integrityFile = zip.file("integrity/hashes.json");
+  if (!integrityFile) {
+    throw new Error("Missing fixture integrity manifest.");
+  }
+
+  const integrity = JSON.parse(await integrityFile.async("string")) as {
+    manifestSha256: string;
+    files: Record<string, string>;
+  };
+  const ciphertext = randomBytes(blobBytes);
+  zip.file(BLOB_FIXTURE_PATH, ciphertext);
+  integrity.files[BLOB_FIXTURE_PATH] = createHash("sha256").update(ciphertext).digest("hex");
+  zip.file("integrity/hashes.json", JSON.stringify(integrity));
+  return zip.generateAsync({ type: "uint8array", compression: "STORE" });
 }
 
 async function createEnvelopeArchive(
@@ -657,6 +3679,9 @@ async function createEnvelopeArchive(
     privateFileMode?: "ciphertext" | "plaintext";
     blobFileMode?: "ciphertext" | "plaintext";
     textBlobFileMode?: "ciphertext" | "plaintext";
+    plaintextPrefixBytes?: number;
+    blobValue?: unknown;
+    includePassedPrivacyManifest?: boolean;
   } = {}
 ): Promise<Uint8Array> {
   const zip = new JSZip();
@@ -670,7 +3695,11 @@ async function createEnvelopeArchive(
           [BLOB_FIXTURE_PATH]: { ivBase64: toBase64(randomBytes(12)) },
           [TEXT_BLOB_FIXTURE_PATH]: { ivBase64: toBase64(randomBytes(12)) }
         }
-      : {};
+      : encrypted
+        ? {
+            "index/req.json": { ivBase64: toBase64(randomBytes(12)) }
+          }
+        : {};
   const manifest = {
     protocolVersion: 1,
     createdAt: "2026-02-13T00:00:00.000Z",
@@ -679,7 +3708,7 @@ async function createEnvelopeArchive(
       origin: "https://fixture.example",
       title: "Fixture"
     },
-    chunkCodec: "ndjson",
+    chunkCodec: "none",
     redactionProfile: {
       redactHeaders: [],
       redactCookieNames: [],
@@ -690,7 +3719,7 @@ async function createEnvelopeArchive(
     stats: {
       eventCount: 0,
       chunkCount: 0,
-      blobCount: 0,
+      blobCount: 2,
       durationMs: 0
     },
     ...(encrypted
@@ -710,16 +3739,41 @@ async function createEnvelopeArchive(
   };
 
   addJsonFile(zip, files, "manifest.json", manifest);
-  addPrivateFile(zip, files, "index/time.json", [], encrypted, options.privateFileMode);
-  addPrivateFile(zip, files, "index/req.json", [], encrypted, options.privateFileMode);
-  addPrivateFile(zip, files, "index/inv.json", [], encrypted, options.privateFileMode);
+  addPrivateFile(
+    zip,
+    files,
+    "index/time.json",
+    [],
+    encrypted,
+    options.privateFileMode,
+    options.plaintextPrefixBytes
+  );
+  addPrivateFile(
+    zip,
+    files,
+    "index/req.json",
+    [],
+    encrypted,
+    options.privateFileMode,
+    options.plaintextPrefixBytes
+  );
+  addPrivateFile(
+    zip,
+    files,
+    "index/inv.json",
+    [],
+    encrypted,
+    options.privateFileMode,
+    options.plaintextPrefixBytes
+  );
   addPrivateFile(
     zip,
     files,
     BLOB_FIXTURE_PATH,
-    { token: "blob-secret-token" },
+    options.blobValue ?? { token: "blob-secret-token" },
     encrypted,
-    options.blobFileMode
+    options.blobFileMode,
+    options.plaintextPrefixBytes
   );
   addPrivateFile(
     zip,
@@ -727,8 +3781,30 @@ async function createEnvelopeArchive(
     TEXT_BLOB_FIXTURE_PATH,
     "plain-text-secret-token",
     encrypted,
-    options.textBlobFileMode
+    options.textBlobFileMode,
+    options.plaintextPrefixBytes
   );
+  if (options.includePassedPrivacyManifest) {
+    addJsonFile(zip, files, "privacy/manifest.json", {
+      schemaVersion: 1,
+      generatedAt: "2026-02-13T00:00:00.000Z",
+      categories: [],
+      scanner: {
+        scannedAt: "2026-02-13T00:00:00.000Z",
+        preEncryption: true,
+        status: "passed",
+        findings: []
+      },
+      encryption: {
+        archive: "plaintext"
+      },
+      totals: {
+        events: 0,
+        blobs: 2,
+        privacyViolations: 0
+      }
+    });
+  }
   addJsonFile(zip, files, "integrity/hashes.json", {
     manifestSha256: files["manifest.json"],
     files
@@ -757,13 +3833,14 @@ function addPrivateFile(
   path: string,
   value: unknown,
   encrypted: boolean,
-  mode: "ciphertext" | "plaintext" = "ciphertext"
+  mode: "ciphertext" | "plaintext" = "ciphertext",
+  plaintextPrefixBytes = 0
 ): void {
   const content = Buffer.from(JSON.stringify(value));
   const bytes =
     encrypted && mode === "ciphertext"
       ? randomBytes(Math.max(32, content.byteLength + 16))
-      : content;
+      : Buffer.concat([Buffer.alloc(plaintextPrefixBytes, 0x20), content]);
 
   zip.file(path, bytes);
   files[path] = createHash("sha256").update(bytes).digest("hex");
@@ -772,3 +3849,26 @@ function addPrivateFile(
 function toBase64(bytes: Uint8Array): string {
   return Buffer.from(bytes).toString("base64");
 }
+
+function forgeZipUncompressedSize(bytes: Uint8Array, targetName: string, size: number): void {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const decoder = new TextDecoder();
+
+  for (let offset = 0; offset + 46 <= bytes.byteLength; offset += 1) {
+    const signature = view.getUint32(offset, true);
+    if (signature === 0x04034b50) {
+      const nameBytes = view.getUint16(offset + 26, true);
+      const name = decoder.decode(bytes.subarray(offset + 30, offset + 30 + nameBytes));
+      if (name === targetName) {
+        view.setUint32(offset + 22, size, true);
+      }
+    }
+    if (signature === 0x02014b50) {
+      const nameBytes = view.getUint16(offset + 28, true);
+      const name = decoder.decode(bytes.subarray(offset + 46, offset + 46 + nameBytes));
+      if (name === targetName) {
+        view.setUint32(offset + 24, size, true);
+      }
+    }
+  }
+}
diff --git a/apps/share-server/src/index.ts b/apps/share-server/src/index.ts
index baef230..7e54fe7 100644
--- a/apps/share-server/src/index.ts
+++ b/apps/share-server/src/index.ts
@@ -1,10 +1,42 @@
-import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
-import { appendFile, mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
-import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
+import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { constants as fsConstants, type BigIntStats } from "node:fs";
+import { link, lstat, mkdir, open, opendir, rename, rm, type FileHandle } from "node:fs/promises";
+import { createServer, type IncomingMessage, type Server, type ServerResponse } from "node:http";
+import { isIP, SocketAddress } from "node:net";
 import { join, resolve } from "node:path";
+import { pipeline } from "node:stream/promises";
 
 import JSZip from "jszip";
-import { WebBlackboxPlayer } from "@webblackbox/player-sdk";
+import {
+  buildPrivacyManifest,
+  isPrivacyScannerTextMime,
+  type PrivacyScanBlob
+} from "@webblackbox/pipeline";
+import {
+  ArchiveEntryReadLimitError,
+  ArchiveDecodeTimeoutError,
+  ArchiveResourceLimitError,
+  BoundedZipReader,
+  DEFAULT_ARCHIVE_RESOURCE_LIMITS,
+  WebBlackboxPlayer,
+  assertArchiveInputResourceLimits,
+  assertLoadedArchiveResourceLimits,
+  resolveArchiveResourceLimits
+} from "@webblackbox/player-sdk";
+import {
+  assertArchiveBlobPaths,
+  assertArchiveFilePaths,
+  exportManifestSchema,
+  inferBlobMime,
+  isCanonicalArchiveBlobPath,
+  parseHashesManifest,
+  type ExportManifest,
+  type HashesManifest
+} from "@webblackbox/protocol";
+
+import { BoundedAuditWriter, type AuditWriteResult } from "./audit-writer.js";
+import { parseShareApiCredentials, type ShareApiScope } from "./auth-config.js";
+import { acquireShareDataRootLock, type ShareDataRootLock } from "./storage-lock.js";
 
 type ShareRecord = {
   id: string;
@@ -18,15 +50,40 @@ type ShareRecord = {
   summary: ShareSummary;
 };
 
+type PendingShareUpload = {
+  id: string;
+  tempPath: string;
+  archivePath: string;
+  archiveDirectoryIdentity: BigIntStats;
+  tempIdentity: BigIntStats | null;
+  archiveIdentity: BigIntStats | null;
+  committed: boolean;
+};
+
+type ShareRecordIndexEntry = Readonly<{
+  id: string;
+  createdAt: number;
+  expiresAt: number;
+  retentionDeadline: number;
+}>;
+
+type ShareListCursor = Pick<ShareRecordIndexEntry, "id" | "createdAt">;
+
+type ShareListPagination =
+  | {
+      mode: "cursor";
+      cursor: ShareListCursor;
+      limit: number;
+    }
+  | {
+      mode: "offset";
+      offset: number;
+      limit: number;
+    };
+
 type ShareAuditAction = "upload" | "list" | "metadata" | "download" | "page" | "revoke";
 type ShareAuditOutcome = "ok" | "not-found" | "expired" | "revoked" | "blocked" | "error";
-type ShareApiScope = "upload" | "read" | "list" | "revoke" | "admin";
-
-type ShareApiCredential = {
-  secret: string;
-  scopes: Set<ShareApiScope>;
-};
-type ShareAuthorizationSource = "loopback" | "token" | "query" | "read-session";
+type ShareAuthorizationSource = "unauthenticated-loopback-dev" | "token" | "query" | "read-session";
 type ShareAuthorizationResult = {
   authorized: boolean;
   source?: ShareAuthorizationSource;
@@ -38,6 +95,16 @@ type ShareReadSession = {
 
 type ArchiveEnvelopeSummary = {
   encrypted: boolean;
+  manifest?: {
+    mode: ExportManifest["mode"];
+    chunkCodec: ExportManifest["chunkCodec"];
+    recordedAt: string;
+  };
+  totals?: {
+    events: number;
+    blobs: number;
+    durationMs: number;
+  };
   encryptedPrivatePathsComplete: boolean;
   missingEncryptedPaths: string[];
   encryptedPrivatePathsConfidential: boolean;
@@ -45,11 +112,68 @@ type ArchiveEnvelopeSummary = {
   analysisError?: string;
 };
 
+type ShareActionTriggerSummary = {
+  triggerType: string;
+  count: number;
+  errorRate: number;
+};
+
+type SharePrivacySummary = {
+  redaction: {
+    hashSensitiveValues: boolean;
+    headerRuleCount: number;
+    cookieRuleCount: number;
+    bodyPatternCount: number;
+    blockedSelectorCount: number;
+  };
+  detected: ReturnType<WebBlackboxPlayer["getPrivacyProtectionReport"]>["detected"];
+  scanner: {
+    preEncryption: boolean;
+    status: "passed" | "blocked" | "unknown";
+    findingCount: number;
+    coverage?: {
+      complete: boolean;
+      scannedEventCount: number;
+      scannedBlobCount: number;
+      opaqueBlobCount: number;
+      inspectedBytes: number;
+      expectedEventCount: number;
+      expectedBlobCount: number;
+      incompleteReason?:
+        | "deadline"
+        | "decode-failed"
+        | "finding-limit"
+        | "target-byte-limit"
+        | "total-byte-limit"
+        | "opaque-content"
+        | "coverage-mismatch";
+    };
+  };
+  categories?: Array<{
+    category: string;
+    events: number;
+    low: number;
+    medium: number;
+    high: number;
+    redacted: number;
+    unredacted: number;
+  }>;
+};
+
 type ShareSummary = {
-  schemaVersion: 1;
-  source: "client" | "server" | "unavailable";
+  schemaVersion: 2;
+  source: "client-unverified" | "server" | "unavailable";
   analyzed: boolean;
   encrypted: boolean;
+  trust: {
+    archiveEnvelope: "server-inspected";
+    privateContent:
+      | "server-analyzed"
+      | "server-partially-analyzed"
+      | "client-claim-unverified"
+      | "not-analyzed";
+    archiveDigestMatched?: true;
+  };
   analysisError?: string;
   manifest?: {
     mode: string;
@@ -60,43 +184,55 @@ type ShareSummary = {
     events: number;
     blobs?: number;
     privacyViolations?: number;
-    errors: number;
-    requests: number;
-    actions: number;
+    errors?: number;
+    requests?: number;
+    actions?: number;
     durationMs: number;
   };
-  topActionTriggers?: Array<{
-    triggerType: string;
-    count: number;
-    errorRate: number;
-  }>;
-  privacy?: {
-    redaction: {
-      hashSensitiveValues: boolean;
-      headerRuleCount: number;
-      cookieRuleCount: number;
-      bodyPatternCount: number;
-      blockedSelectorCount: number;
+  topActionTriggers?: ShareActionTriggerSummary[];
+  privacy?: SharePrivacySummary;
+  clientClaim?: {
+    totals?: {
+      privacyViolations?: number;
+      errors?: number;
+      requests?: number;
+      actions?: number;
     };
-    detected: ReturnType<WebBlackboxPlayer["getPrivacyProtectionReport"]>["detected"];
-    scanner: ReturnType<WebBlackboxPlayer["getPrivacyProtectionReport"]>["scanner"];
-    categories?: Array<{
-      category: string;
-      events: number;
-      low: number;
-      medium: number;
-      high: number;
-      redacted: number;
-      unredacted: number;
-    }>;
+    topActionTriggers?: ShareActionTriggerSummary[];
+    privacy?: SharePrivacySummary;
   };
 };
 
+type ClientShareClaim = Omit<ShareSummary, "source" | "analyzed" | "trust" | "analysisError"> & {
+  source: "client";
+  analyzed: true;
+  archiveSha256: string;
+};
+
 const DEFAULT_PORT = 8787;
 const DEFAULT_HOST = "127.0.0.1";
-const MAX_UPLOAD_BYTES = parsePositiveInteger(
-  process.env.WEBBLACKBOX_SHARE_MAX_UPLOAD_BYTES,
-  250 * 1024 * 1024
+const MAX_UPLOAD_BYTES = Math.min(
+  parsePositiveInteger(process.env.WEBBLACKBOX_SHARE_MAX_UPLOAD_BYTES, 250 * 1024 * 1024),
+  DEFAULT_ARCHIVE_RESOURCE_LIMITS.maxInputBytes
+);
+const SHARE_ARCHIVE_RESOURCE_LIMITS = resolveArchiveResourceLimits({
+  maxInputBytes: MAX_UPLOAD_BYTES
+});
+const SHARE_PRIVACY_SCAN_MAX_TOTAL_BYTES = 64 * 1024 * 1024;
+const SHARE_PRIVACY_SCAN_MAX_TARGET_BYTES = 2 * 1024 * 1024;
+const SHARE_PRIVACY_SCAN_MAX_FINDINGS = 1;
+const SHARE_PRIVACY_SCAN_DEADLINE_MS = 5_000;
+const MAX_CONCURRENT_UPLOAD_INSPECTIONS = parsePositiveInteger(
+  process.env.WEBBLACKBOX_SHARE_MAX_CONCURRENT_INSPECTIONS,
+  1
+);
+const UPLOAD_IDLE_TIMEOUT_MS = parsePositiveInteger(
+  process.env.WEBBLACKBOX_SHARE_UPLOAD_IDLE_TIMEOUT_MS,
+  15_000
+);
+const UPLOAD_TOTAL_TIMEOUT_MS = parsePositiveInteger(
+  process.env.WEBBLACKBOX_SHARE_UPLOAD_TOTAL_TIMEOUT_MS,
+  120_000
 );
 const DEFAULT_BASE_URL = `http://${DEFAULT_HOST}:${DEFAULT_PORT}`;
 const DATA_ROOT = resolve(process.env.WEBBLACKBOX_SHARE_DATA_DIR ?? ".webblackbox-share-data");
@@ -104,6 +240,14 @@ const ARCHIVES_DIR = join(DATA_ROOT, "archives");
 const RECORDS_DIR = join(DATA_ROOT, "records");
 const AUDIT_DIR = join(DATA_ROOT, "audit");
 const SHARE_AUDIT_LOG_PATH = join(AUDIT_DIR, "share-access.jsonl");
+const SHARE_AUDIT_ROTATED_LOG_PATH = join(AUDIT_DIR, "share-access.1.jsonl");
+const SHARE_AUDIT_HMAC_KEY_PATH = join(AUDIT_DIR, "client-hash.hmac.key");
+const SHARE_AUDIT_HMAC_SECRET_ENV = "WEBBLACKBOX_SHARE_AUDIT_HMAC_SECRET";
+const SHARE_AUDIT_HMAC_KEY_BYTES = 32;
+const MAX_SHARE_AUDIT_HMAC_KEY_BYTES = 64;
+const MIN_SHARE_AUDIT_HMAC_ESTIMATED_ENTROPY_BITS = 128;
+const SHARE_AUDIT_CLIENT_HASH_ALGORITHM = "HMAC-SHA256-v1";
+const SHARE_AUDIT_CLIENT_HASH_DOMAIN = "webblackbox-share-audit:v1\0";
 const SHARE_API_KEY = readOptionalSecret(process.env.WEBBLACKBOX_SHARE_API_KEY);
 const SHARE_API_CREDENTIALS = parseShareApiCredentials(
   process.env.WEBBLACKBOX_SHARE_API_KEYS,
@@ -111,22 +255,35 @@ const SHARE_API_CREDENTIALS = parseShareApiCredentials(
 );
 const SHARE_ALLOWED_ORIGIN = normalizeAllowedOrigin(process.env.WEBBLACKBOX_SHARE_ALLOWED_ORIGIN);
 const TRUST_X_FORWARDED_FOR = parseBooleanFlag(process.env.WEBBLACKBOX_TRUST_X_FORWARDED_FOR);
+const TRUSTED_PROXY_ADDRESSES = parseTrustedProxyAddresses(
+  process.env.WEBBLACKBOX_TRUSTED_PROXY_IPS
+);
+const ALLOW_UNAUTHENTICATED_LOOPBACK = parseBooleanFlag(
+  process.env.WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK
+);
 const ALLOW_QUERY_API_KEY = parseBooleanFlag(process.env.WEBBLACKBOX_SHARE_ALLOW_QUERY_API_KEY);
 const ALLOW_PLAINTEXT_SHARE_UPLOADS = parseBooleanFlag(
   process.env.WEBBLACKBOX_SHARE_ALLOW_PLAINTEXT_UPLOADS
 );
-const SHARE_DEFAULT_TTL_MS = parseDurationMs(
+const SHARE_DEFAULT_TTL_MS = parseConfiguredDurationMs(
+  "WEBBLACKBOX_SHARE_DEFAULT_TTL_MS",
   process.env.WEBBLACKBOX_SHARE_DEFAULT_TTL_MS,
-  7 * 24 * 60 * 60 * 1000
+  7 * 24 * 60 * 60 * 1000,
+  1_000
 );
-const SHARE_MAX_TTL_MS = parseDurationMs(
+const SHARE_MAX_TTL_MS = parseConfiguredDurationMs(
+  "WEBBLACKBOX_SHARE_MAX_TTL_MS",
   process.env.WEBBLACKBOX_SHARE_MAX_TTL_MS,
-  30 * 24 * 60 * 60 * 1000
+  30 * 24 * 60 * 60 * 1000,
+  1_000
 );
-const SHARE_RETAIN_EXPIRED_MS = parseDurationMs(
+const SHARE_RETAIN_EXPIRED_MS = parseConfiguredDurationMs(
+  "WEBBLACKBOX_SHARE_RETAIN_EXPIRED_MS",
   process.env.WEBBLACKBOX_SHARE_RETAIN_EXPIRED_MS,
-  30 * 24 * 60 * 60 * 1000
+  30 * 24 * 60 * 60 * 1000,
+  0
 );
+validateShareDurationConfiguration(SHARE_DEFAULT_TTL_MS, SHARE_MAX_TTL_MS, SHARE_RETAIN_EXPIRED_MS);
 const UPLOAD_RATE_LIMIT_MAX = parseRateLimitCount(
   process.env.WEBBLACKBOX_UPLOAD_RATE_LIMIT_MAX,
   10
@@ -136,16 +293,84 @@ const UPLOAD_RATE_LIMIT_WINDOW_MS = parseRateLimitWindowMs(
   60_000
 );
 const SHARE_SUMMARY_HEADER = "x-webblackbox-share-summary";
+const LEGACY_CLIENT_ASSURANCE_HEADERS = [
+  "x-webblackbox-encryption",
+  "x-webblackbox-policy-eligible",
+  "x-webblackbox-redaction-summary"
+] as const;
 const MAX_SHARE_SUMMARY_HEADER_BYTES = 16 * 1024;
 const AES_GCM_IV_BYTES = 12;
 const SHARE_READ_SESSION_COOKIE = "webblackbox_share_read";
 const SHARE_READ_SESSION_TTL_MS = 10 * 60 * 1000;
+const MAX_SHARE_RECORD_BYTES = 256 * 1024;
+const SHARE_ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
+const MAX_SHARE_RECORD_FILES = 10_000;
+const SHARE_RECORD_ADMISSION_LIMIT = Math.min(
+  parsePositiveInteger(process.env.WEBBLACKBOX_SHARE_MAX_RECORDS, 10_000),
+  MAX_SHARE_RECORD_FILES
+);
+const MAX_SHARE_RECORD_DIRECTORY_ENTRIES = 20_000;
+const MAX_VERIFIED_ARCHIVE_CACHE_ENTRIES = 10_000;
+const ARCHIVE_CHECKSUM_BUFFER_BYTES = 64 * 1024;
+const DEFAULT_SHARE_LIST_LIMIT = 100;
+const MAX_SHARE_LIST_LIMIT = 200;
+const MAX_SHARE_LIST_CURSOR_BYTES = 256;
+const MIN_SHARE_AUDIT_LOG_BYTES = 512;
+const HARD_MAX_SHARE_AUDIT_LOG_BYTES = 64 * 1024 * 1024;
+const MAX_SHARE_AUDIT_LOG_BYTES = parseConfiguredInteger(
+  "WEBBLACKBOX_SHARE_MAX_AUDIT_LOG_BYTES",
+  process.env.WEBBLACKBOX_SHARE_MAX_AUDIT_LOG_BYTES,
+  16 * 1024 * 1024,
+  MIN_SHARE_AUDIT_LOG_BYTES,
+  HARD_MAX_SHARE_AUDIT_LOG_BYTES
+);
+const MAX_SHARE_SHUTDOWN_TIMEOUT_MS = 60_000;
+const SHARE_SHUTDOWN_TIMEOUT_MS = Math.min(
+  parsePositiveInteger(process.env.WEBBLACKBOX_SHARE_SHUTDOWN_TIMEOUT_MS, 10_000),
+  MAX_SHARE_SHUTDOWN_TIMEOUT_MS
+);
+const MAX_SHARE_AUDIT_QUEUE_ENTRIES = Math.min(
+  parsePositiveInteger(process.env.WEBBLACKBOX_SHARE_MAX_AUDIT_QUEUE_ENTRIES, 128),
+  1_024
+);
+const SHARE_AUDIT_QUEUE_TIMEOUT_MS = Math.min(
+  parsePositiveInteger(process.env.WEBBLACKBOX_SHARE_AUDIT_QUEUE_TIMEOUT_MS, 1_000),
+  30_000
+);
+const SHARE_AUDIT_WRITE_TIMEOUT_MS = Math.min(
+  parsePositiveInteger(process.env.WEBBLACKBOX_SHARE_AUDIT_WRITE_TIMEOUT_MS, 2_000),
+  30_000
+);
+const SHARE_AUDIT_RETRY_COOLDOWN_MS = Math.min(
+  parsePositiveInteger(process.env.WEBBLACKBOX_SHARE_AUDIT_RETRY_COOLDOWN_MS, 5_000),
+  300_000
+);
 const MAX_SHARE_READ_SESSIONS = 4096;
 const RATE_LIMIT_CLEANUP_INTERVAL = 64;
 const MAX_TRACKED_RATE_BUCKETS = 4096;
+const AUDIT_DEGRADATION_WARNING_INTERVAL_MS = 5_000;
 const uploadRateWindows = new Map<string, { count: number; resetAt: number; lastSeenAt: number }>();
 const shareReadSessions = new Map<string, ShareReadSession>();
+const verifiedArchiveCache = new Map<string, { checksumSha256: string; statFingerprint: string }>();
+const storageDirectoryIdentities = new Map<string, BigIntStats>();
+const shareRecordIndexById = new Map<string, ShareRecordIndexEntry>();
+const shareRecordListOrder: ShareRecordIndexEntry[] = [];
+const shareRecordExpiryOrder: ShareRecordIndexEntry[] = [];
 let rateLimitCleanupCounter = 0;
+let activeUploadInspections = 0;
+let reservedShareRecordSlots = 0;
+let sharePublicOrigin = DEFAULT_BASE_URL;
+let shareRecordAdmissionQueue = Promise.resolve();
+let lastAuditDegradationWarningAt = 0;
+let suppressedAuditDegradationWarnings = 0;
+let shareAuditHmacSecret: Buffer | null = null;
+const auditWriter = new BoundedAuditWriter({
+  append: appendShareAuditLine,
+  maxQueuedEntries: MAX_SHARE_AUDIT_QUEUE_ENTRIES,
+  queueWaitTimeoutMs: SHARE_AUDIT_QUEUE_TIMEOUT_MS,
+  writeTimeoutMs: SHARE_AUDIT_WRITE_TIMEOUT_MS,
+  retryCooldownMs: SHARE_AUDIT_RETRY_COOLDOWN_MS
+});
 
 void startShareServer().catch((error) => {
   console.error("[share-server] startup failed", error);
@@ -153,29 +378,257 @@ void startShareServer().catch((error) => {
 });
 
 async function startShareServer(): Promise<void> {
-  await ensureStorageLayout();
-  await pruneExpiredShareRecords(Date.now());
-
   const port = parsePort(process.env.PORT);
   const host = parseBindHost(process.env.WEBBLACKBOX_SHARE_BIND_HOST);
-  const server = createServer((request, response) => {
-    void routeRequest(request, response).catch((error) => {
-      console.warn("[share-server] request failed", error);
-      respondJson(response, 500, {
-        error: "Internal server error."
-      });
+  const configuredAuditHmacSecret = parseAuditHmacEnvironmentSecret(
+    process.env[SHARE_AUDIT_HMAC_SECRET_ENV]
+  );
+  sharePublicOrigin = resolvePublicOrigin(process.env.WEBBLACKBOX_SHARE_PUBLIC_ORIGIN, host, port);
+  validateAuthorizationConfiguration(host, sharePublicOrigin);
+  if (SHARE_API_CREDENTIALS.length === 0 && !isLoopbackHost(new URL(sharePublicOrigin).hostname)) {
+    throw new Error(
+      "A scoped WEBBLACKBOX_SHARE_API_KEY or WEBBLACKBOX_SHARE_API_KEYS credential is required for a non-loopback public origin."
+    );
+  }
+  const dataRootIdentity = await initializeDataRoot();
+  const dataRootLock = await acquireShareDataRootLock(DATA_ROOT, dataRootIdentity);
+  let server: Server | null = null;
+
+  try {
+    await ensureStorageLayout(dataRootIdentity);
+    await removeStaleAuditHmacSecretTemps();
+    await migrateLegacyStoragePermissions();
+    shareAuditHmacSecret =
+      configuredAuditHmacSecret ?? (await loadOrCreatePersistedAuditHmacSecret());
+    await migrateLegacyAuditLogs();
+    await reconcileAuditLogLayout();
+    const startupNow = Date.now();
+    await reconcileStorageLayout(startupNow);
+    await pruneExpiredShareRecords(Date.now());
+
+    const activeRequests = new Set<Promise<void>>();
+    let acceptingRequests = true;
+    server = createServer((request, response) => {
+      if (!acceptingRequests) {
+        response.setHeader("connection", "close");
+        respondJson(response, 503, {
+          error: "Share server is shutting down."
+        });
+        return;
+      }
+
+      const requestTask = handleRequest(request, response);
+      activeRequests.add(requestTask);
+      void requestTask.then(
+        () => activeRequests.delete(requestTask),
+        () => activeRequests.delete(requestTask)
+      );
+    });
+    await listenForShareRequests(server, port, host);
+    const shutdownHandlers = installGracefulShutdownHandlers(
+      server,
+      activeRequests,
+      () => {
+        acceptingRequests = false;
+      },
+      dataRootLock
+    );
+    server.once("close", () => {
+      shutdownHandlers.remove();
+      if (!shutdownHandlers.hasStarted()) {
+        void finalizeNormallyClosedShareServer(activeRequests, dataRootLock).catch((error) => {
+          console.error("[share-server] normal close cleanup failed", error);
+          process.exitCode = 1;
+        });
+      }
     });
-  });
 
-  server.listen(port, host, () => {
     console.info(`[share-server] listening on http://${host}:${port}`);
+    console.info(`[share-server] public origin: ${sharePublicOrigin}`);
     console.info(`[share-server] data root: ${DATA_ROOT}`);
+    if (ALLOW_UNAUTHENTICATED_LOOPBACK) {
+      console.warn(
+        "[share-server] WARNING: unauthenticated loopback development access is enabled."
+      );
+    }
+  } catch (error) {
+    if (server) {
+      server.closeAllConnections();
+      await closeHttpServer(server);
+    }
+    await dataRootLock.release();
+    throw error;
+  }
+}
+
+function listenForShareRequests(server: Server, port: number, host: string): Promise<void> {
+  return new Promise((resolvePromise, reject) => {
+    const handleError = (error: Error) => {
+      server.off("listening", handleListening);
+      reject(error);
+    };
+    const handleListening = () => {
+      server.off("error", handleError);
+      resolvePromise();
+    };
+    server.once("error", handleError);
+    server.once("listening", handleListening);
+    server.listen(port, host);
+  });
+}
+
+async function handleRequest(request: IncomingMessage, response: ServerResponse): Promise<void> {
+  try {
+    await routeRequest(request, response);
+  } catch (error) {
+    console.warn("[share-server] request failed", error);
+
+    const auditContext = resolveShareAuditRequest(request);
+    if (auditContext) {
+      await writeShareAuditEvent(request, {
+        ...auditContext,
+        outcome: "error",
+        details: {
+          reason: "request-failed"
+        }
+      });
+    }
+
+    if (response.headersSent || response.writableEnded) {
+      if (!response.writableEnded) {
+        response.destroy(error instanceof Error ? error : undefined);
+      }
+      return;
+    }
+
+    respondJson(response, 500, {
+      error: "Internal server error."
+    });
+  }
+}
+
+function installGracefulShutdownHandlers(
+  server: Server,
+  activeRequests: Set<Promise<void>>,
+  stopAcceptingRequests: () => void,
+  dataRootLock: ShareDataRootLock
+): { remove: () => void; hasStarted: () => boolean } {
+  let shutdownStarted = false;
+  const handleSigterm = () => beginShutdown("SIGTERM");
+  const handleSigint = () => beginShutdown("SIGINT");
+  const removeHandlers = () => {
+    process.off("SIGTERM", handleSigterm);
+    process.off("SIGINT", handleSigint);
+  };
+  const beginShutdown = (signal: "SIGINT" | "SIGTERM") => {
+    if (shutdownStarted) {
+      return;
+    }
+
+    shutdownStarted = true;
+    stopAcceptingRequests();
+    removeHandlers();
+    void shutdownShareServer(server, activeRequests, signal, dataRootLock).then(
+      (drained) => {
+        if (drained) {
+          process.exit(0);
+        }
+
+        process.kill(process.pid, "SIGKILL");
+      },
+      (error) => {
+        console.error("[share-server] shutdown failed", error);
+        process.exit(1);
+      }
+    );
+  };
+
+  process.once("SIGTERM", handleSigterm);
+  process.once("SIGINT", handleSigint);
+  return {
+    remove: removeHandlers,
+    hasStarted: () => shutdownStarted
+  };
+}
+
+async function shutdownShareServer(
+  server: Server,
+  activeRequests: Set<Promise<void>>,
+  signal: "SIGINT" | "SIGTERM",
+  dataRootLock: ShareDataRootLock
+): Promise<boolean> {
+  console.info(`[share-server] received ${signal}; draining requests and audit events`);
+  const closePromise = closeHttpServer(server);
+  const drainPromise = (async () => {
+    await waitForActiveRequests(activeRequests);
+    await auditWriter.drain();
+    await closePromise;
+    await dataRootLock.release();
+  })();
+  const drained = await waitWithinTimeout(drainPromise, SHARE_SHUTDOWN_TIMEOUT_MS);
+
+  if (!drained) {
+    server.closeAllConnections();
+    console.warn(
+      `[share-server] shutdown drain timed out after ${SHARE_SHUTDOWN_TIMEOUT_MS}ms; forcing exit`
+    );
+    return false;
+  }
+
+  console.info("[share-server] shutdown drain complete");
+  return true;
+}
+
+async function finalizeNormallyClosedShareServer(
+  activeRequests: Set<Promise<void>>,
+  dataRootLock: ShareDataRootLock
+): Promise<void> {
+  await waitForActiveRequests(activeRequests);
+  await auditWriter.drain();
+  await dataRootLock.release();
+}
+
+async function waitForActiveRequests(activeRequests: Set<Promise<void>>): Promise<void> {
+  while (activeRequests.size > 0) {
+    await Promise.allSettled([...activeRequests]);
+  }
+}
+
+function closeHttpServer(server: Server): Promise<void> {
+  if (!server.listening) {
+    return Promise.resolve();
+  }
+
+  const closed = new Promise<void>((resolvePromise) => {
+    server.close((error) => {
+      if (error) {
+        console.warn("[share-server] HTTP close failed", error);
+      }
+      resolvePromise();
+    });
+  });
+  server.closeIdleConnections();
+  return closed;
+}
+
+async function waitWithinTimeout(promise: Promise<void>, timeoutMs: number): Promise<boolean> {
+  let timeout: NodeJS.Timeout | undefined;
+  const timedOut = new Promise<false>((resolvePromise) => {
+    timeout = setTimeout(() => resolvePromise(false), timeoutMs);
   });
+
+  try {
+    return await Promise.race([promise.then(() => true), timedOut]);
+  } finally {
+    if (timeout) {
+      clearTimeout(timeout);
+    }
+  }
 }
 
 async function routeRequest(request: IncomingMessage, response: ServerResponse): Promise<void> {
-  const requestUrl = new URL(request.url ?? "/", requestBaseUrl(request));
-  applyCorsHeaders(response, request, requestUrl);
+  const requestUrl = new URL(request.url ?? "/", sharePublicOrigin);
+  applyCorsHeaders(response, request);
 
   if (request.method === "OPTIONS") {
     response.writeHead(204);
@@ -187,10 +640,22 @@ async function routeRequest(request: IncomingMessage, response: ServerResponse):
   const pathname = requestUrl.pathname;
 
   const requiredScope = resolveRequiredShareScope(method, pathname);
+  const auditContext = resolveShareAuditContext(method, pathname);
+  let issueReadSessionForPage = false;
 
   if (requiredScope) {
     const authorization = authorizeRequest(request, requestUrl, method, pathname, requiredScope);
     if (!authorization.authorized) {
+      if (auditContext) {
+        await writeShareAuditEvent(request, {
+          ...auditContext,
+          outcome: "blocked",
+          details: {
+            reason: "unauthorized"
+          }
+        });
+      }
+
       if (pathname.startsWith("/share/")) {
         respondHtml(response, 401, "<h1>Unauthorized</h1><p>Provide a valid share API key.</p>");
         return;
@@ -203,56 +668,69 @@ async function routeRequest(request: IncomingMessage, response: ServerResponse):
 
     const readShareId = requiredScope === "read" ? extractReadShareId(pathname) : null;
     if (readShareId && authorization.source === "query") {
+      const record = await readAvailableShareRecord(request, response, readShareId, "page");
+      if (!record) {
+        return;
+      }
       issueShareReadSessionCookie(response, readShareId);
+      const auditPromise = writeShareAuditEvent(request, {
+        action: "page",
+        shareId: readShareId,
+        outcome: "ok",
+        details: {
+          authorization: "query-bootstrap"
+        }
+      });
       redirectToUrlWithoutQueryKey(response, requestUrl);
+      await auditPromise;
       return;
     }
 
     if (
       readShareId &&
       method === "GET" &&
-      /^\/share\/[a-zA-Z0-9_-]+$/.test(pathname) &&
+      /^\/share\/[a-zA-Z0-9_-]{1,128}$/.test(pathname) &&
       authorization.source !== "read-session"
     ) {
-      issueShareReadSessionCookie(response, readShareId);
+      issueReadSessionForPage = true;
     }
   }
 
   if (method === "POST" && pathname === "/api/share/upload") {
-    await handleUpload(request, response, requestUrl);
+    await handleUpload(request, response);
     return;
   }
 
   if (method === "GET" && pathname === "/api/share/list") {
-    await handleList(request, response);
+    await handleList(request, response, requestUrl);
     return;
   }
 
-  const metadataMatch = /^\/api\/share\/([a-zA-Z0-9_-]+)\/meta$/.exec(pathname);
+  const metadataMatch = /^\/api\/share\/([a-zA-Z0-9_-]{1,128})\/meta$/.exec(pathname);
 
   if (method === "GET" && metadataMatch?.[1]) {
     await handleGetMetadata(request, response, metadataMatch[1]);
     return;
   }
 
-  const archiveMatch = /^\/api\/share\/([a-zA-Z0-9_-]+)\/archive$/.exec(pathname);
+  const archiveMatch = /^\/api\/share\/([a-zA-Z0-9_-]{1,128})\/archive$/.exec(pathname);
 
   if (method === "GET" && archiveMatch?.[1]) {
     await handleDownloadArchive(request, response, archiveMatch[1]);
     return;
   }
 
-  const revokeMatch = /^\/api\/share\/([a-zA-Z0-9_-]+)\/revoke$/.exec(pathname);
+  const revokeMatch = /^\/api\/share\/([a-zA-Z0-9_-]{1,128})\/revoke$/.exec(pathname);
 
   if (method === "POST" && revokeMatch?.[1]) {
     await handleRevokeShare(request, response, revokeMatch[1]);
     return;
   }
 
-  const sharePageMatch = /^\/share\/([a-zA-Z0-9_-]+)$/.exec(pathname);
+  const sharePageMatch = /^\/share\/([a-zA-Z0-9_-]{1,128})$/.exec(pathname);
 
   if (method === "GET" && sharePageMatch?.[1]) {
-    await handleSharePage(request, response, sharePageMatch[1]);
+    await handleSharePage(request, response, sharePageMatch[1], issueReadSessionForPage);
     return;
   }
 
@@ -261,55 +739,241 @@ async function routeRequest(request: IncomingMessage, response: ServerResponse):
   });
 }
 
-async function handleUpload(
-  request: IncomingMessage,
-  response: ServerResponse,
-  requestUrl: URL
-): Promise<void> {
+async function handleUpload(request: IncomingMessage, response: ServerResponse): Promise<void> {
   const rateLimited = consumeUploadRateLimitToken(resolveClientKey(request));
 
   if (!rateLimited.ok) {
+    closeRequestAfterResponse(request, response);
+    await writeShareAuditEvent(request, {
+      action: "upload",
+      outcome: "blocked",
+      details: {
+        reason: "rate-limit",
+        retryAfterSec: rateLimited.retryAfterSec
+      }
+    });
     respondJson(response, 429, {
       error: `Upload rate limit exceeded. Retry in ${rateLimited.retryAfterSec}s.`
     });
     return;
   }
 
+  if (!tryAcquireUploadInspectionSlot()) {
+    closeRequestAfterResponse(request, response);
+    response.setHeader("retry-after", "1");
+    await writeShareAuditEvent(request, {
+      action: "upload",
+      outcome: "blocked",
+      details: {
+        reason: "inspection-capacity"
+      }
+    });
+    respondJson(response, 503, {
+      error: "Archive inspection capacity is temporarily exhausted."
+    });
+    return;
+  }
+
+  let reservedRecordSlot = false;
+  let inspectionSlotHeld = true;
+  const releaseAdmissionLease = () => {
+    if (reservedRecordSlot) {
+      reservedRecordSlot = false;
+      reservedShareRecordSlots -= 1;
+    }
+    if (inspectionSlotHeld) {
+      inspectionSlotHeld = false;
+      activeUploadInspections -= 1;
+    }
+  };
+  try {
+    reservedRecordSlot = await tryReserveShareRecordSlot();
+    if (!reservedRecordSlot) {
+      releaseAdmissionLease();
+      closeRequestAfterResponse(request, response);
+      await writeShareAuditEvent(request, {
+        action: "upload",
+        outcome: "blocked",
+        details: {
+          reason: "record-capacity",
+          limit: SHARE_RECORD_ADMISSION_LIMIT
+        }
+      });
+      respondJson(response, 507, {
+        error: `Share record capacity is exhausted (${SHARE_RECORD_ADMISSION_LIMIT}). Wait for expired records to pass retention and be pruned, remove retained data administratively, or raise the admission limit.`
+      });
+      return;
+    }
+
+    await handleUploadWithinInspectionSlot(request, response, releaseAdmissionLease);
+  } finally {
+    releaseAdmissionLease();
+  }
+}
+
+async function handleUploadWithinInspectionSlot(
+  request: IncomingMessage,
+  response: ServerResponse,
+  releaseAdmissionLease: () => void
+): Promise<void> {
+  const id = randomUUID().replaceAll("-", "");
+  const archiveDirectoryIdentity = getManagedStorageDirectoryIdentity(ARCHIVES_DIR);
+  await assertStoragePathIdentity(ARCHIVES_DIR, archiveDirectoryIdentity, "directory");
+  const upload: PendingShareUpload = {
+    id,
+    tempPath: join(ARCHIVES_DIR, `.${id}.upload`),
+    archivePath: archivePathForId(id),
+    archiveDirectoryIdentity,
+    tempIdentity: null,
+    archiveIdentity: null,
+    committed: false
+  };
+
+  try {
+    await processUploadWithinInspectionSlot(request, response, upload, releaseAdmissionLease);
+  } finally {
+    if (!upload.committed) {
+      await removeUncommittedUploadFiles(upload);
+    }
+  }
+}
+
+async function commitUploadedArchive(upload: PendingShareUpload): Promise<void> {
+  const temporaryIdentity = upload.tempIdentity;
+  if (!temporaryIdentity) {
+    throw new Error("Upload temporary file identity is unavailable.");
+  }
+
+  await assertStoragePathIdentity(ARCHIVES_DIR, upload.archiveDirectoryIdentity, "directory");
+  await assertPrivateArchiveFilePathIdentity(upload.tempPath, temporaryIdentity);
+  await rename(upload.tempPath, upload.archivePath);
+  upload.tempIdentity = null;
+  upload.archiveIdentity = temporaryIdentity;
+
+  await assertStoragePathIdentity(ARCHIVES_DIR, upload.archiveDirectoryIdentity, "directory");
+  await assertPrivateArchiveFilePathIdentity(upload.archivePath, temporaryIdentity);
+  await syncDirectoryBestEffort(ARCHIVES_DIR);
+  await assertStoragePathIdentity(ARCHIVES_DIR, upload.archiveDirectoryIdentity, "directory");
+  await assertPrivateArchiveFilePathIdentity(upload.archivePath, temporaryIdentity);
+}
+
+async function removeUncommittedUploadFiles(upload: PendingShareUpload): Promise<void> {
+  if (upload.tempIdentity) {
+    await removePrivateArchiveFileIfUnchanged(
+      upload.tempPath,
+      upload.tempIdentity,
+      upload.archiveDirectoryIdentity
+    );
+    upload.tempIdentity = null;
+  }
+
+  if (upload.archiveIdentity) {
+    await removePrivateArchiveFileIfUnchanged(
+      upload.archivePath,
+      upload.archiveIdentity,
+      upload.archiveDirectoryIdentity
+    );
+    upload.archiveIdentity = null;
+  }
+}
+
+async function removePrivateArchiveFileIfUnchanged(
+  filePath: string,
+  expectedFileIdentity: BigIntStats,
+  archiveDirectoryIdentity: BigIntStats
+): Promise<void> {
+  await assertStoragePathIdentity(ARCHIVES_DIR, archiveDirectoryIdentity, "directory");
+  try {
+    await assertStoragePathIdentity(filePath, expectedFileIdentity, "file");
+  } catch (error) {
+    if (error instanceof UnsafeStoragePathError && isFileNotFoundError(error.cause)) {
+      return;
+    }
+    throw error;
+  }
+  await rm(filePath, { force: true });
+  await assertStoragePathIdentity(ARCHIVES_DIR, archiveDirectoryIdentity, "directory");
+}
+
+async function processUploadWithinInspectionSlot(
+  request: IncomingMessage,
+  response: ServerResponse,
+  upload: PendingShareUpload,
+  releaseAdmissionLease: () => void
+): Promise<void> {
+  const { id } = upload;
   let bytes: Uint8Array;
+  let checksumSha256: string;
   try {
-    bytes = await readRequestBody(request, MAX_UPLOAD_BYTES);
+    const stored = await readRequestBodyToTempFile(request, upload, MAX_UPLOAD_BYTES);
+    bytes = stored.bytes;
+    checksumSha256 = stored.checksumSha256;
   } catch (error) {
     if (error instanceof PayloadTooLargeError) {
+      closeRequestAfterResponse(request, response);
+      await writeShareAuditEvent(request, {
+        action: "upload",
+        shareId: id,
+        outcome: "blocked",
+        details: {
+          reason: "payload-too-large",
+          limit: error.maxBytes
+        }
+      });
       respondJson(response, 413, {
         error: `Upload payload exceeds ${error.maxBytes} bytes.`
       });
       return;
     }
+    if (error instanceof UploadTimeoutError || request.aborted) {
+      await writeShareAuditEvent(request, {
+        action: "upload",
+        shareId: id,
+        outcome: "error",
+        details: {
+          reason: error instanceof UploadTimeoutError ? `upload-${error.kind}-timeout` : "aborted"
+        }
+      });
+      return;
+    }
 
     throw error;
   }
 
   if (bytes.byteLength === 0) {
+    await writeShareAuditEvent(request, {
+      action: "upload",
+      shareId: id,
+      outcome: "blocked",
+      details: {
+        reason: "empty-payload"
+      }
+    });
     respondJson(response, 400, {
       error: "Upload payload is empty."
     });
     return;
   }
 
-  const id = randomUUID().replaceAll("-", "");
   const filenameHeader = request.headers["x-webblackbox-filename"];
   const fileName = publicArchiveFileName(
     id,
     typeof filenameHeader === "string" ? filenameHeader : undefined
   );
-  const archivePath = archivePathForId(id);
-  const checksumSha256 = createHash("sha256").update(bytes).digest("hex");
-  let clientSummary: ShareSummary | null;
+  let clientSummary: ClientShareClaim | null;
 
   try {
-    clientSummary = readClientShareSummary(request);
+    clientSummary = readClientShareSummary(request, checksumSha256);
   } catch (error) {
     if (error instanceof ShareSummaryHeaderError) {
+      await writeShareAuditEvent(request, {
+        action: "upload",
+        shareId: id,
+        outcome: "blocked",
+        details: {
+          reason: "invalid-client-claim"
+        }
+      });
       respondJson(response, 400, {
         error: error.message
       });
@@ -319,67 +983,136 @@ async function handleUpload(
     throw error;
   }
 
-  const archiveEnvelope = await inspectArchiveEnvelope(bytes);
-  const archiveEnvelopeSummary = await buildShareSummary(bytes, archiveEnvelope);
-  const summary = clientSummary
-    ? applyArchiveEnvelopeToClientSummary(clientSummary, archiveEnvelopeSummary)
-    : archiveEnvelopeSummary;
+  let archiveEnvelope: ArchiveEnvelopeSummary;
+  let archiveEnvelopeSummary: ShareSummary;
+
+  try {
+    archiveEnvelope = await inspectArchiveEnvelope(bytes);
+    if (archiveEnvelope.analysisError) {
+      await writeShareAuditEvent(request, {
+        action: "upload",
+        shareId: id,
+        outcome: "blocked"
+      });
+      respondJson(response, 400, {
+        error: "Upload is not a valid WebBlackbox archive."
+      });
+      return;
+    }
+    if (!archiveEnvelope.encrypted && !ALLOW_PLAINTEXT_SHARE_UPLOADS) {
+      await writeShareAuditEvent(request, {
+        action: "upload",
+        shareId: id,
+        outcome: "blocked",
+        details: {
+          reason: "plaintext-upload-disabled"
+        }
+      });
+      respondJson(response, 422, {
+        error: "Public share uploads require encrypted WebBlackbox archives."
+      });
+      return;
+    }
+    archiveEnvelopeSummary = await buildShareSummary(bytes, archiveEnvelope);
+  } catch (error) {
+    if (
+      !(error instanceof ArchiveResourceLimitError) &&
+      !(error instanceof ArchiveDecodeTimeoutError)
+    ) {
+      throw error;
+    }
+
+    const resource =
+      error instanceof ArchiveResourceLimitError ? error.resource : "decodeTimeoutMs";
+    const limit = error instanceof ArchiveResourceLimitError ? error.limit : error.timeoutMs;
 
-  if (archiveEnvelope.encrypted && !archiveEnvelope.encryptedPrivatePathsComplete) {
     await writeShareAuditEvent(request, {
       action: "upload",
       shareId: id,
-      outcome: "blocked"
+      outcome: "blocked",
+      details: {
+        resource,
+        ...(error instanceof ArchiveResourceLimitError ? { actual: error.actual } : {}),
+        limit
+      }
     });
-    respondJson(response, 400, {
-      error: "Encrypted WebBlackbox archive is missing encrypted file metadata.",
-      missingEncryptedPaths: archiveEnvelope.missingEncryptedPaths.slice(0, 12)
+    respondJson(response, error instanceof ArchiveResourceLimitError ? 413 : 422, {
+      error: error.message,
+      resource,
+      limit
     });
     return;
   }
 
-  if (archiveEnvelope.encrypted && !archiveEnvelope.encryptedPrivatePathsConfidential) {
+  if (!archiveEnvelope.encrypted && !archiveEnvelopeSummary.analyzed) {
     await writeShareAuditEvent(request, {
       action: "upload",
       shareId: id,
       outcome: "blocked"
     });
     respondJson(response, 400, {
-      error: "Encrypted WebBlackbox archive contains plaintext private files.",
-      plaintextEncryptedPaths: archiveEnvelope.plaintextEncryptedPaths.slice(0, 12)
+      error: "Upload is not a valid WebBlackbox archive."
     });
     return;
   }
 
-  if (summary.analyzed && summary.privacy?.scanner.status === "blocked") {
+  if (clientSummary) {
+    try {
+      assertClientShareClaimMatchesArchive(clientSummary, archiveEnvelope);
+    } catch (error) {
+      if (error instanceof ShareSummaryHeaderError) {
+        await writeShareAuditEvent(request, {
+          action: "upload",
+          shareId: id,
+          outcome: "blocked",
+          details: {
+            reason: "client-claim-conflict"
+          }
+        });
+        respondJson(response, 400, { error: error.message });
+        return;
+      }
+      throw error;
+    }
+  }
+
+  const sizeBytes = bytes.byteLength;
+  bytes = new Uint8Array(0);
+  const summary =
+    archiveEnvelope.encrypted && clientSummary
+      ? applyArchiveEnvelopeToClientSummary(clientSummary, archiveEnvelopeSummary)
+      : archiveEnvelopeSummary;
+
+  if (archiveEnvelope.encrypted && !archiveEnvelope.encryptedPrivatePathsComplete) {
     await writeShareAuditEvent(request, {
       action: "upload",
       shareId: id,
       outcome: "blocked"
     });
-    respondJson(response, 422, {
-      error: "Share upload blocked by privacy scanner.",
-      scanner: summary.privacy.scanner
+    respondJson(response, 400, {
+      error: "Encrypted WebBlackbox archive is missing encrypted file metadata.",
+      missingEncryptedPaths: archiveEnvelope.missingEncryptedPaths.slice(0, 12)
     });
     return;
   }
 
-  if (archiveEnvelope.encrypted && !clientSummary) {
+  if (archiveEnvelope.encrypted && !archiveEnvelope.encryptedPrivatePathsConfidential) {
     await writeShareAuditEvent(request, {
       action: "upload",
       shareId: id,
       outcome: "blocked"
     });
-    respondJson(response, 422, {
-      error: "Encrypted public share uploads require a passed client privacy preflight summary."
+    respondJson(response, 400, {
+      error: "Encrypted WebBlackbox archive contains plaintext private files.",
+      plaintextEncryptedPaths: archiveEnvelope.plaintextEncryptedPaths.slice(0, 12)
     });
     return;
   }
 
   if (
-    archiveEnvelope.encrypted &&
-    clientSummary &&
-    !hasPassedClientPrivacyPreflight(clientSummary)
+    summary.source === "server" &&
+    summary.analyzed &&
+    summary.privacy?.scanner.status === "blocked"
   ) {
     await writeShareAuditEvent(request, {
       action: "upload",
@@ -387,76 +1120,121 @@ async function handleUpload(
       outcome: "blocked"
     });
     respondJson(response, 422, {
-      error: "Encrypted public share uploads require a passed client privacy preflight summary.",
-      scanner: clientSummary.privacy?.scanner
+      error: "Share upload blocked by the server privacy scanner.",
+      scanner: summary.privacy.scanner
     });
     return;
   }
 
-  if (!summary.encrypted && !ALLOW_PLAINTEXT_SHARE_UPLOADS) {
+  if (clientSummary?.privacy?.scanner.status === "blocked") {
     await writeShareAuditEvent(request, {
       action: "upload",
       shareId: id,
       outcome: "blocked"
     });
-    respondJson(response, summary.analyzed ? 422 : 400, {
-      error: summary.analyzed
-        ? "Public share uploads require encrypted WebBlackbox archives."
-        : "Upload is not a valid encrypted WebBlackbox archive."
+    respondJson(response, 422, {
+      error: "Share upload blocked by the client's privacy scanner claim.",
+      scanner: clientSummary.privacy.scanner
     });
     return;
   }
 
   const createdAt = Date.now();
   const ttlMs = resolveShareTtlMs(request);
-  const shareUrl = `${requestOrigin(request, requestUrl)}/share/${id}`;
+  const shareUrl = `${sharePublicOrigin}/share/${id}`;
   const record: ShareRecord = {
     id,
     createdAt,
     expiresAt: createdAt + ttlMs,
     fileName,
-    sizeBytes: bytes.byteLength,
+    sizeBytes,
     checksumSha256,
     shareUrl,
     summary
   };
 
-  await writeFile(archivePath, bytes);
+  await commitUploadedArchive(upload);
   await writeRecord(record);
-  await writeShareAuditEvent(request, {
+  upload.committed = true;
+  releaseAdmissionLease();
+  const auditPromise = writeShareAuditEvent(request, {
     action: "upload",
     shareId: id,
     outcome: "ok",
     details: {
-      sizeBytes: bytes.byteLength,
+      sizeBytes,
       ttlMs
     }
   });
-
   respondJson(response, 201, {
     shareId: id,
     shareUrl,
     expiresAt: record.expiresAt,
     fileName,
-    sizeBytes: bytes.byteLength,
+    sizeBytes,
     summary
   });
+  await auditPromise;
 }
 
-async function handleList(request: IncomingMessage, response: ServerResponse): Promise<void> {
+async function handleList(
+  request: IncomingMessage,
+  response: ServerResponse,
+  requestUrl: URL
+): Promise<void> {
+  const pagination = parseShareListPagination(requestUrl);
+  if (!pagination) {
+    await writeShareAuditEvent(request, {
+      action: "list",
+      outcome: "blocked",
+      details: {
+        reason: "invalid-pagination"
+      }
+    });
+    respondJson(response, 400, {
+      error: `List pagination requires either a valid cursor or an integer offset >= 0, plus a limit between 1 and ${MAX_SHARE_LIST_LIMIT}.`
+    });
+    return;
+  }
+
   await pruneExpiredShareRecords(Date.now());
-  const records = await loadAllRecords();
-  const items = records
-    .sort((left, right) => right.createdAt - left.createdAt)
-    .map((record) => buildPublicShareMetadata(record));
+  const candidates = selectShareRecordIndexPage(pagination);
+  const records: ShareRecord[] = [];
+
+  for (const candidate of candidates) {
+    const record = await readRecord(candidate.id);
+    if (
+      !record ||
+      record.createdAt !== candidate.createdAt ||
+      record.expiresAt !== candidate.expiresAt ||
+      !(await hasValidStoredArchive(record))
+    ) {
+      await removeStoredShare(candidate.id);
+      continue;
+    }
 
-  await writeShareAuditEvent(request, {
+    records.push(record);
+  }
+
+  const lastCandidate = candidates.at(-1);
+  const hasMore = lastCandidate ? hasShareRecordIndexEntryAfter(lastCandidate) : false;
+  const nextCursor = hasMore && lastCandidate ? encodeShareListCursor(lastCandidate) : null;
+  const nextOffset =
+    pagination.mode === "offset" && hasMore ? pagination.offset + candidates.length : null;
+
+  const auditPromise = writeShareAuditEvent(request, {
     action: "list",
     outcome: "ok"
   });
   respondJson(response, 200, {
-    items
+    items: records.map((record) => buildPublicShareMetadata(record)),
+    total: shareRecordIndexById.size,
+    offset: pagination.mode === "offset" ? pagination.offset : null,
+    limit: pagination.limit,
+    nextOffset,
+    nextCursor
   });
+  await auditPromise;
 }
 
 async function handleGetMetadata(
@@ -470,12 +1248,13 @@ async function handleGetMetadata(
     return;
   }
 
-  respondJson(response, 200, buildPublicShareMetadata(record));
-  await writeShareAuditEvent(request, {
+  const auditPromise = writeShareAuditEvent(request, {
     action: "metadata",
     shareId: id,
     outcome: "ok"
   });
+  respondJson(response, 200, buildPublicShareMetadata(record));
+  await auditPromise;
 }
 
 async function handleDownloadArchive(
@@ -489,35 +1268,101 @@ async function handleDownloadArchive(
     return;
   }
 
+  let verifiedArchive: VerifiedArchiveFile | null = null;
+
   try {
-    const bytes = await readFile(archivePathForId(id));
+    verifiedArchive = await openVerifiedArchive(record);
+
     response.writeHead(200, {
       "content-type": "application/zip",
-      "content-length": String(bytes.byteLength),
+      "content-length": String(record.sizeBytes),
       "content-disposition": `attachment; filename="${record.fileName}"`
     });
-    response.end(bytes);
+
+    await streamArchiveDownload(request, response, verifiedArchive.handle, record.sizeBytes);
     await writeShareAuditEvent(request, {
       action: "download",
       shareId: id,
       outcome: "ok"
     });
-  } catch {
-    respondJson(response, 404, {
-      error: "Archive file not found."
-    });
+  } catch (error) {
+    const clientAborted = error instanceof ClientAbortedDownloadError;
+
+    if (error instanceof ArchiveIntegrityError) {
+      await removeStoredShare(id);
+    }
+
+    if (!clientAborted && !response.headersSent && !response.writableEnded) {
+      respondJson(response, 404, {
+        error: "Archive file not found."
+      });
+    } else if (!clientAborted && !response.writableEnded) {
+      response.destroy(error instanceof Error ? error : undefined);
+    }
+
     await writeShareAuditEvent(request, {
       action: "download",
       shareId: id,
-      outcome: "not-found"
+      outcome: clientAborted ? "error" : "not-found"
     });
+  } finally {
+    await verifiedArchive?.handle.close().catch(() => undefined);
+  }
+}
+
+async function streamArchiveDownload(
+  request: IncomingMessage,
+  response: ServerResponse,
+  archiveHandle: FileHandle,
+  sizeBytes: number
+): Promise<void> {
+  const source = archiveHandle.createReadStream({
+    autoClose: false,
+    start: 0,
+    end: sizeBytes - 1
+  });
+  const abortError = new ClientAbortedDownloadError();
+  const abort = () => {
+    if (!source.destroyed) {
+      source.destroy(abortError);
+    }
+  };
+  const close = () => {
+    if (!response.writableFinished) {
+      abort();
+    }
+  };
+
+  request.once("aborted", abort);
+  response.once("close", close);
+
+  try {
+    await pipeline(source, response);
+  } catch (error) {
+    if (request.aborted || abortError === error || !response.writableFinished) {
+      throw abortError;
+    }
+    throw error;
+  } finally {
+    request.off("aborted", abort);
+    response.off("close", close);
+  }
+}
+
+class ClientAbortedDownloadError extends Error {
+  public constructor() {
+    super("Archive download was aborted by the client.");
   }
 }
 
+class ArchiveIntegrityError extends Error {}
+class UnsafeStoragePathError extends Error {}
+
 async function handleSharePage(
   request: IncomingMessage,
   response: ServerResponse,
-  id: string
+  id: string,
+  issueReadSession: boolean
 ): Promise<void> {
   const record = await readAvailableShareRecord(request, response, id, "page");
 
@@ -525,6 +1370,10 @@ async function handleSharePage(
     return;
   }
 
+  if (issueReadSession) {
+    issueShareReadSessionCookie(response, id);
+  }
+
   const publicMetadata = buildPublicShareMetadata(record);
   const metadataPretty = escapeHtml(JSON.stringify(publicMetadata.summary, null, 2));
   const page = `<!doctype html>
@@ -559,12 +1408,13 @@ async function handleSharePage(
   </body>
 </html>`;
 
-  respondHtml(response, 200, page);
-  await writeShareAuditEvent(request, {
+  const auditPromise = writeShareAuditEvent(request, {
     action: "page",
     shareId: id,
     outcome: "ok"
   });
+  respondHtml(response, 200, page);
+  await auditPromise;
 }
 
 async function handleRevokeShare(
@@ -585,7 +1435,7 @@ async function handleRevokeShare(
   };
 
   await writeRecord(revokedRecord);
-  await writeShareAuditEvent(request, {
+  const auditPromise = writeShareAuditEvent(request, {
     action: "revoke",
     shareId: id,
     outcome: "ok"
@@ -594,6 +1444,7 @@ async function handleRevokeShare(
     shareId: id,
     revokedAt
   });
+  await auditPromise;
 }
 
 async function readAvailableShareRecord(
@@ -606,32 +1457,46 @@ async function readAvailableShareRecord(
   const record = await readRecord(id);
 
   if (!record) {
-    respondShareUnavailable(response, action, "not-found");
     await writeShareAuditEvent(request, {
       action,
       shareId: id,
       outcome: "not-found"
     });
+    respondShareUnavailable(response, action, "not-found");
     return null;
   }
 
   if (isShareExpired(record, Date.now())) {
-    respondShareUnavailable(response, action, "expired");
     await writeShareAuditEvent(request, {
       action,
       shareId: id,
       outcome: "expired"
     });
+    respondShareUnavailable(response, action, "expired");
     return null;
   }
 
   if (!allowRevoked && record.revokedAt) {
-    respondShareUnavailable(response, action, "revoked");
     await writeShareAuditEvent(request, {
       action,
       shareId: id,
       outcome: "revoked"
     });
+    respondShareUnavailable(response, action, "revoked");
+    return null;
+  }
+
+  if (!(await hasValidStoredArchive(record))) {
+    await removeStoredShare(id);
+    await writeShareAuditEvent(request, {
+      action,
+      shareId: id,
+      outcome: "not-found",
+      details: {
+        reason: "archive-integrity"
+      }
+    });
+    respondShareUnavailable(response, action, "not-found");
     return null;
   }
 
@@ -680,17 +1545,67 @@ async function buildShareSummary(
   envelope: ArchiveEnvelopeSummary
 ): Promise<ShareSummary> {
   try {
-    const player = await WebBlackboxPlayer.open(bytes);
+    const player = await WebBlackboxPlayer.open(bytes, {
+      resourceLimits: SHARE_ARCHIVE_RESOURCE_LIMITS
+    });
     const manifest = player.archive.manifest;
     const derived = player.buildDerived();
     const actions = player.getActionTimeline();
     const privacyReport = player.getPrivacyProtectionReport();
+    const events = player.events;
+    const blobPaths = collectArchiveBlobPathsForPrivacyScan(player);
+    if (blobPaths.length !== manifest.stats.blobCount) {
+      throw new Error("Archive blob count does not match server privacy-scan inputs.");
+    }
+    const serverPrivacyManifest = await buildPrivacyManifest({
+      events,
+      blobs: readArchiveBlobsForPrivacyScan(player, blobPaths),
+      expectedBlobCount: blobPaths.length,
+      encrypted: Boolean(manifest.encryption),
+      preEncryption: false,
+      scan: {
+        maxTotalBytes: SHARE_PRIVACY_SCAN_MAX_TOTAL_BYTES,
+        maxTargetBytes: SHARE_PRIVACY_SCAN_MAX_TARGET_BYTES,
+        maxFindings: SHARE_PRIVACY_SCAN_MAX_FINDINGS,
+        deadlineMs: SHARE_PRIVACY_SCAN_DEADLINE_MS,
+        stopOnFinding: true
+      }
+    });
+    const scanCoverage = serverPrivacyManifest.scanner.coverage;
+    if (!scanCoverage) {
+      throw new Error("Server privacy scan did not report content coverage.");
+    }
+    const accountedBlobCount = scanCoverage.scannedBlobCount + scanCoverage.opaqueBlobCount;
+    const scanTraversalComplete =
+      scanCoverage.complete &&
+      scanCoverage.scannedEventCount === events.length &&
+      serverPrivacyManifest.totals.blobs === blobPaths.length &&
+      accountedBlobCount === blobPaths.length;
+    const scanComplete = scanTraversalComplete && scanCoverage.opaqueBlobCount === 0;
+    const incompleteReason = scanComplete
+      ? undefined
+      : (scanCoverage.incompleteReason ??
+        (scanCoverage.opaqueBlobCount > 0 ? "opaque-content" : "coverage-mismatch"));
+    const publicScanCoverage: NonNullable<SharePrivacySummary["scanner"]["coverage"]> = {
+      complete: scanComplete,
+      scannedEventCount: scanCoverage.scannedEventCount,
+      scannedBlobCount: scanCoverage.scannedBlobCount,
+      opaqueBlobCount: scanCoverage.opaqueBlobCount,
+      inspectedBytes: scanCoverage.inspectedBytes,
+      expectedEventCount: events.length,
+      expectedBlobCount: blobPaths.length,
+      ...(incompleteReason ? { incompleteReason } : {})
+    };
 
     return {
-      schemaVersion: 1,
+      schemaVersion: 2,
       source: "server",
       analyzed: true,
       encrypted: envelope.encrypted || Boolean(manifest.encryption),
+      trust: {
+        archiveEnvelope: "server-inspected",
+        privateContent: scanComplete ? "server-analyzed" : "server-partially-analyzed"
+      },
       manifest: {
         mode: manifest.mode,
         chunkCodec: manifest.chunkCodec,
@@ -698,8 +1613,8 @@ async function buildShareSummary(
       },
       totals: {
         events: derived.totals.events,
-        blobs: player.archive.privacyManifest?.totals.blobs,
-        privacyViolations: player.archive.privacyManifest?.totals.privacyViolations,
+        blobs: blobPaths.length,
+        privacyViolations: serverPrivacyManifest.totals.privacyViolations,
         errors: derived.totals.errors,
         requests: derived.totals.requests,
         actions: derived.actionSpans.length,
@@ -715,45 +1630,156 @@ async function buildShareSummary(
           blockedSelectorCount: privacyReport.redaction.blockedSelectors.length
         },
         detected: privacyReport.detected,
-        scanner: privacyReport.scanner,
-        categories: player.archive.privacyManifest?.categories.map((category) => ({ ...category }))
+        scanner: {
+          preEncryption: serverPrivacyManifest.scanner.preEncryption,
+          status:
+            serverPrivacyManifest.scanner.status === "blocked"
+              ? "blocked"
+              : scanComplete
+                ? "passed"
+                : "unknown",
+          findingCount: serverPrivacyManifest.scanner.findings.length,
+          coverage: publicScanCoverage
+        },
+        categories: serverPrivacyManifest.categories.map((category) => ({ ...category }))
       }
     };
   } catch (error) {
+    if (error instanceof ArchiveResourceLimitError || error instanceof ArchiveDecodeTimeoutError) {
+      throw error;
+    }
+
     const message = error instanceof Error ? error.message : String(error);
     return {
-      schemaVersion: 1,
+      schemaVersion: 2,
       source: "unavailable",
       analyzed: false,
       encrypted: envelope.encrypted,
-      analysisError: redactText(message, 240)
+      trust: {
+        archiveEnvelope: "server-inspected",
+        privateContent: "not-analyzed"
+      },
+      manifest: envelope.manifest,
+      totals:
+        envelope.totals === undefined
+          ? undefined
+          : {
+              events: envelope.totals.events,
+              blobs: envelope.totals.blobs,
+              durationMs: envelope.totals.durationMs
+            },
+      analysisError: envelope.encrypted
+        ? "Encrypted private content was not analyzed because the share server has no passphrase."
+        : redactText(message, 240)
     };
   }
 }
 
+function collectArchiveBlobPathsForPrivacyScan(player: WebBlackboxPlayer): string[] {
+  const paths = Object.keys(player.archive.integrity.files)
+    .filter((path) => path.startsWith("blobs/"))
+    .sort();
+  const invalidPath = paths.find((path) => !isCanonicalArchiveBlobPath(path));
+  if (invalidPath) {
+    throw new Error(`Archive blob ${invalidPath} is not a canonical privacy-scan input.`);
+  }
+  return paths;
+}
+
+async function* readArchiveBlobsForPrivacyScan(
+  player: WebBlackboxPlayer,
+  paths: string[]
+): AsyncIterable<PrivacyScanBlob> {
+  for (const path of paths) {
+    const extension = path.slice(path.lastIndexOf(".") + 1);
+    const mime = inferBlobMime(extension);
+    if (!isPrivacyScannerTextMime(mime)) {
+      yield { hash: path, mime, bytes: new Uint8Array(0) };
+      continue;
+    }
+
+    try {
+      const blob = await player.readBlobTransient(path, SHARE_PRIVACY_SCAN_MAX_TARGET_BYTES);
+      if (!blob) {
+        throw new Error(`Archive blob ${path} could not be read for server privacy analysis.`);
+      }
+      yield { hash: path, mime: blob.mime, bytes: blob.bytes };
+    } catch (error) {
+      if (!(error instanceof ArchiveEntryReadLimitError)) {
+        throw error;
+      }
+      yield {
+        hash: path,
+        mime,
+        bytes: new Uint8Array(0),
+        truncated: true,
+        sourceByteLength: error.actual
+      };
+    }
+  }
+}
+
 async function inspectArchiveEnvelope(bytes: Uint8Array): Promise<ArchiveEnvelopeSummary> {
   try {
+    assertArchiveInputResourceLimits(bytes, SHARE_ARCHIVE_RESOURCE_LIMITS);
     const zip = await JSZip.loadAsync(bytes);
-    const manifest = asRecord(JSON.parse(await readZipText(zip, "manifest.json")));
-    const encryption = asRecord(manifest.encryption);
-    const encrypted = Object.keys(encryption).length > 0;
-    const encryptedFiles = asRecord(encryption.files);
+    assertLoadedArchiveResourceLimits(zip, SHARE_ARCHIVE_RESOURCE_LIMITS);
+    const archivePaths = Object.entries(zip.files)
+      .filter(([, file]) => !file.dir)
+      .map(([path]) => path);
+    assertArchiveFilePaths(archivePaths);
+    const zipReader = new BoundedZipReader(zip, SHARE_ARCHIVE_RESOURCE_LIMITS, false);
+    const rawManifest = JSON.parse(await readZipText(zipReader, "manifest.json")) as unknown;
+    const manifest = exportManifestSchema.parse(rawManifest);
+    assertRequiredArchivePaths(archivePaths);
+    const actualBlobCount = assertArchiveBlobPaths(archivePaths);
+    if (actualBlobCount !== manifest.stats.blobCount) {
+      throw new Error("Manifest blob count does not match archive contents.");
+    }
+    const encrypted = Boolean(manifest.encryption);
+    const encryptedFiles = manifest.encryption?.files ?? {};
     const privatePaths = collectArchivePrivatePaths(zip);
+    assertEncryptedFileMetadata(privatePaths, encryptedFiles, encrypted);
     const missingEncryptedPaths = encrypted
       ? privatePaths.filter((path) => !isEncryptedFileMeta(encryptedFiles[path]))
       : [];
-    const plaintextEncryptedPaths = encrypted
-      ? await collectPlaintextEncryptedPrivatePaths(zip, privatePaths, encryptedFiles)
-      : [];
+    let plaintextEncryptedPaths: string[] = [];
+    if (encrypted) {
+      const integrity = parseHashesManifest(
+        JSON.parse(await readZipText(zipReader, "integrity/hashes.json")) as unknown
+      );
+      assertArchiveIntegrityFileSet(archivePaths, integrity);
+      plaintextEncryptedPaths = await inspectActualArchiveEntries(
+        zip,
+        zipReader,
+        new Set(privatePaths),
+        encryptedFiles,
+        integrity
+      );
+    }
 
     return {
       encrypted,
+      manifest: {
+        mode: manifest.mode,
+        chunkCodec: manifest.chunkCodec,
+        recordedAt: manifest.createdAt
+      },
+      totals: {
+        events: manifest.stats.eventCount,
+        blobs: manifest.stats.blobCount,
+        durationMs: Math.round(manifest.stats.durationMs)
+      },
       encryptedPrivatePathsComplete: encrypted && missingEncryptedPaths.length === 0,
       missingEncryptedPaths,
       encryptedPrivatePathsConfidential: encrypted && plaintextEncryptedPaths.length === 0,
       plaintextEncryptedPaths
     };
   } catch (error) {
+    if (error instanceof ArchiveResourceLimitError || error instanceof ArchiveDecodeTimeoutError) {
+      throw error;
+    }
+
     return {
       encrypted: false,
       encryptedPrivatePathsComplete: false,
@@ -765,6 +1791,71 @@ async function inspectArchiveEnvelope(bytes: Uint8Array): Promise<ArchiveEnvelop
   }
 }
 
+const REQUIRED_SHARE_ARCHIVE_PATHS = [
+  "manifest.json",
+  "index/time.json",
+  "index/req.json",
+  "index/inv.json",
+  "integrity/hashes.json"
+] as const;
+
+function assertRequiredArchivePaths(paths: readonly string[]): void {
+  const pathSet = new Set(paths);
+  if (pathSet.size !== paths.length) {
+    throw new Error("Archive contains duplicate file paths.");
+  }
+  for (const path of REQUIRED_SHARE_ARCHIVE_PATHS) {
+    if (!pathSet.has(path)) {
+      throw new Error(`Archive is missing required file '${path}'.`);
+    }
+  }
+}
+
+function assertEncryptedFileMetadata(
+  privatePaths: readonly string[],
+  encryptedFiles: Record<string, { ivBase64: string }>,
+  encrypted: boolean
+): void {
+  if (!encrypted) {
+    return;
+  }
+
+  const privatePathSet = new Set(privatePaths);
+  const initializationVectors = new Set<string>();
+  for (const [path, metadata] of Object.entries(encryptedFiles)) {
+    if (!privatePathSet.has(path)) {
+      throw new Error(`Encrypted archive declares metadata for non-private file '${path}'.`);
+    }
+    if (initializationVectors.has(metadata.ivBase64)) {
+      throw new Error("Encrypted archive reuses an AES-GCM initialization vector.");
+    }
+    initializationVectors.add(metadata.ivBase64);
+  }
+}
+
+function assertArchiveIntegrityFileSet(
+  archivePaths: readonly string[],
+  integrity: HashesManifest
+): void {
+  const actualPaths = archivePaths.filter((path) => path !== "integrity/hashes.json").sort();
+  const expectedPaths = Object.keys(integrity.files).sort();
+  if (
+    actualPaths.length !== expectedPaths.length ||
+    actualPaths.some((path, index) => path !== expectedPaths[index])
+  ) {
+    throw new Error("Archive integrity manifest does not match archive contents.");
+  }
+}
+
+function tryAcquireUploadInspectionSlot(): boolean {
+  if (activeUploadInspections >= MAX_CONCURRENT_UPLOAD_INSPECTIONS) {
+    return false;
+  }
+
+  activeUploadInspections += 1;
+  return true;
+}
+
 function collectArchivePrivatePaths(zip: JSZip): string[] {
   return Object.entries(zip.files)
     .filter(([, file]) => !file.dir)
@@ -794,25 +1885,37 @@ function isEncryptedFileMeta(value: unknown): boolean {
   return iv !== null && iv.byteLength === AES_GCM_IV_BYTES;
 }
 
-async function collectPlaintextEncryptedPrivatePaths(
+async function inspectActualArchiveEntries(
   zip: JSZip,
-  privatePaths: string[],
-  encryptedFiles: Record<string, unknown>
+  zipReader: BoundedZipReader,
+  privatePaths: Set<string>,
+  encryptedFiles: Record<string, { ivBase64: string }>,
+  integrity: HashesManifest
 ): Promise<string[]> {
   const plaintextPaths: string[] = [];
 
-  for (const path of privatePaths) {
-    if (!isEncryptedFileMeta(encryptedFiles[path])) {
+  for (const [path, file] of Object.entries(zip.files)) {
+    if (file.dir || path === "integrity/hashes.json") {
       continue;
     }
 
-    const file = zip.file(path);
-    if (!file) {
+    const bytes = await zipReader.read(path);
+    const actualHash = createHash("sha256").update(bytes).digest("hex");
+    const expectedHash = integrity.files[path];
+    if (!expectedHash || actualHash !== expectedHash) {
+      throw new Error(`Archive integrity mismatch for '${path}'.`);
+    }
+    if (path === "manifest.json") {
+      if (actualHash !== integrity.manifestSha256) {
+        throw new Error("Archive integrity mismatch for 'manifest.json'.");
+      }
       continue;
     }
-
-    const bytes = await file.async("uint8array");
-    if (looksLikePlaintextPrivateArchiveFile(path, bytes)) {
+    if (
+      privatePaths.has(path) &&
+      isEncryptedFileMeta(encryptedFiles[path]) &&
+      looksLikePlaintextPrivateArchiveFile(path, bytes)
+    ) {
       plaintextPaths.push(path);
     }
   }
@@ -852,134 +1955,147 @@ function looksLikePlaintextBlobFile(path: string, bytes: Uint8Array): boolean {
   }
 
   if (normalizedPath.endsWith(".png")) {
-    return hasPngSignature(bytes);
+    return hasPngSignature(bytes, firstNonWhitespaceByte(bytes));
   }
 
   if (normalizedPath.endsWith(".webp")) {
-    return hasWebpSignature(bytes);
+    return hasWebpSignature(bytes, firstNonWhitespaceByte(bytes));
   }
 
-  return isPlainJsonBytes(bytes) || isPlainHtmlBytes(bytes) || isPlainTextBytes(bytes);
+  return isPlainTextBytes(bytes);
 }
 
 function isPlainJsonBytes(bytes: Uint8Array): boolean {
-  const text = decodeUtf8Strict(bytes);
-  if (!text) {
-    return false;
-  }
+  const start = firstNonWhitespaceByte(bytes);
+  return (
+    start < bytes.byteLength &&
+    (bytes[start] === 0x7b || bytes[start] === 0x5b) &&
+    isMostlyPrintableUtf8Bytes(bytes)
+  );
+}
 
-  const trimmed = text.trim();
-  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) {
-    return false;
-  }
+function isPlainNdjsonBytes(bytes: Uint8Array): boolean {
+  const start = firstNonWhitespaceByte(bytes);
+  return start < bytes.byteLength && bytes[start] === 0x7b && isMostlyPrintableUtf8Bytes(bytes);
+}
 
-  try {
-    JSON.parse(trimmed);
-    return true;
-  } catch {
-    return false;
-  }
+function isPlainHtmlBytes(bytes: Uint8Array): boolean {
+  const start = firstNonWhitespaceByte(bytes);
+  return (
+    isMostlyPrintableUtf8Bytes(bytes) &&
+    (startsWithAsciiCaseInsensitive(bytes, start, "<!doctype html") ||
+      startsWithAsciiCaseInsensitive(bytes, start, "<html") ||
+      includesAsciiCaseInsensitive(bytes, "<script") ||
+      includesAsciiCaseInsensitive(bytes, "<body"))
+  );
 }
 
-function isPlainNdjsonBytes(bytes: Uint8Array): boolean {
-  const text = decodeUtf8Strict(bytes);
-  if (!text) {
-    return false;
-  }
+function isPlainTextBytes(bytes: Uint8Array): boolean {
+  return firstNonWhitespaceByte(bytes) < bytes.byteLength && isMostlyPrintableUtf8Bytes(bytes);
+}
 
-  const lines = text
-    .trim()
-    .split(/\r?\n/)
-    .filter((line) => line.trim().length > 0);
-  if (lines.length === 0) {
-    return false;
-  }
+function isMostlyPrintableUtf8Bytes(bytes: Uint8Array): boolean {
+  const decoder = new TextDecoder("utf-8", { fatal: true });
+  const chunkBytes = 64 * 1024;
+  let characters = 0;
+  let printable = 0;
 
   try {
-    for (const line of lines.slice(0, 32)) {
-      JSON.parse(line);
+    for (let offset = 0; offset < bytes.byteLength; offset += chunkBytes) {
+      const text = decoder.decode(bytes.subarray(offset, offset + chunkBytes), { stream: true });
+      for (let index = 0; index < text.length; index += 1) {
+        const code = text.charCodeAt(index);
+        characters += 1;
+        if (code === 0x09 || code === 0x0a || code === 0x0d || (code >= 0x20 && code !== 0x7f)) {
+          printable += 1;
+        }
+      }
+    }
+
+    const trailing = decoder.decode();
+    for (let index = 0; index < trailing.length; index += 1) {
+      const code = trailing.charCodeAt(index);
+      characters += 1;
+      if (code === 0x09 || code === 0x0a || code === 0x0d || (code >= 0x20 && code !== 0x7f)) {
+        printable += 1;
+      }
     }
-    return true;
   } catch {
     return false;
   }
+
+  return characters > 0 && printable / characters >= 0.9;
 }
 
-function isPlainHtmlBytes(bytes: Uint8Array): boolean {
-  const text = decodeUtf8Strict(bytes);
-  if (!text) {
-    return false;
+function firstNonWhitespaceByte(bytes: Uint8Array): number {
+  let offset = 0;
+  while (offset < bytes.byteLength) {
+    const byte = bytes[offset];
+    if (byte !== 0x09 && byte !== 0x0a && byte !== 0x0d && byte !== 0x20) {
+      break;
+    }
+    offset += 1;
   }
-
-  const trimmed = text.trim().toLowerCase();
-  return (
-    trimmed.startsWith("<!doctype html") ||
-    trimmed.startsWith("<html") ||
-    trimmed.includes("<script") ||
-    trimmed.includes("<body")
-  );
+  return offset;
 }
 
-function isPlainTextBytes(bytes: Uint8Array): boolean {
-  const text = decodeUtf8Strict(bytes);
-  if (!text) {
+function startsWithAsciiCaseInsensitive(
+  bytes: Uint8Array,
+  offset: number,
+  expected: string
+): boolean {
+  if (offset + expected.length > bytes.byteLength) {
     return false;
   }
-
-  const trimmed = text.trim();
-  if (trimmed.length === 0) {
-    return false;
+  for (let index = 0; index < expected.length; index += 1) {
+    if (toLowerAscii(bytes[offset + index] ?? -1) !== expected.charCodeAt(index)) {
+      return false;
+    }
   }
+  return true;
+}
 
-  let printable = 0;
-
-  for (let index = 0; index < trimmed.length; index += 1) {
-    const code = trimmed.charCodeAt(index);
-
-    if (code === 0x09 || code === 0x0a || code === 0x0d || (code >= 0x20 && code !== 0x7f)) {
-      printable += 1;
+function includesAsciiCaseInsensitive(bytes: Uint8Array, expected: string): boolean {
+  for (let offset = 0; offset <= bytes.byteLength - expected.length; offset += 1) {
+    if (startsWithAsciiCaseInsensitive(bytes, offset, expected)) {
+      return true;
     }
   }
+  return false;
+}
 
-  return printable / trimmed.length >= 0.9;
+function toLowerAscii(byte: number): number {
+  return byte >= 0x41 && byte <= 0x5a ? byte + 0x20 : byte;
 }
 
-function hasPngSignature(bytes: Uint8Array): boolean {
+function hasPngSignature(bytes: Uint8Array, offset = 0): boolean {
   return (
-    bytes.length >= 8 &&
-    bytes[0] === 0x89 &&
-    bytes[1] === 0x50 &&
-    bytes[2] === 0x4e &&
-    bytes[3] === 0x47 &&
-    bytes[4] === 0x0d &&
-    bytes[5] === 0x0a &&
-    bytes[6] === 0x1a &&
-    bytes[7] === 0x0a
+    bytes.length - offset >= 8 &&
+    bytes[offset] === 0x89 &&
+    bytes[offset + 1] === 0x50 &&
+    bytes[offset + 2] === 0x4e &&
+    bytes[offset + 3] === 0x47 &&
+    bytes[offset + 4] === 0x0d &&
+    bytes[offset + 5] === 0x0a &&
+    bytes[offset + 6] === 0x1a &&
+    bytes[offset + 7] === 0x0a
   );
 }
 
-function hasWebpSignature(bytes: Uint8Array): boolean {
+function hasWebpSignature(bytes: Uint8Array, offset = 0): boolean {
   return (
-    bytes.length >= 12 &&
-    bytes[0] === 0x52 &&
-    bytes[1] === 0x49 &&
-    bytes[2] === 0x46 &&
-    bytes[3] === 0x46 &&
-    bytes[8] === 0x57 &&
-    bytes[9] === 0x45 &&
-    bytes[10] === 0x42 &&
-    bytes[11] === 0x50
+    bytes.length - offset >= 12 &&
+    bytes[offset] === 0x52 &&
+    bytes[offset + 1] === 0x49 &&
+    bytes[offset + 2] === 0x46 &&
+    bytes[offset + 3] === 0x46 &&
+    bytes[offset + 8] === 0x57 &&
+    bytes[offset + 9] === 0x45 &&
+    bytes[offset + 10] === 0x42 &&
+    bytes[offset + 11] === 0x50
   );
 }
 
-function decodeUtf8Strict(bytes: Uint8Array): string | null {
-  try {
-    return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-  } catch {
-    return null;
-  }
-}
-
 function decodeBase64Strict(value: string): Buffer | null {
   if (!/^[A-Za-z0-9+/]+={0,2}$/.test(value)) {
     return null;
@@ -992,17 +2108,20 @@ function decodeBase64Strict(value: string): Buffer | null {
   return normalizedInput === normalizedOutput ? decoded : null;
 }
 
-async function readZipText(zip: JSZip, path: string): Promise<string> {
-  const file = zip.file(path);
+async function readZipText(zipReader: BoundedZipReader, path: string): Promise<string> {
+  return new TextDecoder("utf-8", { fatal: true }).decode(await zipReader.read(path));
+}
 
-  if (!file) {
-    throw new Error(`Archive is missing required file: ${path}`);
+function readClientShareSummary(
+  request: IncomingMessage,
+  archiveSha256: string
+): ClientShareClaim | null {
+  if (LEGACY_CLIENT_ASSURANCE_HEADERS.some((name) => request.headers[name] !== undefined)) {
+    throw new ShareSummaryHeaderError(
+      "Legacy client assurance headers are not accepted. Use an archive-bound share summary."
+    );
   }
 
-  return file.async("string");
-}
-
-function readClientShareSummary(request: IncomingMessage): ShareSummary | null {
   const rawHeader = request.headers[SHARE_SUMMARY_HEADER];
 
   if (rawHeader === undefined) {
@@ -1031,20 +2150,40 @@ function readClientShareSummary(request: IncomingMessage): ShareSummary | null {
     throw new ShareSummaryHeaderError("Share summary header is not valid encoded JSON.");
   }
 
-  return normalizeClientShareSummary(parsed);
+  return normalizeClientShareSummary(parsed, archiveSha256);
 }
 
-function normalizeClientShareSummary(value: unknown): ShareSummary {
+function normalizeClientShareSummary(
+  value: unknown,
+  expectedArchiveSha256: string
+): ClientShareClaim {
   const record = asRecord(value);
+  if (record.schemaVersion !== 2 || record.source !== "client") {
+    throw new ShareSummaryHeaderError(
+      "Share summary must use schemaVersion 2 with source 'client'."
+    );
+  }
+  if (record.analyzed !== true || typeof record.encrypted !== "boolean") {
+    throw new ShareSummaryHeaderError(
+      "Share summary must declare a completed client analysis and encryption state."
+    );
+  }
+
+  const archiveSha256 = readArchiveSha256(record.archiveSha256);
+  if (!sha256HexMatches(archiveSha256, expectedArchiveSha256)) {
+    throw new ShareSummaryHeaderError("Share summary archive digest does not match the upload.");
+  }
+
   const manifest = asRecord(record.manifest);
   const totals = asRecord(record.totals);
   const privacy = asRecord(record.privacy);
 
   return {
-    schemaVersion: 1,
+    schemaVersion: 2,
     source: "client",
-    analyzed: readBoolean(record.analyzed, true),
-    encrypted: readBoolean(record.encrypted, true),
+    archiveSha256,
+    analyzed: true,
+    encrypted: record.encrypted,
     manifest: {
       mode: readString(manifest.mode, "unknown", 32),
       chunkCodec: readString(manifest.chunkCodec, "unknown", 32),
@@ -1065,21 +2204,62 @@ function normalizeClientShareSummary(value: unknown): ShareSummary {
 }
 
 function applyArchiveEnvelopeToClientSummary(
-  clientSummary: ShareSummary,
+  clientSummary: ClientShareClaim,
   archiveEnvelopeSummary: ShareSummary
 ): ShareSummary {
+  if (!clientSummary.totals || !archiveEnvelopeSummary.totals) {
+    throw new Error("Archive-bound client summary is missing inspected totals.");
+  }
+
   return {
-    ...clientSummary,
+    schemaVersion: 2,
+    source: "client-unverified",
+    analyzed: false,
     encrypted: archiveEnvelopeSummary.encrypted,
-    analysisError: archiveEnvelopeSummary.encrypted
-      ? undefined
-      : archiveEnvelopeSummary.analysisError
+    trust: {
+      archiveEnvelope: "server-inspected",
+      privateContent: "client-claim-unverified",
+      archiveDigestMatched: true
+    },
+    manifest: archiveEnvelopeSummary.manifest,
+    totals: archiveEnvelopeSummary.totals,
+    clientClaim: {
+      totals: {
+        privacyViolations: clientSummary.totals.privacyViolations,
+        errors: clientSummary.totals.errors,
+        requests: clientSummary.totals.requests,
+        actions: clientSummary.totals.actions
+      },
+      topActionTriggers: clientSummary.topActionTriggers,
+      privacy: clientSummary.privacy
+    },
+    analysisError:
+      "Encrypted private content was not analyzed by the share server; privacy fields are unverified client claims."
   };
 }
 
-function hasPassedClientPrivacyPreflight(summary: ShareSummary): boolean {
-  const scanner = summary.privacy?.scanner;
-  return summary.analyzed && scanner?.preEncryption === true && scanner.status === "passed";
+function assertClientShareClaimMatchesArchive(
+  summary: ClientShareClaim,
+  envelope: ArchiveEnvelopeSummary
+): void {
+  if (!envelope.manifest || !envelope.totals) {
+    throw new Error("Archive envelope facts are unavailable after successful inspection.");
+  }
+
+  const manifestMatches =
+    summary.manifest?.mode === envelope.manifest.mode &&
+    summary.manifest.chunkCodec === envelope.manifest.chunkCodec &&
+    summary.manifest.recordedAt === envelope.manifest.recordedAt;
+  const totalsMatch =
+    summary.totals?.events === envelope.totals.events &&
+    summary.totals.durationMs === envelope.totals.durationMs &&
+    (summary.totals.blobs === undefined || summary.totals.blobs === envelope.totals.blobs);
+
+  if (summary.encrypted !== envelope.encrypted || !manifestMatches || !totalsMatch) {
+    throw new ShareSummaryHeaderError(
+      "Share summary conflicts with server-inspected archive envelope facts."
+    );
+  }
 }
 
 function normalizeSharePrivacySummary(value: Record<string, unknown>): ShareSummary["privacy"] {
@@ -1208,68 +2388,1792 @@ function roundTo(value: number, digits: number): number {
   return Math.round(value * factor) / factor;
 }
 
-async function ensureStorageLayout(): Promise<void> {
-  await mkdir(ARCHIVES_DIR, {
-    recursive: true
-  });
-  await mkdir(RECORDS_DIR, {
-    recursive: true
-  });
-  await mkdir(AUDIT_DIR, {
-    recursive: true
+async function initializeDataRoot(): Promise<BigIntStats> {
+  storageDirectoryIdentities.clear();
+  await mkdir(DATA_ROOT, {
+    recursive: true,
+    mode: 0o700
   });
+  const dataRootIdentity = await hardenStorageDirectory(DATA_ROOT);
+  storageDirectoryIdentities.set(DATA_ROOT, dataRootIdentity);
+  return dataRootIdentity;
 }
 
-async function readRecord(id: string): Promise<ShareRecord | null> {
-  try {
-    const raw = await readFile(recordPathForId(id), "utf8");
-    return JSON.parse(raw) as ShareRecord;
-  } catch {
-    return null;
+async function ensureStorageLayout(dataRootIdentity: BigIntStats): Promise<void> {
+  await assertStoragePathIdentity(DATA_ROOT, dataRootIdentity, "directory");
+  for (const directoryPath of [ARCHIVES_DIR, RECORDS_DIR, AUDIT_DIR]) {
+    await assertStoragePathIdentity(DATA_ROOT, dataRootIdentity, "directory");
+    try {
+      await mkdir(directoryPath, { mode: 0o700 });
+    } catch (error) {
+      if (!hasFileSystemErrorCode(error, "EEXIST")) {
+        throw error;
+      }
+    }
+    await assertStoragePathIdentity(DATA_ROOT, dataRootIdentity, "directory");
+    const directoryIdentity = await hardenStorageDirectory(directoryPath);
+    storageDirectoryIdentities.set(directoryPath, directoryIdentity);
   }
-}
 
-async function loadAllRecords(): Promise<ShareRecord[]> {
-  const fileNames = await readdir(RECORDS_DIR);
-  const records = await Promise.all(
-    fileNames
-      .filter((name) => name.endsWith(".json"))
-      .map(async (name) => {
-        const id = name.slice(0, -".json".length);
-        return readRecord(id);
-      })
-  );
-
-  return records.filter((record): record is ShareRecord => Boolean(record));
+  await assertManagedStorageLayout();
 }
 
-async function writeRecord(record: ShareRecord): Promise<void> {
-  await writeFile(recordPathForId(record.id), JSON.stringify(record, null, 2));
+async function migrateLegacyStoragePermissions(): Promise<void> {
+  await assertManagedStorageLayout();
+  await hardenCommittedStorageFiles(ARCHIVES_DIR, (name) => name.endsWith(".webblackbox"));
+  await hardenCommittedStorageFiles(RECORDS_DIR, (name) => name.endsWith(".json"));
+  const auditDirectoryIdentity = getManagedStorageDirectoryIdentity(AUDIT_DIR);
+  for (const auditPath of [
+    SHARE_AUDIT_LOG_PATH,
+    SHARE_AUDIT_ROTATED_LOG_PATH,
+    SHARE_AUDIT_HMAC_KEY_PATH
+  ]) {
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+    await hardenStorageFileIfPresent(auditPath);
+  }
+  await assertManagedStorageLayout();
 }
 
-function buildPublicShareMetadata(record: ShareRecord): {
-  id: string;
-  createdAt: number;
-  expiresAt: number;
-  revokedAt?: number;
-  status: "active" | "expired" | "revoked";
-  fileName: string;
-  sizeBytes: number;
-  checksumSha256: string;
-  shareUrl: string;
-  summary: ShareSummary;
-} {
+async function loadOrCreatePersistedAuditHmacSecret(): Promise<Buffer> {
+  const existingSecret = await readPersistedAuditHmacSecret();
+  if (existingSecret) {
+    return existingSecret;
+  }
+
+  const auditDirectoryIdentity = getManagedStorageDirectoryIdentity(AUDIT_DIR);
+  const secret = generateAuditHmacSecret();
+  const temporaryPath = join(
+    AUDIT_DIR,
+    `.client-hash.${randomUUID().replaceAll("-", "")}.hmac-key.tmp`
+  );
+  let handle: FileHandle | null = null;
+
+  try {
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+    handle = await open(
+      temporaryPath,
+      fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | fsConstants.O_NOFOLLOW,
+      0o600
+    );
+    await writeFileHandleFully(handle, secret);
+    await handle.sync();
+    if (process.platform !== "win32") {
+      await handle.chmod(0o600);
+    }
+    const temporaryStat = await handle.stat({ bigint: true });
+    if (
+      !temporaryStat.isFile() ||
+      temporaryStat.nlink !== 1n ||
+      temporaryStat.size !== BigInt(SHARE_AUDIT_HMAC_KEY_BYTES) ||
+      (process.platform !== "win32" && (temporaryStat.mode & 0o777n) !== 0o600n)
+    ) {
+      throw unsafeStoragePathError(temporaryPath, "could not create a private HMAC key file");
+    }
+    await handle.close();
+    handle = null;
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+    await assertStoragePathIdentity(temporaryPath, temporaryStat, "file");
+
+    let published = false;
+    try {
+      await link(temporaryPath, SHARE_AUDIT_HMAC_KEY_PATH);
+      published = true;
+    } catch (error) {
+      if (!hasFileSystemErrorCode(error, "EEXIST")) {
+        throw error;
+      }
+    }
+    await rm(temporaryPath, { force: true });
+    await syncDirectoryBestEffort(AUDIT_DIR);
+
+    if (!published) {
+      secret.fill(0);
+      const concurrentlyCreatedSecret = await readPersistedAuditHmacSecret();
+      if (!concurrentlyCreatedSecret) {
+        throw new Error("The Share audit HMAC key was not published atomically.");
+      }
+      return concurrentlyCreatedSecret;
+    }
+
+    const persistedSecret = await readPersistedAuditHmacSecret();
+    const persistedSecretMatches =
+      persistedSecret !== null && timingSafeEqual(secret, persistedSecret);
+    persistedSecret?.fill(0);
+    if (!persistedSecretMatches) {
+      throw new Error("The persisted Share audit HMAC key failed verification.");
+    }
+    return secret;
+  } finally {
+    await handle?.close().catch(() => undefined);
+    await rm(temporaryPath, { force: true }).catch(() => undefined);
+  }
+}
+
+async function readPersistedAuditHmacSecret(): Promise<Buffer | null> {
+  const auditDirectoryIdentity = getManagedStorageDirectoryIdentity(AUDIT_DIR);
+  await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+  let pathStat: BigIntStats;
+  try {
+    pathStat = await lstat(SHARE_AUDIT_HMAC_KEY_PATH, { bigint: true });
+  } catch (error) {
+    if (isFileNotFoundError(error)) {
+      return null;
+    }
+    throw error;
+  }
+
+  let handle: FileHandle | null = null;
+  try {
+    handle = await open(SHARE_AUDIT_HMAC_KEY_PATH, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+    const openedStat = await handle.stat({ bigint: true });
+    if (
+      !pathStat.isFile() ||
+      !openedStat.isFile() ||
+      openedStat.nlink !== 1n ||
+      openedStat.size !== BigInt(SHARE_AUDIT_HMAC_KEY_BYTES) ||
+      !isSameFileSystemObject(pathStat, openedStat) ||
+      (process.platform !== "win32" && (openedStat.mode & 0o777n) !== 0o600n)
+    ) {
+      throw unsafeStoragePathError(
+        SHARE_AUDIT_HMAC_KEY_PATH,
+        `expected a ${SHARE_AUDIT_HMAC_KEY_BYTES}-byte mode-0600 regular file`
+      );
+    }
+
+    const secret = await readFileHandleExactly(handle, SHARE_AUDIT_HMAC_KEY_BYTES);
+    if (estimateByteEntropyBits(secret) < MIN_SHARE_AUDIT_HMAC_ESTIMATED_ENTROPY_BITS) {
+      secret.fill(0);
+      throw unsafeStoragePathError(
+        SHARE_AUDIT_HMAC_KEY_PATH,
+        "stored HMAC key does not meet the entropy floor"
+      );
+    }
+    await assertStoragePathIdentity(SHARE_AUDIT_HMAC_KEY_PATH, openedStat, "file");
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+    return secret;
+  } catch (error) {
+    if (error instanceof UnsafeStoragePathError) {
+      throw error;
+    }
+    throw unsafeStoragePathError(
+      SHARE_AUDIT_HMAC_KEY_PATH,
+      "refusing to follow or read this path",
+      error
+    );
+  } finally {
+    await handle?.close().catch(() => undefined);
+  }
+}
+
+async function removeStaleAuditHmacSecretTemps(): Promise<void> {
+  const auditDirectoryIdentity = getManagedStorageDirectoryIdentity(AUDIT_DIR);
+  await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+  const directory = await opendir(AUDIT_DIR);
+  let directoryEntries = 0;
+
+  for await (const entry of directory) {
+    directoryEntries += 1;
+    if (directoryEntries > MAX_SHARE_RECORD_DIRECTORY_ENTRIES) {
+      throw new Error(
+        `Share audit directory entry limit exceeded (${MAX_SHARE_RECORD_DIRECTORY_ENTRIES}).`
+      );
+    }
+    if (/^\.client-hash\.[a-f0-9]{32}\.hmac-key\.tmp$/i.test(entry.name)) {
+      await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+      await rm(join(AUDIT_DIR, entry.name), { force: true });
+    }
+  }
+
+  await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+}
+
+type AuditLogHmacMigrationState =
+  | { kind: "current-or-missing" }
+  | { kind: "defer-to-reconciliation" }
+  | { kind: "legacy"; stat: BigIntStats; path: string };
+
+async function migrateLegacyAuditLogs(): Promise<void> {
+  const auditDirectoryIdentity = getManagedStorageDirectoryIdentity(AUDIT_DIR);
+  const states: AuditLogHmacMigrationState[] = [];
+  for (const auditPath of [SHARE_AUDIT_LOG_PATH, SHARE_AUDIT_ROTATED_LOG_PATH]) {
+    states.push(await classifyAuditLogHmacMigration(auditPath, auditDirectoryIdentity));
+  }
+
+  if (states.some((state) => state.kind === "defer-to-reconciliation")) {
+    return;
+  }
+
+  let removedLegacyLog = false;
+  for (const state of states) {
+    if (state.kind !== "legacy") {
+      continue;
+    }
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+    await assertStoragePathIdentity(state.path, state.stat, "file");
+    await rm(state.path, { force: true });
+    removedLegacyLog = true;
+  }
+  if (removedLegacyLog) {
+    await syncDirectoryBestEffort(AUDIT_DIR);
+  }
+}
+
+async function classifyAuditLogHmacMigration(
+  auditPath: string,
+  auditDirectoryIdentity: BigIntStats
+): Promise<AuditLogHmacMigrationState> {
+  await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+  let handle: FileHandle;
+  try {
+    handle = await open(auditPath, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+  } catch (error) {
+    if (isFileNotFoundError(error)) {
+      return { kind: "current-or-missing" };
+    }
+    throw unsafeStoragePathError(auditPath, "refusing to follow or replace this path", error);
+  }
+
+  try {
+    const openedStat = await handle.stat({ bigint: true });
+    if (
+      !openedStat.isFile() ||
+      openedStat.nlink !== 1n ||
+      (process.platform !== "win32" && (openedStat.mode & 0o777n) !== 0o600n)
+    ) {
+      throw unsafeStoragePathError(auditPath, "expected a private regular audit log");
+    }
+    if (openedStat.size === 0n) {
+      return { kind: "current-or-missing" };
+    }
+    if (openedStat.size > BigInt(MAX_SHARE_AUDIT_LOG_BYTES)) {
+      return { kind: "defer-to-reconciliation" };
+    }
+
+    const finalByte = Buffer.allocUnsafe(1);
+    const { bytesRead } = await handle.read(finalByte, 0, 1, Number(openedStat.size - 1n));
+    if (bytesRead !== 1 || finalByte[0] !== 0x0a) {
+      return { kind: "defer-to-reconciliation" };
+    }
+
+    let contents: Buffer;
+    try {
+      contents = await readFileHandleExactly(handle, Number(openedStat.size));
+    } catch (error) {
+      throw unsafeStoragePathError(auditPath, "changed during HMAC migration", error);
+    }
+    const verifiedStat = await handle.stat({ bigint: true });
+    if (
+      verifiedStat.size !== openedStat.size ||
+      !isSameFileSystemObject(verifiedStat, openedStat)
+    ) {
+      throw unsafeStoragePathError(auditPath, "changed during HMAC migration");
+    }
+    await assertStoragePathIdentity(auditPath, verifiedStat, "file");
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+
+    if (auditLogContainsOnlyHmacEvents(contents)) {
+      return { kind: "current-or-missing" };
+    }
+    return { kind: "legacy", path: auditPath, stat: verifiedStat };
+  } finally {
+    await handle.close().catch(() => undefined);
+  }
+}
+
+function auditLogContainsOnlyHmacEvents(contents: Buffer): boolean {
+  try {
+    const lines = new TextDecoder("utf-8", { fatal: true }).decode(contents).split("\n");
+    if (lines.pop() !== "" || lines.length === 0) {
+      return false;
+    }
+    return lines.every((line) => {
+      const event = asRecord(JSON.parse(line) as unknown);
+      return (
+        event.schemaVersion === 2 &&
+        event.clientHashAlgorithm === SHARE_AUDIT_CLIENT_HASH_ALGORITHM &&
+        typeof event.clientHash === "string" &&
+        /^[a-f0-9]{64}$/.test(event.clientHash)
+      );
+    });
+  } catch {
+    return false;
+  }
+}
+
+async function reconcileAuditLogLayout(): Promise<void> {
+  const auditDirectoryIdentity = getManagedStorageDirectoryIdentity(AUDIT_DIR);
+
+  for (const auditPath of [SHARE_AUDIT_LOG_PATH, SHARE_AUDIT_ROTATED_LOG_PATH]) {
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+    await validateAuditLogForStartup(auditPath, auditDirectoryIdentity);
+  }
+
+  await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+}
+
+async function validateAuditLogForStartup(
+  auditPath: string,
+  auditDirectoryIdentity: BigIntStats
+): Promise<void> {
+  let handle: FileHandle;
+  try {
+    handle = await open(auditPath, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+  } catch (error) {
+    if (isFileNotFoundError(error)) {
+      return;
+    }
+    throw unsafeStoragePathError(auditPath, "refusing to follow or replace this path", error);
+  }
+
+  try {
+    const openedStat = await handle.stat({ bigint: true });
+    if (
+      !openedStat.isFile() ||
+      openedStat.nlink !== 1n ||
+      (process.platform !== "win32" && (openedStat.mode & 0o777n) !== 0o600n)
+    ) {
+      throw unsafeStoragePathError(auditPath, "expected a private regular audit log");
+    }
+
+    if (openedStat.size > BigInt(MAX_SHARE_AUDIT_LOG_BYTES)) {
+      throw new Error(
+        `Share audit log "${auditPath}" exceeds WEBBLACKBOX_SHARE_MAX_AUDIT_LOG_BYTES (${MAX_SHARE_AUDIT_LOG_BYTES}). Move or delete the whole file before restarting; byte truncation can create an invalid JSONL record.`
+      );
+    }
+
+    if (openedStat.size > 0n) {
+      const finalByte = Buffer.allocUnsafe(1);
+      const { bytesRead } = await handle.read(finalByte, 0, 1, Number(openedStat.size - 1n));
+      if (bytesRead !== 1 || finalByte[0] !== 0x0a) {
+        throw new Error(
+          `Share audit log "${auditPath}" does not end at a complete JSONL record. Move or delete the whole file before restarting; byte truncation is not repaired automatically.`
+        );
+      }
+    }
+
+    const verifiedStat = await handle.stat({ bigint: true });
+    if (
+      verifiedStat.size !== openedStat.size ||
+      !isSameFileSystemObject(verifiedStat, openedStat)
+    ) {
+      throw unsafeStoragePathError(auditPath, "changed during startup reconciliation");
+    }
+    await assertStoragePathIdentity(auditPath, verifiedStat, "file");
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+  } finally {
+    await handle.close().catch(() => undefined);
+  }
+}
+
+async function hardenCommittedStorageFiles(
+  directoryPath: string,
+  isCommittedName: (name: string) => boolean
+): Promise<void> {
+  const directoryIdentity = getManagedStorageDirectoryIdentity(directoryPath);
+  await assertStoragePathIdentity(directoryPath, directoryIdentity, "directory");
+  const directory = await opendir(directoryPath);
+  let directoryEntries = 0;
+
+  for await (const entry of directory) {
+    directoryEntries += 1;
+    assertShareRecordDirectoryEntryBudget(directoryEntries);
+    if (!entry.name.startsWith(".") && isCommittedName(entry.name)) {
+      await assertStoragePathIdentity(directoryPath, directoryIdentity, "directory");
+      await hardenStorageFileIfPresent(join(directoryPath, entry.name));
+    }
+  }
+
+  await assertStoragePathIdentity(directoryPath, directoryIdentity, "directory");
+}
+
+async function assertManagedStorageLayout(): Promise<void> {
+  for (const directoryPath of [DATA_ROOT, ARCHIVES_DIR, RECORDS_DIR, AUDIT_DIR]) {
+    await assertStoragePathIdentity(
+      directoryPath,
+      getManagedStorageDirectoryIdentity(directoryPath),
+      "directory"
+    );
+  }
+}
+
+function getManagedStorageDirectoryIdentity(directoryPath: string): BigIntStats {
+  const identity = storageDirectoryIdentities.get(directoryPath);
+  if (!identity) {
+    throw unsafeStoragePathError(directoryPath, "has not been securely initialized");
+  }
+  return identity;
+}
+
+async function hardenStorageDirectory(directoryPath: string): Promise<BigIntStats> {
+  let handle: FileHandle | null = null;
+
+  try {
+    handle = await open(
+      directoryPath,
+      fsConstants.O_RDONLY | fsConstants.O_DIRECTORY | fsConstants.O_NOFOLLOW
+    );
+    const openedStat = await handle.stat({ bigint: true });
+    if (!openedStat.isDirectory()) {
+      throw unsafeStoragePathError(directoryPath, "expected a regular directory");
+    }
+
+    if (process.platform !== "win32") {
+      await handle.chmod(0o700);
+    }
+    const hardenedStat = await handle.stat({ bigint: true });
+    if (
+      !hardenedStat.isDirectory() ||
+      (process.platform !== "win32" && (hardenedStat.mode & 0o777n) !== 0o700n)
+    ) {
+      throw unsafeStoragePathError(directoryPath, "could not enforce mode 0700");
+    }
+
+    await assertStoragePathIdentity(directoryPath, hardenedStat, "directory");
+    return hardenedStat;
+  } catch (error) {
+    if (error instanceof UnsafeStoragePathError) {
+      throw error;
+    }
+    throw unsafeStoragePathError(directoryPath, "refusing to follow or replace this path", error);
+  } finally {
+    await handle?.close().catch(() => undefined);
+  }
+}
+
+async function hardenStorageFileIfPresent(filePath: string): Promise<void> {
+  let pathStat: BigIntStats;
+  try {
+    pathStat = await lstat(filePath, { bigint: true });
+  } catch (error) {
+    if (isFileNotFoundError(error)) {
+      return;
+    }
+    throw error;
+  }
+
+  if (!pathStat.isFile()) {
+    throw unsafeStoragePathError(filePath, "expected a regular file");
+  }
+
+  let handle: FileHandle | null = null;
+  try {
+    handle = await open(filePath, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+    const openedStat = await handle.stat({ bigint: true });
+    if (
+      !openedStat.isFile() ||
+      openedStat.nlink !== 1n ||
+      !isSameFileSystemObject(pathStat, openedStat)
+    ) {
+      throw unsafeStoragePathError(filePath, "changed while permissions were being migrated");
+    }
+
+    if (process.platform !== "win32") {
+      await handle.chmod(0o600);
+    }
+    const hardenedStat = await handle.stat({ bigint: true });
+    if (
+      !hardenedStat.isFile() ||
+      hardenedStat.nlink !== 1n ||
+      (process.platform !== "win32" && (hardenedStat.mode & 0o777n) !== 0o600n)
+    ) {
+      throw unsafeStoragePathError(filePath, "could not enforce mode 0600");
+    }
+
+    await assertStoragePathIdentity(filePath, hardenedStat, "file");
+  } catch (error) {
+    if (error instanceof UnsafeStoragePathError) {
+      throw error;
+    }
+    throw unsafeStoragePathError(filePath, "refusing to follow or replace this path", error);
+  } finally {
+    await handle?.close().catch(() => undefined);
+  }
+}
+
+function assertPrivateArchiveFileStat(
+  filePath: string,
+  stat: BigIntStats,
+  expectedSize: bigint,
+  requirePrivateMode = true
+): void {
+  if (
+    !stat.isFile() ||
+    stat.nlink !== 1n ||
+    stat.size !== expectedSize ||
+    (requirePrivateMode && process.platform !== "win32" && (stat.mode & 0o777n) !== 0o600n)
+  ) {
+    throw unsafeStoragePathError(filePath, "expected a private regular archive file");
+  }
+}
+
+async function assertPrivateArchiveFilePathIdentity(
+  filePath: string,
+  expectedStat: BigIntStats
+): Promise<void> {
+  let currentStat: BigIntStats;
+  try {
+    currentStat = await lstat(filePath, { bigint: true });
+  } catch (error) {
+    throw unsafeStoragePathError(filePath, "disappeared during an archive operation", error);
+  }
+
+  assertPrivateArchiveFileStat(filePath, currentStat, expectedStat.size);
+  if (!isSameFileSystemObject(currentStat, expectedStat)) {
+    throw unsafeStoragePathError(filePath, "changed during an archive operation");
+  }
+}
+
+async function assertStoragePathIdentity(
+  storagePath: string,
+  expectedStat: BigIntStats,
+  expectedKind: "directory" | "file"
+): Promise<void> {
+  let currentStat: BigIntStats;
+  try {
+    currentStat = await lstat(storagePath, { bigint: true });
+  } catch (error) {
+    throw unsafeStoragePathError(storagePath, "disappeared during a storage operation", error);
+  }
+
+  const hasExpectedKind =
+    expectedKind === "directory" ? currentStat.isDirectory() : currentStat.isFile();
+  const hasSafeLinkCount =
+    expectedKind === "directory" || (currentStat.nlink === 1n && expectedStat.nlink === 1n);
+  const expectedMode = expectedKind === "directory" ? 0o700n : 0o600n;
+  const hasExpectedMode =
+    process.platform === "win32" || (currentStat.mode & 0o777n) === expectedMode;
+  if (
+    !hasExpectedKind ||
+    !hasSafeLinkCount ||
+    !hasExpectedMode ||
+    !isSameFileSystemObject(currentStat, expectedStat)
+  ) {
+    throw unsafeStoragePathError(storagePath, "changed during a storage operation");
+  }
+}
+
+function unsafeStoragePathError(
+  storagePath: string,
+  reason: string,
+  cause?: unknown
+): UnsafeStoragePathError {
+  return new UnsafeStoragePathError(`Unsafe share storage path "${storagePath}": ${reason}.`, {
+    cause
+  });
+}
+
+async function reconcileStorageLayout(startupNow: number): Promise<void> {
+  await assertManagedStorageLayout();
+  resetShareRecordIndex();
+  const archiveIds = await collectStoredIds(ARCHIVES_DIR, ".webblackbox", ".upload");
+  const recordIds = await collectStoredIds(RECORDS_DIR, ".json", ".record");
+  const indexEntries: ShareRecordIndexEntry[] = [];
+  if (recordIds.size > MAX_SHARE_RECORD_FILES) {
+    throw new Error(`Share record hard limit exceeded (${MAX_SHARE_RECORD_FILES}).`);
+  }
+
+  for (const id of recordIds) {
+    if (archiveIds.has(id)) {
+      const record = await readRecord(id);
+      if (record) {
+        const indexEntry = createShareRecordIndexEntry(record);
+        if (indexEntry.retentionDeadline <= startupNow) {
+          await removeStoredShare(id);
+          archiveIds.delete(id);
+          continue;
+        }
+        if (await hasValidStoredArchive(record)) {
+          indexEntries.push(indexEntry);
+          continue;
+        }
+      }
+    }
+
+    await removeStoredShare(id);
+    archiveIds.delete(id);
+  }
+
+  for (const id of archiveIds) {
+    if (!recordIds.has(id)) {
+      await assertStoragePathIdentity(
+        ARCHIVES_DIR,
+        getManagedStorageDirectoryIdentity(ARCHIVES_DIR),
+        "directory"
+      );
+      await rm(archivePathForId(id), { force: true });
+    }
+  }
+  initializeShareRecordIndex(indexEntries);
+  await assertManagedStorageLayout();
+}
+
+async function hasValidStoredArchive(record: ShareRecord): Promise<boolean> {
+  let verifiedArchive: VerifiedArchiveFile | null = null;
+
+  try {
+    verifiedArchive = await openVerifiedArchive(record);
+    return true;
+  } catch (error) {
+    if (!(error instanceof ArchiveIntegrityError)) {
+      throw error;
+    }
+    return false;
+  } finally {
+    await verifiedArchive?.handle.close().catch(() => undefined);
+  }
+}
+
+type VerifiedArchiveFile = {
+  handle: FileHandle;
+};
+
+async function openVerifiedArchive(record: ShareRecord): Promise<VerifiedArchiveFile> {
+  let handle: FileHandle | null = null;
+
+  try {
+    const archiveDirectoryIdentity = getManagedStorageDirectoryIdentity(ARCHIVES_DIR);
+    await assertStoragePathIdentity(ARCHIVES_DIR, archiveDirectoryIdentity, "directory");
+    const archivePath = archivePathForId(record.id);
+    const pathStat = await lstat(archivePath, { bigint: true });
+    if (!pathStat.isFile() || pathStat.size !== BigInt(record.sizeBytes)) {
+      throw new ArchiveIntegrityError();
+    }
+
+    handle = await open(archivePath, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+    let openedStat = await handle.stat({ bigint: true });
+    if (
+      !openedStat.isFile() ||
+      openedStat.nlink !== 1n ||
+      openedStat.size !== BigInt(record.sizeBytes) ||
+      !isSameFileSystemObject(pathStat, openedStat)
+    ) {
+      throw new ArchiveIntegrityError();
+    }
+    if (process.platform !== "win32" && (openedStat.mode & 0o777n) !== 0o600n) {
+      await handle.chmod(0o600);
+      openedStat = await handle.stat({ bigint: true });
+      if (
+        !openedStat.isFile() ||
+        openedStat.nlink !== 1n ||
+        openedStat.size !== BigInt(record.sizeBytes) ||
+        (openedStat.mode & 0o777n) !== 0o600n
+      ) {
+        throw new ArchiveIntegrityError();
+      }
+    }
+
+    const statFingerprint = archiveStatFingerprint(openedStat);
+    const cached = verifiedArchiveCache.get(record.id);
+    if (
+      cached?.checksumSha256 === record.checksumSha256 &&
+      cached.statFingerprint === statFingerprint
+    ) {
+      verifiedArchiveCache.delete(record.id);
+      verifiedArchiveCache.set(record.id, cached);
+      await assertArchivePathStillReferences(archivePath, openedStat);
+      await assertStoragePathIdentity(ARCHIVES_DIR, archiveDirectoryIdentity, "directory");
+      return { handle };
+    }
+
+    const checksumSha256 = await checksumArchiveFileHandle(handle, record.sizeBytes);
+    const verifiedStat = await handle.stat({ bigint: true });
+    if (
+      archiveStatFingerprint(verifiedStat) !== statFingerprint ||
+      !sha256HexMatches(checksumSha256, record.checksumSha256)
+    ) {
+      throw new ArchiveIntegrityError();
+    }
+
+    await assertArchivePathStillReferences(archivePath, verifiedStat);
+    await assertStoragePathIdentity(ARCHIVES_DIR, archiveDirectoryIdentity, "directory");
+    cacheVerifiedArchive(record.id, checksumSha256, statFingerprint);
+    return { handle };
+  } catch (error) {
+    await handle?.close().catch(() => undefined);
+    if (error instanceof ArchiveIntegrityError) {
+      throw error;
+    }
+    if (isFileNotFoundError(error) || hasFileSystemErrorCode(error, "ELOOP")) {
+      throw new ArchiveIntegrityError();
+    }
+    throw error;
+  }
+}
+
+async function assertArchivePathStillReferences(
+  archivePath: string,
+  openedStat: BigIntStats
+): Promise<void> {
+  const currentPathStat = await lstat(archivePath, { bigint: true });
+  if (
+    !currentPathStat.isFile() ||
+    archiveStatFingerprint(currentPathStat) !== archiveStatFingerprint(openedStat)
+  ) {
+    throw new ArchiveIntegrityError();
+  }
+}
+
+function isSameFileSystemObject(left: BigIntStats, right: BigIntStats): boolean {
+  return left.dev === right.dev && left.ino === right.ino;
+}
+
+function archiveStatFingerprint(archiveStat: BigIntStats): string {
+  return [
+    archiveStat.dev,
+    archiveStat.ino,
+    archiveStat.mode,
+    archiveStat.size,
+    archiveStat.mtimeNs,
+    archiveStat.ctimeNs
+  ].join(":");
+}
+
+async function checksumArchiveFileHandle(
+  handle: FileHandle,
+  expectedBytes: number
+): Promise<string> {
+  const checksum = createHash("sha256");
+  const buffer = Buffer.allocUnsafe(Math.min(ARCHIVE_CHECKSUM_BUFFER_BYTES, expectedBytes));
+  let offset = 0;
+
+  while (offset < expectedBytes) {
+    const bytesToRead = Math.min(buffer.byteLength, expectedBytes - offset);
+    const { bytesRead } = await handle.read(buffer, 0, bytesToRead, offset);
+    if (bytesRead === 0) {
+      throw new ArchiveIntegrityError();
+    }
+    checksum.update(buffer.subarray(0, bytesRead));
+    offset += bytesRead;
+  }
+
+  return checksum.digest("hex");
+}
+
+function cacheVerifiedArchive(id: string, checksumSha256: string, statFingerprint: string): void {
+  verifiedArchiveCache.delete(id);
+  while (verifiedArchiveCache.size >= MAX_VERIFIED_ARCHIVE_CACHE_ENTRIES) {
+    const oldestId = verifiedArchiveCache.keys().next().value as string | undefined;
+    if (!oldestId) {
+      break;
+    }
+    verifiedArchiveCache.delete(oldestId);
+  }
+  verifiedArchiveCache.set(id, { checksumSha256, statFingerprint });
+}
+
+async function removeStoredShare(id: string): Promise<void> {
+  verifiedArchiveCache.delete(id);
+  await Promise.all([
+    assertStoragePathIdentity(
+      RECORDS_DIR,
+      getManagedStorageDirectoryIdentity(RECORDS_DIR),
+      "directory"
+    ),
+    assertStoragePathIdentity(
+      ARCHIVES_DIR,
+      getManagedStorageDirectoryIdentity(ARCHIVES_DIR),
+      "directory"
+    )
+  ]);
+  await Promise.all([
+    rm(recordPathForId(id), { force: true }),
+    rm(archivePathForId(id), { force: true })
+  ]);
+  removeShareRecordIndexEntry(id);
+}
+
+async function collectStoredIds(
+  directoryPath: string,
+  committedSuffix: string,
+  temporarySuffix: string
+): Promise<Set<string>> {
+  const directoryIdentity = getManagedStorageDirectoryIdentity(directoryPath);
+  await assertStoragePathIdentity(directoryPath, directoryIdentity, "directory");
+  const directory = await opendir(directoryPath);
+  const ids = new Set<string>();
+  let directoryEntries = 0;
+
+  for await (const entry of directory) {
+    directoryEntries += 1;
+    assertShareRecordDirectoryEntryBudget(directoryEntries);
+    if (!entry.isFile()) {
+      continue;
+    }
+
+    if (entry.name.startsWith(".") && entry.name.endsWith(temporarySuffix)) {
+      await assertStoragePathIdentity(directoryPath, directoryIdentity, "directory");
+      await rm(join(directoryPath, entry.name), { force: true });
+      continue;
+    }
+
+    if (!entry.name.endsWith(committedSuffix)) {
+      continue;
+    }
+
+    const id = entry.name.slice(0, -committedSuffix.length);
+    if (SHARE_ID_PATTERN.test(id)) {
+      ids.add(id);
+    }
+  }
+
+  await assertStoragePathIdentity(directoryPath, directoryIdentity, "directory");
+  return ids;
+}
+
+async function readRecord(id: string): Promise<ShareRecord | null> {
+  if (!SHARE_ID_PATTERN.test(id)) {
+    return null;
+  }
+
+  let handle: Awaited<ReturnType<typeof open>> | null = null;
+  try {
+    const recordDirectoryIdentity = getManagedStorageDirectoryIdentity(RECORDS_DIR);
+    await assertStoragePathIdentity(RECORDS_DIR, recordDirectoryIdentity, "directory");
+    const recordPath = recordPathForId(id);
+    handle = await open(recordPath, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+    let recordStat = await handle.stat({ bigint: true });
+    if (
+      !recordStat.isFile() ||
+      recordStat.nlink !== 1n ||
+      recordStat.size <= 0n ||
+      recordStat.size > BigInt(MAX_SHARE_RECORD_BYTES)
+    ) {
+      return null;
+    }
+    if (process.platform !== "win32" && (recordStat.mode & 0o777n) !== 0o600n) {
+      await handle.chmod(0o600);
+      recordStat = await handle.stat({ bigint: true });
+      if (
+        !recordStat.isFile() ||
+        recordStat.nlink !== 1n ||
+        recordStat.size <= 0n ||
+        recordStat.size > BigInt(MAX_SHARE_RECORD_BYTES) ||
+        (recordStat.mode & 0o777n) !== 0o600n
+      ) {
+        return null;
+      }
+    }
+
+    const raw = await readFileHandleExactly(handle, Number(recordStat.size));
+    await assertStoragePathIdentity(recordPath, recordStat, "file");
+    await assertStoragePathIdentity(RECORDS_DIR, recordDirectoryIdentity, "directory");
+    const parsed = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(raw)) as unknown;
+    return normalizePersistedShareRecord(parsed, id);
+  } catch {
+    return null;
+  } finally {
+    await handle?.close();
+  }
+}
+
+async function tryReserveShareRecordSlot(): Promise<boolean> {
+  const reservation = shareRecordAdmissionQueue.then(async () => {
+    const initialCount = shareRecordIndexById.size;
+    if (initialCount + reservedShareRecordSlots < SHARE_RECORD_ADMISSION_LIMIT) {
+      reservedShareRecordSlots += 1;
+      return true;
+    }
+
+    await pruneExpiredShareRecords(Date.now());
+    const retainedCount = shareRecordIndexById.size;
+    if (retainedCount + reservedShareRecordSlots >= SHARE_RECORD_ADMISSION_LIMIT) {
+      return false;
+    }
+
+    reservedShareRecordSlots += 1;
+    return true;
+  });
+  shareRecordAdmissionQueue = reservation.then(
+    () => undefined,
+    () => undefined
+  );
+  return reservation;
+}
+
+function assertShareRecordDirectoryEntryBudget(entries: number): void {
+  if (entries > MAX_SHARE_RECORD_DIRECTORY_ENTRIES) {
+    throw new Error(
+      `Share record directory entry limit exceeded (${MAX_SHARE_RECORD_DIRECTORY_ENTRIES}).`
+    );
+  }
+}
+
+function resetShareRecordIndex(): void {
+  shareRecordIndexById.clear();
+  shareRecordListOrder.length = 0;
+  shareRecordExpiryOrder.length = 0;
+}
+
+function initializeShareRecordIndex(entries: ShareRecordIndexEntry[]): void {
+  if (entries.length > MAX_SHARE_RECORD_FILES) {
+    throw new Error(`Share record hard limit exceeded (${MAX_SHARE_RECORD_FILES}).`);
+  }
+
+  resetShareRecordIndex();
+  for (const entry of entries) {
+    if (shareRecordIndexById.has(entry.id)) {
+      throw new Error(`Duplicate share record index entry: ${entry.id}`);
+    }
+    shareRecordIndexById.set(entry.id, entry);
+  }
+  shareRecordListOrder.push(...entries);
+  shareRecordListOrder.sort(compareShareRecordListEntries);
+  shareRecordExpiryOrder.push(...entries);
+  shareRecordExpiryOrder.sort(compareShareRecordExpiryEntries);
+}
+
+function assertShareRecordIndexCapacity(id: string): void {
+  if (!shareRecordIndexById.has(id) && shareRecordIndexById.size >= MAX_SHARE_RECORD_FILES) {
+    throw new Error(`Share record hard limit exceeded (${MAX_SHARE_RECORD_FILES}).`);
+  }
+}
+
+function upsertShareRecordIndex(record: ShareRecord): void {
+  const entry = createShareRecordIndexEntry(record);
+  removeShareRecordIndexEntry(record.id);
+  assertShareRecordIndexCapacity(record.id);
+  shareRecordIndexById.set(entry.id, entry);
+  insertSortedIndexEntry(shareRecordListOrder, entry, compareShareRecordListEntries);
+  insertSortedIndexEntry(shareRecordExpiryOrder, entry, compareShareRecordExpiryEntries);
+}
+
+function createShareRecordIndexEntry(record: ShareRecord): ShareRecordIndexEntry {
+  const retentionDeadline = addSafeIntegers(record.expiresAt, SHARE_RETAIN_EXPIRED_MS);
+  if (retentionDeadline === null) {
+    throw new Error("Share record retention deadline exceeds the safe integer range.");
+  }
+
+  return {
+    id: record.id,
+    createdAt: record.createdAt,
+    expiresAt: record.expiresAt,
+    retentionDeadline
+  };
+}
+
+function removeShareRecordIndexEntry(id: string): void {
+  const entry = shareRecordIndexById.get(id);
+  if (!entry) {
+    return;
+  }
+
+  shareRecordIndexById.delete(id);
+  removeSortedIndexEntry(shareRecordListOrder, entry, compareShareRecordListEntries);
+  removeSortedIndexEntry(shareRecordExpiryOrder, entry, compareShareRecordExpiryEntries);
+}
+
+function compareShareRecordListEntries(left: ShareListCursor, right: ShareListCursor): number {
+  return right.createdAt - left.createdAt || compareShareIds(left.id, right.id);
+}
+
+function compareShareRecordExpiryEntries(
+  left: ShareRecordIndexEntry,
+  right: ShareRecordIndexEntry
+): number {
+  return left.retentionDeadline - right.retentionDeadline || compareShareIds(left.id, right.id);
+}
+
+function compareShareIds(left: string, right: string): number {
+  return left < right ? -1 : left > right ? 1 : 0;
+}
+
+function insertSortedIndexEntry<T>(
+  entries: T[],
+  entry: T,
+  compare: (left: T, right: T) => number
+): void {
+  entries.splice(findSortedIndex(entries, entry, compare, false), 0, entry);
+}
+
+function removeSortedIndexEntry<T>(
+  entries: T[],
+  entry: T,
+  compare: (left: T, right: T) => number
+): void {
+  const index = findSortedIndex(entries, entry, compare, false);
+  if (entries[index] === entry) {
+    entries.splice(index, 1);
+  }
+}
+
+function findSortedIndex<T, U>(
+  entries: T[],
+  target: U,
+  compare: (left: T, right: U) => number,
+  afterEqual: boolean
+): number {
+  let low = 0;
+  let high = entries.length;
+
+  while (low < high) {
+    const middle = low + Math.floor((high - low) / 2);
+    const comparison = compare(entries[middle] as T, target);
+    if (comparison < 0 || (afterEqual && comparison === 0)) {
+      low = middle + 1;
+    } else {
+      high = middle;
+    }
+  }
+
+  return low;
+}
+
+function selectShareRecordIndexPage(pagination: ShareListPagination): ShareRecordIndexEntry[] {
+  const start =
+    pagination.mode === "cursor"
+      ? findSortedIndex(
+          shareRecordListOrder,
+          pagination.cursor,
+          compareShareRecordListEntries,
+          true
+        )
+      : pagination.offset;
+  return shareRecordListOrder.slice(start, start + pagination.limit);
+}
+
+function hasShareRecordIndexEntryAfter(cursor: ShareListCursor): boolean {
+  return (
+    findSortedIndex(shareRecordListOrder, cursor, compareShareRecordListEntries, true) <
+    shareRecordListOrder.length
+  );
+}
+
+async function writeRecord(record: ShareRecord): Promise<void> {
+  assertShareRecordIndexCapacity(record.id);
+  const recordDirectoryIdentity = getManagedStorageDirectoryIdentity(RECORDS_DIR);
+  await assertStoragePathIdentity(RECORDS_DIR, recordDirectoryIdentity, "directory");
+  const payload = Buffer.from(JSON.stringify(record, null, 2), "utf8");
+  if (payload.byteLength > MAX_SHARE_RECORD_BYTES) {
+    throw new Error(`Share record exceeds ${MAX_SHARE_RECORD_BYTES} bytes.`);
+  }
+
+  const temporaryPath = join(
+    RECORDS_DIR,
+    `.${record.id}.${randomUUID().replaceAll("-", "")}.record`
+  );
+  let handle: Awaited<ReturnType<typeof open>> | null = null;
+  let committed = false;
+
+  try {
+    handle = await open(temporaryPath, "wx", 0o600);
+    await writeFileHandleFully(handle, payload);
+    await handle.sync();
+    await handle.close();
+    handle = null;
+    await assertStoragePathIdentity(RECORDS_DIR, recordDirectoryIdentity, "directory");
+    await rename(temporaryPath, recordPathForId(record.id));
+    committed = true;
+    await syncDirectoryBestEffort(RECORDS_DIR);
+    upsertShareRecordIndex(record);
+  } finally {
+    await handle?.close();
+    if (!committed) {
+      await rm(temporaryPath, { force: true });
+    }
+  }
+}
+
+async function syncDirectoryBestEffort(directoryPath: string): Promise<void> {
+  let handle: Awaited<ReturnType<typeof open>> | null = null;
+  try {
+    handle = await open(directoryPath, "r");
+    await handle.sync();
+  } catch {
+    // Some supported filesystems do not allow directory handles to be fsynced.
+  } finally {
+    await handle?.close();
+  }
+}
+
+function normalizePersistedShareRecord(value: unknown, expectedId: string): ShareRecord | null {
+  const record = asRecord(value);
+  if (record.id !== expectedId || !SHARE_ID_PATTERN.test(expectedId)) {
+    return null;
+  }
+
+  const createdAt = readSafeNonNegativeInteger(record.createdAt);
+  const persistedExpiresAt = readSafeNonNegativeInteger(record.expiresAt);
+  const defaultExpiresAt =
+    createdAt === null ? null : addSafeIntegers(createdAt, SHARE_DEFAULT_TTL_MS);
+  const expiresAt = persistedExpiresAt ?? defaultExpiresAt;
+  const revokedAt =
+    record.revokedAt === undefined ? undefined : readSafeNonNegativeInteger(record.revokedAt);
+  const sizeBytes = readSafeNonNegativeInteger(record.sizeBytes);
+  const checksumSha256 =
+    typeof record.checksumSha256 === "string" && /^[a-f0-9]{64}$/i.test(record.checksumSha256)
+      ? record.checksumSha256.toLowerCase()
+      : null;
+
+  if (
+    createdAt === null ||
+    expiresAt === null ||
+    expiresAt < createdAt ||
+    addSafeIntegers(expiresAt, SHARE_RETAIN_EXPIRED_MS) === null ||
+    revokedAt === null ||
+    (revokedAt !== undefined && revokedAt < createdAt) ||
+    sizeBytes === null ||
+    sizeBytes <= 0 ||
+    sizeBytes > MAX_UPLOAD_BYTES ||
+    checksumSha256 === null
+  ) {
+    return null;
+  }
+
+  return {
+    id: expectedId,
+    createdAt,
+    expiresAt,
+    revokedAt,
+    fileName: publicArchiveFileName(
+      expectedId,
+      typeof record.fileName === "string" ? record.fileName : undefined
+    ),
+    sizeBytes,
+    checksumSha256,
+    shareUrl: `${sharePublicOrigin}/share/${expectedId}`,
+    summary: normalizePersistedShareSummary(record.summary)
+  };
+}
+
+function readSafeNonNegativeInteger(value: unknown): number | null {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : null;
+}
+
+function addSafeIntegers(left: number, right: number): number | null {
+  const sum = left + right;
+  return Number.isSafeInteger(sum) ? sum : null;
+}
+
+function buildPublicShareMetadata(record: ShareRecord): {
+  id: string;
+  createdAt: number;
+  expiresAt: number;
+  revokedAt?: number;
+  status: "active" | "expired" | "revoked";
+  fileName: string;
+  sizeBytes: number;
+  checksumSha256: string;
+  shareUrl: string;
+  summary: ShareSummary;
+} {
+  return {
+    id: record.id,
+    createdAt: record.createdAt,
+    expiresAt: resolveShareExpiresAt(record),
+    revokedAt: record.revokedAt,
+    status: resolveShareStatus(record, Date.now()),
+    fileName: record.fileName,
+    sizeBytes: record.sizeBytes,
+    checksumSha256: record.checksumSha256,
+    shareUrl: record.shareUrl,
+    summary: normalizePersistedShareSummary(record.summary)
+  };
+}
+
+function normalizePersistedShareSummary(value: unknown): ShareSummary {
+  const record = readPersistedObject(value);
+  const encrypted = record?.encrypted === true;
+
+  if (record?.schemaVersion === 2) {
+    return (
+      normalizeCurrentPersistedShareSummary(record) ?? unavailablePersistedShareSummary(encrypted)
+    );
+  }
+
+  return (
+    normalizeLegacyPersistedShareSummary(record) ?? unavailablePersistedShareSummary(encrypted)
+  );
+}
+
+function normalizeCurrentPersistedShareSummary(
+  record: Record<string, unknown>
+): ShareSummary | null {
+  if (typeof record.encrypted !== "boolean") {
+    return null;
+  }
+
+  const trust = readPersistedObject(record.trust);
+  if (trust?.archiveEnvelope !== "server-inspected") {
+    return null;
+  }
+
+  const manifest = normalizePersistedShareManifest(record.manifest);
+  if (manifest === null) {
+    return null;
+  }
+
+  if (record.source === "server") {
+    const totals = normalizePersistedShareTotals(record.totals, "server");
+    const topActionTriggers = normalizePersistedActionTriggerSummaries(record.topActionTriggers);
+    const privacy = normalizePersistedSharePrivacySummary(record.privacy);
+    const privateContent = trust.privateContent;
+    if (
+      record.analyzed !== true ||
+      (privateContent !== "server-analyzed" && privateContent !== "server-partially-analyzed") ||
+      trust.archiveDigestMatched !== undefined ||
+      record.analysisError !== undefined ||
+      record.clientClaim !== undefined ||
+      manifest === undefined ||
+      totals === null ||
+      totals === undefined ||
+      typeof totals.blobs !== "number" ||
+      topActionTriggers === null ||
+      topActionTriggers === undefined ||
+      privacy === null ||
+      privacy === undefined
+    ) {
+      return null;
+    }
+    const scanner = privacy.scanner;
+    const coverage = scanner.coverage;
+    const coverageMatchesArchiveTotals =
+      coverage !== undefined &&
+      coverage.expectedEventCount === totals.events &&
+      coverage.expectedBlobCount === totals.blobs;
+    const coverageCountsAreBounded =
+      coverage !== undefined &&
+      coverage.scannedEventCount <= coverage.expectedEventCount &&
+      coverage.scannedBlobCount + coverage.opaqueBlobCount <= coverage.expectedBlobCount;
+    const validCompleteAttestation =
+      privateContent === "server-analyzed" &&
+      scanner?.status === "passed" &&
+      scanner.findingCount === 0 &&
+      coverage?.complete === true &&
+      coverageMatchesArchiveTotals &&
+      coverage.scannedEventCount === coverage.expectedEventCount &&
+      coverage.scannedBlobCount === coverage.expectedBlobCount &&
+      coverage.opaqueBlobCount === 0;
+    const validPartialAnalysis =
+      privateContent === "server-partially-analyzed" &&
+      scanner?.status === "unknown" &&
+      scanner.findingCount === 0 &&
+      coverage?.complete === false &&
+      coverageMatchesArchiveTotals &&
+      coverageCountsAreBounded;
+    if (!validCompleteAttestation && !validPartialAnalysis) {
+      return null;
+    }
+
+    return {
+      schemaVersion: 2,
+      source: "server",
+      analyzed: true,
+      encrypted: record.encrypted,
+      trust: {
+        archiveEnvelope: "server-inspected",
+        privateContent
+      },
+      manifest,
+      totals,
+      topActionTriggers,
+      privacy
+    };
+  }
+
+  if (record.source === "client-unverified") {
+    const totals = normalizePersistedShareTotals(record.totals, "envelope");
+    const clientClaim = normalizePersistedClientClaim(record.clientClaim);
+    if (
+      record.analyzed !== false ||
+      trust.privateContent !== "client-claim-unverified" ||
+      (trust.archiveDigestMatched !== undefined && trust.archiveDigestMatched !== true) ||
+      record.privacy !== undefined ||
+      record.topActionTriggers !== undefined ||
+      !isOptionalPersistedAnalysisError(record.analysisError) ||
+      totals === null ||
+      clientClaim === null
+    ) {
+      return null;
+    }
+
+    return {
+      schemaVersion: 2,
+      source: "client-unverified",
+      analyzed: false,
+      encrypted: record.encrypted,
+      trust: {
+        archiveEnvelope: "server-inspected",
+        privateContent: "client-claim-unverified",
+        ...(trust.archiveDigestMatched === true ? { archiveDigestMatched: true } : {})
+      },
+      manifest,
+      totals,
+      clientClaim,
+      analysisError:
+        trust.archiveDigestMatched === true
+          ? "Encrypted private content was not analyzed by the share server; privacy fields are unverified client claims."
+          : "Legacy client privacy fields were not archive-digest-bound and remain unverified claims."
+    };
+  }
+
+  if (record.source === "unavailable") {
+    const totals = normalizePersistedShareTotals(record.totals, "envelope");
+    if (
+      record.analyzed !== false ||
+      trust.privateContent !== "not-analyzed" ||
+      trust.archiveDigestMatched !== undefined ||
+      record.privacy !== undefined ||
+      record.topActionTriggers !== undefined ||
+      record.clientClaim !== undefined ||
+      !isOptionalPersistedAnalysisError(record.analysisError) ||
+      totals === null
+    ) {
+      return null;
+    }
+
+    return {
+      schemaVersion: 2,
+      source: "unavailable",
+      analyzed: false,
+      encrypted: record.encrypted,
+      trust: {
+        archiveEnvelope: "server-inspected",
+        privateContent: "not-analyzed"
+      },
+      manifest,
+      totals,
+      analysisError: "Stored share analysis is unavailable."
+    };
+  }
+
+  return null;
+}
+
+function normalizeLegacyPersistedShareSummary(
+  record: Record<string, unknown> | null
+): ShareSummary | null {
+  if (!record || typeof record.encrypted !== "boolean") {
+    return null;
+  }
+
+  const manifest = normalizePersistedShareManifest(record.manifest);
+  const totals = normalizePersistedShareTotals(record.totals, "server");
+  const topActionTriggers = normalizePersistedActionTriggerSummaries(record.topActionTriggers);
+  const privacy = normalizePersistedSharePrivacySummary(record.privacy);
+  if (manifest === null || totals === null || topActionTriggers === null || privacy === null) {
+    return null;
+  }
+
+  if (record.source === "client" || record.source === "client-unverified") {
+    if (record.analyzed !== undefined && typeof record.analyzed !== "boolean") {
+      return null;
+    }
+
+    return {
+      schemaVersion: 2,
+      source: "client-unverified",
+      analyzed: false,
+      encrypted: record.encrypted,
+      trust: {
+        archiveEnvelope: "server-inspected",
+        privateContent: "client-claim-unverified"
+      },
+      manifest,
+      totals:
+        totals === undefined
+          ? undefined
+          : {
+              events: totals.events,
+              ...(totals.blobs === undefined ? {} : { blobs: totals.blobs }),
+              durationMs: totals.durationMs
+            },
+      clientClaim: {
+        totals:
+          totals === undefined
+            ? undefined
+            : {
+                ...(totals.privacyViolations === undefined
+                  ? {}
+                  : { privacyViolations: totals.privacyViolations }),
+                ...(totals.errors === undefined ? {} : { errors: totals.errors }),
+                ...(totals.requests === undefined ? {} : { requests: totals.requests }),
+                ...(totals.actions === undefined ? {} : { actions: totals.actions })
+              },
+        topActionTriggers,
+        privacy
+      },
+      analysisError:
+        "Legacy client privacy fields were not archive-digest-bound and remain unverified claims."
+    };
+  }
+
+  // Older server summaries predate independent scan coverage and may have promoted an embedded
+  // archive claim. They cannot be upgraded into a current server attestation.
+  if (record.source === "server" && record.analyzed === true) {
+    return null;
+  }
+
+  return null;
+}
+
+function normalizePersistedShareManifest(value: unknown): ShareSummary["manifest"] | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  const record = readPersistedObject(value);
+  const mode = exportManifestSchema.shape.mode.safeParse(record?.mode);
+  const chunkCodec = exportManifestSchema.shape.chunkCodec.safeParse(record?.chunkCodec);
+  const recordedAt = exportManifestSchema.shape.createdAt.safeParse(record?.recordedAt);
+  if (!mode.success || !chunkCodec.success || !recordedAt.success) {
+    return null;
+  }
+
   return {
-    id: record.id,
-    createdAt: record.createdAt,
-    expiresAt: resolveShareExpiresAt(record),
-    revokedAt: record.revokedAt,
-    status: resolveShareStatus(record, Date.now()),
-    fileName: record.fileName,
-    sizeBytes: record.sizeBytes,
-    checksumSha256: record.checksumSha256,
-    shareUrl: record.shareUrl,
-    summary: record.summary
+    mode: mode.data,
+    chunkCodec: chunkCodec.data,
+    recordedAt: recordedAt.data
+  };
+}
+
+function normalizePersistedShareTotals(
+  value: unknown,
+  kind: "server" | "envelope"
+): ShareSummary["totals"] | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  const record = readPersistedObject(value);
+  if (!record) {
+    return null;
+  }
+  const events = readPersistedNonNegativeInteger(
+    record.events,
+    SHARE_ARCHIVE_RESOURCE_LIMITS.maxEventCount
+  );
+  const durationMs = readPersistedNonNegativeInteger(record.durationMs, Number.MAX_SAFE_INTEGER);
+  const blobs = readOptionalPersistedNonNegativeInteger(
+    record,
+    "blobs",
+    SHARE_ARCHIVE_RESOURCE_LIMITS.maxEntryCount
+  );
+  if (events === null || durationMs === null || blobs === null) {
+    return null;
+  }
+
+  const privacyViolations = readOptionalPersistedSummaryCount(record, "privacyViolations");
+  const errors = readOptionalPersistedSummaryCount(record, "errors");
+  const requests = readOptionalPersistedSummaryCount(record, "requests");
+  const actions = readOptionalPersistedSummaryCount(record, "actions");
+  if (
+    privacyViolations === null ||
+    errors === null ||
+    requests === null ||
+    actions === null ||
+    (kind === "envelope" &&
+      (privacyViolations !== undefined ||
+        errors !== undefined ||
+        requests !== undefined ||
+        actions !== undefined))
+  ) {
+    return null;
+  }
+
+  return {
+    events,
+    ...(blobs === undefined ? {} : { blobs }),
+    ...(kind === "server"
+      ? {
+          ...(privacyViolations === undefined ? {} : { privacyViolations }),
+          ...(errors === undefined ? {} : { errors }),
+          ...(requests === undefined ? {} : { requests }),
+          ...(actions === undefined ? {} : { actions })
+        }
+      : {}),
+    durationMs
+  };
+}
+
+function normalizePersistedClientClaim(value: unknown): ShareSummary["clientClaim"] | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  const record = readPersistedObject(value);
+  if (!record) {
+    return null;
+  }
+
+  let totals: NonNullable<ShareSummary["clientClaim"]>["totals"];
+  if (record.totals !== undefined) {
+    const totalsRecord = readPersistedObject(record.totals);
+    if (!totalsRecord) {
+      return null;
+    }
+    const privacyViolations = readOptionalPersistedSummaryCount(totalsRecord, "privacyViolations");
+    const errors = readOptionalPersistedSummaryCount(totalsRecord, "errors");
+    const requests = readOptionalPersistedSummaryCount(totalsRecord, "requests");
+    const actions = readOptionalPersistedSummaryCount(totalsRecord, "actions");
+    if (privacyViolations === null || errors === null || requests === null || actions === null) {
+      return null;
+    }
+    totals = {
+      ...(privacyViolations === undefined ? {} : { privacyViolations }),
+      ...(errors === undefined ? {} : { errors }),
+      ...(requests === undefined ? {} : { requests }),
+      ...(actions === undefined ? {} : { actions })
+    };
+  }
+
+  const topActionTriggers = normalizePersistedActionTriggerSummaries(record.topActionTriggers);
+  const privacy = normalizePersistedSharePrivacySummary(record.privacy);
+  if (topActionTriggers === null || privacy === null) {
+    return null;
+  }
+
+  return { totals, topActionTriggers, privacy };
+}
+
+function normalizePersistedSharePrivacySummary(value: unknown): ShareSummary["privacy"] | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  const record = readPersistedObject(value);
+  const redaction = readPersistedObject(record?.redaction);
+  const detected = readPersistedObject(record?.detected);
+  const scanner = readPersistedObject(record?.scanner);
+  if (!record || !redaction || !detected || !scanner) {
+    return null;
+  }
+
+  const headerRuleCount = readPersistedSummaryCount(redaction.headerRuleCount);
+  const cookieRuleCount = readPersistedSummaryCount(redaction.cookieRuleCount);
+  const bodyPatternCount = readPersistedSummaryCount(redaction.bodyPatternCount);
+  const blockedSelectorCount = readPersistedSummaryCount(redaction.blockedSelectorCount);
+  const redactedMarkers = readPersistedSummaryCount(detected.redactedMarkers);
+  const hashedSensitiveValues = readPersistedSummaryCount(detected.hashedSensitiveValues);
+  const sensitiveKeyMentions = readPersistedSummaryCount(detected.sensitiveKeyMentions);
+  const findingCount = readPersistedSummaryCount(scanner.findingCount);
+  const coverage = normalizePersistedPrivacyScanCoverage(scanner.coverage);
+  if (
+    typeof redaction.hashSensitiveValues !== "boolean" ||
+    headerRuleCount === null ||
+    cookieRuleCount === null ||
+    bodyPatternCount === null ||
+    blockedSelectorCount === null ||
+    redactedMarkers === null ||
+    hashedSensitiveValues === null ||
+    sensitiveKeyMentions === null ||
+    typeof scanner.preEncryption !== "boolean" ||
+    (scanner.status !== "passed" && scanner.status !== "blocked" && scanner.status !== "unknown") ||
+    findingCount === null ||
+    coverage === null
+  ) {
+    return null;
+  }
+
+  const categories = normalizePersistedCategorySummaries(record.categories);
+  if (categories === null) {
+    return null;
+  }
+
+  return {
+    redaction: {
+      hashSensitiveValues: redaction.hashSensitiveValues,
+      headerRuleCount,
+      cookieRuleCount,
+      bodyPatternCount,
+      blockedSelectorCount
+    },
+    detected: {
+      redactedMarkers,
+      hashedSensitiveValues,
+      sensitiveKeyMentions
+    },
+    scanner: {
+      preEncryption: scanner.preEncryption,
+      status: scanner.status,
+      findingCount,
+      ...(coverage === undefined ? {} : { coverage })
+    },
+    categories
+  };
+}
+
+function normalizePersistedPrivacyScanCoverage(
+  value: unknown
+): SharePrivacySummary["scanner"]["coverage"] | null {
+  if (value === undefined) {
+    return undefined;
+  }
+
+  const record = readPersistedObject(value);
+  if (!record || typeof record.complete !== "boolean") {
+    return null;
+  }
+  const scannedEventCount = readPersistedSummaryCount(record.scannedEventCount);
+  const scannedBlobCount = readPersistedSummaryCount(record.scannedBlobCount);
+  const opaqueBlobCount = readPersistedSummaryCount(record.opaqueBlobCount);
+  const inspectedBytes = readPersistedSummaryCount(record.inspectedBytes);
+  const expectedEventCount = readPersistedSummaryCount(record.expectedEventCount);
+  const expectedBlobCount = readPersistedSummaryCount(record.expectedBlobCount);
+  const incompleteReason = record.incompleteReason;
+  if (
+    scannedEventCount === null ||
+    scannedBlobCount === null ||
+    opaqueBlobCount === null ||
+    inspectedBytes === null ||
+    expectedEventCount === null ||
+    expectedBlobCount === null ||
+    (incompleteReason !== undefined &&
+      incompleteReason !== "deadline" &&
+      incompleteReason !== "decode-failed" &&
+      incompleteReason !== "finding-limit" &&
+      incompleteReason !== "target-byte-limit" &&
+      incompleteReason !== "total-byte-limit" &&
+      incompleteReason !== "opaque-content" &&
+      incompleteReason !== "coverage-mismatch")
+  ) {
+    return null;
+  }
+
+  if (
+    (record.complete && incompleteReason !== undefined) ||
+    (!record.complete && !incompleteReason)
+  ) {
+    return null;
+  }
+
+  return {
+    complete: record.complete,
+    scannedEventCount,
+    scannedBlobCount,
+    opaqueBlobCount,
+    inspectedBytes,
+    expectedEventCount,
+    expectedBlobCount,
+    ...(incompleteReason === undefined ? {} : { incompleteReason })
+  };
+}
+
+function normalizePersistedActionTriggerSummaries(
+  value: unknown
+): ShareSummary["topActionTriggers"] | null {
+  if (value === undefined) {
+    return undefined;
+  }
+  if (!Array.isArray(value) || value.length > 10) {
+    return null;
+  }
+
+  const summaries: NonNullable<ShareSummary["topActionTriggers"]> = [];
+  for (const entry of value) {
+    const record = readPersistedObject(entry);
+    const triggerType = readPersistedPublicText(record?.triggerType, 64);
+    const count = readPersistedSummaryCount(record?.count);
+    const errorRate = record?.errorRate;
+    if (
+      triggerType === null ||
+      count === null ||
+      typeof errorRate !== "number" ||
+      !Number.isFinite(errorRate) ||
+      errorRate < 0 ||
+      errorRate > 1
+    ) {
+      return null;
+    }
+    summaries.push({ triggerType, count, errorRate });
+  }
+  return summaries;
+}
+
+function normalizePersistedCategorySummaries(
+  value: unknown
+): NonNullable<ShareSummary["privacy"]>["categories"] | null {
+  if (value === undefined) {
+    return undefined;
+  }
+  if (!Array.isArray(value) || value.length > 24) {
+    return null;
+  }
+
+  const summaries: NonNullable<NonNullable<ShareSummary["privacy"]>["categories"]> = [];
+  for (const entry of value) {
+    const record = readPersistedObject(entry);
+    const category = readPersistedPublicText(record?.category, 32);
+    const events = readPersistedSummaryCount(record?.events);
+    const low = readPersistedSummaryCount(record?.low);
+    const medium = readPersistedSummaryCount(record?.medium);
+    const high = readPersistedSummaryCount(record?.high);
+    const redacted = readPersistedSummaryCount(record?.redacted);
+    const unredacted = readPersistedSummaryCount(record?.unredacted);
+    if (
+      category === null ||
+      events === null ||
+      low === null ||
+      medium === null ||
+      high === null ||
+      redacted === null ||
+      unredacted === null
+    ) {
+      return null;
+    }
+    summaries.push({ category, events, low, medium, high, redacted, unredacted });
+  }
+  return summaries;
+}
+
+function readPersistedObject(value: unknown): Record<string, unknown> | null {
+  return value && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function readPersistedNonNegativeInteger(value: unknown, maximum: number): number | null {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= maximum
+    ? value
+    : null;
+}
+
+function readOptionalPersistedNonNegativeInteger(
+  record: Record<string, unknown> | null,
+  key: string,
+  maximum: number
+): number | undefined | null {
+  if (!record || !(key in record)) {
+    return undefined;
+  }
+  return readPersistedNonNegativeInteger(record[key], maximum);
+}
+
+function readPersistedSummaryCount(value: unknown): number | null {
+  return readPersistedNonNegativeInteger(
+    value,
+    SHARE_ARCHIVE_RESOURCE_LIMITS.maxTotalUncompressedBytes
+  );
+}
+
+function readOptionalPersistedSummaryCount(
+  record: Record<string, unknown>,
+  key: string
+): number | undefined | null {
+  return key in record ? readPersistedSummaryCount(record[key]) : undefined;
+}
+
+function readPersistedPublicText(value: unknown, maximumLength: number): string | null {
+  if (typeof value !== "string" || value.length === 0 || value.length > maximumLength) {
+    return null;
+  }
+  return redactText(value, maximumLength);
+}
+
+function isOptionalPersistedAnalysisError(value: unknown): boolean {
+  return value === undefined || (typeof value === "string" && value.length <= 240);
+}
+
+function unavailablePersistedShareSummary(encrypted: boolean): ShareSummary {
+  return {
+    schemaVersion: 2,
+    source: "unavailable",
+    analyzed: false,
+    encrypted,
+    trust: {
+      archiveEnvelope: "server-inspected",
+      privateContent: "not-analyzed"
+    },
+    analysisError: "Stored share analysis is unavailable or uses an unsupported legacy schema."
   };
 }
 
@@ -1300,60 +4204,315 @@ function resolveShareTtlMs(request: IncomingMessage): number {
   return Math.min(SHARE_MAX_TTL_MS, Math.max(1_000, requestedTtl));
 }
 
-async function pruneExpiredShareRecords(now: number): Promise<void> {
-  const records = await loadAllRecords();
-  const retentionMs = Math.max(0, SHARE_RETAIN_EXPIRED_MS);
+function parseShareListPagination(requestUrl: URL): ShareListPagination | null {
+  if (
+    requestUrl.searchParams.getAll("cursor").length > 1 ||
+    requestUrl.searchParams.getAll("offset").length > 1 ||
+    requestUrl.searchParams.getAll("limit").length > 1
+  ) {
+    return null;
+  }
+
+  const limit = parseBoundedQueryInteger(
+    requestUrl.searchParams.get("limit"),
+    DEFAULT_SHARE_LIST_LIMIT,
+    1,
+    MAX_SHARE_LIST_LIMIT
+  );
+  if (limit === null) {
+    return null;
+  }
+
+  const rawCursor = requestUrl.searchParams.get("cursor");
+  if (rawCursor !== null) {
+    if (requestUrl.searchParams.has("offset")) {
+      return null;
+    }
+    const cursor = decodeShareListCursor(rawCursor);
+    return cursor ? { mode: "cursor", cursor, limit } : null;
+  }
+
+  const offset = parseBoundedQueryInteger(
+    requestUrl.searchParams.get("offset"),
+    0,
+    0,
+    MAX_SHARE_RECORD_FILES
+  );
+  return offset === null ? null : { mode: "offset", offset, limit };
+}
+
+function encodeShareListCursor(cursor: ShareListCursor): string {
+  return Buffer.from(
+    JSON.stringify({ version: 1, createdAt: cursor.createdAt, id: cursor.id }),
+    "utf8"
+  ).toString("base64url");
+}
+
+function decodeShareListCursor(raw: string): ShareListCursor | null {
+  if (
+    raw.length === 0 ||
+    raw.length > MAX_SHARE_LIST_CURSOR_BYTES * 2 ||
+    !/^[A-Za-z0-9_-]+$/.test(raw)
+  ) {
+    return null;
+  }
+
+  try {
+    const bytes = Buffer.from(raw, "base64url");
+    if (
+      bytes.byteLength === 0 ||
+      bytes.byteLength > MAX_SHARE_LIST_CURSOR_BYTES ||
+      bytes.toString("base64url") !== raw
+    ) {
+      return null;
+    }
+
+    const cursor = asRecord(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes)));
+    const createdAt = readSafeNonNegativeInteger(cursor.createdAt);
+    if (
+      cursor.version !== 1 ||
+      createdAt === null ||
+      typeof cursor.id !== "string" ||
+      !SHARE_ID_PATTERN.test(cursor.id)
+    ) {
+      return null;
+    }
+
+    return { createdAt, id: cursor.id };
+  } catch {
+    return null;
+  }
+}
+
+function parseBoundedQueryInteger(
+  raw: string | null,
+  fallback: number,
+  minimum: number,
+  maximum: number
+): number | null {
+  if (raw === null) {
+    return fallback;
+  }
+  if (!/^\d+$/.test(raw)) {
+    return null;
+  }
+  const parsed = Number(raw);
+  return Number.isSafeInteger(parsed) && parsed >= minimum && parsed <= maximum ? parsed : null;
+}
+
+async function pruneExpiredShareRecords(now: number): Promise<void> {
+  while ((shareRecordExpiryOrder[0]?.retentionDeadline ?? Number.POSITIVE_INFINITY) <= now) {
+    const expired = shareRecordExpiryOrder[0];
+    if (!expired) {
+      return;
+    }
+    await removeStoredShare(expired.id);
+  }
+}
+
+async function writeShareAuditEvent(
+  request: IncomingMessage,
+  input: {
+    action: ShareAuditAction;
+    outcome: ShareAuditOutcome;
+    shareId?: string;
+    details?: Record<string, number | string | boolean>;
+  }
+): Promise<void> {
+  const event = {
+    schemaVersion: 2,
+    timestamp: new Date().toISOString(),
+    action: input.action,
+    outcome: input.outcome,
+    shareId: input.shareId,
+    clientHashAlgorithm: SHARE_AUDIT_CLIENT_HASH_ALGORITHM,
+    clientHash: hashAuditValue(resolveClientKey(request)),
+    details: input.details
+  };
+  const line = `${JSON.stringify(event)}\n`;
+  const result = await auditWriter.write(line);
+
+  if (result.status === "written") {
+    if (result.recovered) {
+      console.info("[share-server] audit sink recovered");
+    }
+    return;
+  }
+
+  reportAuditWriteDegradation(result, input.action, input.shareId);
+}
+
+async function appendShareAuditLine(line: string, signal: AbortSignal): Promise<void> {
+  const lineBytes = Buffer.byteLength(line, "utf8");
+  if (lineBytes > MAX_SHARE_AUDIT_LOG_BYTES) {
+    throw new Error("Share audit event exceeds the configured log size ceiling.");
+  }
+
+  throwIfAuditWriteAborted(signal);
+  let currentLog = await openAuditLogForAppend();
+  try {
+    if (
+      currentLog.stat.size > 0n &&
+      currentLog.stat.size + BigInt(lineBytes) > BigInt(MAX_SHARE_AUDIT_LOG_BYTES)
+    ) {
+      await currentLog.handle?.close();
+      currentLog = { handle: null, stat: currentLog.stat };
+      throwIfAuditWriteAborted(signal);
+      await assertStoragePathIdentity(
+        AUDIT_DIR,
+        getManagedStorageDirectoryIdentity(AUDIT_DIR),
+        "directory"
+      );
+      await rm(SHARE_AUDIT_ROTATED_LOG_PATH, { force: true });
+      throwIfAuditWriteAborted(signal);
+      try {
+        await rename(SHARE_AUDIT_LOG_PATH, SHARE_AUDIT_ROTATED_LOG_PATH);
+      } catch (error) {
+        if (!isFileNotFoundError(error)) {
+          throw error;
+        }
+      }
+      await hardenStorageFileIfPresent(SHARE_AUDIT_ROTATED_LOG_PATH);
+      throwIfAuditWriteAborted(signal);
+      currentLog = await openAuditLogForAppend();
+    }
+
+    if (!currentLog.handle) {
+      throw new Error("Share audit log handle is unavailable.");
+    }
+    throwIfAuditWriteAborted(signal);
+    await currentLog.handle.appendFile(line, { encoding: "utf8" });
+    await assertStoragePathIdentity(SHARE_AUDIT_LOG_PATH, currentLog.stat, "file");
+  } finally {
+    await currentLog.handle?.close().catch(() => undefined);
+  }
+}
+
+async function openAuditLogForAppend(): Promise<{
+  handle: FileHandle | null;
+  stat: BigIntStats;
+}> {
+  let handle: FileHandle | null = null;
+  try {
+    const auditDirectoryIdentity = getManagedStorageDirectoryIdentity(AUDIT_DIR);
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+    handle = await open(
+      SHARE_AUDIT_LOG_PATH,
+      fsConstants.O_WRONLY | fsConstants.O_APPEND | fsConstants.O_CREAT | fsConstants.O_NOFOLLOW,
+      0o600
+    );
+    const openedStat = await handle.stat({ bigint: true });
+    if (!openedStat.isFile() || openedStat.nlink !== 1n) {
+      throw unsafeStoragePathError(SHARE_AUDIT_LOG_PATH, "expected a regular audit log");
+    }
+
+    if (process.platform !== "win32") {
+      await handle.chmod(0o600);
+    }
+    const hardenedStat = await handle.stat({ bigint: true });
+    if (
+      hardenedStat.nlink !== 1n ||
+      (process.platform !== "win32" && (hardenedStat.mode & 0o777n) !== 0o600n)
+    ) {
+      throw unsafeStoragePathError(SHARE_AUDIT_LOG_PATH, "could not enforce mode 0600");
+    }
+    await assertStoragePathIdentity(SHARE_AUDIT_LOG_PATH, hardenedStat, "file");
+    await assertStoragePathIdentity(AUDIT_DIR, auditDirectoryIdentity, "directory");
+    return { handle, stat: hardenedStat };
+  } catch (error) {
+    await handle?.close().catch(() => undefined);
+    if (error instanceof UnsafeStoragePathError) {
+      throw error;
+    }
+    throw unsafeStoragePathError(
+      SHARE_AUDIT_LOG_PATH,
+      "refusing to follow or replace this path",
+      error
+    );
+  }
+}
+
+function reportAuditWriteDegradation(
+  result: Exclude<AuditWriteResult, { status: "written" }>,
+  action: ShareAuditAction,
+  shareId?: string
+): void {
+  const now = Date.now();
+  if (now - lastAuditDegradationWarningAt < AUDIT_DEGRADATION_WARNING_INTERVAL_MS) {
+    suppressedAuditDegradationWarnings += 1;
+    return;
+  }
 
-  await Promise.all(
-    records.map(async (record) => {
-      const retentionDeadline = resolveShareExpiresAt(record) + retentionMs;
+  const suppressedWarnings = suppressedAuditDegradationWarnings;
+  lastAuditDegradationWarningAt = now;
+  suppressedAuditDegradationWarnings = 0;
+  const details: Record<string, number | string | undefined> = {
+    action,
+    shareId,
+    reason: result.reason,
+    suppressedWarnings: suppressedWarnings || undefined
+  };
 
-      if (retentionDeadline > now) {
-        return;
-      }
+  if (result.status === "failed" && result.error !== undefined) {
+    details.error = redactText(
+      result.error instanceof Error ? result.error.message : String(result.error),
+      240
+    );
+  }
 
-      await Promise.all([
-        rm(recordPathForId(record.id), { force: true }),
-        rm(archivePathForId(record.id), { force: true })
-      ]);
-    })
+  console.warn(
+    result.status === "failed"
+      ? "[share-server] audit append failed"
+      : "[share-server] audit event dropped",
+    details
   );
 }
 
-async function writeShareAuditEvent(
-  request: IncomingMessage,
-  input: {
-    action: ShareAuditAction;
-    outcome: ShareAuditOutcome;
-    shareId?: string;
-    details?: Record<string, number | string | boolean>;
+function throwIfAuditWriteAborted(signal: AbortSignal): void {
+  if (!signal.aborted) {
+    return;
   }
-): Promise<void> {
-  const event = {
-    schemaVersion: 1,
-    timestamp: new Date().toISOString(),
-    action: input.action,
-    outcome: input.outcome,
-    shareId: input.shareId,
-    clientHash: hashAuditValue(resolveClientKey(request)),
-    details: input.details
-  };
 
-  await appendFile(SHARE_AUDIT_LOG_PATH, `${JSON.stringify(event)}\n`, "utf8");
+  throw signal.reason instanceof Error ? signal.reason : new Error("Share audit append aborted.");
+}
+
+function isFileNotFoundError(error: unknown): boolean {
+  return hasFileSystemErrorCode(error, "ENOENT");
+}
+
+function hasFileSystemErrorCode(error: unknown, code: string): boolean {
+  return (
+    error instanceof Error && "code" in error && (error as NodeJS.ErrnoException).code === code
+  );
 }
 
 function hashAuditValue(value: string): string {
-  return createHash("sha256").update(`webblackbox-share-audit:${value}`).digest("hex");
+  if (!shareAuditHmacSecret) {
+    throw new Error("Share audit HMAC key is not initialized.");
+  }
+
+  return createHmac("sha256", shareAuditHmacSecret)
+    .update(SHARE_AUDIT_CLIENT_HASH_DOMAIN)
+    .update(value)
+    .digest("hex");
 }
 
 function recordPathForId(id: string): string {
+  assertSafeShareId(id);
   return join(RECORDS_DIR, `${id}.json`);
 }
 
 function archivePathForId(id: string): string {
+  assertSafeShareId(id);
   return join(ARCHIVES_DIR, `${id}.webblackbox`);
 }
 
+function assertSafeShareId(id: string): void {
+  if (!SHARE_ID_PATTERN.test(id)) {
+    throw new Error("Invalid share id.");
+  }
+}
+
 function parsePort(rawValue: string | undefined): number {
   const parsed = Number(rawValue);
 
@@ -1373,6 +4532,84 @@ function parseBindHost(rawValue: string | undefined): string {
   return trimmed.length > 0 ? trimmed : DEFAULT_HOST;
 }
 
+function resolvePublicOrigin(rawValue: string | undefined, bindHost: string, port: number): string {
+  const configured = rawValue?.trim();
+
+  if (!configured) {
+    if (!isLoopbackHost(bindHost)) {
+      throw new Error(
+        "WEBBLACKBOX_SHARE_PUBLIC_ORIGIN is required when the share server binds to a non-loopback host."
+      );
+    }
+
+    return new URL(`http://${formatHostForUrl(bindHost)}:${port}`).origin;
+  }
+
+  let parsed: URL;
+  try {
+    parsed = new URL(configured);
+  } catch {
+    throw new Error("WEBBLACKBOX_SHARE_PUBLIC_ORIGIN must be a valid absolute URL.");
+  }
+
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new Error("WEBBLACKBOX_SHARE_PUBLIC_ORIGIN must use HTTP or HTTPS.");
+  }
+
+  if (
+    parsed.username ||
+    parsed.password ||
+    parsed.pathname !== "/" ||
+    parsed.search ||
+    parsed.hash
+  ) {
+    throw new Error(
+      "WEBBLACKBOX_SHARE_PUBLIC_ORIGIN must contain only a scheme, host, and optional port."
+    );
+  }
+
+  if (parsed.protocol !== "https:" && !isLoopbackHost(parsed.hostname)) {
+    throw new Error("WEBBLACKBOX_SHARE_PUBLIC_ORIGIN must use HTTPS for non-loopback hosts.");
+  }
+
+  return parsed.origin;
+}
+
+function isLoopbackHost(host: string): boolean {
+  const normalized = host
+    .trim()
+    .toLowerCase()
+    .replace(/^\[|\]$/g, "");
+  return (
+    normalized === "localhost" ||
+    normalized === "::1" ||
+    (isIP(normalized) === 4 && normalized.startsWith("127."))
+  );
+}
+
+function formatHostForUrl(host: string): string {
+  const normalized = host.trim().replace(/^\[|\]$/g, "");
+  return normalized.includes(":") ? `[${normalized}]` : normalized;
+}
+
+function validateAuthorizationConfiguration(bindHost: string, publicOrigin: string): void {
+  if (!ALLOW_UNAUTHENTICATED_LOOPBACK) {
+    return;
+  }
+
+  if (!isLoopbackHost(bindHost) || !isLoopbackHost(new URL(publicOrigin).hostname)) {
+    throw new Error(
+      "WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK is development-only and requires both a loopback bind host and loopback public origin."
+    );
+  }
+
+  if (TRUST_X_FORWARDED_FOR || TRUSTED_PROXY_ADDRESSES.size > 0) {
+    throw new Error(
+      "WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK must not be enabled with proxy or forwarded-client configuration."
+    );
+  }
+}
+
 function normalizeAllowedOrigin(rawValue: string | undefined): string {
   const resolved = (rawValue ?? "same-origin").trim();
 
@@ -1383,25 +4620,164 @@ function normalizeAllowedOrigin(rawValue: string | undefined): string {
   return resolved.toLowerCase() === "same-origin" ? "same-origin" : resolved;
 }
 
-async function readRequestBody(request: IncomingMessage, maxBytes: number): Promise<Uint8Array> {
-  const chunks: Buffer[] = [];
+async function readRequestBodyToTempFile(
+  request: IncomingMessage,
+  upload: PendingShareUpload,
+  maxBytes: number
+): Promise<{ bytes: Uint8Array; checksumSha256: string }> {
+  const declaredBytes = readDeclaredContentLength(request);
+  if (declaredBytes !== null && declaredBytes > maxBytes) {
+    throw new PayloadTooLargeError(maxBytes);
+  }
+
+  await assertStoragePathIdentity(ARCHIVES_DIR, upload.archiveDirectoryIdentity, "directory");
+  const handle = await open(
+    upload.tempPath,
+    fsConstants.O_RDWR | fsConstants.O_CREAT | fsConstants.O_EXCL | fsConstants.O_NOFOLLOW,
+    0o600
+  );
+  const checksum = createHash("sha256");
   let totalBytes = 0;
+  let storedBytes: Buffer | null = null;
+  let idleTimer: ReturnType<typeof setTimeout> | undefined;
+  let timeoutError: UploadTimeoutError | null = null;
+  const expire = (kind: "idle" | "total") => {
+    timeoutError ??= new UploadTimeoutError(kind);
+    request.destroy(timeoutError);
+  };
+  const armIdleTimer = () => {
+    if (idleTimer !== undefined) {
+      clearTimeout(idleTimer);
+    }
+    idleTimer = setTimeout(() => expire("idle"), UPLOAD_IDLE_TIMEOUT_MS);
+  };
+  const totalTimer = setTimeout(() => expire("total"), UPLOAD_TOTAL_TIMEOUT_MS);
+  const clearUploadTimers = () => {
+    clearTimeout(totalTimer);
+    if (idleTimer !== undefined) {
+      clearTimeout(idleTimer);
+      idleTimer = undefined;
+    }
+  };
+  armIdleTimer();
 
-  for await (const chunk of request) {
-    if (!(chunk instanceof Buffer)) {
-      continue;
+  try {
+    let temporaryStat = await handle.stat({ bigint: true });
+    assertPrivateArchiveFileStat(upload.tempPath, temporaryStat, 0n, false);
+    upload.tempIdentity = temporaryStat;
+    if (process.platform !== "win32") {
+      await handle.chmod(0o600);
+      temporaryStat = await handle.stat({ bigint: true });
+      assertPrivateArchiveFileStat(upload.tempPath, temporaryStat, 0n);
+      upload.tempIdentity = temporaryStat;
+    }
+    await assertPrivateArchiveFilePathIdentity(upload.tempPath, temporaryStat);
+    await assertStoragePathIdentity(ARCHIVES_DIR, upload.archiveDirectoryIdentity, "directory");
+
+    for await (const chunk of request) {
+      armIdleTimer();
+      const bytes = chunk instanceof Buffer ? chunk : Buffer.from(chunk as Uint8Array);
+
+      const nextTotalBytes = totalBytes + bytes.byteLength;
+      if (nextTotalBytes > maxBytes) {
+        throw new PayloadTooLargeError(maxBytes);
+      }
+
+      await writeFileHandleFully(handle, bytes);
+      checksum.update(bytes);
+      totalBytes = nextTotalBytes;
+    }
+
+    clearUploadTimers();
+    if (timeoutError || request.aborted) {
+      throw timeoutError ?? new Error("Upload request was aborted.");
+    }
+
+    await handle.sync();
+    let storedStat = await handle.stat({ bigint: true });
+    assertPrivateArchiveFileStat(upload.tempPath, storedStat, BigInt(totalBytes));
+    upload.tempIdentity = storedStat;
+    await assertPrivateArchiveFilePathIdentity(upload.tempPath, storedStat);
+    await assertStoragePathIdentity(ARCHIVES_DIR, upload.archiveDirectoryIdentity, "directory");
+    storedBytes = await readFileHandleExactly(handle, totalBytes);
+    const verifiedStat = await handle.stat({ bigint: true });
+    assertPrivateArchiveFileStat(upload.tempPath, verifiedStat, BigInt(totalBytes));
+    if (!isSameFileSystemObject(storedStat, verifiedStat)) {
+      throw unsafeStoragePathError(upload.tempPath, "changed while its contents were verified");
+    }
+    storedStat = verifiedStat;
+    upload.tempIdentity = storedStat;
+    await assertPrivateArchiveFilePathIdentity(upload.tempPath, storedStat);
+    await assertStoragePathIdentity(ARCHIVES_DIR, upload.archiveDirectoryIdentity, "directory");
+  } catch (error) {
+    throw timeoutError ?? error;
+  } finally {
+    clearUploadTimers();
+    await handle.close();
+  }
+
+  if (!storedBytes) {
+    throw new Error("Upload temporary file was not read.");
+  }
+  const checksumSha256 = checksum.digest("hex");
+  const storedChecksumSha256 = createHash("sha256").update(storedBytes).digest("hex");
+  if (storedChecksumSha256 !== checksumSha256) {
+    throw new Error("Upload temporary file contents changed unexpectedly.");
+  }
+
+  return {
+    bytes: storedBytes,
+    checksumSha256
+  };
+}
+
+async function readFileHandleExactly(
+  handle: Awaited<ReturnType<typeof open>>,
+  expectedBytes: number
+): Promise<Buffer> {
+  const output = Buffer.allocUnsafe(expectedBytes);
+  let offset = 0;
+
+  while (offset < expectedBytes) {
+    const { bytesRead } = await handle.read(output, offset, expectedBytes - offset, offset);
+    if (bytesRead === 0) {
+      throw new Error("Upload temporary file ended before its recorded size.");
     }
+    offset += bytesRead;
+  }
+
+  const probe = Buffer.allocUnsafe(1);
+  const { bytesRead: trailingBytes } = await handle.read(probe, 0, 1, expectedBytes);
+  if (trailingBytes > 0) {
+    throw new PayloadTooLargeError(MAX_UPLOAD_BYTES);
+  }
+
+  return output;
+}
+
+async function writeFileHandleFully(
+  handle: Awaited<ReturnType<typeof open>>,
+  bytes: Buffer
+): Promise<void> {
+  let offset = 0;
 
-    totalBytes += chunk.byteLength;
-    if (totalBytes > maxBytes) {
-      throw new PayloadTooLargeError(maxBytes);
+  while (offset < bytes.byteLength) {
+    const { bytesWritten } = await handle.write(bytes, offset, bytes.byteLength - offset, null);
+    if (bytesWritten <= 0) {
+      throw new Error("Upload temporary file write made no progress.");
     }
+    offset += bytesWritten;
+  }
+}
 
-    chunks.push(chunk);
+function readDeclaredContentLength(request: IncomingMessage): number | null {
+  const raw = request.headers["content-length"];
+  if (typeof raw !== "string" || !/^\d+$/.test(raw)) {
+    return null;
   }
 
-  const merged = Buffer.concat(chunks);
-  return new Uint8Array(merged.buffer, merged.byteOffset, merged.byteLength);
+  const parsed = Number(raw);
+  return Number.isSafeInteger(parsed) && parsed >= 0 ? parsed : null;
 }
 
 class PayloadTooLargeError extends Error {
@@ -1410,6 +4786,17 @@ class PayloadTooLargeError extends Error {
   }
 }
 
+class UploadTimeoutError extends Error {
+  public constructor(public readonly kind: "idle" | "total") {
+    super(`Upload ${kind} timeout exceeded.`);
+  }
+}
+
+function closeRequestAfterResponse(request: IncomingMessage, response: ServerResponse): void {
+  response.setHeader("connection", "close");
+  response.once("finish", () => request.destroy());
+}
+
 class ShareSummaryHeaderError extends Error {}
 
 function asRecord(value: unknown): Record<string, unknown> {
@@ -1426,6 +4813,20 @@ function readString(value: unknown, fallback: string, maxLength: number): string
   return redactText(value, maxLength);
 }
 
+function readArchiveSha256(value: unknown): string {
+  if (typeof value !== "string" || !/^[a-f0-9]{64}$/i.test(value)) {
+    throw new ShareSummaryHeaderError(
+      "Share summary archiveSha256 must be a 64-character SHA-256 hex digest."
+    );
+  }
+
+  return value.toLowerCase();
+}
+
+function sha256HexMatches(left: string, right: string): boolean {
+  return equalsSecret(left.toLowerCase(), right.toLowerCase());
+}
+
 function readBoolean(value: unknown, fallback: boolean): boolean {
   return typeof value === "boolean" ? value : fallback;
 }
@@ -1458,37 +4859,15 @@ function readScannerStatus(value: unknown): "passed" | "blocked" | "unknown" {
   return value === "passed" || value === "blocked" || value === "unknown" ? value : "unknown";
 }
 
-function requestBaseUrl(request: IncomingMessage): string {
-  const host = request.headers.host;
-  return host && host.length > 0 ? `http://${host}` : DEFAULT_BASE_URL;
-}
-
-function requestOrigin(request: IncomingMessage, requestUrl: URL): string {
-  const forwardedProto = request.headers["x-forwarded-proto"];
-  const protocol =
-    typeof forwardedProto === "string" && forwardedProto.length > 0
-      ? forwardedProto
-      : requestUrl.protocol.replace(":", "");
-  const host = request.headers.host ?? requestUrl.host;
-  return `${protocol}://${host}`;
-}
-
 function publicArchiveFileName(id: string, rawName: string | undefined): string {
   const trimmed = rawName?.trim().toLowerCase() ?? "";
   const extension = trimmed.endsWith(".zip") ? ".zip" : ".webblackbox";
   return `webblackbox-share-${id.slice(0, 12)}${extension}`;
 }
 
-function applyCorsHeaders(
-  response: ServerResponse,
-  request: IncomingMessage,
-  requestUrl: URL
-): void {
+function applyCorsHeaders(response: ServerResponse, request: IncomingMessage): void {
   const requestOrigin = request.headers.origin;
-  const allowOrigin = resolveAllowedOrigin(
-    requestOrigin,
-    requestOriginFromUrl(request, requestUrl)
-  );
+  const allowOrigin = resolveAllowedOrigin(requestOrigin, sharePublicOrigin);
 
   if (allowOrigin) {
     response.setHeader("access-control-allow-origin", allowOrigin);
@@ -1569,6 +4948,56 @@ function resolveAllowedOrigin(
   return originHeader === SHARE_ALLOWED_ORIGIN ? SHARE_ALLOWED_ORIGIN : null;
 }
 
+function resolveShareAuditRequest(
+  request: IncomingMessage
+): { action: ShareAuditAction; shareId?: string } | null {
+  try {
+    const requestUrl = new URL(request.url ?? "/", sharePublicOrigin);
+    return resolveShareAuditContext(request.method ?? "GET", requestUrl.pathname);
+  } catch {
+    return null;
+  }
+}
+
+function resolveShareAuditContext(
+  method: string,
+  pathname: string
+): { action: ShareAuditAction; shareId?: string } | null {
+  if (method === "POST" && pathname === "/api/share/upload") {
+    return { action: "upload" };
+  }
+  if (method === "GET" && pathname === "/api/share/list") {
+    return { action: "list" };
+  }
+
+  const route =
+    /^\/(?:api\/share\/([a-zA-Z0-9_-]{1,128})\/(meta|archive|revoke)|share\/([a-zA-Z0-9_-]{1,128}))$/.exec(
+      pathname
+    );
+  if (!route) {
+    return null;
+  }
+
+  const shareId = route[1] ?? route[3];
+  const routeKind = route[2] ?? "page";
+  if (!shareId) {
+    return null;
+  }
+  if (method === "GET" && routeKind === "meta") {
+    return { action: "metadata", shareId };
+  }
+  if (method === "GET" && routeKind === "archive") {
+    return { action: "download", shareId };
+  }
+  if (method === "GET" && routeKind === "page") {
+    return { action: "page", shareId };
+  }
+  if (method === "POST" && routeKind === "revoke") {
+    return { action: "revoke", shareId };
+  }
+  return null;
+}
+
 function resolveRequiredShareScope(method: string, pathname: string): ShareApiScope | null {
   if (method === "POST" && pathname === "/api/share/upload") {
     return "upload";
@@ -1578,19 +5007,19 @@ function resolveRequiredShareScope(method: string, pathname: string): ShareApiSc
     return "list";
   }
 
-  if (method === "GET" && /^\/api\/share\/[a-zA-Z0-9_-]+\/meta$/.test(pathname)) {
+  if (method === "GET" && /^\/api\/share\/[a-zA-Z0-9_-]{1,128}\/meta$/.test(pathname)) {
     return "read";
   }
 
-  if (method === "GET" && /^\/api\/share\/[a-zA-Z0-9_-]+\/archive$/.test(pathname)) {
+  if (method === "GET" && /^\/api\/share\/[a-zA-Z0-9_-]{1,128}\/archive$/.test(pathname)) {
     return "read";
   }
 
-  if (method === "GET" && /^\/share\/[a-zA-Z0-9_-]+$/.test(pathname)) {
+  if (method === "GET" && /^\/share\/[a-zA-Z0-9_-]{1,128}$/.test(pathname)) {
     return "read";
   }
 
-  if (method === "POST" && /^\/api\/share\/[a-zA-Z0-9_-]+\/revoke$/.test(pathname)) {
+  if (method === "POST" && /^\/api\/share\/[a-zA-Z0-9_-]{1,128}\/revoke$/.test(pathname)) {
     return "revoke";
   }
 
@@ -1604,15 +5033,11 @@ function authorizeRequest(
   pathname: string,
   requiredScope: ShareApiScope
 ): ShareAuthorizationResult {
-  if (SHARE_API_CREDENTIALS.length === 0) {
-    return isLoopbackRequest(request)
-      ? {
-          authorized: true,
-          source: "loopback"
-        }
-      : {
-          authorized: false
-        };
+  if (ALLOW_UNAUTHENTICATED_LOOPBACK && isLoopbackRequest(request)) {
+    return {
+      authorized: true,
+      source: "unauthenticated-loopback-dev"
+    };
   }
 
   const headerToken = readAuthTokenFromRequest(request);
@@ -1656,16 +5081,16 @@ function isAuthorizedToken(token: string, requiredScope: ShareApiScope): boolean
 }
 
 function isQueryApiKeyAllowedRoute(method: string, pathname: string): boolean {
-  return method === "GET" && /^\/share\/[a-zA-Z0-9_-]+$/.test(pathname);
+  return method === "GET" && /^\/share\/[a-zA-Z0-9_-]{1,128}$/.test(pathname);
 }
 
 function extractReadShareId(pathname: string): string | null {
-  const pageMatch = /^\/share\/([a-zA-Z0-9_-]+)$/.exec(pathname);
+  const pageMatch = /^\/share\/([a-zA-Z0-9_-]{1,128})$/.exec(pathname);
   if (pageMatch?.[1]) {
     return pageMatch[1];
   }
 
-  const apiMatch = /^\/api\/share\/([a-zA-Z0-9_-]+)\/(?:meta|archive)$/.exec(pathname);
+  const apiMatch = /^\/api\/share\/([a-zA-Z0-9_-]{1,128})\/(?:meta|archive)$/.exec(pathname);
   return apiMatch?.[1] ?? null;
 }
 
@@ -1705,7 +5130,7 @@ function issueShareReadSessionCookie(response: ServerResponse, shareId: string):
 
   response.setHeader(
     "set-cookie",
-    `${SHARE_READ_SESSION_COOKIE}=${token}; HttpOnly; SameSite=Strict; Path=/; Max-Age=${maxAgeSeconds}`
+    `${SHARE_READ_SESSION_COOKIE}=${token}; HttpOnly; SameSite=Strict; Path=/; Max-Age=${maxAgeSeconds}${sharePublicOrigin.startsWith("https:") ? "; Secure" : ""}`
   );
 }
 
@@ -1750,37 +5175,62 @@ function readCookie(request: IncomingMessage, name: string): string | null {
   return null;
 }
 
-function requestOriginFromUrl(request: IncomingMessage, requestUrl: URL): string {
-  return requestOrigin(request, requestUrl);
-}
-
 function isLoopbackRequest(request: IncomingMessage): boolean {
-  const address = resolveClientAddress(request);
+  const address = resolvePeerAddress(request);
   return Boolean(address && isLoopbackAddress(address));
 }
 
 function resolveClientAddress(request: IncomingMessage): string | null {
-  if (TRUST_X_FORWARDED_FOR) {
-    const forwardedFor = request.headers["x-forwarded-for"];
-    if (typeof forwardedFor === "string" && forwardedFor.length > 0) {
-      const first = forwardedFor.split(",")[0]?.trim();
-      if (first) {
-        return first;
-      }
-    }
+  const peerAddress = resolvePeerAddress(request);
+  if (!TRUST_X_FORWARDED_FOR || !peerAddress || !isTrustedProxyAddress(peerAddress)) {
+    return peerAddress;
+  }
+
+  const forwardedFor = request.headers["x-forwarded-for"];
+  if (typeof forwardedFor !== "string" || forwardedFor.length === 0) {
+    return peerAddress;
+  }
+
+  const forwardedChain = forwardedFor.split(",").map(normalizeIpAddress);
+  if (forwardedChain.some((address) => address === null)) {
+    return peerAddress;
+  }
+
+  const chain = [...(forwardedChain as string[]), peerAddress];
+  let index = chain.length - 1;
+  while (index > 0 && isTrustedProxyAddress(chain[index] ?? "")) {
+    index -= 1;
+  }
+  return chain[index] ?? peerAddress;
+}
+
+function resolvePeerAddress(request: IncomingMessage): string | null {
+  return normalizeIpAddress(request.socket.remoteAddress ?? "");
+}
+
+function normalizeIpAddress(value: string): string | null {
+  const trimmed = value.trim().toLowerCase();
+  const family = isIP(trimmed);
+  if (family === 0) {
+    return null;
+  }
+
+  const socketAddress = SocketAddress.parse(family === 6 ? `[${trimmed}]:0` : `${trimmed}:0`);
+  if (!socketAddress) {
+    return null;
   }
 
-  const socketAddress = request.socket.remoteAddress;
-  return typeof socketAddress === "string" && socketAddress.length > 0 ? socketAddress : null;
+  const canonical = socketAddress.address.toLowerCase();
+  const mappedIpv4 = canonical.startsWith("::ffff:") ? canonical.slice("::ffff:".length) : null;
+  return mappedIpv4 && isIP(mappedIpv4) === 4 ? mappedIpv4 : canonical;
+}
+
+function isTrustedProxyAddress(address: string): boolean {
+  return TRUSTED_PROXY_ADDRESSES.has(address);
 }
 
 function isLoopbackAddress(address: string): boolean {
-  return (
-    address === "127.0.0.1" ||
-    address === "::1" ||
-    address === "::ffff:127.0.0.1" ||
-    address.startsWith("127.")
-  );
+  return address === "::1" || address.startsWith("127.");
 }
 
 function readAuthTokenFromRequest(request: IncomingMessage): string | null {
@@ -1821,75 +5271,57 @@ function readOptionalSecret(value: string | undefined): string | null {
   return trimmed.length > 0 ? trimmed : null;
 }
 
-function parseShareApiCredentials(
-  rawValue: string | undefined,
-  legacyAdminKey: string | null
-): ShareApiCredential[] {
-  const credentials: ShareApiCredential[] = [];
-
-  if (legacyAdminKey) {
-    credentials.push({
-      secret: legacyAdminKey,
-      scopes: new Set(["admin"])
-    });
+function parseAuditHmacEnvironmentSecret(value: string | undefined): Buffer | null {
+  if (value === undefined || value.length === 0) {
+    return null;
   }
 
-  if (typeof rawValue !== "string" || rawValue.trim().length === 0) {
-    return credentials;
+  const invalidSecret = () =>
+    new Error(
+      `${SHARE_AUDIT_HMAC_SECRET_ENV} must be canonical base64url encoding of 32 to 64 high-entropy bytes (at least 128 bits of estimated entropy).`
+    );
+  if (value !== value.trim() || !/^[A-Za-z0-9_-]+$/.test(value)) {
+    throw invalidSecret();
   }
 
-  for (const entry of rawValue.split(";")) {
-    const trimmed = entry.trim();
-
-    if (!trimmed) {
-      continue;
-    }
-
-    const separatorIndex = trimmed.indexOf(":");
-    const secret = separatorIndex >= 0 ? trimmed.slice(0, separatorIndex).trim() : trimmed;
-    const rawScopes = separatorIndex >= 0 ? trimmed.slice(separatorIndex + 1).trim() : "admin";
-
-    if (!secret) {
-      continue;
-    }
-
-    const scopes = new Set<ShareApiScope>();
-
-    for (const scope of rawScopes.split(",")) {
-      const normalized = normalizeShareApiScope(scope);
-
-      if (normalized) {
-        scopes.add(normalized);
-      }
-    }
-
-    if (scopes.size === 0) {
-      scopes.add("admin");
-    }
-
-    credentials.push({
-      secret,
-      scopes
-    });
+  const secret = Buffer.from(value, "base64url");
+  if (
+    secret.toString("base64url") !== value ||
+    secret.byteLength < SHARE_AUDIT_HMAC_KEY_BYTES ||
+    secret.byteLength > MAX_SHARE_AUDIT_HMAC_KEY_BYTES ||
+    estimateByteEntropyBits(secret) < MIN_SHARE_AUDIT_HMAC_ESTIMATED_ENTROPY_BITS
+  ) {
+    secret.fill(0);
+    throw invalidSecret();
   }
 
-  return credentials;
+  return secret;
 }
 
-function normalizeShareApiScope(value: string): ShareApiScope | null {
-  const normalized = value.trim().toLowerCase();
+function generateAuditHmacSecret(): Buffer {
+  let secret = randomBytes(SHARE_AUDIT_HMAC_KEY_BYTES);
+  while (estimateByteEntropyBits(secret) < MIN_SHARE_AUDIT_HMAC_ESTIMATED_ENTROPY_BITS) {
+    secret.fill(0);
+    secret = randomBytes(SHARE_AUDIT_HMAC_KEY_BYTES);
+  }
+  return secret;
+}
 
-  if (
-    normalized === "upload" ||
-    normalized === "read" ||
-    normalized === "list" ||
-    normalized === "revoke" ||
-    normalized === "admin"
-  ) {
-    return normalized;
+function estimateByteEntropyBits(bytes: Uint8Array): number {
+  const counts = new Uint16Array(256);
+  for (const byte of bytes) {
+    counts[byte] = (counts[byte] ?? 0) + 1;
   }
 
-  return null;
+  let bitsPerByte = 0;
+  for (const count of counts) {
+    if (count === 0) {
+      continue;
+    }
+    const probability = count / bytes.byteLength;
+    bitsPerByte -= probability * Math.log2(probability);
+  }
+  return bitsPerByte * bytes.byteLength;
 }
 
 function parseRateLimitCount(value: string | undefined, fallback: number): number {
@@ -1904,6 +5336,29 @@ function parsePositiveInteger(value: string | undefined, fallback: number): numb
   return Math.max(1, Math.floor(parsed));
 }
 
+function parseConfiguredInteger(
+  name: string,
+  value: string | undefined,
+  fallback: number,
+  minimum: number,
+  maximum: number
+): number {
+  if (value === undefined || value.trim() === "") {
+    return fallback;
+  }
+
+  const normalized = value.trim();
+  if (!/^\d+$/.test(normalized)) {
+    throw new Error(`${name} must be an integer between ${minimum} and ${maximum}.`);
+  }
+
+  const parsed = Number(normalized);
+  if (!Number.isSafeInteger(parsed) || parsed < minimum || parsed > maximum) {
+    throw new Error(`${name} must be an integer between ${minimum} and ${maximum}.`);
+  }
+  return parsed;
+}
+
 function parseRateLimitWindowMs(value: string | undefined, fallback: number): number {
   const parsed = Number(value);
   if (!Number.isFinite(parsed) || parsed <= 0) {
@@ -1917,7 +5372,50 @@ function parseDurationMs(value: string | undefined, fallback: number): number {
   if (!Number.isFinite(parsed) || parsed <= 0) {
     return fallback;
   }
-  return Math.max(1_000, Math.floor(parsed));
+  const durationMs = Math.max(1_000, Math.floor(parsed));
+  return Number.isSafeInteger(durationMs) ? durationMs : fallback;
+}
+
+function parseConfiguredDurationMs(
+  name: string,
+  value: string | undefined,
+  fallback: number,
+  minimum: number
+): number {
+  if (value === undefined || value.trim() === "") {
+    return fallback;
+  }
+
+  if (!/^\d+$/.test(value.trim())) {
+    throw new Error(`${name} must be an integer number of milliseconds.`);
+  }
+
+  const durationMs = Number(value);
+  if (!Number.isSafeInteger(durationMs) || durationMs < minimum) {
+    throw new Error(`${name} must be a safe integer greater than or equal to ${minimum}.`);
+  }
+  return durationMs;
+}
+
+function validateShareDurationConfiguration(
+  defaultTtlMs: number,
+  maxTtlMs: number,
+  retainExpiredMs: number
+): void {
+  if (defaultTtlMs > maxTtlMs) {
+    throw new Error(
+      "WEBBLACKBOX_SHARE_DEFAULT_TTL_MS must not exceed WEBBLACKBOX_SHARE_MAX_TTL_MS."
+    );
+  }
+
+  const maximumExpiry = addSafeIntegers(Date.now(), maxTtlMs);
+  const maximumRetentionDeadline =
+    maximumExpiry === null ? null : addSafeIntegers(maximumExpiry, retainExpiredMs);
+  if (maximumRetentionDeadline === null) {
+    throw new Error(
+      "The configured share TTL and expired-record retention exceed the safe timestamp range."
+    );
+  }
 }
 
 function resolveClientKey(request: IncomingMessage): string {
@@ -1995,3 +5493,19 @@ function parseBooleanFlag(value: string | undefined): boolean {
   const normalized = value.trim().toLowerCase();
   return normalized === "1" || normalized === "true" || normalized === "yes" || normalized === "on";
 }
+
+function parseTrustedProxyAddresses(value: string | undefined): ReadonlySet<string> {
+  if (!value?.trim()) {
+    return new Set();
+  }
+
+  const addresses = new Set<string>();
+  for (const rawAddress of value.split(",")) {
+    const address = normalizeIpAddress(rawAddress);
+    if (!address) {
+      throw new Error(`WEBBLACKBOX_TRUSTED_PROXY_IPS contains an invalid IP address.`);
+    }
+    addresses.add(address);
+  }
+  return addresses;
+}
diff --git a/apps/share-server/src/storage-lock.ts b/apps/share-server/src/storage-lock.ts
new file mode 100644
index 0000000..5a50730
--- /dev/null
+++ b/apps/share-server/src/storage-lock.ts
@@ -0,0 +1,539 @@
+import { randomUUID } from "node:crypto";
+import { constants as fsConstants, type BigIntStats } from "node:fs";
+import { hostname } from "node:os";
+import { join, resolve } from "node:path";
+import { link, lstat, open, unlink, type FileHandle } from "node:fs/promises";
+
+const LOCK_FILE_NAME = ".share-server.lock";
+const LOCK_SCHEMA_VERSION = 1;
+const MAX_LOCK_FILE_BYTES = 4 * 1024;
+const MAX_ACQUIRE_ATTEMPTS = 8;
+const LOCK_NONCE_PATTERN = /^[a-f0-9]{32}$/;
+
+type ShareDataRootLockRecord = Readonly<{
+  schemaVersion: 1;
+  pid: number;
+  nonce: string;
+  hostname: string;
+  createdAt: number;
+  dataRoot: string;
+  dataRootDevice: string;
+  dataRootInode: string;
+  ownerFile: string;
+}>;
+
+type InspectedShareDataRootLock = Readonly<{
+  handle: FileHandle;
+  stat: BigIntStats;
+  record: ShareDataRootLockRecord;
+  ownerPath: string;
+}>;
+
+export class ShareDataRootLockedError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "ShareDataRootLockedError";
+  }
+}
+
+export class ShareDataRootLock {
+  private released = false;
+
+  constructor(
+    private readonly dataRoot: string,
+    private readonly dataRootIdentity: BigIntStats,
+    private readonly lockPath: string,
+    private readonly ownerPath: string,
+    private readonly handle: FileHandle,
+    private readonly lockIdentity: BigIntStats
+  ) {}
+
+  async release(): Promise<void> {
+    if (this.released) {
+      return;
+    }
+
+    let publicLockRemoved = false;
+    try {
+      await assertDataRootIdentity(this.dataRoot, this.dataRootIdentity);
+      const currentHandleStat = await this.handle.stat({ bigint: true });
+      assertSafePublishedLockStat(currentHandleStat);
+      assertSameFileSystemObject(currentHandleStat, this.lockIdentity, this.lockPath);
+      await assertLockLinkIdentity(this.lockPath, currentHandleStat);
+      await assertLockLinkIdentity(this.ownerPath, currentHandleStat);
+      await assertDataRootIdentity(this.dataRoot, this.dataRootIdentity);
+
+      await unlink(this.lockPath);
+      publicLockRemoved = true;
+
+      await assertLockLinkIdentity(this.ownerPath, currentHandleStat);
+      await unlink(this.ownerPath);
+      await syncDirectoryBestEffort(this.dataRoot);
+    } finally {
+      if (publicLockRemoved) {
+        this.released = true;
+        await this.handle.close().catch(() => undefined);
+      }
+    }
+  }
+}
+
+export async function acquireShareDataRootLock(
+  dataRootPath: string,
+  dataRootIdentity: BigIntStats
+): Promise<ShareDataRootLock> {
+  const dataRoot = resolve(dataRootPath);
+  const lockPath = join(dataRoot, LOCK_FILE_NAME);
+  await assertDataRootIdentity(dataRoot, dataRootIdentity);
+
+  for (let attempt = 0; attempt < MAX_ACQUIRE_ATTEMPTS; attempt += 1) {
+    const published = await tryPublishLock(dataRoot, dataRootIdentity, lockPath);
+    if (published) {
+      return published;
+    }
+
+    const existing = await inspectPublishedLock(dataRoot, dataRootIdentity, lockPath);
+    if (!existing) {
+      continue;
+    }
+
+    try {
+      assertLockRecordBoundToDataRoot(existing.record, dataRoot, dataRootIdentity);
+      if (existing.record.hostname !== hostname()) {
+        throw new ShareDataRootLockedError(
+          `Share data directory "${dataRoot}" is locked by host "${existing.record.hostname}"; ` +
+            "remote process liveness cannot be verified safely."
+        );
+      }
+      if (isLocalProcessAlive(existing.record.pid)) {
+        throw new ShareDataRootLockedError(
+          `Share data directory "${dataRoot}" is already in use by a running ` +
+            `share-server process (pid ${existing.record.pid}).`
+        );
+      }
+
+      const recovered = await recoverStalePublishedLock(
+        dataRoot,
+        dataRootIdentity,
+        lockPath,
+        existing
+      );
+      if (!recovered) {
+        continue;
+      }
+    } finally {
+      await existing.handle.close().catch(() => undefined);
+    }
+  }
+
+  throw new ShareDataRootLockedError(
+    `Share data directory "${dataRoot}" lock changed repeatedly during startup.`
+  );
+}
+
+async function tryPublishLock(
+  dataRoot: string,
+  dataRootIdentity: BigIntStats,
+  lockPath: string
+): Promise<ShareDataRootLock | null> {
+  const nonce = randomUUID().replaceAll("-", "");
+  const ownerFile = ownerFileName(process.pid, nonce);
+  const ownerPath = join(dataRoot, ownerFile);
+  const record: ShareDataRootLockRecord = {
+    schemaVersion: LOCK_SCHEMA_VERSION,
+    pid: process.pid,
+    nonce,
+    hostname: hostname(),
+    createdAt: Date.now(),
+    dataRoot,
+    dataRootDevice: dataRootIdentity.dev.toString(),
+    dataRootInode: dataRootIdentity.ino.toString(),
+    ownerFile
+  };
+  const payload = Buffer.from(`${JSON.stringify(record)}\n`, "utf8");
+  if (payload.byteLength > MAX_LOCK_FILE_BYTES) {
+    throw new Error("Share data directory lock metadata exceeds its safety limit.");
+  }
+
+  let handle: FileHandle | null = null;
+  let ownerIdentity: BigIntStats | null = null;
+  let published = false;
+  try {
+    await assertDataRootIdentity(dataRoot, dataRootIdentity);
+    handle = await open(
+      ownerPath,
+      fsConstants.O_CREAT | fsConstants.O_EXCL | fsConstants.O_WRONLY | fsConstants.O_NOFOLLOW,
+      0o600
+    );
+    await writeFileHandleFully(handle, payload);
+    if (process.platform !== "win32") {
+      await handle.chmod(0o600);
+    }
+    await handle.sync();
+    ownerIdentity = await handle.stat({ bigint: true });
+    assertSafeOwnerLockStat(ownerIdentity, payload.byteLength, ownerPath);
+    await assertLockLinkIdentity(ownerPath, ownerIdentity);
+    await assertDataRootIdentity(dataRoot, dataRootIdentity);
+
+    try {
+      await link(ownerPath, lockPath);
+    } catch (error) {
+      if (hasFileSystemErrorCode(error, "EEXIST")) {
+        return null;
+      }
+      throw error;
+    }
+
+    published = true;
+    const publishedStat = await handle.stat({ bigint: true });
+    assertSafePublishedLockStat(publishedStat);
+    assertSameFileSystemObject(publishedStat, ownerIdentity, lockPath);
+    await assertLockLinkIdentity(ownerPath, publishedStat);
+    await assertLockLinkIdentity(lockPath, publishedStat);
+    await assertDataRootIdentity(dataRoot, dataRootIdentity);
+    await syncDirectoryBestEffort(dataRoot);
+
+    const result = new ShareDataRootLock(
+      dataRoot,
+      dataRootIdentity,
+      lockPath,
+      ownerPath,
+      handle,
+      publishedStat
+    );
+    handle = null;
+    return result;
+  } finally {
+    if (handle) {
+      await handle.close().catch(() => undefined);
+    }
+    if (!published && ownerIdentity) {
+      await unlinkLockLinkIfUnchanged(dataRoot, dataRootIdentity, ownerPath, ownerIdentity);
+    }
+  }
+}
+
+async function inspectPublishedLock(
+  dataRoot: string,
+  dataRootIdentity: BigIntStats,
+  lockPath: string
+): Promise<InspectedShareDataRootLock | null> {
+  await assertDataRootIdentity(dataRoot, dataRootIdentity);
+
+  let pathStat: BigIntStats;
+  try {
+    pathStat = await lstat(lockPath, { bigint: true });
+  } catch (error) {
+    if (hasFileSystemErrorCode(error, "ENOENT")) {
+      return null;
+    }
+    throw error;
+  }
+
+  let handle: FileHandle | null = null;
+  try {
+    handle = await open(lockPath, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+    const openedStat = await handle.stat({ bigint: true });
+    assertSafePublishedLockStat(openedStat);
+    assertSameFileSystemObject(pathStat, openedStat, lockPath);
+    const payload = await readFileHandleExactly(handle, Number(openedStat.size));
+    const record = parseLockRecord(payload);
+    const ownerPath = join(dataRoot, record.ownerFile);
+    await assertLockLinkIdentity(lockPath, openedStat);
+    await assertLockLinkIdentity(ownerPath, openedStat);
+    await assertDataRootIdentity(dataRoot, dataRootIdentity);
+
+    const result = {
+      handle,
+      stat: openedStat,
+      record,
+      ownerPath
+    };
+    handle = null;
+    return result;
+  } catch (error) {
+    if (hasFileSystemErrorCode(error, "ENOENT")) {
+      return null;
+    }
+    if (error instanceof ShareDataRootLockedError) {
+      throw error;
+    }
+    throw unsafeLockError(lockPath, error);
+  } finally {
+    await handle?.close().catch(() => undefined);
+  }
+}
+
+async function recoverStalePublishedLock(
+  dataRoot: string,
+  dataRootIdentity: BigIntStats,
+  lockPath: string,
+  existing: InspectedShareDataRootLock
+): Promise<boolean> {
+  const recoveryNonce = randomUUID().replaceAll("-", "");
+  const recoveryPath = join(
+    dataRoot,
+    `.share-server.lock.recovery.${process.pid}.${recoveryNonce}`
+  );
+  let recoveryLinked = false;
+  let publicLockRemoved = false;
+
+  try {
+    await assertLockLinkIdentity(lockPath, existing.stat);
+    await assertLockLinkIdentity(existing.ownerPath, existing.stat);
+    await assertDataRootIdentity(dataRoot, dataRootIdentity);
+    try {
+      await link(lockPath, recoveryPath);
+      recoveryLinked = true;
+    } catch (error) {
+      if (hasFileSystemErrorCode(error, "ENOENT") || hasFileSystemErrorCode(error, "EEXIST")) {
+        return false;
+      }
+      throw error;
+    }
+
+    const claimedStat = await existing.handle.stat({ bigint: true });
+    if (
+      !claimedStat.isFile() ||
+      claimedStat.nlink !== 3n ||
+      !hasMode(claimedStat, 0o600n) ||
+      !isSameFileSystemObject(claimedStat, existing.stat)
+    ) {
+      return false;
+    }
+
+    await assertLockLinkIdentity(recoveryPath, claimedStat);
+    await assertLockLinkIdentity(existing.ownerPath, claimedStat);
+    await assertLockLinkIdentity(lockPath, claimedStat);
+    if (isLocalProcessAlive(existing.record.pid)) {
+      throw new ShareDataRootLockedError(
+        `Share data directory "${dataRoot}" became owned by a running process during recovery.`
+      );
+    }
+    await assertDataRootIdentity(dataRoot, dataRootIdentity);
+
+    await unlink(lockPath);
+    publicLockRemoved = true;
+    await assertLockLinkIdentity(existing.ownerPath, claimedStat);
+    await unlink(existing.ownerPath);
+    await assertLockLinkIdentity(recoveryPath, claimedStat);
+    await unlink(recoveryPath);
+    recoveryLinked = false;
+    await syncDirectoryBestEffort(dataRoot);
+    return true;
+  } finally {
+    if (recoveryLinked) {
+      await unlinkLockLinkIfUnchanged(dataRoot, dataRootIdentity, recoveryPath, existing.stat);
+    }
+    if (publicLockRemoved) {
+      await syncDirectoryBestEffort(dataRoot);
+    }
+  }
+}
+
+function parseLockRecord(payload: Uint8Array): ShareDataRootLockRecord {
+  let value: unknown;
+  try {
+    value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(payload));
+  } catch (error) {
+    throw new Error("Share data directory lock metadata is not valid UTF-8 JSON.", {
+      cause: error
+    });
+  }
+
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("Share data directory lock metadata must be an object.");
+  }
+  const record = value as Record<string, unknown>;
+  if (
+    record.schemaVersion !== LOCK_SCHEMA_VERSION ||
+    !Number.isSafeInteger(record.pid) ||
+    (record.pid as number) <= 0 ||
+    typeof record.nonce !== "string" ||
+    !LOCK_NONCE_PATTERN.test(record.nonce) ||
+    typeof record.hostname !== "string" ||
+    record.hostname.length === 0 ||
+    record.hostname.length > 255 ||
+    !Number.isSafeInteger(record.createdAt) ||
+    (record.createdAt as number) < 0 ||
+    typeof record.dataRoot !== "string" ||
+    typeof record.dataRootDevice !== "string" ||
+    !/^\d+$/.test(record.dataRootDevice) ||
+    typeof record.dataRootInode !== "string" ||
+    !/^\d+$/.test(record.dataRootInode) ||
+    typeof record.ownerFile !== "string" ||
+    record.ownerFile !== ownerFileName(record.pid as number, record.nonce)
+  ) {
+    throw new Error("Share data directory lock metadata is invalid.");
+  }
+
+  return record as ShareDataRootLockRecord;
+}
+
+function assertLockRecordBoundToDataRoot(
+  record: ShareDataRootLockRecord,
+  dataRoot: string,
+  dataRootIdentity: BigIntStats
+): void {
+  if (
+    record.dataRoot !== dataRoot ||
+    record.dataRootDevice !== dataRootIdentity.dev.toString() ||
+    record.dataRootInode !== dataRootIdentity.ino.toString()
+  ) {
+    throw new ShareDataRootLockedError(
+      `Share data directory "${dataRoot}" contains a lock bound to a different directory identity.`
+    );
+  }
+}
+
+function assertSafeOwnerLockStat(stat: BigIntStats, expectedBytes: number, lockPath: string): void {
+  if (
+    !stat.isFile() ||
+    stat.nlink !== 1n ||
+    stat.size !== BigInt(expectedBytes) ||
+    !hasMode(stat, 0o600n)
+  ) {
+    throw unsafeLockError(lockPath);
+  }
+}
+
+function assertSafePublishedLockStat(stat: BigIntStats): void {
+  if (
+    !stat.isFile() ||
+    stat.nlink !== 2n ||
+    stat.size <= 0n ||
+    stat.size > BigInt(MAX_LOCK_FILE_BYTES) ||
+    !hasMode(stat, 0o600n)
+  ) {
+    throw new Error("Published share data directory lock has unsafe file metadata.");
+  }
+}
+
+async function assertDataRootIdentity(
+  dataRoot: string,
+  expectedIdentity: BigIntStats
+): Promise<void> {
+  const current = await lstat(dataRoot, { bigint: true });
+  if (
+    !current.isDirectory() ||
+    !hasMode(current, 0o700n) ||
+    !isSameFileSystemObject(current, expectedIdentity)
+  ) {
+    throw new Error(`Share data directory "${dataRoot}" changed while managing its process lock.`);
+  }
+}
+
+async function assertLockLinkIdentity(lockPath: string, expected: BigIntStats): Promise<void> {
+  const current = await lstat(lockPath, { bigint: true });
+  if (
+    !current.isFile() ||
+    !hasMode(current, 0o600n) ||
+    !isSameFileSystemObject(current, expected)
+  ) {
+    throw unsafeLockError(lockPath);
+  }
+}
+
+async function unlinkLockLinkIfUnchanged(
+  dataRoot: string,
+  dataRootIdentity: BigIntStats,
+  lockPath: string,
+  expectedIdentity: BigIntStats
+): Promise<void> {
+  try {
+    await assertDataRootIdentity(dataRoot, dataRootIdentity);
+    await assertLockLinkIdentity(lockPath, expectedIdentity);
+    await unlink(lockPath);
+  } catch (error) {
+    if (hasFileSystemErrorCode(error, "ENOENT")) {
+      return;
+    }
+    throw error;
+  }
+}
+
+function ownerFileName(pid: number, nonce: string): string {
+  return `.share-server.lock.owner.${pid}.${nonce}`;
+}
+
+function isLocalProcessAlive(pid: number): boolean {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    if (hasFileSystemErrorCode(error, "EPERM")) {
+      return true;
+    }
+    if (hasFileSystemErrorCode(error, "ESRCH")) {
+      return false;
+    }
+    throw error;
+  }
+}
+
+async function writeFileHandleFully(handle: FileHandle, payload: Uint8Array): Promise<void> {
+  let offset = 0;
+  while (offset < payload.byteLength) {
+    const { bytesWritten } = await handle.write(
+      payload,
+      offset,
+      payload.byteLength - offset,
+      offset
+    );
+    if (bytesWritten <= 0) {
+      throw new Error("Share data directory lock write made no progress.");
+    }
+    offset += bytesWritten;
+  }
+}
+
+async function readFileHandleExactly(handle: FileHandle, size: number): Promise<Uint8Array> {
+  const payload = new Uint8Array(size);
+  let offset = 0;
+  while (offset < size) {
+    const { bytesRead } = await handle.read(payload, offset, size - offset, offset);
+    if (bytesRead <= 0) {
+      throw new Error("Share data directory lock ended before its recorded size.");
+    }
+    offset += bytesRead;
+  }
+  return payload;
+}
+
+async function syncDirectoryBestEffort(directoryPath: string): Promise<void> {
+  let handle: FileHandle | null = null;
+  try {
+    handle = await open(directoryPath, fsConstants.O_RDONLY | fsConstants.O_DIRECTORY);
+    await handle.sync();
+  } catch {
+    // Some supported filesystems do not allow directory handles to be synced.
+  } finally {
+    await handle?.close().catch(() => undefined);
+  }
+}
+
+function hasMode(stat: BigIntStats, expectedMode: bigint): boolean {
+  return process.platform === "win32" || (stat.mode & 0o777n) === expectedMode;
+}
+
+function assertSameFileSystemObject(
+  current: BigIntStats,
+  expected: BigIntStats,
+  lockPath: string
+): void {
+  if (!isSameFileSystemObject(current, expected)) {
+    throw unsafeLockError(lockPath);
+  }
+}
+
+function isSameFileSystemObject(left: BigIntStats, right: BigIntStats): boolean {
+  return left.dev === right.dev && left.ino === right.ino;
+}
+
+function unsafeLockError(lockPath: string, cause?: unknown): Error {
+  return new Error(`Unsafe share data directory lock path "${lockPath}".`, { cause });
+}
+
+function hasFileSystemErrorCode(error: unknown, code: string): boolean {
+  return error instanceof Error && "code" in error && error.code === code;
+}
diff --git a/apps/share-server/tsconfig.json b/apps/share-server/tsconfig.json
index 5a44335..3b62c7d 100644
--- a/apps/share-server/tsconfig.json
+++ b/apps/share-server/tsconfig.json
@@ -5,6 +5,7 @@
     "lib": ["ES2023", "DOM"],
     "baseUrl": ".",
     "paths": {
+      "@webblackbox/pipeline": ["../../packages/pipeline/src/index.ts"],
       "@webblackbox/player-sdk": ["../../packages/player-sdk/src/index.ts"],
       "@webblackbox/protocol": ["../../packages/protocol/src/index.ts"]
     },
diff --git a/benchmarks/ci-thresholds.json b/benchmarks/ci-thresholds.json
index b245330..eb9ff96 100644
--- a/benchmarks/ci-thresholds.json
+++ b/benchmarks/ci-thresholds.json
@@ -8,6 +8,9 @@
     "ingestMinOpsPerSec": 20000,
     "fullExportMaxMs": 10000,
     "filteredExportMaxMs": 8000,
-    "archiveDropRatioMin": 0.2
+    "filteredParseMaxMs": 5000,
+    "archiveDropRatioMin": 0.2,
+    "eventDropRatioMin": 0.2,
+    "eventDropRatioMax": 0.8
   }
 }
diff --git a/bundle-size/budgets.json b/bundle-size/budgets.json
index 52cf19f..df216fd 100644
--- a/bundle-size/budgets.json
+++ b/bundle-size/budgets.json
@@ -1,29 +1,115 @@
 {
   "entries": [
     {
+      "name": "protocol runtime",
+      "path": "packages/protocol/dist/index.js",
+      "maxBytes": 57000,
+      "maxGzipBytes": 14000
+    },
+    {
+      "name": "CDP router runtime",
+      "path": "packages/cdp-router/dist/index.js",
+      "maxBytes": 6500,
+      "maxGzipBytes": 1800
+    },
+    {
+      "name": "recorder runtime",
       "path": "packages/recorder/dist/index.js",
-      "maxBytes": 55000,
-      "maxGzipBytes": 15000
+      "maxBytes": 59000,
+      "maxGzipBytes": 14000
     },
     {
+      "name": "pipeline runtime",
       "path": "packages/pipeline/dist/index.js",
-      "maxBytes": 76000,
-      "maxGzipBytes": 18000
+      "maxBytes": 165000,
+      "maxGzipBytes": 35000
     },
     {
+      "name": "Player SDK runtime",
       "path": "packages/player-sdk/dist/index.js",
-      "maxBytes": 90000,
-      "maxGzipBytes": 22000
+      "maxBytes": 145000,
+      "maxGzipBytes": 30000
+    },
+    {
+      "name": "webblackbox package JavaScript",
+      "directory": "packages/webblackbox/dist",
+      "extensions": [".js"],
+      "maxBytes": 205000,
+      "maxGzipBytes": 45000
     },
     {
+      "name": "MCP server JavaScript",
+      "directory": "apps/mcp-server/dist",
+      "extensions": [".js"],
+      "maxBytes": 65000,
+      "maxGzipBytes": 14000
+    },
+    {
+      "name": "Share server runtime",
+      "path": "apps/share-server/dist/index.js",
+      "maxBytes": 184000,
+      "maxGzipBytes": 40000
+    },
+    {
+      "name": "Player application",
       "path": "apps/player/build/main.js",
-      "maxBytes": 1800000,
-      "maxGzipBytes": 330000
+      "maxBytes": 1000000,
+      "maxGzipBytes": 265000
     },
     {
+      "name": "Extension JavaScript total",
+      "directory": "apps/extension/build",
+      "extensions": [".js"],
+      "maxBytes": 2850000,
+      "maxGzipBytes": 580000
+    },
+    {
+      "name": "Extension service worker",
       "path": "apps/extension/build/sw.js",
-      "maxBytes": 800000,
-      "maxGzipBytes": 150000
+      "maxBytes": 850000,
+      "maxGzipBytes": 165000
+    },
+    {
+      "name": "Extension offscreen runtime",
+      "path": "apps/extension/build/offscreen.js",
+      "maxBytes": 600000,
+      "maxGzipBytes": 130000
+    },
+    {
+      "name": "Extension content agent",
+      "path": "apps/extension/build/content-agent.js",
+      "maxBytes": 500000,
+      "maxGzipBytes": 110000
+    },
+    {
+      "name": "Extension content bridge",
+      "path": "apps/extension/build/content.js",
+      "maxBytes": 80000,
+      "maxGzipBytes": 15000
+    },
+    {
+      "name": "Extension injected runtime",
+      "path": "apps/extension/build/injected.js",
+      "maxBytes": 260000,
+      "maxGzipBytes": 50000
+    },
+    {
+      "name": "Extension options UI",
+      "path": "apps/extension/build/options.js",
+      "maxBytes": 245000,
+      "maxGzipBytes": 50000
+    },
+    {
+      "name": "Extension popup UI",
+      "path": "apps/extension/build/popup.js",
+      "maxBytes": 260000,
+      "maxGzipBytes": 52000
+    },
+    {
+      "name": "Extension sessions UI",
+      "path": "apps/extension/build/sessions.js",
+      "maxBytes": 46000,
+      "maxGzipBytes": 12000
     }
   ]
 }
diff --git a/docs/ARCHITECTURE.md b/docs/ARCHITECTURE.md
index 95b41c5..9cf7af7 100644
--- a/docs/ARCHITECTURE.md
+++ b/docs/ARCHITECTURE.md
@@ -254,7 +254,7 @@ Page World          Extension World         Background
 │ Injected │       │   Content    │        │   Service    │
 │  Script  │──────→│   Script     │───────→│   Worker     │
 │          │       │              │        │              │
-│ window.  │       │ chrome.      │        │ CDP Router   │
+│ bounded  │       │ chrome.      │        │ CDP Router   │
 │ postMsg  │       │ runtime.     │        │ Recorder     │
 │          │       │ connect/port │        │              │
 └──────────┘       └──────────────┘        └──────┬───────┘
@@ -266,7 +266,7 @@ Page World          Extension World         Background
                                            └──────────────┘
 ```
 
-- **Page World** → Extension: `window.postMessage` (injected → content)
+- **Page World** → Extension: bounded, allowlisted `window.postMessage` observations (injected → content); privileged activation/drain uses an exact service-worker `chrome.scripting.executeScript` call into the dynamically addressed ESM module and never accepts page-originated control
 - **Extension** → Background: `chrome.runtime.connect` + `port.postMessage` (content → SW)
 - **Background** → Offscreen: `chrome.runtime.connect` + `port.postMessage` (SW ↔ offscreen)
 - **CDP**: `chrome.debugger.sendCommand/onEvent` (SW ↔ browser)
@@ -290,6 +290,6 @@ Page World          Extension World         Background
 
 ### Permission Model
 
-- The extension requires `debugger` permission for CDP access
-- `<all_urls>` host permission is needed for content script injection
-- Users must explicitly grant permissions during installation
+- The store-safe profile uses `activeTab` plus programmatic injection and does not request `debugger`, `tabs`, `webRequest`, `tabCapture`, persistent host permissions, or static content scripts.
+- The explicit development/enterprise profile may request `debugger`, `tabs`, `webRequest`, `tabCapture`, and host access for CDP/browser-network diagnostics and recording.
+- Every profile still applies the runtime scope and exact-document authorization gates before capture activation.
diff --git a/docs/CHROME_WEB_STORE_DISCLOSURE.md b/docs/CHROME_WEB_STORE_DISCLOSURE.md
index 1562c06..56f7d7e 100644
--- a/docs/CHROME_WEB_STORE_DISCLOSURE.md
+++ b/docs/CHROME_WEB_STORE_DISCLOSURE.md
@@ -7,9 +7,12 @@ WebBlackbox records browser debugging metadata for sessions that the user explic
 ## Permission Rationale
 
 - `activeTab`: grants temporary access to the active tab after a user gesture.
-- `scripting`: injects capture code only after recording starts.
+- `alarms`: schedules restart-safe cleanup for expired local session data.
+- `offscreen`: runs the bounded recorder pipeline outside page content.
+- `scripting`: injects a passive scope-checking bootstrap only after recording starts; capture instrumentation activates only in frames permitted by the effective capture scope.
 - `storage`: stores local settings, local session metadata, and local audit records.
 - `downloads`: saves user-requested archive exports.
+- `webNavigation`: binds capture authorization and lifecycle work to exact frame/document navigation identities.
 
 The store-safe profile does not request `debugger`, persistent `<all_urls>` host permissions, or always-on all-sites content scripts.
 
diff --git a/docs/ENTERPRISE_ADMIN.md b/docs/ENTERPRISE_ADMIN.md
index 1d4bb46..a478124 100644
--- a/docs/ENTERPRISE_ADMIN.md
+++ b/docs/ENTERPRISE_ADMIN.md
@@ -26,6 +26,8 @@ Enterprise deployments can provide a managed policy object through `chrome.stora
 
 `siteDenylist` wins over `siteAllowlist`. If `siteAllowlist` is non-empty, recording is denied outside the allowlist. `disableLabMode` forces lab-only categories such as full CDP and heap profiles off.
 
+Exact origins and `*.example.com` host wildcards are supported. Managed allow/deny rules are merged into the effective capture scope and are checked at session start, navigation, frame activation, and event ingestion. Opaque frame URLs are rejected. Cross-frame capture additionally requires the effective policy to set `includeSubframes: true`; otherwise dynamic injection, content events, webRequest events, and child CDP sessions remain top-frame-only.
+
 ## Self-Hosted Share Server
 
 Recommended production settings:
@@ -40,6 +42,11 @@ WEBBLACKBOX_SHARE_MAX_TTL_MS=2592000000
 WEBBLACKBOX_SHARE_RETAIN_EXPIRED_MS=2592000000
 ```
 
+Protected Share routes require scoped credentials even when the server is bound directly to
+loopback. Do not enable `WEBBLACKBOX_SHARE_ALLOW_UNAUTHENTICATED_LOOPBACK` in a self-hosted or
+reverse-proxied deployment; it is a development-only opt-out and is incompatible with proxy or
+forwarded-client configuration.
+
 Rotate share API keys by deploying old and new scoped keys together, moving clients to the new key, confirming audit activity, then removing the old key.
 
 ## Audit Logs
diff --git a/docs/PRIVACY.md b/docs/PRIVACY.md
index 524eb7b..a520f75 100644
--- a/docs/PRIVACY.md
+++ b/docs/PRIVACY.md
@@ -14,13 +14,19 @@ By default, WebBlackbox records metadata needed to debug a session:
 
 By default, WebBlackbox does not collect raw input values, DOM text, screenshots, storage values, cookies, raw headers, request bodies, or response bodies.
 
+## Capture Scope And Consent
+
+The extension binds each session to the selected tab and starting origin. The same effective scope is evaluated before startup, after top-level navigation, before frame capture instrumentation is activated, and again when content, webRequest, or CDP events arrive. Denied origins and excluded URL patterns always win; a non-empty origin allowlist is restrictive; opaque or invalid document URLs fail closed.
+
+`stopOnOriginChange` is preserved from the configured policy and defaults to `true`. Child-frame capture is disabled unless `includeSubframes` is explicitly enabled, and enabled child frames must independently pass the origin, URL, tab, and consent checks. Capture stops when time-bounded consent expires.
+
 ## Local Storage
 
-Captured sessions remain local until the user exports or shares an archive. Local stopped sessions are subject to retention controls, and enterprise policies can cap local retention.
+Captured sessions remain local until the user exports or shares an archive. Under the required local-at-rest policy, persisted event chunks and blobs are authenticated and encrypted with AES-GCM; raw persistent storage is rejected. Extension upgrades purge the former plaintext cache, and a missing managed key causes unverifiable cached payloads to be purged instead of silently reopened. Query indexes and session metadata remain plaintext and must not contain captured payload values. Local stopped sessions are subject to retention controls, and enterprise policies can cap local retention.
 
 ## Export And Share
 
-Real-user archives must be encrypted before export or share. The public share server stores encrypted archive bytes and redacted public metadata. It does not receive archive passphrases or decryption keys, and it rejects encrypted uploads that leave private archive files, including event chunks, blobs, indexes, or privacy manifests, in plaintext.
+Real-user archives must be encrypted before export or share. The public share server stores encrypted archive bytes and redacted public metadata. It does not receive archive passphrases or decryption keys, and it rejects encrypted uploads that leave private archive files, including event chunks, blobs, indexes, or privacy manifests, in plaintext. Player-generated privacy claims include the SHA-256 of the exact uploaded archive, but the server labels their private-content results as unverified client claims because digest binding provides integrity between the claim and bytes, not authenticity or scanner attestation.
 
 Public share links expire, can be revoked, and generate redacted audit events. Audit records do not include captured payloads, passphrases, API keys, raw URLs, raw selectors, or archive plaintext.
 
diff --git a/docs/SECURITY.md b/docs/SECURITY.md
index 767c951..5c5ae52 100644
--- a/docs/SECURITY.md
+++ b/docs/SECURITY.md
@@ -4,28 +4,36 @@
 
 The store-safe Chrome profile uses `activeTab` and programmatic injection after a user gesture. It does not include `debugger`, persistent `<all_urls>` host permissions, or always-on all-sites content scripts.
 
-The dev/enterprise profile can enable deeper diagnostics, including CDP, but these controls are separated from the store-safe profile and remain governed by capture policy.
+The dev/enterprise profile can enable deeper diagnostics, including CDP, but these controls are separated from the store-safe profile and remain governed by the same capture-scope evaluator. Both profiles use a passive programmatic bootstrap and activate capture instrumentation only after a frame passes the scope gate; neither profile installs an always-on all-frame capture script.
 
 ## Data Flow
 
-1. Capture adapters sanitize data before it enters the recorder pipeline.
-2. The ingest gate rejects or replaces policy-violating artifacts with `privacy.violation` events.
-3. Archives include `privacy/manifest.json` with policy, categories, encryption status, and pre-encryption scanner result.
-4. Exports and shares recompute policy eligibility instead of trusting imported archive metadata.
+1. A fail-closed scope gate validates tab, origin allow/deny rules, excluded URLs, frame inclusion, origin-change behavior, and consent lifetime before capture instrumentation is activated.
+2. Content, webRequest, and CDP ingress repeat the scope check so a stale or spoofed frame cannot expand consent.
+3. Capture adapters sanitize data before it enters the recorder pipeline.
+4. The ingest gate rejects or replaces policy-violating artifacts with `privacy.violation` events.
+5. Archives include `privacy/manifest.json` with policy, categories, encryption status, and pre-encryption scanner result.
+6. Exports recompute policy eligibility. The Player evaluates decrypted content before sharing, while the keyless Share server enforces only server-inspected outer facts and labels client private-content results as unverified claims.
+
+MAIN-world capture hooks run in the page's JavaScript environment and are therefore treated as untrusted observations, not authenticated evidence. Their bridge accepts only bounded, allowlisted event payloads, ignores page-supplied timestamps, rate-limits input, and exposes no marker or other extension control operation. Privileged decisions remain in the isolated content script and service worker.
+
+Global visual and profiler artifacts fail closed when the page contains a child frame that is outside the effective scope. CDP DOM snapshots are filtered to frame IDs that independently passed the scope gate.
 
 ## Encryption
 
-Real-user archives require export encryption. Public share uploads require encrypted `.webblackbox` archives and never accept passphrases. Private archive paths include event chunks, blobs, indexes, and `privacy/manifest.json`; older encrypted archives with plaintext private files must be re-exported before public sharing. Client-side share metadata is limited to an allowlisted public summary.
+Real-user archives require export encryption. Public share uploads require encrypted `.webblackbox` archives and never accept passphrases. Private archive paths include event chunks, blobs, indexes, and `privacy/manifest.json`; older encrypted archives with plaintext private files must be re-exported before public sharing. Client-side share metadata is limited to an allowlisted public claim bound to the exact archive bytes by SHA-256.
+
+Local event chunks and blobs are also protected before persistent storage. The pipeline rejects persistent storage that does not declare authenticated AES-GCM payload protection when `localAtRest` is required. The extension stores a non-extractable, purpose-specific Web Crypto key in an extension-origin IndexedDB keyring so offscreen/service-worker restarts can recover the cache without exporting raw key material. On upgrade, the legacy plaintext database is purged; if the managed key is lost, unverifiable cached payloads are purged rather than read as plaintext.
 
 Plaintext synthetic or local-debug export exemptions require a well-formed `captureContextEvidenceRef` that is also allowlisted by the trusted pipeline/embedder configuration. A capture policy cannot make its own plaintext exemption trusted.
 
 ## Player Safety
 
-The player treats archives as untrusted input. It does not load captured external resources by default, limits replay resources to inert local object/data URLs, revokes screenshot object URLs after a short TTL, and serves player/share views with no-referrer and restrictive CSP controls.
+The player treats archives as untrusted input. It does not load captured external resources by default, limits replay resources to inert local object/data URLs, revokes screenshot object URLs after a short TTL, and serves player/share views with no-referrer and restrictive CSP controls. Archive input bytes, ZIP entries, expanded bytes, compression ratios, decoded event bytes, event counts, and codec time are subject to non-relaxable safety ceilings; callers may only tighten them. Remote share servers must use HTTPS; plaintext HTTP is accepted only for loopback development endpoints so share API credentials are not sent over an unprotected remote connection.
 
 ## Share Server
 
-The share server supports scoped API keys, upload rate limits, expiry, revocation, redacted metadata, and redacted audit logs. Public deployments should keep plaintext uploads disabled.
+The share server supports scoped API keys, upload rate limits, expiry, revocation, redacted metadata, and redacted audit logs. Public deployments should keep plaintext uploads disabled; disabled plaintext is rejected after bounded envelope inspection and before Player private-content analysis. If plaintext uploads are explicitly enabled, the server re-scans bounded decoded events and text-like blobs, requires canonical blob coverage, strictly decodes UTF-8, and scans raw JSON plus decoded keys and string values. It never promotes an archive-declared `passed` result to server attestation. The stored result is labeled as an upload-time rather than pre-encryption scan. Invalid archive metadata/event encodings are rejected; opaque or undecodable blobs and exhausted byte/finding/time budgets produce `unknown` with partial-analysis trust, while a detected high-risk finding blocks retention. Encrypted envelopes must have exact private-file/IV metadata, canonical blob totals, and matching stored-byte integrity before retention. Because the server has no archive passphrase, it labels encrypted-content privacy results as archive-bound but unverified client claims; matching a digest is not proof that the client scanner ran honestly. Deployments that require privacy attestation need a trusted signed or remote pre-encryption analysis path.
 
 ## Reporting Security Issues
 
diff --git a/docs/api/player-sdk/assets/hierarchy.js b/docs/api/player-sdk/assets/hierarchy.js
index a8b6a85..fb85f0a 100644
--- a/docs/api/player-sdk/assets/hierarchy.js
+++ b/docs/api/player-sdk/assets/hierarchy.js
@@ -1 +1 @@
-window.hierarchyData = "eJyrVirKzy8pVrKKjtVRKkpNy0lNLsnMzytWsqqurQUAmx4Kpg==";
+window.hierarchyData = "eJyrVirKzy8pVrKKjtVRKkpNy0lNLsnMzytWsqqurQUAmx4Kpg=="
\ No newline at end of file
diff --git a/docs/api/player-sdk/assets/highlight.css b/docs/api/player-sdk/assets/highlight.css
index 03cf474..029b1a5 100644
--- a/docs/api/player-sdk/assets/highlight.css
+++ b/docs/api/player-sdk/assets/highlight.css
@@ -96,4 +96,4 @@
 .hl-8 { color: var(--hl-8); }
 .hl-9 { color: var(--hl-9); }
 .hl-10 { color: var(--hl-10); }
-pre, code { background: var(--code-background); }
+pre, code, math[display='block'] { background: var(--code-background); }
diff --git a/docs/api/player-sdk/assets/icons.js b/docs/api/player-sdk/assets/icons.js
index 9557996..4fbadc5 100644
--- a/docs/api/player-sdk/assets/icons.js
+++ b/docs/api/player-sdk/assets/icons.js
@@ -1,21 +1,18 @@
-(function () {
-  addIcons();
-  function addIcons() {
-    if (document.readyState === "loading")
-      return document.addEventListener("DOMContentLoaded", addIcons);
-    const svg = document.body.appendChild(
-      document.createElementNS("http://www.w3.org/2000/svg", "svg")
-    );
-    svg.innerHTML = `<g id="icon-1" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-module)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></g><g id="icon-2" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-module)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></g><g id="icon-4" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-namespace)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">N</text></g><g id="icon-8" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-enum)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">E</text></g><g id="icon-16" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></g><g id="icon-32" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-variable)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">V</text></g><g id="icon-64" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-function)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">F</text></g><g id="icon-128" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-class)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></g><g id="icon-256" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-interface)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">I</text></g><g id="icon-512" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-constructor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></g><g id="icon-1024" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></g><g id="icon-2048" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-method)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></g><g id="icon-4096" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-function)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">F</text></g><g id="icon-8192" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></g><g id="icon-16384" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-constructor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></g><g id="icon-32768" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></g><g id="icon-65536" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></g><g id="icon-131072" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></g><g id="icon-262144" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></g><g id="icon-524288" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></g><g id="icon-1048576" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></g><g id="icon-2097152" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></g><g id="icon-4194304" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-reference)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">R</text></g><g id="icon-8388608" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-document)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><g stroke="var(--color-icon-text)" fill="none" stroke-width="1.5"><polygon points="6,5 6,19 18,19, 18,10 13,5"></polygon><line x1="9" y1="9" x2="13" y2="9"></line><line x1="9" y1="12" x2="15" y2="12"></line><line x1="9" y1="15" x2="15" y2="15"></line></g></g><g id="icon-folder" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-document)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><g stroke="var(--color-icon-text)" fill="none" stroke-width="1.5"><polygon points="5,5 10,5 12,8 19,8 19,18 5,18"></polygon></g></g><g id="icon-chevronDown" class="tsd-no-select"><path d="M4.93896 8.531L12 15.591L19.061 8.531L16.939 6.409L12 11.349L7.06098 6.409L4.93896 8.531Z" fill="var(--color-icon-text)"></path></g><g id="icon-chevronSmall" class="tsd-no-select"><path d="M1.5 5.50969L8 11.6609L14.5 5.50969L12.5466 3.66086L8 7.96494L3.45341 3.66086L1.5 5.50969Z" fill="var(--color-icon-text)"></path></g><g id="icon-checkbox" class="tsd-no-select"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></g><g id="icon-menu" class="tsd-no-select"><rect x="1" y="3" width="14" height="2" fill="var(--color-icon-text)"></rect><rect x="1" y="7" width="14" height="2" fill="var(--color-icon-text)"></rect><rect x="1" y="11" width="14" height="2" fill="var(--color-icon-text)"></rect></g><g id="icon-search" class="tsd-no-select"><path d="M15.7824 13.833L12.6666 10.7177C12.5259 10.5771 12.3353 10.499 12.1353 10.499H11.6259C12.4884 9.39596 13.001 8.00859 13.001 6.49937C13.001 2.90909 10.0914 0 6.50048 0C2.90959 0 0 2.90909 0 6.49937C0 10.0896 2.90959 12.9987 6.50048 12.9987C8.00996 12.9987 9.39756 12.4863 10.5008 11.6239V12.1332C10.5008 12.3332 10.5789 12.5238 10.7195 12.6644L13.8354 15.7797C14.1292 16.0734 14.6042 16.0734 14.8948 15.7797L15.7793 14.8954C16.0731 14.6017 16.0731 14.1267 15.7824 13.833ZM6.50048 10.499C4.29094 10.499 2.50018 8.71165 2.50018 6.49937C2.50018 4.29021 4.28781 2.49976 6.50048 2.49976C8.71001 2.49976 10.5008 4.28708 10.5008 6.49937C10.5008 8.70852 8.71314 10.499 6.50048 10.499Z" fill="var(--color-icon-text)"></path></g><g id="icon-anchor" class="tsd-no-select"><g stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"></path><path d="M10 14a3.5 3.5 0 0 0 5 0l4 -4a3.5 3.5 0 0 0 -5 -5l-.5 .5"></path><path d="M14 10a3.5 3.5 0 0 0 -5 0l-4 4a3.5 3.5 0 0 0 5 5l.5 -.5"></path></g></g><g id="icon-alertNote" class="tsd-no-select"><path fill="var(--color-alert-note)" d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8Zm8-6.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13ZM6.5 7.75A.75.75 0 0 1 7.25 7h1a.75.75 0 0 1 .75.75v2.75h.25a.75.75 0 0 1 0 1.5h-2a.75.75 0 0 1 0-1.5h.25v-2h-.25a.75.75 0 0 1-.75-.75ZM8 6a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></g><g id="icon-alertTip" class="tsd-no-select"><path fill="var(--color-alert-tip)" d="M8 1.5c-2.363 0-4 1.69-4 3.75 0 .984.424 1.625.984 2.304l.214.253c.223.264.47.556.673.848.284.411.537.896.621 1.49a.75.75 0 0 1-1.484.211c-.04-.282-.163-.547-.37-.847a8.456 8.456 0 0 0-.542-.68c-.084-.1-.173-.205-.268-.32C3.201 7.75 2.5 6.766 2.5 5.25 2.5 2.31 4.863 0 8 0s5.5 2.31 5.5 5.25c0 1.516-.701 2.5-1.328 3.259-.095.115-.184.22-.268.319-.207.245-.383.453-.541.681-.208.3-.33.565-.37.847a.751.751 0 0 1-1.485-.212c.084-.593.337-1.078.621-1.489.203-.292.45-.584.673-.848.075-.088.147-.173.213-.253.561-.679.985-1.32.985-2.304 0-2.06-1.637-3.75-4-3.75ZM5.75 12h4.5a.75.75 0 0 1 0 1.5h-4.5a.75.75 0 0 1 0-1.5ZM6 15.25a.75.75 0 0 1 .75-.75h2.5a.75.75 0 0 1 0 1.5h-2.5a.75.75 0 0 1-.75-.75Z"></path></g><g id="icon-alertImportant" class="tsd-no-select"><path fill="var(--color-alert-important)" d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></g><g id="icon-alertWarning" class="tsd-no-select"><path fill="var(--color-alert-warning)" d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></g><g id="icon-alertCaution" class="tsd-no-select"><path fill="var(--color-alert-caution)" d="M4.47.22A.749.749 0 0 1 5 0h6c.199 0 .389.079.53.22l4.25 4.25c.141.14.22.331.22.53v6a.749.749 0 0 1-.22.53l-4.25 4.25A.749.749 0 0 1 11 16H5a.749.749 0 0 1-.53-.22L.22 11.53A.749.749 0 0 1 0 11V5c0-.199.079-.389.22-.53Zm.84 1.28L1.5 5.31v5.38l3.81 3.81h5.38l3.81-3.81V5.31L10.69 1.5ZM8 4a.75.75 0 0 1 .75.75v3.5a.75.75 0 0 1-1.5 0v-3.5A.75.75 0 0 1 8 4Zm0 8a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></g>`;
-    svg.style.display = "none";
-    if (location.protocol === "file:") updateUseElements();
-  }
+(function() {
+    addIcons();
+    function addIcons() {
+        if (document.readyState === "loading") return document.addEventListener("DOMContentLoaded", addIcons);
+        const svg = document.body.appendChild(document.createElementNS("http://www.w3.org/2000/svg", "svg"));
+        svg.innerHTML = `<symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Module" id="icon-1"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-module)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Module" id="icon-2"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-module)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Namespace" id="icon-4"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-namespace)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">N</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Enumeration" id="icon-8"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-enum)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">E</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Enumeration Member" id="icon-16"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Variable" id="icon-32"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-variable)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">V</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Function" id="icon-64"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-function)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">F</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Class" id="icon-128"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-class)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Interface" id="icon-256"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-interface)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">I</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Constructor" id="icon-512"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-constructor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Property" id="icon-1024"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Method" id="icon-2048"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-method)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Function" id="icon-4096"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-function)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">F</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Index Signature" id="icon-8192"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Constructor" id="icon-16384"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-constructor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Property" id="icon-32768"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Type Alias" id="icon-65536"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Type Alias" id="icon-131072"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Accessor" id="icon-262144"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Accessor" id="icon-524288"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Accessor" id="icon-1048576"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Type Alias" id="icon-2097152"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Reference" id="icon-4194304"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-reference)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">R</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Document" id="icon-8388608"><rect fill="var(--color-icon-background)" stroke="var(--color-document)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><g stroke="var(--color-icon-text)" fill="none" stroke-width="1.5"><polygon points="6,5 6,19 18,19, 18,10 13,5"></polygon><line x1="9" y1="9" x2="13" y2="9"></line><line x1="9" y1="12" x2="15" y2="12"></line><line x1="9" y1="15" x2="15" y2="15"></line></g></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Folder" id="icon-folder"><rect fill="var(--color-icon-background)" stroke="var(--color-document)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><g stroke="var(--color-icon-text)" fill="none" stroke-width="1.5"><polygon points="5,5 10,5 12,8 19,8 19,18 5,18"></polygon></g></symbol><symbol width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true" id="icon-chevronDown" class="tsd-no-select"><path d="M4.93896 8.531L12 15.591L19.061 8.531L16.939 6.409L12 11.349L7.06098 6.409L4.93896 8.531Z" fill="var(--color-icon-text)"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true" id="icon-chevronSmall" class="tsd-no-select"><path d="M1.5 5.50969L8 11.6609L14.5 5.50969L12.5466 3.66086L8 7.96494L3.45341 3.66086L1.5 5.50969Z" fill="var(--color-icon-text)"></path></symbol><symbol width="32" height="32" viewBox="0 0 32 32" aria-hidden="true" id="icon-checkbox" class="tsd-no-select"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true" id="icon-menu" class="tsd-no-select"><rect x="1" y="3" width="14" height="2" fill="var(--color-icon-text)"></rect><rect x="1" y="7" width="14" height="2" fill="var(--color-icon-text)"></rect><rect x="1" y="11" width="14" height="2" fill="var(--color-icon-text)"></rect></symbol><symbol width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true" id="icon-search" class="tsd-no-select"><path d="M15.7824 13.833L12.6666 10.7177C12.5259 10.5771 12.3353 10.499 12.1353 10.499H11.6259C12.4884 9.39596 13.001 8.00859 13.001 6.49937C13.001 2.90909 10.0914 0 6.50048 0C2.90959 0 0 2.90909 0 6.49937C0 10.0896 2.90959 12.9987 6.50048 12.9987C8.00996 12.9987 9.39756 12.4863 10.5008 11.6239V12.1332C10.5008 12.3332 10.5789 12.5238 10.7195 12.6644L13.8354 15.7797C14.1292 16.0734 14.6042 16.0734 14.8948 15.7797L15.7793 14.8954C16.0731 14.6017 16.0731 14.1267 15.7824 13.833ZM6.50048 10.499C4.29094 10.499 2.50018 8.71165 2.50018 6.49937C2.50018 4.29021 4.28781 2.49976 6.50048 2.49976C8.71001 2.49976 10.5008 4.28708 10.5008 6.49937C10.5008 8.70852 8.71314 10.499 6.50048 10.499Z" fill="var(--color-icon-text)"></path></symbol><symbol viewBox="0 0 24 24" aria-hidden="true" id="icon-anchor" class="tsd-no-select"><g stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"></path><path d="M10 14a3.5 3.5 0 0 0 5 0l4 -4a3.5 3.5 0 0 0 -5 -5l-.5 .5"></path><path d="M14 10a3.5 3.5 0 0 0 -5 0l-4 4a3.5 3.5 0 0 0 5 5l.5 -.5"></path></g></symbol><symbol xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertNote" class="tsd-no-select"><path fill="var(--color-alert-note)" d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8Zm8-6.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13ZM6.5 7.75A.75.75 0 0 1 7.25 7h1a.75.75 0 0 1 .75.75v2.75h.25a.75.75 0 0 1 0 1.5h-2a.75.75 0 0 1 0-1.5h.25v-2h-.25a.75.75 0 0 1-.75-.75ZM8 6a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertTip" class="tsd-no-select"><path fill="var(--color-alert-tip)" d="M8 1.5c-2.363 0-4 1.69-4 3.75 0 .984.424 1.625.984 2.304l.214.253c.223.264.47.556.673.848.284.411.537.896.621 1.49a.75.75 0 0 1-1.484.211c-.04-.282-.163-.547-.37-.847a8.456 8.456 0 0 0-.542-.68c-.084-.1-.173-.205-.268-.32C3.201 7.75 2.5 6.766 2.5 5.25 2.5 2.31 4.863 0 8 0s5.5 2.31 5.5 5.25c0 1.516-.701 2.5-1.328 3.259-.095.115-.184.22-.268.319-.207.245-.383.453-.541.681-.208.3-.33.565-.37.847a.751.751 0 0 1-1.485-.212c.084-.593.337-1.078.621-1.489.203-.292.45-.584.673-.848.075-.088.147-.173.213-.253.561-.679.985-1.32.985-2.304 0-2.06-1.637-3.75-4-3.75ZM5.75 12h4.5a.75.75 0 0 1 0 1.5h-4.5a.75.75 0 0 1 0-1.5ZM6 15.25a.75.75 0 0 1 .75-.75h2.5a.75.75 0 0 1 0 1.5h-2.5a.75.75 0 0 1-.75-.75Z"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertImportant" class="tsd-no-select"><path fill="var(--color-alert-important)" d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertWarning" class="tsd-no-select"><path fill="var(--color-alert-warning)" d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertCaution" class="tsd-no-select"><path fill="var(--color-alert-caution)" d="M4.47.22A.749.749 0 0 1 5 0h6c.199 0 .389.079.53.22l4.25 4.25c.141.14.22.331.22.53v6a.749.749 0 0 1-.22.53l-4.25 4.25A.749.749 0 0 1 11 16H5a.749.749 0 0 1-.53-.22L.22 11.53A.749.749 0 0 1 0 11V5c0-.199.079-.389.22-.53Zm.84 1.28L1.5 5.31v5.38l3.81 3.81h5.38l3.81-3.81V5.31L10.69 1.5ZM8 4a.75.75 0 0 1 .75.75v3.5a.75.75 0 0 1-1.5 0v-3.5A.75.75 0 0 1 8 4Zm0 8a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></symbol>`;
+        svg.style.display = "none";
+        if (location.protocol === "file:") updateUseElements();
+    }
 
-  function updateUseElements() {
-    document.querySelectorAll("use").forEach((el) => {
-      if (el.getAttribute("href").includes("#icon-")) {
-        el.setAttribute("href", el.getAttribute("href").replace(/.*#/, "#"));
-      }
-    });
-  }
-})();
+    function updateUseElements() {
+        document.querySelectorAll("use").forEach(el => {
+            if (el.getAttribute("href").includes("#icon-")) {
+                el.setAttribute("href", el.getAttribute("href").replace(/.*#/, "#"));
+            }
+        });
+    }
+})()
\ No newline at end of file
diff --git a/docs/api/player-sdk/assets/icons.svg b/docs/api/player-sdk/assets/icons.svg
index 10db10b..be7798f 100644
--- a/docs/api/player-sdk/assets/icons.svg
+++ b/docs/api/player-sdk/assets/icons.svg
@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg"><g id="icon-1" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-module)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></g><g id="icon-2" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-module)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></g><g id="icon-4" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-namespace)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">N</text></g><g id="icon-8" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-enum)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">E</text></g><g id="icon-16" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></g><g id="icon-32" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-variable)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">V</text></g><g id="icon-64" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-function)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">F</text></g><g id="icon-128" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-class)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></g><g id="icon-256" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-interface)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">I</text></g><g id="icon-512" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-constructor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></g><g id="icon-1024" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></g><g id="icon-2048" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-method)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></g><g id="icon-4096" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-function)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">F</text></g><g id="icon-8192" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></g><g id="icon-16384" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-constructor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></g><g id="icon-32768" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></g><g id="icon-65536" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></g><g id="icon-131072" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></g><g id="icon-262144" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></g><g id="icon-524288" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></g><g id="icon-1048576" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></g><g id="icon-2097152" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></g><g id="icon-4194304" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-reference)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">R</text></g><g id="icon-8388608" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-document)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><g stroke="var(--color-icon-text)" fill="none" stroke-width="1.5"><polygon points="6,5 6,19 18,19, 18,10 13,5"></polygon><line x1="9" y1="9" x2="13" y2="9"></line><line x1="9" y1="12" x2="15" y2="12"></line><line x1="9" y1="15" x2="15" y2="15"></line></g></g><g id="icon-folder" class="tsd-no-select"><rect fill="var(--color-icon-background)" stroke="var(--color-document)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><g stroke="var(--color-icon-text)" fill="none" stroke-width="1.5"><polygon points="5,5 10,5 12,8 19,8 19,18 5,18"></polygon></g></g><g id="icon-chevronDown" class="tsd-no-select"><path d="M4.93896 8.531L12 15.591L19.061 8.531L16.939 6.409L12 11.349L7.06098 6.409L4.93896 8.531Z" fill="var(--color-icon-text)"></path></g><g id="icon-chevronSmall" class="tsd-no-select"><path d="M1.5 5.50969L8 11.6609L14.5 5.50969L12.5466 3.66086L8 7.96494L3.45341 3.66086L1.5 5.50969Z" fill="var(--color-icon-text)"></path></g><g id="icon-checkbox" class="tsd-no-select"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></g><g id="icon-menu" class="tsd-no-select"><rect x="1" y="3" width="14" height="2" fill="var(--color-icon-text)"></rect><rect x="1" y="7" width="14" height="2" fill="var(--color-icon-text)"></rect><rect x="1" y="11" width="14" height="2" fill="var(--color-icon-text)"></rect></g><g id="icon-search" class="tsd-no-select"><path d="M15.7824 13.833L12.6666 10.7177C12.5259 10.5771 12.3353 10.499 12.1353 10.499H11.6259C12.4884 9.39596 13.001 8.00859 13.001 6.49937C13.001 2.90909 10.0914 0 6.50048 0C2.90959 0 0 2.90909 0 6.49937C0 10.0896 2.90959 12.9987 6.50048 12.9987C8.00996 12.9987 9.39756 12.4863 10.5008 11.6239V12.1332C10.5008 12.3332 10.5789 12.5238 10.7195 12.6644L13.8354 15.7797C14.1292 16.0734 14.6042 16.0734 14.8948 15.7797L15.7793 14.8954C16.0731 14.6017 16.0731 14.1267 15.7824 13.833ZM6.50048 10.499C4.29094 10.499 2.50018 8.71165 2.50018 6.49937C2.50018 4.29021 4.28781 2.49976 6.50048 2.49976C8.71001 2.49976 10.5008 4.28708 10.5008 6.49937C10.5008 8.70852 8.71314 10.499 6.50048 10.499Z" fill="var(--color-icon-text)"></path></g><g id="icon-anchor" class="tsd-no-select"><g stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"></path><path d="M10 14a3.5 3.5 0 0 0 5 0l4 -4a3.5 3.5 0 0 0 -5 -5l-.5 .5"></path><path d="M14 10a3.5 3.5 0 0 0 -5 0l-4 4a3.5 3.5 0 0 0 5 5l.5 -.5"></path></g></g><g id="icon-alertNote" class="tsd-no-select"><path fill="var(--color-alert-note)" d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8Zm8-6.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13ZM6.5 7.75A.75.75 0 0 1 7.25 7h1a.75.75 0 0 1 .75.75v2.75h.25a.75.75 0 0 1 0 1.5h-2a.75.75 0 0 1 0-1.5h.25v-2h-.25a.75.75 0 0 1-.75-.75ZM8 6a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></g><g id="icon-alertTip" class="tsd-no-select"><path fill="var(--color-alert-tip)" d="M8 1.5c-2.363 0-4 1.69-4 3.75 0 .984.424 1.625.984 2.304l.214.253c.223.264.47.556.673.848.284.411.537.896.621 1.49a.75.75 0 0 1-1.484.211c-.04-.282-.163-.547-.37-.847a8.456 8.456 0 0 0-.542-.68c-.084-.1-.173-.205-.268-.32C3.201 7.75 2.5 6.766 2.5 5.25 2.5 2.31 4.863 0 8 0s5.5 2.31 5.5 5.25c0 1.516-.701 2.5-1.328 3.259-.095.115-.184.22-.268.319-.207.245-.383.453-.541.681-.208.3-.33.565-.37.847a.751.751 0 0 1-1.485-.212c.084-.593.337-1.078.621-1.489.203-.292.45-.584.673-.848.075-.088.147-.173.213-.253.561-.679.985-1.32.985-2.304 0-2.06-1.637-3.75-4-3.75ZM5.75 12h4.5a.75.75 0 0 1 0 1.5h-4.5a.75.75 0 0 1 0-1.5ZM6 15.25a.75.75 0 0 1 .75-.75h2.5a.75.75 0 0 1 0 1.5h-2.5a.75.75 0 0 1-.75-.75Z"></path></g><g id="icon-alertImportant" class="tsd-no-select"><path fill="var(--color-alert-important)" d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></g><g id="icon-alertWarning" class="tsd-no-select"><path fill="var(--color-alert-warning)" d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></g><g id="icon-alertCaution" class="tsd-no-select"><path fill="var(--color-alert-caution)" d="M4.47.22A.749.749 0 0 1 5 0h6c.199 0 .389.079.53.22l4.25 4.25c.141.14.22.331.22.53v6a.749.749 0 0 1-.22.53l-4.25 4.25A.749.749 0 0 1 11 16H5a.749.749 0 0 1-.53-.22L.22 11.53A.749.749 0 0 1 0 11V5c0-.199.079-.389.22-.53Zm.84 1.28L1.5 5.31v5.38l3.81 3.81h5.38l3.81-3.81V5.31L10.69 1.5ZM8 4a.75.75 0 0 1 .75.75v3.5a.75.75 0 0 1-1.5 0v-3.5A.75.75 0 0 1 8 4Zm0 8a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></g></svg>
\ No newline at end of file
+<svg xmlns="http://www.w3.org/2000/svg"><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Module" id="icon-1"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-module)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Module" id="icon-2"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-module)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Namespace" id="icon-4"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-namespace)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">N</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Enumeration" id="icon-8"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-enum)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">E</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Enumeration Member" id="icon-16"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Variable" id="icon-32"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-variable)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">V</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Function" id="icon-64"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-function)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">F</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Class" id="icon-128"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-class)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Interface" id="icon-256"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-interface)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">I</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Constructor" id="icon-512"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-constructor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Property" id="icon-1024"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Method" id="icon-2048"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-method)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">M</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Function" id="icon-4096"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-function)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">F</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Index Signature" id="icon-8192"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Constructor" id="icon-16384"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-constructor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">C</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Property" id="icon-32768"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-property)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">P</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Type Alias" id="icon-65536"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Type Alias" id="icon-131072"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Accessor" id="icon-262144"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Accessor" id="icon-524288"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Accessor" id="icon-1048576"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-accessor)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">A</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Type Alias" id="icon-2097152"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-type-alias)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">T</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Reference" id="icon-4194304"><rect fill="var(--color-icon-background)" stroke="var(--color-ts-reference)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="12"></rect><text fill="var(--color-icon-text)" x="50%" y="50%" dy="0.35em" text-anchor="middle">R</text></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Document" id="icon-8388608"><rect fill="var(--color-icon-background)" stroke="var(--color-document)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><g stroke="var(--color-icon-text)" fill="none" stroke-width="1.5"><polygon points="6,5 6,19 18,19, 18,10 13,5"></polygon><line x1="9" y1="9" x2="13" y2="9"></line><line x1="9" y1="12" x2="15" y2="12"></line><line x1="9" y1="15" x2="15" y2="15"></line></g></symbol><symbol class="tsd-kind-icon tsd-no-select" viewBox="0 0 24 24" aria-label="Folder" id="icon-folder"><rect fill="var(--color-icon-background)" stroke="var(--color-document)" stroke-width="1.5" x="1" y="1" width="22" height="22" rx="6"></rect><g stroke="var(--color-icon-text)" fill="none" stroke-width="1.5"><polygon points="5,5 10,5 12,8 19,8 19,18 5,18"></polygon></g></symbol><symbol width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true" id="icon-chevronDown" class="tsd-no-select"><path d="M4.93896 8.531L12 15.591L19.061 8.531L16.939 6.409L12 11.349L7.06098 6.409L4.93896 8.531Z" fill="var(--color-icon-text)"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true" id="icon-chevronSmall" class="tsd-no-select"><path d="M1.5 5.50969L8 11.6609L14.5 5.50969L12.5466 3.66086L8 7.96494L3.45341 3.66086L1.5 5.50969Z" fill="var(--color-icon-text)"></path></symbol><symbol width="32" height="32" viewBox="0 0 32 32" aria-hidden="true" id="icon-checkbox" class="tsd-no-select"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true" id="icon-menu" class="tsd-no-select"><rect x="1" y="3" width="14" height="2" fill="var(--color-icon-text)"></rect><rect x="1" y="7" width="14" height="2" fill="var(--color-icon-text)"></rect><rect x="1" y="11" width="14" height="2" fill="var(--color-icon-text)"></rect></symbol><symbol width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true" id="icon-search" class="tsd-no-select"><path d="M15.7824 13.833L12.6666 10.7177C12.5259 10.5771 12.3353 10.499 12.1353 10.499H11.6259C12.4884 9.39596 13.001 8.00859 13.001 6.49937C13.001 2.90909 10.0914 0 6.50048 0C2.90959 0 0 2.90909 0 6.49937C0 10.0896 2.90959 12.9987 6.50048 12.9987C8.00996 12.9987 9.39756 12.4863 10.5008 11.6239V12.1332C10.5008 12.3332 10.5789 12.5238 10.7195 12.6644L13.8354 15.7797C14.1292 16.0734 14.6042 16.0734 14.8948 15.7797L15.7793 14.8954C16.0731 14.6017 16.0731 14.1267 15.7824 13.833ZM6.50048 10.499C4.29094 10.499 2.50018 8.71165 2.50018 6.49937C2.50018 4.29021 4.28781 2.49976 6.50048 2.49976C8.71001 2.49976 10.5008 4.28708 10.5008 6.49937C10.5008 8.70852 8.71314 10.499 6.50048 10.499Z" fill="var(--color-icon-text)"></path></symbol><symbol viewBox="0 0 24 24" aria-hidden="true" id="icon-anchor" class="tsd-no-select"><g stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"></path><path d="M10 14a3.5 3.5 0 0 0 5 0l4 -4a3.5 3.5 0 0 0 -5 -5l-.5 .5"></path><path d="M14 10a3.5 3.5 0 0 0 -5 0l-4 4a3.5 3.5 0 0 0 5 5l.5 -.5"></path></g></symbol><symbol xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertNote" class="tsd-no-select"><path fill="var(--color-alert-note)" d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8Zm8-6.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13ZM6.5 7.75A.75.75 0 0 1 7.25 7h1a.75.75 0 0 1 .75.75v2.75h.25a.75.75 0 0 1 0 1.5h-2a.75.75 0 0 1 0-1.5h.25v-2h-.25a.75.75 0 0 1-.75-.75ZM8 6a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertTip" class="tsd-no-select"><path fill="var(--color-alert-tip)" d="M8 1.5c-2.363 0-4 1.69-4 3.75 0 .984.424 1.625.984 2.304l.214.253c.223.264.47.556.673.848.284.411.537.896.621 1.49a.75.75 0 0 1-1.484.211c-.04-.282-.163-.547-.37-.847a8.456 8.456 0 0 0-.542-.68c-.084-.1-.173-.205-.268-.32C3.201 7.75 2.5 6.766 2.5 5.25 2.5 2.31 4.863 0 8 0s5.5 2.31 5.5 5.25c0 1.516-.701 2.5-1.328 3.259-.095.115-.184.22-.268.319-.207.245-.383.453-.541.681-.208.3-.33.565-.37.847a.751.751 0 0 1-1.485-.212c.084-.593.337-1.078.621-1.489.203-.292.45-.584.673-.848.075-.088.147-.173.213-.253.561-.679.985-1.32.985-2.304 0-2.06-1.637-3.75-4-3.75ZM5.75 12h4.5a.75.75 0 0 1 0 1.5h-4.5a.75.75 0 0 1 0-1.5ZM6 15.25a.75.75 0 0 1 .75-.75h2.5a.75.75 0 0 1 0 1.5h-2.5a.75.75 0 0 1-.75-.75Z"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertImportant" class="tsd-no-select"><path fill="var(--color-alert-important)" d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertWarning" class="tsd-no-select"><path fill="var(--color-alert-warning)" d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></symbol><symbol width="16" height="16" viewBox="0 0 16 16" aria-hidden="true" id="icon-alertCaution" class="tsd-no-select"><path fill="var(--color-alert-caution)" d="M4.47.22A.749.749 0 0 1 5 0h6c.199 0 .389.079.53.22l4.25 4.25c.141.14.22.331.22.53v6a.749.749 0 0 1-.22.53l-4.25 4.25A.749.749 0 0 1 11 16H5a.749.749 0 0 1-.53-.22L.22 11.53A.749.749 0 0 1 0 11V5c0-.199.079-.389.22-.53Zm.84 1.28L1.5 5.31v5.38l3.81 3.81h5.38l3.81-3.81V5.31L10.69 1.5ZM8 4a.75.75 0 0 1 .75.75v3.5a.75.75 0 0 1-1.5 0v-3.5A.75.75 0 0 1 8 4Zm0 8a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></symbol></svg>
\ No newline at end of file
diff --git a/docs/api/player-sdk/assets/main.js b/docs/api/player-sdk/assets/main.js
index dcd466e..b0eda9e 100644
--- a/docs/api/player-sdk/assets/main.js
+++ b/docs/api/player-sdk/assets/main.js
@@ -1,2325 +1,9 @@
 "use strict";
-window.translations = {
-  copy: "Copy",
-  copied: "Copied!",
-  normally_hidden: "This member is normally hidden due to your filter settings.",
-  hierarchy_expand: "Expand",
-  hierarchy_collapse: "Collapse",
-  folder: "Folder",
-  search_index_not_available: "The search index is not available",
-  search_no_results_found_for_0: "No results found for {0}",
-  kind_1: "Project",
-  kind_2: "Module",
-  kind_4: "Namespace",
-  kind_8: "Enumeration",
-  kind_16: "Enumeration Member",
-  kind_32: "Variable",
-  kind_64: "Function",
-  kind_128: "Class",
-  kind_256: "Interface",
-  kind_512: "Constructor",
-  kind_1024: "Property",
-  kind_2048: "Method",
-  kind_4096: "Call Signature",
-  kind_8192: "Index Signature",
-  kind_16384: "Constructor Signature",
-  kind_32768: "Parameter",
-  kind_65536: "Type Literal",
-  kind_131072: "Type Parameter",
-  kind_262144: "Accessor",
-  kind_524288: "Get Signature",
-  kind_1048576: "Set Signature",
-  kind_2097152: "Type Alias",
-  kind_4194304: "Reference",
-  kind_8388608: "Document"
-};
-("use strict");
-(() => {
-  var Ke = Object.create;
-  var he = Object.defineProperty;
-  var Ge = Object.getOwnPropertyDescriptor;
-  var Ze = Object.getOwnPropertyNames;
-  var Xe = Object.getPrototypeOf,
-    Ye = Object.prototype.hasOwnProperty;
-  var et = (t, e) => () => (e || t((e = { exports: {} }).exports, e), e.exports);
-  var tt = (t, e, n, r) => {
-    if ((e && typeof e == "object") || typeof e == "function")
-      for (let i of Ze(e))
-        !Ye.call(t, i) &&
-          i !== n &&
-          he(t, i, { get: () => e[i], enumerable: !(r = Ge(e, i)) || r.enumerable });
-    return t;
-  };
-  var nt = (t, e, n) => (
-    (n = t != null ? Ke(Xe(t)) : {}),
-    tt(e || !t || !t.__esModule ? he(n, "default", { value: t, enumerable: !0 }) : n, t)
-  );
-  var ye = et((me, ge) => {
-    (function () {
-      var t = function (e) {
-        var n = new t.Builder();
-        return (
-          n.pipeline.add(t.trimmer, t.stopWordFilter, t.stemmer),
-          n.searchPipeline.add(t.stemmer),
-          e.call(n, n),
-          n.build()
-        );
-      };
-      t.version = "2.3.9";
-      ((t.utils = {}),
-        (t.utils.warn = (function (e) {
-          return function (n) {
-            e.console && console.warn && console.warn(n);
-          };
-        })(this)),
-        (t.utils.asString = function (e) {
-          return e == null ? "" : e.toString();
-        }),
-        (t.utils.clone = function (e) {
-          if (e == null) return e;
-          for (var n = Object.create(null), r = Object.keys(e), i = 0; i < r.length; i++) {
-            var s = r[i],
-              o = e[s];
-            if (Array.isArray(o)) {
-              n[s] = o.slice();
-              continue;
-            }
-            if (typeof o == "string" || typeof o == "number" || typeof o == "boolean") {
-              n[s] = o;
-              continue;
-            }
-            throw new TypeError("clone is not deep and does not support nested objects");
-          }
-          return n;
-        }),
-        (t.FieldRef = function (e, n, r) {
-          ((this.docRef = e), (this.fieldName = n), (this._stringValue = r));
-        }),
-        (t.FieldRef.joiner = "/"),
-        (t.FieldRef.fromString = function (e) {
-          var n = e.indexOf(t.FieldRef.joiner);
-          if (n === -1) throw "malformed field ref string";
-          var r = e.slice(0, n),
-            i = e.slice(n + 1);
-          return new t.FieldRef(i, r, e);
-        }),
-        (t.FieldRef.prototype.toString = function () {
-          return (
-            this._stringValue == null &&
-              (this._stringValue = this.fieldName + t.FieldRef.joiner + this.docRef),
-            this._stringValue
-          );
-        }));
-      ((t.Set = function (e) {
-        if (((this.elements = Object.create(null)), e)) {
-          this.length = e.length;
-          for (var n = 0; n < this.length; n++) this.elements[e[n]] = !0;
-        } else this.length = 0;
-      }),
-        (t.Set.complete = {
-          intersect: function (e) {
-            return e;
-          },
-          union: function () {
-            return this;
-          },
-          contains: function () {
-            return !0;
-          }
-        }),
-        (t.Set.empty = {
-          intersect: function () {
-            return this;
-          },
-          union: function (e) {
-            return e;
-          },
-          contains: function () {
-            return !1;
-          }
-        }),
-        (t.Set.prototype.contains = function (e) {
-          return !!this.elements[e];
-        }),
-        (t.Set.prototype.intersect = function (e) {
-          var n,
-            r,
-            i,
-            s = [];
-          if (e === t.Set.complete) return this;
-          if (e === t.Set.empty) return e;
-          (this.length < e.length ? ((n = this), (r = e)) : ((n = e), (r = this)),
-            (i = Object.keys(n.elements)));
-          for (var o = 0; o < i.length; o++) {
-            var a = i[o];
-            a in r.elements && s.push(a);
-          }
-          return new t.Set(s);
-        }),
-        (t.Set.prototype.union = function (e) {
-          return e === t.Set.complete
-            ? t.Set.complete
-            : e === t.Set.empty
-              ? this
-              : new t.Set(Object.keys(this.elements).concat(Object.keys(e.elements)));
-        }),
-        (t.idf = function (e, n) {
-          var r = 0;
-          for (var i in e) i != "_index" && (r += Object.keys(e[i]).length);
-          var s = (n - r + 0.5) / (r + 0.5);
-          return Math.log(1 + Math.abs(s));
-        }),
-        (t.Token = function (e, n) {
-          ((this.str = e || ""), (this.metadata = n || {}));
-        }),
-        (t.Token.prototype.toString = function () {
-          return this.str;
-        }),
-        (t.Token.prototype.update = function (e) {
-          return ((this.str = e(this.str, this.metadata)), this);
-        }),
-        (t.Token.prototype.clone = function (e) {
-          return (
-            (e =
-              e ||
-              function (n) {
-                return n;
-              }),
-            new t.Token(e(this.str, this.metadata), this.metadata)
-          );
-        }));
-      ((t.tokenizer = function (e, n) {
-        if (e == null || e == null) return [];
-        if (Array.isArray(e))
-          return e.map(function (f) {
-            return new t.Token(t.utils.asString(f).toLowerCase(), t.utils.clone(n));
-          });
-        for (var r = e.toString().toLowerCase(), i = r.length, s = [], o = 0, a = 0; o <= i; o++) {
-          var c = r.charAt(o),
-            l = o - a;
-          if (c.match(t.tokenizer.separator) || o == i) {
-            if (l > 0) {
-              var d = t.utils.clone(n) || {};
-              ((d.position = [a, l]), (d.index = s.length), s.push(new t.Token(r.slice(a, o), d)));
-            }
-            a = o + 1;
-          }
-        }
-        return s;
-      }),
-        (t.tokenizer.separator = /[\s\-]+/));
-      ((t.Pipeline = function () {
-        this._stack = [];
-      }),
-        (t.Pipeline.registeredFunctions = Object.create(null)),
-        (t.Pipeline.registerFunction = function (e, n) {
-          (n in this.registeredFunctions &&
-            t.utils.warn("Overwriting existing registered function: " + n),
-            (e.label = n),
-            (t.Pipeline.registeredFunctions[e.label] = e));
-        }),
-        (t.Pipeline.warnIfFunctionNotRegistered = function (e) {
-          var n = e.label && e.label in this.registeredFunctions;
-          n ||
-            t.utils.warn(
-              `Function is not registered with pipeline. This may cause problems when serialising the index.
-`,
-              e
-            );
-        }),
-        (t.Pipeline.load = function (e) {
-          var n = new t.Pipeline();
-          return (
-            e.forEach(function (r) {
-              var i = t.Pipeline.registeredFunctions[r];
-              if (i) n.add(i);
-              else throw new Error("Cannot load unregistered function: " + r);
-            }),
-            n
-          );
-        }),
-        (t.Pipeline.prototype.add = function () {
-          var e = Array.prototype.slice.call(arguments);
-          e.forEach(function (n) {
-            (t.Pipeline.warnIfFunctionNotRegistered(n), this._stack.push(n));
-          }, this);
-        }),
-        (t.Pipeline.prototype.after = function (e, n) {
-          t.Pipeline.warnIfFunctionNotRegistered(n);
-          var r = this._stack.indexOf(e);
-          if (r == -1) throw new Error("Cannot find existingFn");
-          ((r = r + 1), this._stack.splice(r, 0, n));
-        }),
-        (t.Pipeline.prototype.before = function (e, n) {
-          t.Pipeline.warnIfFunctionNotRegistered(n);
-          var r = this._stack.indexOf(e);
-          if (r == -1) throw new Error("Cannot find existingFn");
-          this._stack.splice(r, 0, n);
-        }),
-        (t.Pipeline.prototype.remove = function (e) {
-          var n = this._stack.indexOf(e);
-          n != -1 && this._stack.splice(n, 1);
-        }),
-        (t.Pipeline.prototype.run = function (e) {
-          for (var n = this._stack.length, r = 0; r < n; r++) {
-            for (var i = this._stack[r], s = [], o = 0; o < e.length; o++) {
-              var a = i(e[o], o, e);
-              if (!(a == null || a === ""))
-                if (Array.isArray(a)) for (var c = 0; c < a.length; c++) s.push(a[c]);
-                else s.push(a);
-            }
-            e = s;
-          }
-          return e;
-        }),
-        (t.Pipeline.prototype.runString = function (e, n) {
-          var r = new t.Token(e, n);
-          return this.run([r]).map(function (i) {
-            return i.toString();
-          });
-        }),
-        (t.Pipeline.prototype.reset = function () {
-          this._stack = [];
-        }),
-        (t.Pipeline.prototype.toJSON = function () {
-          return this._stack.map(function (e) {
-            return (t.Pipeline.warnIfFunctionNotRegistered(e), e.label);
-          });
-        }));
-      ((t.Vector = function (e) {
-        ((this._magnitude = 0), (this.elements = e || []));
-      }),
-        (t.Vector.prototype.positionForIndex = function (e) {
-          if (this.elements.length == 0) return 0;
-          for (
-            var n = 0,
-              r = this.elements.length / 2,
-              i = r - n,
-              s = Math.floor(i / 2),
-              o = this.elements[s * 2];
-            i > 1 && (o < e && (n = s), o > e && (r = s), o != e);
-          )
-            ((i = r - n), (s = n + Math.floor(i / 2)), (o = this.elements[s * 2]));
-          if (o == e || o > e) return s * 2;
-          if (o < e) return (s + 1) * 2;
-        }),
-        (t.Vector.prototype.insert = function (e, n) {
-          this.upsert(e, n, function () {
-            throw "duplicate index";
-          });
-        }),
-        (t.Vector.prototype.upsert = function (e, n, r) {
-          this._magnitude = 0;
-          var i = this.positionForIndex(e);
-          this.elements[i] == e
-            ? (this.elements[i + 1] = r(this.elements[i + 1], n))
-            : this.elements.splice(i, 0, e, n);
-        }),
-        (t.Vector.prototype.magnitude = function () {
-          if (this._magnitude) return this._magnitude;
-          for (var e = 0, n = this.elements.length, r = 1; r < n; r += 2) {
-            var i = this.elements[r];
-            e += i * i;
-          }
-          return (this._magnitude = Math.sqrt(e));
-        }),
-        (t.Vector.prototype.dot = function (e) {
-          for (
-            var n = 0,
-              r = this.elements,
-              i = e.elements,
-              s = r.length,
-              o = i.length,
-              a = 0,
-              c = 0,
-              l = 0,
-              d = 0;
-            l < s && d < o;
-          )
-            ((a = r[l]),
-              (c = i[d]),
-              a < c
-                ? (l += 2)
-                : a > c
-                  ? (d += 2)
-                  : a == c && ((n += r[l + 1] * i[d + 1]), (l += 2), (d += 2)));
-          return n;
-        }),
-        (t.Vector.prototype.similarity = function (e) {
-          return this.dot(e) / this.magnitude() || 0;
-        }),
-        (t.Vector.prototype.toArray = function () {
-          for (
-            var e = new Array(this.elements.length / 2), n = 1, r = 0;
-            n < this.elements.length;
-            n += 2, r++
-          )
-            e[r] = this.elements[n];
-          return e;
-        }),
-        (t.Vector.prototype.toJSON = function () {
-          return this.elements;
-        }));
-      ((t.stemmer = (function () {
-        var e = {
-            ational: "ate",
-            tional: "tion",
-            enci: "ence",
-            anci: "ance",
-            izer: "ize",
-            bli: "ble",
-            alli: "al",
-            entli: "ent",
-            eli: "e",
-            ousli: "ous",
-            ization: "ize",
-            ation: "ate",
-            ator: "ate",
-            alism: "al",
-            iveness: "ive",
-            fulness: "ful",
-            ousness: "ous",
-            aliti: "al",
-            iviti: "ive",
-            biliti: "ble",
-            logi: "log"
-          },
-          n = { icate: "ic", ative: "", alize: "al", iciti: "ic", ical: "ic", ful: "", ness: "" },
-          r = "[^aeiou]",
-          i = "[aeiouy]",
-          s = r + "[^aeiouy]*",
-          o = i + "[aeiou]*",
-          a = "^(" + s + ")?" + o + s,
-          c = "^(" + s + ")?" + o + s + "(" + o + ")?$",
-          l = "^(" + s + ")?" + o + s + o + s,
-          d = "^(" + s + ")?" + i,
-          f = new RegExp(a),
-          p = new RegExp(l),
-          v = new RegExp(c),
-          x = new RegExp(d),
-          w = /^(.+?)(ss|i)es$/,
-          m = /^(.+?)([^s])s$/,
-          g = /^(.+?)eed$/,
-          T = /^(.+?)(ed|ing)$/,
-          L = /.$/,
-          C = /(at|bl|iz)$/,
-          O = new RegExp("([^aeiouylsz])\\1$"),
-          j = new RegExp("^" + s + i + "[^aeiouwxy]$"),
-          N = /^(.+?[^aeiou])y$/,
-          q =
-            /^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/,
-          W = /^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/,
-          B = /^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/,
-          z = /^(.+?)(s|t)(ion)$/,
-          _ = /^(.+?)e$/,
-          U = /ll$/,
-          J = new RegExp("^" + s + i + "[^aeiouwxy]$"),
-          V = function (u) {
-            var y, P, k, h, E, Q, H;
-            if (u.length < 3) return u;
-            if (
-              ((k = u.substr(0, 1)),
-              k == "y" && (u = k.toUpperCase() + u.substr(1)),
-              (h = w),
-              (E = m),
-              h.test(u) ? (u = u.replace(h, "$1$2")) : E.test(u) && (u = u.replace(E, "$1$2")),
-              (h = g),
-              (E = T),
-              h.test(u))
-            ) {
-              var b = h.exec(u);
-              ((h = f), h.test(b[1]) && ((h = L), (u = u.replace(h, ""))));
-            } else if (E.test(u)) {
-              var b = E.exec(u);
-              ((y = b[1]),
-                (E = x),
-                E.test(y) &&
-                  ((u = y),
-                  (E = C),
-                  (Q = O),
-                  (H = j),
-                  E.test(u)
-                    ? (u = u + "e")
-                    : Q.test(u)
-                      ? ((h = L), (u = u.replace(h, "")))
-                      : H.test(u) && (u = u + "e")));
-            }
-            if (((h = N), h.test(u))) {
-              var b = h.exec(u);
-              ((y = b[1]), (u = y + "i"));
-            }
-            if (((h = q), h.test(u))) {
-              var b = h.exec(u);
-              ((y = b[1]), (P = b[2]), (h = f), h.test(y) && (u = y + e[P]));
-            }
-            if (((h = W), h.test(u))) {
-              var b = h.exec(u);
-              ((y = b[1]), (P = b[2]), (h = f), h.test(y) && (u = y + n[P]));
-            }
-            if (((h = B), (E = z), h.test(u))) {
-              var b = h.exec(u);
-              ((y = b[1]), (h = p), h.test(y) && (u = y));
-            } else if (E.test(u)) {
-              var b = E.exec(u);
-              ((y = b[1] + b[2]), (E = p), E.test(y) && (u = y));
-            }
-            if (((h = _), h.test(u))) {
-              var b = h.exec(u);
-              ((y = b[1]),
-                (h = p),
-                (E = v),
-                (Q = J),
-                (h.test(y) || (E.test(y) && !Q.test(y))) && (u = y));
-            }
-            return (
-              (h = U),
-              (E = p),
-              h.test(u) && E.test(u) && ((h = L), (u = u.replace(h, ""))),
-              k == "y" && (u = k.toLowerCase() + u.substr(1)),
-              u
-            );
-          };
-        return function (A) {
-          return A.update(V);
-        };
-      })()),
-        t.Pipeline.registerFunction(t.stemmer, "stemmer"));
-      ((t.generateStopWordFilter = function (e) {
-        var n = e.reduce(function (r, i) {
-          return ((r[i] = i), r);
-        }, {});
-        return function (r) {
-          if (r && n[r.toString()] !== r.toString()) return r;
-        };
-      }),
-        (t.stopWordFilter = t.generateStopWordFilter([
-          "a",
-          "able",
-          "about",
-          "across",
-          "after",
-          "all",
-          "almost",
-          "also",
-          "am",
-          "among",
-          "an",
-          "and",
-          "any",
-          "are",
-          "as",
-          "at",
-          "be",
-          "because",
-          "been",
-          "but",
-          "by",
-          "can",
-          "cannot",
-          "could",
-          "dear",
-          "did",
-          "do",
-          "does",
-          "either",
-          "else",
-          "ever",
-          "every",
-          "for",
-          "from",
-          "get",
-          "got",
-          "had",
-          "has",
-          "have",
-          "he",
-          "her",
-          "hers",
-          "him",
-          "his",
-          "how",
-          "however",
-          "i",
-          "if",
-          "in",
-          "into",
-          "is",
-          "it",
-          "its",
-          "just",
-          "least",
-          "let",
-          "like",
-          "likely",
-          "may",
-          "me",
-          "might",
-          "most",
-          "must",
-          "my",
-          "neither",
-          "no",
-          "nor",
-          "not",
-          "of",
-          "off",
-          "often",
-          "on",
-          "only",
-          "or",
-          "other",
-          "our",
-          "own",
-          "rather",
-          "said",
-          "say",
-          "says",
-          "she",
-          "should",
-          "since",
-          "so",
-          "some",
-          "than",
-          "that",
-          "the",
-          "their",
-          "them",
-          "then",
-          "there",
-          "these",
-          "they",
-          "this",
-          "tis",
-          "to",
-          "too",
-          "twas",
-          "us",
-          "wants",
-          "was",
-          "we",
-          "were",
-          "what",
-          "when",
-          "where",
-          "which",
-          "while",
-          "who",
-          "whom",
-          "why",
-          "will",
-          "with",
-          "would",
-          "yet",
-          "you",
-          "your"
-        ])),
-        t.Pipeline.registerFunction(t.stopWordFilter, "stopWordFilter"));
-      ((t.trimmer = function (e) {
-        return e.update(function (n) {
-          return n.replace(/^\W+/, "").replace(/\W+$/, "");
-        });
-      }),
-        t.Pipeline.registerFunction(t.trimmer, "trimmer"));
-      ((t.TokenSet = function () {
-        ((this.final = !1),
-          (this.edges = {}),
-          (this.id = t.TokenSet._nextId),
-          (t.TokenSet._nextId += 1));
-      }),
-        (t.TokenSet._nextId = 1),
-        (t.TokenSet.fromArray = function (e) {
-          for (var n = new t.TokenSet.Builder(), r = 0, i = e.length; r < i; r++) n.insert(e[r]);
-          return (n.finish(), n.root);
-        }),
-        (t.TokenSet.fromClause = function (e) {
-          return "editDistance" in e
-            ? t.TokenSet.fromFuzzyString(e.term, e.editDistance)
-            : t.TokenSet.fromString(e.term);
-        }),
-        (t.TokenSet.fromFuzzyString = function (e, n) {
-          for (var r = new t.TokenSet(), i = [{ node: r, editsRemaining: n, str: e }]; i.length; ) {
-            var s = i.pop();
-            if (s.str.length > 0) {
-              var o = s.str.charAt(0),
-                a;
-              (o in s.node.edges
-                ? (a = s.node.edges[o])
-                : ((a = new t.TokenSet()), (s.node.edges[o] = a)),
-                s.str.length == 1 && (a.final = !0),
-                i.push({ node: a, editsRemaining: s.editsRemaining, str: s.str.slice(1) }));
-            }
-            if (s.editsRemaining != 0) {
-              if ("*" in s.node.edges) var c = s.node.edges["*"];
-              else {
-                var c = new t.TokenSet();
-                s.node.edges["*"] = c;
-              }
-              if (
-                (s.str.length == 0 && (c.final = !0),
-                i.push({ node: c, editsRemaining: s.editsRemaining - 1, str: s.str }),
-                s.str.length > 1 &&
-                  i.push({
-                    node: s.node,
-                    editsRemaining: s.editsRemaining - 1,
-                    str: s.str.slice(1)
-                  }),
-                s.str.length == 1 && (s.node.final = !0),
-                s.str.length >= 1)
-              ) {
-                if ("*" in s.node.edges) var l = s.node.edges["*"];
-                else {
-                  var l = new t.TokenSet();
-                  s.node.edges["*"] = l;
-                }
-                (s.str.length == 1 && (l.final = !0),
-                  i.push({ node: l, editsRemaining: s.editsRemaining - 1, str: s.str.slice(1) }));
-              }
-              if (s.str.length > 1) {
-                var d = s.str.charAt(0),
-                  f = s.str.charAt(1),
-                  p;
-                (f in s.node.edges
-                  ? (p = s.node.edges[f])
-                  : ((p = new t.TokenSet()), (s.node.edges[f] = p)),
-                  s.str.length == 1 && (p.final = !0),
-                  i.push({
-                    node: p,
-                    editsRemaining: s.editsRemaining - 1,
-                    str: d + s.str.slice(2)
-                  }));
-              }
-            }
-          }
-          return r;
-        }),
-        (t.TokenSet.fromString = function (e) {
-          for (var n = new t.TokenSet(), r = n, i = 0, s = e.length; i < s; i++) {
-            var o = e[i],
-              a = i == s - 1;
-            if (o == "*") ((n.edges[o] = n), (n.final = a));
-            else {
-              var c = new t.TokenSet();
-              ((c.final = a), (n.edges[o] = c), (n = c));
-            }
-          }
-          return r;
-        }),
-        (t.TokenSet.prototype.toArray = function () {
-          for (var e = [], n = [{ prefix: "", node: this }]; n.length; ) {
-            var r = n.pop(),
-              i = Object.keys(r.node.edges),
-              s = i.length;
-            r.node.final && (r.prefix.charAt(0), e.push(r.prefix));
-            for (var o = 0; o < s; o++) {
-              var a = i[o];
-              n.push({ prefix: r.prefix.concat(a), node: r.node.edges[a] });
-            }
-          }
-          return e;
-        }),
-        (t.TokenSet.prototype.toString = function () {
-          if (this._str) return this._str;
-          for (
-            var e = this.final ? "1" : "0", n = Object.keys(this.edges).sort(), r = n.length, i = 0;
-            i < r;
-            i++
-          ) {
-            var s = n[i],
-              o = this.edges[s];
-            e = e + s + o.id;
-          }
-          return e;
-        }),
-        (t.TokenSet.prototype.intersect = function (e) {
-          for (
-            var n = new t.TokenSet(), r = void 0, i = [{ qNode: e, output: n, node: this }];
-            i.length;
-          ) {
-            r = i.pop();
-            for (
-              var s = Object.keys(r.qNode.edges),
-                o = s.length,
-                a = Object.keys(r.node.edges),
-                c = a.length,
-                l = 0;
-              l < o;
-              l++
-            )
-              for (var d = s[l], f = 0; f < c; f++) {
-                var p = a[f];
-                if (p == d || d == "*") {
-                  var v = r.node.edges[p],
-                    x = r.qNode.edges[d],
-                    w = v.final && x.final,
-                    m = void 0;
-                  (p in r.output.edges
-                    ? ((m = r.output.edges[p]), (m.final = m.final || w))
-                    : ((m = new t.TokenSet()), (m.final = w), (r.output.edges[p] = m)),
-                    i.push({ qNode: x, output: m, node: v }));
-                }
-              }
-          }
-          return n;
-        }),
-        (t.TokenSet.Builder = function () {
-          ((this.previousWord = ""),
-            (this.root = new t.TokenSet()),
-            (this.uncheckedNodes = []),
-            (this.minimizedNodes = {}));
-        }),
-        (t.TokenSet.Builder.prototype.insert = function (e) {
-          var n,
-            r = 0;
-          if (e < this.previousWord) throw new Error("Out of order word insertion");
-          for (
-            var i = 0;
-            i < e.length && i < this.previousWord.length && e[i] == this.previousWord[i];
-            i++
-          )
-            r++;
-          (this.minimize(r),
-            this.uncheckedNodes.length == 0
-              ? (n = this.root)
-              : (n = this.uncheckedNodes[this.uncheckedNodes.length - 1].child));
-          for (var i = r; i < e.length; i++) {
-            var s = new t.TokenSet(),
-              o = e[i];
-            ((n.edges[o] = s), this.uncheckedNodes.push({ parent: n, char: o, child: s }), (n = s));
-          }
-          ((n.final = !0), (this.previousWord = e));
-        }),
-        (t.TokenSet.Builder.prototype.finish = function () {
-          this.minimize(0);
-        }),
-        (t.TokenSet.Builder.prototype.minimize = function (e) {
-          for (var n = this.uncheckedNodes.length - 1; n >= e; n--) {
-            var r = this.uncheckedNodes[n],
-              i = r.child.toString();
-            (i in this.minimizedNodes
-              ? (r.parent.edges[r.char] = this.minimizedNodes[i])
-              : ((r.child._str = i), (this.minimizedNodes[i] = r.child)),
-              this.uncheckedNodes.pop());
-          }
-        }));
-      ((t.Index = function (e) {
-        ((this.invertedIndex = e.invertedIndex),
-          (this.fieldVectors = e.fieldVectors),
-          (this.tokenSet = e.tokenSet),
-          (this.fields = e.fields),
-          (this.pipeline = e.pipeline));
-      }),
-        (t.Index.prototype.search = function (e) {
-          return this.query(function (n) {
-            var r = new t.QueryParser(e, n);
-            r.parse();
-          });
-        }),
-        (t.Index.prototype.query = function (e) {
-          for (
-            var n = new t.Query(this.fields),
-              r = Object.create(null),
-              i = Object.create(null),
-              s = Object.create(null),
-              o = Object.create(null),
-              a = Object.create(null),
-              c = 0;
-            c < this.fields.length;
-            c++
-          )
-            i[this.fields[c]] = new t.Vector();
-          e.call(n, n);
-          for (var c = 0; c < n.clauses.length; c++) {
-            var l = n.clauses[c],
-              d = null,
-              f = t.Set.empty;
-            l.usePipeline
-              ? (d = this.pipeline.runString(l.term, { fields: l.fields }))
-              : (d = [l.term]);
-            for (var p = 0; p < d.length; p++) {
-              var v = d[p];
-              l.term = v;
-              var x = t.TokenSet.fromClause(l),
-                w = this.tokenSet.intersect(x).toArray();
-              if (w.length === 0 && l.presence === t.Query.presence.REQUIRED) {
-                for (var m = 0; m < l.fields.length; m++) {
-                  var g = l.fields[m];
-                  o[g] = t.Set.empty;
-                }
-                break;
-              }
-              for (var T = 0; T < w.length; T++)
-                for (
-                  var L = w[T], C = this.invertedIndex[L], O = C._index, m = 0;
-                  m < l.fields.length;
-                  m++
-                ) {
-                  var g = l.fields[m],
-                    j = C[g],
-                    N = Object.keys(j),
-                    q = L + "/" + g,
-                    W = new t.Set(N);
-                  if (
-                    (l.presence == t.Query.presence.REQUIRED &&
-                      ((f = f.union(W)), o[g] === void 0 && (o[g] = t.Set.complete)),
-                    l.presence == t.Query.presence.PROHIBITED)
-                  ) {
-                    (a[g] === void 0 && (a[g] = t.Set.empty), (a[g] = a[g].union(W)));
-                    continue;
-                  }
-                  if (
-                    (i[g].upsert(O, l.boost, function (Ue, Je) {
-                      return Ue + Je;
-                    }),
-                    !s[q])
-                  ) {
-                    for (var B = 0; B < N.length; B++) {
-                      var z = N[B],
-                        _ = new t.FieldRef(z, g),
-                        U = j[z],
-                        J;
-                      (J = r[_]) === void 0 ? (r[_] = new t.MatchData(L, g, U)) : J.add(L, g, U);
-                    }
-                    s[q] = !0;
-                  }
-                }
-            }
-            if (l.presence === t.Query.presence.REQUIRED)
-              for (var m = 0; m < l.fields.length; m++) {
-                var g = l.fields[m];
-                o[g] = o[g].intersect(f);
-              }
-          }
-          for (var V = t.Set.complete, A = t.Set.empty, c = 0; c < this.fields.length; c++) {
-            var g = this.fields[c];
-            (o[g] && (V = V.intersect(o[g])), a[g] && (A = A.union(a[g])));
-          }
-          var u = Object.keys(r),
-            y = [],
-            P = Object.create(null);
-          if (n.isNegated()) {
-            u = Object.keys(this.fieldVectors);
-            for (var c = 0; c < u.length; c++) {
-              var _ = u[c],
-                k = t.FieldRef.fromString(_);
-              r[_] = new t.MatchData();
-            }
-          }
-          for (var c = 0; c < u.length; c++) {
-            var k = t.FieldRef.fromString(u[c]),
-              h = k.docRef;
-            if (V.contains(h) && !A.contains(h)) {
-              var E = this.fieldVectors[k],
-                Q = i[k.fieldName].similarity(E),
-                H;
-              if ((H = P[h]) !== void 0) ((H.score += Q), H.matchData.combine(r[k]));
-              else {
-                var b = { ref: h, score: Q, matchData: r[k] };
-                ((P[h] = b), y.push(b));
-              }
-            }
-          }
-          return y.sort(function (We, ze) {
-            return ze.score - We.score;
-          });
-        }),
-        (t.Index.prototype.toJSON = function () {
-          var e = Object.keys(this.invertedIndex)
-              .sort()
-              .map(function (r) {
-                return [r, this.invertedIndex[r]];
-              }, this),
-            n = Object.keys(this.fieldVectors).map(function (r) {
-              return [r, this.fieldVectors[r].toJSON()];
-            }, this);
-          return {
-            version: t.version,
-            fields: this.fields,
-            fieldVectors: n,
-            invertedIndex: e,
-            pipeline: this.pipeline.toJSON()
-          };
-        }),
-        (t.Index.load = function (e) {
-          var n = {},
-            r = {},
-            i = e.fieldVectors,
-            s = Object.create(null),
-            o = e.invertedIndex,
-            a = new t.TokenSet.Builder(),
-            c = t.Pipeline.load(e.pipeline);
-          e.version != t.version &&
-            t.utils.warn(
-              "Version mismatch when loading serialised index. Current version of lunr '" +
-                t.version +
-                "' does not match serialized index '" +
-                e.version +
-                "'"
-            );
-          for (var l = 0; l < i.length; l++) {
-            var d = i[l],
-              f = d[0],
-              p = d[1];
-            r[f] = new t.Vector(p);
-          }
-          for (var l = 0; l < o.length; l++) {
-            var d = o[l],
-              v = d[0],
-              x = d[1];
-            (a.insert(v), (s[v] = x));
-          }
-          return (
-            a.finish(),
-            (n.fields = e.fields),
-            (n.fieldVectors = r),
-            (n.invertedIndex = s),
-            (n.tokenSet = a.root),
-            (n.pipeline = c),
-            new t.Index(n)
-          );
-        }));
-      ((t.Builder = function () {
-        ((this._ref = "id"),
-          (this._fields = Object.create(null)),
-          (this._documents = Object.create(null)),
-          (this.invertedIndex = Object.create(null)),
-          (this.fieldTermFrequencies = {}),
-          (this.fieldLengths = {}),
-          (this.tokenizer = t.tokenizer),
-          (this.pipeline = new t.Pipeline()),
-          (this.searchPipeline = new t.Pipeline()),
-          (this.documentCount = 0),
-          (this._b = 0.75),
-          (this._k1 = 1.2),
-          (this.termIndex = 0),
-          (this.metadataWhitelist = []));
-      }),
-        (t.Builder.prototype.ref = function (e) {
-          this._ref = e;
-        }),
-        (t.Builder.prototype.field = function (e, n) {
-          if (/\//.test(e))
-            throw new RangeError("Field '" + e + "' contains illegal character '/'");
-          this._fields[e] = n || {};
-        }),
-        (t.Builder.prototype.b = function (e) {
-          e < 0 ? (this._b = 0) : e > 1 ? (this._b = 1) : (this._b = e);
-        }),
-        (t.Builder.prototype.k1 = function (e) {
-          this._k1 = e;
-        }),
-        (t.Builder.prototype.add = function (e, n) {
-          var r = e[this._ref],
-            i = Object.keys(this._fields);
-          ((this._documents[r] = n || {}), (this.documentCount += 1));
-          for (var s = 0; s < i.length; s++) {
-            var o = i[s],
-              a = this._fields[o].extractor,
-              c = a ? a(e) : e[o],
-              l = this.tokenizer(c, { fields: [o] }),
-              d = this.pipeline.run(l),
-              f = new t.FieldRef(r, o),
-              p = Object.create(null);
-            ((this.fieldTermFrequencies[f] = p),
-              (this.fieldLengths[f] = 0),
-              (this.fieldLengths[f] += d.length));
-            for (var v = 0; v < d.length; v++) {
-              var x = d[v];
-              if ((p[x] == null && (p[x] = 0), (p[x] += 1), this.invertedIndex[x] == null)) {
-                var w = Object.create(null);
-                ((w._index = this.termIndex), (this.termIndex += 1));
-                for (var m = 0; m < i.length; m++) w[i[m]] = Object.create(null);
-                this.invertedIndex[x] = w;
-              }
-              this.invertedIndex[x][o][r] == null &&
-                (this.invertedIndex[x][o][r] = Object.create(null));
-              for (var g = 0; g < this.metadataWhitelist.length; g++) {
-                var T = this.metadataWhitelist[g],
-                  L = x.metadata[T];
-                (this.invertedIndex[x][o][r][T] == null && (this.invertedIndex[x][o][r][T] = []),
-                  this.invertedIndex[x][o][r][T].push(L));
-              }
-            }
-          }
-        }),
-        (t.Builder.prototype.calculateAverageFieldLengths = function () {
-          for (
-            var e = Object.keys(this.fieldLengths), n = e.length, r = {}, i = {}, s = 0;
-            s < n;
-            s++
-          ) {
-            var o = t.FieldRef.fromString(e[s]),
-              a = o.fieldName;
-            (i[a] || (i[a] = 0), (i[a] += 1), r[a] || (r[a] = 0), (r[a] += this.fieldLengths[o]));
-          }
-          for (var c = Object.keys(this._fields), s = 0; s < c.length; s++) {
-            var l = c[s];
-            r[l] = r[l] / i[l];
-          }
-          this.averageFieldLength = r;
-        }),
-        (t.Builder.prototype.createFieldVectors = function () {
-          for (
-            var e = {},
-              n = Object.keys(this.fieldTermFrequencies),
-              r = n.length,
-              i = Object.create(null),
-              s = 0;
-            s < r;
-            s++
-          ) {
-            for (
-              var o = t.FieldRef.fromString(n[s]),
-                a = o.fieldName,
-                c = this.fieldLengths[o],
-                l = new t.Vector(),
-                d = this.fieldTermFrequencies[o],
-                f = Object.keys(d),
-                p = f.length,
-                v = this._fields[a].boost || 1,
-                x = this._documents[o.docRef].boost || 1,
-                w = 0;
-              w < p;
-              w++
-            ) {
-              var m = f[w],
-                g = d[m],
-                T = this.invertedIndex[m]._index,
-                L,
-                C,
-                O;
-              (i[m] === void 0
-                ? ((L = t.idf(this.invertedIndex[m], this.documentCount)), (i[m] = L))
-                : (L = i[m]),
-                (C =
-                  (L * ((this._k1 + 1) * g)) /
-                  (this._k1 * (1 - this._b + this._b * (c / this.averageFieldLength[a])) + g)),
-                (C *= v),
-                (C *= x),
-                (O = Math.round(C * 1e3) / 1e3),
-                l.insert(T, O));
-            }
-            e[o] = l;
-          }
-          this.fieldVectors = e;
-        }),
-        (t.Builder.prototype.createTokenSet = function () {
-          this.tokenSet = t.TokenSet.fromArray(Object.keys(this.invertedIndex).sort());
-        }),
-        (t.Builder.prototype.build = function () {
-          return (
-            this.calculateAverageFieldLengths(),
-            this.createFieldVectors(),
-            this.createTokenSet(),
-            new t.Index({
-              invertedIndex: this.invertedIndex,
-              fieldVectors: this.fieldVectors,
-              tokenSet: this.tokenSet,
-              fields: Object.keys(this._fields),
-              pipeline: this.searchPipeline
-            })
-          );
-        }),
-        (t.Builder.prototype.use = function (e) {
-          var n = Array.prototype.slice.call(arguments, 1);
-          (n.unshift(this), e.apply(this, n));
-        }),
-        (t.MatchData = function (e, n, r) {
-          for (var i = Object.create(null), s = Object.keys(r || {}), o = 0; o < s.length; o++) {
-            var a = s[o];
-            i[a] = r[a].slice();
-          }
-          ((this.metadata = Object.create(null)),
-            e !== void 0 && ((this.metadata[e] = Object.create(null)), (this.metadata[e][n] = i)));
-        }),
-        (t.MatchData.prototype.combine = function (e) {
-          for (var n = Object.keys(e.metadata), r = 0; r < n.length; r++) {
-            var i = n[r],
-              s = Object.keys(e.metadata[i]);
-            this.metadata[i] == null && (this.metadata[i] = Object.create(null));
-            for (var o = 0; o < s.length; o++) {
-              var a = s[o],
-                c = Object.keys(e.metadata[i][a]);
-              this.metadata[i][a] == null && (this.metadata[i][a] = Object.create(null));
-              for (var l = 0; l < c.length; l++) {
-                var d = c[l];
-                this.metadata[i][a][d] == null
-                  ? (this.metadata[i][a][d] = e.metadata[i][a][d])
-                  : (this.metadata[i][a][d] = this.metadata[i][a][d].concat(e.metadata[i][a][d]));
-              }
-            }
-          }
-        }),
-        (t.MatchData.prototype.add = function (e, n, r) {
-          if (!(e in this.metadata)) {
-            ((this.metadata[e] = Object.create(null)), (this.metadata[e][n] = r));
-            return;
-          }
-          if (!(n in this.metadata[e])) {
-            this.metadata[e][n] = r;
-            return;
-          }
-          for (var i = Object.keys(r), s = 0; s < i.length; s++) {
-            var o = i[s];
-            o in this.metadata[e][n]
-              ? (this.metadata[e][n][o] = this.metadata[e][n][o].concat(r[o]))
-              : (this.metadata[e][n][o] = r[o]);
-          }
-        }),
-        (t.Query = function (e) {
-          ((this.clauses = []), (this.allFields = e));
-        }),
-        (t.Query.wildcard = new String("*")),
-        (t.Query.wildcard.NONE = 0),
-        (t.Query.wildcard.LEADING = 1),
-        (t.Query.wildcard.TRAILING = 2),
-        (t.Query.presence = { OPTIONAL: 1, REQUIRED: 2, PROHIBITED: 3 }),
-        (t.Query.prototype.clause = function (e) {
-          return (
-            "fields" in e || (e.fields = this.allFields),
-            "boost" in e || (e.boost = 1),
-            "usePipeline" in e || (e.usePipeline = !0),
-            "wildcard" in e || (e.wildcard = t.Query.wildcard.NONE),
-            e.wildcard & t.Query.wildcard.LEADING &&
-              e.term.charAt(0) != t.Query.wildcard &&
-              (e.term = "*" + e.term),
-            e.wildcard & t.Query.wildcard.TRAILING &&
-              e.term.slice(-1) != t.Query.wildcard &&
-              (e.term = "" + e.term + "*"),
-            "presence" in e || (e.presence = t.Query.presence.OPTIONAL),
-            this.clauses.push(e),
-            this
-          );
-        }),
-        (t.Query.prototype.isNegated = function () {
-          for (var e = 0; e < this.clauses.length; e++)
-            if (this.clauses[e].presence != t.Query.presence.PROHIBITED) return !1;
-          return !0;
-        }),
-        (t.Query.prototype.term = function (e, n) {
-          if (Array.isArray(e))
-            return (
-              e.forEach(function (i) {
-                this.term(i, t.utils.clone(n));
-              }, this),
-              this
-            );
-          var r = n || {};
-          return ((r.term = e.toString()), this.clause(r), this);
-        }),
-        (t.QueryParseError = function (e, n, r) {
-          ((this.name = "QueryParseError"), (this.message = e), (this.start = n), (this.end = r));
-        }),
-        (t.QueryParseError.prototype = new Error()),
-        (t.QueryLexer = function (e) {
-          ((this.lexemes = []),
-            (this.str = e),
-            (this.length = e.length),
-            (this.pos = 0),
-            (this.start = 0),
-            (this.escapeCharPositions = []));
-        }),
-        (t.QueryLexer.prototype.run = function () {
-          for (var e = t.QueryLexer.lexText; e; ) e = e(this);
-        }),
-        (t.QueryLexer.prototype.sliceString = function () {
-          for (
-            var e = [], n = this.start, r = this.pos, i = 0;
-            i < this.escapeCharPositions.length;
-            i++
-          )
-            ((r = this.escapeCharPositions[i]), e.push(this.str.slice(n, r)), (n = r + 1));
-          return (
-            e.push(this.str.slice(n, this.pos)),
-            (this.escapeCharPositions.length = 0),
-            e.join("")
-          );
-        }),
-        (t.QueryLexer.prototype.emit = function (e) {
-          (this.lexemes.push({
-            type: e,
-            str: this.sliceString(),
-            start: this.start,
-            end: this.pos
-          }),
-            (this.start = this.pos));
-        }),
-        (t.QueryLexer.prototype.escapeCharacter = function () {
-          (this.escapeCharPositions.push(this.pos - 1), (this.pos += 1));
-        }),
-        (t.QueryLexer.prototype.next = function () {
-          if (this.pos >= this.length) return t.QueryLexer.EOS;
-          var e = this.str.charAt(this.pos);
-          return ((this.pos += 1), e);
-        }),
-        (t.QueryLexer.prototype.width = function () {
-          return this.pos - this.start;
-        }),
-        (t.QueryLexer.prototype.ignore = function () {
-          (this.start == this.pos && (this.pos += 1), (this.start = this.pos));
-        }),
-        (t.QueryLexer.prototype.backup = function () {
-          this.pos -= 1;
-        }),
-        (t.QueryLexer.prototype.acceptDigitRun = function () {
-          var e, n;
-          do ((e = this.next()), (n = e.charCodeAt(0)));
-          while (n > 47 && n < 58);
-          e != t.QueryLexer.EOS && this.backup();
-        }),
-        (t.QueryLexer.prototype.more = function () {
-          return this.pos < this.length;
-        }),
-        (t.QueryLexer.EOS = "EOS"),
-        (t.QueryLexer.FIELD = "FIELD"),
-        (t.QueryLexer.TERM = "TERM"),
-        (t.QueryLexer.EDIT_DISTANCE = "EDIT_DISTANCE"),
-        (t.QueryLexer.BOOST = "BOOST"),
-        (t.QueryLexer.PRESENCE = "PRESENCE"),
-        (t.QueryLexer.lexField = function (e) {
-          return (e.backup(), e.emit(t.QueryLexer.FIELD), e.ignore(), t.QueryLexer.lexText);
-        }),
-        (t.QueryLexer.lexTerm = function (e) {
-          if ((e.width() > 1 && (e.backup(), e.emit(t.QueryLexer.TERM)), e.ignore(), e.more()))
-            return t.QueryLexer.lexText;
-        }),
-        (t.QueryLexer.lexEditDistance = function (e) {
-          return (
-            e.ignore(),
-            e.acceptDigitRun(),
-            e.emit(t.QueryLexer.EDIT_DISTANCE),
-            t.QueryLexer.lexText
-          );
-        }),
-        (t.QueryLexer.lexBoost = function (e) {
-          return (e.ignore(), e.acceptDigitRun(), e.emit(t.QueryLexer.BOOST), t.QueryLexer.lexText);
-        }),
-        (t.QueryLexer.lexEOS = function (e) {
-          e.width() > 0 && e.emit(t.QueryLexer.TERM);
-        }),
-        (t.QueryLexer.termSeparator = t.tokenizer.separator),
-        (t.QueryLexer.lexText = function (e) {
-          for (;;) {
-            var n = e.next();
-            if (n == t.QueryLexer.EOS) return t.QueryLexer.lexEOS;
-            if (n.charCodeAt(0) == 92) {
-              e.escapeCharacter();
-              continue;
-            }
-            if (n == ":") return t.QueryLexer.lexField;
-            if (n == "~")
-              return (
-                e.backup(),
-                e.width() > 0 && e.emit(t.QueryLexer.TERM),
-                t.QueryLexer.lexEditDistance
-              );
-            if (n == "^")
-              return (
-                e.backup(),
-                e.width() > 0 && e.emit(t.QueryLexer.TERM),
-                t.QueryLexer.lexBoost
-              );
-            if ((n == "+" && e.width() === 1) || (n == "-" && e.width() === 1))
-              return (e.emit(t.QueryLexer.PRESENCE), t.QueryLexer.lexText);
-            if (n.match(t.QueryLexer.termSeparator)) return t.QueryLexer.lexTerm;
-          }
-        }),
-        (t.QueryParser = function (e, n) {
-          ((this.lexer = new t.QueryLexer(e)),
-            (this.query = n),
-            (this.currentClause = {}),
-            (this.lexemeIdx = 0));
-        }),
-        (t.QueryParser.prototype.parse = function () {
-          (this.lexer.run(), (this.lexemes = this.lexer.lexemes));
-          for (var e = t.QueryParser.parseClause; e; ) e = e(this);
-          return this.query;
-        }),
-        (t.QueryParser.prototype.peekLexeme = function () {
-          return this.lexemes[this.lexemeIdx];
-        }),
-        (t.QueryParser.prototype.consumeLexeme = function () {
-          var e = this.peekLexeme();
-          return ((this.lexemeIdx += 1), e);
-        }),
-        (t.QueryParser.prototype.nextClause = function () {
-          var e = this.currentClause;
-          (this.query.clause(e), (this.currentClause = {}));
-        }),
-        (t.QueryParser.parseClause = function (e) {
-          var n = e.peekLexeme();
-          if (n != null)
-            switch (n.type) {
-              case t.QueryLexer.PRESENCE:
-                return t.QueryParser.parsePresence;
-              case t.QueryLexer.FIELD:
-                return t.QueryParser.parseField;
-              case t.QueryLexer.TERM:
-                return t.QueryParser.parseTerm;
-              default:
-                var r = "expected either a field or a term, found " + n.type;
-                throw (
-                  n.str.length >= 1 && (r += " with value '" + n.str + "'"),
-                  new t.QueryParseError(r, n.start, n.end)
-                );
-            }
-        }),
-        (t.QueryParser.parsePresence = function (e) {
-          var n = e.consumeLexeme();
-          if (n != null) {
-            switch (n.str) {
-              case "-":
-                e.currentClause.presence = t.Query.presence.PROHIBITED;
-                break;
-              case "+":
-                e.currentClause.presence = t.Query.presence.REQUIRED;
-                break;
-              default:
-                var r = "unrecognised presence operator'" + n.str + "'";
-                throw new t.QueryParseError(r, n.start, n.end);
-            }
-            var i = e.peekLexeme();
-            if (i == null) {
-              var r = "expecting term or field, found nothing";
-              throw new t.QueryParseError(r, n.start, n.end);
-            }
-            switch (i.type) {
-              case t.QueryLexer.FIELD:
-                return t.QueryParser.parseField;
-              case t.QueryLexer.TERM:
-                return t.QueryParser.parseTerm;
-              default:
-                var r = "expecting term or field, found '" + i.type + "'";
-                throw new t.QueryParseError(r, i.start, i.end);
-            }
-          }
-        }),
-        (t.QueryParser.parseField = function (e) {
-          var n = e.consumeLexeme();
-          if (n != null) {
-            if (e.query.allFields.indexOf(n.str) == -1) {
-              var r = e.query.allFields
-                  .map(function (o) {
-                    return "'" + o + "'";
-                  })
-                  .join(", "),
-                i = "unrecognised field '" + n.str + "', possible fields: " + r;
-              throw new t.QueryParseError(i, n.start, n.end);
-            }
-            e.currentClause.fields = [n.str];
-            var s = e.peekLexeme();
-            if (s == null) {
-              var i = "expecting term, found nothing";
-              throw new t.QueryParseError(i, n.start, n.end);
-            }
-            switch (s.type) {
-              case t.QueryLexer.TERM:
-                return t.QueryParser.parseTerm;
-              default:
-                var i = "expecting term, found '" + s.type + "'";
-                throw new t.QueryParseError(i, s.start, s.end);
-            }
-          }
-        }),
-        (t.QueryParser.parseTerm = function (e) {
-          var n = e.consumeLexeme();
-          if (n != null) {
-            ((e.currentClause.term = n.str.toLowerCase()),
-              n.str.indexOf("*") != -1 && (e.currentClause.usePipeline = !1));
-            var r = e.peekLexeme();
-            if (r == null) {
-              e.nextClause();
-              return;
-            }
-            switch (r.type) {
-              case t.QueryLexer.TERM:
-                return (e.nextClause(), t.QueryParser.parseTerm);
-              case t.QueryLexer.FIELD:
-                return (e.nextClause(), t.QueryParser.parseField);
-              case t.QueryLexer.EDIT_DISTANCE:
-                return t.QueryParser.parseEditDistance;
-              case t.QueryLexer.BOOST:
-                return t.QueryParser.parseBoost;
-              case t.QueryLexer.PRESENCE:
-                return (e.nextClause(), t.QueryParser.parsePresence);
-              default:
-                var i = "Unexpected lexeme type '" + r.type + "'";
-                throw new t.QueryParseError(i, r.start, r.end);
-            }
-          }
-        }),
-        (t.QueryParser.parseEditDistance = function (e) {
-          var n = e.consumeLexeme();
-          if (n != null) {
-            var r = parseInt(n.str, 10);
-            if (isNaN(r)) {
-              var i = "edit distance must be numeric";
-              throw new t.QueryParseError(i, n.start, n.end);
-            }
-            e.currentClause.editDistance = r;
-            var s = e.peekLexeme();
-            if (s == null) {
-              e.nextClause();
-              return;
-            }
-            switch (s.type) {
-              case t.QueryLexer.TERM:
-                return (e.nextClause(), t.QueryParser.parseTerm);
-              case t.QueryLexer.FIELD:
-                return (e.nextClause(), t.QueryParser.parseField);
-              case t.QueryLexer.EDIT_DISTANCE:
-                return t.QueryParser.parseEditDistance;
-              case t.QueryLexer.BOOST:
-                return t.QueryParser.parseBoost;
-              case t.QueryLexer.PRESENCE:
-                return (e.nextClause(), t.QueryParser.parsePresence);
-              default:
-                var i = "Unexpected lexeme type '" + s.type + "'";
-                throw new t.QueryParseError(i, s.start, s.end);
-            }
-          }
-        }),
-        (t.QueryParser.parseBoost = function (e) {
-          var n = e.consumeLexeme();
-          if (n != null) {
-            var r = parseInt(n.str, 10);
-            if (isNaN(r)) {
-              var i = "boost must be numeric";
-              throw new t.QueryParseError(i, n.start, n.end);
-            }
-            e.currentClause.boost = r;
-            var s = e.peekLexeme();
-            if (s == null) {
-              e.nextClause();
-              return;
-            }
-            switch (s.type) {
-              case t.QueryLexer.TERM:
-                return (e.nextClause(), t.QueryParser.parseTerm);
-              case t.QueryLexer.FIELD:
-                return (e.nextClause(), t.QueryParser.parseField);
-              case t.QueryLexer.EDIT_DISTANCE:
-                return t.QueryParser.parseEditDistance;
-              case t.QueryLexer.BOOST:
-                return t.QueryParser.parseBoost;
-              case t.QueryLexer.PRESENCE:
-                return (e.nextClause(), t.QueryParser.parsePresence);
-              default:
-                var i = "Unexpected lexeme type '" + s.type + "'";
-                throw new t.QueryParseError(i, s.start, s.end);
-            }
-          }
-        }),
-        (function (e, n) {
-          typeof define == "function" && define.amd
-            ? define(n)
-            : typeof me == "object"
-              ? (ge.exports = n())
-              : (e.lunr = n());
-        })(this, function () {
-          return t;
-        }));
-    })();
-  });
-  var M,
-    G = {
-      getItem() {
-        return null;
-      },
-      setItem() {}
-    },
-    K;
-  try {
-    ((K = localStorage), (M = K));
-  } catch {
-    ((K = G), (M = G));
-  }
-  var S = {
-    getItem: (t) => M.getItem(t),
-    setItem: (t, e) => M.setItem(t, e),
-    disableWritingLocalStorage() {
-      M = G;
-    },
-    disable() {
-      (localStorage.clear(), (M = G));
-    },
-    enable() {
-      M = K;
-    }
-  };
-  window.TypeDoc ||= {
-    disableWritingLocalStorage() {
-      S.disableWritingLocalStorage();
-    },
-    disableLocalStorage: () => {
-      S.disable();
-    },
-    enableLocalStorage: () => {
-      S.enable();
-    }
-  };
-  window.translations ||= {
-    copy: "Copy",
-    copied: "Copied!",
-    normally_hidden: "This member is normally hidden due to your filter settings.",
-    hierarchy_expand: "Expand",
-    hierarchy_collapse: "Collapse",
-    search_index_not_available: "The search index is not available",
-    search_no_results_found_for_0: "No results found for {0}",
-    folder: "Folder",
-    kind_1: "Project",
-    kind_2: "Module",
-    kind_4: "Namespace",
-    kind_8: "Enumeration",
-    kind_16: "Enumeration Member",
-    kind_32: "Variable",
-    kind_64: "Function",
-    kind_128: "Class",
-    kind_256: "Interface",
-    kind_512: "Constructor",
-    kind_1024: "Property",
-    kind_2048: "Method",
-    kind_4096: "Call Signature",
-    kind_8192: "Index Signature",
-    kind_16384: "Constructor Signature",
-    kind_32768: "Parameter",
-    kind_65536: "Type Literal",
-    kind_131072: "Type Parameter",
-    kind_262144: "Accessor",
-    kind_524288: "Get Signature",
-    kind_1048576: "Set Signature",
-    kind_2097152: "Type Alias",
-    kind_4194304: "Reference",
-    kind_8388608: "Document"
-  };
-  var pe = [];
-  function X(t, e) {
-    pe.push({ selector: e, constructor: t });
-  }
-  var Z = class {
-    alwaysVisibleMember = null;
-    constructor() {
-      (this.createComponents(document.body),
-        this.ensureFocusedElementVisible(),
-        this.listenForCodeCopies(),
-        window.addEventListener("hashchange", () => this.ensureFocusedElementVisible()),
-        document.body.style.display ||
-          (this.ensureFocusedElementVisible(), this.updateIndexVisibility(), this.scrollToHash()));
-    }
-    createComponents(e) {
-      pe.forEach((n) => {
-        e.querySelectorAll(n.selector).forEach((r) => {
-          r.dataset.hasInstance ||
-            (new n.constructor({ el: r, app: this }), (r.dataset.hasInstance = String(!0)));
-        });
-      });
-    }
-    filterChanged() {
-      this.ensureFocusedElementVisible();
-    }
-    showPage() {
-      document.body.style.display &&
-        (document.body.style.removeProperty("display"),
-        this.ensureFocusedElementVisible(),
-        this.updateIndexVisibility(),
-        this.scrollToHash());
-    }
-    scrollToHash() {
-      if (location.hash) {
-        let e = document.getElementById(location.hash.substring(1));
-        if (!e) return;
-        e.scrollIntoView({ behavior: "instant", block: "start" });
-      }
-    }
-    ensureActivePageVisible() {
-      let e = document.querySelector(".tsd-navigation .current"),
-        n = e?.parentElement;
-      for (; n && !n.classList.contains(".tsd-navigation"); )
-        (n instanceof HTMLDetailsElement && (n.open = !0), (n = n.parentElement));
-      if (e && !rt(e)) {
-        let r = e.getBoundingClientRect().top - document.documentElement.clientHeight / 4;
-        ((document.querySelector(".site-menu").scrollTop = r),
-          (document.querySelector(".col-sidebar").scrollTop = r));
-      }
-    }
-    updateIndexVisibility() {
-      let e = document.querySelector(".tsd-index-content"),
-        n = e?.open;
-      (e && (e.open = !0),
-        document.querySelectorAll(".tsd-index-section").forEach((r) => {
-          r.style.display = "block";
-          let i = Array.from(r.querySelectorAll(".tsd-index-link")).every(
-            (s) => s.offsetParent == null
-          );
-          r.style.display = i ? "none" : "block";
-        }),
-        e && (e.open = n));
-    }
-    ensureFocusedElementVisible() {
-      if (
-        (this.alwaysVisibleMember &&
-          (this.alwaysVisibleMember.classList.remove("always-visible"),
-          this.alwaysVisibleMember.firstElementChild.remove(),
-          (this.alwaysVisibleMember = null)),
-        !location.hash)
-      )
-        return;
-      let e = document.getElementById(location.hash.substring(1));
-      if (!e) return;
-      let n = e.parentElement;
-      for (; n && n.tagName !== "SECTION"; ) n = n.parentElement;
-      if (!n) return;
-      let r = n.offsetParent == null,
-        i = n;
-      for (; i !== document.body; )
-        (i instanceof HTMLDetailsElement && (i.open = !0), (i = i.parentElement));
-      if (n.offsetParent == null) {
-        ((this.alwaysVisibleMember = n), n.classList.add("always-visible"));
-        let s = document.createElement("p");
-        (s.classList.add("warning"),
-          (s.textContent = window.translations.normally_hidden),
-          n.prepend(s));
-      }
-      r && e.scrollIntoView();
-    }
-    listenForCodeCopies() {
-      document.querySelectorAll("pre > button").forEach((e) => {
-        let n;
-        e.addEventListener("click", () => {
-          (e.previousElementSibling instanceof HTMLElement &&
-            navigator.clipboard.writeText(e.previousElementSibling.innerText.trim()),
-            (e.textContent = window.translations.copied),
-            e.classList.add("visible"),
-            clearTimeout(n),
-            (n = setTimeout(() => {
-              (e.classList.remove("visible"),
-                (n = setTimeout(() => {
-                  e.textContent = window.translations.copy;
-                }, 100)));
-            }, 1e3)));
-        });
-      });
-    }
-  };
-  function rt(t) {
-    let e = t.getBoundingClientRect(),
-      n = Math.max(document.documentElement.clientHeight, window.innerHeight);
-    return !(e.bottom < 0 || e.top - n >= 0);
-  }
-  var fe = (t, e = 100) => {
-    let n;
-    return () => {
-      (clearTimeout(n), (n = setTimeout(() => t(), e)));
-    };
-  };
-  var Ie = nt(ye(), 1);
-  async function R(t) {
-    let e = Uint8Array.from(atob(t), (s) => s.charCodeAt(0)),
-      r = new Blob([e]).stream().pipeThrough(new DecompressionStream("deflate")),
-      i = await new Response(r).text();
-    return JSON.parse(i);
-  }
-  var Y = "closing",
-    ae = "tsd-overlay";
-  function it() {
-    let t = Math.abs(window.innerWidth - document.documentElement.clientWidth);
-    ((document.body.style.overflow = "hidden"), (document.body.style.paddingRight = `${t}px`));
-  }
-  function st() {
-    (document.body.style.removeProperty("overflow"),
-      document.body.style.removeProperty("padding-right"));
-  }
-  function xe(t, e) {
-    (t.addEventListener("animationend", () => {
-      t.classList.contains(Y) &&
-        (t.classList.remove(Y), document.getElementById(ae)?.remove(), t.close(), st());
-    }),
-      t.addEventListener("cancel", (n) => {
-        (n.preventDefault(), ve(t));
-      }),
-      e?.closeOnClick &&
-        document.addEventListener(
-          "click",
-          (n) => {
-            t.open && !t.contains(n.target) && ve(t);
-          },
-          !0
-        ));
-  }
-  function Ee(t) {
-    if (t.open) return;
-    let e = document.createElement("div");
-    ((e.id = ae), document.body.appendChild(e), t.showModal(), it());
-  }
-  function ve(t) {
-    if (!t.open) return;
-    (document.getElementById(ae)?.classList.add(Y), t.classList.add(Y));
-  }
-  var I = class {
-    el;
-    app;
-    constructor(e) {
-      ((this.el = e.el), (this.app = e.app));
-    }
-  };
-  var be = document.head.appendChild(document.createElement("style"));
-  be.dataset.for = "filters";
-  var le = {};
-  function we(t) {
-    for (let e of t.split(/\s+/)) if (le.hasOwnProperty(e) && !le[e]) return !0;
-    return !1;
-  }
-  var ee = class extends I {
-    key;
-    value;
-    constructor(e) {
-      (super(e),
-        (this.key = `filter-${this.el.name}`),
-        (this.value = this.el.checked),
-        this.el.addEventListener("change", () => {
-          this.setLocalStorage(this.el.checked);
-        }),
-        this.setLocalStorage(this.fromLocalStorage()),
-        (be.innerHTML += `html:not(.${this.key}) .tsd-is-${this.el.name} { display: none; }
-`),
-        this.app.updateIndexVisibility());
-    }
-    fromLocalStorage() {
-      let e = S.getItem(this.key);
-      return e ? e === "true" : this.el.checked;
-    }
-    setLocalStorage(e) {
-      (S.setItem(this.key, e.toString()), (this.value = e), this.handleValueChange());
-    }
-    handleValueChange() {
-      ((this.el.checked = this.value),
-        document.documentElement.classList.toggle(this.key, this.value),
-        (le[`tsd-is-${this.el.name}`] = this.value),
-        this.app.filterChanged(),
-        this.app.updateIndexVisibility());
-    }
-  };
-  var Le = 0;
-  async function Se(t, e) {
-    if (!window.searchData) return;
-    let n = await R(window.searchData);
-    ((t.data = n), (t.index = Ie.Index.load(n.index)), (e.innerHTML = ""));
-  }
-  function _e() {
-    let t = document.getElementById("tsd-search-trigger"),
-      e = document.getElementById("tsd-search"),
-      n = document.getElementById("tsd-search-input"),
-      r = document.getElementById("tsd-search-results"),
-      i = document.getElementById("tsd-search-script"),
-      s = document.getElementById("tsd-search-status");
-    if (!(t && e && n && r && i && s)) throw new Error("Search controls missing");
-    let o = { base: document.documentElement.dataset.base };
-    (o.base.endsWith("/") || (o.base += "/"),
-      i.addEventListener("error", () => {
-        let a = window.translations.search_index_not_available;
-        Pe(s, a);
-      }),
-      i.addEventListener("load", () => {
-        Se(o, s);
-      }),
-      Se(o, s),
-      ot({ trigger: t, searchEl: e, results: r, field: n, status: s }, o));
-  }
-  function ot(t, e) {
-    let { field: n, results: r, searchEl: i, status: s, trigger: o } = t;
-    xe(i, { closeOnClick: !0 });
-    function a() {
-      (Ee(i), n.setSelectionRange(0, n.value.length));
-    }
-    (o.addEventListener("click", a),
-      n.addEventListener(
-        "input",
-        fe(() => {
-          at(r, n, s, e);
-        }, 200)
-      ),
-      n.addEventListener("keydown", (l) => {
-        if (r.childElementCount === 0 || l.ctrlKey || l.metaKey || l.altKey) return;
-        let d = n.getAttribute("aria-activedescendant"),
-          f = d ? document.getElementById(d) : null;
-        if (f) {
-          let p = !1,
-            v = !1;
-          switch (l.key) {
-            case "Home":
-            case "End":
-            case "ArrowLeft":
-            case "ArrowRight":
-              v = !0;
-              break;
-            case "ArrowDown":
-            case "ArrowUp":
-              p = l.shiftKey;
-              break;
-          }
-          (p || v) && ke(n);
-        }
-        if (!l.shiftKey)
-          switch (l.key) {
-            case "Enter":
-              f?.querySelector("a")?.click();
-              break;
-            case "ArrowUp":
-              (Te(r, n, f, -1), l.preventDefault());
-              break;
-            case "ArrowDown":
-              (Te(r, n, f, 1), l.preventDefault());
-              break;
-          }
-      }));
-    function c() {
-      ke(n);
-    }
-    (n.addEventListener("change", c),
-      n.addEventListener("blur", c),
-      n.addEventListener("click", c),
-      document.body.addEventListener("keydown", (l) => {
-        if (l.altKey || l.metaKey || l.shiftKey) return;
-        let d = l.ctrlKey && l.key === "k",
-          f = !l.ctrlKey && !ut() && l.key === "/";
-        (d || f) && (l.preventDefault(), a());
-      }));
-  }
-  function at(t, e, n, r) {
-    if (!r.index || !r.data) return;
-    ((t.innerHTML = ""), (n.innerHTML = ""), (Le += 1));
-    let i = e.value.trim(),
-      s;
-    if (i) {
-      let a = i
-        .split(" ")
-        .map((c) => (c.length ? `*${c}*` : ""))
-        .join(" ");
-      s = r.index.search(a).filter(({ ref: c }) => {
-        let l = r.data.rows[Number(c)].classes;
-        return !l || !we(l);
-      });
-    } else s = [];
-    if (s.length === 0 && i) {
-      let a = window.translations.search_no_results_found_for_0.replace(
-        "{0}",
-        ` "<strong>${te(i)}</strong>" `
-      );
-      Pe(n, a);
-      return;
-    }
-    for (let a = 0; a < s.length; a++) {
-      let c = s[a],
-        l = r.data.rows[Number(c.ref)],
-        d = 1;
-      (l.name.toLowerCase().startsWith(i.toLowerCase()) &&
-        (d *= 10 / (1 + Math.abs(l.name.length - i.length))),
-        (c.score *= d));
-    }
-    s.sort((a, c) => c.score - a.score);
-    let o = Math.min(10, s.length);
-    for (let a = 0; a < o; a++) {
-      let c = r.data.rows[Number(s[a].ref)],
-        d = `<svg width="20" height="20" viewBox="0 0 24 24" fill="none" class="tsd-kind-icon" aria-label="${window.translations[`kind_${c.kind}`].replaceAll('"', "&quot;")}"><use href="#icon-${c.icon || c.kind}"></use></svg>`,
-        f = Ce(c.name, i);
-      (globalThis.DEBUG_SEARCH_WEIGHTS && (f += ` (score: ${s[a].score.toFixed(2)})`),
-        c.parent &&
-          (f = `<span class="parent">
-                ${Ce(c.parent, i)}.</span>${f}`));
-      let p = document.createElement("li");
-      ((p.id = `tsd-search:${Le}-${a}`),
-        (p.role = "option"),
-        (p.ariaSelected = "false"),
-        (p.classList.value = c.classes ?? ""));
-      let v = document.createElement("a");
-      ((v.tabIndex = -1),
-        (v.href = r.base + c.url),
-        (v.innerHTML = d + `<span class="text">${f}</span>`),
-        p.append(v),
-        t.appendChild(p));
-    }
-  }
-  function Te(t, e, n, r) {
-    let i;
-    if (
-      (r === 1
-        ? (i = n?.nextElementSibling || t.firstElementChild)
-        : (i = n?.previousElementSibling || t.lastElementChild),
-      i !== n)
-    ) {
-      if (!i || i.role !== "option") {
-        console.error("Option missing");
-        return;
-      }
-      ((i.ariaSelected = "true"),
-        i.scrollIntoView({ behavior: "smooth", block: "nearest" }),
-        e.setAttribute("aria-activedescendant", i.id),
-        n?.setAttribute("aria-selected", "false"));
-    }
-  }
-  function ke(t) {
-    let e = t.getAttribute("aria-activedescendant");
-    ((e ? document.getElementById(e) : null)?.setAttribute("aria-selected", "false"),
-      t.setAttribute("aria-activedescendant", ""));
-  }
-  function Ce(t, e) {
-    if (e === "") return t;
-    let n = t.toLocaleLowerCase(),
-      r = e.toLocaleLowerCase(),
-      i = [],
-      s = 0,
-      o = n.indexOf(r);
-    for (; o != -1; )
-      (i.push(te(t.substring(s, o)), `<mark>${te(t.substring(o, o + r.length))}</mark>`),
-        (s = o + r.length),
-        (o = n.indexOf(r, s)));
-    return (i.push(te(t.substring(s))), i.join(""));
-  }
-  var lt = { "&": "&amp;", "<": "&lt;", ">": "&gt;", "'": "&#039;", '"': "&quot;" };
-  function te(t) {
-    return t.replace(/[&<>"'"]/g, (e) => lt[e]);
-  }
-  function Pe(t, e) {
-    t.innerHTML = e ? `<div>${e}</div>` : "";
-  }
-  var ct = ["button", "checkbox", "file", "hidden", "image", "radio", "range", "reset", "submit"];
-  function ut() {
-    let t = document.activeElement;
-    return t
-      ? t.isContentEditable || t.tagName === "TEXTAREA" || t.tagName === "SEARCH"
-        ? !0
-        : t.tagName === "INPUT" && !ct.includes(t.type)
-      : !1;
-  }
-  var D = "mousedown",
-    Me = "mousemove",
-    $ = "mouseup",
-    ne = { x: 0, y: 0 },
-    Qe = !1,
-    ce = !1,
-    dt = !1,
-    F = !1,
-    Oe = /Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent);
-  document.documentElement.classList.add(Oe ? "is-mobile" : "not-mobile");
-  Oe &&
-    "ontouchstart" in document.documentElement &&
-    ((dt = !0), (D = "touchstart"), (Me = "touchmove"), ($ = "touchend"));
-  document.addEventListener(D, (t) => {
-    ((ce = !0), (F = !1));
-    let e = D == "touchstart" ? t.targetTouches[0] : t;
-    ((ne.y = e.pageY || 0), (ne.x = e.pageX || 0));
-  });
-  document.addEventListener(Me, (t) => {
-    if (ce && !F) {
-      let e = D == "touchstart" ? t.targetTouches[0] : t,
-        n = ne.x - (e.pageX || 0),
-        r = ne.y - (e.pageY || 0);
-      F = Math.sqrt(n * n + r * r) > 10;
-    }
-  });
-  document.addEventListener($, () => {
-    ce = !1;
-  });
-  document.addEventListener("click", (t) => {
-    Qe && (t.preventDefault(), t.stopImmediatePropagation(), (Qe = !1));
-  });
-  var re = class extends I {
-    active;
-    className;
-    constructor(e) {
-      (super(e),
-        (this.className = this.el.dataset.toggle || ""),
-        this.el.addEventListener($, (n) => this.onPointerUp(n)),
-        this.el.addEventListener("click", (n) => n.preventDefault()),
-        document.addEventListener(D, (n) => this.onDocumentPointerDown(n)),
-        document.addEventListener($, (n) => this.onDocumentPointerUp(n)));
-    }
-    setActive(e) {
-      if (this.active == e) return;
-      ((this.active = e),
-        document.documentElement.classList.toggle("has-" + this.className, e),
-        this.el.classList.toggle("active", e));
-      let n = (this.active ? "to-has-" : "from-has-") + this.className;
-      (document.documentElement.classList.add(n),
-        setTimeout(() => document.documentElement.classList.remove(n), 500));
-    }
-    onPointerUp(e) {
-      F || (this.setActive(!0), e.preventDefault());
-    }
-    onDocumentPointerDown(e) {
-      if (this.active) {
-        if (e.target.closest(".col-sidebar, .tsd-filter-group")) return;
-        this.setActive(!1);
-      }
-    }
-    onDocumentPointerUp(e) {
-      if (!F && this.active && e.target.closest(".col-sidebar")) {
-        let n = e.target.closest("a");
-        if (n) {
-          let r = window.location.href;
-          (r.indexOf("#") != -1 && (r = r.substring(0, r.indexOf("#"))),
-            n.href.substring(0, r.length) == r && setTimeout(() => this.setActive(!1), 250));
-        }
-      }
-    }
-  };
-  var ue = new Map(),
-    de = class {
-      open;
-      accordions = [];
-      key;
-      constructor(e, n) {
-        ((this.key = e), (this.open = n));
-      }
-      add(e) {
-        (this.accordions.push(e),
-          (e.open = this.open),
-          e.addEventListener("toggle", () => {
-            this.toggle(e.open);
-          }));
-      }
-      toggle(e) {
-        for (let n of this.accordions) n.open = e;
-        S.setItem(this.key, e.toString());
-      }
-    },
-    ie = class extends I {
-      constructor(e) {
-        super(e);
-        let n = this.el.querySelector("summary"),
-          r = n.querySelector("a");
-        r &&
-          r.addEventListener("click", () => {
-            location.assign(r.href);
-          });
-        let i = `tsd-accordion-${n.dataset.key ?? n.textContent.trim().replace(/\s+/g, "-").toLowerCase()}`,
-          s;
-        if (ue.has(i)) s = ue.get(i);
-        else {
-          let o = S.getItem(i),
-            a = o ? o === "true" : this.el.open;
-          ((s = new de(i, a)), ue.set(i, s));
-        }
-        s.add(this.el);
-      }
-    };
-  function He(t) {
-    let e = S.getItem("tsd-theme") || "os";
-    ((t.value = e),
-      Ae(e),
-      t.addEventListener("change", () => {
-        (S.setItem("tsd-theme", t.value), Ae(t.value));
-      }));
-  }
-  function Ae(t) {
-    document.documentElement.dataset.theme = t;
-  }
-  var se;
-  function Ne() {
-    let t = document.getElementById("tsd-nav-script");
-    t && (t.addEventListener("load", Re), Re());
-  }
-  async function Re() {
-    let t = document.getElementById("tsd-nav-container");
-    if (!t || !window.navigationData) return;
-    let e = await R(window.navigationData);
-    ((se = document.documentElement.dataset.base),
-      se.endsWith("/") || (se += "/"),
-      (t.innerHTML = ""));
-    for (let n of e) Be(n, t, []);
-    (window.app.createComponents(t), window.app.showPage(), window.app.ensureActivePageVisible());
-  }
-  function Be(t, e, n) {
-    let r = e.appendChild(document.createElement("li"));
-    if (t.children) {
-      let i = [...n, t.text],
-        s = r.appendChild(document.createElement("details"));
-      s.className = t.class ? `${t.class} tsd-accordion` : "tsd-accordion";
-      let o = s.appendChild(document.createElement("summary"));
-      ((o.className = "tsd-accordion-summary"),
-        (o.dataset.key = i.join("$")),
-        (o.innerHTML =
-          '<svg width="20" height="20" viewBox="0 0 24 24" fill="none"><use href="#icon-chevronDown"></use></svg>'),
-        De(t, o));
-      let a = s.appendChild(document.createElement("div"));
-      a.className = "tsd-accordion-details";
-      let c = a.appendChild(document.createElement("ul"));
-      c.className = "tsd-nested-navigation";
-      for (let l of t.children) Be(l, c, i);
-    } else De(t, r, t.class);
-  }
-  function De(t, e, n) {
-    if (t.path) {
-      let r = e.appendChild(document.createElement("a"));
-      if (
-        ((r.href = se + t.path),
-        n && (r.className = n),
-        location.pathname === r.pathname &&
-          !r.href.includes("#") &&
-          (r.classList.add("current"), (r.ariaCurrent = "page")),
-        t.kind)
-      ) {
-        let i = window.translations[`kind_${t.kind}`].replaceAll('"', "&quot;");
-        r.innerHTML = `<svg width="20" height="20" viewBox="0 0 24 24" fill="none" class="tsd-kind-icon" aria-label="${i}"><use href="#icon-${t.icon || t.kind}"></use></svg>`;
-      }
-      r.appendChild(Fe(t.text, document.createElement("span")));
-    } else {
-      let r = e.appendChild(document.createElement("span")),
-        i = window.translations.folder.replaceAll('"', "&quot;");
-      ((r.innerHTML = `<svg width="20" height="20" viewBox="0 0 24 24" fill="none" class="tsd-kind-icon" aria-label="${i}"><use href="#icon-folder"></use></svg>`),
-        r.appendChild(Fe(t.text, document.createElement("span"))));
-    }
-  }
-  function Fe(t, e) {
-    let n = t.split(/(?<=[^A-Z])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])|(?<=[_-])(?=[^_-])/);
-    for (let r = 0; r < n.length; ++r)
-      (r !== 0 && e.appendChild(document.createElement("wbr")),
-        e.appendChild(document.createTextNode(n[r])));
-    return e;
-  }
-  var oe = document.documentElement.dataset.base;
-  oe.endsWith("/") || (oe += "/");
-  function $e() {
-    document.querySelector(".tsd-full-hierarchy")
-      ? ht()
-      : document.querySelector(".tsd-hierarchy") && pt();
-  }
-  function ht() {
-    document.addEventListener("click", (r) => {
-      let i = r.target;
-      for (; i.parentElement && i.parentElement.tagName != "LI"; ) i = i.parentElement;
-      i.dataset.dropdown && (i.dataset.dropdown = String(i.dataset.dropdown !== "true"));
-    });
-    let t = new Map(),
-      e = new Set();
-    for (let r of document.querySelectorAll(".tsd-full-hierarchy [data-refl]")) {
-      let i = r.querySelector("ul");
-      t.has(r.dataset.refl) ? e.add(r.dataset.refl) : i && t.set(r.dataset.refl, i);
-    }
-    for (let r of e) n(r);
-    function n(r) {
-      let i = t.get(r).cloneNode(!0);
-      (i.querySelectorAll("[id]").forEach((s) => {
-        s.removeAttribute("id");
-      }),
-        i.querySelectorAll("[data-dropdown]").forEach((s) => {
-          s.dataset.dropdown = "false";
-        }));
-      for (let s of document.querySelectorAll(`[data-refl="${r}"]`)) {
-        let o = gt(),
-          a = s.querySelector("ul");
-        (s.insertBefore(o, a),
-          (o.dataset.dropdown = String(!!a)),
-          a || s.appendChild(i.cloneNode(!0)));
-      }
-    }
-  }
-  function pt() {
-    let t = document.getElementById("tsd-hierarchy-script");
-    t && (t.addEventListener("load", Ve), Ve());
-  }
-  async function Ve() {
-    let t = document.querySelector(".tsd-panel.tsd-hierarchy:has(h4 a)");
-    if (!t || !window.hierarchyData) return;
-    let e = +t.dataset.refl,
-      n = await R(window.hierarchyData),
-      r = t.querySelector("ul"),
-      i = document.createElement("ul");
-    if (
-      (i.classList.add("tsd-hierarchy"),
-      ft(i, n, e),
-      r.querySelectorAll("li").length == i.querySelectorAll("li").length)
-    )
-      return;
-    let s = document.createElement("span");
-    (s.classList.add("tsd-hierarchy-toggle"),
-      (s.textContent = window.translations.hierarchy_expand),
-      t.querySelector("h4 a")?.insertAdjacentElement("afterend", s),
-      s.insertAdjacentText("beforebegin", ", "),
-      s.addEventListener("click", () => {
-        s.textContent === window.translations.hierarchy_expand
-          ? (r.insertAdjacentElement("afterend", i),
-            r.remove(),
-            (s.textContent = window.translations.hierarchy_collapse))
-          : (i.insertAdjacentElement("afterend", r),
-            i.remove(),
-            (s.textContent = window.translations.hierarchy_expand));
-      }));
-  }
-  function ft(t, e, n) {
-    let r = e.roots.filter((i) => mt(e, i, n));
-    for (let i of r) t.appendChild(je(e, i, n));
-  }
-  function je(t, e, n, r = new Set()) {
-    if (r.has(e)) return;
-    r.add(e);
-    let i = t.reflections[e],
-      s = document.createElement("li");
-    if ((s.classList.add("tsd-hierarchy-item"), e === n)) {
-      let o = s.appendChild(document.createElement("span"));
-      ((o.textContent = i.name), o.classList.add("tsd-hierarchy-target"));
-    } else {
-      for (let a of i.uniqueNameParents || []) {
-        let c = t.reflections[a],
-          l = s.appendChild(document.createElement("a"));
-        ((l.textContent = c.name),
-          (l.href = oe + c.url),
-          (l.className = c.class + " tsd-signature-type"),
-          s.append(document.createTextNode(".")));
-      }
-      let o = s.appendChild(document.createElement("a"));
-      ((o.textContent = t.reflections[e].name),
-        (o.href = oe + i.url),
-        (o.className = i.class + " tsd-signature-type"));
-    }
-    if (i.children) {
-      let o = s.appendChild(document.createElement("ul"));
-      o.classList.add("tsd-hierarchy");
-      for (let a of i.children) {
-        let c = je(t, a, n, r);
-        c && o.appendChild(c);
-      }
-    }
-    return (r.delete(e), s);
-  }
-  function mt(t, e, n) {
-    if (e === n) return !0;
-    let r = new Set(),
-      i = [t.reflections[e]];
-    for (; i.length; ) {
-      let s = i.pop();
-      if (!r.has(s)) {
-        r.add(s);
-        for (let o of s.children || []) {
-          if (o === n) return !0;
-          i.push(t.reflections[o]);
-        }
-      }
-    }
-    return !1;
-  }
-  function gt() {
-    let t = document.createElementNS("http://www.w3.org/2000/svg", "svg");
-    return (
-      t.setAttribute("width", "20"),
-      t.setAttribute("height", "20"),
-      t.setAttribute("viewBox", "0 0 24 24"),
-      t.setAttribute("fill", "none"),
-      (t.innerHTML = '<use href="#icon-chevronDown"></use>'),
-      t
-    );
-  }
-  X(re, "a[data-toggle]");
-  X(ie, ".tsd-accordion");
-  X(ee, ".tsd-filter-item input[type=checkbox]");
-  var qe = document.getElementById("tsd-theme");
-  qe && He(qe);
-  var yt = new Z();
-  Object.defineProperty(window, "app", { value: yt });
-  _e();
-  Ne();
-  $e();
-  "virtualKeyboard" in navigator && (navigator.virtualKeyboard.overlaysContent = !0);
-})();
+window.translations={"copy":"Copy","copied":"Copied!","normally_hidden":"This member is normally hidden due to your filter settings.","hierarchy_expand":"Expand","hierarchy_collapse":"Collapse","folder":"Folder","search_index_not_available":"The search index is not available","search_no_results_found_for_0":"No results found for {0}","kind_1":"Project","kind_2":"Module","kind_4":"Namespace","kind_8":"Enumeration","kind_16":"Enumeration Member","kind_32":"Variable","kind_64":"Function","kind_128":"Class","kind_256":"Interface","kind_512":"Constructor","kind_1024":"Property","kind_2048":"Method","kind_4096":"Call Signature","kind_8192":"Index Signature","kind_16384":"Constructor Signature","kind_32768":"Parameter","kind_65536":"Type Literal","kind_131072":"Type Parameter","kind_262144":"Accessor","kind_524288":"Get Signature","kind_1048576":"Set Signature","kind_2097152":"Type Alias","kind_4194304":"Reference","kind_8388608":"Document"};
+(()=>{var Ke=Object.create;var he=Object.defineProperty;var Ge=Object.getOwnPropertyDescriptor;var Ze=Object.getOwnPropertyNames;var Xe=Object.getPrototypeOf,Ye=Object.prototype.hasOwnProperty;var et=(t,e)=>()=>{try{return e||t((e={exports:{}}).exports,e),e.exports}catch(n){throw e=0,n}};var tt=(t,e,n,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of Ze(e))!Ye.call(t,i)&&i!==n&&he(t,i,{get:()=>e[i],enumerable:!(r=Ge(e,i))||r.enumerable});return t};var nt=(t,e,n)=>(n=t!=null?Ke(Xe(t)):{},tt(e||!t||!t.__esModule?he(n,"default",{value:t,enumerable:!0}):n,t));var ye=et((me,ge)=>{(function(){var t=function(e){var n=new t.Builder;return n.pipeline.add(t.trimmer,t.stopWordFilter,t.stemmer),n.searchPipeline.add(t.stemmer),e.call(n,n),n.build()};t.version="2.3.9";t.utils={},t.utils.warn=(function(e){return function(n){e.console&&console.warn&&console.warn(n)}})(this),t.utils.asString=function(e){return e==null?"":e.toString()},t.utils.clone=function(e){if(e==null)return e;for(var n=Object.create(null),r=Object.keys(e),i=0;i<r.length;i++){var s=r[i],o=e[s];if(Array.isArray(o)){n[s]=o.slice();continue}if(typeof o=="string"||typeof o=="number"||typeof o=="boolean"){n[s]=o;continue}throw new TypeError("clone is not deep and does not support nested objects")}return n},t.FieldRef=function(e,n,r){this.docRef=e,this.fieldName=n,this._stringValue=r},t.FieldRef.joiner="/",t.FieldRef.fromString=function(e){var n=e.indexOf(t.FieldRef.joiner);if(n===-1)throw"malformed field ref string";var r=e.slice(0,n),i=e.slice(n+1);return new t.FieldRef(i,r,e)},t.FieldRef.prototype.toString=function(){return this._stringValue==null&&(this._stringValue=this.fieldName+t.FieldRef.joiner+this.docRef),this._stringValue};t.Set=function(e){if(this.elements=Object.create(null),e){this.length=e.length;for(var n=0;n<this.length;n++)this.elements[e[n]]=!0}else this.length=0},t.Set.complete={intersect:function(e){return e},union:function(){return this},contains:function(){return!0}},t.Set.empty={intersect:function(){return this},union:function(e){return e},contains:function(){return!1}},t.Set.prototype.contains=function(e){return!!this.elements[e]},t.Set.prototype.intersect=function(e){var n,r,i,s=[];if(e===t.Set.complete)return this;if(e===t.Set.empty)return e;this.length<e.length?(n=this,r=e):(n=e,r=this),i=Object.keys(n.elements);for(var o=0;o<i.length;o++){var a=i[o];a in r.elements&&s.push(a)}return new t.Set(s)},t.Set.prototype.union=function(e){return e===t.Set.complete?t.Set.complete:e===t.Set.empty?this:new t.Set(Object.keys(this.elements).concat(Object.keys(e.elements)))},t.idf=function(e,n){var r=0;for(var i in e)i!="_index"&&(r+=Object.keys(e[i]).length);var s=(n-r+.5)/(r+.5);return Math.log(1+Math.abs(s))},t.Token=function(e,n){this.str=e||"",this.metadata=n||{}},t.Token.prototype.toString=function(){return this.str},t.Token.prototype.update=function(e){return this.str=e(this.str,this.metadata),this},t.Token.prototype.clone=function(e){return e=e||function(n){return n},new t.Token(e(this.str,this.metadata),this.metadata)};t.tokenizer=function(e,n){if(e==null||e==null)return[];if(Array.isArray(e))return e.map(function(f){return new t.Token(t.utils.asString(f).toLowerCase(),t.utils.clone(n))});for(var r=e.toString().toLowerCase(),i=r.length,s=[],o=0,a=0;o<=i;o++){var c=r.charAt(o),l=o-a;if(c.match(t.tokenizer.separator)||o==i){if(l>0){var d=t.utils.clone(n)||{};d.position=[a,l],d.index=s.length,s.push(new t.Token(r.slice(a,o),d))}a=o+1}}return s},t.tokenizer.separator=/[\s\-]+/;t.Pipeline=function(){this._stack=[]},t.Pipeline.registeredFunctions=Object.create(null),t.Pipeline.registerFunction=function(e,n){n in this.registeredFunctions&&t.utils.warn("Overwriting existing registered function: "+n),e.label=n,t.Pipeline.registeredFunctions[e.label]=e},t.Pipeline.warnIfFunctionNotRegistered=function(e){var n=e.label&&e.label in this.registeredFunctions;n||t.utils.warn(`Function is not registered with pipeline. This may cause problems when serialising the index.
+`,e)},t.Pipeline.load=function(e){var n=new t.Pipeline;return e.forEach(function(r){var i=t.Pipeline.registeredFunctions[r];if(i)n.add(i);else throw new Error("Cannot load unregistered function: "+r)}),n},t.Pipeline.prototype.add=function(){var e=Array.prototype.slice.call(arguments);e.forEach(function(n){t.Pipeline.warnIfFunctionNotRegistered(n),this._stack.push(n)},this)},t.Pipeline.prototype.after=function(e,n){t.Pipeline.warnIfFunctionNotRegistered(n);var r=this._stack.indexOf(e);if(r==-1)throw new Error("Cannot find existingFn");r=r+1,this._stack.splice(r,0,n)},t.Pipeline.prototype.before=function(e,n){t.Pipeline.warnIfFunctionNotRegistered(n);var r=this._stack.indexOf(e);if(r==-1)throw new Error("Cannot find existingFn");this._stack.splice(r,0,n)},t.Pipeline.prototype.remove=function(e){var n=this._stack.indexOf(e);n!=-1&&this._stack.splice(n,1)},t.Pipeline.prototype.run=function(e){for(var n=this._stack.length,r=0;r<n;r++){for(var i=this._stack[r],s=[],o=0;o<e.length;o++){var a=i(e[o],o,e);if(!(a==null||a===""))if(Array.isArray(a))for(var c=0;c<a.length;c++)s.push(a[c]);else s.push(a)}e=s}return e},t.Pipeline.prototype.runString=function(e,n){var r=new t.Token(e,n);return this.run([r]).map(function(i){return i.toString()})},t.Pipeline.prototype.reset=function(){this._stack=[]},t.Pipeline.prototype.toJSON=function(){return this._stack.map(function(e){return t.Pipeline.warnIfFunctionNotRegistered(e),e.label})};t.Vector=function(e){this._magnitude=0,this.elements=e||[]},t.Vector.prototype.positionForIndex=function(e){if(this.elements.length==0)return 0;for(var n=0,r=this.elements.length/2,i=r-n,s=Math.floor(i/2),o=this.elements[s*2];i>1&&(o<e&&(n=s),o>e&&(r=s),o!=e);)i=r-n,s=n+Math.floor(i/2),o=this.elements[s*2];if(o==e||o>e)return s*2;if(o<e)return(s+1)*2},t.Vector.prototype.insert=function(e,n){this.upsert(e,n,function(){throw"duplicate index"})},t.Vector.prototype.upsert=function(e,n,r){this._magnitude=0;var i=this.positionForIndex(e);this.elements[i]==e?this.elements[i+1]=r(this.elements[i+1],n):this.elements.splice(i,0,e,n)},t.Vector.prototype.magnitude=function(){if(this._magnitude)return this._magnitude;for(var e=0,n=this.elements.length,r=1;r<n;r+=2){var i=this.elements[r];e+=i*i}return this._magnitude=Math.sqrt(e)},t.Vector.prototype.dot=function(e){for(var n=0,r=this.elements,i=e.elements,s=r.length,o=i.length,a=0,c=0,l=0,d=0;l<s&&d<o;)a=r[l],c=i[d],a<c?l+=2:a>c?d+=2:a==c&&(n+=r[l+1]*i[d+1],l+=2,d+=2);return n},t.Vector.prototype.similarity=function(e){return this.dot(e)/this.magnitude()||0},t.Vector.prototype.toArray=function(){for(var e=new Array(this.elements.length/2),n=1,r=0;n<this.elements.length;n+=2,r++)e[r]=this.elements[n];return e},t.Vector.prototype.toJSON=function(){return this.elements};t.stemmer=(function(){var e={ational:"ate",tional:"tion",enci:"ence",anci:"ance",izer:"ize",bli:"ble",alli:"al",entli:"ent",eli:"e",ousli:"ous",ization:"ize",ation:"ate",ator:"ate",alism:"al",iveness:"ive",fulness:"ful",ousness:"ous",aliti:"al",iviti:"ive",biliti:"ble",logi:"log"},n={icate:"ic",ative:"",alize:"al",iciti:"ic",ical:"ic",ful:"",ness:""},r="[^aeiou]",i="[aeiouy]",s=r+"[^aeiouy]*",o=i+"[aeiou]*",a="^("+s+")?"+o+s,c="^("+s+")?"+o+s+"("+o+")?$",l="^("+s+")?"+o+s+o+s,d="^("+s+")?"+i,f=new RegExp(a),p=new RegExp(l),v=new RegExp(c),E=new RegExp(d),L=/^(.+?)(ss|i)es$/,m=/^(.+?)([^s])s$/,g=/^(.+?)eed$/,T=/^(.+?)(ed|ing)$/,w=/.$/,C=/(at|bl|iz)$/,O=new RegExp("([^aeiouylsz])\\1$"),j=new RegExp("^"+s+i+"[^aeiouwxy]$"),N=/^(.+?[^aeiou])y$/,q=/^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/,W=/^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/,V=/^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/,z=/^(.+?)(s|t)(ion)$/,_=/^(.+?)e$/,U=/ll$/,J=new RegExp("^"+s+i+"[^aeiouwxy]$"),B=function(u){var y,P,k,h,x,Q,H;if(u.length<3)return u;if(k=u.substr(0,1),k=="y"&&(u=k.toUpperCase()+u.substr(1)),h=L,x=m,h.test(u)?u=u.replace(h,"$1$2"):x.test(u)&&(u=u.replace(x,"$1$2")),h=g,x=T,h.test(u)){var b=h.exec(u);h=f,h.test(b[1])&&(h=w,u=u.replace(h,""))}else if(x.test(u)){var b=x.exec(u);y=b[1],x=E,x.test(y)&&(u=y,x=C,Q=O,H=j,x.test(u)?u=u+"e":Q.test(u)?(h=w,u=u.replace(h,"")):H.test(u)&&(u=u+"e"))}if(h=N,h.test(u)){var b=h.exec(u);y=b[1],u=y+"i"}if(h=q,h.test(u)){var b=h.exec(u);y=b[1],P=b[2],h=f,h.test(y)&&(u=y+e[P])}if(h=W,h.test(u)){var b=h.exec(u);y=b[1],P=b[2],h=f,h.test(y)&&(u=y+n[P])}if(h=V,x=z,h.test(u)){var b=h.exec(u);y=b[1],h=p,h.test(y)&&(u=y)}else if(x.test(u)){var b=x.exec(u);y=b[1]+b[2],x=p,x.test(y)&&(u=y)}if(h=_,h.test(u)){var b=h.exec(u);y=b[1],h=p,x=v,Q=J,(h.test(y)||x.test(y)&&!Q.test(y))&&(u=y)}return h=U,x=p,h.test(u)&&x.test(u)&&(h=w,u=u.replace(h,"")),k=="y"&&(u=k.toLowerCase()+u.substr(1)),u};return function(A){return A.update(B)}})(),t.Pipeline.registerFunction(t.stemmer,"stemmer");t.generateStopWordFilter=function(e){var n=e.reduce(function(r,i){return r[i]=i,r},{});return function(r){if(r&&n[r.toString()]!==r.toString())return r}},t.stopWordFilter=t.generateStopWordFilter(["a","able","about","across","after","all","almost","also","am","among","an","and","any","are","as","at","be","because","been","but","by","can","cannot","could","dear","did","do","does","either","else","ever","every","for","from","get","got","had","has","have","he","her","hers","him","his","how","however","i","if","in","into","is","it","its","just","least","let","like","likely","may","me","might","most","must","my","neither","no","nor","not","of","off","often","on","only","or","other","our","own","rather","said","say","says","she","should","since","so","some","than","that","the","their","them","then","there","these","they","this","tis","to","too","twas","us","wants","was","we","were","what","when","where","which","while","who","whom","why","will","with","would","yet","you","your"]),t.Pipeline.registerFunction(t.stopWordFilter,"stopWordFilter");t.trimmer=function(e){return e.update(function(n){return n.replace(/^\W+/,"").replace(/\W+$/,"")})},t.Pipeline.registerFunction(t.trimmer,"trimmer");t.TokenSet=function(){this.final=!1,this.edges={},this.id=t.TokenSet._nextId,t.TokenSet._nextId+=1},t.TokenSet._nextId=1,t.TokenSet.fromArray=function(e){for(var n=new t.TokenSet.Builder,r=0,i=e.length;r<i;r++)n.insert(e[r]);return n.finish(),n.root},t.TokenSet.fromClause=function(e){return"editDistance"in e?t.TokenSet.fromFuzzyString(e.term,e.editDistance):t.TokenSet.fromString(e.term)},t.TokenSet.fromFuzzyString=function(e,n){for(var r=new t.TokenSet,i=[{node:r,editsRemaining:n,str:e}];i.length;){var s=i.pop();if(s.str.length>0){var o=s.str.charAt(0),a;o in s.node.edges?a=s.node.edges[o]:(a=new t.TokenSet,s.node.edges[o]=a),s.str.length==1&&(a.final=!0),i.push({node:a,editsRemaining:s.editsRemaining,str:s.str.slice(1)})}if(s.editsRemaining!=0){if("*"in s.node.edges)var c=s.node.edges["*"];else{var c=new t.TokenSet;s.node.edges["*"]=c}if(s.str.length==0&&(c.final=!0),i.push({node:c,editsRemaining:s.editsRemaining-1,str:s.str}),s.str.length>1&&i.push({node:s.node,editsRemaining:s.editsRemaining-1,str:s.str.slice(1)}),s.str.length==1&&(s.node.final=!0),s.str.length>=1){if("*"in s.node.edges)var l=s.node.edges["*"];else{var l=new t.TokenSet;s.node.edges["*"]=l}s.str.length==1&&(l.final=!0),i.push({node:l,editsRemaining:s.editsRemaining-1,str:s.str.slice(1)})}if(s.str.length>1){var d=s.str.charAt(0),f=s.str.charAt(1),p;f in s.node.edges?p=s.node.edges[f]:(p=new t.TokenSet,s.node.edges[f]=p),s.str.length==1&&(p.final=!0),i.push({node:p,editsRemaining:s.editsRemaining-1,str:d+s.str.slice(2)})}}}return r},t.TokenSet.fromString=function(e){for(var n=new t.TokenSet,r=n,i=0,s=e.length;i<s;i++){var o=e[i],a=i==s-1;if(o=="*")n.edges[o]=n,n.final=a;else{var c=new t.TokenSet;c.final=a,n.edges[o]=c,n=c}}return r},t.TokenSet.prototype.toArray=function(){for(var e=[],n=[{prefix:"",node:this}];n.length;){var r=n.pop(),i=Object.keys(r.node.edges),s=i.length;r.node.final&&(r.prefix.charAt(0),e.push(r.prefix));for(var o=0;o<s;o++){var a=i[o];n.push({prefix:r.prefix.concat(a),node:r.node.edges[a]})}}return e},t.TokenSet.prototype.toString=function(){if(this._str)return this._str;for(var e=this.final?"1":"0",n=Object.keys(this.edges).sort(),r=n.length,i=0;i<r;i++){var s=n[i],o=this.edges[s];e=e+s+o.id}return e},t.TokenSet.prototype.intersect=function(e){for(var n=new t.TokenSet,r=void 0,i=[{qNode:e,output:n,node:this}];i.length;){r=i.pop();for(var s=Object.keys(r.qNode.edges),o=s.length,a=Object.keys(r.node.edges),c=a.length,l=0;l<o;l++)for(var d=s[l],f=0;f<c;f++){var p=a[f];if(p==d||d=="*"){var v=r.node.edges[p],E=r.qNode.edges[d],L=v.final&&E.final,m=void 0;p in r.output.edges?(m=r.output.edges[p],m.final=m.final||L):(m=new t.TokenSet,m.final=L,r.output.edges[p]=m),i.push({qNode:E,output:m,node:v})}}}return n},t.TokenSet.Builder=function(){this.previousWord="",this.root=new t.TokenSet,this.uncheckedNodes=[],this.minimizedNodes={}},t.TokenSet.Builder.prototype.insert=function(e){var n,r=0;if(e<this.previousWord)throw new Error("Out of order word insertion");for(var i=0;i<e.length&&i<this.previousWord.length&&e[i]==this.previousWord[i];i++)r++;this.minimize(r),this.uncheckedNodes.length==0?n=this.root:n=this.uncheckedNodes[this.uncheckedNodes.length-1].child;for(var i=r;i<e.length;i++){var s=new t.TokenSet,o=e[i];n.edges[o]=s,this.uncheckedNodes.push({parent:n,char:o,child:s}),n=s}n.final=!0,this.previousWord=e},t.TokenSet.Builder.prototype.finish=function(){this.minimize(0)},t.TokenSet.Builder.prototype.minimize=function(e){for(var n=this.uncheckedNodes.length-1;n>=e;n--){var r=this.uncheckedNodes[n],i=r.child.toString();i in this.minimizedNodes?r.parent.edges[r.char]=this.minimizedNodes[i]:(r.child._str=i,this.minimizedNodes[i]=r.child),this.uncheckedNodes.pop()}};t.Index=function(e){this.invertedIndex=e.invertedIndex,this.fieldVectors=e.fieldVectors,this.tokenSet=e.tokenSet,this.fields=e.fields,this.pipeline=e.pipeline},t.Index.prototype.search=function(e){return this.query(function(n){var r=new t.QueryParser(e,n);r.parse()})},t.Index.prototype.query=function(e){for(var n=new t.Query(this.fields),r=Object.create(null),i=Object.create(null),s=Object.create(null),o=Object.create(null),a=Object.create(null),c=0;c<this.fields.length;c++)i[this.fields[c]]=new t.Vector;e.call(n,n);for(var c=0;c<n.clauses.length;c++){var l=n.clauses[c],d=null,f=t.Set.empty;l.usePipeline?d=this.pipeline.runString(l.term,{fields:l.fields}):d=[l.term];for(var p=0;p<d.length;p++){var v=d[p];l.term=v;var E=t.TokenSet.fromClause(l),L=this.tokenSet.intersect(E).toArray();if(L.length===0&&l.presence===t.Query.presence.REQUIRED){for(var m=0;m<l.fields.length;m++){var g=l.fields[m];o[g]=t.Set.empty}break}for(var T=0;T<L.length;T++)for(var w=L[T],C=this.invertedIndex[w],O=C._index,m=0;m<l.fields.length;m++){var g=l.fields[m],j=C[g],N=Object.keys(j),q=w+"/"+g,W=new t.Set(N);if(l.presence==t.Query.presence.REQUIRED&&(f=f.union(W),o[g]===void 0&&(o[g]=t.Set.complete)),l.presence==t.Query.presence.PROHIBITED){a[g]===void 0&&(a[g]=t.Set.empty),a[g]=a[g].union(W);continue}if(i[g].upsert(O,l.boost,function(Ue,Je){return Ue+Je}),!s[q]){for(var V=0;V<N.length;V++){var z=N[V],_=new t.FieldRef(z,g),U=j[z],J;(J=r[_])===void 0?r[_]=new t.MatchData(w,g,U):J.add(w,g,U)}s[q]=!0}}}if(l.presence===t.Query.presence.REQUIRED)for(var m=0;m<l.fields.length;m++){var g=l.fields[m];o[g]=o[g].intersect(f)}}for(var B=t.Set.complete,A=t.Set.empty,c=0;c<this.fields.length;c++){var g=this.fields[c];o[g]&&(B=B.intersect(o[g])),a[g]&&(A=A.union(a[g]))}var u=Object.keys(r),y=[],P=Object.create(null);if(n.isNegated()){u=Object.keys(this.fieldVectors);for(var c=0;c<u.length;c++){var _=u[c],k=t.FieldRef.fromString(_);r[_]=new t.MatchData}}for(var c=0;c<u.length;c++){var k=t.FieldRef.fromString(u[c]),h=k.docRef;if(B.contains(h)&&!A.contains(h)){var x=this.fieldVectors[k],Q=i[k.fieldName].similarity(x),H;if((H=P[h])!==void 0)H.score+=Q,H.matchData.combine(r[k]);else{var b={ref:h,score:Q,matchData:r[k]};P[h]=b,y.push(b)}}}return y.sort(function(We,ze){return ze.score-We.score})},t.Index.prototype.toJSON=function(){var e=Object.keys(this.invertedIndex).sort().map(function(r){return[r,this.invertedIndex[r]]},this),n=Object.keys(this.fieldVectors).map(function(r){return[r,this.fieldVectors[r].toJSON()]},this);return{version:t.version,fields:this.fields,fieldVectors:n,invertedIndex:e,pipeline:this.pipeline.toJSON()}},t.Index.load=function(e){var n={},r={},i=e.fieldVectors,s=Object.create(null),o=e.invertedIndex,a=new t.TokenSet.Builder,c=t.Pipeline.load(e.pipeline);e.version!=t.version&&t.utils.warn("Version mismatch when loading serialised index. Current version of lunr '"+t.version+"' does not match serialized index '"+e.version+"'");for(var l=0;l<i.length;l++){var d=i[l],f=d[0],p=d[1];r[f]=new t.Vector(p)}for(var l=0;l<o.length;l++){var d=o[l],v=d[0],E=d[1];a.insert(v),s[v]=E}return a.finish(),n.fields=e.fields,n.fieldVectors=r,n.invertedIndex=s,n.tokenSet=a.root,n.pipeline=c,new t.Index(n)};t.Builder=function(){this._ref="id",this._fields=Object.create(null),this._documents=Object.create(null),this.invertedIndex=Object.create(null),this.fieldTermFrequencies={},this.fieldLengths={},this.tokenizer=t.tokenizer,this.pipeline=new t.Pipeline,this.searchPipeline=new t.Pipeline,this.documentCount=0,this._b=.75,this._k1=1.2,this.termIndex=0,this.metadataWhitelist=[]},t.Builder.prototype.ref=function(e){this._ref=e},t.Builder.prototype.field=function(e,n){if(/\//.test(e))throw new RangeError("Field '"+e+"' contains illegal character '/'");this._fields[e]=n||{}},t.Builder.prototype.b=function(e){e<0?this._b=0:e>1?this._b=1:this._b=e},t.Builder.prototype.k1=function(e){this._k1=e},t.Builder.prototype.add=function(e,n){var r=e[this._ref],i=Object.keys(this._fields);this._documents[r]=n||{},this.documentCount+=1;for(var s=0;s<i.length;s++){var o=i[s],a=this._fields[o].extractor,c=a?a(e):e[o],l=this.tokenizer(c,{fields:[o]}),d=this.pipeline.run(l),f=new t.FieldRef(r,o),p=Object.create(null);this.fieldTermFrequencies[f]=p,this.fieldLengths[f]=0,this.fieldLengths[f]+=d.length;for(var v=0;v<d.length;v++){var E=d[v];if(p[E]==null&&(p[E]=0),p[E]+=1,this.invertedIndex[E]==null){var L=Object.create(null);L._index=this.termIndex,this.termIndex+=1;for(var m=0;m<i.length;m++)L[i[m]]=Object.create(null);this.invertedIndex[E]=L}this.invertedIndex[E][o][r]==null&&(this.invertedIndex[E][o][r]=Object.create(null));for(var g=0;g<this.metadataWhitelist.length;g++){var T=this.metadataWhitelist[g],w=E.metadata[T];this.invertedIndex[E][o][r][T]==null&&(this.invertedIndex[E][o][r][T]=[]),this.invertedIndex[E][o][r][T].push(w)}}}},t.Builder.prototype.calculateAverageFieldLengths=function(){for(var e=Object.keys(this.fieldLengths),n=e.length,r={},i={},s=0;s<n;s++){var o=t.FieldRef.fromString(e[s]),a=o.fieldName;i[a]||(i[a]=0),i[a]+=1,r[a]||(r[a]=0),r[a]+=this.fieldLengths[o]}for(var c=Object.keys(this._fields),s=0;s<c.length;s++){var l=c[s];r[l]=r[l]/i[l]}this.averageFieldLength=r},t.Builder.prototype.createFieldVectors=function(){for(var e={},n=Object.keys(this.fieldTermFrequencies),r=n.length,i=Object.create(null),s=0;s<r;s++){for(var o=t.FieldRef.fromString(n[s]),a=o.fieldName,c=this.fieldLengths[o],l=new t.Vector,d=this.fieldTermFrequencies[o],f=Object.keys(d),p=f.length,v=this._fields[a].boost||1,E=this._documents[o.docRef].boost||1,L=0;L<p;L++){var m=f[L],g=d[m],T=this.invertedIndex[m]._index,w,C,O;i[m]===void 0?(w=t.idf(this.invertedIndex[m],this.documentCount),i[m]=w):w=i[m],C=w*((this._k1+1)*g)/(this._k1*(1-this._b+this._b*(c/this.averageFieldLength[a]))+g),C*=v,C*=E,O=Math.round(C*1e3)/1e3,l.insert(T,O)}e[o]=l}this.fieldVectors=e},t.Builder.prototype.createTokenSet=function(){this.tokenSet=t.TokenSet.fromArray(Object.keys(this.invertedIndex).sort())},t.Builder.prototype.build=function(){return this.calculateAverageFieldLengths(),this.createFieldVectors(),this.createTokenSet(),new t.Index({invertedIndex:this.invertedIndex,fieldVectors:this.fieldVectors,tokenSet:this.tokenSet,fields:Object.keys(this._fields),pipeline:this.searchPipeline})},t.Builder.prototype.use=function(e){var n=Array.prototype.slice.call(arguments,1);n.unshift(this),e.apply(this,n)},t.MatchData=function(e,n,r){for(var i=Object.create(null),s=Object.keys(r||{}),o=0;o<s.length;o++){var a=s[o];i[a]=r[a].slice()}this.metadata=Object.create(null),e!==void 0&&(this.metadata[e]=Object.create(null),this.metadata[e][n]=i)},t.MatchData.prototype.combine=function(e){for(var n=Object.keys(e.metadata),r=0;r<n.length;r++){var i=n[r],s=Object.keys(e.metadata[i]);this.metadata[i]==null&&(this.metadata[i]=Object.create(null));for(var o=0;o<s.length;o++){var a=s[o],c=Object.keys(e.metadata[i][a]);this.metadata[i][a]==null&&(this.metadata[i][a]=Object.create(null));for(var l=0;l<c.length;l++){var d=c[l];this.metadata[i][a][d]==null?this.metadata[i][a][d]=e.metadata[i][a][d]:this.metadata[i][a][d]=this.metadata[i][a][d].concat(e.metadata[i][a][d])}}}},t.MatchData.prototype.add=function(e,n,r){if(!(e in this.metadata)){this.metadata[e]=Object.create(null),this.metadata[e][n]=r;return}if(!(n in this.metadata[e])){this.metadata[e][n]=r;return}for(var i=Object.keys(r),s=0;s<i.length;s++){var o=i[s];o in this.metadata[e][n]?this.metadata[e][n][o]=this.metadata[e][n][o].concat(r[o]):this.metadata[e][n][o]=r[o]}},t.Query=function(e){this.clauses=[],this.allFields=e},t.Query.wildcard=new String("*"),t.Query.wildcard.NONE=0,t.Query.wildcard.LEADING=1,t.Query.wildcard.TRAILING=2,t.Query.presence={OPTIONAL:1,REQUIRED:2,PROHIBITED:3},t.Query.prototype.clause=function(e){return"fields"in e||(e.fields=this.allFields),"boost"in e||(e.boost=1),"usePipeline"in e||(e.usePipeline=!0),"wildcard"in e||(e.wildcard=t.Query.wildcard.NONE),e.wildcard&t.Query.wildcard.LEADING&&e.term.charAt(0)!=t.Query.wildcard&&(e.term="*"+e.term),e.wildcard&t.Query.wildcard.TRAILING&&e.term.slice(-1)!=t.Query.wildcard&&(e.term=""+e.term+"*"),"presence"in e||(e.presence=t.Query.presence.OPTIONAL),this.clauses.push(e),this},t.Query.prototype.isNegated=function(){for(var e=0;e<this.clauses.length;e++)if(this.clauses[e].presence!=t.Query.presence.PROHIBITED)return!1;return!0},t.Query.prototype.term=function(e,n){if(Array.isArray(e))return e.forEach(function(i){this.term(i,t.utils.clone(n))},this),this;var r=n||{};return r.term=e.toString(),this.clause(r),this},t.QueryParseError=function(e,n,r){this.name="QueryParseError",this.message=e,this.start=n,this.end=r},t.QueryParseError.prototype=new Error,t.QueryLexer=function(e){this.lexemes=[],this.str=e,this.length=e.length,this.pos=0,this.start=0,this.escapeCharPositions=[]},t.QueryLexer.prototype.run=function(){for(var e=t.QueryLexer.lexText;e;)e=e(this)},t.QueryLexer.prototype.sliceString=function(){for(var e=[],n=this.start,r=this.pos,i=0;i<this.escapeCharPositions.length;i++)r=this.escapeCharPositions[i],e.push(this.str.slice(n,r)),n=r+1;return e.push(this.str.slice(n,this.pos)),this.escapeCharPositions.length=0,e.join("")},t.QueryLexer.prototype.emit=function(e){this.lexemes.push({type:e,str:this.sliceString(),start:this.start,end:this.pos}),this.start=this.pos},t.QueryLexer.prototype.escapeCharacter=function(){this.escapeCharPositions.push(this.pos-1),this.pos+=1},t.QueryLexer.prototype.next=function(){if(this.pos>=this.length)return t.QueryLexer.EOS;var e=this.str.charAt(this.pos);return this.pos+=1,e},t.QueryLexer.prototype.width=function(){return this.pos-this.start},t.QueryLexer.prototype.ignore=function(){this.start==this.pos&&(this.pos+=1),this.start=this.pos},t.QueryLexer.prototype.backup=function(){this.pos-=1},t.QueryLexer.prototype.acceptDigitRun=function(){var e,n;do e=this.next(),n=e.charCodeAt(0);while(n>47&&n<58);e!=t.QueryLexer.EOS&&this.backup()},t.QueryLexer.prototype.more=function(){return this.pos<this.length},t.QueryLexer.EOS="EOS",t.QueryLexer.FIELD="FIELD",t.QueryLexer.TERM="TERM",t.QueryLexer.EDIT_DISTANCE="EDIT_DISTANCE",t.QueryLexer.BOOST="BOOST",t.QueryLexer.PRESENCE="PRESENCE",t.QueryLexer.lexField=function(e){return e.backup(),e.emit(t.QueryLexer.FIELD),e.ignore(),t.QueryLexer.lexText},t.QueryLexer.lexTerm=function(e){if(e.width()>1&&(e.backup(),e.emit(t.QueryLexer.TERM)),e.ignore(),e.more())return t.QueryLexer.lexText},t.QueryLexer.lexEditDistance=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(t.QueryLexer.EDIT_DISTANCE),t.QueryLexer.lexText},t.QueryLexer.lexBoost=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(t.QueryLexer.BOOST),t.QueryLexer.lexText},t.QueryLexer.lexEOS=function(e){e.width()>0&&e.emit(t.QueryLexer.TERM)},t.QueryLexer.termSeparator=t.tokenizer.separator,t.QueryLexer.lexText=function(e){for(;;){var n=e.next();if(n==t.QueryLexer.EOS)return t.QueryLexer.lexEOS;if(n.charCodeAt(0)==92){e.escapeCharacter();continue}if(n==":")return t.QueryLexer.lexField;if(n=="~")return e.backup(),e.width()>0&&e.emit(t.QueryLexer.TERM),t.QueryLexer.lexEditDistance;if(n=="^")return e.backup(),e.width()>0&&e.emit(t.QueryLexer.TERM),t.QueryLexer.lexBoost;if(n=="+"&&e.width()===1||n=="-"&&e.width()===1)return e.emit(t.QueryLexer.PRESENCE),t.QueryLexer.lexText;if(n.match(t.QueryLexer.termSeparator))return t.QueryLexer.lexTerm}},t.QueryParser=function(e,n){this.lexer=new t.QueryLexer(e),this.query=n,this.currentClause={},this.lexemeIdx=0},t.QueryParser.prototype.parse=function(){this.lexer.run(),this.lexemes=this.lexer.lexemes;for(var e=t.QueryParser.parseClause;e;)e=e(this);return this.query},t.QueryParser.prototype.peekLexeme=function(){return this.lexemes[this.lexemeIdx]},t.QueryParser.prototype.consumeLexeme=function(){var e=this.peekLexeme();return this.lexemeIdx+=1,e},t.QueryParser.prototype.nextClause=function(){var e=this.currentClause;this.query.clause(e),this.currentClause={}},t.QueryParser.parseClause=function(e){var n=e.peekLexeme();if(n!=null)switch(n.type){case t.QueryLexer.PRESENCE:return t.QueryParser.parsePresence;case t.QueryLexer.FIELD:return t.QueryParser.parseField;case t.QueryLexer.TERM:return t.QueryParser.parseTerm;default:var r="expected either a field or a term, found "+n.type;throw n.str.length>=1&&(r+=" with value '"+n.str+"'"),new t.QueryParseError(r,n.start,n.end)}},t.QueryParser.parsePresence=function(e){var n=e.consumeLexeme();if(n!=null){switch(n.str){case"-":e.currentClause.presence=t.Query.presence.PROHIBITED;break;case"+":e.currentClause.presence=t.Query.presence.REQUIRED;break;default:var r="unrecognised presence operator'"+n.str+"'";throw new t.QueryParseError(r,n.start,n.end)}var i=e.peekLexeme();if(i==null){var r="expecting term or field, found nothing";throw new t.QueryParseError(r,n.start,n.end)}switch(i.type){case t.QueryLexer.FIELD:return t.QueryParser.parseField;case t.QueryLexer.TERM:return t.QueryParser.parseTerm;default:var r="expecting term or field, found '"+i.type+"'";throw new t.QueryParseError(r,i.start,i.end)}}},t.QueryParser.parseField=function(e){var n=e.consumeLexeme();if(n!=null){if(e.query.allFields.indexOf(n.str)==-1){var r=e.query.allFields.map(function(o){return"'"+o+"'"}).join(", "),i="unrecognised field '"+n.str+"', possible fields: "+r;throw new t.QueryParseError(i,n.start,n.end)}e.currentClause.fields=[n.str];var s=e.peekLexeme();if(s==null){var i="expecting term, found nothing";throw new t.QueryParseError(i,n.start,n.end)}if(s.type===t.QueryLexer.TERM)return t.QueryParser.parseTerm;var i="expecting term, found '"+s.type+"'";throw new t.QueryParseError(i,s.start,s.end)}},t.QueryParser.parseTerm=function(e){var n=e.consumeLexeme();if(n!=null){e.currentClause.term=n.str.toLowerCase(),n.str.indexOf("*")!=-1&&(e.currentClause.usePipeline=!1);var r=e.peekLexeme();if(r==null){e.nextClause();return}switch(r.type){case t.QueryLexer.TERM:return e.nextClause(),t.QueryParser.parseTerm;case t.QueryLexer.FIELD:return e.nextClause(),t.QueryParser.parseField;case t.QueryLexer.EDIT_DISTANCE:return t.QueryParser.parseEditDistance;case t.QueryLexer.BOOST:return t.QueryParser.parseBoost;case t.QueryLexer.PRESENCE:return e.nextClause(),t.QueryParser.parsePresence;default:var i="Unexpected lexeme type '"+r.type+"'";throw new t.QueryParseError(i,r.start,r.end)}}},t.QueryParser.parseEditDistance=function(e){var n=e.consumeLexeme();if(n!=null){var r=parseInt(n.str,10);if(isNaN(r)){var i="edit distance must be numeric";throw new t.QueryParseError(i,n.start,n.end)}e.currentClause.editDistance=r;var s=e.peekLexeme();if(s==null){e.nextClause();return}switch(s.type){case t.QueryLexer.TERM:return e.nextClause(),t.QueryParser.parseTerm;case t.QueryLexer.FIELD:return e.nextClause(),t.QueryParser.parseField;case t.QueryLexer.EDIT_DISTANCE:return t.QueryParser.parseEditDistance;case t.QueryLexer.BOOST:return t.QueryParser.parseBoost;case t.QueryLexer.PRESENCE:return e.nextClause(),t.QueryParser.parsePresence;default:var i="Unexpected lexeme type '"+s.type+"'";throw new t.QueryParseError(i,s.start,s.end)}}},t.QueryParser.parseBoost=function(e){var n=e.consumeLexeme();if(n!=null){var r=parseInt(n.str,10);if(isNaN(r)){var i="boost must be numeric";throw new t.QueryParseError(i,n.start,n.end)}e.currentClause.boost=r;var s=e.peekLexeme();if(s==null){e.nextClause();return}switch(s.type){case t.QueryLexer.TERM:return e.nextClause(),t.QueryParser.parseTerm;case t.QueryLexer.FIELD:return e.nextClause(),t.QueryParser.parseField;case t.QueryLexer.EDIT_DISTANCE:return t.QueryParser.parseEditDistance;case t.QueryLexer.BOOST:return t.QueryParser.parseBoost;case t.QueryLexer.PRESENCE:return e.nextClause(),t.QueryParser.parsePresence;default:var i="Unexpected lexeme type '"+s.type+"'";throw new t.QueryParseError(i,s.start,s.end)}}},(function(e,n){typeof define=="function"&&define.amd?define(n):typeof me=="object"?ge.exports=n():e.lunr=n()})(this,function(){return t})})()});var M,G={getItem(){return null},setItem(){}},K;try{K=localStorage,M=K}catch{K=G,M=G}var S={getItem:t=>M.getItem(t),setItem:(t,e)=>M.setItem(t,e),disableWritingLocalStorage(){M=G},disable(){localStorage.clear(),M=G},enable(){M=K}};window.TypeDoc||={disableWritingLocalStorage(){S.disableWritingLocalStorage()},disableLocalStorage:()=>{S.disable()},enableLocalStorage:()=>{S.enable()}};window.translations||={copy:"Copy",copied:"Copied!",normally_hidden:"This member is normally hidden due to your filter settings.",hierarchy_expand:"Expand",hierarchy_collapse:"Collapse",search_index_not_available:"The search index is not available",search_no_results_found_for_0:"No results found for {0}",folder:"Folder",kind_1:"Project",kind_2:"Module",kind_4:"Namespace",kind_8:"Enumeration",kind_16:"Enumeration Member",kind_32:"Variable",kind_64:"Function",kind_128:"Class",kind_256:"Interface",kind_512:"Constructor",kind_1024:"Property",kind_2048:"Method",kind_4096:"Call Signature",kind_8192:"Index Signature",kind_16384:"Constructor Signature",kind_32768:"Parameter",kind_65536:"Type Literal",kind_131072:"Type Parameter",kind_262144:"Accessor",kind_524288:"Get Signature",kind_1048576:"Set Signature",kind_2097152:"Type Alias",kind_4194304:"Reference",kind_8388608:"Document"};var pe=[];function X(t,e){pe.push({selector:e,constructor:t})}var Z=class{alwaysVisibleMember=null;constructor(){this.createComponents(document.body),this.ensureFocusedElementVisible(),this.listenForCodeCopies(),window.addEventListener("hashchange",()=>this.ensureFocusedElementVisible()),document.body.style.display||(this.ensureFocusedElementVisible(),this.updateIndexVisibility(),this.scrollToHash())}createComponents(e){pe.forEach(n=>{e.querySelectorAll(n.selector).forEach(r=>{r.dataset.hasInstance||(new n.constructor({el:r,app:this}),r.dataset.hasInstance=String(!0))})})}filterChanged(){this.ensureFocusedElementVisible()}showPage(){document.body.style.display&&(document.body.style.removeProperty("display"),this.ensureFocusedElementVisible(),this.updateIndexVisibility(),this.scrollToHash())}scrollToHash(){if(location.hash){let e=document.getElementById(location.hash.substring(1));if(!e)return;e.scrollIntoView({behavior:"instant",block:"start"})}}ensureActivePageVisible(){let e=document.querySelector(".tsd-navigation .current"),n=e?.parentElement;for(;n&&!n.classList.contains(".tsd-navigation");)n instanceof HTMLDetailsElement&&(n.open=!0),n=n.parentElement;if(e&&!rt(e)){let r=e.getBoundingClientRect().top-document.documentElement.clientHeight/4;document.querySelector(".site-menu").scrollTop=r,document.querySelector(".col-sidebar").scrollTop=r}}updateIndexVisibility(){let e=document.querySelector(".tsd-index-content"),n=e?.open;e&&(e.open=!0),document.querySelectorAll(".tsd-index-section").forEach(r=>{r.style.display="block";let i=Array.from(r.querySelectorAll(".tsd-index-link")).every(s=>s.offsetParent==null);r.style.display=i?"none":"block"}),e&&(e.open=n)}ensureFocusedElementVisible(){if(this.alwaysVisibleMember&&(this.alwaysVisibleMember.classList.remove("always-visible"),this.alwaysVisibleMember.firstElementChild.remove(),this.alwaysVisibleMember=null),!location.hash)return;let e=document.getElementById(location.hash.substring(1));if(!e)return;let n=e.parentElement;for(;n&&n.tagName!=="SECTION";)n=n.parentElement;if(!n)return;let r=n.offsetParent==null,i=n;for(;i!==document.body;)i instanceof HTMLDetailsElement&&(i.open=!0),i=i.parentElement;if(n.offsetParent==null){this.alwaysVisibleMember=n,n.classList.add("always-visible");let s=document.createElement("p");s.classList.add("warning"),s.textContent=window.translations.normally_hidden,n.prepend(s)}r&&e.scrollIntoView()}listenForCodeCopies(){document.querySelectorAll("pre > button").forEach(e=>{let n;e.addEventListener("click",()=>{e.previousElementSibling instanceof HTMLElement&&navigator.clipboard.writeText(e.previousElementSibling.innerText.trim()),e.textContent=window.translations.copied,e.classList.add("visible"),clearTimeout(n),n=setTimeout(()=>{e.classList.remove("visible"),n=setTimeout(()=>{e.textContent=window.translations.copy},100)},1e3)})})}};function rt(t){let e=t.getBoundingClientRect(),n=Math.max(document.documentElement.clientHeight,window.innerHeight);return!(e.bottom<0||e.top-n>=0)}var fe=(t,e=100)=>{let n;return()=>{clearTimeout(n),n=setTimeout(()=>t(),e)}};var Ie=nt(ye(),1);async function R(t){let e=Uint8Array.from(atob(t),s=>s.charCodeAt(0)),r=new Blob([e]).stream().pipeThrough(new DecompressionStream("deflate")),i=await new Response(r).text();return JSON.parse(i)}var Y="closing",ae="tsd-overlay";function it(){let t=Math.abs(window.innerWidth-document.documentElement.clientWidth);document.body.style.overflow="hidden",document.body.style.paddingRight=`${t}px`}function st(){document.body.style.removeProperty("overflow"),document.body.style.removeProperty("padding-right")}function Ee(t,e){t.addEventListener("animationend",()=>{t.classList.contains(Y)&&(t.classList.remove(Y),document.getElementById(ae)?.remove(),t.close(),st())}),t.addEventListener("cancel",n=>{n.preventDefault(),ve(t)}),e?.closeOnClick&&document.addEventListener("click",n=>{t.open&&!t.contains(n.target)&&ve(t)},!0)}function xe(t){if(t.open)return;let e=document.createElement("div");e.id=ae,document.body.appendChild(e),t.showModal(),it()}function ve(t){if(!t.open)return;document.getElementById(ae)?.classList.add(Y),t.classList.add(Y)}var I=class{el;app;constructor(e){this.el=e.el,this.app=e.app}};var be=document.head.appendChild(document.createElement("style"));be.dataset.for="filters";var le={};function Le(t){for(let e of t.split(/\s+/))if(le.hasOwnProperty(e)&&!le[e])return!0;return!1}var ee=class extends I{key;value;constructor(e){super(e),this.key=`filter-${this.el.name}`,this.value=this.el.checked,this.el.addEventListener("change",()=>{this.setLocalStorage(this.el.checked)}),this.setLocalStorage(this.fromLocalStorage()),be.innerHTML+=`html:not(.${this.key}) .tsd-is-${this.el.name} { display: none; }
+`,this.app.updateIndexVisibility()}fromLocalStorage(){let e=S.getItem(this.key);return e?e==="true":this.el.checked}setLocalStorage(e){S.setItem(this.key,e.toString()),this.value=e,this.handleValueChange()}handleValueChange(){this.el.checked=this.value,document.documentElement.classList.toggle(this.key,this.value),le[`tsd-is-${this.el.name}`]=this.value,this.app.filterChanged(),this.app.updateIndexVisibility()}};var we=0;async function Se(t,e){if(!window.searchData)return;let n=await R(window.searchData);t.data=n,t.index=Ie.Index.load(n.index),e.innerHTML=""}function _e(){let t=document.getElementById("tsd-search-trigger"),e=document.getElementById("tsd-search"),n=document.getElementById("tsd-search-input"),r=document.getElementById("tsd-search-results"),i=document.getElementById("tsd-search-script"),s=document.getElementById("tsd-search-status");if(!(t&&e&&n&&r&&i&&s))throw new Error("Search controls missing");let o={base:document.documentElement.dataset.base};o.base.endsWith("/")||(o.base+="/"),i.addEventListener("error",()=>{let a=window.translations.search_index_not_available;Pe(s,a)}),i.addEventListener("load",()=>{Se(o,s)}),Se(o,s),ot({trigger:t,searchEl:e,results:r,field:n,status:s},o)}function ot(t,e){let{field:n,results:r,searchEl:i,status:s,trigger:o}=t;Ee(i,{closeOnClick:!0});function a(){xe(i),n.setSelectionRange(0,n.value.length)}o.addEventListener("click",a),n.addEventListener("input",fe(()=>{at(r,n,s,e)},200)),n.addEventListener("keydown",l=>{if(r.childElementCount===0||l.ctrlKey||l.metaKey||l.altKey)return;let d=n.getAttribute("aria-activedescendant"),f=d?document.getElementById(d):null;if(f){let p=!1,v=!1;switch(l.key){case"Home":case"End":case"ArrowLeft":case"ArrowRight":v=!0;break;case"ArrowDown":case"ArrowUp":p=l.shiftKey;break}(p||v)&&ke(n)}if(!l.shiftKey)switch(l.key){case"Enter":f?.querySelector("a")?.click();break;case"ArrowUp":Te(r,n,f,-1),l.preventDefault();break;case"ArrowDown":Te(r,n,f,1),l.preventDefault();break}});function c(){ke(n)}n.addEventListener("change",c),n.addEventListener("blur",c),n.addEventListener("click",c),document.body.addEventListener("keydown",l=>{if(l.altKey||l.metaKey||l.shiftKey)return;let d=l.ctrlKey&&l.key==="k",f=!l.ctrlKey&&!ut()&&l.key==="/";(d||f)&&(l.preventDefault(),a())})}function at(t,e,n,r){if(!r.index||!r.data)return;t.innerHTML="",n.innerHTML="",we+=1;let i=e.value.trim(),s;if(i){let a=i.split(" ").map(c=>c.length?`*${c}*`:"").join(" ");s=r.index.search(a).filter(({ref:c})=>{let l=r.data.rows[Number(c)].classes;return!l||!Le(l)})}else s=[];if(s.length===0&&i){let a=window.translations.search_no_results_found_for_0.replace("{0}",` "<strong>${te(i)}</strong>" `);Pe(n,a);return}for(let a=0;a<s.length;a++){let c=s[a],l=r.data.rows[Number(c.ref)],d=1;l.name.toLowerCase().startsWith(i.toLowerCase())&&(d*=10/(1+Math.abs(l.name.length-i.length))),c.score*=d}s.sort((a,c)=>c.score-a.score);let o=Math.min(10,s.length);for(let a=0;a<o;a++){let c=r.data.rows[Number(s[a].ref)],d=`<svg width="20" height="20" class="tsd-kind-icon" aria-label="${window.translations[`kind_${c.kind}`].replaceAll('"',"&quot;")}"><use href="#icon-${c.icon||c.kind}"></use></svg>`,f=Ce(c.name,i);globalThis.DEBUG_SEARCH_WEIGHTS&&(f+=` (score: ${s[a].score.toFixed(2)})`),c.parent&&(f=`<span class="parent">
+                ${Ce(c.parent,i)}.</span>${f}`);let p=document.createElement("li");p.id=`tsd-search:${we}-${a}`,p.role="option",p.ariaSelected="false",p.classList.value=c.classes??"";let v=document.createElement("a");v.tabIndex=-1,v.href=r.base+c.url,v.innerHTML=d+`<span class="text">${f}</span>`,p.append(v),t.appendChild(p)}}function Te(t,e,n,r){let i;if(r===1?i=n?.nextElementSibling||t.firstElementChild:i=n?.previousElementSibling||t.lastElementChild,i!==n){if(!i||i.role!=="option"){console.error("Option missing");return}i.ariaSelected="true",i.scrollIntoView({behavior:"smooth",block:"nearest"}),e.setAttribute("aria-activedescendant",i.id),n?.setAttribute("aria-selected","false")}}function ke(t){let e=t.getAttribute("aria-activedescendant");(e?document.getElementById(e):null)?.setAttribute("aria-selected","false"),t.setAttribute("aria-activedescendant","")}function Ce(t,e){if(e==="")return t;let n=t.toLocaleLowerCase(),r=e.toLocaleLowerCase(),i=[],s=0,o=n.indexOf(r);for(;o!=-1;)i.push(te(t.substring(s,o)),`<mark>${te(t.substring(o,o+r.length))}</mark>`),s=o+r.length,o=n.indexOf(r,s);return i.push(te(t.substring(s))),i.join("")}var lt={"&":"&amp;","<":"&lt;",">":"&gt;","'":"&#039;",'"':"&quot;"};function te(t){return t.replace(/[&<>"'"]/g,e=>lt[e])}function Pe(t,e){t.innerHTML=e?`<div>${e}</div>`:""}var ct=["button","checkbox","file","hidden","image","radio","range","reset","submit"];function ut(){let t=document.activeElement;return t?t.isContentEditable||t.tagName==="TEXTAREA"||t.tagName==="SEARCH"?!0:t.tagName==="INPUT"&&!ct.includes(t.type):!1}var D="mousedown",Me="mousemove",$="mouseup",ne={x:0,y:0},Qe=!1,ce=!1,dt=!1,F=!1,Oe=/Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent);document.documentElement.classList.add(Oe?"is-mobile":"not-mobile");Oe&&"ontouchstart"in document.documentElement&&(dt=!0,D="touchstart",Me="touchmove",$="touchend");document.addEventListener(D,t=>{ce=!0,F=!1;let e=D=="touchstart"?t.targetTouches[0]:t;ne.y=e.pageY||0,ne.x=e.pageX||0});document.addEventListener(Me,t=>{if(ce&&!F){let e=D=="touchstart"?t.targetTouches[0]:t,n=ne.x-(e.pageX||0),r=ne.y-(e.pageY||0);F=Math.sqrt(n*n+r*r)>10}});document.addEventListener($,()=>{ce=!1});document.addEventListener("click",t=>{Qe&&(t.preventDefault(),t.stopImmediatePropagation(),Qe=!1)});var re=class extends I{active;className;constructor(e){super(e),this.className=this.el.dataset.toggle||"",this.el.addEventListener($,n=>this.onPointerUp(n)),this.el.addEventListener("click",n=>n.preventDefault()),document.addEventListener(D,n=>this.onDocumentPointerDown(n)),document.addEventListener($,n=>this.onDocumentPointerUp(n))}setActive(e){if(this.active==e)return;this.active=e,document.documentElement.classList.toggle("has-"+this.className,e),this.el.classList.toggle("active",e);let n=(this.active?"to-has-":"from-has-")+this.className;document.documentElement.classList.add(n),setTimeout(()=>document.documentElement.classList.remove(n),500)}onPointerUp(e){F||(this.setActive(!0),e.preventDefault())}onDocumentPointerDown(e){if(this.active){if(e.target.closest(".col-sidebar, .tsd-filter-group"))return;this.setActive(!1)}}onDocumentPointerUp(e){if(!F&&this.active&&e.target.closest(".col-sidebar")){let n=e.target.closest("a");if(n){let r=window.location.href;r.indexOf("#")!=-1&&(r=r.substring(0,r.indexOf("#"))),n.href.substring(0,r.length)==r&&setTimeout(()=>this.setActive(!1),250)}}}};var ue=new Map,de=class{open;accordions=[];key;constructor(e,n){this.key=e,this.open=n}add(e){this.accordions.push(e),e.open=this.open,e.addEventListener("toggle",()=>{this.toggle(e.open)})}toggle(e){for(let n of this.accordions)n.open=e;S.setItem(this.key,e.toString())}},ie=class extends I{constructor(e){super(e);let n=this.el.querySelector("summary"),r=n.querySelector("a");r&&r.addEventListener("click",()=>{location.assign(r.href)});let i=`tsd-accordion-${n.dataset.key??n.textContent.trim().replace(/\s+/g,"-").toLowerCase()}`,s;if(ue.has(i))s=ue.get(i);else{let o=S.getItem(i),a=o?o==="true":this.el.open;s=new de(i,a),ue.set(i,s)}s.add(this.el)}};function He(t){let e=S.getItem("tsd-theme")||"os";t.value=e,Ae(e),t.addEventListener("change",()=>{S.setItem("tsd-theme",t.value),Ae(t.value)})}function Ae(t){document.documentElement.dataset.theme=t}var se;function Ne(){let t=document.getElementById("tsd-nav-script");t&&(t.addEventListener("load",Re),Re())}async function Re(){let t=document.getElementById("tsd-nav-container");if(!t||!window.navigationData)return;let e=await R(window.navigationData);se=document.documentElement.dataset.base,se.endsWith("/")||(se+="/"),t.innerHTML="";for(let n of e)Ve(n,t,[]);window.app.createComponents(t),window.app.showPage(),window.app.ensureActivePageVisible()}function Ve(t,e,n){let r=e.appendChild(document.createElement("li"));if(t.children){let i=[...n,t.text],s=r.appendChild(document.createElement("details"));s.className=t.class?`${t.class} tsd-accordion`:"tsd-accordion";let o=s.appendChild(document.createElement("summary"));o.className="tsd-accordion-summary",o.dataset.key=i.join("$"),o.innerHTML='<svg width="20" height="20"><use href="#icon-chevronDown"></use></svg>',De(t,o);let a=s.appendChild(document.createElement("div"));a.className="tsd-accordion-details";let c=a.appendChild(document.createElement("ul"));c.className="tsd-nested-navigation";for(let l of t.children)Ve(l,c,i)}else De(t,r,t.class)}function De(t,e,n){if(t.path){let r=e.appendChild(document.createElement("a"));if(r.href=se+t.path,n&&(r.className=n),location.pathname===r.pathname&&!r.href.includes("#")&&(r.classList.add("current"),r.ariaCurrent="page"),t.kind){let i=window.translations[`kind_${t.kind}`].replaceAll('"',"&quot;");r.innerHTML=`<svg width="20" height="20" class="tsd-kind-icon" aria-label="${i}"><use href="#icon-${t.icon||t.kind}"></use></svg>`}r.appendChild(Fe(t.text,document.createElement("span")))}else{let r=e.appendChild(document.createElement("span")),i=window.translations.folder.replaceAll('"',"&quot;");r.innerHTML=`<svg width="20" height="20" class="tsd-kind-icon" aria-label="${i}"><use href="#icon-folder"></use></svg>`,r.appendChild(Fe(t.text,document.createElement("span")))}}function Fe(t,e){let n=t.split(/(?<=[^A-Z])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])|(?<=[_-])(?=[^_-])/);for(let r=0;r<n.length;++r)r!==0&&e.appendChild(document.createElement("wbr")),e.appendChild(document.createTextNode(n[r]));return e}var oe=document.documentElement.dataset.base;oe.endsWith("/")||(oe+="/");function $e(){document.querySelector(".tsd-full-hierarchy")?ht():document.querySelector(".tsd-hierarchy")&&pt()}function ht(){document.addEventListener("click",r=>{let i=r.target;for(;i.parentElement&&i.parentElement.tagName!="LI";)i=i.parentElement;i.dataset.dropdown&&(i.dataset.dropdown=String(i.dataset.dropdown!=="true"))});let t=new Map,e=new Set;for(let r of document.querySelectorAll(".tsd-full-hierarchy [data-refl]")){let i=r.querySelector("ul");t.has(r.dataset.refl)?e.add(r.dataset.refl):i&&t.set(r.dataset.refl,i)}for(let r of e)n(r);function n(r){let i=t.get(r).cloneNode(!0);i.querySelectorAll("[id]").forEach(s=>{s.removeAttribute("id")}),i.querySelectorAll("[data-dropdown]").forEach(s=>{s.dataset.dropdown="false"});for(let s of document.querySelectorAll(`[data-refl="${r}"]`)){let o=gt(),a=s.querySelector("ul");s.insertBefore(o,a),o.dataset.dropdown=String(!!a),a||s.appendChild(i.cloneNode(!0))}}}function pt(){let t=document.getElementById("tsd-hierarchy-script");t&&(t.addEventListener("load",Be),Be())}async function Be(){let t=document.querySelector(".tsd-panel.tsd-hierarchy:has(h4 a)");if(!t||!window.hierarchyData)return;let e=+t.dataset.refl,n=await R(window.hierarchyData),r=t.querySelector("ul"),i=document.createElement("ul");if(i.classList.add("tsd-hierarchy"),ft(i,n,e),r.querySelectorAll("li").length==i.querySelectorAll("li").length)return;let s=document.createElement("span");s.classList.add("tsd-hierarchy-toggle"),s.textContent=window.translations.hierarchy_expand,t.querySelector("h4 a")?.insertAdjacentElement("afterend",s),s.insertAdjacentText("beforebegin",", "),s.addEventListener("click",()=>{s.textContent===window.translations.hierarchy_expand?(r.insertAdjacentElement("afterend",i),r.remove(),s.textContent=window.translations.hierarchy_collapse):(i.insertAdjacentElement("afterend",r),i.remove(),s.textContent=window.translations.hierarchy_expand)})}function ft(t,e,n){let r=e.roots.filter(i=>mt(e,i,n));for(let i of r)t.appendChild(je(e,i,n))}function je(t,e,n,r=new Set){if(r.has(e))return;r.add(e);let i=t.reflections[e],s=document.createElement("li");if(s.classList.add("tsd-hierarchy-item"),e===n){let o=s.appendChild(document.createElement("span"));o.textContent=i.name,o.classList.add("tsd-hierarchy-target")}else{for(let a of i.uniqueNameParents||[]){let c=t.reflections[a],l=s.appendChild(document.createElement("a"));l.textContent=c.name,l.href=oe+c.url,l.className=c.class+" tsd-signature-type",s.append(document.createTextNode("."))}let o=s.appendChild(document.createElement("a"));o.textContent=t.reflections[e].name,o.href=oe+i.url,o.className=i.class+" tsd-signature-type"}if(i.children){let o=s.appendChild(document.createElement("ul"));o.classList.add("tsd-hierarchy");for(let a of i.children){let c=je(t,a,n,r);c&&o.appendChild(c)}}return r.delete(e),s}function mt(t,e,n){if(e===n)return!0;let r=new Set,i=[t.reflections[e]];for(;i.length;){let s=i.pop();if(!r.has(s)){r.add(s);for(let o of s.children||[]){if(o===n)return!0;i.push(t.reflections[o])}}}return!1}function gt(){let t=document.createElementNS("http://www.w3.org/2000/svg","svg");return t.setAttribute("width","20"),t.setAttribute("height","20"),t.innerHTML='<use href="#icon-chevronDown"></use>',t}X(re,"a[data-toggle]");X(ie,".tsd-accordion");X(ee,".tsd-filter-item input[type=checkbox]");var qe=document.getElementById("tsd-theme");qe&&He(qe);var yt=new Z;Object.defineProperty(window,"app",{value:yt});_e();Ne();$e();"virtualKeyboard"in navigator&&(navigator.virtualKeyboard.overlaysContent=!0);})();
 /*! Bundled license information:
 
 lunr/lunr.js:
diff --git a/docs/api/player-sdk/assets/navigation.js b/docs/api/player-sdk/assets/navigation.js
index 393aa4a..35643af 100644
--- a/docs/api/player-sdk/assets/navigation.js
+++ b/docs/api/player-sdk/assets/navigation.js
@@ -1,2 +1 @@
-window.navigationData =
-  "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";
+window.navigationData = "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"
\ No newline at end of file
diff --git a/docs/api/player-sdk/assets/search.js b/docs/api/player-sdk/assets/search.js
index 3e231db..bde6fd7 100644
--- a/docs/api/player-sdk/assets/search.js
+++ b/docs/api/player-sdk/assets/search.js
@@ -1,2 +1 @@
-window.searchData =
-  "eJy1XVuT47Zy/i+aV9WazTvnzbfETuzY2XWOH6a2UhwJGvGsJMoktZez5f+eAkhKDaBBNkbMk9cj9AXAh0ajP5D8umrqT+3q8enr6kN12q4ew6DIIAnXq1N5FKvH1e+H8oto3nVld2lX69WlOaweV92Xs2i/wT+92XfHw2q92hzKthXt6nG1+ns9rfO3szj9fDpfOlLt9ddXav7t3FX1iXYZ/T6pHYIwvqo+l2173jdlK1g6H7T2SP16dS4bcepIbx22m/L0wjQ7NvW3SI/lW6dp9Qt//I71qX7XlQ093TdlD7JhOzSc6kXv2YS1H09bji2hmvlYokfqvy+i+UIaVL/wR8o92zdFrHnuPXJYUXrnrIyNXm3lID6Kw6yZa6vX90Z8poGFO9O3ebWNRvx1EW33M40qPDd9w2oOV9MjVx2r2S6NjV5tpd7tWjFr5trKx45jJxFls9m/Fe3lQJvFDfhrRnwUJ9fMWBofVOvZ6dFcddhtN3VDr1Xb6tj2XpvKe5+evs6mOX/fbuSO8e5cngzbtx/481Vu7Nky9DyUm6k5Qu645kZuIr/Wp3rGjmp37Nu91pY4bRmWxGl7r50e52ZEtQz1AHeH1HlLXVO9vIjmR3JhmfaGxnPrat7qEDq/ry8WxE2bQ9PN0PTVI9o0dcOxpxq+whq9jv6ojuJQncSPp87KGogWS6wsWyFriemevh4thHkv2Pj48ceXsxmV55zoepG7PZiOOoR9bvhhWZ+KQ4RtXkBiWd5emlI2/pWOTYTxUeI4F6Z4PZcgcq9jqvNSgrOgWfZnIxfhgUcI443BdCyjxoAb1HzGgI0A1H6ZvrMtX1vfv943jRCndl+zx1yTeI19OrP+QTTVR7H9RyU+kckh+t1rNxl2NPoQZyp96AXaQWAq7cT+uqJ53ZWO06Nl+NrW3yY9nt82m331kU7uh988qh/lqdqJlk7bsbYH1HKqJ6N3rpGrjuLn01Z8njcom1ZD0zssjqdjntHxiHy/3er0UTSd2DINj80XsdyJl6bq6KKPYfXW1M+iic3/Et2nuvnwZ9mJZlceDlT+SLbxqD+Jv6wUzq1STuVE7kb767AsLbLt9o0XsHoU3b726PC1/QK2W6qwPmH72n4x23/YlbNZ+5OVNL+xr46CSNanRr86islc3XcMyGx9eghm8nUvD+iMfcL+XM7uZd2ZtU84wMjb/efgz/JwkPmO5zx8Kg+HrhdbZi78/RCn7bJe7MrqIDzi0bX9EiMg82K/kKBElosIfQLpswH1EkvtQeK0qbdi+0PZlb+I00u390GCEt2WXXkYRRfwaMiVfhLlVlgnnOmNWcrtr3KL+NKe61MrXuFML7iwN6qH39XbL36YHQSf6+2X5ZA7dlG681PZegBnlJT+7HvJhf15V/3LI6Rhf9pecomVRdeupxbUXBl7zr6ZPb8VpQrUgxyVPFNN7uWhnDpnmSjS4SnbRDI1Y30ymfKxf27qrt7UZgrvNo8E7rd+tJMot+XJBMrHqhlz3CbdQcbHXts1ojx6AKwXWAhh26oRarNlm8cSCyBsb1+/mYDXfuryjY9d+1zqtjp1LPWxWZ9lMsE2e22+wCiXXw51uSWzn4nR7qVmEp9X+PF7Iz7aNc1ZR85XsQVW3ak8ExXeiVV3E3iVdXPfetfVTfkipkhDqsm9+5ZT5+y+RTrsuW/NWJ/ct3zsm9PqtuueTx97xE7lNjm5U/lYVX/iWh0a32+1Pou+WMA2jSXut7+383C36cnU22+Grcg9NcMTcdvH6oYg/txmp0k/H7uNKFuPCb42v9+yIy67bc/G5RnrFlMkml3dHMvTRnzbdNWu3HRUbHY1u/t+25Te+VtuLuc94zTDi8lY7euHRaJN2p8g0jztEnF72vRk7Pa1TsTvaeuTMdzXOhFHp61PxlJf661dvZi2Plm08LVOxrdp+zMxzrv/dJybGYO5WMfwgmbGv6+P57KpiEExfubHt4PYde9E21KlX1Lrg5Roe4nZm7zIYdccVy97TweUyHIeqBGoPPq+WK+ZRvv+LmBV7Qg/iENXsuyq5tuh+Z2WJVXhYVk2X8byUHDm2x4ElrE+MnbKvEX10Q6MMsqDCaqP64O0pezzzMvftmPzO2f9tD3X1al7K16afrnyXBjlGk3O2xfHWd4ZRK3f/aKouoJrdpDWqeKIGNtPJsTMWOJjXAksZV3+iUSXw7hsPwMvtm2Z6vx2Onz5RewcJxHTupSoT4cvh15iIftv5YD6OdAMIv4emKj+7vLyVpzrpqMfvDR/5mO6q7qDmfyR2h7GlnRnLAc9nr6j7U0/gse1dyw//9yJI2vAHo7l52po7G2VyuU+9RnApqnOjolztOLPn/oPX+fD0N4dZimfPZ+kdBqff6rSw7q6oPI/FnUw6YCSmaIQPH04lp/7u8Q+8yphVl6lFvGjOm0Ol634qWzeivOhpK5MOr0ZZPdl04yyr/XJvQZ+rTcfeOvAajm5FkyLf0j6rm0v4g9xPB/KTtDmXM3ui5uTWmfip9Nxj7U3bX968fnad8TVaRdm46uvF4fy2X7+edqHq8gyHpRtW72chPWs97QTWGoZPyrV1q4eTvuhpCarh75+nJv6n2LT/acwY9C0I4PYB+EOP/6eVDVxfXzOj6vQq70wY9K/V91Pl2dNyPCJaHFfJHIpnAlClKcOq/LuEtfo0PZum+Rqd1qdWegedl1r3Gl6fnlPWzcR9B9VU07hx/qdj55dJQ7WnTFa38O1Ld0n20t3j36oj++GAupbsTPM6z/ey+IQ2ma5G8M9PmNBGZvkKXiWzHMnZcZ90OTZGAvarAEcG989hpv61IlTR1zopMwOrSfZD2Zv60uzMdcR2dOx4T3WTvVWUA+OUgZl22n2mGeT5FUogzNsitMasaZ/qHa7kdylM2+6kcfTU0TeO6FzJut1uOzaf4h3xkzZnn59zKxtx/iSL3fRfuOPprrFVVtPSNnaHlDLye5Mv1tlc2lU81lzt4Z3WCu3W7H9vez2jP6ptueh7R02G3GsP7KtDq0XsLvZS6Bz7Q6tF7DbXo7H0rqRQZi8NfS0FuZXY3+K5+8O5ebDc/25ZwSuZged31gt+GvBeFZwWuPck4K2py6MGo9Bz5i9Nfe3G6YhxEa2xO7vDJMwaTeIb1NYn8WJa3Noe6fFv7QXx82YHBvfabNV73xiY2lsfafVF9F9d6ifuWZfRPfcN7/T7vOlOmyHZ/+5xpXM9ipzf8/1dzp4jEFfiu1ugvf7Yj434+HNqRf9hETv9+dtz3b/6LXiX0Q3sORLrX3liXYx+xXT1QwahoFadN6M64keXrW95KLeEBeIfCbvfBMvkfj9fqEDgY8/2/rYIrFF/MAJtJ8r22q3W262NorDFa8ZmUF02dEZlP5SdvJWzM2rP6uOvSsNOg5KB3LvUzXxAIqvh69waFH7w4p/hRvDil/Gmxdxktfyxff4UahZHPcymyk+09uDfxMdP3EZhXaD0J0+iM+SWv+p5Kb1D73AXgks1P8rw+87Bs+Xl2YUXMiXKeKA6dVL1e0vzz3Nc1OxkH/usjTTu39WTfn/5JtJVvu6dr7Kt6P84p7dqO7Xe3esNx/u8DCNtR1V7MrLoRveW6ufh3eXU39n4Ru6IXXQfr9e9S+Cevy6+igaecdv9bgK30RvitV6pB4en8ZLLJv6eOyLPtt6c1H/fD80+4fYdPKNco9PfetvgtX6KVjHxZsgzN+/Xz+NwuoH9YdRx+0vShBW6yegBMESBE0wXK2fQkowtARDTTBarZ8iSjCyBCNNMF6tn+J1FL+J0kQTjC3BWBNMVuunhLKYWIKJJpiu1k8pJZhagqkmmK3WTxklmFmCmSaYr9ZPOSWYW4K5Jli4BqewBAsdABIPBYkAGztggEehh8QdEPjRAQQSFkBjz8YQ6CACCQ0g8Qc2jkAHEkh4QLSOozdFqMvaUAIdSyARAjFp2IYT6HgCiRIgoQg2pEDHFEikQLqO0jdBpM8x2LACHVcg0QIkJMGGFujYAokYIGEJNrxAx1coIQMkwEIbYKEOsFBCJgyImQptfIVGgFIRCtZx8CZJ9PEKiRil4yuUiAlDUtjGV6jjK5SQCSl8hTa+Qh1foURMGFOyNrxCHV6hBEyYULI2ukIdXaHES5hSsja4Qh1coYRLSIIrtMEV6uAKC+cU29gKdWxFgWuwIhtakQ6tSEGLBHVkYyvSsRW5sRXZ2IqMDdCNrYjYA3VsRQpbBdVlG1uRjq1IwiUiw3VkgyvSwRU5wRXZ4Ip0cEVOcEU2uCIdXJGES0RuE5ENrkgHVyTxEpHbRGSjK9LRFUvARGSqEtvwinV4xRIwEblPxDa8Yh1esQRMRO4TsQ2vWIdXrBIsMm2JbXjFRo4lERORSzkm0iwdX7HCF7mkYhtfsY6vWEImIveJ2AZYrAMslpiJSWTHNsJiHWGxxExMIiy2ERbrCItV4kUiLLYRFusISyRmYhJhiY2wREdYIjETkwhLbIQlOsISiZmYWs2JDbBEB1giIROTAEtsgCU6wBKVxWeUYRtfiZHHS8TEJL4SIpXX8ZVIxMQkvhIbX4mOryRzxvvExlei4yvJnfE+sfGV6PhKCle8T2x4JTq8UgmYhFwVqQ2vVIdXKgGTkKsiteGV6vBKJWISclWkNr5SHV+pRExCrorUxleq4yuVkEnIVZHaAEt1gKXqpEjG3dQGWGocFiVkEvq4SJwXdYClEjIJGXdTG2CpDrBUQiYh10VqAyzVAZZKzCTkukhthKU6wjKJmZREWGYjLNMRloErTc5sgGU6wDIJmZREZ2YDLNMBlkXOk1RmAyzTAZZJyKTkas5sgGU6wDIJmZSEdmYDLNMBlqlyRLyO8jdBbAyYDbDMqEhIyKQJKUwUJXSAZRIyKQntzAZYpgMsk5BJ6WqIDbBMB1iuAEZXRGyA5TrAcnBtcrkNsFwHWK4ARi6L3AZYrgMsl5DJyGWR2wDLdYDlEjIZCe3cBliuAyyXkMlIdOY2wHIdYLmETEaiM7cBlusAy93lidwGWG6UvXLnosqJypcOsLxwQju3AZbrACsC56IqbIAVOsAKiZmMOn8WNsAKHWCFhExG7jWFDbBCB1ihAEYdqAobX4WOr0Lhi1yPhY2vQsdXofBFrsfCxleh46tQ+CqoWS5sfBU6vorMiezCxleh46tQdVVyQRY2vgqjtFo4kV0Q1VWzvBo4od3/poujvw3y4ER3/5spb1RZg9AJ8P43U94otAaRC+P9T6a4UWoNYhdS+59McaPaGkgE5XSROCDqrYFRcA3ckOt/M+WNmmvgRl3/mylvlF0DBTy6Th0QhdfAqLwGEk05GZL730x5A32qYJ/T5Wqqvm8V+CWacrpiTZb4DfSpsn1OZg5AVfnNMr+q3Od03Zoq9JuVflW9z+nSNVXsN6v9qoCf0/QIVe83C/6qhl84GBICf2bNX5XxCxr/VNXfLPurSn5B448q/JuVf1XML2j8UbV/o/gPqp5f0Pgjyv9g1P9B1fQLGn8EBQAGBwCqrF/Q+CNYADBoAFCV/YLGH0EEgMEEgKruFzT+CDIADDYAVIW/oPFHEAJgMAKgqvwQBGQAI1gBMGgBUKV+klgEghgAgxkAVeyHAKj4T3ADYJADoAr+ENAAJggCMBgCUFV/CGgEEywBGDQBqMo/PQAETwAGUQCq9g8BvQIIrgAMsgBU/R8CegkQfAEYhAEoEgACeg0QpAEYrAEoIgACehEQxAEYzAFEPQjpVUCwB2DQB6AoAReKCQoBDA4BFC3gmEQChQaLAFHhRjHBI4BBJEDcg5Cq4gFBJYDBJYCiBwAokgwINgEMOgHinmqntxGCUQCDUgDFEoCDbydYBTBoBVBMAQC9DAlmAQxqARRbAA7inWAXwKAXIJ6KhATDAAbFAIo1AAd7T7AMYNAMEOcTKCBQaDANoMgDFwoIFBpkAyj+AIAOBATfAAbhAEkPQzoQEJwDGKQDJD0O6UBAEA9gMA+QuCt3QHAPYJAPoAgFx2GI4B/AICBAcQqOwxhBQYDBQYCiFYC+DQEEDQEGDwGKWoCQTigJKgIMLgIUvQAhHQoIOgIMPgIUxwAhHQoITgIMUgIUz+A4khG0BBi8BCiqAUI6lBDUBBjcBCi6gd4MCHICDHYCFOFA3x4i6Akw+AlQlAOEdCAjKAowOApQtAOEjltEBAgNngIU9QAhHQcIqgIMrgLSHoR0HCDoCjD4Ckh7ENJxgKAswOAsIO1BSK8jgrYAg7cARUUAfRcCCOoCDO4CFB8B9L0EIPgLMAgMUJwESYQCwWCAQWFAz2HQVxuAYDHAoDEg6y/B0cuIYDLAoDJAsRNAX3EAgs0Ag84AxVAAfc0BCEYDDEoDFEsB9FUHIFgNMGgNUEwF0NcdgGA2wKA2QLEVQF95AILdAIPegLzHIQ1kguEAg+IARVsAffUBCJoDDJ4DFHUB9PUHIKgOMLgOUPQF0FcggKA7wOA7QFEYQF+DAILyAIPzgLy/k0kjkaA9wOA9QFEZENNIJKgPMLgP6MkP+k4EEPQHGPwHKEoDYscFTeqGpoFERWsAfTkCCBoEDB4EFLUB9AUJIKgQMLgQUPwG0NcNgOBDwCBEQHEcQF85AIITAYMUAUV0AH3tAAhiBAxmBBTZAfTVAyDIETDYEVCEB9DXD4AgSMBgSKDobwjTSCRIEjBYElDEB9DXEIAgSsBgSkCRH0BfRQCCLAGDLYGeLqGvIwBBmIDBmISKAQH6SkJIUCbj39TjFfjz3PLpCPk483a1/rr63+HRizAYH/H4ugph9fj17/UqLOR//749cqH+OhpQv0mLt09/3tQl8U1dGnuokR+tx4qgQH4FnoparClKbpri0EPT+ACo6D8qgsYsQ77lPI3oBSKok1iTTAtZqsaXPCA9UYj0ZBFPz+01ZEgTIDzIwomSlWdnjsr+VW5YW4K18fp3fVSuHl8RdFNYIFTI4i5PH36XAB60HA8ar4f6q1HwTGLPUqYy6uFepDPG6Mh5QJt+Lhcrx73PvRzWHm5FKhOMnQJ8VNru4fEseAFAe/8XnhvsV8JD4fCOrZuWDI1XwUPe9TVF2JcU4yRl6UHfcbxpShE4mOAdHmxvhldEYa9i7BUvbhuPyROrVVYlkFoeIBBmG/nuPxxNMGQTXii3vqSAggmGBTCnAn1+HW0ICKxR3IsmvDkhPluNdlMUPlMe5q4fqEfeoc0hjHq5aPhvwosq5NcY0Eji7QfYKm9fbkddBtRlHmLUl0Ks9YoXWpgNveatffzpkZvCHKMPeGtEadKzETRUERMit2+8o3FCSyvlbfjqRS3agsI9YvoidVhjHaGVFDFxij4sg8YY73jg0S09CwUcZIe5zwbE58P/F8WQ2yReZvR1jyYhHNZ9xgTt8NYcnI/gaJkxAXb7wBvaGhDGssGtPn1Yr+SFKpbi28sT8A6PXSx4Lu7K6qBnXgnyL+WF8fHlsng3wFhJeKNOvI4B9w7vgsw9Xn/PBlYGWBmvl8YbM7A2HGELHmIn3/KAdeMkveDtgxPvaMCa8ToseMF3+iUGWLkWvXjhy/3+BqwYA6vg7WbEm8LwysbJbM5bgNf3r2E92LOM7dm2fx/DWb2PYXw1Ie6wdtZmu2e9Jwmn73jmc+7Md+6jEMZozsUo8b40rBPnfzk3gDjenIX14jCSc8OI+9VlWDUOAzk3DJhvasMKcZTKuVHKfqEZVon3iJy3R8yFKMBDGvOG1DwGZgiSRTTuhjz/9G9GocQXL8iQNx/G55+QMhzQQp5j9udZ0KgFeBFGXIWdeOm/cXDThGHHLAWNpcdeA9aFEBfzQhj6DgXGBIYus7A3vV1paWPCi4P9h14RyhBSi7F8FvCQgb+LhmCBvQp5/Ry/boDBgPegOBg8Y84A/lYd8gyvSmaR1vhyKEr9cdgIeCC7fooTqcEbBfCC+kF8tEYLa+Ep6V/njXdrPODDeDOPasfyVO1Eqx+yUHhghkD8KSncOTxGEdej8eM8WBFeguF4wmAea4+i29fa3OGkgXkqO1ZHKzLg0mHCSxX6z8CjVYziOvOYY1ZdUrQ4srQXKsZlF4TDPxK+cmEEGqSerUN94UzzEp3EWFpUaw0DGOYRLwiYaZnFsOAcghmI0YcRcAUSJ0zMkly927VCV4MDHW/p1eeNgakUwZKZafWvuMYhBTuScT0Rfc1SQw8KAczD6bls2/O+KVutV2iieCv2XH451OXWLnZmKOYyU9tBl/r6gPikKUORiZmDEnm9hcsc+cg8GZ73xoilKI4zz4L9yY0g/vCBMGZ2U+naoA/gou7h1RIw+6f0DfyaOQ0YrzFvH+31SeRXp/NFX4bIO09dBDuBq+Ie2oZ3wKNBQ9PpoWf49AiqiqGQ56Gnfz08wengTZ4X210FAgR6Pl7N2g3FDwX4+MQsHJulG1IvxjHzNsPtEyZ4+9AGkeng9SNx+GihJYPMlYq+eodV4c7FzEDZ1F29qbX6R4pcYm4lFvYBX66AjAczC/k4SAyJ0pAejcSNfI5o+MeYZTILx0ZVxYroKQoqGVulETcztLUX6Zjjjf9IeYtG/9oLBiGuC6S8GNOIv/RzES5KMYvlQ9VIXuqw2CfkEt8jqc3m6RCCwmHIIiaQepU2i4SPusx8bdC1F+VW6IwdLmIzCftBmUFK4XXLW7ajHquGgiIy81bNoErnIhH2I+4stuf61AoJCrPAhsvIzBswWF1b/UvPk1AnM+4S6tVRs4i2GuZFK7XJEFUPHPJC5lJS+xVZ9sAZPTC7qbQZenCVCHiBrN3UjX6Y0y4cMXU0QpxkwV5DFtpbYl6nxs/c4M1Fo3F5k2aiKMdJY8CLBSMFoYV4tHr7mv56VYy7U8D0DX0WEW/oOFwxCxbjdwdxeME9Zd7rUPUA674IUhQOhYpo+C/z9tTtS+o4K8NQj5gQlYrIeyIoOjA3WDuxxRfskrFEx8wCem3mxohv1SVMtPVcCn0iK3DeyLyjYZAzVsqTIZ1MKq2V7NRRx22KVieTi7x+5Q0vclxqZcZ5vYSF4nE2rMh8TCCDMW9kTkYnu4kJAvJ4gRMyZq5iAkVjL3iIkxNqpQKYWo6ZrvRfecYdwnMwJmEQjeGNq7fuSr2MjgM486TSNdXLi2iISz34jmI4RGBmvXFQahaKcWId8TZyqYKgaPBkAi9Eqk8hakrwRsVSYQRYzJEnQ7xm0tqfxPPz8BGI8/DpRLxEcfc495ver1fn6txTw49P7//++/8AXCoYbA==";
+window.searchData = "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";
\ No newline at end of file
diff --git a/docs/api/player-sdk/assets/style.css b/docs/api/player-sdk/assets/style.css
index 44328e9..ec257d5 100644
--- a/docs/api/player-sdk/assets/style.css
+++ b/docs/api/player-sdk/assets/style.css
@@ -504,8 +504,15 @@
     body {
         background: var(--color-background);
         font-family:
-            -apple-system, BlinkMacSystemFont, "Segoe UI", "Noto Sans",
-            Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji";
+            -apple-system,
+            BlinkMacSystemFont,
+            "Segoe UI",
+            "Noto Sans",
+            Helvetica,
+            Arial,
+            sans-serif,
+            "Apple Color Emoji",
+            "Segoe UI Emoji";
         font-size: 16px;
         color: var(--color-text);
         margin: 0;
@@ -531,6 +538,14 @@
         scroll-margin-block: calc(var(--dim-header-height) + 0.5rem);
     }
 
+    math[display="block"] {
+        position: relative;
+        padding: 10px;
+        border: 1px solid var(--color-accent);
+        border-radius: 0.8em;
+        margin-bottom: 8px;
+    }
+
     code,
     pre {
         font-family: Menlo, Monaco, Consolas, "Courier New", monospace;
@@ -1047,7 +1062,7 @@
 
         cursor: pointer;
     }
-    .tsd-accordion-summary a {
+    .tsd-accordion-summary > a {
         width: calc(100% - 1.5rem);
     }
     .tsd-accordion-summary > * {
diff --git a/docs/api/player-sdk/classes/ArchiveDecodeTimeoutError.html b/docs/api/player-sdk/classes/ArchiveDecodeTimeoutError.html
new file mode 100644
index 0000000..ba4bcaf
--- /dev/null
+++ b/docs/api/player-sdk/classes/ArchiveDecodeTimeoutError.html
@@ -0,0 +1,190 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>ArchiveDecodeTimeoutError | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">ArchiveDecodeTimeoutError</a></li></ul>
+<h1>Class ArchiveDecodeTimeoutError</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Raised when a codec stream does not complete within the configured open budget.</p>
+</div></section>
+<section class="tsd-panel tsd-hierarchy" data-refl="551">
+<h4>Hierarchy</h4>
+<ul class="tsd-hierarchy">
+<li class="tsd-hierarchy-item"><span class="tsd-signature-type">Error</span>
+<ul class="tsd-hierarchy">
+<li class="tsd-hierarchy-item"><span class="tsd-hierarchy-target">ArchiveDecodeTimeoutError</span></li></ul></li></ul></section><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-stream-reader.ts#L2">packages/player-sdk/src/bounded-stream-reader.ts:2</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="constructors">Constructors<a href="#constructors" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#constructor" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Constructor"><use href="../assets/icons.svg#icon-512"></use></svg><span>constructor</span></a>
+</div></section>
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#stacktracelimit" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stack<wbr/>Trace<wbr/>Limit</span></a>
+<a href="#name" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>name</span></a>
+<a href="#timeoutms" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>timeout<wbr/>Ms</span></a>
+<a href="#cause" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>cause?</span></a>
+<a href="#message" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>message</span></a>
+<a href="#stack" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stack?</span></a>
+</div></section>
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="methods">Methods<a href="#methods" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#capturestacktrace" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>capture<wbr/>Stack<wbr/>Trace</span></a>
+<a href="#preparestacktrace" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>prepare<wbr/>Stack<wbr/>Trace</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Constructors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="constructors-1">Constructors<a href="#constructors-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="constructor"><span>constructor</span><a href="#constructor" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="constructorarchivedecodetimeouterror"><span class="tsd-signature-keyword">new</span> <span class="tsd-kind-constructor-signature">ArchiveDecodeTimeoutError</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">timeoutMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">detail</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">ArchiveDecodeTimeoutError</a><a href="#constructorarchivedecodetimeouterror" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">timeoutMs</span>: <span class="tsd-signature-type">number</span></span></li>
+<li><span><span class="tsd-kind-parameter">detail</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="" class="tsd-signature-type tsd-kind-class">ArchiveDecodeTimeoutError</a></h4><aside class="tsd-sources">
+<p>Overrides Error.constructor</p>
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-stream-reader.ts#L5">packages/player-sdk/src/bounded-stream-reader.ts:5</a></li></ul></aside></div></li></ul></section></section></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="stacktracelimit"><code class="tsd-tag">Static</code><span>stack<wbr/>Trace<wbr/>Limit</span><a href="#stacktracelimit" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">stackTraceLimit</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div>
+<div class="tsd-comment tsd-typography"><p>The <code>Error.stackTraceLimit</code> property specifies the number of stack frames
+collected by a stack trace (whether generated by <code>new Error().stack</code> or
+<code>Error.captureStackTrace(obj)</code>).</p>
+<p>The default value is <code>10</code> but may be set to any valid JavaScript number. Changes
+will affect any stack trace captured <em>after</em> the value has been changed.</p>
+<p>If set to a non-number value, or set to a negative number, stack traces will
+not capture any frames.</p>
+</div><aside class="tsd-sources">
+<p>Inherited from Error.stackTraceLimit</p>
+<ul>
+<li>Defined in node_modules/.pnpm/@types+node@24.10.13/node_modules/@types/node/globals.d.ts:68</li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="name"><code class="tsd-tag">Readonly</code><span>name</span><a href="#name" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;ArchiveDecodeTimeoutError&quot;</span></div><aside class="tsd-sources">
+<p>Overrides Error.name</p>
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-stream-reader.ts#L3">packages/player-sdk/src/bounded-stream-reader.ts:3</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="timeoutms"><code class="tsd-tag">Readonly</code><span>timeout<wbr/>Ms</span><a href="#timeoutms" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">timeoutMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-stream-reader.ts#L6">packages/player-sdk/src/bounded-stream-reader.ts:6</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="cause"><code class="tsd-tag">Optional</code><span>cause</span><a href="#cause" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">cause</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span></div><aside class="tsd-sources">
+<p>Inherited from Error.cause</p>
+<ul>
+<li>Defined in node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.error.d.ts:26</li></ul></aside></section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="message"><span>message</span><a href="#message" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">message</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<p>Inherited from Error.message</p>
+<ul>
+<li>Defined in node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es5.d.ts:1077</li></ul></aside></section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="stack"><code class="tsd-tag">Optional</code><span>stack</span><a href="#stack" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">stack</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<p>Inherited from Error.stack</p>
+<ul>
+<li>Defined in node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es5.d.ts:1078</li></ul></aside></section></section></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="methods-1">Methods<a href="#methods-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="capturestacktrace"><code class="tsd-tag">Static</code><span>capture<wbr/>Stack<wbr/>Trace</span><a href="#capturestacktrace" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures tsd-is-inherited tsd-is-external">
+<li class="tsd-is-inherited tsd-is-external">
+<div class="tsd-signature tsd-anchor-link" id="capturestacktrace-1"><span class="tsd-kind-call-signature">captureStackTrace</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">targetObject</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">object</span><span class="tsd-signature-symbol">,</span> <span class="tsd-kind-parameter">constructorOpt</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">Function</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">void</span><a href="#capturestacktrace-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Creates a <code>.stack</code> property on <code>targetObject</code>, which when accessed returns
+a string representing the location in the code at which
+<code>Error.captureStackTrace()</code> was called.</p>
+<pre><code class="js"><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">myObject</span><span class="hl-1"> = {};</span><br/><span class="hl-4">Error</span><span class="hl-1">.</span><span class="hl-0">captureStackTrace</span><span class="hl-1">(</span><span class="hl-4">myObject</span><span class="hl-1">);</span><br/><span class="hl-4">myObject</span><span class="hl-1">.</span><span class="hl-4">stack</span><span class="hl-1">;  </span><span class="hl-5">// Similar to `new Error().stack`</span>
+</code><button type="button">Copy</button></pre>
+
+<p>The first line of the trace will be prefixed with
+<code>${myObject.name}: ${myObject.message}</code>.</p>
+<p>The optional <code>constructorOpt</code> argument accepts a function. If given, all frames
+above <code>constructorOpt</code>, including <code>constructorOpt</code>, will be omitted from the
+generated stack trace.</p>
+<p>The <code>constructorOpt</code> argument is useful for hiding implementation
+details of error generation from the user. For instance:</p>
+<pre><code class="js"><span class="hl-6">function</span><span class="hl-1"> </span><span class="hl-0">a</span><span class="hl-1">() {</span><br/><span class="hl-1">  </span><span class="hl-0">b</span><span class="hl-1">();</span><br/><span class="hl-1">}</span><br/><br/><span class="hl-6">function</span><span class="hl-1"> </span><span class="hl-0">b</span><span class="hl-1">() {</span><br/><span class="hl-1">  </span><span class="hl-0">c</span><span class="hl-1">();</span><br/><span class="hl-1">}</span><br/><br/><span class="hl-6">function</span><span class="hl-1"> </span><span class="hl-0">c</span><span class="hl-1">() {</span><br/><span class="hl-1">  </span><span class="hl-5">// Create an error without stack trace to avoid calculating the stack trace twice.</span><br/><span class="hl-1">  </span><span class="hl-6">const</span><span class="hl-1"> { </span><span class="hl-7">stackTraceLimit</span><span class="hl-1"> } = </span><span class="hl-4">Error</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">Error</span><span class="hl-1">.</span><span class="hl-4">stackTraceLimit</span><span class="hl-1"> = </span><span class="hl-8">0</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">error</span><span class="hl-1"> = </span><span class="hl-6">new</span><span class="hl-1"> </span><span class="hl-0">Error</span><span class="hl-1">();</span><br/><span class="hl-1">  </span><span class="hl-4">Error</span><span class="hl-1">.</span><span class="hl-4">stackTraceLimit</span><span class="hl-1"> = </span><span class="hl-4">stackTraceLimit</span><span class="hl-1">;</span><br/><br/><span class="hl-1">  </span><span class="hl-5">// Capture the stack trace above function b</span><br/><span class="hl-1">  </span><span class="hl-4">Error</span><span class="hl-1">.</span><span class="hl-0">captureStackTrace</span><span class="hl-1">(</span><span class="hl-4">error</span><span class="hl-1">, </span><span class="hl-4">b</span><span class="hl-1">); </span><span class="hl-5">// Neither function c, nor b is included in the stack trace</span><br/><span class="hl-1">  </span><span class="hl-3">throw</span><span class="hl-1"> </span><span class="hl-4">error</span><span class="hl-1">;</span><br/><span class="hl-1">}</span><br/><br/><span class="hl-0">a</span><span class="hl-1">();</span>
+</code><button type="button">Copy</button></pre>
+
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">targetObject</span>: <span class="tsd-signature-type">object</span></span></li>
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">constructorOpt</span>: <span class="tsd-signature-type">Function</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">void</span></h4><aside class="tsd-sources">
+<p>Inherited from Error.captureStackTrace</p>
+<ul>
+<li>Defined in node_modules/.pnpm/@types+node@24.10.13/node_modules/@types/node/globals.d.ts:52</li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="preparestacktrace"><code class="tsd-tag">Static</code><span>prepare<wbr/>Stack<wbr/>Trace</span><a href="#preparestacktrace" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures tsd-is-inherited tsd-is-external">
+<li class="tsd-is-inherited tsd-is-external">
+<div class="tsd-signature tsd-anchor-link" id="preparestacktrace-1"><span class="tsd-kind-call-signature">prepareStackTrace</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">err</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Error</span><span class="tsd-signature-symbol">,</span> <span class="tsd-kind-parameter">stackTraces</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">CallSite</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">any</span><a href="#preparestacktrace-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">err</span>: <span class="tsd-signature-type">Error</span></span></li>
+<li><span><span class="tsd-kind-parameter">stackTraces</span>: <span class="tsd-signature-type">CallSite</span><span class="tsd-signature-symbol">[]</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">any</span></h4>
+<div class="tsd-comment tsd-typography">
+<div class="tsd-tag-see">
+<h4 class="tsd-anchor-link" id="see">See<a href="#see" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h4><p><a href="https://v8.dev/docs/stack-trace-api#customizing-stack-traces">https://v8.dev/docs/stack-trace-api#customizing-stack-traces</a></p>
+</div></div><aside class="tsd-sources">
+<p>Inherited from Error.prepareStackTrace</p>
+<ul>
+<li>Defined in node_modules/.pnpm/@types+node@24.10.13/node_modules/@types/node/globals.d.ts:56</li></ul></aside></div></li></ul></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Constructors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Constructors</summary>
+<div><a href="#constructor"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Constructor"><use href="../assets/icons.svg#icon-512"></use></svg><span>constructor</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#stacktracelimit" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stack<wbr/>Trace<wbr/>Limit</span></a><a href="#name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>name</span></a><a href="#timeoutms"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>timeout<wbr/>Ms</span></a><a href="#cause" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>cause</span></a><a href="#message" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>message</span></a><a href="#stack" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stack</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Methods</summary>
+<div><a href="#capturestacktrace" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>capture<wbr/>Stack<wbr/>Trace</span></a><a href="#preparestacktrace" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>prepare<wbr/>Stack<wbr/>Trace</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/classes/ArchiveResourceLimitError.html b/docs/api/player-sdk/classes/ArchiveResourceLimitError.html
new file mode 100644
index 0000000..3682d1f
--- /dev/null
+++ b/docs/api/player-sdk/classes/ArchiveResourceLimitError.html
@@ -0,0 +1,204 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>ArchiveResourceLimitError | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">ArchiveResourceLimitError</a></li></ul>
+<h1>Class ArchiveResourceLimitError</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Raised when an archive would exceed a configured resource limit.</p>
+</div></section>
+<section class="tsd-panel tsd-hierarchy" data-refl="501">
+<h4>Hierarchy</h4>
+<ul class="tsd-hierarchy">
+<li class="tsd-hierarchy-item"><span class="tsd-signature-type">Error</span>
+<ul class="tsd-hierarchy">
+<li class="tsd-hierarchy-item"><span class="tsd-hierarchy-target">ArchiveResourceLimitError</span></li></ul></li></ul></section><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L58">packages/player-sdk/src/archive-resource-limits.ts:58</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="constructors">Constructors<a href="#constructors" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#constructor" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Constructor"><use href="../assets/icons.svg#icon-512"></use></svg><span>constructor</span></a>
+</div></section>
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#stacktracelimit" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stack<wbr/>Trace<wbr/>Limit</span></a>
+<a href="#name" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>name</span></a>
+<a href="#resource" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>resource</span></a>
+<a href="#limit" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>limit</span></a>
+<a href="#actual" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>actual</span></a>
+<a href="#cause" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>cause?</span></a>
+<a href="#message" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>message</span></a>
+<a href="#stack" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stack?</span></a>
+</div></section>
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="methods">Methods<a href="#methods" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#capturestacktrace" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>capture<wbr/>Stack<wbr/>Trace</span></a>
+<a href="#preparestacktrace" class="tsd-index-link tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>prepare<wbr/>Stack<wbr/>Trace</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Constructors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="constructors-1">Constructors<a href="#constructors-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="constructor"><span>constructor</span><a href="#constructor" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="constructorarchiveresourcelimiterror"><span class="tsd-signature-keyword">new</span> <span class="tsd-kind-constructor-signature">ArchiveResourceLimitError</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">resource</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-keyword">keyof</span> <a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">limit</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">actual</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">detail</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">ArchiveResourceLimitError</a><a href="#constructorarchiveresourcelimiterror" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">resource</span>: <span class="tsd-signature-keyword">keyof</span> <a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a></span></li>
+<li><span><span class="tsd-kind-parameter">limit</span>: <span class="tsd-signature-type">number</span></span></li>
+<li><span><span class="tsd-kind-parameter">actual</span>: <span class="tsd-signature-type">number</span></span></li>
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">detail</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="" class="tsd-signature-type tsd-kind-class">ArchiveResourceLimitError</a></h4><aside class="tsd-sources">
+<p>Overrides Error.constructor</p>
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L61">packages/player-sdk/src/archive-resource-limits.ts:61</a></li></ul></aside></div></li></ul></section></section></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="stacktracelimit"><code class="tsd-tag">Static</code><span>stack<wbr/>Trace<wbr/>Limit</span><a href="#stacktracelimit" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">stackTraceLimit</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div>
+<div class="tsd-comment tsd-typography"><p>The <code>Error.stackTraceLimit</code> property specifies the number of stack frames
+collected by a stack trace (whether generated by <code>new Error().stack</code> or
+<code>Error.captureStackTrace(obj)</code>).</p>
+<p>The default value is <code>10</code> but may be set to any valid JavaScript number. Changes
+will affect any stack trace captured <em>after</em> the value has been changed.</p>
+<p>If set to a non-number value, or set to a negative number, stack traces will
+not capture any frames.</p>
+</div><aside class="tsd-sources">
+<p>Inherited from Error.stackTraceLimit</p>
+<ul>
+<li>Defined in node_modules/.pnpm/@types+node@24.10.13/node_modules/@types/node/globals.d.ts:68</li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="name"><code class="tsd-tag">Readonly</code><span>name</span><a href="#name" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;ArchiveResourceLimitError&quot;</span></div><aside class="tsd-sources">
+<p>Overrides Error.name</p>
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L59">packages/player-sdk/src/archive-resource-limits.ts:59</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="resource"><code class="tsd-tag">Readonly</code><span>resource</span><a href="#resource" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">resource</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-keyword">keyof</span> <a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L62">packages/player-sdk/src/archive-resource-limits.ts:62</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="limit"><code class="tsd-tag">Readonly</code><span>limit</span><a href="#limit" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L63">packages/player-sdk/src/archive-resource-limits.ts:63</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="actual"><code class="tsd-tag">Readonly</code><span>actual</span><a href="#actual" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">actual</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L64">packages/player-sdk/src/archive-resource-limits.ts:64</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="cause"><code class="tsd-tag">Optional</code><span>cause</span><a href="#cause" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">cause</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span></div><aside class="tsd-sources">
+<p>Inherited from Error.cause</p>
+<ul>
+<li>Defined in node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.error.d.ts:26</li></ul></aside></section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="message"><span>message</span><a href="#message" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">message</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<p>Inherited from Error.message</p>
+<ul>
+<li>Defined in node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es5.d.ts:1077</li></ul></aside></section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="stack"><code class="tsd-tag">Optional</code><span>stack</span><a href="#stack" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">stack</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<p>Inherited from Error.stack</p>
+<ul>
+<li>Defined in node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es5.d.ts:1078</li></ul></aside></section></section></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="methods-1">Methods<a href="#methods-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="capturestacktrace"><code class="tsd-tag">Static</code><span>capture<wbr/>Stack<wbr/>Trace</span><a href="#capturestacktrace" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures tsd-is-inherited tsd-is-external">
+<li class="tsd-is-inherited tsd-is-external">
+<div class="tsd-signature tsd-anchor-link" id="capturestacktrace-1"><span class="tsd-kind-call-signature">captureStackTrace</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">targetObject</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">object</span><span class="tsd-signature-symbol">,</span> <span class="tsd-kind-parameter">constructorOpt</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">Function</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">void</span><a href="#capturestacktrace-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Creates a <code>.stack</code> property on <code>targetObject</code>, which when accessed returns
+a string representing the location in the code at which
+<code>Error.captureStackTrace()</code> was called.</p>
+<pre><code class="js"><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">myObject</span><span class="hl-1"> = {};</span><br/><span class="hl-4">Error</span><span class="hl-1">.</span><span class="hl-0">captureStackTrace</span><span class="hl-1">(</span><span class="hl-4">myObject</span><span class="hl-1">);</span><br/><span class="hl-4">myObject</span><span class="hl-1">.</span><span class="hl-4">stack</span><span class="hl-1">;  </span><span class="hl-5">// Similar to `new Error().stack`</span>
+</code><button type="button">Copy</button></pre>
+
+<p>The first line of the trace will be prefixed with
+<code>${myObject.name}: ${myObject.message}</code>.</p>
+<p>The optional <code>constructorOpt</code> argument accepts a function. If given, all frames
+above <code>constructorOpt</code>, including <code>constructorOpt</code>, will be omitted from the
+generated stack trace.</p>
+<p>The <code>constructorOpt</code> argument is useful for hiding implementation
+details of error generation from the user. For instance:</p>
+<pre><code class="js"><span class="hl-6">function</span><span class="hl-1"> </span><span class="hl-0">a</span><span class="hl-1">() {</span><br/><span class="hl-1">  </span><span class="hl-0">b</span><span class="hl-1">();</span><br/><span class="hl-1">}</span><br/><br/><span class="hl-6">function</span><span class="hl-1"> </span><span class="hl-0">b</span><span class="hl-1">() {</span><br/><span class="hl-1">  </span><span class="hl-0">c</span><span class="hl-1">();</span><br/><span class="hl-1">}</span><br/><br/><span class="hl-6">function</span><span class="hl-1"> </span><span class="hl-0">c</span><span class="hl-1">() {</span><br/><span class="hl-1">  </span><span class="hl-5">// Create an error without stack trace to avoid calculating the stack trace twice.</span><br/><span class="hl-1">  </span><span class="hl-6">const</span><span class="hl-1"> { </span><span class="hl-7">stackTraceLimit</span><span class="hl-1"> } = </span><span class="hl-4">Error</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">Error</span><span class="hl-1">.</span><span class="hl-4">stackTraceLimit</span><span class="hl-1"> = </span><span class="hl-8">0</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">error</span><span class="hl-1"> = </span><span class="hl-6">new</span><span class="hl-1"> </span><span class="hl-0">Error</span><span class="hl-1">();</span><br/><span class="hl-1">  </span><span class="hl-4">Error</span><span class="hl-1">.</span><span class="hl-4">stackTraceLimit</span><span class="hl-1"> = </span><span class="hl-4">stackTraceLimit</span><span class="hl-1">;</span><br/><br/><span class="hl-1">  </span><span class="hl-5">// Capture the stack trace above function b</span><br/><span class="hl-1">  </span><span class="hl-4">Error</span><span class="hl-1">.</span><span class="hl-0">captureStackTrace</span><span class="hl-1">(</span><span class="hl-4">error</span><span class="hl-1">, </span><span class="hl-4">b</span><span class="hl-1">); </span><span class="hl-5">// Neither function c, nor b is included in the stack trace</span><br/><span class="hl-1">  </span><span class="hl-3">throw</span><span class="hl-1"> </span><span class="hl-4">error</span><span class="hl-1">;</span><br/><span class="hl-1">}</span><br/><br/><span class="hl-0">a</span><span class="hl-1">();</span>
+</code><button type="button">Copy</button></pre>
+
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">targetObject</span>: <span class="tsd-signature-type">object</span></span></li>
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">constructorOpt</span>: <span class="tsd-signature-type">Function</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">void</span></h4><aside class="tsd-sources">
+<p>Inherited from Error.captureStackTrace</p>
+<ul>
+<li>Defined in node_modules/.pnpm/@types+node@24.10.13/node_modules/@types/node/globals.d.ts:52</li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member tsd-is-inherited tsd-is-external">
+<h3 class="tsd-anchor-link" id="preparestacktrace"><code class="tsd-tag">Static</code><span>prepare<wbr/>Stack<wbr/>Trace</span><a href="#preparestacktrace" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures tsd-is-inherited tsd-is-external">
+<li class="tsd-is-inherited tsd-is-external">
+<div class="tsd-signature tsd-anchor-link" id="preparestacktrace-1"><span class="tsd-kind-call-signature">prepareStackTrace</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">err</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Error</span><span class="tsd-signature-symbol">,</span> <span class="tsd-kind-parameter">stackTraces</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">CallSite</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">any</span><a href="#preparestacktrace-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">err</span>: <span class="tsd-signature-type">Error</span></span></li>
+<li><span><span class="tsd-kind-parameter">stackTraces</span>: <span class="tsd-signature-type">CallSite</span><span class="tsd-signature-symbol">[]</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">any</span></h4>
+<div class="tsd-comment tsd-typography">
+<div class="tsd-tag-see">
+<h4 class="tsd-anchor-link" id="see">See<a href="#see" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h4><p><a href="https://v8.dev/docs/stack-trace-api#customizing-stack-traces">https://v8.dev/docs/stack-trace-api#customizing-stack-traces</a></p>
+</div></div><aside class="tsd-sources">
+<p>Inherited from Error.prepareStackTrace</p>
+<ul>
+<li>Defined in node_modules/.pnpm/@types+node@24.10.13/node_modules/@types/node/globals.d.ts:56</li></ul></aside></div></li></ul></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Constructors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Constructors</summary>
+<div><a href="#constructor"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Constructor"><use href="../assets/icons.svg#icon-512"></use></svg><span>constructor</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#stacktracelimit" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stack<wbr/>Trace<wbr/>Limit</span></a><a href="#name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>name</span></a><a href="#resource"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>resource</span></a><a href="#limit"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>limit</span></a><a href="#actual"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>actual</span></a><a href="#cause" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>cause</span></a><a href="#message" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>message</span></a><a href="#stack" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stack</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Methods</summary>
+<div><a href="#capturestacktrace" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>capture<wbr/>Stack<wbr/>Trace</span></a><a href="#preparestacktrace" class="tsd-is-inherited tsd-is-external"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>prepare<wbr/>Stack<wbr/>Trace</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/classes/BoundedZipReader.html b/docs/api/player-sdk/classes/BoundedZipReader.html
new file mode 100644
index 0000000..dff8007
--- /dev/null
+++ b/docs/api/player-sdk/classes/BoundedZipReader.html
@@ -0,0 +1,118 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>BoundedZipReader | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">BoundedZipReader</a></li></ul>
+<h1>Class BoundedZipReader</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Reads JSZip entries with limits based on actual inflater output instead of declared ZIP sizes.</p>
+</div></section><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-zip-reader.ts#L37">packages/player-sdk/src/bounded-zip-reader.ts:37</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="constructors">Constructors<a href="#constructors" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#constructor" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Constructor"><use href="../assets/icons.svg#icon-512"></use></svg><span>constructor</span></a>
+</div></section>
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="methods">Methods<a href="#methods" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#has" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>has</span></a>
+<a href="#read" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>read</span></a>
+<a href="#release" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>release</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Constructors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="constructors-1">Constructors<a href="#constructors-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="constructor"><span>constructor</span><a href="#constructor" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="constructorboundedzipreader"><span class="tsd-signature-keyword">new</span> <span class="tsd-kind-constructor-signature">BoundedZipReader</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">zip</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">JSZip</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">limits</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Readonly</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">cacheReads</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">BoundedZipReader</a><a href="#constructorboundedzipreader" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">zip</span>: <span class="tsd-signature-type">JSZip</span></span></li>
+<li><span><span class="tsd-kind-parameter">limits</span>: <span class="tsd-signature-type">Readonly</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span></span></li>
+<li><span><span class="tsd-kind-parameter">cacheReads</span>: <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol"> = true</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="" class="tsd-signature-type tsd-kind-class">BoundedZipReader</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-zip-reader.ts#L42">packages/player-sdk/src/bounded-zip-reader.ts:42</a></li></ul></aside></div></li></ul></section></section></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="methods-1">Methods<a href="#methods-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="has"><span>has</span><a href="#has" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="has-1"><span class="tsd-kind-call-signature">has</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">path</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><a href="#has-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">path</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">boolean</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-zip-reader.ts#L50">packages/player-sdk/src/bounded-zip-reader.ts:50</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="read"><span>read</span><a href="#read" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="read-1"><span class="tsd-kind-call-signature">read</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">path</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">Uint8Array</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">ArrayBufferLike</span><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">&gt;</span><a href="#read-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">path</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">Uint8Array</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">ArrayBufferLike</span><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-zip-reader.ts#L54">packages/player-sdk/src/bounded-zip-reader.ts:54</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="release"><span>release</span><a href="#release" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="release-1"><span class="tsd-kind-call-signature">release</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">path</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">void</span><a href="#release-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Evicts a completed cached result after its caller no longer needs the inflated bytes.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">path</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">void</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/bounded-zip-reader.ts#L72">packages/player-sdk/src/bounded-zip-reader.ts:72</a></li></ul></aside></div></li></ul></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Constructors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Constructors</summary>
+<div><a href="#constructor"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Constructor"><use href="../assets/icons.svg#icon-512"></use></svg><span>constructor</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Methods</summary>
+<div><a href="#has"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>has</span></a><a href="#read"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>read</span></a><a href="#release"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>release</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/classes/WebBlackboxPlayer.html b/docs/api/player-sdk/classes/WebBlackboxPlayer.html
index 38b77bc..1404cc8 100644
--- a/docs/api/player-sdk/classes/WebBlackboxPlayer.html
+++ b/docs/api/player-sdk/classes/WebBlackboxPlayer.html
@@ -1,15 +1,49 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>WebBlackboxPlayer | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">WebBlackboxPlayer</a></li></ul><h1>Class WebBlackboxPlayer</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Main SDK entry for loading, querying, and exporting insights from <code>.webblackbox</code> archives.</p>
-</div></section><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L398">index.ts:398</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#status" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>WebBlackboxPlayer | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">WebBlackboxPlayer</a></li></ul>
+<h1>Class WebBlackboxPlayer</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Main SDK entry for loading, querying, and exporting insights from <code>.webblackbox</code> archives.</p>
+</div></section><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L529">packages/player-sdk/src/index.ts:529</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#status" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status</span></a>
 <a href="#archive" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>archive</span></a>
-</div></section><section class="tsd-index-section"><h3 class="tsd-index-heading">Accessors</h3><div class="tsd-index-list"><a href="#events" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Accessor"><use href="../assets/icons.svg#icon-262144"></use></svg><span>events</span></a>
-</div></section><section class="tsd-index-section"><h3 class="tsd-index-heading">Methods</h3><div class="tsd-index-list"><a href="#open" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>open</span></a>
+</div></section>
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="accessors">Accessors<a href="#accessors" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#events" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Accessor"><use href="../assets/icons.svg#icon-262144"></use></svg><span>events</span></a>
+</div></section>
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="methods">Methods<a href="#methods" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#open" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>open</span></a>
 <a href="#query" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>query</span></a>
 <a href="#search" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>search</span></a>
 <a href="#getblob" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Blob</span></a>
+<a href="#readblobtransient" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>read<wbr/>Blob<wbr/>Transient</span></a>
 <a href="#buildderived" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>build<wbr/>Derived</span></a>
+<a href="#getprivacyprotectionreport" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Privacy<wbr/>Protection<wbr/>Report</span></a>
+<a href="#getsensitivedatapreview" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Sensitive<wbr/>Data<wbr/>Preview</span></a>
 <a href="#getactiontimeline" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Action<wbr/>Timeline</span></a>
+<a href="#getreplaydiagnostics" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Replay<wbr/>Diagnostics</span></a>
 <a href="#getnetworkwaterfall" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Network<wbr/>Waterfall</span></a>
 <a href="#getrequestevents" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Request<wbr/>Events</span></a>
+<a href="#getrequestresponsediff" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Request<wbr/>Response<wbr/>Diff</span></a>
 <a href="#getrealtimenetworktimeline" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Realtime<wbr/>Network<wbr/>Timeline</span></a>
 <a href="#getstoragetimeline" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Storage<wbr/>Timeline</span></a>
 <a href="#getperformanceartifacts" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Performance<wbr/>Artifacts</span></a>
@@ -27,32 +61,518 @@
 <a href="#generatejiraissuetemplate" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Jira<wbr/>Issue<wbr/>Template</span></a>
 <a href="#generateplaywrightscript" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Playwright<wbr/>Script</span></a>
 <a href="#generateplaywrightmockscript" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Playwright<wbr/>Mock<wbr/>Script</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="status"><code class="tsd-tag">Readonly</code><span>status</span><a href="#status" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerStatus.html" class="tsd-signature-type tsd-kind-type-alias">PlayerStatus</a><span class="tsd-signature-symbol"> = &quot;loaded&quot;</span></div><div class="tsd-comment tsd-typography"><p>Current player status (always <code>loaded</code> for opened instances).</p>
-</div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L400">index.ts:400</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="archive"><code class="tsd-tag">Readonly</code><span>archive</span><a href="#archive" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">archive</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerArchive.html" class="tsd-signature-type tsd-kind-type-alias">PlayerArchive</a></div><div class="tsd-comment tsd-typography"><p>Parsed archive metadata and indexes.</p>
-</div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L403">index.ts:403</a></li></ul></aside></section></section></details><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Accessors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Accessors</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="events"><span>events</span><a href="#events" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li><div class="tsd-signature" id="eventsevents"><span class="tsd-signature-keyword">get</span> <span class="tsd-kind-get-signature">events</span><span class="tsd-signature-symbol">()</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Returns all events in the current loaded range.</p>
-</div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L473">index.ts:473</a></li></ul></aside></div></li></ul></section></section></details><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Methods</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="open"><code class="tsd-tag">Static</code><span>open</span><a href="#open" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="open-1"><span class="tsd-kind-call-signature">open</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">input</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerOpenInput.html" class="tsd-signature-type tsd-kind-type-alias">PlayerOpenInput</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerOpenOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlayerOpenOptions</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">&gt;</span><a href="#open-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Opens a WebBlackbox archive from bytes, buffer, or Blob input.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">input</span>: <a href="../types/PlayerOpenInput.html" class="tsd-signature-type tsd-kind-type-alias">PlayerOpenInput</a></span></li><li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/PlayerOpenOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlayerOpenOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L478">index.ts:478</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="query"><span>query</span><a href="#query" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="query-1"><span class="tsd-kind-call-signature">query</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">query</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerQuery.html" class="tsd-signature-type tsd-kind-type-alias">PlayerQuery</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span><a href="#query-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Queries events using range/type/level/text/request filters.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">query</span>: <a href="../types/PlayerQuery.html" class="tsd-signature-type tsd-kind-type-alias">PlayerQuery</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L514">index.ts:514</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="search"><span>search</span><a href="#search" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="search-1"><span class="tsd-kind-call-signature">search</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">term</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-kind-parameter">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerSearchResult.html" class="tsd-signature-type tsd-kind-type-alias">PlayerSearchResult</a><span class="tsd-signature-symbol">[]</span><a href="#search-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Full-text search over indexed terms and event payloads.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">term</span>: <span class="tsd-signature-type">string</span></span></li><li><span><span class="tsd-kind-parameter">limit</span>: <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol"> = 100</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/PlayerSearchResult.html" class="tsd-signature-type tsd-kind-type-alias">PlayerSearchResult</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L611">index.ts:611</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getblob"><span>get<wbr/>Blob</span><a href="#getblob" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getblob-1"><span class="tsd-kind-call-signature">getBlob</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">hash</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">mime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">bytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Uint8Array</span> <span class="tsd-signature-symbol">}</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span><a href="#getblob-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Resolves a stored blob by hash or blob path alias.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">hash</span>: <span class="tsd-signature-type">string</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">mime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">bytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Uint8Array</span> <span class="tsd-signature-symbol">}</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L723">index.ts:723</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="buildderived"><span>build<wbr/>Derived</span><a href="#buildderived" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="buildderived-1"><span class="tsd-kind-call-signature">buildDerived</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerDerivedView.html" class="tsd-signature-type tsd-kind-type-alias">PlayerDerivedView</a><a href="#buildderived-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Builds action-span aggregates and total counters for the selected range.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/PlayerDerivedView.html" class="tsd-signature-type tsd-kind-type-alias">PlayerDerivedView</a></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L746">index.ts:746</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getactiontimeline"><span>get<wbr/>Action<wbr/>Timeline</span><a href="#getactiontimeline" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getactiontimeline-1"><span class="tsd-kind-call-signature">getActionTimeline</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">screenshotLookaheadMs</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">requestLimit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">errorLimit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">derived</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerDerivedView.html" class="tsd-signature-type tsd-kind-type-alias">PlayerDerivedView</a><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/ActionTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">ActionTimelineEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getactiontimeline-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Builds per-action timeline rows with related requests/errors/screenshots.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">options</span>: <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">screenshotLookaheadMs</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">requestLimit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">errorLimit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">derived</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerDerivedView.html" class="tsd-signature-type tsd-kind-type-alias">PlayerDerivedView</a><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/ActionTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">ActionTimelineEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L820">index.ts:820</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getnetworkwaterfall"><span>get<wbr/>Network<wbr/>Waterfall</span><a href="#getnetworkwaterfall" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getnetworkwaterfall-1"><span class="tsd-kind-call-signature">getNetworkWaterfall</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/NetworkWaterfallEntry.html" class="tsd-signature-type tsd-kind-type-alias">NetworkWaterfallEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getnetworkwaterfall-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Returns normalized network waterfall entries sorted by start time.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/NetworkWaterfallEntry.html" class="tsd-signature-type tsd-kind-type-alias">NetworkWaterfallEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L905">index.ts:905</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getrequestevents"><span>get<wbr/>Request<wbr/>Events</span><a href="#getrequestevents" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getrequestevents-1"><span class="tsd-kind-call-signature">getRequestEvents</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span><a href="#getrequestevents-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Returns all events that reference a specific request id.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">reqId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L927">index.ts:927</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getrealtimenetworktimeline"><span>get<wbr/>Realtime<wbr/>Network<wbr/>Timeline</span><a href="#getrealtimenetworktimeline" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getrealtimenetworktimeline-1"><span class="tsd-kind-call-signature">getRealtimeNetworkTimeline</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/RealtimeNetworkEntry.html" class="tsd-signature-type tsd-kind-type-alias">RealtimeNetworkEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getrealtimenetworktimeline-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Returns realtime network stream entries (WebSocket/SSE).</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/RealtimeNetworkEntry.html" class="tsd-signature-type tsd-kind-type-alias">RealtimeNetworkEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L932">index.ts:932</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getstoragetimeline"><span>get<wbr/>Storage<wbr/>Timeline</span><a href="#getstoragetimeline" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getstoragetimeline-1"><span class="tsd-kind-call-signature">getStorageTimeline</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/StorageTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">StorageTimelineEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getstoragetimeline-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Returns storage timeline entries (cookie/local/session/idb/cache/sw).</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/StorageTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">StorageTimelineEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L968">index.ts:968</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getperformanceartifacts"><span>get<wbr/>Performance<wbr/>Artifacts</span><a href="#getperformanceartifacts" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getperformanceartifacts-1"><span class="tsd-kind-call-signature">getPerformanceArtifacts</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PerformanceArtifactEntry.html" class="tsd-signature-type tsd-kind-type-alias">PerformanceArtifactEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getperformanceartifacts-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Returns collected performance artifacts (trace/cpu/heap/vitals/longtask).</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/PerformanceArtifactEntry.html" class="tsd-signature-type tsd-kind-type-alias">PerformanceArtifactEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1002">index.ts:1002</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getdomsnapshots"><span>get<wbr/>Dom<wbr/>Snapshots</span><a href="#getdomsnapshots" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getdomsnapshots-1"><span class="tsd-kind-call-signature">getDomSnapshots</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a><span class="tsd-signature-symbol">[]</span><a href="#getdomsnapshots-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Returns DOM snapshot references ordered by monotonic time.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1038">index.ts:1038</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="getdomdifftimeline"><span>get<wbr/>Dom<wbr/>Diff<wbr/>Timeline</span><a href="#getdomdifftimeline" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getdomdifftimeline-1"><span class="tsd-kind-call-signature">getDomDiffTimeline</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/DomDiffTimelineOptions.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffTimelineOptions</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">&gt;</span><a href="#getdomdifftimeline-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Computes sequential diffs across the DOM snapshot timeline.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/DomDiffTimelineOptions.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffTimelineOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1059">index.ts:1059</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="comparedomsnapshots"><span>compare<wbr/>Dom<wbr/>Snapshots</span><a href="#comparedomsnapshots" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="comparedomsnapshots-1"><span class="tsd-kind-call-signature">compareDomSnapshots</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">previousEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">currentEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span><a href="#comparedomsnapshots-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Compares two snapshots from this player by event id.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">previousEventId</span>: <span class="tsd-signature-type">string</span></span></li><li><span><span class="tsd-kind-parameter">currentEventId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1088">index.ts:1088</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="comparelatestdomsnapshotwith"><span>compare<wbr/>Latest<wbr/>Dom<wbr/>Snapshot<wbr/>With</span><a href="#comparelatestdomsnapshotwith" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="comparelatestdomsnapshotwith-1"><span class="tsd-kind-call-signature">compareLatestDomSnapshotWith</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">other</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span><a href="#comparelatestdomsnapshotwith-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Compares latest DOM snapshots across two players.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">other</span>: <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1106">index.ts:1106</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="comparewith"><span>compare<wbr/>With</span><a href="#comparewith" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="comparewith-1"><span class="tsd-kind-call-signature">compareWith</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">other</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerComparison.html" class="tsd-signature-type tsd-kind-type-alias">PlayerComparison</a><a href="#comparewith-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Compares two sessions by event/request/error deltas and endpoint regressions.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">other</span>: <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/PlayerComparison.html" class="tsd-signature-type tsd-kind-type-alias">PlayerComparison</a></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1125">index.ts:1125</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="comparestoragewith"><span>compare<wbr/>Storage<wbr/>With</span><a href="#comparestoragewith" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="comparestoragewith-1"><span class="tsd-kind-call-signature">compareStorageWith</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">other</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/StorageComparison.html" class="tsd-signature-type tsd-kind-type-alias">StorageComparison</a><a href="#comparestoragewith-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Compares storage timelines across two sessions.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">other</span>: <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/StorageComparison.html" class="tsd-signature-type tsd-kind-type-alias">StorageComparison</a></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1172">index.ts:1172</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="generatecurl"><span>generate<wbr/>Curl</span><a href="#generatecurl" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="generatecurl-1"><span class="tsd-kind-call-signature">generateCurl</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><a href="#generatecurl-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Generates a curl replay command for a recorded network request.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">reqId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1218">index.ts:1218</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="generatefetch"><span>generate<wbr/>Fetch</span><a href="#generatefetch" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="generatefetch-1"><span class="tsd-kind-call-signature">generateFetch</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><a href="#generatefetch-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Generates a fetch replay snippet for a recorded network request.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">reqId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1241">index.ts:1241</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="exporthar"><span>export<wbr/>Har</span><a href="#exporthar" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="exporthar-1"><span class="tsd-kind-call-signature">exportHar</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><a href="#exporthar-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Exports a HAR 1.2 document from network events.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1261">index.ts:1261</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="generatebugreport"><span>generate<wbr/>Bug<wbr/>Report</span><a href="#generatebugreport" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="generatebugreport-1"><span class="tsd-kind-call-signature">generateBugReport</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/BugReportOptions.html" class="tsd-signature-type tsd-kind-type-alias">BugReportOptions</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><a href="#generatebugreport-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Generates a Markdown bug report for the selected range.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/BugReportOptions.html" class="tsd-signature-type tsd-kind-type-alias">BugReportOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1291">index.ts:1291</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="generategithubissuetemplate"><span>generate<wbr/>Git<wbr/>Hub<wbr/>Issue<wbr/>Template</span><a href="#generategithubissuetemplate" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="generategithubissuetemplate-1"><span class="tsd-kind-call-signature">generateGitHubIssueTemplate</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/TeamIssueTemplateOptions.html" class="tsd-signature-type tsd-kind-type-alias">TeamIssueTemplateOptions</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/GitHubIssueTemplate.html" class="tsd-signature-type tsd-kind-type-alias">GitHubIssueTemplate</a><a href="#generategithubissuetemplate-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Generates a GitHub issue template payload from session evidence.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/TeamIssueTemplateOptions.html" class="tsd-signature-type tsd-kind-type-alias">TeamIssueTemplateOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/GitHubIssueTemplate.html" class="tsd-signature-type tsd-kind-type-alias">GitHubIssueTemplate</a></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1354">index.ts:1354</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="generatejiraissuetemplate"><span>generate<wbr/>Jira<wbr/>Issue<wbr/>Template</span><a href="#generatejiraissuetemplate" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="generatejiraissuetemplate-1"><span class="tsd-kind-call-signature">generateJiraIssueTemplate</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/TeamIssueTemplateOptions.html" class="tsd-signature-type tsd-kind-type-alias">TeamIssueTemplateOptions</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/JiraIssueTemplate.html" class="tsd-signature-type tsd-kind-type-alias">JiraIssueTemplate</a><a href="#generatejiraissuetemplate-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Generates a Jira issue payload from session evidence.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/TeamIssueTemplateOptions.html" class="tsd-signature-type tsd-kind-type-alias">TeamIssueTemplateOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <a href="../types/JiraIssueTemplate.html" class="tsd-signature-type tsd-kind-type-alias">JiraIssueTemplate</a></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1371">index.ts:1371</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="generateplaywrightscript"><span>generate<wbr/>Playwright<wbr/>Script</span><a href="#generateplaywrightscript" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="generateplaywrightscript-1"><span class="tsd-kind-call-signature">generatePlaywrightScript</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlaywrightScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightScriptOptions</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><a href="#generateplaywrightscript-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Generates a Playwright script from captured navigation and user actions.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/PlaywrightScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightScriptOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1402">index.ts:1402</a></li></ul></aside></div></li></ul></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="generateplaywrightmockscript"><span>generate<wbr/>Playwright<wbr/>Mock<wbr/>Script</span><a href="#generateplaywrightmockscript" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="generateplaywrightmockscript-1"><span class="tsd-kind-call-signature">generatePlaywrightMockScript</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlaywrightMockScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightMockScriptOptions</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span><a href="#generateplaywrightmockscript-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Generates a Playwright script with mocked network responses.</p>
-</div><div class="tsd-parameters"><h4 class="tsd-parameters-title">Parameters</h4><ul class="tsd-parameter-list"><li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/PlaywrightMockScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightMockScriptOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div><h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1435">index.ts:1435</a></li></ul></aside></div></li></ul></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#status"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status</span></a><a href="#archive"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>archive</span></a></div></details><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Accessors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Accessors</summary><div><a href="#events"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Accessor"><use href="../assets/icons.svg#icon-262144"></use></svg><span>events</span></a></div></details><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Methods</summary><div><a href="#open"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>open</span></a><a href="#query"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>query</span></a><a href="#search"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>search</span></a><a href="#getblob"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Blob</span></a><a href="#buildderived"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>build<wbr/>Derived</span></a><a href="#getactiontimeline"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Action<wbr/>Timeline</span></a><a href="#getnetworkwaterfall"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Network<wbr/>Waterfall</span></a><a href="#getrequestevents"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Request<wbr/>Events</span></a><a href="#getrealtimenetworktimeline"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Realtime<wbr/>Network<wbr/>Timeline</span></a><a href="#getstoragetimeline"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Storage<wbr/>Timeline</span></a><a href="#getperformanceartifacts"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Performance<wbr/>Artifacts</span></a><a href="#getdomsnapshots"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Dom<wbr/>Snapshots</span></a><a href="#getdomdifftimeline"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Dom<wbr/>Diff<wbr/>Timeline</span></a><a href="#comparedomsnapshots"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>compare<wbr/>Dom<wbr/>Snapshots</span></a><a href="#comparelatestdomsnapshotwith"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>compare<wbr/>Latest<wbr/>Dom<wbr/>Snapshot<wbr/>With</span></a><a href="#comparewith"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>compare<wbr/>With</span></a><a href="#comparestoragewith"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>compare<wbr/>Storage<wbr/>With</span></a><a href="#generatecurl"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Curl</span></a><a href="#generatefetch"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Fetch</span></a><a href="#exporthar"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>export<wbr/>Har</span></a><a href="#generatebugreport"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Bug<wbr/>Report</span></a><a href="#generategithubissuetemplate"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Git<wbr/>Hub<wbr/>Issue<wbr/>Template</span></a><a href="#generatejiraissuetemplate"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Jira<wbr/>Issue<wbr/>Template</span></a><a href="#generateplaywrightscript"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Playwright<wbr/>Script</span></a><a href="#generateplaywrightmockscript"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Playwright<wbr/>Mock<wbr/>Script</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="status"><code class="tsd-tag">Readonly</code><span>status</span><a href="#status" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerStatus.html" class="tsd-signature-type tsd-kind-type-alias">PlayerStatus</a><span class="tsd-signature-symbol"> = &quot;loaded&quot;</span></div>
+<div class="tsd-comment tsd-typography"><p>Current player status (always <code>loaded</code> for opened instances).</p>
+</div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L531">packages/player-sdk/src/index.ts:531</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="archive"><code class="tsd-tag">Readonly</code><span>archive</span><a href="#archive" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">archive</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerArchive.html" class="tsd-signature-type tsd-kind-type-alias">PlayerArchive</a></div>
+<div class="tsd-comment tsd-typography"><p>Parsed archive metadata and indexes.</p>
+</div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L534">packages/player-sdk/src/index.ts:534</a></li></ul></aside></section></section></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Accessors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="accessors-1">Accessors<a href="#accessors-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="events"><span>events</span><a href="#events" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li>
+<div class="tsd-signature" id="eventsevents"><span class="tsd-signature-keyword">get</span> <span class="tsd-kind-get-signature">events</span><span class="tsd-signature-symbol">()</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns all events in the current loaded range.</p>
+</div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L607">packages/player-sdk/src/index.ts:607</a></li></ul></aside></div></li></ul></section></section></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="methods-1">Methods<a href="#methods-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="open"><code class="tsd-tag">Static</code><span>open</span><a href="#open" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="open-1"><span class="tsd-kind-call-signature">open</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">input</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerOpenInput.html" class="tsd-signature-type tsd-kind-type-alias">PlayerOpenInput</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerOpenOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlayerOpenOptions</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">&gt;</span><a href="#open-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Opens a WebBlackbox archive from bytes, buffer, or Blob input.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">input</span>: <a href="../types/PlayerOpenInput.html" class="tsd-signature-type tsd-kind-type-alias">PlayerOpenInput</a></span></li>
+<li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/PlayerOpenOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlayerOpenOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L612">packages/player-sdk/src/index.ts:612</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="query"><span>query</span><a href="#query" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="query-1"><span class="tsd-kind-call-signature">query</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">query</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerQuery.html" class="tsd-signature-type tsd-kind-type-alias">PlayerQuery</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span><a href="#query-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Queries events using range/type/level/text/request filters.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">query</span>: <a href="../types/PlayerQuery.html" class="tsd-signature-type tsd-kind-type-alias">PlayerQuery</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L717">packages/player-sdk/src/index.ts:717</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="search"><span>search</span><a href="#search" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="search-1"><span class="tsd-kind-call-signature">search</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">term</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-kind-parameter">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerSearchResult.html" class="tsd-signature-type tsd-kind-type-alias">PlayerSearchResult</a><span class="tsd-signature-symbol">[]</span><a href="#search-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Full-text search over indexed terms and event payloads.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">term</span>: <span class="tsd-signature-type">string</span></span></li>
+<li><span><span class="tsd-kind-parameter">limit</span>: <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol"> = 100</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/PlayerSearchResult.html" class="tsd-signature-type tsd-kind-type-alias">PlayerSearchResult</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L814">packages/player-sdk/src/index.ts:814</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getblob"><span>get<wbr/>Blob</span><a href="#getblob" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getblob-1"><span class="tsd-kind-call-signature">getBlob</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">hash</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/PlayerBlob.html" class="tsd-signature-type tsd-kind-type-alias">PlayerBlob</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span><a href="#getblob-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Resolves a stored blob by hash or blob path alias.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">hash</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/PlayerBlob.html" class="tsd-signature-type tsd-kind-type-alias">PlayerBlob</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L926">packages/player-sdk/src/index.ts:926</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="readblobtransient"><span>read<wbr/>Blob<wbr/>Transient</span><a href="#readblobtransient" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="readblobtransient-1"><span class="tsd-kind-call-signature">readBlobTransient</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">hash</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-kind-parameter">maxBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/PlayerBlob.html" class="tsd-signature-type tsd-kind-type-alias">PlayerBlob</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span><a href="#readblobtransient-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Reads and verifies one blob without retaining it in the Player cache.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">hash</span>: <span class="tsd-signature-type">string</span></span></li>
+<li><span><span class="tsd-kind-parameter">maxBytes</span>: <span class="tsd-signature-type">number</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/PlayerBlob.html" class="tsd-signature-type tsd-kind-type-alias">PlayerBlob</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L956">packages/player-sdk/src/index.ts:956</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="buildderived"><span>build<wbr/>Derived</span><a href="#buildderived" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="buildderived-1"><span class="tsd-kind-call-signature">buildDerived</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerDerivedView.html" class="tsd-signature-type tsd-kind-type-alias">PlayerDerivedView</a><a href="#buildderived-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Builds action-span aggregates and total counters for the selected range.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/PlayerDerivedView.html" class="tsd-signature-type tsd-kind-type-alias">PlayerDerivedView</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L993">packages/player-sdk/src/index.ts:993</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getprivacyprotectionreport"><span>get<wbr/>Privacy<wbr/>Protection<wbr/>Report</span><a href="#getprivacyprotectionreport" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getprivacyprotectionreport-1"><span class="tsd-kind-call-signature">getPrivacyProtectionReport</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PrivacyProtectionReport.html" class="tsd-signature-type tsd-kind-type-alias">PrivacyProtectionReport</a><a href="#getprivacyprotectionreport-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Builds a privacy/export preflight report that explains configured redaction and detected evidence.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/PrivacyProtectionReport.html" class="tsd-signature-type tsd-kind-type-alias">PrivacyProtectionReport</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1067">packages/player-sdk/src/index.ts:1067</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getsensitivedatapreview"><span>get<wbr/>Sensitive<wbr/>Data<wbr/>Preview</span><a href="#getsensitivedatapreview" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getsensitivedatapreview-1"><span class="tsd-kind-call-signature">getSensitiveDataPreview</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/SensitiveDataPreview.html" class="tsd-signature-type tsd-kind-type-alias">SensitiveDataPreview</a><a href="#getsensitivedatapreview-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns bounded redaction evidence samples so users can review sensitive data before export/share.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/SensitiveDataPreview.html" class="tsd-signature-type tsd-kind-type-alias">SensitiveDataPreview</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1107">packages/player-sdk/src/index.ts:1107</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getactiontimeline"><span>get<wbr/>Action<wbr/>Timeline</span><a href="#getactiontimeline" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getactiontimeline-1"><span class="tsd-kind-call-signature">getActionTimeline</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">screenshotLookaheadMs</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">requestLimit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">errorLimit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">derived</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerDerivedView.html" class="tsd-signature-type tsd-kind-type-alias">PlayerDerivedView</a><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/ActionTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">ActionTimelineEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getactiontimeline-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Builds per-action timeline rows with related requests/errors/screenshots.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">screenshotLookaheadMs</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">requestLimit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">errorLimit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">derived</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerDerivedView.html" class="tsd-signature-type tsd-kind-type-alias">PlayerDerivedView</a><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/ActionTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">ActionTimelineEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1138">packages/player-sdk/src/index.ts:1138</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getreplaydiagnostics"><span>get<wbr/>Replay<wbr/>Diagnostics</span><a href="#getreplaydiagnostics" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getreplaydiagnostics-1"><span class="tsd-kind-call-signature">getReplayDiagnostics</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">actions</span><span class="tsd-signature-symbol">?:</span> <a href="../types/ActionTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">ActionTimelineEntry</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">waterfall</span><span class="tsd-signature-symbol">?:</span> <a href="../types/NetworkWaterfallEntry.html" class="tsd-signature-type tsd-kind-type-alias">NetworkWaterfallEntry</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/ReplayDiagnosticEntry.html" class="tsd-signature-type tsd-kind-type-alias">ReplayDiagnosticEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getreplaydiagnostics-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Builds trusted-replay diagnostics by joining actions with network, errors, and screenshot evidence.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">actions</span><span class="tsd-signature-symbol">?:</span> <a href="../types/ActionTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">ActionTimelineEntry</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">waterfall</span><span class="tsd-signature-symbol">?:</span> <a href="../types/NetworkWaterfallEntry.html" class="tsd-signature-type tsd-kind-type-alias">NetworkWaterfallEntry</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/ReplayDiagnosticEntry.html" class="tsd-signature-type tsd-kind-type-alias">ReplayDiagnosticEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1210">packages/player-sdk/src/index.ts:1210</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getnetworkwaterfall"><span>get<wbr/>Network<wbr/>Waterfall</span><a href="#getnetworkwaterfall" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getnetworkwaterfall-1"><span class="tsd-kind-call-signature">getNetworkWaterfall</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/NetworkWaterfallEntry.html" class="tsd-signature-type tsd-kind-type-alias">NetworkWaterfallEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getnetworkwaterfall-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns normalized network waterfall entries sorted by start time.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/NetworkWaterfallEntry.html" class="tsd-signature-type tsd-kind-type-alias">NetworkWaterfallEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1263">packages/player-sdk/src/index.ts:1263</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getrequestevents"><span>get<wbr/>Request<wbr/>Events</span><a href="#getrequestevents" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getrequestevents-1"><span class="tsd-kind-call-signature">getRequestEvents</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span><a href="#getrequestevents-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns all events that reference a specific request id.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">reqId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1285">packages/player-sdk/src/index.ts:1285</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getrequestresponsediff"><span>get<wbr/>Request<wbr/>Response<wbr/>Diff</span><a href="#getrequestresponsediff" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getrequestresponsediff-1"><span class="tsd-kind-call-signature">getRequestResponseDiff</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/RequestResponseDiff.html" class="tsd-signature-type tsd-kind-type-alias">RequestResponseDiff</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span><a href="#getrequestresponsediff-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Builds a concrete request/response diff including body sizes and missing replay inputs.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">reqId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/RequestResponseDiff.html" class="tsd-signature-type tsd-kind-type-alias">RequestResponseDiff</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1290">packages/player-sdk/src/index.ts:1290</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getrealtimenetworktimeline"><span>get<wbr/>Realtime<wbr/>Network<wbr/>Timeline</span><a href="#getrealtimenetworktimeline" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getrealtimenetworktimeline-1"><span class="tsd-kind-call-signature">getRealtimeNetworkTimeline</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/RealtimeNetworkEntry.html" class="tsd-signature-type tsd-kind-type-alias">RealtimeNetworkEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getrealtimenetworktimeline-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns realtime network stream entries (WebSocket/SSE).</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/RealtimeNetworkEntry.html" class="tsd-signature-type tsd-kind-type-alias">RealtimeNetworkEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1325">packages/player-sdk/src/index.ts:1325</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getstoragetimeline"><span>get<wbr/>Storage<wbr/>Timeline</span><a href="#getstoragetimeline" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getstoragetimeline-1"><span class="tsd-kind-call-signature">getStorageTimeline</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/StorageTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">StorageTimelineEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getstoragetimeline-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns storage timeline entries (cookie/local/session/idb/cache/sw).</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/StorageTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">StorageTimelineEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1361">packages/player-sdk/src/index.ts:1361</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getperformanceartifacts"><span>get<wbr/>Performance<wbr/>Artifacts</span><a href="#getperformanceartifacts" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getperformanceartifacts-1"><span class="tsd-kind-call-signature">getPerformanceArtifacts</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PerformanceArtifactEntry.html" class="tsd-signature-type tsd-kind-type-alias">PerformanceArtifactEntry</a><span class="tsd-signature-symbol">[]</span><a href="#getperformanceartifacts-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns collected performance artifacts (trace/cpu/heap/vitals/longtask).</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/PerformanceArtifactEntry.html" class="tsd-signature-type tsd-kind-type-alias">PerformanceArtifactEntry</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1395">packages/player-sdk/src/index.ts:1395</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getdomsnapshots"><span>get<wbr/>Dom<wbr/>Snapshots</span><a href="#getdomsnapshots" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getdomsnapshots-1"><span class="tsd-kind-call-signature">getDomSnapshots</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a><span class="tsd-signature-symbol">[]</span><a href="#getdomsnapshots-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns DOM snapshot references ordered by monotonic time.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a><span class="tsd-signature-symbol">[]</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1431">packages/player-sdk/src/index.ts:1431</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="getdomdifftimeline"><span>get<wbr/>Dom<wbr/>Diff<wbr/>Timeline</span><a href="#getdomdifftimeline" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getdomdifftimeline-1"><span class="tsd-kind-call-signature">getDomDiffTimeline</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/DomDiffTimelineOptions.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffTimelineOptions</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">&gt;</span><a href="#getdomdifftimeline-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Computes sequential diffs across the DOM snapshot timeline.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/DomDiffTimelineOptions.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffTimelineOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1452">packages/player-sdk/src/index.ts:1452</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="comparedomsnapshots"><span>compare<wbr/>Dom<wbr/>Snapshots</span><a href="#comparedomsnapshots" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="comparedomsnapshots-1"><span class="tsd-kind-call-signature">compareDomSnapshots</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">previousEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">currentEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span><a href="#comparedomsnapshots-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Compares two snapshots from this player by event id.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">previousEventId</span>: <span class="tsd-signature-type">string</span></span></li>
+<li><span><span class="tsd-kind-parameter">currentEventId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1481">packages/player-sdk/src/index.ts:1481</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="comparelatestdomsnapshotwith"><span>compare<wbr/>Latest<wbr/>Dom<wbr/>Snapshot<wbr/>With</span><a href="#comparelatestdomsnapshotwith" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="comparelatestdomsnapshotwith-1"><span class="tsd-kind-call-signature">compareLatestDomSnapshotWith</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">other</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span><a href="#comparelatestdomsnapshotwith-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Compares latest DOM snapshots across two players.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">other</span>: <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/DomDiffResult.html" class="tsd-signature-type tsd-kind-type-alias">DomDiffResult</a> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1499">packages/player-sdk/src/index.ts:1499</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="comparewith"><span>compare<wbr/>With</span><a href="#comparewith" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="comparewith-1"><span class="tsd-kind-call-signature">compareWith</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">other</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerComparison.html" class="tsd-signature-type tsd-kind-type-alias">PlayerComparison</a><a href="#comparewith-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Compares two sessions by event/request/error deltas and endpoint regressions.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">other</span>: <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/PlayerComparison.html" class="tsd-signature-type tsd-kind-type-alias">PlayerComparison</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1518">packages/player-sdk/src/index.ts:1518</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="comparestoragewith"><span>compare<wbr/>Storage<wbr/>With</span><a href="#comparestoragewith" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="comparestoragewith-1"><span class="tsd-kind-call-signature">compareStorageWith</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">other</span><span class="tsd-signature-symbol">:</span> <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/StorageComparison.html" class="tsd-signature-type tsd-kind-type-alias">StorageComparison</a><a href="#comparestoragewith-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Compares storage timelines across two sessions.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">other</span>: <a href="" class="tsd-signature-type tsd-kind-class">WebBlackboxPlayer</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/StorageComparison.html" class="tsd-signature-type tsd-kind-type-alias">StorageComparison</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1563">packages/player-sdk/src/index.ts:1563</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="generatecurl"><span>generate<wbr/>Curl</span><a href="#generatecurl" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="generatecurl-1"><span class="tsd-kind-call-signature">generateCurl</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><a href="#generatecurl-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Generates a curl replay command for a recorded network request.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">reqId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1609">packages/player-sdk/src/index.ts:1609</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="generatefetch"><span>generate<wbr/>Fetch</span><a href="#generatefetch" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="generatefetch-1"><span class="tsd-kind-call-signature">generateFetch</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><a href="#generatefetch-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Generates a fetch replay snippet for a recorded network request.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">reqId</span>: <span class="tsd-signature-type">string</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1635">packages/player-sdk/src/index.ts:1635</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="exporthar"><span>export<wbr/>Har</span><a href="#exporthar" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="exporthar-1"><span class="tsd-kind-call-signature">exportHar</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">range</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span><a href="#exporthar-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Exports a HAR 1.2 document, including captured response bodies, from network events.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><code class="tsd-tag">Optional</code><span class="tsd-kind-parameter">range</span>: <a href="../types/PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1655">packages/player-sdk/src/index.ts:1655</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="generatebugreport"><span>generate<wbr/>Bug<wbr/>Report</span><a href="#generatebugreport" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="generatebugreport-1"><span class="tsd-kind-call-signature">generateBugReport</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/BugReportOptions.html" class="tsd-signature-type tsd-kind-type-alias">BugReportOptions</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><a href="#generatebugreport-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Generates a Markdown bug report for the selected range.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/BugReportOptions.html" class="tsd-signature-type tsd-kind-type-alias">BugReportOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1692">packages/player-sdk/src/index.ts:1692</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="generategithubissuetemplate"><span>generate<wbr/>Git<wbr/>Hub<wbr/>Issue<wbr/>Template</span><a href="#generategithubissuetemplate" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="generategithubissuetemplate-1"><span class="tsd-kind-call-signature">generateGitHubIssueTemplate</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/TeamIssueTemplateOptions.html" class="tsd-signature-type tsd-kind-type-alias">TeamIssueTemplateOptions</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/GitHubIssueTemplate.html" class="tsd-signature-type tsd-kind-type-alias">GitHubIssueTemplate</a><a href="#generategithubissuetemplate-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Generates a GitHub issue template payload from session evidence.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/TeamIssueTemplateOptions.html" class="tsd-signature-type tsd-kind-type-alias">TeamIssueTemplateOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/GitHubIssueTemplate.html" class="tsd-signature-type tsd-kind-type-alias">GitHubIssueTemplate</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1769">packages/player-sdk/src/index.ts:1769</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="generatejiraissuetemplate"><span>generate<wbr/>Jira<wbr/>Issue<wbr/>Template</span><a href="#generatejiraissuetemplate" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="generatejiraissuetemplate-1"><span class="tsd-kind-call-signature">generateJiraIssueTemplate</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/TeamIssueTemplateOptions.html" class="tsd-signature-type tsd-kind-type-alias">TeamIssueTemplateOptions</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/JiraIssueTemplate.html" class="tsd-signature-type tsd-kind-type-alias">JiraIssueTemplate</a><a href="#generatejiraissuetemplate-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Generates a Jira issue payload from session evidence.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/TeamIssueTemplateOptions.html" class="tsd-signature-type tsd-kind-type-alias">TeamIssueTemplateOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/JiraIssueTemplate.html" class="tsd-signature-type tsd-kind-type-alias">JiraIssueTemplate</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1786">packages/player-sdk/src/index.ts:1786</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="generateplaywrightscript"><span>generate<wbr/>Playwright<wbr/>Script</span><a href="#generateplaywrightscript" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="generateplaywrightscript-1"><span class="tsd-kind-call-signature">generatePlaywrightScript</span><span class="tsd-signature-symbol">(</span><span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlaywrightScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightScriptOptions</a><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><a href="#generateplaywrightscript-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Generates a Playwright script from captured navigation and user actions.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/PlaywrightScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightScriptOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1817">packages/player-sdk/src/index.ts:1817</a></li></ul></aside></div></li></ul></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="generateplaywrightmockscript"><span>generate<wbr/>Playwright<wbr/>Mock<wbr/>Script</span><a href="#generateplaywrightmockscript" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="generateplaywrightmockscript-1"><span class="tsd-kind-call-signature">generatePlaywrightMockScript</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">options</span><span class="tsd-signature-symbol">?:</span> <a href="../types/PlaywrightMockScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightMockScriptOptions</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span><a href="#generateplaywrightmockscript-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Generates a Playwright script with mocked network responses.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">options</span>: <a href="../types/PlaywrightMockScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightMockScriptOptions</a><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L1850">packages/player-sdk/src/index.ts:1850</a></li></ul></aside></div></li></ul></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#status"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status</span></a><a href="#archive"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>archive</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Accessors"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Accessors</summary>
+<div><a href="#events"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Accessor"><use href="../assets/icons.svg#icon-262144"></use></svg><span>events</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Methods"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Methods</summary>
+<div><a href="#open"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>open</span></a><a href="#query"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>query</span></a><a href="#search"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>search</span></a><a href="#getblob"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Blob</span></a><a href="#readblobtransient"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>read<wbr/>Blob<wbr/>Transient</span></a><a href="#buildderived"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>build<wbr/>Derived</span></a><a href="#getprivacyprotectionreport"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Privacy<wbr/>Protection<wbr/>Report</span></a><a href="#getsensitivedatapreview"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Sensitive<wbr/>Data<wbr/>Preview</span></a><a href="#getactiontimeline"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Action<wbr/>Timeline</span></a><a href="#getreplaydiagnostics"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Replay<wbr/>Diagnostics</span></a><a href="#getnetworkwaterfall"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Network<wbr/>Waterfall</span></a><a href="#getrequestevents"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Request<wbr/>Events</span></a><a href="#getrequestresponsediff"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Request<wbr/>Response<wbr/>Diff</span></a><a href="#getrealtimenetworktimeline"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Realtime<wbr/>Network<wbr/>Timeline</span></a><a href="#getstoragetimeline"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Storage<wbr/>Timeline</span></a><a href="#getperformanceartifacts"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Performance<wbr/>Artifacts</span></a><a href="#getdomsnapshots"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Dom<wbr/>Snapshots</span></a><a href="#getdomdifftimeline"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>get<wbr/>Dom<wbr/>Diff<wbr/>Timeline</span></a><a href="#comparedomsnapshots"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>compare<wbr/>Dom<wbr/>Snapshots</span></a><a href="#comparelatestdomsnapshotwith"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>compare<wbr/>Latest<wbr/>Dom<wbr/>Snapshot<wbr/>With</span></a><a href="#comparewith"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>compare<wbr/>With</span></a><a href="#comparestoragewith"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>compare<wbr/>Storage<wbr/>With</span></a><a href="#generatecurl"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Curl</span></a><a href="#generatefetch"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Fetch</span></a><a href="#exporthar"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>export<wbr/>Har</span></a><a href="#generatebugreport"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Bug<wbr/>Report</span></a><a href="#generategithubissuetemplate"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Git<wbr/>Hub<wbr/>Issue<wbr/>Template</span></a><a href="#generatejiraissuetemplate"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Jira<wbr/>Issue<wbr/>Template</span></a><a href="#generateplaywrightscript"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Playwright<wbr/>Script</span></a><a href="#generateplaywrightmockscript"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Method"><use href="../assets/icons.svg#icon-2048"></use></svg><span>generate<wbr/>Playwright<wbr/>Mock<wbr/>Script</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/functions/assertArchiveInputResourceLimits.html b/docs/api/player-sdk/functions/assertArchiveInputResourceLimits.html
new file mode 100644
index 0000000..54985e6
--- /dev/null
+++ b/docs/api/player-sdk/functions/assertArchiveInputResourceLimits.html
@@ -0,0 +1,44 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>assertArchiveInputResourceLimits | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">assertArchiveInputResourceLimits</a></li></ul>
+<h1>Function assertArchiveInputResourceLimits</h1></div>
+<section class="tsd-panel">
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="assertarchiveinputresourcelimits"><span class="tsd-kind-call-signature">assertArchiveInputResourceLimits</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">bytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Uint8Array</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">limits</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Readonly</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">void</span><a href="#assertarchiveinputresourcelimits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Performs checks available from the ZIP bytes before JSZip constructs its entry table.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">bytes</span>: <span class="tsd-signature-type">Uint8Array</span></span></li>
+<li><span><span class="tsd-kind-parameter">limits</span>: <span class="tsd-signature-type">Readonly</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">void</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L114">packages/player-sdk/src/archive-resource-limits.ts:114</a></li></ul></aside></div></li></ul></section></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/functions/assertLoadedArchiveResourceLimits.html b/docs/api/player-sdk/functions/assertLoadedArchiveResourceLimits.html
new file mode 100644
index 0000000..b4f58fb
--- /dev/null
+++ b/docs/api/player-sdk/functions/assertLoadedArchiveResourceLimits.html
@@ -0,0 +1,44 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>assertLoadedArchiveResourceLimits | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">assertLoadedArchiveResourceLimits</a></li></ul>
+<h1>Function assertLoadedArchiveResourceLimits</h1></div>
+<section class="tsd-panel">
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="assertloadedarchiveresourcelimits"><span class="tsd-kind-call-signature">assertLoadedArchiveResourceLimits</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">zip</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">JSZip</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">limits</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Readonly</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">void</span><a href="#assertloadedarchiveresourcelimits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Uses declared central-directory sizes for early rejection; actual output is checked on read.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">zip</span>: <span class="tsd-signature-type">JSZip</span></span></li>
+<li><span><span class="tsd-kind-parameter">limits</span>: <span class="tsd-signature-type">Readonly</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">void</span></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L131">packages/player-sdk/src/archive-resource-limits.ts:131</a></li></ul></aside></div></li></ul></section></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/functions/getDefaultPlayerStatus.html b/docs/api/player-sdk/functions/getDefaultPlayerStatus.html
index ead3ee2..3b13ad3 100644
--- a/docs/api/player-sdk/functions/getDefaultPlayerStatus.html
+++ b/docs/api/player-sdk/functions/getDefaultPlayerStatus.html
@@ -1,2 +1,39 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>getDefaultPlayerStatus | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">getDefaultPlayerStatus</a></li></ul><h1>Function getDefaultPlayerStatus</h1></div><section class="tsd-panel"><ul class="tsd-signatures"><li class=""><div class="tsd-signature tsd-anchor-link" id="getdefaultplayerstatus"><span class="tsd-kind-call-signature">getDefaultPlayerStatus</span><span class="tsd-signature-symbol">()</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerStatus.html" class="tsd-signature-type tsd-kind-type-alias">PlayerStatus</a><a href="#getdefaultplayerstatus" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div><div class="tsd-description"><div class="tsd-comment tsd-typography"><p>Returns the default pre-open player status.</p>
-</div><h4 class="tsd-returns-title">Returns <a href="../types/PlayerStatus.html" class="tsd-signature-type tsd-kind-type-alias">PlayerStatus</a></h4><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L1564">index.ts:1564</a></li></ul></aside></div></li></ul></section></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>getDefaultPlayerStatus | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">getDefaultPlayerStatus</a></li></ul>
+<h1>Function getDefaultPlayerStatus</h1></div>
+<section class="tsd-panel">
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="getdefaultplayerstatus"><span class="tsd-kind-call-signature">getDefaultPlayerStatus</span><span class="tsd-signature-symbol">()</span><span class="tsd-signature-symbol">:</span> <a href="../types/PlayerStatus.html" class="tsd-signature-type tsd-kind-type-alias">PlayerStatus</a><a href="#getdefaultplayerstatus" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Returns the default pre-open player status.</p>
+</div>
+<h4 class="tsd-returns-title">Returns <a href="../types/PlayerStatus.html" class="tsd-signature-type tsd-kind-type-alias">PlayerStatus</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L2116">packages/player-sdk/src/index.ts:2116</a></li></ul></aside></div></li></ul></section></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/functions/resolveArchiveResourceLimits.html b/docs/api/player-sdk/functions/resolveArchiveResourceLimits.html
new file mode 100644
index 0000000..8f8b7f0
--- /dev/null
+++ b/docs/api/player-sdk/functions/resolveArchiveResourceLimits.html
@@ -0,0 +1,43 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>resolveArchiveResourceLimits | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">resolveArchiveResourceLimits</a></li></ul>
+<h1>Function resolveArchiveResourceLimits</h1></div>
+<section class="tsd-panel">
+<ul class="tsd-signatures">
+<li class="">
+<div class="tsd-signature tsd-anchor-link" id="resolvearchiveresourcelimits"><span class="tsd-kind-call-signature">resolveArchiveResourceLimits</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">overrides</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">Partial</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><a href="#resolvearchiveresourcelimits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
+<div class="tsd-description">
+<div class="tsd-comment tsd-typography"><p>Resolves caller overrides and rejects attempts to weaken the built-in safety ceiling.</p>
+</div>
+<div class="tsd-parameters">
+<h4 class="tsd-parameters-title">Parameters</h4>
+<ul class="tsd-parameter-list">
+<li><span><span class="tsd-kind-parameter">overrides</span>: <span class="tsd-signature-type">Partial</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol"> = {}</span></span></li></ul></div>
+<h4 class="tsd-returns-title">Returns <a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a></h4><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L76">packages/player-sdk/src/archive-resource-limits.ts:76</a></li></ul></aside></div></li></ul></section></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/hierarchy.html b/docs/api/player-sdk/hierarchy.html
index 74c7ad0..5b6f460 100644
--- a/docs/api/player-sdk/hierarchy.html
+++ b/docs/api/player-sdk/hierarchy.html
@@ -1 +1,28 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="./"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>@webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="assets/style.css"/><link rel="stylesheet" href="assets/highlight.css"/><script defer src="assets/main.js"></script><script async src="assets/icons.js" id="tsd-icons-script"></script><script async src="assets/search.js" id="tsd-search-script"></script><script async src="assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><h1>@webblackbox/player-sdk API</h1></div><h2>Hierarchy Summary</h2></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div><div class="site-menu"><nav class="tsd-navigation"><a href="modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<!DOCTYPE html><html class="default" lang="en" data-base="./"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>@webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="assets/style.css"/><link rel="stylesheet" href="assets/highlight.css"/><script defer src="assets/main.js"></script><script async src="assets/icons.js" id="tsd-icons-script"></script><script async src="assets/search.js" id="tsd-search-script"></script><script async src="assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<h1>@webblackbox/player-sdk API</h1></div>
+<h2>Hierarchy Summary</h2></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/index.html b/docs/api/player-sdk/index.html
index 580ed7e..339aa1d 100644
--- a/docs/api/player-sdk/index.html
+++ b/docs/api/player-sdk/index.html
@@ -1,4 +1,26 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="./"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>@webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="assets/style.css"/><link rel="stylesheet" href="assets/highlight.css"/><script defer src="assets/main.js"></script><script async src="assets/icons.js" id="tsd-icons-script"></script><script async src="assets/search.js" id="tsd-search-script"></script><script async src="assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><h1>@webblackbox/player-sdk API</h1></div><div class="tsd-panel tsd-typography"><h1 id="webblackboxplayer-sdk" class="tsd-anchor-link">@webblackbox/player-sdk<a href="#webblackboxplayer-sdk" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h1>
+<!DOCTYPE html><html class="default" lang="en" data-base="./"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>@webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="assets/style.css"/><link rel="stylesheet" href="assets/highlight.css"/><script defer src="assets/main.js"></script><script async src="assets/icons.js" id="tsd-icons-script"></script><script async src="assets/search.js" id="tsd-search-script"></script><script async src="assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<h1>@webblackbox/player-sdk API</h1></div>
+<div class="tsd-panel tsd-typography"><p align="center">
+  <a href="https://github.com/webllm/webblackbox"><img src="https://raw.githubusercontent.com/webllm/webblackbox/main/logo.png" alt="WebBlackbox" width="80" /></a>
+</p>
+<h1 align="center">@webblackbox/player-sdk</h1>
+<p align="center">
+  Session playback, querying, analysis, and code generation SDK.
+</p>
+<p align="center">
+  <a href="https://www.npmjs.com/package/@webblackbox/player-sdk"><img src="https://img.shields.io/npm/v/@webblackbox/player-sdk.svg?color=f97316" alt="npm version" /></a>
+  <a href="https://github.com/webllm/webblackbox/blob/main/LICENSE"><img src="https://img.shields.io/npm/l/@webblackbox/player-sdk?color=374151" alt="License" /></a>
+  <a href="https://github.com/webllm/webblackbox"><img src="https://img.shields.io/badge/Part%20of-WebBlackbox-000?logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIxNiIgaGVpZ2h0PSIxNiI+PHJlY3Qgd2lkdGg9IjE2IiBoZWlnaHQ9IjE2IiByeD0iMyIgZmlsbD0iIzFhMWEyZSIvPjxwYXRoIGQ9Ik0zIDhoMi41bDIuNS00TDEwLjUgMTIgMTMgOCIgZmlsbD0ibm9uZSIgc3Ryb2tlPSIjZjk3MzE2IiBzdHJva2Utd2lkdGg9IjEuNSIvPjwvc3ZnPg==" alt="WebBlackbox" /></a>
+</p>
+<hr>
 <p>The session playback and analysis SDK for WebBlackbox. Opens <code>.webblackbox</code> archives and provides rich querying, analysis, and code generation capabilities.</p>
 <h2 id="overview" class="tsd-anchor-link">Overview<a href="#overview" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2>
 <ul>
@@ -18,9 +40,15 @@ <h2 id="installation" class="tsd-anchor-link">Installation<a href="#installation
 
 <h2 id="usage" class="tsd-anchor-link">Usage<a href="#usage" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2>
 <h3 id="opening-an-archive" class="tsd-anchor-link">Opening an Archive<a href="#opening-an-archive" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h3>
-<pre><code class="typescript"><span class="hl-3">import</span><span class="hl-1"> { </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1"> } </span><span class="hl-3">from</span><span class="hl-1"> </span><span class="hl-2">&quot;@webblackbox/player-sdk&quot;</span><span class="hl-1">;</span><br/><br/><span class="hl-5">// From ArrayBuffer, Uint8Array, or Blob</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">player</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1">.</span><span class="hl-0">open</span><span class="hl-1">(</span><span class="hl-4">archiveBytes</span><span class="hl-1">);</span><br/><br/><span class="hl-5">// With encryption passphrase</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">player</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1">.</span><span class="hl-0">open</span><span class="hl-1">(</span><span class="hl-4">archiveBytes</span><span class="hl-1">, {</span><br/><span class="hl-1">  </span><span class="hl-4">passphrase:</span><span class="hl-1"> </span><span class="hl-2">&quot;my-secret&quot;</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-5">// Preload only a monotonic time window (loads intersecting chunks only)</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">scopedPlayer</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1">.</span><span class="hl-0">open</span><span class="hl-1">(</span><span class="hl-4">archiveBytes</span><span class="hl-1">, {</span><br/><span class="hl-1">  </span><span class="hl-4">range:</span><span class="hl-1"> { </span><span class="hl-4">monoStart:</span><span class="hl-1"> </span><span class="hl-8">12000</span><span class="hl-1">, </span><span class="hl-4">monoEnd:</span><span class="hl-1"> </span><span class="hl-8">45000</span><span class="hl-1"> }</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-4">status</span><span class="hl-1">); </span><span class="hl-5">// &quot;loaded&quot;</span><br/><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-4">archive</span><span class="hl-1">.</span><span class="hl-4">manifest</span><span class="hl-1">); </span><span class="hl-5">// ExportManifest</span><br/><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-4">events</span><span class="hl-1">.</span><span class="hl-4">length</span><span class="hl-1">); </span><span class="hl-5">// Total event count</span>
+<pre><code class="typescript"><span class="hl-3">import</span><span class="hl-1"> { </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1"> } </span><span class="hl-3">from</span><span class="hl-1"> </span><span class="hl-2">&quot;@webblackbox/player-sdk&quot;</span><span class="hl-1">;</span><br/><br/><span class="hl-5">// From ArrayBuffer, Uint8Array, or Blob</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">player</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1">.</span><span class="hl-0">open</span><span class="hl-1">(</span><span class="hl-4">archiveBytes</span><span class="hl-1">);</span><br/><br/><span class="hl-5">// With encryption passphrase</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">player</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1">.</span><span class="hl-0">open</span><span class="hl-1">(</span><span class="hl-4">archiveBytes</span><span class="hl-1">, {</span><br/><span class="hl-1">  </span><span class="hl-4">passphrase:</span><span class="hl-1"> </span><span class="hl-2">&quot;my-secret&quot;</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-5">// Preload only a monotonic time window (loads intersecting chunks only)</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">scopedPlayer</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1">.</span><span class="hl-0">open</span><span class="hl-1">(</span><span class="hl-4">archiveBytes</span><span class="hl-1">, {</span><br/><span class="hl-1">  </span><span class="hl-4">range:</span><span class="hl-1"> { </span><span class="hl-4">monoStart:</span><span class="hl-1"> </span><span class="hl-8">12000</span><span class="hl-1">, </span><span class="hl-4">monoEnd:</span><span class="hl-1"> </span><span class="hl-8">45000</span><span class="hl-1"> }</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-5">// Resource limits have safe ceilings and may only be tightened per open.</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">constrainedPlayer</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">WebBlackboxPlayer</span><span class="hl-1">.</span><span class="hl-0">open</span><span class="hl-1">(</span><span class="hl-4">archiveBytes</span><span class="hl-1">, {</span><br/><span class="hl-1">  </span><span class="hl-4">resourceLimits:</span><span class="hl-1"> {</span><br/><span class="hl-1">    </span><span class="hl-4">maxInputBytes:</span><span class="hl-1"> </span><span class="hl-8">32</span><span class="hl-1"> * </span><span class="hl-8">1024</span><span class="hl-1"> * </span><span class="hl-8">1024</span><span class="hl-1">,</span><br/><span class="hl-1">    </span><span class="hl-4">maxEntryCount:</span><span class="hl-1"> </span><span class="hl-8">2_000</span><span class="hl-1">,</span><br/><span class="hl-1">    </span><span class="hl-4">maxEventCount:</span><span class="hl-1"> </span><span class="hl-8">250_000</span><br/><span class="hl-1">  }</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-4">status</span><span class="hl-1">); </span><span class="hl-5">// &quot;loaded&quot;</span><br/><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-4">archive</span><span class="hl-1">.</span><span class="hl-4">manifest</span><span class="hl-1">); </span><span class="hl-5">// ExportManifest</span><br/><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-4">events</span><span class="hl-1">.</span><span class="hl-4">length</span><span class="hl-1">); </span><span class="hl-5">// Total event count</span>
 </code><button type="button">Copy</button></pre>
 
+<p>The built-in ceilings are 256 MiB input, 10,000 physical ZIP entries, 128 MiB per expanded
+entry, 256 MiB total ZIP expansion, 8 MiB per/24 MiB total JSON metadata, 10,000x compression
+ratio, 1,000,000 events, 500,000 index records, 2,000,000 index event references, 32 MiB per
+decoded event chunk, 64 MiB total decoded event bytes, and 5 seconds per ZIP/codec stream.
+Actual inflater output is counted; declared ZIP sizes are only an early-rejection hint. Values
+supplied through <code>resourceLimits</code> may only be lower than these ceilings.</p>
 <h3 id="querying-events" class="tsd-anchor-link">Querying Events<a href="#querying-events" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h3>
 <pre><code class="typescript"><span class="hl-5">// Get all events</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">allEvents</span><span class="hl-1"> = </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">query</span><span class="hl-1">();</span><br/><br/><span class="hl-5">// Filter by type</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">networkEvents</span><span class="hl-1"> = </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">query</span><span class="hl-1">({</span><br/><span class="hl-1">  </span><span class="hl-4">types:</span><span class="hl-1"> [</span><span class="hl-2">&quot;network.request&quot;</span><span class="hl-1">, </span><span class="hl-2">&quot;network.response&quot;</span><span class="hl-1">]</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-5">// Filter by level</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">errors</span><span class="hl-1"> = </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">query</span><span class="hl-1">({</span><br/><span class="hl-1">  </span><span class="hl-4">levels:</span><span class="hl-1"> [</span><span class="hl-2">&quot;error&quot;</span><span class="hl-1">]</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-5">// Filter by time range (monotonic timestamps)</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">firstMinute</span><span class="hl-1"> = </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">query</span><span class="hl-1">({</span><br/><span class="hl-1">  </span><span class="hl-4">range:</span><span class="hl-1"> { </span><span class="hl-4">monoStart:</span><span class="hl-1"> </span><span class="hl-8">0</span><span class="hl-1">, </span><span class="hl-4">monoEnd:</span><span class="hl-1"> </span><span class="hl-8">60000</span><span class="hl-1"> }</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-5">// Text search within events</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">matches</span><span class="hl-1"> = </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">query</span><span class="hl-1">({</span><br/><span class="hl-1">  </span><span class="hl-4">text:</span><span class="hl-1"> </span><span class="hl-2">&quot;TypeError&quot;</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-5">// Filter by request ID</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">requestEvents</span><span class="hl-1"> = </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">query</span><span class="hl-1">({</span><br/><span class="hl-1">  </span><span class="hl-4">requestId:</span><span class="hl-1"> </span><span class="hl-2">&quot;R-12345&quot;</span><br/><span class="hl-1">});</span><br/><br/><span class="hl-5">// Combine filters with pagination</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">page</span><span class="hl-1"> = </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">query</span><span class="hl-1">({</span><br/><span class="hl-1">  </span><span class="hl-4">types:</span><span class="hl-1"> [</span><span class="hl-2">&quot;error.exception&quot;</span><span class="hl-1">],</span><br/><span class="hl-1">  </span><span class="hl-4">levels:</span><span class="hl-1"> [</span><span class="hl-2">&quot;error&quot;</span><span class="hl-1">],</span><br/><span class="hl-1">  </span><span class="hl-4">range:</span><span class="hl-1"> { </span><span class="hl-4">monoStart:</span><span class="hl-1"> </span><span class="hl-8">0</span><span class="hl-1">, </span><span class="hl-4">monoEnd:</span><span class="hl-1"> </span><span class="hl-8">120000</span><span class="hl-1"> },</span><br/><span class="hl-1">  </span><span class="hl-4">limit:</span><span class="hl-1"> </span><span class="hl-8">50</span><span class="hl-1">,</span><br/><span class="hl-1">  </span><span class="hl-4">offset:</span><span class="hl-1"> </span><span class="hl-8">0</span><br/><span class="hl-1">});</span>
 </code><button type="button">Copy</button></pre>
@@ -30,7 +58,7 @@ <h3 id="full-text-search" class="tsd-anchor-link">Full-Text Search<a href="#full
 </code><button type="button">Copy</button></pre>
 
 <h3 id="blob-retrieval" class="tsd-anchor-link">Blob Retrieval<a href="#blob-retrieval" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h3>
-<pre><code class="typescript"><span class="hl-5">// Get binary blob by hash (screenshots, DOM snapshots, response bodies)</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">blob</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">getBlob</span><span class="hl-1">(</span><span class="hl-2">&quot;abc123...&quot;</span><span class="hl-1">);</span><br/><span class="hl-3">if</span><span class="hl-1"> (</span><span class="hl-4">blob</span><span class="hl-1">) {</span><br/><span class="hl-1">  </span><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">blob</span><span class="hl-1">.</span><span class="hl-4">mime</span><span class="hl-1">); </span><span class="hl-5">// &quot;image/webp&quot;</span><br/><span class="hl-1">  </span><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">blob</span><span class="hl-1">.</span><span class="hl-4">bytes</span><span class="hl-1">); </span><span class="hl-5">// Uint8Array</span><br/><span class="hl-1">}</span>
+<pre><code class="typescript"><span class="hl-5">// Get binary blob by hash (screenshots, DOM snapshots, response bodies)</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">blob</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">getBlob</span><span class="hl-1">(</span><span class="hl-2">&quot;abc123...&quot;</span><span class="hl-1">);</span><br/><span class="hl-3">if</span><span class="hl-1"> (</span><span class="hl-4">blob</span><span class="hl-1">) {</span><br/><span class="hl-1">  </span><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">blob</span><span class="hl-1">.</span><span class="hl-4">mime</span><span class="hl-1">); </span><span class="hl-5">// &quot;image/webp&quot;</span><br/><span class="hl-1">  </span><span class="hl-4">console</span><span class="hl-1">.</span><span class="hl-0">log</span><span class="hl-1">(</span><span class="hl-4">blob</span><span class="hl-1">.</span><span class="hl-4">bytes</span><span class="hl-1">); </span><span class="hl-5">// Uint8Array</span><br/><span class="hl-1">}</span><br/><br/><span class="hl-5">// Trusted analyzers can enforce a per-read ceiling without populating the</span><br/><span class="hl-5">// Player blob cache. Integrity and decryption checks are still applied.</span><br/><span class="hl-6">const</span><span class="hl-1"> </span><span class="hl-7">transient</span><span class="hl-1"> = </span><span class="hl-3">await</span><span class="hl-1"> </span><span class="hl-4">player</span><span class="hl-1">.</span><span class="hl-0">readBlobTransient</span><span class="hl-1">(</span><span class="hl-2">&quot;abc123...&quot;</span><span class="hl-1">, </span><span class="hl-8">2</span><span class="hl-1"> * </span><span class="hl-8">1024</span><span class="hl-1"> * </span><span class="hl-8">1024</span><span class="hl-1">);</span>
 </code><button type="button">Copy</button></pre>
 
 <h2 id="analysis-apis" class="tsd-anchor-link">Analysis APIs<a href="#analysis-apis" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2>
@@ -88,7 +116,48 @@ <h2 id="session-comparison" class="tsd-anchor-link">Session Comparison<a href="#
 </code><button type="button">Copy</button></pre>
 
 <h2 id="types" class="tsd-anchor-link">Types<a href="#types" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2>
-<pre><code class="typescript"><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerStatus</span><span class="hl-1"> = </span><span class="hl-2">&quot;idle&quot;</span><span class="hl-1"> | </span><span class="hl-2">&quot;loaded&quot;</span><span class="hl-1">;</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerOpenInput</span><span class="hl-1"> = </span><span class="hl-10">ArrayBuffer</span><span class="hl-1"> | </span><span class="hl-10">Uint8Array</span><span class="hl-1"> | </span><span class="hl-10">Blob</span><span class="hl-1">;</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerOpenOptions</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">passphrase</span><span class="hl-1">?: </span><span class="hl-10">string</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">range</span><span class="hl-1">?: </span><span class="hl-10">PlayerRange</span><span class="hl-1">;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerQuery</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">range</span><span class="hl-1">?: </span><span class="hl-10">PlayerRange</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">types</span><span class="hl-1">?: </span><span class="hl-10">WebBlackboxEventType</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">levels</span><span class="hl-1">?: </span><span class="hl-10">EventLevel</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">text</span><span class="hl-1">?: </span><span class="hl-10">string</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">requestId</span><span class="hl-1">?: </span><span class="hl-10">string</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">limit</span><span class="hl-1">?: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">offset</span><span class="hl-1">?: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerRange</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">monoStart</span><span class="hl-1">?: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">monoEnd</span><span class="hl-1">?: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerSearchResult</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">eventId</span><span class="hl-1">: </span><span class="hl-10">string</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">score</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">event</span><span class="hl-1">: </span><span class="hl-10">WebBlackboxEvent</span><span class="hl-1">;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerArchive</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">manifest</span><span class="hl-1">: </span><span class="hl-10">ExportManifest</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">timeIndex</span><span class="hl-1">: </span><span class="hl-10">ChunkTimeIndexEntry</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">requestIndex</span><span class="hl-1">: </span><span class="hl-10">RequestIndexEntry</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">invertedIndex</span><span class="hl-1">: </span><span class="hl-10">InvertedIndexEntry</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">integrity</span><span class="hl-1">: </span><span class="hl-10">HashesManifest</span><span class="hl-1">;</span><br/><span class="hl-1">};</span>
-</code><button type="button">Copy</button></pre>
-
-</div></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><a href="#webblackboxplayer-sdk"><span>@webblackbox/player-<wbr/>sdk</span></a><ul><li><a href="#overview"><span>Overview</span></a></li><li><a href="#installation"><span>Installation</span></a></li><li><a href="#usage"><span>Usage</span></a></li><li><ul><li><a href="#opening-an-archive"><span>Opening an <wbr/>Archive</span></a></li><li><a href="#querying-events"><span>Querying <wbr/>Events</span></a></li><li><a href="#full-text-search"><span>Full-<wbr/>Text <wbr/>Search</span></a></li><li><a href="#blob-retrieval"><span>Blob <wbr/>Retrieval</span></a></li></ul></li><li><a href="#analysis-apis"><span>Analysis <wbr/>AP<wbr/>Is</span></a></li><li><ul><li><a href="#network-waterfall"><span>Network <wbr/>Waterfall</span></a></li><li><a href="#realtime-network-timeline-websocket-sse"><span>Realtime <wbr/>Network <wbr/>Timeline (<wbr/>Web<wbr/>Socket / <wbr/>SSE)</span></a></li><li><a href="#request-detail"><span>Request <wbr/>Detail</span></a></li><li><a href="#storage-timeline"><span>Storage <wbr/>Timeline</span></a></li><li><a href="#dom-analysis"><span>DOM <wbr/>Analysis</span></a></li><li><a href="#performance-artifacts"><span>Performance <wbr/>Artifacts</span></a></li><li><a href="#action-span-analysis"><span>Action <wbr/>Span <wbr/>Analysis</span></a></li></ul></li><li><a href="#code-generation"><span>Code <wbr/>Generation</span></a></li><li><ul><li><a href="#curl-fetch"><span>curl / fetch</span></a></li><li><a href="#har-export"><span>HAR <wbr/>Export</span></a></li><li><a href="#bug-report"><span>Bug <wbr/>Report</span></a></li><li><a href="#playwright-scripts"><span>Playwright <wbr/>Scripts</span></a></li><li><a href="#issue-templates"><span>Issue <wbr/>Templates</span></a></li></ul></li><li><a href="#session-comparison"><span>Session <wbr/>Comparison</span></a></li><li><a href="#types"><span>Types</span></a></li></ul></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<pre><code class="typescript"><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerStatus</span><span class="hl-1"> = </span><span class="hl-2">&quot;idle&quot;</span><span class="hl-1"> | </span><span class="hl-2">&quot;loaded&quot;</span><span class="hl-1">;</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerOpenInput</span><span class="hl-1"> = </span><span class="hl-10">ArrayBuffer</span><span class="hl-1"> | </span><span class="hl-10">Uint8Array</span><span class="hl-1"> | </span><span class="hl-10">Blob</span><span class="hl-1">;</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerOpenOptions</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">passphrase</span><span class="hl-1">?: </span><span class="hl-10">string</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">range</span><span class="hl-1">?: </span><span class="hl-10">PlayerRange</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">resourceLimits</span><span class="hl-1">?: </span><span class="hl-10">Partial</span><span class="hl-1">&lt;</span><span class="hl-10">ArchiveResourceLimits</span><span class="hl-1">&gt;;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">ArchiveResourceLimits</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">maxInputBytes</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxEntryCount</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxEntryUncompressedBytes</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxTotalUncompressedBytes</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxMetadataEntryBytes</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxTotalMetadataBytes</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxCompressionRatio</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxEventCount</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxIndexRecords</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxIndexEventReferences</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxChunkDecodedBytes</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">maxTotalDecodedBytes</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">decodeTimeoutMs</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerQuery</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">range</span><span class="hl-1">?: </span><span class="hl-10">PlayerRange</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">types</span><span class="hl-1">?: </span><span class="hl-10">WebBlackboxEventType</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">levels</span><span class="hl-1">?: </span><span class="hl-10">EventLevel</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">text</span><span class="hl-1">?: </span><span class="hl-10">string</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">requestId</span><span class="hl-1">?: </span><span class="hl-10">string</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">limit</span><span class="hl-1">?: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">offset</span><span class="hl-1">?: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerRange</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">monoStart</span><span class="hl-1">?: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">monoEnd</span><span class="hl-1">?: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerSearchResult</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">eventId</span><span class="hl-1">: </span><span class="hl-10">string</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">score</span><span class="hl-1">: </span><span class="hl-10">number</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">event</span><span class="hl-1">: </span><span class="hl-10">WebBlackboxEvent</span><span class="hl-1">;</span><br/><span class="hl-1">};</span><br/><br/><span class="hl-6">type</span><span class="hl-1"> </span><span class="hl-10">PlayerArchive</span><span class="hl-1"> = {</span><br/><span class="hl-1">  </span><span class="hl-4">manifest</span><span class="hl-1">: </span><span class="hl-10">ExportManifest</span><span class="hl-1">;</span><br/><span class="hl-1">  </span><span class="hl-4">timeIndex</span><span class="hl-1">: </span><span class="hl-10">ChunkTimeIndexEntry</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">requestIndex</span><span class="hl-1">: </span><span class="hl-10">RequestIndexEntry</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">invertedIndex</span><span class="hl-1">: </span><span class="hl-10">InvertedIndexEntry</span><span class="hl-1">[];</span><br/><span class="hl-1">  </span><span class="hl-4">integrity</span><span class="hl-1">: </span><span class="hl-10">HashesManifest</span><span class="hl-1">;</span><br/><span class="hl-1">};</span>
+</code><button type="button">Copy</button></pre>
+
+<h2 id="license" class="tsd-anchor-link">License<a href="#license" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2>
+<p><a href="https://github.com/webllm/webblackbox/blob/main/LICENSE">MIT</a></p>
+</div></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details"><a href="#overview"><span>Overview</span></a><a href="#installation"><span>Installation</span></a><a href="#usage"><span>Usage</span></a>
+<ul>
+<li><a href="#opening-an-archive"><span>Opening an <wbr/>Archive</span></a></li>
+<li><a href="#querying-events"><span>Querying <wbr/>Events</span></a></li>
+<li><a href="#full-text-search"><span>Full-<wbr/>Text <wbr/>Search</span></a></li>
+<li><a href="#blob-retrieval"><span>Blob <wbr/>Retrieval</span></a></li></ul><a href="#analysis-apis"><span>Analysis <wbr/>AP<wbr/>Is</span></a>
+<ul>
+<li><a href="#network-waterfall"><span>Network <wbr/>Waterfall</span></a></li>
+<li><a href="#realtime-network-timeline-websocket-sse"><span>Realtime <wbr/>Network <wbr/>Timeline (<wbr/>Web<wbr/>Socket / <wbr/>SSE)</span></a></li>
+<li><a href="#request-detail"><span>Request <wbr/>Detail</span></a></li>
+<li><a href="#storage-timeline"><span>Storage <wbr/>Timeline</span></a></li>
+<li><a href="#dom-analysis"><span>DOM <wbr/>Analysis</span></a></li>
+<li><a href="#performance-artifacts"><span>Performance <wbr/>Artifacts</span></a></li>
+<li><a href="#action-span-analysis"><span>Action <wbr/>Span <wbr/>Analysis</span></a></li></ul><a href="#code-generation"><span>Code <wbr/>Generation</span></a>
+<ul>
+<li><a href="#curl-fetch"><span>curl / fetch</span></a></li>
+<li><a href="#har-export"><span>HAR <wbr/>Export</span></a></li>
+<li><a href="#bug-report"><span>Bug <wbr/>Report</span></a></li>
+<li><a href="#playwright-scripts"><span>Playwright <wbr/>Scripts</span></a></li>
+<li><a href="#issue-templates"><span>Issue <wbr/>Templates</span></a></li></ul><a href="#session-comparison"><span>Session <wbr/>Comparison</span></a><a href="#types"><span>Types</span></a><a href="#license"><span>License</span></a></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/modules.html b/docs/api/player-sdk/modules.html
index 0798aa8..88e47af 100644
--- a/docs/api/player-sdk/modules.html
+++ b/docs/api/player-sdk/modules.html
@@ -1 +1,47 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="./"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>@webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="assets/style.css"/><link rel="stylesheet" href="assets/highlight.css"/><script defer src="assets/main.js"></script><script async src="assets/icons.js" id="tsd-icons-script"></script><script async src="assets/search.js" id="tsd-search-script"></script><script async src="assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"></ul><h1>@webblackbox/player-sdk API</h1></div><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Classes"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg><h2>Classes</h2></summary><dl class="tsd-member-summaries"><dt class="tsd-member-summary" id="webblackboxplayer"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><a href="classes/WebBlackboxPlayer.html">WebBlackboxPlayer</a><a href="#webblackboxplayer" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd></dl></details><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Type Aliases"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg><h2>Type Aliases</h2></summary><dl class="tsd-member-summaries"><dt class="tsd-member-summary" id="playerstatus"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerStatus.html">PlayerStatus</a><a href="#playerstatus" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playeropeninput"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerOpenInput.html">PlayerOpenInput</a><a href="#playeropeninput" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playeropenoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerOpenOptions.html">PlayerOpenOptions</a><a href="#playeropenoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerrange"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerRange.html">PlayerRange</a><a href="#playerrange" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerquery"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerQuery.html">PlayerQuery</a><a href="#playerquery" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playersearchresult"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerSearchResult.html">PlayerSearchResult</a><a href="#playersearchresult" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="actionspan"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/ActionSpan.html">ActionSpan</a><a href="#actionspan" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="actiontimelineentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/ActionTimelineEntry.html">ActionTimelineEntry</a><a href="#actiontimelineentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerderivedview"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerDerivedView.html">PlayerDerivedView</a><a href="#playerderivedview" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerarchive"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerArchive.html">PlayerArchive</a><a href="#playerarchive" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="networkwaterfallentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/NetworkWaterfallEntry.html">NetworkWaterfallEntry</a><a href="#networkwaterfallentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="realtimenetworkentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/RealtimeNetworkEntry.html">RealtimeNetworkEntry</a><a href="#realtimenetworkentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="storagetimelineentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/StorageTimelineEntry.html">StorageTimelineEntry</a><a href="#storagetimelineentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="performanceartifactentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PerformanceArtifactEntry.html">PerformanceArtifactEntry</a><a href="#performanceartifactentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playercomparison"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerComparison.html">PlayerComparison</a><a href="#playercomparison" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="storagecomparison"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/StorageComparison.html">StorageComparison</a><a href="#storagecomparison" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="bugreportoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/BugReportOptions.html">BugReportOptions</a><a href="#bugreportoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playwrightscriptoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlaywrightScriptOptions.html">PlaywrightScriptOptions</a><a href="#playwrightscriptoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playwrightmockscriptoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlaywrightMockScriptOptions.html">PlaywrightMockScriptOptions</a><a href="#playwrightmockscriptoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="teamissuetemplateoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/TeamIssueTemplateOptions.html">TeamIssueTemplateOptions</a><a href="#teamissuetemplateoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="githubissuetemplate"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/GitHubIssueTemplate.html">GitHubIssueTemplate</a><a href="#githubissuetemplate" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="jiraissuetemplate"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/JiraIssueTemplate.html">JiraIssueTemplate</a><a href="#jiraissuetemplate" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="domsnapshotref"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/DomSnapshotRef.html">DomSnapshotRef</a><a href="#domsnapshotref" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="domdifftimelineoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/DomDiffTimelineOptions.html">DomDiffTimelineOptions</a><a href="#domdifftimelineoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="domdiffresult"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/DomDiffResult.html">DomDiffResult</a><a href="#domdiffresult" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd></dl></details><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Functions"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg><h2>Functions</h2></summary><dl class="tsd-member-summaries"><dt class="tsd-member-summary" id="getdefaultplayerstatus"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><a href="functions/getDefaultPlayerStatus.html">getDefaultPlayerStatus</a><a href="#getdefaultplayerstatus" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd></dl></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Classes"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>Classes</summary><div><a href="#webblackboxplayer"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><span>Web<wbr/>Blackbox<wbr/>Player</span></a></div></details><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Type Aliases"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>Type Aliases</summary><div><a href="#playerstatus"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Status</span></a><a href="#playeropeninput"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Open<wbr/>Input</span></a><a href="#playeropenoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Open<wbr/>Options</span></a><a href="#playerrange"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Range</span></a><a href="#playerquery"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Query</span></a><a href="#playersearchresult"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Search<wbr/>Result</span></a><a href="#actionspan"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Action<wbr/>Span</span></a><a href="#actiontimelineentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Action<wbr/>Timeline<wbr/>Entry</span></a><a href="#playerderivedview"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Derived<wbr/>View</span></a><a href="#playerarchive"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Archive</span></a><a href="#networkwaterfallentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Network<wbr/>Waterfall<wbr/>Entry</span></a><a href="#realtimenetworkentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Realtime<wbr/>Network<wbr/>Entry</span></a><a href="#storagetimelineentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Storage<wbr/>Timeline<wbr/>Entry</span></a><a href="#performanceartifactentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Performance<wbr/>Artifact<wbr/>Entry</span></a><a href="#playercomparison"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Comparison</span></a><a href="#storagecomparison"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Storage<wbr/>Comparison</span></a><a href="#bugreportoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Bug<wbr/>Report<wbr/>Options</span></a><a href="#playwrightscriptoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Playwright<wbr/>Script<wbr/>Options</span></a><a href="#playwrightmockscriptoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Playwright<wbr/>Mock<wbr/>Script<wbr/>Options</span></a><a href="#teamissuetemplateoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Team<wbr/>Issue<wbr/>Template<wbr/>Options</span></a><a href="#githubissuetemplate"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Git<wbr/>Hub<wbr/>Issue<wbr/>Template</span></a><a href="#jiraissuetemplate"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Jira<wbr/>Issue<wbr/>Template</span></a><a href="#domsnapshotref"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Dom<wbr/>Snapshot<wbr/>Ref</span></a><a href="#domdifftimelineoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Dom<wbr/>Diff<wbr/>Timeline<wbr/>Options</span></a><a href="#domdiffresult"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Dom<wbr/>Diff<wbr/>Result</span></a></div></details><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Functions"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>Functions</summary><div><a href="#getdefaultplayerstatus"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><span>get<wbr/>Default<wbr/>Player<wbr/>Status</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="modules.html" class="current">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<!DOCTYPE html><html class="default" lang="en" data-base="./"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>@webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="assets/style.css"/><link rel="stylesheet" href="assets/highlight.css"/><script defer src="assets/main.js"></script><script async src="assets/icons.js" id="tsd-icons-script"></script><script async src="assets/search.js" id="tsd-search-script"></script><script async src="assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb"></ul>
+<h1>@webblackbox/player-sdk API</h1></div>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Classes"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="classes">Classes<a href="#classes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2></summary><dl class="tsd-member-summaries"><dt class="tsd-member-summary" id="archiveresourcelimiterror"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><a href="classes/ArchiveResourceLimitError.html">ArchiveResourceLimitError</a><a href="#archiveresourcelimiterror" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="archivedecodetimeouterror"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><a href="classes/ArchiveDecodeTimeoutError.html">ArchiveDecodeTimeoutError</a><a href="#archivedecodetimeouterror" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="boundedzipreader"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><a href="classes/BoundedZipReader.html">BoundedZipReader</a><a href="#boundedzipreader" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="webblackboxplayer"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><a href="classes/WebBlackboxPlayer.html">WebBlackboxPlayer</a><a href="#webblackboxplayer" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd></dl></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Type Aliases"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="type-aliases">Type Aliases<a href="#type-aliases" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2></summary><dl class="tsd-member-summaries"><dt class="tsd-member-summary" id="archiveresourcelimits"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/ArchiveResourceLimits.html">ArchiveResourceLimits</a><a href="#archiveresourcelimits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerstatus"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerStatus.html">PlayerStatus</a><a href="#playerstatus" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playeropeninput"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerOpenInput.html">PlayerOpenInput</a><a href="#playeropeninput" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playeropenoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerOpenOptions.html">PlayerOpenOptions</a><a href="#playeropenoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerrange"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerRange.html">PlayerRange</a><a href="#playerrange" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerquery"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerQuery.html">PlayerQuery</a><a href="#playerquery" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playersearchresult"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerSearchResult.html">PlayerSearchResult</a><a href="#playersearchresult" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="actionspan"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/ActionSpan.html">ActionSpan</a><a href="#actionspan" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="actiontimelineentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/ActionTimelineEntry.html">ActionTimelineEntry</a><a href="#actiontimelineentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="replaydiagnosticentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/ReplayDiagnosticEntry.html">ReplayDiagnosticEntry</a><a href="#replaydiagnosticentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="requestresponsediff"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/RequestResponseDiff.html">RequestResponseDiff</a><a href="#requestresponsediff" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerderivedview"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerDerivedView.html">PlayerDerivedView</a><a href="#playerderivedview" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerarchive"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerArchive.html">PlayerArchive</a><a href="#playerarchive" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="privacyprotectionreport"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PrivacyProtectionReport.html">PrivacyProtectionReport</a><a href="#privacyprotectionreport" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="sensitivedatapreview"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/SensitiveDataPreview.html">SensitiveDataPreview</a><a href="#sensitivedatapreview" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="networkwaterfallentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/NetworkWaterfallEntry.html">NetworkWaterfallEntry</a><a href="#networkwaterfallentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="realtimenetworkentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/RealtimeNetworkEntry.html">RealtimeNetworkEntry</a><a href="#realtimenetworkentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="storagetimelineentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/StorageTimelineEntry.html">StorageTimelineEntry</a><a href="#storagetimelineentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="performanceartifactentry"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PerformanceArtifactEntry.html">PerformanceArtifactEntry</a><a href="#performanceartifactentry" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playercomparison"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerComparison.html">PlayerComparison</a><a href="#playercomparison" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="storagecomparison"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/StorageComparison.html">StorageComparison</a><a href="#storagecomparison" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="bugreportoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/BugReportOptions.html">BugReportOptions</a><a href="#bugreportoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playwrightscriptoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlaywrightScriptOptions.html">PlaywrightScriptOptions</a><a href="#playwrightscriptoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playwrightmockscriptoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlaywrightMockScriptOptions.html">PlaywrightMockScriptOptions</a><a href="#playwrightmockscriptoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="teamissuetemplateoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/TeamIssueTemplateOptions.html">TeamIssueTemplateOptions</a><a href="#teamissuetemplateoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="githubissuetemplate"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/GitHubIssueTemplate.html">GitHubIssueTemplate</a><a href="#githubissuetemplate" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="jiraissuetemplate"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/JiraIssueTemplate.html">JiraIssueTemplate</a><a href="#jiraissuetemplate" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="domsnapshotref"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/DomSnapshotRef.html">DomSnapshotRef</a><a href="#domsnapshotref" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="domdifftimelineoptions"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/DomDiffTimelineOptions.html">DomDiffTimelineOptions</a><a href="#domdifftimelineoptions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="domdiffresult"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/DomDiffResult.html">DomDiffResult</a><a href="#domdiffresult" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="playerblob"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><a href="types/PlayerBlob.html">PlayerBlob</a><a href="#playerblob" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd></dl></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Variables"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="variables">Variables<a href="#variables" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2></summary><dl class="tsd-member-summaries"><dt class="tsd-member-summary" id="default_archive_resource_limits"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Variable"><use href="assets/icons.svg#icon-32"></use></svg><a href="variables/DEFAULT_ARCHIVE_RESOURCE_LIMITS.html">DEFAULT_ARCHIVE_RESOURCE_LIMITS</a><a href="#default_archive_resource_limits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd></dl></details>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Functions"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="functions">Functions<a href="#functions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></h2></summary><dl class="tsd-member-summaries"><dt class="tsd-member-summary" id="resolvearchiveresourcelimits"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><a href="functions/resolveArchiveResourceLimits.html">resolveArchiveResourceLimits</a><a href="#resolvearchiveresourcelimits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="assertarchiveinputresourcelimits"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><a href="functions/assertArchiveInputResourceLimits.html">assertArchiveInputResourceLimits</a><a href="#assertarchiveinputresourcelimits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="assertloadedarchiveresourcelimits"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><a href="functions/assertLoadedArchiveResourceLimits.html">assertLoadedArchiveResourceLimits</a><a href="#assertloadedarchiveresourcelimits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd><dt class="tsd-member-summary" id="getdefaultplayerstatus"><span class="tsd-member-summary-name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><a href="functions/getDefaultPlayerStatus.html">getDefaultPlayerStatus</a><a href="#getdefaultplayerstatus" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="assets/icons.svg#icon-anchor"></use></svg></a></span></dt><dd class="tsd-member-summary"></dd></dl></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Classes"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>Classes</summary>
+<div><a href="#archiveresourcelimiterror"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><span>Archive<wbr/>Resource<wbr/>Limit<wbr/>Error</span></a><a href="#archivedecodetimeouterror"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><span>Archive<wbr/>Decode<wbr/>Timeout<wbr/>Error</span></a><a href="#boundedzipreader"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><span>Bounded<wbr/>Zip<wbr/>Reader</span></a><a href="#webblackboxplayer"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Class"><use href="assets/icons.svg#icon-128"></use></svg><span>Web<wbr/>Blackbox<wbr/>Player</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Type Aliases"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>Type Aliases</summary>
+<div><a href="#archiveresourcelimits"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Archive<wbr/>Resource<wbr/>Limits</span></a><a href="#playerstatus"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Status</span></a><a href="#playeropeninput"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Open<wbr/>Input</span></a><a href="#playeropenoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Open<wbr/>Options</span></a><a href="#playerrange"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Range</span></a><a href="#playerquery"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Query</span></a><a href="#playersearchresult"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Search<wbr/>Result</span></a><a href="#actionspan"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Action<wbr/>Span</span></a><a href="#actiontimelineentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Action<wbr/>Timeline<wbr/>Entry</span></a><a href="#replaydiagnosticentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Replay<wbr/>Diagnostic<wbr/>Entry</span></a><a href="#requestresponsediff"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Request<wbr/>Response<wbr/>Diff</span></a><a href="#playerderivedview"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Derived<wbr/>View</span></a><a href="#playerarchive"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Archive</span></a><a href="#privacyprotectionreport"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Privacy<wbr/>Protection<wbr/>Report</span></a><a href="#sensitivedatapreview"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Sensitive<wbr/>Data<wbr/>Preview</span></a><a href="#networkwaterfallentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Network<wbr/>Waterfall<wbr/>Entry</span></a><a href="#realtimenetworkentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Realtime<wbr/>Network<wbr/>Entry</span></a><a href="#storagetimelineentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Storage<wbr/>Timeline<wbr/>Entry</span></a><a href="#performanceartifactentry"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Performance<wbr/>Artifact<wbr/>Entry</span></a><a href="#playercomparison"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Comparison</span></a><a href="#storagecomparison"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Storage<wbr/>Comparison</span></a><a href="#bugreportoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Bug<wbr/>Report<wbr/>Options</span></a><a href="#playwrightscriptoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Playwright<wbr/>Script<wbr/>Options</span></a><a href="#playwrightmockscriptoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Playwright<wbr/>Mock<wbr/>Script<wbr/>Options</span></a><a href="#teamissuetemplateoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Team<wbr/>Issue<wbr/>Template<wbr/>Options</span></a><a href="#githubissuetemplate"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Git<wbr/>Hub<wbr/>Issue<wbr/>Template</span></a><a href="#jiraissuetemplate"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Jira<wbr/>Issue<wbr/>Template</span></a><a href="#domsnapshotref"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Dom<wbr/>Snapshot<wbr/>Ref</span></a><a href="#domdifftimelineoptions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Dom<wbr/>Diff<wbr/>Timeline<wbr/>Options</span></a><a href="#domdiffresult"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Dom<wbr/>Diff<wbr/>Result</span></a><a href="#playerblob"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Type Alias"><use href="assets/icons.svg#icon-2097152"></use></svg><span>Player<wbr/>Blob</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Variables"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>Variables</summary>
+<div><a href="#default_archive_resource_limits"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Variable"><use href="assets/icons.svg#icon-32"></use></svg><span>DEFAULT_<wbr/>ARCHIVE_<wbr/>RESOURCE_<wbr/>LIMITS</span></a></div></details>
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Functions"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="assets/icons.svg#icon-chevronDown"></use></svg>Functions</summary>
+<div><a href="#resolvearchiveresourcelimits"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><span>resolve<wbr/>Archive<wbr/>Resource<wbr/>Limits</span></a><a href="#assertarchiveinputresourcelimits"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><span>assert<wbr/>Archive<wbr/>Input<wbr/>Resource<wbr/>Limits</span></a><a href="#assertloadedarchiveresourcelimits"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><span>assert<wbr/>Loaded<wbr/>Archive<wbr/>Resource<wbr/>Limits</span></a><a href="#getdefaultplayerstatus"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Function"><use href="assets/icons.svg#icon-64"></use></svg><span>get<wbr/>Default<wbr/>Player<wbr/>Status</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="modules.html" class="current">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/ActionSpan.html b/docs/api/player-sdk/types/ActionSpan.html
index dfa3017..99c2b21 100644
--- a/docs/api/player-sdk/types/ActionSpan.html
+++ b/docs/api/player-sdk/types/ActionSpan.html
@@ -1,9 +1,93 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>ActionSpan | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">ActionSpan</a></li></ul><h1>Type Alias ActionSpan</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Aggregated user action span.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">ActionSpan</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#actid">actId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#startmono">startMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endmono">endMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventids">eventIds</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#triggereventid">triggerEventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestcount">requestCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errorcount">errorCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L52">index.ts:52</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#actid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>ActionSpan | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">ActionSpan</a></li></ul>
+<h1>Type Alias ActionSpan</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Aggregated user action span.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">ActionSpan</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#actid">actId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#startmono">startMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endmono">endMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventids">eventIds</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#triggereventid">triggerEventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestcount">requestCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errorcount">errorCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L92">packages/player-sdk/src/index.ts:92</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#actid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a>
 <a href="#startmono" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Mono</span></a>
 <a href="#endmono" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Mono</span></a>
 <a href="#eventids" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Ids</span></a>
 <a href="#triggereventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Event<wbr/>Id</span></a>
 <a href="#requestcount" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Count</span></a>
 <a href="#errorcount" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Count</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="actid"><span>act<wbr/>Id</span><a href="#actid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">actId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L53">index.ts:53</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="startmono"><span>start<wbr/>Mono</span><a href="#startmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">startMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L54">index.ts:54</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="endmono"><span>end<wbr/>Mono</span><a href="#endmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">endMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L55">index.ts:55</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventids"><span>event<wbr/>Ids</span><a href="#eventids" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventIds</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L56">index.ts:56</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="triggereventid"><span>trigger<wbr/>Event<wbr/>Id</span><a href="#triggereventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">triggerEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L57">index.ts:57</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="requestcount"><span>request<wbr/>Count</span><a href="#requestcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">requestCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L58">index.ts:58</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="errorcount"><span>error<wbr/>Count</span><a href="#errorcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">errorCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L59">index.ts:59</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#actid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a><a href="#startmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Mono</span></a><a href="#endmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Mono</span></a><a href="#eventids"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Ids</span></a><a href="#triggereventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Event<wbr/>Id</span></a><a href="#requestcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Count</span></a><a href="#errorcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Count</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="actid"><span>act<wbr/>Id</span><a href="#actid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">actId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L93">packages/player-sdk/src/index.ts:93</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="startmono"><span>start<wbr/>Mono</span><a href="#startmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">startMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L94">packages/player-sdk/src/index.ts:94</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="endmono"><span>end<wbr/>Mono</span><a href="#endmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">endMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L95">packages/player-sdk/src/index.ts:95</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventids"><span>event<wbr/>Ids</span><a href="#eventids" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventIds</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L96">packages/player-sdk/src/index.ts:96</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="triggereventid"><span>trigger<wbr/>Event<wbr/>Id</span><a href="#triggereventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">triggerEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L97">packages/player-sdk/src/index.ts:97</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestcount"><span>request<wbr/>Count</span><a href="#requestcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L98">packages/player-sdk/src/index.ts:98</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="errorcount"><span>error<wbr/>Count</span><a href="#errorcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">errorCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L99">packages/player-sdk/src/index.ts:99</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#actid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a><a href="#startmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Mono</span></a><a href="#endmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Mono</span></a><a href="#eventids"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Ids</span></a><a href="#triggereventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Event<wbr/>Id</span></a><a href="#requestcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Count</span></a><a href="#errorcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Count</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/ActionTimelineEntry.html b/docs/api/player-sdk/types/ActionTimelineEntry.html
index c89ea77..f085229 100644
--- a/docs/api/player-sdk/types/ActionTimelineEntry.html
+++ b/docs/api/player-sdk/types/ActionTimelineEntry.html
@@ -1,5 +1,29 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>ActionTimelineEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">ActionTimelineEntry</a></li></ul><h1>Type Alias ActionTimelineEntry</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Action timeline row with network/error/screenshot context.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">ActionTimelineEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#actid">actId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#triggereventid">triggerEventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#triggertype">triggerType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#startmono">startMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endmono">endMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#durationms">durationMs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventcount">eventCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestcount">requestCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errorcount">errorCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requests">requests</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">failed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">durationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errors">errors</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">message</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#screenshot">screenshot</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">shotId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">format</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">size</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L63">index.ts:63</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#actid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>ActionTimelineEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">ActionTimelineEntry</a></li></ul>
+<h1>Type Alias ActionTimelineEntry</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Action timeline row with network/error/screenshot context.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">ActionTimelineEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#actid">actId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#triggereventid">triggerEventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#triggertype">triggerType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#startmono">startMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endmono">endMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#durationms">durationMs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventcount">eventCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestcount">requestCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errorcount">errorCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requests">requests</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">failed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">durationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errors">errors</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">message</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#screenshot">screenshot</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">shotId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">format</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">size</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L103">packages/player-sdk/src/index.ts:103</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#actid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a>
 <a href="#triggereventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Event<wbr/>Id</span></a>
 <a href="#triggertype" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Type</span></a>
 <a href="#startmono" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Mono</span></a>
@@ -11,4 +35,89 @@
 <a href="#requests" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>requests</span></a>
 <a href="#errors" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>errors</span></a>
 <a href="#screenshot" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>screenshot</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="actid"><span>act<wbr/>Id</span><a href="#actid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">actId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L64">index.ts:64</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="triggereventid"><span>trigger<wbr/>Event<wbr/>Id</span><a href="#triggereventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">triggerEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L65">index.ts:65</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="triggertype"><span>trigger<wbr/>Type</span><a href="#triggertype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">triggerType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L66">index.ts:66</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="startmono"><span>start<wbr/>Mono</span><a href="#startmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">startMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L67">index.ts:67</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="endmono"><span>end<wbr/>Mono</span><a href="#endmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">endMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L68">index.ts:68</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="durationms"><span>duration<wbr/>Ms</span><a href="#durationms" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">durationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L69">index.ts:69</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventcount"><span>event<wbr/>Count</span><a href="#eventcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L70">index.ts:70</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="requestcount"><span>request<wbr/>Count</span><a href="#requestcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">requestCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L71">index.ts:71</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="errorcount"><span>error<wbr/>Count</span><a href="#errorcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">errorCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L72">index.ts:72</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="requests"><span>requests</span><a href="#requests" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">requests</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">failed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">durationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L73">index.ts:73</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="errors"><span>errors</span><a href="#errors" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">errors</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">message</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L81">index.ts:81</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="screenshot"><span>screenshot</span><a href="#screenshot" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">screenshot</span><span class="tsd-signature-symbol">:</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">shotId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">format</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">size</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L87">index.ts:87</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#actid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a><a href="#triggereventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Event<wbr/>Id</span></a><a href="#triggertype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Type</span></a><a href="#startmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Mono</span></a><a href="#endmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Mono</span></a><a href="#durationms"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>duration<wbr/>Ms</span></a><a href="#eventcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Count</span></a><a href="#requestcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Count</span></a><a href="#errorcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Count</span></a><a href="#requests"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>requests</span></a><a href="#errors"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>errors</span></a><a href="#screenshot"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>screenshot</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="actid"><span>act<wbr/>Id</span><a href="#actid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">actId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L104">packages/player-sdk/src/index.ts:104</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="triggereventid"><span>trigger<wbr/>Event<wbr/>Id</span><a href="#triggereventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">triggerEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L105">packages/player-sdk/src/index.ts:105</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="triggertype"><span>trigger<wbr/>Type</span><a href="#triggertype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">triggerType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L106">packages/player-sdk/src/index.ts:106</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="startmono"><span>start<wbr/>Mono</span><a href="#startmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">startMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L107">packages/player-sdk/src/index.ts:107</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="endmono"><span>end<wbr/>Mono</span><a href="#endmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">endMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L108">packages/player-sdk/src/index.ts:108</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="durationms"><span>duration<wbr/>Ms</span><a href="#durationms" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">durationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L109">packages/player-sdk/src/index.ts:109</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventcount"><span>event<wbr/>Count</span><a href="#eventcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L110">packages/player-sdk/src/index.ts:110</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestcount"><span>request<wbr/>Count</span><a href="#requestcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L111">packages/player-sdk/src/index.ts:111</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="errorcount"><span>error<wbr/>Count</span><a href="#errorcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">errorCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L112">packages/player-sdk/src/index.ts:112</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requests"><span>requests</span><a href="#requests" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requests</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">failed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">durationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L113">packages/player-sdk/src/index.ts:113</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="errors"><span>errors</span><a href="#errors" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">errors</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">message</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L121">packages/player-sdk/src/index.ts:121</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="screenshot"><span>screenshot</span><a href="#screenshot" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">screenshot</span><span class="tsd-signature-symbol">:</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">shotId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">format</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">size</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L127">packages/player-sdk/src/index.ts:127</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#actid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a><a href="#triggereventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Event<wbr/>Id</span></a><a href="#triggertype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Type</span></a><a href="#startmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Mono</span></a><a href="#endmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Mono</span></a><a href="#durationms"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>duration<wbr/>Ms</span></a><a href="#eventcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Count</span></a><a href="#requestcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Count</span></a><a href="#errorcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Count</span></a><a href="#requests"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>requests</span></a><a href="#errors"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>errors</span></a><a href="#screenshot"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>screenshot</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/ArchiveResourceLimits.html b/docs/api/player-sdk/types/ArchiveResourceLimits.html
new file mode 100644
index 0000000..2c20991
--- /dev/null
+++ b/docs/api/player-sdk/types/ArchiveResourceLimits.html
@@ -0,0 +1,129 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>ArchiveResourceLimits | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">ArchiveResourceLimits</a></li></ul>
+<h1>Type Alias ArchiveResourceLimits</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Resource limits applied before and while an archive is opened. Overrides may only tighten them.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">ArchiveResourceLimits</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#maxinputbytes">maxInputBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxentrycount">maxEntryCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxentryuncompressedbytes">maxEntryUncompressedBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxtotaluncompressedbytes">maxTotalUncompressedBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxmetadataentrybytes">maxMetadataEntryBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxtotalmetadatabytes">maxTotalMetadataBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxcompressionratio">maxCompressionRatio</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxeventcount">maxEventCount</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxindexrecords">maxIndexRecords</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxindexeventreferences">maxIndexEventReferences</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxchunkdecodedbytes">maxChunkDecodedBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxtotaldecodedbytes">maxTotalDecodedBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#decodetimeoutms">decodeTimeoutMs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L22">packages/player-sdk/src/archive-resource-limits.ts:22</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#maxinputbytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Input<wbr/>Bytes</span></a>
+<a href="#maxentrycount" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Entry<wbr/>Count</span></a>
+<a href="#maxentryuncompressedbytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Entry<wbr/>Uncompressed<wbr/>Bytes</span></a>
+<a href="#maxtotaluncompressedbytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Total<wbr/>Uncompressed<wbr/>Bytes</span></a>
+<a href="#maxmetadataentrybytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Metadata<wbr/>Entry<wbr/>Bytes</span></a>
+<a href="#maxtotalmetadatabytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Total<wbr/>Metadata<wbr/>Bytes</span></a>
+<a href="#maxcompressionratio" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Compression<wbr/>Ratio</span></a>
+<a href="#maxeventcount" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Event<wbr/>Count</span></a>
+<a href="#maxindexrecords" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Index<wbr/>Records</span></a>
+<a href="#maxindexeventreferences" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Index<wbr/>Event<wbr/>References</span></a>
+<a href="#maxchunkdecodedbytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Chunk<wbr/>Decoded<wbr/>Bytes</span></a>
+<a href="#maxtotaldecodedbytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Total<wbr/>Decoded<wbr/>Bytes</span></a>
+<a href="#decodetimeoutms" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>decode<wbr/>Timeout<wbr/>Ms</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxinputbytes"><span>max<wbr/>Input<wbr/>Bytes</span><a href="#maxinputbytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxInputBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L23">packages/player-sdk/src/archive-resource-limits.ts:23</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxentrycount"><span>max<wbr/>Entry<wbr/>Count</span><a href="#maxentrycount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxEntryCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L24">packages/player-sdk/src/archive-resource-limits.ts:24</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxentryuncompressedbytes"><span>max<wbr/>Entry<wbr/>Uncompressed<wbr/>Bytes</span><a href="#maxentryuncompressedbytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxEntryUncompressedBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L25">packages/player-sdk/src/archive-resource-limits.ts:25</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxtotaluncompressedbytes"><span>max<wbr/>Total<wbr/>Uncompressed<wbr/>Bytes</span><a href="#maxtotaluncompressedbytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxTotalUncompressedBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L26">packages/player-sdk/src/archive-resource-limits.ts:26</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxmetadataentrybytes"><span>max<wbr/>Metadata<wbr/>Entry<wbr/>Bytes</span><a href="#maxmetadataentrybytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxMetadataEntryBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L27">packages/player-sdk/src/archive-resource-limits.ts:27</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxtotalmetadatabytes"><span>max<wbr/>Total<wbr/>Metadata<wbr/>Bytes</span><a href="#maxtotalmetadatabytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxTotalMetadataBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L28">packages/player-sdk/src/archive-resource-limits.ts:28</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxcompressionratio"><span>max<wbr/>Compression<wbr/>Ratio</span><a href="#maxcompressionratio" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxCompressionRatio</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L29">packages/player-sdk/src/archive-resource-limits.ts:29</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxeventcount"><span>max<wbr/>Event<wbr/>Count</span><a href="#maxeventcount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxEventCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L30">packages/player-sdk/src/archive-resource-limits.ts:30</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxindexrecords"><span>max<wbr/>Index<wbr/>Records</span><a href="#maxindexrecords" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxIndexRecords</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L31">packages/player-sdk/src/archive-resource-limits.ts:31</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxindexeventreferences"><span>max<wbr/>Index<wbr/>Event<wbr/>References</span><a href="#maxindexeventreferences" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxIndexEventReferences</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L32">packages/player-sdk/src/archive-resource-limits.ts:32</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxchunkdecodedbytes"><span>max<wbr/>Chunk<wbr/>Decoded<wbr/>Bytes</span><a href="#maxchunkdecodedbytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxChunkDecodedBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L33">packages/player-sdk/src/archive-resource-limits.ts:33</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxtotaldecodedbytes"><span>max<wbr/>Total<wbr/>Decoded<wbr/>Bytes</span><a href="#maxtotaldecodedbytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxTotalDecodedBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L34">packages/player-sdk/src/archive-resource-limits.ts:34</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="decodetimeoutms"><span>decode<wbr/>Timeout<wbr/>Ms</span><a href="#decodetimeoutms" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">decodeTimeoutMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L35">packages/player-sdk/src/archive-resource-limits.ts:35</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#maxinputbytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Input<wbr/>Bytes</span></a><a href="#maxentrycount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Entry<wbr/>Count</span></a><a href="#maxentryuncompressedbytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Entry<wbr/>Uncompressed<wbr/>Bytes</span></a><a href="#maxtotaluncompressedbytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Total<wbr/>Uncompressed<wbr/>Bytes</span></a><a href="#maxmetadataentrybytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Metadata<wbr/>Entry<wbr/>Bytes</span></a><a href="#maxtotalmetadatabytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Total<wbr/>Metadata<wbr/>Bytes</span></a><a href="#maxcompressionratio"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Compression<wbr/>Ratio</span></a><a href="#maxeventcount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Event<wbr/>Count</span></a><a href="#maxindexrecords"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Index<wbr/>Records</span></a><a href="#maxindexeventreferences"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Index<wbr/>Event<wbr/>References</span></a><a href="#maxchunkdecodedbytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Chunk<wbr/>Decoded<wbr/>Bytes</span></a><a href="#maxtotaldecodedbytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Total<wbr/>Decoded<wbr/>Bytes</span></a><a href="#decodetimeoutms"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>decode<wbr/>Timeout<wbr/>Ms</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/BugReportOptions.html b/docs/api/player-sdk/types/BugReportOptions.html
index b286254..b4e51bf 100644
--- a/docs/api/player-sdk/types/BugReportOptions.html
+++ b/docs/api/player-sdk/types/BugReportOptions.html
@@ -1,5 +1,69 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>BugReportOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">BugReportOptions</a></li></ul><h1>Type Alias BugReportOptions</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Bug report generation options.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">BugReportOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#title">title</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxitems">maxItems</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L237">index.ts:237</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#title" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title?</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>BugReportOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">BugReportOptions</a></li></ul>
+<h1>Type Alias BugReportOptions</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Bug report generation options.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">BugReportOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#title">title</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxitems">maxItems</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L349">packages/player-sdk/src/index.ts:349</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#title" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title?</span></a>
 <a href="#range" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range?</span></a>
 <a href="#maxitems" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Items?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="title"><code class="tsd-tag">Optional</code><span>title</span><a href="#title" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">title</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L238">index.ts:238</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L239">index.ts:239</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="maxitems"><code class="tsd-tag">Optional</code><span>max<wbr/>Items</span><a href="#maxitems" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">maxItems</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L240">index.ts:240</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#title"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title</span></a><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#maxitems"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Items</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="title"><code class="tsd-tag">Optional</code><span>title</span><a href="#title" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">title</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L350">packages/player-sdk/src/index.ts:350</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L351">packages/player-sdk/src/index.ts:351</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxitems"><code class="tsd-tag">Optional</code><span>max<wbr/>Items</span><a href="#maxitems" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxItems</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L352">packages/player-sdk/src/index.ts:352</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#title"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title</span></a><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#maxitems"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Items</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/DomDiffResult.html b/docs/api/player-sdk/types/DomDiffResult.html
index 0ff7d0b..1f9f22e 100644
--- a/docs/api/player-sdk/types/DomDiffResult.html
+++ b/docs/api/player-sdk/types/DomDiffResult.html
@@ -1,8 +1,87 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>DomDiffResult | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">DomDiffResult</a></li></ul><h1>Type Alias DomDiffResult</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Result of diffing two DOM snapshots.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">DomDiffResult</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#previous">previous</a><span class="tsd-signature-symbol">:</span> <a href="DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#current">current</a><span class="tsd-signature-symbol">:</span> <a href="DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#addedpaths">addedPaths</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#removedpaths">removedPaths</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#changedpaths">changedPaths</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#summary">summary</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">added</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">removed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">changed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L314">index.ts:314</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#previous" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>previous</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>DomDiffResult | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">DomDiffResult</a></li></ul>
+<h1>Type Alias DomDiffResult</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Result of diffing two DOM snapshots.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">DomDiffResult</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#previous">previous</a><span class="tsd-signature-symbol">:</span> <a href="DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#current">current</a><span class="tsd-signature-symbol">:</span> <a href="DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#addedpaths">addedPaths</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#removedpaths">removedPaths</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#changedpaths">changedPaths</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#summary">summary</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">added</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">removed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">changed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L426">packages/player-sdk/src/index.ts:426</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#previous" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>previous</span></a>
 <a href="#current" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>current</span></a>
 <a href="#addedpaths" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>added<wbr/>Paths</span></a>
 <a href="#removedpaths" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>removed<wbr/>Paths</span></a>
 <a href="#changedpaths" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>changed<wbr/>Paths</span></a>
 <a href="#summary" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>summary</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="previous"><span>previous</span><a href="#previous" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">previous</span><span class="tsd-signature-symbol">:</span> <a href="DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L315">index.ts:315</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="current"><span>current</span><a href="#current" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">current</span><span class="tsd-signature-symbol">:</span> <a href="DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L316">index.ts:316</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="addedpaths"><span>added<wbr/>Paths</span><a href="#addedpaths" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">addedPaths</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L317">index.ts:317</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="removedpaths"><span>removed<wbr/>Paths</span><a href="#removedpaths" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">removedPaths</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L318">index.ts:318</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="changedpaths"><span>changed<wbr/>Paths</span><a href="#changedpaths" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">changedPaths</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L319">index.ts:319</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="summary"><span>summary</span><a href="#summary" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">summary</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">added</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">removed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">changed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L320">index.ts:320</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#previous"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>previous</span></a><a href="#current"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>current</span></a><a href="#addedpaths"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>added<wbr/>Paths</span></a><a href="#removedpaths"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>removed<wbr/>Paths</span></a><a href="#changedpaths"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>changed<wbr/>Paths</span></a><a href="#summary"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>summary</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="previous"><span>previous</span><a href="#previous" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">previous</span><span class="tsd-signature-symbol">:</span> <a href="DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L427">packages/player-sdk/src/index.ts:427</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="current"><span>current</span><a href="#current" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">current</span><span class="tsd-signature-symbol">:</span> <a href="DomSnapshotRef.html" class="tsd-signature-type tsd-kind-type-alias">DomSnapshotRef</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L428">packages/player-sdk/src/index.ts:428</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="addedpaths"><span>added<wbr/>Paths</span><a href="#addedpaths" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">addedPaths</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L429">packages/player-sdk/src/index.ts:429</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="removedpaths"><span>removed<wbr/>Paths</span><a href="#removedpaths" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">removedPaths</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L430">packages/player-sdk/src/index.ts:430</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="changedpaths"><span>changed<wbr/>Paths</span><a href="#changedpaths" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">changedPaths</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L431">packages/player-sdk/src/index.ts:431</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="summary"><span>summary</span><a href="#summary" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">summary</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">added</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">removed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">changed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L432">packages/player-sdk/src/index.ts:432</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#previous"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>previous</span></a><a href="#current"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>current</span></a><a href="#addedpaths"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>added<wbr/>Paths</span></a><a href="#removedpaths"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>removed<wbr/>Paths</span></a><a href="#changedpaths"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>changed<wbr/>Paths</span></a><a href="#summary"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>summary</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/DomDiffTimelineOptions.html b/docs/api/player-sdk/types/DomDiffTimelineOptions.html
index 7d82f4d..0babab5 100644
--- a/docs/api/player-sdk/types/DomDiffTimelineOptions.html
+++ b/docs/api/player-sdk/types/DomDiffTimelineOptions.html
@@ -1,4 +1,63 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>DomDiffTimelineOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">DomDiffTimelineOptions</a></li></ul><h1>Type Alias DomDiffTimelineOptions</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>DOM diff timeline query options.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">DomDiffTimelineOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#limit">limit</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L308">index.ts:308</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#range" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range?</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>DomDiffTimelineOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">DomDiffTimelineOptions</a></li></ul>
+<h1>Type Alias DomDiffTimelineOptions</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>DOM diff timeline query options.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">DomDiffTimelineOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#limit">limit</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L420">packages/player-sdk/src/index.ts:420</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#range" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range?</span></a>
 <a href="#limit" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>limit?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L309">index.ts:309</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="limit"><code class="tsd-tag">Optional</code><span>limit</span><a href="#limit" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L310">index.ts:310</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#limit"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>limit</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L421">packages/player-sdk/src/index.ts:421</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="limit"><code class="tsd-tag">Optional</code><span>limit</span><a href="#limit" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L422">packages/player-sdk/src/index.ts:422</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#limit"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>limit</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/DomSnapshotRef.html b/docs/api/player-sdk/types/DomSnapshotRef.html
index bd06b05..b42fc7e 100644
--- a/docs/api/player-sdk/types/DomSnapshotRef.html
+++ b/docs/api/player-sdk/types/DomSnapshotRef.html
@@ -1,5 +1,29 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>DomSnapshotRef | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">DomSnapshotRef</a></li></ul><h1>Type Alias DomSnapshotRef</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>DOM snapshot reference entry from the timeline.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">DomSnapshotRef</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mono">mono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#t">t</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#snapshotid">snapshotId</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#contenthash">contentHash</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#source">source</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#nodecount">nodeCount</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#reason">reason</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L296">index.ts:296</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>DomSnapshotRef | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">DomSnapshotRef</a></li></ul>
+<h1>Type Alias DomSnapshotRef</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>DOM snapshot reference entry from the timeline.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">DomSnapshotRef</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mono">mono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#t">t</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#snapshotid">snapshotId</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#contenthash">contentHash</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#source">source</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#nodecount">nodeCount</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#reason">reason</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L408">packages/player-sdk/src/index.ts:408</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
 <a href="#mono" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a>
 <a href="#t" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a>
 <a href="#snapshotid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot<wbr/>Id?</span></a>
@@ -7,4 +31,69 @@
 <a href="#source" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>source?</span></a>
 <a href="#nodecount" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>node<wbr/>Count?</span></a>
 <a href="#reason" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L297">index.ts:297</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="mono"><span>mono</span><a href="#mono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L298">index.ts:298</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="t"><span>t</span><a href="#t" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">t</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L299">index.ts:299</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="snapshotid"><code class="tsd-tag">Optional</code><span>snapshot<wbr/>Id</span><a href="#snapshotid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">snapshotId</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L300">index.ts:300</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="contenthash"><code class="tsd-tag">Optional</code><span>content<wbr/>Hash</span><a href="#contenthash" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">contentHash</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L301">index.ts:301</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="source"><code class="tsd-tag">Optional</code><span>source</span><a href="#source" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">source</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L302">index.ts:302</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="nodecount"><code class="tsd-tag">Optional</code><span>node<wbr/>Count</span><a href="#nodecount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">nodeCount</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L303">index.ts:303</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="reason"><code class="tsd-tag">Optional</code><span>reason</span><a href="#reason" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L304">index.ts:304</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#mono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a><a href="#t"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a><a href="#snapshotid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot<wbr/>Id</span></a><a href="#contenthash"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>content<wbr/>Hash</span></a><a href="#source"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>source</span></a><a href="#nodecount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>node<wbr/>Count</span></a><a href="#reason"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L409">packages/player-sdk/src/index.ts:409</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="mono"><span>mono</span><a href="#mono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L410">packages/player-sdk/src/index.ts:410</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="t"><span>t</span><a href="#t" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">t</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L411">packages/player-sdk/src/index.ts:411</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="snapshotid"><code class="tsd-tag">Optional</code><span>snapshot<wbr/>Id</span><a href="#snapshotid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">snapshotId</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L412">packages/player-sdk/src/index.ts:412</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="contenthash"><code class="tsd-tag">Optional</code><span>content<wbr/>Hash</span><a href="#contenthash" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">contentHash</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L413">packages/player-sdk/src/index.ts:413</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="source"><code class="tsd-tag">Optional</code><span>source</span><a href="#source" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">source</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L414">packages/player-sdk/src/index.ts:414</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="nodecount"><code class="tsd-tag">Optional</code><span>node<wbr/>Count</span><a href="#nodecount" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">nodeCount</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L415">packages/player-sdk/src/index.ts:415</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="reason"><code class="tsd-tag">Optional</code><span>reason</span><a href="#reason" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L416">packages/player-sdk/src/index.ts:416</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#mono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a><a href="#t"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a><a href="#snapshotid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot<wbr/>Id</span></a><a href="#contenthash"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>content<wbr/>Hash</span></a><a href="#source"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>source</span></a><a href="#nodecount"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>node<wbr/>Count</span></a><a href="#reason"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/GitHubIssueTemplate.html b/docs/api/player-sdk/types/GitHubIssueTemplate.html
index d6f124a..91d79f3 100644
--- a/docs/api/player-sdk/types/GitHubIssueTemplate.html
+++ b/docs/api/player-sdk/types/GitHubIssueTemplate.html
@@ -1,6 +1,75 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>GitHubIssueTemplate | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">GitHubIssueTemplate</a></li></ul><h1>Type Alias GitHubIssueTemplate</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>GitHub issue payload generated from a session.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">GitHubIssueTemplate</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#title">title</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#body">body</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#labels">labels</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#assignees">assignees</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L270">index.ts:270</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#title" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>GitHubIssueTemplate | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">GitHubIssueTemplate</a></li></ul>
+<h1>Type Alias GitHubIssueTemplate</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>GitHub issue payload generated from a session.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">GitHubIssueTemplate</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#title">title</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#body">body</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#labels">labels</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#assignees">assignees</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L382">packages/player-sdk/src/index.ts:382</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#title" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title</span></a>
 <a href="#body" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>body</span></a>
 <a href="#labels" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>labels</span></a>
 <a href="#assignees" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>assignees</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="title"><span>title</span><a href="#title" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">title</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L271">index.ts:271</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="body"><span>body</span><a href="#body" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">body</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L272">index.ts:272</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="labels"><span>labels</span><a href="#labels" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">labels</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L273">index.ts:273</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="assignees"><span>assignees</span><a href="#assignees" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">assignees</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L274">index.ts:274</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#title"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title</span></a><a href="#body"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>body</span></a><a href="#labels"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>labels</span></a><a href="#assignees"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>assignees</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="title"><span>title</span><a href="#title" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">title</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L383">packages/player-sdk/src/index.ts:383</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="body"><span>body</span><a href="#body" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">body</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L384">packages/player-sdk/src/index.ts:384</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="labels"><span>labels</span><a href="#labels" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">labels</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L385">packages/player-sdk/src/index.ts:385</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="assignees"><span>assignees</span><a href="#assignees" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">assignees</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L386">packages/player-sdk/src/index.ts:386</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#title"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title</span></a><a href="#body"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>body</span></a><a href="#labels"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>labels</span></a><a href="#assignees"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>assignees</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/JiraIssueTemplate.html b/docs/api/player-sdk/types/JiraIssueTemplate.html
index 22fbfd2..bebc854 100644
--- a/docs/api/player-sdk/types/JiraIssueTemplate.html
+++ b/docs/api/player-sdk/types/JiraIssueTemplate.html
@@ -1,3 +1,57 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>JiraIssueTemplate | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">JiraIssueTemplate</a></li></ul><h1>Type Alias JiraIssueTemplate</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Jira issue payload generated from a session.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">JiraIssueTemplate</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#fields">fields</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">summary</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">description</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">issuetype</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">labels</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">project</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">key</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">priority</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L278">index.ts:278</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#fields" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>fields</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="fields"><span>fields</span><a href="#fields" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">fields</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">summary</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">description</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">issuetype</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">labels</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">project</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">key</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">priority</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L279">index.ts:279</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#fields"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>fields</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>JiraIssueTemplate | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">JiraIssueTemplate</a></li></ul>
+<h1>Type Alias JiraIssueTemplate</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Jira issue payload generated from a session.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">JiraIssueTemplate</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#fields">fields</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">summary</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">description</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">issuetype</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">labels</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">project</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">key</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">priority</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L390">packages/player-sdk/src/index.ts:390</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#fields" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>fields</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="fields"><span>fields</span><a href="#fields" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">fields</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">summary</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">description</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">issuetype</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">labels</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">project</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">key</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">priority</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L391">packages/player-sdk/src/index.ts:391</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#fields"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>fields</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/NetworkWaterfallEntry.html b/docs/api/player-sdk/types/NetworkWaterfallEntry.html
index d59eda2..2568a25 100644
--- a/docs/api/player-sdk/types/NetworkWaterfallEntry.html
+++ b/docs/api/player-sdk/types/NetworkWaterfallEntry.html
@@ -1,5 +1,29 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>NetworkWaterfallEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">NetworkWaterfallEntry</a></li></ul><h1>Type Alias NetworkWaterfallEntry</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Normalized request waterfall entry.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">NetworkWaterfallEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#reqid">reqId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#url">url</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#method">method</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#status">status</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#statustext">statusText</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mimetype">mimeType</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#startmono">startMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endmono">endMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#durationms">durationMs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#startwalltime">startWallTime</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endwalltime">endWallTime</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#failed">failed</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errortext">errorText</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#actionid">actionId</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#encodeddatalength">encodedDataLength</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestheaders">requestHeaders</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Record</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#responseheaders">responseHeaders</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Record</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestbodytext">requestBodyText</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#responsebodyhash">responseBodyHash</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#responsebodysize">responseBodySize</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventids">eventIds</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L117">index.ts:117</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#reqid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>req<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>NetworkWaterfallEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">NetworkWaterfallEntry</a></li></ul>
+<h1>Type Alias NetworkWaterfallEntry</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Normalized request waterfall entry.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">NetworkWaterfallEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#reqid">reqId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#url">url</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#method">method</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#status">status</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#statustext">statusText</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mimetype">mimeType</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#startmono">startMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endmono">endMono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#durationms">durationMs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#startwalltime">startWallTime</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endwalltime">endWallTime</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#failed">failed</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errortext">errorText</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#actionid">actionId</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#encodeddatalength">encodedDataLength</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestheaders">requestHeaders</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Record</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#responseheaders">responseHeaders</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Record</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestbodytext">requestBodyText</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#responsebodyhash">responseBodyHash</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#responsebodysize">responseBodySize</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventids">eventIds</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L229">packages/player-sdk/src/index.ts:229</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#reqid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>req<wbr/>Id</span></a>
 <a href="#url" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>url</span></a>
 <a href="#method" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>method</span></a>
 <a href="#status" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status?</span></a>
@@ -20,4 +44,134 @@
 <a href="#responsebodyhash" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Body<wbr/>Hash?</span></a>
 <a href="#responsebodysize" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Body<wbr/>Size?</span></a>
 <a href="#eventids" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Ids</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="reqid"><span>req<wbr/>Id</span><a href="#reqid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L118">index.ts:118</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="url"><span>url</span><a href="#url" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L119">index.ts:119</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="method"><span>method</span><a href="#method" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L120">index.ts:120</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="status"><code class="tsd-tag">Optional</code><span>status</span><a href="#status" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L121">index.ts:121</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="statustext"><code class="tsd-tag">Optional</code><span>status<wbr/>Text</span><a href="#statustext" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">statusText</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L122">index.ts:122</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="mimetype"><code class="tsd-tag">Optional</code><span>mime<wbr/>Type</span><a href="#mimetype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">mimeType</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L123">index.ts:123</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="startmono"><span>start<wbr/>Mono</span><a href="#startmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">startMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L124">index.ts:124</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="endmono"><span>end<wbr/>Mono</span><a href="#endmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">endMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L125">index.ts:125</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="durationms"><span>duration<wbr/>Ms</span><a href="#durationms" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">durationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L126">index.ts:126</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="startwalltime"><span>start<wbr/>Wall<wbr/>Time</span><a href="#startwalltime" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">startWallTime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L127">index.ts:127</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="endwalltime"><span>end<wbr/>Wall<wbr/>Time</span><a href="#endwalltime" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">endWallTime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L128">index.ts:128</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="failed"><span>failed</span><a href="#failed" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">failed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L129">index.ts:129</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="errortext"><code class="tsd-tag">Optional</code><span>error<wbr/>Text</span><a href="#errortext" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">errorText</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L130">index.ts:130</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="actionid"><code class="tsd-tag">Optional</code><span>action<wbr/>Id</span><a href="#actionid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">actionId</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L131">index.ts:131</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="encodeddatalength"><code class="tsd-tag">Optional</code><span>encoded<wbr/>Data<wbr/>Length</span><a href="#encodeddatalength" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">encodedDataLength</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L132">index.ts:132</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="requestheaders"><span>request<wbr/>Headers</span><a href="#requestheaders" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">requestHeaders</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Record</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L133">index.ts:133</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="responseheaders"><span>response<wbr/>Headers</span><a href="#responseheaders" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">responseHeaders</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Record</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L134">index.ts:134</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="requestbodytext"><code class="tsd-tag">Optional</code><span>request<wbr/>Body<wbr/>Text</span><a href="#requestbodytext" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">requestBodyText</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L135">index.ts:135</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="responsebodyhash"><code class="tsd-tag">Optional</code><span>response<wbr/>Body<wbr/>Hash</span><a href="#responsebodyhash" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">responseBodyHash</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L136">index.ts:136</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="responsebodysize"><code class="tsd-tag">Optional</code><span>response<wbr/>Body<wbr/>Size</span><a href="#responsebodysize" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">responseBodySize</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L137">index.ts:137</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventids"><span>event<wbr/>Ids</span><a href="#eventids" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventIds</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L138">index.ts:138</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#reqid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>req<wbr/>Id</span></a><a href="#url"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>url</span></a><a href="#method"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>method</span></a><a href="#status"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status</span></a><a href="#statustext"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status<wbr/>Text</span></a><a href="#mimetype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mime<wbr/>Type</span></a><a href="#startmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Mono</span></a><a href="#endmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Mono</span></a><a href="#durationms"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>duration<wbr/>Ms</span></a><a href="#startwalltime"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Wall<wbr/>Time</span></a><a href="#endwalltime"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Wall<wbr/>Time</span></a><a href="#failed"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>failed</span></a><a href="#errortext"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Text</span></a><a href="#actionid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>action<wbr/>Id</span></a><a href="#encodeddatalength"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>encoded<wbr/>Data<wbr/>Length</span></a><a href="#requestheaders"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Headers</span></a><a href="#responseheaders"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Headers</span></a><a href="#requestbodytext"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Body<wbr/>Text</span></a><a href="#responsebodyhash"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Body<wbr/>Hash</span></a><a href="#responsebodysize"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Body<wbr/>Size</span></a><a href="#eventids"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Ids</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="reqid"><span>req<wbr/>Id</span><a href="#reqid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L230">packages/player-sdk/src/index.ts:230</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="url"><span>url</span><a href="#url" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L231">packages/player-sdk/src/index.ts:231</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="method"><span>method</span><a href="#method" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L232">packages/player-sdk/src/index.ts:232</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="status"><code class="tsd-tag">Optional</code><span>status</span><a href="#status" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L233">packages/player-sdk/src/index.ts:233</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="statustext"><code class="tsd-tag">Optional</code><span>status<wbr/>Text</span><a href="#statustext" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">statusText</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L234">packages/player-sdk/src/index.ts:234</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="mimetype"><code class="tsd-tag">Optional</code><span>mime<wbr/>Type</span><a href="#mimetype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">mimeType</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L235">packages/player-sdk/src/index.ts:235</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="startmono"><span>start<wbr/>Mono</span><a href="#startmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">startMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L236">packages/player-sdk/src/index.ts:236</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="endmono"><span>end<wbr/>Mono</span><a href="#endmono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">endMono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L237">packages/player-sdk/src/index.ts:237</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="durationms"><span>duration<wbr/>Ms</span><a href="#durationms" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">durationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L238">packages/player-sdk/src/index.ts:238</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="startwalltime"><span>start<wbr/>Wall<wbr/>Time</span><a href="#startwalltime" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">startWallTime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L239">packages/player-sdk/src/index.ts:239</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="endwalltime"><span>end<wbr/>Wall<wbr/>Time</span><a href="#endwalltime" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">endWallTime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L240">packages/player-sdk/src/index.ts:240</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="failed"><span>failed</span><a href="#failed" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">failed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L241">packages/player-sdk/src/index.ts:241</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="errortext"><code class="tsd-tag">Optional</code><span>error<wbr/>Text</span><a href="#errortext" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">errorText</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L242">packages/player-sdk/src/index.ts:242</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="actionid"><code class="tsd-tag">Optional</code><span>action<wbr/>Id</span><a href="#actionid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">actionId</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L243">packages/player-sdk/src/index.ts:243</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="encodeddatalength"><code class="tsd-tag">Optional</code><span>encoded<wbr/>Data<wbr/>Length</span><a href="#encodeddatalength" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">encodedDataLength</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L244">packages/player-sdk/src/index.ts:244</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestheaders"><span>request<wbr/>Headers</span><a href="#requestheaders" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestHeaders</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Record</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L245">packages/player-sdk/src/index.ts:245</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="responseheaders"><span>response<wbr/>Headers</span><a href="#responseheaders" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">responseHeaders</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Record</span><span class="tsd-signature-symbol">&lt;</span><span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">&gt;</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L246">packages/player-sdk/src/index.ts:246</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestbodytext"><code class="tsd-tag">Optional</code><span>request<wbr/>Body<wbr/>Text</span><a href="#requestbodytext" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestBodyText</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L247">packages/player-sdk/src/index.ts:247</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="responsebodyhash"><code class="tsd-tag">Optional</code><span>response<wbr/>Body<wbr/>Hash</span><a href="#responsebodyhash" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">responseBodyHash</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L248">packages/player-sdk/src/index.ts:248</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="responsebodysize"><code class="tsd-tag">Optional</code><span>response<wbr/>Body<wbr/>Size</span><a href="#responsebodysize" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">responseBodySize</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L249">packages/player-sdk/src/index.ts:249</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventids"><span>event<wbr/>Ids</span><a href="#eventids" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventIds</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L250">packages/player-sdk/src/index.ts:250</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#reqid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>req<wbr/>Id</span></a><a href="#url"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>url</span></a><a href="#method"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>method</span></a><a href="#status"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status</span></a><a href="#statustext"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status<wbr/>Text</span></a><a href="#mimetype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mime<wbr/>Type</span></a><a href="#startmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Mono</span></a><a href="#endmono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Mono</span></a><a href="#durationms"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>duration<wbr/>Ms</span></a><a href="#startwalltime"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Wall<wbr/>Time</span></a><a href="#endwalltime"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>end<wbr/>Wall<wbr/>Time</span></a><a href="#failed"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>failed</span></a><a href="#errortext"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Text</span></a><a href="#actionid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>action<wbr/>Id</span></a><a href="#encodeddatalength"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>encoded<wbr/>Data<wbr/>Length</span></a><a href="#requestheaders"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Headers</span></a><a href="#responseheaders"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Headers</span></a><a href="#requestbodytext"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Body<wbr/>Text</span></a><a href="#responsebodyhash"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Body<wbr/>Hash</span></a><a href="#responsebodysize"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Body<wbr/>Size</span></a><a href="#eventids"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Ids</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PerformanceArtifactEntry.html b/docs/api/player-sdk/types/PerformanceArtifactEntry.html
index 0dcd208..3f46767 100644
--- a/docs/api/player-sdk/types/PerformanceArtifactEntry.html
+++ b/docs/api/player-sdk/types/PerformanceArtifactEntry.html
@@ -1,5 +1,29 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PerformanceArtifactEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PerformanceArtifactEntry</a></li></ul><h1>Type Alias PerformanceArtifactEntry</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Performance artifact timeline entry.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PerformanceArtifactEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventtype">eventType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#t">t</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mono">mono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#kind">kind</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;trace&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;cpu&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;heap&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;longtask&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;vitals&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;other&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#hash">hash</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#size">size</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#reason">reason</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#snapshot">snapshot</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L174">index.ts:174</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PerformanceArtifactEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PerformanceArtifactEntry</a></li></ul>
+<h1>Type Alias PerformanceArtifactEntry</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Performance artifact timeline entry.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PerformanceArtifactEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventtype">eventType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#t">t</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mono">mono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#kind">kind</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;trace&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;cpu&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;heap&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;longtask&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;vitals&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;other&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#hash">hash</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#size">size</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#reason">reason</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#snapshot">snapshot</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L286">packages/player-sdk/src/index.ts:286</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
 <a href="#eventtype" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a>
 <a href="#t" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a>
 <a href="#mono" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a>
@@ -8,4 +32,74 @@
 <a href="#size" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>size?</span></a>
 <a href="#reason" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason?</span></a>
 <a href="#snapshot" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L175">index.ts:175</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventtype"><span>event<wbr/>Type</span><a href="#eventtype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L176">index.ts:176</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="t"><span>t</span><a href="#t" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">t</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L177">index.ts:177</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="mono"><span>mono</span><a href="#mono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L178">index.ts:178</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="kind"><span>kind</span><a href="#kind" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">kind</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;trace&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;cpu&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;heap&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;longtask&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;vitals&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;other&quot;</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L179">index.ts:179</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="hash"><code class="tsd-tag">Optional</code><span>hash</span><a href="#hash" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">hash</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L180">index.ts:180</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="size"><code class="tsd-tag">Optional</code><span>size</span><a href="#size" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">size</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L181">index.ts:181</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="reason"><code class="tsd-tag">Optional</code><span>reason</span><a href="#reason" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L182">index.ts:182</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="snapshot"><code class="tsd-tag">Optional</code><span>snapshot</span><a href="#snapshot" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">snapshot</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L183">index.ts:183</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#eventtype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a><a href="#t"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a><a href="#mono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a><a href="#kind"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>kind</span></a><a href="#hash"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash</span></a><a href="#size"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>size</span></a><a href="#reason"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason</span></a><a href="#snapshot"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L287">packages/player-sdk/src/index.ts:287</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventtype"><span>event<wbr/>Type</span><a href="#eventtype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L288">packages/player-sdk/src/index.ts:288</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="t"><span>t</span><a href="#t" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">t</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L289">packages/player-sdk/src/index.ts:289</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="mono"><span>mono</span><a href="#mono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L290">packages/player-sdk/src/index.ts:290</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="kind"><span>kind</span><a href="#kind" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">kind</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;trace&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;cpu&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;heap&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;longtask&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;vitals&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;other&quot;</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L291">packages/player-sdk/src/index.ts:291</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="hash"><code class="tsd-tag">Optional</code><span>hash</span><a href="#hash" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">hash</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L292">packages/player-sdk/src/index.ts:292</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="size"><code class="tsd-tag">Optional</code><span>size</span><a href="#size" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">size</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L293">packages/player-sdk/src/index.ts:293</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="reason"><code class="tsd-tag">Optional</code><span>reason</span><a href="#reason" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L294">packages/player-sdk/src/index.ts:294</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="snapshot"><code class="tsd-tag">Optional</code><span>snapshot</span><a href="#snapshot" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">snapshot</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L295">packages/player-sdk/src/index.ts:295</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#eventtype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a><a href="#t"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a><a href="#mono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a><a href="#kind"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>kind</span></a><a href="#hash"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash</span></a><a href="#size"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>size</span></a><a href="#reason"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason</span></a><a href="#snapshot"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerArchive.html b/docs/api/player-sdk/types/PlayerArchive.html
index 0f7c343..3b0c634 100644
--- a/docs/api/player-sdk/types/PlayerArchive.html
+++ b/docs/api/player-sdk/types/PlayerArchive.html
@@ -1,7 +1,87 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerArchive | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerArchive</a></li></ul><h1>Type Alias PlayerArchive</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Parsed archive metadata and indexes.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerArchive</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#manifest">manifest</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ExportManifest</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#timeindex">timeIndex</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ChunkTimeIndexEntry</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestindex">requestIndex</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">RequestIndexEntry</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#invertedindex">invertedIndex</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">InvertedIndexEntry</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#integrity">integrity</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">HashesManifest</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L108">index.ts:108</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#manifest" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>manifest</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerArchive | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerArchive</a></li></ul>
+<h1>Type Alias PlayerArchive</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Parsed archive metadata and indexes.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerArchive</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#manifest">manifest</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ExportManifest</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#timeindex">timeIndex</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ChunkTimeIndexEntry</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestindex">requestIndex</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">RequestIndexEntry</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#invertedindex">invertedIndex</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">InvertedIndexEntry</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#integrity">integrity</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">HashesManifest</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#privacymanifest">privacyManifest</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">PrivacyManifest</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L183">packages/player-sdk/src/index.ts:183</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#manifest" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>manifest</span></a>
 <a href="#timeindex" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>time<wbr/>Index</span></a>
 <a href="#requestindex" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Index</span></a>
 <a href="#invertedindex" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>inverted<wbr/>Index</span></a>
 <a href="#integrity" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>integrity</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="manifest"><span>manifest</span><a href="#manifest" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">manifest</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ExportManifest</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L109">index.ts:109</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="timeindex"><span>time<wbr/>Index</span><a href="#timeindex" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">timeIndex</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ChunkTimeIndexEntry</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L110">index.ts:110</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="requestindex"><span>request<wbr/>Index</span><a href="#requestindex" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">requestIndex</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">RequestIndexEntry</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L111">index.ts:111</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="invertedindex"><span>inverted<wbr/>Index</span><a href="#invertedindex" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">invertedIndex</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">InvertedIndexEntry</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L112">index.ts:112</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="integrity"><span>integrity</span><a href="#integrity" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">integrity</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">HashesManifest</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L113">index.ts:113</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#manifest"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>manifest</span></a><a href="#timeindex"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>time<wbr/>Index</span></a><a href="#requestindex"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Index</span></a><a href="#invertedindex"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>inverted<wbr/>Index</span></a><a href="#integrity"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>integrity</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<a href="#privacymanifest" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>privacy<wbr/>Manifest</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="manifest"><span>manifest</span><a href="#manifest" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">manifest</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ExportManifest</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L184">packages/player-sdk/src/index.ts:184</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="timeindex"><span>time<wbr/>Index</span><a href="#timeindex" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">timeIndex</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ChunkTimeIndexEntry</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L185">packages/player-sdk/src/index.ts:185</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestindex"><span>request<wbr/>Index</span><a href="#requestindex" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestIndex</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">RequestIndexEntry</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L186">packages/player-sdk/src/index.ts:186</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="invertedindex"><span>inverted<wbr/>Index</span><a href="#invertedindex" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">invertedIndex</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">InvertedIndexEntry</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L187">packages/player-sdk/src/index.ts:187</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="integrity"><span>integrity</span><a href="#integrity" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">integrity</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">HashesManifest</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L188">packages/player-sdk/src/index.ts:188</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="privacymanifest"><span>privacy<wbr/>Manifest</span><a href="#privacymanifest" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">privacyManifest</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">PrivacyManifest</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L189">packages/player-sdk/src/index.ts:189</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#manifest"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>manifest</span></a><a href="#timeindex"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>time<wbr/>Index</span></a><a href="#requestindex"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Index</span></a><a href="#invertedindex"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>inverted<wbr/>Index</span></a><a href="#integrity"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>integrity</span></a><a href="#privacymanifest"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>privacy<wbr/>Manifest</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerBlob.html b/docs/api/player-sdk/types/PlayerBlob.html
new file mode 100644
index 0000000..f367410
--- /dev/null
+++ b/docs/api/player-sdk/types/PlayerBlob.html
@@ -0,0 +1,63 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerBlob | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerBlob</a></li></ul>
+<h1>Type Alias PlayerBlob</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Decrypted or plaintext blob content resolved from an archive hash.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerBlob</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#mime">mime</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#bytes">bytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Uint8Array</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L445">packages/player-sdk/src/index.ts:445</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#mime" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mime</span></a>
+<a href="#bytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>bytes</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="mime"><span>mime</span><a href="#mime" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">mime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L446">packages/player-sdk/src/index.ts:446</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="bytes"><span>bytes</span><a href="#bytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">bytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Uint8Array</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L447">packages/player-sdk/src/index.ts:447</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#mime"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mime</span></a><a href="#bytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>bytes</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerComparison.html b/docs/api/player-sdk/types/PlayerComparison.html
index 353649b..117df97 100644
--- a/docs/api/player-sdk/types/PlayerComparison.html
+++ b/docs/api/player-sdk/types/PlayerComparison.html
@@ -1,5 +1,29 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerComparison | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerComparison</a></li></ul><h1>Type Alias PlayerComparison</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Session-vs-session comparison summary.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerComparison</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#leftsessionid">leftSessionId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#rightsessionid">rightSessionId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#leftsid">leftSid</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#rightsid">rightSid</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventdelta">eventDelta</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errordelta">errorDelta</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestdelta">requestDelta</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#durationdeltams">durationDeltaMs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#typedeltas">typeDeltas</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">left</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">right</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">delta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endpointregressions">endpointRegressions</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">endpoint</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">leftCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">rightCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">countDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">leftFailed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">rightFailed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">failedDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">leftFailureRate</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">rightFailureRate</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">failureRateDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">leftP95DurationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">rightP95DurationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">p95DurationDeltaMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L187">index.ts:187</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#leftsessionid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Session<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerComparison | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerComparison</a></li></ul>
+<h1>Type Alias PlayerComparison</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Session-vs-session comparison summary.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerComparison</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#leftsessionid">leftSessionId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#rightsessionid">rightSessionId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#leftsid">leftSid</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#rightsid">rightSid</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventdelta">eventDelta</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errordelta">errorDelta</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestdelta">requestDelta</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#durationdeltams">durationDeltaMs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#typedeltas">typeDeltas</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">left</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">right</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">delta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#endpointregressions">endpointRegressions</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">endpoint</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">leftCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">rightCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">countDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">leftFailed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">rightFailed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">failedDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">leftFailureRate</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">rightFailureRate</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">failureRateDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">leftP95DurationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">rightP95DurationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">p95DurationDeltaMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L299">packages/player-sdk/src/index.ts:299</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#leftsessionid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Session<wbr/>Id</span></a>
 <a href="#rightsessionid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Session<wbr/>Id</span></a>
 <a href="#leftsid" class="tsd-index-link deprecated"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Sid</span></a>
 <a href="#rightsid" class="tsd-index-link deprecated"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Sid</span></a>
@@ -9,6 +33,87 @@
 <a href="#durationdeltams" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>duration<wbr/>Delta<wbr/>Ms</span></a>
 <a href="#typedeltas" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>type<wbr/>Deltas</span></a>
 <a href="#endpointregressions" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>endpoint<wbr/>Regressions</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="leftsessionid"><span>left<wbr/>Session<wbr/>Id</span><a href="#leftsessionid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">leftSessionId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L188">index.ts:188</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="rightsessionid"><span>right<wbr/>Session<wbr/>Id</span><a href="#rightsessionid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">rightSessionId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L189">index.ts:189</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="leftsid"><span class="deprecated">left<wbr/>Sid</span><a href="#leftsid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">leftSid</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><div class="tsd-comment tsd-typography"><div class="tsd-tag-deprecated"><h4 class="tsd-anchor-link" id="deprecated">Deprecated<a href="#deprecated" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h4><p>Use leftSessionId instead.</p>
-</div></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L191">index.ts:191</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="rightsid"><span class="deprecated">right<wbr/>Sid</span><a href="#rightsid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">rightSid</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><div class="tsd-comment tsd-typography"><div class="tsd-tag-deprecated"><h4 class="tsd-anchor-link" id="deprecated-1">Deprecated<a href="#deprecated-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h4><p>Use rightSessionId instead.</p>
-</div></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L193">index.ts:193</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventdelta"><span>event<wbr/>Delta</span><a href="#eventdelta" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L194">index.ts:194</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="errordelta"><span>error<wbr/>Delta</span><a href="#errordelta" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">errorDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L195">index.ts:195</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="requestdelta"><span>request<wbr/>Delta</span><a href="#requestdelta" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">requestDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L196">index.ts:196</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="durationdeltams"><span>duration<wbr/>Delta<wbr/>Ms</span><a href="#durationdeltams" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">durationDeltaMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L197">index.ts:197</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="typedeltas"><span>type<wbr/>Deltas</span><a href="#typedeltas" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">typeDeltas</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">left</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">right</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">delta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L198">index.ts:198</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="endpointregressions"><span>endpoint<wbr/>Regressions</span><a href="#endpointregressions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">endpointRegressions</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">endpoint</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">leftCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">rightCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">countDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">leftFailed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">rightFailed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">failedDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">leftFailureRate</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">rightFailureRate</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">failureRateDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">leftP95DurationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">rightP95DurationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">p95DurationDeltaMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L204">index.ts:204</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#leftsessionid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Session<wbr/>Id</span></a><a href="#rightsessionid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Session<wbr/>Id</span></a><a href="#leftsid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Sid</span></a><a href="#rightsid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Sid</span></a><a href="#eventdelta"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Delta</span></a><a href="#errordelta"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Delta</span></a><a href="#requestdelta"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Delta</span></a><a href="#durationdeltams"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>duration<wbr/>Delta<wbr/>Ms</span></a><a href="#typedeltas"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>type<wbr/>Deltas</span></a><a href="#endpointregressions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>endpoint<wbr/>Regressions</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="leftsessionid"><span>left<wbr/>Session<wbr/>Id</span><a href="#leftsessionid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">leftSessionId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L300">packages/player-sdk/src/index.ts:300</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="rightsessionid"><span>right<wbr/>Session<wbr/>Id</span><a href="#rightsessionid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">rightSessionId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L301">packages/player-sdk/src/index.ts:301</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="leftsid"><span class="deprecated">left<wbr/>Sid</span><a href="#leftsid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">leftSid</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div>
+<div class="tsd-comment tsd-typography">
+<div class="tsd-tag-deprecated">
+<h4 class="tsd-anchor-link" id="deprecated">Deprecated<a href="#deprecated" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h4><p>Use leftSessionId instead.</p>
+</div></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L303">packages/player-sdk/src/index.ts:303</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="rightsid"><span class="deprecated">right<wbr/>Sid</span><a href="#rightsid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">rightSid</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div>
+<div class="tsd-comment tsd-typography">
+<div class="tsd-tag-deprecated">
+<h4 class="tsd-anchor-link" id="deprecated-1">Deprecated<a href="#deprecated-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h4><p>Use rightSessionId instead.</p>
+</div></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L305">packages/player-sdk/src/index.ts:305</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventdelta"><span>event<wbr/>Delta</span><a href="#eventdelta" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L306">packages/player-sdk/src/index.ts:306</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="errordelta"><span>error<wbr/>Delta</span><a href="#errordelta" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">errorDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L307">packages/player-sdk/src/index.ts:307</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestdelta"><span>request<wbr/>Delta</span><a href="#requestdelta" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L308">packages/player-sdk/src/index.ts:308</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="durationdeltams"><span>duration<wbr/>Delta<wbr/>Ms</span><a href="#durationdeltams" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">durationDeltaMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L309">packages/player-sdk/src/index.ts:309</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="typedeltas"><span>type<wbr/>Deltas</span><a href="#typedeltas" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">typeDeltas</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">left</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">right</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">delta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L310">packages/player-sdk/src/index.ts:310</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="endpointregressions"><span>endpoint<wbr/>Regressions</span><a href="#endpointregressions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">endpointRegressions</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">endpoint</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">leftCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">rightCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">countDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">leftFailed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">rightFailed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">failedDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">leftFailureRate</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">rightFailureRate</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">failureRateDelta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">leftP95DurationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">rightP95DurationMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">p95DurationDeltaMs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L316">packages/player-sdk/src/index.ts:316</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#leftsessionid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Session<wbr/>Id</span></a><a href="#rightsessionid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Session<wbr/>Id</span></a><a href="#leftsid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Sid</span></a><a href="#rightsid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Sid</span></a><a href="#eventdelta"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Delta</span></a><a href="#errordelta"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Delta</span></a><a href="#requestdelta"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Delta</span></a><a href="#durationdeltams"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>duration<wbr/>Delta<wbr/>Ms</span></a><a href="#typedeltas"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>type<wbr/>Deltas</span></a><a href="#endpointregressions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>endpoint<wbr/>Regressions</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerDerivedView.html b/docs/api/player-sdk/types/PlayerDerivedView.html
index 4493f36..1348239 100644
--- a/docs/api/player-sdk/types/PlayerDerivedView.html
+++ b/docs/api/player-sdk/types/PlayerDerivedView.html
@@ -1,4 +1,63 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerDerivedView | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerDerivedView</a></li></ul><h1>Type Alias PlayerDerivedView</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Cached derived analysis view.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerDerivedView</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#actionspans">actionSpans</a><span class="tsd-signature-symbol">:</span> <a href="ActionSpan.html" class="tsd-signature-type tsd-kind-type-alias">ActionSpan</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#totals">totals</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">events</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">errors</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">requests</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L98">index.ts:98</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#actionspans" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>action<wbr/>Spans</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerDerivedView | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerDerivedView</a></li></ul>
+<h1>Type Alias PlayerDerivedView</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Cached derived analysis view.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerDerivedView</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#actionspans">actionSpans</a><span class="tsd-signature-symbol">:</span> <a href="ActionSpan.html" class="tsd-signature-type tsd-kind-type-alias">ActionSpan</a><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#totals">totals</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">events</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">errors</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">requests</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L173">packages/player-sdk/src/index.ts:173</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#actionspans" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>action<wbr/>Spans</span></a>
 <a href="#totals" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>totals</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="actionspans"><span>action<wbr/>Spans</span><a href="#actionspans" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">actionSpans</span><span class="tsd-signature-symbol">:</span> <a href="ActionSpan.html" class="tsd-signature-type tsd-kind-type-alias">ActionSpan</a><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L99">index.ts:99</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="totals"><span>totals</span><a href="#totals" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">totals</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">events</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">errors</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">requests</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L100">index.ts:100</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#actionspans"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>action<wbr/>Spans</span></a><a href="#totals"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>totals</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="actionspans"><span>action<wbr/>Spans</span><a href="#actionspans" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">actionSpans</span><span class="tsd-signature-symbol">:</span> <a href="ActionSpan.html" class="tsd-signature-type tsd-kind-type-alias">ActionSpan</a><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L174">packages/player-sdk/src/index.ts:174</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="totals"><span>totals</span><a href="#totals" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">totals</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">events</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">errors</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span> <span class="tsd-kind-property">requests</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L175">packages/player-sdk/src/index.ts:175</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#actionspans"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>action<wbr/>Spans</span></a><a href="#totals"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>totals</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerOpenInput.html b/docs/api/player-sdk/types/PlayerOpenInput.html
index 4062f20..72bf0c2 100644
--- a/docs/api/player-sdk/types/PlayerOpenInput.html
+++ b/docs/api/player-sdk/types/PlayerOpenInput.html
@@ -1,2 +1,34 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerOpenInput | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerOpenInput</a></li></ul><h1>Type Alias PlayerOpenInput</h1></div><div class="tsd-signature"><span class="tsd-kind-type-alias">PlayerOpenInput</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ArrayBuffer</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Uint8Array</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Blob</span></div><div class="tsd-comment tsd-typography"><p>Supported input payloads when opening an archive.</p>
-</div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L19">index.ts:19</a></li></ul></aside></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerOpenInput | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerOpenInput</a></li></ul>
+<h1>Type Alias PlayerOpenInput</h1></div>
+<div class="tsd-signature"><span class="tsd-kind-type-alias">PlayerOpenInput</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ArrayBuffer</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Uint8Array</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Blob</span></div>
+<div class="tsd-comment tsd-typography"><p>Supported input payloads when opening an archive.</p>
+</div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L58">packages/player-sdk/src/index.ts:58</a></li></ul></aside></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerOpenOptions.html b/docs/api/player-sdk/types/PlayerOpenOptions.html
index 3f63148..1433fff 100644
--- a/docs/api/player-sdk/types/PlayerOpenOptions.html
+++ b/docs/api/player-sdk/types/PlayerOpenOptions.html
@@ -1,4 +1,69 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerOpenOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerOpenOptions</a></li></ul><h1>Type Alias PlayerOpenOptions</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Optional archive open settings.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerOpenOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#passphrase">passphrase</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L22">index.ts:22</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#passphrase" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>passphrase?</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerOpenOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerOpenOptions</a></li></ul>
+<h1>Type Alias PlayerOpenOptions</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Optional archive open settings.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerOpenOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#passphrase">passphrase</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#resourcelimits">resourceLimits</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">Partial</span><span class="tsd-signature-symbol">&lt;</span><a href="ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L61">packages/player-sdk/src/index.ts:61</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#passphrase" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>passphrase?</span></a>
 <a href="#range" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="passphrase"><code class="tsd-tag">Optional</code><span>passphrase</span><a href="#passphrase" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">passphrase</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L23">index.ts:23</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L24">index.ts:24</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#passphrase"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>passphrase</span></a><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<a href="#resourcelimits" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>resource<wbr/>Limits?</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="passphrase"><code class="tsd-tag">Optional</code><span>passphrase</span><a href="#passphrase" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">passphrase</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L62">packages/player-sdk/src/index.ts:62</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L63">packages/player-sdk/src/index.ts:63</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="resourcelimits"><code class="tsd-tag">Optional</code><span>resource<wbr/>Limits</span><a href="#resourcelimits" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">resourceLimits</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">Partial</span><span class="tsd-signature-symbol">&lt;</span><a href="ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L64">packages/player-sdk/src/index.ts:64</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#passphrase"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>passphrase</span></a><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#resourcelimits"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>resource<wbr/>Limits</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerQuery.html b/docs/api/player-sdk/types/PlayerQuery.html
index 5e3c76b..f29a552 100644
--- a/docs/api/player-sdk/types/PlayerQuery.html
+++ b/docs/api/player-sdk/types/PlayerQuery.html
@@ -1,9 +1,93 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerQuery | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerQuery</a></li></ul><h1>Type Alias PlayerQuery</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Event query filter model.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerQuery</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#types">types</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#levels">levels</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">EventLevel</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#text">text</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestid">requestId</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#limit">limit</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#offset">offset</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L34">index.ts:34</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#range" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range?</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerQuery | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerQuery</a></li></ul>
+<h1>Type Alias PlayerQuery</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Event query filter model.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerQuery</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#types">types</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#levels">levels</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">EventLevel</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#text">text</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestid">requestId</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#limit">limit</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#offset">offset</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L74">packages/player-sdk/src/index.ts:74</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#range" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range?</span></a>
 <a href="#types" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>types?</span></a>
 <a href="#levels" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>levels?</span></a>
 <a href="#text" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>text?</span></a>
 <a href="#requestid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Id?</span></a>
 <a href="#limit" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>limit?</span></a>
 <a href="#offset" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>offset?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L35">index.ts:35</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="types"><code class="tsd-tag">Optional</code><span>types</span><a href="#types" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">types</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L36">index.ts:36</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="levels"><code class="tsd-tag">Optional</code><span>levels</span><a href="#levels" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">levels</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">EventLevel</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L37">index.ts:37</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="text"><code class="tsd-tag">Optional</code><span>text</span><a href="#text" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">text</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L38">index.ts:38</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="requestid"><code class="tsd-tag">Optional</code><span>request<wbr/>Id</span><a href="#requestid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">requestId</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L39">index.ts:39</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="limit"><code class="tsd-tag">Optional</code><span>limit</span><a href="#limit" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L40">index.ts:40</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="offset"><code class="tsd-tag">Optional</code><span>offset</span><a href="#offset" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">offset</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L41">index.ts:41</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#types"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>types</span></a><a href="#levels"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>levels</span></a><a href="#text"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>text</span></a><a href="#requestid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Id</span></a><a href="#limit"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>limit</span></a><a href="#offset"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>offset</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L75">packages/player-sdk/src/index.ts:75</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="types"><code class="tsd-tag">Optional</code><span>types</span><a href="#types" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">types</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L76">packages/player-sdk/src/index.ts:76</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="levels"><code class="tsd-tag">Optional</code><span>levels</span><a href="#levels" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">levels</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">EventLevel</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L77">packages/player-sdk/src/index.ts:77</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="text"><code class="tsd-tag">Optional</code><span>text</span><a href="#text" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">text</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L78">packages/player-sdk/src/index.ts:78</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestid"><code class="tsd-tag">Optional</code><span>request<wbr/>Id</span><a href="#requestid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestId</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L79">packages/player-sdk/src/index.ts:79</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="limit"><code class="tsd-tag">Optional</code><span>limit</span><a href="#limit" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">limit</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L80">packages/player-sdk/src/index.ts:80</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="offset"><code class="tsd-tag">Optional</code><span>offset</span><a href="#offset" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">offset</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L81">packages/player-sdk/src/index.ts:81</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#types"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>types</span></a><a href="#levels"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>levels</span></a><a href="#text"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>text</span></a><a href="#requestid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Id</span></a><a href="#limit"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>limit</span></a><a href="#offset"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>offset</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerRange.html b/docs/api/player-sdk/types/PlayerRange.html
index 1d53f9a..bd644df 100644
--- a/docs/api/player-sdk/types/PlayerRange.html
+++ b/docs/api/player-sdk/types/PlayerRange.html
@@ -1,4 +1,63 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerRange | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerRange</a></li></ul><h1>Type Alias PlayerRange</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Monotonic-time query range in milliseconds.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerRange</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#monostart">monoStart</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#monoend">monoEnd</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L28">index.ts:28</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#monostart" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono<wbr/>Start?</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerRange | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerRange</a></li></ul>
+<h1>Type Alias PlayerRange</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Monotonic-time query range in milliseconds.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerRange</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#monostart">monoStart</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#monoend">monoEnd</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L68">packages/player-sdk/src/index.ts:68</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#monostart" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono<wbr/>Start?</span></a>
 <a href="#monoend" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono<wbr/>End?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="monostart"><code class="tsd-tag">Optional</code><span>mono<wbr/>Start</span><a href="#monostart" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">monoStart</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L29">index.ts:29</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="monoend"><code class="tsd-tag">Optional</code><span>mono<wbr/>End</span><a href="#monoend" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">monoEnd</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L30">index.ts:30</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#monostart"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono<wbr/>Start</span></a><a href="#monoend"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono<wbr/>End</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="monostart"><code class="tsd-tag">Optional</code><span>mono<wbr/>Start</span><a href="#monostart" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">monoStart</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L69">packages/player-sdk/src/index.ts:69</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="monoend"><code class="tsd-tag">Optional</code><span>mono<wbr/>End</span><a href="#monoend" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">monoEnd</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L70">packages/player-sdk/src/index.ts:70</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#monostart"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono<wbr/>Start</span></a><a href="#monoend"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono<wbr/>End</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerSearchResult.html b/docs/api/player-sdk/types/PlayerSearchResult.html
index 5a75cf2..bb0483f 100644
--- a/docs/api/player-sdk/types/PlayerSearchResult.html
+++ b/docs/api/player-sdk/types/PlayerSearchResult.html
@@ -1,5 +1,69 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerSearchResult | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerSearchResult</a></li></ul><h1>Type Alias PlayerSearchResult</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Ranked full-text search hit for an event.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerSearchResult</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#score">score</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#event">event</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L45">index.ts:45</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerSearchResult | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerSearchResult</a></li></ul>
+<h1>Type Alias PlayerSearchResult</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Ranked full-text search hit for an event.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlayerSearchResult</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#score">score</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#event">event</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L85">packages/player-sdk/src/index.ts:85</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
 <a href="#score" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>score</span></a>
 <a href="#event" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L46">index.ts:46</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="score"><span>score</span><a href="#score" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">score</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L47">index.ts:47</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="event"><span>event</span><a href="#event" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">event</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L48">index.ts:48</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#score"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>score</span></a><a href="#event"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L86">packages/player-sdk/src/index.ts:86</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="score"><span>score</span><a href="#score" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">score</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L87">packages/player-sdk/src/index.ts:87</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="event"><span>event</span><a href="#event" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">event</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEvent</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L88">packages/player-sdk/src/index.ts:88</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#score"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>score</span></a><a href="#event"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlayerStatus.html b/docs/api/player-sdk/types/PlayerStatus.html
index 29fc84d..c3dda7d 100644
--- a/docs/api/player-sdk/types/PlayerStatus.html
+++ b/docs/api/player-sdk/types/PlayerStatus.html
@@ -1,2 +1,34 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerStatus | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlayerStatus</a></li></ul><h1>Type Alias PlayerStatus</h1></div><div class="tsd-signature"><span class="tsd-kind-type-alias">PlayerStatus</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;idle&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;loaded&quot;</span></div><div class="tsd-comment tsd-typography"><p>Player lifecycle status.</p>
-</div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L16">index.ts:16</a></li></ul></aside></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlayerStatus | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlayerStatus</a></li></ul>
+<h1>Type Alias PlayerStatus</h1></div>
+<div class="tsd-signature"><span class="tsd-kind-type-alias">PlayerStatus</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;idle&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;loaded&quot;</span></div>
+<div class="tsd-comment tsd-typography"><p>Player lifecycle status.</p>
+</div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L55">packages/player-sdk/src/index.ts:55</a></li></ul></aside></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlaywrightMockScriptOptions.html b/docs/api/player-sdk/types/PlaywrightMockScriptOptions.html
index 799b28a..a370dc6 100644
--- a/docs/api/player-sdk/types/PlaywrightMockScriptOptions.html
+++ b/docs/api/player-sdk/types/PlaywrightMockScriptOptions.html
@@ -1,2 +1,34 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlaywrightMockScriptOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlaywrightMockScriptOptions</a></li></ul><h1>Type Alias PlaywrightMockScriptOptions</h1></div><div class="tsd-signature"><span class="tsd-kind-type-alias">PlaywrightMockScriptOptions</span><span class="tsd-signature-symbol">:</span> <a href="PlaywrightScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightScriptOptions</a> <span class="tsd-signature-symbol">&amp;</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">maxMocks</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span></div><div class="tsd-comment tsd-typography"><p>Playwright mock script generation options.</p>
-</div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L253">index.ts:253</a></li></ul></aside></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlaywrightMockScriptOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlaywrightMockScriptOptions</a></li></ul>
+<h1>Type Alias PlaywrightMockScriptOptions</h1></div>
+<div class="tsd-signature"><span class="tsd-kind-type-alias">PlaywrightMockScriptOptions</span><span class="tsd-signature-symbol">:</span> <a href="PlaywrightScriptOptions.html" class="tsd-signature-type tsd-kind-type-alias">PlaywrightScriptOptions</a> <span class="tsd-signature-symbol">&amp;</span> <span class="tsd-signature-symbol">{</span> <span class="tsd-kind-property">maxMocks</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">}</span></div>
+<div class="tsd-comment tsd-typography"><p>Playwright mock script generation options.</p>
+</div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L365">packages/player-sdk/src/index.ts:365</a></li></ul></aside></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PlaywrightScriptOptions.html b/docs/api/player-sdk/types/PlaywrightScriptOptions.html
index c45bb11..6fe4712 100644
--- a/docs/api/player-sdk/types/PlaywrightScriptOptions.html
+++ b/docs/api/player-sdk/types/PlaywrightScriptOptions.html
@@ -1,7 +1,81 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlaywrightScriptOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">PlaywrightScriptOptions</a></li></ul><h1>Type Alias PlaywrightScriptOptions</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Playwright script generation options.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlaywrightScriptOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#name">name</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#starturl">startUrl</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxactions">maxActions</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#includeharreplay">includeHarReplay</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L244">index.ts:244</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#name" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>name?</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PlaywrightScriptOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PlaywrightScriptOptions</a></li></ul>
+<h1>Type Alias PlaywrightScriptOptions</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Playwright script generation options.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PlaywrightScriptOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#name">name</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#starturl">startUrl</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxactions">maxActions</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#includeharreplay">includeHarReplay</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L356">packages/player-sdk/src/index.ts:356</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#name" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>name?</span></a>
 <a href="#range" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range?</span></a>
 <a href="#starturl" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Url?</span></a>
 <a href="#maxactions" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Actions?</span></a>
 <a href="#includeharreplay" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>include<wbr/>Har<wbr/>Replay?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="name"><code class="tsd-tag">Optional</code><span>name</span><a href="#name" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L245">index.ts:245</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L246">index.ts:246</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="starturl"><code class="tsd-tag">Optional</code><span>start<wbr/>Url</span><a href="#starturl" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">startUrl</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L247">index.ts:247</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="maxactions"><code class="tsd-tag">Optional</code><span>max<wbr/>Actions</span><a href="#maxactions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">maxActions</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L248">index.ts:248</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="includeharreplay"><code class="tsd-tag">Optional</code><span>include<wbr/>Har<wbr/>Replay</span><a href="#includeharreplay" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">includeHarReplay</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">boolean</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L249">index.ts:249</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>name</span></a><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#starturl"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Url</span></a><a href="#maxactions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Actions</span></a><a href="#includeharreplay"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>include<wbr/>Har<wbr/>Replay</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="name"><code class="tsd-tag">Optional</code><span>name</span><a href="#name" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">name</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L357">packages/player-sdk/src/index.ts:357</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L358">packages/player-sdk/src/index.ts:358</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="starturl"><code class="tsd-tag">Optional</code><span>start<wbr/>Url</span><a href="#starturl" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">startUrl</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L359">packages/player-sdk/src/index.ts:359</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxactions"><code class="tsd-tag">Optional</code><span>max<wbr/>Actions</span><a href="#maxactions" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxActions</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L360">packages/player-sdk/src/index.ts:360</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="includeharreplay"><code class="tsd-tag">Optional</code><span>include<wbr/>Har<wbr/>Replay</span><a href="#includeharreplay" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">includeHarReplay</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">boolean</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L361">packages/player-sdk/src/index.ts:361</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#name"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>name</span></a><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#starturl"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>start<wbr/>Url</span></a><a href="#maxactions"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Actions</span></a><a href="#includeharreplay"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>include<wbr/>Har<wbr/>Replay</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/PrivacyProtectionReport.html b/docs/api/player-sdk/types/PrivacyProtectionReport.html
new file mode 100644
index 0000000..8dfc220
--- /dev/null
+++ b/docs/api/player-sdk/types/PrivacyProtectionReport.html
@@ -0,0 +1,75 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>PrivacyProtectionReport | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">PrivacyProtectionReport</a></li></ul>
+<h1>Type Alias PrivacyProtectionReport</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Explainable privacy posture for export/share preflight review.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">PrivacyProtectionReport</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#encrypted">encrypted</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#redaction">redaction</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">hashSensitiveValues</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">headers</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">cookieNames</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">bodyPatterns</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">blockedSelectors</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">strategy</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#detected">detected</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">redactedMarkers</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">hashedSensitiveValues</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">sensitiveKeyMentions</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#scanner">scanner</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">preEncryption</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;passed&quot;</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;blocked&quot;</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">findingCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">coverage</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">PrivacyScannerCoverage</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L193">packages/player-sdk/src/index.ts:193</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#encrypted" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>encrypted</span></a>
+<a href="#redaction" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>redaction</span></a>
+<a href="#detected" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>detected</span></a>
+<a href="#scanner" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>scanner</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="encrypted"><span>encrypted</span><a href="#encrypted" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">encrypted</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L194">packages/player-sdk/src/index.ts:194</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="redaction"><span>redaction</span><a href="#redaction" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">redaction</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">hashSensitiveValues</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">headers</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">cookieNames</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">bodyPatterns</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">blockedSelectors</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">strategy</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L195">packages/player-sdk/src/index.ts:195</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="detected"><span>detected</span><a href="#detected" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">detected</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">redactedMarkers</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">hashedSensitiveValues</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">sensitiveKeyMentions</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L203">packages/player-sdk/src/index.ts:203</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="scanner"><span>scanner</span><a href="#scanner" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">scanner</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">preEncryption</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;passed&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;blocked&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">findingCount</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">coverage</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">PrivacyScannerCoverage</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L208">packages/player-sdk/src/index.ts:208</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#encrypted"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>encrypted</span></a><a href="#redaction"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>redaction</span></a><a href="#detected"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>detected</span></a><a href="#scanner"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>scanner</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/RealtimeNetworkEntry.html b/docs/api/player-sdk/types/RealtimeNetworkEntry.html
index aa2f39b..01f5423 100644
--- a/docs/api/player-sdk/types/RealtimeNetworkEntry.html
+++ b/docs/api/player-sdk/types/RealtimeNetworkEntry.html
@@ -1,5 +1,29 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>RealtimeNetworkEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">RealtimeNetworkEntry</a></li></ul><h1>Type Alias RealtimeNetworkEntry</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Realtime network stream entry (WebSocket/SSE).</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">RealtimeNetworkEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventtype">eventType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#protocol">protocol</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;ws&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sse&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mono">mono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#t">t</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#streamid">streamId</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#direction">direction</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">&quot;sent&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;received&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#phase">phase</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#url">url</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#opcode">opcode</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#payloadlength">payloadLength</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#payloadpreview">payloadPreview</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#snapshot">snapshot</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L142">index.ts:142</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>RealtimeNetworkEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">RealtimeNetworkEntry</a></li></ul>
+<h1>Type Alias RealtimeNetworkEntry</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Realtime network stream entry (WebSocket/SSE).</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">RealtimeNetworkEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventtype">eventType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#protocol">protocol</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;ws&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sse&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mono">mono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#t">t</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#streamid">streamId</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#direction">direction</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">&quot;sent&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;received&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#phase">phase</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#url">url</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#opcode">opcode</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#payloadlength">payloadLength</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#payloadpreview">payloadPreview</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#snapshot">snapshot</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L254">packages/player-sdk/src/index.ts:254</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
 <a href="#eventtype" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a>
 <a href="#protocol" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>protocol</span></a>
 <a href="#mono" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a>
@@ -12,4 +36,94 @@
 <a href="#payloadlength" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>payload<wbr/>Length?</span></a>
 <a href="#payloadpreview" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>payload<wbr/>Preview?</span></a>
 <a href="#snapshot" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L143">index.ts:143</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventtype"><span>event<wbr/>Type</span><a href="#eventtype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L144">index.ts:144</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="protocol"><span>protocol</span><a href="#protocol" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">protocol</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;ws&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sse&quot;</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L145">index.ts:145</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="mono"><span>mono</span><a href="#mono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L146">index.ts:146</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="t"><span>t</span><a href="#t" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">t</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L147">index.ts:147</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="streamid"><code class="tsd-tag">Optional</code><span>stream<wbr/>Id</span><a href="#streamid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">streamId</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L148">index.ts:148</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="direction"><code class="tsd-tag">Optional</code><span>direction</span><a href="#direction" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">direction</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">&quot;sent&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;received&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L149">index.ts:149</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="phase"><code class="tsd-tag">Optional</code><span>phase</span><a href="#phase" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">phase</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L150">index.ts:150</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="url"><code class="tsd-tag">Optional</code><span>url</span><a href="#url" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L151">index.ts:151</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="opcode"><code class="tsd-tag">Optional</code><span>opcode</span><a href="#opcode" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">opcode</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L152">index.ts:152</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="payloadlength"><code class="tsd-tag">Optional</code><span>payload<wbr/>Length</span><a href="#payloadlength" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">payloadLength</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L153">index.ts:153</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="payloadpreview"><code class="tsd-tag">Optional</code><span>payload<wbr/>Preview</span><a href="#payloadpreview" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">payloadPreview</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L154">index.ts:154</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="snapshot"><code class="tsd-tag">Optional</code><span>snapshot</span><a href="#snapshot" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">snapshot</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L155">index.ts:155</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#eventtype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a><a href="#protocol"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>protocol</span></a><a href="#mono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a><a href="#t"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a><a href="#streamid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stream<wbr/>Id</span></a><a href="#direction"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>direction</span></a><a href="#phase"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>phase</span></a><a href="#url"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>url</span></a><a href="#opcode"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>opcode</span></a><a href="#payloadlength"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>payload<wbr/>Length</span></a><a href="#payloadpreview"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>payload<wbr/>Preview</span></a><a href="#snapshot"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L255">packages/player-sdk/src/index.ts:255</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventtype"><span>event<wbr/>Type</span><a href="#eventtype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L256">packages/player-sdk/src/index.ts:256</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="protocol"><span>protocol</span><a href="#protocol" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">protocol</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;ws&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sse&quot;</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L257">packages/player-sdk/src/index.ts:257</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="mono"><span>mono</span><a href="#mono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L258">packages/player-sdk/src/index.ts:258</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="t"><span>t</span><a href="#t" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">t</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L259">packages/player-sdk/src/index.ts:259</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="streamid"><code class="tsd-tag">Optional</code><span>stream<wbr/>Id</span><a href="#streamid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">streamId</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L260">packages/player-sdk/src/index.ts:260</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="direction"><code class="tsd-tag">Optional</code><span>direction</span><a href="#direction" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">direction</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">&quot;sent&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;received&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L261">packages/player-sdk/src/index.ts:261</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="phase"><code class="tsd-tag">Optional</code><span>phase</span><a href="#phase" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">phase</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L262">packages/player-sdk/src/index.ts:262</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="url"><code class="tsd-tag">Optional</code><span>url</span><a href="#url" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L263">packages/player-sdk/src/index.ts:263</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="opcode"><code class="tsd-tag">Optional</code><span>opcode</span><a href="#opcode" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">opcode</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L264">packages/player-sdk/src/index.ts:264</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="payloadlength"><code class="tsd-tag">Optional</code><span>payload<wbr/>Length</span><a href="#payloadlength" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">payloadLength</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L265">packages/player-sdk/src/index.ts:265</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="payloadpreview"><code class="tsd-tag">Optional</code><span>payload<wbr/>Preview</span><a href="#payloadpreview" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">payloadPreview</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L266">packages/player-sdk/src/index.ts:266</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="snapshot"><code class="tsd-tag">Optional</code><span>snapshot</span><a href="#snapshot" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">snapshot</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L267">packages/player-sdk/src/index.ts:267</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#eventtype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a><a href="#protocol"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>protocol</span></a><a href="#mono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a><a href="#t"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a><a href="#streamid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>stream<wbr/>Id</span></a><a href="#direction"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>direction</span></a><a href="#phase"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>phase</span></a><a href="#url"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>url</span></a><a href="#opcode"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>opcode</span></a><a href="#payloadlength"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>payload<wbr/>Length</span></a><a href="#payloadpreview"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>payload<wbr/>Preview</span></a><a href="#snapshot"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/ReplayDiagnosticEntry.html b/docs/api/player-sdk/types/ReplayDiagnosticEntry.html
new file mode 100644
index 0000000..91fa9fa
--- /dev/null
+++ b/docs/api/player-sdk/types/ReplayDiagnosticEntry.html
@@ -0,0 +1,99 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>ReplayDiagnosticEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">ReplayDiagnosticEntry</a></li></ul>
+<h1>Type Alias ReplayDiagnosticEntry</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Replay confidence row that links action, request/response, error, and screenshot evidence.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">ReplayDiagnosticEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#actid">actId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#confidence">confidence</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;high&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;medium&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;low&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#triggereventid">triggerEventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#triggertype">triggerType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#causechain">causeChain</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestresponsediffs">requestResponseDiffs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">capturedStatus</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">failed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">hasRequestBody</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">hasResponseBody</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">responseBodySize</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#errormessages">errorMessages</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#screenshoteventid">screenshotEventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L138">packages/player-sdk/src/index.ts:138</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#actid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a>
+<a href="#confidence" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>confidence</span></a>
+<a href="#triggereventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Event<wbr/>Id</span></a>
+<a href="#triggertype" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Type</span></a>
+<a href="#causechain" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>cause<wbr/>Chain</span></a>
+<a href="#requestresponsediffs" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Response<wbr/>Diffs</span></a>
+<a href="#errormessages" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Messages</span></a>
+<a href="#screenshoteventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>screenshot<wbr/>Event<wbr/>Id</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="actid"><span>act<wbr/>Id</span><a href="#actid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">actId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L139">packages/player-sdk/src/index.ts:139</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="confidence"><span>confidence</span><a href="#confidence" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">confidence</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;high&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;medium&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;low&quot;</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L140">packages/player-sdk/src/index.ts:140</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="triggereventid"><span>trigger<wbr/>Event<wbr/>Id</span><a href="#triggereventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">triggerEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L141">packages/player-sdk/src/index.ts:141</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="triggertype"><span>trigger<wbr/>Type</span><a href="#triggertype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">triggerType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L142">packages/player-sdk/src/index.ts:142</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="causechain"><span>cause<wbr/>Chain</span><a href="#causechain" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">causeChain</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L143">packages/player-sdk/src/index.ts:143</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestresponsediffs"><span>request<wbr/>Response<wbr/>Diffs</span><a href="#requestresponsediffs" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestResponseDiffs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">capturedStatus</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">failed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">hasRequestBody</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">hasResponseBody</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">boolean</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">responseBodySize</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L144">packages/player-sdk/src/index.ts:144</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="errormessages"><span>error<wbr/>Messages</span><a href="#errormessages" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">errorMessages</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L154">packages/player-sdk/src/index.ts:154</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="screenshoteventid"><span>screenshot<wbr/>Event<wbr/>Id</span><a href="#screenshoteventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">screenshotEventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L155">packages/player-sdk/src/index.ts:155</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#actid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>act<wbr/>Id</span></a><a href="#confidence"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>confidence</span></a><a href="#triggereventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Event<wbr/>Id</span></a><a href="#triggertype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>trigger<wbr/>Type</span></a><a href="#causechain"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>cause<wbr/>Chain</span></a><a href="#requestresponsediffs"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Response<wbr/>Diffs</span></a><a href="#errormessages"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>error<wbr/>Messages</span></a><a href="#screenshoteventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>screenshot<wbr/>Event<wbr/>Id</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/RequestResponseDiff.html b/docs/api/player-sdk/types/RequestResponseDiff.html
new file mode 100644
index 0000000..f8d2dc3
--- /dev/null
+++ b/docs/api/player-sdk/types/RequestResponseDiff.html
@@ -0,0 +1,111 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>RequestResponseDiff | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">RequestResponseDiff</a></li></ul>
+<h1>Type Alias RequestResponseDiff</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Concrete request/response comparison for replay confidence and debugging.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">RequestResponseDiff</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#reqid">reqId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#method">method</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#url">url</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#status">status</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestbodybytes">requestBodyBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#responsebodybytes">responseBodyBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#bodysizedeltabytes">bodySizeDeltaBytes</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#requestheadernames">requestHeaderNames</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#responseheadernames">responseHeaderNames</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#missingreplayinputs">missingReplayInputs</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L159">packages/player-sdk/src/index.ts:159</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#reqid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>req<wbr/>Id</span></a>
+<a href="#method" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>method</span></a>
+<a href="#url" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>url</span></a>
+<a href="#status" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status</span></a>
+<a href="#requestbodybytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Body<wbr/>Bytes</span></a>
+<a href="#responsebodybytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Body<wbr/>Bytes</span></a>
+<a href="#bodysizedeltabytes" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>body<wbr/>Size<wbr/>Delta<wbr/>Bytes</span></a>
+<a href="#requestheadernames" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Header<wbr/>Names</span></a>
+<a href="#responseheadernames" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Header<wbr/>Names</span></a>
+<a href="#missingreplayinputs" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>missing<wbr/>Replay<wbr/>Inputs</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="reqid"><span>req<wbr/>Id</span><a href="#reqid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">reqId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L160">packages/player-sdk/src/index.ts:160</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="method"><span>method</span><a href="#method" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">method</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L161">packages/player-sdk/src/index.ts:161</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="url"><span>url</span><a href="#url" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">url</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L162">packages/player-sdk/src/index.ts:162</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="status"><span>status</span><a href="#status" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">status</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L163">packages/player-sdk/src/index.ts:163</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestbodybytes"><span>request<wbr/>Body<wbr/>Bytes</span><a href="#requestbodybytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestBodyBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L164">packages/player-sdk/src/index.ts:164</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="responsebodybytes"><span>response<wbr/>Body<wbr/>Bytes</span><a href="#responsebodybytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">responseBodyBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L165">packages/player-sdk/src/index.ts:165</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="bodysizedeltabytes"><span>body<wbr/>Size<wbr/>Delta<wbr/>Bytes</span><a href="#bodysizedeltabytes" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">bodySizeDeltaBytes</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L166">packages/player-sdk/src/index.ts:166</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="requestheadernames"><span>request<wbr/>Header<wbr/>Names</span><a href="#requestheadernames" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">requestHeaderNames</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L167">packages/player-sdk/src/index.ts:167</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="responseheadernames"><span>response<wbr/>Header<wbr/>Names</span><a href="#responseheadernames" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">responseHeaderNames</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L168">packages/player-sdk/src/index.ts:168</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="missingreplayinputs"><span>missing<wbr/>Replay<wbr/>Inputs</span><a href="#missingreplayinputs" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">missingReplayInputs</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L169">packages/player-sdk/src/index.ts:169</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#reqid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>req<wbr/>Id</span></a><a href="#method"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>method</span></a><a href="#url"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>url</span></a><a href="#status"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>status</span></a><a href="#requestbodybytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Body<wbr/>Bytes</span></a><a href="#responsebodybytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Body<wbr/>Bytes</span></a><a href="#bodysizedeltabytes"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>body<wbr/>Size<wbr/>Delta<wbr/>Bytes</span></a><a href="#requestheadernames"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>request<wbr/>Header<wbr/>Names</span></a><a href="#responseheadernames"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>response<wbr/>Header<wbr/>Names</span></a><a href="#missingreplayinputs"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>missing<wbr/>Replay<wbr/>Inputs</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/SensitiveDataPreview.html b/docs/api/player-sdk/types/SensitiveDataPreview.html
new file mode 100644
index 0000000..98d7a30
--- /dev/null
+++ b/docs/api/player-sdk/types/SensitiveDataPreview.html
@@ -0,0 +1,63 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>SensitiveDataPreview | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">SensitiveDataPreview</a></li></ul>
+<h1>Type Alias SensitiveDataPreview</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Bounded sensitive-data preview for export/share review before publishing an archive.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">SensitiveDataPreview</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#totalmatches">totalMatches</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#samples">samples</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;redacted-marker&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;hashed-value&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sensitive-pattern&quot;</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">snippet</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L217">packages/player-sdk/src/index.ts:217</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#totalmatches" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>total<wbr/>Matches</span></a>
+<a href="#samples" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>samples</span></a>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="totalmatches"><span>total<wbr/>Matches</span><a href="#totalmatches" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">totalMatches</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L218">packages/player-sdk/src/index.ts:218</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="samples"><span>samples</span><a href="#samples" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">samples</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">type</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;redacted-marker&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;hashed-value&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sensitive-pattern&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">snippet</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L219">packages/player-sdk/src/index.ts:219</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#totalmatches"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>total<wbr/>Matches</span></a><a href="#samples"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>samples</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/StorageComparison.html b/docs/api/player-sdk/types/StorageComparison.html
index ec90f26..8c1ab46 100644
--- a/docs/api/player-sdk/types/StorageComparison.html
+++ b/docs/api/player-sdk/types/StorageComparison.html
@@ -1,7 +1,81 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>StorageComparison | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">StorageComparison</a></li></ul><h1>Type Alias StorageComparison</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Storage-only comparison summary.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">StorageComparison</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#leftevents">leftEvents</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#rightevents">rightEvents</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#kinddeltas">kindDeltas</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">kind</span><span class="tsd-signature-symbol">:</span> <a href="StorageTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">StorageTimelineEntry</a><span class="tsd-signature-symbol">[</span><a href="StorageTimelineEntry.html#kind"><span class="tsd-signature-type">&quot;kind&quot;</span></a><span class="tsd-signature-symbol">]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">left</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">right</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">delta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#hashonlyleft">hashOnlyLeft</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#hashonlyright">hashOnlyRight</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L223">index.ts:223</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#leftevents" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Events</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>StorageComparison | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">StorageComparison</a></li></ul>
+<h1>Type Alias StorageComparison</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Storage-only comparison summary.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">StorageComparison</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#leftevents">leftEvents</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#rightevents">rightEvents</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#kinddeltas">kindDeltas</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>        <span class="tsd-kind-property">kind</span><span class="tsd-signature-symbol">:</span> <a href="StorageTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">StorageTimelineEntry</a><span class="tsd-signature-symbol">[</span><a href="StorageTimelineEntry.html#kind"><span class="tsd-signature-type">&quot;kind&quot;</span></a><span class="tsd-signature-symbol">]</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">left</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">right</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-kind-property">delta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#hashonlyleft">hashOnlyLeft</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#hashonlyright">hashOnlyRight</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L335">packages/player-sdk/src/index.ts:335</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#leftevents" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Events</span></a>
 <a href="#rightevents" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Events</span></a>
 <a href="#kinddeltas" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>kind<wbr/>Deltas</span></a>
 <a href="#hashonlyleft" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash<wbr/>Only<wbr/>Left</span></a>
 <a href="#hashonlyright" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash<wbr/>Only<wbr/>Right</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="leftevents"><span>left<wbr/>Events</span><a href="#leftevents" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">leftEvents</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L224">index.ts:224</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="rightevents"><span>right<wbr/>Events</span><a href="#rightevents" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">rightEvents</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L225">index.ts:225</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="kinddeltas"><span>kind<wbr/>Deltas</span><a href="#kinddeltas" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">kindDeltas</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">kind</span><span class="tsd-signature-symbol">:</span> <a href="StorageTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">StorageTimelineEntry</a><span class="tsd-signature-symbol">[</span><a href="StorageTimelineEntry.html#kind"><span class="tsd-signature-type">&quot;kind&quot;</span></a><span class="tsd-signature-symbol">]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">left</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">right</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">delta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L226">index.ts:226</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="hashonlyleft"><span>hash<wbr/>Only<wbr/>Left</span><a href="#hashonlyleft" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">hashOnlyLeft</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L232">index.ts:232</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="hashonlyright"><span>hash<wbr/>Only<wbr/>Right</span><a href="#hashonlyright" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">hashOnlyRight</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L233">index.ts:233</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#leftevents"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Events</span></a><a href="#rightevents"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Events</span></a><a href="#kinddeltas"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>kind<wbr/>Deltas</span></a><a href="#hashonlyleft"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash<wbr/>Only<wbr/>Left</span></a><a href="#hashonlyright"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash<wbr/>Only<wbr/>Right</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="leftevents"><span>left<wbr/>Events</span><a href="#leftevents" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">leftEvents</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L336">packages/player-sdk/src/index.ts:336</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="rightevents"><span>right<wbr/>Events</span><a href="#rightevents" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">rightEvents</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L337">packages/player-sdk/src/index.ts:337</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="kinddeltas"><span>kind<wbr/>Deltas</span><a href="#kinddeltas" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">kindDeltas</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-symbol">{</span><br/>    <span class="tsd-kind-property">kind</span><span class="tsd-signature-symbol">:</span> <a href="StorageTimelineEntry.html" class="tsd-signature-type tsd-kind-type-alias">StorageTimelineEntry</a><span class="tsd-signature-symbol">[</span><a href="StorageTimelineEntry.html#kind"><span class="tsd-signature-type">&quot;kind&quot;</span></a><span class="tsd-signature-symbol">]</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">left</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">right</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <span class="tsd-kind-property">delta</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L338">packages/player-sdk/src/index.ts:338</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="hashonlyleft"><span>hash<wbr/>Only<wbr/>Left</span><a href="#hashonlyleft" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">hashOnlyLeft</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L344">packages/player-sdk/src/index.ts:344</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="hashonlyright"><span>hash<wbr/>Only<wbr/>Right</span><a href="#hashonlyright" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">hashOnlyRight</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L345">packages/player-sdk/src/index.ts:345</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#leftevents"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>left<wbr/>Events</span></a><a href="#rightevents"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>right<wbr/>Events</span></a><a href="#kinddeltas"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>kind<wbr/>Deltas</span></a><a href="#hashonlyleft"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash<wbr/>Only<wbr/>Left</span></a><a href="#hashonlyright"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash<wbr/>Only<wbr/>Right</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/StorageTimelineEntry.html b/docs/api/player-sdk/types/StorageTimelineEntry.html
index 5b4612a..be08bf9 100644
--- a/docs/api/player-sdk/types/StorageTimelineEntry.html
+++ b/docs/api/player-sdk/types/StorageTimelineEntry.html
@@ -1,5 +1,29 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>StorageTimelineEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">StorageTimelineEntry</a></li></ul><h1>Type Alias StorageTimelineEntry</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Storage event timeline entry.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">StorageTimelineEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventtype">eventType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#t">t</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mono">mono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#kind">kind</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;cookie&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;local&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;session&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;idb&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;cache&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sw&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#operation">operation</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#hash">hash</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mode">mode</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#count">count</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#reason">reason</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#snapshot">snapshot</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L159">index.ts:159</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>StorageTimelineEntry | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">StorageTimelineEntry</a></li></ul>
+<h1>Type Alias StorageTimelineEntry</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Storage event timeline entry.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">StorageTimelineEntry</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#eventid">eventId</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#eventtype">eventType</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#t">t</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mono">mono</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#kind">kind</a><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;cookie&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;local&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;session&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;idb&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;cache&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sw&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#operation">operation</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#hash">hash</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#mode">mode</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#count">count</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#reason">reason</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#snapshot">snapshot</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L271">packages/player-sdk/src/index.ts:271</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#eventid" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a>
 <a href="#eventtype" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a>
 <a href="#t" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a>
 <a href="#mono" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a>
@@ -10,4 +34,84 @@
 <a href="#count" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>count?</span></a>
 <a href="#reason" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason?</span></a>
 <a href="#snapshot" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L160">index.ts:160</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="eventtype"><span>event<wbr/>Type</span><a href="#eventtype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">eventType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L161">index.ts:161</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="t"><span>t</span><a href="#t" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">t</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L162">index.ts:162</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="mono"><span>mono</span><a href="#mono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L163">index.ts:163</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="kind"><span>kind</span><a href="#kind" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">kind</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;cookie&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;local&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;session&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;idb&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;cache&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sw&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L164">index.ts:164</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="operation"><code class="tsd-tag">Optional</code><span>operation</span><a href="#operation" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">operation</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L165">index.ts:165</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="hash"><code class="tsd-tag">Optional</code><span>hash</span><a href="#hash" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">hash</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L166">index.ts:166</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="mode"><code class="tsd-tag">Optional</code><span>mode</span><a href="#mode" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">mode</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L167">index.ts:167</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="count"><code class="tsd-tag">Optional</code><span>count</span><a href="#count" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">count</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L168">index.ts:168</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="reason"><code class="tsd-tag">Optional</code><span>reason</span><a href="#reason" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L169">index.ts:169</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="snapshot"><code class="tsd-tag">Optional</code><span>snapshot</span><a href="#snapshot" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">snapshot</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L170">index.ts:170</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#eventtype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a><a href="#t"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a><a href="#mono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a><a href="#kind"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>kind</span></a><a href="#operation"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>operation</span></a><a href="#hash"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash</span></a><a href="#mode"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mode</span></a><a href="#count"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>count</span></a><a href="#reason"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason</span></a><a href="#snapshot"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventid"><span>event<wbr/>Id</span><a href="#eventid" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventId</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L272">packages/player-sdk/src/index.ts:272</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="eventtype"><span>event<wbr/>Type</span><a href="#eventtype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">eventType</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">WebBlackboxEventType</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L273">packages/player-sdk/src/index.ts:273</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="t"><span>t</span><a href="#t" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">t</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L274">packages/player-sdk/src/index.ts:274</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="mono"><span>mono</span><a href="#mono" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">mono</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L275">packages/player-sdk/src/index.ts:275</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="kind"><span>kind</span><a href="#kind" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">kind</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;cookie&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;local&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;session&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;idb&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;cache&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;sw&quot;</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;unknown&quot;</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L276">packages/player-sdk/src/index.ts:276</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="operation"><code class="tsd-tag">Optional</code><span>operation</span><a href="#operation" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">operation</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L277">packages/player-sdk/src/index.ts:277</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="hash"><code class="tsd-tag">Optional</code><span>hash</span><a href="#hash" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">hash</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L278">packages/player-sdk/src/index.ts:278</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="mode"><code class="tsd-tag">Optional</code><span>mode</span><a href="#mode" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">mode</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L279">packages/player-sdk/src/index.ts:279</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="count"><code class="tsd-tag">Optional</code><span>count</span><a href="#count" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">count</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L280">packages/player-sdk/src/index.ts:280</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="reason"><code class="tsd-tag">Optional</code><span>reason</span><a href="#reason" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">reason</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L281">packages/player-sdk/src/index.ts:281</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="snapshot"><code class="tsd-tag">Optional</code><span>snapshot</span><a href="#snapshot" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">snapshot</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">unknown</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L282">packages/player-sdk/src/index.ts:282</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#eventid"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Id</span></a><a href="#eventtype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>event<wbr/>Type</span></a><a href="#t"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>t</span></a><a href="#mono"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mono</span></a><a href="#kind"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>kind</span></a><a href="#operation"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>operation</span></a><a href="#hash"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>hash</span></a><a href="#mode"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>mode</span></a><a href="#count"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>count</span></a><a href="#reason"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>reason</span></a><a href="#snapshot"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>snapshot</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/types/TeamIssueTemplateOptions.html b/docs/api/player-sdk/types/TeamIssueTemplateOptions.html
index 6ad79a1..2325c67 100644
--- a/docs/api/player-sdk/types/TeamIssueTemplateOptions.html
+++ b/docs/api/player-sdk/types/TeamIssueTemplateOptions.html
@@ -1,5 +1,29 @@
-<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>TeamIssueTemplateOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar"><div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a><div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/><ul role="listbox" id="tsd-search-results"></ul><div id="tsd-search-status" aria-live="polite" aria-atomic="true"><div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header><div class="container container-main"><div class="col-content"><div class="tsd-page-title"><ul class="tsd-breadcrumb" aria-label="Breadcrumb"><li><a href="" aria-current="page">TeamIssueTemplateOptions</a></li></ul><h1>Type Alias TeamIssueTemplateOptions</h1></div><section class="tsd-panel tsd-comment"><div class="tsd-comment tsd-typography"><p>Shared options for team issue template generation.</p>
-</div></section><div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">TeamIssueTemplateOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#title">title</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxitems">maxItems</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#labels">labels</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#assignees">assignees</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#issuetype">issueType</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#projectkey">projectKey</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#priority">priority</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L258">index.ts:258</a></li></ul></aside><section class="tsd-panel-group tsd-index-group"><section class="tsd-panel tsd-index-panel"><details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h5 class="tsd-index-heading uppercase">Index</h5></summary><div class="tsd-accordion-details"><section class="tsd-index-section"><h3 class="tsd-index-heading">Properties</h3><div class="tsd-index-list"><a href="#title" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title?</span></a>
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>TeamIssueTemplateOptions | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">TeamIssueTemplateOptions</a></li></ul>
+<h1>Type Alias TeamIssueTemplateOptions</h1></div>
+<section class="tsd-panel tsd-comment">
+<div class="tsd-comment tsd-typography"><p>Shared options for team issue template generation.</p>
+</div></section>
+<div class="tsd-signature"><span class="tsd-signature-keyword">type</span> <span class="tsd-kind-type-alias">TeamIssueTemplateOptions</span> <span class="tsd-signature-symbol">=</span> <span class="tsd-signature-symbol">{</span><br/>    <a class="tsd-kind-property" href="#title">title</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#range">range</a><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#maxitems">maxItems</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#labels">labels</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#assignees">assignees</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#issuetype">issueType</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#projectkey">projectKey</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>    <a class="tsd-kind-property" href="#priority">priority</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/><span class="tsd-signature-symbol">}</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L370">packages/player-sdk/src/index.ts:370</a></li></ul></aside>
+<section class="tsd-panel-group tsd-index-group">
+<section class="tsd-panel tsd-index-panel">
+<details class="tsd-index-content tsd-accordion" open><summary class="tsd-accordion-summary tsd-index-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h5 class="tsd-index-heading uppercase">Index</h5></summary>
+<div class="tsd-accordion-details">
+<section class="tsd-index-section">
+<h3 class="tsd-index-heading tsd-anchor-link" id="properties">Properties<a href="#properties" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-index-list"><a href="#title" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title?</span></a>
 <a href="#range" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range?</span></a>
 <a href="#maxitems" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Items?</span></a>
 <a href="#labels" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>labels?</span></a>
@@ -7,4 +31,69 @@
 <a href="#issuetype" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>issue<wbr/>Type?</span></a>
 <a href="#projectkey" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>project<wbr/>Key?</span></a>
 <a href="#priority" class="tsd-index-link"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>priority?</span></a>
-</div></section></div></details></section></section><details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h2>Properties</h2></summary><section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="title"><code class="tsd-tag">Optional</code><span>title</span><a href="#title" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">title</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L259">index.ts:259</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L260">index.ts:260</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="maxitems"><code class="tsd-tag">Optional</code><span>max<wbr/>Items</span><a href="#maxitems" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">maxItems</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L261">index.ts:261</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="labels"><code class="tsd-tag">Optional</code><span>labels</span><a href="#labels" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">labels</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L262">index.ts:262</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="assignees"><code class="tsd-tag">Optional</code><span>assignees</span><a href="#assignees" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">assignees</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L263">index.ts:263</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="issuetype"><code class="tsd-tag">Optional</code><span>issue<wbr/>Type</span><a href="#issuetype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">issueType</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L264">index.ts:264</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="projectkey"><code class="tsd-tag">Optional</code><span>project<wbr/>Key</span><a href="#projectkey" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">projectKey</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L265">index.ts:265</a></li></ul></aside></section><section class="tsd-panel tsd-member"><h3 class="tsd-anchor-link" id="priority"><code class="tsd-tag">Optional</code><span>priority</span><a href="#priority" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3><div class="tsd-signature"><span class="tsd-kind-property">priority</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources"><ul><li>Defined in <a href="https://github.com/webllm/webblackbox/blob/516f23cbb707b7e10eb04388add6b6cdfc2f09ba/packages/player-sdk/src/index.ts#L266">index.ts:266</a></li></ul></aside></section></section></details></div><div class="col-sidebar"><div class="page-menu"><div class="tsd-navigation settings"><details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>Settings</h3></summary><div class="tsd-accordion-details"><div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span><ul id="tsd-filter-options"><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li><li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div><div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div><details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg><h3>On This Page</h3></summary><div class="tsd-accordion-details"><details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary><div><a href="#title"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title</span></a><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#maxitems"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Items</span></a><a href="#labels"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>labels</span></a><a href="#assignees"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>assignees</span></a><a href="#issuetype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>issue<wbr/>Type</span></a><a href="#projectkey"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>project<wbr/>Key</span></a><a href="#priority"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>priority</span></a></div></details></div></details></div><div class="site-menu"><nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a><ul class="tsd-small-nested-navigation" id="tsd-nav-container"><li>Loading...</li></ul></nav></div></div></div><footer><p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer><div class="overlay"></div></body></html>
+</div></section></div></details></section></section>
+<details class="tsd-panel-group tsd-member-group tsd-accordion" open><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h2 class="tsd-anchor-link" id="properties-1">Properties<a href="#properties-1" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h2></summary>
+<section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="title"><code class="tsd-tag">Optional</code><span>title</span><a href="#title" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">title</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L371">packages/player-sdk/src/index.ts:371</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="range"><code class="tsd-tag">Optional</code><span>range</span><a href="#range" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">range</span><span class="tsd-signature-symbol">?:</span> <a href="PlayerRange.html" class="tsd-signature-type tsd-kind-type-alias">PlayerRange</a></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L372">packages/player-sdk/src/index.ts:372</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="maxitems"><code class="tsd-tag">Optional</code><span>max<wbr/>Items</span><a href="#maxitems" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">maxItems</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">number</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L373">packages/player-sdk/src/index.ts:373</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="labels"><code class="tsd-tag">Optional</code><span>labels</span><a href="#labels" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">labels</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L374">packages/player-sdk/src/index.ts:374</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="assignees"><code class="tsd-tag">Optional</code><span>assignees</span><a href="#assignees" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">assignees</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">[]</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L375">packages/player-sdk/src/index.ts:375</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="issuetype"><code class="tsd-tag">Optional</code><span>issue<wbr/>Type</span><a href="#issuetype" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">issueType</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L376">packages/player-sdk/src/index.ts:376</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="projectkey"><code class="tsd-tag">Optional</code><span>project<wbr/>Key</span><a href="#projectkey" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">projectKey</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L377">packages/player-sdk/src/index.ts:377</a></li></ul></aside></section>
+<section class="tsd-panel tsd-member">
+<h3 class="tsd-anchor-link" id="priority"><code class="tsd-tag">Optional</code><span>priority</span><a href="#priority" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></h3>
+<div class="tsd-signature"><span class="tsd-kind-property">priority</span><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-type">string</span></div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/index.ts#L378">packages/player-sdk/src/index.ts:378</a></li></ul></aside></section></section></details></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div>
+<details open class="tsd-accordion tsd-page-navigation"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>On This Page</h3></summary>
+<div class="tsd-accordion-details">
+<details open class="tsd-accordion tsd-page-navigation-section"><summary class="tsd-accordion-summary" data-key="section-Properties"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>Properties</summary>
+<div><a href="#title"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>title</span></a><a href="#range"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>range</span></a><a href="#maxitems"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>max<wbr/>Items</span></a><a href="#labels"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>labels</span></a><a href="#assignees"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>assignees</span></a><a href="#issuetype"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>issue<wbr/>Type</span></a><a href="#projectkey"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>project<wbr/>Key</span></a><a href="#priority"><svg class="tsd-kind-icon" viewBox="0 0 24 24" aria-label="Property"><use href="../assets/icons.svg#icon-1024"></use></svg><span>priority</span></a></div></details></div></details></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/docs/api/player-sdk/variables/DEFAULT_ARCHIVE_RESOURCE_LIMITS.html b/docs/api/player-sdk/variables/DEFAULT_ARCHIVE_RESOURCE_LIMITS.html
new file mode 100644
index 0000000..4932a5e
--- /dev/null
+++ b/docs/api/player-sdk/variables/DEFAULT_ARCHIVE_RESOURCE_LIMITS.html
@@ -0,0 +1,34 @@
+<!DOCTYPE html><html class="default" lang="en" data-base="../"><head><meta charset="utf-8"/><meta http-equiv="x-ua-compatible" content="IE=edge"/><title>DEFAULT_ARCHIVE_RESOURCE_LIMITS | @webblackbox/player-sdk API</title><meta name="description" content="Documentation for @webblackbox/player-sdk API"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="../assets/style.css"/><link rel="stylesheet" href="../assets/highlight.css"/><script defer src="../assets/main.js"></script><script async src="../assets/icons.js" id="tsd-icons-script"></script><script async src="../assets/search.js" id="tsd-search-script"></script><script async src="../assets/navigation.js" id="tsd-nav-script"></script></head><body><script>document.documentElement.dataset.theme = localStorage.getItem("tsd-theme") || "os";document.body.style.display="none";setTimeout(() => window.app?app.showPage():document.body.style.removeProperty("display"),500)</script><header class="tsd-page-toolbar">
+<div class="tsd-toolbar-contents container"><a href="../index.html" class="title">@webblackbox/player-sdk API</a>
+<div id="tsd-toolbar-links"></div><button id="tsd-search-trigger" class="tsd-widget" aria-label="Search"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-search"></use></svg></button><dialog id="tsd-search" aria-label="Search"><input role="combobox" id="tsd-search-input" aria-controls="tsd-search-results" aria-autocomplete="list" aria-expanded="true" autocapitalize="off" autocomplete="off" placeholder="Search the docs" maxLength="100"/>
+<ul role="listbox" id="tsd-search-results"></ul>
+<div id="tsd-search-status" aria-live="polite" aria-atomic="true">
+<div>Preparing search index...</div></div></dialog><a href="#" class="tsd-widget menu" id="tsd-toolbar-menu-trigger" data-toggle="menu" aria-label="Menu"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-menu"></use></svg></a></div></header>
+<div class="container container-main">
+<div class="col-content">
+<div class="tsd-page-title">
+<ul class="tsd-breadcrumb" aria-label="Breadcrumb">
+<li><a href="" aria-current="page">DEFAULT_ARCHIVE_RESOURCE_LIMITS</a></li></ul>
+<h1>Variable DEFAULT_ARCHIVE_RESOURCE_LIMITS<code class="tsd-tag">Const</code></h1></div>
+<div class="tsd-signature"><span class="tsd-kind-variable">DEFAULT_ARCHIVE_RESOURCE_LIMITS</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Readonly</span><span class="tsd-signature-symbol">&lt;</span><a href="../types/ArchiveResourceLimits.html" class="tsd-signature-type tsd-kind-type-alias">ArchiveResourceLimits</a><span class="tsd-signature-symbol">&gt;</span><span class="tsd-signature-symbol"> = ...</span></div>
+<div class="tsd-comment tsd-typography"><p>Safe upper bounds used by archive consumers unless a caller supplies tighter values.</p>
+</div><aside class="tsd-sources">
+<ul>
+<li>Defined in <a href="https://github.com/webllm/webblackbox/blob/main/packages/player-sdk/src/archive-resource-limits.ts#L39">packages/player-sdk/src/archive-resource-limits.ts:39</a></li></ul></aside></div>
+<div class="col-sidebar">
+<div class="page-menu">
+<div class="tsd-navigation settings">
+<details class="tsd-accordion"><summary class="tsd-accordion-summary"><svg width="20" height="20" viewBox="0 0 24 24" fill="none" aria-hidden="true"><use href="../assets/icons.svg#icon-chevronDown"></use></svg>
+<h3>Settings</h3></summary>
+<div class="tsd-accordion-details">
+<div class="tsd-filter-visibility"><span class="settings-label">Member Visibility</span>
+<ul id="tsd-filter-options">
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-inherited" name="inherited" checked/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>Inherited</span></label></li>
+<li class="tsd-filter-item"><label class="tsd-filter-input"><input type="checkbox" id="tsd-filter-external" name="external"/><svg width="32" height="32" viewBox="0 0 32 32" aria-hidden="true"><rect class="tsd-checkbox-background" width="30" height="30" x="1" y="1" rx="6" fill="none"></rect><path class="tsd-checkbox-checkmark" d="M8.35422 16.8214L13.2143 21.75L24.6458 10.25" stroke="none" stroke-width="3.5" stroke-linejoin="round" fill="none"></path></svg><span>External</span></label></li></ul></div>
+<div class="tsd-theme-toggle"><label class="settings-label" for="tsd-theme">Theme</label><select id="tsd-theme"><option value="os">OS</option><option value="light">Light</option><option value="dark">Dark</option></select></div></div></details></div></div>
+<div class="site-menu">
+<nav class="tsd-navigation"><a href="../modules.html">@webblackbox/player-sdk API</a>
+<ul class="tsd-small-nested-navigation" id="tsd-nav-container">
+<li>Loading...</li></ul></nav></div></div></div><footer>
+<p class="tsd-generator">Generated using <a href="https://typedoc.org/" target="_blank">TypeDoc</a></p></footer>
+<div class="overlay"></div></body></html>
diff --git a/package.json b/package.json
index d255cda..c07bcf9 100644
--- a/package.json
+++ b/package.json
@@ -4,7 +4,7 @@
   "version": "0.1.0",
   "license": "MIT",
   "description": "MCP engineering monorepo powered by pnpm + turbo",
-  "packageManager": "pnpm@10.28.1",
+  "packageManager": "pnpm@11.13.1",
   "engines": {
     "node": ">=22.0.0"
   },
@@ -15,21 +15,26 @@
     "player:pages:build": "pnpm --filter @webblackbox/player pages:build",
     "player:pages:deploy": "pnpm --filter @webblackbox/player pages:deploy",
     "player:deploy": "pnpm player:pages:build && pnpm player:pages:deploy",
-    "lint": "turbo run lint",
+    "lint": "turbo run lint && pnpm lint:scripts",
+    "lint:scripts": "eslint \"scripts/*.mjs\" \"apps/*/scripts/*.mjs\" \"apps/*/scripts/*/*.mjs\"",
     "typecheck": "turbo run typecheck",
-    "test": "turbo run test",
-    "coverage:core": "pnpm --filter @webblackbox/recorder test:coverage && pnpm --filter @webblackbox/pipeline test:coverage && pnpm --filter @webblackbox/player-sdk test:coverage",
+    "test": "turbo run test && pnpm test:scripts",
+    "test:scripts": "node --test scripts/*.test.mjs",
+    "coverage:core": "pnpm --filter @webblackbox/protocol test:coverage && pnpm --filter @webblackbox/cdp-router test:coverage && pnpm --filter @webblackbox/recorder test:coverage && pnpm --filter @webblackbox/pipeline test:coverage && pnpm --filter webblackbox test:coverage && pnpm --filter @webblackbox/player-sdk test:coverage && pnpm --filter @webblackbox/mcp-server test:coverage",
     "bench": "pnpm run bench:recorder && pnpm run bench:pipeline",
     "bench:ci": "node scripts/bench-regression-check.mjs",
     "bench:recorder": "pnpm --filter @webblackbox/recorder bench",
     "bench:pipeline": "pnpm --filter @webblackbox/pipeline bench",
     "bundle:size": "node scripts/check-bundle-size.mjs",
     "docs:api": "pnpm --filter @webblackbox/player-sdk docs:api",
+    "docs:api:check": "node scripts/check-api-docs.mjs",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
     "changeset": "changeset",
     "version-packages": "changeset version",
     "release": "changeset publish",
+    "release:verify-artifacts": "node scripts/verify-publish-artifacts.mjs",
+    "release:verify-ref:test": "node --test scripts/verify-release-ref.test.mjs",
     "commit": "cz",
     "prepare": "husky"
   },
@@ -47,11 +52,11 @@
     ]
   },
   "devDependencies": {
-    "@changesets/cli": "^2.29.7",
+    "@changesets/cli": "^2.31.0",
     "@eslint/js": "^9.39.1",
     "@types/node": "^24.10.1",
-    "@vitest/coverage-v8": "^4.0.18",
-    "commitizen": "^4.3.1",
+    "@vitest/coverage-v8": "^4.1.10",
+    "commitizen": "^4.3.2",
     "cz-conventional-changelog": "^3.3.0",
     "eslint": "^9.39.1",
     "globals": "^16.5.0",
@@ -60,10 +65,19 @@
     "prettier": "^3.6.2",
     "tsup": "^8.5.1",
     "tsx": "^4.20.6",
-    "turbo": "^2.6.1",
-    "typedoc": "^0.28.17",
+    "turbo": "2.9.18",
+    "typedoc": "^0.28.20",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.46.4",
-    "vitest": "^4.0.8"
+    "vite": "7.3.5",
+    "vitest": "^4.1.10"
+  },
+  "optionalDependencies": {
+    "@turbo/darwin-64": "2.9.18",
+    "@turbo/darwin-arm64": "2.9.18",
+    "@turbo/linux-64": "2.9.18",
+    "@turbo/linux-arm64": "2.9.18",
+    "@turbo/windows-64": "2.9.18",
+    "@turbo/windows-arm64": "2.9.18"
   }
 }
diff --git a/packages/cdp-router/CHANGELOG.md b/packages/cdp-router/CHANGELOG.md
index 3bdd414..f4e2930 100644
--- a/packages/cdp-router/CHANGELOG.md
+++ b/packages/cdp-router/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @webblackbox/cdp-router
 
+## 0.7.0
+
+### Patch Changes
+
+- b3cfda9: Rebuild publish artifacts deterministically and include the package license in the published tarball.
+- Updated dependencies [b3cfda9]
+  - @webblackbox/protocol@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/packages/cdp-router/LICENSE b/packages/cdp-router/LICENSE
new file mode 100644
index 0000000..fcf7ea4
--- /dev/null
+++ b/packages/cdp-router/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Web LLM
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/cdp-router/package.json b/packages/cdp-router/package.json
index 4d2cdfc..8ec8a09 100644
--- a/packages/cdp-router/package.json
+++ b/packages/cdp-router/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@webblackbox/cdp-router",
   "description": "Chrome DevTools Protocol router for managing debugger targets and CDP sessions across tabs, iframes, and workers.",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -40,9 +40,11 @@
   "scripts": {
     "dev": "tsup src/index.ts --format esm --dts --watch --clean",
     "build": "tsup src/index.ts --format esm --dts --clean",
+    "prepack": "pnpm run build",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run --passWithNoTests"
+    "test": "vitest run --passWithNoTests",
+    "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
     "@webblackbox/protocol": "workspace:*"
diff --git a/packages/cdp-router/vitest.config.ts b/packages/cdp-router/vitest.config.ts
new file mode 100644
index 0000000..5bea0ab
--- /dev/null
+++ b/packages/cdp-router/vitest.config.ts
@@ -0,0 +1,29 @@
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { defineConfig } from "vitest/config";
+
+const root = dirname(fileURLToPath(import.meta.url));
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      "@webblackbox/protocol": resolve(root, "../protocol/src/index.ts")
+    }
+  },
+  test: {
+    environment: "node",
+    coverage: {
+      provider: "v8",
+      reporter: ["text", "lcov"],
+      include: ["src/**/*.ts"],
+      exclude: ["src/**/*.test.ts", "src/index.ts", "src/types.ts"],
+      thresholds: {
+        lines: 55,
+        statements: 55,
+        functions: 45,
+        branches: 48
+      }
+    }
+  }
+});
diff --git a/packages/pipeline/CHANGELOG.md b/packages/pipeline/CHANGELOG.md
index 98e2930..307f9f3 100644
--- a/packages/pipeline/CHANGELOG.md
+++ b/packages/pipeline/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @webblackbox/pipeline
 
+## 0.7.0
+
+### Minor Changes
+
+- b3cfda9: Add durable content-delivery receipts, identity-safe session metadata rebinding, monotonic recovery
+  watermarks, bounded streaming privacy analysis, and strict encrypted-export enforcement.
+
+### Patch Changes
+
+- Updated dependencies [b3cfda9]
+  - @webblackbox/protocol@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/packages/pipeline/LICENSE b/packages/pipeline/LICENSE
new file mode 100644
index 0000000..fcf7ea4
--- /dev/null
+++ b/packages/pipeline/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Web LLM
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/pipeline/README.md b/packages/pipeline/README.md
index 1e0e26d..567a55d 100644
--- a/packages/pipeline/README.md
+++ b/packages/pipeline/README.md
@@ -24,7 +24,7 @@ The event processing pipeline for WebBlackbox. Handles chunking, indexing, blob
 - **EventChunker** — Groups events into size-bounded chunks with codec support
 - **EventIndexer** — Builds time-based, request-based, and inverted text search indexes on demand from stored chunks
 - **Codec** — NDJSON chunk codec support for `none`, `gzip`, `br`, and `zst`
-- **Archive Export** — Creates `.webblackbox` ZIP archives with optional AES-GCM encryption
+- **Archive Export** — Creates policy-gated `.webblackbox` ZIP archives with AES-GCM encryption
 - **PipelineStorage** — Abstract storage interface with in-memory implementation
 - **IndexedDB Quota Recovery** — Indexed storage evicts oldest sessions on quota pressure (best-effort)
 
@@ -68,7 +68,7 @@ const indexes = await pipeline.finalizeIndexes();
 
 // Export as archive
 const result = await pipeline.exportBundle({
-  passphrase: "optional-encryption-key",
+  passphrase: "archive-encryption-key",
   includeScreenshots: true,
   maxArchiveBytes: 100 * 1024 * 1024,
   recentWindowMs: 20 * 60 * 1000
@@ -79,30 +79,45 @@ console.log(`Exported: ${result.fileName} (${result.bytes.length} bytes)`);
 
 `includeScreenshots`, `maxArchiveBytes`, and `recentWindowMs` are optional export filters. If omitted, export includes the full retained session.
 
-### Optional At-Rest Storage Encryption
+An export passphrase is required for real-user sessions, policies with `archive: "required"`,
+and callers that do not supply a capture policy. Plaintext export is limited to synthetic or
+local-debug policies that explicitly grant an exemption and whose `captureContextEvidenceRef`
+is present in `trustedPlaintextExemptionEvidenceRefs`. The deprecated
+`allowPlaintextLocalExport` option is retained for source compatibility but cannot bypass these
+checks.
 
-`EncryptedPipelineStorage` encrypts chunk/blob cache payload bytes before persistence (for example when using IndexedDB storage).
+### Required At-Rest Storage Encryption
+
+`FlightRecorderPipeline.start()` verifies the storage security capability. Volatile memory storage is accepted, but a persistent storage such as raw `IndexedDbPipelineStorage` is rejected when `capturePolicy.encryption.localAtRest` is `"required"`. Wrap persistent storage with `EncryptedPipelineStorage`, which uses authenticated AES-GCM for chunk/blob payload bytes and rejects legacy plaintext on read.
 
 ```typescript
 import {
+  deleteIndexedDbDatabase,
   EncryptedPipelineStorage,
   IndexedDbPipelineStorage,
-  derivePipelineStorageKey
+  getOrCreateIndexedDbPipelineStorageKey
 } from "@webblackbox/pipeline";
 
-const derived = await derivePipelineStorageKey("cache-passphrase");
+const databaseName = "webblackbox-flight-recorder-encrypted-v1";
+const managedKey = await getOrCreateIndexedDbPipelineStorageKey({
+  databaseName: "webblackbox-flight-recorder-keyring-v1",
+  purpose: "my-app:pipeline-payload:aes-gcm:v1"
+});
 
-const storage = new EncryptedPipelineStorage(
-  new IndexedDbPipelineStorage("webblackbox-flight-recorder"),
-  {
-    key: derived.key
-  }
-);
+// A newly created key cannot decrypt any pre-existing payload. Purge possible
+// legacy plaintext or data whose key was lost before opening the data database.
+if (managedKey.created) {
+  await deleteIndexedDbDatabase(databaseName);
+}
 
-// Persist derived.salt + derived.iterations with your own secure key policy.
+const storage = new EncryptedPipelineStorage(new IndexedDbPipelineStorage(databaseName), {
+  key: managedKey.key
+});
 ```
 
-Note: this protects event/blob payload bytes at rest; indexes and session metadata remain plaintext for queryability.
+The managed key is non-extractable, persisted in a purpose-specific IndexedDB keyring, and recoverable after a worker/page restart. Supplying a missing, rejected, extractable, wrong-algorithm, or wrong-usage key fails closed before the pipeline starts. Applications with an external key manager may instead supply their own non-extractable 256-bit AES-GCM key with `encrypt` and `decrypt` usages.
+
+Note: this protects event/blob payload bytes at rest; indexes and session metadata remain plaintext for queryability and must not contain captured payload values.
 
 ### Blob Storage
 
@@ -112,6 +127,39 @@ const hash = await pipeline.putBlob("image/webp", screenshotBytes);
 // Returns SHA-256 hash for content-addressable retrieval
 ```
 
+### Bounded Privacy Analysis
+
+`buildPrivacyManifest` accepts arrays or streaming blob sources. Services scanning untrusted
+archives should provide the exact blob total and explicit byte, finding, and elapsed-time ceilings.
+The returned coverage distinguishes a complete `passed` result from partial or opaque analysis.
+
+```typescript
+import { buildPrivacyManifest } from "@webblackbox/pipeline";
+
+const privacy = await buildPrivacyManifest({
+  events,
+  blobs: readBlobs() as AsyncIterable<{
+    hash: string;
+    mime: string;
+    bytes: Uint8Array;
+  }>,
+  expectedBlobCount: manifest.stats.blobCount,
+  encrypted: false,
+  preEncryption: false,
+  scan: {
+    maxTargetBytes: 2 * 1024 * 1024,
+    maxTotalBytes: 64 * 1024 * 1024,
+    maxFindings: 1,
+    deadlineMs: 5_000,
+    stopOnFinding: true
+  }
+});
+
+if (privacy.scanner.coverage?.complete !== true) {
+  console.warn("Privacy analysis is partial", privacy.scanner.coverage?.incompleteReason);
+}
+```
+
 ## Event Chunking
 
 The `EventChunker` groups events into size-bounded chunks:
diff --git a/packages/pipeline/package.json b/packages/pipeline/package.json
index ee94df2..299a96f 100644
--- a/packages/pipeline/package.json
+++ b/packages/pipeline/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@webblackbox/pipeline",
   "description": "Chunking, indexing, blob storage, and archive export pipeline for WebBlackbox recording sessions.",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -40,6 +40,7 @@
   "scripts": {
     "dev": "tsup src/index.ts --format esm --dts --watch --clean",
     "build": "tsup src/index.ts --format esm --dts --clean",
+    "prepack": "pnpm run build",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run --passWithNoTests",
diff --git a/packages/pipeline/scripts/benchmark.ts b/packages/pipeline/scripts/benchmark.ts
index 0ddc1d6..6814686 100644
--- a/packages/pipeline/scripts/benchmark.ts
+++ b/packages/pipeline/scripts/benchmark.ts
@@ -1,11 +1,13 @@
 import { performance } from "node:perf_hooks";
 
 import type {
+  CapturePolicy,
   PrivacyClassification,
   PrivacyDataCategory,
   SessionMetadata,
   WebBlackboxEvent
 } from "@webblackbox/protocol";
+import { DEFAULT_CAPTURE_POLICY } from "@webblackbox/protocol";
 
 import {
   FlightRecorderPipeline,
@@ -21,6 +23,17 @@ const DEFAULT_SCREENSHOT_INTERVAL = 120;
 const DEFAULT_BLOB_POOL = 24;
 const DEFAULT_BLOB_BYTES = 24 * 1024;
 const EVENT_STEP_MS = 120;
+const BENCHMARK_EVIDENCE_REF = "local-attestation:pipeline-benchmark";
+const BENCHMARK_CAPTURE_POLICY: CapturePolicy = {
+  ...DEFAULT_CAPTURE_POLICY,
+  captureContext: "local-debug",
+  captureContextEvidenceRef: BENCHMARK_EVIDENCE_REF,
+  encryption: {
+    localAtRest: "required",
+    archive: "synthetic-local-debug-exempt",
+    archiveKeyEnvelope: "none"
+  }
+};
 const FULL_EXPORT_OPTIONS = {
   includeScreenshots: true,
   includeScreenRecordings: true,
@@ -34,6 +47,7 @@ type PipelineBenchmarkReport = {
   screenshotInterval: number;
   maxArchiveMb: number;
   recentMinutes: number;
+  eventStepMs: number;
   ingestDurationMs: number;
   ingestThroughputOpsPerSec: number;
   chunkCount: number;
@@ -119,7 +133,9 @@ async function createBenchmarkPipeline(): Promise<{
     session,
     storage,
     maxChunkBytes: 512 * 1024,
-    chunkCodec: "none"
+    chunkCodec: "none",
+    capturePolicy: BENCHMARK_CAPTURE_POLICY,
+    trustedPlaintextExemptionEvidenceRefs: [BENCHMARK_EVIDENCE_REF]
   });
 
   await pipeline.start();
@@ -267,14 +283,18 @@ async function run(): Promise<void> {
     screenshotHashes.push(hash);
   }
 
-  const baseTime = Date.now() - 45 * 60 * 1000;
+  const eventStepMs = Math.max(
+    EVENT_STEP_MS,
+    Math.ceil((recentWindowMs * 2) / Math.max(1, eventCount - 1))
+  );
+  const baseTime = Date.now() - eventStepMs * Math.max(0, eventCount - 1);
   const ingestStart = performance.now();
 
   for (let index = 0; index < eventCount; index += 1) {
     const event = createEvent(
       session.sid,
       index,
-      baseTime + index * EVENT_STEP_MS,
+      baseTime + index * eventStepMs,
       textPool,
       screenshotHashes,
       screenshotInterval,
@@ -326,6 +346,7 @@ async function run(): Promise<void> {
     screenshotInterval,
     maxArchiveMb,
     recentMinutes,
+    eventStepMs,
     ingestDurationMs: ingestMs,
     ingestThroughputOpsPerSec: ingestOps,
     chunkCount: chunks.length,
diff --git a/packages/pipeline/src/chunker.test.ts b/packages/pipeline/src/chunker.test.ts
new file mode 100644
index 0000000..de16088
--- /dev/null
+++ b/packages/pipeline/src/chunker.test.ts
@@ -0,0 +1,195 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { WebBlackboxEvent } from "@webblackbox/protocol";
+
+import { EventChunker, type FinalizedChunk } from "./chunker.js";
+
+function createEvent(index: number): WebBlackboxEvent {
+  return {
+    v: 1,
+    sid: "S-chunker-concurrency",
+    tab: 1,
+    t: index,
+    mono: index,
+    type: "user.marker",
+    id: `E-${index}`,
+    privacy: {
+      category: "actions",
+      sensitivity: "low",
+      redacted: true
+    },
+    data: {
+      index
+    }
+  };
+}
+
+function finalized(chunks: Array<FinalizedChunk | null>): FinalizedChunk[] {
+  return chunks.filter((chunk): chunk is FinalizedChunk => chunk !== null);
+}
+
+describe("EventChunker concurrency", () => {
+  it("serializes concurrent threshold-crossing appends without duplicates or gaps", async () => {
+    const chunker = new EventChunker(1, "none");
+    const chunks = finalized(
+      await Promise.all(
+        Array.from({ length: 40 }, (_, index) => chunker.append(createEvent(index)))
+      )
+    );
+
+    expect(chunks.map((chunk) => chunk.meta.seq)).toEqual(
+      Array.from({ length: 40 }, (_, index) => index + 1)
+    );
+    expect(chunks.flatMap((chunk) => chunk.events.map((event) => event.id))).toEqual(
+      Array.from({ length: 40 }, (_, index) => `E-${index}`)
+    );
+    expect(new Set(chunks.map((chunk) => chunk.meta.chunkId)).size).toBe(40);
+  });
+
+  it("preserves invocation order when append and flush calls are interleaved", async () => {
+    const chunker = new EventChunker(1024 * 1024, "none");
+    const chunks = finalized(
+      await Promise.all([
+        chunker.append(createEvent(1)),
+        chunker.flush(),
+        chunker.append(createEvent(2)),
+        chunker.append(createEvent(3)),
+        chunker.flush()
+      ])
+    );
+
+    expect(chunks.map((chunk) => chunk.meta.seq)).toEqual([1, 2]);
+    expect(chunks.map((chunk) => chunk.events.map((event) => event.id))).toEqual([
+      ["E-1"],
+      ["E-2", "E-3"]
+    ]);
+  });
+
+  it("uses close as an ordered barrier and rejects later appends", async () => {
+    const chunker = new EventChunker(1024 * 1024, "none");
+    const first = chunker.append(createEvent(1));
+    const second = chunker.append(createEvent(2));
+    const closing = chunker.close();
+
+    await expect(chunker.append(createEvent(3))).rejects.toThrow(/after close\(\) has started/i);
+
+    const chunks = finalized(await Promise.all([first, second, closing]));
+
+    expect(chunks).toHaveLength(1);
+    expect(chunks[0]?.meta.seq).toBe(1);
+    expect(chunks[0]?.events.map((event) => event.id)).toEqual(["E-1", "E-2"]);
+    await expect(chunker.close()).resolves.toBeNull();
+    await expect(chunker.flush()).resolves.toBeNull();
+  });
+
+  it("orders delayed events by their sampled timeline before finalizing a chunk", async () => {
+    const chunker = new EventChunker(1024 * 1024, "none");
+    await chunker.append(createEvent(30));
+    await chunker.append(createEvent(10));
+    await chunker.append(createEvent(20));
+
+    const chunk = await chunker.flush();
+
+    expect(chunk?.events.map((event) => event.id)).toEqual(["E-10", "E-20", "E-30"]);
+    expect(chunk?.meta).toMatchObject({
+      tStart: 10,
+      tEnd: 30,
+      monoStart: 10,
+      monoEnd: 30
+    });
+  });
+
+  it("keeps wall and monotonic clocks ordered when their sampled order conflicts", async () => {
+    const chunker = new EventChunker(1024 * 1024, "none");
+    await chunker.append({ ...createEvent(10), t: 30 });
+    await chunker.append({ ...createEvent(20), t: 10 });
+
+    const chunk = await chunker.flush();
+
+    expect(chunk?.events.map(({ t, mono }) => ({ t, mono }))).toEqual([
+      { t: 30, mono: 10 },
+      { t: 30, mono: 20 }
+    ]);
+    expect(chunk?.meta).toMatchObject({
+      tStart: 30,
+      tEnd: 30,
+      monoStart: 10,
+      monoEnd: 20
+    });
+  });
+
+  it("clamps events that arrive behind an already finalized timeline boundary", async () => {
+    const chunker = new EventChunker(1, "none");
+    const first = await chunker.append(createEvent(30));
+    const delayedInput = createEvent(10);
+    const delayed = await chunker.append(delayedInput);
+
+    expect(first?.events[0]).toMatchObject({ t: 30, mono: 30 });
+    expect(delayed?.events[0]).toMatchObject({ id: "E-10", t: 30, mono: 30 });
+    expect(delayedInput).toMatchObject({ t: 10, mono: 10 });
+  });
+
+  it("restores the durable timeline boundary before accepting resumed events", async () => {
+    const chunker = new EventChunker(1, "none");
+    chunker.restoreSequence(7);
+    chunker.restoreTimelineBoundary(80, 100);
+
+    const resumed = await chunker.append(createEvent(5));
+
+    expect(resumed?.meta).toMatchObject({
+      seq: 8,
+      tStart: 80,
+      tEnd: 80,
+      monoStart: 100,
+      monoEnd: 100
+    });
+    expect(resumed?.events[0]).toMatchObject({ t: 80, mono: 100 });
+  });
+
+  it("does not advance the timeline boundary when a chunk commit fails", async () => {
+    const commit = vi
+      .fn<(chunk: FinalizedChunk) => Promise<void>>()
+      .mockRejectedValueOnce(new Error("simulated commit failure"))
+      .mockResolvedValue(undefined);
+    const chunker = new EventChunker(1, "none", commit);
+
+    await expect(chunker.append(createEvent(50))).rejects.toThrow("simulated commit failure");
+    const retried = await chunker.append(createEvent(10));
+
+    expect(retried?.events[0]).toMatchObject({ t: 10, mono: 10 });
+  });
+
+  it("rolls back a failed append finalization without poisoning later operations", async () => {
+    const commit = vi
+      .fn<(chunk: FinalizedChunk) => Promise<void>>()
+      .mockRejectedValueOnce(new Error("simulated commit failure"))
+      .mockResolvedValue(undefined);
+    const chunker = new EventChunker(1, "none", commit);
+
+    await expect(chunker.append(createEvent(1))).rejects.toThrow("simulated commit failure");
+
+    const retried = await chunker.append(createEvent(1));
+
+    expect(retried?.meta.seq).toBe(1);
+    expect(retried?.events.map((event) => event.id)).toEqual(["E-1"]);
+    expect(commit).toHaveBeenCalledTimes(2);
+    expect(commit.mock.calls.map(([chunk]) => chunk.meta.seq)).toEqual([1, 1]);
+  });
+
+  it("retains pending events when close finalization fails and permits close retry", async () => {
+    const chunker = new EventChunker(1024 * 1024, "none");
+    await chunker.append(createEvent(1));
+    const digest = vi
+      .spyOn(globalThis.crypto.subtle, "digest")
+      .mockRejectedValueOnce(new Error("simulated close failure"));
+
+    await expect(chunker.close()).rejects.toThrow("simulated close failure");
+    digest.mockRestore();
+    await expect(chunker.append(createEvent(2))).rejects.toThrow(/after close\(\) has started/i);
+
+    const retried = await chunker.close();
+
+    expect(retried?.meta.seq).toBe(1);
+    expect(retried?.events.map((event) => event.id)).toEqual(["E-1"]);
+  });
+});
diff --git a/packages/pipeline/src/chunker.ts b/packages/pipeline/src/chunker.ts
index b6feed9..4bbb628 100644
--- a/packages/pipeline/src/chunker.ts
+++ b/packages/pipeline/src/chunker.ts
@@ -11,6 +11,14 @@ export type FinalizedChunk = {
   events: WebBlackboxEvent[];
 };
 
+/**
+ * Persists a finalized chunk while the chunker's exclusive operation queue is held.
+ * The callback must not call back into this EventChunker. A rejection does not
+ * advance the sequence: append rolls back its event, while flush/close retain the
+ * pending buffer, so the failed operation can be retried safely.
+ */
+export type FinalizedChunkCommit = (chunk: FinalizedChunk) => Promise<void>;
+
 export class EventChunker {
   private readonly pending: WebBlackboxEvent[] = [];
 
@@ -18,28 +26,80 @@ export class EventChunker {
 
   private sequence = 0;
 
+  private finalizedTimeEnd = Number.NEGATIVE_INFINITY;
+
+  private finalizedMonoEnd = Number.NEGATIVE_INFINITY;
+
+  private operationTail: Promise<void> = Promise.resolve();
+
+  private acceptingEvents = true;
+
+  private closed = false;
+
+  private closePromise: Promise<FinalizedChunk | null> | null = null;
+
   public constructor(
     private readonly maxChunkBytes: number,
-    private readonly codec: ChunkCodec
+    private readonly codec: ChunkCodec,
+    private readonly commit?: FinalizedChunkCommit
   ) {}
 
   public async append(event: WebBlackboxEvent): Promise<FinalizedChunk | null> {
-    this.pending.push(event);
-    this.pendingBytes += estimateEventNdjsonBytes(event);
-
-    if (this.pendingBytes < this.maxChunkBytes) {
-      return null;
+    if (!this.acceptingEvents) {
+      throw new Error("EventChunker cannot append events after close() has started.");
     }
 
-    return this.finalize();
+    const eventBytes = estimateEventNdjsonBytes(event);
+
+    return this.enqueue(async () => {
+      this.pending.push(event);
+      this.pendingBytes += eventBytes;
+
+      if (this.pendingBytes < this.maxChunkBytes) {
+        return null;
+      }
+
+      try {
+        return await this.finalize();
+      } catch (error) {
+        this.pending.pop();
+        this.pendingBytes -= eventBytes;
+        throw error;
+      }
+    });
   }
 
   public async flush(): Promise<FinalizedChunk | null> {
-    if (this.pending.length === 0) {
+    if (this.closed) {
       return null;
     }
 
-    return this.finalize();
+    return this.enqueue(() => this.finalizePending());
+  }
+
+  public close(): Promise<FinalizedChunk | null> {
+    if (this.closed) {
+      return Promise.resolve(null);
+    }
+
+    if (this.closePromise) {
+      return this.closePromise;
+    }
+
+    this.acceptingEvents = false;
+    const attempt = this.enqueue(async () => {
+      const chunk = await this.finalizePending();
+      this.closed = true;
+      return chunk;
+    });
+    const tracked = attempt.finally(() => {
+      if (this.closePromise === tracked) {
+        this.closePromise = null;
+      }
+    });
+
+    this.closePromise = tracked;
+    return tracked;
   }
 
   public restoreSequence(sequence: number): void {
@@ -50,23 +110,50 @@ export class EventChunker {
     this.sequence = Math.floor(sequence);
   }
 
-  private async finalize(): Promise<FinalizedChunk> {
-    this.sequence += 1;
+  public restoreTimelineBoundary(tEnd: number, monoEnd: number): void {
+    if (Number.isFinite(tEnd)) {
+      this.finalizedTimeEnd = Math.max(this.finalizedTimeEnd, tEnd);
+    }
 
-    const events = [...this.pending];
+    if (Number.isFinite(monoEnd)) {
+      this.finalizedMonoEnd = Math.max(this.finalizedMonoEnd, monoEnd);
+    }
+  }
+
+  private enqueue<T>(operation: () => Promise<T>): Promise<T> {
+    const result = this.operationTail.then(operation);
+    // A failed operation rejects its own caller but must not poison the queue.
+    this.operationTail = result.then(
+      () => undefined,
+      () => undefined
+    );
+    return result;
+  }
+
+  private async finalizePending(): Promise<FinalizedChunk | null> {
+    if (this.pending.length === 0) {
+      return null;
+    }
+
+    return this.finalize();
+  }
+
+  private async finalize(): Promise<FinalizedChunk> {
+    const events = canonicalizeEventTimeline(
+      this.pending,
+      this.finalizedTimeEnd,
+      this.finalizedMonoEnd
+    );
     const encoded = await encodeChunkEvents(events, this.codec);
     const bytes = encoded.bytes;
     const first = events[0];
     const last = events[events.length - 1];
     const hash = await sha256Hex(bytes);
-
-    this.pending.length = 0;
-    this.pendingBytes = 0;
-
-    return {
+    const sequence = this.sequence + 1;
+    const chunk: FinalizedChunk = {
       meta: {
-        chunkId: createChunkId(this.sequence),
-        seq: this.sequence,
+        chunkId: createChunkId(sequence),
+        seq: sequence,
         tStart: first?.t ?? 0,
         tEnd: last?.t ?? 0,
         monoStart: first?.mono ?? 0,
@@ -79,9 +166,53 @@ export class EventChunker {
       bytes,
       events
     };
+
+    await this.commit?.(chunk);
+
+    this.pending.length = 0;
+    this.pendingBytes = 0;
+    this.sequence = sequence;
+    this.finalizedTimeEnd = last?.t ?? this.finalizedTimeEnd;
+    this.finalizedMonoEnd = last?.mono ?? this.finalizedMonoEnd;
+
+    return chunk;
   }
 }
 
+function canonicalizeEventTimeline(
+  events: readonly WebBlackboxEvent[],
+  previousTimeEnd: number,
+  previousMonoEnd: number
+): WebBlackboxEvent[] {
+  let time = previousTimeEnd;
+  let mono = previousMonoEnd;
+
+  return events
+    .map((event, ordinal) => ({ event, ordinal }))
+    .sort(
+      (left, right) =>
+        left.event.mono - right.event.mono ||
+        left.event.t - right.event.t ||
+        left.ordinal - right.ordinal
+    )
+    .map(({ event }) => {
+      const nextTime = Math.max(time, event.t);
+      const nextMono = Math.max(mono, event.mono);
+      time = nextTime;
+      mono = nextMono;
+
+      if (nextTime === event.t && nextMono === event.mono) {
+        return event;
+      }
+
+      return {
+        ...event,
+        t: nextTime,
+        mono: nextMono
+      };
+    });
+}
+
 function estimateEventNdjsonBytes(event: WebBlackboxEvent): number {
   return JSON.stringify(event).length + 1;
 }
diff --git a/packages/pipeline/src/codec.ts b/packages/pipeline/src/codec.ts
index b44bfb7..a2ff6a8 100644
--- a/packages/pipeline/src/codec.ts
+++ b/packages/pipeline/src/codec.ts
@@ -18,7 +18,8 @@ export function encodeEventsNdjson(events: WebBlackboxEvent[]): Uint8Array {
 }
 
 export function decodeEventsNdjson(input: string | Uint8Array): WebBlackboxEvent[] {
-  const text = typeof input === "string" ? input : new TextDecoder().decode(input);
+  const text =
+    typeof input === "string" ? input : new TextDecoder("utf-8", { fatal: true }).decode(input);
 
   if (!text.trim()) {
     return [];
diff --git a/packages/pipeline/src/exporter.ts b/packages/pipeline/src/exporter.ts
index fd3eff9..100e75f 100644
--- a/packages/pipeline/src/exporter.ts
+++ b/packages/pipeline/src/exporter.ts
@@ -1,6 +1,18 @@
 import JSZip from "jszip";
 
-import { inferBlobFileExtension } from "@webblackbox/protocol";
+import {
+  assertArchiveChunk,
+  assertArchiveEventIndexes,
+  assertArchiveLayout,
+  inferBlobFileExtension,
+  parseArchivedEvent,
+  parseExportManifest,
+  parseHashesManifest,
+  parseInvertedIndex,
+  parsePrivacyManifest,
+  parseRequestIndex,
+  parseTimeIndex
+} from "@webblackbox/protocol";
 
 import type {
   ChunkCodec,
@@ -14,7 +26,7 @@ import type {
   WebBlackboxEvent
 } from "@webblackbox/protocol";
 
-import { decodeChunkEvents } from "./codec.js";
+import { decodeChunkBytes } from "./codec.js";
 import { sha256Hex } from "./hash.js";
 import type { StoredBlob, StoredChunk } from "./storage.js";
 
@@ -144,41 +156,42 @@ export async function readWebBlackboxArchive(
   options: ArchiveReadOptions = {}
 ): Promise<ParsedWebBlackboxArchive> {
   const zip = await JSZip.loadAsync(bytes);
-  const integrity = await readJson<HashesManifest>(zip, "integrity/hashes.json");
+  const integrity = parseHashesManifest(await readJsonValue(zip, "integrity/hashes.json"));
 
   await verifyArchiveIntegrity(zip, integrity);
 
-  const manifest = await readJson<ExportManifest>(zip, "manifest.json");
+  const manifest = parseExportManifest(await readJsonValue(zip, "manifest.json"));
   const archiveKey = await resolveArchiveReadKey(manifest, options.passphrase);
-  const timeIndex = await readArchiveJson<ChunkTimeIndexEntry[]>(
-    zip,
-    "index/time.json",
-    manifest,
-    archiveKey
+  const timeIndex = parseTimeIndex(
+    await readArchiveJsonValue(zip, "index/time.json", manifest, archiveKey)
   );
-  const requestIndex = await readArchiveJson<RequestIndexEntry[]>(
-    zip,
-    "index/req.json",
-    manifest,
-    archiveKey
+  const requestIndex = parseRequestIndex(
+    await readArchiveJsonValue(zip, "index/req.json", manifest, archiveKey)
   );
-  const invertedIndex = await readArchiveJson<InvertedIndexEntry[]>(
-    zip,
-    "index/inv.json",
-    manifest,
-    archiveKey
+  const invertedIndex = parseInvertedIndex(
+    await readArchiveJsonValue(zip, "index/inv.json", manifest, archiveKey)
   );
-  const privacyManifest = await readOptionalArchiveJson<PrivacyManifest>(
+  const privacyValue = await readOptionalArchiveJsonValue(
     zip,
     "privacy/manifest.json",
     manifest,
     archiveKey
   );
+  const privacyManifest = privacyValue === null ? null : parsePrivacyManifest(privacyValue);
+
+  assertArchiveLayout({
+    paths: archiveFilePaths(zip),
+    manifest,
+    timeIndex,
+    requestIndex,
+    invertedIndex,
+    privacyManifest
+  });
 
   const eventEntries = Object.keys(zip.files)
     .filter((path) => path.startsWith("events/") && path.endsWith(".ndjson"))
     .sort();
-  const chunkCodecById = new Map(timeIndex.map((entry) => [entry.chunkId, entry.codec] as const));
+  const chunkIndexById = new Map(timeIndex.map((entry) => [entry.chunkId, entry] as const));
 
   const events: WebBlackboxEvent[] = [];
 
@@ -186,17 +199,33 @@ export async function readWebBlackboxArchive(
     const file = zip.file(path);
 
     if (!file) {
-      continue;
+      throw new Error(`Invalid WebBlackbox archive: missing indexed event chunk '${path}'.`);
     }
 
     const content = await file.async("uint8array");
     const decoded = await decryptArchiveFile(path, content, manifest, archiveKey);
     const chunkId = parseChunkIdFromPath(path);
-    const codec =
-      (chunkId ? chunkCodecById.get(chunkId) : undefined) ?? (manifest.chunkCodec as ChunkCodec);
-    events.push(...(await decodeChunkEvents(decoded, codec)));
+    const index = chunkId ? chunkIndexById.get(chunkId) : undefined;
+
+    if (!index) {
+      throw new Error(`Invalid WebBlackbox archive: time index is missing event chunk '${path}'.`);
+    }
+
+    const chunkEvents = await parseArchiveChunkEvents(decoded, index.codec, path);
+
+    assertArchiveChunk({
+      path,
+      index,
+      encodedByteLength: decoded.byteLength,
+      encodedSha256: await sha256Hex(decoded),
+      events: chunkEvents
+    });
+
+    events.push(...chunkEvents);
   }
 
+  assertArchiveEventIndexes(manifest, events, requestIndex, invertedIndex);
+
   return {
     manifest,
     events,
@@ -221,38 +250,80 @@ async function addJsonFile(
   fileHashes[path] = await sha256Hex(bytes);
 }
 
-async function readJson<TValue>(zip: JSZip, path: string): Promise<TValue> {
+async function readJsonValue(zip: JSZip, path: string): Promise<unknown> {
   const file = zip.file(path);
 
   if (!file) {
     throw new Error(`Archive is missing required file: ${path}`);
   }
 
-  const content = await file.async("string");
-  return JSON.parse(content) as TValue;
+  const content = decodeArchiveUtf8(await file.async("uint8array"), path);
+  return parseArchiveJson(content, path);
 }
 
-async function readArchiveJson<TValue>(
+async function readArchiveJsonValue(
   zip: JSZip,
   path: string,
   manifest: ExportManifest,
   archiveKey: CryptoKey | null
-): Promise<TValue> {
+): Promise<unknown> {
   const content = await readArchiveFileText(zip, path, manifest, archiveKey);
-  return JSON.parse(content) as TValue;
+  return parseArchiveJson(content, path);
 }
 
-async function readOptionalArchiveJson<TValue>(
+async function readOptionalArchiveJsonValue(
   zip: JSZip,
   path: string,
   manifest: ExportManifest,
   archiveKey: CryptoKey | null
-): Promise<TValue | null> {
+): Promise<unknown | null> {
   if (!zip.file(path)) {
     return null;
   }
 
-  return readArchiveJson<TValue>(zip, path, manifest, archiveKey);
+  return readArchiveJsonValue(zip, path, manifest, archiveKey);
+}
+
+function parseArchiveJson(content: string, path: string): unknown {
+  try {
+    return JSON.parse(content) as unknown;
+  } catch {
+    throw new Error(`Invalid WebBlackbox archive: '${path}' contains malformed JSON.`);
+  }
+}
+
+async function parseArchiveChunkEvents(
+  encoded: Uint8Array,
+  codec: ChunkCodec,
+  path: string
+): Promise<WebBlackboxEvent[]> {
+  const decoded = await decodeChunkBytes(encoded, codec);
+  const lines = decodeArchiveUtf8(decoded, path)
+    .split(/\r?\n/)
+    .filter((line) => line.trim().length > 0);
+  const events: WebBlackboxEvent[] = [];
+
+  for (const [lineIndex, line] of lines.entries()) {
+    let value: unknown;
+
+    try {
+      value = JSON.parse(line) as unknown;
+    } catch {
+      throw new Error(
+        `Invalid WebBlackbox archive: '${path}' contains malformed JSON at event line ${lineIndex + 1}.`
+      );
+    }
+
+    events.push(parseArchivedEvent(value, path, lineIndex + 1));
+  }
+
+  return events;
+}
+
+function archiveFilePaths(zip: JSZip): string[] {
+  return Object.entries(zip.files)
+    .filter(([, file]) => !file.dir)
+    .map(([path]) => path);
 }
 
 async function readArchiveFileText(
@@ -263,7 +334,15 @@ async function readArchiveFileText(
 ): Promise<string> {
   const bytes = await readFileBytes(zip, path);
   const decrypted = await decryptArchiveFile(path, bytes, manifest, archiveKey);
-  return new TextDecoder().decode(decrypted);
+  return decodeArchiveUtf8(decrypted, path);
+}
+
+function decodeArchiveUtf8(bytes: Uint8Array, path: string): string {
+  try {
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+  } catch {
+    throw new Error(`Invalid WebBlackbox archive: '${path}' contains invalid UTF-8.`);
+  }
 }
 
 async function verifyArchiveIntegrity(zip: JSZip, integrity: HashesManifest): Promise<void> {
@@ -395,7 +474,9 @@ async function decryptArchiveFile(
   const fileMeta = encryption.files[path];
 
   if (!fileMeta) {
-    return bytes;
+    throw new Error(
+      `Invalid WebBlackbox archive: encrypted archive is missing file metadata for '${path}'.`
+    );
   }
 
   if (!archiveKey) {
diff --git a/packages/pipeline/src/index.test.ts b/packages/pipeline/src/index.test.ts
index 85c8edc..04bb04d 100644
--- a/packages/pipeline/src/index.test.ts
+++ b/packages/pipeline/src/index.test.ts
@@ -1,18 +1,30 @@
+import "fake-indexeddb/auto";
+
 import { describe, expect, it } from "vitest";
 import JSZip from "jszip";
 
 import {
+  type CapturePolicy,
   DEFAULT_CAPTURE_POLICY,
+  type ExportManifest,
   type SessionMetadata,
   type WebBlackboxEvent
 } from "@webblackbox/protocol";
 
+import { decodeChunkEvents, encodeChunkEvents } from "./codec.js";
 import { readWebBlackboxArchive } from "./exporter.js";
-import { FlightRecorderPipeline } from "./pipeline.js";
 import {
+  FlightRecorderPipeline,
+  type FlightRecorderPipelineOptions,
+  type PipelineDeliverySidecar
+} from "./pipeline.js";
+import {
+  deleteIndexedDbDatabase,
   derivePipelineStorageKey,
   EncryptedPipelineStorage,
-  MemoryPipelineStorage
+  IndexedDbPipelineStorage,
+  MemoryPipelineStorage,
+  type StoredChunk
 } from "./storage.js";
 
 const SESSION: SessionMetadata = {
@@ -31,6 +43,47 @@ const FULL_EXPORT_OPTIONS = {
 } as const;
 const TRUSTED_SYNTHETIC_EVIDENCE_REF = "synthetic-fixture:pipeline-export-0001";
 const TRUSTED_LOCAL_DEBUG_EVIDENCE_REF = "local-attestation:low-risk-override-0001";
+const TRUSTED_PLAINTEXT_TEST_POLICY = {
+  ...DEFAULT_CAPTURE_POLICY,
+  captureContext: "synthetic",
+  captureContextEvidenceRef: TRUSTED_SYNTHETIC_EVIDENCE_REF,
+  encryption: {
+    localAtRest: "required",
+    archive: "synthetic-local-debug-exempt",
+    archiveKeyEnvelope: "none"
+  }
+} satisfies CapturePolicy;
+
+function createTestPipeline(options: FlightRecorderPipelineOptions): FlightRecorderPipeline {
+  return new FlightRecorderPipeline({
+    capturePolicy: TRUSTED_PLAINTEXT_TEST_POLICY,
+    trustedPlaintextExemptionEvidenceRefs: [TRUSTED_SYNTHETIC_EVIDENCE_REF],
+    ...options
+  });
+}
+
+class FailOnceChunkStorage extends MemoryPipelineStorage {
+  private shouldFail = true;
+
+  public override async putChunk(chunk: StoredChunk): Promise<void> {
+    if (this.shouldFail) {
+      this.shouldFail = false;
+      throw new Error("simulated chunk persistence failure");
+    }
+
+    await super.putChunk(chunk);
+  }
+}
+
+class CheckpointBlindStorage extends MemoryPipelineStorage {
+  public override async getResumeState(): Promise<undefined> {
+    return undefined;
+  }
+
+  public override async initializeResumeState(): Promise<void> {
+    // Simulates a compatible third-party storage implementation without normalized indexes.
+  }
+}
 
 function createEvent(
   id: string,
@@ -38,6 +91,40 @@ function createEvent(
   t: number,
   data?: WebBlackboxEvent["data"]
 ): WebBlackboxEvent {
+  const defaultData: Record<string, unknown> =
+    type === "network.request"
+      ? {
+          reqId: "R-1",
+          url: "https://example.com/api",
+          method: "GET"
+        }
+      : type === "network.response"
+        ? {
+            reqId: "R-1",
+            status: 200
+          }
+        : type === "console.entry"
+          ? {
+              level: "info",
+              text: "hello"
+            }
+          : { message: "hello" };
+  const dataRecord =
+    data && typeof data === "object" && !Array.isArray(data)
+      ? (data as Record<string, unknown>)
+      : null;
+  const shouldMergeDefaults =
+    (type === "network.request" && !dataRecord?.request) ||
+    (type === "network.response" && !dataRecord?.response) ||
+    type === "console.entry";
+  const eventData =
+    dataRecord && shouldMergeDefaults
+      ? {
+          ...defaultData,
+          ...dataRecord
+        }
+      : (data ?? defaultData);
+
   return {
     v: 1,
     sid: SESSION.sid,
@@ -71,10 +158,7 @@ function createEvent(
           : "low",
       redacted: true
     },
-    data: data ?? {
-      reqId: "R-1",
-      message: "hello"
-    }
+    data: eventData
   };
 }
 
@@ -93,9 +177,59 @@ function createNoisyPayload(size: number, seed: number): string {
 }
 
 describe("pipeline", () => {
+  it("rebinds mutable session metadata without accepting a different recording identity", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage });
+    await pipeline.start();
+    const rebound: SessionMetadata = {
+      ...SESSION,
+      url: "https://example.com/after-navigation",
+      title: "Updated title",
+      tags: ["triaged"],
+      endedAt: SESSION.startedAt + 1_000
+    };
+
+    await pipeline.rebindSessionMetadata(rebound);
+    await expect(storage.getSession(SESSION.sid)).resolves.toEqual(rebound);
+    await expect(pipeline.rebindSessionMetadata({ ...rebound, mode: "full" })).rejects.toThrow(
+      /immutable recording identity/
+    );
+  });
+
+  it("rejects plaintext persistent storage when local-at-rest encryption is required", async () => {
+    const pipeline = createTestPipeline({
+      session: {
+        ...SESSION,
+        sid: "S-plaintext-persistent-storage"
+      },
+      storage: new IndexedDbPipelineStorage(
+        `wb-pipeline-policy-${Date.now()}-${Math.random().toString(16).slice(2)}`
+      )
+    });
+
+    await expect(
+      pipeline.putBlob("text/plain", new TextEncoder().encode("must-not-persist"))
+    ).rejects.toThrow(/persistent.*authenticated AES-GCM/i);
+    await expect(pipeline.start()).rejects.toThrow(/persistent.*authenticated AES-GCM/i);
+  });
+
+  it("fails pipeline startup when the at-rest encryption key is unavailable", async () => {
+    const pipeline = createTestPipeline({
+      session: {
+        ...SESSION,
+        sid: "S-missing-at-rest-key"
+      },
+      storage: new EncryptedPipelineStorage(new MemoryPipelineStorage(), {
+        key: Promise.reject(new Error("simulated missing key"))
+      })
+    });
+
+    await expect(pipeline.start()).rejects.toThrow(/key is unavailable/i);
+  });
+
   it("rejects events without privacy classification", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 100
@@ -110,7 +244,7 @@ describe("pipeline", () => {
 
   it("chunks events and builds request index", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 100
@@ -129,9 +263,897 @@ describe("pipeline", () => {
     expect(indexes.request.some((entry) => entry.reqId === "R-1")).toBe(true);
   });
 
+  it("resumes a partially committed delivery batch across multiple chunks and pipeline restart", async () => {
+    const storage = new MemoryPipelineStorage();
+    const events = Array.from({ length: 4 }, (_, index) =>
+      createEvent(`E-${index + 1}`, "user.marker", index + 1, {
+        message: createNoisyPayload(64, index)
+      })
+    );
+    const provenance = (eventIndex: number) => ({
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-delivery",
+      batchId: "batch-delivery",
+      fingerprint: "a".repeat(64),
+      eventCount: events.length,
+      eventIndex
+    });
+    const query = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-delivery",
+      batchId: "batch-delivery"
+    };
+    const first = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+
+    await first.start();
+    await first.ingestBatchWithDelivery(
+      events.slice(0, 2),
+      new Map(events.slice(0, 2).map((event, index) => [event.id, provenance(index)]))
+    );
+    await first.flush();
+    expect(await first.getDeliveryReceipt(query)).toEqual(
+      expect.objectContaining({
+        complete: false,
+        indexes: [
+          { eventIndex: 0, outcome: "event", eventId: "E-1" },
+          { eventIndex: 1, outcome: "event", eventId: "E-2" }
+        ]
+      })
+    );
+
+    const restarted = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    await restarted.start();
+    await restarted.ingestBatchWithDelivery(
+      events.slice(2),
+      new Map(events.slice(2).map((event, index) => [event.id, provenance(index + 2)]))
+    );
+    await restarted.flush();
+
+    const completedReceipt = await restarted.getDeliveryReceipt(query);
+    expect(completedReceipt).toEqual(expect.objectContaining({ complete: true }));
+    expect(completedReceipt?.indexes).toHaveLength(4);
+    const persistedIds = (
+      await Promise.all(
+        (await storage.listChunks(SESSION.sid)).map((chunk) =>
+          decodeChunkEvents(chunk.bytes, chunk.meta.codec)
+        )
+      )
+    )
+      .flat()
+      .map((event) => event.id);
+    expect(persistedIds).toEqual(["E-1", "E-2", "E-3", "E-4"]);
+  });
+
+  it("resumes partial multi-chunk delivery through encrypted indexeddb restart", async () => {
+    const databaseName = `wb-delivery-restart-${Date.now()}-${Math.random().toString(16).slice(2)}`;
+    const key = await crypto.subtle.generateKey({ name: "AES-GCM", length: 256 }, false, [
+      "encrypt",
+      "decrypt"
+    ]);
+    const session = { ...SESSION, sid: "S-encrypted-delivery-restart" };
+    const events = Array.from({ length: 4 }, (_, index) => ({
+      ...createEvent(`E-encrypted-${index + 1}`, "user.marker", index + 1, {
+        message: createNoisyPayload(64, index)
+      }),
+      sid: session.sid
+    }));
+    const provenance = (eventIndex: number) => ({
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-encrypted-delivery",
+      batchId: "batch-encrypted-delivery",
+      fingerprint: "6".repeat(64),
+      eventCount: events.length,
+      eventIndex
+    });
+    const query = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-encrypted-delivery",
+      batchId: "batch-encrypted-delivery"
+    };
+    const firstStorage = new EncryptedPipelineStorage(new IndexedDbPipelineStorage(databaseName), {
+      key
+    });
+    const first = createTestPipeline({ session, storage: firstStorage, maxChunkBytes: 1 });
+
+    await first.start();
+    await first.ingestBatchWithDelivery(
+      events.slice(0, 2),
+      new Map(events.slice(0, 2).map((event, index) => [event.id, provenance(index)]))
+    );
+    expect(await first.getDeliveryReceipt(query)).toEqual(
+      expect.objectContaining({ complete: false })
+    );
+
+    const restartedStorage = new EncryptedPipelineStorage(
+      new IndexedDbPipelineStorage(databaseName),
+      { key }
+    );
+    const restarted = createTestPipeline({
+      session,
+      storage: restartedStorage,
+      maxChunkBytes: 1
+    });
+    await restarted.start();
+    await restarted.ingestBatchWithDelivery(
+      events.slice(2),
+      new Map(events.slice(2).map((event, index) => [event.id, provenance(index + 2)]))
+    );
+    await restarted.flush();
+
+    expect(await restarted.getDeliveryReceipt(query)).toEqual(
+      expect.objectContaining({ complete: true })
+    );
+    const persisted = (
+      await Promise.all(
+        (await restartedStorage.listChunks(session.sid)).map((chunk) =>
+          decodeChunkEvents(chunk.bytes, chunk.meta.codec)
+        )
+      )
+    ).flat();
+    expect(persisted.map((event) => event.id)).toEqual(events.map((event) => event.id));
+
+    await restarted.close({ purge: true });
+    await deleteIndexedDbDatabase(databaseName);
+  });
+
+  it("commits no-output progress without a chunk and completes only after output flush", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1024 * 1024 });
+    const base = {
+      tabId: 1,
+      frameId: 2,
+      documentId: "document-mixed",
+      batchId: "batch-mixed",
+      fingerprint: "b".repeat(64),
+      eventCount: 2
+    };
+    const query = {
+      tabId: base.tabId,
+      frameId: base.frameId,
+      documentId: base.documentId,
+      batchId: base.batchId
+    };
+    const event = createEvent("E-1", "user.marker", 1);
+
+    await pipeline.start();
+    await pipeline.commitDeliveryProgress([{ ...base, eventIndex: 1, outcome: "no-output" }]);
+    expect(await storage.listChunks(SESSION.sid)).toEqual([]);
+    await pipeline.ingestBatchWithDelivery(
+      [event],
+      new Map([[event.id, { ...base, eventIndex: 0 }]])
+    );
+    expect(await pipeline.getDeliveryReceipt(query)).toEqual(
+      expect.objectContaining({
+        complete: false,
+        indexes: [{ eventIndex: 1, outcome: "no-output" }]
+      })
+    );
+
+    await pipeline.flush();
+    const completedReceipt = await pipeline.getDeliveryReceipt(query);
+    expect(completedReceipt).toEqual(expect.objectContaining({ complete: true }));
+    expect(completedReceipt?.indexes).toHaveLength(2);
+  });
+
+  it("flushes pending output before no-output progress can complete its delivery receipt", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1024 * 1024 });
+    const base = {
+      tabId: 1,
+      frameId: 2,
+      documentId: "document-flush-before-progress",
+      batchId: "batch-flush-before-progress",
+      fingerprint: "e".repeat(64),
+      eventCount: 2
+    };
+    const query = {
+      tabId: base.tabId,
+      frameId: base.frameId,
+      documentId: base.documentId,
+      batchId: base.batchId
+    };
+    const event = createEvent("E-1", "user.marker", 1);
+
+    await pipeline.start();
+    await pipeline.ingestBatchWithDelivery(
+      [event],
+      new Map([[event.id, { ...base, eventIndex: 0 }]])
+    );
+    expect(await storage.listChunks(SESSION.sid)).toEqual([]);
+
+    await pipeline.commitDeliveryProgress([{ ...base, eventIndex: 1, outcome: "no-output" }]);
+
+    expect(await storage.listChunks(SESSION.sid)).toHaveLength(1);
+    expect(await pipeline.getDeliveryReceipt(query)).toEqual(
+      expect.objectContaining({
+        complete: true,
+        indexes: [
+          { eventIndex: 0, outcome: "event", eventId: event.id },
+          { eventIndex: 1, outcome: "no-output" }
+        ]
+      })
+    );
+  });
+
+  it("rejects no-output progress that conflicts with pending output provenance", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1024 * 1024 });
+    const base = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-outcome-conflict",
+      batchId: "batch-outcome-conflict",
+      fingerprint: "f".repeat(64),
+      eventCount: 1
+    };
+    const query = {
+      tabId: base.tabId,
+      frameId: base.frameId,
+      documentId: base.documentId,
+      batchId: base.batchId
+    };
+    const event = createEvent("E-1", "user.marker", 1);
+
+    await pipeline.start();
+    await pipeline.ingestBatchWithDelivery(
+      [event],
+      new Map([[event.id, { ...base, eventIndex: 0 }]])
+    );
+
+    await expect(
+      pipeline.commitDeliveryProgress([{ ...base, eventIndex: 0, outcome: "no-output" }])
+    ).rejects.toThrow(/conflicts with pending output provenance/i);
+    expect(await pipeline.getDeliveryReceipt(query)).toEqual({
+      ...base,
+      indexes: [{ eventIndex: 0, outcome: "event", eventId: event.id }],
+      complete: true
+    });
+  });
+
+  it("does not commit no-output progress when flushing pending output fails", async () => {
+    const storage = new FailOnceChunkStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1024 * 1024 });
+    const base = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-progress-flush-failure",
+      batchId: "batch-progress-flush-failure",
+      fingerprint: "9".repeat(64),
+      eventCount: 2
+    };
+    const query = {
+      tabId: base.tabId,
+      frameId: base.frameId,
+      documentId: base.documentId,
+      batchId: base.batchId
+    };
+    const event = createEvent("E-1", "user.marker", 1);
+
+    await pipeline.start();
+    await pipeline.ingestBatchWithDelivery(
+      [event],
+      new Map([[event.id, { ...base, eventIndex: 0 }]])
+    );
+
+    await expect(
+      pipeline.commitDeliveryProgress([{ ...base, eventIndex: 1, outcome: "no-output" }])
+    ).rejects.toThrow(/simulated chunk persistence failure/i);
+    expect(await pipeline.getDeliveryReceipt(query)).toBeUndefined();
+    expect(await storage.listChunks(SESSION.sid)).toEqual([]);
+
+    await pipeline.commitDeliveryProgress([{ ...base, eventIndex: 1, outcome: "no-output" }]);
+    expect(await pipeline.getDeliveryReceipt(query)).toEqual(
+      expect.objectContaining({ complete: true })
+    );
+  });
+
+  it("does not advance a delivery receipt when its output chunk commit fails", async () => {
+    const storage = new FailOnceChunkStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    const event = createEvent("E-1", "user.marker", 1);
+    const provenance = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-failure",
+      batchId: "batch-failure",
+      fingerprint: "c".repeat(64),
+      eventCount: 1,
+      eventIndex: 0
+    };
+    const query = {
+      tabId: provenance.tabId,
+      frameId: provenance.frameId,
+      documentId: provenance.documentId,
+      batchId: provenance.batchId
+    };
+
+    await pipeline.start();
+    await expect(
+      pipeline.ingestBatchWithDelivery([event], new Map([[event.id, provenance]]))
+    ).rejects.toThrow(/simulated chunk persistence failure/i);
+    expect(await pipeline.getDeliveryReceipt(query)).toBeUndefined();
+    expect(await storage.listChunks(SESSION.sid)).toEqual([]);
+
+    await pipeline.ingestBatchWithDelivery([event], new Map([[event.id, provenance]]));
+    expect(await pipeline.getDeliveryReceipt(query)).toEqual(
+      expect.objectContaining({ complete: true })
+    );
+  });
+
+  it("retries a delivery batch without duplicating events retained before a failed chunk append", async () => {
+    const storage = new FailOnceChunkStorage();
+    const events = [
+      createEvent("E-retained-1", "user.marker", 1, { value: "first" }),
+      createEvent("E-retained-2", "user.marker", 2, { value: "second" })
+    ];
+    const pipeline = createTestPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: JSON.stringify(events[0]).length + 2
+    });
+    const provenance = (eventIndex: number) => ({
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-retained-retry",
+      batchId: "batch-retained-retry",
+      fingerprint: "4".repeat(64),
+      eventCount: events.length,
+      eventIndex
+    });
+    const sidecar = new Map(
+      events.map((event, eventIndex) => [event.id, provenance(eventIndex)] as const)
+    );
+
+    await pipeline.start();
+    await expect(pipeline.ingestBatchWithDelivery(events, sidecar)).rejects.toThrow(
+      /simulated chunk persistence failure/i
+    );
+    await pipeline.ingestBatchWithDelivery(events, sidecar);
+    await pipeline.flush();
+
+    const chunks = await storage.listChunks(SESSION.sid);
+    const persisted = (
+      await Promise.all(chunks.map((chunk) => decodeChunkEvents(chunk.bytes, chunk.meta.codec)))
+    ).flat();
+    expect(persisted.map((event) => event.id)).toEqual(events.map((event) => event.id));
+    expect(new Set(persisted.map((event) => event.id)).size).toBe(events.length);
+  });
+
+  it("rejects an explicitly undefined delivery sidecar entry instead of dropping provenance", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1024 * 1024 });
+    const event = createEvent("E-undefined-sidecar", "user.marker", 1);
+    const sidecar = new Map([[event.id, undefined]]) as unknown as PipelineDeliverySidecar;
+
+    await pipeline.start();
+    await expect(pipeline.ingestBatchWithDelivery([event], sidecar)).rejects.toThrow(
+      /invalid pipeline delivery event provenance/i
+    );
+    await pipeline.flush();
+    expect(await storage.listChunks(SESSION.sid)).toEqual([]);
+  });
+
+  it("deduplicates exact pending and durable delivery retries across calls", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1024 * 1024 });
+    const event = createEvent("E-delivery-retry", "user.marker", 1);
+    const provenance = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-delivery-retry",
+      batchId: "batch-delivery-retry",
+      fingerprint: "7".repeat(64),
+      eventCount: 1,
+      eventIndex: 0
+    };
+    const sidecar = new Map([[event.id, provenance]]);
+
+    await pipeline.start();
+    await pipeline.ingestBatchWithDelivery([event], sidecar);
+    await pipeline.ingestBatchWithDelivery([event], sidecar);
+    await pipeline.flush();
+    await pipeline.ingestBatchWithDelivery([event], sidecar);
+    await pipeline.flush();
+
+    const chunks = await storage.listChunks(SESSION.sid);
+    const persisted = (
+      await Promise.all(chunks.map((chunk) => decodeChunkEvents(chunk.bytes, chunk.meta.codec)))
+    ).flat();
+    expect(persisted.map((candidate) => candidate.id)).toEqual([event.id]);
+    expect(chunks).toHaveLength(1);
+  });
+
+  it("rejects cross-call event-id and batch-index provenance conflicts", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1024 * 1024 });
+    const event = createEvent("E-delivery-conflict", "user.marker", 1);
+    const base = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-delivery-conflict",
+      batchId: "batch-delivery-conflict",
+      fingerprint: "8".repeat(64),
+      eventCount: 2
+    };
+
+    await pipeline.start();
+    await pipeline.ingestBatchWithDelivery(
+      [event],
+      new Map([[event.id, { ...base, eventIndex: 0 }]])
+    );
+
+    await expect(
+      pipeline.ingestBatchWithDelivery(
+        [event],
+        new Map([[event.id, { ...base, batchId: "different-batch", eventIndex: 0 }]])
+      )
+    ).rejects.toThrow(/event id was reused with different delivery provenance/i);
+    await expect(
+      pipeline.ingestBatchWithDelivery(
+        [createEvent("E-different-event", "user.marker", 2)],
+        new Map([
+          [
+            "E-different-event",
+            {
+              ...base,
+              eventIndex: 0
+            }
+          ]
+        ])
+      )
+    ).rejects.toThrow(/batch index already has a different pending event/i);
+
+    await pipeline.flush();
+    const chunks = await storage.listChunks(SESSION.sid);
+    const persisted = (
+      await Promise.all(chunks.map((chunk) => decodeChunkEvents(chunk.bytes, chunk.meta.codec)))
+    ).flat();
+    expect(persisted.map((candidate) => candidate.id)).toEqual([event.id]);
+  });
+
+  it("serializes concurrent ingests with close and persists each event exactly once", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: 1
+    });
+    const events = Array.from({ length: 30 }, (_, index) =>
+      createEvent(`E-concurrent-${index}`, "user.marker", index)
+    );
+
+    await pipeline.start();
+    const ingests = events.map((event) => pipeline.ingest(event));
+    const closing = pipeline.close();
+
+    await expect(
+      pipeline.ingest(createEvent("E-after-close", "user.marker", events.length))
+    ).rejects.toThrow(/after close\(\) has started/i);
+    await Promise.all([...ingests, closing]);
+
+    const chunks = await storage.listChunks(SESSION.sid);
+    const persisted = (
+      await Promise.all(chunks.map((chunk) => decodeChunkEvents(chunk.bytes, chunk.meta.codec)))
+    ).flat();
+
+    expect(chunks.map((chunk) => chunk.meta.seq)).toEqual(
+      Array.from({ length: events.length }, (_, index) => index + 1)
+    );
+    expect(persisted.map((event) => event.id)).toEqual(events.map((event) => event.id));
+    expect(new Set(persisted.map((event) => event.id)).size).toBe(events.length);
+  });
+
+  it("continues chunk sequencing when an offscreen pipeline is rebuilt after restart", async () => {
+    const storage = new MemoryPipelineStorage();
+    const first = createTestPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: 1
+    });
+    await first.start();
+    await first.ingest({
+      ...createEvent("E-00000051", "user.marker", 1),
+      ref: { act: "A-000007" }
+    });
+    await first.close();
+
+    const restored = createTestPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: 1
+    });
+    await restored.start();
+    expect(await restored.getSequenceWatermark()).toEqual({ event: 51, action: 7 });
+    await restored.ingest(createEvent("E-00000052", "user.marker", 2));
+    const exported = await restored.exportBundle(FULL_EXPORT_OPTIONS);
+    const archive = await readWebBlackboxArchive(exported.bytes);
+    await restored.close();
+
+    const chunks = await storage.listChunks(SESSION.sid);
+    expect(chunks.map((chunk) => chunk.meta.seq)).toEqual([1, 2]);
+    expect(chunks[1]?.resumeDelta?.sequenceWatermark).toEqual({ event: 52, action: 7 });
+    expect(archive.events.map((event) => event.id)).toEqual(["E-00000051", "E-00000052"]);
+    expect(new Set(archive.events.map((event) => event.id)).size).toBe(archive.events.length);
+  });
+
+  it("restores the persisted timeline watermark before ingesting delayed events", async () => {
+    const storage = new MemoryPipelineStorage();
+    const session = {
+      ...SESSION,
+      sid: "S-delayed-event-restart"
+    };
+    const first = createTestPipeline({ session, storage, maxChunkBytes: 1 });
+    await first.start();
+    await first.ingest({
+      ...createEvent("E-00000001", "user.marker", 100),
+      sid: session.sid
+    });
+    await first.close();
+
+    const restored = createTestPipeline({ session, storage, maxChunkBytes: 1 });
+    await restored.start();
+    await restored.ingest({
+      ...createEvent("E-00000002", "user.marker", 10),
+      sid: session.sid
+    });
+    const exported = await restored.exportBundle(FULL_EXPORT_OPTIONS);
+    const archive = await readWebBlackboxArchive(exported.bytes);
+    await restored.close();
+
+    expect(archive.events.map(({ id, t, mono }) => ({ id, t, mono }))).toEqual([
+      { id: "E-00000001", t: 100, mono: 100 },
+      { id: "E-00000002", t: 100, mono: 100 }
+    ]);
+  });
+
+  it("reports pending offscreen events and screen chunk hashes in the live resume state", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: 1_000_000
+    });
+    const hash = "c".repeat(64);
+
+    await pipeline.start();
+    await pipeline.ingest({
+      ...createEvent("E-00000091", "screen.recording.chunk", 1, {
+        recordingId: "VR-pending",
+        chunkId: hash,
+        index: 0,
+        mime: "video/webm",
+        size: 10
+      }),
+      ref: { act: "A-000012" }
+    });
+
+    expect(await storage.listChunks(SESSION.sid)).toHaveLength(0);
+    expect(await pipeline.getResumeState()).toEqual({
+      sequenceWatermark: { event: 91, action: 12 },
+      screenRecordings: [
+        {
+          recordingId: "VR-pending",
+          chunks: [{ index: 0, hash, size: 10 }]
+        }
+      ]
+    });
+  });
+
+  it("restores cumulative screen hashes from the latest durable chunk only", async () => {
+    const storage = new MemoryPipelineStorage();
+    const before = "d".repeat(64);
+    const after = "e".repeat(64);
+    const first = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    await first.start();
+    await first.ingest(
+      createEvent("E-00000101", "screen.recording.chunk", 1, {
+        recordingId: "VR-restart",
+        chunkId: before,
+        index: 0
+      })
+    );
+    await first.ingest(
+      createEvent("E-00000102", "screen.recording.chunk", 2, {
+        recordingId: "VR-restart",
+        chunkId: after,
+        index: 1
+      })
+    );
+    await first.close();
+
+    const restored = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    await restored.start();
+    expect(await restored.getResumeState()).toEqual({
+      sequenceWatermark: { event: 102, action: 0 },
+      screenRecordings: [
+        {
+          recordingId: "VR-restart",
+          chunks: [
+            { index: 0, hash: before },
+            { index: 1, hash: after }
+          ]
+        }
+      ]
+    });
+  });
+
+  it("stores constant-size resume deltas and prunes completed recording references", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+
+    await pipeline.start();
+    await pipeline.ingest(
+      createEvent("E-00000001", "screen.recording.start", 0, {
+        recordingId: "VR-bounded"
+      })
+    );
+    expect((await pipeline.getResumeState()).screenRecordings).toEqual([
+      { recordingId: "VR-bounded", chunks: [] }
+    ]);
+
+    for (let index = 0; index < 100; index += 1) {
+      await pipeline.ingest(
+        createEvent(`E-${String(index + 2).padStart(8, "0")}`, "screen.recording.chunk", index, {
+          recordingId: "VR-bounded",
+          chunkId: index.toString(16).padStart(64, "0"),
+          index
+        })
+      );
+    }
+
+    const chunks = await storage.listChunks(SESSION.sid);
+    const checkpointSizes = chunks.map((chunk) => JSON.stringify(chunk.resumeDelta).length);
+
+    expect(chunks).toHaveLength(101);
+    expect(chunks.every((chunk) => chunk.resumeState === undefined)).toBe(true);
+    expect(Math.max(...checkpointSizes)).toBeLessThan(300);
+    expect((await pipeline.getResumeState()).screenRecordings[0]?.chunks).toHaveLength(100);
+
+    await pipeline.ingest(
+      createEvent("E-00000102", "screen.recording.end", 101, {
+        recordingId: "VR-bounded"
+      })
+    );
+    expect((await pipeline.getResumeState()).screenRecordings).toEqual([]);
+    await pipeline.close();
+  });
+
+  it("rejects an over-limit live resume state before buffering the event", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: 1_000_000
+    });
+
+    await pipeline.start();
+
+    for (let index = 0; index < 32; index += 1) {
+      await pipeline.ingest(
+        createEvent(`E-${String(index + 1).padStart(8, "0")}`, "screen.recording.start", index, {
+          recordingId: `VR-live-${index}`
+        })
+      );
+    }
+
+    await expect(
+      pipeline.ingest(
+        createEvent("E-00000033", "screen.recording.start", 33, {
+          recordingId: "VR-live-overflow"
+        })
+      )
+    ).rejects.toThrow(/too many active screen recordings/i);
+    expect((await pipeline.getResumeState()).screenRecordings).toHaveLength(32);
+    await pipeline.close();
+    expect((await storage.listChunks(SESSION.sid))[0]?.meta.eventCount).toBe(32);
+  });
+
+  it("rebuilds resume deltas for compatible storage without normalized indexes", async () => {
+    const storage = new CheckpointBlindStorage();
+    const first = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    const firstHash = "a".repeat(64);
+    const secondHash = "b".repeat(64);
+
+    await first.start();
+    await first.ingest(
+      createEvent("E-00000201", "screen.recording.chunk", 1, {
+        recordingId: "VR-compatible",
+        chunkId: firstHash,
+        index: 0
+      })
+    );
+    await first.ingest(
+      createEvent("E-00000202", "screen.recording.chunk", 2, {
+        recordingId: "VR-compatible",
+        chunkId: secondHash,
+        index: 1
+      })
+    );
+    await first.close();
+
+    const restored = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    await restored.start();
+    expect(await restored.getResumeState()).toEqual({
+      sequenceWatermark: { event: 202, action: 0 },
+      screenRecordings: [
+        {
+          recordingId: "VR-compatible",
+          chunks: [
+            { index: 0, hash: firstHash },
+            { index: 1, hash: secondHash }
+          ]
+        }
+      ]
+    });
+    await restored.close();
+  });
+
+  it("applies recording lifecycle events while migrating a cumulative checkpoint", async () => {
+    const storage = new MemoryPipelineStorage();
+    const hash = "f".repeat(64);
+    const ended = createEvent("E-00000301", "screen.recording.end", 3, {
+      recordingId: "VR-legacy-ended"
+    });
+    const encoded = await encodeChunkEvents([ended], "none");
+
+    await storage.putSession(SESSION);
+    await storage.putChunk({
+      sid: SESSION.sid,
+      meta: {
+        chunkId: "C-00000001",
+        seq: 1,
+        tStart: ended.t,
+        tEnd: ended.t,
+        monoStart: ended.mono,
+        monoEnd: ended.mono,
+        eventCount: 1,
+        byteLength: encoded.bytes.byteLength,
+        codec: encoded.codec,
+        sha256: "0".repeat(64)
+      },
+      bytes: encoded.bytes,
+      resumeState: {
+        sequenceWatermark: { event: 301, action: 0 },
+        screenRecordings: [
+          {
+            recordingId: "VR-legacy-ended",
+            chunks: [{ index: 0, hash }]
+          }
+        ]
+      }
+    });
+
+    const restored = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    await restored.start();
+    expect(await restored.getResumeState()).toEqual({
+      sequenceWatermark: { event: 301, action: 0 },
+      screenRecordings: []
+    });
+    await restored.close();
+  });
+
+  it("replays lifecycle events from legacy checkpoints before later deltas", async () => {
+    const storage = new CheckpointBlindStorage();
+    const hash = "e".repeat(64);
+    const ended = createEvent("E-00000311", "screen.recording.end", 3, {
+      recordingId: "VR-mixed-ended"
+    });
+    const encoded = await encodeChunkEvents([ended], "none");
+
+    await storage.putSession(SESSION);
+    await storage.putChunk({
+      sid: SESSION.sid,
+      meta: {
+        chunkId: "C-00000001",
+        seq: 1,
+        tStart: ended.t,
+        tEnd: ended.t,
+        monoStart: ended.mono,
+        monoEnd: ended.mono,
+        eventCount: 1,
+        byteLength: encoded.bytes.byteLength,
+        codec: encoded.codec,
+        sha256: "1".repeat(64)
+      },
+      bytes: encoded.bytes,
+      resumeState: {
+        sequenceWatermark: { event: 311, action: 0 },
+        screenRecordings: [
+          {
+            recordingId: "VR-mixed-ended",
+            chunks: [{ index: 0, hash }]
+          }
+        ]
+      }
+    });
+    await storage.putChunk({
+      sid: SESSION.sid,
+      meta: {
+        chunkId: "C-00000002",
+        seq: 2,
+        tStart: 4,
+        tEnd: 4,
+        monoStart: 4,
+        monoEnd: 4,
+        eventCount: 0,
+        byteLength: 0,
+        codec: "none",
+        sha256: "2".repeat(64)
+      },
+      bytes: new Uint8Array(),
+      resumeDelta: {
+        version: 1,
+        sequenceWatermark: { event: 312, action: 0 },
+        screenRecordingChanges: []
+      }
+    });
+
+    const restored = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    await restored.start();
+    expect(await restored.getResumeState()).toEqual({
+      sequenceWatermark: { event: 312, action: 0 },
+      screenRecordings: []
+    });
+    await restored.close();
+  });
+
+  it("closes a durable recording checkpoint after a restart interruption", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+
+    await pipeline.start();
+    await pipeline.ingest(
+      createEvent("E-00000401", "screen.recording.start", 1, {
+        recordingId: "VR-interrupted"
+      })
+    );
+    await pipeline.ingest(
+      createEvent("E-00000402", "screen.recording.error", 2, {
+        recordingId: "VR-interrupted",
+        name: "OffscreenRecordingInterrupted",
+        message: "runtime restarted",
+        stage: "restart"
+      })
+    );
+    expect((await pipeline.getResumeState()).screenRecordings).toEqual([]);
+    await pipeline.close();
+
+    const restored = createTestPipeline({ session: SESSION, storage, maxChunkBytes: 1 });
+    await restored.start();
+    expect((await restored.getResumeState()).screenRecordings).toEqual([]);
+    await restored.close();
+  });
+
+  it("can retry an ingest after chunk persistence fails without a sequence gap or duplicate", async () => {
+    const storage = new FailOnceChunkStorage();
+    const pipeline = createTestPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: 1
+    });
+    const event = createEvent("E-persistence-retry", "user.marker", 1);
+
+    await pipeline.start();
+    await expect(pipeline.ingest(event)).rejects.toThrow("simulated chunk persistence failure");
+    await pipeline.ingest(event);
+    await pipeline.close();
+
+    const chunks = await storage.listChunks(SESSION.sid);
+    const persisted = (
+      await Promise.all(chunks.map((chunk) => decodeChunkEvents(chunk.bytes, chunk.meta.codec)))
+    ).flat();
+
+    expect(chunks.map((chunk) => chunk.meta.seq)).toEqual([1]);
+    expect(persisted.map((item) => item.id)).toEqual([event.id]);
+  });
+
   it("indexes request ids from nested request payloads", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: {
         ...SESSION,
         sid: "S-nested-request-id"
@@ -164,7 +1186,7 @@ describe("pipeline", () => {
   it("encodes and decodes chunk codecs when runtime support is available", async () => {
     for (const codec of ["gzip", "br", "zst"] as const) {
       const storage = new MemoryPipelineStorage();
-      const pipeline = new FlightRecorderPipeline({
+      const pipeline = createTestPipeline({
         session: {
           ...SESSION,
           sid: `S-codec-${codec}`
@@ -200,7 +1222,7 @@ describe("pipeline", () => {
 
   it("sanitizes session URLs in export manifests", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: {
         ...SESSION,
         sid: "S-manifest-url-privacy",
@@ -235,7 +1257,7 @@ describe("pipeline", () => {
 
   it("applies the default export policy when no options are passed", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: {
         ...SESSION,
         sid: "S-default-export-policy"
@@ -271,7 +1293,7 @@ describe("pipeline", () => {
 
   it("allows local export and records scanner findings when raw secrets remain", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: {
         ...SESSION,
         sid: "S-scanner-warning"
@@ -304,7 +1326,7 @@ describe("pipeline", () => {
 
   it("blocks scanner findings when strict privacy scanning is requested", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: {
         ...SESSION,
         sid: "S-scanner-strict"
@@ -325,9 +1347,9 @@ describe("pipeline", () => {
     );
   });
 
-  it("requires encryption for real-user capture policies", async () => {
+  it("requires encryption for real-user capture policies even when the legacy plaintext flag is set", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: {
         ...SESSION,
         sid: "S-real-user-encryption"
@@ -340,37 +1362,53 @@ describe("pipeline", () => {
     await pipeline.start();
     await pipeline.ingest(createEvent("E-real-user", "user.click", Date.now()));
 
-    await expect(pipeline.exportBundle()).rejects.toThrow(/encryption is required/i);
+    await expect(pipeline.exportBundle({ allowPlaintextLocalExport: true })).rejects.toThrow(
+      /real-user archives must be encrypted/i
+    );
   });
 
-  it("allows explicit plaintext local exports for real-user capture policies", async () => {
+  it("requires encryption when no capture policy can prove a trusted plaintext exemption", async () => {
     const storage = new MemoryPipelineStorage();
     const pipeline = new FlightRecorderPipeline({
       session: {
         ...SESSION,
-        sid: "S-real-user-plaintext-local"
+        sid: "S-missing-export-policy"
       },
       storage,
-      maxChunkBytes: 512,
-      capturePolicy: DEFAULT_CAPTURE_POLICY
+      maxChunkBytes: 512
     });
 
     await pipeline.start();
-    await pipeline.ingest(createEvent("E-real-user-plaintext", "user.click", Date.now()));
+    await pipeline.ingest(createEvent("E-missing-export-policy", "user.click", Date.now()));
 
-    const exported = await pipeline.exportBundle({
-      allowPlaintextLocalExport: true
-    });
-    const parsed = await readWebBlackboxArchive(exported.bytes);
+    await expect(pipeline.exportBundle({ allowPlaintextLocalExport: true })).rejects.toThrow(
+      /trusted synthetic or local-debug plaintext exemption/i
+    );
+  });
 
-    expect(parsed.manifest.encryption).toBeUndefined();
-    expect(parsed.privacyManifest?.encryption.archive).toBe("plaintext");
-    expect(parsed.privacyManifest?.transfer).toMatchObject({
-      destination: "local-download",
-      archiveKeyEnvelope: "none",
-      encrypted: false,
-      shareEligible: false
+  it("requires encryption when a synthetic capture policy marks archives as required", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({
+      session: {
+        ...SESSION,
+        sid: "S-synthetic-encryption-required"
+      },
+      storage,
+      maxChunkBytes: 512,
+      trustedPlaintextExemptionEvidenceRefs: [TRUSTED_SYNTHETIC_EVIDENCE_REF],
+      capturePolicy: {
+        ...DEFAULT_CAPTURE_POLICY,
+        captureContext: "synthetic",
+        captureContextEvidenceRef: TRUSTED_SYNTHETIC_EVIDENCE_REF
+      }
     });
+
+    await pipeline.start();
+    await pipeline.ingest(createEvent("E-synthetic-required", "user.click", Date.now()));
+
+    await expect(pipeline.exportBundle({ allowPlaintextLocalExport: true })).rejects.toThrow(
+      /encryption is required by the active capture policy/i
+    );
   });
 
   it("rejects plaintext capture-context exemptions without trusted evidence", async () => {
@@ -380,7 +1418,7 @@ describe("pipeline", () => {
       "local-attestation:forged-local-debug-0001"
     ]) {
       const storage = new MemoryPipelineStorage();
-      const pipeline = new FlightRecorderPipeline({
+      const pipeline = createTestPipeline({
         session: {
           ...SESSION,
           sid: `S-plaintext-evidence-${evidenceRef ?? "missing"}`
@@ -408,7 +1446,7 @@ describe("pipeline", () => {
 
   it("allows plaintext synthetic exemptions with trusted evidence", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: {
         ...SESSION,
         sid: "S-trusted-synthetic-exemption"
@@ -438,9 +1476,41 @@ describe("pipeline", () => {
     expect(parsed.privacyManifest?.transfer?.archiveKeyEnvelope).toBe("none");
   });
 
+  it("allows plaintext local-debug exemptions with trusted evidence", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({
+      session: {
+        ...SESSION,
+        sid: "S-trusted-local-debug-exemption"
+      },
+      storage,
+      maxChunkBytes: 512,
+      trustedPlaintextExemptionEvidenceRefs: [TRUSTED_LOCAL_DEBUG_EVIDENCE_REF],
+      capturePolicy: {
+        ...DEFAULT_CAPTURE_POLICY,
+        captureContext: "local-debug",
+        captureContextEvidenceRef: TRUSTED_LOCAL_DEBUG_EVIDENCE_REF,
+        encryption: {
+          localAtRest: "required",
+          archive: "synthetic-local-debug-exempt",
+          archiveKeyEnvelope: "none"
+        }
+      }
+    });
+
+    await pipeline.start();
+    await pipeline.ingest(createEvent("E-trusted-local-debug", "user.click", Date.now()));
+
+    const exported = await pipeline.exportBundle();
+    const parsed = await readWebBlackboxArchive(exported.bytes);
+
+    expect(parsed.manifest.encryption).toBeUndefined();
+    expect(parsed.privacyManifest?.transfer?.archiveKeyEnvelope).toBe("none");
+  });
+
   it("rejects explicit low-risk overrides when high-risk artifacts are present", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: {
         ...SESSION,
         sid: "S-low-risk-override-high-risk"
@@ -475,7 +1545,7 @@ describe("pipeline", () => {
 
   it("ingests batches without losing index coverage", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 120
@@ -499,7 +1569,7 @@ describe("pipeline", () => {
 
   it("skips oversized hash/base64-like terms in inverted index", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 256
@@ -529,7 +1599,7 @@ describe("pipeline", () => {
 
   it("deduplicates blobs by sha256", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 512
@@ -551,7 +1621,7 @@ describe("pipeline", () => {
       ...SESSION,
       sid: "S-recovery"
     };
-    const initialPipeline = new FlightRecorderPipeline({
+    const initialPipeline = createTestPipeline({
       session,
       storage,
       maxChunkBytes: 128
@@ -574,7 +1644,7 @@ describe("pipeline", () => {
     );
     await initialPipeline.flush();
 
-    const recoveredPipeline = new FlightRecorderPipeline({
+    const recoveredPipeline = createTestPipeline({
       session,
       storage,
       maxChunkBytes: 128
@@ -600,7 +1670,7 @@ describe("pipeline", () => {
       ...SESSION,
       sid: "S-recovery-seq"
     };
-    const initialPipeline = new FlightRecorderPipeline({
+    const initialPipeline = createTestPipeline({
       session,
       storage,
       maxChunkBytes: 128
@@ -615,7 +1685,7 @@ describe("pipeline", () => {
     );
     await initialPipeline.flush();
 
-    const recoveredPipeline = new FlightRecorderPipeline({
+    const recoveredPipeline = createTestPipeline({
       session,
       storage,
       maxChunkBytes: 128
@@ -638,7 +1708,7 @@ describe("pipeline", () => {
 
   it("exports only blobs referenced by retained events", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128
@@ -666,7 +1736,7 @@ describe("pipeline", () => {
 
   it("exports and reads .webblackbox archive", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128
@@ -693,7 +1763,7 @@ describe("pipeline", () => {
 
   it("reads plain archives without global Web Crypto when Node crypto is available", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128
@@ -723,9 +1793,37 @@ describe("pipeline", () => {
     }
   });
 
+  it("rejects invalid UTF-8 in unencrypted archive metadata", async () => {
+    const pipeline = createTestPipeline({
+      session: SESSION,
+      storage: new MemoryPipelineStorage(),
+      maxChunkBytes: 128
+    });
+    await pipeline.start();
+    await pipeline.ingest(createEvent("E-invalid-metadata-utf8", "user.click", 10));
+
+    const exported = await pipeline.exportBundle(FULL_EXPORT_OPTIONS);
+    const zip = await JSZip.loadAsync(exported.bytes);
+    const manifestFile = zip.file("manifest.json");
+    if (!manifestFile) {
+      throw new Error("Missing fixture manifest.");
+    }
+    const manifestBytes = await manifestFile.async("uint8array");
+    replaceFirstByteSequenceForTest(
+      manifestBytes,
+      new TextEncoder().encode("https://example.com"),
+      0xff
+    );
+    zip.file("manifest.json", manifestBytes);
+    await writeArchiveIntegrityForTest(zip);
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+
+    await expect(readWebBlackboxArchive(bytes)).rejects.toThrow(/invalid UTF-8/i);
+  });
+
   it("rejects archives with integrity mismatches on read", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128
@@ -757,7 +1855,7 @@ describe("pipeline", () => {
 
   it("rejects archives with undeclared event chunks on read", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128
@@ -791,7 +1889,7 @@ describe("pipeline", () => {
 
   it("writes provided redaction profile into export manifest", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128,
@@ -871,6 +1969,62 @@ describe("pipeline", () => {
     ).toBe(true);
   });
 
+  it("rejects plaintext fallback when an encrypted manifest omits private file metadata", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = new FlightRecorderPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: 128
+    });
+
+    await pipeline.start();
+    await pipeline.ingest(createEvent("E-encryption-map", "user.click", 100));
+    const exported = await pipeline.exportBundle({
+      ...FULL_EXPORT_OPTIONS,
+      passphrase: "secret-passphrase"
+    });
+    const zip = await JSZip.loadAsync(exported.bytes);
+    const manifestFile = zip.file("manifest.json");
+
+    if (!manifestFile) {
+      throw new Error("Missing encrypted archive manifest");
+    }
+
+    const manifest = JSON.parse(await manifestFile.async("string")) as ExportManifest;
+
+    if (!manifest.encryption) {
+      throw new Error("Expected encrypted archive metadata");
+    }
+
+    manifest.encryption.files = {};
+    zip.file("manifest.json", JSON.stringify(manifest));
+    await writeArchiveIntegrityForTest(zip);
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+
+    await expect(
+      readWebBlackboxArchive(bytes, { passphrase: "secret-passphrase" })
+    ).rejects.toThrow(/schema validation|at least one private file/i);
+  });
+
+  it("rejects schema-invalid event payloads while reading an archive", async () => {
+    const storage = new MemoryPipelineStorage();
+    const pipeline = createTestPipeline({
+      session: SESSION,
+      storage,
+      maxChunkBytes: 128
+    });
+    const invalidEvent = createEvent("E-invalid-payload", "network.request", 100);
+    invalidEvent.data = {};
+
+    await pipeline.start();
+    await pipeline.ingest(invalidEvent);
+    const exported = await pipeline.exportBundle(FULL_EXPORT_OPTIONS);
+
+    await expect(readWebBlackboxArchive(exported.bytes)).rejects.toThrow(
+      /event line 1 failed schema validation/i
+    );
+  });
+
   it("supports optional at-rest encryption for chunk/blob cache payloads", async () => {
     const baseStorage = new MemoryPipelineStorage();
     const key = await derivePipelineStorageKey("cache-passphrase", {
@@ -879,7 +2033,7 @@ describe("pipeline", () => {
     const storage = new EncryptedPipelineStorage(baseStorage, {
       key: key.key
     });
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128
@@ -915,7 +2069,7 @@ describe("pipeline", () => {
 
   it("supports export filtering by screenshot and recent time window", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128
@@ -951,7 +2105,7 @@ describe("pipeline", () => {
 
   it("supports independent export filtering for screen recordings", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 128
@@ -1023,7 +2177,7 @@ describe("pipeline", () => {
       startedAt: sessionEnd - 60 * 60 * 1000,
       endedAt: sessionEnd
     };
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session,
       storage,
       maxChunkBytes: 128
@@ -1052,7 +2206,7 @@ describe("pipeline", () => {
       sid: "S-export-live-anchor",
       startedAt: now - 60 * 60 * 1000
     };
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session,
       storage,
       maxChunkBytes: 128
@@ -1072,7 +2226,7 @@ describe("pipeline", () => {
 
   it("limits exported archive size to recent suffix of chunks", async () => {
     const storage = new MemoryPipelineStorage();
-    const pipeline = new FlightRecorderPipeline({
+    const pipeline = createTestPipeline({
       session: SESSION,
       storage,
       maxChunkBytes: 512
@@ -1112,12 +2266,12 @@ describe("pipeline", () => {
       ...SESSION,
       sid: "S-purge-b"
     };
-    const pipelineA = new FlightRecorderPipeline({
+    const pipelineA = createTestPipeline({
       session: sessionA,
       storage,
       maxChunkBytes: 128
     });
-    const pipelineB = new FlightRecorderPipeline({
+    const pipelineB = createTestPipeline({
       session: sessionB,
       storage,
       maxChunkBytes: 128
@@ -1136,12 +2290,33 @@ describe("pipeline", () => {
     await pipelineB.ingest(createEvent("E-pb-1", "user.click", 2));
     await pipelineB.flush();
     await pipelineB.finalizeIndexes();
+    const deliveryProgress = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-purge-a",
+      batchId: "batch-purge-a",
+      fingerprint: "5".repeat(64),
+      eventCount: 1,
+      eventIndex: 0,
+      outcome: "no-output" as const
+    };
+    const deliveryQuery = {
+      tabId: deliveryProgress.tabId,
+      frameId: deliveryProgress.frameId,
+      documentId: deliveryProgress.documentId,
+      batchId: deliveryProgress.batchId
+    };
+    await pipelineA.commitDeliveryProgress([deliveryProgress]);
+    expect(await pipelineA.getDeliveryReceipt(deliveryQuery)).toEqual(
+      expect.objectContaining({ complete: true })
+    );
 
     await pipelineA.close({ purge: true });
 
     expect(await storage.getSession(sessionA.sid)).toBeUndefined();
     expect(await storage.listChunks(sessionA.sid)).toHaveLength(0);
     expect(await storage.getIntegrity(sessionA.sid)).toBeUndefined();
+    expect(await storage.getDeliveryReceipt(sessionA.sid, deliveryQuery)).toBeUndefined();
     expect(await storage.getIndexes(sessionA.sid)).toEqual({
       time: [],
       request: [],
@@ -1154,3 +2329,48 @@ describe("pipeline", () => {
     expect((await storage.listBlobs()).length).toBe(0);
   });
 });
+
+async function writeArchiveIntegrityForTest(zip: JSZip): Promise<void> {
+  const files: Record<string, string> = {};
+
+  for (const [path, file] of Object.entries(zip.files)) {
+    if (file.dir || path === "integrity/hashes.json") {
+      continue;
+    }
+
+    const bytes = await file.async("uint8array");
+    const digest = await crypto.subtle.digest("SHA-256", toArrayBufferForTest(bytes));
+    files[path] = [...new Uint8Array(digest)]
+      .map((value) => value.toString(16).padStart(2, "0"))
+      .join("");
+  }
+
+  zip.file(
+    "integrity/hashes.json",
+    JSON.stringify({
+      manifestSha256: files["manifest.json"] ?? "",
+      files
+    })
+  );
+}
+
+function replaceFirstByteSequenceForTest(
+  target: Uint8Array,
+  sequence: Uint8Array,
+  replacement: number
+): void {
+  for (let offset = 0; offset <= target.byteLength - sequence.byteLength; offset += 1) {
+    if (sequence.every((value, index) => target[offset + index] === value)) {
+      target[offset] = replacement;
+      return;
+    }
+  }
+
+  throw new Error("Fixture byte sequence was not found.");
+}
+
+function toArrayBufferForTest(bytes: Uint8Array): ArrayBuffer {
+  const copy = new Uint8Array(bytes.byteLength);
+  copy.set(bytes);
+  return copy.buffer;
+}
diff --git a/packages/pipeline/src/pipeline.ts b/packages/pipeline/src/pipeline.ts
index 3469072..747e32d 100644
--- a/packages/pipeline/src/pipeline.ts
+++ b/packages/pipeline/src/pipeline.ts
@@ -18,7 +18,27 @@ import { createWebBlackboxArchive } from "./exporter.js";
 import { sha256Hex } from "./hash.js";
 import { EventIndexer } from "./indexer.js";
 import { assertPrivacyScannerPassed, buildPrivacyManifest } from "./privacy.js";
-import type { PipelineStorage, StoredBlob, StoredChunk } from "./storage.js";
+import {
+  assertPipelineResumeChangesWithinLimits,
+  isPipelineDeliveryEventProvenance,
+  isPipelineResumeDelta,
+  isPipelineResumeState,
+  PIPELINE_STORAGE_SECURITY,
+  type PipelineDeliveryEventChange,
+  type PipelineDeliveryEventProvenance,
+  type PipelineDeliveryNoOutputChange,
+  type PipelineDeliveryReceipt,
+  type PipelineDeliveryReceiptQuery,
+  type PipelineResumeDelta,
+  type PipelineResumeState,
+  type PipelineStorage,
+  type RecorderSequenceWatermark,
+  type ScreenRecordingChunkReference,
+  type ScreenRecordingResumeChange,
+  type ScreenRecordingResumeState,
+  type StoredBlob,
+  type StoredChunk
+} from "./storage.js";
 
 export type FlightRecorderPipelineOptions = {
   session: SessionMetadata;
@@ -30,6 +50,8 @@ export type FlightRecorderPipelineOptions = {
   trustedPlaintextExemptionEvidenceRefs?: readonly string[];
 };
 
+export type PipelineDeliverySidecar = ReadonlyMap<string, PipelineDeliveryEventProvenance>;
+
 export type ExportResult = {
   fileName: string;
   bytes: Uint8Array;
@@ -44,6 +66,11 @@ export type ExportBundleOptions = {
   maxArchiveBytes?: number | null;
   recentWindowMs?: number | null;
   strictPrivacyScanner?: boolean;
+  /**
+   * @deprecated Plaintext export eligibility is determined exclusively by the active capture
+   * policy and trusted capture-context evidence. This flag is retained for source compatibility
+   * and cannot bypass encryption requirements.
+   */
   allowPlaintextLocalExport?: boolean;
 };
 
@@ -53,6 +80,8 @@ type PreparedExportChunk = {
   blobHashes: string[];
 };
 
+type ScreenRecordingChunkCheckpoint = Omit<ScreenRecordingChunkReference, "index">;
+
 type ExportIndexes = {
   time: ReturnType<EventIndexer["snapshot"]>["time"];
   request: RequestIndexEntry[];
@@ -86,41 +115,108 @@ const LOW_RISK_OVERRIDE_BLOCKED_CATEGORIES = new Set([
 ]);
 const LOCAL_DEBUG_EVIDENCE_PATTERN = /^local-attestation:[A-Za-z0-9][A-Za-z0-9._:-]{7,}$/;
 const SYNTHETIC_EVIDENCE_PATTERN = /^(?:synthetic-fixture|ci-run):[A-Za-z0-9][A-Za-z0-9._:-]{7,}$/;
+const EVENT_SEQUENCE_PATTERN = /^E-(\d+)$/;
+const ACTION_SEQUENCE_PATTERN = /^A-(\d+)$/;
+const BLOB_HASH_PATTERN = /^[a-f0-9]{64}$/;
+const PIPELINE_RESUME_MAX_SCREEN_CHUNKS = 500_000;
 
 export class FlightRecorderPipeline {
   private readonly chunker: EventChunker;
   private readonly chunkCodec: (typeof CHUNK_CODECS)[number];
+  private storageReadyPromise: Promise<void> | null = null;
+  private chunkOperationTail: Promise<void> = Promise.resolve();
+  private acceptingEvents = true;
+  private closePromise: Promise<void> | null = null;
+  private sequenceWatermark: RecorderSequenceWatermark = { event: 0, action: 0 };
+  private readonly screenRecordingChunks = new Map<
+    string,
+    Map<number, ScreenRecordingChunkCheckpoint>
+  >();
+  private readonly pendingEventIds = new Set<string>();
+  private readonly pendingDeliveryByEventId = new Map<string, PipelineDeliveryEventChange>();
 
   public constructor(private readonly options: FlightRecorderPipelineOptions) {
     const codec = resolveChunkCodec(options.chunkCodec);
     const maxChunkBytes = options.maxChunkBytes ?? 512 * 1024;
     this.chunkCodec = codec;
-    this.chunker = new EventChunker(maxChunkBytes, codec);
+    this.chunker = new EventChunker(maxChunkBytes, codec, async (chunk) => {
+      await this.persistChunk(
+        chunk.meta.chunkId,
+        chunk.meta.seq,
+        chunk.meta.codec,
+        chunk.events,
+        chunk.bytes
+      );
+    });
   }
 
   public async start(): Promise<void> {
-    const lastSequence =
-      (await this.options.storage.getLatestChunkMeta(this.options.session.sid))?.seq ?? 0;
+    await this.ensureStorageReady();
+    const latestMeta = await this.options.storage.getLatestChunkMeta(this.options.session.sid);
+    const lastSequence = latestMeta?.seq ?? 0;
 
     this.chunker.restoreSequence(lastSequence);
+    if (latestMeta) {
+      this.chunker.restoreTimelineBoundary(latestMeta.tEnd, latestMeta.monoEnd);
+    }
+    const resumeState = latestMeta
+      ? await this.restoreResumeStateFromLatestChunk(latestMeta.chunkId, latestMeta.seq)
+      : emptyPipelineResumeState();
+    this.sequenceWatermark = resumeState.sequenceWatermark;
+    this.restoreScreenRecordingResumeState(resumeState.screenRecordings);
+
+    if (latestMeta) {
+      await this.options.storage.initializeResumeState?.(
+        this.options.session.sid,
+        latestMeta.seq,
+        resumeState
+      );
+    }
+
     await this.options.storage.putSession(this.options.session);
   }
 
+  /** Updates mutable archive metadata while preserving the pipeline's exact recording identity. */
+  public async rebindSessionMetadata(session: SessionMetadata): Promise<void> {
+    if (
+      session.sid !== this.options.session.sid ||
+      session.tabId !== this.options.session.tabId ||
+      session.startedAt !== this.options.session.startedAt ||
+      session.mode !== this.options.session.mode
+    ) {
+      throw new Error("Pipeline session metadata changed immutable recording identity.");
+    }
+
+    const rebound: SessionMetadata = {
+      ...session,
+      tags: [...session.tags]
+    };
+    await this.enqueueChunkOperation(async () => {
+      await this.ensureStorageReady();
+      await this.options.storage.putSession(rebound);
+      this.options.session = rebound;
+    });
+  }
+
   public async ingest(event: WebBlackboxEvent): Promise<void> {
     assertPrivacyClassifiedEvent(event);
-    const chunk = await this.chunker.append(event);
-
-    if (!chunk) {
-      return;
+    if (!this.acceptingEvents) {
+      throw new Error("FlightRecorderPipeline cannot ingest events after close() has started.");
     }
 
-    await this.persistChunk(
-      chunk.meta.chunkId,
-      chunk.meta.seq,
-      chunk.meta.codec,
-      chunk.events,
-      chunk.bytes
-    );
+    await this.enqueueChunkOperation(async () => {
+      this.assertEventResumeStateWithinLimits(event);
+      this.assertEventIdIsNotPending(event.id);
+      this.pendingEventIds.add(event.id);
+
+      try {
+        await this.chunker.append(event);
+      } catch (error) {
+        this.pendingEventIds.delete(event.id);
+        throw error;
+      }
+      this.applyEventToResumeState(event);
+    });
   }
 
   public async ingestBatch(events: WebBlackboxEvent[]): Promise<void> {
@@ -132,48 +228,247 @@ export class FlightRecorderPipeline {
       assertPrivacyClassifiedEvent(event);
     }
 
+    if (!this.acceptingEvents) {
+      throw new Error("FlightRecorderPipeline cannot ingest events after close() has started.");
+    }
+
+    await this.enqueueChunkOperation(async () => {
+      for (const event of events) {
+        this.assertEventResumeStateWithinLimits(event);
+        this.assertEventIdIsNotPending(event.id);
+        this.pendingEventIds.add(event.id);
+
+        try {
+          await this.chunker.append(event);
+        } catch (error) {
+          this.pendingEventIds.delete(event.id);
+          throw error;
+        }
+        this.applyEventToResumeState(event);
+      }
+    });
+  }
+
+  public async ingestBatchWithDelivery(
+    events: WebBlackboxEvent[],
+    deliveryByEventId: PipelineDeliverySidecar
+  ): Promise<void> {
+    if (events.length === 0) {
+      if (deliveryByEventId.size > 0) {
+        throw new Error("Pipeline delivery sidecar references an empty event batch.");
+      }
+      return;
+    }
+
+    this.requireDeliveryStorage();
+    const changes = normalizePipelineDeliverySidecar(
+      this.options.session.sid,
+      events,
+      deliveryByEventId
+    );
+
     for (const event of events) {
-      const chunk = await this.chunker.append(event);
+      assertPrivacyClassifiedEvent(event);
+    }
 
-      if (!chunk) {
-        continue;
+    if (!this.acceptingEvents) {
+      throw new Error("FlightRecorderPipeline cannot ingest events after close() has started.");
+    }
+
+    await this.enqueueChunkOperation(async () => {
+      await this.ensureStorageReady();
+      const durableReceipts = new Map<string, PipelineDeliveryReceipt | undefined>();
+
+      for (const change of changes.values()) {
+        const key = createPipelineDeliveryBatchKey(change);
+
+        if (!durableReceipts.has(key)) {
+          durableReceipts.set(
+            key,
+            await this.options.storage.getDeliveryReceipt!(this.options.session.sid, {
+              tabId: change.tabId,
+              frameId: change.frameId,
+              documentId: change.documentId,
+              batchId: change.batchId
+            })
+          );
+        }
       }
 
-      await this.persistChunk(
-        chunk.meta.chunkId,
-        chunk.meta.seq,
-        chunk.meta.codec,
-        chunk.events,
-        chunk.bytes
-      );
+      for (const event of events) {
+        this.assertEventResumeStateWithinLimits(event);
+        const change = changes.get(event.id);
+        const pendingForEventId = this.pendingDeliveryByEventId.get(event.id);
+
+        if (!change) {
+          this.assertEventIdIsNotPending(event.id);
+
+          this.pendingEventIds.add(event.id);
+
+          try {
+            await this.chunker.append(event);
+          } catch (error) {
+            this.pendingEventIds.delete(event.id);
+            throw error;
+          }
+          this.applyEventToResumeState(event);
+          continue;
+        }
+
+        if (pendingForEventId) {
+          if (isSamePipelineDeliveryEventChange(pendingForEventId, change)) {
+            continue;
+          }
+
+          throw new Error("Pipeline event id was reused with different delivery provenance.");
+        }
+
+        if (this.pendingEventIds.has(event.id)) {
+          throw new Error("Pipeline event id is already pending without delivery provenance.");
+        }
+
+        const pendingForIndex = [...this.pendingDeliveryByEventId.values()].find((pending) =>
+          isSamePipelineDeliveryBatchIndex(pending, change)
+        );
+
+        if (pendingForIndex) {
+          throw new Error("Pipeline delivery batch index already has a different pending event.");
+        }
+
+        const durableReceipt = durableReceipts.get(createPipelineDeliveryBatchKey(change));
+        const durableIndex = durableReceipt?.indexes.find(
+          (index) => index.eventIndex === change.eventIndex
+        );
+
+        if (durableReceipt) {
+          if (
+            durableReceipt.fingerprint !== change.fingerprint ||
+            durableReceipt.eventCount !== change.eventCount
+          ) {
+            throw new Error("Pipeline delivery batch identity was reused with different content.");
+          }
+
+          if (durableIndex) {
+            if (durableIndex.outcome === "event" && durableIndex.eventId === event.id) {
+              continue;
+            }
+
+            throw new Error("Pipeline delivery batch index already has a different outcome.");
+          }
+        }
+
+        this.pendingDeliveryByEventId.set(event.id, change);
+        this.pendingEventIds.add(event.id);
+
+        try {
+          await this.chunker.append(event);
+        } catch (error) {
+          this.pendingEventIds.delete(event.id);
+          if (this.pendingDeliveryByEventId.get(event.id) === change) {
+            this.pendingDeliveryByEventId.delete(event.id);
+          }
+          throw error;
+        }
+        this.applyEventToResumeState(event);
+      }
+    });
+  }
+
+  public async commitDeliveryProgress(
+    changes: readonly PipelineDeliveryNoOutputChange[]
+  ): Promise<void> {
+    if (changes.length === 0) {
+      return;
     }
+
+    this.requireDeliveryStorage();
+    await this.enqueueChunkOperation(async () => {
+      await this.ensureStorageReady();
+      const pendingConflicts = this.findPendingDeliveryOutcomeConflicts(changes);
+
+      // Output provenance is only durable once its containing chunk is committed. Flush before
+      // metadata-only progress so a completed receipt can never acknowledge an in-memory output.
+      await this.chunker.flush();
+
+      if (pendingConflicts.length > 0) {
+        throw new Error(
+          "Pipeline delivery progress conflicts with pending output provenance for the same batch index."
+        );
+      }
+
+      await this.options.storage.commitDeliveryProgress!(this.options.session.sid, changes);
+    });
+  }
+
+  public async getDeliveryReceipt(
+    query: PipelineDeliveryReceiptQuery
+  ): Promise<PipelineDeliveryReceipt | undefined> {
+    this.requireDeliveryStorage();
+    await this.enqueueChunkOperation(async () => undefined);
+    await this.ensureStorageReady();
+    return this.options.storage.getDeliveryReceipt!(this.options.session.sid, query);
+  }
+
+  public async getSequenceWatermark(): Promise<RecorderSequenceWatermark> {
+    return (await this.getResumeState()).sequenceWatermark;
+  }
+
+  public async getResumeState(): Promise<PipelineResumeState> {
+    await this.enqueueChunkOperation(async () => undefined);
+    return this.snapshotResumeState();
   }
 
   public async flush(): Promise<void> {
-    const chunk = await this.chunker.flush();
+    await this.enqueueChunkOperation(async () => {
+      await this.chunker.flush();
+    });
+  }
 
-    if (!chunk) {
-      return;
+  public close(options: { purge?: boolean } = {}): Promise<void> {
+    if (this.closePromise) {
+      return this.closePromise;
     }
 
-    await this.persistChunk(
-      chunk.meta.chunkId,
-      chunk.meta.seq,
-      chunk.meta.codec,
-      chunk.events,
-      chunk.bytes
-    );
+    this.acceptingEvents = false;
+    const attempt = this.enqueueChunkOperation(async () => {
+      await this.chunker.close();
+
+      if (options.purge) {
+        await this.options.storage.deleteSession(this.options.session.sid);
+      }
+    });
+    const tracked = attempt.finally(() => {
+      if (this.closePromise === tracked) {
+        this.closePromise = null;
+      }
+    });
+
+    this.closePromise = tracked;
+    return tracked;
   }
 
-  public async close(options: { purge?: boolean } = {}): Promise<void> {
-    await this.flush();
+  private requireDeliveryStorage(): void {
+    if (!this.options.storage.getDeliveryReceipt || !this.options.storage.commitDeliveryProgress) {
+      throw new Error("Pipeline storage does not support durable delivery receipts.");
+    }
+  }
 
-    if (options.purge) {
-      await this.options.storage.deleteSession(this.options.session.sid);
+  private assertEventIdIsNotPending(eventId: string): void {
+    if (this.pendingEventIds.has(eventId)) {
+      throw new Error("Pipeline event id is already pending in the current chunk.");
     }
   }
 
+  private findPendingDeliveryOutcomeConflicts(
+    changes: readonly PipelineDeliveryNoOutputChange[]
+  ): PipelineDeliveryEventChange[] {
+    return [...this.pendingDeliveryByEventId.values()].filter((pending) =>
+      changes.some((change) => isSamePipelineDeliveryBatchIndex(change, pending))
+    );
+  }
+
   public async putBlob(mime: string, bytes: Uint8Array): Promise<string> {
+    await this.ensureStorageReady();
     const hash = await sha256Hex(bytes);
     const blob: StoredBlob = {
       hash,
@@ -193,6 +488,7 @@ export class FlightRecorderPipeline {
     request: RequestIndexEntry[];
     inverted: InvertedIndexEntry[];
   }> {
+    await this.ensureStorageReady();
     await this.flush();
     const chunks = await this.options.storage.listChunks(this.options.session.sid);
     const snapshot = await this.buildIndexesFromChunks(chunks);
@@ -202,6 +498,7 @@ export class FlightRecorderPipeline {
 
   public async exportBundle(options: ExportBundleOptions = {}): Promise<ExportResult> {
     this.assertExportEncryptionPolicy(options);
+    await this.ensureStorageReady();
     await this.flush();
     const rawChunks = await this.options.storage.listChunks(this.options.session.sid);
     const exportPolicy = resolveExportPolicy(options, {
@@ -226,6 +523,7 @@ export class FlightRecorderPipeline {
       const privacyManifest = await buildPrivacyManifest({
         events,
         blobs,
+        expectedBlobCount: blobs.length,
         capturePolicy: this.options.capturePolicy,
         encrypted,
         transfer: buildExportTransferPolicy({
@@ -308,40 +606,32 @@ export class FlightRecorderPipeline {
   }
 
   private assertExportEncryptionPolicy(options: ExportBundleOptions): void {
-    const policy = this.options.capturePolicy;
-
-    if (!policy) {
-      return;
-    }
-
     const hasPassphrase = typeof options.passphrase === "string" && options.passphrase.length > 0;
 
-    if (!hasPassphrase && options.allowPlaintextLocalExport === true) {
+    if (hasPassphrase) {
       return;
     }
 
-    if (policy.encryption.archive === "required" && !hasPassphrase) {
-      throw new Error("Export encryption is required by the active capture policy.");
-    }
+    const policy = this.options.capturePolicy;
 
-    if (
-      !hasPassphrase &&
-      (policy.encryption.archive === "synthetic-local-debug-exempt" ||
-        policy.encryption.archive === "explicit-low-risk-override")
-    ) {
-      assertTrustedPlaintextExemptionEvidence(
-        policy,
-        this.options.trustedPlaintextExemptionEvidenceRefs
+    if (!policy) {
+      throw new Error(
+        "Export encryption is required unless the active capture policy grants a trusted synthetic or local-debug plaintext exemption."
       );
     }
 
-    if (
-      policy.captureContext === "real-user" &&
-      policy.encryption.archive !== "synthetic-local-debug-exempt" &&
-      !hasPassphrase
-    ) {
+    if (policy.captureContext === "real-user") {
       throw new Error("Real-user archives must be encrypted before export or share.");
     }
+
+    if (policy.encryption.archive === "required") {
+      throw new Error("Export encryption is required by the active capture policy.");
+    }
+
+    assertTrustedPlaintextExemptionEvidence(
+      policy,
+      this.options.trustedPlaintextExemptionEvidenceRefs
+    );
   }
 
   private async listSessionBlobs(): Promise<StoredBlob[]> {
@@ -559,6 +849,7 @@ export class FlightRecorderPipeline {
     const privacyManifest = await buildPrivacyManifest({
       events,
       blobs: exportData.blobs,
+      expectedBlobCount: exportData.blobs.length,
       capturePolicy: this.options.capturePolicy,
       encrypted,
       transfer: buildExportTransferPolicy({
@@ -659,9 +950,14 @@ export class FlightRecorderPipeline {
     events: WebBlackboxEvent[],
     bytes: Uint8Array
   ): Promise<void> {
+    await this.ensureStorageReady();
     const first = events[0];
     const last = events[events.length - 1];
     const hash = await sha256Hex(bytes);
+    const deliveryChanges = events.flatMap((event) => {
+      const change = this.pendingDeliveryByEventId.get(event.id);
+      return change ? [change] : [];
+    });
 
     const chunk: StoredChunk = {
       sid: this.options.session.sid,
@@ -677,10 +973,184 @@ export class FlightRecorderPipeline {
         codec,
         sha256: hash
       },
-      bytes
+      bytes,
+      resumeDelta: derivePipelineResumeDelta(this.sequenceWatermark, events, deliveryChanges)
     };
 
     await this.options.storage.putChunk(chunk);
+
+    for (const event of events) {
+      this.pendingEventIds.delete(event.id);
+    }
+
+    for (const change of deliveryChanges) {
+      if (this.pendingDeliveryByEventId.get(change.eventId) === change) {
+        this.pendingDeliveryByEventId.delete(change.eventId);
+      }
+    }
+  }
+
+  private async restoreResumeStateFromLatestChunk(
+    chunkId: string,
+    chunkSequence: number
+  ): Promise<PipelineResumeState> {
+    const normalized = await this.options.storage.getResumeState?.(
+      this.options.session.sid,
+      chunkSequence
+    );
+
+    if (normalized !== undefined) {
+      if (!isPipelineResumeState(normalized)) {
+        throw new Error("Pipeline storage returned an invalid resume state.");
+      }
+
+      return clonePipelineResumeState(normalized);
+    }
+
+    const latest = await this.options.storage.getChunk(this.options.session.sid, chunkId);
+
+    if (!latest) {
+      throw new Error("Latest pipeline chunk metadata points to missing chunk payload.");
+    }
+
+    if (isPipelineResumeState(latest.resumeState)) {
+      const checkpoint = clonePipelineResumeState(latest.resumeState);
+      const events = await decodeChunkEvents(latest.bytes, latest.meta.codec);
+      return applyPipelineResumeDelta(
+        checkpoint,
+        derivePipelineResumeDelta(checkpoint.sequenceWatermark, events)
+      );
+    }
+
+    if (isPipelineResumeDelta(latest.resumeDelta)) {
+      return this.rebuildResumeStateFromChunkCheckpoints();
+    }
+
+    const events = await decodeChunkEvents(latest.bytes, latest.meta.codec);
+
+    // Legacy chunks did not persist an exact action high-water. Advancing the
+    // action sequence to the durable event high-water is deterministic and
+    // prevents reuse without scanning an unbounded archive history.
+    const empty = emptyPipelineResumeState();
+    const legacy = applyPipelineResumeDelta(
+      empty,
+      derivePipelineResumeDelta(empty.sequenceWatermark, events)
+    );
+    legacy.sequenceWatermark.action = Math.max(
+      legacy.sequenceWatermark.action,
+      legacy.sequenceWatermark.event
+    );
+    return legacy;
+  }
+
+  private async rebuildResumeStateFromChunkCheckpoints(): Promise<PipelineResumeState> {
+    const chunks = await this.options.storage.listChunks(this.options.session.sid);
+    let sequenceWatermark: RecorderSequenceWatermark = { event: 0, action: 0 };
+    let recordings = new Map<string, Map<number, ScreenRecordingChunkCheckpoint>>();
+
+    for (const chunk of chunks.sort((left, right) => left.meta.seq - right.meta.seq)) {
+      if (isPipelineResumeState(chunk.resumeState)) {
+        sequenceWatermark = mergeSequenceWatermarks(
+          sequenceWatermark,
+          chunk.resumeState.sequenceWatermark
+        );
+        recordings = screenRecordingCheckpointMapFromState(chunk.resumeState);
+        const events = await decodeChunkEvents(chunk.bytes, chunk.meta.codec);
+        const replay = derivePipelineResumeDelta(sequenceWatermark, events);
+        assertPipelineResumeChangesWithinLimits(recordings, replay.screenRecordingChanges);
+        sequenceWatermark = mergeSequenceWatermarks(sequenceWatermark, replay.sequenceWatermark);
+
+        for (const change of replay.screenRecordingChanges) {
+          applyScreenRecordingResumeChange(recordings, change);
+        }
+        continue;
+      }
+
+      if (isPipelineResumeDelta(chunk.resumeDelta)) {
+        assertPipelineResumeChangesWithinLimits(
+          recordings,
+          chunk.resumeDelta.screenRecordingChanges
+        );
+        sequenceWatermark = mergeSequenceWatermarks(
+          sequenceWatermark,
+          chunk.resumeDelta.sequenceWatermark
+        );
+
+        for (const change of chunk.resumeDelta.screenRecordingChanges) {
+          applyScreenRecordingResumeChange(recordings, change);
+        }
+      }
+    }
+
+    return createPipelineResumeStateFromCheckpoints(sequenceWatermark, recordings);
+  }
+
+  private applyEventToResumeState(event: WebBlackboxEvent): void {
+    this.sequenceWatermark = mergeSequenceWatermarks(
+      this.sequenceWatermark,
+      deriveRecorderSequenceWatermark([event])
+    );
+    applyScreenRecordingEvent(this.screenRecordingChunks, event);
+  }
+
+  private assertEventResumeStateWithinLimits(event: WebBlackboxEvent): void {
+    const change = readScreenRecordingResumeChange(event);
+
+    if (change) {
+      assertPipelineResumeChangesWithinLimits(this.screenRecordingChunks, [change]);
+    }
+  }
+
+  private snapshotResumeState(): PipelineResumeState {
+    return {
+      sequenceWatermark: { ...this.sequenceWatermark },
+      screenRecordings: [...this.screenRecordingChunks.entries()]
+        .map(([recordingId, chunks]) => ({
+          recordingId,
+          chunks: [...chunks.entries()]
+            .map(([index, checkpoint]) => ({ index, ...checkpoint }))
+            .sort((left, right) => left.index - right.index)
+        }))
+        .sort((left, right) => left.recordingId.localeCompare(right.recordingId))
+    };
+  }
+
+  private restoreScreenRecordingResumeState(
+    screenRecordings: readonly ScreenRecordingResumeState[]
+  ): void {
+    this.screenRecordingChunks.clear();
+
+    for (const recording of screenRecordings) {
+      this.screenRecordingChunks.set(
+        recording.recordingId,
+        new Map(
+          recording.chunks.map((chunk) => [
+            chunk.index,
+            {
+              hash: chunk.hash,
+              ...(chunk.size === undefined ? {} : { size: chunk.size })
+            }
+          ])
+        )
+      );
+    }
+  }
+
+  private enqueueChunkOperation(operation: () => Promise<void>): Promise<void> {
+    const result = this.chunkOperationTail.then(operation);
+    this.chunkOperationTail = result.then(
+      () => undefined,
+      () => undefined
+    );
+    return result;
+  }
+
+  private ensureStorageReady(): Promise<void> {
+    this.storageReadyPromise ??= assertLocalAtRestStorage(
+      this.options.storage,
+      this.options.capturePolicy
+    );
+    return this.storageReadyPromise;
   }
 
   private async buildIndexesFromChunks(chunks: StoredChunk[]): Promise<ExportIndexes> {
@@ -735,6 +1205,37 @@ export class FlightRecorderPipeline {
   }
 }
 
+async function assertLocalAtRestStorage(
+  storage: PipelineStorage,
+  capturePolicy: CapturePolicy | undefined
+): Promise<void> {
+  const localAtRest = capturePolicy?.encryption.localAtRest ?? "required";
+
+  if (localAtRest !== "required") {
+    return;
+  }
+
+  const capability = storage[PIPELINE_STORAGE_SECURITY];
+
+  if (!capability) {
+    throw new Error(
+      "Pipeline storage does not declare a verifiable local-at-rest security capability."
+    );
+  }
+
+  if (
+    capability.persistence === "persistent" &&
+    (capability.payloadProtection !== "authenticated-encryption" ||
+      capability.algorithm !== "AES-GCM")
+  ) {
+    throw new Error(
+      "capturePolicy.encryption.localAtRest is required; persistent pipeline storage must use authenticated AES-GCM payload encryption."
+    );
+  }
+
+  await storage.assertReady?.();
+}
+
 function resolveExportPolicy(
   options: ExportBundleOptions,
   context: {
@@ -937,6 +1438,331 @@ function assertPrivacyClassifiedEvent(event: WebBlackboxEvent): void {
   }
 }
 
+function deriveRecorderSequenceWatermark(
+  events: readonly WebBlackboxEvent[]
+): RecorderSequenceWatermark {
+  const watermark: RecorderSequenceWatermark = { event: 0, action: 0 };
+
+  for (const event of events) {
+    watermark.event = Math.max(
+      watermark.event,
+      parseCanonicalSequence(event.id, EVENT_SEQUENCE_PATTERN)
+    );
+    watermark.action = Math.max(
+      watermark.action,
+      parseCanonicalSequence(event.ref?.act, ACTION_SEQUENCE_PATTERN)
+    );
+  }
+
+  return watermark;
+}
+
+function mergeSequenceWatermarks(
+  left: RecorderSequenceWatermark,
+  right: RecorderSequenceWatermark
+): RecorderSequenceWatermark {
+  return {
+    event: Math.max(left.event, right.event),
+    action: Math.max(left.action, right.action)
+  };
+}
+
+function createPipelineDeliveryBatchKey(delivery: PipelineDeliveryEventProvenance): string {
+  return JSON.stringify([delivery.tabId, delivery.frameId, delivery.documentId, delivery.batchId]);
+}
+
+function isSamePipelineDeliveryBatchIndex(
+  left: PipelineDeliveryEventProvenance,
+  right: PipelineDeliveryEventProvenance
+): boolean {
+  return (
+    left.tabId === right.tabId &&
+    left.frameId === right.frameId &&
+    left.documentId === right.documentId &&
+    left.batchId === right.batchId &&
+    left.eventIndex === right.eventIndex
+  );
+}
+
+function isSamePipelineDeliveryEventChange(
+  left: PipelineDeliveryEventChange,
+  right: PipelineDeliveryEventChange
+): boolean {
+  return (
+    isSamePipelineDeliveryBatchIndex(left, right) &&
+    left.fingerprint === right.fingerprint &&
+    left.eventCount === right.eventCount &&
+    left.eventId === right.eventId
+  );
+}
+
+function normalizePipelineDeliverySidecar(
+  sid: string,
+  events: readonly WebBlackboxEvent[],
+  deliveryByEventId: PipelineDeliverySidecar
+): Map<string, PipelineDeliveryEventChange> {
+  const eventIds = new Set<string>();
+  const changes = new Map<string, PipelineDeliveryEventChange>();
+  const indexesByBatch = new Map<string, Set<number>>();
+
+  for (const event of events) {
+    if (event.sid !== sid) {
+      throw new Error("Pipeline delivered event belongs to another session.");
+    }
+    if (eventIds.has(event.id)) {
+      throw new Error("Pipeline delivered event batch contains duplicate event ids.");
+    }
+    eventIds.add(event.id);
+
+    if (!deliveryByEventId.has(event.id)) {
+      continue;
+    }
+    const provenance = deliveryByEventId.get(event.id);
+    if (!isPipelineDeliveryEventProvenance(provenance)) {
+      throw new Error("Invalid pipeline delivery event provenance.");
+    }
+
+    const batchKey = createPipelineDeliveryBatchKey(provenance);
+    const indexes = indexesByBatch.get(batchKey) ?? new Set<number>();
+    if (indexes.has(provenance.eventIndex)) {
+      throw new Error("Pipeline delivery sidecar repeats a batch event index.");
+    }
+    indexes.add(provenance.eventIndex);
+    indexesByBatch.set(batchKey, indexes);
+    changes.set(event.id, {
+      ...provenance,
+      outcome: "event",
+      eventId: event.id
+    });
+  }
+
+  for (const eventId of deliveryByEventId.keys()) {
+    if (!eventIds.has(eventId)) {
+      throw new Error("Pipeline delivery sidecar references an event outside its batch.");
+    }
+  }
+
+  return changes;
+}
+
+function derivePipelineResumeDelta(
+  base: RecorderSequenceWatermark,
+  events: readonly WebBlackboxEvent[],
+  deliveryChanges: readonly PipelineDeliveryEventChange[] = []
+): PipelineResumeDelta {
+  let sequenceWatermark = { ...base };
+  const screenRecordingChanges: ScreenRecordingResumeChange[] = [];
+
+  for (const event of events) {
+    sequenceWatermark = mergeSequenceWatermarks(
+      sequenceWatermark,
+      deriveRecorderSequenceWatermark([event])
+    );
+    const change = readScreenRecordingResumeChange(event);
+
+    if (change) {
+      screenRecordingChanges.push(change);
+    }
+  }
+
+  return deliveryChanges.length > 0
+    ? {
+        version: 2,
+        sequenceWatermark,
+        screenRecordingChanges,
+        deliveryChanges: deliveryChanges.map((change) => ({ ...change }))
+      }
+    : {
+        version: 1,
+        sequenceWatermark,
+        screenRecordingChanges
+      };
+}
+
+function applyPipelineResumeDelta(
+  base: PipelineResumeState,
+  delta: PipelineResumeDelta
+): PipelineResumeState {
+  const screenRecordingChunks = screenRecordingCheckpointMapFromState(base);
+  assertPipelineResumeChangesWithinLimits(screenRecordingChunks, delta.screenRecordingChanges);
+
+  for (const change of delta.screenRecordingChanges) {
+    applyScreenRecordingResumeChange(screenRecordingChunks, change);
+  }
+
+  return createPipelineResumeStateFromCheckpoints(delta.sequenceWatermark, screenRecordingChunks);
+}
+
+function screenRecordingCheckpointMapFromState(
+  state: PipelineResumeState
+): Map<string, Map<number, ScreenRecordingChunkCheckpoint>> {
+  return new Map(
+    state.screenRecordings.map((recording) => [
+      recording.recordingId,
+      new Map(
+        recording.chunks.map((chunk) => [
+          chunk.index,
+          {
+            hash: chunk.hash,
+            ...(chunk.size === undefined ? {} : { size: chunk.size })
+          }
+        ])
+      )
+    ])
+  );
+}
+
+function createPipelineResumeStateFromCheckpoints(
+  sequenceWatermark: RecorderSequenceWatermark,
+  screenRecordingChunks: Map<string, Map<number, ScreenRecordingChunkCheckpoint>>
+): PipelineResumeState {
+  return {
+    sequenceWatermark: { ...sequenceWatermark },
+    screenRecordings: [...screenRecordingChunks.entries()]
+      .map(([recordingId, chunks]) => ({
+        recordingId,
+        chunks: [...chunks.entries()]
+          .map(([index, checkpoint]) => ({ index, ...checkpoint }))
+          .sort((left, right) => left.index - right.index)
+      }))
+      .sort((left, right) => left.recordingId.localeCompare(right.recordingId))
+  };
+}
+
+function applyScreenRecordingEvent(
+  output: Map<string, Map<number, ScreenRecordingChunkCheckpoint>>,
+  event: WebBlackboxEvent
+): void {
+  const change = readScreenRecordingResumeChange(event);
+
+  if (!change) {
+    return;
+  }
+
+  applyScreenRecordingResumeChange(output, change);
+}
+
+function applyScreenRecordingResumeChange(
+  output: Map<string, Map<number, ScreenRecordingChunkCheckpoint>>,
+  change: ScreenRecordingResumeChange
+): void {
+  if (change.operation === "delete") {
+    output.delete(change.recordingId);
+    return;
+  }
+
+  if (change.operation === "reset") {
+    output.set(change.recordingId, new Map());
+    return;
+  }
+
+  const chunks =
+    output.get(change.recordingId) ?? new Map<number, ScreenRecordingChunkCheckpoint>();
+  chunks.set(change.index, {
+    hash: change.hash,
+    ...(change.size === undefined ? {} : { size: change.size })
+  });
+  output.set(change.recordingId, chunks);
+}
+
+function readScreenRecordingResumeChange(
+  event: WebBlackboxEvent
+): ScreenRecordingResumeChange | null {
+  if (
+    event.type !== "screen.recording.start" &&
+    event.type !== "screen.recording.chunk" &&
+    event.type !== "screen.recording.end" &&
+    event.type !== "screen.recording.error"
+  ) {
+    return null;
+  }
+
+  const data = asUnknownRecord(event.data);
+  const recordingId = data?.recordingId;
+
+  if (typeof recordingId !== "string" || recordingId.length === 0 || recordingId.length > 256) {
+    return null;
+  }
+
+  if (event.type === "screen.recording.start") {
+    return {
+      operation: "reset",
+      recordingId
+    };
+  }
+
+  if (event.type === "screen.recording.end") {
+    return {
+      operation: "delete",
+      recordingId
+    };
+  }
+
+  if (event.type === "screen.recording.error") {
+    return data?.stage === "restart"
+      ? {
+          operation: "delete",
+          recordingId
+        }
+      : null;
+  }
+
+  const hash = data?.chunkId;
+  const index = data?.index;
+  const size = data?.size;
+
+  if (
+    typeof hash !== "string" ||
+    !BLOB_HASH_PATTERN.test(hash) ||
+    !Number.isSafeInteger(index) ||
+    (index as number) < 0 ||
+    (index as number) >= PIPELINE_RESUME_MAX_SCREEN_CHUNKS
+  ) {
+    return null;
+  }
+
+  return {
+    operation: "put",
+    recordingId,
+    index: index as number,
+    hash,
+    ...(Number.isSafeInteger(size) && (size as number) >= 0 ? { size: size as number } : {})
+  };
+}
+
+function emptyPipelineResumeState(): PipelineResumeState {
+  return {
+    sequenceWatermark: { event: 0, action: 0 },
+    screenRecordings: []
+  };
+}
+
+function clonePipelineResumeState(state: PipelineResumeState): PipelineResumeState {
+  return {
+    sequenceWatermark: { ...state.sequenceWatermark },
+    screenRecordings: state.screenRecordings.map((recording) => ({
+      recordingId: recording.recordingId,
+      chunks: recording.chunks.map((chunk) => ({ ...chunk }))
+    }))
+  };
+}
+
+function asUnknownRecord(value: unknown): Record<string, unknown> | null {
+  return value !== null && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function parseCanonicalSequence(value: unknown, pattern: RegExp): number {
+  if (typeof value !== "string") {
+    return 0;
+  }
+
+  const match = pattern.exec(value);
+  const sequence = match?.[1] ? Number(match[1]) : Number.NaN;
+  return Number.isSafeInteger(sequence) && sequence >= 0 ? sequence : 0;
+}
+
 function normalizeBoundedPositiveInt(value: unknown): number | null {
   if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
     return null;
diff --git a/packages/pipeline/src/privacy.test.ts b/packages/pipeline/src/privacy.test.ts
index b961298..896161d 100644
--- a/packages/pipeline/src/privacy.test.ts
+++ b/packages/pipeline/src/privacy.test.ts
@@ -1,7 +1,7 @@
 import type { WebBlackboxEvent } from "@webblackbox/protocol";
 import { describe, expect, it } from "vitest";
 
-import { buildPrivacyManifest } from "./privacy.js";
+import { assertPrivacyScannerPassed, buildPrivacyManifest } from "./privacy.js";
 
 function createEvent(
   id: string,
@@ -27,6 +27,17 @@ function createEvent(
 }
 
 describe("privacy scanner", () => {
+  it("does not treat a legacy passed result without coverage as a complete scan", () => {
+    expect(() =>
+      assertPrivacyScannerPassed({
+        scannedAt: new Date(0).toISOString(),
+        preEncryption: true,
+        status: "passed",
+        findings: []
+      })
+    ).toThrow(/did not complete/i);
+  });
+
   it("does not classify browser numeric event metadata as phone numbers", async () => {
     const manifest = await buildPrivacyManifest({
       events: [createEvent("E-tab-id")],
@@ -55,7 +66,7 @@ describe("privacy scanner", () => {
     ]);
   });
 
-  it("does not scan recorder config policy metadata as captured content", async () => {
+  it("does not treat recorder config field names alone as captured secrets", async () => {
     const manifest = await buildPrivacyManifest({
       events: [
         createEvent(
@@ -76,4 +87,365 @@ describe("privacy scanner", () => {
 
     expect(manifest.scanner.status).toBe("passed");
   });
+
+  it("does scan attacker-controlled values even when an archive labels them meta.config", async () => {
+    const manifest = await buildPrivacyManifest({
+      events: [
+        createEvent(
+          "E-config-secret",
+          { exampleOnly: "-----BEGIN PRIVATE KEY-----" },
+          2_104_634_568,
+          "meta.config"
+        )
+      ],
+      blobs: [],
+      encrypted: false
+    });
+
+    expect(manifest.scanner).toMatchObject({
+      status: "blocked",
+      findings: [{ kind: "private-key", path: "event:E-config-secret" }]
+    });
+  });
+
+  it("preserves event object keys as scanner context", async () => {
+    const manifest = await buildPrivacyManifest({
+      events: [createEvent("E-key-secret", { api_key: "abcdefghijklmnop" })],
+      blobs: [],
+      encrypted: false
+    });
+
+    expect(manifest.scanner).toMatchObject({
+      status: "blocked",
+      findings: [{ kind: "api-key", path: "event:E-key-secret" }]
+    });
+  });
+
+  it("scans sensitive event keys even when their values are not strings", async () => {
+    const manifest = await buildPrivacyManifest({
+      events: [
+        createEvent(
+          "E-non-string-key-secret",
+          {
+            "alice@example.com": true,
+            "-----BEGIN PRIVATE KEY-----": null
+          },
+          2_104_634_568,
+          "meta.config"
+        )
+      ],
+      blobs: [],
+      encrypted: false
+    });
+
+    expect(manifest.scanner.status).toBe("blocked");
+    expect(manifest.scanner.findings.map((finding) => finding.kind)).toEqual(
+      expect.arrayContaining(["private-key", "email"])
+    );
+  });
+
+  it("scans asynchronously supplied blobs without retaining a caller-owned collection", async () => {
+    async function* blobs() {
+      yield {
+        hash: "a".repeat(64),
+        mime: "application/octet-stream",
+        bytes: new Uint8Array([1, 2, 3])
+      };
+      yield {
+        hash: "b".repeat(64),
+        mime: "text/plain",
+        bytes: new TextEncoder().encode("-----BEGIN PRIVATE KEY-----")
+      };
+    }
+
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: blobs(),
+      encrypted: false,
+      preEncryption: false
+    });
+
+    expect(manifest.totals.blobs).toBe(2);
+    expect(manifest.scanner).toMatchObject({
+      preEncryption: false,
+      status: "blocked",
+      findings: [{ kind: "private-key", path: `blob:${"b".repeat(64)}` }]
+    });
+  });
+
+  it("scans decoded JSON string values instead of trusting their escaped representation", async () => {
+    const escapedDash = "\\u002d";
+    const bytes = new TextEncoder().encode(
+      `{"value":"${escapedDash.repeat(5)}BEGIN PRIVATE KEY${escapedDash.repeat(5)}"}`
+    );
+
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: [{ hash: "c".repeat(64), mime: "application/json", bytes }],
+      encrypted: false,
+      preEncryption: false
+    });
+
+    expect(manifest.scanner.status).toBe("blocked");
+    expect(manifest.scanner.findings).toMatchObject([{ kind: "private-key" }]);
+    expect(manifest.scanner.coverage).toMatchObject({
+      complete: true,
+      scannedBlobCount: 1,
+      opaqueBlobCount: 0
+    });
+  });
+
+  it("retains raw JSON key context while also scanning semantic values", async () => {
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: [
+        {
+          hash: "0".repeat(64),
+          mime: "application/json",
+          bytes: new TextEncoder().encode('{"api_key":"abcdefghijklmnop"}')
+        }
+      ],
+      encrypted: false
+    });
+
+    expect(manifest.scanner.status).toBe("blocked");
+    expect(manifest.scanner.findings).toMatchObject([{ kind: "api-key" }]);
+  });
+
+  it("reports invalid UTF-8 text candidates as opaque instead of covered", async () => {
+    const secret = "-----BEGIN PRIVATE KEY-----";
+    const bytes = new Uint8Array(2 + secret.length * 2);
+    bytes.set([0xff, 0xfe]);
+    for (let index = 0; index < secret.length; index += 1) {
+      bytes[2 + index * 2] = secret.charCodeAt(index);
+    }
+
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: [{ hash: "d".repeat(64), mime: "application/json", bytes }],
+      encrypted: false,
+      preEncryption: false
+    });
+
+    expect(manifest.scanner.status).toBe("passed");
+    expect(manifest.scanner.coverage).toMatchObject({
+      complete: false,
+      incompleteReason: "decode-failed",
+      scannedBlobCount: 0,
+      opaqueBlobCount: 1
+    });
+    expect(() => assertPrivacyScannerPassed(manifest.scanner)).toThrow(/did not complete/i);
+  });
+
+  it("still blocks raw findings in malformed JSON while reporting incomplete coverage", async () => {
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: [
+        {
+          hash: "2".repeat(64),
+          mime: "application/json",
+          bytes: new TextEncoder().encode('{"value":"-----BEGIN PRIVATE KEY-----"')
+        }
+      ],
+      encrypted: false
+    });
+
+    expect(manifest.scanner).toMatchObject({
+      status: "blocked",
+      coverage: {
+        complete: false,
+        incompleteReason: "decode-failed",
+        opaqueBlobCount: 1
+      }
+    });
+  });
+
+  it("keeps intentional binary blobs complete for pre-encryption export compatibility", async () => {
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: [
+        {
+          hash: "1".repeat(64),
+          mime: "application/octet-stream",
+          bytes: new Uint8Array([0xff, 0xfe, 0xfd])
+        }
+      ],
+      encrypted: true
+    });
+
+    expect(manifest.scanner).toMatchObject({
+      status: "passed",
+      coverage: {
+        complete: true,
+        scannedBlobCount: 0,
+        opaqueBlobCount: 1
+      }
+    });
+    expect(() => assertPrivacyScannerPassed(manifest.scanner)).not.toThrow();
+  });
+
+  it("bounds target bytes and fails closed when export coverage is incomplete", async () => {
+    const manifest = await buildPrivacyManifest({
+      events: [createEvent("E-large", { value: "x".repeat(512) })],
+      blobs: [],
+      encrypted: false,
+      scan: {
+        maxTargetBytes: 60
+      }
+    });
+
+    expect(manifest.scanner.coverage).toMatchObject({
+      complete: false,
+      incompleteReason: "target-byte-limit",
+      scannedEventCount: 0
+    });
+    expect(() => assertPrivacyScannerPassed(manifest.scanner)).toThrow(/did not complete/i);
+  });
+
+  it("does not trust a caller-supplied source length below the actual blob bytes", async () => {
+    const maxTargetBytes = 64;
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: [
+        {
+          hash: "6".repeat(64),
+          mime: "application/json",
+          bytes: new TextEncoder().encode(`{"value":"${"x".repeat(256)}"}`),
+          sourceByteLength: 1
+        }
+      ],
+      encrypted: false,
+      scan: { maxTargetBytes }
+    });
+
+    expect(manifest.scanner.coverage).toMatchObject({
+      complete: false,
+      incompleteReason: "target-byte-limit",
+      scannedBlobCount: 0,
+      opaqueBlobCount: 1,
+      inspectedBytes: 0
+    });
+  });
+
+  it("charges raw plus semantic JSON expansion to the target budget", async () => {
+    const bytes = new TextEncoder().encode(`{"value":"${"x".repeat(32)}"}`);
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: [{ hash: "9".repeat(64), mime: "application/json", bytes }],
+      encrypted: false,
+      scan: { maxTargetBytes: bytes.byteLength + 8 }
+    });
+
+    expect(manifest.scanner.coverage).toMatchObject({
+      complete: false,
+      incompleteReason: "target-byte-limit",
+      scannedBlobCount: 0,
+      opaqueBlobCount: 1,
+      inspectedBytes: bytes.byteLength + 8
+    });
+  });
+
+  it("bounds intermediate JSON semantic expansion before repeated leaves amplify it", async () => {
+    const largeKey = "k".repeat(50 * 1024);
+    const bytes = new TextEncoder().encode(JSON.stringify({ [largeKey]: Array(5_000).fill("x") }));
+    const maxBytes = 80 * 1024;
+    const startedAt = performance.now();
+
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs: [{ hash: "7".repeat(64), mime: "application/json", bytes }],
+      encrypted: false,
+      scan: {
+        maxTargetBytes: maxBytes,
+        maxTotalBytes: maxBytes,
+        deadlineMs: 5_000
+      }
+    });
+
+    expect(performance.now() - startedAt).toBeLessThan(250);
+    expect(manifest.scanner.coverage).toMatchObject({
+      complete: false,
+      incompleteReason: "target-byte-limit",
+      inspectedBytes: maxBytes,
+      opaqueBlobCount: 1
+    });
+  });
+
+  it("stops at the configured finding bound without consuming later blobs", async () => {
+    let blobIteratorStarted = false;
+    async function* blobs() {
+      blobIteratorStarted = true;
+      yield {
+        hash: "e".repeat(64),
+        mime: "application/json",
+        bytes: new TextEncoder().encode("{}")
+      };
+    }
+
+    const manifest = await buildPrivacyManifest({
+      events: [createEvent("E-secret", { value: "-----BEGIN PRIVATE KEY-----" })],
+      blobs: blobs(),
+      expectedBlobCount: 1,
+      encrypted: false,
+      scan: {
+        maxFindings: 1,
+        stopOnFinding: true
+      }
+    });
+
+    expect(manifest.scanner.status).toBe("blocked");
+    expect(manifest.scanner.findings).toHaveLength(1);
+    expect(manifest.totals.blobs).toBe(1);
+    expect(manifest.scanner.coverage).toMatchObject({
+      complete: false,
+      incompleteReason: "finding-limit"
+    });
+    expect(blobIteratorStarted).toBe(false);
+  });
+
+  it("rejects a fully traversed blob source that disagrees with its declared total", async () => {
+    async function* oneBlob() {
+      yield { hash: "8".repeat(64), mime: "application/json", bytes: new Uint8Array() };
+    }
+
+    await expect(
+      buildPrivacyManifest({
+        events: [],
+        blobs: oneBlob(),
+        expectedBlobCount: 2,
+        encrypted: false
+      })
+    ).rejects.toThrow(/blob source count mismatch/i);
+  });
+
+  it("stops scanning when the deadline expires while awaiting a blob source", async () => {
+    const blobs: AsyncIterable<{
+      hash: string;
+      mime: string;
+      bytes: Uint8Array;
+    }> = {
+      [Symbol.asyncIterator]() {
+        return {
+          next: () => new Promise(() => undefined)
+        };
+      }
+    };
+
+    const startedAt = performance.now();
+    const manifest = await buildPrivacyManifest({
+      events: [],
+      blobs,
+      expectedBlobCount: 1,
+      encrypted: false,
+      scan: { deadlineMs: 10 }
+    });
+
+    expect(performance.now() - startedAt).toBeLessThan(250);
+    expect(manifest.totals.blobs).toBe(1);
+    expect(manifest.scanner.coverage).toMatchObject({
+      complete: false,
+      incompleteReason: "deadline",
+      scannedBlobCount: 0
+    });
+  });
 });
diff --git a/packages/pipeline/src/privacy.ts b/packages/pipeline/src/privacy.ts
index 3cfc85e..67da5b6 100644
--- a/packages/pipeline/src/privacy.ts
+++ b/packages/pipeline/src/privacy.ts
@@ -5,6 +5,7 @@ import type {
   PrivacyManifestCategorySummary,
   PrivacyScannerFinding,
   PrivacyScannerFindingKind,
+  PrivacyScannerCoverage,
   PrivacyScannerResult,
   WebBlackboxEvent
 } from "@webblackbox/protocol";
@@ -14,11 +15,30 @@ import type { StoredBlob } from "./storage.js";
 
 export type PrivacyManifestInput = {
   events: WebBlackboxEvent[];
-  blobs: StoredBlob[];
+  blobs: Iterable<PrivacyScanBlob> | AsyncIterable<PrivacyScanBlob>;
+  /** Exact total when a bounded scan may stop before consuming the blob iterable. */
+  expectedBlobCount?: number;
   capturePolicy?: CapturePolicy;
   encrypted: boolean;
+  preEncryption?: boolean;
   transfer?: PrivacyManifest["transfer"];
   generatedAt?: Date;
+  scan?: Partial<PrivacyScanOptions>;
+};
+
+export type PrivacyScanBlob = Pick<StoredBlob, "bytes" | "hash" | "mime"> & {
+  /** Indicates that a bounded reader stopped before returning the complete blob. */
+  truncated?: boolean;
+  /** Number of source bytes observed before a bounded read stopped. */
+  sourceByteLength?: number;
+};
+
+export type PrivacyScanOptions = {
+  maxTotalBytes: number;
+  maxTargetBytes: number;
+  maxFindings: number;
+  deadlineMs: number;
+  stopOnFinding: boolean;
 };
 
 type ScanTarget = {
@@ -32,6 +52,31 @@ type ScannerPattern = {
   validate?: (value: string) => boolean;
 };
 
+type ScanIncompleteReason = NonNullable<PrivacyScannerCoverage["incompleteReason"]>;
+
+type EventScanText = {
+  text: string;
+  byteLength: number;
+  truncated: boolean;
+  deadlineExceeded: boolean;
+};
+
+type BlobScanText = {
+  text: string;
+  covered: boolean;
+  truncated: boolean;
+  deadlineExceeded: boolean;
+};
+
+const MEBIBYTE = 1024 * 1024;
+const DEFAULT_PRIVACY_SCAN_OPTIONS: Readonly<PrivacyScanOptions> = Object.freeze({
+  maxTotalBytes: 256 * MEBIBYTE,
+  maxTargetBytes: 8 * MEBIBYTE,
+  maxFindings: 1_000,
+  deadlineMs: 30_000,
+  stopOnFinding: false
+});
+
 const SCANNER_PATTERNS: ScannerPattern[] = [
   {
     kind: "private-key",
@@ -83,16 +128,25 @@ const SCANNER_PATTERNS: ScannerPattern[] = [
 
 export async function buildPrivacyManifest(input: PrivacyManifestInput): Promise<PrivacyManifest> {
   const generatedAt = input.generatedAt ?? new Date();
-  const scanner = await scanPrivacyTargets([
-    ...input.events.map((event) => ({
-      path: `event:${event.id}`,
-      text: extractEventScanText(event)
-    })),
-    ...input.blobs.map((blob) => ({
-      path: `blob:${blob.hash}`,
-      text: decodeBlobForScanning(blob)
-    }))
-  ]);
+  const inferredBlobCount = Array.isArray(input.blobs) ? input.blobs.length : undefined;
+  const expectedBlobCount = readOptionalNonNegativeSafeInteger(
+    input.expectedBlobCount ?? inferredBlobCount,
+    "expectedBlobCount"
+  );
+  if (
+    input.expectedBlobCount !== undefined &&
+    inferredBlobCount !== undefined &&
+    input.expectedBlobCount !== inferredBlobCount
+  ) {
+    throw new TypeError("Privacy scan expectedBlobCount does not match the blob array length.");
+  }
+  const { blobCount, scanner } = await scanPrivacyContent(
+    input.events,
+    input.blobs,
+    expectedBlobCount,
+    input.preEncryption !== false,
+    resolvePrivacyScanOptions(input.scan)
+  );
 
   return {
     schemaVersion: 1,
@@ -108,88 +162,302 @@ export async function buildPrivacyManifest(input: PrivacyManifestInput): Promise
     },
     totals: {
       events: input.events.length,
-      blobs: input.blobs.length,
+      blobs: blobCount,
       privacyViolations: input.events.filter((event) => event.type === "privacy.violation").length
     }
   };
 }
 
-function extractEventScanText(event: WebBlackboxEvent): string {
-  if (event.type === "meta.config") {
-    return "";
+export function assertPrivacyScannerPassed(scanner: PrivacyScannerResult): void {
+  if (scanner.status === "blocked") {
+    const summary = scanner.findings
+      .slice(0, 5)
+      .map((finding) => `${finding.kind} in ${finding.path}`)
+      .join(", ");
+    throw new Error(`Privacy scanner blocked export: ${summary}`);
   }
 
-  const strings: string[] = [];
-  collectStringLeaves(event.data, strings);
-  collectStringLeaves(event.ref, strings);
-  collectStringLeaves(event.cdp, strings);
-  collectStringLeaves(event.frame, strings);
-  return strings.join("\n");
+  if (scanner.coverage?.complete !== true) {
+    throw new Error(
+      `Privacy scanner did not complete export analysis (${scanner.coverage?.incompleteReason ?? "unknown reason"}).`
+    );
+  }
 }
 
-function collectStringLeaves(value: unknown, output: string[]): void {
-  if (typeof value === "string") {
-    output.push(value);
-    return;
+async function scanPrivacyContent(
+  events: WebBlackboxEvent[],
+  blobs: Iterable<PrivacyScanBlob> | AsyncIterable<PrivacyScanBlob>,
+  expectedBlobCount: number | undefined,
+  preEncryption: boolean,
+  options: PrivacyScanOptions
+): Promise<{ blobCount: number; scanner: PrivacyScannerResult }> {
+  const findings: PrivacyScannerFinding[] = [];
+  const coverage: PrivacyScannerCoverage = {
+    complete: true,
+    scannedEventCount: 0,
+    scannedBlobCount: 0,
+    opaqueBlobCount: 0,
+    inspectedBytes: 0
+  };
+  const deadline = monotonicNow() + options.deadlineMs;
+  let blobCount = 0;
+  let halted = false;
+
+  const markIncomplete = (reason: ScanIncompleteReason, halt = false) => {
+    coverage.complete = false;
+    coverage.incompleteReason ??= reason;
+    halted ||= halt;
+  };
+
+  for (const event of events) {
+    if (deadlineExceeded(deadline)) {
+      markIncomplete("deadline", true);
+      break;
+    }
+
+    const extracted = extractEventScanText(event, options.maxTargetBytes, deadline);
+    if (extracted.deadlineExceeded) {
+      markIncomplete("deadline", true);
+      break;
+    }
+    const eventFullyExtracted = !extracted.truncated;
+    if (!eventFullyExtracted) {
+      markIncomplete("target-byte-limit");
+    }
+
+    const targetBytes = extracted.byteLength;
+    if (coverage.inspectedBytes + targetBytes > options.maxTotalBytes) {
+      markIncomplete("total-byte-limit", true);
+      break;
+    }
+    coverage.inspectedBytes += targetBytes;
+
+    const stopReason = await scanPrivacyTarget(
+      { path: `event:${event.id}`, text: extracted.text },
+      findings,
+      options,
+      deadline
+    );
+    if (stopReason) {
+      markIncomplete(stopReason, true);
+      break;
+    }
+    if (eventFullyExtracted) {
+      coverage.scannedEventCount += 1;
+    }
   }
 
-  if (!value || typeof value !== "object") {
-    return;
+  if (!halted || expectedBlobCount === undefined) {
+    const iterator = toAsyncIterator(blobs);
+    let iteratorFinished = false;
+    try {
+      while (!halted) {
+        const next = await readIteratorBeforeDeadline(iterator, deadline);
+        if (next.timedOut) {
+          markIncomplete("deadline", true);
+          break;
+        }
+        if (next.result.done) {
+          iteratorFinished = true;
+          break;
+        }
+        const blob = next.result.value;
+        blobCount += 1;
+        if (expectedBlobCount !== undefined && blobCount > expectedBlobCount) {
+          throw new Error(
+            `Privacy scan blob source exceeded expected count ${expectedBlobCount}: received at least ${blobCount}.`
+          );
+        }
+        if (deadlineExceeded(deadline)) {
+          markIncomplete("deadline", true);
+          break;
+        }
+        if (!isPrivacyScannerTextMime(blob.mime)) {
+          coverage.opaqueBlobCount += 1;
+          continue;
+        }
+
+        const sourceByteLength = blob.sourceByteLength ?? blob.bytes.byteLength;
+        if (
+          blob.truncated ||
+          blob.bytes.byteLength > options.maxTargetBytes ||
+          sourceByteLength > options.maxTargetBytes
+        ) {
+          coverage.opaqueBlobCount += 1;
+          markIncomplete("target-byte-limit");
+          continue;
+        }
+
+        const decoded = decodeBlobForScanning(blob, options.maxTargetBytes, deadline);
+        const bounded = boundScanText(decoded.text, options.maxTargetBytes);
+        if (decoded.deadlineExceeded) {
+          coverage.opaqueBlobCount += 1;
+          markIncomplete("deadline", true);
+          break;
+        }
+        if (!decoded.covered || decoded.truncated || bounded.truncated) {
+          coverage.opaqueBlobCount += 1;
+          markIncomplete(
+            decoded.covered && (decoded.truncated || bounded.truncated)
+              ? "target-byte-limit"
+              : "decode-failed"
+          );
+        } else {
+          coverage.scannedBlobCount += 1;
+        }
+
+        if (deadlineExceeded(deadline)) {
+          if (decoded.covered && !decoded.truncated && !bounded.truncated) {
+            coverage.scannedBlobCount -= 1;
+            coverage.opaqueBlobCount += 1;
+          }
+          markIncomplete("deadline", true);
+          break;
+        }
+        if (coverage.inspectedBytes + bounded.byteLength > options.maxTotalBytes) {
+          if (decoded.covered && !decoded.truncated && !bounded.truncated) {
+            coverage.scannedBlobCount -= 1;
+            coverage.opaqueBlobCount += 1;
+          }
+          markIncomplete("total-byte-limit", true);
+          break;
+        }
+        coverage.inspectedBytes += bounded.byteLength;
+
+        const stopReason = await scanPrivacyTarget(
+          { path: `blob:${blob.hash}`, text: bounded.text },
+          findings,
+          options,
+          deadline
+        );
+        if (stopReason) {
+          markIncomplete(stopReason, true);
+        }
+      }
+    } finally {
+      if (!iteratorFinished) {
+        closeIteratorWithoutWaiting(iterator);
+      }
+    }
   }
 
-  if (Array.isArray(value)) {
-    for (const item of value) {
-      collectStringLeaves(item, output);
+  if (expectedBlobCount !== undefined) {
+    if (!halted && blobCount !== expectedBlobCount) {
+      throw new Error(
+        `Privacy scan blob source count mismatch: expected ${expectedBlobCount}, received ${blobCount}.`
+      );
     }
-    return;
+    if (blobCount > expectedBlobCount) {
+      throw new Error(
+        `Privacy scan blob source exceeded expected count ${expectedBlobCount}: received at least ${blobCount}.`
+      );
+    }
+    blobCount = expectedBlobCount;
   }
 
-  for (const item of Object.values(value)) {
-    collectStringLeaves(item, output);
+  return {
+    blobCount,
+    scanner: {
+      scannedAt: new Date().toISOString(),
+      preEncryption,
+      status: findings.length > 0 ? "blocked" : "passed",
+      findings,
+      coverage
+    }
+  };
+}
+
+type DeadlineIteratorResult<T> =
+  | { timedOut: true }
+  | { timedOut: false; result: IteratorResult<T> };
+
+function toAsyncIterator<T>(source: Iterable<T> | AsyncIterable<T>): AsyncIterator<T> {
+  const asyncIterator = (source as AsyncIterable<T>)[Symbol.asyncIterator]?.();
+  if (asyncIterator) {
+    return asyncIterator;
   }
+
+  const iterator = (source as Iterable<T>)[Symbol.iterator]();
+  return {
+    next: async () => iterator.next(),
+    return: iterator.return
+      ? async () => iterator.return?.() ?? { done: true, value: undefined }
+      : undefined
+  };
 }
 
-export function assertPrivacyScannerPassed(scanner: PrivacyScannerResult): void {
-  if (scanner.status === "blocked") {
-    const summary = scanner.findings
-      .slice(0, 5)
-      .map((finding) => `${finding.kind} in ${finding.path}`)
-      .join(", ");
-    throw new Error(`Privacy scanner blocked export: ${summary}`);
+async function readIteratorBeforeDeadline<T>(
+  iterator: AsyncIterator<T>,
+  deadline: number
+): Promise<DeadlineIteratorResult<T>> {
+  const remainingMs = deadline - monotonicNow();
+  if (remainingMs <= 0) {
+    return { timedOut: true };
+  }
+
+  const nextPromise = Promise.resolve(iterator.next());
+  let timeoutId: ReturnType<typeof setTimeout> | undefined;
+  const timeoutPromise = new Promise<DeadlineIteratorResult<T>>((resolvePromise) => {
+    timeoutId = setTimeout(() => resolvePromise({ timedOut: true }), Math.max(1, remainingMs));
+  });
+  const result = await Promise.race<DeadlineIteratorResult<T>>([
+    nextPromise.then((next) => ({ timedOut: false, result: next })),
+    timeoutPromise
+  ]);
+  if (timeoutId !== undefined) {
+    clearTimeout(timeoutId);
+  }
+  if (result.timedOut) {
+    void nextPromise.catch(() => undefined);
   }
+  return result;
 }
 
-async function scanPrivacyTargets(targets: ScanTarget[]): Promise<PrivacyScannerResult> {
-  const findings: PrivacyScannerFinding[] = [];
+function closeIteratorWithoutWaiting<T>(iterator: AsyncIterator<T>): void {
+  try {
+    const closing = iterator.return?.();
+    if (closing) {
+      void Promise.resolve(closing).catch(() => undefined);
+    }
+  } catch {
+    // Deadline enforcement must not wait for or surface iterator cleanup failures.
+  }
+}
 
-  for (const target of targets) {
-    if (!target.text) {
-      continue;
+async function scanPrivacyTarget(
+  target: ScanTarget,
+  findings: PrivacyScannerFinding[],
+  options: PrivacyScanOptions,
+  deadline: number
+): Promise<ScanIncompleteReason | null> {
+  if (!target.text) {
+    return null;
+  }
+
+  for (const scanner of SCANNER_PATTERNS) {
+    if (deadlineExceeded(deadline)) {
+      return "deadline";
     }
+    const matches = collectMatches(target.text, scanner);
 
-    for (const scanner of SCANNER_PATTERNS) {
-      const matches = collectMatches(target.text, scanner);
+    if (matches.length === 0) {
+      continue;
+    }
 
-      if (matches.length === 0) {
-        continue;
-      }
+    findings.push({
+      kind: scanner.kind,
+      severity: "high",
+      path: target.path,
+      matchCount: matches.length,
+      sampleSha256: await sha256Hex(matches[0] ?? "")
+    });
 
-      findings.push({
-        kind: scanner.kind,
-        severity: "high",
-        path: target.path,
-        matchCount: matches.length,
-        sampleSha256: await sha256Hex(matches[0] ?? "")
-      });
+    if (options.stopOnFinding || findings.length >= options.maxFindings) {
+      return "finding-limit";
     }
   }
 
-  return {
-    scannedAt: new Date().toISOString(),
-    preEncryption: true,
-    status: findings.length > 0 ? "blocked" : "passed",
-    findings
-  };
+  return null;
 }
 
 function collectMatches(text: string, scanner: ScannerPattern): string[] {
@@ -249,19 +517,40 @@ function summarizePrivacyCategories(events: WebBlackboxEvent[]): PrivacyManifest
   return [...summaries.values()].sort((left, right) => left.category.localeCompare(right.category));
 }
 
-function decodeBlobForScanning(blob: StoredBlob): string {
-  if (!isLikelyTextBlob(blob.mime)) {
-    return "";
-  }
-
+function decodeBlobForScanning(
+  blob: PrivacyScanBlob,
+  maxTargetBytes: number,
+  deadline: number
+): BlobScanText {
+  let text: string;
   try {
-    return new TextDecoder("utf-8", { fatal: false }).decode(blob.bytes);
+    text = new TextDecoder("utf-8", { fatal: true }).decode(blob.bytes);
   } catch {
-    return "";
+    return { text: "", covered: false, truncated: false, deadlineExceeded: false };
+  }
+
+  if (blob.mime.toLowerCase().includes("json")) {
+    let parsed: unknown;
+    try {
+      parsed = JSON.parse(text) as unknown;
+    } catch {
+      return { text, covered: false, truncated: false, deadlineExceeded: false };
+    }
+
+    const semanticBudget = Math.max(0, maxTargetBytes - blob.bytes.byteLength - 1);
+    const semantic = extractStructuredScanText(parsed, semanticBudget, deadline);
+    return {
+      text: semantic.text.length > 0 ? `${text}\0${semantic.text}` : text,
+      covered: true,
+      truncated: semantic.truncated,
+      deadlineExceeded: semantic.deadlineExceeded
+    };
   }
+
+  return { text, covered: true, truncated: false, deadlineExceeded: false };
 }
 
-function isLikelyTextBlob(mime: string): boolean {
+export function isPrivacyScannerTextMime(mime: string): boolean {
   const normalized = mime.toLowerCase();
   return (
     normalized.startsWith("text/") ||
@@ -272,6 +561,176 @@ function isLikelyTextBlob(mime: string): boolean {
   );
 }
 
+function extractEventScanText(
+  event: WebBlackboxEvent,
+  maxTargetBytes: number,
+  deadline: number
+): EventScanText {
+  return extractStructuredScanText(event, maxTargetBytes, deadline);
+}
+
+function extractStructuredScanText(
+  root: unknown,
+  maxTargetBytes: number,
+  deadline: number
+): EventScanText {
+  const strings: string[] = [];
+  const stack: Array<{ value: unknown; key?: string; emitKey?: boolean }> = [{ value: root }];
+  const seen = new WeakSet<object>();
+  const encoder = new TextEncoder();
+  let byteLength = 0;
+  let visited = 0;
+
+  const append = (fragment: string): boolean => {
+    const separatorBytes = strings.length > 0 ? 1 : 0;
+    const remaining = maxTargetBytes - byteLength - separatorBytes;
+    if (remaining < 0) {
+      return false;
+    }
+
+    const encoded = encoder.encode(fragment);
+    if (encoded.byteLength <= remaining) {
+      strings.push(fragment);
+      byteLength += separatorBytes + encoded.byteLength;
+      return true;
+    }
+    if (remaining === 0) {
+      if (separatorBytes > 0) {
+        strings.push("");
+        byteLength += separatorBytes;
+      }
+      return false;
+    }
+
+    const target = new Uint8Array(remaining);
+    const { read, written } = encoder.encodeInto(fragment, target);
+    strings.push(fragment.slice(0, read));
+    byteLength += separatorBytes + written;
+    return read === fragment.length;
+  };
+
+  while (stack.length > 0) {
+    visited += 1;
+    if (visited % 64 === 0 && deadlineExceeded(deadline)) {
+      return {
+        text: strings.join("\0"),
+        byteLength,
+        truncated: true,
+        deadlineExceeded: true
+      };
+    }
+
+    const current = stack.pop();
+    const value = current?.value;
+    if (typeof value === "string") {
+      const target =
+        current?.key === undefined
+          ? JSON.stringify(value)
+          : `${JSON.stringify(current.key)}:${JSON.stringify(value)}`;
+      if (!append(target)) {
+        return { text: strings.join("\0"), byteLength, truncated: true, deadlineExceeded: false };
+      }
+      continue;
+    }
+    if (current?.key !== undefined && current.emitKey && !append(JSON.stringify(current.key))) {
+      return { text: strings.join("\0"), byteLength, truncated: true, deadlineExceeded: false };
+    }
+    if (!value || typeof value !== "object" || seen.has(value)) {
+      continue;
+    }
+    seen.add(value);
+
+    if (Array.isArray(value)) {
+      for (let index = value.length - 1; index >= 0; index -= 1) {
+        stack.push({ value: value[index], key: current?.key, emitKey: false });
+      }
+      continue;
+    }
+    const entries = Object.entries(value);
+    for (let index = entries.length - 1; index >= 0; index -= 1) {
+      const entry = entries[index];
+      if (entry) {
+        stack.push({ value: entry[1], key: entry[0], emitKey: true });
+      }
+    }
+  }
+
+  return { text: strings.join("\0"), byteLength, truncated: false, deadlineExceeded: false };
+}
+
+function resolvePrivacyScanOptions(input: Partial<PrivacyScanOptions> = {}): PrivacyScanOptions {
+  return {
+    maxTotalBytes: readPositiveSafeInteger(
+      input.maxTotalBytes,
+      DEFAULT_PRIVACY_SCAN_OPTIONS.maxTotalBytes,
+      "maxTotalBytes"
+    ),
+    maxTargetBytes: readPositiveSafeInteger(
+      input.maxTargetBytes,
+      DEFAULT_PRIVACY_SCAN_OPTIONS.maxTargetBytes,
+      "maxTargetBytes"
+    ),
+    maxFindings: readPositiveSafeInteger(
+      input.maxFindings,
+      DEFAULT_PRIVACY_SCAN_OPTIONS.maxFindings,
+      "maxFindings"
+    ),
+    deadlineMs: readPositiveSafeInteger(
+      input.deadlineMs,
+      DEFAULT_PRIVACY_SCAN_OPTIONS.deadlineMs,
+      "deadlineMs"
+    ),
+    stopOnFinding: input.stopOnFinding ?? DEFAULT_PRIVACY_SCAN_OPTIONS.stopOnFinding
+  };
+}
+
+function readPositiveSafeInteger(
+  value: number | undefined,
+  fallback: number,
+  label: string
+): number {
+  const resolved = value ?? fallback;
+  if (!Number.isSafeInteger(resolved) || resolved <= 0) {
+    throw new TypeError(`Privacy scan option '${label}' must be a positive safe integer.`);
+  }
+  return resolved;
+}
+
+function monotonicNow(): number {
+  return globalThis.performance?.now() ?? Date.now();
+}
+
+function deadlineExceeded(deadline: number): boolean {
+  return monotonicNow() >= deadline;
+}
+
+function boundScanText(
+  text: string,
+  maxBytes: number
+): { text: string; byteLength: number; truncated: boolean } {
+  const encoded = new TextEncoder().encode(text);
+  if (encoded.byteLength <= maxBytes) {
+    return { text, byteLength: encoded.byteLength, truncated: false };
+  }
+
+  const target = new Uint8Array(maxBytes);
+  const { read, written } = new TextEncoder().encodeInto(text, target);
+  return { text: text.slice(0, read), byteLength: written, truncated: true };
+}
+
+function readOptionalNonNegativeSafeInteger(
+  value: number | undefined,
+  label: string
+): number | undefined {
+  if (value === undefined) {
+    return undefined;
+  }
+  if (!Number.isSafeInteger(value) || value < 0) {
+    throw new TypeError(`Privacy scan option '${label}' must be a non-negative safe integer.`);
+  }
+  return value;
+}
+
 function hasValidLuhnChecksum(value: string): boolean {
   const digits = value.replace(/\D/g, "");
 
diff --git a/packages/pipeline/src/storage.test.ts b/packages/pipeline/src/storage.test.ts
index 0545121..b4cb823 100644
--- a/packages/pipeline/src/storage.test.ts
+++ b/packages/pipeline/src/storage.test.ts
@@ -4,10 +4,18 @@ import type { ChunkTimeIndexEntry, SessionMetadata } from "@webblackbox/protocol
 import { describe, expect, it, vi } from "vitest";
 
 import {
+  assertPipelineResumeChangesWithinLimits,
+  deleteIndexedDbDatabase,
   derivePipelineStorageKey,
   EncryptedPipelineStorage,
+  getOrCreateIndexedDbPipelineStorageKey,
   IndexedDbPipelineStorage,
   MemoryPipelineStorage,
+  PIPELINE_DELIVERY_MAX_INDEXES,
+  PIPELINE_DELIVERY_MAX_STREAMS,
+  type PipelineDeliveryChange,
+  type PipelineDeliveryNoOutputChange,
+  type PipelineStorage,
   type StoredBlob,
   type StoredChunk
 } from "./storage.js";
@@ -64,6 +72,32 @@ function createBlob(hash: string, bytes: Uint8Array): StoredBlob {
   };
 }
 
+function deliveryChange(
+  eventIndex: number,
+  options: {
+    batchId?: string;
+    documentId?: string;
+    eventCount?: number;
+    eventId?: string;
+    fingerprint?: string;
+    frameId?: number;
+  } = {}
+): PipelineDeliveryChange {
+  const base = {
+    tabId: 1,
+    frameId: options.frameId ?? 0,
+    documentId: options.documentId ?? "document-1",
+    batchId: options.batchId ?? "batch-1",
+    fingerprint: options.fingerprint ?? "d".repeat(64),
+    eventCount: options.eventCount ?? 2,
+    eventIndex
+  };
+
+  return options.eventId
+    ? { ...base, outcome: "event", eventId: options.eventId }
+    : { ...base, outcome: "no-output" };
+}
+
 function createDbName(): string {
   return `wb-storage-test-${Date.now()}-${Math.random().toString(16).slice(2)}`;
 }
@@ -103,7 +137,238 @@ async function writeRawRows(
   });
 }
 
+async function readRawRows(
+  db: IDBDatabase,
+  storeName: string
+): Promise<Array<Record<string, unknown>>> {
+  return new Promise((resolve, reject) => {
+    const request = db.transaction(storeName, "readonly").objectStore(storeName).getAll();
+    request.onsuccess = () => resolve(request.result as Array<Record<string, unknown>>);
+    request.onerror = () => reject(request.error ?? new Error("Raw row read failed"));
+  });
+}
+
 describe("storage", () => {
+  it("rejects projected resume states beyond recording and chunk limits", async () => {
+    const tooManyRecordings = Array.from({ length: 33 }, (_, index) => ({
+      operation: "reset" as const,
+      recordingId: `VR-${index}`
+    }));
+
+    for (const storage of [
+      new MemoryPipelineStorage(),
+      new IndexedDbPipelineStorage(createDbName())
+    ]) {
+      const sid = `S-resume-bounds-${storage.constructor.name}`;
+      await storage.putSession({ ...SESSION_A, sid });
+      await expect(
+        storage.putChunk({
+          ...createChunk(sid, "C-bounds", 1, "bounds"),
+          resumeDelta: {
+            version: 1,
+            sequenceWatermark: { event: 33, action: 0 },
+            screenRecordingChanges: tooManyRecordings
+          }
+        })
+      ).rejects.toThrow(/too many active screen recordings/i);
+      expect(await storage.listChunks(sid)).toEqual([]);
+      expect(await storage.getResumeState?.(sid)).toBeUndefined();
+    }
+
+    const atChunkLimit = {
+      size: 500_000,
+      has: () => false
+    } as unknown as ReadonlyMap<number, unknown>;
+    expect(() =>
+      assertPipelineResumeChangesWithinLimits(new Map([["VR-limit", atChunkLimit]]), [
+        {
+          operation: "put",
+          recordingId: "VR-limit",
+          index: 499_999,
+          hash: "f".repeat(64)
+        }
+      ])
+    ).toThrow(/too many screen-recording chunks/i);
+  });
+
+  it("keeps one fail-closed durable delivery batch per document stream", async () => {
+    for (const storage of [
+      new MemoryPipelineStorage(),
+      new IndexedDbPipelineStorage(createDbName())
+    ]) {
+      const sid = `S-delivery-single-flight-${storage.constructor.name}`;
+      const query = {
+        tabId: 1,
+        frameId: 0,
+        documentId: "document-1",
+        batchId: "batch-1"
+      };
+      const first = deliveryChange(0) as PipelineDeliveryNoOutputChange;
+
+      await storage.putSession({ ...SESSION_A, sid });
+      await storage.commitDeliveryProgress?.(sid, [first]);
+      expect(await storage.getDeliveryReceipt?.(sid, query)).toEqual({
+        tabId: 1,
+        frameId: 0,
+        documentId: "document-1",
+        batchId: "batch-1",
+        fingerprint: "d".repeat(64),
+        eventCount: 2,
+        indexes: [{ eventIndex: 0, outcome: "no-output" }],
+        complete: false
+      });
+
+      await expect(
+        storage.commitDeliveryProgress?.(sid, [
+          deliveryChange(1, { fingerprint: "f".repeat(64) }) as PipelineDeliveryNoOutputChange
+        ])
+      ).rejects.toThrow(/reused with different content/i);
+
+      await expect(
+        storage.commitDeliveryProgress?.(sid, [
+          deliveryChange(0, {
+            batchId: "batch-2",
+            fingerprint: "e".repeat(64),
+            eventCount: 1
+          }) as PipelineDeliveryNoOutputChange
+        ])
+      ).rejects.toThrow(/incomplete batch/i);
+
+      await storage.commitDeliveryProgress?.(sid, [
+        deliveryChange(1) as PipelineDeliveryNoOutputChange
+      ]);
+      expect((await storage.getDeliveryReceipt?.(sid, query))?.complete).toBe(true);
+
+      await storage.commitDeliveryProgress?.(sid, [
+        deliveryChange(0, {
+          batchId: "batch-2",
+          fingerprint: "e".repeat(64),
+          eventCount: 1
+        }) as PipelineDeliveryNoOutputChange
+      ]);
+      expect(await storage.getDeliveryReceipt?.(sid, query)).toBeUndefined();
+      expect(
+        await storage.getDeliveryReceipt?.(sid, {
+          ...query,
+          batchId: "batch-2"
+        })
+      ).toEqual(expect.objectContaining({ batchId: "batch-2", complete: true }));
+    }
+  });
+
+  it("persists all-no-output delivery completion at chunk sequence zero across restart", async () => {
+    const databaseName = createDbName();
+    const sid = "S-delivery-no-output";
+    const storage = new IndexedDbPipelineStorage(databaseName);
+    const changes = [0, 1].map(
+      (eventIndex) => deliveryChange(eventIndex) as PipelineDeliveryNoOutputChange
+    );
+
+    await storage.putSession({ ...SESSION_A, sid });
+    await storage.commitDeliveryProgress(sid, changes);
+
+    const restarted = new IndexedDbPipelineStorage(databaseName);
+    const receipt = await restarted.getDeliveryReceipt(sid, {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-1",
+      batchId: "batch-1"
+    });
+    expect(receipt).toEqual(expect.objectContaining({ complete: true }));
+    expect(receipt?.indexes).toHaveLength(2);
+    expect(await restarted.listChunks(sid)).toEqual([]);
+    expect(await restarted.getResumeState(sid)).toBeUndefined();
+  });
+
+  it("rolls back metadata-only delivery progress when its indexeddb transaction aborts asynchronously", async () => {
+    const storage = new IndexedDbPipelineStorage(createDbName());
+    const sid = "S-delivery-metadata-rollback";
+    const change = deliveryChange(0, {
+      documentId: "document-metadata-rollback",
+      batchId: "batch-metadata-rollback",
+      eventCount: 1
+    }) as PipelineDeliveryNoOutputChange;
+    const query = {
+      tabId: change.tabId,
+      frameId: change.frameId,
+      documentId: change.documentId,
+      batchId: change.batchId
+    };
+    const originalPut = IDBObjectStore.prototype.put;
+
+    await storage.putSession({ ...SESSION_A, sid });
+    const putSpy = vi.spyOn(IDBObjectStore.prototype, "put").mockImplementation(function (
+      this: IDBObjectStore,
+      value: unknown,
+      key?: IDBValidKey
+    ): IDBRequest<IDBValidKey> {
+      const request =
+        key === undefined ? originalPut.call(this, value) : originalPut.call(this, value, key);
+
+      if (this.name === "deliveryReceipts") {
+        const transaction = this.transaction;
+        queueMicrotask(() => {
+          try {
+            transaction.abort();
+          } catch {
+            // A completion here would make the assertion below fail rather than masking the race.
+          }
+        });
+      }
+
+      return request;
+    });
+
+    try {
+      await expect(storage.commitDeliveryProgress(sid, [change])).rejects.toThrow(
+        /transaction (?:failed|aborted)/i
+      );
+    } finally {
+      putSpy.mockRestore();
+    }
+
+    expect(await storage.getSession(sid)).toEqual(expect.objectContaining({ sid }));
+    expect(await storage.getDeliveryReceipt(sid, query)).toBeUndefined();
+
+    await storage.commitDeliveryProgress(sid, [change]);
+    expect(await storage.getDeliveryReceipt(sid, query)).toEqual(
+      expect.objectContaining({ complete: true })
+    );
+  });
+
+  it("bounds delivery streams and per-batch indexes without evicting incomplete receipts", async () => {
+    const storage = new MemoryPipelineStorage();
+    const sid = "S-delivery-bounds";
+    const changes = Array.from({ length: PIPELINE_DELIVERY_MAX_STREAMS }, (_, index) =>
+      deliveryChange(0, {
+        batchId: `batch-${index}`,
+        documentId: `document-${index}`,
+        eventCount: 1
+      })
+    ) as PipelineDeliveryNoOutputChange[];
+
+    await storage.putSession({ ...SESSION_A, sid });
+    await storage.commitDeliveryProgress(sid, changes);
+    await expect(
+      storage.commitDeliveryProgress(sid, [
+        deliveryChange(0, {
+          batchId: "batch-overflow",
+          documentId: "document-overflow",
+          eventCount: 1
+        }) as PipelineDeliveryNoOutputChange
+      ])
+    ).rejects.toThrow(/too many document streams/i);
+    await expect(
+      storage.commitDeliveryProgress(sid, [
+        deliveryChange(0, {
+          batchId: "batch-index-overflow",
+          documentId: "document-index-overflow",
+          eventCount: PIPELINE_DELIVERY_MAX_INDEXES + 1
+        }) as PipelineDeliveryNoOutputChange
+      ])
+    ).rejects.toThrow(/metadata-only delivery progress/i);
+  });
+
   it("supports memory storage CRUD and session-scoped blob ref-count cleanup", async () => {
     const storage = new MemoryPipelineStorage();
     const hash = "f".repeat(64);
@@ -194,6 +459,14 @@ describe("storage", () => {
     });
     expect(await storage.getSession(sid)).toEqual(expect.objectContaining({ sid }));
     await storage.putChunk(chunk);
+    await storage.initializeResumeState(sid, 1, {
+      sequenceWatermark: { event: 1, action: 0 },
+      screenRecordings: []
+    });
+    expect(await storage.getResumeState(sid, 1)).toEqual({
+      sequenceWatermark: { event: 1, action: 0 },
+      screenRecordings: []
+    });
     await storage.putBlob(createBlob(hash, blobBytes), sid);
     await storage.putIndexes(sid, {
       time: [chunkMeta("C-enc", 1)],
@@ -229,18 +502,76 @@ describe("storage", () => {
       files: {}
     });
 
-    await baseStorage.putChunk(createChunk(sid, "C-plain", 2, '{"plain":true}\n'));
+    await baseStorage.putChunk({
+      ...createChunk(sid, "C-plain", 2, '{"plain":true}\n'),
+      resumeDelta: {
+        version: 1,
+        sequenceWatermark: { event: 2, action: 0 },
+        screenRecordingChanges: []
+      }
+    });
     await baseStorage.putBlob(createBlob("b".repeat(64), Uint8Array.from([9, 9, 9])), sid);
-    expect(Array.from((await storage.getChunk(sid, "C-plain"))?.bytes ?? [])).toEqual(
-      Array.from(new TextEncoder().encode('{"plain":true}\n'))
-    );
-    expect(Array.from((await storage.getBlob("b".repeat(64)))?.bytes ?? [])).toEqual([9, 9, 9]);
+    await expect(storage.getChunk(sid, "C-plain")).rejects.toThrow(/refusing.*plaintext/i);
+    await expect(storage.getBlob("b".repeat(64))).rejects.toThrow(/refusing.*plaintext/i);
 
     await expect(storage.getChunk(sid, "missing")).resolves.toBeUndefined();
     await expect(storage.getBlob("c".repeat(64))).resolves.toBeUndefined();
     await storage.deleteSession(sid, [hash, "b".repeat(64)]);
   });
 
+  it("exposes delivery capabilities only when the inner storage supports the complete pair", async () => {
+    const key = await derivePipelineStorageKey("delivery-capability-passphrase", {
+      salt: Uint8Array.from([1, 3, 5, 7, 9, 11, 13, 15, 2, 4, 6, 8, 10, 12, 14, 16])
+    });
+    const createInner = (capabilities: "none" | "read-only" | "commit-only"): PipelineStorage => {
+      const inner = new MemoryPipelineStorage();
+
+      if (capabilities === "none" || capabilities === "commit-only") {
+        Object.defineProperty(inner, "getDeliveryReceipt", { value: undefined });
+      }
+      if (capabilities === "none" || capabilities === "read-only") {
+        Object.defineProperty(inner, "commitDeliveryProgress", { value: undefined });
+      }
+
+      return inner;
+    };
+
+    for (const capabilities of ["none", "read-only", "commit-only"] as const) {
+      const storage = new EncryptedPipelineStorage(createInner(capabilities), { key: key.key });
+
+      expect(storage.getDeliveryReceipt).toBeUndefined();
+      expect(storage.commitDeliveryProgress).toBeUndefined();
+    }
+  });
+
+  it("delegates the complete delivery capability pair through encrypted storage", async () => {
+    const inner = new MemoryPipelineStorage();
+    const key = await derivePipelineStorageKey("delivery-delegation-passphrase", {
+      salt: Uint8Array.from([16, 14, 12, 10, 8, 6, 4, 2, 15, 13, 11, 9, 7, 5, 3, 1])
+    });
+    const storage = new EncryptedPipelineStorage(inner, { key: key.key });
+    const sid = "S-encrypted-delivery-delegation";
+    const change = deliveryChange(0, { eventCount: 1 }) as PipelineDeliveryNoOutputChange;
+
+    await storage.putSession({ ...SESSION_A, sid });
+    await storage.commitDeliveryProgress?.(sid, [change]);
+
+    expect(
+      await storage.getDeliveryReceipt?.(sid, {
+        tabId: change.tabId,
+        frameId: change.frameId,
+        documentId: change.documentId,
+        batchId: change.batchId
+      })
+    ).toEqual(
+      expect.objectContaining({
+        batchId: change.batchId,
+        complete: true,
+        indexes: [{ eventIndex: 0, outcome: "no-output" }]
+      })
+    );
+  });
+
   it("removes sid-tracked blob refs on indexeddb deleteSession without explicit blobHashes", async () => {
     const storage = new IndexedDbPipelineStorage(createDbName());
     const sharedHash = "d".repeat(64);
@@ -277,6 +608,497 @@ describe("storage", () => {
     await expect(storage.listBlobs()).resolves.toEqual([]);
   });
 
+  it("serializes concurrent indexeddb blob refs exactly once across connections", async () => {
+    const databaseName = createDbName();
+    const first = new IndexedDbPipelineStorage(databaseName);
+    const second = new IndexedDbPipelineStorage(databaseName);
+    const sidA = "S-concurrent-blob-A";
+    const sidB = "S-concurrent-blob-B";
+    const hash = "7".repeat(64);
+    const blob = createBlob(hash, Uint8Array.from([7, 7, 7]));
+
+    await Promise.all([first.assertReady(), second.assertReady()]);
+    await Promise.all([
+      first.putSession({ ...SESSION_A, sid: sidA }),
+      second.putSession({ ...SESSION_B, sid: sidB })
+    ]);
+
+    await Promise.all(
+      Array.from({ length: 24 }, (_, index) =>
+        (index % 2 === 0 ? first : second).putBlob(blob, sidA)
+      )
+    );
+    expect((await first.getBlob(hash))?.refCount).toBe(1);
+
+    await Promise.all(
+      Array.from({ length: 24 }, (_, index) =>
+        (index % 2 === 0 ? second : first).putBlob(blob, sidB)
+      )
+    );
+    expect((await second.getBlob(hash))?.refCount).toBe(2);
+
+    await Promise.all([first.deleteSession(sidA), second.deleteSession(sidA)]);
+    expect((await first.getBlob(hash))?.refCount).toBe(1);
+
+    await second.deleteSession(sidB);
+    expect(await first.getBlob(hash)).toBeUndefined();
+  });
+
+  it("does not reattach blob refs while or after their indexeddb session is deleted", async () => {
+    const databaseName = createDbName();
+    const first = new IndexedDbPipelineStorage(databaseName);
+    const second = new IndexedDbPipelineStorage(databaseName);
+    const sid = "S-concurrent-delete";
+    const firstHash = "8".repeat(64);
+    const racingHash = "9".repeat(64);
+
+    await Promise.all([first.assertReady(), second.assertReady()]);
+    await first.putSession({ ...SESSION_A, sid });
+    await first.putBlob(createBlob(firstHash, Uint8Array.from([1])), sid);
+
+    await Promise.allSettled([
+      first.deleteSession(sid),
+      second.putBlob(createBlob(racingHash, Uint8Array.from([2])), sid)
+    ]);
+
+    expect(await first.getSession(sid)).toBeUndefined();
+    expect(await first.getBlob(firstHash)).toBeUndefined();
+    expect(await first.getBlob(racingHash)).toBeUndefined();
+    await expect(
+      second.putBlob(createBlob("a".repeat(64), Uint8Array.from([3])), sid)
+    ).rejects.toThrow(/missing session/i);
+    await expect(first.listBlobs()).resolves.toEqual([]);
+  });
+
+  it("rolls back the blob row when an indexeddb blob-ref write fails", async () => {
+    const storage = new IndexedDbPipelineStorage(createDbName());
+    const sid = "S-put-rollback";
+    const hash = "4".repeat(64);
+    const blob = createBlob(hash, Uint8Array.from([4, 4]));
+    const originalPut = IDBObjectStore.prototype.put;
+
+    await storage.putSession({ ...SESSION_A, sid });
+    const putSpy = vi.spyOn(IDBObjectStore.prototype, "put").mockImplementation(function (
+      this: IDBObjectStore,
+      value: unknown,
+      key?: IDBValidKey
+    ): IDBRequest<IDBValidKey> {
+      if (this.name === "blobRefs") {
+        throw new Error("simulated blobRefs write failure");
+      }
+
+      return key === undefined ? originalPut.call(this, value) : originalPut.call(this, value, key);
+    });
+
+    try {
+      await expect(storage.putBlob(blob, sid)).rejects.toThrow(/simulated blobRefs/i);
+    } finally {
+      putSpy.mockRestore();
+    }
+
+    expect(await storage.getBlob(hash)).toBeUndefined();
+    await storage.putBlob(blob, sid);
+    expect((await storage.getBlob(hash))?.refCount).toBe(1);
+    await storage.deleteSession(sid);
+    expect(await storage.getBlob(hash)).toBeUndefined();
+  });
+
+  it("stores indexeddb blob ownership as constant-size rows", async () => {
+    const databaseName = createDbName();
+    const storage = new IndexedDbPipelineStorage(databaseName);
+    const sid = "S-normalized-blob-refs";
+
+    await storage.putSession({ ...SESSION_A, sid });
+
+    for (let index = 0; index < 64; index += 1) {
+      const hash = index.toString(16).padStart(64, "0");
+      await storage.putBlob(createBlob(hash, Uint8Array.from([index])), sid);
+    }
+
+    const db = await openRawDb(databaseName, 5, () => undefined);
+    const refs = await readRawRows(db, "blobRefs");
+    db.close();
+
+    expect(refs).toHaveLength(64);
+    expect(refs.every((row) => row.sid === sid && typeof row.hash === "string")).toBe(true);
+    expect(refs.every((row) => row.value === undefined)).toBe(true);
+    expect(Math.max(...refs.map((row) => JSON.stringify(row).length))).toBeLessThan(220);
+
+    await storage.deleteSession(sid);
+    expect(await storage.listBlobs()).toEqual([]);
+  });
+
+  it("migrates a legacy cumulative blob-ref row once", async () => {
+    const databaseName = createDbName();
+    const sid = "S-legacy-blob-refs";
+    const oldHash = "1".repeat(64);
+    const newHash = "2".repeat(64);
+    const db = await openRawDb(databaseName, 3, (raw) => {
+      for (const storeName of ["sessions", "chunks", "blobs", "blobRefs", "indexes", "integrity"]) {
+        raw.createObjectStore(storeName, { keyPath: "key" });
+      }
+    });
+    await writeRawRows(db, "sessions", [{ key: sid, value: { ...SESSION_A, sid } }]);
+    await writeRawRows(db, "blobs", [
+      { key: oldHash, value: createBlob(oldHash, Uint8Array.from([1])) }
+    ]);
+    await writeRawRows(db, "blobRefs", [{ key: sid, value: [oldHash] }]);
+    db.close();
+
+    const storage = new IndexedDbPipelineStorage(databaseName);
+    await storage.putBlob(createBlob(oldHash, Uint8Array.from([1])), sid);
+    await storage.putBlob(createBlob(newHash, Uint8Array.from([2])), sid);
+
+    const upgraded = await openRawDb(databaseName, 5, () => undefined);
+    const refs = await readRawRows(upgraded, "blobRefs");
+    upgraded.close();
+
+    expect(refs).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ sid, hash: oldHash }),
+        expect.objectContaining({ sid, hash: newHash })
+      ])
+    );
+    expect(refs.some((row) => row.key === sid || Array.isArray(row.value))).toBe(false);
+    expect((await storage.getBlob(oldHash))?.refCount).toBe(1);
+
+    await storage.deleteSession(sid);
+    expect(await storage.listBlobs()).toEqual([]);
+  });
+
+  it("commits indexeddb chunks and normalized resume changes atomically", async () => {
+    const storage = new IndexedDbPipelineStorage(createDbName());
+    const sid = "S-resume-rollback";
+    const hash = "7".repeat(64);
+    const chunk: StoredChunk = {
+      ...createChunk(sid, "C-resume", 1, "resume-event"),
+      resumeDelta: {
+        version: 1,
+        sequenceWatermark: { event: 41, action: 5 },
+        screenRecordingChanges: [
+          {
+            operation: "put",
+            recordingId: "VR-atomic",
+            index: 0,
+            hash,
+            size: 12
+          }
+        ]
+      }
+    };
+    const originalPut = IDBObjectStore.prototype.put;
+
+    await storage.putSession({ ...SESSION_A, sid });
+    const putSpy = vi.spyOn(IDBObjectStore.prototype, "put").mockImplementation(function (
+      this: IDBObjectStore,
+      value: unknown,
+      key?: IDBValidKey
+    ): IDBRequest<IDBValidKey> {
+      if (this.name === "resumeRefs") {
+        throw new Error("simulated resumeRefs write failure");
+      }
+
+      return key === undefined ? originalPut.call(this, value) : originalPut.call(this, value, key);
+    });
+
+    try {
+      await expect(storage.putChunk(chunk)).rejects.toThrow(/simulated resumeRefs/i);
+    } finally {
+      putSpy.mockRestore();
+    }
+
+    expect(await storage.getChunk(sid, "C-resume")).toBeUndefined();
+    expect(await storage.getResumeState(sid)).toBeUndefined();
+
+    await storage.putChunk(chunk);
+    expect(await storage.getResumeState(sid)).toEqual({
+      sequenceWatermark: { event: 41, action: 5 },
+      screenRecordings: [
+        {
+          recordingId: "VR-atomic",
+          chunks: [{ index: 0, hash, size: 12 }]
+        }
+      ]
+    });
+    await storage.putChunk(chunk);
+    expect(await storage.listChunks(sid)).toHaveLength(1);
+    await expect(
+      storage.putChunk({
+        ...chunk,
+        meta: {
+          ...chunk.meta,
+          sha256: "9".repeat(64)
+        }
+      })
+    ).rejects.toThrow(/sequence.*conflict/i);
+
+    await storage.putChunk({
+      ...createChunk(sid, "C-resume-end", 2, "resume-end"),
+      resumeDelta: {
+        version: 1,
+        sequenceWatermark: { event: 42, action: 5 },
+        screenRecordingChanges: [{ operation: "delete", recordingId: "VR-atomic" }]
+      }
+    });
+    await expect(
+      storage.putChunk({
+        ...createChunk(sid, "C-resume-stale", 1, "resume-stale"),
+        resumeDelta: {
+          version: 1,
+          sequenceWatermark: { event: 1, action: 0 },
+          screenRecordingChanges: [
+            {
+              operation: "put",
+              recordingId: "VR-atomic",
+              index: 1,
+              hash: "8".repeat(64)
+            }
+          ]
+        }
+      })
+    ).rejects.toThrow(/sequence.*conflict/i);
+    expect(await storage.getResumeState(sid, 2)).toEqual({
+      sequenceWatermark: { event: 42, action: 5 },
+      screenRecordings: []
+    });
+    expect((await storage.listChunks(sid)).map((candidate) => candidate.meta.chunkId)).toEqual([
+      "C-resume",
+      "C-resume-end"
+    ]);
+    await expect(
+      storage.putChunk(createChunk(sid, "C-missing-resume-delta", 3, "missing-delta"))
+    ).rejects.toThrow(/missing a resume delta/i);
+  });
+
+  it("atomically commits an output event chunk with its delivery journal index", async () => {
+    const storage = new IndexedDbPipelineStorage(createDbName());
+    const sid = "S-delivery-atomic";
+    const change = deliveryChange(0, {
+      eventCount: 1,
+      eventId: "E-1"
+    });
+    const chunk: StoredChunk = {
+      ...createChunk(sid, "C-delivery", 1, "delivery-event"),
+      resumeDelta: {
+        version: 2,
+        sequenceWatermark: { event: 1, action: 0 },
+        screenRecordingChanges: [],
+        deliveryChanges: [change]
+      }
+    };
+    const originalPut = IDBObjectStore.prototype.put;
+
+    await storage.putSession({ ...SESSION_A, sid });
+    const putSpy = vi.spyOn(IDBObjectStore.prototype, "put").mockImplementation(function (
+      this: IDBObjectStore,
+      value: unknown,
+      key?: IDBValidKey
+    ): IDBRequest<IDBValidKey> {
+      if (this.name === "deliveryReceipts") {
+        throw new Error("simulated delivery receipt write failure");
+      }
+
+      return key === undefined ? originalPut.call(this, value) : originalPut.call(this, value, key);
+    });
+
+    try {
+      await expect(storage.putChunk(chunk)).rejects.toThrow(/delivery receipt write failure/i);
+    } finally {
+      putSpy.mockRestore();
+    }
+
+    const query = {
+      tabId: 1,
+      frameId: 0,
+      documentId: "document-1",
+      batchId: "batch-1"
+    };
+    expect(await storage.getChunk(sid, "C-delivery")).toBeUndefined();
+    expect(await storage.getResumeState(sid)).toBeUndefined();
+    expect(await storage.getDeliveryReceipt(sid, query)).toBeUndefined();
+
+    await storage.putChunk(chunk);
+    expect(await storage.getChunk(sid, "C-delivery")).toBeDefined();
+    expect(await storage.getDeliveryReceipt(sid, query)).toEqual(
+      expect.objectContaining({
+        complete: true,
+        indexes: [{ eventIndex: 0, outcome: "event", eventId: "E-1" }]
+      })
+    );
+  });
+
+  it("upgrades indexeddb v4 with v1 chunks and continues with v2 delivery receipts", async () => {
+    const databaseName = createDbName();
+    const sid = "S-delivery-v4-upgrade";
+    const legacyChunk: StoredChunk = {
+      ...createChunk(sid, "C-v1", 1, "legacy-v1-event"),
+      resumeDelta: {
+        version: 1,
+        sequenceWatermark: { event: 1, action: 0 },
+        screenRecordingChanges: []
+      }
+    };
+    const db = await openRawDb(databaseName, 4, (raw) => {
+      const sessions = raw.createObjectStore("sessions", { keyPath: "key" });
+      const chunks = raw.createObjectStore("chunks", { keyPath: "key" });
+      raw.createObjectStore("blobs", { keyPath: "key" });
+      const blobRefs = raw.createObjectStore("blobRefs", { keyPath: "key" });
+      raw.createObjectStore("indexes", { keyPath: "key" });
+      raw.createObjectStore("integrity", { keyPath: "key" });
+      raw.createObjectStore("resumeMeta", { keyPath: "key" });
+      const resumeRefs = raw.createObjectStore("resumeRefs", { keyPath: "key" });
+
+      void sessions;
+      chunks.createIndex("by-sid-seq", ["sid", "seq"], { unique: false });
+      blobRefs.createIndex("by-sid", "sid", { unique: false });
+      resumeRefs.createIndex("by-sid", "sid", { unique: false });
+      resumeRefs.createIndex("by-sid-recording", ["sid", "recordingId"], { unique: false });
+    });
+    await writeRawRows(db, "sessions", [{ key: sid, value: { ...SESSION_A, sid } }]);
+    await writeRawRows(db, "chunks", [
+      {
+        key: `${sid}:C-v1`,
+        sid,
+        seq: 1,
+        value: legacyChunk
+      }
+    ]);
+    await writeRawRows(db, "resumeMeta", [
+      {
+        key: sid,
+        chunkSequence: 1,
+        recordingIds: [],
+        screenRecordingChunkCount: 0,
+        value: { event: 1, action: 0 }
+      }
+    ]);
+    db.close();
+
+    const storage = new IndexedDbPipelineStorage(databaseName);
+    expect((await storage.getChunk(sid, "C-v1"))?.resumeDelta?.version).toBe(1);
+    expect(await storage.getResumeState(sid, 1)).toEqual({
+      sequenceWatermark: { event: 1, action: 0 },
+      screenRecordings: []
+    });
+
+    const change = deliveryChange(0, { eventCount: 1, eventId: "E-2" });
+    await storage.putChunk({
+      ...createChunk(sid, "C-v2", 2, "delivery-v2-event"),
+      resumeDelta: {
+        version: 2,
+        sequenceWatermark: { event: 2, action: 0 },
+        screenRecordingChanges: [],
+        deliveryChanges: [change]
+      }
+    });
+
+    expect((await storage.listChunks(sid)).map((chunk) => chunk.meta.chunkId)).toEqual([
+      "C-v1",
+      "C-v2"
+    ]);
+    expect(
+      await storage.getDeliveryReceipt(sid, {
+        tabId: change.tabId,
+        frameId: change.frameId,
+        documentId: change.documentId,
+        batchId: change.batchId
+      })
+    ).toEqual(
+      expect.objectContaining({
+        complete: true,
+        indexes: [{ eventIndex: 0, outcome: "event", eventId: "E-2" }]
+      })
+    );
+  });
+
+  it("initializes an indexeddb resume index from a legacy checkpoint once", async () => {
+    const storage = new IndexedDbPipelineStorage(createDbName());
+    const sid = "S-resume-initialize";
+    const state = {
+      sequenceWatermark: { event: 9, action: 2 },
+      screenRecordings: [{ recordingId: "VR-initialize", chunks: [] }]
+    };
+
+    await storage.putSession({ ...SESSION_A, sid });
+    await storage.putChunk(createChunk(sid, "C-initialize", 1, "legacy"));
+    await storage.initializeResumeState(sid, 1, state);
+    await storage.initializeResumeState(sid, 1, {
+      sequenceWatermark: { event: 99, action: 99 },
+      screenRecordings: []
+    });
+
+    expect(await storage.getResumeState(sid, 1)).toEqual(state);
+  });
+
+  it("rolls back every indexeddb session store when atomic deletion fails", async () => {
+    const storage = new IndexedDbPipelineStorage(createDbName());
+    const sid = "S-delete-rollback";
+    const hash = "5".repeat(64);
+    const chunk = createChunk(sid, "C-rollback", 1, "rollback-event");
+    const indexes = {
+      time: [chunkMeta("C-rollback", 1)],
+      request: [],
+      inverted: []
+    };
+    const integrity = {
+      manifestSha256: "6".repeat(64),
+      files: {}
+    };
+    const delivery = deliveryChange(0, {
+      documentId: "document-delete-rollback",
+      batchId: "batch-delete-rollback",
+      eventCount: 1
+    }) as PipelineDeliveryNoOutputChange;
+    const deliveryQuery = {
+      tabId: delivery.tabId,
+      frameId: delivery.frameId,
+      documentId: delivery.documentId,
+      batchId: delivery.batchId
+    };
+
+    await storage.putSession({ ...SESSION_A, sid });
+    await storage.putChunk(chunk);
+    await storage.putBlob(createBlob(hash, Uint8Array.from([5, 5])), sid);
+    await storage.putIndexes(sid, indexes);
+    await storage.putIntegrity(sid, integrity);
+    await storage.commitDeliveryProgress(sid, [delivery]);
+
+    const originalDelete = IDBObjectStore.prototype.delete;
+    const deleteSpy = vi.spyOn(IDBObjectStore.prototype, "delete").mockImplementation(function (
+      this: IDBObjectStore,
+      query: IDBValidKey | IDBKeyRange
+    ): IDBRequest<undefined> {
+      if (this.name === "integrity") {
+        throw new Error("simulated integrity delete failure");
+      }
+
+      return originalDelete.call(this, query);
+    });
+
+    try {
+      await expect(storage.deleteSession(sid)).rejects.toThrow(/simulated integrity/i);
+    } finally {
+      deleteSpy.mockRestore();
+    }
+
+    expect(await storage.getSession(sid)).toEqual(expect.objectContaining({ sid }));
+    expect(await storage.getChunk(sid, "C-rollback")).toEqual(chunk);
+    expect(await storage.getBlob(hash)).toEqual(expect.objectContaining({ refCount: 1 }));
+    expect(await storage.getIndexes(sid)).toEqual(indexes);
+    expect(await storage.getIntegrity(sid)).toEqual(integrity);
+    expect(await storage.getDeliveryReceipt(sid, deliveryQuery)).toEqual(
+      expect.objectContaining({ complete: true })
+    );
+
+    await storage.deleteSession(sid);
+    expect(await storage.getSession(sid)).toBeUndefined();
+    expect(await storage.getChunk(sid, "C-rollback")).toBeUndefined();
+    expect(await storage.getBlob(hash)).toBeUndefined();
+    expect((await storage.getIndexes(sid)).time).toEqual([]);
+    expect(await storage.getIntegrity(sid)).toBeUndefined();
+    expect(await storage.getDeliveryReceipt(sid, deliveryQuery)).toBeUndefined();
+  });
+
   it("supports legacy indexeddb layouts where chunks store has no sid/seq index", async () => {
     const sid = "S-legacy-layout";
     const dbName = createDbName();
@@ -330,6 +1152,17 @@ describe("storage", () => {
       }
     ).recoverQuotaPressure.bind(storage);
     const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => undefined);
+    const oldestDelivery = deliveryChange(0, {
+      documentId: "document-quota-oldest",
+      batchId: "batch-quota-oldest",
+      eventCount: 1
+    }) as PipelineDeliveryNoOutputChange;
+    const oldestDeliveryQuery = {
+      tabId: oldestDelivery.tabId,
+      frameId: oldestDelivery.frameId,
+      documentId: oldestDelivery.documentId,
+      batchId: oldestDelivery.batchId
+    };
 
     await expect(quotaRecovery("S-protected")).resolves.toBe(false);
 
@@ -343,9 +1176,11 @@ describe("storage", () => {
       sid: "S-newest",
       startedAt: 2
     });
+    await storage.commitDeliveryProgress("S-oldest", [oldestDelivery]);
 
     await expect(quotaRecovery("S-newest")).resolves.toBe(true);
     expect(await storage.getSession("S-oldest")).toBeUndefined();
+    expect(await storage.getDeliveryReceipt("S-oldest", oldestDeliveryQuery)).toBeUndefined();
     expect(await storage.getSession("S-newest")).toEqual(
       expect.objectContaining({ sid: "S-newest" })
     );
@@ -353,6 +1188,44 @@ describe("storage", () => {
     warnSpy.mockRestore();
   });
 
+  it("retains quota recovery for atomic indexeddb blob writes", async () => {
+    const storage = new IndexedDbPipelineStorage(createDbName());
+    const protectedSid = "S-quota-protected";
+    const hash = "3".repeat(64);
+    const originalPut = IDBObjectStore.prototype.put;
+    const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => undefined);
+    let injectQuotaFailure = true;
+
+    await storage.putSession({ ...SESSION_A, sid: "S-quota-oldest", startedAt: 1 });
+    await storage.putSession({ ...SESSION_B, sid: protectedSid, startedAt: 2 });
+
+    const putSpy = vi.spyOn(IDBObjectStore.prototype, "put").mockImplementation(function (
+      this: IDBObjectStore,
+      value: unknown,
+      key?: IDBValidKey
+    ): IDBRequest<IDBValidKey> {
+      if (this.name === "blobs" && injectQuotaFailure) {
+        injectQuotaFailure = false;
+        throw new DOMException("simulated quota pressure", "QuotaExceededError");
+      }
+
+      return key === undefined ? originalPut.call(this, value) : originalPut.call(this, value, key);
+    });
+
+    try {
+      await storage.putBlob(createBlob(hash, Uint8Array.from([3, 3])), protectedSid);
+    } finally {
+      putSpy.mockRestore();
+      warnSpy.mockRestore();
+    }
+
+    expect(await storage.getSession("S-quota-oldest")).toBeUndefined();
+    expect(await storage.getSession(protectedSid)).toEqual(
+      expect.objectContaining({ sid: protectedSid })
+    );
+    expect(await storage.getBlob(hash)).toEqual(expect.objectContaining({ refCount: 1 }));
+  });
+
   it("fails fast when indexeddb runtime is unavailable", async () => {
     const originalIndexedDb = (globalThis as unknown as { indexedDB?: IDBFactory }).indexedDB;
 
@@ -403,4 +1276,120 @@ describe("storage", () => {
     await storage.deleteSession(sid);
     expect(await innerStorage.getBlob(hash)).toBeUndefined();
   });
+
+  it("persists a non-extractable purpose key and recovers encrypted chunks and blobs", async () => {
+    const dataDatabaseName = createDbName();
+    const keyDatabaseName = `${dataDatabaseName}-keys`;
+    const purpose = "pipeline-test:payload:aes-gcm:v1";
+    const sid = "S-idb-key-recovery";
+    const hash = "f".repeat(64);
+    const eventSecret = "EVENT_SECRET_MUST_NOT_BE_PLAINTEXT";
+    const blobSecret = "BLOB_SECRET_MUST_NOT_BE_PLAINTEXT";
+    const firstManagedKey = await getOrCreateIndexedDbPipelineStorageKey({
+      databaseName: keyDatabaseName,
+      purpose
+    });
+    const rawStorage = new IndexedDbPipelineStorage(dataDatabaseName);
+    const firstStorage = new EncryptedPipelineStorage(rawStorage, {
+      key: firstManagedKey.key
+    });
+
+    expect(firstManagedKey.created).toBe(true);
+    expect(firstManagedKey.key.extractable).toBe(false);
+    await firstStorage.assertReady();
+    await firstStorage.putSession({ ...SESSION_A, sid });
+    await firstStorage.putChunk(createChunk(sid, "C-secret", 1, `${eventSecret}\n`));
+    await firstStorage.putBlob(createBlob(hash, new TextEncoder().encode(blobSecret)), sid);
+
+    const persistedChunk = await rawStorage.getChunk(sid, "C-secret");
+    const persistedBlob = await rawStorage.getBlob(hash);
+    expect(new TextDecoder().decode(persistedChunk?.bytes)).not.toContain(eventSecret);
+    expect(new TextDecoder().decode(persistedBlob?.bytes)).not.toContain(blobSecret);
+
+    const recoveredManagedKey = await getOrCreateIndexedDbPipelineStorageKey({
+      databaseName: keyDatabaseName,
+      purpose
+    });
+    const recoveredStorage = new EncryptedPipelineStorage(
+      new IndexedDbPipelineStorage(dataDatabaseName),
+      { key: recoveredManagedKey.key }
+    );
+
+    expect(recoveredManagedKey.created).toBe(false);
+    await recoveredStorage.assertReady();
+    expect(
+      new TextDecoder().decode((await recoveredStorage.getChunk(sid, "C-secret"))?.bytes)
+    ).toBe(`${eventSecret}\n`);
+    expect(new TextDecoder().decode((await recoveredStorage.getBlob(hash))?.bytes)).toBe(
+      blobSecret
+    );
+  });
+
+  it("fails closed when an encrypted persistent storage key is missing", async () => {
+    const storage = new EncryptedPipelineStorage(new IndexedDbPipelineStorage(createDbName()), {
+      key: Promise.reject(new Error("simulated missing key"))
+    });
+
+    await expect(storage.assertReady()).rejects.toThrow(/key is unavailable/i);
+  });
+
+  it("rejects extractable keys for persistent payload encryption", async () => {
+    const extractableKey = await crypto.subtle.generateKey(
+      {
+        name: "AES-GCM",
+        length: 256
+      },
+      true,
+      ["encrypt", "decrypt"]
+    );
+    const storage = new EncryptedPipelineStorage(new IndexedDbPipelineStorage(createDbName()), {
+      key: extractableKey
+    });
+
+    await expect(storage.assertReady()).rejects.toThrow(/non-extractable 256-bit AES-GCM/i);
+  });
+
+  it("purges a legacy IndexedDB database before encrypted storage initialization", async () => {
+    const databaseName = createDbName();
+    const legacy = await openRawDb(databaseName, 1, (db) => {
+      db.createObjectStore("legacy", { keyPath: "id" });
+    });
+    await writeRawRows(legacy, "legacy", [{ id: "secret", value: "PLAINTEXT_LEGACY_DATA" }]);
+    legacy.close();
+
+    await deleteIndexedDbDatabase(databaseName);
+
+    const reopened = await openRawDb(databaseName, 1, () => undefined);
+    expect(reopened.objectStoreNames.contains("legacy")).toBe(false);
+    reopened.close();
+  });
+
+  it("purges durable delivery receipts with the indexeddb database", async () => {
+    const databaseName = createDbName();
+    const sid = "S-delivery-database-purge";
+    const storage = new IndexedDbPipelineStorage(databaseName);
+    const change = deliveryChange(0, {
+      documentId: "document-database-purge",
+      batchId: "batch-database-purge",
+      eventCount: 1
+    }) as PipelineDeliveryNoOutputChange;
+    const query = {
+      tabId: change.tabId,
+      frameId: change.frameId,
+      documentId: change.documentId,
+      batchId: change.batchId
+    };
+
+    await storage.putSession({ ...SESSION_A, sid });
+    await storage.commitDeliveryProgress(sid, [change]);
+    expect(await storage.getDeliveryReceipt(sid, query)).toEqual(
+      expect.objectContaining({ complete: true })
+    );
+
+    await deleteIndexedDbDatabase(databaseName);
+
+    const reopened = new IndexedDbPipelineStorage(databaseName);
+    expect(await reopened.getDeliveryReceipt(sid, query)).toBeUndefined();
+    expect(await reopened.getSession(sid)).toBeUndefined();
+  });
 });
diff --git a/packages/pipeline/src/storage.ts b/packages/pipeline/src/storage.ts
index 5e751a4..f2f7810 100644
--- a/packages/pipeline/src/storage.ts
+++ b/packages/pipeline/src/storage.ts
@@ -12,8 +12,121 @@ export type StoredChunk = {
   sid: string;
   meta: ChunkTimeIndexEntry;
   bytes: Uint8Array;
+  /** Legacy cumulative checkpoint retained for backwards-compatible reads. */
+  resumeState?: PipelineResumeState;
+  /** Constant-size changes committed atomically with this chunk. */
+  resumeDelta?: PipelineResumeDelta;
 };
 
+export type RecorderSequenceWatermark = {
+  event: number;
+  action: number;
+};
+
+export type ScreenRecordingChunkReference = {
+  index: number;
+  hash: string;
+  size?: number;
+};
+
+type ScreenRecordingChunkCheckpoint = {
+  hash: string;
+  size?: number;
+};
+
+export type ScreenRecordingResumeState = {
+  recordingId: string;
+  chunks: ScreenRecordingChunkReference[];
+};
+
+export type PipelineResumeState = {
+  sequenceWatermark: RecorderSequenceWatermark;
+  screenRecordings: ScreenRecordingResumeState[];
+};
+
+export type ScreenRecordingResumeChange =
+  | {
+      operation: "put";
+      recordingId: string;
+      index: number;
+      hash: string;
+      size?: number;
+    }
+  | {
+      operation: "reset";
+      recordingId: string;
+    }
+  | {
+      operation: "delete";
+      recordingId: string;
+    };
+
+export const PIPELINE_DELIVERY_MAX_STREAMS = 4_096;
+export const PIPELINE_DELIVERY_MAX_INDEXES = 1_024;
+export const PIPELINE_DELIVERY_MAX_CHANGES_PER_COMMIT = 4_096;
+
+export type PipelineDeliveryStream = {
+  tabId: number;
+  frameId: number;
+  documentId: string;
+};
+
+export type PipelineDeliveryBatch = PipelineDeliveryStream & {
+  batchId: string;
+  fingerprint: string;
+  eventCount: number;
+};
+
+export type PipelineDeliveryEventProvenance = PipelineDeliveryBatch & {
+  eventIndex: number;
+};
+
+export type PipelineDeliveryEventChange = PipelineDeliveryEventProvenance & {
+  outcome: "event";
+  eventId: string;
+};
+
+export type PipelineDeliveryNoOutputChange = PipelineDeliveryEventProvenance & {
+  outcome: "no-output";
+};
+
+export type PipelineDeliveryChange = PipelineDeliveryEventChange | PipelineDeliveryNoOutputChange;
+
+export type PipelineDeliveryReceiptIndex =
+  | {
+      eventIndex: number;
+      outcome: "event";
+      eventId: string;
+    }
+  | {
+      eventIndex: number;
+      outcome: "no-output";
+    };
+
+export type PipelineDeliveryReceipt = PipelineDeliveryBatch & {
+  indexes: PipelineDeliveryReceiptIndex[];
+  complete: boolean;
+};
+
+export type PipelineDeliveryReceiptQuery = PipelineDeliveryStream & {
+  batchId: string;
+};
+
+export type PipelineResumeDeltaV1 = {
+  version: 1;
+  sequenceWatermark: RecorderSequenceWatermark;
+  screenRecordingChanges: ScreenRecordingResumeChange[];
+};
+
+export type PipelineResumeDeltaV2 = {
+  version: 2;
+  sequenceWatermark: RecorderSequenceWatermark;
+  screenRecordingChanges: ScreenRecordingResumeChange[];
+  deliveryChanges: PipelineDeliveryChange[];
+};
+
+export type PipelineResumeDelta = PipelineResumeDeltaV1 | PipelineResumeDeltaV2;
+
 export type StoredBlob = {
   hash: string;
   mime: string;
@@ -29,13 +142,37 @@ export type StoredIndexes = {
   inverted: InvertedIndexEntry[];
 };
 
+export type PipelineStorageSecurityCapability = Readonly<{
+  persistence: "volatile" | "persistent";
+  payloadProtection: "plaintext" | "authenticated-encryption";
+  algorithm?: "AES-GCM";
+}>;
+
+export const PIPELINE_STORAGE_SECURITY = Symbol.for("@webblackbox/pipeline/storage-security");
+
 export type PipelineStorage = {
+  readonly [PIPELINE_STORAGE_SECURITY]: PipelineStorageSecurityCapability;
+  assertReady?(): Promise<void>;
   putSession(metadata: SessionMetadata): Promise<void>;
   getSession(sid: string): Promise<SessionMetadata | undefined>;
   putChunk(chunk: StoredChunk): Promise<void>;
   listChunks(sid: string): Promise<StoredChunk[]>;
   getLatestChunkMeta(sid: string): Promise<ChunkTimeIndexEntry | undefined>;
   getChunk(sid: string, chunkId: string): Promise<StoredChunk | undefined>;
+  getResumeState?(sid: string, chunkSequence?: number): Promise<PipelineResumeState | undefined>;
+  initializeResumeState?(
+    sid: string,
+    chunkSequence: number,
+    state: PipelineResumeState
+  ): Promise<void>;
+  getDeliveryReceipt?(
+    sid: string,
+    query: PipelineDeliveryReceiptQuery
+  ): Promise<PipelineDeliveryReceipt | undefined>;
+  commitDeliveryProgress?(
+    sid: string,
+    changes: readonly PipelineDeliveryNoOutputChange[]
+  ): Promise<void>;
   putBlob(blob: StoredBlob, sidHint?: string): Promise<void>;
   getBlob(hash: string): Promise<StoredBlob | undefined>;
   listBlobs(): Promise<StoredBlob[]>;
@@ -56,6 +193,10 @@ const MAX_QUOTA_RECOVERY_ATTEMPTS = 2;
 const STORAGE_ENCRYPTION_MAGIC = new Uint8Array([0x57, 0x42, 0x45, 0x31]); // WBE1
 const STORAGE_ENCRYPTION_IV_BYTES = 12;
 const STORAGE_ENCRYPTION_KDF_ITERATIONS = 120_000;
+const STORAGE_KEYRING_VERSION = 1;
+const STORAGE_KEYRING_STORE = "keys";
+const PIPELINE_RESUME_MAX_RECORDINGS = 32;
+const PIPELINE_RESUME_MAX_SCREEN_CHUNKS = 500_000;
 
 export type PipelineStorageKeyOptions = {
   salt?: Uint8Array;
@@ -72,7 +213,29 @@ export type EncryptedPipelineStorageOptions = {
   key: CryptoKey | Promise<CryptoKey>;
 };
 
+export type IndexedDbPipelineStorageKeyOptions = {
+  databaseName: string;
+  purpose: string;
+};
+
+export type IndexedDbPipelineStorageKey = {
+  key: CryptoKey;
+  created: boolean;
+};
+
+type IndexedDbPipelineStorageKeyRecord = {
+  purpose: string;
+  algorithm: "AES-GCM";
+  createdAt: number;
+  key: CryptoKey;
+};
+
 export class MemoryPipelineStorage implements PipelineStorage {
+  public readonly [PIPELINE_STORAGE_SECURITY] = Object.freeze({
+    persistence: "volatile",
+    payloadProtection: "plaintext"
+  } as const);
+
   private readonly sessions = new Map<string, SessionMetadata>();
 
   private readonly chunks = new Map<string, StoredChunk[]>();
@@ -81,6 +244,17 @@ export class MemoryPipelineStorage implements PipelineStorage {
 
   private readonly blobRefs = new Map<string, Set<string>>();
 
+  private readonly resumeSequences = new Map<string, RecorderSequenceWatermark>();
+
+  private readonly resumeChunkSequences = new Map<string, number>();
+
+  private readonly resumeScreenRecordings = new Map<
+    string,
+    Map<string, Map<number, ScreenRecordingChunkCheckpoint>>
+  >();
+
+  private readonly deliveryReceipts = new Map<string, Map<string, PipelineDeliveryReceipt>>();
+
   private readonly indexes = new Map<string, StoredIndexes>();
 
   private readonly integrity = new Map<string, HashesManifest>();
@@ -95,6 +269,42 @@ export class MemoryPipelineStorage implements PipelineStorage {
 
   public async putChunk(chunk: StoredChunk): Promise<void> {
     const existing = this.chunks.get(chunk.sid) ?? [];
+
+    if (isPipelineResumeDelta(chunk.resumeDelta)) {
+      const checkpointSequence = this.resumeChunkSequences.get(chunk.sid) ?? 0;
+
+      if (checkpointSequence >= chunk.meta.seq) {
+        const previous = existing.find((candidate) => candidate.meta.seq === chunk.meta.seq);
+
+        if (
+          checkpointSequence === chunk.meta.seq &&
+          previous &&
+          isSameChunkCommit(previous, chunk)
+        ) {
+          return;
+        }
+
+        throw new Error("Pipeline chunk sequence would conflict with durable resume state.");
+      }
+
+      const recordings = this.resumeScreenRecordings.get(chunk.sid) ?? new Map();
+      assertPipelineResumeChangesWithinLimits(recordings, chunk.resumeDelta.screenRecordingChanges);
+      const deliveryReceipts = projectPipelineDeliveryReceipts(
+        this.deliveryReceipts.get(chunk.sid) ?? new Map(),
+        readPipelineDeliveryChanges(chunk.resumeDelta)
+      );
+      existing.push(chunk);
+      this.chunks.set(chunk.sid, existing);
+      this.applyResumeDelta(chunk.sid, chunk.resumeDelta);
+      this.deliveryReceipts.set(chunk.sid, deliveryReceipts);
+      this.resumeChunkSequences.set(chunk.sid, chunk.meta.seq);
+      return;
+    }
+
+    if (this.resumeChunkSequences.has(chunk.sid)) {
+      throw new Error("Pipeline chunk is missing a resume delta after checkpoint initialization.");
+    }
+
     existing.push(chunk);
     this.chunks.set(chunk.sid, existing);
   }
@@ -122,6 +332,70 @@ export class MemoryPipelineStorage implements PipelineStorage {
     return chunks.find((chunk) => chunk.meta.chunkId === chunkId);
   }
 
+  public async getResumeState(
+    sid: string,
+    chunkSequence?: number
+  ): Promise<PipelineResumeState | undefined> {
+    const sequenceWatermark = this.resumeSequences.get(sid);
+
+    if (
+      !sequenceWatermark ||
+      (chunkSequence !== undefined && this.resumeChunkSequences.get(sid) !== chunkSequence)
+    ) {
+      return undefined;
+    }
+
+    return createPipelineResumeState(
+      sequenceWatermark,
+      this.resumeScreenRecordings.get(sid) ?? new Map()
+    );
+  }
+
+  public async initializeResumeState(
+    sid: string,
+    chunkSequence: number,
+    state: PipelineResumeState
+  ): Promise<void> {
+    if (this.resumeSequences.has(sid)) {
+      return;
+    }
+
+    if (!Number.isSafeInteger(chunkSequence) || chunkSequence < 1) {
+      throw new Error("Pipeline resume chunk sequence must be a positive safe integer.");
+    }
+
+    const normalized = requirePipelineResumeState(state);
+    this.resumeSequences.set(sid, { ...normalized.sequenceWatermark });
+    this.resumeChunkSequences.set(sid, chunkSequence);
+    this.resumeScreenRecordings.set(sid, screenRecordingMapFromState(normalized));
+  }
+
+  public async getDeliveryReceipt(
+    sid: string,
+    query: PipelineDeliveryReceiptQuery
+  ): Promise<PipelineDeliveryReceipt | undefined> {
+    requirePipelineDeliveryReceiptQuery(query);
+    const receipt = this.deliveryReceipts.get(sid)?.get(createPipelineDeliveryStreamKey(query));
+
+    return receipt?.batchId === query.batchId ? clonePipelineDeliveryReceipt(receipt) : undefined;
+  }
+
+  public async commitDeliveryProgress(
+    sid: string,
+    changes: readonly PipelineDeliveryNoOutputChange[]
+  ): Promise<void> {
+    if (!this.sessions.has(sid)) {
+      throw new Error("Cannot commit delivery progress for a missing pipeline session.");
+    }
+
+    requirePipelineDeliveryNoOutputChanges(changes);
+    const projected = projectPipelineDeliveryReceipts(
+      this.deliveryReceipts.get(sid) ?? new Map(),
+      changes
+    );
+    this.deliveryReceipts.set(sid, projected);
+  }
+
   public async putBlob(blob: StoredBlob, sidHint?: string): Promise<void> {
     const trackingSid = normalizeTrackingSid(sidHint);
 
@@ -173,6 +447,10 @@ export class MemoryPipelineStorage implements PipelineStorage {
     this.sessions.delete(sid);
     this.chunks.delete(sid);
     this.blobRefs.delete(sid);
+    this.resumeSequences.delete(sid);
+    this.resumeChunkSequences.delete(sid);
+    this.resumeScreenRecordings.delete(sid);
+    this.deliveryReceipts.delete(sid);
     this.indexes.delete(sid);
     this.integrity.delete(sid);
 
@@ -214,6 +492,14 @@ export class MemoryPipelineStorage implements PipelineStorage {
   private getTrackedBlobHashes(sid: string): string[] {
     return [...(this.blobRefs.get(sid) ?? new Set<string>())];
   }
+
+  private applyResumeDelta(sid: string, delta: PipelineResumeDelta): void {
+    this.resumeSequences.set(sid, { ...delta.sequenceWatermark });
+    const recordings = this.resumeScreenRecordings.get(sid) ?? new Map();
+
+    applyScreenRecordingChanges(recordings, delta.screenRecordingChanges);
+    this.resumeScreenRecordings.set(sid, recordings);
+  }
 }
 
 /**
@@ -257,11 +543,108 @@ export async function derivePipelineStorageKey(
   };
 }
 
+/**
+ * Loads or creates a non-extractable AES-GCM key in a dedicated IndexedDB keyring.
+ * The caller must use a purpose reserved for pipeline payload encryption.
+ */
+export async function getOrCreateIndexedDbPipelineStorageKey(
+  options: IndexedDbPipelineStorageKeyOptions
+): Promise<IndexedDbPipelineStorageKey> {
+  const databaseName = requireNonEmptyStorageIdentifier(options.databaseName, "databaseName");
+  const purpose = requireNonEmptyStorageIdentifier(options.purpose, "purpose");
+  const db = await openPipelineStorageKeyring(databaseName);
+
+  try {
+    const existing = await readPipelineStorageKeyRecord(db, purpose);
+
+    if (existing) {
+      assertValidPipelineStorageKeyRecord(existing, purpose);
+      return {
+        key: existing.key,
+        created: false
+      };
+    }
+
+    const cryptoApi = requireCryptoApi();
+    const generated = await cryptoApi.subtle.generateKey(
+      {
+        name: "AES-GCM",
+        length: 256
+      },
+      false,
+      ["encrypt", "decrypt"]
+    );
+    assertValidPipelineStorageKey(generated);
+
+    const record: IndexedDbPipelineStorageKeyRecord = {
+      purpose,
+      algorithm: "AES-GCM",
+      createdAt: Date.now(),
+      key: generated
+    };
+
+    try {
+      await runTransaction(db, STORAGE_KEYRING_STORE, "readwrite", (store) => {
+        return requestToPromise(store.add(record));
+      });
+      return {
+        key: generated,
+        created: true
+      };
+    } catch (error) {
+      if (!isIndexedDbConstraintError(error)) {
+        throw error;
+      }
+
+      const concurrent = await readPipelineStorageKeyRecord(db, purpose);
+
+      if (!concurrent) {
+        throw new Error("Pipeline storage key creation raced but no persisted key was found.");
+      }
+
+      assertValidPipelineStorageKeyRecord(concurrent, purpose);
+      return {
+        key: concurrent.key,
+        created: false
+      };
+    }
+  } finally {
+    db.close();
+  }
+}
+
+/** Deletes an IndexedDB database, failing when another context blocks the purge. */
+export async function deleteIndexedDbDatabase(databaseName: string): Promise<void> {
+  const normalized = requireNonEmptyStorageIdentifier(databaseName, "databaseName");
+
+  if (!globalThis.indexedDB) {
+    throw new Error("indexedDB is unavailable in this runtime");
+  }
+
+  await new Promise<void>((resolve, reject) => {
+    const request = globalThis.indexedDB.deleteDatabase(normalized);
+
+    request.onsuccess = () => resolve();
+    request.onerror = () => {
+      reject(request.error ?? new Error(`Failed to delete IndexedDB database: ${normalized}`));
+    };
+    request.onblocked = () => {
+      reject(new Error(`IndexedDB database purge was blocked: ${normalized}`));
+    };
+  });
+}
+
 /**
  * PipelineStorage wrapper that encrypts chunk/blob payload bytes before writing
  * and decrypts on read. Metadata/indexes remain plaintext for queryability.
  */
 export class EncryptedPipelineStorage implements PipelineStorage {
+  public readonly [PIPELINE_STORAGE_SECURITY]: PipelineStorageSecurityCapability;
+
+  public readonly getDeliveryReceipt?: NonNullable<PipelineStorage["getDeliveryReceipt"]>;
+
+  public readonly commitDeliveryProgress?: NonNullable<PipelineStorage["commitDeliveryProgress"]>;
+
   private readonly keyPromise: Promise<CryptoKey>;
 
   public constructor(
@@ -269,6 +652,21 @@ export class EncryptedPipelineStorage implements PipelineStorage {
     options: EncryptedPipelineStorageOptions
   ) {
     this.keyPromise = Promise.resolve(options.key);
+    this[PIPELINE_STORAGE_SECURITY] = Object.freeze({
+      persistence: storage[PIPELINE_STORAGE_SECURITY]?.persistence ?? "persistent",
+      payloadProtection: "authenticated-encryption",
+      algorithm: "AES-GCM"
+    });
+
+    if (storage.getDeliveryReceipt && storage.commitDeliveryProgress) {
+      this.getDeliveryReceipt = (sid, query) => storage.getDeliveryReceipt!(sid, query);
+      this.commitDeliveryProgress = (sid, changes) => storage.commitDeliveryProgress!(sid, changes);
+    }
+  }
+
+  public async assertReady(): Promise<void> {
+    await this.resolveKey();
+    await this.storage.assertReady?.();
   }
 
   public async putSession(metadata: SessionMetadata): Promise<void> {
@@ -315,6 +713,21 @@ export class EncryptedPipelineStorage implements PipelineStorage {
     };
   }
 
+  public async getResumeState(
+    sid: string,
+    chunkSequence?: number
+  ): Promise<PipelineResumeState | undefined> {
+    return this.storage.getResumeState?.(sid, chunkSequence);
+  }
+
+  public async initializeResumeState(
+    sid: string,
+    chunkSequence: number,
+    state: PipelineResumeState
+  ): Promise<void> {
+    await this.storage.initializeResumeState?.(sid, chunkSequence, state);
+  }
+
   public async putBlob(blob: StoredBlob, sidHint?: string): Promise<void> {
     await this.storage.putBlob(
       {
@@ -371,7 +784,7 @@ export class EncryptedPipelineStorage implements PipelineStorage {
   }
 
   private async encryptStoredBytes(bytes: Uint8Array): Promise<Uint8Array> {
-    const key = await this.keyPromise;
+    const key = await this.resolveKey();
     const iv = randomBytes(STORAGE_ENCRYPTION_IV_BYTES);
     const cryptoApi = requireCryptoApi();
     const encrypted = await cryptoApi.subtle.encrypt(
@@ -388,10 +801,12 @@ export class EncryptedPipelineStorage implements PipelineStorage {
 
   private async decryptStoredBytes(bytes: Uint8Array): Promise<Uint8Array> {
     if (!looksEncryptedStorageBytes(bytes)) {
-      return bytes;
+      throw new Error(
+        "Refusing to read plaintext payload from encrypted pipeline storage. Purge or explicitly migrate legacy storage before use."
+      );
     }
 
-    const key = await this.keyPromise;
+    const key = await this.resolveKey();
     const ivStart = STORAGE_ENCRYPTION_MAGIC.byteLength;
     const ivEnd = ivStart + STORAGE_ENCRYPTION_IV_BYTES;
     const iv = bytes.slice(ivStart, ivEnd);
@@ -413,6 +828,19 @@ export class EncryptedPipelineStorage implements PipelineStorage {
       throw new Error("Unable to decrypt pipeline storage payload.");
     }
   }
+
+  private async resolveKey(): Promise<CryptoKey> {
+    let key: CryptoKey;
+
+    try {
+      key = await this.keyPromise;
+    } catch {
+      throw new Error("Encrypted pipeline storage key is unavailable.");
+    }
+
+    assertValidPipelineStorageKey(key);
+    return key;
+  }
 }
 
 type DbRow<TData> = {
@@ -427,19 +855,59 @@ type ChunkRow = {
   value: StoredChunk;
 };
 type BlobRow = DbRow<StoredBlob>;
-type BlobRefsRow = DbRow<string[]>;
+type LegacyBlobRefsRow = DbRow<string[]>;
+type BlobRefRow = {
+  key: string;
+  sid: string;
+  hash: string;
+};
 type SessionRow = DbRow<SessionMetadata>;
 type IndexRow = DbRow<StoredIndexes>;
 type IntegrityRow = DbRow<HashesManifest>;
+type ResumeMetaRow = {
+  key: string;
+  chunkSequence: number;
+  recordingIds: string[];
+  screenRecordingChunkCount: number;
+  value: RecorderSequenceWatermark;
+};
+type ResumeRefRow = {
+  key: string;
+  sid: string;
+  recordingId: string;
+  index: number;
+  hash: string;
+  size?: number;
+};
 
-const DB_VERSION = 3;
+type DeliveryReceiptRow = {
+  key: string;
+  sid: string;
+  streamKey: string;
+  value: PipelineDeliveryReceipt;
+};
+
+const DB_VERSION = 5;
 const CHUNKS_BY_SID_SEQ_INDEX = "by-sid-seq";
+const BLOB_REFS_BY_SID_INDEX = "by-sid";
+const RESUME_REFS_BY_SID_INDEX = "by-sid";
+const RESUME_REFS_BY_SID_RECORDING_INDEX = "by-sid-recording";
+const DELIVERY_RECEIPTS_BY_SID_INDEX = "by-sid";
 
 export class IndexedDbPipelineStorage implements PipelineStorage {
+  public readonly [PIPELINE_STORAGE_SECURITY] = Object.freeze({
+    persistence: "persistent",
+    payloadProtection: "plaintext"
+  } as const);
+
   private dbPromise: Promise<IDBDatabase> | null = null;
 
   public constructor(private readonly dbName = "webblackbox-pipeline") {}
 
+  public async assertReady(): Promise<void> {
+    await this.db();
+  }
+
   public async putSession(metadata: SessionMetadata): Promise<void> {
     await this.put<SessionRow>(
       "sessions",
@@ -460,19 +928,12 @@ export class IndexedDbPipelineStorage implements PipelineStorage {
   }
 
   public async putChunk(chunk: StoredChunk): Promise<void> {
-    await this.put<ChunkRow>(
-      "chunks",
-      {
-        key: this.chunkKey(chunk.sid, chunk.meta.chunkId),
-        sid: chunk.sid,
-        seq: chunk.meta.seq,
-        value: chunk
-      },
-      {
-        allowQuotaRecovery: true,
-        protectedSid: chunk.sid
-      }
-    );
+    if (isPipelineResumeDelta(chunk.resumeDelta)) {
+      await this.putChunkWithResumeDelta(chunk, chunk.resumeDelta);
+      return;
+    }
+
+    await this.putLegacyChunk(chunk);
   }
 
   public async listChunks(sid: string): Promise<StoredChunk[]> {
@@ -525,82 +986,305 @@ export class IndexedDbPipelineStorage implements PipelineStorage {
     return row?.value;
   }
 
-  public async putBlob(blob: StoredBlob, sidHint?: string): Promise<void> {
-    const trackingSid = normalizeTrackingSid(sidHint);
+  public async getResumeState(
+    sid: string,
+    chunkSequence?: number
+  ): Promise<PipelineResumeState | undefined> {
+    const db = await this.db();
 
-    if (trackingSid && (await this.hasTrackedBlobHashForSession(trackingSid, blob.hash))) {
-      return;
-    }
+    return runMultiStoreTransaction(
+      db,
+      ["resumeMeta", "resumeRefs"],
+      "readonly",
+      async (transaction) => {
+        const [meta, refs] = await Promise.all([
+          requestToPromise<ResumeMetaRow | undefined>(
+            transaction.objectStore("resumeMeta").get(sid)
+          ),
+          listResumeRefsBySid(transaction.objectStore("resumeRefs"), sid)
+        ]);
+
+        if (!meta || (chunkSequence !== undefined && meta.chunkSequence !== chunkSequence)) {
+          return undefined;
+        }
 
-    const existing = await this.getBlob(blob.hash);
+        if (
+          !Number.isSafeInteger(meta.screenRecordingChunkCount) ||
+          meta.screenRecordingChunkCount < 0 ||
+          meta.screenRecordingChunkCount > PIPELINE_RESUME_MAX_SCREEN_CHUNKS ||
+          meta.screenRecordingChunkCount !== refs.length
+        ) {
+          throw new Error("IndexedDB pipeline resume reference count is inconsistent.");
+        }
 
-    if (existing) {
-      await this.put<BlobRow>(
-        "blobs",
-        {
-          key: blob.hash,
-          value: {
-            ...existing,
-            refCount: existing.refCount + 1
+        const recordings = new Map<string, Map<number, ScreenRecordingChunkCheckpoint>>(
+          requireResumeRecordingIds(meta.recordingIds).map((recordingId) => [
+            recordingId,
+            new Map<number, ScreenRecordingChunkCheckpoint>()
+          ])
+        );
+
+        for (const ref of refs) {
+          if (!recordings.has(ref.recordingId)) {
+            throw new Error("Pipeline resume reference is missing its recording marker.");
           }
-        },
-        {
-          allowQuotaRecovery: false
+
+          const chunks =
+            recordings.get(ref.recordingId) ?? new Map<number, ScreenRecordingChunkCheckpoint>();
+          chunks.set(ref.index, {
+            hash: ref.hash,
+            ...(ref.size === undefined ? {} : { size: ref.size })
+          });
+          recordings.set(ref.recordingId, chunks);
         }
-      );
-      if (trackingSid) {
-        await this.trackBlobHashForSession(trackingSid, blob.hash);
+
+        return requirePipelineResumeState(createPipelineResumeState(meta.value, recordings));
       }
-      return;
+    );
+  }
+
+  public async initializeResumeState(
+    sid: string,
+    chunkSequence: number,
+    state: PipelineResumeState
+  ): Promise<void> {
+    const normalized = requirePipelineResumeState(state);
+
+    if (!Number.isSafeInteger(chunkSequence) || chunkSequence < 1) {
+      throw new Error("Pipeline resume chunk sequence must be a positive safe integer.");
     }
 
-    await this.put<BlobRow>(
-      "blobs",
-      {
-        key: blob.hash,
-        value: blob
-      },
-      {
-        allowQuotaRecovery: true,
-        protectedSid: sidHint
+    const db = await this.db();
+
+    await runMultiStoreTransaction(
+      db,
+      ["resumeMeta", "resumeRefs"],
+      "readwrite",
+      async (transaction) => {
+        const metaStore = transaction.objectStore("resumeMeta");
+        const existing = await requestToPromise<ResumeMetaRow | undefined>(metaStore.get(sid));
+
+        if (existing) {
+          return;
+        }
+
+        metaStore.put({
+          key: sid,
+          chunkSequence,
+          recordingIds: normalized.screenRecordings.map((recording) => recording.recordingId),
+          screenRecordingChunkCount: normalized.screenRecordings.reduce(
+            (count, recording) => count + recording.chunks.length,
+            0
+          ),
+          value: { ...normalized.sequenceWatermark }
+        } satisfies ResumeMetaRow);
+        const refsStore = transaction.objectStore("resumeRefs");
+
+        for (const recording of normalized.screenRecordings) {
+          for (const chunk of recording.chunks) {
+            refsStore.put(
+              createResumeRefRow(sid, recording.recordingId, chunk.index, chunk.hash, chunk.size)
+            );
+          }
+        }
       }
     );
-    if (trackingSid) {
-      await this.trackBlobHashForSession(trackingSid, blob.hash);
-    }
   }
 
-  public async getBlob(hash: string): Promise<StoredBlob | undefined> {
-    const row = await this.get<BlobRow>("blobs", hash);
-    return row?.value;
-  }
+  public async getDeliveryReceipt(
+    sid: string,
+    query: PipelineDeliveryReceiptQuery
+  ): Promise<PipelineDeliveryReceipt | undefined> {
+    requirePipelineDeliveryReceiptQuery(query);
+    const row = await this.get<DeliveryReceiptRow>(
+      "deliveryReceipts",
+      createPipelineDeliveryReceiptKey(sid, query)
+    );
 
-  public async listBlobs(): Promise<StoredBlob[]> {
-    const rows = await this.getAll<BlobRow>("blobs");
-    return rows.map((row) => row.value);
+    if (!row || row.value.batchId !== query.batchId) {
+      return undefined;
+    }
+
+    return requirePipelineDeliveryReceipt(row.value);
   }
 
-  public async putIndexes(sid: string, indexes: StoredIndexes): Promise<void> {
-    await this.put<IndexRow>(
-      "indexes",
-      {
-        key: sid,
-        value: indexes
-      },
-      {
-        allowQuotaRecovery: true,
-        protectedSid: sid
+  public async commitDeliveryProgress(
+    sid: string,
+    changes: readonly PipelineDeliveryNoOutputChange[]
+  ): Promise<void> {
+    requirePipelineDeliveryNoOutputChanges(changes);
+    const db = await this.db();
+
+    await runMultiStoreTransaction(
+      db,
+      ["sessions", "deliveryReceipts"],
+      "readwrite",
+      async (transaction) => {
+        const session = await requestToPromise<SessionRow | undefined>(
+          transaction.objectStore("sessions").get(sid)
+        );
+
+        if (!session) {
+          throw new Error("Cannot commit delivery progress for a missing pipeline session.");
+        }
+
+        await applyIndexedDbPipelineDeliveryChanges(
+          transaction.objectStore("deliveryReceipts"),
+          sid,
+          changes
+        );
       }
     );
   }
 
-  public async getIndexes(sid: string): Promise<StoredIndexes> {
-    const row = await this.get<IndexRow>("indexes", sid);
-    return row?.value ?? EMPTY_INDEXES;
-  }
+  public async putBlob(blob: StoredBlob, sidHint?: string): Promise<void> {
+    const trackingSid = normalizeTrackingSid(sidHint);
 
-  public async putIntegrity(sid: string, manifest: HashesManifest): Promise<void> {
-    await this.put<IntegrityRow>(
+    if (trackingSid && !SHA256_HEX_PATTERN.test(blob.hash)) {
+      throw new Error("A session-tracked pipeline blob must have a SHA-256 hex hash.");
+    }
+
+    let attempt = 0;
+
+    while (true) {
+      const db = await this.db();
+
+      try {
+        await runMultiStoreTransaction(
+          db,
+          ["sessions", "blobs", "blobRefs"],
+          "readwrite",
+          async (transaction) => {
+            const blobsStore = transaction.objectStore("blobs");
+            const blobRefsStore = transaction.objectStore("blobRefs");
+            const existingBlobRequest = requestToPromise<BlobRow | undefined>(
+              blobsStore.get(blob.hash)
+            );
+
+            if (!trackingSid) {
+              const existingBlob = await existingBlobRequest;
+              blobsStore.put({
+                key: blob.hash,
+                value: existingBlob
+                  ? {
+                      ...existingBlob.value,
+                      refCount: existingBlob.value.refCount + 1
+                    }
+                  : blob
+              } satisfies BlobRow);
+              return;
+            }
+
+            const blobRefKey = createBlobRefKey(trackingSid, blob.hash);
+            const [session, existingBlob, legacyRefs, existingRef] = await Promise.all([
+              requestToPromise<SessionRow | undefined>(
+                transaction.objectStore("sessions").get(trackingSid)
+              ),
+              existingBlobRequest,
+              requestToPromise<LegacyBlobRefsRow | undefined>(blobRefsStore.get(trackingSid)),
+              requestToPromise<BlobRefRow | undefined>(blobRefsStore.get(blobRefKey))
+            ]);
+
+            if (!session) {
+              throw new Error(
+                `Cannot attach pipeline blob ${blob.hash} to missing session ${trackingSid}.`
+              );
+            }
+
+            const trackedHashes = normalizeBlobHashes(legacyRefs?.value ?? []);
+
+            if (legacyRefs) {
+              for (const trackedHash of trackedHashes) {
+                blobRefsStore.put({
+                  key: createBlobRefKey(trackingSid, trackedHash),
+                  sid: trackingSid,
+                  hash: trackedHash
+                } satisfies BlobRefRow);
+              }
+
+              blobRefsStore.delete(trackingSid);
+            }
+
+            if (existingRef || trackedHashes.includes(blob.hash)) {
+              if (!existingBlob) {
+                blobsStore.put({
+                  key: blob.hash,
+                  value: {
+                    ...blob,
+                    refCount: 1
+                  }
+                } satisfies BlobRow);
+              }
+
+              return;
+            }
+
+            blobsStore.put({
+              key: blob.hash,
+              value: existingBlob
+                ? {
+                    ...existingBlob.value,
+                    refCount: existingBlob.value.refCount + 1
+                  }
+                : {
+                    ...blob,
+                    refCount: 1
+                  }
+            } satisfies BlobRow);
+            blobRefsStore.put({
+              key: blobRefKey,
+              sid: trackingSid,
+              hash: blob.hash
+            } satisfies BlobRefRow);
+          }
+        );
+        return;
+      } catch (error) {
+        if (!isQuotaExceededError(error) || attempt >= MAX_QUOTA_RECOVERY_ATTEMPTS) {
+          throw error;
+        }
+
+        attempt += 1;
+        const recovered = await this.recoverQuotaPressure(trackingSid ?? undefined);
+
+        if (!recovered) {
+          throw error;
+        }
+      }
+    }
+  }
+
+  public async getBlob(hash: string): Promise<StoredBlob | undefined> {
+    const row = await this.get<BlobRow>("blobs", hash);
+    return row?.value;
+  }
+
+  public async listBlobs(): Promise<StoredBlob[]> {
+    const rows = await this.getAll<BlobRow>("blobs");
+    return rows.map((row) => row.value);
+  }
+
+  public async putIndexes(sid: string, indexes: StoredIndexes): Promise<void> {
+    await this.put<IndexRow>(
+      "indexes",
+      {
+        key: sid,
+        value: indexes
+      },
+      {
+        allowQuotaRecovery: true,
+        protectedSid: sid
+      }
+    );
+  }
+
+  public async getIndexes(sid: string): Promise<StoredIndexes> {
+    const row = await this.get<IndexRow>("indexes", sid);
+    return row?.value ?? EMPTY_INDEXES;
+  }
+
+  public async putIntegrity(sid: string, manifest: HashesManifest): Promise<void> {
+    await this.put<IntegrityRow>(
       "integrity",
       {
         key: sid,
@@ -619,24 +1303,264 @@ export class IndexedDbPipelineStorage implements PipelineStorage {
   }
 
   public async deleteSession(sid: string, blobHashes: string[] = []): Promise<void> {
-    const trackedBlobHashes = await this.getTrackedBlobHashes(sid);
-    const mergedBlobHashes = mergeBlobHashes(blobHashes, trackedBlobHashes);
     const db = await this.db();
 
-    await runTransaction(db, "sessions", "readwrite", (store) => {
-      return requestToPromise(store.delete(sid));
-    });
-    await runTransaction(db, "indexes", "readwrite", (store) => {
-      return requestToPromise(store.delete(sid));
-    });
-    await runTransaction(db, "integrity", "readwrite", (store) => {
-      return requestToPromise(store.delete(sid));
-    });
-    await this.deleteChunksBySid(sid);
-    await this.deleteTrackedBlobHashes(sid);
+    await runMultiStoreTransaction(
+      db,
+      [
+        "sessions",
+        "chunks",
+        "blobs",
+        "blobRefs",
+        "indexes",
+        "integrity",
+        "resumeMeta",
+        "resumeRefs",
+        "deliveryReceipts"
+      ],
+      "readwrite",
+      async (transaction) => {
+        const sessionsStore = transaction.objectStore("sessions");
+        const chunksStore = transaction.objectStore("chunks");
+        const blobsStore = transaction.objectStore("blobs");
+        const blobRefsStore = transaction.objectStore("blobRefs");
+        const indexesStore = transaction.objectStore("indexes");
+        const integrityStore = transaction.objectStore("integrity");
+        const resumeMetaStore = transaction.objectStore("resumeMeta");
+        const resumeRefsStore = transaction.objectStore("resumeRefs");
+        const deliveryReceiptsStore = transaction.objectStore("deliveryReceipts");
+        const [session, legacyRefs, normalizedRefs, chunks] = await Promise.all([
+          requestToPromise<SessionRow | undefined>(sessionsStore.get(sid)),
+          requestToPromise<LegacyBlobRefsRow | undefined>(blobRefsStore.get(sid)),
+          listBlobRefsBySid(blobRefsStore, sid),
+          deleteChunksBySidInTransaction(chunksStore, sid),
+          deleteResumeRefsBySid(resumeRefsStore, sid),
+          deleteDeliveryReceiptsBySid(deliveryReceiptsStore, sid)
+        ]);
+        const inferredBlobHashes = collectBlobHashesFromChunks(chunks);
+        const trackedBlobHashes = mergeBlobHashes(
+          legacyRefs?.value ?? [],
+          normalizedRefs.map((row) => row.hash)
+        );
+        const ownedBlobHashes =
+          legacyRefs || normalizedRefs.length > 0
+            ? trackedBlobHashes
+            : session || chunks.length > 0
+              ? mergeBlobHashes(blobHashes, [...inferredBlobHashes])
+              : [];
+
+        const storedBlobs = await Promise.all(
+          ownedBlobHashes.map((hash) => requestToPromise<BlobRow | undefined>(blobsStore.get(hash)))
+        );
 
-    for (const hash of mergedBlobHashes) {
-      await this.decrementOrDeleteBlob(hash);
+        for (let index = 0; index < ownedBlobHashes.length; index += 1) {
+          const hash = ownedBlobHashes[index];
+          const storedBlob = storedBlobs[index];
+
+          if (!hash || !storedBlob) {
+            continue;
+          }
+
+          if (storedBlob.value.refCount <= 1) {
+            blobsStore.delete(hash);
+          } else {
+            blobsStore.put({
+              key: hash,
+              value: {
+                ...storedBlob.value,
+                refCount: storedBlob.value.refCount - 1
+              }
+            } satisfies BlobRow);
+          }
+        }
+
+        sessionsStore.delete(sid);
+        indexesStore.delete(sid);
+        integrityStore.delete(sid);
+        blobRefsStore.delete(sid);
+        resumeMetaStore.delete(sid);
+
+        for (const ref of normalizedRefs) {
+          blobRefsStore.delete(ref.key);
+        }
+      }
+    );
+  }
+
+  private async putChunkWithResumeDelta(
+    chunk: StoredChunk,
+    delta: PipelineResumeDelta
+  ): Promise<void> {
+    let attempt = 0;
+
+    while (true) {
+      const db = await this.db();
+
+      try {
+        await runMultiStoreTransaction(
+          db,
+          ["chunks", "resumeMeta", "resumeRefs", "deliveryReceipts"],
+          "readwrite",
+          async (transaction) => {
+            const chunksStore = transaction.objectStore("chunks");
+            const metaStore = transaction.objectStore("resumeMeta");
+            const chunkKey = this.chunkKey(chunk.sid, chunk.meta.chunkId);
+            const [existingMeta, existingChunk] = await Promise.all([
+              requestToPromise<ResumeMetaRow | undefined>(metaStore.get(chunk.sid)),
+              requestToPromise<ChunkRow | undefined>(chunksStore.get(chunkKey))
+            ]);
+
+            if (
+              existingMeta &&
+              Number.isSafeInteger(existingMeta.chunkSequence) &&
+              existingMeta.chunkSequence >= chunk.meta.seq
+            ) {
+              if (
+                existingMeta.chunkSequence === chunk.meta.seq &&
+                existingChunk &&
+                isSameChunkCommit(existingChunk.value, chunk)
+              ) {
+                return;
+              }
+
+              throw new Error("Pipeline chunk sequence would conflict with durable resume state.");
+            }
+
+            if (existingChunk) {
+              throw new Error("Pipeline chunk id already exists without matching resume state.");
+            }
+
+            chunksStore.put({
+              key: chunkKey,
+              sid: chunk.sid,
+              seq: chunk.meta.seq,
+              value: chunk
+            } satisfies ChunkRow);
+
+            const refsStore = transaction.objectStore("resumeRefs");
+            const recordingIds = new Set(
+              existingMeta ? requireResumeRecordingIds(existingMeta.recordingIds) : []
+            );
+            let screenRecordingChunkCount = existingMeta
+              ? requireResumeChunkCount(existingMeta.screenRecordingChunkCount)
+              : 0;
+
+            for (const change of delta.screenRecordingChanges) {
+              if (change.operation === "put") {
+                recordingIds.add(change.recordingId);
+                const ref = createResumeRefRow(
+                  chunk.sid,
+                  change.recordingId,
+                  change.index,
+                  change.hash,
+                  change.size
+                );
+                const existingRef = await requestToPromise<ResumeRefRow | undefined>(
+                  refsStore.get(ref.key)
+                );
+                refsStore.put(ref);
+
+                if (!existingRef) {
+                  screenRecordingChunkCount += 1;
+                }
+              } else {
+                screenRecordingChunkCount -= await deleteResumeRefsByRecording(
+                  refsStore,
+                  chunk.sid,
+                  change.recordingId
+                );
+
+                if (change.operation === "reset") {
+                  recordingIds.add(change.recordingId);
+                } else {
+                  recordingIds.delete(change.recordingId);
+                }
+              }
+            }
+
+            if (recordingIds.size > PIPELINE_RESUME_MAX_RECORDINGS) {
+              throw new Error("Pipeline resume state has too many active screen recordings.");
+            }
+
+            if (
+              screenRecordingChunkCount < 0 ||
+              screenRecordingChunkCount > PIPELINE_RESUME_MAX_SCREEN_CHUNKS
+            ) {
+              throw new Error("Pipeline resume state has too many screen-recording chunks.");
+            }
+
+            metaStore.put({
+              key: chunk.sid,
+              chunkSequence: chunk.meta.seq,
+              recordingIds: [...recordingIds].sort((left, right) => left.localeCompare(right)),
+              screenRecordingChunkCount,
+              value: { ...delta.sequenceWatermark }
+            } satisfies ResumeMetaRow);
+
+            await applyIndexedDbPipelineDeliveryChanges(
+              transaction.objectStore("deliveryReceipts"),
+              chunk.sid,
+              readPipelineDeliveryChanges(delta)
+            );
+          }
+        );
+        return;
+      } catch (error) {
+        if (!isQuotaExceededError(error) || attempt >= MAX_QUOTA_RECOVERY_ATTEMPTS) {
+          throw error;
+        }
+
+        attempt += 1;
+
+        if (!(await this.recoverQuotaPressure(chunk.sid))) {
+          throw error;
+        }
+      }
+    }
+  }
+
+  private async putLegacyChunk(chunk: StoredChunk): Promise<void> {
+    let attempt = 0;
+
+    while (true) {
+      const db = await this.db();
+
+      try {
+        await runMultiStoreTransaction(
+          db,
+          ["chunks", "resumeMeta"],
+          "readwrite",
+          async (transaction) => {
+            const resumeMeta = await requestToPromise<ResumeMetaRow | undefined>(
+              transaction.objectStore("resumeMeta").get(chunk.sid)
+            );
+
+            if (resumeMeta) {
+              throw new Error(
+                "Pipeline chunk is missing a resume delta after checkpoint initialization."
+              );
+            }
+
+            transaction.objectStore("chunks").put({
+              key: this.chunkKey(chunk.sid, chunk.meta.chunkId),
+              sid: chunk.sid,
+              seq: chunk.meta.seq,
+              value: chunk
+            } satisfies ChunkRow);
+          }
+        );
+        return;
+      } catch (error) {
+        if (!isQuotaExceededError(error) || attempt >= MAX_QUOTA_RECOVERY_ATTEMPTS) {
+          throw error;
+        }
+
+        attempt += 1;
+
+        if (!(await this.recoverQuotaPressure(chunk.sid))) {
+          throw error;
+        }
+      }
     }
   }
 
@@ -745,15 +1669,10 @@ export class IndexedDbPipelineStorage implements PipelineStorage {
       return null;
     }
 
-    await this.deleteSessionWithBlobCleanup(oldest.sid);
+    await this.deleteSession(oldest.sid);
     return oldest.sid;
   }
 
-  private async deleteSessionWithBlobCleanup(sid: string): Promise<void> {
-    const blobHashes = await this.resolveBlobHashesForSession(sid);
-    await this.deleteSession(sid, blobHashes);
-  }
-
   private open(): Promise<IDBDatabase> {
     if (!globalThis.indexedDB) {
       return Promise.reject(new Error("indexedDB is unavailable in this runtime"));
@@ -771,7 +1690,10 @@ export class IndexedDbPipelineStorage implements PipelineStorage {
           "blobs",
           "blobRefs",
           "indexes",
-          "integrity"
+          "integrity",
+          "resumeMeta",
+          "resumeRefs",
+          "deliveryReceipts"
         ]) {
           if (!db.objectStoreNames.contains(storeName)) {
             db.createObjectStore(storeName, { keyPath: "key" });
@@ -784,9 +1706,44 @@ export class IndexedDbPipelineStorage implements PipelineStorage {
         if (chunksStore && !chunksStore.indexNames.contains(CHUNKS_BY_SID_SEQ_INDEX)) {
           chunksStore.createIndex(CHUNKS_BY_SID_SEQ_INDEX, ["sid", "seq"], { unique: false });
         }
+
+        const blobRefsStore = transaction?.objectStore("blobRefs");
+
+        if (blobRefsStore && !blobRefsStore.indexNames.contains(BLOB_REFS_BY_SID_INDEX)) {
+          blobRefsStore.createIndex(BLOB_REFS_BY_SID_INDEX, "sid", { unique: false });
+        }
+
+        const resumeRefsStore = transaction?.objectStore("resumeRefs");
+
+        if (resumeRefsStore && !resumeRefsStore.indexNames.contains(RESUME_REFS_BY_SID_INDEX)) {
+          resumeRefsStore.createIndex(RESUME_REFS_BY_SID_INDEX, "sid", { unique: false });
+        }
+
+        if (
+          resumeRefsStore &&
+          !resumeRefsStore.indexNames.contains(RESUME_REFS_BY_SID_RECORDING_INDEX)
+        ) {
+          resumeRefsStore.createIndex(RESUME_REFS_BY_SID_RECORDING_INDEX, ["sid", "recordingId"], {
+            unique: false
+          });
+        }
+
+        const deliveryReceiptsStore = transaction?.objectStore("deliveryReceipts");
+
+        if (
+          deliveryReceiptsStore &&
+          !deliveryReceiptsStore.indexNames.contains(DELIVERY_RECEIPTS_BY_SID_INDEX)
+        ) {
+          deliveryReceiptsStore.createIndex(DELIVERY_RECEIPTS_BY_SID_INDEX, "sid", {
+            unique: false
+          });
+        }
       };
 
       request.onsuccess = () => {
+        request.result.onversionchange = () => {
+          request.result.close();
+        };
         resolve(request.result);
       };
 
@@ -795,113 +1752,810 @@ export class IndexedDbPipelineStorage implements PipelineStorage {
       };
     });
   }
+}
 
-  private async deleteChunksBySid(sid: string): Promise<void> {
-    const db = await this.db();
+export function isPipelineResumeDelta(value: unknown): value is PipelineResumeDelta {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return false;
+  }
+
+  const record = value as Record<string, unknown>;
+  const sequence = asStorageRecord(record.sequenceWatermark);
+  const changes = record.screenRecordingChanges;
+  const deliveryChanges = record.deliveryChanges;
+  const expectedKeys = record.version === 1 ? 3 : record.version === 2 ? 4 : 0;
+
+  if (
+    Object.keys(record).length !== expectedKeys ||
+    expectedKeys === 0 ||
+    !isRecorderSequenceWatermark(sequence) ||
+    !Array.isArray(changes) ||
+    changes.length > PIPELINE_RESUME_MAX_SCREEN_CHUNKS ||
+    (record.version === 2 &&
+      (!Array.isArray(deliveryChanges) ||
+        deliveryChanges.length === 0 ||
+        deliveryChanges.length > PIPELINE_DELIVERY_MAX_CHANGES_PER_COMMIT))
+  ) {
+    return false;
+  }
 
-    await runTransaction(db, "chunks", "readwrite", (store) => {
-      if (store.indexNames.contains(CHUNKS_BY_SID_SEQ_INDEX)) {
-        const index = store.index(CHUNKS_BY_SID_SEQ_INDEX);
-        const range = IDBKeyRange.bound([sid, 0], [sid, Number.MAX_SAFE_INTEGER]);
-        return deleteByCursor(index.openCursor(range));
+  return (
+    changes.every(isScreenRecordingResumeChange) &&
+    (record.version === 1 ||
+      (deliveryChanges as unknown[]).every((candidate) => isPipelineDeliveryChange(candidate)))
+  );
+}
+
+export function isPipelineDeliveryEventProvenance(
+  value: unknown
+): value is PipelineDeliveryEventProvenance {
+  const record = asStorageRecord(value);
+
+  return Boolean(
+    record &&
+    Object.keys(record).length === 7 &&
+    isPipelineDeliveryBatch(record) &&
+    Number.isSafeInteger(record.eventIndex) &&
+    (record.eventIndex as number) >= 0 &&
+    (record.eventIndex as number) < (record.eventCount as number)
+  );
+}
+
+export function isPipelineDeliveryChange(value: unknown): value is PipelineDeliveryChange {
+  const record = asStorageRecord(value);
+
+  if (!record || !isPipelineDeliveryBatch(record)) {
+    return false;
+  }
+
+  if (
+    !Number.isSafeInteger(record.eventIndex) ||
+    (record.eventIndex as number) < 0 ||
+    (record.eventIndex as number) >= (record.eventCount as number)
+  ) {
+    return false;
+  }
+
+  if (record.outcome === "no-output") {
+    return Object.keys(record).length === 8;
+  }
+
+  return (
+    record.outcome === "event" &&
+    Object.keys(record).length === 9 &&
+    isBoundedIdentifier(record.eventId, 128)
+  );
+}
+
+function isPipelineDeliveryBatch(record: Record<string, unknown>): boolean {
+  return (
+    Number.isSafeInteger(record.tabId) &&
+    (record.tabId as number) >= 0 &&
+    Number.isSafeInteger(record.frameId) &&
+    (record.frameId as number) >= 0 &&
+    isBoundedIdentifier(record.documentId, 512) &&
+    isBoundedIdentifier(record.batchId, 128) &&
+    typeof record.fingerprint === "string" &&
+    SHA256_HEX_PATTERN.test(record.fingerprint) &&
+    Number.isSafeInteger(record.eventCount) &&
+    (record.eventCount as number) > 0 &&
+    (record.eventCount as number) <= PIPELINE_DELIVERY_MAX_INDEXES
+  );
+}
+
+function isPipelineDeliveryReceipt(value: unknown): value is PipelineDeliveryReceipt {
+  const record = asStorageRecord(value);
+
+  if (
+    !record ||
+    Object.keys(record).length !== 8 ||
+    !isPipelineDeliveryBatch(record) ||
+    typeof record.complete !== "boolean" ||
+    !Array.isArray(record.indexes) ||
+    record.indexes.length > (record.eventCount as number)
+  ) {
+    return false;
+  }
+
+  const seen = new Set<number>();
+  let previous = -1;
+
+  for (const candidate of record.indexes) {
+    const index = asStorageRecord(candidate);
+
+    if (
+      !index ||
+      !Number.isSafeInteger(index.eventIndex) ||
+      (index.eventIndex as number) < 0 ||
+      (index.eventIndex as number) >= (record.eventCount as number) ||
+      (index.eventIndex as number) <= previous ||
+      seen.has(index.eventIndex as number)
+    ) {
+      return false;
+    }
+
+    if (index.outcome === "no-output") {
+      if (Object.keys(index).length !== 2) {
+        return false;
       }
+    } else if (
+      index.outcome !== "event" ||
+      Object.keys(index).length !== 3 ||
+      !isBoundedIdentifier(index.eventId, 128)
+    ) {
+      return false;
+    }
 
-      return requestToPromise<ChunkRow[]>(store.getAll()).then(async (rows) => {
-        for (const row of rows) {
-          if (row.value.sid !== sid) {
-            continue;
-          }
+    previous = index.eventIndex as number;
+    seen.add(previous);
+  }
 
-          await requestToPromise(store.delete(row.key));
-        }
-      });
-    });
+  return record.complete === (record.indexes.length === record.eventCount);
+}
+
+function requirePipelineDeliveryReceipt(value: unknown): PipelineDeliveryReceipt {
+  if (!isPipelineDeliveryReceipt(value)) {
+    throw new Error("Invalid pipeline delivery receipt.");
   }
 
-  private async resolveBlobHashesForSession(sid: string): Promise<string[]> {
-    const tracked = await this.getTrackedBlobHashes(sid);
+  return clonePipelineDeliveryReceipt(value);
+}
 
-    if (tracked.length > 0) {
-      return tracked;
+function requirePipelineDeliveryReceiptQuery(query: PipelineDeliveryReceiptQuery): void {
+  const record = asStorageRecord(query);
+
+  if (
+    !record ||
+    Object.keys(record).length !== 4 ||
+    !Number.isSafeInteger(record.tabId) ||
+    (record.tabId as number) < 0 ||
+    !Number.isSafeInteger(record.frameId) ||
+    (record.frameId as number) < 0 ||
+    !isBoundedIdentifier(record.documentId, 512) ||
+    !isBoundedIdentifier(record.batchId, 128)
+  ) {
+    throw new Error("Invalid pipeline delivery receipt query.");
+  }
+}
+
+function requirePipelineDeliveryNoOutputChanges(
+  changes: readonly PipelineDeliveryNoOutputChange[]
+): void {
+  if (changes.length > PIPELINE_DELIVERY_MAX_CHANGES_PER_COMMIT) {
+    throw new Error("Pipeline delivery progress has too many changes.");
+  }
+
+  for (const change of changes) {
+    if (!isPipelineDeliveryChange(change) || change.outcome !== "no-output") {
+      throw new Error("Metadata-only delivery progress may contain only no-output changes.");
     }
+  }
+}
 
-    const chunks = await this.listChunks(sid);
-    return [...collectBlobHashesFromChunks(chunks)];
+function readPipelineDeliveryChanges(
+  delta: PipelineResumeDelta
+): readonly PipelineDeliveryChange[] {
+  return delta.version === 2 ? delta.deliveryChanges : [];
+}
+
+function projectPipelineDeliveryReceipts(
+  current: ReadonlyMap<string, PipelineDeliveryReceipt>,
+  changes: readonly PipelineDeliveryChange[]
+): Map<string, PipelineDeliveryReceipt> {
+  if (current.size > PIPELINE_DELIVERY_MAX_STREAMS) {
+    throw new Error("Pipeline delivery journal exceeds its stream limit.");
+  }
+  if (changes.length > PIPELINE_DELIVERY_MAX_CHANGES_PER_COMMIT) {
+    throw new Error("Pipeline delivery journal change set is too large.");
   }
 
-  private async trackBlobHashForSession(sid: string, hash: string): Promise<void> {
-    if (!SHA256_HEX_PATTERN.test(hash)) {
-      return;
+  const projected = new Map(current);
+
+  for (const change of changes) {
+    if (!isPipelineDeliveryChange(change)) {
+      throw new Error("Invalid pipeline delivery change.");
     }
 
-    const existing = await this.get<BlobRefsRow>("blobRefs", sid);
-    const next = mergeBlobHashes(existing?.value ?? [], [hash]);
+    const streamKey = createPipelineDeliveryStreamKey(change);
+    const existingValue = projected.get(streamKey);
+    const existing = existingValue ? requirePipelineDeliveryReceipt(existingValue) : undefined;
+    let receipt: PipelineDeliveryReceipt;
 
-    await this.put<BlobRefsRow>(
-      "blobRefs",
-      {
-        key: sid,
-        value: next
-      },
-      {
-        allowQuotaRecovery: true,
-        protectedSid: sid
+    if (!existing || existing.batchId !== change.batchId) {
+      if (existing && !existing.complete) {
+        throw new Error("Pipeline delivery stream cannot replace an incomplete batch receipt.");
+      }
+
+      receipt = {
+        tabId: change.tabId,
+        frameId: change.frameId,
+        documentId: change.documentId,
+        batchId: change.batchId,
+        fingerprint: change.fingerprint,
+        eventCount: change.eventCount,
+        indexes: [],
+        complete: false
+      };
+    } else {
+      if (
+        existing.fingerprint !== change.fingerprint ||
+        existing.eventCount !== change.eventCount
+      ) {
+        throw new Error("Pipeline delivery batch identity was reused with different content.");
       }
+
+      receipt = existing;
+    }
+
+    const priorIndex = receipt.indexes.find(
+      (candidate) => candidate.eventIndex === change.eventIndex
     );
+    const nextIndex: PipelineDeliveryReceiptIndex =
+      change.outcome === "event"
+        ? { eventIndex: change.eventIndex, outcome: "event", eventId: change.eventId }
+        : { eventIndex: change.eventIndex, outcome: "no-output" };
+
+    if (priorIndex) {
+      if (
+        priorIndex.outcome !== nextIndex.outcome ||
+        (priorIndex.outcome === "event" &&
+          (nextIndex.outcome !== "event" || priorIndex.eventId !== nextIndex.eventId))
+      ) {
+        throw new Error("Pipeline delivery event index was reused with a different outcome.");
+      }
+    } else {
+      receipt.indexes.push(nextIndex);
+      receipt.indexes.sort((left, right) => left.eventIndex - right.eventIndex);
+      receipt.complete = receipt.indexes.length === receipt.eventCount;
+    }
+
+    projected.set(streamKey, receipt);
+
+    if (projected.size > PIPELINE_DELIVERY_MAX_STREAMS) {
+      throw new Error("Pipeline delivery journal has too many document streams.");
+    }
   }
 
-  private async getTrackedBlobHashes(sid: string): Promise<string[]> {
-    const row = await this.get<BlobRefsRow>("blobRefs", sid);
-    return normalizeBlobHashes(row?.value ?? []);
+  return projected;
+}
+
+function clonePipelineDeliveryReceipt(receipt: PipelineDeliveryReceipt): PipelineDeliveryReceipt {
+  return {
+    tabId: receipt.tabId,
+    frameId: receipt.frameId,
+    documentId: receipt.documentId,
+    batchId: receipt.batchId,
+    fingerprint: receipt.fingerprint,
+    eventCount: receipt.eventCount,
+    indexes: receipt.indexes.map((index) => ({ ...index })),
+    complete: receipt.complete
+  };
+}
+
+function createPipelineDeliveryStreamKey(stream: PipelineDeliveryStream): string {
+  return JSON.stringify([stream.tabId, stream.frameId, stream.documentId]);
+}
+
+function createPipelineDeliveryReceiptKey(sid: string, stream: PipelineDeliveryStream): string {
+  return JSON.stringify([sid, stream.tabId, stream.frameId, stream.documentId]);
+}
+
+function isBoundedIdentifier(value: unknown, maxLength: number): value is string {
+  return typeof value === "string" && value.length > 0 && value.length <= maxLength;
+}
+
+function isScreenRecordingResumeChange(candidate: unknown): boolean {
+  const change = asStorageRecord(candidate);
+
+  if (!change || !isValidRecordingId(change.recordingId)) {
+    return false;
   }
 
-  private async hasTrackedBlobHashForSession(sid: string, hash: string): Promise<boolean> {
-    if (!SHA256_HEX_PATTERN.test(hash)) {
+  if (change.operation === "delete" || change.operation === "reset") {
+    return Object.keys(change).length === 2;
+  }
+
+  const keys = Object.keys(change);
+  const hasValidSize =
+    change.size === undefined ||
+    (Number.isSafeInteger(change.size) && (change.size as number) >= 0);
+
+  return (
+    change.operation === "put" &&
+    (keys.length === 4 || keys.length === 5) &&
+    (keys.length !== 5 || change.size !== undefined) &&
+    hasValidSize &&
+    Number.isSafeInteger(change.index) &&
+    (change.index as number) >= 0 &&
+    (change.index as number) < PIPELINE_RESUME_MAX_SCREEN_CHUNKS &&
+    typeof change.hash === "string" &&
+    SHA256_HEX_PATTERN.test(change.hash)
+  );
+}
+
+export function assertPipelineResumeChangesWithinLimits(
+  recordings: ReadonlyMap<string, ReadonlyMap<number, unknown>>,
+  changes: readonly ScreenRecordingResumeChange[]
+): void {
+  const activeRecordingIds = new Set(recordings.keys());
+  let totalChunks = 0;
+
+  for (const chunks of recordings.values()) {
+    totalChunks += chunks.size;
+  }
+
+  if (
+    activeRecordingIds.size > PIPELINE_RESUME_MAX_RECORDINGS ||
+    totalChunks > PIPELINE_RESUME_MAX_SCREEN_CHUNKS
+  ) {
+    throw new Error("Pipeline resume state exceeds its resource limits.");
+  }
+
+  type Projection = {
+    active: boolean;
+    base: ReadonlyMap<number, unknown> | null;
+    additions: Set<number>;
+    count: number;
+  };
+  const projections = new Map<string, Projection>();
+  const resolveProjection = (recordingId: string): Projection => {
+    const existing = projections.get(recordingId);
+
+    if (existing) {
+      return existing;
+    }
+
+    const base = recordings.get(recordingId) ?? null;
+    const projection: Projection = {
+      active: base !== null,
+      base,
+      additions: new Set(),
+      count: base?.size ?? 0
+    };
+    projections.set(recordingId, projection);
+    return projection;
+  };
+
+  for (const change of changes) {
+    let projection = resolveProjection(change.recordingId);
+
+    if (change.operation === "reset") {
+      if (projection.active) {
+        totalChunks -= projection.count;
+      }
+
+      projection = {
+        active: true,
+        base: null,
+        additions: new Set(),
+        count: 0
+      };
+      projections.set(change.recordingId, projection);
+      activeRecordingIds.add(change.recordingId);
+    } else if (change.operation === "delete") {
+      if (projection.active) {
+        totalChunks -= projection.count;
+      }
+
+      projections.set(change.recordingId, {
+        active: false,
+        base: null,
+        additions: new Set(),
+        count: 0
+      });
+      activeRecordingIds.delete(change.recordingId);
+    } else {
+      if (!projection.active) {
+        projection = {
+          active: true,
+          base: null,
+          additions: new Set(),
+          count: 0
+        };
+        projections.set(change.recordingId, projection);
+        activeRecordingIds.add(change.recordingId);
+      }
+
+      if (!projection.base?.has(change.index) && !projection.additions.has(change.index)) {
+        projection.additions.add(change.index);
+        projection.count += 1;
+        totalChunks += 1;
+      }
+    }
+
+    if (activeRecordingIds.size > PIPELINE_RESUME_MAX_RECORDINGS) {
+      throw new Error("Pipeline resume state has too many active screen recordings.");
+    }
+
+    if (totalChunks > PIPELINE_RESUME_MAX_SCREEN_CHUNKS) {
+      throw new Error("Pipeline resume state has too many screen-recording chunks.");
+    }
+  }
+}
+
+export function isPipelineResumeState(value: unknown): value is PipelineResumeState {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return false;
+  }
+
+  const record = value as Record<string, unknown>;
+  const sequence = asStorageRecord(record.sequenceWatermark);
+
+  if (
+    Object.keys(record).length !== 2 ||
+    !isRecorderSequenceWatermark(sequence) ||
+    !Array.isArray(record.screenRecordings) ||
+    record.screenRecordings.length > PIPELINE_RESUME_MAX_RECORDINGS
+  ) {
+    return false;
+  }
+
+  const recordingIds = new Set<string>();
+  let totalChunks = 0;
+
+  for (const candidate of record.screenRecordings) {
+    const recording = asStorageRecord(candidate);
+
+    if (
+      !recording ||
+      Object.keys(recording).length !== 2 ||
+      !isValidRecordingId(recording.recordingId) ||
+      recordingIds.has(recording.recordingId as string) ||
+      !Array.isArray(recording.chunks)
+    ) {
+      return false;
+    }
+
+    recordingIds.add(recording.recordingId as string);
+    totalChunks += recording.chunks.length;
+
+    if (totalChunks > PIPELINE_RESUME_MAX_SCREEN_CHUNKS) {
       return false;
     }
 
-    const tracked = await this.getTrackedBlobHashes(sid);
-    return tracked.includes(hash);
+    const indexes = new Set<number>();
+
+    for (const candidateChunk of recording.chunks) {
+      const chunk = asStorageRecord(candidateChunk);
+      const chunkKeys = chunk ? Object.keys(chunk) : [];
+
+      if (
+        !chunk ||
+        (chunkKeys.length !== 2 && chunkKeys.length !== 3) ||
+        (chunkKeys.length === 3 && (!chunkKeys.includes("size") || chunk.size === undefined)) ||
+        !Number.isSafeInteger(chunk.index) ||
+        (chunk.index as number) < 0 ||
+        (chunk.index as number) >= PIPELINE_RESUME_MAX_SCREEN_CHUNKS ||
+        indexes.has(chunk.index as number) ||
+        typeof chunk.hash !== "string" ||
+        !SHA256_HEX_PATTERN.test(chunk.hash) ||
+        (chunk.size !== undefined &&
+          (!Number.isSafeInteger(chunk.size) || (chunk.size as number) < 0))
+      ) {
+        return false;
+      }
+
+      indexes.add(chunk.index as number);
+    }
   }
 
-  private async deleteTrackedBlobHashes(sid: string): Promise<void> {
-    const db = await this.db();
-    await runTransaction(db, "blobRefs", "readwrite", (store) => {
-      return requestToPromise(store.delete(sid));
+  return true;
+}
+
+function requirePipelineResumeState(state: PipelineResumeState): PipelineResumeState {
+  if (!isPipelineResumeState(state)) {
+    throw new Error("Invalid pipeline resume state.");
+  }
+
+  return state;
+}
+
+function isRecorderSequenceWatermark(
+  value: Record<string, unknown> | null
+): value is Record<"event" | "action", number> {
+  return Boolean(
+    value &&
+    Object.keys(value).length === 2 &&
+    Number.isSafeInteger(value.event) &&
+    (value.event as number) >= 0 &&
+    Number.isSafeInteger(value.action) &&
+    (value.action as number) >= 0
+  );
+}
+
+function isValidRecordingId(value: unknown): value is string {
+  return typeof value === "string" && value.length > 0 && value.length <= 256;
+}
+
+function requireResumeRecordingIds(value: unknown): string[] {
+  if (!Array.isArray(value) || value.length > PIPELINE_RESUME_MAX_RECORDINGS) {
+    throw new Error("Invalid pipeline resume recording markers.");
+  }
+
+  const unique = new Set<string>();
+
+  for (const recordingId of value) {
+    if (!isValidRecordingId(recordingId) || unique.has(recordingId)) {
+      throw new Error("Invalid pipeline resume recording marker.");
+    }
+
+    unique.add(recordingId);
+  }
+
+  return [...unique];
+}
+
+function requireResumeChunkCount(value: unknown): number {
+  if (
+    !Number.isSafeInteger(value) ||
+    (value as number) < 0 ||
+    (value as number) > PIPELINE_RESUME_MAX_SCREEN_CHUNKS
+  ) {
+    throw new Error("Invalid pipeline resume screen-recording chunk count.");
+  }
+
+  return value as number;
+}
+
+function asStorageRecord(value: unknown): Record<string, unknown> | null {
+  return value !== null && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function screenRecordingMapFromState(
+  state: PipelineResumeState
+): Map<string, Map<number, ScreenRecordingChunkCheckpoint>> {
+  return new Map(
+    state.screenRecordings.map((recording) => [
+      recording.recordingId,
+      new Map(
+        recording.chunks.map((chunk) => [
+          chunk.index,
+          {
+            hash: chunk.hash,
+            ...(chunk.size === undefined ? {} : { size: chunk.size })
+          }
+        ])
+      )
+    ])
+  );
+}
+
+function createPipelineResumeState(
+  sequenceWatermark: RecorderSequenceWatermark,
+  recordings: Map<string, Map<number, ScreenRecordingChunkCheckpoint>>
+): PipelineResumeState {
+  return {
+    sequenceWatermark: { ...sequenceWatermark },
+    screenRecordings: [...recordings.entries()]
+      .map(([recordingId, chunks]) => ({
+        recordingId,
+        chunks: [...chunks.entries()]
+          .map(([index, checkpoint]) => ({ index, ...checkpoint }))
+          .sort((left, right) => left.index - right.index)
+      }))
+      .sort((left, right) => left.recordingId.localeCompare(right.recordingId))
+  };
+}
+
+function applyScreenRecordingChanges(
+  recordings: Map<string, Map<number, ScreenRecordingChunkCheckpoint>>,
+  changes: readonly ScreenRecordingResumeChange[]
+): void {
+  for (const change of changes) {
+    if (change.operation === "delete") {
+      recordings.delete(change.recordingId);
+      continue;
+    }
+
+    if (change.operation === "reset") {
+      recordings.set(change.recordingId, new Map());
+      continue;
+    }
+
+    const chunks =
+      recordings.get(change.recordingId) ?? new Map<number, ScreenRecordingChunkCheckpoint>();
+    chunks.set(change.index, {
+      hash: change.hash,
+      ...(change.size === undefined ? {} : { size: change.size })
     });
+    recordings.set(change.recordingId, chunks);
+  }
+}
+
+function createBlobRefKey(sid: string, hash: string): string {
+  return JSON.stringify([sid, hash]);
+}
+
+function isSameChunkCommit(left: StoredChunk, right: StoredChunk): boolean {
+  return (
+    left.sid === right.sid &&
+    left.meta.chunkId === right.meta.chunkId &&
+    left.meta.seq === right.meta.seq &&
+    left.meta.tStart === right.meta.tStart &&
+    left.meta.tEnd === right.meta.tEnd &&
+    left.meta.monoStart === right.meta.monoStart &&
+    left.meta.monoEnd === right.meta.monoEnd &&
+    left.meta.eventCount === right.meta.eventCount &&
+    left.meta.byteLength === right.meta.byteLength &&
+    left.meta.codec === right.meta.codec &&
+    left.meta.sha256 === right.meta.sha256 &&
+    JSON.stringify(left.resumeDelta) === JSON.stringify(right.resumeDelta)
+  );
+}
+
+function createResumeRefRow(
+  sid: string,
+  recordingId: string,
+  index: number,
+  hash: string,
+  size?: number
+): ResumeRefRow {
+  return {
+    key: JSON.stringify([sid, recordingId, index]),
+    sid,
+    recordingId,
+    index,
+    hash,
+    ...(size === undefined ? {} : { size })
+  };
+}
+
+function listBlobRefsBySid(store: IDBObjectStore, sid: string): Promise<BlobRefRow[]> {
+  if (!store.indexNames.contains(BLOB_REFS_BY_SID_INDEX)) {
+    return requestToPromise<Array<BlobRefRow | LegacyBlobRefsRow>>(store.getAll()).then((rows) =>
+      rows.filter((row): row is BlobRefRow => "sid" in row && row.sid === sid)
+    );
   }
 
-  private async decrementOrDeleteBlob(hash: string): Promise<void> {
-    const existing = await this.getBlob(hash);
+  return requestToPromise<BlobRefRow[]>(
+    store.index(BLOB_REFS_BY_SID_INDEX).getAll(IDBKeyRange.only(sid))
+  );
+}
 
-    if (!existing) {
-      return;
+function listResumeRefsBySid(store: IDBObjectStore, sid: string): Promise<ResumeRefRow[]> {
+  if (!store.indexNames.contains(RESUME_REFS_BY_SID_INDEX)) {
+    return Promise.reject(new Error("IndexedDB resume-ref index is unavailable."));
+  }
+
+  return requestToPromise<ResumeRefRow[]>(
+    store
+      .index(RESUME_REFS_BY_SID_INDEX)
+      .getAll(IDBKeyRange.only(sid), PIPELINE_RESUME_MAX_SCREEN_CHUNKS + 1)
+  ).then((rows) => {
+    if (rows.length > PIPELINE_RESUME_MAX_SCREEN_CHUNKS) {
+      throw new Error("Pipeline resume state has too many screen-recording chunks.");
     }
 
-    if (existing.refCount <= 1) {
-      const db = await this.db();
-      await runTransaction(db, "blobs", "readwrite", (store) => {
-        return requestToPromise(store.delete(hash));
-      });
-      return;
+    return rows;
+  });
+}
+
+function deleteResumeRefsBySid(store: IDBObjectStore, sid: string): Promise<number> {
+  const request = store.index(RESUME_REFS_BY_SID_INDEX).openCursor(IDBKeyRange.only(sid));
+
+  return deleteCursorRows(request, "IndexedDB resume-ref session deletion failed");
+}
+
+async function applyIndexedDbPipelineDeliveryChanges(
+  store: IDBObjectStore,
+  sid: string,
+  changes: readonly PipelineDeliveryChange[]
+): Promise<void> {
+  if (changes.length === 0) {
+    return;
+  }
+  if (!store.indexNames.contains(DELIVERY_RECEIPTS_BY_SID_INDEX)) {
+    throw new Error("IndexedDB delivery-receipt index is unavailable.");
+  }
+
+  const grouped = new Map<string, PipelineDeliveryChange[]>();
+
+  for (const change of changes) {
+    if (!isPipelineDeliveryChange(change)) {
+      throw new Error("Invalid pipeline delivery change.");
     }
 
-    await this.put<BlobRow>(
-      "blobs",
-      {
-        key: hash,
-        value: {
-          ...existing,
-          refCount: existing.refCount - 1
-        }
-      },
-      {
-        allowQuotaRecovery: false
+    const streamKey = createPipelineDeliveryStreamKey(change);
+    const group = grouped.get(streamKey) ?? [];
+    group.push(change);
+    grouped.set(streamKey, group);
+  }
+
+  const existingCount = await requestToPromise<number>(
+    store.index(DELIVERY_RECEIPTS_BY_SID_INDEX).count(IDBKeyRange.only(sid))
+  );
+  if (existingCount > PIPELINE_DELIVERY_MAX_STREAMS) {
+    throw new Error("Pipeline delivery journal exceeds its stream limit.");
+  }
+
+  const groups = [...grouped.entries()];
+  const existingRows = await Promise.all(
+    groups.map(([, group]) => {
+      const first = group[0]!;
+      return requestToPromise<DeliveryReceiptRow | undefined>(
+        store.get(createPipelineDeliveryReceiptKey(sid, first))
+      );
+    })
+  );
+  let projectedCount = existingCount;
+
+  for (let index = 0; index < groups.length; index += 1) {
+    const [streamKey, group] = groups[index]!;
+    const existingRow = existingRows[index];
+    const current = existingRow
+      ? new Map([[streamKey, requirePipelineDeliveryReceipt(existingRow.value)]])
+      : new Map<string, PipelineDeliveryReceipt>();
+    const projected = projectPipelineDeliveryReceipts(current, group);
+    const receipt = projected.get(streamKey);
+
+    if (!receipt) {
+      throw new Error("Pipeline delivery receipt projection failed.");
+    }
+
+    if (!existingRow) {
+      projectedCount += 1;
+      if (projectedCount > PIPELINE_DELIVERY_MAX_STREAMS) {
+        throw new Error("Pipeline delivery journal has too many document streams.");
       }
-    );
+    }
+
+    const first = group[0]!;
+    store.put({
+      key: createPipelineDeliveryReceiptKey(sid, first),
+      sid,
+      streamKey,
+      value: receipt
+    } satisfies DeliveryReceiptRow);
   }
 }
 
+function deleteDeliveryReceiptsBySid(store: IDBObjectStore, sid: string): Promise<number> {
+  if (!store.indexNames.contains(DELIVERY_RECEIPTS_BY_SID_INDEX)) {
+    return Promise.reject(new Error("IndexedDB delivery-receipt index is unavailable."));
+  }
+
+  const request = store.index(DELIVERY_RECEIPTS_BY_SID_INDEX).openCursor(IDBKeyRange.only(sid));
+  return deleteCursorRows(request, "IndexedDB delivery-receipt session deletion failed");
+}
+
+function deleteResumeRefsByRecording(
+  store: IDBObjectStore,
+  sid: string,
+  recordingId: string
+): Promise<number> {
+  const index = store.index(RESUME_REFS_BY_SID_RECORDING_INDEX);
+  const request = index.openCursor(IDBKeyRange.only([sid, recordingId]));
+
+  return deleteCursorRows(request, "IndexedDB resume-ref recording deletion failed");
+}
+
+function deleteCursorRows(
+  request: IDBRequest<IDBCursorWithValue | null>,
+  failureMessage: string
+): Promise<number> {
+  return new Promise<number>((resolve, reject) => {
+    let deleted = 0;
+
+    request.onerror = () => {
+      reject(request.error ?? new Error(failureMessage));
+    };
+    request.onsuccess = () => {
+      const cursor = request.result;
+
+      if (!cursor) {
+        resolve(deleted);
+        return;
+      }
+
+      cursor.delete();
+      deleted += 1;
+      cursor.continue();
+    };
+  });
+}
+
 function isQuotaExceededError(error: unknown): boolean {
   const DomException = globalThis.DOMException;
 
@@ -1069,6 +2723,84 @@ function looksEncryptedStorageBytes(bytes: Uint8Array): boolean {
   return true;
 }
 
+function assertValidPipelineStorageKey(key: CryptoKey): void {
+  const algorithm = key?.algorithm as AesKeyAlgorithm | undefined;
+  const usages = Array.from(key?.usages ?? []);
+
+  if (
+    !key ||
+    key.type !== "secret" ||
+    key.extractable ||
+    algorithm?.name !== "AES-GCM" ||
+    algorithm.length !== 256 ||
+    !usages.includes("encrypt") ||
+    !usages.includes("decrypt")
+  ) {
+    throw new Error(
+      "Pipeline storage encryption requires a non-extractable 256-bit AES-GCM key with encrypt/decrypt usage."
+    );
+  }
+}
+
+function assertValidPipelineStorageKeyRecord(
+  record: IndexedDbPipelineStorageKeyRecord,
+  purpose: string
+): void {
+  if (record.purpose !== purpose || record.algorithm !== "AES-GCM") {
+    throw new Error(`Invalid persisted pipeline storage key record for purpose: ${purpose}`);
+  }
+
+  assertValidPipelineStorageKey(record.key);
+}
+
+function requireNonEmptyStorageIdentifier(value: string, field: string): string {
+  const normalized = typeof value === "string" ? value.trim() : "";
+
+  if (!normalized || normalized.length > 256) {
+    throw new Error(`Pipeline storage ${field} must be a non-empty string up to 256 characters.`);
+  }
+
+  return normalized;
+}
+
+function openPipelineStorageKeyring(databaseName: string): Promise<IDBDatabase> {
+  if (!globalThis.indexedDB) {
+    return Promise.reject(new Error("indexedDB is unavailable in this runtime"));
+  }
+
+  return new Promise<IDBDatabase>((resolve, reject) => {
+    const request = globalThis.indexedDB.open(databaseName, STORAGE_KEYRING_VERSION);
+
+    request.onupgradeneeded = () => {
+      if (!request.result.objectStoreNames.contains(STORAGE_KEYRING_STORE)) {
+        request.result.createObjectStore(STORAGE_KEYRING_STORE, { keyPath: "purpose" });
+      }
+    };
+    request.onsuccess = () => resolve(request.result);
+    request.onerror = () => {
+      reject(
+        request.error ?? new Error(`Failed to open pipeline storage keyring: ${databaseName}`)
+      );
+    };
+  });
+}
+
+async function readPipelineStorageKeyRecord(
+  db: IDBDatabase,
+  purpose: string
+): Promise<IndexedDbPipelineStorageKeyRecord | undefined> {
+  return runTransaction(db, STORAGE_KEYRING_STORE, "readonly", (store) => {
+    return requestToPromise<IndexedDbPipelineStorageKeyRecord | undefined>(store.get(purpose));
+  });
+}
+
+function isIndexedDbConstraintError(error: unknown): boolean {
+  return (
+    (error instanceof DOMException && error.name === "ConstraintError") ||
+    (error instanceof Error && error.name === "ConstraintError")
+  );
+}
+
 async function runTransaction<TResult>(
   db: IDBDatabase,
   storeName: string,
@@ -1090,6 +2822,42 @@ async function runTransaction<TResult>(
   return result;
 }
 
+async function runMultiStoreTransaction<TResult>(
+  db: IDBDatabase,
+  storeNames: string[],
+  mode: IDBTransactionMode,
+  handler: (transaction: IDBTransaction) => TResult | Promise<TResult>
+): Promise<TResult> {
+  const transaction = db.transaction(storeNames, mode);
+  const completion = new Promise<void>((resolve, reject) => {
+    transaction.oncomplete = () => resolve();
+    transaction.onerror = () =>
+      reject(transaction.error ?? new Error("IndexedDB transaction failed"));
+    transaction.onabort = () =>
+      reject(transaction.error ?? new Error("IndexedDB transaction aborted"));
+  });
+
+  // Attach a rejection handler immediately. The handler can await IndexedDB requests while the
+  // transaction aborts independently, and leaving `completion` temporarily unobserved would
+  // otherwise surface an unhandled rejection.
+  void completion.catch(() => undefined);
+
+  try {
+    const result = await handler(transaction);
+    await completion;
+    return result;
+  } catch (error) {
+    try {
+      transaction.abort();
+    } catch {
+      // The transaction may already have committed or aborted because of a request failure.
+    }
+
+    await completion.catch(() => undefined);
+    throw error;
+  }
+}
+
 function requestToPromise<TResult>(request: IDBRequest<TResult>): Promise<TResult> {
   return new Promise<TResult>((resolve, reject) => {
     request.onsuccess = () => {
@@ -1102,8 +2870,34 @@ function requestToPromise<TResult>(request: IDBRequest<TResult>): Promise<TResul
   });
 }
 
-function deleteByCursor(request: IDBRequest<IDBCursorWithValue | null>): Promise<void> {
-  return new Promise<void>((resolve, reject) => {
+function deleteChunksBySidInTransaction(
+  store: IDBObjectStore,
+  sid: string
+): Promise<StoredChunk[]> {
+  if (!store.indexNames.contains(CHUNKS_BY_SID_SEQ_INDEX)) {
+    return requestToPromise<ChunkRow[]>(store.getAll()).then((rows) => {
+      const chunks: StoredChunk[] = [];
+
+      for (const row of rows) {
+        if (row.value.sid !== sid) {
+          continue;
+        }
+
+        chunks.push(row.value);
+        store.delete(row.key);
+      }
+
+      return chunks;
+    });
+  }
+
+  const index = store.index(CHUNKS_BY_SID_SEQ_INDEX);
+  const range = IDBKeyRange.bound([sid, 0], [sid, Number.MAX_SAFE_INTEGER]);
+  const request = index.openCursor(range);
+
+  return new Promise<StoredChunk[]>((resolve, reject) => {
+    const chunks: StoredChunk[] = [];
+
     request.onerror = () => {
       reject(request.error ?? new Error("IndexedDB cursor iteration failed"));
     };
@@ -1112,10 +2906,12 @@ function deleteByCursor(request: IDBRequest<IDBCursorWithValue | null>): Promise
       const cursor = request.result;
 
       if (!cursor) {
-        resolve();
+        resolve(chunks);
         return;
       }
 
+      const row = cursor.value as ChunkRow;
+      chunks.push(row.value);
       cursor.delete();
       cursor.continue();
     };
diff --git a/packages/pipeline/vitest.config.ts b/packages/pipeline/vitest.config.ts
index c25cac9..2863e32 100644
--- a/packages/pipeline/vitest.config.ts
+++ b/packages/pipeline/vitest.config.ts
@@ -19,10 +19,10 @@ export default defineConfig({
       include: ["src/**/*.ts"],
       exclude: ["src/**/*.test.ts", "src/index.ts"],
       thresholds: {
-        lines: 80,
-        statements: 80,
-        functions: 80,
-        branches: 65
+        lines: 84,
+        statements: 84,
+        functions: 90,
+        branches: 68
       }
     }
   }
diff --git a/packages/player-sdk/CHANGELOG.md b/packages/player-sdk/CHANGELOG.md
index 81daa3a..c4557d0 100644
--- a/packages/player-sdk/CHANGELOG.md
+++ b/packages/player-sdk/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @webblackbox/player-sdk
 
+## 0.7.0
+
+### Minor Changes
+
+- b3cfda9: Add bounded transient blob reads and fail closed on malformed UTF-8, ambiguous ZIP entries,
+  non-canonical blobs, inconsistent indexes, and archives that exceed configured resource limits.
+
+### Patch Changes
+
+- Updated dependencies [b3cfda9]
+  - @webblackbox/protocol@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/packages/player-sdk/LICENSE b/packages/player-sdk/LICENSE
new file mode 100644
index 0000000..fcf7ea4
--- /dev/null
+++ b/packages/player-sdk/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Web LLM
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/player-sdk/README.md b/packages/player-sdk/README.md
index 35ec106..10b5517 100644
--- a/packages/player-sdk/README.md
+++ b/packages/player-sdk/README.md
@@ -56,11 +56,27 @@ const scopedPlayer = await WebBlackboxPlayer.open(archiveBytes, {
   range: { monoStart: 12000, monoEnd: 45000 }
 });
 
+// Resource limits have safe ceilings and may only be tightened per open.
+const constrainedPlayer = await WebBlackboxPlayer.open(archiveBytes, {
+  resourceLimits: {
+    maxInputBytes: 32 * 1024 * 1024,
+    maxEntryCount: 2_000,
+    maxEventCount: 250_000
+  }
+});
+
 console.log(player.status); // "loaded"
 console.log(player.archive.manifest); // ExportManifest
 console.log(player.events.length); // Total event count
 ```
 
+The built-in ceilings are 256 MiB input, 10,000 physical ZIP entries, 128 MiB per expanded
+entry, 256 MiB total ZIP expansion, 8 MiB per/24 MiB total JSON metadata, 10,000x compression
+ratio, 1,000,000 events, 500,000 index records, 2,000,000 index event references, 32 MiB per
+decoded event chunk, 64 MiB total decoded event bytes, and 5 seconds per ZIP/codec stream.
+Actual inflater output is counted; declared ZIP sizes are only an early-rejection hint. Values
+supplied through `resourceLimits` may only be lower than these ceilings.
+
 ### Querying Events
 
 ```typescript
@@ -119,6 +135,10 @@ if (blob) {
   console.log(blob.mime); // "image/webp"
   console.log(blob.bytes); // Uint8Array
 }
+
+// Trusted analyzers can enforce a per-read ceiling without populating the
+// Player blob cache. Integrity and decryption checks are still applied.
+const transient = await player.readBlobTransient("abc123...", 2 * 1024 * 1024);
 ```
 
 ## Analysis APIs
@@ -348,6 +368,23 @@ type PlayerOpenInput = ArrayBuffer | Uint8Array | Blob;
 type PlayerOpenOptions = {
   passphrase?: string;
   range?: PlayerRange;
+  resourceLimits?: Partial<ArchiveResourceLimits>;
+};
+
+type ArchiveResourceLimits = {
+  maxInputBytes: number;
+  maxEntryCount: number;
+  maxEntryUncompressedBytes: number;
+  maxTotalUncompressedBytes: number;
+  maxMetadataEntryBytes: number;
+  maxTotalMetadataBytes: number;
+  maxCompressionRatio: number;
+  maxEventCount: number;
+  maxIndexRecords: number;
+  maxIndexEventReferences: number;
+  maxChunkDecodedBytes: number;
+  maxTotalDecodedBytes: number;
+  decodeTimeoutMs: number;
 };
 
 type PlayerQuery = {
diff --git a/packages/player-sdk/package.json b/packages/player-sdk/package.json
index dde0fd9..2d1b823 100644
--- a/packages/player-sdk/package.json
+++ b/packages/player-sdk/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@webblackbox/player-sdk",
   "description": "Archive playback, querying, analysis, and code-generation SDK for WebBlackbox sessions.",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -40,6 +40,7 @@
   "scripts": {
     "dev": "tsup src/index.ts --format esm --dts --watch --clean",
     "build": "tsup src/index.ts --format esm --dts --clean",
+    "prepack": "pnpm run build",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run --passWithNoTests",
@@ -49,6 +50,6 @@
   },
   "dependencies": {
     "@webblackbox/protocol": "workspace:*",
-    "jszip": "^3.10.1"
+    "jszip": "3.10.1"
   }
 }
diff --git a/packages/player-sdk/src/archive-resource-limits.test.ts b/packages/player-sdk/src/archive-resource-limits.test.ts
new file mode 100644
index 0000000..8c023f3
--- /dev/null
+++ b/packages/player-sdk/src/archive-resource-limits.test.ts
@@ -0,0 +1,493 @@
+import JSZip from "jszip";
+import { describe, expect, it } from "vitest";
+
+import {
+  ArchiveDecodeBudget,
+  ArchiveResourceLimitError,
+  assertArchiveInputResourceLimits,
+  assertLoadedArchiveResourceLimits,
+  resolveArchiveResourceLimits
+} from "./archive-resource-limits.js";
+
+describe("archive resource limits", () => {
+  it("accepts exact input and entry-size boundaries", async () => {
+    const zip = new JSZip();
+    zip.file("payload.bin", new Uint8Array(1024));
+    const bytes = await zip.generateAsync({ type: "uint8array", compression: "STORE" });
+    const loaded = await JSZip.loadAsync(bytes);
+    const limits = resolveArchiveResourceLimits({
+      maxInputBytes: bytes.byteLength,
+      maxEntryCount: 1,
+      maxEntryUncompressedBytes: 1024,
+      maxTotalUncompressedBytes: 1024,
+      maxCompressionRatio: 1
+    });
+
+    expect(() => assertArchiveInputResourceLimits(bytes, limits)).not.toThrow();
+    expect(() => assertLoadedArchiveResourceLimits(loaded, limits)).not.toThrow();
+    expect(() =>
+      assertLoadedArchiveResourceLimits(
+        loaded,
+        resolveArchiveResourceLimits({ maxEntryUncompressedBytes: 1023 })
+      )
+    ).toThrowError(
+      expect.objectContaining<Partial<ArchiveResourceLimitError>>({
+        resource: "maxEntryUncompressedBytes",
+        actual: 1024
+      })
+    );
+  });
+
+  it("rejects entry floods from the end-of-central-directory record before loading", async () => {
+    const zip = new JSZip();
+    for (let index = 0; index < 6; index += 1) {
+      zip.file(`entry-${index}.txt`, "");
+    }
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+    const bytesWithTrailingData = new Uint8Array(bytes.byteLength + 1);
+    bytesWithTrailingData.set(bytes);
+    const limits = resolveArchiveResourceLimits({ maxEntryCount: 5 });
+
+    expect(() => assertArchiveInputResourceLimits(bytesWithTrailingData, limits)).toThrowError(
+      expect.objectContaining<Partial<ArchiveResourceLimitError>>({
+        resource: "maxEntryCount",
+        actual: 6
+      })
+    );
+  });
+
+  it("rejects duplicate or normalization-ambiguous physical ZIP entry names", async () => {
+    const duplicateZip = new JSZip();
+    duplicateZip.file("entry-one.json", "first");
+    duplicateZip.file("entry-two.json", "second");
+    const duplicateBytes = await duplicateZip.generateAsync({
+      type: "uint8array",
+      compression: "STORE"
+    });
+    expect(replaceAsciiInPlace(duplicateBytes, "entry-two.json", "entry-one.json")).toBe(2);
+
+    expect(() =>
+      assertArchiveInputResourceLimits(duplicateBytes, resolveArchiveResourceLimits())
+    ).toThrow(/duplicate ZIP entry 'entry-one\.json'/i);
+
+    const ambiguousZip = new JSZip();
+    ambiguousZip.file("safe/../manifest.json", "{}");
+    const ambiguousBytes = await ambiguousZip.generateAsync({
+      type: "uint8array",
+      compression: "STORE"
+    });
+
+    expect(() =>
+      assertArchiveInputResourceLimits(ambiguousBytes, resolveArchiveResourceLimits())
+    ).toThrow(/non-canonical ZIP entry name/i);
+  });
+
+  it("rejects Unicode Path overrides before JSZip can collapse logical entry names", async () => {
+    const zip = new JSZip();
+    zip.file("logical-one-😀", "first");
+    zip.file("logical-two-😀", "second");
+    const bytes = await zip.generateAsync({
+      type: "uint8array",
+      compression: "STORE",
+      encodeFileName(name) {
+        if (name === "logical-one-😀") {
+          return "entry-one.json";
+        }
+        if (name === "logical-two-😀") {
+          return "entry-two.json";
+        }
+        return name;
+      }
+    });
+    expect(replaceUtf8InPlace(bytes, "logical-two-😀", "logical-one-😀")).toBe(2);
+
+    const loaded = await JSZip.loadAsync(bytes);
+    expect(Object.keys(loaded.files)).toEqual(["logical-one-😀"]);
+    await expect(loaded.file("logical-one-😀")?.async("string")).resolves.toBe("second");
+    expect(() => assertArchiveInputResourceLimits(bytes, resolveArchiveResourceLimits())).toThrow(
+      /Unicode Path ZIP extra fields/i
+    );
+  });
+
+  it("rejects local filename and Unicode-extra differences from the central directory", async () => {
+    const mismatchedZip = new JSZip();
+    mismatchedZip.file("safe-name.json", "payload");
+    const mismatchedBytes = await mismatchedZip.generateAsync({
+      type: "uint8array",
+      compression: "STORE"
+    });
+    replaceZipHeaderFileName(mismatchedBytes, 0x04034b50, "safe-name.json", "evil-name.json");
+
+    const loaded = await JSZip.loadAsync(mismatchedBytes);
+    expect(Object.keys(loaded.files)).toEqual(["evil-name.json"]);
+    expect(() =>
+      assertArchiveInputResourceLimits(mismatchedBytes, resolveArchiveResourceLimits())
+    ).toThrow(/local and central ZIP filenames differ/i);
+
+    const localUnicodeZip = new JSZip();
+    localUnicodeZip.file("logical-only-😀", "payload");
+    const localUnicodeBytes = await localUnicodeZip.generateAsync({
+      type: "uint8array",
+      compression: "STORE",
+      encodeFileName(name) {
+        return name === "logical-only-😀" ? "safe-name.json" : name;
+      }
+    });
+    replaceZipExtraFieldId(localUnicodeBytes, 0x02014b50, "safe-name.json", 0x7075, 0x7076);
+    expect(() =>
+      assertArchiveInputResourceLimits(localUnicodeBytes, resolveArchiveResourceLimits())
+    ).toThrow(/Unicode Path ZIP extra fields.*local file header/i);
+  });
+
+  it("rejects malformed central and local ZIP extra-field bounds", async () => {
+    const centralZip = new JSZip();
+    centralZip.file("central.bin", "payload", { comment: "abc" });
+    const centralBytes = await centralZip.generateAsync({
+      type: "uint8array",
+      compression: "STORE"
+    });
+    moveCentralCommentIntoMalformedExtraField(centralBytes, "central.bin");
+    expect(() =>
+      assertArchiveInputResourceLimits(centralBytes, resolveArchiveResourceLimits())
+    ).toThrow(/malformed ZIP extra fields.*central directory/i);
+
+    const localZip = new JSZip();
+    localZip.file("local.bin", "payload");
+    const localBytes = await localZip.generateAsync({
+      type: "uint8array",
+      compression: "STORE"
+    });
+    forgeLocalExtraLength(localBytes, "local.bin", 0xffff);
+    expect(() =>
+      assertArchiveInputResourceLimits(localBytes, resolveArchiveResourceLimits())
+    ).toThrow(/malformed local ZIP header/i);
+  });
+
+  it("resolves ZIP64 local offsets with prepended archive bytes", async () => {
+    const zip = new JSZip();
+    zip.file("payload.bin", "payload");
+    const generated = await zip.generateAsync({
+      type: "uint8array",
+      compression: "STORE"
+    });
+    const zip64 = promoteCentralLocalHeaderOffsetToZip64(generated, "payload.bin");
+    const prepended = new Uint8Array(zip64.byteLength + 128);
+    prepended.fill(0x41, 0, 128);
+    prepended.set(zip64, 128);
+
+    await expect(JSZip.loadAsync(prepended)).resolves.toBeInstanceOf(JSZip);
+    expect(() =>
+      assertArchiveInputResourceLimits(prepended, resolveArchiveResourceLimits())
+    ).not.toThrow();
+  });
+
+  it("rejects high compression ratios without inflating an entry", async () => {
+    const zip = new JSZip();
+    zip.file("repetitive.txt", "a".repeat(512 * 1024));
+    const bytes = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 9 }
+    });
+    const loaded = await JSZip.loadAsync(bytes);
+    const limits = resolveArchiveResourceLimits({ maxCompressionRatio: 10 });
+
+    expect(() => assertLoadedArchiveResourceLimits(loaded, limits)).toThrowError(
+      expect.objectContaining<Partial<ArchiveResourceLimitError>>({
+        resource: "maxCompressionRatio"
+      })
+    );
+  });
+
+  it("enforces cumulative expanded bytes and decoded event counts", async () => {
+    const zip = new JSZip();
+    zip.file("left.bin", new Uint8Array(800));
+    zip.file("right.bin", new Uint8Array(800));
+    const bytes = await zip.generateAsync({ type: "uint8array", compression: "STORE" });
+    const loaded = await JSZip.loadAsync(bytes);
+    const limits = resolveArchiveResourceLimits({
+      maxTotalUncompressedBytes: 1500,
+      maxEventCount: 2
+    });
+
+    expect(() => assertLoadedArchiveResourceLimits(loaded, limits)).toThrowError(
+      expect.objectContaining<Partial<ArchiveResourceLimitError>>({
+        resource: "maxTotalUncompressedBytes"
+      })
+    );
+
+    const budget = new ArchiveDecodeBudget(limits);
+    budget.commitEvents("events/one.ndjson", 2);
+    expect(() => budget.commitEvents("events/two.ndjson", 1)).toThrowError(
+      expect.objectContaining<Partial<ArchiveResourceLimitError>>({
+        resource: "maxEventCount",
+        actual: 3
+      })
+    );
+
+    const decodedBudget = new ArchiveDecodeBudget(
+      resolveArchiveResourceLimits({
+        maxChunkDecodedBytes: 10,
+        maxTotalDecodedBytes: 15,
+        maxCompressionRatio: 10
+      })
+    );
+    decodedBudget.commitDecoded("events/one.ndjson", 10, 10);
+    decodedBudget.commitDecoded("events/two.ndjson", 5, 5);
+    expect(() => decodedBudget.commitDecoded("events/three.ndjson", 1, 1)).toThrowError(
+      expect.objectContaining<Partial<ArchiveResourceLimitError>>({
+        resource: "maxTotalDecodedBytes",
+        actual: 16
+      })
+    );
+
+    const indexBudget = new ArchiveDecodeBudget(
+      resolveArchiveResourceLimits({ maxIndexRecords: 2, maxIndexEventReferences: 3 })
+    );
+    indexBudget.commitIndex("index/req.json", 1, 2);
+    expect(() => indexBudget.commitIndex("index/inv.json", 2, 2)).toThrowError(
+      expect.objectContaining<Partial<ArchiveResourceLimitError>>({
+        resource: "maxIndexRecords",
+        actual: 3
+      })
+    );
+  });
+
+  it("allows callers to tighten but not relax safety ceilings", () => {
+    expect(resolveArchiveResourceLimits({ maxInputBytes: 1024 }).maxInputBytes).toBe(1024);
+    expect(() => resolveArchiveResourceLimits({ maxInputBytes: Number.MAX_SAFE_INTEGER })).toThrow(
+      /may only tighten/i
+    );
+    expect(() => resolveArchiveResourceLimits({ maxCompressionRatio: 0.5 })).toThrow(/at least 1/i);
+  });
+});
+
+function replaceAsciiInPlace(bytes: Uint8Array, search: string, replacement: string): number {
+  return replaceUtf8InPlace(bytes, search, replacement);
+}
+
+function replaceUtf8InPlace(bytes: Uint8Array, search: string, replacement: string): number {
+  const searchBytes = new TextEncoder().encode(search);
+  const replacementBytes = new TextEncoder().encode(replacement);
+  if (searchBytes.byteLength !== replacementBytes.byteLength) {
+    throw new Error("ZIP test replacement names must have the same byte length.");
+  }
+
+  let replacements = 0;
+  for (let offset = 0; offset <= bytes.byteLength - searchBytes.byteLength; offset += 1) {
+    let matches = true;
+    for (let index = 0; index < searchBytes.byteLength; index += 1) {
+      if (bytes[offset + index] !== searchBytes[index]) {
+        matches = false;
+        break;
+      }
+    }
+    if (!matches) {
+      continue;
+    }
+
+    bytes.set(replacementBytes, offset);
+    replacements += 1;
+    offset += searchBytes.byteLength - 1;
+  }
+
+  return replacements;
+}
+
+function replaceZipHeaderFileName(
+  bytes: Uint8Array,
+  signature: number,
+  search: string,
+  replacement: string
+): void {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const encoder = new TextEncoder();
+  const decoder = new TextDecoder();
+  const replacementBytes = encoder.encode(replacement);
+
+  for (let offset = 0; offset + 30 <= bytes.byteLength; offset += 1) {
+    if (view.getUint32(offset, true) !== signature) {
+      continue;
+    }
+
+    const local = signature === 0x04034b50;
+    const fileNameBytes = view.getUint16(offset + (local ? 26 : 28), true);
+    const fileNameOffset = offset + (local ? 30 : 46);
+    if (decoder.decode(bytes.subarray(fileNameOffset, fileNameOffset + fileNameBytes)) !== search) {
+      continue;
+    }
+    if (replacementBytes.byteLength !== fileNameBytes) {
+      throw new Error("ZIP test replacement names must have the same byte length.");
+    }
+
+    bytes.set(replacementBytes, fileNameOffset);
+    return;
+  }
+
+  throw new Error(`ZIP test header was not found for '${search}'.`);
+}
+
+function replaceZipExtraFieldId(
+  bytes: Uint8Array,
+  signature: number,
+  targetName: string,
+  searchId: number,
+  replacementId: number
+): void {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const decoder = new TextDecoder();
+
+  for (let offset = 0; offset + 46 <= bytes.byteLength; offset += 1) {
+    if (view.getUint32(offset, true) !== signature) {
+      continue;
+    }
+
+    const fileNameBytes = view.getUint16(offset + 28, true);
+    const extraBytes = view.getUint16(offset + 30, true);
+    const fileNameOffset = offset + 46;
+    if (
+      decoder.decode(bytes.subarray(fileNameOffset, fileNameOffset + fileNameBytes)) !== targetName
+    ) {
+      continue;
+    }
+
+    let extraOffset = fileNameOffset + fileNameBytes;
+    const extraEnd = extraOffset + extraBytes;
+    while (extraOffset + 4 <= extraEnd) {
+      const fieldId = view.getUint16(extraOffset, true);
+      const fieldBytes = view.getUint16(extraOffset + 2, true);
+      if (fieldId === searchId) {
+        view.setUint16(extraOffset, replacementId, true);
+        return;
+      }
+      extraOffset += 4 + fieldBytes;
+    }
+  }
+
+  throw new Error(`ZIP test extra field ${searchId} was not found for '${targetName}'.`);
+}
+
+function moveCentralCommentIntoMalformedExtraField(bytes: Uint8Array, targetName: string): void {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const decoder = new TextDecoder();
+
+  for (let offset = 0; offset + 46 <= bytes.byteLength; offset += 1) {
+    if (view.getUint32(offset, true) !== 0x02014b50) {
+      continue;
+    }
+    const fileNameBytes = view.getUint16(offset + 28, true);
+    const fileNameOffset = offset + 46;
+    if (
+      decoder.decode(bytes.subarray(fileNameOffset, fileNameOffset + fileNameBytes)) !== targetName
+    ) {
+      continue;
+    }
+
+    const commentBytes = view.getUint16(offset + 32, true);
+    if (commentBytes < 1 || view.getUint16(offset + 30, true) !== 0) {
+      throw new Error("ZIP test requires a comment and no existing central extra fields.");
+    }
+    view.setUint16(offset + 30, commentBytes, true);
+    view.setUint16(offset + 32, 0, true);
+    return;
+  }
+
+  throw new Error(`ZIP test central entry was not found for '${targetName}'.`);
+}
+
+function forgeLocalExtraLength(bytes: Uint8Array, targetName: string, extraBytes: number): void {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const decoder = new TextDecoder();
+
+  for (let offset = 0; offset + 30 <= bytes.byteLength; offset += 1) {
+    if (view.getUint32(offset, true) !== 0x04034b50) {
+      continue;
+    }
+    const fileNameBytes = view.getUint16(offset + 26, true);
+    const fileNameOffset = offset + 30;
+    if (
+      decoder.decode(bytes.subarray(fileNameOffset, fileNameOffset + fileNameBytes)) === targetName
+    ) {
+      view.setUint16(offset + 28, extraBytes, true);
+      return;
+    }
+  }
+
+  throw new Error(`ZIP test local entry was not found for '${targetName}'.`);
+}
+
+function promoteCentralLocalHeaderOffsetToZip64(bytes: Uint8Array, targetName: string): Uint8Array {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const decoder = new TextDecoder();
+  const eocdOffset = findEocdOffset(view);
+  const centralOffset = view.getUint32(eocdOffset + 16, true);
+  const centralBytes = view.getUint32(eocdOffset + 12, true);
+  const centralEnd = centralOffset + centralBytes;
+  const records: Uint8Array[] = [];
+  let matched = false;
+
+  for (let offset = centralOffset; offset < centralEnd; ) {
+    if (view.getUint32(offset, true) !== 0x02014b50) {
+      throw new Error("ZIP test central directory is malformed.");
+    }
+    const fileNameBytes = view.getUint16(offset + 28, true);
+    const extraBytes = view.getUint16(offset + 30, true);
+    const commentBytes = view.getUint16(offset + 32, true);
+    const fileNameOffset = offset + 46;
+    const extraOffset = fileNameOffset + fileNameBytes;
+    const commentOffset = extraOffset + extraBytes;
+    const nextOffset = commentOffset + commentBytes;
+    const record = bytes.slice(offset, nextOffset);
+
+    if (decoder.decode(bytes.subarray(fileNameOffset, extraOffset)) === targetName) {
+      const localHeaderOffset = view.getUint32(offset + 42, true);
+      const zip64Extra = new Uint8Array(12);
+      const zip64View = new DataView(zip64Extra.buffer);
+      zip64View.setUint16(0, 0x0001, true);
+      zip64View.setUint16(2, 8, true);
+      zip64View.setBigUint64(4, BigInt(localHeaderOffset), true);
+
+      const expanded = new Uint8Array(record.byteLength + zip64Extra.byteLength);
+      const insertionOffset = 46 + fileNameBytes + extraBytes;
+      expanded.set(record.subarray(0, insertionOffset));
+      expanded.set(zip64Extra, insertionOffset);
+      expanded.set(record.subarray(insertionOffset), insertionOffset + zip64Extra.byteLength);
+      const expandedView = new DataView(expanded.buffer);
+      expandedView.setUint16(30, extraBytes + zip64Extra.byteLength, true);
+      expandedView.setUint32(42, 0xffffffff, true);
+      records.push(expanded);
+      matched = true;
+    } else {
+      records.push(record);
+    }
+
+    offset = nextOffset;
+  }
+
+  if (!matched) {
+    throw new Error(`ZIP test central entry was not found for '${targetName}'.`);
+  }
+
+  const expandedCentralBytes = records.reduce((total, record) => total + record.byteLength, 0);
+  const output = new Uint8Array(
+    centralOffset + expandedCentralBytes + (bytes.byteLength - eocdOffset)
+  );
+  output.set(bytes.subarray(0, centralOffset));
+  let outputOffset = centralOffset;
+  for (const record of records) {
+    output.set(record, outputOffset);
+    outputOffset += record.byteLength;
+  }
+  output.set(bytes.subarray(eocdOffset), outputOffset);
+  new DataView(output.buffer).setUint32(outputOffset + 12, expandedCentralBytes, true);
+  return output;
+}
+
+function findEocdOffset(view: DataView): number {
+  for (let offset = view.byteLength - 22; offset >= 0; offset -= 1) {
+    if (view.getUint32(offset, true) === 0x06054b50) {
+      return offset;
+    }
+  }
+  throw new Error("ZIP test end-of-central-directory record was not found.");
+}
diff --git a/packages/player-sdk/src/archive-resource-limits.ts b/packages/player-sdk/src/archive-resource-limits.ts
new file mode 100644
index 0000000..7cdd2f8
--- /dev/null
+++ b/packages/player-sdk/src/archive-resource-limits.ts
@@ -0,0 +1,677 @@
+import type JSZip from "jszip";
+
+const MEBIBYTE = 1024 * 1024;
+const ZIP_END_OF_CENTRAL_DIRECTORY_SIGNATURE = 0x06054b50;
+const ZIP64_END_OF_CENTRAL_DIRECTORY_SIGNATURE = 0x06064b50;
+const ZIP64_END_OF_CENTRAL_DIRECTORY_LOCATOR_SIGNATURE = 0x07064b50;
+const ZIP_CENTRAL_DIRECTORY_ENTRY_SIGNATURE = 0x02014b50;
+const ZIP_CENTRAL_DIRECTORY_DIGITAL_SIGNATURE = 0x05054b50;
+const ZIP_LOCAL_FILE_HEADER_SIGNATURE = 0x04034b50;
+const ZIP64_EXTRA_FIELD_ID = 0x0001;
+const ZIP_UNICODE_PATH_EXTRA_FIELD_ID = 0x7075;
+const ZIP_UINT32_SENTINEL = 0xffffffff;
+const ZIP_END_OF_CENTRAL_DIRECTORY_MIN_BYTES = 22;
+const ZIP_MAX_COMMENT_BYTES = 0xffff;
+
+type ZipExtraField = {
+  dataOffset: number;
+  length: number;
+};
+
+/** Resource limits applied before and while an archive is opened. Overrides may only tighten them. */
+export type ArchiveResourceLimits = {
+  maxInputBytes: number;
+  maxEntryCount: number;
+  maxEntryUncompressedBytes: number;
+  maxTotalUncompressedBytes: number;
+  maxMetadataEntryBytes: number;
+  maxTotalMetadataBytes: number;
+  maxCompressionRatio: number;
+  maxEventCount: number;
+  maxIndexRecords: number;
+  maxIndexEventReferences: number;
+  maxChunkDecodedBytes: number;
+  maxTotalDecodedBytes: number;
+  decodeTimeoutMs: number;
+};
+
+/** Safe upper bounds used by archive consumers unless a caller supplies tighter values. */
+export const DEFAULT_ARCHIVE_RESOURCE_LIMITS: Readonly<ArchiveResourceLimits> = Object.freeze({
+  maxInputBytes: 256 * MEBIBYTE,
+  maxEntryCount: 10_000,
+  maxEntryUncompressedBytes: 128 * MEBIBYTE,
+  maxTotalUncompressedBytes: 256 * MEBIBYTE,
+  maxMetadataEntryBytes: 8 * MEBIBYTE,
+  maxTotalMetadataBytes: 24 * MEBIBYTE,
+  maxCompressionRatio: 10_000,
+  maxEventCount: 1_000_000,
+  maxIndexRecords: 500_000,
+  maxIndexEventReferences: 2_000_000,
+  maxChunkDecodedBytes: 32 * MEBIBYTE,
+  maxTotalDecodedBytes: 64 * MEBIBYTE,
+  decodeTimeoutMs: 5_000
+});
+
+export type ArchiveResourceName = keyof ArchiveResourceLimits;
+
+/** Raised when an archive would exceed a configured resource limit. */
+export class ArchiveResourceLimitError extends Error {
+  public override readonly name = "ArchiveResourceLimitError";
+
+  public constructor(
+    public readonly resource: ArchiveResourceName,
+    public readonly limit: number,
+    public readonly actual: number,
+    detail?: string
+  ) {
+    super(
+      `Archive resource limit exceeded for ${resource}: ${formatNumber(actual)} > ${formatNumber(
+        limit
+      )}${detail ? ` (${detail})` : ""}.`
+    );
+  }
+}
+
+/** Resolves caller overrides and rejects attempts to weaken the built-in safety ceiling. */
+export function resolveArchiveResourceLimits(
+  overrides: Partial<ArchiveResourceLimits> = {}
+): ArchiveResourceLimits {
+  const resolved = { ...DEFAULT_ARCHIVE_RESOURCE_LIMITS };
+
+  for (const resource of Object.keys(DEFAULT_ARCHIVE_RESOURCE_LIMITS) as ArchiveResourceName[]) {
+    const value = overrides[resource];
+
+    if (value === undefined) {
+      continue;
+    }
+
+    if (!Number.isFinite(value) || value <= 0) {
+      throw new TypeError(`Archive resource limit '${resource}' must be a positive finite number.`);
+    }
+
+    if (resource !== "maxCompressionRatio" && !Number.isSafeInteger(value)) {
+      throw new TypeError(`Archive resource limit '${resource}' must be a safe integer.`);
+    }
+
+    if (resource === "maxCompressionRatio" && value < 1) {
+      throw new TypeError("Archive resource limit 'maxCompressionRatio' must be at least 1.");
+    }
+
+    const safeMaximum = DEFAULT_ARCHIVE_RESOURCE_LIMITS[resource];
+    if (value > safeMaximum) {
+      throw new TypeError(
+        `Archive resource limit '${resource}' may only tighten the safe default (${safeMaximum}).`
+      );
+    }
+
+    resolved[resource] = value;
+  }
+
+  return resolved;
+}
+
+/** Performs checks available from the ZIP bytes before JSZip constructs its entry table. */
+export function assertArchiveInputResourceLimits(
+  bytes: Uint8Array,
+  limits: Readonly<ArchiveResourceLimits>
+): void {
+  assertWithinLimit("maxInputBytes", bytes.byteLength, limits.maxInputBytes);
+
+  const declaredEntryCount = readDeclaredZipEntryCount(bytes);
+  if (declaredEntryCount === null) {
+    throw new Error(
+      "Invalid WebBlackbox archive: ZIP end-of-central-directory record is missing or outside the supported trailing-data window."
+    );
+  }
+
+  assertWithinLimit("maxEntryCount", declaredEntryCount, limits.maxEntryCount);
+}
+
+/** Uses declared central-directory sizes for early rejection; actual output is checked on read. */
+export function assertLoadedArchiveResourceLimits(
+  zip: JSZip,
+  limits: Readonly<ArchiveResourceLimits>
+): void {
+  const entries = Object.values(zip.files);
+  assertWithinLimit("maxEntryCount", entries.length, limits.maxEntryCount);
+
+  let totalUncompressedBytes = 0;
+
+  for (const entry of entries) {
+    if (entry.dir) {
+      continue;
+    }
+
+    const sizes = readZipEntrySizes(entry);
+    if (!sizes) {
+      throw new ArchiveResourceLimitError(
+        "maxEntryUncompressedBytes",
+        limits.maxEntryUncompressedBytes,
+        Number.POSITIVE_INFINITY,
+        `missing declared size metadata for '${entry.name}'`
+      );
+    }
+
+    assertWithinLimit(
+      "maxEntryUncompressedBytes",
+      sizes.uncompressedSize,
+      limits.maxEntryUncompressedBytes,
+      entry.name
+    );
+
+    totalUncompressedBytes = addWithoutOverflow(totalUncompressedBytes, sizes.uncompressedSize);
+    assertWithinLimit(
+      "maxTotalUncompressedBytes",
+      totalUncompressedBytes,
+      limits.maxTotalUncompressedBytes
+    );
+
+    const ratio = compressionRatio(sizes.uncompressedSize, sizes.compressedSize);
+    assertWithinLimit("maxCompressionRatio", ratio, limits.maxCompressionRatio, entry.name);
+  }
+}
+
+/** Tracks nested event-codec output and parsed event counts across one open operation. */
+export class ArchiveDecodeBudget {
+  private totalDecodedBytes = 0;
+
+  private totalEvents = 0;
+
+  private totalIndexRecords = 0;
+
+  private totalIndexEventReferences = 0;
+
+  public constructor(public readonly limits: Readonly<ArchiveResourceLimits>) {}
+
+  public assertDecodedSize(path: string, compressedBytes: number, decodedBytes: number): void {
+    assertWithinLimit("maxChunkDecodedBytes", decodedBytes, this.limits.maxChunkDecodedBytes, path);
+    assertWithinLimit(
+      "maxCompressionRatio",
+      compressionRatio(decodedBytes, compressedBytes),
+      this.limits.maxCompressionRatio,
+      path
+    );
+    assertWithinLimit(
+      "maxTotalDecodedBytes",
+      addWithoutOverflow(this.totalDecodedBytes, decodedBytes),
+      this.limits.maxTotalDecodedBytes
+    );
+  }
+
+  public commitDecoded(path: string, compressedBytes: number, decodedBytes: number): void {
+    this.assertDecodedSize(path, compressedBytes, decodedBytes);
+    this.totalDecodedBytes += decodedBytes;
+  }
+
+  public commitEvents(path: string, count: number): void {
+    const nextTotal = addWithoutOverflow(this.totalEvents, count);
+    assertWithinLimit("maxEventCount", nextTotal, this.limits.maxEventCount, path);
+    this.totalEvents = nextTotal;
+  }
+
+  public commitIndex(path: string, records: number, eventReferences: number): void {
+    const nextRecords = addWithoutOverflow(this.totalIndexRecords, records);
+    assertWithinLimit("maxIndexRecords", nextRecords, this.limits.maxIndexRecords, path);
+    const nextReferences = addWithoutOverflow(this.totalIndexEventReferences, eventReferences);
+    assertWithinLimit(
+      "maxIndexEventReferences",
+      nextReferences,
+      this.limits.maxIndexEventReferences,
+      path
+    );
+    this.totalIndexRecords = nextRecords;
+    this.totalIndexEventReferences = nextReferences;
+  }
+}
+
+function assertWithinLimit(
+  resource: ArchiveResourceName,
+  actual: number,
+  limit: number,
+  detail?: string
+): void {
+  if (!Number.isFinite(actual) || actual > limit) {
+    throw new ArchiveResourceLimitError(resource, limit, actual, detail);
+  }
+}
+
+function readZipEntrySizes(
+  entry: JSZip.JSZipObject
+): { compressedSize: number; uncompressedSize: number } | null {
+  // JSZip 3.x intentionally omits this loadAsync metadata from its public typings. Fail closed if
+  // a future implementation stops exposing the central-directory sizes before decompression.
+  const data = (
+    entry as JSZip.JSZipObject & {
+      _data?: { compressedSize?: unknown; uncompressedSize?: unknown };
+    }
+  )._data;
+  const compressedSize = data?.compressedSize;
+  const uncompressedSize = data?.uncompressedSize;
+
+  if (
+    typeof compressedSize !== "number" ||
+    !Number.isSafeInteger(compressedSize) ||
+    compressedSize < 0 ||
+    typeof uncompressedSize !== "number" ||
+    !Number.isSafeInteger(uncompressedSize) ||
+    uncompressedSize < 0
+  ) {
+    return null;
+  }
+
+  return { compressedSize, uncompressedSize };
+}
+
+function compressionRatio(uncompressedBytes: number, compressedBytes: number): number {
+  if (uncompressedBytes === 0) {
+    return 0;
+  }
+
+  if (compressedBytes === 0) {
+    return Number.POSITIVE_INFINITY;
+  }
+
+  return uncompressedBytes / compressedBytes;
+}
+
+function addWithoutOverflow(left: number, right: number): number {
+  const sum = left + right;
+  return Number.isSafeInteger(sum) ? sum : Number.POSITIVE_INFINITY;
+}
+
+function readDeclaredZipEntryCount(bytes: Uint8Array): number | null {
+  if (bytes.byteLength < ZIP_END_OF_CENTRAL_DIRECTORY_MIN_BYTES) {
+    return null;
+  }
+
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const searchStart = Math.max(
+    0,
+    bytes.byteLength - ZIP_END_OF_CENTRAL_DIRECTORY_MIN_BYTES - ZIP_MAX_COMMENT_BYTES
+  );
+
+  for (
+    let offset = bytes.byteLength - ZIP_END_OF_CENTRAL_DIRECTORY_MIN_BYTES;
+    offset >= searchStart;
+    offset -= 1
+  ) {
+    if (view.getUint32(offset, true) !== ZIP_END_OF_CENTRAL_DIRECTORY_SIGNATURE) {
+      continue;
+    }
+
+    const commentBytes = view.getUint16(offset + 20, true);
+    if (offset + ZIP_END_OF_CENTRAL_DIRECTORY_MIN_BYTES + commentBytes > bytes.byteLength) {
+      continue;
+    }
+
+    const entryCount = view.getUint16(offset + 10, true);
+    if (entryCount !== 0xffff) {
+      const centralDirectoryBytes = view.getUint32(offset + 12, true);
+      const centralDirectoryOffset = view.getUint32(offset + 16, true);
+      if (centralDirectoryOffset + centralDirectoryBytes > offset) {
+        continue;
+      }
+
+      const physicalCentralDirectoryOffset = offset - centralDirectoryBytes;
+      const archiveZero = physicalCentralDirectoryOffset - centralDirectoryOffset;
+      if (!Number.isSafeInteger(archiveZero) || archiveZero < 0) {
+        return Number.POSITIVE_INFINITY;
+      }
+
+      const physicalEntryCount = countPhysicalCentralDirectoryEntries(
+        view,
+        physicalCentralDirectoryOffset,
+        offset,
+        archiveZero
+      );
+      return physicalEntryCount === null
+        ? Number.POSITIVE_INFINITY
+        : Math.max(entryCount, physicalEntryCount);
+    }
+
+    const zip64 = readZip64CentralDirectory(view, offset);
+    if (!zip64) {
+      return Number.POSITIVE_INFINITY;
+    }
+
+    const physicalEntryCount = countPhysicalCentralDirectoryEntries(
+      view,
+      zip64.recordOffset - zip64.centralDirectoryBytes,
+      zip64.recordOffset,
+      zip64.recordOffset - zip64.centralDirectoryBytes - zip64.centralDirectoryOffset
+    );
+    return physicalEntryCount === null
+      ? Number.POSITIVE_INFINITY
+      : Math.max(zip64.entryCount, physicalEntryCount);
+  }
+
+  return null;
+}
+
+function countPhysicalCentralDirectoryEntries(
+  view: DataView,
+  centralDirectoryOffset: number,
+  centralDirectoryEnd: number,
+  archiveZero: number
+): number | null {
+  if (
+    !Number.isSafeInteger(centralDirectoryOffset) ||
+    !Number.isSafeInteger(centralDirectoryEnd) ||
+    !Number.isSafeInteger(archiveZero) ||
+    centralDirectoryOffset < 0 ||
+    centralDirectoryEnd > view.byteLength ||
+    archiveZero < 0
+  ) {
+    return null;
+  }
+
+  let count = 0;
+  let offset = centralDirectoryOffset;
+  const names = new Set<string>();
+
+  while (offset < centralDirectoryEnd) {
+    if (offset + 4 > centralDirectoryEnd) {
+      return null;
+    }
+
+    const signature = view.getUint32(offset, true);
+    if (signature === ZIP_CENTRAL_DIRECTORY_DIGITAL_SIGNATURE) {
+      if (offset + 6 > centralDirectoryEnd) {
+        return null;
+      }
+      offset += 6 + view.getUint16(offset + 4, true);
+      continue;
+    }
+    if (signature !== ZIP_CENTRAL_DIRECTORY_ENTRY_SIGNATURE || offset + 46 > centralDirectoryEnd) {
+      return null;
+    }
+
+    const fileNameBytes = view.getUint16(offset + 28, true);
+    const extraBytes = view.getUint16(offset + 30, true);
+    const commentBytes = view.getUint16(offset + 32, true);
+    const fileNameOffset = offset + 46;
+    const extraOffset = fileNameOffset + fileNameBytes;
+    const commentOffset = extraOffset + extraBytes;
+    const nextOffset = commentOffset + commentBytes;
+    if (nextOffset > centralDirectoryEnd) {
+      return null;
+    }
+
+    const fileName = readCanonicalArchiveEntryName(view, fileNameOffset, fileNameBytes);
+    const extraFields = readZipExtraFields(
+      view,
+      extraOffset,
+      extraBytes,
+      `central directory entry '${fileName}'`
+    );
+    if (names.has(fileName)) {
+      throw new Error(`Invalid WebBlackbox archive: duplicate ZIP entry '${fileName}'.`);
+    }
+    names.add(fileName);
+
+    const localHeaderOffset = readCentralDirectoryLocalHeaderOffset(view, offset, extraFields);
+    assertMatchingLocalFileHeader(
+      view,
+      archiveZero,
+      localHeaderOffset,
+      centralDirectoryOffset,
+      fileNameOffset,
+      fileNameBytes,
+      fileName
+    );
+
+    offset = nextOffset;
+    count += 1;
+  }
+
+  return offset === centralDirectoryEnd ? count : null;
+}
+
+function readZipExtraFields(
+  view: DataView,
+  extraOffset: number,
+  extraBytes: number,
+  location: string
+): Map<number, ZipExtraField> {
+  const extraEnd = extraOffset + extraBytes;
+  if (
+    !Number.isSafeInteger(extraOffset) ||
+    !Number.isSafeInteger(extraEnd) ||
+    extraOffset < 0 ||
+    extraEnd > view.byteLength
+  ) {
+    throw new Error(`Invalid WebBlackbox archive: malformed ZIP extra fields in ${location}.`);
+  }
+
+  const fields = new Map<number, ZipExtraField>();
+  let offset = extraOffset;
+  while (offset < extraEnd) {
+    if (offset + 4 > extraEnd) {
+      throw new Error(`Invalid WebBlackbox archive: malformed ZIP extra fields in ${location}.`);
+    }
+
+    const fieldId = view.getUint16(offset, true);
+    const fieldBytes = view.getUint16(offset + 2, true);
+    const dataOffset = offset + 4;
+    const nextOffset = dataOffset + fieldBytes;
+    if (nextOffset > extraEnd) {
+      throw new Error(`Invalid WebBlackbox archive: malformed ZIP extra fields in ${location}.`);
+    }
+    if (fieldId === ZIP_UNICODE_PATH_EXTRA_FIELD_ID) {
+      throw new Error(
+        `Invalid WebBlackbox archive: Unicode Path ZIP extra fields are not supported in ${location}.`
+      );
+    }
+
+    // JSZip retains the last field for duplicate IDs, so mirror that behavior for ZIP64 offsets.
+    fields.set(fieldId, { dataOffset, length: fieldBytes });
+    offset = nextOffset;
+  }
+
+  return fields;
+}
+
+function readCentralDirectoryLocalHeaderOffset(
+  view: DataView,
+  centralEntryOffset: number,
+  extraFields: ReadonlyMap<number, ZipExtraField>
+): number {
+  const localHeaderOffset = view.getUint32(centralEntryOffset + 42, true);
+  if (localHeaderOffset !== ZIP_UINT32_SENTINEL) {
+    return localHeaderOffset;
+  }
+
+  const zip64 = extraFields.get(ZIP64_EXTRA_FIELD_ID);
+  if (!zip64) {
+    throw new Error(
+      "Invalid WebBlackbox archive: ZIP64 local header offset is missing from the central directory."
+    );
+  }
+
+  let offset = zip64.dataOffset;
+  const end = zip64.dataOffset + zip64.length;
+  if (view.getUint32(centralEntryOffset + 24, true) === ZIP_UINT32_SENTINEL) {
+    offset = skipZip64Integer(offset, end, "uncompressed size");
+  }
+  if (view.getUint32(centralEntryOffset + 20, true) === ZIP_UINT32_SENTINEL) {
+    offset = skipZip64Integer(offset, end, "compressed size");
+  }
+  if (offset + 8 > end) {
+    throw new Error(
+      "Invalid WebBlackbox archive: malformed ZIP64 local header offset in the central directory."
+    );
+  }
+
+  const value = view.getBigUint64(offset, true);
+  if (value > BigInt(Number.MAX_SAFE_INTEGER)) {
+    return Number.POSITIVE_INFINITY;
+  }
+  return Number(value);
+}
+
+function skipZip64Integer(offset: number, end: number, field: string): number {
+  if (offset + 8 > end) {
+    throw new Error(
+      `Invalid WebBlackbox archive: malformed ZIP64 ${field} in the central directory.`
+    );
+  }
+  return offset + 8;
+}
+
+function assertMatchingLocalFileHeader(
+  view: DataView,
+  archiveZero: number,
+  localHeaderOffset: number,
+  centralDirectoryOffset: number,
+  centralFileNameOffset: number,
+  centralFileNameBytes: number,
+  fileName: string
+): void {
+  const physicalOffset = archiveZero + localHeaderOffset;
+  if (
+    !Number.isSafeInteger(physicalOffset) ||
+    physicalOffset < archiveZero ||
+    physicalOffset + 30 > centralDirectoryOffset ||
+    view.getUint32(physicalOffset, true) !== ZIP_LOCAL_FILE_HEADER_SIGNATURE
+  ) {
+    throw new Error(`Invalid WebBlackbox archive: invalid local ZIP header for '${fileName}'.`);
+  }
+
+  const localFileNameBytes = view.getUint16(physicalOffset + 26, true);
+  const localExtraBytes = view.getUint16(physicalOffset + 28, true);
+  const localFileNameOffset = physicalOffset + 30;
+  const localExtraOffset = localFileNameOffset + localFileNameBytes;
+  const localHeaderEnd = localExtraOffset + localExtraBytes;
+  if (!Number.isSafeInteger(localHeaderEnd) || localHeaderEnd > centralDirectoryOffset) {
+    throw new Error(`Invalid WebBlackbox archive: malformed local ZIP header for '${fileName}'.`);
+  }
+  if (
+    localFileNameBytes !== centralFileNameBytes ||
+    !equalBytes(view, localFileNameOffset, centralFileNameOffset, centralFileNameBytes)
+  ) {
+    throw new Error(
+      `Invalid WebBlackbox archive: local and central ZIP filenames differ for '${fileName}'.`
+    );
+  }
+
+  readZipExtraFields(
+    view,
+    localExtraOffset,
+    localExtraBytes,
+    `local file header for '${fileName}'`
+  );
+}
+
+function equalBytes(
+  view: DataView,
+  leftOffset: number,
+  rightOffset: number,
+  length: number
+): boolean {
+  for (let index = 0; index < length; index += 1) {
+    if (view.getUint8(leftOffset + index) !== view.getUint8(rightOffset + index)) {
+      return false;
+    }
+  }
+  return true;
+}
+
+function readCanonicalArchiveEntryName(
+  view: DataView,
+  fileNameOffset: number,
+  fileNameBytes: number
+): string {
+  if (fileNameBytes === 0) {
+    throw new Error("Invalid WebBlackbox archive: ZIP entries must have a name.");
+  }
+
+  let name = "";
+  for (let index = 0; index < fileNameBytes; index += 1) {
+    const byte = view.getUint8(fileNameOffset + index);
+    if (byte < 0x20 || byte > 0x7e) {
+      throw new Error(
+        "Invalid WebBlackbox archive: ZIP entry names must use canonical printable ASCII."
+      );
+    }
+    name += String.fromCharCode(byte);
+  }
+
+  if (name.includes("\\") || name.startsWith("/") || name.includes("//")) {
+    throw new Error(`Invalid WebBlackbox archive: non-canonical ZIP entry name '${name}'.`);
+  }
+
+  const path = name.endsWith("/") ? name.slice(0, -1) : name;
+  const segments = path.split("/");
+  if (
+    path.length === 0 ||
+    segments.some((segment) => segment === "" || segment === "." || segment === "..")
+  ) {
+    throw new Error(`Invalid WebBlackbox archive: non-canonical ZIP entry name '${name}'.`);
+  }
+
+  return name;
+}
+
+function readZip64CentralDirectory(
+  view: DataView,
+  eocdOffset: number
+): {
+  entryCount: number;
+  centralDirectoryBytes: number;
+  centralDirectoryOffset: number;
+  recordOffset: number;
+} | null {
+  const locatorOffset = eocdOffset - 20;
+  if (
+    locatorOffset < 0 ||
+    view.getUint32(locatorOffset, true) !== ZIP64_END_OF_CENTRAL_DIRECTORY_LOCATOR_SIGNATURE
+  ) {
+    return null;
+  }
+
+  const zip64OffsetBigInt = view.getBigUint64(locatorOffset + 8, true);
+  if (zip64OffsetBigInt > BigInt(Number.MAX_SAFE_INTEGER)) {
+    return {
+      entryCount: Number.POSITIVE_INFINITY,
+      centralDirectoryBytes: Number.POSITIVE_INFINITY,
+      centralDirectoryOffset: Number.POSITIVE_INFINITY,
+      recordOffset: 0
+    };
+  }
+
+  const zip64Offset = Number(zip64OffsetBigInt);
+  if (
+    zip64Offset < 0 ||
+    zip64Offset + 56 > view.byteLength ||
+    view.getUint32(zip64Offset, true) !== ZIP64_END_OF_CENTRAL_DIRECTORY_SIGNATURE
+  ) {
+    return null;
+  }
+
+  const entryCount = view.getBigUint64(zip64Offset + 32, true);
+  const centralDirectoryBytes = view.getBigUint64(zip64Offset + 40, true);
+  const centralDirectoryOffset = view.getBigUint64(zip64Offset + 48, true);
+  if (
+    entryCount > BigInt(Number.MAX_SAFE_INTEGER) ||
+    centralDirectoryBytes > BigInt(Number.MAX_SAFE_INTEGER) ||
+    centralDirectoryOffset > BigInt(Number.MAX_SAFE_INTEGER)
+  ) {
+    return {
+      entryCount: Number.POSITIVE_INFINITY,
+      centralDirectoryBytes: Number.POSITIVE_INFINITY,
+      centralDirectoryOffset: Number.POSITIVE_INFINITY,
+      recordOffset: zip64Offset
+    };
+  }
+
+  return {
+    entryCount: Number(entryCount),
+    centralDirectoryBytes: Number(centralDirectoryBytes),
+    centralDirectoryOffset: Number(centralDirectoryOffset),
+    recordOffset: zip64Offset
+  };
+}
+
+function formatNumber(value: number): string {
+  return Number.isFinite(value) ? String(Number(value.toFixed(2))) : "unbounded";
+}
diff --git a/packages/player-sdk/src/bounded-stream-reader.test.ts b/packages/player-sdk/src/bounded-stream-reader.test.ts
new file mode 100644
index 0000000..5e4fbe5
--- /dev/null
+++ b/packages/player-sdk/src/bounded-stream-reader.test.ts
@@ -0,0 +1,72 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { readBoundedReadableStream } from "./bounded-stream-reader.js";
+
+describe("bounded stream reader", () => {
+  it("cancels the reader when accumulated bytes exceed a limit", async () => {
+    const cancel = vi.fn();
+    const stream = new ReadableStream<Uint8Array>({
+      start(controller) {
+        controller.enqueue(new Uint8Array(4));
+        controller.enqueue(new Uint8Array(4));
+      },
+      cancel
+    });
+
+    await expect(
+      readBoundedReadableStream(stream, {
+        timeoutMs: 100,
+        detail: "resource-test",
+        maxBytes: 8,
+        validateTotalBytes(totalBytes) {
+          if (totalBytes > 6) {
+            throw new Error("decoded byte limit");
+          }
+        }
+      })
+    ).rejects.toThrow("decoded byte limit");
+    expect(cancel).toHaveBeenCalledOnce();
+  });
+
+  it("cancels a pending reader when decoding times out", async () => {
+    const cancel = vi.fn();
+    const stream = new ReadableStream<Uint8Array>({
+      pull() {
+        return new Promise<void>(() => undefined);
+      },
+      cancel
+    });
+
+    await expect(
+      readBoundedReadableStream(stream, {
+        timeoutMs: 5,
+        detail: "timeout-test",
+        maxBytes: 8,
+        validateTotalBytes() {}
+      })
+    ).rejects.toThrow(/timed out after 5ms/i);
+    expect(cancel).toHaveBeenCalledOnce();
+  });
+
+  it("rejects on time even when underlying cancellation never settles", async () => {
+    const cancel = vi.fn(() => new Promise<void>(() => undefined));
+    const stream = new ReadableStream<Uint8Array>({
+      pull() {
+        return new Promise<void>(() => undefined);
+      },
+      cancel
+    });
+    const startedAt = Date.now();
+
+    await expect(
+      readBoundedReadableStream(stream, {
+        timeoutMs: 5,
+        detail: "hanging-cancel-test",
+        maxBytes: 8,
+        validateTotalBytes() {}
+      })
+    ).rejects.toThrow(/timed out after 5ms/i);
+    expect(Date.now() - startedAt).toBeLessThan(500);
+    expect(cancel).toHaveBeenCalledOnce();
+  });
+});
diff --git a/packages/player-sdk/src/bounded-stream-reader.ts b/packages/player-sdk/src/bounded-stream-reader.ts
new file mode 100644
index 0000000..71c91f2
--- /dev/null
+++ b/packages/player-sdk/src/bounded-stream-reader.ts
@@ -0,0 +1,114 @@
+/** Raised when a codec stream does not complete within the configured open budget. */
+export class ArchiveDecodeTimeoutError extends Error {
+  public override readonly name = "ArchiveDecodeTimeoutError";
+
+  public constructor(
+    public readonly timeoutMs: number,
+    detail: string
+  ) {
+    super(`Archive decode timed out after ${timeoutMs}ms (${detail}).`);
+  }
+}
+
+/** Reads a web stream while validating growth and always cancels it on timeout or failure. */
+export async function readBoundedReadableStream(
+  stream: ReadableStream<Uint8Array>,
+  options: {
+    timeoutMs: number;
+    detail: string;
+    maxBytes: number;
+    validateTotalBytes: (totalBytes: number) => void;
+  }
+): Promise<Uint8Array> {
+  const reader = stream.getReader();
+  const accumulator = new StreamByteAccumulator(options.maxBytes);
+  let totalBytes = 0;
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  let cancellation: Promise<void> | undefined;
+  const timeoutError = new ArchiveDecodeTimeoutError(options.timeoutMs, options.detail);
+  const cancel = (reason: unknown) => {
+    cancellation ??= cancelReader(reader, reason);
+    return cancellation;
+  };
+
+  const readPromise = (async () => {
+    while (true) {
+      const { done, value } = await reader.read();
+
+      if (done) {
+        break;
+      }
+
+      if (!value) {
+        continue;
+      }
+
+      const chunk = value instanceof Uint8Array ? value : new Uint8Array(value);
+      totalBytes += chunk.byteLength;
+      options.validateTotalBytes(totalBytes);
+      accumulator.append(chunk);
+    }
+
+    return accumulator.bytes();
+  })();
+  const timeoutPromise = new Promise<Uint8Array>((_, reject) => {
+    timer = setTimeout(() => {
+      void cancel(timeoutError);
+      reject(timeoutError);
+    }, options.timeoutMs);
+  });
+
+  try {
+    return await Promise.race([readPromise, timeoutPromise]);
+  } catch (error) {
+    void cancel(error);
+    throw error;
+  } finally {
+    if (timer !== undefined) {
+      clearTimeout(timer);
+    }
+  }
+}
+
+class StreamByteAccumulator {
+  private output = new Uint8Array(0);
+
+  private length = 0;
+
+  public constructor(private readonly maxBytes: number) {}
+
+  public append(chunk: Uint8Array): void {
+    const nextLength = this.length + chunk.byteLength;
+    if (nextLength > this.maxBytes) {
+      throw new Error(`Bounded stream exceeded its allocation ceiling (${this.maxBytes} bytes).`);
+    }
+
+    if (nextLength > this.output.byteLength) {
+      const grownCapacity = Math.max(
+        nextLength,
+        Math.ceil(Math.max(1, this.output.byteLength) * 1.5)
+      );
+      const grown = new Uint8Array(Math.min(this.maxBytes, grownCapacity));
+      grown.set(this.output.subarray(0, this.length));
+      this.output = grown;
+    }
+
+    this.output.set(chunk, this.length);
+    this.length = nextLength;
+  }
+
+  public bytes(): Uint8Array {
+    return this.output.subarray(0, this.length);
+  }
+}
+
+async function cancelReader(
+  reader: ReadableStreamDefaultReader<Uint8Array>,
+  reason: unknown
+): Promise<void> {
+  try {
+    await reader.cancel(reason);
+  } catch {
+    // The original timeout/resource error is more useful than a secondary cancellation failure.
+  }
+}
diff --git a/packages/player-sdk/src/bounded-zip-reader.test.ts b/packages/player-sdk/src/bounded-zip-reader.test.ts
new file mode 100644
index 0000000..bba1863
--- /dev/null
+++ b/packages/player-sdk/src/bounded-zip-reader.test.ts
@@ -0,0 +1,219 @@
+import JSZip from "jszip";
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  assertArchiveInputResourceLimits,
+  assertLoadedArchiveResourceLimits,
+  resolveArchiveResourceLimits
+} from "./archive-resource-limits.js";
+import { BoundedZipReader } from "./bounded-zip-reader.js";
+
+describe("BoundedZipReader", () => {
+  it("counts actual inflater output when declared uncompressed sizes are forged", async () => {
+    const zip = new JSZip();
+    zip.file("bomb.bin", "x".repeat(2 * 1024 * 1024));
+    zip.file("safe.txt", "safe");
+    const source = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 9 }
+    });
+    forgeZipUncompressedSize(source, "bomb.bin", 1);
+
+    const loaded = await JSZip.loadAsync(source);
+    const limits = resolveArchiveResourceLimits({
+      maxEntryUncompressedBytes: 1024 * 1024,
+      maxTotalUncompressedBytes: 2 * 1024 * 1024
+    });
+    expect(() => assertLoadedArchiveResourceLimits(loaded, limits)).not.toThrow();
+
+    const reader = new BoundedZipReader(loaded, limits);
+    await expect(reader.read("bomb.bin")).rejects.toMatchObject({
+      name: "ArchiveResourceLimitError",
+      resource: "maxEntryUncompressedBytes"
+    });
+    await expect(reader.read("safe.txt")).resolves.toEqual(new TextEncoder().encode("safe"));
+  });
+
+  it("accepts a legitimate highly compressible first-party-sized entry by default", async () => {
+    const zip = new JSZip();
+    zip.file("blobs/sha256-repeat.bin", new Uint8Array(1024 * 1024));
+    const source = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 6 }
+    });
+    const loaded = await JSZip.loadAsync(source);
+    const limits = resolveArchiveResourceLimits();
+    const reader = new BoundedZipReader(loaded, limits);
+
+    await expect(reader.read("blobs/sha256-repeat.bin")).resolves.toHaveLength(1024 * 1024);
+  });
+
+  it("stops a transient read when its caller-specific byte budget is crossed", async () => {
+    const fullBytes = 2 * 1024 * 1024;
+    const callerLimit = 1024 * 1024;
+    const zip = new JSZip();
+    zip.file("large.bin", new Uint8Array(fullBytes));
+    const source = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 9 }
+    });
+    const loaded = await JSZip.loadAsync(source);
+    const reader = new BoundedZipReader(loaded, resolveArchiveResourceLimits());
+
+    const error = await reader
+      .readBounded("large.bin", callerLimit)
+      .catch((reason: unknown) => (reason instanceof Error ? reason : new Error(String(reason))));
+
+    expect(error).toMatchObject({
+      name: "ArchiveEntryReadLimitError",
+      limit: callerLimit
+    });
+    expect((error as Error & { actual: number }).actual).toBeGreaterThan(callerLimit);
+    expect((error as Error & { actual: number }).actual).toBeLessThan(fullBytes);
+  });
+
+  it("accounts concurrent distinct entries against one aggregate output budget", async () => {
+    const zip = new JSZip();
+    zip.file("left.bin", new Uint8Array(2 * 1024 * 1024));
+    zip.file("right.bin", new Uint8Array(2 * 1024 * 1024));
+    const source = await zip.generateAsync({ type: "uint8array", compression: "STORE" });
+    const loaded = await JSZip.loadAsync(source);
+    const limits = resolveArchiveResourceLimits({
+      maxEntryUncompressedBytes: 3 * 1024 * 1024,
+      maxTotalUncompressedBytes: 3 * 1024 * 1024
+    });
+    const reader = new BoundedZipReader(loaded, limits, true);
+
+    const results = await Promise.allSettled([reader.read("left.bin"), reader.read("right.bin")]);
+    expect(results.filter((result) => result.status === "fulfilled")).toHaveLength(1);
+    expect(results.filter((result) => result.status === "rejected")).toEqual([
+      expect.objectContaining({
+        reason: expect.objectContaining({ resource: "maxTotalUncompressedBytes" })
+      })
+    ]);
+  });
+
+  it("memoizes concurrent and subsequent reads of the same entry", async () => {
+    const zip = new JSZip();
+    zip.file("once.bin", new Uint8Array(256 * 1024));
+    const source = await zip.generateAsync({ type: "uint8array", compression: "DEFLATE" });
+    const loaded = await JSZip.loadAsync(source);
+    const file = loaded.file("once.bin") as JSZip.JSZipObject & {
+      internalStream: (type: "uint8array") => unknown;
+    };
+    const internalStream = vi.spyOn(file, "internalStream");
+    const reader = new BoundedZipReader(loaded, resolveArchiveResourceLimits(), true);
+
+    const [first, second, third] = await Promise.all([
+      reader.read("once.bin"),
+      reader.read("once.bin"),
+      reader.read("once.bin")
+    ]);
+    expect(first).toBe(second);
+    expect(second).toBe(third);
+    expect(internalStream).toHaveBeenCalledOnce();
+  });
+
+  it("deduplicates only in-flight reads when completed-result caching is disabled", async () => {
+    const zip = new JSZip();
+    zip.file("once.bin", new Uint8Array(256 * 1024));
+    const source = await zip.generateAsync({ type: "uint8array", compression: "DEFLATE" });
+    const loaded = await JSZip.loadAsync(source);
+    const file = loaded.file("once.bin") as JSZip.JSZipObject & {
+      internalStream: (type: "uint8array") => unknown;
+    };
+    const internalStream = vi.spyOn(file, "internalStream");
+    const reader = new BoundedZipReader(loaded, resolveArchiveResourceLimits(), false);
+
+    await Promise.all([reader.read("once.bin"), reader.read("once.bin")]);
+    expect(internalStream).toHaveBeenCalledOnce();
+    await reader.read("once.bin");
+    expect(internalStream).toHaveBeenCalledTimes(2);
+  });
+
+  it("counts physical central-directory records even when EOCD under-reports them", async () => {
+    const zip = new JSZip();
+    for (let index = 0; index < 6; index += 1) {
+      zip.file(`entry-${index}.txt`, "");
+    }
+    const source = await zip.generateAsync({ type: "uint8array" });
+    forgeEocdEntryCount(source, 1);
+
+    expect(() =>
+      assertArchiveInputResourceLimits(source, resolveArchiveResourceLimits({ maxEntryCount: 5 }))
+    ).toThrowError(expect.objectContaining({ resource: "maxEntryCount", actual: 6 }));
+  });
+
+  it("counts prepended archives using the physical central-directory location", async () => {
+    const zip = new JSZip();
+    for (let index = 0; index < 6; index += 1) {
+      zip.file(`entry-${index}.txt`, "");
+    }
+    const generated = await zip.generateAsync({ type: "uint8array" });
+    forgeEocdEntryCount(generated, 1);
+    const source = new Uint8Array(generated.byteLength + 128);
+    source.fill(0x41, 0, 128);
+    source.set(generated, 128);
+
+    expect(() =>
+      assertArchiveInputResourceLimits(source, resolveArchiveResourceLimits({ maxEntryCount: 5 }))
+    ).toThrowError(expect.objectContaining({ resource: "maxEntryCount", actual: 6 }));
+  });
+
+  it("fails closed before JSZip when trailing data hides the ZIP directory record", async () => {
+    const zip = new JSZip();
+    for (let index = 0; index < 6; index += 1) {
+      zip.file(`entry-${index}.txt`, "");
+    }
+    const generated = await zip.generateAsync({ type: "uint8array" });
+    forgeEocdEntryCount(generated, 1);
+    const source = new Uint8Array(generated.byteLength + 70 * 1024);
+    source.set(generated);
+
+    await expect(JSZip.loadAsync(source)).resolves.toBeInstanceOf(JSZip);
+    expect(() =>
+      assertArchiveInputResourceLimits(source, resolveArchiveResourceLimits({ maxEntryCount: 5 }))
+    ).toThrow(/end-of-central-directory.*supported trailing-data window/i);
+  });
+});
+
+function forgeZipUncompressedSize(bytes: Uint8Array, targetName: string, size: number): void {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const decoder = new TextDecoder();
+
+  for (let offset = 0; offset + 46 <= bytes.byteLength; offset += 1) {
+    const signature = view.getUint32(offset, true);
+    if (signature === 0x04034b50) {
+      const nameBytes = view.getUint16(offset + 26, true);
+      const name = decoder.decode(bytes.subarray(offset + 30, offset + 30 + nameBytes));
+      if (name === targetName) {
+        view.setUint32(offset + 22, size, true);
+      }
+    }
+    if (signature === 0x02014b50) {
+      const nameBytes = view.getUint16(offset + 28, true);
+      const name = decoder.decode(bytes.subarray(offset + 46, offset + 46 + nameBytes));
+      if (name === targetName) {
+        view.setUint32(offset + 24, size, true);
+      }
+    }
+  }
+}
+
+function forgeEocdEntryCount(bytes: Uint8Array, count: number): void {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  for (let offset = bytes.byteLength - 22; offset >= 0; offset -= 1) {
+    if (view.getUint32(offset, true) !== 0x06054b50) {
+      continue;
+    }
+
+    view.setUint16(offset + 8, count, true);
+    view.setUint16(offset + 10, count, true);
+    return;
+  }
+
+  throw new Error("Fixture ZIP is missing EOCD.");
+}
diff --git a/packages/player-sdk/src/bounded-zip-reader.ts b/packages/player-sdk/src/bounded-zip-reader.ts
new file mode 100644
index 0000000..677a745
--- /dev/null
+++ b/packages/player-sdk/src/bounded-zip-reader.ts
@@ -0,0 +1,401 @@
+import type JSZip from "jszip";
+
+import {
+  type ArchiveResourceLimits,
+  ArchiveResourceLimitError
+} from "./archive-resource-limits.js";
+import { ArchiveDecodeTimeoutError } from "./bounded-stream-reader.js";
+
+type JSZipWorker = {
+  error?: (reason: Error) => boolean;
+  resume?: () => boolean;
+  isFinished?: boolean;
+};
+
+type JSZipStreamHelper = {
+  _worker?: JSZipWorker;
+  on(event: "data", callback: (data: Uint8Array) => void): JSZipStreamHelper;
+  on(event: "error", callback: (error: Error) => void): JSZipStreamHelper;
+  on(event: "end", callback: () => void): JSZipStreamHelper;
+  pause(): JSZipStreamHelper;
+  resume(): JSZipStreamHelper;
+};
+
+type JSZipObjectWithInternals = JSZip.JSZipObject & {
+  internalStream?: (type: "uint8array") => JSZipStreamHelper;
+  _data?: {
+    compressedContent?: unknown;
+  };
+};
+
+type EntryState = {
+  bytes: number;
+  metadata: boolean;
+};
+
+/** Reads JSZip entries with limits based on actual inflater output instead of declared ZIP sizes. */
+export class BoundedZipReader {
+  private readonly budget: ZipOutputBudget;
+
+  private readonly reads = new Map<string, Promise<Uint8Array>>();
+
+  public constructor(
+    private readonly zip: JSZip,
+    private readonly limits: Readonly<ArchiveResourceLimits>,
+    private readonly cacheReads = true
+  ) {
+    this.budget = new ZipOutputBudget(limits);
+  }
+
+  public has(path: string): boolean {
+    return Boolean(this.zip.file(path));
+  }
+
+  public read(path: string): Promise<Uint8Array> {
+    const cached = this.reads.get(path);
+    if (cached) {
+      return cached;
+    }
+
+    const pending = this.readEntry(path);
+    this.reads.set(path, pending);
+    if (!this.cacheReads) {
+      void pending.then(
+        () => this.deleteRead(path, pending),
+        () => this.deleteRead(path, pending)
+      );
+    }
+    return pending;
+  }
+
+  /** Evicts a completed cached result after its caller no longer needs the inflated bytes. */
+  public release(path: string): void {
+    this.reads.delete(path);
+  }
+
+  /** @internal */
+  public readBounded(path: string, maxBytes: number): Promise<Uint8Array> {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0) {
+      throw new TypeError("Invalid archive entry read limit.");
+    }
+
+    return this.readEntry(path, Math.min(maxBytes, this.limits.maxEntryUncompressedBytes));
+  }
+
+  private deleteRead(path: string, pending: Promise<Uint8Array>): void {
+    if (this.reads.get(path) === pending) {
+      this.reads.delete(path);
+    }
+  }
+
+  private async readEntry(path: string, callerMaxBytes?: number): Promise<Uint8Array> {
+    const file = this.zip.file(path) as JSZipObjectWithInternals | null;
+    if (!file) {
+      throw new Error(`Archive is missing required file: ${path}`);
+    }
+    if (typeof file.internalStream !== "function") {
+      throw new Error("The installed JSZip runtime does not expose bounded entry streaming.");
+    }
+
+    const compressedBytes = readCompressedContentBytes(file);
+    if (compressedBytes === null) {
+      throw new Error(`Unable to determine compressed input size for archive entry '${path}'.`);
+    }
+
+    const helper = file.internalStream("uint8array");
+    const accumulator = new ByteAccumulator(
+      Math.min(
+        callerMaxBytes ?? this.limits.maxEntryUncompressedBytes,
+        this.limits.maxEntryUncompressedBytes
+      )
+    );
+    const metadata = isArchiveMetadataPath(path);
+    this.budget.begin(path, metadata);
+
+    return new Promise<Uint8Array>((resolve, reject) => {
+      let terminal = false;
+      let timer: ReturnType<typeof setTimeout> | undefined;
+
+      const clearTimer = () => {
+        if (timer !== undefined) {
+          clearTimeout(timer);
+          timer = undefined;
+        }
+      };
+      const stopWorker = (reason: Error) => {
+        try {
+          helper.pause();
+        } catch {
+          // Actual byte accounting already rejected the public promise; cleanup is best effort.
+        }
+        queueMicrotask(() => {
+          try {
+            const worker = helper._worker;
+            if (typeof worker?.error !== "function" || typeof worker.resume !== "function") {
+              return;
+            }
+
+            worker.error(reason);
+            if (!worker.isFinished) {
+              worker.resume();
+            }
+          } catch {
+            // JSZip's private worker API is pinned and used only to release work after rejection.
+          }
+        });
+      };
+      const fail = (error: unknown, stop = true) => {
+        if (terminal) {
+          return;
+        }
+
+        terminal = true;
+        clearTimer();
+        this.budget.abort(path);
+        const resolvedError = error instanceof Error ? error : new Error(String(error));
+        if (stop) {
+          stopWorker(resolvedError);
+        }
+        reject(resolvedError);
+      };
+
+      try {
+        helper
+          .on("data", (chunk) => {
+            if (terminal) {
+              return;
+            }
+
+            try {
+              const nextBytes = accumulator.length + chunk.byteLength;
+              if (callerMaxBytes !== undefined && nextBytes > callerMaxBytes) {
+                throw new ArchiveEntryReadLimitError(path, callerMaxBytes, nextBytes);
+              }
+              this.budget.progress(path, compressedBytes, nextBytes);
+              accumulator.append(chunk);
+            } catch (error) {
+              fail(error);
+            }
+          })
+          .on("error", (error) => {
+            fail(error, false);
+          })
+          .on("end", () => {
+            if (terminal) {
+              return;
+            }
+
+            try {
+              this.budget.commit(path, compressedBytes, accumulator.length);
+              terminal = true;
+              clearTimer();
+              resolve(accumulator.bytes());
+            } catch (error) {
+              fail(error, false);
+            }
+          });
+
+        timer = setTimeout(() => {
+          fail(new ArchiveDecodeTimeoutError(this.limits.decodeTimeoutMs, `ZIP entry '${path}'`));
+        }, this.limits.decodeTimeoutMs);
+        helper.resume();
+      } catch (error) {
+        fail(error, false);
+      }
+    });
+  }
+}
+
+class ZipOutputBudget {
+  private readonly committed = new Map<string, EntryState>();
+
+  private readonly inFlight = new Map<string, EntryState>();
+
+  private committedBytes = 0;
+
+  private committedMetadataBytes = 0;
+
+  public constructor(private readonly limits: Readonly<ArchiveResourceLimits>) {}
+
+  public begin(path: string, metadata: boolean): void {
+    if (!this.inFlight.has(path)) {
+      this.inFlight.set(path, { bytes: 0, metadata });
+    }
+  }
+
+  public progress(path: string, compressedBytes: number, actualBytes: number): void {
+    const state = this.inFlight.get(path);
+    if (!state) {
+      throw new Error(`Archive ZIP budget was not initialized for '${path}'.`);
+    }
+
+    assertLimit(
+      "maxEntryUncompressedBytes",
+      actualBytes,
+      this.limits.maxEntryUncompressedBytes,
+      path
+    );
+    if (state.metadata) {
+      assertLimit("maxMetadataEntryBytes", actualBytes, this.limits.maxMetadataEntryBytes, path);
+    }
+    assertLimit(
+      "maxCompressionRatio",
+      compressionRatio(actualBytes, compressedBytes),
+      this.limits.maxCompressionRatio,
+      path
+    );
+
+    const alreadyCommitted = this.committed.has(path);
+    const otherInFlightBytes = sumUncommittedEntryBytes(this.inFlight, this.committed, path);
+    assertLimit(
+      "maxTotalUncompressedBytes",
+      this.committedBytes + otherInFlightBytes + (alreadyCommitted ? 0 : actualBytes),
+      this.limits.maxTotalUncompressedBytes
+    );
+
+    if (state.metadata) {
+      const otherMetadataBytes = sumUncommittedMetadataBytes(this.inFlight, this.committed, path);
+      assertLimit(
+        "maxTotalMetadataBytes",
+        this.committedMetadataBytes + otherMetadataBytes + (alreadyCommitted ? 0 : actualBytes),
+        this.limits.maxTotalMetadataBytes
+      );
+    }
+
+    state.bytes = actualBytes;
+  }
+
+  public commit(path: string, compressedBytes: number, actualBytes: number): void {
+    this.progress(path, compressedBytes, actualBytes);
+    const state = this.inFlight.get(path);
+    this.inFlight.delete(path);
+
+    if (!state || this.committed.has(path)) {
+      return;
+    }
+
+    this.committed.set(path, { ...state });
+    this.committedBytes += state.bytes;
+    if (state.metadata) {
+      this.committedMetadataBytes += state.bytes;
+    }
+  }
+
+  public abort(path: string): void {
+    this.inFlight.delete(path);
+  }
+}
+
+class ByteAccumulator {
+  private output = new Uint8Array(0);
+
+  public length = 0;
+
+  public constructor(private readonly maxBytes: number) {}
+
+  public append(chunk: Uint8Array): void {
+    const nextLength = this.length + chunk.byteLength;
+    if (nextLength > this.output.byteLength) {
+      const nextCapacity = Math.min(
+        this.maxBytes,
+        Math.max(nextLength, Math.max(1, this.output.byteLength) * 2)
+      );
+      const grown = new Uint8Array(nextCapacity);
+      grown.set(this.output.subarray(0, this.length));
+      this.output = grown;
+    }
+
+    this.output.set(chunk, this.length);
+    this.length = nextLength;
+  }
+
+  public bytes(): Uint8Array {
+    return this.output.byteLength === this.length ? this.output : this.output.slice(0, this.length);
+  }
+}
+
+function readCompressedContentBytes(file: JSZipObjectWithInternals): number | null {
+  const content = file._data?.compressedContent;
+  if (typeof content === "string" || Array.isArray(content)) {
+    return content.length;
+  }
+  if (
+    content instanceof ArrayBuffer ||
+    (typeof SharedArrayBuffer !== "undefined" && content instanceof SharedArrayBuffer)
+  ) {
+    return content.byteLength;
+  }
+  if (ArrayBuffer.isView(content)) {
+    return content.byteLength;
+  }
+  return null;
+}
+
+function isArchiveMetadataPath(path: string): boolean {
+  return (
+    path === "manifest.json" ||
+    path === "integrity/hashes.json" ||
+    path.startsWith("index/") ||
+    path === "privacy/manifest.json"
+  );
+}
+
+function sumUncommittedEntryBytes(
+  entries: Map<string, EntryState>,
+  committed: Map<string, EntryState>,
+  currentPath: string
+): number {
+  let total = 0;
+  for (const [path, entry] of entries) {
+    if (path === currentPath || committed.has(path)) {
+      continue;
+    }
+    total += entry.bytes;
+  }
+  return total;
+}
+
+function sumUncommittedMetadataBytes(
+  entries: Map<string, EntryState>,
+  committed: Map<string, EntryState>,
+  currentPath: string
+): number {
+  let total = 0;
+  for (const [path, entry] of entries) {
+    if (path !== currentPath && !committed.has(path) && entry.metadata) {
+      total += entry.bytes;
+    }
+  }
+  return total;
+}
+
+function compressionRatio(uncompressedBytes: number, compressedBytes: number): number {
+  if (uncompressedBytes === 0) {
+    return 0;
+  }
+  return compressedBytes === 0 ? Number.POSITIVE_INFINITY : uncompressedBytes / compressedBytes;
+}
+
+function assertLimit(
+  resource: keyof ArchiveResourceLimits,
+  actual: number,
+  limit: number,
+  detail?: string
+): void {
+  if (!Number.isFinite(actual) || actual > limit) {
+    throw new ArchiveResourceLimitError(resource, limit, actual, detail);
+  }
+}
+
+/** @internal */
+export class ArchiveEntryReadLimitError extends Error {
+  public override readonly name = "ArchiveEntryReadLimitError";
+
+  public constructor(
+    public readonly path: string,
+    public readonly limit: number,
+    public readonly actual: number
+  ) {
+    super(`Archive entry '${path}' exceeds its read limit (${actual} > ${limit}).`);
+  }
+}
diff --git a/packages/player-sdk/src/index.test.ts b/packages/player-sdk/src/index.test.ts
index 479e58f..326642b 100644
--- a/packages/player-sdk/src/index.test.ts
+++ b/packages/player-sdk/src/index.test.ts
@@ -1,11 +1,44 @@
 import * as zlib from "node:zlib";
 import JSZip from "jszip";
+import { DiagnosticCategory, ModuleKind, ScriptTarget, transpileModule } from "typescript";
 import { describe, expect, it, vi } from "vitest";
 
 import type { ChunkTimeIndexEntry, ExportManifest, WebBlackboxEvent } from "@webblackbox/protocol";
 
 import { WebBlackboxPlayer } from "./index.js";
 
+type HarExportLimits = Parameters<WebBlackboxPlayer["exportHarWithLimits"]>[1];
+
+const FIXTURE_BLOB_HASH = fixtureBlobHash(1);
+const FIXTURE_PNG_HASH = fixtureBlobHash(2);
+const FIXTURE_BIN_HASH = fixtureBlobHash(3);
+const RICH_BODY_HASH = fixtureBlobHash(4);
+const RICH_CPU_HASH = fixtureBlobHash(5);
+const RICH_HEAP_HASH = fixtureBlobHash(6);
+const RICH_DOM_FIRST_HASH = fixtureBlobHash(7);
+const RICH_DOM_SECOND_HASH = fixtureBlobHash(8);
+const LITE_DOM_FIRST_HASH = fixtureBlobHash(9);
+const LITE_DOM_SECOND_HASH = fixtureBlobHash(10);
+
+function fixtureBlobHash(value: number): string {
+  return value.toString(16).padStart(64, "0");
+}
+
+function expectValidTypeScript(source: string): void {
+  const result = transpileModule(source, {
+    compilerOptions: {
+      module: ModuleKind.ESNext,
+      target: ScriptTarget.ES2022
+    },
+    reportDiagnostics: true
+  });
+  const errors = result.diagnostics?.filter(
+    (diagnostic) => diagnostic.category === DiagnosticCategory.Error
+  );
+
+  expect(errors).toEqual([]);
+}
+
 describe("WebBlackboxPlayer", () => {
   it("opens archive and supports query/search/getBlob", async () => {
     const bytes = await createFixtureArchive();
@@ -49,11 +82,27 @@ describe("WebBlackboxPlayer", () => {
     const searchResults = player.search("api");
     expect(searchResults[0]?.eventId).toBe("E-3");
 
-    const blob = await player.getBlob("blob1");
+    const blob = await player.getBlob(FIXTURE_BLOB_HASH);
     expect(blob?.mime).toBe("image/webp");
     expect(Array.from(blob?.bytes ?? [])).toEqual([1, 2, 3]);
   });
 
+  it("memoizes lazy blob work without exposing mutable cached bytes", async () => {
+    const player = await WebBlackboxPlayer.open(await createFixtureArchive());
+    const first = await player.getBlob(FIXTURE_BLOB_HASH);
+    const second = await player.getBlob(FIXTURE_BLOB_HASH);
+
+    expect(first?.bytes).not.toBe(second?.bytes);
+    if (!first || !second) {
+      throw new Error("Missing fixture blob.");
+    }
+    first.bytes[0] = 99;
+    expect(Array.from(second.bytes)).toEqual([1, 2, 3]);
+    await expect(player.getBlob(FIXTURE_BLOB_HASH)).resolves.toMatchObject({
+      bytes: Uint8Array.from([1, 2, 3])
+    });
+  });
+
   it("builds an explainable privacy protection report", async () => {
     const bytes = await createPrivacyFixtureArchive();
     const player = await WebBlackboxPlayer.open(bytes);
@@ -76,6 +125,107 @@ describe("WebBlackboxPlayer", () => {
     expect(preview.samples.some((sample) => sample.snippet.includes("…"))).toBe(true);
   });
 
+  it("does not promote incomplete or legacy scanner coverage to passed", async () => {
+    const source = await createPrivacyFixtureArchive();
+    const incompleteZip = await JSZip.loadAsync(source);
+    incompleteZip.file(
+      "privacy/manifest.json",
+      JSON.stringify({
+        schemaVersion: 1,
+        generatedAt: new Date(0).toISOString(),
+        categories: [],
+        scanner: {
+          scannedAt: new Date(0).toISOString(),
+          preEncryption: true,
+          status: "passed",
+          findings: [],
+          coverage: {
+            complete: false,
+            scannedEventCount: 0,
+            scannedBlobCount: 0,
+            opaqueBlobCount: 0,
+            inspectedBytes: 0,
+            incompleteReason: "deadline"
+          }
+        },
+        encryption: { archive: "plaintext" },
+        totals: { events: 1, blobs: 0, privacyViolations: 0 }
+      })
+    );
+    await writeIntegrityManifest(incompleteZip);
+    const incompletePlayer = await WebBlackboxPlayer.open(
+      await incompleteZip.generateAsync({ type: "uint8array" })
+    );
+
+    expect(incompletePlayer.getPrivacyProtectionReport().scanner).toMatchObject({
+      status: "unknown",
+      coverage: {
+        complete: false,
+        incompleteReason: "deadline"
+      }
+    });
+
+    const legacyZip = await JSZip.loadAsync(source);
+    legacyZip.file(
+      "privacy/manifest.json",
+      JSON.stringify({
+        schemaVersion: 1,
+        generatedAt: new Date(0).toISOString(),
+        categories: [],
+        scanner: {
+          scannedAt: new Date(0).toISOString(),
+          preEncryption: true,
+          status: "passed",
+          findings: []
+        },
+        encryption: { archive: "plaintext" },
+        totals: { events: 1, blobs: 0, privacyViolations: 0 }
+      })
+    );
+    await writeIntegrityManifest(legacyZip);
+    const legacyPlayer = await WebBlackboxPlayer.open(
+      await legacyZip.generateAsync({ type: "uint8array" })
+    );
+
+    expect(legacyPlayer.getPrivacyProtectionReport().scanner).toEqual({
+      preEncryption: true,
+      status: "unknown",
+      findingCount: 0,
+      coverage: null
+    });
+  });
+
+  it("rejects complete scanner coverage whose counts contradict archive totals", async () => {
+    const zip = await JSZip.loadAsync(await createPrivacyFixtureArchive());
+    zip.file(
+      "privacy/manifest.json",
+      JSON.stringify({
+        schemaVersion: 1,
+        generatedAt: new Date(0).toISOString(),
+        categories: [],
+        scanner: {
+          scannedAt: new Date(0).toISOString(),
+          preEncryption: true,
+          status: "passed",
+          findings: [],
+          coverage: {
+            complete: true,
+            scannedEventCount: 999,
+            scannedBlobCount: 999,
+            opaqueBlobCount: 0,
+            inspectedBytes: 0
+          }
+        },
+        encryption: { archive: "plaintext" },
+        totals: { events: 1, blobs: 0, privacyViolations: 0 }
+      })
+    );
+    await writeIntegrityManifest(zip);
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+
+    await expect(WebBlackboxPlayer.open(bytes)).rejects.toThrow(/coverage exceeds archive totals/i);
+  });
+
   it("supports range-preloaded open via time index chunks", async () => {
     const bytes = await createTwoChunkFixtureArchive();
     const player = await WebBlackboxPlayer.open(bytes, {
@@ -102,6 +252,111 @@ describe("WebBlackboxPlayer", () => {
     expect(fromBlob.events.length).toBeGreaterThan(0);
   });
 
+  it("enforces input-byte limits at the boundary before reading Blob contents", async () => {
+    const bytes = await createFixtureArchive();
+
+    await expect(
+      WebBlackboxPlayer.open(bytes, {
+        resourceLimits: { maxInputBytes: bytes.byteLength }
+      })
+    ).resolves.toBeInstanceOf(WebBlackboxPlayer);
+
+    const blob = new Blob([toArrayBuffer(bytes)]);
+    const arrayBufferSpy = vi.spyOn(blob, "arrayBuffer");
+    await expect(
+      WebBlackboxPlayer.open(blob, {
+        resourceLimits: { maxInputBytes: bytes.byteLength - 1 }
+      })
+    ).rejects.toMatchObject({
+      name: "ArchiveResourceLimitError",
+      resource: "maxInputBytes"
+    });
+    expect(arrayBufferSpy).not.toHaveBeenCalled();
+  });
+
+  it("enforces event-count limits at the exact boundary", async () => {
+    const bytes = await createFixtureArchive();
+
+    await expect(
+      WebBlackboxPlayer.open(bytes, {
+        resourceLimits: { maxEventCount: 5 }
+      })
+    ).resolves.toBeInstanceOf(WebBlackboxPlayer);
+    await expect(
+      WebBlackboxPlayer.open(bytes, {
+        resourceLimits: { maxEventCount: 4 }
+      })
+    ).rejects.toMatchObject({
+      name: "ArchiveResourceLimitError",
+      resource: "maxEventCount",
+      actual: 5
+    });
+  });
+
+  it("stops before parsing later NDJSON lines after the event budget is exhausted", async () => {
+    const source = await createFixtureArchive();
+    const zip = await JSZip.loadAsync(source);
+    const eventFile = zip.file("events/chunk-000001.ndjson");
+    if (!eventFile) {
+      throw new Error("Missing fixture event chunk.");
+    }
+    const lines = (await eventFile.async("string")).split("\n");
+    zip.file("events/chunk-000001.ndjson", `${lines[0]}\n${lines[1]}\n{ malformed`);
+    await writeIntegrityHashes(zip);
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+
+    await expect(
+      WebBlackboxPlayer.open(bytes, {
+        resourceLimits: { maxEventCount: 1 }
+      })
+    ).rejects.toMatchObject({
+      name: "ArchiveResourceLimitError",
+      resource: "maxEventCount",
+      actual: 2
+    });
+  });
+
+  it("applies compression-ratio limits to nested event codecs", async () => {
+    const bytes = await createCompressedCodecArchive("gzip");
+
+    await expect(
+      WebBlackboxPlayer.open(bytes, {
+        resourceLimits: { maxCompressionRatio: 1 }
+      })
+    ).rejects.toMatchObject({
+      name: "ArchiveResourceLimitError",
+      resource: "maxCompressionRatio"
+    });
+  });
+
+  it("applies the same output limit to the Node codec fallback", async () => {
+    const bytes = await createCompressedCodecArchive("gzip");
+    const originalDecompressionStream = globalThis.DecompressionStream;
+
+    Object.defineProperty(globalThis, "DecompressionStream", {
+      configurable: true,
+      writable: true,
+      value: undefined
+    });
+
+    try {
+      await expect(
+        WebBlackboxPlayer.open(bytes, {
+          resourceLimits: { maxCompressionRatio: 1 }
+        })
+      ).rejects.toMatchObject({
+        name: "ArchiveResourceLimitError",
+        resource: "maxCompressionRatio"
+      });
+    } finally {
+      Object.defineProperty(globalThis, "DecompressionStream", {
+        configurable: true,
+        writable: true,
+        value: originalDecompressionStream
+      });
+    }
+  });
+
   it("opens plain archives without global Web Crypto when Node crypto is available", async () => {
     const bytes = await createFixtureArchive();
     const originalCrypto = (globalThis as unknown as { crypto?: Crypto }).crypto;
@@ -133,46 +388,64 @@ describe("WebBlackboxPlayer", () => {
   it("infers blob mime types by extension and rejects empty blob hashes", async () => {
     const fixture = await createFixtureArchive();
     const zip = await JSZip.loadAsync(fixture);
-    zip.file("blobs/sha256-blobpng.png", Uint8Array.from([9]));
-    zip.file("blobs/sha256-blobbin.bin", Uint8Array.from([8]));
+    zip.file(`blobs/sha256-${FIXTURE_PNG_HASH}.png`, Uint8Array.from([9]));
+    zip.file(`blobs/sha256-${FIXTURE_BIN_HASH}.bin`, Uint8Array.from([8]));
     await writeIntegrityManifest(zip);
     const bytes = await zip.generateAsync({ type: "uint8array" });
     const player = await WebBlackboxPlayer.open(bytes);
 
     await expect(player.getBlob("   ")).resolves.toBeNull();
-    await expect(player.getBlob("blobpng")).resolves.toEqual(
+    await expect(player.getBlob(FIXTURE_PNG_HASH)).resolves.toEqual(
       expect.objectContaining({
         mime: "image/png"
       })
     );
-    await expect(player.getBlob("blobbin")).resolves.toEqual(
+    await expect(player.getBlob(FIXTURE_BIN_HASH)).resolves.toEqual(
       expect.objectContaining({
         mime: "application/octet-stream"
       })
     );
   });
 
-  it("parses chunks lazily when queried", async () => {
+  it("reads bounded blobs transiently without retaining them in the Player cache", async () => {
+    const player = await WebBlackboxPlayer.open(await createFixtureArchive());
+    const blobReads = (player as unknown as { blobReads: Map<string, unknown> }).blobReads;
+
+    await expect(player.readBlobTransient(FIXTURE_BLOB_HASH, 1024)).resolves.toMatchObject({
+      mime: "image/webp"
+    });
+    expect(blobReads.size).toBe(0);
+
+    await expect(player.readBlobTransient(FIXTURE_BLOB_HASH, 1)).rejects.toMatchObject({
+      name: "ArchiveEntryReadLimitError",
+      limit: 1
+    });
+    expect(blobReads.size).toBe(0);
+  });
+
+  it("rejects malformed event chunks while opening the archive", async () => {
     const bytes = await createLazyParseFixtureArchive();
-    const player = await WebBlackboxPlayer.open(bytes);
 
-    expect(
-      player.query({
-        range: {
-          monoStart: 0,
-          monoEnd: 50
-        }
-      })
-    ).toEqual([expect.objectContaining({ id: "E-L-1" })]);
+    await expect(WebBlackboxPlayer.open(bytes)).rejects.toThrow(/chunk-000002.*malformed JSON/i);
+  });
 
-    expect(() =>
-      player.query({
-        range: {
-          monoStart: 90,
-          monoEnd: 120
-        }
-      })
-    ).toThrow(/chunk-000002/i);
+  it.each([
+    { path: "manifest.json", marker: "https://example.com" },
+    { path: "index/time.json", marker: "chunk-000001" },
+    { path: "events/chunk-000001.ndjson", marker: "https://example.com" }
+  ])("rejects invalid UTF-8 in $path", async ({ path, marker }) => {
+    const zip = await JSZip.loadAsync(await createFixtureArchive());
+    const file = zip.file(path);
+    if (!file) {
+      throw new Error(`Missing fixture archive path '${path}'.`);
+    }
+    const content = await file.async("uint8array");
+    replaceFirstByteSequence(content, new TextEncoder().encode(marker), 0xff);
+    zip.file(path, content);
+    await writeIntegrityHashes(zip);
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+
+    await expect(WebBlackboxPlayer.open(bytes)).rejects.toThrow(/invalid UTF-8/i);
   });
 
   it("memoizes full-range queries and derived analyzers", async () => {
@@ -185,7 +458,7 @@ describe("WebBlackboxPlayer", () => {
       const parseCountAfterFirstRead = parseSpy.mock.calls.length;
 
       expect(firstEvents.length).toBeGreaterThan(0);
-      expect(parseCountAfterFirstRead).toBe(firstEvents.length);
+      expect(parseCountAfterFirstRead).toBe(0);
 
       const secondEvents = player.events;
       const firstDerived = player.buildDerived();
@@ -214,6 +487,23 @@ describe("WebBlackboxPlayer", () => {
     const player = await WebBlackboxPlayer.open(bytes);
     heapSamples.push(process.memoryUsage().heapUsed);
 
+    const waterfallSpy = vi.spyOn(player, "getNetworkWaterfall");
+    try {
+      await expect(
+        player.exportHarWithLimits(undefined, createHarExportLimits({ maxEntries: 1 }))
+      ).rejects.toMatchObject({
+        name: "HarExportResourceLimitError",
+        resource: "maxEntries",
+        limit: 1,
+        actual: 2,
+        completedEntries: 0,
+        bodyBytesRead: 0
+      });
+      expect(waterfallSpy).not.toHaveBeenCalled();
+    } finally {
+      waterfallSpy.mockRestore();
+    }
+
     const searchResults = player.search("large-session-checkpoint", 25);
     heapSamples.push(process.memoryUsage().heapUsed);
     const networkWaterfall = player.getNetworkWaterfall();
@@ -227,8 +517,8 @@ describe("WebBlackboxPlayer", () => {
     heapSamples.push(process.memoryUsage().heapUsed);
     const domSnapshots = player.getDomSnapshots();
     heapSamples.push(process.memoryUsage().heapUsed);
-    const firstScreenshot = await player.getBlob("large-shot-0000");
-    const firstResponseBody = await player.getBlob("large-body-0000");
+    const firstScreenshot = await player.getBlob(fixtureBlobHash(200_000));
+    const firstResponseBody = await player.getBlob(fixtureBlobHash(100_000));
     heapSamples.push(process.memoryUsage().heapUsed);
     const heapPeak = Math.max(...heapSamples);
     const heapBaseline = Math.min(...heapSamples);
@@ -259,6 +549,35 @@ describe("WebBlackboxPlayer", () => {
     }
   });
 
+  it("opens a normally DEFLATE-compressed exporter-sized ZIP under default limits", async () => {
+    const source = await createFixtureArchive();
+    const zip = await JSZip.loadAsync(source);
+    const bytes = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 6 }
+    });
+
+    const player = await WebBlackboxPlayer.open(bytes);
+    expect(player.events).toHaveLength(5);
+  });
+
+  it("opens a legitimate highly compressible exporter blob under default limits", async () => {
+    const zip = await JSZip.loadAsync(await createFixtureArchive());
+    zip.file(`blobs/sha256-${FIXTURE_BLOB_HASH}.webp`, new Uint8Array(1024 * 1024));
+    await writeIntegrityHashes(zip);
+    const bytes = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 6 }
+    });
+
+    const player = await WebBlackboxPlayer.open(bytes);
+    await expect(player.getBlob(FIXTURE_BLOB_HASH)).resolves.toMatchObject({
+      bytes: expect.objectContaining({ byteLength: 1024 * 1024 })
+    });
+  });
+
   it("opens encrypted archives when passphrase is provided", async () => {
     const bytes = await createEncryptedArchive(await createFixtureArchive(), "test-passphrase");
 
@@ -270,7 +589,7 @@ describe("WebBlackboxPlayer", () => {
 
     expect(player.query({ types: ["network.request"] })).toHaveLength(1);
 
-    const blob = await player.getBlob("blob1");
+    const blob = await player.getBlob(FIXTURE_BLOB_HASH);
     expect(Array.from(blob?.bytes ?? [])).toEqual([1, 2, 3]);
   });
 
@@ -298,6 +617,202 @@ describe("WebBlackboxPlayer", () => {
     }
   });
 
+  it("rejects plaintext archives that claim encryption with an empty file map", async () => {
+    const bytes = await rewriteArchiveManifest(await createFixtureArchive(), (manifest) => {
+      manifest.encryption = createEncryptionMetadata({});
+    });
+
+    await expect(WebBlackboxPlayer.open(bytes, { passphrase: "test-passphrase" })).rejects.toThrow(
+      /schema validation|at least one private file/i
+    );
+  });
+
+  it("rejects encrypted archives with incomplete private-file metadata", async () => {
+    const bytes = await rewriteArchiveManifest(await createFixtureArchive(), (manifest) => {
+      manifest.encryption = createEncryptionMetadata({
+        "events/chunk-000001.ndjson": {
+          ivBase64: toBase64(randomBytes(12))
+        }
+      });
+    });
+
+    await expect(WebBlackboxPlayer.open(bytes, { passphrase: "test-passphrase" })).rejects.toThrow(
+      /missing file metadata for 'index\/time\.json'/i
+    );
+  });
+
+  it("rejects encrypted archives that reuse an AES-GCM initialization vector", async () => {
+    const bytes = await rewriteArchiveManifest(
+      await createEncryptedArchive(await createFixtureArchive(), "test-passphrase"),
+      (manifest) => {
+        const encryption = manifest.encryption;
+        const reused = encryption?.files["index/time.json"];
+
+        if (!encryption || !reused) {
+          throw new Error("Missing encrypted fixture metadata");
+        }
+
+        encryption.files["events/chunk-000001.ndjson"] = { ...reused };
+      }
+    );
+
+    await expect(WebBlackboxPlayer.open(bytes, { passphrase: "test-passphrase" })).rejects.toThrow(
+      /reuses an initialization vector/i
+    );
+  });
+
+  it("rejects unsupported and unsafe archive encryption parameters", async () => {
+    const mutations: Array<(encryption: Record<string, unknown>) => void> = [
+      (encryption) => {
+        encryption.algorithm = "AES-CBC";
+      },
+      (encryption) => {
+        const kdf = encryption.kdf as Record<string, unknown>;
+        kdf.name = "scrypt";
+      },
+      (encryption) => {
+        const kdf = encryption.kdf as Record<string, unknown>;
+        kdf.hash = "SHA-1";
+      },
+      (encryption) => {
+        const kdf = encryption.kdf as Record<string, unknown>;
+        kdf.iterations = 1;
+      },
+      (encryption) => {
+        const kdf = encryption.kdf as Record<string, unknown>;
+        kdf.iterations = 10_000_000;
+      },
+      (encryption) => {
+        const kdf = encryption.kdf as Record<string, unknown>;
+        kdf.saltBase64 = "invalid-salt";
+      },
+      (encryption) => {
+        const files = encryption.files as Record<string, { ivBase64: string }>;
+        files["events/chunk-000001.ndjson"] = { ivBase64: "invalid-iv" };
+      }
+    ];
+
+    for (const mutate of mutations) {
+      const bytes = await rewriteArchiveManifest(await createFixtureArchive(), (manifest) => {
+        const encryption = createEncryptionMetadata({
+          "events/chunk-000001.ndjson": {
+            ivBase64: toBase64(randomBytes(12))
+          }
+        }) as unknown as Record<string, unknown>;
+        mutate(encryption);
+        manifest.encryption = encryption as unknown as ExportManifest["encryption"];
+      });
+
+      await expect(
+        WebBlackboxPlayer.open(bytes, { passphrase: "test-passphrase" })
+      ).rejects.toThrow(/schema validation/i);
+    }
+  });
+
+  it("rejects schema-invalid archived events during open", async () => {
+    const zip = await JSZip.loadAsync(await createFixtureArchive());
+    const path = "events/chunk-000001.ndjson";
+    const events = JSON.parse(
+      `[${(await zip.file(path)!.async("string")).split("\n").join(",")}]`
+    ) as WebBlackboxEvent[];
+    const request = events.find((event) => event.type === "network.request");
+
+    if (!request) {
+      throw new Error("Missing network request fixture event");
+    }
+
+    request.data = {};
+    zip.file(path, events.map((event) => JSON.stringify(event)).join("\n"));
+    await writeIntegrityManifest(zip);
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+
+    await expect(WebBlackboxPlayer.open(bytes)).rejects.toThrow(
+      /event line 3 failed schema validation/i
+    );
+  });
+
+  it("rejects invalid chunk sequences, chunk mappings, and index event references", async () => {
+    const invalidSequenceZip = await JSZip.loadAsync(await createFixtureArchive());
+    const timeIndex = JSON.parse(
+      await invalidSequenceZip.file("index/time.json")!.async("string")
+    ) as ChunkTimeIndexEntry[];
+
+    if (!timeIndex[0]) {
+      throw new Error("Missing time-index fixture entry");
+    }
+
+    timeIndex[0].seq = 0;
+    invalidSequenceZip.file("index/time.json", JSON.stringify(timeIndex));
+    await writeIntegrityHashes(invalidSequenceZip);
+    const invalidSequenceBytes = await invalidSequenceZip.generateAsync({ type: "uint8array" });
+
+    await expect(WebBlackboxPlayer.open(invalidSequenceBytes)).rejects.toThrow(
+      /index\/time\.json failed schema validation/i
+    );
+
+    const invalidChunkMapZip = await JSZip.loadAsync(await createFixtureArchive());
+    const invalidChunkMap = JSON.parse(
+      await invalidChunkMapZip.file("index/time.json")!.async("string")
+    ) as ChunkTimeIndexEntry[];
+
+    if (!invalidChunkMap[0]) {
+      throw new Error("Missing time-index fixture entry");
+    }
+
+    invalidChunkMap[0].chunkId = "chunk-does-not-exist";
+    invalidChunkMapZip.file("index/time.json", JSON.stringify(invalidChunkMap));
+    await writeIntegrityHashes(invalidChunkMapZip);
+    const invalidChunkMapBytes = await invalidChunkMapZip.generateAsync({ type: "uint8array" });
+
+    await expect(WebBlackboxPlayer.open(invalidChunkMapBytes)).rejects.toThrow(
+      /time index is missing event chunk|does not match archive event chunks/i
+    );
+
+    const unknownReferenceZip = await JSZip.loadAsync(await createFixtureArchive());
+    unknownReferenceZip.file(
+      "index/req.json",
+      JSON.stringify([{ reqId: "R-1", eventIds: ["E-does-not-exist"] }])
+    );
+    await writeIntegrityHashes(unknownReferenceZip);
+    const unknownReferenceBytes = await unknownReferenceZip.generateAsync({ type: "uint8array" });
+
+    await expect(WebBlackboxPlayer.open(unknownReferenceBytes)).rejects.toThrow(
+      /index references an unknown event id/i
+    );
+  });
+
+  it("rejects independently valid chunk ranges that regress across a chunk boundary", async () => {
+    const zip = await JSZip.loadAsync(await createTwoChunkFixtureArchive());
+    const timeIndex = JSON.parse(
+      await zip.file("index/time.json")!.async("string")
+    ) as ChunkTimeIndexEntry[];
+    const second = timeIndex[1];
+
+    if (!second) {
+      throw new Error("Missing second time-index fixture entry");
+    }
+
+    second.monoStart = 5;
+    zip.file("index/time.json", JSON.stringify(timeIndex));
+    await writeIntegrityHashes(zip);
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+
+    await expect(WebBlackboxPlayer.open(bytes)).rejects.toThrow(
+      /monotonic ranges move backwards between chunks/i
+    );
+  });
+
+  it("rejects schema-invalid privacy manifests", async () => {
+    const zip = await JSZip.loadAsync(await createFixtureArchive());
+    zip.file("privacy/manifest.json", JSON.stringify({ schemaVersion: 999 }));
+    await writeIntegrityManifest(zip);
+    const bytes = await zip.generateAsync({ type: "uint8array" });
+
+    await expect(WebBlackboxPlayer.open(bytes)).rejects.toThrow(
+      /privacy\/manifest\.json failed schema validation/i
+    );
+  });
+
   it("fails encrypted archive open when Web Crypto API is unavailable", async () => {
     const bytes = await createEncryptedArchive(await createFixtureArchive(), "test-passphrase");
     const originalCrypto = (globalThis as unknown as { crypto?: Crypto }).crypto;
@@ -329,13 +844,9 @@ describe("WebBlackboxPlayer", () => {
     await expect(WebBlackboxPlayer.open(bytes)).rejects.toThrow("integrity/hashes.json");
   });
 
-  it("does not resolve blobs that omit the sha256- prefix in path names", async () => {
+  it("rejects blobs that omit the sha256- prefix in path names", async () => {
     const bytes = await createArchiveWithDeprecatedBlobPath();
-    const player = await WebBlackboxPlayer.open(bytes);
-
-    await expect(player.getBlob("blob1")).resolves.toBeNull();
-    await expect(player.getBlob("sha256-blob1")).resolves.toBeNull();
-    await expect(player.getBlob("blobs/blob1.webp")).resolves.toBeNull();
+    await expect(WebBlackboxPlayer.open(bytes)).rejects.toThrow(/invalid blob path/i);
   });
 
   it("rejects archives with tampered manifest contents", async () => {
@@ -354,12 +865,32 @@ describe("WebBlackboxPlayer", () => {
   it("rejects tampered blobs on demand", async () => {
     const bytes = await tamperArchiveFile(
       await createFixtureArchive(),
-      "blobs/sha256-blob1.webp",
+      `blobs/sha256-${FIXTURE_BLOB_HASH}.webp`,
       Uint8Array.from([9, 9, 9, 9])
     );
     const player = await WebBlackboxPlayer.open(bytes);
 
-    await expect(player.getBlob("blob1")).rejects.toThrow(/integrity mismatch/i);
+    await expect(player.getBlob(FIXTURE_BLOB_HASH)).rejects.toThrow(/integrity mismatch/i);
+  });
+
+  it("applies actual ZIP output limits to lazily loaded blobs", async () => {
+    const zip = await JSZip.loadAsync(await createFixtureArchive());
+    zip.file(`blobs/sha256-${FIXTURE_BLOB_HASH}.webp`, new Uint8Array(2 * 1024 * 1024));
+    await writeIntegrityHashes(zip);
+    const bytes = await zip.generateAsync({
+      type: "uint8array",
+      compression: "DEFLATE",
+      compressionOptions: { level: 9 }
+    });
+    forgeZipEntryUncompressedSize(bytes, `blobs/sha256-${FIXTURE_BLOB_HASH}.webp`, 1);
+
+    const player = await WebBlackboxPlayer.open(bytes, {
+      resourceLimits: { maxEntryUncompressedBytes: 1024 * 1024 }
+    });
+    await expect(player.getBlob(FIXTURE_BLOB_HASH)).rejects.toMatchObject({
+      name: "ArchiveResourceLimitError",
+      resource: "maxEntryUncompressedBytes"
+    });
   });
 
   it("rejects archives with undeclared event chunks", async () => {
@@ -517,27 +1048,112 @@ describe("WebBlackboxPlayer", () => {
     expect(waterfall).toHaveLength(1);
     expect(waterfall[0]?.reqId).toBe("R-1");
     expect(waterfall[0]?.status).toBe(200);
-    expect(waterfall[0]?.responseBodyHash).toBe("blob-body-1");
+    expect(waterfall[0]?.responseBodyHash).toBe(RICH_BODY_HASH);
 
     const curl = player.generateCurl("R-1");
-    expect(curl).toContain("curl 'https://example.com/api'");
-    expect(curl).toContain("-X POST");
+    expect(curl).toContain("curl --url 'https://example.com/api'");
+    expect(curl).toContain("-X 'POST'");
 
     const fetchSnippet = player.generateFetch("R-1");
     expect(fetchSnippet).toContain("await fetch");
     expect(fetchSnippet).toContain("https://example.com/api");
 
-    const har = JSON.parse(player.exportHar()) as {
+    const har = JSON.parse(await player.exportHar()) as {
       log: {
         entries: Array<{
           request: { method: string };
-          response: { status: number };
+          response: {
+            status: number;
+            content: { text?: string; encoding?: string; mimeType: string; size: number };
+          };
         }>;
       };
     };
     expect(har.log.entries).toHaveLength(1);
     expect(har.log.entries[0]?.request.method).toBe("POST");
     expect(har.log.entries[0]?.response.status).toBe(200);
+    expect(har.log.entries[0]?.response.content).toMatchObject({
+      mimeType: "application/json",
+      size: 11,
+      text: '{"ok":true}'
+    });
+    expect(har.log.entries[0]?.response.content.encoding).toBeUndefined();
+  });
+
+  it("accounts the exact outer JSON-string encoding for bounded HAR output", async () => {
+    const player = await WebBlackboxPlayer.open(await createRichFixtureArchive());
+    const getBlobSpy = vi.spyOn(player, "getBlob");
+    const querySpy = vi.spyOn(player, "query");
+
+    try {
+      const generousLimits = createHarExportLimits();
+      const har = await player.exportHarWithLimits(undefined, generousLimits);
+      const exactEncodedBytes = Buffer.byteLength(JSON.stringify(har), "utf8");
+
+      await expect(
+        player.exportHarWithLimits(undefined, {
+          ...generousLimits,
+          maxEncodedBytes: exactEncodedBytes
+        })
+      ).resolves.toBe(har);
+      await expect(
+        player.exportHarWithLimits(undefined, {
+          ...generousLimits,
+          maxEncodedBytes: exactEncodedBytes - 1
+        })
+      ).rejects.toMatchObject({
+        name: "HarExportResourceLimitError",
+        resource: "maxEncodedBytes",
+        limit: exactEncodedBytes - 1
+      });
+      expect(getBlobSpy).not.toHaveBeenCalled();
+      expect(querySpy).not.toHaveBeenCalled();
+    } finally {
+      getBlobSpy.mockRestore();
+      querySpy.mockRestore();
+    }
+  });
+
+  it("rejects query-field explosions before deriving HAR parameter objects", async () => {
+    const query = Array.from({ length: 1_025 }, (_, index) => `field${index}=x`).join("&");
+    const player = await WebBlackboxPlayer.open(
+      await createRichFixtureArchive("POST", `https://example.com/api?${query}`)
+    );
+    const getBlobSpy = vi.spyOn(player, "getBlob");
+
+    try {
+      await expect(
+        player.exportHarWithLimits(undefined, createHarExportLimits())
+      ).rejects.toMatchObject({
+        name: "HarExportResourceLimitError",
+        resource: "maxDerivedFields",
+        limit: 1_024,
+        actual: 1_025,
+        completedEntries: 0,
+        bodyBytesRead: 0
+      });
+      expect(getBlobSpy).not.toHaveBeenCalled();
+    } finally {
+      getBlobSpy.mockRestore();
+    }
+  });
+
+  it("shell-quotes untrusted HTTP methods in generated curl commands", async () => {
+    const bytes = await createRichFixtureArchive("get`id`");
+    const player = await WebBlackboxPlayer.open(bytes);
+    const curl = player.generateCurl("R-1");
+
+    expect(curl).toContain("-X 'GET`ID`'");
+    expect(curl).not.toContain("-X GET`ID`");
+  });
+
+  it("binds dash-leading request URLs to curl's URL option", async () => {
+    const bytes = await createRichFixtureArchive("GET", "--config");
+    const player = await WebBlackboxPlayer.open(bytes);
+    const curl = player.generateCurl("R-1");
+
+    expect(curl?.split("\n", 1)[0]).toBe("curl --url '--config' \\");
+    expect(curl).not.toMatch(/^curl\s+'--config'/);
   });
 
   it("builds storage timeline, report, and playwright script", async () => {
@@ -586,9 +1202,20 @@ describe("WebBlackboxPlayer", () => {
     expect(mockScript).toContain("context.route(");
     expect(mockScript).toContain("route.fulfill");
 
+    const untrustedName = "replay');\nthrow new Error('injected')\u2029//";
+    const namedScript = player.generatePlaywrightScript({ name: untrustedName });
+    const namedMockScript = await player.generatePlaywrightMockScript({
+      name: untrustedName,
+      maxMocks: 5
+    });
+    expect(namedScript).toContain(`test("replay');\\nthrow new Error('injected')\\u2029//"`);
+    expect(namedMockScript).toContain(`test("replay');\\nthrow new Error('injected')\\u2029//"`);
+    expectValidTypeScript(namedScript);
+    expectValidTypeScript(namedMockScript);
+
     const domSnapshots = player.getDomSnapshots();
     expect(domSnapshots).toHaveLength(2);
-    expect(domSnapshots[0]?.contentHash).toBe("dom-hash-1");
+    expect(domSnapshots[0]?.contentHash).toBe(RICH_DOM_FIRST_HASH);
 
     const domDiff = await player.compareDomSnapshots("E-18", "E-19");
     expect(domDiff).not.toBeNull();
@@ -602,7 +1229,7 @@ describe("WebBlackboxPlayer", () => {
   it("diffs lite DOM snapshots stored as HTML blobs", async () => {
     const bytes = await createLiteDomFixtureArchive();
     const player = await WebBlackboxPlayer.open(bytes);
-    const blob = await player.getBlob("dom-lite-1");
+    const blob = await player.getBlob(LITE_DOM_FIRST_HASH);
 
     expect(blob?.mime).toBe("text/html");
 
@@ -657,7 +1284,10 @@ async function createFixtureArchive(): Promise<Uint8Array> {
       mono: 1,
       type: "meta.session.start",
       id: "E-1",
-      data: {}
+      data: {
+        url: "https://example.com",
+        mode: "full"
+      }
     },
     {
       v: 1,
@@ -684,7 +1314,9 @@ async function createFixtureArchive(): Promise<Uint8Array> {
         act: "A-1"
       },
       data: {
-        url: "https://example.com/api"
+        reqId: "R-1",
+        url: "https://example.com/api",
+        method: "GET"
       }
     },
     {
@@ -700,6 +1332,7 @@ async function createFixtureArchive(): Promise<Uint8Array> {
         act: "A-1"
       },
       data: {
+        reqId: "R-1",
         status: 200
       }
     },
@@ -747,7 +1380,7 @@ async function createFixtureArchive(): Promise<Uint8Array> {
   zip.file("index/req.json", JSON.stringify([{ reqId: "R-1", eventIds: ["E-3", "E-4"] }]));
   zip.file("index/inv.json", JSON.stringify([{ term: "api", eventIds: ["E-3"] }]));
   zip.file("events/chunk-000001.ndjson", events.map((event) => JSON.stringify(event)).join("\n"));
-  zip.file("blobs/sha256-blob1.webp", new Uint8Array([1, 2, 3]));
+  zip.file(`blobs/sha256-${FIXTURE_BLOB_HASH}.webp`, new Uint8Array([1, 2, 3]));
 
   await writeIntegrityManifest(zip);
 
@@ -816,6 +1449,8 @@ async function createPrivacyFixtureArchive(): Promise<Uint8Array> {
       id: "E-privacy-1",
       data: {
         reqId: "R-privacy",
+        url: "https://privacy.example.test/api",
+        method: "GET",
         headers: {
           authorization: hashed,
           "x-api-key": "[REDACTED]"
@@ -894,7 +1529,7 @@ async function createLargePressureArchive(): Promise<Uint8Array> {
     const mono = index * 125 + 10;
     const actionId = `A-large-${index.toString().padStart(4, "0")}`;
     const reqId = `R-large-${index.toString().padStart(4, "0")}`;
-    const bodyHash = `large-body-${index.toString().padStart(4, "0")}`;
+    const bodyHash = fixtureBlobHash(100_000 + index);
     const eventIds: string[] = [];
 
     const clickId = `E-large-${index.toString().padStart(4, "0")}-click`;
@@ -999,7 +1634,7 @@ async function createLargePressureArchive(): Promise<Uint8Array> {
     invertedIndex[0]?.eventIds.push(consoleId);
 
     if (index % 12 === 0) {
-      const shotHash = `large-shot-${index.toString().padStart(4, "0")}`;
+      const shotHash = fixtureBlobHash(200_000 + index);
       events.push({
         v: 1,
         sid,
@@ -1526,7 +2161,10 @@ async function createArchiveWithDeprecatedBlobPath(): Promise<Uint8Array> {
   return zip.generateAsync({ type: "uint8array" });
 }
 
-async function createRichFixtureArchive(): Promise<Uint8Array> {
+async function createRichFixtureArchive(
+  requestMethod = "POST",
+  requestUrl = "https://example.com/api"
+): Promise<Uint8Array> {
   const zip = new JSZip();
   const events: WebBlackboxEvent[] = [
     {
@@ -1570,8 +2208,8 @@ async function createRichFixtureArchive(): Promise<Uint8Array> {
       data: {
         requestId: "R-1",
         request: {
-          method: "POST",
-          url: "https://example.com/api",
+          method: requestMethod,
+          url: requestUrl,
           headers: {
             "content-type": "application/json",
             authorization: "Bearer token"
@@ -1594,6 +2232,7 @@ async function createRichFixtureArchive(): Promise<Uint8Array> {
       data: {
         requestId: "R-1",
         response: {
+          url: requestUrl,
           status: 200,
           statusText: "OK",
           mimeType: "application/json",
@@ -1616,7 +2255,7 @@ async function createRichFixtureArchive(): Promise<Uint8Array> {
       },
       data: {
         reqId: "R-1",
-        contentHash: "blob-body-1",
+        contentHash: RICH_BODY_HASH,
         size: 42
       }
     },
@@ -1732,7 +2371,7 @@ async function createRichFixtureArchive(): Promise<Uint8Array> {
       id: "E-18",
       data: {
         snapshotId: "D-1",
-        contentHash: "dom-hash-1",
+        contentHash: RICH_DOM_FIRST_HASH,
         source: "cdp",
         nodeCount: 5,
         reason: "interval"
@@ -1748,7 +2387,7 @@ async function createRichFixtureArchive(): Promise<Uint8Array> {
       id: "E-19",
       data: {
         snapshotId: "D-2",
-        contentHash: "dom-hash-2",
+        contentHash: RICH_DOM_SECOND_HASH,
         source: "cdp",
         nodeCount: 5,
         reason: "freeze:error"
@@ -1763,7 +2402,7 @@ async function createRichFixtureArchive(): Promise<Uint8Array> {
       type: "perf.cpu.profile",
       id: "E-20",
       data: {
-        profileHash: "cpu-hash-1",
+        profileHash: RICH_CPU_HASH,
         size: 128,
         reason: "freeze:error"
       }
@@ -1777,7 +2416,7 @@ async function createRichFixtureArchive(): Promise<Uint8Array> {
       type: "perf.heap.snapshot",
       id: "E-21",
       data: {
-        snapshotHash: "heap-hash-1",
+        snapshotHash: RICH_HEAP_HASH,
         size: 256,
         reason: "freeze:error"
       }
@@ -1816,16 +2455,16 @@ async function createRichFixtureArchive(): Promise<Uint8Array> {
   );
   zip.file("index/inv.json", JSON.stringify([{ term: "unexpected", eventIds: ["E-16"] }]));
   zip.file("events/chunk-000001.ndjson", events.map((event) => JSON.stringify(event)).join("\n"));
-  zip.file("blobs/sha256-blob1.webp", new Uint8Array([1, 2, 3]));
-  zip.file("blobs/sha256-blob-body-1.json", new TextEncoder().encode('{"ok":true}'));
-  zip.file("blobs/sha256-cpu-hash-1.json", new TextEncoder().encode('{"nodes":[]}'));
-  zip.file("blobs/sha256-heap-hash-1.json", new TextEncoder().encode('{"snapshot":true}'));
+  zip.file(`blobs/sha256-${FIXTURE_BLOB_HASH}.webp`, new Uint8Array([1, 2, 3]));
+  zip.file(`blobs/sha256-${RICH_BODY_HASH}.json`, new TextEncoder().encode('{"ok":true}'));
+  zip.file(`blobs/sha256-${RICH_CPU_HASH}.json`, new TextEncoder().encode('{"nodes":[]}'));
+  zip.file(`blobs/sha256-${RICH_HEAP_HASH}.json`, new TextEncoder().encode('{"snapshot":true}'));
   zip.file(
-    "blobs/sha256-dom-hash-1.json",
+    `blobs/sha256-${RICH_DOM_FIRST_HASH}.json`,
     new TextEncoder().encode(JSON.stringify(createDomSnapshotPayload(["DIV", "P"])))
   );
   zip.file(
-    "blobs/sha256-dom-hash-2.json",
+    `blobs/sha256-${RICH_DOM_SECOND_HASH}.json`,
     new TextEncoder().encode(JSON.stringify(createDomSnapshotPayload(["DIV", "SPAN"])))
   );
 
@@ -1857,7 +2496,7 @@ async function createLiteDomFixtureArchive(): Promise<Uint8Array> {
       id: "E-lite-1",
       data: {
         snapshotId: "D-lite-1",
-        contentHash: "dom-lite-1",
+        contentHash: LITE_DOM_FIRST_HASH,
         source: "html",
         nodeCount: 3,
         reason: "interval"
@@ -1873,7 +2512,7 @@ async function createLiteDomFixtureArchive(): Promise<Uint8Array> {
       id: "E-lite-2",
       data: {
         snapshotId: "D-lite-2",
-        contentHash: "dom-lite-2",
+        contentHash: LITE_DOM_SECOND_HASH,
         source: "html",
         nodeCount: 4,
         reason: "interval"
@@ -1911,11 +2550,11 @@ async function createLiteDomFixtureArchive(): Promise<Uint8Array> {
   zip.file("index/inv.json", JSON.stringify([]));
   zip.file("events/chunk-000001.ndjson", events.map((event) => JSON.stringify(event)).join("\n"));
   zip.file(
-    "blobs/sha256-dom-lite-1.html",
+    `blobs/sha256-${LITE_DOM_FIRST_HASH}.html`,
     new TextEncoder().encode("<html><body><div><p></p></div></body></html>")
   );
   zip.file(
-    "blobs/sha256-dom-lite-2.html",
+    `blobs/sha256-${LITE_DOM_SECOND_HASH}.html`,
     new TextEncoder().encode("<html><body><div><span></span><a></a></div></body></html>")
   );
 
@@ -1934,7 +2573,27 @@ async function tamperArchiveFile(
   return zip.generateAsync({ type: "uint8array" });
 }
 
+function replaceFirstByteSequence(
+  target: Uint8Array,
+  sequence: Uint8Array,
+  replacement: number
+): void {
+  for (let offset = 0; offset <= target.byteLength - sequence.byteLength; offset += 1) {
+    if (sequence.every((value, index) => target[offset + index] === value)) {
+      target[offset] = replacement;
+      return;
+    }
+  }
+
+  throw new Error("Fixture byte sequence was not found.");
+}
+
 async function writeIntegrityManifest(zip: JSZip): Promise<void> {
+  await synchronizePlainArchiveMetadata(zip);
+  await writeIntegrityHashes(zip);
+}
+
+async function writeIntegrityHashes(zip: JSZip): Promise<void> {
   const fileHashes: Record<string, string> = {};
 
   for (const path of Object.keys(zip.files).sort()) {
@@ -1964,6 +2623,108 @@ async function writeIntegrityManifest(zip: JSZip): Promise<void> {
   );
 }
 
+async function synchronizePlainArchiveMetadata(zip: JSZip): Promise<void> {
+  const manifestFile = zip.file("manifest.json");
+  const timeIndexFile = zip.file("index/time.json");
+
+  if (!manifestFile || !timeIndexFile) {
+    return;
+  }
+
+  const manifest = JSON.parse(await manifestFile.async("string")) as ExportManifest;
+
+  if (manifest.encryption) {
+    return;
+  }
+
+  const currentTimeIndex = JSON.parse(await timeIndexFile.async("string")) as ChunkTimeIndexEntry[];
+  const currentByChunkId = new Map(currentTimeIndex.map((entry) => [entry.chunkId, entry]));
+  const eventPaths = Object.keys(zip.files)
+    .filter((path) => /^events\/.+\.ndjson$/.test(path))
+    .sort();
+  const timeIndex: ChunkTimeIndexEntry[] = [];
+
+  for (const [pathIndex, path] of eventPaths.entries()) {
+    const chunkId = /^events\/(.+)\.ndjson$/.exec(path)?.[1];
+    const file = zip.file(path);
+
+    if (!chunkId || !file) {
+      continue;
+    }
+
+    const bytes = await file.async("uint8array");
+    const current = currentByChunkId.get(chunkId);
+    const codec = current?.codec ?? manifest.chunkCodec;
+    let events: WebBlackboxEvent[] | null = null;
+
+    try {
+      const decoded = decompressFixtureChunk(bytes, codec);
+      events = new TextDecoder()
+        .decode(decoded)
+        .split(/\r?\n/)
+        .filter((line) => line.trim().length > 0)
+        .map((line) => JSON.parse(line) as WebBlackboxEvent);
+    } catch {
+      // Malformed fixture chunks retain their explicit bounds so rejection is tested by the reader.
+    }
+
+    const first = events?.[0];
+    const last = events?.[events.length - 1];
+
+    timeIndex.push({
+      chunkId,
+      seq: current?.seq ?? pathIndex + 1,
+      tStart: first?.t ?? current?.tStart ?? 0,
+      tEnd: last?.t ?? current?.tEnd ?? 0,
+      monoStart: first?.mono ?? current?.monoStart ?? 0,
+      monoEnd: last?.mono ?? current?.monoEnd ?? 0,
+      eventCount: events?.length ?? current?.eventCount ?? 1,
+      byteLength: bytes.byteLength,
+      codec,
+      sha256: await sha256HexForTest(bytes)
+    });
+  }
+
+  manifest.stats = {
+    ...manifest.stats,
+    eventCount: timeIndex.reduce((total, entry) => total + entry.eventCount, 0),
+    chunkCount: timeIndex.length,
+    blobCount: Object.entries(zip.files).filter(
+      ([path, file]) => path.startsWith("blobs/") && !file.dir
+    ).length
+  };
+
+  zip.file("manifest.json", JSON.stringify(manifest));
+  zip.file("index/time.json", JSON.stringify(timeIndex));
+}
+
+function decompressFixtureChunk(
+  bytes: Uint8Array,
+  codec: ChunkTimeIndexEntry["codec"]
+): Uint8Array {
+  if (codec === "gzip") {
+    return toUint8Array(zlib.gunzipSync(bytes));
+  }
+
+  if (codec === "br") {
+    return toUint8Array(zlib.brotliDecompressSync(bytes));
+  }
+
+  if (codec === "zst") {
+    const zstdDecompressSync = (
+      zlib as unknown as { zstdDecompressSync?: (input: Uint8Array) => Uint8Array }
+    ).zstdDecompressSync;
+
+    if (typeof zstdDecompressSync !== "function") {
+      throw new Error("zstd decompression is unavailable in this runtime");
+    }
+
+    return toUint8Array(zstdDecompressSync(bytes));
+  }
+
+  return bytes;
+}
+
 async function sha256HexForTest(bytes: Uint8Array): Promise<string> {
   const digest = await crypto.subtle.digest("SHA-256", toArrayBuffer(bytes));
   return [...new Uint8Array(digest)].map((value) => value.toString(16).padStart(2, "0")).join("");
@@ -1992,6 +2753,39 @@ function createDomSnapshotPayload(bodyChildren: string[]): Record<string, unknow
   };
 }
 
+function createEncryptionMetadata(
+  files: Record<string, { ivBase64: string }>
+): NonNullable<ExportManifest["encryption"]> {
+  return {
+    algorithm: "AES-GCM",
+    kdf: {
+      name: "PBKDF2",
+      hash: "SHA-256",
+      iterations: 120_000,
+      saltBase64: toBase64(randomBytes(16))
+    },
+    files
+  };
+}
+
+async function rewriteArchiveManifest(
+  source: Uint8Array,
+  mutate: (manifest: ExportManifest) => void
+): Promise<Uint8Array> {
+  const zip = await JSZip.loadAsync(source);
+  const file = zip.file("manifest.json");
+
+  if (!file) {
+    throw new Error("Missing fixture archive manifest");
+  }
+
+  const manifest = JSON.parse(await file.async("string")) as ExportManifest;
+  mutate(manifest);
+  zip.file("manifest.json", JSON.stringify(manifest));
+  await writeIntegrityHashes(zip);
+  return zip.generateAsync({ type: "uint8array" });
+}
+
 async function createEncryptedArchive(source: Uint8Array, passphrase: string): Promise<Uint8Array> {
   const zip = await JSZip.loadAsync(source);
   const manifestFile = zip.file("manifest.json");
@@ -2140,3 +2934,40 @@ function toArrayBuffer(bytes: Uint8Array): ArrayBuffer {
   copy.set(bytes);
   return copy.buffer;
 }
+
+function forgeZipEntryUncompressedSize(bytes: Uint8Array, targetName: string, size: number): void {
+  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  const decoder = new TextDecoder();
+
+  for (let offset = 0; offset + 46 <= bytes.byteLength; offset += 1) {
+    const signature = view.getUint32(offset, true);
+    if (signature === 0x04034b50) {
+      const nameBytes = view.getUint16(offset + 26, true);
+      const name = decoder.decode(bytes.subarray(offset + 30, offset + 30 + nameBytes));
+      if (name === targetName) {
+        view.setUint32(offset + 22, size, true);
+      }
+    }
+    if (signature === 0x02014b50) {
+      const nameBytes = view.getUint16(offset + 28, true);
+      const name = decoder.decode(bytes.subarray(offset + 46, offset + 46 + nameBytes));
+      if (name === targetName) {
+        view.setUint32(offset + 24, size, true);
+      }
+    }
+  }
+}
+
+function createHarExportLimits(overrides: Partial<HarExportLimits> = {}): HarExportLimits {
+  return {
+    maxEntries: 100,
+    maxBodyBytes: 1024 * 1024,
+    maxTotalBodyBytes: 2 * 1024 * 1024,
+    maxEntryMetadataBytes: 256 * 1024,
+    maxHeaderFields: 512,
+    maxDerivedFields: 1_024,
+    maxHarBytes: 3 * 1024 * 1024,
+    maxEncodedBytes: 4 * 1024 * 1024,
+    ...overrides
+  };
+}
diff --git a/packages/player-sdk/src/index.ts b/packages/player-sdk/src/index.ts
index d6d17ad..953e205 100644
--- a/packages/player-sdk/src/index.ts
+++ b/packages/player-sdk/src/index.ts
@@ -8,11 +8,48 @@ import type {
   HashesManifest,
   InvertedIndexEntry,
   PrivacyManifest,
+  PrivacyScannerCoverage,
   RequestIndexEntry,
   WebBlackboxEvent,
   WebBlackboxEventType
 } from "@webblackbox/protocol";
-import { extractRequestId, inferBlobMime } from "@webblackbox/protocol";
+import {
+  assertArchiveChunk,
+  assertArchiveEventIndexes,
+  assertArchiveLayout,
+  extractRequestId,
+  inferBlobMime,
+  isCanonicalArchiveBlobPath,
+  parseArchivedEvent,
+  parseExportManifest,
+  parseHashesManifest,
+  parseInvertedIndex,
+  parsePrivacyManifest,
+  parseRequestIndex,
+  parseTimeIndex
+} from "@webblackbox/protocol";
+
+import {
+  ArchiveDecodeBudget,
+  ArchiveResourceLimitError,
+  assertArchiveInputResourceLimits,
+  assertLoadedArchiveResourceLimits,
+  resolveArchiveResourceLimits,
+  type ArchiveResourceLimits
+} from "./archive-resource-limits.js";
+import { ArchiveDecodeTimeoutError, readBoundedReadableStream } from "./bounded-stream-reader.js";
+import { ArchiveEntryReadLimitError, BoundedZipReader } from "./bounded-zip-reader.js";
+
+export {
+  ArchiveResourceLimitError,
+  DEFAULT_ARCHIVE_RESOURCE_LIMITS,
+  assertArchiveInputResourceLimits,
+  assertLoadedArchiveResourceLimits,
+  resolveArchiveResourceLimits,
+  type ArchiveResourceLimits
+} from "./archive-resource-limits.js";
+export { ArchiveDecodeTimeoutError } from "./bounded-stream-reader.js";
+export { ArchiveEntryReadLimitError, BoundedZipReader } from "./bounded-zip-reader.js";
 
 /** Player lifecycle status. */
 export type PlayerStatus = "idle" | "loaded";
@@ -24,6 +61,7 @@ export type PlayerOpenInput = ArrayBuffer | Uint8Array | Blob;
 export type PlayerOpenOptions = {
   passphrase?: string;
   range?: PlayerRange;
+  resourceLimits?: Partial<ArchiveResourceLimits>;
 };
 
 /** Monotonic-time query range in milliseconds. */
@@ -171,6 +209,7 @@ export type PrivacyProtectionReport = {
     preEncryption: boolean;
     status: "passed" | "blocked" | "unknown";
     findingCount: number;
+    coverage: PrivacyScannerCoverage | null;
   };
 };
 
@@ -402,14 +441,26 @@ type BlobRef = {
   mime: string;
 };
 
+/** Decrypted or plaintext blob content resolved from an archive hash. */
+export type PlayerBlob = {
+  mime: string;
+  bytes: Uint8Array;
+};
+
 type ArchiveEncryptedFileMeta = {
   ivBase64: string;
 };
 
 type NodeZlibLike = {
-  gunzipSync?: (input: Uint8Array) => Uint8Array;
-  brotliDecompressSync?: (input: Uint8Array) => Uint8Array;
-  zstdDecompressSync?: (input: Uint8Array) => Uint8Array;
+  createGunzip?: (options: { chunkSize: number }) => NodeJS.ReadWriteStream;
+  createBrotliDecompress?: (options: { chunkSize: number }) => NodeJS.ReadWriteStream;
+  createZstdDecompress?: (options: { chunkSize: number }) => NodeJS.ReadWriteStream;
+};
+
+type NodeStreamLike = {
+  Readable?: {
+    toWeb?: (stream: NodeJS.ReadableStream) => ReadableStream<Uint8Array>;
+  };
 };
 
 const ACTION_TRIGGER_TYPES = new Set<WebBlackboxEventType>([
@@ -445,7 +496,6 @@ const DEFAULT_TIMELINE_SCREENSHOT_LOOKAHEAD_MS = 2000;
 const DEFAULT_TIMELINE_REQUEST_LIMIT = 5;
 const DEFAULT_TIMELINE_ERROR_LIMIT = 5;
 const DEFAULT_DECODED_CHUNK_CACHE_SIZE = 12;
-const STREAM_CODEC_TIMEOUT_MS = 5_000;
 
 type EventChunkSource = {
   chunkId: string;
@@ -454,6 +504,7 @@ type EventChunkSource = {
   monoStart: number;
   monoEnd: number;
   bytes: Uint8Array;
+  events: WebBlackboxEvent[];
 };
 
 type EventChunkDescriptor = {
@@ -463,6 +514,13 @@ type EventChunkDescriptor = {
   monoStart: number;
   monoEnd: number;
   codec: ChunkCodec;
+  index: ChunkTimeIndexEntry;
+  selected: boolean;
+};
+
+type EventChunkReadResult = {
+  chunks: EventChunkSource[];
+  events: WebBlackboxEvent[];
 };
 
 /**
@@ -475,7 +533,7 @@ export class WebBlackboxPlayer {
   /** Parsed archive metadata and indexes. */
   public readonly archive: PlayerArchive;
 
-  private readonly zip: JSZip;
+  private readonly zipReader: BoundedZipReader;
 
   private readonly eventChunks: EventChunkSource[];
 
@@ -497,18 +555,21 @@ export class WebBlackboxPlayer {
 
   private readonly blobsByHash = new Map<string, BlobRef>();
 
+  private readonly blobReads = new Map<string, Promise<PlayerBlob>>();
+
   private readonly archiveKey: CryptoKey | null;
 
   private readonly encryptedFiles: Record<string, ArchiveEncryptedFileMeta>;
 
   private constructor(
     zip: JSZip,
+    zipReader: BoundedZipReader,
     archive: PlayerArchive,
     eventChunks: EventChunkSource[],
     archiveKey: CryptoKey | null,
     encryptedFiles: Record<string, ArchiveEncryptedFileMeta>
   ) {
-    this.zip = zip;
+    this.zipReader = zipReader;
     this.archive = archive;
     this.archiveKey = archiveKey;
     this.encryptedFiles = encryptedFiles;
@@ -552,57 +613,92 @@ export class WebBlackboxPlayer {
     input: PlayerOpenInput,
     options: PlayerOpenOptions = {}
   ): Promise<WebBlackboxPlayer> {
-    const bytes = await normalizeOpenInput(input);
+    const resourceLimits = resolveArchiveResourceLimits(options.resourceLimits);
+    const bytes = await normalizeOpenInput(input, resourceLimits);
     const zip = await JSZip.loadAsync(bytes);
+    assertLoadedArchiveResourceLimits(zip, resourceLimits);
+    const zipReader = new BoundedZipReader(zip, resourceLimits, true);
+    const decodeBudget = new ArchiveDecodeBudget(resourceLimits);
 
-    const integrity = await readJson<HashesManifest>(zip, "integrity/hashes.json");
+    const integrity = parseHashesManifest(await readJsonValue(zipReader, "integrity/hashes.json"));
     assertArchiveFileSet(zip, integrity);
-    await assertManifestIntegrity(zip, integrity);
-    const manifest = await readJson<ExportManifest>(zip, "manifest.json");
+    await assertManifestIntegrity(zipReader, integrity);
+    const manifest = parseExportManifest(await readJsonValue(zipReader, "manifest.json"));
     const archiveKey = await resolveArchiveReadKey(manifest, options.passphrase);
     const encryptedFiles = manifest.encryption?.files ?? {};
-    const timeIndex = await readIntegrityArchiveJson<ChunkTimeIndexEntry[]>(
-      zip,
-      integrity,
-      "index/time.json",
-      archiveKey,
-      encryptedFiles
+    const timeIndex = parseTimeIndex(
+      await readIntegrityArchiveJsonValue(
+        zipReader,
+        integrity,
+        "index/time.json",
+        archiveKey,
+        encryptedFiles
+      )
     );
-    const requestIndex = await readIntegrityArchiveJson<RequestIndexEntry[]>(
-      zip,
-      integrity,
+    decodeBudget.commitIndex("index/time.json", timeIndex.length, 0);
+    const requestIndex = parseRequestIndex(
+      await readIntegrityArchiveJsonValue(
+        zipReader,
+        integrity,
+        "index/req.json",
+        archiveKey,
+        encryptedFiles
+      )
+    );
+    decodeBudget.commitIndex(
       "index/req.json",
-      archiveKey,
-      encryptedFiles
+      requestIndex.length,
+      countIndexEventReferences(requestIndex)
     );
-    const invertedIndex = await readIntegrityArchiveJson<InvertedIndexEntry[]>(
-      zip,
-      integrity,
+    const invertedIndex = parseInvertedIndex(
+      await readIntegrityArchiveJsonValue(
+        zipReader,
+        integrity,
+        "index/inv.json",
+        archiveKey,
+        encryptedFiles
+      )
+    );
+    decodeBudget.commitIndex(
       "index/inv.json",
-      archiveKey,
-      encryptedFiles
+      invertedIndex.length,
+      countIndexEventReferences(invertedIndex)
     );
-    const privacyManifest = await readOptionalIntegrityArchiveJson<PrivacyManifest>(
-      zip,
+    const privacyValue = await readOptionalIntegrityArchiveJsonValue(
+      zipReader,
       integrity,
       "privacy/manifest.json",
       archiveKey,
       encryptedFiles
     );
-    const eventChunks = await readEventChunkSources(
-      zip,
+    const privacyManifest = privacyValue === null ? null : parsePrivacyManifest(privacyValue);
+
+    assertArchiveLayout({
+      paths: archiveFilePaths(zip),
+      manifest,
+      timeIndex,
+      requestIndex,
+      invertedIndex,
+      privacyManifest
+    });
+
+    const eventChunkResult = await readEventChunkSources(
+      zipReader,
       archiveKey,
       encryptedFiles,
       {
         range: options.range,
-        timeIndex,
-        defaultCodec: manifest.chunkCodec
+        timeIndex
       },
-      integrity
+      integrity,
+      decodeBudget
     );
 
+    assertArchiveEventIndexes(manifest, eventChunkResult.events, requestIndex, invertedIndex);
+
     return new WebBlackboxPlayer(
       zip,
+      zipReader,
       {
         manifest,
         timeIndex,
@@ -611,7 +707,7 @@ export class WebBlackboxPlayer {
         integrity,
         privacyManifest
       },
-      eventChunks,
+      eventChunkResult.chunks,
       archiveKey,
       encryptedFiles
     );
@@ -790,7 +886,7 @@ export class WebBlackboxPlayer {
       return cached;
     }
 
-    const parsed = parseChunkEvents(chunk);
+    const parsed = chunk.events;
     this.decodedChunkCache.set(chunk.chunkId, parsed);
 
     while (this.decodedChunkCache.size > DEFAULT_DECODED_CHUNK_CACHE_SIZE) {
@@ -827,27 +923,70 @@ export class WebBlackboxPlayer {
   }
 
   /** Resolves a stored blob by hash or blob path alias. */
-  public async getBlob(hash: string): Promise<{ mime: string; bytes: Uint8Array } | null> {
+  public async getBlob(hash: string): Promise<PlayerBlob | null> {
     const blob = resolveBlobByKey(this.blobsByHash, hash);
 
     if (!blob) {
       return null;
     }
 
-    const file = this.zip.file(blob.path);
+    if (!this.zipReader.has(blob.path)) {
+      return null;
+    }
+
+    const cached = this.blobReads.get(blob.path);
+    if (cached) {
+      return clonePlayerBlob(await cached);
+    }
+
+    const pending = readTransientZipEntry(this.zipReader, blob.path, async (rawBytes) => {
+      await assertArchiveFileIntegrity(this.archive.integrity, blob.path, rawBytes);
+      const bytes = await this.decryptArchiveFile(blob.path, rawBytes);
+
+      return {
+        mime: blob.mime,
+        bytes
+      };
+    });
+    this.blobReads.set(blob.path, pending);
+    return clonePlayerBlob(await pending);
+  }
+
+  /** Reads and verifies one blob without retaining it in the Player cache. */
+  public async readBlobTransient(hash: string, maxBytes: number): Promise<PlayerBlob | null> {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0) {
+      throw new TypeError("Transient blob read limit must be a positive safe integer.");
+    }
 
-    if (!file) {
+    const blob = resolveBlobByKey(this.blobsByHash, hash);
+    if (!blob || !this.zipReader.has(blob.path)) {
       return null;
     }
 
-    const rawBytes = await file.async("uint8array");
-    await assertArchiveFileIntegrity(this.zip, this.archive.integrity, blob.path, rawBytes);
+    const encryptionOverhead = this.encryptedFiles[blob.path] ? 16 : 0;
+    const storedByteLimit = addSafeInteger(maxBytes, encryptionOverhead);
+    let rawBytes: Uint8Array;
+
+    try {
+      rawBytes = await this.zipReader.readBounded(blob.path, storedByteLimit);
+    } catch (error) {
+      if (error instanceof ArchiveEntryReadLimitError) {
+        throw new ArchiveEntryReadLimitError(
+          blob.path,
+          maxBytes,
+          Math.max(0, error.actual - encryptionOverhead)
+        );
+      }
+      throw error;
+    }
+
+    await assertArchiveFileIntegrity(this.archive.integrity, blob.path, rawBytes);
     const bytes = await this.decryptArchiveFile(blob.path, rawBytes);
+    if (bytes.byteLength > maxBytes) {
+      throw new ArchiveEntryReadLimitError(blob.path, maxBytes, bytes.byteLength);
+    }
 
-    return {
-      mime: blob.mime,
-      bytes
-    };
+    return { mime: blob.mime, bytes };
   }
 
   /** Builds action-span aggregates and total counters for the selected range. */
@@ -944,13 +1083,22 @@ export class WebBlackboxPlayer {
       scanner: this.archive.privacyManifest
         ? {
             preEncryption: this.archive.privacyManifest.scanner.preEncryption,
-            status: this.archive.privacyManifest.scanner.status,
-            findingCount: this.archive.privacyManifest.scanner.findings.length
+            status:
+              this.archive.privacyManifest.scanner.status === "blocked"
+                ? "blocked"
+                : this.archive.privacyManifest.scanner.coverage?.complete === true
+                  ? "passed"
+                  : "unknown",
+            findingCount: this.archive.privacyManifest.scanner.findings.length,
+            coverage: this.archive.privacyManifest.scanner.coverage
+              ? { ...this.archive.privacyManifest.scanner.coverage }
+              : null
           }
         : {
             preEncryption: false,
             status: "unknown",
-            findingCount: 0
+            findingCount: 0,
+            coverage: null
           }
     };
   }
@@ -1465,7 +1613,10 @@ export class WebBlackboxPlayer {
       return null;
     }
 
-    const lines = [`curl ${shellQuote(entry.url)} \\`, `  -X ${entry.method.toUpperCase()} \\`];
+    const lines = [
+      `curl --url ${shellQuote(entry.url)} \\`,
+      `  -X ${shellQuote(entry.method.toUpperCase())} \\`
+    ];
 
     for (const [name, value] of Object.entries(entry.requestHeaders)) {
       lines.push(`  -H ${shellQuote(`${name}: ${value}`)} \\`);
@@ -1500,9 +1651,16 @@ export class WebBlackboxPlayer {
     return `await fetch(${JSON.stringify(entry.url)}, ${JSON.stringify(options, null, 2)});`;
   }
 
-  /** Exports a HAR 1.2 document from network events. */
-  public exportHar(range?: PlayerRange): string {
-    const entries = this.getNetworkWaterfall(range).map((entry) => toHarEntry(entry));
+  /** Exports a HAR 1.2 document, including captured response bodies, from network events. */
+  public async exportHar(range?: PlayerRange): Promise<string> {
+    const entries = await Promise.all(
+      this.getNetworkWaterfall(range).map(async (entry) => {
+        const responseBody = entry.responseBodyHash
+          ? await this.getBlob(entry.responseBodyHash)
+          : null;
+        return toHarEntry(entry, responseBody ?? undefined);
+      })
+    );
     const started = new Date(this.events[0]?.t ?? Date.now()).toISOString();
 
     const har = {
@@ -1670,7 +1828,7 @@ export class WebBlackboxPlayer {
     const lines = [
       "import { test } from '@playwright/test';",
       "",
-      `test('${name}', async ({ browser }) => {`,
+      `test(${toJavaScriptStringLiteral(name)}, async ({ browser }) => {`,
       "  const context = await browser.newContext();",
       includeHarReplay
         ? "  await context.routeFromHAR('./session.har', { notFound: 'fallback' });"
@@ -1709,7 +1867,7 @@ export class WebBlackboxPlayer {
     const lines = [
       "import { test } from '@playwright/test';",
       "",
-      `test('${name}', async ({ browser }) => {`,
+      `test(${toJavaScriptStringLiteral(name)}, async ({ browser }) => {`,
       "  const context = await browser.newContext();"
     ];
 
@@ -1747,6 +1905,104 @@ export class WebBlackboxPlayer {
     return lines.join("\n");
   }
 
+  /** @internal */
+  public async exportHarWithLimits(
+    range: PlayerRange | undefined,
+    limits: HarExportLimits
+  ): Promise<string> {
+    const resolvedLimits = resolveHarExportLimits(limits);
+    const networkBuckets = this.getNetworkBucketsWithLimit(range, resolvedLimits.maxEntries);
+
+    const started = new Date(this.eventChunks[0]?.events[0]?.t ?? Date.now()).toISOString();
+    const title = this.archive.manifest.site.title ?? this.archive.manifest.site.origin;
+    const titleBytes = utf8ByteLengthAtMost(title, resolvedLimits.maxEntryMetadataBytes);
+    if (titleBytes > resolvedLimits.maxEntryMetadataBytes) {
+      throw new HarExportResourceLimitError(
+        "maxEntryMetadataBytes",
+        resolvedLimits.maxEntryMetadataBytes,
+        titleBytes,
+        0,
+        0
+      );
+    }
+
+    const writer = new BoundedHarJsonWriter(resolvedLimits);
+    writer.append(
+      `{"log":{"version":"1.2","creator":{"name":"WebBlackbox","version":"1.0.0"},"pages":[${JSON.stringify(
+        {
+          startedDateTime: started,
+          id: "page_1",
+          title,
+          pageTimings: {
+            onContentLoad: -1,
+            onLoad: -1
+          }
+        }
+      )}],"entries":[`,
+      0,
+      0
+    );
+
+    let completedEntries = 0;
+    let totalBodyBytes = 0;
+
+    for (const bucket of networkBuckets) {
+      const entry = toNetworkEntry(bucket);
+      assertHarEntryMetadataBudget(entry, resolvedLimits, completedEntries, totalBodyBytes);
+      assertHarEntryFieldBudget(entry, resolvedLimits, completedEntries, totalBodyBytes);
+
+      let responseBody: PlayerBlob | null = null;
+      if (entry.responseBodyHash) {
+        const remainingBodyBytes = resolvedLimits.maxTotalBodyBytes - totalBodyBytes;
+        if (remainingBodyBytes <= 0) {
+          throw new HarExportResourceLimitError(
+            "maxTotalBodyBytes",
+            resolvedLimits.maxTotalBodyBytes,
+            totalBodyBytes + 1,
+            completedEntries,
+            totalBodyBytes
+          );
+        }
+
+        const bodyLimit = Math.min(resolvedLimits.maxBodyBytes, remainingBodyBytes);
+        try {
+          responseBody = await this.readHarResponseBody(entry.responseBodyHash, bodyLimit);
+        } catch (error) {
+          if (!(error instanceof ArchiveEntryReadLimitError)) {
+            throw error;
+          }
+
+          const resource =
+            bodyLimit < resolvedLimits.maxBodyBytes ? "maxTotalBodyBytes" : "maxBodyBytes";
+          const actual =
+            resource === "maxTotalBodyBytes" ? totalBodyBytes + error.actual : error.actual;
+          throw new HarExportResourceLimitError(
+            resource,
+            resolvedLimits[resource],
+            actual,
+            completedEntries,
+            totalBodyBytes + Math.min(error.actual, bodyLimit)
+          );
+        }
+
+        if (responseBody) {
+          totalBodyBytes += responseBody.bytes.byteLength;
+        }
+      }
+
+      const serializedEntry = JSON.stringify(toHarEntry(entry, responseBody ?? undefined));
+      writer.append(
+        `${completedEntries === 0 ? "" : ","}${serializedEntry}`,
+        completedEntries,
+        totalBodyBytes
+      );
+      completedEntries += 1;
+    }
+
+    writer.append("]}}", completedEntries, totalBodyBytes);
+    return writer.finish();
+  }
+
   private async loadDomPaths(snapshot: DomSnapshotRef): Promise<Set<string>> {
     if (snapshot.contentHash) {
       const blob = await this.getBlob(snapshot.contentHash);
@@ -1821,6 +2077,39 @@ export class WebBlackboxPlayer {
       throw new Error("Unable to decrypt archive content. The passphrase may be invalid.");
     }
   }
+
+  private async readHarResponseBody(hash: string, maxBytes: number): Promise<PlayerBlob | null> {
+    return this.readBlobTransient(hash, maxBytes);
+  }
+
+  private getNetworkBucketsWithLimit(
+    range: PlayerRange | undefined,
+    maxEntries: number
+  ): MutableNetworkBucket[] {
+    const buckets = new Map<string, MutableNetworkBucket>();
+
+    for (const chunk of this.getChunksForRange(range)) {
+      for (const event of this.getChunkEvents(chunk)) {
+        if (!withinRange(event, range) || !NETWORK_EVENT_TYPES.has(event.type)) {
+          continue;
+        }
+
+        const reqId = extractRequestId(event);
+        if (!reqId) {
+          continue;
+        }
+        if (!buckets.has(reqId) && buckets.size >= maxEntries) {
+          throw new HarExportResourceLimitError("maxEntries", maxEntries, maxEntries + 1, 0, 0);
+        }
+
+        addNetworkEventToBuckets(buckets, event, reqId, false);
+      }
+    }
+
+    return [...buckets.values()].sort(
+      (left, right) => left.startMono - right.startMono || left.reqId.localeCompare(right.reqId)
+    );
+  }
 }
 
 /** Returns the default pre-open player status. */
@@ -1853,49 +2142,60 @@ function collectNetworkBuckets(events: WebBlackboxEvent[]): MutableNetworkBucket
       continue;
     }
 
-    const bucket = buckets.get(reqId) ?? {
-      reqId,
-      events: [],
-      startMono: event.mono,
-      endMono: event.mono,
-      startWallTime: event.t,
-      endWallTime: event.t
-    };
+    addNetworkEventToBuckets(buckets, event, reqId);
+  }
 
-    bucket.events.push(event);
-    bucket.startMono = Math.min(bucket.startMono, event.mono);
-    bucket.endMono = Math.max(bucket.endMono, event.mono);
-    bucket.startWallTime = Math.min(bucket.startWallTime, event.t);
-    bucket.endWallTime = Math.max(bucket.endWallTime, event.t);
+  return [...buckets.values()];
+}
 
-    if (!bucket.actionId && event.ref?.act) {
-      bucket.actionId = event.ref.act;
-    }
+function addNetworkEventToBuckets(
+  buckets: Map<string, MutableNetworkBucket>,
+  event: WebBlackboxEvent,
+  reqId: string,
+  includeEventId = true
+): void {
+  const bucket = buckets.get(reqId) ?? {
+    reqId,
+    events: [],
+    startMono: event.mono,
+    endMono: event.mono,
+    startWallTime: event.t,
+    endWallTime: event.t
+  };
 
-    if (event.type === "network.request" && !bucket.request) {
-      bucket.request = event;
-    }
+  if (includeEventId) {
+    bucket.events.push(event);
+  }
+  bucket.startMono = Math.min(bucket.startMono, event.mono);
+  bucket.endMono = Math.max(bucket.endMono, event.mono);
+  bucket.startWallTime = Math.min(bucket.startWallTime, event.t);
+  bucket.endWallTime = Math.max(bucket.endWallTime, event.t);
 
-    if (event.type === "network.response") {
-      bucket.response = event;
-    }
+  if (!bucket.actionId && event.ref?.act) {
+    bucket.actionId = event.ref.act;
+  }
 
-    if (event.type === "network.finished") {
-      bucket.finished = event;
-    }
+  if (event.type === "network.request" && !bucket.request) {
+    bucket.request = event;
+  }
 
-    if (event.type === "network.failed") {
-      bucket.failed = event;
-    }
+  if (event.type === "network.response") {
+    bucket.response = event;
+  }
 
-    if (event.type === "network.body") {
-      bucket.body = event;
-    }
+  if (event.type === "network.finished") {
+    bucket.finished = event;
+  }
 
-    buckets.set(reqId, bucket);
+  if (event.type === "network.failed") {
+    bucket.failed = event;
   }
 
-  return [...buckets.values()];
+  if (event.type === "network.body") {
+    bucket.body = event;
+  }
+
+  buckets.set(reqId, bucket);
 }
 
 function toNetworkEntry(bucket: MutableNetworkBucket): NetworkWaterfallEntry {
@@ -2375,7 +2675,7 @@ function toPlaywrightLines(event: WebBlackboxEvent): string[] {
     }
 
     if (!value || value === "[MASKED]") {
-      return [`  // input on ${selector} was masked in capture`];
+      return [`  // input on ${toSingleLineCommentText(selector)} was masked in capture`];
     }
 
     return [`  await page.fill(${JSON.stringify(selector)}, ${JSON.stringify(value)});`];
@@ -2407,6 +2707,25 @@ function toPlaywrightLines(event: WebBlackboxEvent): string[] {
   return [];
 }
 
+function toJavaScriptStringLiteral(value: string): string {
+  return JSON.stringify(value).replaceAll("\u2028", "\\u2028").replaceAll("\u2029", "\\u2029");
+}
+
+function toSingleLineCommentText(value: string): string {
+  const withoutControls = [...value]
+    .map((character) => {
+      const codePoint = character.codePointAt(0);
+      return codePoint !== undefined &&
+        (codePoint < 32 || codePoint === 127 || codePoint === 0x2028 || codePoint === 0x2029)
+        ? " "
+        : character;
+    })
+    .join("");
+  const sanitized = withoutControls.replace(/\s+/g, " ").trim().slice(0, 240);
+
+  return sanitized || "[redacted selector]";
+}
+
 function readSelector(event: WebBlackboxEvent): string | null {
   const payload = asRecord(event.data);
   const target = asRecord(payload?.target);
@@ -2419,7 +2738,10 @@ function readSelector(event: WebBlackboxEvent): string | null {
   return selector;
 }
 
-function toHarEntry(entry: NetworkWaterfallEntry): Record<string, unknown> {
+function toHarEntry(
+  entry: NetworkWaterfallEntry,
+  responseBody?: { mime: string; bytes: Uint8Array }
+): Record<string, unknown> {
   const queryString = parseQueryString(entry.url);
   const requestCookies = parseCookieHeader(entry.requestHeaders.cookie);
   const responseCookies = parseSetCookieHeader(entry.responseHeaders["set-cookie"]);
@@ -2452,10 +2774,7 @@ function toHarEntry(entry: NetworkWaterfallEntry): Record<string, unknown> {
       httpVersion: "HTTP/1.1",
       cookies: responseCookies,
       headers: headersToHarArray(entry.responseHeaders),
-      content: {
-        size: entry.responseBodySize ?? entry.encodedDataLength ?? 0,
-        mimeType: entry.mimeType ?? "application/octet-stream"
-      },
+      content: buildHarResponseContent(entry, responseBody),
       redirectURL: entry.responseHeaders.location ?? "",
       headersSize: -1,
       bodySize: entry.responseBodySize ?? -1
@@ -2473,6 +2792,60 @@ function toHarEntry(entry: NetworkWaterfallEntry): Record<string, unknown> {
   };
 }
 
+function buildHarResponseContent(
+  entry: NetworkWaterfallEntry,
+  responseBody?: { mime: string; bytes: Uint8Array }
+): Record<string, unknown> {
+  const mimeType = responseBody?.mime ?? entry.mimeType ?? "application/octet-stream";
+  const content: Record<string, unknown> = {
+    size: responseBody?.bytes.byteLength ?? entry.responseBodySize ?? entry.encodedDataLength ?? 0,
+    mimeType
+  };
+
+  if (!responseBody) {
+    return content;
+  }
+
+  if (isTextualHarMimeType(mimeType)) {
+    content.text = new TextDecoder("utf-8", { fatal: false }).decode(responseBody.bytes);
+  } else {
+    content.text = encodeBase64(responseBody.bytes);
+    content.encoding = "base64";
+  }
+
+  return content;
+}
+
+function isTextualHarMimeType(mimeType: string): boolean {
+  const normalized = mimeType.split(";", 1)[0]?.trim().toLowerCase() ?? "";
+  return (
+    normalized.startsWith("text/") ||
+    normalized.includes("json") ||
+    normalized.includes("xml") ||
+    normalized.includes("javascript") ||
+    normalized.includes("x-www-form-urlencoded")
+  );
+}
+
+function encodeBase64(bytes: Uint8Array): string {
+  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  let output = "";
+
+  for (let index = 0; index < bytes.length; index += 3) {
+    const first = bytes[index] ?? 0;
+    const second = bytes[index + 1];
+    const third = bytes[index + 2];
+    const combined = (first << 16) | ((second ?? 0) << 8) | (third ?? 0);
+
+    output += alphabet[(combined >> 18) & 63] ?? "";
+    output += alphabet[(combined >> 12) & 63] ?? "";
+    output += second === undefined ? "=" : (alphabet[(combined >> 6) & 63] ?? "");
+    output += third === undefined ? "=" : (alphabet[combined & 63] ?? "");
+  }
+
+  return output;
+}
+
 function buildDomDiff(
   previous: DomSnapshotRef,
   current: DomSnapshotRef,
@@ -2976,107 +3349,136 @@ async function resolveArchiveReadKey(
 }
 
 async function readEventChunkSources(
-  zip: JSZip,
+  zipReader: BoundedZipReader,
   archiveKey: CryptoKey | null,
   encryptedFiles: Record<string, ArchiveEncryptedFileMeta>,
   options: {
     range?: PlayerRange;
     timeIndex?: ChunkTimeIndexEntry[];
-    defaultCodec?: ChunkCodec;
-  } = {},
-  integrity?: HashesManifest
-): Promise<EventChunkSource[]> {
-  const descriptors = buildEventChunkDescriptors(zip, options);
+  },
+  integrity: HashesManifest,
+  decodeBudget: ArchiveDecodeBudget
+): Promise<EventChunkReadResult> {
+  const descriptors = buildEventChunkDescriptors(options);
   const chunks: EventChunkSource[] = [];
+  const events: WebBlackboxEvent[] = [];
 
   for (const descriptor of descriptors) {
     const { path } = descriptor;
-    const file = zip.file(path);
-
-    if (!file) {
-      continue;
-    }
-
-    const rawBytes = await file.async("uint8array");
-
-    if (integrity) {
-      await assertArchiveFileIntegrity(zip, integrity, path, rawBytes);
-    }
-
-    const decrypted = await decryptArchiveBytes(path, rawBytes, archiveKey, encryptedFiles);
-    const bytes = await decodeChunkBytes(decrypted, descriptor.codec);
-
-    chunks.push({
+    const decrypted = await readTransientZipEntry(zipReader, path, async (rawBytes) => {
+      await assertArchiveFileIntegrity(integrity, path, rawBytes);
+      return decryptArchiveBytes(path, rawBytes, archiveKey, encryptedFiles);
+    });
+    const bytes = await decodeChunkBytes(decrypted, descriptor.codec, path, decodeBudget);
+    const chunk: EventChunkSource = {
       chunkId: descriptor.chunkId,
       path,
       seq: descriptor.seq,
       monoStart: descriptor.monoStart,
       monoEnd: descriptor.monoEnd,
-      bytes
+      bytes,
+      events: []
+    };
+    const chunkEvents = parseChunkEvents(chunk, decodeBudget);
+    if (descriptor.selected) {
+      chunk.events = chunkEvents;
+    }
+
+    assertArchiveChunk({
+      path,
+      index: descriptor.index,
+      encodedByteLength: decrypted.byteLength,
+      encodedSha256: await sha256Hex(decrypted),
+      events: chunkEvents
     });
+    chunk.bytes = new Uint8Array(0);
+
+    if (descriptor.selected) {
+      chunks.push(chunk);
+    }
+
+    for (const event of chunkEvents) {
+      events.push(event);
+    }
   }
 
-  return chunks.sort((left, right) => left.seq - right.seq);
+  return {
+    chunks: chunks.sort((left, right) => left.seq - right.seq),
+    events
+  };
 }
 
-function buildEventChunkDescriptors(
-  zip: JSZip,
-  options: {
-    range?: PlayerRange;
-    timeIndex?: ChunkTimeIndexEntry[];
-    defaultCodec?: ChunkCodec;
-  }
-): EventChunkDescriptor[] {
+function buildEventChunkDescriptors(options: {
+  range?: PlayerRange;
+  timeIndex?: ChunkTimeIndexEntry[];
+}): EventChunkDescriptor[] {
   const { range, timeIndex } = options;
-  const defaultCodec = options.defaultCodec ?? "none";
-
-  if (Array.isArray(timeIndex) && timeIndex.length > 0) {
-    return timeIndex
-      .filter((entry) => !range || chunkIntersectsRange(entry, range))
-      .sort((left, right) => left.seq - right.seq)
-      .map((entry) => ({
-        chunkId: entry.chunkId,
-        path: `events/${entry.chunkId}.ndjson`,
-        seq: entry.seq,
-        monoStart: entry.monoStart,
-        monoEnd: entry.monoEnd,
-        codec: entry.codec
-      }));
-  }
-
-  return Object.keys(zip.files)
-    .filter((path) => path.startsWith("events/") && path.endsWith(".ndjson"))
-    .sort()
-    .map((path, index) => ({
-      chunkId: parseChunkIdFromPath(path) ?? `chunk-${String(index + 1).padStart(6, "0")}`,
-      path,
-      seq: index + 1,
-      monoStart: Number.NEGATIVE_INFINITY,
-      monoEnd: Number.POSITIVE_INFINITY,
-      codec: defaultCodec
+  return (timeIndex ?? [])
+    .sort((left, right) => left.seq - right.seq)
+    .map((entry) => ({
+      chunkId: entry.chunkId,
+      path: `events/${entry.chunkId}.ndjson`,
+      seq: entry.seq,
+      monoStart: entry.monoStart,
+      monoEnd: entry.monoEnd,
+      codec: entry.codec,
+      index: entry,
+      selected: !range || chunkIntersectsRange(entry, range)
     }));
 }
 
-function parseChunkEvents(chunk: EventChunkSource): WebBlackboxEvent[] {
-  const content = new TextDecoder().decode(chunk.bytes);
-  const lines = content.split(/\r?\n/).filter((line) => line.trim().length > 0);
+function parseChunkEvents(
+  chunk: EventChunkSource,
+  decodeBudget: ArchiveDecodeBudget
+): WebBlackboxEvent[] {
+  const content = decodeArchiveUtf8(chunk.bytes, chunk.path);
   const events: WebBlackboxEvent[] = [];
+  let lineStart = 0;
+  let lineNumber = 0;
+
+  for (let cursor = 0; cursor <= content.length; cursor += 1) {
+    if (cursor < content.length && content.charCodeAt(cursor) !== 10) {
+      continue;
+    }
+
+    lineNumber += 1;
+    const lineEnd = cursor;
+    if (!hasNonWhitespace(content, lineStart, lineEnd)) {
+      lineStart = cursor + 1;
+      continue;
+    }
 
-  for (const line of lines) {
+    decodeBudget.commitEvents(chunk.path, 1);
+    const line = content.slice(lineStart, lineEnd);
     try {
-      events.push(JSON.parse(line) as WebBlackboxEvent);
+      events.push(parseArchivedEvent(JSON.parse(line) as unknown, chunk.path, lineNumber));
     } catch (error) {
-      throw new Error(
-        `Failed to parse chunk '${chunk.chunkId}' from '${chunk.path}': ${
-          error instanceof Error ? error.message : String(error)
-        }`
-      );
+      if (error instanceof SyntaxError) {
+        throw new Error(
+          `Invalid WebBlackbox archive: '${chunk.path}' contains malformed JSON at event line ${lineNumber}.`
+        );
+      }
+
+      throw error;
     }
+
+    lineStart = cursor + 1;
   }
 
   return events;
 }
 
+function hasNonWhitespace(value: string, start: number, end: number): boolean {
+  for (let index = start; index < end; index += 1) {
+    const code = value.charCodeAt(index);
+    if (code !== 9 && code !== 10 && code !== 13 && code !== 32) {
+      return true;
+    }
+  }
+
+  return false;
+}
+
 function chunkSourceIntersectsRange(chunk: EventChunkSource, range: PlayerRange): boolean {
   if (
     Number.isFinite(chunk.monoEnd) &&
@@ -3118,30 +3520,48 @@ async function decryptArchiveBytes(
   const encryptedFile = encryptedFiles[path];
 
   if (!encryptedFile) {
-    return bytes;
+    if (Object.keys(encryptedFiles).length === 0) {
+      return bytes;
+    }
+
+    throw new Error(
+      `Invalid WebBlackbox archive: encrypted archive is missing file metadata for '${path}'.`
+    );
   }
 
   if (!archiveKey) {
     throw new Error("Archive is encrypted. Missing decryption key.");
   }
 
-  return decryptBytes(bytes, archiveKey, fromBase64(encryptedFile.ivBase64));
+  try {
+    return await decryptBytes(bytes, archiveKey, fromBase64(encryptedFile.ivBase64));
+  } catch {
+    throw new Error("Unable to decrypt archive content. The passphrase may be invalid.");
+  }
 }
 
-async function decodeChunkBytes(bytes: Uint8Array, codec: ChunkCodec): Promise<Uint8Array> {
+async function decodeChunkBytes(
+  bytes: Uint8Array,
+  codec: ChunkCodec,
+  path: string,
+  decodeBudget: ArchiveDecodeBudget
+): Promise<Uint8Array> {
   if (codec === "none") {
+    decodeBudget.commitDecoded(path, bytes.byteLength, bytes.byteLength);
     return bytes;
   }
 
-  const fromStreams = await tryDecodeChunkWithStreams(bytes, codec);
+  const fromStreams = await tryDecodeChunkWithStreams(bytes, codec, path, decodeBudget);
 
   if (fromStreams) {
+    decodeBudget.commitDecoded(path, bytes.byteLength, fromStreams.byteLength);
     return fromStreams;
   }
 
-  const fromNodeZlib = await tryDecodeChunkWithNodeZlib(bytes, codec);
+  const fromNodeZlib = await tryDecodeChunkWithNodeZlib(bytes, codec, path, decodeBudget);
 
   if (fromNodeZlib) {
+    decodeBudget.commitDecoded(path, bytes.byteLength, fromNodeZlib.byteLength);
     return fromNodeZlib;
   }
 
@@ -3150,7 +3570,9 @@ async function decodeChunkBytes(bytes: Uint8Array, codec: ChunkCodec): Promise<U
 
 async function tryDecodeChunkWithStreams(
   bytes: Uint8Array,
-  codec: ChunkCodec
+  codec: ChunkCodec,
+  path: string,
+  decodeBudget: ArchiveDecodeBudget
 ): Promise<Uint8Array | null> {
   if (typeof DecompressionStream === "undefined" || typeof Blob === "undefined") {
     return null;
@@ -3158,11 +3580,24 @@ async function tryDecodeChunkWithStreams(
 
   for (const format of codecFormats(codec)) {
     try {
-      const stream = new Blob([toArrayBuffer(bytes)])
-        .stream()
-        .pipeThrough(new DecompressionStream(format as CompressionFormat));
-      return await readReadableStreamWithTimeout(stream, codec, format);
-    } catch {
+      const decompressor = new DecompressionStream(format as CompressionFormat);
+      const stream = new Blob([toArrayBuffer(bytes)]).stream().pipeThrough(decompressor);
+      return await readBoundedReadableStream(stream, {
+        timeoutMs: decodeBudget.limits.decodeTimeoutMs,
+        detail: `${path}, codec '${codec}', format '${format}'`,
+        maxBytes: decodeBudget.limits.maxChunkDecodedBytes,
+        validateTotalBytes(totalBytes) {
+          decodeBudget.assertDecodedSize(path, bytes.byteLength, totalBytes);
+        }
+      });
+    } catch (error) {
+      if (
+        error instanceof ArchiveResourceLimitError ||
+        error instanceof ArchiveDecodeTimeoutError
+      ) {
+        throw error;
+      }
+
       continue;
     }
   }
@@ -3170,99 +3605,80 @@ async function tryDecodeChunkWithStreams(
   return null;
 }
 
-async function readReadableStream(stream: ReadableStream<Uint8Array>): Promise<Uint8Array> {
-  const reader = stream.getReader();
-  const chunks: Uint8Array[] = [];
-  let totalLength = 0;
+async function tryDecodeChunkWithNodeZlib(
+  bytes: Uint8Array,
+  codec: ChunkCodec,
+  path: string,
+  decodeBudget: ArchiveDecodeBudget
+): Promise<Uint8Array | null> {
+  const [zlib, nodeStream] = await Promise.all([loadNodeZlib(), loadNodeStream()]);
+
+  if (!zlib || !nodeStream?.Readable?.toWeb) {
+    return null;
+  }
 
-  while (true) {
-    const { done, value } = await reader.read();
+  const options = { chunkSize: 16 * 1024 };
+  let codecStream: NodeJS.ReadWriteStream | null = null;
 
-    if (done) {
-      break;
+  try {
+    if (codec === "gzip" && typeof zlib.createGunzip === "function") {
+      codecStream = zlib.createGunzip(options);
     }
 
-    if (!value) {
-      continue;
+    if (codec === "br" && typeof zlib.createBrotliDecompress === "function") {
+      codecStream = zlib.createBrotliDecompress(options);
     }
 
-    const chunk = value instanceof Uint8Array ? value : new Uint8Array(value);
-    chunks.push(chunk);
-    totalLength += chunk.byteLength;
+    if (codec === "zst" && typeof zlib.createZstdDecompress === "function") {
+      codecStream = zlib.createZstdDecompress(options);
+    }
+  } catch {
+    return null;
   }
 
-  const output = new Uint8Array(totalLength);
-  let cursor = 0;
-
-  for (const chunk of chunks) {
-    output.set(chunk, cursor);
-    cursor += chunk.byteLength;
+  if (!codecStream) {
+    return null;
   }
 
-  return output;
-}
-
-async function readReadableStreamWithTimeout(
-  stream: ReadableStream<Uint8Array>,
-  codec: ChunkCodec,
-  format: string
-): Promise<Uint8Array> {
-  return withTimeout(
-    readReadableStream(stream),
-    STREAM_CODEC_TIMEOUT_MS,
-    `Chunk codec '${codec}' decode timed out for format '${format}'.`
-  );
-}
-
-async function withTimeout<T>(promise: Promise<T>, timeoutMs: number, message: string): Promise<T> {
-  let timer: ReturnType<typeof setTimeout> | null = null;
+  const stream = nodeStream.Readable.toWeb(codecStream);
+  codecStream.end(bytes);
 
   try {
-    return await Promise.race([
-      promise,
-      new Promise<T>((_, reject) => {
-        timer = setTimeout(() => {
-          reject(new Error(message));
-        }, timeoutMs);
-      })
-    ]);
-  } finally {
-    if (timer) {
-      clearTimeout(timer);
+    return await readBoundedReadableStream(stream, {
+      timeoutMs: decodeBudget.limits.decodeTimeoutMs,
+      detail: `${path}, Node codec '${codec}'`,
+      maxBytes: decodeBudget.limits.maxChunkDecodedBytes,
+      validateTotalBytes(totalBytes) {
+        decodeBudget.assertDecodedSize(path, bytes.byteLength, totalBytes);
+      }
+    });
+  } catch (error) {
+    if (error instanceof ArchiveResourceLimitError || error instanceof ArchiveDecodeTimeoutError) {
+      throw error;
     }
+
+    return null;
   }
 }
 
-async function tryDecodeChunkWithNodeZlib(
-  bytes: Uint8Array,
-  codec: ChunkCodec
-): Promise<Uint8Array | null> {
-  const zlib = await loadNodeZlib();
-
-  if (!zlib) {
+async function loadNodeZlib(): Promise<NodeZlibLike | null> {
+  if (
+    typeof process === "undefined" ||
+    typeof process.versions !== "object" ||
+    typeof process.versions?.node !== "string"
+  ) {
     return null;
   }
 
   try {
-    if (codec === "gzip" && typeof zlib.gunzipSync === "function") {
-      return cloneBytes(zlib.gunzipSync(bytes));
-    }
-
-    if (codec === "br" && typeof zlib.brotliDecompressSync === "function") {
-      return cloneBytes(zlib.brotliDecompressSync(bytes));
-    }
-
-    if (codec === "zst" && typeof zlib.zstdDecompressSync === "function") {
-      return cloneBytes(zlib.zstdDecompressSync(bytes));
-    }
+    const module = await import("node:zlib");
+    return module as unknown as NodeZlibLike;
   } catch {
     return null;
   }
-
-  return null;
 }
 
-async function loadNodeZlib(): Promise<NodeZlibLike | null> {
+async function loadNodeStream(): Promise<NodeStreamLike | null> {
   if (
     typeof process === "undefined" ||
     typeof process.versions !== "object" ||
@@ -3272,8 +3688,8 @@ async function loadNodeZlib(): Promise<NodeZlibLike | null> {
   }
 
   try {
-    const module = await import("node:zlib");
-    return module as unknown as NodeZlibLike;
+    const module = await import("node:stream");
+    return module as unknown as NodeStreamLike;
   } catch {
     return null;
   }
@@ -3295,11 +3711,6 @@ function codecFormats(codec: ChunkCodec): string[] {
   return [];
 }
 
-function parseChunkIdFromPath(path: string): string | null {
-  const match = /^events\/(.+)\.ndjson$/.exec(path);
-  return match?.[1] ?? null;
-}
-
 function withinRange(event: WebBlackboxEvent, range?: PlayerRange): boolean {
   if (!range) {
     return true;
@@ -3430,60 +3841,100 @@ function updateActionStats(span: ActionSpan, event: WebBlackboxEvent): void {
   }
 }
 
-async function readJson<TValue>(zip: JSZip, path: string): Promise<TValue> {
-  const content = await readZipFileText(zip, path);
-  return JSON.parse(content) as TValue;
+function countIndexEventReferences(entries: Array<{ eventIds: string[] }>): number {
+  let total = 0;
+
+  for (const entry of entries) {
+    total += entry.eventIds.length;
+    if (!Number.isSafeInteger(total)) {
+      return Number.POSITIVE_INFINITY;
+    }
+  }
+
+  return total;
+}
+
+function clonePlayerBlob(blob: PlayerBlob): PlayerBlob {
+  return {
+    mime: blob.mime,
+    bytes: blob.bytes.slice()
+  };
 }
 
-async function readIntegrityArchiveJson<TValue>(
-  zip: JSZip,
+async function readJsonValue(zipReader: BoundedZipReader, path: string): Promise<unknown> {
+  return readTransientZipEntry(zipReader, path, (bytes) => {
+    const content = decodeArchiveUtf8(bytes, path);
+    return parseArchiveJson(content, path);
+  });
+}
+
+async function readIntegrityArchiveJsonValue(
+  zipReader: BoundedZipReader,
   integrity: HashesManifest,
   path: string,
   archiveKey: CryptoKey | null,
   encryptedFiles: Record<string, ArchiveEncryptedFileMeta>
-): Promise<TValue> {
-  const rawBytes = await readZipFileBytes(zip, path);
-  await assertArchiveFileIntegrity(zip, integrity, path, rawBytes);
-  const bytes = await decryptArchiveBytes(path, rawBytes, archiveKey, encryptedFiles);
-  return JSON.parse(new TextDecoder().decode(bytes)) as TValue;
+): Promise<unknown> {
+  return readTransientZipEntry(zipReader, path, async (rawBytes) => {
+    await assertArchiveFileIntegrity(integrity, path, rawBytes);
+    const bytes = await decryptArchiveBytes(path, rawBytes, archiveKey, encryptedFiles);
+    return parseArchiveJson(decodeArchiveUtf8(bytes, path), path);
+  });
+}
+
+function decodeArchiveUtf8(bytes: Uint8Array, path: string): string {
+  try {
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+  } catch {
+    throw new Error(`Invalid WebBlackbox archive: '${path}' contains invalid UTF-8.`);
+  }
+}
+
+async function readTransientZipEntry<T>(
+  zipReader: BoundedZipReader,
+  path: string,
+  consume: (bytes: Uint8Array) => T | Promise<T>
+): Promise<T> {
+  try {
+    return await consume(await zipReader.read(path));
+  } finally {
+    zipReader.release(path);
+  }
 }
 
-async function readOptionalIntegrityArchiveJson<TValue>(
-  zip: JSZip,
+async function readOptionalIntegrityArchiveJsonValue(
+  zipReader: BoundedZipReader,
   integrity: HashesManifest,
   path: string,
   archiveKey: CryptoKey | null,
   encryptedFiles: Record<string, ArchiveEncryptedFileMeta>
-): Promise<TValue | null> {
-  if (!zip.file(path)) {
+): Promise<unknown | null> {
+  if (!zipReader.has(path)) {
     return null;
   }
 
-  return readIntegrityArchiveJson<TValue>(zip, integrity, path, archiveKey, encryptedFiles);
+  return readIntegrityArchiveJsonValue(zipReader, integrity, path, archiveKey, encryptedFiles);
 }
 
-async function readZipFileBytes(zip: JSZip, path: string): Promise<Uint8Array> {
-  const file = zip.file(path);
-
-  if (!file) {
-    throw new Error(`Archive is missing required file: ${path}`);
+function parseArchiveJson(content: string, path: string): unknown {
+  try {
+    return JSON.parse(content) as unknown;
+  } catch {
+    throw new Error(`Invalid WebBlackbox archive: '${path}' contains malformed JSON.`);
   }
-
-  return file.async("uint8array");
 }
 
-async function readZipFileText(zip: JSZip, path: string): Promise<string> {
-  const file = zip.file(path);
-
-  if (!file) {
-    throw new Error(`Archive is missing required file: ${path}`);
-  }
-
-  return file.async("string");
+function archiveFilePaths(zip: JSZip): string[] {
+  return Object.entries(zip.files)
+    .filter(([, file]) => !file.dir)
+    .map(([path]) => path);
 }
 
-async function assertManifestIntegrity(zip: JSZip, integrity: HashesManifest): Promise<void> {
-  const actual = await sha256Hex(await readZipFileBytes(zip, "manifest.json"));
+async function assertManifestIntegrity(
+  zipReader: BoundedZipReader,
+  integrity: HashesManifest
+): Promise<void> {
+  const actual = await sha256Hex(await zipReader.read("manifest.json"));
 
   if (actual !== integrity.manifestSha256) {
     throw new Error("Archive integrity mismatch for manifest.json");
@@ -3510,10 +3961,9 @@ function assertArchiveFileSet(zip: JSZip, integrity: HashesManifest): void {
 }
 
 async function assertArchiveFileIntegrity(
-  zip: JSZip,
   integrity: HashesManifest,
   path: string,
-  bytes?: Uint8Array
+  bytes: Uint8Array
 ): Promise<void> {
   const expected = integrity.files[path];
 
@@ -3521,7 +3971,7 @@ async function assertArchiveFileIntegrity(
     throw new Error(`Archive integrity manifest is missing hash for ${path}`);
   }
 
-  const actual = await sha256Hex(bytes ?? (await readZipFileBytes(zip, path)));
+  const actual = await sha256Hex(bytes);
 
   if (actual !== expected) {
     throw new Error(`Archive integrity mismatch for ${path}`);
@@ -3529,6 +3979,9 @@ async function assertArchiveFileIntegrity(
 }
 
 function parseBlobPath(path: string): { hash: string; extension: string } | null {
+  if (!isCanonicalArchiveBlobPath(path)) {
+    return null;
+  }
   const prefixed = /^blobs\/sha256-([^.]+)\.(.+)$/.exec(path);
 
   if (!prefixed) {
@@ -3705,29 +4158,321 @@ function fromBase64(value: string): Uint8Array {
 }
 
 function toArrayBuffer(bytes: Uint8Array): ArrayBuffer {
+  if (bytes.buffer instanceof ArrayBuffer) {
+    if (bytes.byteOffset === 0 && bytes.byteLength === bytes.buffer.byteLength) {
+      return bytes.buffer;
+    }
+
+    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+  }
+
   const copy = new Uint8Array(bytes.byteLength);
   copy.set(bytes);
   return copy.buffer;
 }
 
-function cloneBytes(bytes: Uint8Array): Uint8Array {
-  const copy = new Uint8Array(bytes.byteLength);
-  copy.set(bytes);
-  return copy;
-}
+async function normalizeOpenInput(
+  input: PlayerOpenInput,
+  resourceLimits: Readonly<ArchiveResourceLimits>
+): Promise<Uint8Array> {
+  let bytes: Uint8Array;
 
-async function normalizeOpenInput(input: PlayerOpenInput): Promise<Uint8Array> {
   if (input instanceof Uint8Array) {
-    return input;
+    bytes = input;
+  } else if (input instanceof ArrayBuffer) {
+    bytes = new Uint8Array(input);
+  } else if (typeof Blob !== "undefined" && input instanceof Blob) {
+    if (input.size > resourceLimits.maxInputBytes) {
+      throw new ArchiveResourceLimitError(
+        "maxInputBytes",
+        resourceLimits.maxInputBytes,
+        input.size,
+        "Blob size"
+      );
+    }
+
+    bytes = new Uint8Array(await input.arrayBuffer());
+  } else {
+    throw new Error("Unsupported archive input type.");
+  }
+
+  assertArchiveInputResourceLimits(bytes, resourceLimits);
+  return bytes;
+}
+
+/** @internal */
+type HarExportLimits = {
+  maxEntries: number;
+  maxBodyBytes: number;
+  maxTotalBodyBytes: number;
+  maxEntryMetadataBytes: number;
+  maxHeaderFields: number;
+  maxDerivedFields: number;
+  maxHarBytes: number;
+  maxEncodedBytes: number;
+};
+
+/** @internal */
+type HarExportResourceName = keyof HarExportLimits;
+
+/** @internal */
+class HarExportResourceLimitError extends Error {
+  public override readonly name = "HarExportResourceLimitError";
+
+  public constructor(
+    public readonly resource: HarExportResourceName,
+    public readonly limit: number,
+    public readonly actual: number,
+    public readonly completedEntries: number,
+    public readonly bodyBytesRead: number
+  ) {
+    super(
+      `HAR limit ${resource} exceeded (${actual} > ${limit}; ` +
+        `entries=${completedEntries}; bodyBytes=${bodyBytesRead}).`
+    );
   }
+}
+
+class BoundedHarJsonWriter {
+  private readonly chunks: string[] = [];
+
+  private rawBytes = 0;
+
+  // JSON.stringify(harText) contributes surrounding quotes in addition to escaped contents.
+  private encodedBytes = 2;
+
+  public constructor(private readonly limits: Readonly<HarExportLimits>) {}
+
+  public append(chunk: string, completedEntries: number, bodyBytesRead: number): void {
+    const rawChunkBytes = utf8ByteLengthAtMost(
+      chunk,
+      Math.max(0, this.limits.maxHarBytes - this.rawBytes)
+    );
+    const nextRawBytes = addSafeInteger(this.rawBytes, rawChunkBytes);
+    if (nextRawBytes > this.limits.maxHarBytes) {
+      throw new HarExportResourceLimitError(
+        "maxHarBytes",
+        this.limits.maxHarBytes,
+        nextRawBytes,
+        completedEntries,
+        bodyBytesRead
+      );
+    }
 
-  if (input instanceof ArrayBuffer) {
-    return new Uint8Array(input);
+    const encodedChunkBytes = jsonStringContentByteLengthAtMost(
+      chunk,
+      Math.max(0, this.limits.maxEncodedBytes - this.encodedBytes)
+    );
+    const nextEncodedBytes = addSafeInteger(this.encodedBytes, encodedChunkBytes);
+    if (nextEncodedBytes > this.limits.maxEncodedBytes) {
+      throw new HarExportResourceLimitError(
+        "maxEncodedBytes",
+        this.limits.maxEncodedBytes,
+        nextEncodedBytes,
+        completedEntries,
+        bodyBytesRead
+      );
+    }
+
+    this.rawBytes = nextRawBytes;
+    this.encodedBytes = nextEncodedBytes;
+    this.chunks.push(chunk);
+  }
+
+  public finish(): string {
+    return this.chunks.join("");
+  }
+}
+
+function resolveHarExportLimits(limits: HarExportLimits): HarExportLimits {
+  if (!limits || typeof limits !== "object") {
+    throw new TypeError("HAR export limits are required.");
   }
 
-  if (typeof Blob !== "undefined" && input instanceof Blob) {
-    return new Uint8Array(await input.arrayBuffer());
+  const values = [
+    limits.maxEntries,
+    limits.maxBodyBytes,
+    limits.maxTotalBodyBytes,
+    limits.maxEntryMetadataBytes,
+    limits.maxHeaderFields,
+    limits.maxDerivedFields,
+    limits.maxHarBytes,
+    limits.maxEncodedBytes
+  ];
+  if (values.some((value) => !Number.isSafeInteger(value) || value <= 0)) {
+    throw new TypeError("HAR export limits must be positive safe integers.");
   }
 
-  throw new Error("Unsupported archive input type.");
+  return { ...limits };
+}
+
+function assertHarEntryMetadataBudget(
+  entry: NetworkWaterfallEntry,
+  limits: Readonly<HarExportLimits>,
+  completedEntries: number,
+  bodyBytesRead: number
+): void {
+  let metadataBytes = 0;
+
+  const addString = (value: string | undefined): void => {
+    if (value === undefined) {
+      return;
+    }
+
+    const addedBytes = utf8ByteLengthAtMost(
+      value,
+      Math.max(0, limits.maxEntryMetadataBytes - metadataBytes)
+    );
+    metadataBytes = addSafeInteger(metadataBytes, addedBytes);
+    if (metadataBytes > limits.maxEntryMetadataBytes) {
+      throw new HarExportResourceLimitError(
+        "maxEntryMetadataBytes",
+        limits.maxEntryMetadataBytes,
+        metadataBytes,
+        completedEntries,
+        bodyBytesRead
+      );
+    }
+  };
+
+  const addHeaders = (headers: Record<string, string>): void => {
+    for (const [name, value] of Object.entries(headers)) {
+      addString(name);
+      addString(value);
+    }
+  };
+
+  addString(entry.method);
+  addString(entry.url);
+  addString(entry.statusText);
+  addString(entry.mimeType);
+  addString(entry.requestBodyText);
+  addHeaders(entry.requestHeaders);
+  addHeaders(entry.responseHeaders);
+}
+
+function assertHarEntryFieldBudget(
+  entry: NetworkWaterfallEntry,
+  limits: Readonly<HarExportLimits>,
+  completedEntries: number,
+  bodyBytesRead: number
+): void {
+  const headerFields =
+    Object.keys(entry.requestHeaders).length + Object.keys(entry.responseHeaders).length;
+  if (headerFields > limits.maxHeaderFields) {
+    throw new HarExportResourceLimitError(
+      "maxHeaderFields",
+      limits.maxHeaderFields,
+      headerFields,
+      completedEntries,
+      bodyBytesRead
+    );
+  }
+
+  const queryStart = entry.url.indexOf("?");
+  const queryEnd = entry.url.indexOf("#", queryStart + 1);
+  const derivedFields =
+    (queryStart < 0 ? 0 : countDelimitedFields(entry.url, "&", queryStart + 1, queryEnd)) +
+    countDelimitedFields(entry.requestHeaders.cookie ?? "", ";") +
+    countDelimitedFields(entry.responseHeaders["set-cookie"] ?? "", ";");
+  if (derivedFields > limits.maxDerivedFields) {
+    throw new HarExportResourceLimitError(
+      "maxDerivedFields",
+      limits.maxDerivedFields,
+      derivedFields,
+      completedEntries,
+      bodyBytesRead
+    );
+  }
+}
+
+function countDelimitedFields(
+  value: string,
+  delimiter: string,
+  start = 0,
+  end = value.length
+): number {
+  if (start < 0 || start >= value.length || start === end) {
+    return 0;
+  }
+
+  let fields = 1;
+  const stop = end < 0 ? value.length : end;
+  for (let index = start; index < stop; index += 1) {
+    if (value[index] === delimiter) {
+      fields += 1;
+    }
+  }
+  return fields;
+}
+
+function utf8ByteLengthAtMost(value: string, maxBytes: number): number {
+  let bytes = 0;
+
+  for (let index = 0; index < value.length; index += 1) {
+    const code = value.charCodeAt(index);
+    if (code <= 0x7f) {
+      bytes += 1;
+    } else if (code <= 0x7ff) {
+      bytes += 2;
+    } else if (code >= 0xd800 && code <= 0xdbff) {
+      const next = value.charCodeAt(index + 1);
+      if (next >= 0xdc00 && next <= 0xdfff) {
+        bytes += 4;
+        index += 1;
+      } else {
+        bytes += 3;
+      }
+    } else {
+      bytes += 3;
+    }
+
+    if (bytes > maxBytes) {
+      return bytes;
+    }
+  }
+
+  return bytes;
+}
+
+function jsonStringContentByteLengthAtMost(value: string, maxBytes: number): number {
+  let bytes = 0;
+
+  for (let index = 0; index < value.length; index += 1) {
+    const code = value.charCodeAt(index);
+    if (code === 0x22 || code === 0x5c) {
+      bytes += 2;
+    } else if (code === 0x08 || code === 0x09 || code === 0x0a || code === 0x0c || code === 0x0d) {
+      bytes += 2;
+    } else if (code <= 0x1f) {
+      bytes += 6;
+    } else if (code <= 0x7f) {
+      bytes += 1;
+    } else if (code <= 0x7ff) {
+      bytes += 2;
+    } else if (code >= 0xd800 && code <= 0xdbff) {
+      const next = value.charCodeAt(index + 1);
+      if (next >= 0xdc00 && next <= 0xdfff) {
+        bytes += 4;
+        index += 1;
+      } else {
+        bytes += 6;
+      }
+    } else if (code >= 0xdc00 && code <= 0xdfff) {
+      bytes += 6;
+    } else {
+      bytes += 3;
+    }
+
+    if (bytes > maxBytes) {
+      return bytes;
+    }
+  }
+
+  return bytes;
+}
+
+function addSafeInteger(left: number, right: number): number {
+  const value = left + right;
+  return Number.isSafeInteger(value) ? value : Number.MAX_SAFE_INTEGER;
 }
diff --git a/packages/player-sdk/typedoc.json b/packages/player-sdk/typedoc.json
index a4c9a03..266fbc8 100644
--- a/packages/player-sdk/typedoc.json
+++ b/packages/player-sdk/typedoc.json
@@ -8,6 +8,7 @@
   "excludeInternal": true,
   "readme": "README.md",
   "name": "@webblackbox/player-sdk API",
+  "gitRevision": "main",
   "plugin": [],
   "sort": ["source-order"]
 }
diff --git a/packages/player-sdk/vitest.config.ts b/packages/player-sdk/vitest.config.ts
index ed6e2b4..fbe8880 100644
--- a/packages/player-sdk/vitest.config.ts
+++ b/packages/player-sdk/vitest.config.ts
@@ -19,10 +19,10 @@ export default defineConfig({
       include: ["src/**/*.ts"],
       exclude: ["src/**/*.test.ts"],
       thresholds: {
-        lines: 80,
-        statements: 80,
-        functions: 80,
-        branches: 65
+        lines: 81,
+        statements: 81,
+        functions: 88,
+        branches: 66
       }
     }
   }
diff --git a/packages/protocol/CHANGELOG.md b/packages/protocol/CHANGELOG.md
index 441ef35..ed4d29c 100644
--- a/packages/protocol/CHANGELOG.md
+++ b/packages/protocol/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @webblackbox/protocol
 
+## 0.7.0
+
+### Minor Changes
+
+- b3cfda9: Extend privacy-scan coverage metadata and reject non-canonical archive layouts, ambiguous blobs,
+  invalid event payloads, and regressing chunk timelines while keeping browser schema bundles
+  tree-shakeable.
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/packages/protocol/LICENSE b/packages/protocol/LICENSE
new file mode 100644
index 0000000..fcf7ea4
--- /dev/null
+++ b/packages/protocol/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Web LLM
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/protocol/README.md b/packages/protocol/README.md
index 9877423..573b8b5 100644
--- a/packages/protocol/README.md
+++ b/packages/protocol/README.md
@@ -36,7 +36,7 @@ npm install @webblackbox/protocol
 
 ## Event Types
 
-WebBlackbox currently defines 57 event types, organized by category:
+WebBlackbox currently defines 62 event types, organized across 12 categories:
 
 ### Meta Events
 
@@ -44,6 +44,10 @@ WebBlackbox currently defines 57 event types, organized by category:
 - `meta.session.end` — Session termination
 - `meta.config` — Configuration snapshot
 
+### Privacy Events
+
+- `privacy.violation` — Capture-policy or redaction violation notice
+
 ### System Events
 
 - `sys.debugger.attach` / `sys.debugger.detach` — CDP debugger lifecycle
@@ -101,6 +105,10 @@ WebBlackbox currently defines 57 event types, organized by category:
 ### Screen Events
 
 - `screen.screenshot` — Page screenshot with pointer position
+- `screen.recording.start` — Screen recording session started
+- `screen.recording.chunk` — Screen recording media chunk
+- `screen.recording.end` — Screen recording session completed
+- `screen.recording.error` — Screen recording failure
 - `screen.viewport` — Viewport dimension changes
 
 ### Storage Events
@@ -195,6 +203,9 @@ All types have corresponding Zod schemas for runtime validation:
 
 ```typescript
 import {
+  assertArchiveBlobPaths,
+  assertArchiveFilePaths,
+  isCanonicalArchiveBlobPath,
   validateEvent,
   validateEventData,
   validateMessage,
@@ -204,6 +215,14 @@ import {
   getEventPayloadSchema
 } from "@webblackbox/protocol";
 
+// Reject files outside the closed archive layout, non-canonical 64-character
+// lowercase SHA-256 blob paths, and duplicate logical blob hashes.
+assertArchiveFilePaths(archivePaths);
+const blobCount = assertArchiveBlobPaths(archivePaths);
+if (!isCanonicalArchiveBlobPath(candidateBlobPath)) {
+  throw new Error("Invalid blob path");
+}
+
 // Validate a full event (envelope + payload)
 const result = validateEvent(unknownEvent);
 if (result.success) {
diff --git a/packages/protocol/package.json b/packages/protocol/package.json
index c97cf30..e90af07 100644
--- a/packages/protocol/package.json
+++ b/packages/protocol/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@webblackbox/protocol",
   "description": "Shared event types, schemas, IDs, and configuration defaults for the WebBlackbox ecosystem.",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -40,9 +40,11 @@
   "scripts": {
     "dev": "tsup src/index.ts --format esm --dts --watch --clean",
     "build": "tsup src/index.ts --format esm --dts --clean",
+    "prepack": "pnpm run build",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run --passWithNoTests"
+    "test": "vitest run --passWithNoTests",
+    "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
     "zod": "^4.1.12"
diff --git a/packages/protocol/src/archive-validation.test.ts b/packages/protocol/src/archive-validation.test.ts
new file mode 100644
index 0000000..39e498c
--- /dev/null
+++ b/packages/protocol/src/archive-validation.test.ts
@@ -0,0 +1,294 @@
+import { describe, expect, it } from "vitest";
+
+import type {
+  ChunkTimeIndexEntry,
+  ExportManifest,
+  PrivacyManifest,
+  WebBlackboxEvent
+} from "./types.js";
+
+import { assertArchiveChunk, assertArchiveLayout } from "./archive-validation.js";
+import { DEFAULT_REDACTION_PROFILE } from "./defaults.js";
+
+const SHA256 = "0".repeat(64);
+
+describe("archive timeline validation", () => {
+  it("rejects wall-clock regressions inside an otherwise bounded chunk", () => {
+    const index = createIndexEntry(1, 100, 200, 1, 4, 4);
+    const events = [
+      createEvent("E-1", 100, 1),
+      createEvent("E-2", 150, 2),
+      createEvent("E-3", 120, 3),
+      createEvent("E-4", 200, 4)
+    ];
+
+    expect(() =>
+      assertArchiveChunk({
+        path: "events/chunk-000001.ndjson",
+        index,
+        encodedByteLength: index.byteLength,
+        encodedSha256: index.sha256,
+        events
+      })
+    ).toThrow(/events are not in wall-clock order/i);
+  });
+
+  it.each([
+    {
+      label: "wall-clock",
+      second: createIndexEntry(2, 90, 120, 20, 30),
+      expected: /wall-clock ranges move backwards/i
+    },
+    {
+      label: "monotonic",
+      second: createIndexEntry(2, 110, 120, 9, 30),
+      expected: /monotonic ranges move backwards/i
+    }
+  ])("rejects $label regressions between chunks", ({ second, expected }) => {
+    expect(() => assertTwoChunkLayout(second)).toThrow(expected);
+  });
+
+  it("accepts adjacent chunks that share their boundary timestamps", () => {
+    const second = createIndexEntry(2, 100, 120, 10, 30);
+
+    expect(() => assertTwoChunkLayout(second)).not.toThrow();
+  });
+
+  it.each([
+    "blobs/private.json",
+    "blobs/sha256-nested/value.json",
+    "blobs/sha256-.json",
+    "blobs/sha256-not-a-digest.json",
+    `blobs/sha256-${"a".repeat(64)}.exe`
+  ])("rejects non-canonical blob path %s", (blobPath) => {
+    const manifest = createManifest();
+    manifest.stats.blobCount = 1;
+
+    expect(() =>
+      assertArchiveLayout({
+        paths: [
+          "manifest.json",
+          "index/time.json",
+          "index/req.json",
+          "index/inv.json",
+          "events/chunk-000001.ndjson",
+          "events/chunk-000002.ndjson",
+          blobPath
+        ],
+        manifest,
+        timeIndex: [createIndexEntry(1, 50, 100, 1, 10), createIndexEntry(2, 100, 120, 10, 30)],
+        requestIndex: [],
+        invertedIndex: [],
+        privacyManifest: null
+      })
+    ).toThrow(/invalid blob path/i);
+  });
+
+  it("rejects two blob paths that alias the same content digest", () => {
+    const manifest = createManifest();
+    manifest.stats.blobCount = 2;
+    const hash = "a".repeat(64);
+
+    expect(() =>
+      assertArchiveLayout({
+        paths: [
+          "manifest.json",
+          "index/time.json",
+          "index/req.json",
+          "index/inv.json",
+          "events/chunk-000001.ndjson",
+          "events/chunk-000002.ndjson",
+          `blobs/sha256-${hash}.json`,
+          `blobs/sha256-${hash}.bin`
+        ],
+        manifest,
+        timeIndex: [createIndexEntry(1, 50, 100, 1, 10), createIndexEntry(2, 100, 120, 10, 30)],
+        requestIndex: [],
+        invertedIndex: [],
+        privacyManifest: null
+      })
+    ).toThrow(/duplicate blob hash/i);
+  });
+
+  it.each(["secrets/private.json", "assets/nested/private.txt"])(
+    "rejects unsupported archive file %s",
+    (unsupportedPath) => {
+      expect(() =>
+        assertArchiveLayout({
+          paths: [
+            "manifest.json",
+            "index/time.json",
+            "index/req.json",
+            "index/inv.json",
+            "events/chunk-000001.ndjson",
+            "events/chunk-000002.ndjson",
+            unsupportedPath
+          ],
+          manifest: createManifest(),
+          timeIndex: [createIndexEntry(1, 50, 100, 1, 10), createIndexEntry(2, 100, 120, 10, 30)],
+          requestIndex: [],
+          invertedIndex: [],
+          privacyManifest: null
+        })
+      ).toThrow(/unsupported file/i);
+    }
+  );
+
+  it.each([
+    {
+      label: "event counts beyond totals",
+      mutate: (privacy: PrivacyManifest) => {
+        privacy.scanner.coverage!.scannedEventCount = 3;
+      },
+      expected: /coverage exceeds archive totals/i
+    },
+    {
+      label: "complete coverage below totals",
+      mutate: (privacy: PrivacyManifest) => {
+        privacy.scanner.coverage!.scannedEventCount = 1;
+      },
+      expected: /coverage is inconsistent/i
+    },
+    {
+      label: "incomplete coverage without a reason",
+      mutate: (privacy: PrivacyManifest) => {
+        privacy.scanner.coverage!.complete = false;
+      },
+      expected: /coverage is inconsistent/i
+    }
+  ])("rejects $label", ({ mutate, expected }) => {
+    const privacy = createPrivacyManifest();
+    mutate(privacy);
+
+    expect(() => assertPrivacyLayout(privacy)).toThrow(expected);
+  });
+
+  it("rejects privacy scanner status that contradicts its findings", () => {
+    const privacy = createPrivacyManifest();
+    privacy.scanner.findings.push({
+      kind: "private-key",
+      severity: "high",
+      path: "event:E-1",
+      matchCount: 1,
+      sampleSha256: SHA256
+    });
+
+    expect(() => assertPrivacyLayout(privacy)).toThrow(/status does not match its findings/i);
+  });
+});
+
+function assertPrivacyLayout(privacyManifest: PrivacyManifest): void {
+  assertArchiveLayout({
+    paths: [
+      "manifest.json",
+      "index/time.json",
+      "index/req.json",
+      "index/inv.json",
+      "privacy/manifest.json",
+      "events/chunk-000001.ndjson",
+      "events/chunk-000002.ndjson"
+    ],
+    manifest: createManifest(),
+    timeIndex: [createIndexEntry(1, 50, 100, 1, 10), createIndexEntry(2, 100, 120, 10, 30)],
+    requestIndex: [],
+    invertedIndex: [],
+    privacyManifest
+  });
+}
+
+function createPrivacyManifest(): PrivacyManifest {
+  return {
+    schemaVersion: 1,
+    generatedAt: new Date(0).toISOString(),
+    categories: [],
+    scanner: {
+      scannedAt: new Date(0).toISOString(),
+      preEncryption: true,
+      status: "passed",
+      findings: [],
+      coverage: {
+        complete: true,
+        scannedEventCount: 2,
+        scannedBlobCount: 0,
+        opaqueBlobCount: 0,
+        inspectedBytes: 1
+      }
+    },
+    encryption: { archive: "plaintext" },
+    totals: { events: 2, blobs: 0, privacyViolations: 0 }
+  };
+}
+
+function assertTwoChunkLayout(second: ChunkTimeIndexEntry): void {
+  const entries = [createIndexEntry(1, 50, 100, 1, 10), second];
+
+  assertArchiveLayout({
+    paths: [
+      "manifest.json",
+      "index/time.json",
+      "index/req.json",
+      "index/inv.json",
+      "events/chunk-000001.ndjson",
+      "events/chunk-000002.ndjson"
+    ],
+    manifest: createManifest(),
+    timeIndex: entries,
+    requestIndex: [],
+    invertedIndex: [],
+    privacyManifest: null
+  });
+}
+
+function createIndexEntry(
+  seq: number,
+  tStart: number,
+  tEnd: number,
+  monoStart: number,
+  monoEnd: number,
+  eventCount = 1
+): ChunkTimeIndexEntry {
+  return {
+    chunkId: `chunk-${String(seq).padStart(6, "0")}`,
+    seq,
+    tStart,
+    tEnd,
+    monoStart,
+    monoEnd,
+    eventCount,
+    byteLength: 1,
+    codec: "none",
+    sha256: SHA256
+  };
+}
+
+function createManifest(): ExportManifest {
+  return {
+    protocolVersion: 1,
+    createdAt: new Date(0).toISOString(),
+    mode: "lite",
+    site: {
+      origin: "https://example.com"
+    },
+    chunkCodec: "none",
+    redactionProfile: DEFAULT_REDACTION_PROFILE,
+    stats: {
+      eventCount: 2,
+      chunkCount: 2,
+      blobCount: 0,
+      durationMs: 70
+    }
+  };
+}
+
+function createEvent(id: string, t: number, mono: number): WebBlackboxEvent {
+  return {
+    v: 1,
+    sid: "S-archive-validation",
+    tab: 1,
+    t,
+    mono,
+    type: "user.marker",
+    id,
+    data: {}
+  };
+}
diff --git a/packages/protocol/src/archive-validation.ts b/packages/protocol/src/archive-validation.ts
new file mode 100644
index 0000000..98458bc
--- /dev/null
+++ b/packages/protocol/src/archive-validation.ts
@@ -0,0 +1,503 @@
+import type {
+  ChunkTimeIndexEntry,
+  ExportManifest,
+  HashesManifest,
+  InvertedIndexEntry,
+  PrivacyManifest,
+  RequestIndexEntry,
+  WebBlackboxEvent
+} from "./types.js";
+
+import {
+  exportManifestSchema,
+  hashesManifestSchema,
+  invertedIndexSchema,
+  privacyManifestSchema,
+  requestIndexSchema,
+  timeIndexSchema,
+  webBlackboxEventSchema
+} from "./schemas.js";
+
+const REQUIRED_ARCHIVE_PATHS = [
+  "manifest.json",
+  "index/time.json",
+  "index/req.json",
+  "index/inv.json"
+] as const;
+
+const SUPPORTED_ARCHIVE_METADATA_PATHS = new Set([
+  ...REQUIRED_ARCHIVE_PATHS,
+  "integrity/hashes.json",
+  "privacy/manifest.json"
+]);
+
+const PRIVATE_INDEX_PATHS = new Set([
+  "index/time.json",
+  "index/req.json",
+  "index/inv.json",
+  "privacy/manifest.json"
+]);
+
+const EVENT_PATH_PATTERN = /^events\/([A-Za-z0-9][A-Za-z0-9._-]{0,255})\.ndjson$/;
+const BLOB_PATH_PATTERN = /^blobs\/sha256-([a-f0-9]{64})\.(bin|html|json|mp4|png|webm|webp)$/;
+
+type ParseResult<TValue> =
+  | { success: true; data: TValue }
+  | {
+      success: false;
+      error: {
+        issues: Array<{
+          path: PropertyKey[];
+          message: string;
+        }>;
+      };
+    };
+
+type RuntimeSchema<TValue> = {
+  safeParse(value: unknown): ParseResult<TValue>;
+};
+
+export type ArchiveLayoutInput = {
+  paths: string[];
+  manifest: ExportManifest;
+  timeIndex: ChunkTimeIndexEntry[];
+  requestIndex: RequestIndexEntry[];
+  invertedIndex: InvertedIndexEntry[];
+  privacyManifest: PrivacyManifest | null;
+};
+
+export type ArchiveChunkValidationInput = {
+  path: string;
+  index: ChunkTimeIndexEntry;
+  encodedByteLength: number;
+  encodedSha256: string;
+  events: WebBlackboxEvent[];
+};
+
+/** Parses a runtime value with the protocol archive manifest schema. */
+export function parseExportManifest(value: unknown): ExportManifest {
+  return parseWithSchema(exportManifestSchema, value, "manifest.json");
+}
+
+/** Parses a runtime value with the protocol integrity manifest schema. */
+export function parseHashesManifest(value: unknown): HashesManifest {
+  return parseWithSchema(hashesManifestSchema, value, "integrity/hashes.json");
+}
+
+/** Parses a runtime value with the protocol time-index schema. */
+export function parseTimeIndex(value: unknown): ChunkTimeIndexEntry[] {
+  return parseWithSchema(timeIndexSchema, value, "index/time.json");
+}
+
+/** Parses a runtime value with the protocol request-index schema. */
+export function parseRequestIndex(value: unknown): RequestIndexEntry[] {
+  return parseWithSchema(requestIndexSchema, value, "index/req.json");
+}
+
+/** Parses a runtime value with the protocol inverted-index schema. */
+export function parseInvertedIndex(value: unknown): InvertedIndexEntry[] {
+  return parseWithSchema(invertedIndexSchema, value, "index/inv.json");
+}
+
+/** Parses a runtime value with the protocol privacy-manifest schema. */
+export function parsePrivacyManifest(value: unknown): PrivacyManifest {
+  return parseWithSchema(privacyManifestSchema, value, "privacy/manifest.json");
+}
+
+/** Parses and validates a single archived protocol event. */
+export function parseArchivedEvent(value: unknown, path: string, line: number): WebBlackboxEvent {
+  return parseWithSchema(webBlackboxEventSchema, value, `${path} event line ${line}`);
+}
+
+/** Returns whether an archive path contains private session material. */
+export function isPrivateArchivePath(path: string): boolean {
+  return path.startsWith("events/") || path.startsWith("blobs/") || PRIVATE_INDEX_PATHS.has(path);
+}
+
+/**
+ * Validates file/index/encryption invariants shared by archive readers.
+ * This intentionally validates relationships that independent Zod schemas cannot express.
+ */
+export function assertArchiveLayout(input: ArchiveLayoutInput): void {
+  const uniquePaths = new Set(input.paths);
+
+  if (uniquePaths.size !== input.paths.length) {
+    throw archiveError("archive contains duplicate file paths");
+  }
+
+  for (const requiredPath of REQUIRED_ARCHIVE_PATHS) {
+    if (!uniquePaths.has(requiredPath)) {
+      throw archiveError(`archive is missing required file '${requiredPath}'`);
+    }
+  }
+
+  assertArchiveFilePaths(input.paths);
+
+  assertEncryptionCoverage(input.manifest, input.paths);
+  assertTimeIndexLayout(input.manifest, input.timeIndex, input.paths);
+  assertSecondaryIndexes(input.requestIndex, input.invertedIndex);
+  assertPrivacyConsistency(input.manifest, input.privacyManifest);
+
+  const blobCount = assertArchiveBlobPaths(input.paths);
+
+  if (input.manifest.stats.blobCount !== blobCount) {
+    throw archiveError("manifest blob count does not match archive contents");
+  }
+}
+
+/** Validates canonical blob names and returns the number of unique content digests. */
+export function assertArchiveBlobPaths(paths: readonly string[]): number {
+  const blobPaths = paths.filter((path) => path.startsWith("blobs/"));
+  const blobHashes = new Set<string>();
+
+  for (const path of blobPaths) {
+    const match = BLOB_PATH_PATTERN.exec(path);
+    const hash = match?.[1];
+    if (!hash) {
+      throw archiveError(`archive contains invalid blob path '${path}'`);
+    }
+    if (blobHashes.has(hash)) {
+      throw archiveError(`archive contains duplicate blob hash '${hash}'`);
+    }
+    blobHashes.add(hash);
+  }
+
+  return blobPaths.length;
+}
+
+/** Rejects files outside the closed archive layout before any private entry must be decoded. */
+export function assertArchiveFilePaths(paths: string[]): void {
+  for (const path of paths) {
+    if (path.startsWith("blobs/")) {
+      if (!isCanonicalArchiveBlobPath(path)) {
+        throw archiveError(`archive contains invalid blob path '${path}'`);
+      }
+      continue;
+    }
+    if (SUPPORTED_ARCHIVE_METADATA_PATHS.has(path) || EVENT_PATH_PATTERN.test(path)) {
+      continue;
+    }
+    throw archiveError(`archive contains unsupported file '${path}'`);
+  }
+}
+
+/** Returns whether a path uses the canonical archive blob namespace understood by readers. */
+export function isCanonicalArchiveBlobPath(path: string): boolean {
+  return BLOB_PATH_PATTERN.test(path);
+}
+
+/** Validates an already decoded event chunk against its signed time-index entry. */
+export function assertArchiveChunk(input: ArchiveChunkValidationInput): void {
+  const { index, events } = input;
+
+  if (input.encodedByteLength !== index.byteLength) {
+    throw archiveError(`chunk metadata byte length mismatch for '${input.path}'`);
+  }
+
+  if (input.encodedSha256 !== index.sha256) {
+    throw archiveError(`chunk metadata digest mismatch for '${input.path}'`);
+  }
+
+  if (events.length !== index.eventCount) {
+    throw archiveError(`chunk metadata event count mismatch for '${input.path}'`);
+  }
+
+  if (events.length === 0) {
+    throw archiveError(`indexed event chunk '${input.path}' is empty`);
+  }
+
+  const first = events[0];
+  const last = events[events.length - 1];
+
+  if (
+    !first ||
+    !last ||
+    first.t !== index.tStart ||
+    last.t !== index.tEnd ||
+    first.mono !== index.monoStart ||
+    last.mono !== index.monoEnd
+  ) {
+    throw archiveError(`chunk time bounds do not match events for '${input.path}'`);
+  }
+
+  const eventIds = new Set<string>();
+  let previousTime = Number.NEGATIVE_INFINITY;
+  let previousMono = Number.NEGATIVE_INFINITY;
+
+  for (const event of events) {
+    if (eventIds.has(event.id)) {
+      throw archiveError(`chunk '${input.path}' contains duplicate event ids`);
+    }
+
+    if (event.t < previousTime) {
+      throw archiveError(`chunk '${input.path}' events are not in wall-clock order`);
+    }
+
+    if (event.mono < previousMono) {
+      throw archiveError(`chunk '${input.path}' events are not in monotonic order`);
+    }
+
+    if (
+      event.t < index.tStart ||
+      event.t > index.tEnd ||
+      event.mono < index.monoStart ||
+      event.mono > index.monoEnd
+    ) {
+      throw archiveError(`chunk '${input.path}' contains an event outside its index bounds`);
+    }
+
+    eventIds.add(event.id);
+    previousTime = event.t;
+    previousMono = event.mono;
+  }
+}
+
+/** Validates global event and secondary-index references after all chunks are decoded. */
+export function assertArchiveEventIndexes(
+  manifest: ExportManifest,
+  events: WebBlackboxEvent[],
+  requestIndex: RequestIndexEntry[],
+  invertedIndex: InvertedIndexEntry[]
+): void {
+  if (events.length !== manifest.stats.eventCount) {
+    throw archiveError("manifest event count does not match decoded events");
+  }
+
+  const eventIds = new Set<string>();
+  let sessionId: string | null = null;
+
+  for (const event of events) {
+    if (eventIds.has(event.id)) {
+      throw archiveError("archive contains duplicate event ids");
+    }
+
+    if (sessionId !== null && event.sid !== sessionId) {
+      throw archiveError("archive event chunks contain multiple session ids");
+    }
+
+    sessionId ??= event.sid;
+    eventIds.add(event.id);
+  }
+
+  for (const entry of [...requestIndex, ...invertedIndex]) {
+    for (const eventId of entry.eventIds) {
+      if (!eventIds.has(eventId)) {
+        throw archiveError("archive index references an unknown event id");
+      }
+    }
+  }
+}
+
+function assertEncryptionCoverage(manifest: ExportManifest, paths: string[]): void {
+  const encryption = manifest.encryption;
+
+  if (!encryption) {
+    return;
+  }
+
+  const privatePaths = paths.filter(isPrivateArchivePath).sort();
+  const privatePathSet = new Set(privatePaths);
+  const mappedPaths = Object.keys(encryption.files).sort();
+
+  for (const path of privatePaths) {
+    if (!encryption.files[path]) {
+      throw archiveError(`encrypted archive is missing file metadata for '${path}'`);
+    }
+  }
+
+  for (const path of mappedPaths) {
+    if (!privatePathSet.has(path)) {
+      throw archiveError(`encrypted archive contains invalid file metadata for '${path}'`);
+    }
+  }
+
+  const initializationVectors = new Set<string>();
+
+  for (const path of mappedPaths) {
+    const iv = encryption.files[path]?.ivBase64;
+
+    if (!iv) {
+      throw archiveError(`encrypted archive is missing an initialization vector for '${path}'`);
+    }
+
+    if (initializationVectors.has(iv)) {
+      throw archiveError("encrypted archive reuses an initialization vector");
+    }
+
+    initializationVectors.add(iv);
+  }
+}
+
+function assertTimeIndexLayout(
+  manifest: ExportManifest,
+  timeIndex: ChunkTimeIndexEntry[],
+  paths: string[]
+): void {
+  const eventPaths = paths.filter((path) => path.startsWith("events/")).sort();
+  const indexedPaths = new Set<string>();
+  const chunkIds = new Set<string>();
+  const sequences = new Set<number>();
+  let previousSequence = 0;
+  let previousTimeEnd = Number.NEGATIVE_INFINITY;
+  let previousMonoEnd = Number.NEGATIVE_INFINITY;
+  let indexedEventCount = 0;
+
+  for (const entry of timeIndex) {
+    const path = `events/${entry.chunkId}.ndjson`;
+
+    if (!EVENT_PATH_PATTERN.test(path)) {
+      throw archiveError("time index contains an invalid chunk id");
+    }
+
+    if (chunkIds.has(entry.chunkId) || sequences.has(entry.seq) || indexedPaths.has(path)) {
+      throw archiveError("time index contains duplicate chunk ids or sequences");
+    }
+
+    if (entry.seq <= previousSequence) {
+      throw archiveError("time index sequences are not strictly increasing");
+    }
+
+    if (entry.tStart < previousTimeEnd) {
+      throw archiveError("time index wall-clock ranges move backwards between chunks");
+    }
+
+    if (entry.monoStart < previousMonoEnd) {
+      throw archiveError("time index monotonic ranges move backwards between chunks");
+    }
+
+    chunkIds.add(entry.chunkId);
+    sequences.add(entry.seq);
+    indexedPaths.add(path);
+    previousSequence = entry.seq;
+    previousTimeEnd = entry.tEnd;
+    previousMonoEnd = entry.monoEnd;
+    indexedEventCount += entry.eventCount;
+  }
+
+  if (eventPaths.length !== indexedPaths.size) {
+    throw archiveError("time index does not match archive event chunks");
+  }
+
+  for (const path of eventPaths) {
+    if (!indexedPaths.has(path)) {
+      throw archiveError(`time index is missing event chunk '${path}'`);
+    }
+  }
+
+  if (manifest.stats.chunkCount !== timeIndex.length) {
+    throw archiveError("manifest chunk count does not match time index");
+  }
+
+  if (manifest.stats.eventCount !== indexedEventCount) {
+    throw archiveError("manifest event count does not match time index");
+  }
+}
+
+function assertSecondaryIndexes(
+  requestIndex: RequestIndexEntry[],
+  invertedIndex: InvertedIndexEntry[]
+): void {
+  const requestIds = new Set<string>();
+  const terms = new Set<string>();
+
+  for (const entry of requestIndex) {
+    if (requestIds.has(entry.reqId) || new Set(entry.eventIds).size !== entry.eventIds.length) {
+      throw archiveError("request index contains duplicate ids or event references");
+    }
+
+    requestIds.add(entry.reqId);
+  }
+
+  for (const entry of invertedIndex) {
+    const normalizedTerm = entry.term.toLowerCase();
+
+    if (terms.has(normalizedTerm) || new Set(entry.eventIds).size !== entry.eventIds.length) {
+      throw archiveError("inverted index contains duplicate terms or event references");
+    }
+
+    terms.add(normalizedTerm);
+  }
+}
+
+function assertPrivacyConsistency(
+  manifest: ExportManifest,
+  privacyManifest: PrivacyManifest | null
+): void {
+  if (!privacyManifest) {
+    return;
+  }
+
+  const encrypted = Boolean(manifest.encryption);
+
+  if (
+    privacyManifest.encryption.archive !== (encrypted ? "encrypted" : "plaintext") ||
+    (privacyManifest.encryption.algorithm !== undefined) !== encrypted
+  ) {
+    throw archiveError("privacy manifest encryption state does not match archive manifest");
+  }
+
+  if (privacyManifest.transfer && privacyManifest.transfer.encrypted !== encrypted) {
+    throw archiveError("privacy transfer encryption state does not match archive manifest");
+  }
+
+  if (
+    privacyManifest.totals.events !== manifest.stats.eventCount ||
+    privacyManifest.totals.blobs !== manifest.stats.blobCount
+  ) {
+    throw archiveError("privacy manifest totals do not match archive manifest");
+  }
+
+  const scanner = privacyManifest.scanner;
+  if (
+    (scanner.status === "passed" && scanner.findings.length > 0) ||
+    (scanner.status === "blocked" && scanner.findings.length === 0)
+  ) {
+    throw archiveError("privacy scanner status does not match its findings");
+  }
+
+  const coverage = scanner.coverage;
+  if (!coverage) {
+    return;
+  }
+  const accountedBlobCount = coverage.scannedBlobCount + coverage.opaqueBlobCount;
+  if (
+    coverage.scannedEventCount > privacyManifest.totals.events ||
+    accountedBlobCount > privacyManifest.totals.blobs
+  ) {
+    throw archiveError("privacy scanner coverage exceeds archive totals");
+  }
+  if (
+    coverage.complete !== (coverage.incompleteReason === undefined) ||
+    (coverage.complete &&
+      (coverage.scannedEventCount !== privacyManifest.totals.events ||
+        accountedBlobCount !== privacyManifest.totals.blobs))
+  ) {
+    throw archiveError("privacy scanner coverage is inconsistent with archive totals");
+  }
+}
+
+function parseWithSchema<TValue>(
+  schema: RuntimeSchema<TValue>,
+  value: unknown,
+  label: string
+): TValue {
+  const result = schema.safeParse(value);
+
+  if (result.success) {
+    return result.data;
+  }
+
+  const issues = result.error.issues
+    .slice(0, 4)
+    .map((issue) => {
+      const path = issue.path.length > 0 ? issue.path.map(String).join(".") : "value";
+      return `${path}: ${issue.message}`;
+    })
+    .join("; ");
+
+  throw archiveError(`${label} failed schema validation${issues ? ` (${issues})` : ""}`);
+}
+
+function archiveError(message: string): Error {
+  return new Error(`Invalid WebBlackbox archive: ${message}.`);
+}
diff --git a/packages/protocol/src/capture-scope.test.ts b/packages/protocol/src/capture-scope.test.ts
new file mode 100644
index 0000000..1946716
--- /dev/null
+++ b/packages/protocol/src/capture-scope.test.ts
@@ -0,0 +1,199 @@
+import { describe, expect, it } from "vitest";
+
+import { DEFAULT_CAPTURE_POLICY } from "./defaults.js";
+import { evaluateCaptureScope, matchesCaptureOrigin } from "./capture-scope.js";
+import type { CapturePolicy } from "./types.js";
+
+const NOW = Date.parse("2026-07-11T00:00:00.000Z");
+
+function policy(overrides: Partial<CapturePolicy["scope"]> = {}): CapturePolicy {
+  return {
+    ...DEFAULT_CAPTURE_POLICY,
+    consent: {
+      ...DEFAULT_CAPTURE_POLICY.consent,
+      grantedAt: "2026-07-10T00:00:00.000Z",
+      expiresAt: "2026-07-12T00:00:00.000Z"
+    },
+    scope: {
+      ...DEFAULT_CAPTURE_POLICY.scope,
+      tabId: 7,
+      origin: "https://app.example",
+      ...overrides
+    }
+  };
+}
+
+describe("evaluateCaptureScope", () => {
+  it("allows the bound top-level origin and same-origin navigation", () => {
+    expect(
+      evaluateCaptureScope(policy(), {
+        url: "https://app.example/projects/123?token=secret",
+        tabId: 7,
+        frameId: 0,
+        topLevel: true,
+        now: NOW
+      })
+    ).toMatchObject({ allowed: true, reason: "allowed", origin: "https://app.example" });
+  });
+
+  it("stops cross-origin top-level navigation when configured", () => {
+    expect(
+      evaluateCaptureScope(policy(), {
+        url: "https://admin.example/dashboard",
+        tabId: 7,
+        frameId: 0,
+        topLevel: true,
+        now: NOW
+      })
+    ).toMatchObject({ allowed: false, reason: "origin-changed" });
+  });
+
+  it("allows a policy-approved origin change only when stopOnOriginChange is disabled", () => {
+    const capturePolicy = policy({
+      stopOnOriginChange: false,
+      allowedOrigins: ["https://app.example", "https://admin.example"]
+    });
+
+    expect(
+      evaluateCaptureScope(capturePolicy, {
+        url: "https://admin.example/dashboard",
+        tabId: 7,
+        topLevel: true,
+        now: NOW
+      }).allowed
+    ).toBe(true);
+  });
+
+  it("applies deny before allow and supports enterprise wildcard origins", () => {
+    const capturePolicy = policy({
+      stopOnOriginChange: false,
+      allowedOrigins: ["*.example.com"],
+      deniedOrigins: ["https://blocked.example.com"]
+    });
+
+    expect(
+      evaluateCaptureScope(capturePolicy, {
+        url: "https://api.example.com/v1",
+        topLevel: true,
+        now: NOW
+      }).allowed
+    ).toBe(true);
+    expect(
+      evaluateCaptureScope(capturePolicy, {
+        url: "https://blocked.example.com/v1",
+        topLevel: true,
+        now: NOW
+      }).reason
+    ).toBe("origin-denied");
+    expect(
+      evaluateCaptureScope(capturePolicy, {
+        url: "https://outside.test/v1",
+        topLevel: true,
+        now: NOW
+      }).reason
+    ).toBe("origin-not-allowed");
+  });
+
+  it("rejects excluded paths before capture", () => {
+    const capturePolicy = policy({
+      excludedUrlPatterns: ["https://app.example/private/*", "/billing/*"]
+    });
+
+    expect(
+      evaluateCaptureScope(capturePolicy, {
+        url: "https://app.example/private/token",
+        topLevel: true,
+        now: NOW
+      }).reason
+    ).toBe("url-excluded");
+    expect(
+      evaluateCaptureScope(capturePolicy, {
+        url: "https://app.example/billing/card",
+        topLevel: true,
+        now: NOW
+      }).reason
+    ).toBe("url-excluded");
+  });
+
+  it("denies child frames unless includeSubframes is explicitly enabled", () => {
+    expect(
+      evaluateCaptureScope(policy(), {
+        url: "https://app.example/embed",
+        frameId: 2,
+        topLevel: false,
+        now: NOW
+      }).reason
+    ).toBe("subframes-disabled");
+
+    expect(
+      evaluateCaptureScope(
+        policy({ includeSubframes: true, allowedOrigins: ["https://widgets.example"] }),
+        {
+          url: "https://widgets.example/embed",
+          frameId: 2,
+          topLevel: false,
+          now: NOW
+        }
+      ).allowed
+    ).toBe(true);
+  });
+
+  it("rejects inconsistent frame identity", () => {
+    expect(
+      evaluateCaptureScope(policy({ includeSubframes: true }), {
+        url: "https://app.example/frame",
+        frameId: 3,
+        topLevel: true,
+        now: NOW
+      }).reason
+    ).toBe("frame-context-invalid");
+  });
+
+  it.each(["about:blank", "data:text/html,hello", "file:///tmp/private.html", "not a url"])(
+    "denies opaque or invalid URL %s",
+    (url) => {
+      expect(
+        evaluateCaptureScope(policy({ stopOnOriginChange: false }), {
+          url,
+          topLevel: true,
+          now: NOW
+        }).reason
+      ).toBe("opaque-or-invalid-url");
+    }
+  );
+
+  it("denies expired, malformed, and not-yet-granted consent", () => {
+    const expired = policy();
+    const malformed = policy();
+    const future = policy();
+    expired.consent = { ...expired.consent, expiresAt: "2026-07-10T12:00:00.000Z" };
+    malformed.consent = { ...malformed.consent, expiresAt: "invalid" };
+    future.consent = { ...future.consent, grantedAt: "2026-07-12T00:00:00.000Z" };
+
+    const context = { url: "https://app.example", topLevel: true, now: NOW };
+    expect(evaluateCaptureScope(expired, context).reason).toBe("consent-expired");
+    expect(evaluateCaptureScope(malformed, context).reason).toBe("consent-invalid");
+    expect(evaluateCaptureScope(future, context).reason).toBe("consent-invalid");
+  });
+
+  it("rejects a session used from a different tab", () => {
+    expect(
+      evaluateCaptureScope(policy(), {
+        url: "https://app.example",
+        tabId: 8,
+        topLevel: true,
+        now: NOW
+      }).reason
+    ).toBe("tab-mismatch");
+  });
+});
+
+describe("matchesCaptureOrigin", () => {
+  it("supports exact, host wildcard, and scheme-qualified host wildcard patterns", () => {
+    expect(matchesCaptureOrigin("https://app.example.com", "https://app.example.com")).toBe(true);
+    expect(matchesCaptureOrigin("https://app.example.com", "*.example.com")).toBe(true);
+    expect(matchesCaptureOrigin("https://example.com", "*.example.com")).toBe(true);
+    expect(matchesCaptureOrigin("https://app.example.com", "https://*.example.com")).toBe(true);
+    expect(matchesCaptureOrigin("http://app.example.com", "https://*.example.com")).toBe(false);
+  });
+});
diff --git a/packages/protocol/src/capture-scope.ts b/packages/protocol/src/capture-scope.ts
new file mode 100644
index 0000000..b491220
--- /dev/null
+++ b/packages/protocol/src/capture-scope.ts
@@ -0,0 +1,296 @@
+import type { CapturePolicy } from "./types.js";
+
+export type CaptureScopeDecisionReason =
+  | "allowed"
+  | "missing-policy"
+  | "tab-mismatch"
+  | "consent-invalid"
+  | "consent-expired"
+  | "frame-context-invalid"
+  | "subframes-disabled"
+  | "opaque-or-invalid-url"
+  | "origin-changed"
+  | "origin-denied"
+  | "origin-not-allowed"
+  | "url-excluded";
+
+export type CaptureScopeContext = {
+  url: string | null | undefined;
+  tabId?: number;
+  frameId?: number;
+  topLevel: boolean;
+  now?: number;
+};
+
+export type CaptureScopeDecision = {
+  allowed: boolean;
+  reason: CaptureScopeDecisionReason;
+  origin: string | null;
+};
+
+/**
+ * Evaluates a document against the complete capture scope. Invalid, opaque, or
+ * ambiguous inputs are denied so all runtimes can use the same fail-closed
+ * boundary at start, navigation, injection, and event ingestion.
+ */
+export function evaluateCaptureScope(
+  policy: CapturePolicy | null | undefined,
+  context: CaptureScopeContext
+): CaptureScopeDecision {
+  if (!policy) {
+    return denied("missing-policy");
+  }
+
+  const now = normalizeNow(context.now);
+  const consentReason = validateConsentWindow(policy, now);
+
+  if (consentReason) {
+    return denied(consentReason);
+  }
+
+  const frameId = normalizeFrameId(context.frameId);
+
+  if (frameId === null) {
+    return denied("frame-context-invalid");
+  }
+
+  if (context.topLevel !== (frameId === 0)) {
+    return denied("frame-context-invalid");
+  }
+
+  if (
+    typeof context.tabId === "number" &&
+    Number.isFinite(context.tabId) &&
+    policy.scope.tabId > 0 &&
+    Math.floor(context.tabId) !== policy.scope.tabId
+  ) {
+    return denied("tab-mismatch");
+  }
+
+  if ((!context.topLevel || frameId > 0) && !policy.scope.includeSubframes) {
+    return denied("subframes-disabled");
+  }
+
+  const parsedUrl = parseCaptureUrl(context.url);
+
+  if (!parsedUrl) {
+    return denied("opaque-or-invalid-url");
+  }
+
+  const origin = parsedUrl.origin;
+  const scopeOrigin = normalizeOrigin(policy.scope.origin);
+
+  if (context.topLevel && policy.scope.stopOnOriginChange && scopeOrigin !== null) {
+    if (origin !== scopeOrigin) {
+      return denied("origin-changed", origin);
+    }
+  }
+
+  if (policy.scope.deniedOrigins.some((pattern) => matchesCaptureOrigin(origin, pattern))) {
+    return denied("origin-denied", origin);
+  }
+
+  if (
+    policy.scope.allowedOrigins.length > 0 &&
+    !policy.scope.allowedOrigins.some((pattern) => matchesCaptureOrigin(origin, pattern))
+  ) {
+    return denied("origin-not-allowed", origin);
+  }
+
+  if (
+    policy.scope.excludedUrlPatterns.some((pattern) => matchesCaptureUrlPattern(parsedUrl, pattern))
+  ) {
+    return denied("url-excluded", origin);
+  }
+
+  return {
+    allowed: true,
+    reason: "allowed",
+    origin
+  };
+}
+
+/** Matches exact origins plus the wildcard forms used by enterprise policy. */
+export function matchesCaptureOrigin(origin: string, rawPattern: string): boolean {
+  const pattern = rawPattern.trim();
+
+  if (!pattern) {
+    return false;
+  }
+
+  if (origin === normalizeOrigin(pattern)) {
+    return true;
+  }
+
+  let originUrl: URL;
+
+  try {
+    originUrl = new URL(origin);
+  } catch {
+    return false;
+  }
+
+  if (pattern.startsWith("*.")) {
+    return matchesHostSuffix(originUrl.hostname, pattern.slice(2));
+  }
+
+  const schemeHostWildcard = /^([a-z][a-z\d+.-]*:\/\/)\*\.(.+)$/i.exec(pattern);
+
+  if (schemeHostWildcard) {
+    const [, scheme, suffixWithPort] = schemeHostWildcard;
+
+    if (!scheme || !suffixWithPort || originUrl.protocol + "//" !== scheme.toLowerCase()) {
+      return false;
+    }
+
+    const [suffix, port] = splitHostAndPort(suffixWithPort);
+
+    return (
+      matchesHostSuffix(originUrl.hostname, suffix) &&
+      (port === undefined || originUrl.port === port)
+    );
+  }
+
+  return pattern.includes("*") && wildcardMatch(origin, pattern);
+}
+
+function validateConsentWindow(
+  policy: CapturePolicy,
+  now: number
+): "consent-invalid" | "consent-expired" | null {
+  const grantedAt = Date.parse(policy.consent.grantedAt);
+
+  if (!Number.isFinite(grantedAt) || grantedAt > now) {
+    return "consent-invalid";
+  }
+
+  if (policy.consent.expiresAt === undefined) {
+    return null;
+  }
+
+  const expiresAt = Date.parse(policy.consent.expiresAt);
+
+  if (!Number.isFinite(expiresAt) || expiresAt <= grantedAt) {
+    return "consent-invalid";
+  }
+
+  return now >= expiresAt ? "consent-expired" : null;
+}
+
+function parseCaptureUrl(value: string | null | undefined): URL | null {
+  if (typeof value !== "string" || value.trim().length === 0) {
+    return null;
+  }
+
+  try {
+    const parsed = new URL(value);
+
+    if (parsed.origin === "null") {
+      return null;
+    }
+
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+
+function normalizeOrigin(value: string): string | null {
+  const parsed = parseCaptureUrl(value);
+  return parsed?.origin ?? null;
+}
+
+function matchesCaptureUrlPattern(url: URL, rawPattern: string): boolean {
+  const pattern = rawPattern.trim();
+
+  if (!pattern) {
+    return false;
+  }
+
+  if (pattern.startsWith("/")) {
+    return wildcardMatch(`${url.pathname}${url.search}${url.hash}`, pattern);
+  }
+
+  return wildcardMatch(url.href, pattern) || wildcardMatch(url.origin + url.pathname, pattern);
+}
+
+function matchesHostSuffix(hostname: string, rawSuffix: string): boolean {
+  const suffix = rawSuffix
+    .trim()
+    .toLowerCase()
+    .replace(/^\.+|\.+$/g, "");
+  const host = hostname.toLowerCase();
+
+  return suffix.length > 0 && (host === suffix || host.endsWith(`.${suffix}`));
+}
+
+function splitHostAndPort(value: string): [string, string | undefined] {
+  const separator = value.lastIndexOf(":");
+
+  if (separator <= 0 || !/^\d+$/.test(value.slice(separator + 1))) {
+    return [value, undefined];
+  }
+
+  return [value.slice(0, separator), value.slice(separator + 1)];
+}
+
+function wildcardMatch(value: string, pattern: string): boolean {
+  let valueIndex = 0;
+  let patternIndex = 0;
+  let wildcardIndex = -1;
+  let wildcardValueIndex = -1;
+
+  while (valueIndex < value.length) {
+    if (patternIndex < pattern.length && pattern[patternIndex] === value[valueIndex]) {
+      valueIndex += 1;
+      patternIndex += 1;
+      continue;
+    }
+
+    if (patternIndex < pattern.length && pattern[patternIndex] === "*") {
+      wildcardIndex = patternIndex;
+      wildcardValueIndex = valueIndex;
+      patternIndex += 1;
+      continue;
+    }
+
+    if (wildcardIndex >= 0) {
+      patternIndex = wildcardIndex + 1;
+      wildcardValueIndex += 1;
+      valueIndex = wildcardValueIndex;
+      continue;
+    }
+
+    return false;
+  }
+
+  while (patternIndex < pattern.length && pattern[patternIndex] === "*") {
+    patternIndex += 1;
+  }
+
+  return patternIndex === pattern.length;
+}
+
+function normalizeFrameId(value: number | undefined): number | null {
+  if (value === undefined) {
+    return 0;
+  }
+
+  if (!Number.isFinite(value) || value < 0) {
+    return null;
+  }
+
+  return Math.floor(value);
+}
+
+function normalizeNow(value: number | undefined): number {
+  return typeof value === "number" && Number.isFinite(value) ? value : Date.now();
+}
+
+function denied(reason: CaptureScopeDecisionReason, origin: string | null = null) {
+  return {
+    allowed: false,
+    reason,
+    origin
+  } satisfies CaptureScopeDecision;
+}
diff --git a/packages/protocol/src/constants.ts b/packages/protocol/src/constants.ts
index 0434dc9..e747d23 100644
--- a/packages/protocol/src/constants.ts
+++ b/packages/protocol/src/constants.ts
@@ -1,5 +1,9 @@
 export const WEBBLACKBOX_PROTOCOL_VERSION = 1;
 
+export const ARCHIVE_PBKDF2_MIN_ITERATIONS = 100_000;
+
+export const ARCHIVE_PBKDF2_MAX_ITERATIONS = 1_000_000;
+
 export const EVENT_LEVELS = ["debug", "info", "warn", "error"] as const;
 
 export const CAPTURE_MODES = ["lite", "full"] as const;
diff --git a/packages/protocol/src/ids.ts b/packages/protocol/src/ids.ts
index 9633640..80689e3 100644
--- a/packages/protocol/src/ids.ts
+++ b/packages/protocol/src/ids.ts
@@ -36,4 +36,12 @@ export class EventIdFactory {
   public value(): number {
     return this.sequence;
   }
+
+  public restore(value: number): void {
+    if (!Number.isSafeInteger(value) || value < this.sequence) {
+      throw new Error("Event id sequence must be a safe integer that does not move backwards.");
+    }
+
+    this.sequence = value;
+  }
 }
diff --git a/packages/protocol/src/index.test.ts b/packages/protocol/src/index.test.ts
index 60dfb99..19740fc 100644
--- a/packages/protocol/src/index.test.ts
+++ b/packages/protocol/src/index.test.ts
@@ -30,6 +30,9 @@ describe("protocol", () => {
     expect(sessionId.startsWith("S-1700000000000-")).toBe(true);
     expect(ids.next()).toBe("E-00000001");
     expect(ids.next()).toBe("E-00000002");
+    ids.restore(41);
+    expect(ids.next()).toBe("E-00000042");
+    expect(() => ids.restore(1)).toThrow(/does not move backwards/);
   });
 
   it("validates an event envelope", () => {
@@ -63,6 +66,53 @@ describe("protocol", () => {
     expect(result.success).toBe(true);
   });
 
+  it("validates specialized event payloads inside batch messages", () => {
+    const validEvent = {
+      v: WEBBLACKBOX_PROTOCOL_VERSION,
+      sid: "S-batch",
+      tab: 3,
+      t: Date.now(),
+      mono: 42,
+      type: "network.request",
+      id: "E-valid",
+      data: {
+        reqId: "R-valid",
+        url: "https://example.com/api",
+        method: "GET"
+      }
+    };
+
+    expect(
+      validateMessage({
+        t: "EVT.BATCH",
+        sid: "S-batch",
+        tabId: 3,
+        seq: 1,
+        events: [validEvent]
+      }).success
+    ).toBe(true);
+
+    const invalid = validateMessage({
+      t: "EVT.BATCH",
+      sid: "S-batch",
+      tabId: 3,
+      seq: 2,
+      events: [
+        {
+          ...validEvent,
+          id: "E-invalid",
+          data: {}
+        }
+      ]
+    });
+
+    expect(invalid.success).toBe(false);
+
+    if (!invalid.success) {
+      expect(invalid.error.issues.some((issue) => issue.path[0] === "events")).toBe(true);
+    }
+  });
+
   it("ships product-safe redaction defaults", () => {
     expect(DEFAULT_RECORDER_CONFIG.redaction.redactHeaders).toEqual(
       expect.arrayContaining(["authorization", "x-api-key", "x-csrf-token"])
diff --git a/packages/protocol/src/index.ts b/packages/protocol/src/index.ts
index 9bd300b..fea39ae 100644
--- a/packages/protocol/src/index.ts
+++ b/packages/protocol/src/index.ts
@@ -1,4 +1,6 @@
 export * from "./blob.js";
+export * from "./archive-validation.js";
+export * from "./capture-scope.js";
 export * from "./constants.js";
 export * from "./defaults.js";
 export * from "./ids.js";
diff --git a/packages/protocol/src/messages.ts b/packages/protocol/src/messages.ts
index 1162dd5..c5337a0 100644
--- a/packages/protocol/src/messages.ts
+++ b/packages/protocol/src/messages.ts
@@ -1,12 +1,32 @@
-import { z } from "zod";
+import {
+  array as zArray,
+  custom as zCustom,
+  discriminatedUnion as zDiscriminatedUnion,
+  enum as zEnum,
+  literal as zLiteral,
+  number as zNumber,
+  object as zObject,
+  string as zString
+} from "zod";
 
 import {
   chunkCodecSchema,
-  eventEnvelopeSchema,
   freezeReasonSchema,
-  recorderConfigSchema
+  recorderConfigSchema,
+  webBlackboxEventSchema
 } from "./schemas.js";
 
+const z = {
+  array: zArray,
+  custom: zCustom,
+  discriminatedUnion: zDiscriminatedUnion,
+  enum: zEnum,
+  literal: zLiteral,
+  number: zNumber,
+  object: zObject,
+  string: zString
+};
+
 const arrayBufferSchema = z.custom<ArrayBuffer>((value) => value instanceof ArrayBuffer, {
   message: "Expected ArrayBuffer"
 });
@@ -53,7 +73,7 @@ export const eventBatchMessageSchema = z
     sid: z.string().min(1),
     tabId: z.number().int().nonnegative(),
     seq: z.number().int().nonnegative(),
-    events: z.array(eventEnvelopeSchema)
+    events: z.array(webBlackboxEventSchema)
   })
   .strict();
 
diff --git a/packages/protocol/src/schemas.ts b/packages/protocol/src/schemas.ts
index 6f0cc9e..32febb3 100644
--- a/packages/protocol/src/schemas.ts
+++ b/packages/protocol/src/schemas.ts
@@ -1,6 +1,21 @@
-import { z } from "zod";
+import {
+  array as zArray,
+  boolean as zBoolean,
+  enum as zEnum,
+  literal as zLiteral,
+  null as zNull,
+  number as zNumber,
+  object as zObject,
+  record as zRecord,
+  string as zString,
+  union as zUnion,
+  unknown as zUnknown
+} from "zod";
+import type { infer as ZodInfer, ZodType } from "zod";
 
 import {
+  ARCHIVE_PBKDF2_MAX_ITERATIONS,
+  ARCHIVE_PBKDF2_MIN_ITERATIONS,
   CAPTURE_MODES,
   CHUNK_CODECS,
   EVENT_LEVELS,
@@ -10,10 +25,32 @@ import {
   WEBBLACKBOX_PROTOCOL_VERSION
 } from "./constants.js";
 
+const z = {
+  array: zArray,
+  boolean: zBoolean,
+  enum: zEnum,
+  literal: zLiteral,
+  null: zNull,
+  number: zNumber,
+  object: zObject,
+  record: zRecord,
+  string: zString,
+  union: zUnion,
+  unknown: zUnknown
+};
+
 const recordStringUnknown = z.record(z.string(), z.unknown());
 
 const stringArray = z.array(z.string());
 
+const sha256HexSchema = z.string().regex(/^[a-f0-9]{64}$/);
+
+// 16 bytes encoded as canonical padded base64 (22 data characters plus "==").
+const archiveSaltBase64Schema = z.string().regex(/^[A-Za-z0-9+/]{21}[AQgw]==$/);
+
+// 12 bytes encoded as canonical unpadded base64.
+const archiveIvBase64Schema = z.string().regex(/^[A-Za-z0-9+/]{16}$/);
+
 export const eventLevelSchema = z.enum(EVENT_LEVELS);
 
 export const captureModeSchema = z.enum(CAPTURE_MODES);
@@ -214,37 +251,58 @@ export const sessionMetadataSchema = z
 
 export const chunkTimeIndexEntrySchema = z
   .object({
-    chunkId: z.string().min(1),
-    seq: z.number().int().nonnegative(),
+    chunkId: z
+      .string()
+      .min(1)
+      .max(256)
+      .regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/),
+    seq: z.number().int().positive(),
     tStart: z.number().finite(),
     tEnd: z.number().finite(),
     monoStart: z.number().finite(),
     monoEnd: z.number().finite(),
-    eventCount: z.number().int().nonnegative(),
+    eventCount: z.number().int().positive(),
     byteLength: z.number().int().nonnegative(),
     codec: chunkCodecSchema,
-    sha256: z.string().min(1)
-  })
-  .strict();
+    sha256: sha256HexSchema
+  })
+  .strict()
+  .superRefine((entry, context) => {
+    if (entry.tStart > entry.tEnd) {
+      context.addIssue({
+        code: "custom",
+        path: ["tEnd"],
+        message: "must be greater than or equal to tStart"
+      });
+    }
+
+    if (entry.monoStart > entry.monoEnd) {
+      context.addIssue({
+        code: "custom",
+        path: ["monoEnd"],
+        message: "must be greater than or equal to monoStart"
+      });
+    }
+  });
 
 export const requestIndexEntrySchema = z
   .object({
     reqId: z.string().min(1),
-    eventIds: z.array(z.string().min(1))
+    eventIds: z.array(z.string().min(1)).min(1)
   })
   .strict();
 
 export const invertedIndexEntrySchema = z
   .object({
     term: z.string().min(1),
-    eventIds: z.array(z.string().min(1))
+    eventIds: z.array(z.string().min(1)).min(1)
   })
   .strict();
 
 export const hashesManifestSchema = z
   .object({
-    manifestSha256: z.string().min(1),
-    files: z.record(z.string(), z.string())
+    manifestSha256: sha256HexSchema,
+    files: z.record(z.string().min(1), sha256HexSchema)
   })
   .strict();
 
@@ -253,7 +311,7 @@ export const exportStatsSchema = z
     eventCount: z.number().int().nonnegative(),
     chunkCount: z.number().int().nonnegative(),
     blobCount: z.number().int().nonnegative(),
-    durationMs: z.number().int().nonnegative()
+    durationMs: z.number().finite().nonnegative()
   })
   .strict();
 
@@ -264,18 +322,26 @@ export const exportEncryptionSchema = z
       .object({
         name: z.literal("PBKDF2"),
         hash: z.literal("SHA-256"),
-        iterations: z.number().int().positive(),
-        saltBase64: z.string().min(1)
+        iterations: z
+          .number()
+          .int()
+          .min(ARCHIVE_PBKDF2_MIN_ITERATIONS)
+          .max(ARCHIVE_PBKDF2_MAX_ITERATIONS),
+        saltBase64: archiveSaltBase64Schema
       })
       .strict(),
-    files: z.record(
-      z.string(),
-      z
-        .object({
-          ivBase64: z.string().min(1)
-        })
-        .strict()
-    )
+    files: z
+      .record(
+        z.string().min(1),
+        z
+          .object({
+            ivBase64: archiveIvBase64Schema
+          })
+          .strict()
+      )
+      .refine((files) => Object.keys(files).length > 0, {
+        message: "encrypted archives must declare at least one private file"
+      })
   })
   .strict();
 
@@ -301,12 +367,26 @@ export const privacyScannerFindingSchema = z
   })
   .strict();
 
+export const privacyScannerCoverageSchema = z
+  .object({
+    complete: z.boolean(),
+    scannedEventCount: z.number().int().nonnegative(),
+    scannedBlobCount: z.number().int().nonnegative(),
+    opaqueBlobCount: z.number().int().nonnegative(),
+    inspectedBytes: z.number().int().nonnegative(),
+    incompleteReason: z
+      .enum(["deadline", "decode-failed", "finding-limit", "target-byte-limit", "total-byte-limit"])
+      .optional()
+  })
+  .strict();
+
 export const privacyScannerResultSchema = z
   .object({
     scannedAt: z.string().datetime(),
     preEncryption: z.boolean(),
     status: z.enum(["passed", "blocked"]),
-    findings: z.array(privacyScannerFindingSchema)
+    findings: z.array(privacyScannerFindingSchema),
+    coverage: privacyScannerCoverageSchema.optional()
   })
   .strict();
 
@@ -404,9 +484,9 @@ export const networkBodyCaptureRuleSchema = z
 
 const metaSessionStartSchema = z
   .object({
-    url: z.string().min(1),
+    url: z.string().min(1).optional(),
     title: z.string().optional(),
-    mode: captureModeSchema,
+    mode: captureModeSchema.optional(),
     permissions: recordStringUnknown.optional(),
     viewport: z
       .object({
@@ -419,9 +499,10 @@ const metaSessionStartSchema = z
   })
   .strict();
 
-const networkRequestDataSchema = z
+const normalizedNetworkRequestDataSchema = z
   .object({
     reqId: z.string().min(1),
+    requestId: z.string().min(1).optional(),
     url: z.string().min(1),
     method: z.string().min(1),
     resourceType: z.string().optional(),
@@ -429,11 +510,33 @@ const networkRequestDataSchema = z
     headers: z.record(z.string(), z.string()).optional(),
     postDataSize: z.number().int().nonnegative().optional()
   })
-  .strict();
+  .passthrough();
 
-const networkResponseDataSchema = z
+const cdpNetworkRequestDataSchema = z
+  .object({
+    requestId: z.string().min(1).optional(),
+    request: z
+      .object({
+        requestId: z.string().min(1).optional(),
+        url: z.string().min(1),
+        method: z.string().min(1)
+      })
+      .passthrough()
+  })
+  .passthrough()
+  .refine((value) => Boolean(value.requestId || value.request.requestId), {
+    message: "requestId is required"
+  });
+
+const networkRequestDataSchema = z.union([
+  normalizedNetworkRequestDataSchema,
+  cdpNetworkRequestDataSchema
+]);
+
+const normalizedNetworkResponseDataSchema = z
   .object({
     reqId: z.string().min(1),
+    requestId: z.string().min(1).optional(),
     status: z.number().int(),
     statusText: z.string().optional(),
     mimeType: z.string().optional(),
@@ -443,7 +546,24 @@ const networkResponseDataSchema = z
     timing: recordStringUnknown.optional(),
     headers: z.record(z.string(), z.string()).optional()
   })
-  .strict();
+  .passthrough();
+
+const cdpNetworkResponseDataSchema = z
+  .object({
+    requestId: z.string().min(1),
+    response: z
+      .object({
+        url: z.string().min(1),
+        status: z.number().finite()
+      })
+      .passthrough()
+  })
+  .passthrough();
+
+const networkResponseDataSchema = z.union([
+  normalizedNetworkResponseDataSchema,
+  cdpNetworkResponseDataSchema
+]);
 
 const consoleEntryDataSchema = z
   .object({
@@ -463,16 +583,36 @@ const consoleEntryDataSchema = z
   })
   .strict();
 
-const errorExceptionDataSchema = z
+const normalizedErrorExceptionDataSchema = z
   .object({
-    message: z.string().min(1),
+    message: z.string().min(1).optional(),
+    text: z.string().min(1).optional(),
     name: z.string().optional(),
     stack: z.string().optional(),
     url: z.string().optional(),
     line: z.number().int().optional(),
     col: z.number().int().optional()
   })
-  .strict();
+  .passthrough()
+  .refine((value) => Boolean(value.message || value.text), {
+    message: "message or text is required"
+  });
+
+const cdpErrorExceptionDataSchema = z
+  .object({
+    exceptionDetails: z
+      .object({
+        text: z.string(),
+        exceptionId: z.number().int().optional()
+      })
+      .passthrough()
+  })
+  .passthrough();
+
+const errorExceptionDataSchema = z.union([
+  normalizedErrorExceptionDataSchema,
+  cdpErrorExceptionDataSchema
+]);
 
 const screenshotDataSchema = z
   .object({
@@ -558,30 +698,37 @@ const domSnapshotDataSchema = z
   .object({
     snapshotId: z.string().min(1),
     contentHash: z.string().min(1),
-    source: z.enum(["cdp", "rrweb", "html"]),
+    source: z.enum(["cdp", "rrweb", "html"]).optional(),
     nodeCount: z.number().int().nonnegative().optional(),
-    computedStyles: z.array(z.string()).optional()
+    computedStyles: z.array(z.string()).optional(),
+    reason: z.string().min(1).optional()
   })
-  .strict();
+  .passthrough();
 
 const storageSnapshotDataSchema = z
   .object({
     mode: storageSnapshotModeSchema.optional(),
     hash: z.string().min(1).optional(),
     count: z.number().int().nonnegative().optional(),
-    redacted: z.boolean().optional()
+    redacted: z.boolean().optional(),
+    reason: z.string().min(1).optional()
   })
-  .strict();
+  .passthrough();
 
 const perfVitalsDataSchema = z
   .object({
+    metric: z.string().min(1).optional(),
+    name: z.string().optional(),
+    startTime: z.number().finite().optional(),
+    duration: z.number().finite().optional(),
+    value: z.number().finite().optional(),
     lcp: z.number().finite().optional(),
     cls: z.number().finite().optional(),
     inp: z.number().finite().optional(),
     fid: z.number().finite().optional(),
     ttfb: z.number().finite().optional()
   })
-  .strict();
+  .passthrough();
 
 const genericStrictDataSchema = z.union([
   recordStringUnknown,
@@ -610,31 +757,34 @@ const specializedDataSchemas = {
   "perf.vitals": perfVitalsDataSchema
 } as const;
 
-export function getEventPayloadSchema(type: z.infer<typeof webBlackboxEventTypeSchema>): z.ZodType {
+export function getEventPayloadSchema(type: ZodInfer<typeof webBlackboxEventTypeSchema>): ZodType {
   const knownSchema = specializedDataSchemas[type as keyof typeof specializedDataSchemas];
 
   return knownSchema ?? genericStrictDataSchema;
 }
 
 export function validateEventData(
-  type: z.infer<typeof webBlackboxEventTypeSchema>,
+  type: ZodInfer<typeof webBlackboxEventTypeSchema>,
   payload: unknown
 ) {
   return getEventPayloadSchema(type).safeParse(payload);
 }
 
-export function validateEvent(event: unknown) {
-  const envelopeResult = eventEnvelopeSchema.safeParse(event);
+export const webBlackboxEventSchema = eventEnvelopeSchema.superRefine((event, context) => {
+  const payloadResult = validateEventData(event.type, event.data);
 
-  if (!envelopeResult.success) {
-    return envelopeResult;
+  if (payloadResult.success) {
+    return;
   }
 
-  const payloadResult = validateEventData(envelopeResult.data.type, envelopeResult.data.data);
-
-  if (!payloadResult.success) {
-    return payloadResult;
+  for (const issue of payloadResult.error.issues) {
+    context.addIssue({
+      ...issue,
+      path: ["data", ...issue.path]
+    });
   }
+});
 
-  return envelopeResult;
+export function validateEvent(event: unknown) {
+  return webBlackboxEventSchema.safeParse(event);
 }
diff --git a/packages/protocol/src/types.ts b/packages/protocol/src/types.ts
index b7db7ae..1def3a5 100644
--- a/packages/protocol/src/types.ts
+++ b/packages/protocol/src/types.ts
@@ -257,11 +257,26 @@ export type PrivacyScannerFinding = {
   sampleSha256: string;
 };
 
+export type PrivacyScannerCoverage = {
+  complete: boolean;
+  scannedEventCount: number;
+  scannedBlobCount: number;
+  opaqueBlobCount: number;
+  inspectedBytes: number;
+  incompleteReason?:
+    | "deadline"
+    | "decode-failed"
+    | "finding-limit"
+    | "target-byte-limit"
+    | "total-byte-limit";
+};
+
 export type PrivacyScannerResult = {
   scannedAt: string;
   preEncryption: boolean;
   status: "passed" | "blocked";
   findings: PrivacyScannerFinding[];
+  coverage?: PrivacyScannerCoverage;
 };
 
 export type PrivacyManifestCategorySummary = {
diff --git a/packages/protocol/vitest.config.ts b/packages/protocol/vitest.config.ts
new file mode 100644
index 0000000..eaca8b6
--- /dev/null
+++ b/packages/protocol/vitest.config.ts
@@ -0,0 +1,19 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    coverage: {
+      provider: "v8",
+      reporter: ["text", "lcov"],
+      include: ["src/**/*.ts"],
+      exclude: ["src/**/*.test.ts", "src/index.ts", "src/types.ts"],
+      thresholds: {
+        lines: 60,
+        statements: 60,
+        functions: 58,
+        branches: 53
+      }
+    }
+  }
+});
diff --git a/packages/recorder/CHANGELOG.md b/packages/recorder/CHANGELOG.md
index d74e426..fe8c0fc 100644
--- a/packages/recorder/CHANGELOG.md
+++ b/packages/recorder/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @webblackbox/recorder
 
+## 0.7.0
+
+### Patch Changes
+
+- b3cfda9: Tighten capture privacy for editable keys, storage names, WebSocket payloads, and masked screenshots,
+  and keep delayed events from corrupting action correlation or root-cause precursor windows.
+- Updated dependencies [b3cfda9]
+  - @webblackbox/protocol@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/packages/recorder/LICENSE b/packages/recorder/LICENSE
new file mode 100644
index 0000000..fcf7ea4
--- /dev/null
+++ b/packages/recorder/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Web LLM
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/recorder/package.json b/packages/recorder/package.json
index 26ce60f..feca0d3 100644
--- a/packages/recorder/package.json
+++ b/packages/recorder/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@webblackbox/recorder",
   "description": "Browser event recorder and normalization engine for WebBlackbox capture pipelines.",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -40,6 +40,7 @@
   "scripts": {
     "dev": "tsup src/index.ts --format esm --dts --watch --clean",
     "build": "tsup src/index.ts --format esm --dts --clean",
+    "prepack": "pnpm run build",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run --passWithNoTests",
diff --git a/packages/recorder/src/action-span.test.ts b/packages/recorder/src/action-span.test.ts
index 87e264c..0129522 100644
--- a/packages/recorder/src/action-span.test.ts
+++ b/packages/recorder/src/action-span.test.ts
@@ -121,6 +121,27 @@ describe("ActionSpanTracker", () => {
     expect(lateEvent.ref?.act).toBeUndefined();
   });
 
+  it("does not attach delayed pre-action events to a future action", () => {
+    const tracker = new ActionSpanTracker(100);
+    const firstAction = tracker.assign(createEvent("user.click", 10));
+    tracker.assign(
+      createEvent("network.request", 20, {
+        reqId: "R-delayed"
+      })
+    );
+    const futureAction = tracker.assign(createEvent("user.click", 200));
+    const delayedConsole = tracker.assign(createEvent("console.entry", 150));
+    const delayedResponse = tracker.assign(
+      createEvent("network.response", 150, {
+        reqId: "R-delayed"
+      })
+    );
+
+    expect(delayedConsole.ref?.act).toBeUndefined();
+    expect(delayedResponse.ref?.act).toBe(firstAction.ref?.act);
+    expect(delayedResponse.ref?.act).not.toBe(futureAction.ref?.act);
+  });
+
   it("returns original event for non-action events without mapping", () => {
     const tracker = new ActionSpanTracker(50);
     const event = createEvent("console.entry", 500, {
diff --git a/packages/recorder/src/action-span.ts b/packages/recorder/src/action-span.ts
index c3075c1..7c2b9c2 100644
--- a/packages/recorder/src/action-span.ts
+++ b/packages/recorder/src/action-span.ts
@@ -46,7 +46,9 @@ export class ActionSpanTracker {
 
     const activeAction = this.currentAction;
     const shouldAttachCurrentAction = Boolean(
-      activeAction && event.mono <= activeAction.expiresAtMono
+      activeAction &&
+      event.mono >= activeAction.startedAtMono &&
+      event.mono <= activeAction.expiresAtMono
     );
     let actionId = shouldAttachCurrentAction ? activeAction?.id : undefined;
 
@@ -114,4 +116,17 @@ export class ActionSpanTracker {
       ? (value as Record<string, unknown>)
       : null;
   }
+
+  public sequenceValue(): number {
+    return this.sequence;
+  }
+
+  public restoreSequence(value: number): void {
+    if (!Number.isSafeInteger(value) || value < this.sequence) {
+      throw new Error("Action sequence must be a safe integer that does not move backwards.");
+    }
+
+    this.sequence = value;
+    this.currentAction = null;
+  }
 }
diff --git a/packages/recorder/src/index.test.ts b/packages/recorder/src/index.test.ts
index 99c39ef..b11ea8c 100644
--- a/packages/recorder/src/index.test.ts
+++ b/packages/recorder/src/index.test.ts
@@ -170,6 +170,25 @@ describe("recorder", () => {
     expect(result.event?.tab).toBe(0);
   });
 
+  it("restores event and action sequences after a service-worker restart", () => {
+    const recorder = new WebBlackboxRecorder(TEST_CONFIG);
+    recorder.restoreSequenceState({ event: 41, action: 9 });
+
+    const result = recorder.ingest({
+      source: "content",
+      rawType: "click",
+      sid: "S-recovered",
+      tabId: 7,
+      t: Date.now(),
+      mono: 10,
+      payload: { selector: "button" }
+    });
+
+    expect(result.event?.id).toBe("E-00000042");
+    expect(result.event?.ref?.act).toBe("A-000010");
+    expect(recorder.getSequenceState()).toEqual({ event: 42, action: 10 });
+  });
+
   it("assigns action span id to dependent events", () => {
     const recorder = new WebBlackboxRecorder(TEST_CONFIG);
     const now = Date.now();
@@ -792,6 +811,218 @@ describe("recorder", () => {
     });
   });
 
+  it("classifies editable keydowns as high-sensitivity input data", () => {
+    const recorder = new WebBlackboxRecorder(TEST_CONFIG);
+    const result = recorder.ingest(
+      createRawEvent({
+        rawType: "keydown",
+        payload: {
+          inputContext: "input",
+          key: "A",
+          code: "KeyA",
+          target: {
+            tag: "INPUT"
+          }
+        }
+      })
+    );
+
+    expect(result.event?.type).toBe("user.keydown");
+    expect(result.event?.privacy).toEqual({
+      category: "inputs",
+      sensitivity: "high",
+      redacted: false
+    });
+  });
+
+  it("blocks raw editable text keys when the input policy is length-only", () => {
+    const recorder = new WebBlackboxRecorder({
+      ...TEST_CONFIG,
+      capturePolicy: createPolicy({
+        categories: {
+          ...TEST_CAPTURE_POLICY.categories,
+          inputs: "length-only"
+        }
+      })
+    });
+    const result = recorder.ingest(
+      createRawEvent({
+        rawType: "keydown",
+        payload: {
+          key: "A",
+          code: "KeyA",
+          target: {
+            tag: "INPUT"
+          }
+        }
+      })
+    );
+
+    expect(result.event?.type).toBe("privacy.violation");
+    expect(result.event?.data).toMatchObject({
+      blockedType: "user.keydown",
+      category: "inputs",
+      sensitivity: "high",
+      reason: "raw-input-value-disabled"
+    });
+  });
+
+  it("accepts sanitized editable keys and retains non-text shortcuts under length-only", () => {
+    const recorder = new WebBlackboxRecorder({
+      ...TEST_CONFIG,
+      capturePolicy: createPolicy({
+        categories: {
+          ...TEST_CAPTURE_POLICY.categories,
+          inputs: "length-only"
+        }
+      })
+    });
+    const sanitized = recorder.ingest(
+      createRawEvent({
+        rawType: "keydown",
+        payload: {
+          inputContext: "textarea",
+          keyRedacted: true,
+          keyKind: "printable",
+          target: {
+            tag: "TEXTAREA"
+          }
+        }
+      })
+    );
+    const navigation = recorder.ingest(
+      createRawEvent({
+        rawType: "keydown",
+        mono: 2,
+        payload: {
+          inputContext: "contenteditable",
+          key: "Enter",
+          code: "Enter",
+          target: {
+            tag: "DIV",
+            contentEditable: true
+          }
+        }
+      })
+    );
+
+    expect(sanitized.event?.type).toBe("user.keydown");
+    expect(sanitized.event?.privacy).toEqual({
+      category: "inputs",
+      sensitivity: "high",
+      redacted: true
+    });
+    expect(navigation.event?.type).toBe("user.keydown");
+    expect(navigation.event?.data).toMatchObject({
+      key: "Enter",
+      code: "Enter"
+    });
+    expect(navigation.event?.privacy).toEqual({
+      category: "inputs",
+      sensitivity: "high",
+      redacted: true
+    });
+  });
+
+  it("blocks editable keydowns when input capture is disabled", () => {
+    const recorder = new WebBlackboxRecorder({
+      ...TEST_CONFIG,
+      capturePolicy: createPolicy({
+        categories: {
+          ...TEST_CAPTURE_POLICY.categories,
+          inputs: "none"
+        }
+      })
+    });
+    const result = recorder.ingest(
+      createRawEvent({
+        rawType: "keydown",
+        payload: {
+          inputContext: "contenteditable",
+          key: "Enter",
+          code: "Enter"
+        }
+      })
+    );
+
+    expect(result.event?.type).toBe("privacy.violation");
+    expect(result.event?.data).toMatchObject({
+      blockedType: "user.keydown",
+      category: "inputs",
+      sensitivity: "high",
+      reason: "inputs-disabled"
+    });
+  });
+
+  it("blocks every password key identity even when input capture is allowed", () => {
+    const recorder = new WebBlackboxRecorder(TEST_CONFIG);
+    const result = recorder.ingest(
+      createRawEvent({
+        rawType: "keydown",
+        payload: {
+          inputContext: "password",
+          key: "Enter",
+          code: "Enter",
+          target: {
+            tag: "INPUT",
+            inputType: "password"
+          }
+        }
+      })
+    );
+    const sanitized = recorder.ingest(
+      createRawEvent({
+        rawType: "keydown",
+        mono: 2,
+        payload: {
+          inputContext: "protected",
+          keyRedacted: true,
+          keyKind: "protected",
+          target: {
+            tag: "INPUT"
+          }
+        }
+      })
+    );
+
+    expect(result.event?.type).toBe("privacy.violation");
+    expect(result.event?.data).toMatchObject({
+      blockedType: "user.keydown",
+      category: "inputs",
+      sensitivity: "high",
+      reason: "password-key-data-disabled"
+    });
+    expect(sanitized.event?.type).toBe("user.keydown");
+    expect(sanitized.event?.privacy).toEqual({
+      category: "inputs",
+      sensitivity: "high",
+      redacted: true
+    });
+  });
+
+  it("keeps non-editable keydowns in the actions privacy category", () => {
+    const recorder = new WebBlackboxRecorder(TEST_CONFIG);
+    const result = recorder.ingest(
+      createRawEvent({
+        rawType: "keydown",
+        payload: {
+          key: "A",
+          code: "KeyA",
+          target: {
+            tag: "DIV"
+          }
+        }
+      })
+    );
+
+    expect(result.event?.type).toBe("user.keydown");
+    expect(result.event?.privacy).toEqual({
+      category: "actions",
+      sensitivity: "low",
+      redacted: false
+    });
+  });
+
   it("maps capture policy category gates to redacted violations", () => {
     const cases: Array<{
       raw: RawRecorderEvent;
@@ -815,6 +1046,22 @@ describe("recorder", () => {
         reason: "screenshots-disabled",
         blockedType: "screen.screenshot"
       },
+      {
+        raw: createRawEvent({
+          rawType: "screenshot",
+          payload: {
+            contentHash: "unmasked-shot-hash"
+          }
+        }),
+        policy: createPolicy({
+          categories: {
+            ...TEST_CAPTURE_POLICY.categories,
+            screenshots: "masked"
+          }
+        }),
+        reason: "screenshots-disabled",
+        blockedType: "screen.screenshot"
+      },
       {
         raw: createRawEvent({
           source: "system",
@@ -978,6 +1225,23 @@ describe("recorder", () => {
         reason: "storage-detail-disabled",
         blockedType: "storage.idb.snapshot"
       },
+      {
+        raw: createRawEvent({
+          rawType: "indexedDbOp",
+          payload: {
+            op: "open",
+            name: "customer-secret-db"
+          }
+        }),
+        policy: createPolicy({
+          categories: {
+            ...TEST_CAPTURE_POLICY.categories,
+            indexedDb: "counts-only"
+          }
+        }),
+        reason: "storage-detail-disabled",
+        blockedType: "storage.idb.op"
+      },
       {
         raw: createRawEvent({
           rawType: "cookieSnapshot",
@@ -1316,6 +1580,57 @@ describe("recorder", () => {
     ]);
   });
 
+  it("excludes delayed future-timeline events from root-cause suspects", () => {
+    const recorder = new WebBlackboxRecorder(
+      TEST_CONFIG,
+      {},
+      undefined,
+      createDefaultRecorderPlugins()
+    );
+
+    const futureNetworkFailure = recorder.ingest(
+      createRawEvent({
+        source: "cdp",
+        rawType: "Network.loadingFailed",
+        sid: "S-root-cause-delayed",
+        tabId: 11,
+        t: 300,
+        mono: 300,
+        payload: {
+          requestId: "R-future",
+          errorText: "net::ERR_FAILED"
+        }
+      })
+    );
+    expect(futureNetworkFailure.event?.type).toBe("network.failed");
+    const delayedError = recorder.ingest(
+      createRawEvent({
+        rawType: "pageError",
+        sid: "S-root-cause-delayed",
+        tabId: 11,
+        t: 200,
+        mono: 200,
+        payload: {
+          message: "earlier sampled error"
+        }
+      })
+    );
+    const delayedPayload = delayedError.event?.data as
+      | {
+          aiRootCause?: {
+            suspects?: Array<{ type?: string; eventId?: string }>;
+          };
+        }
+      | undefined;
+
+    expect(delayedPayload?.aiRootCause?.suspects).toEqual([
+      {
+        type: "runtime",
+        reason: "No strong precursor signal was found; inspect nearby console and runtime events."
+      }
+    ]);
+  });
+
   it("isolates plugin hook exceptions without dropping ingest flow", () => {
     const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => undefined);
     const recorder = new WebBlackboxRecorder(TEST_CONFIG, {}, undefined, [
diff --git a/packages/recorder/src/index.ts b/packages/recorder/src/index.ts
index b4a0d49..803c95a 100644
--- a/packages/recorder/src/index.ts
+++ b/packages/recorder/src/index.ts
@@ -6,3 +6,4 @@ export * from "./recorder.js";
 export * from "./redaction.js";
 export * from "./ring-buffer.js";
 export * from "./types.js";
+export * from "./websocket-frame.js";
diff --git a/packages/recorder/src/plugins.ts b/packages/recorder/src/plugins.ts
index 427593f..21d6f85 100644
--- a/packages/recorder/src/plugins.ts
+++ b/packages/recorder/src/plugins.ts
@@ -100,7 +100,9 @@ export function createAiRootCausePlugin(windowMs = 10_000): RecorderPlugin {
       }
 
       const windowStart = event.mono - windowMs;
-      const scoped = recent.filter((item) => item.id !== event.id && item.mono >= windowStart);
+      const scoped = recent.filter(
+        (item) => item.id !== event.id && item.mono >= windowStart && item.mono <= event.mono
+      );
       const suspects: Array<{ type: string; reason: string; eventId?: string }> = [];
 
       const networkIssue = scoped.find((item) => {
diff --git a/packages/recorder/src/recorder.ts b/packages/recorder/src/recorder.ts
index 8a8d4ee..90309ca 100644
--- a/packages/recorder/src/recorder.ts
+++ b/packages/recorder/src/recorder.ts
@@ -16,12 +16,71 @@ import type { RecorderPlugin, RecorderPluginContext } from "./plugins.js";
 import { redactPayload } from "./redaction.js";
 import { EventRingBuffer } from "./ring-buffer.js";
 import type { EventNormalizer, RawRecorderEvent, RecorderIngestResult } from "./types.js";
+import { normalizeWebSocketFramePayload } from "./websocket-frame.js";
+
+const NON_TEXT_KEYBOARD_KEYS = new Set([
+  "Alt",
+  "AltGraph",
+  "ArrowDown",
+  "ArrowLeft",
+  "ArrowRight",
+  "ArrowUp",
+  "Backspace",
+  "CapsLock",
+  "ContextMenu",
+  "Control",
+  "Delete",
+  "End",
+  "Enter",
+  "Escape",
+  "Fn",
+  "FnLock",
+  "Home",
+  "Hyper",
+  "Insert",
+  "Meta",
+  "NumLock",
+  "NumpadEnter",
+  "PageDown",
+  "PageUp",
+  "Pause",
+  "PrintScreen",
+  "ScrollLock",
+  "Shift",
+  "Super",
+  "Symbol",
+  "SymbolLock",
+  "Tab"
+]);
+
+const TEXT_PRODUCING_KEYBOARD_CODES = new Set([
+  "Backquote",
+  "Backslash",
+  "BracketLeft",
+  "BracketRight",
+  "Comma",
+  "Equal",
+  "IntlBackslash",
+  "IntlRo",
+  "IntlYen",
+  "Minus",
+  "Period",
+  "Quote",
+  "Semicolon",
+  "Slash",
+  "Space"
+]);
 
 export type RecorderHooks = {
   onEvent?: (event: WebBlackboxEvent) => void;
   onFreeze?: (reason: FreezeReason, event: WebBlackboxEvent) => void;
 };
 
+export type RecorderSequenceState = {
+  event: number;
+  action: number;
+};
+
 export class WebBlackboxRecorder {
   private readonly idFactory = new EventIdFactory();
 
@@ -60,15 +119,23 @@ export class WebBlackboxRecorder {
       return {};
     }
 
-    const redactedPayload = redactPayload(normalized.payload, this.config.redaction);
+    const policyBoundPayload =
+      normalized.eventType === "network.ws.frame"
+        ? normalizeWebSocketFramePayload(
+            nextRawEvent.rawType,
+            normalized.payload,
+            this.config.capturePolicy?.categories.network
+          )
+        : normalized.payload;
+    const redactedPayload = redactPayload(policyBoundPayload, this.config.redaction);
     const privacy = classifyPrivacy(
       normalized.eventType,
-      redactedPayload,
+      policyBoundPayload,
       this.config.capturePolicy
     );
     const violation = evaluateCapturePolicy(
       normalized.eventType,
-      redactedPayload,
+      policyBoundPayload,
       privacy,
       this.config.capturePolicy
     );
@@ -130,6 +197,18 @@ export class WebBlackboxRecorder {
     return this.ringBuffer.size();
   }
 
+  public getSequenceState(): RecorderSequenceState {
+    return {
+      event: this.idFactory.value(),
+      action: this.actionSpanTracker.sequenceValue()
+    };
+  }
+
+  public restoreSequenceState(state: RecorderSequenceState): void {
+    this.idFactory.restore(state.event);
+    this.actionSpanTracker.restoreSequence(state.action);
+  }
+
   private applyRawPlugins(raw: RawRecorderEvent): RawRecorderEvent | null {
     let nextRaw = raw;
 
@@ -206,8 +285,8 @@ function classifyPrivacy(
   policy: CapturePolicy | undefined
 ): PrivacyClassification {
   const effectivePolicy = policy ?? DEFAULT_CAPTURE_POLICY;
-  const category = classifyCategory(eventType);
-  const sensitivity = classifySensitivity(eventType);
+  const category = classifyCategory(eventType, payload);
+  const sensitivity = classifySensitivity(eventType, payload);
 
   return {
     category,
@@ -261,7 +340,7 @@ function findPolicyViolationReason(
   payload: unknown,
   policy: CapturePolicy
 ): string | null {
-  if (eventType === "screen.screenshot" && policy.categories.screenshots === "off") {
+  if (eventType === "screen.screenshot" && policy.categories.screenshots !== "allow") {
     return "screenshots-disabled";
   }
 
@@ -287,6 +366,28 @@ function findPolicyViolationReason(
     return "dom-disabled";
   }
 
+  const editableKeydownContext = readEditableKeydownContext(eventType, payload);
+
+  if (editableKeydownContext) {
+    if (policy.categories.inputs === "none") {
+      return "inputs-disabled";
+    }
+
+    if (
+      editableKeydownContext === "protected" &&
+      (hasAnyKeyboardIdentity(payload) || hasRawInputValue(payload))
+    ) {
+      return "password-key-data-disabled";
+    }
+
+    if (
+      policy.categories.inputs !== "allow" &&
+      (hasSensitiveKeyboardIdentity(payload) || hasRawInputValue(payload))
+    ) {
+      return "raw-input-value-disabled";
+    }
+  }
+
   if (eventType === "user.input") {
     if (policy.categories.inputs === "none") {
       return "inputs-disabled";
@@ -334,8 +435,11 @@ function findPolicyViolationReason(
   return null;
 }
 
-function classifyCategory(eventType: WebBlackboxEventType): PrivacyClassification["category"] {
-  if (eventType === "user.input") {
+function classifyCategory(
+  eventType: WebBlackboxEventType,
+  payload: unknown
+): PrivacyClassification["category"] {
+  if (eventType === "user.input" || readEditableKeydownContext(eventType, payload)) {
     return "inputs";
   }
 
@@ -375,7 +479,8 @@ function classifyCategory(eventType: WebBlackboxEventType): PrivacyClassificatio
 }
 
 function classifySensitivity(
-  eventType: WebBlackboxEventType
+  eventType: WebBlackboxEventType,
+  payload: unknown
 ): PrivacyClassification["sensitivity"] {
   if (eventType === "privacy.violation") {
     return "medium";
@@ -383,6 +488,7 @@ function classifySensitivity(
 
   if (
     eventType === "user.input" ||
+    readEditableKeydownContext(eventType, payload) !== null ||
     eventType === "dom.snapshot" ||
     eventType === "network.body" ||
     eventType === "screen.screenshot" ||
@@ -492,6 +598,94 @@ function hasRawInputValue(payload: unknown): boolean {
   return typeof row.value === "string" || typeof row.text === "string";
 }
 
+type EditableKeydownContext = "input" | "protected" | "textarea" | "contenteditable";
+
+function readEditableKeydownContext(
+  eventType: WebBlackboxEventType,
+  payload: unknown
+): EditableKeydownContext | null {
+  if (eventType !== "user.keydown") {
+    return null;
+  }
+
+  const row = asRecord(payload);
+  const declaredContext = row?.inputContext;
+
+  if (declaredContext === "password") {
+    return "protected";
+  }
+
+  if (
+    declaredContext === "input" ||
+    declaredContext === "protected" ||
+    declaredContext === "textarea" ||
+    declaredContext === "contenteditable"
+  ) {
+    return declaredContext;
+  }
+
+  const target = asRecord(row?.target);
+  const targetTag = typeof target?.tag === "string" ? target.tag.toUpperCase() : "";
+  const targetType =
+    typeof target?.inputType === "string"
+      ? target.inputType
+      : typeof target?.type === "string"
+        ? target.type
+        : "";
+
+  if (targetTag === "INPUT") {
+    return targetType.toLowerCase() === "password" ? "protected" : "input";
+  }
+
+  if (targetTag === "TEXTAREA") {
+    return "textarea";
+  }
+
+  if (target?.contentEditable === true || target?.isContentEditable === true) {
+    return "contenteditable";
+  }
+
+  return null;
+}
+
+function hasAnyKeyboardIdentity(payload: unknown): boolean {
+  const row = asRecord(payload);
+  return typeof row?.key === "string" || typeof row?.code === "string";
+}
+
+function hasSensitiveKeyboardIdentity(payload: unknown): boolean {
+  const row = asRecord(payload);
+
+  if (!row) {
+    return false;
+  }
+
+  const key = typeof row.key === "string" ? row.key : undefined;
+  const code = typeof row.code === "string" ? row.code : undefined;
+
+  return (
+    (key !== undefined && !isNonTextKeyboardKey(key, code ?? "")) ||
+    (code !== undefined && isTextProducingKeyboardCode(code))
+  );
+}
+
+function isNonTextKeyboardKey(key: string, code: string): boolean {
+  if (NON_TEXT_KEYBOARD_KEYS.has(key)) {
+    return !isTextProducingKeyboardCode(code);
+  }
+
+  return /^F(?:[1-9]|1\d|2[0-4])$/.test(key) && /^F(?:[1-9]|1\d|2[0-4])$/.test(code);
+}
+
+function isTextProducingKeyboardCode(code: string): boolean {
+  return (
+    /^Key[A-Z]$/.test(code) ||
+    /^Digit\d$/.test(code) ||
+    /^Numpad(?:\d|Add|Comma|Decimal|Divide|Equal|Multiply|Subtract)$/.test(code) ||
+    TEXT_PRODUCING_KEYBOARD_CODES.has(code)
+  );
+}
+
 function hasConsoleTextPayload(payload: unknown): boolean {
   const row = asRecord(payload);
 
@@ -519,6 +713,8 @@ function hasStorageDetail(payload: unknown): boolean {
   return (
     hasBlobReference(row) ||
     typeof row.key === "string" ||
+    typeof row.name === "string" ||
+    typeof row.databaseName === "string" ||
     Array.isArray(row.names) ||
     Array.isArray(row.databaseNames) ||
     asRecord(row.entries) !== null
@@ -537,6 +733,7 @@ function hasRedactionSignal(payload: unknown): boolean {
   return (
     row.redacted === true ||
     row.valueRedacted === true ||
+    row.keyRedacted === true ||
     row.selectorRedacted === true ||
     (target !== null &&
       typeof target === "object" &&
diff --git a/packages/recorder/src/websocket-frame.test.ts b/packages/recorder/src/websocket-frame.test.ts
new file mode 100644
index 0000000..74b0823
--- /dev/null
+++ b/packages/recorder/src/websocket-frame.test.ts
@@ -0,0 +1,120 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  DEFAULT_CAPTURE_POLICY,
+  DEFAULT_RECORDER_CONFIG,
+  type CapturePolicy
+} from "@webblackbox/protocol";
+
+import { WebBlackboxRecorder } from "./recorder.js";
+import { WEBSOCKET_FRAME_PAYLOAD_PREVIEW_MAX_CHARS } from "./websocket-frame.js";
+
+type NetworkCapturePolicy = CapturePolicy["categories"]["network"];
+
+type RecordedWebSocketFrame = {
+  requestId?: string;
+  timestamp?: number;
+  direction?: "sent" | "received";
+  response?: unknown;
+  payloadData?: unknown;
+  payloadPreview?: unknown;
+  frame?: {
+    opcode?: number;
+    masked?: boolean;
+    payloadLength?: number;
+    payloadPreview?: string;
+  };
+};
+
+describe("WebSocket frame capture policy", () => {
+  it.each(["metadata", "headers-allowlist"] as const)(
+    "persists metadata without a payload preview in %s mode",
+    (networkPolicy) => {
+      const rawPayload = "opaque-private-websocket-value";
+      const event = ingestWebSocketFrame(networkPolicy, rawPayload);
+      const data = event?.data as RecordedWebSocketFrame | undefined;
+
+      expect(event?.type).toBe("network.ws.frame");
+      expect(data).toEqual({
+        requestId: "ws-request-1",
+        timestamp: 12.5,
+        direction: "received",
+        frame: {
+          opcode: 1,
+          masked: false,
+          payloadLength: rawPayload.length
+        }
+      });
+      expect(JSON.stringify(data)).not.toContain(rawPayload);
+      expect(data?.response).toBeUndefined();
+      expect(data?.payloadData).toBeUndefined();
+      expect(data?.payloadPreview).toBeUndefined();
+      expect(data?.frame?.payloadPreview).toBeUndefined();
+    }
+  );
+
+  it("bounds and redacts payload previews in body-allowlist mode", () => {
+    const rawPayload = "x".repeat(WEBSOCKET_FRAME_PAYLOAD_PREVIEW_MAX_CHARS + 80);
+    const boundedEvent = ingestWebSocketFrame(
+      "body-allowlist",
+      rawPayload,
+      "Network.webSocketFrameSent"
+    );
+    const boundedData = boundedEvent?.data as RecordedWebSocketFrame | undefined;
+
+    expect(boundedEvent?.type).toBe("network.ws.frame");
+    expect(boundedData?.direction).toBe("sent");
+    expect(boundedData?.frame?.payloadLength).toBe(rawPayload.length);
+    expect(boundedData?.frame?.payloadPreview).toBe(
+      rawPayload.slice(0, WEBSOCKET_FRAME_PAYLOAD_PREVIEW_MAX_CHARS)
+    );
+    expect(boundedData?.frame?.payloadPreview).toHaveLength(
+      WEBSOCKET_FRAME_PAYLOAD_PREVIEW_MAX_CHARS
+    );
+    expect(boundedData?.response).toBeUndefined();
+
+    const sensitivePayload = "websocket-secret-material";
+    const redactedEvent = ingestWebSocketFrame("body-allowlist", sensitivePayload);
+    const redactedData = redactedEvent?.data as RecordedWebSocketFrame | undefined;
+
+    expect(redactedData?.frame?.payloadLength).toBe(sensitivePayload.length);
+    expect(redactedData?.frame?.payloadPreview).not.toBe(sensitivePayload);
+    expect(redactedData?.frame?.payloadPreview).toMatch(/^[a-f0-9]{64}$/);
+    expect(JSON.stringify(redactedData)).not.toContain(sensitivePayload);
+  });
+});
+
+function ingestWebSocketFrame(
+  networkPolicy: NetworkCapturePolicy,
+  payloadData: string,
+  rawType = "Network.webSocketFrameReceived"
+) {
+  const recorder = new WebBlackboxRecorder({
+    ...DEFAULT_RECORDER_CONFIG,
+    capturePolicy: {
+      ...DEFAULT_CAPTURE_POLICY,
+      categories: {
+        ...DEFAULT_CAPTURE_POLICY.categories,
+        network: networkPolicy
+      }
+    }
+  });
+
+  return recorder.ingest({
+    source: "cdp",
+    rawType,
+    tabId: 7,
+    sid: "S-websocket-policy",
+    t: 100,
+    mono: 50,
+    payload: {
+      requestId: "ws-request-1",
+      timestamp: 12.5,
+      response: {
+        opcode: 1,
+        mask: false,
+        payloadData
+      }
+    }
+  }).event;
+}
diff --git a/packages/recorder/src/websocket-frame.ts b/packages/recorder/src/websocket-frame.ts
new file mode 100644
index 0000000..568024b
--- /dev/null
+++ b/packages/recorder/src/websocket-frame.ts
@@ -0,0 +1,101 @@
+import type { CapturePolicy } from "@webblackbox/protocol";
+
+export const WEBSOCKET_FRAME_PAYLOAD_PREVIEW_MAX_CHARS = 512;
+
+type NetworkCapturePolicy = CapturePolicy["categories"]["network"];
+
+/**
+ * Reduces a CDP WebSocket frame to bounded metadata, adding a payload preview
+ * only when the effective network policy explicitly allows response bodies.
+ */
+export function normalizeWebSocketFramePayload(
+  method: string,
+  input: unknown,
+  networkPolicy: NetworkCapturePolicy | undefined
+): Record<string, unknown> {
+  const payload = asRecord(input);
+  const response = asRecord(payload?.response);
+  const frame = asRecord(payload?.frame);
+  const responsePayload = asString(response?.payloadData);
+  const previewSource =
+    responsePayload ??
+    asString(frame?.payloadPreview) ??
+    asString(payload?.payloadPreview) ??
+    asString(payload?.payloadData);
+  const declaredPayloadLength = asNonNegativeInteger(frame?.payloadLength);
+  const payloadLength =
+    responsePayload !== undefined
+      ? responsePayload.length
+      : (declaredPayloadLength ?? previewSource?.length ?? 0);
+  const normalizedFrame: Record<string, unknown> = {
+    opcode: asFiniteNumber(frame?.opcode) ?? asFiniteNumber(response?.opcode),
+    masked:
+      typeof frame?.masked === "boolean"
+        ? frame.masked
+        : typeof response?.mask === "boolean"
+          ? response.mask
+          : false,
+    payloadLength
+  };
+
+  if (networkPolicy === "body-allowlist" && previewSource !== undefined) {
+    normalizedFrame.payloadPreview = previewSource.slice(
+      0,
+      WEBSOCKET_FRAME_PAYLOAD_PREVIEW_MAX_CHARS
+    );
+  }
+
+  const normalized: Record<string, unknown> = {
+    direction: resolveDirection(method, payload),
+    frame: normalizedFrame
+  };
+  const requestId = asString(payload?.requestId);
+  const timestamp = asFiniteNumber(payload?.timestamp);
+
+  if (requestId !== undefined) {
+    normalized.requestId = requestId;
+  }
+
+  if (timestamp !== undefined) {
+    normalized.timestamp = timestamp;
+  }
+
+  return normalized;
+}
+
+function resolveDirection(
+  method: string,
+  payload: Record<string, unknown> | null
+): "sent" | "received" | undefined {
+  if (method === "Network.webSocketFrameSent") {
+    return "sent";
+  }
+
+  if (method === "Network.webSocketFrameReceived") {
+    return "received";
+  }
+
+  return payload?.direction === "sent" || payload?.direction === "received"
+    ? payload.direction
+    : undefined;
+}
+
+function asRecord(value: unknown): Record<string, unknown> | null {
+  return value !== null && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function asString(value: unknown): string | undefined {
+  return typeof value === "string" ? value : undefined;
+}
+
+function asFiniteNumber(value: unknown): number | undefined {
+  return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+
+function asNonNegativeInteger(value: unknown): number | undefined {
+  const number = asFiniteNumber(value);
+
+  return number !== undefined && number >= 0 ? Math.round(number) : undefined;
+}
diff --git a/packages/recorder/vitest.config.ts b/packages/recorder/vitest.config.ts
index 6ad7a19..dc0b120 100644
--- a/packages/recorder/vitest.config.ts
+++ b/packages/recorder/vitest.config.ts
@@ -19,10 +19,10 @@ export default defineConfig({
       include: ["src/**/*.ts"],
       exclude: ["src/**/*.test.ts", "src/index.ts", "src/types.ts"],
       thresholds: {
-        lines: 80,
-        statements: 80,
-        functions: 80,
-        branches: 65
+        lines: 87,
+        statements: 87,
+        functions: 90,
+        branches: 78
       }
     }
   }
diff --git a/packages/webblackbox/CHANGELOG.md b/packages/webblackbox/CHANGELOG.md
index 304625c..f8fa690 100644
--- a/packages/webblackbox/CHANGELOG.md
+++ b/packages/webblackbox/CHANGELOG.md
@@ -1,5 +1,21 @@
 # webblackbox
 
+## 0.7.0
+
+### Minor Changes
+
+- b3cfda9: Add capability-bound direct capture control with bounded replay reconciliation, inert duplicate
+  bootstrap, and complete final Lite DOM, storage, and screenshot artifacts.
+
+### Patch Changes
+
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+- Updated dependencies [b3cfda9]
+  - @webblackbox/protocol@0.7.0
+  - @webblackbox/pipeline@0.7.0
+  - @webblackbox/recorder@0.7.0
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/packages/webblackbox/LICENSE b/packages/webblackbox/LICENSE
new file mode 100644
index 0000000..fcf7ea4
--- /dev/null
+++ b/packages/webblackbox/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Web LLM
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/webblackbox/README.md b/packages/webblackbox/README.md
index 9953c4c..6542e1c 100644
--- a/packages/webblackbox/README.md
+++ b/packages/webblackbox/README.md
@@ -61,9 +61,11 @@ import { installInjectedLiteCaptureHooks } from "webblackbox/injected-hooks";
 import { materializeLiteRawEvent } from "webblackbox/lite-materializer";
 ```
 
-## Optional IndexedDB Cache Encryption
+## IndexedDB Cache Encryption
 
-When using `storage: "indexeddb"`, you can provide `pipelineStorageEncryptionKey` to encrypt cached chunk/blob payload bytes at rest.
+When using `storage: "indexeddb"` under the default `localAtRest: "required"` policy, the SDK automatically creates a non-extractable AES-GCM key in a purpose-specific IndexedDB keyring and encrypts cached chunk/blob payload bytes. Recreating the SDK with the same `indexedDbName` recovers the key and cache after a page restart. If the key is missing, the SDK purges any unverifiable legacy/plaintext data before opening the cache.
+
+You can provide `pipelineStorageEncryptionKey` when key lifecycle is managed externally:
 
 ```ts
 import { derivePipelineStorageKey } from "@webblackbox/pipeline";
@@ -77,7 +79,7 @@ const sdk = new WebBlackboxLiteSdk({
 });
 ```
 
-Persist `derived.salt` + `derived.iterations` using your own key-management policy if you need to reopen the same encrypted cache.
+Persist `derived.salt` + `derived.iterations` using your own key-management policy to derive the same key after restart. The key must be non-extractable AES-GCM-256 with `encrypt` and `decrypt` usages. Passing a raw persistent `pipelineStorage` without an authenticated-encryption capability is rejected at `start()`.
 
 ## Default Safety Tuning
 
diff --git a/packages/webblackbox/package.json b/packages/webblackbox/package.json
index 0500b04..3829516 100644
--- a/packages/webblackbox/package.json
+++ b/packages/webblackbox/package.json
@@ -1,7 +1,7 @@
 {
   "name": "webblackbox",
   "description": "Browser-side lite capture SDK for recording, exporting, and embedding WebBlackbox sessions.",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -61,11 +61,14 @@
   "scripts": {
     "dev": "tsup src/index.ts src/injected-hooks.ts src/lite-capture-agent.ts src/lite-materializer.ts src/lite-sdk.ts src/types.ts --format esm --dts --watch --clean",
     "build": "tsup src/index.ts src/injected-hooks.ts src/lite-capture-agent.ts src/lite-materializer.ts src/lite-sdk.ts src/types.ts --format esm --dts --clean",
+    "prepack": "pnpm run build",
     "lint": "eslint src --ext .ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run --passWithNoTests"
+    "test": "vitest run --passWithNoTests",
+    "test:coverage": "vitest run --coverage"
   },
   "devDependencies": {
+    "fake-indexeddb": "^6.2.5",
     "jsdom": "^26.1.0"
   },
   "dependencies": {
diff --git a/packages/webblackbox/src/injected-hooks.test.ts b/packages/webblackbox/src/injected-hooks.test.ts
index a903e6e..cb9352c 100644
--- a/packages/webblackbox/src/injected-hooks.test.ts
+++ b/packages/webblackbox/src/injected-hooks.test.ts
@@ -5,20 +5,35 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { DEFAULT_CAPTURE_POLICY, type CapturePolicy } from "@webblackbox/protocol";
 
 import {
+  createAuthenticatedInjectedCaptureConfig,
+  createAuthenticatedInjectedCaptureDrainRequest,
+  createInjectedLiteCaptureDirectController,
   INJECTED_CAPTURE_CONFIG_EVENT,
+  INJECTED_CAPTURE_DRAIN_EVENT,
   INJECTED_MESSAGE_SOURCE,
+  parseInjectedCaptureArmedMessage,
+  parseInjectedCaptureConfig,
+  parseInjectedCaptureDrainedMessage,
+  parseInjectedCaptureWindowMessage,
+  type InjectedCaptureArmedMessage,
   type InjectedCaptureConfig,
   type InjectedCaptureWindowMessage,
-  installInjectedLiteCaptureHooks
+  type InjectedDirectDrainResult,
+  installInjectedLiteCaptureHooks,
+  verifyAuthenticatedInjectedCaptureControlAck
 } from "./injected-hooks.js";
 
 type CaptureEventMessage = {
+  activationId: string;
   rawType: string;
   payload: Record<string, unknown>;
   t: number;
   mono: number;
 };
 
+const ACTIVATION_A = `a1_${"a".repeat(64)}`;
+const ACTIVATION_B = `a1_${"b".repeat(64)}`;
+
 const DETAILED_TEST_CAPTURE_POLICY: CapturePolicy = {
   ...DEFAULT_CAPTURE_POLICY,
   mode: "debug",
@@ -39,21 +54,29 @@ function delay(ms: number): Promise<void> {
 describe("injected-hooks", () => {
   const originalFetch = window.fetch;
   const captured: CaptureEventMessage[] = [];
+  const armed: string[] = [];
 
   beforeEach(() => {
     captured.length = 0;
+    armed.length = 0;
     vi.spyOn(console, "info").mockImplementation(() => undefined);
     vi.spyOn(console, "log").mockImplementation(() => undefined);
 
     vi.spyOn(window, "postMessage").mockImplementation((message: unknown) => {
-      const row = message as InjectedCaptureWindowMessage;
+      const row = message as InjectedCaptureWindowMessage | InjectedCaptureArmedMessage;
 
       if (row?.source !== INJECTED_MESSAGE_SOURCE) {
         return;
       }
 
+      if (row.kind === "injected-armed") {
+        armed.push(row.activationId);
+        return;
+      }
+
       if (row.kind === "capture-event") {
         captured.push({
+          activationId: row.activationId,
           rawType: row.rawType,
           payload: row.payload,
           t: row.t,
@@ -70,11 +93,411 @@ describe("injected-hooks", () => {
 
   afterEach(() => {
     vi.restoreAllMocks();
+    vi.unstubAllGlobals();
     window.fetch = originalFetch;
     localStorage.clear();
     sessionStorage.clear();
   });
 
+  it("accepts only bounded observation messages from the page-world bridge", () => {
+    const validEvent = {
+      activationId: ACTIVATION_A,
+      rawType: "console",
+      payload: { method: "info", redacted: true },
+      t: Date.now(),
+      mono: performance.timeOrigin + performance.now()
+    };
+
+    expect(
+      parseInjectedCaptureWindowMessage({
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "capture-events",
+        activationId: ACTIVATION_A,
+        events: [validEvent]
+      })
+    ).toEqual([validEvent]);
+
+    expect(
+      parseInjectedCaptureWindowMessage({
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "marker",
+        message: "forged control action",
+        t: Date.now(),
+        mono: performance.now()
+      })
+    ).toBeNull();
+
+    expect(
+      parseInjectedCaptureWindowMessage({
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "capture-event",
+        ...validEvent,
+        rawType: "mutation"
+      })
+    ).toBeNull();
+
+    expect(
+      parseInjectedCaptureWindowMessage({
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "capture-events",
+        activationId: ACTIVATION_A,
+        events: Array.from({ length: 25 }, () => validEvent)
+      })
+    ).toBeNull();
+
+    let nestedPayload: Record<string, unknown> = {};
+    for (let depth = 0; depth < 8; depth += 1) {
+      nestedPayload = { nested: nestedPayload };
+    }
+    expect(
+      parseInjectedCaptureWindowMessage({
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "capture-event",
+        ...validEvent,
+        payload: nestedPayload
+      })
+    ).toBeNull();
+
+    expect(
+      parseInjectedCaptureWindowMessage(
+        new Proxy(
+          {},
+          {
+            getPrototypeOf() {
+              throw new Error("hostile proxy");
+            }
+          }
+        )
+      )
+    ).toBeNull();
+  });
+
+  it("strictly binds configs, acknowledgements, and batches to one activation", () => {
+    const event = {
+      activationId: ACTIVATION_A,
+      rawType: "console",
+      payload: { method: "info", redacted: true },
+      t: 1,
+      mono: 1
+    };
+
+    expect(
+      parseInjectedCaptureConfig({
+        active: true,
+        activationId: ACTIVATION_A,
+        bodyCaptureMaxBytes: 4_096,
+        capturePolicy: DEFAULT_CAPTURE_POLICY
+      })
+    ).toMatchObject({ active: true, activationId: ACTIVATION_A });
+    expect(
+      parseInjectedCaptureConfig({
+        active: true,
+        activationId: ACTIVATION_A,
+        unexpected: true
+      })
+    ).toBeNull();
+    expect(parseInjectedCaptureConfig({ active: true, activationId: "a1_short" })).toBeNull();
+
+    expect(
+      parseInjectedCaptureArmedMessage({
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "injected-armed",
+        activationId: ACTIVATION_A
+      })
+    ).toBe(ACTIVATION_A);
+    expect(
+      parseInjectedCaptureArmedMessage({
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "injected-armed",
+        activationId: ACTIVATION_A,
+        events: []
+      })
+    ).toBeNull();
+
+    expect(
+      parseInjectedCaptureWindowMessage({
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "capture-events",
+        activationId: ACTIVATION_A,
+        events: [event, { ...event, activationId: ACTIVATION_B }]
+      })
+    ).toBeNull();
+  });
+
+  it("flushes queued events on deactivation but drops stale replacement flushes", async () => {
+    vi.useFakeTimers();
+    const flag = "__WB_TEST_INJECTED_ACTIVATION_RESET__";
+
+    try {
+      installInjectedLiteCaptureHooks({ flag, active: false });
+      window.dispatchEvent(
+        new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
+          detail: { active: true, activationId: ACTIVATION_A }
+        })
+      );
+      console.info("queued-under-a");
+      window.dispatchEvent(
+        new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
+          detail: { active: false, activationId: ACTIVATION_A }
+        })
+      );
+      await vi.runAllTimersAsync();
+
+      expect(captured.some((event) => event.activationId === ACTIVATION_A)).toBe(true);
+      captured.length = 0;
+
+      window.dispatchEvent(
+        new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
+          detail: { active: true, activationId: ACTIVATION_A }
+        })
+      );
+      console.info("replaced-a");
+      window.dispatchEvent(
+        new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
+          detail: { active: true, activationId: ACTIVATION_B }
+        })
+      );
+      console.info("active-b");
+      await vi.runAllTimersAsync();
+
+      expect(captured.some((event) => event.activationId === ACTIVATION_A)).toBe(false);
+      expect(captured.some((event) => event.activationId === ACTIVATION_B)).toBe(true);
+      expect(armed).toEqual(expect.arrayContaining([ACTIVATION_A, ACTIVATION_B]));
+    } finally {
+      vi.clearAllTimers();
+      vi.useRealTimers();
+    }
+  });
+
+  it("flushes MAIN events before emitting the close-only drain barrier", async () => {
+    vi.useFakeTimers();
+    const flag = "__WB_TEST_INJECTED_DRAIN__";
+
+    try {
+      installInjectedLiteCaptureHooks({ flag, active: false });
+      window.dispatchEvent(
+        new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
+          detail: { active: true, activationId: ACTIVATION_A }
+        })
+      );
+      console.info("queued-before-drain");
+      window.dispatchEvent(
+        new CustomEvent(INJECTED_CAPTURE_DRAIN_EVENT, {
+          detail: { activationId: ACTIVATION_A }
+        })
+      );
+      await vi.runAllTimersAsync();
+
+      expect(captured.some((event) => event.activationId === ACTIVATION_A)).toBe(true);
+      expect(window.postMessage).toHaveBeenCalledWith(
+        {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "injected-drained",
+          activationId: ACTIVATION_A
+        },
+        "*"
+      );
+      expect(
+        parseInjectedCaptureDrainedMessage({
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "injected-drained",
+          activationId: ACTIVATION_A
+        })
+      ).toBe(ACTIVATION_A);
+    } finally {
+      vi.clearAllTimers();
+      vi.useRealTimers();
+    }
+  });
+
+  it("rejects a page-preempted drain and accepts only the HMAC-authenticated barrier", async () => {
+    const secret = "c".repeat(64);
+    const flag = "__WB_TEST_AUTHENTICATED_DRAIN__";
+    let forgedAck: unknown;
+    const preempt = (event: Event) => {
+      const detail = (event as CustomEvent<Record<string, unknown>>).detail;
+      forgedAck = {
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: "injected-drained-authenticated",
+        activationId: detail.activationId,
+        nonce: detail.nonce,
+        proof: "0".repeat(64)
+      };
+      window.postMessage(forgedAck, "*");
+    };
+    window.addEventListener(INJECTED_CAPTURE_DRAIN_EVENT, preempt);
+
+    try {
+      expect(
+        installInjectedLiteCaptureHooks({
+          flag,
+          active: false,
+          captureNetwork: false,
+          controlSecret: secret
+        })
+      ).toBe(secret);
+      const config = await createAuthenticatedInjectedCaptureConfig(secret, {
+        active: true,
+        activationId: ACTIVATION_A,
+        bodyCaptureMaxBytes: 0,
+        capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+      });
+      window.dispatchEvent(new CustomEvent(INJECTED_CAPTURE_CONFIG_EVENT, { detail: config }));
+      await delay(10);
+      console.info("authenticated-tail");
+      const drain = await createAuthenticatedInjectedCaptureDrainRequest(secret, ACTIVATION_A);
+      window.dispatchEvent(new CustomEvent(INJECTED_CAPTURE_DRAIN_EVENT, { detail: drain }));
+      await delay(10);
+
+      expect(
+        await verifyAuthenticatedInjectedCaptureControlAck(forgedAck, secret, {
+          kind: "injected-drained-authenticated",
+          activationId: ACTIVATION_A,
+          nonce: drain.nonce
+        })
+      ).toBe(false);
+      const authenticatedAck = vi
+        .mocked(window.postMessage)
+        .mock.calls.map(([message]) => message)
+        .filter(
+          (message) => (message as { kind?: unknown }).kind === "injected-drained-authenticated"
+        )
+        .at(-1);
+      expect(
+        await verifyAuthenticatedInjectedCaptureControlAck(authenticatedAck, secret, {
+          kind: "injected-drained-authenticated",
+          activationId: ACTIVATION_A,
+          nonce: drain.nonce
+        })
+      ).toBe(true);
+      expect(captured.some((event) => event.activationId === ACTIVATION_A)).toBe(true);
+    } finally {
+      window.removeEventListener(INJECTED_CAPTURE_DRAIN_EVENT, preempt);
+    }
+  });
+
+  it("locks control closed at the nonce limit and never accepts an evicted active replay", async () => {
+    const secret = "d".repeat(64);
+    installInjectedLiteCaptureHooks({
+      flag: "__WB_TEST_CONTROL_NONCE_LIMIT__",
+      active: false,
+      captureNetwork: false,
+      controlSecret: secret,
+      controlNonceLimit: 2
+    });
+    const first = await createAuthenticatedInjectedCaptureConfig(secret, {
+      active: true,
+      activationId: ACTIVATION_A
+    });
+    const second = await createAuthenticatedInjectedCaptureConfig(secret, {
+      active: false,
+      activationId: ACTIVATION_A
+    });
+    const overflow = await createAuthenticatedInjectedCaptureConfig(secret, {
+      active: true,
+      activationId: ACTIVATION_B
+    });
+
+    for (const detail of [first, second, overflow, first]) {
+      window.dispatchEvent(new CustomEvent(INJECTED_CAPTURE_CONFIG_EVENT, { detail }));
+      await delay(5);
+    }
+    captured.length = 0;
+    console.info("must-remain-locked");
+    await delay(10);
+
+    expect(captured).toEqual([]);
+  });
+
+  it("keeps asynchronous network completions bound to their producing activation", async () => {
+    let resolveFetch!: (response: Response) => void;
+    window.fetch = vi.fn(
+      () =>
+        new Promise<Response>((resolve) => {
+          resolveFetch = resolve;
+        })
+    ) as typeof fetch;
+    installInjectedLiteCaptureHooks({
+      flag: "__WB_TEST_INJECTED_ASYNC_ACTIVATION__",
+      active: true,
+      activationId: ACTIVATION_A,
+      capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+    });
+
+    const request = window.fetch("https://example.test/deferred");
+    window.dispatchEvent(
+      new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
+        detail: {
+          active: true,
+          activationId: ACTIVATION_B,
+          capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+        }
+      })
+    );
+    resolveFetch(
+      new Response("ok", {
+        status: 200,
+        headers: { "content-type": "text/plain" }
+      })
+    );
+    await request;
+    await delay(10);
+
+    expect(
+      captured.some(
+        (event) =>
+          event.rawType === "fetch" ||
+          event.rawType === "fetchError" ||
+          event.rawType === "networkBody"
+      )
+    ).toBe(false);
+  });
+
+  it("omits IndexedDB names when policy is counts-only", async () => {
+    const open = vi.fn(() => ({}) as IDBOpenDBRequest);
+    vi.stubGlobal("indexedDB", { open });
+
+    installInjectedLiteCaptureHooks({
+      flag: "__WB_TEST_INJECTED_IDB_COUNTS_ONLY__",
+      capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+    });
+
+    indexedDB.open("customer-secret-db", 7);
+    await delay(10);
+
+    const event = captured.find((message) => message.rawType === "indexedDbOp");
+    expect(event?.payload).toEqual({ op: "open" });
+    expect(JSON.stringify(event)).not.toContain("customer-secret-db");
+    expect(open).toHaveBeenCalledWith("customer-secret-db", 7);
+  });
+
+  it("retains IndexedDB names only when names-only policy explicitly allows them", async () => {
+    const open = vi.fn(() => ({}) as IDBOpenDBRequest);
+    vi.stubGlobal("indexedDB", { open });
+    const capturePolicy: CapturePolicy = {
+      ...DETAILED_TEST_CAPTURE_POLICY,
+      categories: {
+        ...DETAILED_TEST_CAPTURE_POLICY.categories,
+        indexedDb: "names-only"
+      }
+    };
+
+    installInjectedLiteCaptureHooks({
+      flag: "__WB_TEST_INJECTED_IDB_NAMES_ONLY__",
+      capturePolicy
+    });
+
+    indexedDB.open("allowed-database-name", 3);
+    await delay(10);
+
+    const event = captured.find((message) => message.rawType === "indexedDbOp");
+    expect(event?.payload).toEqual({
+      op: "open",
+      name: "allowed-database-name",
+      version: 3
+    });
+  });
+
   it("is idempotent for the same flag and emits ready + console events", async () => {
     const flag = "__WB_TEST_INJECTED_CONSOLE__";
 
@@ -108,6 +531,111 @@ describe("injected-hooks", () => {
     expect((event?.payload as { args?: unknown }).args).toBeUndefined();
   });
 
+  it("keeps the installed state when a duplicate bootstrap supplies different options", async () => {
+    const flag = "__WB_TEST_INJECTED_DUPLICATE_BOOTSTRAP__";
+    const configEvents = vi.fn();
+    window.fetch = vi.fn(async () => {
+      return new Response('{"ok":true}', {
+        status: 200,
+        headers: {
+          "content-type": "application/json"
+        }
+      });
+    }) as typeof fetch;
+    window.addEventListener(INJECTED_CAPTURE_CONFIG_EVENT, configEvents);
+
+    try {
+      installInjectedLiteCaptureHooks({
+        flag,
+        active: true,
+        activationId: ACTIVATION_A,
+        bodyCaptureMaxBytes: 64 * 1024,
+        capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+      });
+      const installedFetch = window.fetch;
+      const installedConsoleInfo = console.info;
+
+      installInjectedLiteCaptureHooks({
+        flag,
+        active: false,
+        activationId: ACTIVATION_B,
+        bodyCaptureMaxBytes: 0,
+        capturePolicy: DEFAULT_CAPTURE_POLICY,
+        captureNetwork: false
+      });
+
+      expect(window.fetch).toBe(installedFetch);
+      expect(console.info).toBe(installedConsoleInfo);
+      expect(configEvents).not.toHaveBeenCalled();
+
+      console.info("still-active-after-duplicate-bootstrap");
+      await window.fetch("https://example.test/api/duplicate-bootstrap");
+
+      for (let attempt = 0; attempt < 20; attempt += 1) {
+        if (captured.some((message) => message.rawType === "networkBody")) {
+          break;
+        }
+
+        await delay(5);
+      }
+
+      expect(
+        captured.filter(
+          (message) =>
+            message.rawType === "notice" &&
+            (message.payload as { message?: unknown }).message === "injected-ready"
+        )
+      ).toHaveLength(1);
+      expect(captured.some((message) => message.rawType === "console")).toBe(true);
+      expect(captured.some((message) => message.rawType === "networkBody")).toBe(true);
+
+      const consoleCountBeforeInactive = captured.filter(
+        (message) => message.rawType === "console"
+      ).length;
+      const bodyCountBeforeInactive = captured.filter(
+        (message) => message.rawType === "networkBody"
+      ).length;
+      window.dispatchEvent(
+        new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
+          detail: {
+            active: false,
+            activationId: ACTIVATION_A,
+            bodyCaptureMaxBytes: 0
+          }
+        })
+      );
+      console.info("inactive-after-dynamic-config");
+      await window.fetch("https://example.test/api/inactive-after-config");
+      await delay(10);
+
+      expect(captured.filter((message) => message.rawType === "console")).toHaveLength(
+        consoleCountBeforeInactive
+      );
+      expect(captured.filter((message) => message.rawType === "networkBody")).toHaveLength(
+        bodyCountBeforeInactive
+      );
+
+      window.dispatchEvent(
+        new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
+          detail: {
+            active: true,
+            activationId: ACTIVATION_A,
+            bodyCaptureMaxBytes: 64 * 1024
+          }
+        })
+      );
+      console.info("active-after-dynamic-config");
+      await delay(10);
+
+      expect(captured.filter((message) => message.rawType === "console")).toHaveLength(
+        consoleCountBeforeInactive + 1
+      );
+      expect(configEvents).toHaveBeenCalledTimes(2);
+    } finally {
+      window.removeEventListener(INJECTED_CAPTURE_CONFIG_EVENT, configEvents);
+    }
+  });
+
   it("captures fetch start/end and sampled response body", async () => {
     const flag = "__WB_TEST_INJECTED_FETCH__";
 
@@ -186,6 +714,27 @@ describe("injected-hooks", () => {
     expect(String((networkBody?.payload as { body?: unknown }).body ?? "")).toContain('"ok":true');
   });
 
+  it("does not sample fetch bodies without an allowed content type", async () => {
+    const flag = "__WB_TEST_INJECTED_FETCH_MISSING_MIME__";
+
+    window.fetch = vi.fn(async () => {
+      return new Response(new Uint8Array([0, 1, 2, 3]), {
+        status: 200
+      });
+    }) as typeof fetch;
+
+    installInjectedLiteCaptureHooks({
+      flag,
+      bodyCaptureMaxBytes: 128 * 1024,
+      capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+    });
+
+    await window.fetch("https://example.test/api/binary");
+    await delay(20);
+
+    expect(captured.some((message) => message.rawType === "networkBody")).toBe(false);
+  });
+
   it("skips response-body sampling until capture config enables it", async () => {
     const flag = "__WB_TEST_INJECTED_FETCH_CONFIG__";
 
@@ -198,7 +747,7 @@ describe("injected-hooks", () => {
       });
     }) as typeof fetch;
 
-    installInjectedLiteCaptureHooks({ flag });
+    installInjectedLiteCaptureHooks({ flag, activationId: ACTIVATION_A });
 
     await window.fetch("https://example.test/api/disabled");
     await delay(20);
@@ -208,6 +757,8 @@ describe("injected-hooks", () => {
     window.dispatchEvent(
       new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
         detail: {
+          active: true,
+          activationId: ACTIVATION_A,
           bodyCaptureMaxBytes: 64 * 1024,
           capturePolicy: DETAILED_TEST_CAPTURE_POLICY
         }
@@ -247,7 +798,8 @@ describe("injected-hooks", () => {
     window.dispatchEvent(
       new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
         detail: {
-          active: true
+          active: true,
+          activationId: ACTIVATION_A
         }
       })
     );
@@ -261,7 +813,8 @@ describe("injected-hooks", () => {
     window.dispatchEvent(
       new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
         detail: {
-          active: false
+          active: false,
+          activationId: ACTIVATION_A
         }
       })
     );
@@ -393,4 +946,289 @@ describe("injected-hooks", () => {
       "demo-pass"
     ]);
   });
+
+  it("keeps direct control privileged, monotonic, replayable, and free of DOM crypto control", () => {
+    const secret = "e".repeat(64);
+    const wrongSecret = "f".repeat(64);
+    const addEventListener = vi.spyOn(window, "addEventListener");
+    const getRandomValues = vi
+      .spyOn(globalThis.crypto, "getRandomValues")
+      .mockImplementation(() => {
+        throw new Error("page crypto must not be used by direct control");
+      });
+    const jsonStringify = vi.spyOn(JSON, "stringify");
+    const OriginalTextEncoder = globalThis.TextEncoder;
+    const textEncoder = vi.fn(() => {
+      throw new Error("page TextEncoder must not be used by direct control");
+    });
+    vi.stubGlobal("TextEncoder", textEncoder);
+
+    const controller = createInjectedLiteCaptureDirectController({ replayEventLimit: 2 });
+    expect(controller.bootstrap(secret)).toEqual({
+      kind: "installed",
+      phase: "inactive",
+      revision: 0
+    });
+    expect(controller.bootstrap(secret)).toEqual({
+      kind: "existing",
+      phase: "inactive",
+      revision: 0
+    });
+    expect(controller.bootstrap(wrongSecret)).toEqual({ kind: "rejected" });
+    expect(
+      addEventListener.mock.calls.some(
+        ([type]) =>
+          String(type) === INJECTED_CAPTURE_CONFIG_EVENT ||
+          String(type) === INJECTED_CAPTURE_DRAIN_EVENT
+      )
+    ).toBe(false);
+
+    const poisonCommand: Record<string, unknown> = {};
+    Object.defineProperty(poisonCommand, "kind", {
+      get(): never {
+        throw new Error("wrong capability must not inspect the command");
+      }
+    });
+    expect(() => controller.control(wrongSecret, poisonCommand)).not.toThrow();
+    expect(controller.control(wrongSecret, poisonCommand)).toEqual({
+      kind: "rejected",
+      reason: "capability"
+    });
+    expect(
+      controller.control(secret, {
+        kind: "activate",
+        revision: 1,
+        config: { active: true, activationId: ACTIVATION_A },
+        extra: true
+      })
+    ).toEqual({ kind: "rejected", reason: "invalid-command" });
+
+    expect(
+      controller.control(secret, {
+        kind: "activate",
+        revision: 1,
+        config: {
+          active: true,
+          activationId: ACTIVATION_A,
+          bodyCaptureMaxBytes: 0,
+          capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+        }
+      })
+    ).toEqual({ kind: "activated", activationId: ACTIVATION_A, revision: 1 });
+    expect(controller.control(secret, { kind: "probe" })).toMatchObject({
+      kind: "probed",
+      phase: "active",
+      revision: 1,
+      activationId: ACTIVATION_A
+    });
+    expect(getRandomValues).not.toHaveBeenCalled();
+    expect(textEncoder).not.toHaveBeenCalled();
+    expect(jsonStringify).not.toHaveBeenCalled();
+
+    getRandomValues.mockRestore();
+    vi.stubGlobal("TextEncoder", OriginalTextEncoder);
+    console.info("direct-tail-1");
+    console.info("direct-tail-2");
+    const firstDrain = controller.control(secret, {
+      kind: "drain",
+      revision: 2,
+      activationId: ACTIVATION_A
+    }) as InjectedDirectDrainResult;
+    expect(firstDrain).toMatchObject({
+      kind: "drained",
+      activationId: ACTIVATION_A,
+      revision: 2,
+      producedThrough: 2,
+      truncatedBefore: 0,
+      degraded: false,
+      replayed: false
+    });
+    expect(firstDrain.events.map((event) => event.seq)).toEqual([1, 2]);
+    expect(firstDrain.events.every((event) => event.activationId === ACTIVATION_A)).toBe(true);
+
+    expect(
+      controller.control(secret, {
+        kind: "drain",
+        revision: 2,
+        activationId: ACTIVATION_A
+      })
+    ).toEqual({ kind: "rejected", reason: "stale" });
+    expect(
+      controller.control(secret, {
+        kind: "drain",
+        revision: 3,
+        activationId: ACTIVATION_A
+      })
+    ).toMatchObject({
+      kind: "drained",
+      replayed: true,
+      producedThrough: 2,
+      truncatedBefore: 0
+    });
+
+    expect(
+      controller.control(secret, {
+        kind: "activate",
+        revision: 4,
+        config: {
+          active: true,
+          activationId: ACTIVATION_B,
+          bodyCaptureMaxBytes: 0,
+          capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+        }
+      })
+    ).toEqual({ kind: "activated", activationId: ACTIVATION_B, revision: 4 });
+    expect(
+      controller.control(secret, {
+        kind: "drain",
+        revision: 5,
+        activationId: ACTIVATION_A
+      })
+    ).toEqual({ kind: "rejected", reason: "activation-mismatch" });
+    expect(controller.control(secret, { kind: "probe" })).toMatchObject({
+      kind: "probed",
+      phase: "active",
+      revision: 4,
+      activationId: ACTIVATION_B
+    });
+
+    console.info("direct-overflow-1");
+    console.info("direct-overflow-2");
+    console.info("direct-overflow-3");
+    const overflowDrain = controller.control(secret, {
+      kind: "drain",
+      revision: 5,
+      activationId: ACTIVATION_B
+    }) as InjectedDirectDrainResult;
+    expect(overflowDrain).toMatchObject({
+      producedThrough: 3,
+      truncatedBefore: 1,
+      degraded: true,
+      replayed: false
+    });
+    expect(overflowDrain.events.map((event) => event.seq)).toEqual([2, 3]);
+
+    let nextRevision = 6;
+    for (let lifecycle = 0; lifecycle < 520; lifecycle += 1) {
+      const activationId = `a1_${lifecycle.toString(16).padStart(64, "0")}`;
+      expect(
+        controller.control(secret, {
+          kind: "activate",
+          revision: nextRevision,
+          config: { active: true, activationId }
+        })
+      ).toMatchObject({ kind: "activated", activationId });
+      nextRevision += 1;
+      expect(
+        controller.control(secret, {
+          kind: "drain",
+          revision: nextRevision,
+          activationId
+        })
+      ).toMatchObject({ kind: "drained", activationId, degraded: false });
+      nextRevision += 1;
+    }
+
+    expect(controller.control(secret, { kind: "probe" })).toMatchObject({
+      kind: "probed",
+      phase: "drained",
+      revision: nextRevision - 1
+    });
+  });
+
+  it("clears the controlled activation on direct deactivation", () => {
+    const secret = "8".repeat(64);
+    const controller = createInjectedLiteCaptureDirectController();
+    expect(controller.bootstrap(secret)).toMatchObject({ kind: "installed" });
+    expect(
+      controller.control(secret, {
+        kind: "activate",
+        revision: 1,
+        config: { active: true, activationId: ACTIVATION_A }
+      })
+    ).toMatchObject({ kind: "activated" });
+    expect(
+      controller.control(secret, {
+        kind: "deactivate",
+        revision: 2,
+        activationId: ACTIVATION_A
+      })
+    ).toMatchObject({ kind: "deactivated" });
+    expect(controller.control(secret, { kind: "probe" })).toMatchObject({
+      kind: "probed",
+      phase: "inactive",
+      revision: 2,
+      activationId: null
+    });
+  });
+
+  it("atomically replaces an active activation at a higher revision", () => {
+    const secret = "7".repeat(64);
+    const controller = createInjectedLiteCaptureDirectController();
+    controller.bootstrap(secret);
+    expect(
+      controller.control(secret, {
+        kind: "activate",
+        revision: 1,
+        config: { active: true, activationId: ACTIVATION_A }
+      })
+    ).toMatchObject({ kind: "activated", activationId: ACTIVATION_A });
+    console.info("old-activation-tail");
+    expect(
+      controller.control(secret, {
+        kind: "activate",
+        revision: 2,
+        config: { active: true, activationId: ACTIVATION_B }
+      })
+    ).toMatchObject({ kind: "activated", activationId: ACTIVATION_B });
+    expect(
+      controller.control(secret, {
+        kind: "drain",
+        revision: 3,
+        activationId: ACTIVATION_A
+      })
+    ).toEqual({ kind: "rejected", reason: "activation-mismatch" });
+    expect(controller.control(secret, { kind: "probe" })).toMatchObject({
+      phase: "active",
+      activationId: ACTIVATION_B,
+      producedThrough: 0,
+      truncatedBefore: 0
+    });
+  });
+
+  it("bounds direct replay by estimated serialized bytes as well as event count", () => {
+    const secret = "9".repeat(64);
+    const controller = createInjectedLiteCaptureDirectController({
+      replayByteLimit: 128,
+      replayEventLimit: 256
+    });
+
+    expect(controller.bootstrap(secret)).toMatchObject({ kind: "installed" });
+    expect(
+      controller.control(secret, {
+        kind: "activate",
+        revision: 1,
+        config: {
+          active: true,
+          activationId: ACTIVATION_A,
+          capturePolicy: DETAILED_TEST_CAPTURE_POLICY
+        }
+      })
+    ).toMatchObject({ kind: "activated" });
+
+    console.info("x".repeat(1_000));
+    const result = controller.control(secret, {
+      kind: "drain",
+      revision: 2,
+      activationId: ACTIVATION_A
+    }) as InjectedDirectDrainResult;
+
+    expect(result).toMatchObject({
+      kind: "drained",
+      producedThrough: 1,
+      truncatedBefore: 1,
+      degraded: true
+    });
+    expect(result.events).toEqual([]);
+  });
 });
diff --git a/packages/webblackbox/src/injected-hooks.ts b/packages/webblackbox/src/injected-hooks.ts
index 37157be..430bad6 100644
--- a/packages/webblackbox/src/injected-hooks.ts
+++ b/packages/webblackbox/src/injected-hooks.ts
@@ -1,4 +1,5 @@
 import {
+  capturePolicySchema,
   DEFAULT_CAPTURE_POLICY,
   sanitizeUrlForPrivacy,
   type CapturePolicy
@@ -16,6 +17,20 @@ const SAFE_SERIALIZE_MAX_DEPTH = 3;
 const SAFE_SERIALIZE_MAX_PROPERTIES = 24;
 const SAFE_SERIALIZE_MAX_STRING_CHARS = 1_200;
 const EMIT_FLUSH_MAX_EVENTS = 24;
+const INJECTED_MESSAGE_MAX_PAYLOAD_CHARS = 4 * 1024 * 1024 + 256 * 1024;
+const INJECTED_MESSAGE_MAX_NODES = 512;
+const INJECTED_MESSAGE_MAX_DEPTH = 6;
+const INJECTED_MESSAGE_MAX_COLLECTION_ITEMS = 64;
+const INJECTED_ACTIVATION_ID_PATTERN = /^a1_[0-9a-f]{64}$/;
+const INJECTED_CONTROL_SECRET_PATTERN = /^[0-9a-f]{64}$/;
+const INJECTED_CONTROL_NONCE_PATTERN = /^n1_[0-9a-f]{64}$/;
+const INJECTED_CONTROL_PROOF_PATTERN = /^[0-9a-f]{64}$/;
+const INJECTED_CONTROL_RANDOM_BYTES = 32;
+const INJECTED_CONTROL_SEEN_NONCES_MAX = 512;
+const INJECTED_DIRECT_REPLAY_EVENT_LIMIT = 256;
+const INJECTED_DIRECT_REPLAY_BYTE_LIMIT = 1024 * 1024;
+const INJECTED_DIRECT_REPLAY_BYTE_LIMIT_MAX = 16 * 1024 * 1024;
+const INJECTED_DIRECT_MAX_REVISION = 9_007_199_254_740_991;
 const NETWORK_HEADER_ALLOWLIST = new Set([
   "accept",
   "accept-language",
@@ -36,18 +51,117 @@ export const INJECTED_MESSAGE_SOURCE = "webblackbox-injected";
 
 /** DOM event used to push runtime capture config into the injected page world. */
 export const INJECTED_CAPTURE_CONFIG_EVENT = "webblackbox:injected-config";
+export const INJECTED_CAPTURE_DRAIN_EVENT = "webblackbox:injected-drain";
 
 export type InjectedCaptureConfig = {
-  active?: boolean;
+  active: boolean;
+  activationId: string;
   bodyCaptureMaxBytes?: number;
   capturePolicy?: CapturePolicy;
 };
 
+export type AuthenticatedInjectedCaptureConfig = InjectedCaptureConfig & {
+  nonce: string;
+  proof: string;
+};
+
+export type AuthenticatedInjectedCaptureDrainRequest = {
+  activationId: string;
+  nonce: string;
+  proof: string;
+};
+
+export type AuthenticatedInjectedCaptureControlAck = {
+  source: typeof INJECTED_MESSAGE_SOURCE;
+  kind: "injected-armed-authenticated" | "injected-drained-authenticated";
+  activationId: string;
+  nonce: string;
+  proof: string;
+};
+
+export type InjectedCaptureEvent = {
+  activationId: string;
+  /** Privileged direct-controller sequence. Legacy standalone events omit it. */
+  seq?: number;
+  rawType: string;
+  payload: CapturePayload;
+  t: number;
+  mono: number;
+};
+
+export type InjectedDirectCaptureEvent = InjectedCaptureEvent & {
+  seq: number;
+};
+
+export type InjectedDirectCommand =
+  | {
+      kind: "probe";
+    }
+  | {
+      kind: "activate";
+      revision: number;
+      config: InjectedCaptureConfig;
+    }
+  | {
+      kind: "deactivate" | "drain";
+      revision: number;
+      activationId: string;
+    };
+
+export type InjectedDirectControllerPhase = "inactive" | "active" | "drained";
+
+export type InjectedDirectBootstrapResult =
+  | {
+      kind: "installed" | "existing";
+      phase: InjectedDirectControllerPhase;
+      revision: number;
+    }
+  | {
+      kind: "rejected" | "unavailable";
+    };
+
+export type InjectedDirectDrainResult = {
+  kind: "drained";
+  activationId: string;
+  revision: number;
+  events: InjectedDirectCaptureEvent[];
+  producedThrough: number;
+  /** Highest sequence no longer retained; `0` means the replay window is complete. */
+  truncatedBefore: number;
+  degraded: boolean;
+  replayed: boolean;
+};
+
+export type InjectedDirectControlResult =
+  | {
+      kind: "probed";
+      phase: InjectedDirectControllerPhase;
+      revision: number;
+      activationId: string | null;
+      producedThrough: number;
+      truncatedBefore: number;
+    }
+  | {
+      kind: "activated" | "deactivated";
+      activationId: string;
+      revision: number;
+    }
+  | InjectedDirectDrainResult
+  | {
+      kind: "rejected";
+      reason: "activation-mismatch" | "capability" | "invalid-command" | "stale";
+    }
+  | {
+      kind: "unavailable";
+    };
+
 /** Message contract emitted by injected hooks into the page window. */
 export type InjectedCaptureWindowMessage =
   | {
       source: typeof INJECTED_MESSAGE_SOURCE;
       kind: "capture-event";
+      activationId: string;
+      seq?: number;
       rawType: string;
       payload: CapturePayload;
       t: number;
@@ -56,144 +170,1205 @@ export type InjectedCaptureWindowMessage =
   | {
       source: typeof INJECTED_MESSAGE_SOURCE;
       kind: "capture-events";
-      events: Array<{
-        rawType: string;
-        payload: CapturePayload;
-        t: number;
-        mono: number;
-      }>;
+      activationId: string;
+      events: InjectedCaptureEvent[];
+    };
+
+export type InjectedCaptureArmedMessage = {
+  source: typeof INJECTED_MESSAGE_SOURCE;
+  kind: "injected-armed";
+  activationId: string;
+};
+
+export type InjectedCaptureDrainedMessage = {
+  source: typeof INJECTED_MESSAGE_SOURCE;
+  kind: "injected-drained";
+  activationId: string;
+};
+
+const INJECTED_CAPTURE_RAW_TYPES = new Set([
+  "console",
+  "fetch",
+  "fetchError",
+  "indexedDbOp",
+  "localStorageOp",
+  "networkBody",
+  "pageError",
+  "privacyViolation",
+  "resourceError",
+  "sessionStorageOp",
+  "sse",
+  "unhandledrejection",
+  "xhr"
+]);
+
+/**
+ * Treats MAIN-world messages as hostile page input. This parser intentionally
+ * accepts observations only; it never exposes extension control operations.
+ */
+export function parseInjectedCaptureWindowMessage(value: unknown): InjectedCaptureEvent[] | null {
+  try {
+    return parseInjectedCaptureWindowMessageUnchecked(value);
+  } catch {
+    return null;
+  }
+}
+
+function parseInjectedCaptureWindowMessageUnchecked(value: unknown): InjectedCaptureEvent[] | null {
+  const message = asPlainRecord(value);
+
+  if (
+    !message ||
+    message.source !== INJECTED_MESSAGE_SOURCE ||
+    !isInjectedActivationId(message.activationId)
+  ) {
+    return null;
+  }
+
+  const candidates = parseInjectedMessageCandidates(message);
+
+  if (!candidates || candidates.length === 0 || candidates.length > EMIT_FLUSH_MAX_EVENTS) {
+    return null;
+  }
+
+  const budget = {
+    nodes: 0,
+    chars: 0
+  };
+  const events: InjectedCaptureEvent[] = [];
+
+  for (const candidate of candidates) {
+    const event = asPlainRecord(candidate);
+    const payload = asPlainRecord(event?.payload);
+
+    if (
+      !event ||
+      !hasExactKeys(event, ["activationId", "seq", "rawType", "payload", "t", "mono"]) ||
+      event.activationId !== message.activationId ||
+      (event.seq !== undefined && !isInjectedDirectSequence(event.seq)) ||
+      typeof event.rawType !== "string" ||
+      !INJECTED_CAPTURE_RAW_TYPES.has(event.rawType) ||
+      !payload ||
+      typeof event.t !== "number" ||
+      !Number.isFinite(event.t) ||
+      typeof event.mono !== "number" ||
+      !Number.isFinite(event.mono) ||
+      !isBoundedInjectedValue(payload, 0, budget)
+    ) {
+      return null;
+    }
+
+    const safePayload = asPlainRecord(structuredClone(payload));
+    if (!safePayload) {
+      return null;
+    }
+
+    events.push({
+      activationId: message.activationId,
+      ...(event.seq === undefined ? {} : { seq: event.seq }),
+      rawType: event.rawType,
+      payload: safePayload,
+      t: event.t,
+      mono: event.mono
+    });
+  }
+
+  return events;
+}
+
+/** Strictly parses the MAIN-world acknowledgement for one exact activation. */
+export function parseInjectedCaptureArmedMessage(value: unknown): string | null {
+  try {
+    const message = asPlainRecord(value);
+
+    return message &&
+      hasExactKeys(message, ["source", "kind", "activationId"]) &&
+      message.source === INJECTED_MESSAGE_SOURCE &&
+      message.kind === "injected-armed" &&
+      isInjectedActivationId(message.activationId)
+      ? message.activationId
+      : null;
+  } catch {
+    return null;
+  }
+}
+
+/** Strictly parses the close-only MAIN-world drain barrier. */
+export function parseInjectedCaptureDrainedMessage(value: unknown): string | null {
+  try {
+    const message = asPlainRecord(value);
+
+    return message &&
+      hasExactKeys(message, ["source", "kind", "activationId"]) &&
+      message.source === INJECTED_MESSAGE_SOURCE &&
+      message.kind === "injected-drained" &&
+      isInjectedActivationId(message.activationId)
+      ? message.activationId
+      : null;
+  } catch {
+    return null;
+  }
+}
+
+/** Strictly parses capture-control state before it reaches MAIN-world hooks. */
+export function parseInjectedCaptureConfig(value: unknown): InjectedCaptureConfig | null {
+  try {
+    const config = asPlainRecord(value);
+
+    if (
+      !config ||
+      !hasExactKeys(config, ["active", "activationId", "bodyCaptureMaxBytes", "capturePolicy"]) ||
+      typeof config.active !== "boolean" ||
+      !isInjectedActivationId(config.activationId) ||
+      (config.bodyCaptureMaxBytes !== undefined &&
+        (typeof config.bodyCaptureMaxBytes !== "number" ||
+          !Number.isFinite(config.bodyCaptureMaxBytes) ||
+          config.bodyCaptureMaxBytes < 0))
+    ) {
+      return null;
+    }
+
+    const policy =
+      config.capturePolicy === undefined
+        ? undefined
+        : capturePolicySchema.safeParse(config.capturePolicy);
+
+    if (policy && !policy.success) {
+      return null;
+    }
+
+    return {
+      active: config.active,
+      activationId: config.activationId,
+      ...(config.bodyCaptureMaxBytes === undefined
+        ? {}
+        : { bodyCaptureMaxBytes: config.bodyCaptureMaxBytes }),
+      ...(policy === undefined ? {} : { capturePolicy: policy.data })
+    };
+  } catch {
+    return null;
+  }
+}
+
+/** Returns true only for versioned, fixed-width activation identities. */
+export function isInjectedActivationId(value: unknown): value is string {
+  return typeof value === "string" && INJECTED_ACTIVATION_ID_PATTERN.test(value);
+}
+
+/** Creates a document-scoped control key that must travel only over extension-owned channels. */
+export function createInjectedControlSecret(): string {
+  return createInjectedControlRandomHex("");
+}
+
+export async function createAuthenticatedInjectedCaptureConfig(
+  secret: string,
+  config: InjectedCaptureConfig
+): Promise<AuthenticatedInjectedCaptureConfig> {
+  const parsed = parseInjectedCaptureConfig(config);
+  if (!parsed || !isInjectedControlSecret(secret)) {
+    throw new Error("Invalid injected capture control config or secret.");
+  }
+
+  const nonce = createInjectedControlRandomHex("n1_");
+  const proof = await signInjectedControlPayload(
+    secret,
+    serializeInjectedConfigControl("request", parsed, nonce)
+  );
+  return { ...parsed, nonce, proof };
+}
+
+export async function createAuthenticatedInjectedCaptureDrainRequest(
+  secret: string,
+  activationId: string
+): Promise<AuthenticatedInjectedCaptureDrainRequest> {
+  if (!isInjectedControlSecret(secret) || !isInjectedActivationId(activationId)) {
+    throw new Error("Invalid injected drain control identity.");
+  }
+
+  const nonce = createInjectedControlRandomHex("n1_");
+  return {
+    activationId,
+    nonce,
+    proof: await signInjectedControlPayload(
+      secret,
+      serializeInjectedDrainControl("request", activationId, nonce)
+    )
+  };
+}
+
+export async function verifyAuthenticatedInjectedCaptureControlAck(
+  value: unknown,
+  secret: string,
+  expected: {
+    kind: AuthenticatedInjectedCaptureControlAck["kind"];
+    activationId: string;
+    nonce: string;
+  }
+): Promise<boolean> {
+  const message = parseAuthenticatedInjectedCaptureControlAck(value);
+  if (
+    !message ||
+    !isInjectedControlSecret(secret) ||
+    message.kind !== expected.kind ||
+    message.activationId !== expected.activationId ||
+    message.nonce !== expected.nonce
+  ) {
+    return false;
+  }
+
+  const direction = message.kind === "injected-armed-authenticated" ? "armed" : "drained";
+  return verifyInjectedControlPayload(
+    secret,
+    serializeInjectedDrainControl(direction, message.activationId, message.nonce),
+    message.proof
+  );
+}
+
+function isInjectedControlSecret(value: unknown): value is string {
+  return typeof value === "string" && INJECTED_CONTROL_SECRET_PATTERN.test(value);
+}
+
+function isInjectedControlNonce(value: unknown): value is string {
+  return typeof value === "string" && INJECTED_CONTROL_NONCE_PATTERN.test(value);
+}
+
+function createInjectedControlRandomHex(prefix: "" | "n1_"): string {
+  if (!globalThis.crypto?.getRandomValues) {
+    throw new Error("Cryptographic randomness is unavailable for injected capture control.");
+  }
+
+  const bytes = new Uint8Array(INJECTED_CONTROL_RANDOM_BYTES);
+  globalThis.crypto.getRandomValues(bytes);
+  return `${prefix}${bytesToHex(bytes)}`;
+}
+
+function parseAuthenticatedInjectedCaptureConfig(
+  value: unknown
+): AuthenticatedInjectedCaptureConfig | null {
+  const message = asPlainRecord(value);
+  if (
+    !message ||
+    !hasAllExactKeys(message, [
+      "active",
+      "activationId",
+      "bodyCaptureMaxBytes",
+      "capturePolicy",
+      "nonce",
+      "proof"
+    ]) ||
+    !isInjectedControlNonce(message.nonce) ||
+    typeof message.proof !== "string" ||
+    !INJECTED_CONTROL_PROOF_PATTERN.test(message.proof)
+  ) {
+    return null;
+  }
+
+  const config = parseInjectedCaptureConfig({
+    active: message.active,
+    activationId: message.activationId,
+    bodyCaptureMaxBytes: message.bodyCaptureMaxBytes,
+    capturePolicy: message.capturePolicy
+  });
+  return config ? { ...config, nonce: message.nonce, proof: message.proof } : null;
+}
+
+function parseAuthenticatedInjectedCaptureDrainRequest(
+  value: unknown
+): AuthenticatedInjectedCaptureDrainRequest | null {
+  const message = asPlainRecord(value);
+  return message &&
+    hasAllExactKeys(message, ["activationId", "nonce", "proof"]) &&
+    isInjectedActivationId(message.activationId) &&
+    isInjectedControlNonce(message.nonce) &&
+    typeof message.proof === "string" &&
+    INJECTED_CONTROL_PROOF_PATTERN.test(message.proof)
+    ? {
+        activationId: message.activationId,
+        nonce: message.nonce,
+        proof: message.proof
+      }
+    : null;
+}
+
+function parseAuthenticatedInjectedCaptureControlAck(
+  value: unknown
+): AuthenticatedInjectedCaptureControlAck | null {
+  const message = asPlainRecord(value);
+  return message &&
+    hasAllExactKeys(message, ["source", "kind", "activationId", "nonce", "proof"]) &&
+    message.source === INJECTED_MESSAGE_SOURCE &&
+    (message.kind === "injected-armed-authenticated" ||
+      message.kind === "injected-drained-authenticated") &&
+    isInjectedActivationId(message.activationId) &&
+    isInjectedControlNonce(message.nonce) &&
+    typeof message.proof === "string" &&
+    INJECTED_CONTROL_PROOF_PATTERN.test(message.proof)
+    ? {
+        source: INJECTED_MESSAGE_SOURCE,
+        kind: message.kind,
+        activationId: message.activationId,
+        nonce: message.nonce,
+        proof: message.proof
+      }
+    : null;
+}
+
+function serializeInjectedConfigControl(
+  direction: "request",
+  config: InjectedCaptureConfig,
+  nonce: string
+): string {
+  return JSON.stringify([
+    "webblackbox-injected-control-v1",
+    direction,
+    "config",
+    config.activationId,
+    nonce,
+    config.active,
+    config.bodyCaptureMaxBytes ?? null,
+    canonicalizeInjectedControlValue(config.capturePolicy ?? null)
+  ]);
+}
+
+function serializeInjectedDrainControl(
+  direction: "request" | "armed" | "drained",
+  activationId: string,
+  nonce: string
+): string {
+  return JSON.stringify(["webblackbox-injected-control-v1", direction, activationId, nonce]);
+}
+
+function canonicalizeInjectedControlValue(value: unknown): unknown {
+  if (Array.isArray(value)) {
+    return value.map(canonicalizeInjectedControlValue);
+  }
+  const record = asPlainRecord(value);
+  if (record) {
+    return Object.fromEntries(
+      Object.keys(record)
+        .sort()
+        .map((key) => [key, canonicalizeInjectedControlValue(record[key])])
+    );
+  }
+  return value;
+}
+
+async function signInjectedControlPayload(secret: string, payload: string): Promise<string> {
+  const cryptoApi = requireInjectedControlCrypto();
+  const key = await cryptoApi.subtle.importKey(
+    "raw",
+    toInjectedControlArrayBuffer(hexToBytes(secret)),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = await cryptoApi.subtle.sign(
+    "HMAC",
+    key,
+    toInjectedControlArrayBuffer(new TextEncoder().encode(payload))
+  );
+  return bytesToHex(new Uint8Array(signature));
+}
+
+async function verifyInjectedControlPayload(
+  secret: string,
+  payload: string,
+  proof: string
+): Promise<boolean> {
+  if (!isInjectedControlSecret(secret) || !INJECTED_CONTROL_PROOF_PATTERN.test(proof)) {
+    return false;
+  }
+  try {
+    const cryptoApi = requireInjectedControlCrypto();
+    const key = await cryptoApi.subtle.importKey(
+      "raw",
+      toInjectedControlArrayBuffer(hexToBytes(secret)),
+      { name: "HMAC", hash: "SHA-256" },
+      false,
+      ["verify"]
+    );
+    return cryptoApi.subtle.verify(
+      "HMAC",
+      key,
+      toInjectedControlArrayBuffer(hexToBytes(proof)),
+      toInjectedControlArrayBuffer(new TextEncoder().encode(payload))
+    );
+  } catch {
+    return false;
+  }
+}
+
+function requireInjectedControlCrypto(): Crypto {
+  const cryptoApi = globalThis.crypto;
+  if (!cryptoApi?.subtle) {
+    throw new Error("Web Crypto is unavailable for injected capture control.");
+  }
+  return cryptoApi;
+}
+
+function hexToBytes(hex: string): Uint8Array {
+  const bytes = new Uint8Array(hex.length / 2);
+  for (let index = 0; index < bytes.length; index += 1) {
+    bytes[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
+  }
+  return bytes;
+}
+
+function bytesToHex(bytes: Uint8Array): string {
+  return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+
+function toInjectedControlArrayBuffer(bytes: Uint8Array): ArrayBuffer {
+  return Uint8Array.from(bytes).buffer;
+}
+
+function createInjectedActivationId(): string | null {
+  if (!globalThis.crypto?.getRandomValues) {
+    return null;
+  }
+
+  const bytes = new Uint8Array(32);
+  globalThis.crypto.getRandomValues(bytes);
+  return `a1_${[...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+
+function parseInjectedMessageCandidates(message: Record<string, unknown>): unknown[] | null {
+  if (message.kind === "capture-event") {
+    if (
+      !hasExactKeys(message, [
+        "source",
+        "kind",
+        "activationId",
+        "seq",
+        "rawType",
+        "payload",
+        "t",
+        "mono"
+      ])
+    ) {
+      return null;
+    }
+
+    return [
+      {
+        activationId: message.activationId,
+        seq: message.seq,
+        rawType: message.rawType,
+        payload: message.payload,
+        t: message.t,
+        mono: message.mono
+      }
+    ];
+  }
+
+  if (
+    message.kind !== "capture-events" ||
+    !hasExactKeys(message, ["source", "kind", "activationId", "events"]) ||
+    !Array.isArray(message.events)
+  ) {
+    return null;
+  }
+
+  return message.events;
+}
+
+function isInjectedDirectSequence(value: unknown): value is number {
+  return (
+    typeof value === "number" &&
+    value > 0 &&
+    value <= INJECTED_DIRECT_MAX_REVISION &&
+    value % 1 === 0
+  );
+}
+
+function isBoundedInjectedValue(
+  value: unknown,
+  depth: number,
+  budget: { nodes: number; chars: number }
+): boolean {
+  budget.nodes += 1;
+  if (budget.nodes > INJECTED_MESSAGE_MAX_NODES || depth > INJECTED_MESSAGE_MAX_DEPTH) {
+    return false;
+  }
+
+  if (value === null || value === undefined || typeof value === "boolean") {
+    return true;
+  }
+
+  if (typeof value === "number") {
+    return Number.isFinite(value);
+  }
+
+  if (typeof value === "string") {
+    budget.chars += value.length;
+    return budget.chars <= INJECTED_MESSAGE_MAX_PAYLOAD_CHARS;
+  }
+
+  if (Array.isArray(value)) {
+    return (
+      value.length <= INJECTED_MESSAGE_MAX_COLLECTION_ITEMS &&
+      value.every((entry) => isBoundedInjectedValue(entry, depth + 1, budget))
+    );
+  }
+
+  const record = asPlainRecord(value);
+  if (!record) {
+    return false;
+  }
+
+  const entries = Object.entries(record);
+  if (entries.length > INJECTED_MESSAGE_MAX_COLLECTION_ITEMS) {
+    return false;
+  }
+
+  for (const [key, entry] of entries) {
+    if (key.length > 128 || key === "__proto__" || key === "constructor" || key === "prototype") {
+      return false;
+    }
+    budget.chars += key.length;
+    if (
+      budget.chars > INJECTED_MESSAGE_MAX_PAYLOAD_CHARS ||
+      !isBoundedInjectedValue(entry, depth + 1, budget)
+    ) {
+      return false;
+    }
+  }
+
+  return true;
+}
+
+function asPlainRecord(value: unknown): Record<string, unknown> | null {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    return null;
+  }
+
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null
+    ? (value as Record<string, unknown>)
+    : null;
+}
+
+function hasExactKeys(record: Record<string, unknown>, allowedKeys: readonly string[]): boolean {
+  const allowed = new Set(allowedKeys);
+  return Object.keys(record).every((key) => allowed.has(key));
+}
+
+function hasAllExactKeys(
+  record: Record<string, unknown>,
+  expectedKeys: readonly string[]
+): boolean {
+  return Object.keys(record).length === expectedKeys.length && hasExactKeys(record, expectedKeys);
+}
+
+function cloneInjectedControlDetail(value: unknown): unknown | null {
+  try {
+    return structuredClone(value);
+  } catch {
+    return null;
+  }
+}
+
+/** Options for installing browser-side injected hooks. */
+export type InjectedHooksOptions = {
+  /** Global flag name used to prevent duplicate hook installation. */
+  flag?: string;
+  /** Enables event emission after hooks are installed. */
+  active?: boolean;
+  /** Exact activation identity attached to every MAIN-world observation. */
+  activationId?: string;
+  /** Per-response capture budget; `0` disables response-body sampling. */
+  bodyCaptureMaxBytes?: number;
+  /** Active capture policy used to keep page-world hooks fail-closed. */
+  capturePolicy?: CapturePolicy;
+  /** Disables fetch/xhr/EventSource monkeypatching when browser-side capture is available. */
+  captureNetwork?: boolean;
+  /** Secret delivered only through scripting results and extension-owned isolated messaging. */
+  controlSecret?: string;
+  /** Generates the control secret inside the installed MAIN-world closure. */
+  secureControl?: boolean;
+  /** Testable fail-closed nonce budget; production defaults to the fixed maximum. */
+  controlNonceLimit?: number;
+};
+
+type InjectedDirectReplaySnapshot = {
+  events: InjectedDirectCaptureEvent[];
+  producedThrough: number;
+  truncatedBefore: number;
+};
+
+type InjectedDirectHookRuntime = {
+  activate(config: InjectedCaptureConfig): void;
+  deactivate(activationId: string): void;
+  drain(activationId: string): InjectedDirectReplaySnapshot;
+  snapshot(): InjectedDirectReplaySnapshot;
+};
+
+type InjectedHooksInternalOptions = InjectedHooksOptions & {
+  directControl?: {
+    attach(runtime: InjectedDirectHookRuntime): void;
+    replayByteLimit: number;
+    replayEventLimit: number;
+  };
+};
+
+export type InjectedLiteCaptureDirectControllerOptions = {
+  captureNetwork?: boolean;
+  replayByteLimit?: number;
+  replayEventLimit?: number;
+};
+
+export type InjectedLiteCaptureDirectController = Readonly<{
+  bootstrap(secret: unknown): InjectedDirectBootstrapResult;
+  control(secret: unknown, command: unknown): InjectedDirectControlResult;
+}>;
+
+/**
+ * Creates one document/module-instance direct controller. The capability never
+ * enters the hook runtime, page crypto, DOM control events, or window messages.
+ */
+export function createInjectedLiteCaptureDirectController(
+  options: InjectedLiteCaptureDirectControllerOptions = {}
+): InjectedLiteCaptureDirectController {
+  const replayByteLimit = resolveInjectedDirectReplayByteLimit(options.replayByteLimit);
+  const replayEventLimit = resolveInjectedDirectReplayEventLimit(options.replayEventLimit);
+  let capability: string | null = null;
+  let runtime: InjectedDirectHookRuntime | null = null;
+  let phase: InjectedDirectControllerPhase = "inactive";
+  let revision = 0;
+  let controlledActivationId: string | null = null;
+
+  return {
+    bootstrap(candidate): InjectedDirectBootstrapResult {
+      if (capability !== null) {
+        if (!matchesInjectedDirectCapability(capability, candidate)) {
+          return { kind: "rejected" };
+        }
+        return runtime ? { kind: "existing", phase, revision } : { kind: "unavailable" };
+      }
+
+      if (!isInjectedDirectCapability(candidate) || typeof window === "undefined") {
+        return typeof window === "undefined" && isInjectedDirectCapability(candidate)
+          ? { kind: "unavailable" }
+          : { kind: "rejected" };
+      }
+
+      capability = candidate;
+      try {
+        installInjectedLiteCaptureHooksInternal({
+          active: false,
+          bodyCaptureMaxBytes: 0,
+          captureNetwork: options.captureNetwork === true,
+          directControl: {
+            attach(attachedRuntime): void {
+              runtime = attachedRuntime;
+            },
+            replayByteLimit,
+            replayEventLimit
+          }
+        });
+      } catch {
+        capability = null;
+        runtime = null;
+        return { kind: "unavailable" };
+      }
+
+      if (!runtime) {
+        capability = null;
+        return { kind: "unavailable" };
+      }
+
+      return { kind: "installed", phase, revision };
+    },
+
+    control(candidate, rawCommand): InjectedDirectControlResult {
+      if (capability === null || !matchesInjectedDirectCapability(capability, candidate)) {
+        return { kind: "rejected", reason: "capability" };
+      }
+
+      if (!runtime) {
+        return { kind: "unavailable" };
+      }
+
+      const command = parseInjectedDirectCommand(rawCommand);
+      if (!command) {
+        return { kind: "rejected", reason: "invalid-command" };
+      }
+
+      if (command.kind === "probe") {
+        const replay = runtime.snapshot();
+        return {
+          kind: "probed",
+          phase,
+          revision,
+          activationId: controlledActivationId,
+          producedThrough: replay.producedThrough,
+          truncatedBefore: replay.truncatedBefore
+        };
+      }
+
+      if (command.revision <= revision) {
+        return { kind: "rejected", reason: "stale" };
+      }
+
+      if (command.kind === "activate") {
+        runtime.activate(command.config);
+        phase = "active";
+        revision = command.revision;
+        controlledActivationId = command.config.activationId;
+        return {
+          kind: "activated",
+          activationId: command.config.activationId,
+          revision
+        };
+      }
+
+      if (controlledActivationId !== command.activationId) {
+        return { kind: "rejected", reason: "activation-mismatch" };
+      }
+
+      if (command.kind === "deactivate") {
+        runtime.deactivate(command.activationId);
+        phase = "inactive";
+        revision = command.revision;
+        controlledActivationId = null;
+        return { kind: "deactivated", activationId: command.activationId, revision };
+      }
+
+      if (phase !== "active" && phase !== "drained") {
+        return { kind: "rejected", reason: "activation-mismatch" };
+      }
+
+      const replayed = phase === "drained";
+      const replay = replayed ? runtime.snapshot() : runtime.drain(command.activationId);
+      phase = "drained";
+      revision = command.revision;
+      return {
+        kind: "drained",
+        activationId: command.activationId,
+        revision,
+        events: replay.events,
+        producedThrough: replay.producedThrough,
+        truncatedBefore: replay.truncatedBefore,
+        degraded: replay.truncatedBefore > 0,
+        replayed
+      };
+    }
+  };
+}
+
+const injectedLiteCaptureDirectController = createInjectedLiteCaptureDirectController();
+
+/** Extension ESM entrypoint target; alias this export to `bootstrap`. */
+export function bootstrapInjectedLiteCaptureDirect(secret: unknown): InjectedDirectBootstrapResult {
+  return injectedLiteCaptureDirectController.bootstrap(secret);
+}
+
+/** Extension ESM entrypoint target; alias this export to `control`. */
+export function controlInjectedLiteCaptureDirect(
+  secret: unknown,
+  command: unknown
+): InjectedDirectControlResult {
+  return injectedLiteCaptureDirectController.control(secret, command);
+}
+
+function resolveInjectedDirectReplayEventLimit(value: unknown): number {
+  return typeof value === "number" && value > 0 && value <= 4_096 && value % 1 === 0
+    ? value
+    : INJECTED_DIRECT_REPLAY_EVENT_LIMIT;
+}
+
+function resolveInjectedDirectReplayByteLimit(value: unknown): number {
+  return typeof value === "number" &&
+    value > 0 &&
+    value <= INJECTED_DIRECT_REPLAY_BYTE_LIMIT_MAX &&
+    value % 1 === 0
+    ? value
+    : INJECTED_DIRECT_REPLAY_BYTE_LIMIT;
+}
+
+function isInjectedDirectCapability(value: unknown): value is string {
+  if (typeof value !== "string" || value.length !== 64) {
+    return false;
+  }
+  for (let index = 0; index < 64; index += 1) {
+    const character = value[index] ?? "";
+    if (!((character >= "0" && character <= "9") || (character >= "a" && character <= "f"))) {
+      return false;
+    }
+  }
+  return true;
+}
+
+/** Always scans all 64 positions before accepting or rejecting a candidate. */
+function matchesInjectedDirectCapability(expected: string, candidate: unknown): boolean {
+  const candidateString = typeof candidate === "string" ? candidate : "";
+  let mismatch = typeof candidate === "string" && candidateString.length === 64 ? 0 : 1;
+  for (let index = 0; index < 64; index += 1) {
+    mismatch |= expected[index] === candidateString[index] ? 0 : 1;
+  }
+  return mismatch === 0;
+}
+
+function parseInjectedDirectCommand(value: unknown): InjectedDirectCommand | null {
+  const command = asPlainRecord(value);
+  if (!command || typeof command.kind !== "string") {
+    return null;
+  }
+  if (command.kind === "probe") {
+    return hasAllExactKeys(command, ["kind"]) ? { kind: "probe" } : null;
+  }
+  if (!isInjectedDirectRevision(command.revision)) {
+    return null;
+  }
+  if (command.kind === "activate") {
+    if (!hasAllExactKeys(command, ["kind", "revision", "config"])) {
+      return null;
     }
-  | {
-      source: typeof INJECTED_MESSAGE_SOURCE;
-      kind: "marker";
-      message?: string;
-      t: number;
-      mono: number;
-    };
+    const config = parseInjectedCaptureConfig(command.config);
+    return config?.active === true
+      ? { kind: "activate", revision: command.revision, config }
+      : null;
+  }
+  if (command.kind !== "deactivate" && command.kind !== "drain") {
+    return null;
+  }
+  return hasAllExactKeys(command, ["kind", "revision", "activationId"]) &&
+    isInjectedActivationId(command.activationId)
+    ? {
+        kind: command.kind,
+        revision: command.revision,
+        activationId: command.activationId
+      }
+    : null;
+}
 
-/** Options for installing browser-side injected hooks. */
-export type InjectedHooksOptions = {
-  /** Global flag name used to prevent duplicate hook installation. */
-  flag?: string;
-  /** Enables event emission after hooks are installed. */
-  active?: boolean;
-  /** Per-response capture budget; `0` disables response-body sampling. */
-  bodyCaptureMaxBytes?: number;
-  /** Active capture policy used to keep page-world hooks fail-closed. */
-  capturePolicy?: CapturePolicy;
-  /** Disables fetch/xhr/EventSource monkeypatching when browser-side capture is available. */
-  captureNetwork?: boolean;
-};
+function isInjectedDirectRevision(value: unknown): value is number {
+  return (
+    typeof value === "number" &&
+    value > 0 &&
+    value <= INJECTED_DIRECT_MAX_REVISION &&
+    value % 1 === 0
+  );
+}
 
 /**
  * Installs lightweight console/error/network/storage hooks into the current page.
  * Hooks emit capture events via `window.postMessage`.
  */
-export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions = {}): void {
+export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions = {}): string | null {
+  return installInjectedLiteCaptureHooksInternal(options);
+}
+
+function installInjectedLiteCaptureHooksInternal(
+  options: InjectedHooksInternalOptions
+): string | null {
   if (typeof window === "undefined") {
-    return;
+    return null;
   }
 
   const flag = options.flag ?? DEFAULT_FLAG;
   const windowFlags = window as unknown as Record<string, unknown>;
+  const directControl = options.directControl;
+
+  // Bootstrap options are installation-only. Runtime changes must use the config event.
+  if (!directControl && windowFlags[flag]) {
+    return null;
+  }
+
+  if (options.secureControl === true && options.controlSecret !== undefined) {
+    return null;
+  }
+
+  const controlSecret =
+    options.secureControl === true ? createInjectedControlSecret() : options.controlSecret;
+  if (controlSecret !== undefined && !isInjectedControlSecret(controlSecret)) {
+    return null;
+  }
+
+  if (!directControl) {
+    windowFlags[flag] = true;
+  }
+
   let networkRequestSeq = 0;
   let bodyWindowStartedAt = Date.now();
   let bodyWindowCount = 0;
   let bodyWindowBytes = 0;
+  let noisyConsoleWindowStartedAt = Date.now();
+  let noisyConsoleWindowCount = 0;
   let emitFlushTimer = 0;
   let captureActive = options.active !== false;
+  let activationId = captureActive
+    ? isInjectedActivationId(options.activationId)
+      ? options.activationId
+      : createInjectedActivationId()
+    : null;
+  captureActive = captureActive && activationId !== null;
   let capturePolicy = options.capturePolicy ?? DEFAULT_CAPTURE_POLICY;
-  const pendingCaptureEvents: Array<{
-    rawType: string;
-    payload: CapturePayload;
-    t: number;
-    mono: number;
-  }> = [];
+  const pendingCaptureEvents: InjectedCaptureEvent[] = [];
+  const directReplayEvents: InjectedDirectCaptureEvent[] = [];
+  const directReplayEventBytes: number[] = [];
+  let directReplayBytes = 0;
+  let directProducedThrough = 0;
+  let directTruncatedBefore = 0;
   let configuredNetworkBodyCaptureMaxBytes = normalizeConfiguredBodyCaptureMaxBytes(
     options.bodyCaptureMaxBytes
   );
   let networkBodyCaptureMaxBytes = resolveNetworkBodyCaptureMaxBytes();
   const captureNetwork = options.captureNetwork !== false;
+  const seenControlNonces = new Set<string>();
+  const controlNonceLimit =
+    Number.isSafeInteger(options.controlNonceLimit) &&
+    (options.controlNonceLimit as number) > 0 &&
+    (options.controlNonceLimit as number) <= INJECTED_CONTROL_SEEN_NONCES_MAX
+      ? (options.controlNonceLimit as number)
+      : INJECTED_CONTROL_SEEN_NONCES_MAX;
+  let controlLocked = false;
+  let controlTail = Promise.resolve();
+
+  if (!directControl) {
+    window.addEventListener(INJECTED_CAPTURE_CONFIG_EVENT, (event: Event) => {
+      const rawDetail = cloneInjectedControlDetail((event as CustomEvent<unknown>).detail);
+      if (!rawDetail) {
+        return;
+      }
 
-  if (windowFlags[flag]) {
-    const detail: InjectedCaptureConfig = {};
+      if (!controlSecret) {
+        const detail = parseInjectedCaptureConfig(rawDetail);
+        if (detail) {
+          applyCaptureConfig(detail);
+          postInjectedArmed(detail.activationId);
+        }
+        return;
+      }
 
-    if (Object.prototype.hasOwnProperty.call(options, "active")) {
-      detail.active = options.active;
-    }
+      controlTail = controlTail
+        .then(async () => {
+          const detail = parseAuthenticatedInjectedCaptureConfig(rawDetail);
+          if (
+            controlLocked ||
+            !detail ||
+            seenControlNonces.has(detail.nonce) ||
+            !(await verifyInjectedControlPayload(
+              controlSecret,
+              serializeInjectedConfigControl("request", detail, detail.nonce),
+              detail.proof
+            ))
+          ) {
+            return;
+          }
 
-    if (Object.prototype.hasOwnProperty.call(options, "bodyCaptureMaxBytes")) {
-      detail.bodyCaptureMaxBytes = options.bodyCaptureMaxBytes;
-    }
+          if (!rememberControlNonce(detail.nonce)) return;
+          applyCaptureConfig(detail);
+          await postAuthenticatedInjectedControlAck(
+            "injected-armed-authenticated",
+            detail.activationId,
+            detail.nonce
+          );
+        })
+        .catch(lockControlChannel);
+    });
 
-    if (Object.prototype.hasOwnProperty.call(options, "capturePolicy")) {
-      detail.capturePolicy = options.capturePolicy;
-    }
+    window.addEventListener(INJECTED_CAPTURE_DRAIN_EVENT, (event: Event) => {
+      const rawDetail = cloneInjectedControlDetail((event as CustomEvent<unknown>).detail);
+      if (!rawDetail) {
+        return;
+      }
+
+      if (!controlSecret) {
+        const detail = asPlainRecord(rawDetail);
+        const requestedActivationId = detail?.activationId;
+        if (
+          detail &&
+          hasAllExactKeys(detail, ["activationId"]) &&
+          isInjectedActivationId(requestedActivationId) &&
+          activationId === requestedActivationId
+        ) {
+          flushPendingCaptureEvents(requestedActivationId);
+          resetActivationState();
+          postInjectedDrained(requestedActivationId);
+        }
+        return;
+      }
+
+      controlTail = controlTail
+        .then(async () => {
+          const detail = parseAuthenticatedInjectedCaptureDrainRequest(rawDetail);
+          if (
+            controlLocked ||
+            !detail ||
+            seenControlNonces.has(detail.nonce) ||
+            activationId !== detail.activationId ||
+            !(await verifyInjectedControlPayload(
+              controlSecret,
+              serializeInjectedDrainControl("request", detail.activationId, detail.nonce),
+              detail.proof
+            ))
+          ) {
+            return;
+          }
 
-    if (Object.keys(detail).length > 0) {
-      window.dispatchEvent(
-        new CustomEvent<InjectedCaptureConfig>(INJECTED_CAPTURE_CONFIG_EVENT, {
-          detail
+          if (!rememberControlNonce(detail.nonce)) return;
+          flushPendingCaptureEvents(detail.activationId);
+          resetActivationState();
+          await postAuthenticatedInjectedControlAck(
+            "injected-drained-authenticated",
+            detail.activationId,
+            detail.nonce
+          );
         })
-      );
+        .catch(lockControlChannel);
+    });
+  }
+
+  directControl?.attach({
+    activate(config): void {
+      if (activationId !== config.activationId) {
+        resetDirectReplayState();
+      }
+      applyCaptureConfig(config);
+    },
+    deactivate(requestedActivationId): void {
+      if (activationId === requestedActivationId) {
+        flushPendingCaptureEvents(requestedActivationId);
+        resetActivationState();
+      }
+    },
+    drain(requestedActivationId): InjectedDirectReplaySnapshot {
+      if (activationId === requestedActivationId) {
+        flushPendingCaptureEvents(requestedActivationId);
+        resetActivationState();
+      }
+      return snapshotDirectReplay();
+    },
+    snapshot(): InjectedDirectReplaySnapshot {
+      return snapshotDirectReplay();
     }
+  });
 
-    return;
+  installConsoleHooks();
+  installErrorHooks();
+  installStorageHooks();
+  if (captureNetwork) {
+    installNetworkHooks();
   }
+  installIndexedDbHooks();
 
-  windowFlags[flag] = true;
+  emit("notice", {
+    message: "injected-ready",
+    href: readCurrentPageUrl()
+  });
 
-  window.addEventListener(INJECTED_CAPTURE_CONFIG_EVENT, (event: Event) => {
-    const detail = (event as CustomEvent<InjectedCaptureConfig>).detail;
+  if (!controlSecret && captureActive && activationId) {
+    postInjectedArmed(activationId);
+  }
+
+  function applyCaptureConfig(detail: InjectedCaptureConfig): void {
+    if (!detail.active) {
+      if (activationId === detail.activationId) {
+        flushPendingCaptureEvents(detail.activationId);
+        resetActivationState();
+      }
+      return;
+    }
 
-    if (typeof detail?.active === "boolean") {
-      captureActive = detail.active;
+    if (activationId !== detail.activationId) {
+      resetActivationState();
     }
 
-    if (detail?.capturePolicy) {
+    if (detail.capturePolicy) {
       capturePolicy = detail.capturePolicy;
     }
 
-    if (Object.prototype.hasOwnProperty.call(detail ?? {}, "bodyCaptureMaxBytes")) {
+    if (Object.prototype.hasOwnProperty.call(detail, "bodyCaptureMaxBytes")) {
       configuredNetworkBodyCaptureMaxBytes = normalizeConfiguredBodyCaptureMaxBytes(
-        detail?.bodyCaptureMaxBytes
+        detail.bodyCaptureMaxBytes
       );
     }
 
+    activationId = detail.activationId;
+    captureActive = true;
     networkBodyCaptureMaxBytes = resolveNetworkBodyCaptureMaxBytes();
-  });
+  }
 
-  installConsoleHooks();
-  installErrorHooks();
-  installStorageHooks();
-  if (captureNetwork) {
-    installNetworkHooks();
+  function rememberControlNonce(nonce: string): boolean {
+    if (seenControlNonces.size >= controlNonceLimit) {
+      controlLocked = true;
+      resetActivationState();
+      return false;
+    }
+    seenControlNonces.add(nonce);
+    return true;
   }
-  installIndexedDbHooks();
 
-  emit("notice", {
-    message: "injected-ready",
-    href: readCurrentPageUrl()
-  });
+  function lockControlChannel(): void {
+    controlLocked = true;
+    resetActivationState();
+  }
+
+  async function postAuthenticatedInjectedControlAck(
+    kind: AuthenticatedInjectedCaptureControlAck["kind"],
+    acknowledgedActivationId: string,
+    nonce: string
+  ): Promise<void> {
+    if (!controlSecret) return;
+    const direction = kind === "injected-armed-authenticated" ? "armed" : "drained";
+    const message: AuthenticatedInjectedCaptureControlAck = {
+      source: INJECTED_MESSAGE_SOURCE,
+      kind,
+      activationId: acknowledgedActivationId,
+      nonce,
+      proof: await signInjectedControlPayload(
+        controlSecret,
+        serializeInjectedDrainControl(direction, acknowledgedActivationId, nonce)
+      )
+    };
+    window.postMessage(message, "*");
+  }
+
+  function emit(
+    rawType: string,
+    payload: CapturePayload,
+    expectedActivationId: string | null = activationId
+  ): void {
+    const eventActivationId = expectedActivationId;
 
-  function emit(rawType: string, payload: CapturePayload): void {
-    if (!captureActive) {
+    if (!captureActive || !eventActivationId || activationId !== eventActivationId) {
       return;
     }
 
-    pendingCaptureEvents.push({
+    const seq = directControl ? (directProducedThrough += 1) : undefined;
+    const captureEvent: InjectedCaptureEvent = {
+      activationId: eventActivationId,
+      ...(seq === undefined ? {} : { seq }),
       rawType,
       payload,
       t: Date.now(),
       mono: monotonicTime()
-    });
+    };
+    pendingCaptureEvents.push(captureEvent);
+    if (directControl && seq !== undefined) {
+      directReplayEvents.push(captureEvent as InjectedDirectCaptureEvent);
+      const eventBytes = estimateInjectedDirectEventBytes(captureEvent);
+      directReplayEventBytes.push(eventBytes);
+      directReplayBytes += eventBytes;
+      while (
+        directReplayEvents.length > directControl.replayEventLimit ||
+        directReplayBytes > directControl.replayByteLimit
+      ) {
+        const removed = directReplayEvents.shift();
+        directReplayBytes -= directReplayEventBytes.shift() ?? 0;
+        if (removed) {
+          directTruncatedBefore = removed.seq;
+        }
+      }
+    }
 
     if (pendingCaptureEvents.length >= EMIT_FLUSH_MAX_EVENTS) {
-      flushPendingCaptureEvents();
+      flushPendingCaptureEvents(eventActivationId);
       return;
     }
 
-    schedulePendingCaptureFlush();
+    schedulePendingCaptureFlush(eventActivationId);
   }
 
   function emitPrivacyViolation(blockedRawType: string, reason: string): void {
@@ -205,24 +1380,38 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
     });
   }
 
-  function schedulePendingCaptureFlush(): void {
+  function schedulePendingCaptureFlush(expectedActivationId: string): void {
     if (emitFlushTimer > 0) {
       return;
     }
 
-    emitFlushTimer = window.setTimeout(() => {
+    const timer = window.setTimeout(() => {
+      if (emitFlushTimer !== timer) {
+        return;
+      }
+
       emitFlushTimer = 0;
-      flushPendingCaptureEvents();
+      flushPendingCaptureEvents(expectedActivationId);
     }, 0);
+    emitFlushTimer = timer;
   }
 
-  function flushPendingCaptureEvents(): void {
+  function flushPendingCaptureEvents(expectedActivationId: string): void {
     if (emitFlushTimer > 0) {
       clearTimeout(emitFlushTimer);
       emitFlushTimer = 0;
     }
 
-    if (pendingCaptureEvents.length === 0) {
+    if (
+      !captureActive ||
+      activationId !== expectedActivationId ||
+      pendingCaptureEvents.length === 0
+    ) {
+      return;
+    }
+
+    if (pendingCaptureEvents.some((event) => event.activationId !== expectedActivationId)) {
+      pendingCaptureEvents.length = 0;
       return;
     }
 
@@ -233,6 +1422,8 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
         ? {
             source: INJECTED_MESSAGE_SOURCE,
             kind: "capture-event",
+            activationId: expectedActivationId,
+            ...(first.seq === undefined ? {} : { seq: first.seq }),
             rawType: first.rawType,
             payload: first.payload,
             t: first.t,
@@ -241,12 +1432,107 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
         : {
             source: INJECTED_MESSAGE_SOURCE,
             kind: "capture-events",
+            activationId: expectedActivationId,
             events
           };
 
     window.postMessage(message, "*");
   }
 
+  function resetDirectReplayState(): void {
+    directReplayEvents.length = 0;
+    directReplayEventBytes.length = 0;
+    directReplayBytes = 0;
+    directProducedThrough = 0;
+    directTruncatedBefore = 0;
+  }
+
+  function snapshotDirectReplay(): InjectedDirectReplaySnapshot {
+    return {
+      events: directReplayEvents.map((event) => ({ ...event })),
+      producedThrough: directProducedThrough,
+      truncatedBefore: directTruncatedBefore
+    };
+  }
+
+  function estimateInjectedDirectEventBytes(event: InjectedCaptureEvent): number {
+    return estimateInjectedDirectValueBytes(event, 0);
+  }
+
+  function estimateInjectedDirectValueBytes(value: unknown, depth: number): number {
+    if (depth > INJECTED_MESSAGE_MAX_DEPTH + 2) {
+      return 16;
+    }
+    if (value === null || value === undefined || typeof value === "boolean") {
+      return 8;
+    }
+    if (typeof value === "number") {
+      return 16;
+    }
+    if (typeof value === "string") {
+      return 2 * value.length + 8;
+    }
+    if (Array.isArray(value)) {
+      let bytes = 16;
+      for (const entry of value) {
+        bytes += estimateInjectedDirectValueBytes(entry, depth + 1);
+      }
+      return bytes;
+    }
+    const record = asPlainRecord(value);
+    if (!record) {
+      return 32;
+    }
+    let bytes = 16;
+    for (const key of Object.keys(record)) {
+      bytes += 2 * key.length + 8;
+      try {
+        bytes += estimateInjectedDirectValueBytes(record[key], depth + 1);
+      } catch {
+        bytes += 32;
+      }
+    }
+    return bytes;
+  }
+
+  function resetActivationState(): void {
+    captureActive = false;
+    activationId = null;
+    capturePolicy = DEFAULT_CAPTURE_POLICY;
+    configuredNetworkBodyCaptureMaxBytes = 0;
+    networkBodyCaptureMaxBytes = 0;
+
+    if (emitFlushTimer > 0) {
+      clearTimeout(emitFlushTimer);
+      emitFlushTimer = 0;
+    }
+
+    pendingCaptureEvents.length = 0;
+    bodyWindowStartedAt = Date.now();
+    bodyWindowCount = 0;
+    bodyWindowBytes = 0;
+    noisyConsoleWindowStartedAt = Date.now();
+    noisyConsoleWindowCount = 0;
+  }
+
+  function postInjectedArmed(armedActivationId: string): void {
+    const message: InjectedCaptureArmedMessage = {
+      source: INJECTED_MESSAGE_SOURCE,
+      kind: "injected-armed",
+      activationId: armedActivationId
+    };
+    window.postMessage(message, "*");
+  }
+
+  function postInjectedDrained(drainedActivationId: string): void {
+    const message: InjectedCaptureDrainedMessage = {
+      source: INJECTED_MESSAGE_SOURCE,
+      kind: "injected-drained",
+      activationId: drainedActivationId
+    };
+    window.postMessage(message, "*");
+  }
+
   function monotonicTime(): number {
     return performance.timeOrigin + performance.now();
   }
@@ -300,9 +1586,6 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
       "clear"
     ] as const;
     const consoleRecord = console as unknown as Record<string, (...args: unknown[]) => unknown>;
-    let noisyWindowStartedAt = Date.now();
-    let noisyWindowCount = 0;
-
     for (const method of consoleMethods) {
       const original = consoleRecord[method];
 
@@ -321,15 +1604,15 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
 
         const now = Date.now();
 
-        if (now - noisyWindowStartedAt >= 1_000) {
-          noisyWindowStartedAt = now;
-          noisyWindowCount = 0;
+        if (now - noisyConsoleWindowStartedAt >= 1_000) {
+          noisyConsoleWindowStartedAt = now;
+          noisyConsoleWindowCount = 0;
         }
 
         if (NOISY_CONSOLE_METHODS.has(method)) {
-          noisyWindowCount += 1;
+          noisyConsoleWindowCount += 1;
 
-          if (noisyWindowCount > NOISY_CONSOLE_MAX_PER_SEC) {
+          if (noisyConsoleWindowCount > NOISY_CONSOLE_MAX_PER_SEC) {
             return Reflect.apply(original, console, args);
           }
         }
@@ -603,7 +1886,9 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
     const originalFetch = window.fetch.bind(window);
 
     window.fetch = async (...args: Parameters<typeof fetch>): Promise<Response> => {
-      if (!captureActive) {
+      const requestActivationId = activationId;
+
+      if (!captureActive || !requestActivationId) {
         return originalFetch(...args);
       }
 
@@ -611,51 +1896,63 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
       const reqId = nextRequestId("fetch");
       const startedMono = monotonicTime();
 
-      emit("fetch", {
-        phase: "start",
-        reqId,
-        requestId: reqId,
-        method: requestMeta.method,
-        url: sanitizeOptionalUrl(requestMeta.url),
-        headers: shouldCaptureNetworkHeaders() ? requestMeta.headers : undefined,
-        postDataSize: requestMeta.postDataSize
-      });
+      emit(
+        "fetch",
+        {
+          phase: "start",
+          reqId,
+          requestId: reqId,
+          method: requestMeta.method,
+          url: sanitizeOptionalUrl(requestMeta.url),
+          headers: shouldCaptureNetworkHeaders() ? requestMeta.headers : undefined,
+          postDataSize: requestMeta.postDataSize
+        },
+        requestActivationId
+      );
 
       try {
         const response = await originalFetch(...args);
         const contentType = normalizeContentType(response.headers.get("content-type"));
         const encodedDataLength = parseHeaderInt(response.headers.get("content-length"));
 
-        emit("fetch", {
-          phase: "end",
-          reqId,
-          requestId: reqId,
-          method: requestMeta.method,
-          url: sanitizeOptionalUrl(requestMeta.url),
-          status: response.status,
-          statusText: response.statusText,
-          ok: response.ok,
-          redirected: response.redirected,
-          responseUrl: sanitizeOptionalUrl(response.url),
-          mimeType: contentType,
-          headers: shouldCaptureNetworkHeaders() ? readHeaders(response.headers) : undefined,
-          encodedDataLength,
-          duration: monotonicTime() - startedMono
-        });
+        emit(
+          "fetch",
+          {
+            phase: "end",
+            reqId,
+            requestId: reqId,
+            method: requestMeta.method,
+            url: sanitizeOptionalUrl(requestMeta.url),
+            status: response.status,
+            statusText: response.statusText,
+            ok: response.ok,
+            redirected: response.redirected,
+            responseUrl: sanitizeOptionalUrl(response.url),
+            mimeType: contentType,
+            headers: shouldCaptureNetworkHeaders() ? readHeaders(response.headers) : undefined,
+            encodedDataLength,
+            duration: monotonicTime() - startedMono
+          },
+          requestActivationId
+        );
 
-        void emitFetchResponseBody(reqId, requestMeta, response);
+        void emitFetchResponseBody(reqId, requestMeta, response, requestActivationId);
 
         return response;
       } catch (error) {
-        emit("fetchError", {
-          reqId,
-          requestId: reqId,
-          method: requestMeta.method,
-          url: sanitizeOptionalUrl(requestMeta.url),
-          duration: monotonicTime() - startedMono,
-          message: error instanceof Error ? error.message : String(error),
-          errorText: error instanceof Error ? error.message : String(error)
-        });
+        emit(
+          "fetchError",
+          {
+            reqId,
+            requestId: reqId,
+            method: requestMeta.method,
+            url: sanitizeOptionalUrl(requestMeta.url),
+            duration: monotonicTime() - startedMono,
+            message: error instanceof Error ? error.message : String(error),
+            errorText: error instanceof Error ? error.message : String(error)
+          },
+          requestActivationId
+        );
 
         throw error;
       }
@@ -684,6 +1981,7 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
           __wbUrl?: string;
           __wbStartedMono?: number;
           __wbFailed?: boolean;
+          __wbActivationId?: string;
         }
       ).__wbReqId = nextRequestId("xhr");
       (
@@ -713,6 +2011,11 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
           __wbFailed?: boolean;
         }
       ).__wbFailed = false;
+      (
+        this as XMLHttpRequest & {
+          __wbActivationId?: string;
+        }
+      ).__wbActivationId = activationId ?? undefined;
 
       const openArgs: unknown[] = [method, url];
 
@@ -744,19 +2047,29 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
         __wbUrl?: string;
         __wbStartedMono?: number;
         __wbFailed?: boolean;
+        __wbActivationId?: string;
       };
       xhr.__wbStartedMono = monotonicTime();
       const reqId = xhr.__wbReqId ?? nextRequestId("xhr");
+      const requestActivationId = xhr.__wbActivationId ?? activationId;
       xhr.__wbReqId = reqId;
 
-      emit("xhr", {
-        phase: "start",
-        reqId,
-        requestId: reqId,
-        method: xhr.__wbMethod ?? "GET",
-        url: sanitizeOptionalUrl(xhr.__wbUrl) ?? "unknown",
-        postDataSize: estimateBodyLength(body)
-      });
+      if (!requestActivationId || requestActivationId !== activationId) {
+        return xhrSend.call(this, body as unknown as XMLHttpRequestBodyInit | null | undefined);
+      }
+
+      emit(
+        "xhr",
+        {
+          phase: "start",
+          reqId,
+          requestId: reqId,
+          method: xhr.__wbMethod ?? "GET",
+          url: sanitizeOptionalUrl(xhr.__wbUrl) ?? "unknown",
+          postDataSize: estimateBodyLength(body)
+        },
+        requestActivationId
+      );
 
       const emitXhrFailure = (reason: string) => {
         if (xhr.__wbFailed) {
@@ -765,15 +2078,19 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
 
         xhr.__wbFailed = true;
 
-        emit("fetchError", {
-          reqId,
-          requestId: reqId,
-          method: xhr.__wbMethod ?? "GET",
-          url: sanitizeOptionalUrl(xhr.__wbUrl) ?? "unknown",
-          duration: monotonicTime() - (xhr.__wbStartedMono ?? monotonicTime()),
-          message: reason,
-          errorText: reason
-        });
+        emit(
+          "fetchError",
+          {
+            reqId,
+            requestId: reqId,
+            method: xhr.__wbMethod ?? "GET",
+            url: sanitizeOptionalUrl(xhr.__wbUrl) ?? "unknown",
+            duration: monotonicTime() - (xhr.__wbStartedMono ?? monotonicTime()),
+            message: reason,
+            errorText: reason
+          },
+          requestActivationId
+        );
       };
 
       this.addEventListener(
@@ -803,25 +2120,29 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
         () => {
           const contentType = normalizeContentType(this.getResponseHeader("content-type"));
 
-          emit("xhr", {
-            phase: "end",
-            reqId,
-            requestId: reqId,
-            method: xhr.__wbMethod ?? "GET",
-            url: sanitizeOptionalUrl(this.responseURL || xhr.__wbUrl) ?? "unknown",
-            status: this.status,
-            statusText: this.statusText,
-            ok: this.status >= 200 && this.status < 400,
-            headers: shouldCaptureNetworkHeaders()
-              ? parseXhrResponseHeaders(this.getAllResponseHeaders())
-              : undefined,
-            mimeType: contentType,
-            encodedDataLength: parseHeaderInt(this.getResponseHeader("content-length")),
-            failed: Boolean(xhr.__wbFailed),
-            duration: monotonicTime() - (xhr.__wbStartedMono ?? monotonicTime())
-          });
+          emit(
+            "xhr",
+            {
+              phase: "end",
+              reqId,
+              requestId: reqId,
+              method: xhr.__wbMethod ?? "GET",
+              url: sanitizeOptionalUrl(this.responseURL || xhr.__wbUrl) ?? "unknown",
+              status: this.status,
+              statusText: this.statusText,
+              ok: this.status >= 200 && this.status < 400,
+              headers: shouldCaptureNetworkHeaders()
+                ? parseXhrResponseHeaders(this.getAllResponseHeaders())
+                : undefined,
+              mimeType: contentType,
+              encodedDataLength: parseHeaderInt(this.getResponseHeader("content-length")),
+              failed: Boolean(xhr.__wbFailed),
+              duration: monotonicTime() - (xhr.__wbStartedMono ?? monotonicTime())
+            },
+            requestActivationId
+          );
 
-          void emitXhrResponseBody(reqId, xhr, contentType);
+          void emitXhrResponseBody(reqId, xhr, contentType, requestActivationId);
         },
         { once: true }
       );
@@ -843,46 +2164,64 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
             return;
           }
 
+          const streamActivationId = activationId;
+
+          if (!streamActivationId) {
+            return;
+          }
+
           const url = sanitizeUrlForPrivacy(
             typeof args[0] === "string" ? args[0] : String(args[0])
           );
           const streamId = nextRequestId("sse");
 
-          emit("sse", {
-            phase: "open",
-            url,
-            streamId,
-            requestId: streamId
-          });
+          emit(
+            "sse",
+            {
+              phase: "open",
+              url,
+              streamId,
+              requestId: streamId
+            },
+            streamActivationId
+          );
 
           this.addEventListener("message", (event) => {
             const data =
               typeof event.data === "string" ? event.data.slice(0, 800) : safeSerialize(event.data);
 
-            emit("sse", {
-              phase: "message",
-              url,
-              streamId,
-              requestId: streamId,
-              eventType: event.type,
-              lastEventId: event.lastEventId,
-              ...(capturePolicy.categories.network === "body-allowlist"
-                ? { data }
-                : {
-                    dataRedacted: true,
-                    dataSize: typeof event.data === "string" ? event.data.length : undefined
-                  })
-            });
+            emit(
+              "sse",
+              {
+                phase: "message",
+                url,
+                streamId,
+                requestId: streamId,
+                eventType: event.type,
+                lastEventId: event.lastEventId,
+                ...(capturePolicy.categories.network === "body-allowlist"
+                  ? { data }
+                  : {
+                      dataRedacted: true,
+                      dataSize: typeof event.data === "string" ? event.data.length : undefined
+                    })
+              },
+              streamActivationId
+            );
           });
 
           this.addEventListener("error", () => {
-            emit("sse", {
-              phase: "error",
-              url,
-              streamId,
-              requestId: streamId,
-              readyState: this.readyState
-            });
+            emit(
+              "sse",
+              {
+                phase: "error",
+                url,
+                streamId,
+                requestId: streamId,
+                readyState: this.readyState
+              },
+              streamActivationId
+            );
           });
         }
       }
@@ -898,8 +2237,13 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
       method: string;
       url: string;
     },
-    response: Response
+    response: Response,
+    expectedActivationId: string
   ): Promise<void> {
+    if (activationId !== expectedActivationId) {
+      return;
+    }
+
     if (response.type === "opaque" || response.type === "opaqueredirect") {
       return;
     }
@@ -924,7 +2268,7 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
 
     const sampled = await readFetchBodySample(response, maxBodyCaptureBytes);
 
-    if (!sampled || sampled.body.length === 0) {
+    if (activationId !== expectedActivationId || !sampled || sampled.body.length === 0) {
       return;
     }
 
@@ -932,27 +2276,31 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
       return;
     }
 
-    emit("networkBody", {
-      source: "fetch",
-      reqId,
-      requestId: reqId,
-      method: requestMeta.method,
-      url: sanitizeOptionalUrl(response.url || requestMeta.url) ?? "unknown",
-      status: response.status,
-      mimeType: contentType,
-      encoding: "utf8",
-      body: sampled.body,
-      size:
-        typeof encodedDataLength === "number"
-          ? encodedDataLength
-          : sampled.truncated
-            ? Math.max(sampled.sampledBytes + 1, sampled.sampledBytes)
-            : sampled.sampledBytes,
-      sampledSize: sampled.sampledBytes,
-      truncated:
-        sampled.truncated ||
-        (typeof encodedDataLength === "number" && encodedDataLength > sampled.sampledBytes)
-    });
+    emit(
+      "networkBody",
+      {
+        source: "fetch",
+        reqId,
+        requestId: reqId,
+        method: requestMeta.method,
+        url: sanitizeOptionalUrl(response.url || requestMeta.url) ?? "unknown",
+        status: response.status,
+        mimeType: contentType,
+        encoding: "utf8",
+        body: sampled.body,
+        size:
+          typeof encodedDataLength === "number"
+            ? encodedDataLength
+            : sampled.truncated
+              ? Math.max(sampled.sampledBytes + 1, sampled.sampledBytes)
+              : sampled.sampledBytes,
+        sampledSize: sampled.sampledBytes,
+        truncated:
+          sampled.truncated ||
+          (typeof encodedDataLength === "number" && encodedDataLength > sampled.sampledBytes)
+      },
+      expectedActivationId
+    );
   }
 
   async function emitXhrResponseBody(
@@ -961,8 +2309,13 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
       __wbMethod?: string;
       __wbUrl?: string;
     },
-    contentType: string | undefined
+    contentType: string | undefined,
+    expectedActivationId: string
   ): Promise<void> {
+    if (activationId !== expectedActivationId) {
+      return;
+    }
+
     if (!isBodyCaptureMimeAllowed(contentType)) {
       return;
     }
@@ -981,7 +2334,7 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
 
     const bodyText = await readXhrBodyText(xhr);
 
-    if (!bodyText || bodyText.length === 0) {
+    if (activationId !== expectedActivationId || !bodyText || bodyText.length === 0) {
       return;
     }
 
@@ -992,23 +2345,27 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
       return;
     }
 
-    emit("networkBody", {
-      source: "xhr",
-      reqId,
-      requestId: reqId,
-      method: xhr.__wbMethod ?? "GET",
-      url: sanitizeOptionalUrl(xhr.responseURL || xhr.__wbUrl) ?? "unknown",
-      status: xhr.status,
-      statusText: xhr.statusText,
-      mimeType: contentType,
-      encoding: "utf8",
-      body: clipped.value,
-      size: typeof encodedDataLength === "number" ? encodedDataLength : clipped.fullBytes,
-      sampledSize,
-      truncated:
-        clipped.truncated ||
-        (typeof encodedDataLength === "number" && encodedDataLength > sampledSize)
-    });
+    emit(
+      "networkBody",
+      {
+        source: "xhr",
+        reqId,
+        requestId: reqId,
+        method: xhr.__wbMethod ?? "GET",
+        url: sanitizeOptionalUrl(xhr.responseURL || xhr.__wbUrl) ?? "unknown",
+        status: xhr.status,
+        statusText: xhr.statusText,
+        mimeType: contentType,
+        encoding: "utf8",
+        body: clipped.value,
+        size: typeof encodedDataLength === "number" ? encodedDataLength : clipped.fullBytes,
+        sampledSize,
+        truncated:
+          clipped.truncated ||
+          (typeof encodedDataLength === "number" && encodedDataLength > sampledSize)
+      },
+      expectedActivationId
+    );
   }
 
   async function readFetchBodySample(
@@ -1194,7 +2551,7 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
 
   function isBodyCaptureMimeAllowed(mimeType: string | undefined): boolean {
     if (!mimeType) {
-      return true;
+      return false;
     }
 
     const normalized = mimeType.toLowerCase();
@@ -1397,12 +2754,21 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
     const open = indexedDB.open.bind(indexedDB);
 
     indexedDB.open = (name: string, version?: number) => {
-      if (captureActive) {
-        emit("indexedDbOp", {
-          op: "open",
-          name,
-          version
-        });
+      const indexedDbMode = capturePolicy.categories.indexedDb;
+
+      if (captureActive && indexedDbMode !== "off") {
+        emit(
+          "indexedDbOp",
+          indexedDbMode === "names-only"
+            ? {
+                op: "open",
+                name,
+                version
+              }
+            : {
+                op: "open"
+              }
+        );
       }
 
       return open(name, version);
@@ -1590,4 +2956,6 @@ export function installInjectedLiteCaptureHooks(options: InjectedHooksOptions =
   function serializeDate(value: Date): string {
     return Number.isNaN(value.getTime()) ? "Invalid Date" : value.toISOString();
   }
+
+  return controlSecret ?? null;
 }
diff --git a/packages/webblackbox/src/lite-capture-agent.test.ts b/packages/webblackbox/src/lite-capture-agent.test.ts
index 4e2e19b..0706160 100644
--- a/packages/webblackbox/src/lite-capture-agent.test.ts
+++ b/packages/webblackbox/src/lite-capture-agent.test.ts
@@ -16,6 +16,10 @@ import { INJECTED_MESSAGE_SOURCE } from "./injected-hooks.js";
 import { LiteCaptureAgent } from "./lite-capture-agent.js";
 import type { LiteCaptureAgentOptions, LiteCaptureState } from "./types.js";
 import { DEFAULT_CAPTURE_POLICY, type CapturePolicy } from "@webblackbox/protocol";
+import type { RawRecorderEvent } from "@webblackbox/recorder";
+
+const ACTIVATION_A = `a1_${"a".repeat(64)}`;
+const ACTIVATION_B = `a1_${"b".repeat(64)}`;
 
 const SCREENSHOT_TEST_CAPTURE_POLICY: CapturePolicy = {
   ...DEFAULT_CAPTURE_POLICY,
@@ -26,6 +30,32 @@ const SCREENSHOT_TEST_CAPTURE_POLICY: CapturePolicy = {
   }
 };
 
+const MASKED_SCREENSHOT_TEST_CAPTURE_POLICY: CapturePolicy = {
+  ...SCREENSHOT_TEST_CAPTURE_POLICY,
+  categories: {
+    ...SCREENSHOT_TEST_CAPTURE_POLICY.categories,
+    screenshots: "masked"
+  }
+};
+
+const SUBFRAME_CAPTURE_POLICY: CapturePolicy = {
+  ...SCREENSHOT_TEST_CAPTURE_POLICY,
+  scope: {
+    ...SCREENSHOT_TEST_CAPTURE_POLICY.scope,
+    includeSubframes: true
+  }
+};
+
+function capturePolicyWithInputs(inputs: CapturePolicy["categories"]["inputs"]): CapturePolicy {
+  return {
+    ...DEFAULT_CAPTURE_POLICY,
+    categories: {
+      ...DEFAULT_CAPTURE_POLICY.categories,
+      inputs
+    }
+  };
+}
+
 function createAgent(
   state: Partial<LiteCaptureState> = {},
   options: Partial<LiteCaptureAgentOptions> = {}
@@ -39,6 +69,7 @@ function createAgent(
 
   agent.setRecordingStatus({
     active: true,
+    activationId: ACTIVATION_A,
     sid: "S-lite-agent-test",
     tabId: 7,
     mode: "lite",
@@ -68,31 +99,28 @@ function createInactiveAgent(options: Partial<LiteCaptureAgentOptions> = {}) {
   };
 }
 
-function dispatchInjectedEvents(rawType: string, count: number): void {
+function queueSyntheticEvents(agent: LiteCaptureAgent, rawType: string, count: number): void {
   const startedAt = Date.now();
-  const events = Array.from({ length: count }, (_, index) => {
-    const now = startedAt + index;
+  const queueRawEvent = (
+    agent as unknown as {
+      queueRawEvent(event: RawRecorderEvent): void;
+    }
+  ).queueRawEvent.bind(agent);
 
-    return {
+  for (let index = 0; index < count; index += 1) {
+    const now = startedAt + index;
+    queueRawEvent({
+      source: "content",
       rawType,
+      tabId: 7,
+      sid: "S-lite-agent-test",
       payload: {
         index
       },
       t: now,
       mono: performance.timeOrigin + now
-    };
-  });
-
-  window.dispatchEvent(
-    new MessageEvent("message", {
-      data: {
-        source: INJECTED_MESSAGE_SOURCE,
-        kind: "capture-events",
-        events
-      },
-      source: window
-    })
-  );
+    });
+  }
 }
 
 function clickTarget(): void {
@@ -177,13 +205,22 @@ function countEmittedEvents(emitBatch: ReturnType<typeof vi.fn>): number {
   }, 0);
 }
 
-function emittedRawTypes(emitBatch: ReturnType<typeof vi.fn>): string[] {
+type EmittedRawEvent = {
+  rawType?: string;
+  payload?: Record<string, unknown>;
+};
+
+function emittedEvents(emitBatch: ReturnType<typeof vi.fn>): EmittedRawEvent[] {
   return emitBatch.mock.calls.flatMap((call) => {
-    const [events] = call as [Array<{ rawType?: string }>];
-    return events.map((event) => event.rawType ?? "");
+    const [events] = call as [EmittedRawEvent[]];
+    return events;
   });
 }
 
+function emittedRawTypes(emitBatch: ReturnType<typeof vi.fn>): string[] {
+  return emittedEvents(emitBatch).map((event) => event.rawType ?? "");
+}
+
 describe("LiteCaptureAgent", () => {
   beforeEach(() => {
     vi.useFakeTimers();
@@ -239,6 +276,25 @@ describe("LiteCaptureAgent", () => {
     agent.dispose();
   });
 
+  it("does not capture root screenshots containing an out-of-scope child frame", async () => {
+    document.body.insertAdjacentHTML(
+      "beforeend",
+      '<iframe src="https://outside.example/private"></iframe>'
+    );
+    const { agent } = createAgent({
+      capturePolicy: SCREENSHOT_TEST_CAPTURE_POLICY,
+      sampling: {
+        screenshotIdleMs: 1_000
+      }
+    });
+
+    clickTarget();
+    await vi.advanceTimersByTimeAsync(3_000);
+
+    expect(snapdomToBlobMock).not.toHaveBeenCalled();
+    agent.dispose();
+  });
+
   it("captures a deferred start screenshot when screenshot sampling is enabled", async () => {
     const { agent } = createAgent({
       capturePolicy: SCREENSHOT_TEST_CAPTURE_POLICY,
@@ -254,6 +310,21 @@ describe("LiteCaptureAgent", () => {
     agent.dispose();
   });
 
+  it("does not capture raw pixels when screenshot policy is masked", async () => {
+    const { agent } = createAgent({
+      capturePolicy: MASKED_SCREENSHOT_TEST_CAPTURE_POLICY,
+      sampling: {
+        screenshotIdleMs: 1_000
+      }
+    });
+
+    await vi.advanceTimersByTimeAsync(5_000);
+
+    expect(snapdomToBlobMock).not.toHaveBeenCalled();
+
+    agent.dispose();
+  });
+
   it("releases screenshot capture state when snapdom does not settle", async () => {
     const { agent } = createAgent({
       capturePolicy: SCREENSHOT_TEST_CAPTURE_POLICY,
@@ -276,7 +347,13 @@ describe("LiteCaptureAgent", () => {
     expect(state.screenshotInFlight).toBe(false);
     expect(state.screenshotCaptureBlocked).toBe(true);
 
-    await agent.prepareStopCapture();
+    await expect(agent.prepareStopCapture()).resolves.toEqual({
+      expectedArtifacts: ["snapshot", "localStorageSnapshot", "screenshot"],
+      emittedArtifacts: ["snapshot", "localStorageSnapshot"],
+      omittedArtifacts: ["screenshot"],
+      degraded: true,
+      degradationReason: "artifact-error"
+    });
 
     expect(snapdomToBlobMock).toHaveBeenCalledTimes(1);
 
@@ -294,18 +371,247 @@ describe("LiteCaptureAgent", () => {
         screenshotIdleMs: 1_000
       }
     });
+    const internal = agent as unknown as {
+      captureScreenshot: (reason: string) => Promise<void>;
+      queueEvent: (rawType: string, payload: Record<string, unknown>) => boolean;
+      stopScreenshotCaptured: boolean;
+    };
     const captureScreenshotSpy = vi
-      .spyOn(
-        agent as unknown as {
-          captureScreenshot: (reason: string) => Promise<void>;
+      .spyOn(internal, "captureScreenshot")
+      .mockImplementation(async (reason) => {
+        internal.stopScreenshotCaptured = internal.queueEvent("screenshot", { reason });
+      });
+
+    await expect(agent.prepareStopCapture()).resolves.toEqual({
+      expectedArtifacts: ["snapshot", "localStorageSnapshot", "screenshot"],
+      emittedArtifacts: ["snapshot", "localStorageSnapshot", "screenshot"],
+      omittedArtifacts: [],
+      degraded: false,
+      degradationReason: null
+    });
+
+    expect(captureScreenshotSpy).toHaveBeenCalledWith("stop");
+
+    agent.dispose();
+  });
+
+  it("reports every configured artifact as omitted for an inactive agent", async () => {
+    const { agent, emitBatch } = createInactiveAgent();
+
+    await expect(agent.prepareStopCapture()).resolves.toEqual({
+      expectedArtifacts: ["snapshot", "localStorageSnapshot"],
+      emittedArtifacts: [],
+      omittedArtifacts: ["snapshot", "localStorageSnapshot"],
+      degraded: true,
+      degradationReason: "inactive"
+    });
+    expect(emitBatch).not.toHaveBeenCalled();
+
+    agent.dispose();
+  });
+
+  it("reports every configured artifact as omitted after disposal", async () => {
+    const { agent, emitBatch } = createAgent();
+    emitBatch.mockClear();
+    agent.dispose();
+
+    await expect(agent.prepareStopCapture()).resolves.toEqual({
+      expectedArtifacts: ["snapshot", "localStorageSnapshot"],
+      emittedArtifacts: [],
+      omittedArtifacts: ["snapshot", "localStorageSnapshot"],
+      degraded: true,
+      degradationReason: "disposed"
+    });
+    expect(emitBatch).not.toHaveBeenCalled();
+  });
+
+  it("reports every configured artifact as omitted when the document is out of scope", async () => {
+    const excludedPolicy: CapturePolicy = {
+      ...DEFAULT_CAPTURE_POLICY,
+      scope: {
+        ...DEFAULT_CAPTURE_POLICY.scope,
+        excludedUrlPatterns: ["*"]
+      }
+    };
+    const { agent, emitBatch } = createAgent({ capturePolicy: excludedPolicy });
+
+    await expect(agent.prepareStopCapture()).resolves.toEqual({
+      expectedArtifacts: ["snapshot", "localStorageSnapshot"],
+      emittedArtifacts: [],
+      omittedArtifacts: ["snapshot", "localStorageSnapshot"],
+      degraded: true,
+      degradationReason: "out-of-scope"
+    });
+    expect(emitBatch).not.toHaveBeenCalled();
+
+    agent.dispose();
+  });
+
+  it("continues final artifact capture after a localStorage SecurityError", async () => {
+    const { agent } = createAgent({
+      capturePolicy: SCREENSHOT_TEST_CAPTURE_POLICY,
+      sampling: {
+        screenshotIdleMs: 1_000
+      }
+    });
+    const internal = agent as unknown as {
+      captureScreenshot: (reason: string) => Promise<void>;
+      queueEvent: (rawType: string, payload: Record<string, unknown>) => boolean;
+      stopScreenshotCaptured: boolean;
+    };
+    vi.spyOn(window, "localStorage", "get").mockImplementation(() => {
+      throw new DOMException("Storage is unavailable", "SecurityError");
+    });
+    vi.spyOn(internal, "captureScreenshot").mockImplementation(async (reason) => {
+      internal.stopScreenshotCaptured = internal.queueEvent("screenshot", { reason });
+    });
+
+    await expect(agent.prepareStopCapture()).resolves.toEqual({
+      expectedArtifacts: ["snapshot", "localStorageSnapshot", "screenshot"],
+      emittedArtifacts: ["snapshot", "screenshot"],
+      omittedArtifacts: ["localStorageSnapshot"],
+      degraded: true,
+      degradationReason: "artifact-error"
+    });
+
+    agent.dispose();
+  });
+
+  it("captures localStorage when the final DOM snapshot throws", async () => {
+    const { agent } = createAgent();
+    const internal = agent as unknown as {
+      emitDomSnapshot: (reason: string) => boolean;
+    };
+    vi.spyOn(internal, "emitDomSnapshot").mockImplementation(() => {
+      throw new Error("DOM snapshot failed");
+    });
+
+    await expect(agent.prepareStopCapture()).resolves.toEqual({
+      expectedArtifacts: ["snapshot", "localStorageSnapshot"],
+      emittedArtifacts: ["localStorageSnapshot"],
+      omittedArtifacts: ["snapshot"],
+      degraded: true,
+      degradationReason: "artifact-error"
+    });
+
+    agent.dispose();
+  });
+
+  it("freezes ordinary listeners while retaining the activation for final artifacts", async () => {
+    const { agent, emitBatch } = createAgent();
+    const internal = agent as unknown as {
+      activationId: string | null;
+      captureInstalled: boolean;
+      recordingActive: boolean;
+    };
+
+    agent.freezeOrdinaryCapture();
+    emitBatch.mockClear();
+
+    expect(internal.recordingActive).toBe(true);
+    expect(internal.activationId).toBe(ACTIVATION_A);
+    expect(internal.captureInstalled).toBe(false);
+
+    document.body.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    agent.flush();
+    expect(emittedEvents(emitBatch).some((event) => event.rawType === "click")).toBe(false);
+
+    await expect(agent.prepareStopCapture()).resolves.toEqual({
+      expectedArtifacts: ["snapshot", "localStorageSnapshot"],
+      emittedArtifacts: ["snapshot", "localStorageSnapshot"],
+      omittedArtifacts: [],
+      degraded: false,
+      degradationReason: null
+    });
+    agent.dispose();
+  });
+
+  it("quiesces ordinary producers while retaining the MAIN-world tail bridge", () => {
+    const { agent, emitBatch } = createAgent();
+
+    agent.quiesceOrdinaryCapture();
+    emitBatch.mockClear();
+    document.body.dispatchEvent(new MouseEvent("click", { bubbles: true }));
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "capture-event",
+          activationId: ACTIVATION_A,
+          rawType: "console",
+          payload: { method: "info", redacted: true },
+          t: 1,
+          mono: 1
         },
-        "captureScreenshot"
-      )
-      .mockResolvedValue();
+        source: window
+      })
+    );
+    agent.flush();
+
+    expect(emittedRawTypes(emitBatch)).toContain("console");
+    expect(emittedRawTypes(emitBatch)).not.toContain("click");
+
+    agent.freezeOrdinaryCapture();
+    emitBatch.mockClear();
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "capture-event",
+          activationId: ACTIVATION_A,
+          rawType: "console",
+          payload: { method: "warn", redacted: true },
+          t: 2,
+          mono: 2
+        },
+        source: window
+      })
+    );
+    agent.flush();
+    expect(emitBatch).not.toHaveBeenCalled();
+    agent.dispose();
+  });
+
+  it("emits each stop artifact once after earlier DOM and storage captures", async () => {
+    const { agent, emitBatch } = createAgent({
+      capturePolicy: SCREENSHOT_TEST_CAPTURE_POLICY,
+      sampling: {
+        screenshotIdleMs: 1_000
+      }
+    });
+    const internal = agent as unknown as {
+      hasDomSnapshot: boolean;
+      hasLocalStorageSnapshot: boolean;
+      captureScreenshot: (reason: string) => Promise<void>;
+      queueEvent: (rawType: string, payload: Record<string, unknown>) => boolean;
+      stopScreenshotCaptured: boolean;
+    };
+    internal.hasDomSnapshot = true;
+    internal.hasLocalStorageSnapshot = true;
+    const captureScreenshotSpy = vi
+      .spyOn(internal, "captureScreenshot")
+      .mockImplementation(async (reason) => {
+        internal.stopScreenshotCaptured = internal.queueEvent("screenshot", { reason });
+      });
+
+    const firstResult = await agent.prepareStopCapture();
+    const secondResult = await agent.prepareStopCapture();
+    agent.setRecordingStatus({
+      active: false,
+      activationId: ACTIVATION_A,
+      sid: "S-lite-agent-test",
+      tabId: 7,
+      mode: "lite"
+    });
 
-    await agent.prepareStopCapture();
+    const stopEvents = emittedEvents(emitBatch).filter((event) => event.payload?.reason === "stop");
 
+    expect(stopEvents.filter((event) => event.rawType === "snapshot")).toHaveLength(1);
+    expect(stopEvents.filter((event) => event.rawType === "localStorageSnapshot")).toHaveLength(1);
+    expect(stopEvents.filter((event) => event.rawType === "screenshot")).toHaveLength(1);
+    expect(captureScreenshotSpy).toHaveBeenCalledTimes(1);
     expect(captureScreenshotSpy).toHaveBeenCalledWith("stop");
+    expect(secondResult).toEqual(firstResult);
 
     agent.dispose();
   });
@@ -319,6 +625,7 @@ describe("LiteCaptureAgent", () => {
 
     agent.setRecordingStatus({
       active: true,
+      activationId: ACTIVATION_A,
       sid: "S-lite-agent-test",
       tabId: 7,
       mode: "lite"
@@ -332,6 +639,7 @@ describe("LiteCaptureAgent", () => {
     emitBatch.mockClear();
     agent.setRecordingStatus({
       active: false,
+      activationId: ACTIVATION_A,
       sid: "S-lite-agent-test",
       tabId: 7,
       mode: "lite"
@@ -345,6 +653,266 @@ describe("LiteCaptureAgent", () => {
     agent.dispose();
   });
 
+  it("treats page-world bridge messages as bounded observations only", () => {
+    const onMarker = vi.fn();
+    const { agent, emitBatch } = createAgent({}, { onMarker });
+
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "marker",
+          message: "forged marker",
+          t: 1,
+          mono: 1
+        },
+        source: window
+      })
+    );
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "capture-event",
+          activationId: ACTIVATION_A,
+          rawType: "mutation",
+          payload: { count: 999 },
+          t: 1,
+          mono: 1
+        },
+        source: window
+      })
+    );
+
+    agent.flush();
+
+    expect(onMarker).not.toHaveBeenCalled();
+    expect(countEmittedEvents(emitBatch)).toBe(0);
+
+    const beforeReceipt = Date.now();
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "capture-event",
+          activationId: ACTIVATION_A,
+          rawType: "console",
+          payload: { method: "info", redacted: true },
+          t: 1,
+          mono: 1
+        },
+        source: window
+      })
+    );
+    agent.flush();
+
+    const captured = emitBatch.mock.calls.flatMap((call) => call[0] as RawRecorderEvent[]);
+    expect(captured).toHaveLength(1);
+    expect(captured[0]?.rawType).toBe("console");
+    expect(captured[0]?.t).toBeGreaterThanOrEqual(beforeReceipt);
+    expect(captured[0]?.mono).not.toBe(1);
+
+    agent.dispose();
+  });
+
+  it("binds MAIN observations and armed acknowledgements to the exact activation", () => {
+    const onInjectedBridgeArmed = vi.fn();
+    const { agent, emitBatch } = createAgent({}, { onInjectedBridgeArmed });
+
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "injected-armed",
+          activationId: ACTIVATION_B
+        },
+        source: window
+      })
+    );
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "injected-armed",
+          activationId: ACTIVATION_A
+        },
+        source: window
+      })
+    );
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "injected-armed",
+          activationId: ACTIVATION_A
+        },
+        source: window
+      })
+    );
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "capture-event",
+          activationId: ACTIVATION_B,
+          rawType: "console",
+          payload: { method: "info", redacted: true },
+          t: 1,
+          mono: 1
+        },
+        source: window
+      })
+    );
+    agent.flush();
+
+    expect(onInjectedBridgeArmed).toHaveBeenCalledOnce();
+    expect(onInjectedBridgeArmed).toHaveBeenCalledWith(ACTIVATION_A);
+    expect(emitBatch).not.toHaveBeenCalled();
+    agent.dispose();
+  });
+
+  it("deduplicates streamed MAIN events against the privileged replay window", () => {
+    const { agent, emitBatch } = createAgent();
+    const first = {
+      activationId: ACTIVATION_A,
+      seq: 1,
+      rawType: "console",
+      payload: { method: "info", marker: "streamed" },
+      t: 10,
+      mono: 11
+    };
+    const second = {
+      activationId: ACTIVATION_A,
+      seq: 2,
+      rawType: "pageError",
+      payload: { message: "tail" },
+      t: 12,
+      mono: 13
+    };
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "capture-event",
+          ...first
+        },
+        source: window
+      })
+    );
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "capture-event",
+          ...first
+        },
+        source: window
+      })
+    );
+    agent.flush();
+
+    expect(
+      agent.mergeInjectedDirectReplay({
+        kind: "drained",
+        activationId: ACTIVATION_A,
+        revision: 2,
+        events: [first, second],
+        producedThrough: 2,
+        truncatedBefore: 0,
+        degraded: false,
+        replayed: false
+      })
+    ).toEqual({ confirmed: true, conflict: false, replayedEvents: 1 });
+    const events = emittedEvents(emitBatch);
+    expect(events.filter((event) => event.rawType === "console")).toHaveLength(1);
+    expect(events.filter((event) => event.rawType === "pageError")).toHaveLength(1);
+
+    expect(
+      agent.mergeInjectedDirectReplay({
+        kind: "drained",
+        activationId: ACTIVATION_A,
+        revision: 3,
+        events: [{ ...first, payload: { method: "error", marker: "forged-conflict" } }],
+        producedThrough: 1,
+        truncatedBefore: 0,
+        degraded: false,
+        replayed: true
+      })
+    ).toEqual({ confirmed: false, conflict: true, replayedEvents: 1 });
+
+    agent.dispose();
+  });
+
+  it("drops an old activation buffer and timer before accepting its replacement", async () => {
+    const { agent, emitBatch } = createAgent();
+    const queueRawEvent = (
+      agent as unknown as { queueRawEvent(event: RawRecorderEvent): void }
+    ).queueRawEvent.bind(agent);
+
+    queueRawEvent({
+      source: "content",
+      rawType: "old-activation",
+      tabId: 7,
+      sid: "S-old",
+      t: 1,
+      mono: 1,
+      payload: {}
+    });
+    agent.setRecordingStatus({
+      active: true,
+      activationId: ACTIVATION_B,
+      sid: "S-new",
+      tabId: 7,
+      mode: "lite"
+    });
+    queueRawEvent({
+      source: "content",
+      rawType: "new-activation",
+      tabId: 7,
+      sid: "S-new",
+      t: 2,
+      mono: 2,
+      payload: {}
+    });
+
+    await vi.advanceTimersByTimeAsync(200);
+
+    const events = emitBatch.mock.calls.flatMap((call) => call[0] as RawRecorderEvent[]);
+    expect(events.some((event) => event.rawType === "old-activation")).toBe(false);
+    expect(events.some((event) => event.rawType === "new-activation")).toBe(true);
+    expect(emitBatch.mock.calls.every((call) => call[1] === ACTIVATION_B)).toBe(true);
+    agent.dispose();
+  });
+
+  it("rate-limits untrusted page-world observation batches", () => {
+    const { agent, emitBatch } = createAgent();
+
+    for (let batch = 0; batch < 6; batch += 1) {
+      window.dispatchEvent(
+        new MessageEvent("message", {
+          data: {
+            source: INJECTED_MESSAGE_SOURCE,
+            kind: "capture-events",
+            activationId: ACTIVATION_A,
+            events: Array.from({ length: 24 }, (_, index) => ({
+              activationId: ACTIVATION_A,
+              rawType: "console",
+              payload: { method: "info", batch, index, redacted: true },
+              t: Date.now(),
+              mono: performance.timeOrigin + performance.now()
+            }))
+          },
+          source: window
+        })
+      );
+    }
+
+    agent.flush();
+
+    expect(countEmittedEvents(emitBatch)).toBe(120);
+    agent.dispose();
+  });
+
   it("does not install page performance observers in full mode", () => {
     const observe = vi.fn();
     const requestAnimationFrame = vi.fn(() => 1);
@@ -364,6 +932,36 @@ describe("LiteCaptureAgent", () => {
     agent.dispose();
   });
 
+  it("keeps Full interaction capture isolated without installing a window bridge", () => {
+    const addEventListener = vi.spyOn(window, "addEventListener");
+    const onInjectedBridgeArmed = vi.fn();
+    const { agent, emitBatch } = createAgent({ mode: "full" }, { onInjectedBridgeArmed });
+
+    expect(addEventListener.mock.calls.some(([type]) => type === "message")).toBe(false);
+
+    window.dispatchEvent(
+      new MessageEvent("message", {
+        data: {
+          source: INJECTED_MESSAGE_SOURCE,
+          kind: "capture-event",
+          activationId: ACTIVATION_A,
+          rawType: "console",
+          payload: { method: "error" },
+          t: 1,
+          mono: 1
+        },
+        source: window
+      })
+    );
+    clickTarget();
+    agent.flush();
+
+    expect(emittedRawTypes(emitBatch)).toContain("click");
+    expect(emittedRawTypes(emitBatch)).not.toContain("console");
+    expect(onInjectedBridgeArmed).not.toHaveBeenCalled();
+    agent.dispose();
+  });
+
   it("throttles full-mode pointer tracking", () => {
     const { agent } = createAgent({ mode: "full" });
     const state = agent as unknown as {
@@ -426,6 +1024,7 @@ describe("LiteCaptureAgent", () => {
 
     agent.setRecordingStatus({
       active: false,
+      activationId: ACTIVATION_A,
       sid: "S-lite-agent-test",
       tabId: 7,
       mode: "lite"
@@ -455,6 +1054,7 @@ describe("LiteCaptureAgent", () => {
 
     agent.setRecordingStatus({
       active: false,
+      activationId: ACTIVATION_A,
       sid: "S-lite-agent-test",
       tabId: 7,
       mode: "lite"
@@ -482,7 +1082,7 @@ describe("LiteCaptureAgent", () => {
   it("keeps child-frame capture lightweight", async () => {
     const { agent, emitBatch } = createAgent(
       {
-        capturePolicy: SCREENSHOT_TEST_CAPTURE_POLICY,
+        capturePolicy: SUBFRAME_CAPTURE_POLICY,
         sampling: {
           screenshotIdleMs: 1_000
         }
@@ -497,6 +1097,7 @@ describe("LiteCaptureAgent", () => {
 
     agent.setRecordingStatus({
       active: false,
+      activationId: ACTIVATION_A,
       sid: "S-lite-agent-test",
       tabId: 7,
       mode: "lite",
@@ -517,12 +1118,114 @@ describe("LiteCaptureAgent", () => {
     agent.dispose();
   });
 
+  it("does not install or emit capture from a child frame when subframes are disabled", () => {
+    const { agent, emitBatch } = createAgent(
+      {
+        capturePolicy: SCREENSHOT_TEST_CAPTURE_POLICY
+      },
+      {
+        frameScope: "child"
+      }
+    );
+
+    clickTarget();
+    agent.flush();
+
+    expect(emitBatch).not.toHaveBeenCalled();
+    agent.dispose();
+  });
+
+  it("binds the first activation to the policy tab before evaluating scope", () => {
+    const tabBoundPolicy: CapturePolicy = {
+      ...DEFAULT_CAPTURE_POLICY,
+      scope: {
+        ...DEFAULT_CAPTURE_POLICY.scope,
+        tabId: 7
+      }
+    };
+    const matching = createAgent({ capturePolicy: tabBoundPolicy, tabId: 7 });
+    const mismatching = createAgent({ capturePolicy: tabBoundPolicy, tabId: 8 });
+
+    clickTarget();
+    matching.agent.flush();
+    mismatching.agent.flush();
+
+    expect(emittedRawTypes(matching.emitBatch)).toContain("click");
+    expect(mismatching.emitBatch).not.toHaveBeenCalled();
+    matching.agent.dispose();
+    mismatching.agent.dispose();
+  });
+
+  it("deactivates capture when a later status targets a different tab", () => {
+    const tabBoundPolicy: CapturePolicy = {
+      ...DEFAULT_CAPTURE_POLICY,
+      scope: {
+        ...DEFAULT_CAPTURE_POLICY.scope,
+        tabId: 7
+      }
+    };
+    const { agent, emitBatch } = createAgent({ capturePolicy: tabBoundPolicy, tabId: 7 });
+
+    agent.setRecordingStatus({
+      active: true,
+      activationId: ACTIVATION_A,
+      sid: "S-lite-agent-test",
+      tabId: 8,
+      mode: "lite",
+      capturePolicy: tabBoundPolicy
+    });
+    clickTarget();
+    agent.flush();
+
+    expect(emitBatch).not.toHaveBeenCalled();
+    agent.dispose();
+  });
+
+  it("fails closed when the current document URL is excluded", () => {
+    const excludedPolicy: CapturePolicy = {
+      ...DEFAULT_CAPTURE_POLICY,
+      scope: {
+        ...DEFAULT_CAPTURE_POLICY.scope,
+        excludedUrlPatterns: ["*"]
+      }
+    };
+    const { agent, emitBatch } = createAgent({ capturePolicy: excludedPolicy });
+
+    clickTarget();
+    agent.flush();
+
+    expect(emitBatch).not.toHaveBeenCalled();
+    agent.dispose();
+  });
+
+  it("tears down capture when consent expires", async () => {
+    vi.setSystemTime(new Date("2026-07-11T00:00:00.000Z"));
+    const expiringPolicy: CapturePolicy = {
+      ...DEFAULT_CAPTURE_POLICY,
+      consent: {
+        ...DEFAULT_CAPTURE_POLICY.consent,
+        grantedAt: "2026-07-10T00:00:00.000Z",
+        expiresAt: "2026-07-11T00:00:01.000Z"
+      }
+    };
+    const { agent, emitBatch } = createAgent({ capturePolicy: expiringPolicy });
+
+    await vi.advanceTimersByTimeAsync(1_001);
+    emitBatch.mockClear();
+    clickTarget();
+    agent.flush();
+
+    expect(emitBatch).not.toHaveBeenCalled();
+    agent.dispose();
+  });
+
   it("emits a counts-only localStorage snapshot when stopping before idle storage capture runs", () => {
     localStorage.setItem("demo", "local-storage-secret-token");
     const { agent, emitBatch } = createAgent();
 
     agent.setRecordingStatus({
       active: false,
+      activationId: ACTIVATION_A,
       sid: "S-lite-agent-test",
       tabId: 7,
       mode: "lite"
@@ -536,7 +1239,7 @@ describe("LiteCaptureAgent", () => {
 
     expect(storageEvent?.payload).toMatchObject({
       count: 1,
-      mode: "counts-only",
+      mode: "schema-only",
       redacted: true
     });
     expect(storageEvent?.payload).not.toHaveProperty("entries");
@@ -559,7 +1262,7 @@ describe("LiteCaptureAgent", () => {
     const cookieEvent = events.find((event) => event.rawType === "cookieSnapshot");
 
     expect(cookieEvent?.payload).toMatchObject({
-      mode: "counts-only",
+      mode: "schema-only",
       redacted: true
     });
     expect(cookieEvent?.payload).not.toHaveProperty("names");
@@ -649,6 +1352,7 @@ describe("LiteCaptureAgent", () => {
 
     agent.setRecordingStatus({
       active: false,
+      activationId: ACTIVATION_A,
       sid: "S-lite-agent-test",
       tabId: 7,
       mode: "lite"
@@ -1127,6 +1831,196 @@ describe("LiteCaptureAgent", () => {
     agent.dispose();
   });
 
+  it("retains editable printable key identity only when input capture is allowed", () => {
+    const { agent, emitBatch } = createAgent({
+      capturePolicy: capturePolicyWithInputs("allow")
+    });
+    const field = inputTarget();
+
+    field.dispatchEvent(
+      new KeyboardEvent("keydown", {
+        key: "A",
+        code: "KeyA",
+        bubbles: true
+      })
+    );
+    agent.flush();
+
+    const keydown = emittedEvents(emitBatch).find((event) => event.rawType === "keydown");
+
+    expect(keydown?.payload).toMatchObject({
+      inputContext: "input",
+      key: "A",
+      code: "KeyA"
+    });
+    expect(keydown?.payload).not.toHaveProperty("keyRedacted");
+
+    agent.dispose();
+  });
+
+  it.each(["length-only", "masked"] as const)(
+    "redacts editable printable key identity under the %s input policy",
+    (inputs) => {
+      const { agent, emitBatch } = createAgent({
+        capturePolicy: capturePolicyWithInputs(inputs)
+      });
+      const field = inputTarget();
+
+      field.dispatchEvent(
+        new KeyboardEvent("keydown", {
+          key: "A",
+          code: "KeyA",
+          bubbles: true
+        })
+      );
+      agent.flush();
+
+      const keydown = emittedEvents(emitBatch).find((event) => event.rawType === "keydown");
+
+      expect(keydown?.payload).toMatchObject({
+        inputContext: "input",
+        keyRedacted: true,
+        keyKind: "printable"
+      });
+      expect(keydown?.payload).not.toHaveProperty("key");
+      expect(keydown?.payload).not.toHaveProperty("code");
+
+      agent.dispose();
+    }
+  );
+
+  it("omits editable keydown events when input capture is disabled", () => {
+    const { agent, emitBatch } = createAgent({
+      capturePolicy: capturePolicyWithInputs("none")
+    });
+
+    inputTarget().dispatchEvent(
+      new KeyboardEvent("keydown", {
+        key: "A",
+        code: "KeyA",
+        bubbles: true
+      })
+    );
+    agent.flush();
+
+    expect(emittedRawTypes(emitBatch)).not.toContain("keydown");
+
+    agent.dispose();
+  });
+
+  it("never retains password key identity even when input capture is allowed", () => {
+    const { agent, emitBatch } = createAgent({
+      capturePolicy: capturePolicyWithInputs("allow")
+    });
+    const field = inputTarget();
+    field.type = "password";
+
+    field.dispatchEvent(
+      new KeyboardEvent("keydown", {
+        key: "A",
+        code: "KeyA",
+        bubbles: true
+      })
+    );
+    agent.flush();
+
+    const keydown = emittedEvents(emitBatch).find((event) => event.rawType === "keydown");
+
+    expect(keydown?.payload).toMatchObject({
+      inputContext: "protected",
+      keyRedacted: true,
+      keyKind: "protected"
+    });
+    expect(keydown?.payload).not.toHaveProperty("key");
+    expect(keydown?.payload).not.toHaveProperty("code");
+
+    agent.dispose();
+  });
+
+  it("sanitizes textarea printable keys under length-only input capture", () => {
+    document.body.insertAdjacentHTML("beforeend", '<textarea id="notes-keydown"></textarea>');
+    const textarea = document.querySelector<HTMLTextAreaElement>("#notes-keydown");
+
+    if (!textarea) {
+      throw new Error("missing textarea target");
+    }
+
+    const { agent, emitBatch } = createAgent({
+      capturePolicy: capturePolicyWithInputs("length-only")
+    });
+
+    textarea.dispatchEvent(
+      new KeyboardEvent("keydown", {
+        key: "Z",
+        code: "KeyZ",
+        bubbles: true
+      })
+    );
+    agent.flush();
+
+    const keydown = emittedEvents(emitBatch).find((event) => event.rawType === "keydown");
+
+    expect(keydown?.payload).toMatchObject({
+      inputContext: "textarea",
+      keyRedacted: true,
+      keyKind: "printable"
+    });
+    expect(keydown?.payload).not.toHaveProperty("key");
+    expect(keydown?.payload).not.toHaveProperty("code");
+
+    agent.dispose();
+  });
+
+  it("sanitizes contenteditable text keys while retaining non-text navigation keys", () => {
+    document.body.insertAdjacentHTML(
+      "beforeend",
+      '<div id="editor-keydown" contenteditable="true">editable</div>'
+    );
+    const editor = document.querySelector<HTMLElement>("#editor-keydown");
+
+    if (!editor) {
+      throw new Error("missing contenteditable target");
+    }
+
+    const { agent, emitBatch } = createAgent({
+      capturePolicy: capturePolicyWithInputs("length-only")
+    });
+
+    editor.dispatchEvent(
+      new KeyboardEvent("keydown", {
+        key: "A",
+        code: "KeyA",
+        bubbles: true
+      })
+    );
+    editor.dispatchEvent(
+      new KeyboardEvent("keydown", {
+        key: "Enter",
+        code: "Enter",
+        bubbles: true
+      })
+    );
+    agent.flush();
+
+    const keydowns = emittedEvents(emitBatch).filter((event) => event.rawType === "keydown");
+
+    expect(keydowns).toHaveLength(2);
+    expect(keydowns[0]?.payload).toMatchObject({
+      inputContext: "contenteditable",
+      keyRedacted: true,
+      keyKind: "printable"
+    });
+    expect(keydowns[0]?.payload).not.toHaveProperty("key");
+    expect(keydowns[0]?.payload).not.toHaveProperty("code");
+    expect(keydowns[1]?.payload).toMatchObject({
+      inputContext: "contenteditable",
+      key: "Enter",
+      code: "Enter"
+    });
+
+    agent.dispose();
+  });
+
   it("enriches input selectors after the hot path", async () => {
     const { agent, emitBatch } = createAgent();
     const field = inputTarget();
@@ -1359,7 +2253,7 @@ describe("LiteCaptureAgent", () => {
   it("suppresses mousemove capture while the event buffer is under pressure", () => {
     const { agent, emitBatch } = createAgent();
 
-    dispatchInjectedEvents("mutation", 130);
+    queueSyntheticEvents(agent, "mutation", 130);
     movePointer();
     agent.flush();
 
@@ -1372,7 +2266,7 @@ describe("LiteCaptureAgent", () => {
   it("flushes buffered low-priority events asynchronously in chunks", async () => {
     const { agent, emitBatch } = createAgent();
 
-    dispatchInjectedEvents("mutation", 130);
+    queueSyntheticEvents(agent, "mutation", 130);
 
     expect(emitBatch).not.toHaveBeenCalled();
 
@@ -1392,7 +2286,7 @@ describe("LiteCaptureAgent", () => {
   it("sheds low-priority overflow before draining the backlog", () => {
     const { agent, emitBatch } = createAgent();
 
-    dispatchInjectedEvents("mutation", 1_300);
+    queueSyntheticEvents(agent, "mutation", 1_300);
 
     expect(emitBatch).not.toHaveBeenCalled();
 
diff --git a/packages/webblackbox/src/lite-capture-agent.ts b/packages/webblackbox/src/lite-capture-agent.ts
index 3744285..e86660a 100644
--- a/packages/webblackbox/src/lite-capture-agent.ts
+++ b/packages/webblackbox/src/lite-capture-agent.ts
@@ -1,15 +1,31 @@
 import {
   DEFAULT_CAPTURE_POLICY,
+  evaluateCaptureScope,
   sanitizeUrlForPrivacy,
   type CapturePolicy
 } from "@webblackbox/protocol";
 import type { RawRecorderEvent } from "@webblackbox/recorder";
 import { snapdom } from "@zumer/snapdom";
 
-import type { LiteCaptureAgentOptions, LiteCaptureSampling, LiteCaptureState } from "./types.js";
-import { INJECTED_MESSAGE_SOURCE, type InjectedCaptureWindowMessage } from "./injected-hooks.js";
+import type {
+  LiteCaptureAgentOptions,
+  LiteCaptureSampling,
+  LiteCaptureState,
+  LiteStopCaptureArtifact,
+  LiteStopCaptureDegradationReason,
+  LiteStopCaptureResult
+} from "./types.js";
+import {
+  isInjectedActivationId,
+  parseInjectedCaptureArmedMessage,
+  parseInjectedCaptureWindowMessage,
+  type InjectedDirectCaptureEvent,
+  type InjectedDirectDrainResult
+} from "./injected-hooks.js";
 
 const PRE_RECORDING_BUFFER_MAX = 400;
+const INJECTED_DIRECT_SEQUENCE_CACHE_MAX = 512;
+const INJECTED_DIRECT_SIGNATURE_CACHE_MAX_BYTES = 1024 * 1024;
 const SCREENSHOT_MAX_DATA_URL_LENGTH = 10 * 1024 * 1024;
 const SCREENSHOT_POINTER_STALE_MS = 2_500;
 const SCREENSHOT_ACTION_COOLDOWN_MS = 2_000;
@@ -62,6 +78,8 @@ const MUTATION_SAMPLE_TARGETS_MAX = 24;
 const MUTATION_SAMPLE_ATTRIBUTES_MAX = 16;
 const SELECTOR_CACHE_MAX = 1_500;
 const PERF_LOG_FLAG = "__WEBBLACKBOX_PERF__";
+const INJECTED_BRIDGE_MAX_EVENTS_PER_SECOND = 120;
+const INJECTED_BRIDGE_MAX_PAYLOAD_CHARS_PER_MINUTE = 4 * 1024 * 1024 + 256 * 1024;
 const OBSERVED_MUTATION_ATTRIBUTES = [
   "hidden",
   "open",
@@ -102,6 +120,41 @@ const FULL_MODE_SKIPPED_RAW_TYPES = new Set([
   "cookieSnapshot"
 ]);
 
+const NON_TEXT_KEYBOARD_KEYS = new Set([
+  "Alt",
+  "AltGraph",
+  "ArrowDown",
+  "ArrowLeft",
+  "ArrowRight",
+  "ArrowUp",
+  "Backspace",
+  "CapsLock",
+  "ContextMenu",
+  "Control",
+  "Delete",
+  "End",
+  "Enter",
+  "Escape",
+  "Fn",
+  "FnLock",
+  "Home",
+  "Hyper",
+  "Insert",
+  "Meta",
+  "NumLock",
+  "NumpadEnter",
+  "PageDown",
+  "PageUp",
+  "Pause",
+  "PrintScreen",
+  "ScrollLock",
+  "Shift",
+  "Super",
+  "Symbol",
+  "SymbolLock",
+  "Tab"
+]);
+
 const DEFAULT_SAMPLING: LiteCaptureSampling = {
   mousemoveHz: 20,
   scrollHz: 15,
@@ -134,6 +187,13 @@ type MutationBatchSummary = {
 
 type TargetPayloadDetail = "action" | "input" | "fast" | "navigation";
 type CapturePressureStage = "none" | "soft" | "hard" | "critical";
+type EditableKeydownContext = "input" | "protected" | "textarea" | "contenteditable";
+
+export type InjectedDirectReplayMergeResult = Readonly<{
+  confirmed: boolean;
+  conflict: boolean;
+  replayedEvents: number;
+}>;
 
 /**
  * Browser-side event capture agent used by `WebBlackboxLiteSdk`.
@@ -143,11 +203,14 @@ export class LiteCaptureAgent {
   private readonly eventBuffer: RawRecorderEvent[] = [];
   private readonly preRecordingBuffer: RawRecorderEvent[] = [];
   private readonly cleanupCallbacks: Array<() => void> = [];
+  private injectedBridgeCleanup: (() => void) | null = null;
   private readonly frameMarker: string | undefined;
   private readonly isTopLevelFrame: boolean;
 
   private recordingActive = false;
   private captureInstalled = false;
+  private activationId: string | null = null;
+  private eventBufferActivationId: string | null = null;
   private sid = "";
   private tabId = -1;
   private mode: LiteCaptureState["mode"] = "lite";
@@ -165,13 +228,17 @@ export class LiteCaptureAgent {
   private trailingScrollTimer = 0;
   private mutationFlushTimer = 0;
   private flushTimer = 0;
+  private scopeExpiryTimer = 0;
   private lastScrollTime = 0;
   private lastPointerTime = Number.NEGATIVE_INFINITY;
   private screenshotInFlight = false;
   private screenshotCaptureBlocked = false;
   private screenshotInFlightPromise: Promise<void> | null = null;
   private screenshotPendingReason: string | null = null;
-  private hasCapturedScreenshot = false;
+  private stopCapturePromise: Promise<LiteStopCaptureResult> | null = null;
+  private stopCaptureResult: LiteStopCaptureResult | null = null;
+  private stopScreenshotCaptured = false;
+  private ordinaryCaptureFrozen = false;
   private lastActionScreenshotMono = Number.NEGATIVE_INFINITY;
   private lastUserActivityMono = monotonicTime();
   private scrollBurstActiveUntilMono = Number.NEGATIVE_INFINITY;
@@ -199,6 +266,14 @@ export class LiteCaptureAgent {
   private droppedLowPriorityEvents = 0;
   private disposed = false;
   private pendingQuietRecoverySummary = false;
+  private injectedBridgeWindowStartedAt = 0;
+  private injectedBridgeEventCount = 0;
+  private injectedBridgePayloadWindowStartedAt = 0;
+  private injectedBridgePayloadChars = 0;
+  private injectedBridgeArmedActivationId: string | null = null;
+  private readonly injectedDirectEventSignatures = new Map<number, string>();
+  private readonly injectedDirectConflictedSequences = new Set<number>();
+  private injectedDirectSignatureBytes = 0;
 
   /** Creates and installs capture hooks for the current page context. */
   public constructor(private readonly options: LiteCaptureAgentOptions) {
@@ -213,12 +288,52 @@ export class LiteCaptureAgent {
       return;
     }
 
-    const wasRecording = this.recordingActive;
+    const requestedActivationId = isInjectedActivationId(state.activationId)
+      ? state.activationId
+      : null;
+    const currentActivationId = this.activationId;
+
+    if (state.active ? !requestedActivationId : currentActivationId !== requestedActivationId) {
+      return;
+    }
+
+    let wasRecording = this.recordingActive;
+    const nextPolicy = state.capturePolicy ?? this.capturePolicy;
+    const nextMode = state.mode ?? this.mode;
+    const replacingActivation = Boolean(
+      state.active &&
+      currentActivationId &&
+      (currentActivationId !== requestedActivationId || nextMode !== this.mode)
+    );
+
+    if (replacingActivation) {
+      this.dropPendingActivation();
+      wasRecording = false;
+    }
+
+    if (typeof state.tabId === "number" && Number.isFinite(state.tabId)) {
+      this.tabId = Math.round(state.tabId);
+    }
+
+    const nextActive = Boolean(
+      state.active && requestedActivationId && this.isDocumentWithinScope(nextPolicy)
+    );
+
+    this.capturePolicy = nextPolicy;
+    this.mode = nextMode;
+    this.sampling = sanitizeSamplingConfig(state.sampling);
+
+    if (typeof state.sid === "string") {
+      this.sid = state.sid;
+    }
 
-    if (state.active && !wasRecording) {
+    if (nextActive && !wasRecording) {
       this.hasDomSnapshot = false;
       this.hasLocalStorageSnapshot = false;
-      this.hasCapturedScreenshot = false;
+      this.stopCapturePromise = null;
+      this.stopCaptureResult = null;
+      this.stopScreenshotCaptured = false;
+      this.ordinaryCaptureFrozen = false;
     }
 
     if (!state.active && wasRecording && this.shouldCaptureDomSnapshots() && !this.hasDomSnapshot) {
@@ -228,41 +343,40 @@ export class LiteCaptureAgent {
     if (
       !state.active &&
       wasRecording &&
-      this.shouldCaptureStorageSnapshots() &&
+      this.shouldCaptureLocalStorageSnapshot() &&
       !this.hasLocalStorageSnapshot
     ) {
       this.emitLocalStorageSnapshot("stop");
     }
 
-    this.recordingActive = state.active;
-    this.mode = state.mode ?? this.mode;
-    this.sampling = sanitizeSamplingConfig(state.sampling);
-    this.capturePolicy = state.capturePolicy ?? this.capturePolicy;
-
-    if (typeof state.sid === "string") {
-      this.sid = state.sid;
-    }
-
-    if (typeof state.tabId === "number" && Number.isFinite(state.tabId)) {
-      this.tabId = Math.round(state.tabId);
-    }
-
-    if (this.recordingActive) {
-      this.ensureCaptureInstalled();
-
-      if (!wasRecording) {
-        this.flushPreRecordingBuffer();
+    if (nextActive && requestedActivationId) {
+      if (this.activationId !== requestedActivationId) {
+        this.clearActivationBuffers();
+        this.resetInjectedBridgeBudget();
       }
 
+      this.activationId = requestedActivationId;
+      this.recordingActive = true;
+      this.ordinaryCaptureFrozen = false;
+      this.scheduleScopeExpiry();
+      this.ensureCaptureInstalled();
       this.ensureIndicator(this.sid, this.mode);
       this.startMutationAndSnapshots();
       return;
     }
 
+    const stoppingActivationId = this.activationId;
+    this.cancelBufferedFlush();
+    this.recordingActive = false;
+    this.ordinaryCaptureFrozen = false;
+    this.clearScopeExpiryTimer();
     this.stopMutationAndSnapshots();
     this.teardownCapture();
     this.removeIndicator();
-    this.flush();
+    this.drainBufferedEvents(stoppingActivationId, true);
+    this.clearActivationBuffers();
+    this.activationId = null;
+    this.resetInjectedBridgeBudget();
   }
 
   /** Emits a manual marker event and optional snapshot/screenshot side effects. */
@@ -301,28 +415,207 @@ export class LiteCaptureAgent {
   /** Flushes the current buffered raw events immediately. */
   public flush(): void {
     this.flushPendingScrollEvent();
-    this.drainBufferedEvents();
+    this.drainBufferedEvents(this.activationId);
+  }
+
+  /** Stops ordinary listeners/timers while retaining one activation for final artifacts. */
+  public freezeOrdinaryCapture(): void {
+    this.freezeCaptureProducers(false);
+  }
+
+  /** Stops ordinary producers while preserving the MAIN-world bridge for its tail barrier. */
+  public quiesceOrdinaryCapture(): void {
+    this.freezeCaptureProducers(true);
+  }
+
+  /**
+   * Merges the privileged MAIN replay window after quiescence. Window messages
+   * are only a streaming optimization; this result is the stop-tail evidence.
+   */
+  public mergeInjectedDirectReplay(
+    result: InjectedDirectDrainResult
+  ): InjectedDirectReplayMergeResult {
+    if (
+      this.disposed ||
+      !this.recordingActive ||
+      !this.activationId ||
+      result.activationId !== this.activationId
+    ) {
+      return { confirmed: false, conflict: false, replayedEvents: 0 };
+    }
+
+    let expectedSequence = result.truncatedBefore + 1;
+    let replayedEvents = 0;
+    let conflict = false;
+
+    for (const event of result.events) {
+      if (event.activationId !== this.activationId || event.seq !== expectedSequence) {
+        return { confirmed: false, conflict: true, replayedEvents };
+      }
+      expectedSequence += 1;
+      const signature = serializeInjectedDirectEvent(event);
+      const streamedSignature = this.injectedDirectEventSignatures.get(event.seq);
+      conflict ||= this.injectedDirectConflictedSequences.has(event.seq);
+      if (!signature || streamedSignature !== signature) {
+        if (streamedSignature !== undefined) {
+          conflict = true;
+        }
+        this.queueInjectedRawEvent(event, event.t, event.mono);
+        replayedEvents += 1;
+      }
+      if (signature) {
+        this.storeInjectedDirectEventSignature(event.seq, signature);
+      }
+    }
+
+    const coversProducedThrough =
+      result.events.length === 0
+        ? result.producedThrough === result.truncatedBefore
+        : expectedSequence - 1 === result.producedThrough;
+    this.flush();
+    return {
+      confirmed: result.truncatedBefore === 0 && coversProducedThrough && !conflict,
+      conflict,
+      replayedEvents
+    };
   }
 
-  /** Completes any in-flight screenshot and captures one final frame if none was recorded yet. */
-  public async prepareStopCapture(): Promise<void> {
-    if (this.disposed || !this.recordingActive) {
+  private freezeCaptureProducers(preserveInjectedBridge: boolean): void {
+    if (this.disposed || !this.recordingActive || !this.activationId) {
       return;
     }
 
+    if (!this.ordinaryCaptureFrozen) {
+      this.stopMutationAndSnapshots();
+      this.teardownCapture({ preserveInjectedBridge });
+      this.clearScopeExpiryTimer();
+      this.ordinaryCaptureFrozen = true;
+    } else if (!preserveInjectedBridge) {
+      this.teardownInjectedMessageBridge();
+    }
+    this.flush();
+  }
+
+  /** Emits exactly one final stop artifact per enabled top-frame capture category. */
+  public prepareStopCapture(): Promise<LiteStopCaptureResult> {
+    if (this.stopCaptureResult) {
+      return Promise.resolve(this.stopCaptureResult);
+    }
+
+    if (this.stopCapturePromise) {
+      return this.stopCapturePromise;
+    }
+
+    const expectedArtifacts = this.resolveExpectedStopCaptureArtifacts();
+    const capturePromise = this.prepareStopCaptureOnce(expectedArtifacts);
+    this.stopCapturePromise = capturePromise;
+    void capturePromise.then(
+      (result) => {
+        if (this.stopCapturePromise === capturePromise) {
+          this.stopCaptureResult = result;
+          this.stopCapturePromise = null;
+        }
+      },
+      () => {
+        if (this.stopCapturePromise === capturePromise) {
+          this.stopCapturePromise = null;
+        }
+      }
+    );
+    return capturePromise;
+  }
+
+  private async prepareStopCaptureOnce(
+    expectedArtifacts: readonly LiteStopCaptureArtifact[]
+  ): Promise<LiteStopCaptureResult> {
+    if (this.disposed) {
+      return createStopCaptureResult(expectedArtifacts, [], "disposed");
+    }
+
+    let withinScope = false;
     try {
-      await this.screenshotInFlightPromise;
+      withinScope = this.isDocumentWithinScope();
     } catch {
-      void 0;
+      withinScope = false;
     }
 
-    if (this.shouldCaptureScreenshots() && !this.hasCapturedScreenshot) {
-      if (this.screenshotCaptureBlocked) {
-        return;
+    if (!withinScope) {
+      this.deactivateForScope();
+      return createStopCaptureResult(expectedArtifacts, [], "out-of-scope");
+    }
+
+    if (!this.recordingActive || !this.activationId) {
+      return createStopCaptureResult(expectedArtifacts, [], "inactive");
+    }
+
+    const emittedArtifacts: LiteStopCaptureArtifact[] = [];
+
+    if (expectedArtifacts.includes("snapshot")) {
+      try {
+        if (this.emitDomSnapshot("stop")) {
+          emittedArtifacts.push("snapshot");
+        }
+      } catch {
+        void 0;
+      }
+    }
+
+    if (expectedArtifacts.includes("localStorageSnapshot")) {
+      try {
+        if (this.emitLocalStorageSnapshot("stop")) {
+          emittedArtifacts.push("localStorageSnapshot");
+        }
+      } catch {
+        void 0;
       }
+    }
+
+    if (expectedArtifacts.includes("screenshot")) {
+      try {
+        await this.screenshotInFlightPromise;
 
-      await this.startScreenshotCapture("stop");
+        if (!this.screenshotCaptureBlocked && this.shouldCaptureScreenshots()) {
+          await this.startScreenshotCapture("stop");
+        }
+
+        if (this.stopScreenshotCaptured) {
+          emittedArtifacts.push("screenshot");
+        }
+      } catch {
+        void 0;
+      }
     }
+
+    return createStopCaptureResult(
+      expectedArtifacts,
+      emittedArtifacts,
+      emittedArtifacts.length === expectedArtifacts.length ? null : "artifact-error"
+    );
+  }
+
+  private resolveExpectedStopCaptureArtifacts(): LiteStopCaptureArtifact[] {
+    if (this.mode === "full" || !this.isTopLevelFrame) {
+      return [];
+    }
+
+    const expectedArtifacts: LiteStopCaptureArtifact[] = [];
+
+    if (this.capturePolicy.categories.dom !== "off") {
+      expectedArtifacts.push("snapshot");
+    }
+
+    if (this.capturePolicy.categories.storage !== "off") {
+      expectedArtifacts.push("localStorageSnapshot");
+    }
+
+    if (
+      this.sampling.screenshotIdleMs > 0 &&
+      this.capturePolicy.categories.screenshots === "allow"
+    ) {
+      expectedArtifacts.push("screenshot");
+    }
+
+    return expectedArtifacts;
   }
 
   /** Tears down listeners/timers and releases all internal buffers. */
@@ -332,6 +625,7 @@ export class LiteCaptureAgent {
     }
 
     this.disposed = true;
+    this.clearScopeExpiryTimer();
     this.stopMutationAndSnapshots();
     this.removeIndicator();
 
@@ -341,63 +635,176 @@ export class LiteCaptureAgent {
     }
 
     this.runCleanupCallbacks();
+    this.teardownInjectedMessageBridge();
     this.clearPendingTargetEnrichmentTimers();
 
     this.eventBuffer.length = 0;
     this.preRecordingBuffer.length = 0;
+    this.eventBufferActivationId = null;
+    this.activationId = null;
+    this.resetInjectedBridgeBudget();
     this.mutationSummary = createEmptyMutationSummary();
     this.selectorCache = new WeakMap<Element, string>();
     this.selectorCacheSize = 0;
-    this.hasCapturedScreenshot = false;
   }
 
   private installInjectedMessageBridge(): void {
-    this.listen(window, "message", (event: MessageEvent<unknown>) => {
+    if (this.injectedBridgeCleanup) {
+      return;
+    }
+
+    const listener = (event: MessageEvent<unknown>) => {
       if (event.source !== window) {
         return;
       }
 
-      const data = event.data as InjectedCaptureWindowMessage | undefined;
-
-      if (!data || data.source !== INJECTED_MESSAGE_SOURCE) {
+      const armedActivationId = parseInjectedCaptureArmedMessage(event.data);
+
+      if (armedActivationId) {
+        if (
+          this.recordingActive &&
+          this.mode !== "full" &&
+          this.activationId === armedActivationId &&
+          this.injectedBridgeArmedActivationId !== armedActivationId
+        ) {
+          this.injectedBridgeArmedActivationId = armedActivationId;
+          this.options.onInjectedBridgeArmed?.(armedActivationId);
+        }
         return;
       }
 
-      if (data.kind === "capture-event" && typeof data.rawType === "string") {
-        this.queueInjectedRawEvent(data);
+      const events = parseInjectedCaptureWindowMessage(event.data);
+      const payloadChars = events ? JSON.stringify(events).length : 0;
+      const messageActivationId = events?.[0]?.activationId;
+      if (
+        !events ||
+        !messageActivationId ||
+        !this.recordingActive ||
+        this.mode === "full" ||
+        this.activationId !== messageActivationId ||
+        !this.consumeInjectedBridgeBudget(events.length, payloadChars)
+      ) {
         return;
       }
 
-      if (data.kind === "capture-events" && Array.isArray(data.events)) {
-        for (const item of data.events) {
-          if (item && typeof item.rawType === "string") {
-            this.queueInjectedRawEvent(item);
+      const receivedAt = Date.now();
+      const receivedMono = monotonicTime();
+      for (const [index, item] of events.entries()) {
+        if (item.activationId !== messageActivationId) {
+          return;
+        }
+        if (item.seq !== undefined) {
+          const observed = this.rememberInjectedDirectEvent(item as InjectedDirectCaptureEvent);
+          if (observed === "duplicate") {
+            continue;
           }
         }
-
-        return;
+        this.queueInjectedRawEvent(item, receivedAt, receivedMono + index / 1_000);
       }
+    };
+    window.addEventListener("message", listener);
+    this.injectedBridgeCleanup = () => {
+      window.removeEventListener("message", listener);
+      this.injectedBridgeCleanup = null;
+    };
+  }
+
+  private consumeInjectedBridgeBudget(eventCount: number, payloadChars: number): boolean {
+    const now = Date.now();
+    if (now - this.injectedBridgeWindowStartedAt >= 1_000) {
+      this.injectedBridgeWindowStartedAt = now;
+      this.injectedBridgeEventCount = 0;
+    }
+
+    if (now - this.injectedBridgePayloadWindowStartedAt >= 60_000) {
+      this.injectedBridgePayloadWindowStartedAt = now;
+      this.injectedBridgePayloadChars = 0;
+    }
 
-      if (data.kind === "marker") {
-        this.emitMarker(typeof data.message === "string" ? data.message : "Marker");
+    if (
+      this.injectedBridgeEventCount + eventCount > INJECTED_BRIDGE_MAX_EVENTS_PER_SECOND ||
+      this.injectedBridgePayloadChars + payloadChars > INJECTED_BRIDGE_MAX_PAYLOAD_CHARS_PER_MINUTE
+    ) {
+      return false;
+    }
+
+    this.injectedBridgeEventCount += eventCount;
+    this.injectedBridgePayloadChars += payloadChars;
+    return true;
+  }
+
+  private resetInjectedBridgeBudget(): void {
+    this.injectedBridgeWindowStartedAt = 0;
+    this.injectedBridgeEventCount = 0;
+    this.injectedBridgePayloadWindowStartedAt = 0;
+    this.injectedBridgePayloadChars = 0;
+    this.injectedBridgeArmedActivationId = null;
+    this.injectedDirectEventSignatures.clear();
+    this.injectedDirectConflictedSequences.clear();
+    this.injectedDirectSignatureBytes = 0;
+  }
+
+  private rememberInjectedDirectEvent(
+    event: InjectedDirectCaptureEvent
+  ): "new" | "duplicate" | "conflict" {
+    const signature = serializeInjectedDirectEvent(event);
+    if (!signature) {
+      return "conflict";
+    }
+    const existing = this.injectedDirectEventSignatures.get(event.seq);
+    if (existing === signature) {
+      return "duplicate";
+    }
+    if (existing !== undefined) {
+      this.injectedDirectConflictedSequences.add(event.seq);
+      return "conflict";
+    }
+    if (signature.length * 2 > INJECTED_DIRECT_SIGNATURE_CACHE_MAX_BYTES) {
+      return "conflict";
+    }
+    this.storeInjectedDirectEventSignature(event.seq, signature);
+    return "new";
+  }
+
+  private storeInjectedDirectEventSignature(seq: number, signature: string): void {
+    const previous = this.injectedDirectEventSignatures.get(seq);
+    if (previous !== undefined) {
+      this.injectedDirectSignatureBytes -= previous.length * 2;
+    }
+    this.injectedDirectEventSignatures.set(seq, signature);
+    this.injectedDirectSignatureBytes += signature.length * 2;
+    while (
+      this.injectedDirectEventSignatures.size > INJECTED_DIRECT_SEQUENCE_CACHE_MAX ||
+      this.injectedDirectSignatureBytes > INJECTED_DIRECT_SIGNATURE_CACHE_MAX_BYTES
+    ) {
+      const oldest = this.injectedDirectEventSignatures.keys().next().value as number | undefined;
+      if (oldest === undefined) {
+        break;
       }
-    });
+      this.injectedDirectSignatureBytes -=
+        (this.injectedDirectEventSignatures.get(oldest)?.length ?? 0) * 2;
+      this.injectedDirectEventSignatures.delete(oldest);
+      this.injectedDirectConflictedSequences.delete(oldest);
+    }
   }
 
-  private queueInjectedRawEvent(event: {
-    rawType: string;
-    payload?: Record<string, unknown>;
-    t?: number;
-    mono?: number;
-  }): void {
+  private queueInjectedRawEvent(
+    event: { activationId: string; rawType: string; payload: Record<string, unknown> },
+    receivedAt = Date.now(),
+    receivedMono = monotonicTime()
+  ): void {
+    if (event.activationId !== this.activationId || !this.recordingActive) {
+      return;
+    }
+
     this.queueRawEvent({
       source: "content",
       rawType: event.rawType,
       tabId: this.tabId,
       sid: this.sid,
-      t: typeof event.t === "number" ? event.t : Date.now(),
-      mono: typeof event.mono === "number" ? event.mono : monotonicTime(),
-      payload: event.payload ?? {}
+      t: receivedAt,
+      mono: receivedMono,
+      payload: event.payload
     });
   }
 
@@ -453,16 +860,11 @@ export class LiteCaptureAgent {
           this.emitMarker("Keyboard marker");
         }
 
-        this.queueEvent("keydown", {
-          key: event.key,
-          code: event.code,
-          repeat: event.repeat,
-          altKey: event.altKey,
-          ctrlKey: event.ctrlKey,
-          shiftKey: event.shiftKey,
-          metaKey: event.metaKey,
-          target: this.resolveTargetPayload(event.target, "fast")
-        });
+        const payload = this.createKeydownPayload(event);
+
+        if (payload) {
+          this.queueEvent("keydown", payload);
+        }
       },
       INPUT_OPTIONS_TRUE
     );
@@ -823,20 +1225,28 @@ export class LiteCaptureAgent {
     return (
       this.mode !== "full" &&
       this.isTopLevelFrame &&
+      this.isDocumentWithinScope() &&
+      !hasDisallowedEmbeddedFrame(this.capturePolicy) &&
       this.sampling.screenshotIdleMs > 0 &&
-      this.capturePolicy.categories.screenshots !== "off"
+      this.capturePolicy.categories.screenshots === "allow"
     );
   }
 
   private shouldCaptureMutationSignals(): boolean {
     return (
-      this.mode !== "full" && this.isTopLevelFrame && this.capturePolicy.categories.dom !== "off"
+      this.mode !== "full" &&
+      this.isTopLevelFrame &&
+      this.isDocumentWithinScope() &&
+      this.capturePolicy.categories.dom !== "off"
     );
   }
 
   private shouldCaptureDomSnapshots(): boolean {
     return (
-      this.mode !== "full" && this.isTopLevelFrame && this.capturePolicy.categories.dom !== "off"
+      this.mode !== "full" &&
+      this.isTopLevelFrame &&
+      this.isDocumentWithinScope() &&
+      this.capturePolicy.categories.dom !== "off"
     );
   }
 
@@ -844,12 +1254,22 @@ export class LiteCaptureAgent {
     return (
       this.mode !== "full" &&
       this.isTopLevelFrame &&
+      this.isDocumentWithinScope() &&
       (this.capturePolicy.categories.storage !== "off" ||
         this.capturePolicy.categories.indexedDb !== "off" ||
         this.capturePolicy.categories.cookies !== "off")
     );
   }
 
+  private shouldCaptureLocalStorageSnapshot(): boolean {
+    return (
+      this.mode !== "full" &&
+      this.isTopLevelFrame &&
+      this.isDocumentWithinScope() &&
+      this.capturePolicy.categories.storage !== "off"
+    );
+  }
+
   private startMutationAndSnapshots(): void {
     if (this.shouldCaptureMutationSignals() && !this.mutationObserver) {
       this.ensureMutationObserverActive();
@@ -958,19 +1378,55 @@ export class LiteCaptureAgent {
       this.installPerformanceCapture();
     }
 
-    this.installInjectedMessageBridge();
+    if (this.mode !== "full") {
+      this.installInjectedMessageBridge();
+    }
     this.captureInstalled = true;
     this.emitLifecycleEvent("visibilitychange", { state: document.visibilityState });
   }
 
-  private teardownCapture(): void {
-    if (!this.captureInstalled) {
-      return;
+  private teardownCapture(options: { preserveInjectedBridge?: boolean } = {}): void {
+    if (this.captureInstalled) {
+      this.captureInstalled = false;
+      this.runCleanupCallbacks();
+      this.clearPendingTargetEnrichmentTimers();
     }
 
-    this.captureInstalled = false;
-    this.runCleanupCallbacks();
-    this.clearPendingTargetEnrichmentTimers();
+    if (options.preserveInjectedBridge !== true) {
+      this.teardownInjectedMessageBridge();
+    }
+  }
+
+  private teardownInjectedMessageBridge(): void {
+    this.injectedBridgeCleanup?.();
+  }
+
+  private dropPendingActivation(): void {
+    this.cancelBufferedFlush();
+    this.recordingActive = false;
+    this.clearScopeExpiryTimer();
+    this.stopMutationAndSnapshots();
+    this.teardownCapture();
+    this.removeIndicator();
+    this.clearActivationBuffers();
+    this.activationId = null;
+    this.resetInjectedBridgeBudget();
+  }
+
+  private clearActivationBuffers(): void {
+    this.cancelBufferedFlush();
+    this.eventBuffer.length = 0;
+    this.preRecordingBuffer.length = 0;
+    this.eventBufferActivationId = null;
+    this.pendingScrollPayload = null;
+    this.mutationSummary = createEmptyMutationSummary();
+  }
+
+  private cancelBufferedFlush(): void {
+    if (this.flushTimer > 0) {
+      clearTimeout(this.flushTimer);
+      this.flushTimer = 0;
+    }
   }
 
   private runCleanupCallbacks(): void {
@@ -1046,7 +1502,7 @@ export class LiteCaptureAgent {
     });
   }
 
-  private emitDomSnapshot(reason: string): void {
+  private emitDomSnapshot(reason: string): boolean {
     const nodeCount = document.getElementsByTagName("*").length;
     const summaryMode = this.resolveDomSnapshotSummaryMode(nodeCount);
     const html = buildDomSnapshotSummaryHtml({
@@ -1060,9 +1516,7 @@ export class LiteCaptureAgent {
     const truncated = true;
     const sampledHtml = html.slice(0, DOM_SNAPSHOT_MAX_HTML_CHARS);
 
-    this.hasDomSnapshot = true;
-
-    this.queueEvent("snapshot", {
+    const queued = this.queueEvent("snapshot", {
       reason,
       href: readCurrentPageUrl(),
       title: document.title,
@@ -1073,6 +1527,8 @@ export class LiteCaptureAgent {
       summaryOnly: true,
       summaryMode
     });
+    this.hasDomSnapshot ||= queued;
+    return queued;
   }
 
   private emitStorageSnapshots(reason: string): void {
@@ -1098,23 +1554,22 @@ export class LiteCaptureAgent {
     this.queueEvent("cookieSnapshot", {
       reason,
       count,
-      mode: "counts-only",
+      mode: "schema-only",
       redacted: true
     });
   }
 
-  private emitLocalStorageSnapshot(reason: string): void {
+  private emitLocalStorageSnapshot(reason: string): boolean {
     const count = localStorage.length;
-
-    this.hasLocalStorageSnapshot = true;
-
-    this.queueEvent("localStorageSnapshot", {
+    const queued = this.queueEvent("localStorageSnapshot", {
       reason,
       count,
       truncated: false,
-      mode: "counts-only",
+      mode: "schema-only",
       redacted: true
     });
+    this.hasLocalStorageSnapshot ||= queued;
+    return queued;
   }
 
   private async emitIndexedDbSnapshot(reason: string): Promise<void> {
@@ -1122,13 +1577,19 @@ export class LiteCaptureAgent {
       return;
     }
 
+    const expectedActivationId = this.activationId;
+
     try {
       const rows = await indexedDB.databases();
 
+      if (!expectedActivationId || this.activationId !== expectedActivationId) {
+        return;
+      }
+
       this.queueEvent("indexedDbSnapshot", {
         reason,
         count: rows.length,
-        mode: "counts-only",
+        mode: "schema-only",
         redacted: true,
         truncated: false
       });
@@ -1269,7 +1730,14 @@ export class LiteCaptureAgent {
   }
 
   private async captureScreenshot(reason: string): Promise<void> {
-    if (!this.recordingActive || !this.shouldCaptureScreenshots()) {
+    const expectedActivationId = this.activationId;
+
+    if (
+      !expectedActivationId ||
+      this.activationId !== expectedActivationId ||
+      !this.recordingActive ||
+      !this.shouldCaptureScreenshots()
+    ) {
       return;
     }
 
@@ -1310,15 +1778,15 @@ export class LiteCaptureAgent {
 
       if (
         !screenshot ||
+        this.activationId !== expectedActivationId ||
+        !this.recordingActive ||
         typeof screenshot.dataUrl !== "string" ||
         screenshot.dataUrl.length > SCREENSHOT_MAX_DATA_URL_LENGTH
       ) {
         return;
       }
 
-      this.hasCapturedScreenshot = true;
-
-      this.queueEvent("screenshot", {
+      const queued = this.queueEvent("screenshot", {
         reason,
         dataUrl: screenshot.dataUrl,
         format: screenshot.format,
@@ -1332,6 +1800,9 @@ export class LiteCaptureAgent {
         },
         pointer: this.readPointerSnapshot()
       });
+      if (reason === "stop" && queued) {
+        this.stopScreenshotCaptured = true;
+      }
     } catch {
       void 0;
     } finally {
@@ -1796,8 +2267,8 @@ export class LiteCaptureAgent {
     };
   }
 
-  private queueEvent(rawType: string, payload: Record<string, unknown>): void {
-    this.queueRawEvent({
+  private queueEvent(rawType: string, payload: Record<string, unknown>): boolean {
+    return this.queueRawEvent({
       source: "content",
       rawType,
       tabId: this.tabId,
@@ -1809,12 +2280,21 @@ export class LiteCaptureAgent {
     });
   }
 
-  private queueRawEvent(event: RawRecorderEvent): void {
+  private queueRawEvent(event: RawRecorderEvent): boolean {
     if (this.mode === "full" && FULL_MODE_SKIPPED_RAW_TYPES.has(event.rawType)) {
-      return;
+      return false;
+    }
+
+    if (this.recordingActive && !this.isDocumentWithinScope()) {
+      this.deactivateForScope();
+      return false;
     }
 
     if (!this.recordingActive) {
+      if (!this.activationId) {
+        return false;
+      }
+
       if (shouldBufferBeforeRecording(event)) {
         this.preRecordingBuffer.push(event);
 
@@ -1824,19 +2304,102 @@ export class LiteCaptureAgent {
             this.preRecordingBuffer.length - PRE_RECORDING_BUFFER_MAX
           );
         }
+
+        return true;
       }
 
-      return;
+      return false;
+    }
+
+    const eventActivationId = this.activationId;
+
+    if (!eventActivationId) {
+      return false;
     }
 
     if (this.shouldDropEventForBackpressure(event)) {
-      return;
+      return false;
+    }
+
+    if (
+      this.eventBufferActivationId !== null &&
+      this.eventBufferActivationId !== eventActivationId
+    ) {
+      this.clearActivationBuffers();
     }
 
+    this.eventBufferActivationId = eventActivationId;
     this.eventBuffer.push(event);
     this.scheduleBufferedFlush(
-      this.eventBuffer.length >= EVENT_BUFFER_FORCE_FLUSH_SIZE ? 0 : EVENT_BUFFER_FLUSH_DELAY_MS
+      this.eventBuffer.length >= EVENT_BUFFER_FORCE_FLUSH_SIZE ? 0 : EVENT_BUFFER_FLUSH_DELAY_MS,
+      eventActivationId
     );
+    return true;
+  }
+
+  private isDocumentWithinScope(policy: CapturePolicy = this.capturePolicy): boolean {
+    return evaluateCaptureScope(policy, {
+      url: readDocumentUrl(),
+      tabId: this.tabId,
+      topLevel: this.isTopLevelFrame,
+      frameId: this.isTopLevelFrame ? 0 : 1
+    }).allowed;
+  }
+
+  private scheduleScopeExpiry(): void {
+    this.clearScopeExpiryTimer();
+
+    const expiresAt = this.capturePolicy.consent.expiresAt;
+
+    if (!expiresAt) {
+      return;
+    }
+
+    const delay = Date.parse(expiresAt) - Date.now();
+
+    if (!Number.isFinite(delay) || delay <= 0) {
+      this.deactivateForScope();
+      return;
+    }
+
+    this.scopeExpiryTimer = window.setTimeout(
+      () => {
+        this.scopeExpiryTimer = 0;
+
+        if (this.isDocumentWithinScope()) {
+          this.scheduleScopeExpiry();
+          return;
+        }
+
+        this.deactivateForScope();
+      },
+      Math.min(delay, 2_147_000_000)
+    );
+  }
+
+  private clearScopeExpiryTimer(): void {
+    if (this.scopeExpiryTimer > 0) {
+      clearTimeout(this.scopeExpiryTimer);
+      this.scopeExpiryTimer = 0;
+    }
+  }
+
+  private deactivateForScope(): void {
+    if (!this.recordingActive) {
+      return;
+    }
+
+    const stoppingActivationId = this.activationId;
+    this.cancelBufferedFlush();
+    this.recordingActive = false;
+    this.clearScopeExpiryTimer();
+    this.stopMutationAndSnapshots();
+    this.teardownCapture();
+    this.removeIndicator();
+    this.drainBufferedEvents(stoppingActivationId, true);
+    this.clearActivationBuffers();
+    this.activationId = null;
+    this.resetInjectedBridgeBudget();
   }
 
   private createClickPayload(event: MouseEvent): Record<string, unknown> {
@@ -1856,6 +2419,53 @@ export class LiteCaptureAgent {
     };
   }
 
+  private createKeydownPayload(event: KeyboardEvent): Record<string, unknown> | null {
+    const inputContext = resolveEditableKeydownContext(event.target);
+
+    if (inputContext && this.capturePolicy.categories.inputs === "none") {
+      return null;
+    }
+
+    const payload: Record<string, unknown> = {
+      repeat: event.repeat,
+      altKey: event.altKey,
+      ctrlKey: event.ctrlKey,
+      shiftKey: event.shiftKey,
+      metaKey: event.metaKey,
+      isComposing: event.isComposing,
+      target: this.resolveTargetPayload(event.target, "fast")
+    };
+
+    if (!inputContext) {
+      payload.key = event.key;
+      payload.code = event.code;
+      return payload;
+    }
+
+    payload.inputContext = inputContext;
+
+    const canRetainKeyIdentity =
+      inputContext !== "protected" &&
+      (this.capturePolicy.categories.inputs === "allow" ||
+        isNonTextKeyboardKey(event.key, event.code));
+
+    if (canRetainKeyIdentity) {
+      payload.key = event.key;
+      payload.code = event.code;
+      return payload;
+    }
+
+    payload.keyRedacted = true;
+    payload.keyKind =
+      inputContext === "protected"
+        ? "protected"
+        : event.isComposing || event.key === "Dead" || event.key === "Process"
+          ? "composition"
+          : "printable";
+
+    return payload;
+  }
+
   private resolveTargetPayload(
     target: EventTarget | null,
     detail: TargetPayloadDetail
@@ -1918,37 +2528,30 @@ export class LiteCaptureAgent {
     return payload;
   }
 
-  private flushPreRecordingBuffer(): void {
-    if (!this.recordingActive || this.preRecordingBuffer.length === 0) {
-      return;
-    }
-
-    this.eventBuffer.push(...this.preRecordingBuffer.splice(0, this.preRecordingBuffer.length));
-    this.scheduleBufferedFlush(0);
-  }
-
-  private flushEvents(): void {
-    if (this.flushTimer > 0) {
-      clearTimeout(this.flushTimer);
-      this.flushTimer = 0;
-    }
-
-    if (this.eventBuffer.length === 0) {
+  private flushEvents(expectedActivationId: string): void {
+    if (
+      !this.recordingActive ||
+      this.activationId !== expectedActivationId ||
+      this.eventBufferActivationId !== expectedActivationId ||
+      this.eventBuffer.length === 0
+    ) {
       return;
     }
 
     const events = this.eventBuffer.splice(0, EVENT_BUFFER_EMIT_CHUNK_SIZE);
 
     if (events.length > 0) {
-      this.options.emitBatch(events);
+      this.options.emitBatch(events, expectedActivationId);
     }
 
     if (this.eventBuffer.length > 0) {
-      this.scheduleBufferedFlush(0);
+      this.scheduleBufferedFlush(0, expectedActivationId);
+    } else {
+      this.eventBufferActivationId = null;
     }
   }
 
-  private scheduleBufferedFlush(delayMs: number): void {
+  private scheduleBufferedFlush(delayMs: number, expectedActivationId: string): void {
     if (this.flushTimer > 0) {
       if (delayMs > 0) {
         return;
@@ -1958,21 +2561,30 @@ export class LiteCaptureAgent {
       this.flushTimer = 0;
     }
 
-    this.flushTimer = window.setTimeout(
+    const timer = window.setTimeout(
       () => {
-        this.flushEvents();
+        if (this.flushTimer !== timer) {
+          return;
+        }
+
+        this.flushTimer = 0;
+        this.flushEvents(expectedActivationId);
       },
       Math.max(0, delayMs)
     );
+    this.flushTimer = timer;
   }
 
-  private drainBufferedEvents(): void {
-    if (this.flushTimer > 0) {
-      clearTimeout(this.flushTimer);
-      this.flushTimer = 0;
-    }
+  private drainBufferedEvents(expectedActivationId: string | null, allowInactive = false): void {
+    this.cancelBufferedFlush();
 
-    if (this.eventBuffer.length === 0) {
+    if (
+      !expectedActivationId ||
+      (!allowInactive && !this.recordingActive) ||
+      this.activationId !== expectedActivationId ||
+      this.eventBufferActivationId !== expectedActivationId ||
+      this.eventBuffer.length === 0
+    ) {
       return;
     }
 
@@ -1983,8 +2595,10 @@ export class LiteCaptureAgent {
         break;
       }
 
-      this.options.emitBatch(events);
+      this.options.emitBatch(events, expectedActivationId);
     }
+
+    this.eventBufferActivationId = null;
   }
 
   private shouldDropEventForBackpressure(event: RawRecorderEvent): boolean {
@@ -2005,7 +2619,9 @@ export class LiteCaptureAgent {
     if (buffered >= EVENT_BUFFER_HARD_LIMIT || this.mode === "full") {
       if (buffered >= EVENT_BUFFER_HARD_LIMIT && this.mode !== "full") {
         this.dropBufferedLowPriorityEvents(buffered - EVENT_BUFFER_SOFT_LIMIT + 1);
-        this.scheduleBufferedFlush(0);
+        if (this.activationId) {
+          this.scheduleBufferedFlush(0, this.activationId);
+        }
       }
 
       this.droppedLowPriorityEvents += 1;
@@ -2103,6 +2719,23 @@ export class LiteCaptureAgent {
   }
 }
 
+function createStopCaptureResult(
+  expectedArtifacts: readonly LiteStopCaptureArtifact[],
+  emittedArtifacts: readonly LiteStopCaptureArtifact[],
+  degradationReason: LiteStopCaptureDegradationReason | null
+): LiteStopCaptureResult {
+  const emitted = new Set(emittedArtifacts);
+  const omittedArtifacts = expectedArtifacts.filter((artifact) => !emitted.has(artifact));
+
+  return {
+    expectedArtifacts: [...expectedArtifacts],
+    emittedArtifacts: expectedArtifacts.filter((artifact) => emitted.has(artifact)),
+    omittedArtifacts,
+    degraded: degradationReason !== null || omittedArtifacts.length > 0,
+    degradationReason
+  };
+}
+
 function sanitizeSamplingConfig(raw: unknown): LiteCaptureSampling {
   if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
     return { ...DEFAULT_SAMPLING };
@@ -2147,6 +2780,50 @@ function monotonicTime(): number {
   return performance.timeOrigin + performance.now();
 }
 
+function readDocumentUrl(): string | null {
+  try {
+    return window.location.href;
+  } catch {
+    return null;
+  }
+}
+
+function hasDisallowedEmbeddedFrame(policy: CapturePolicy): boolean {
+  const frames = document.querySelectorAll("iframe, frame");
+
+  for (const frame of frames) {
+    if (!policy.scope.includeSubframes) {
+      return true;
+    }
+
+    let frameUrl: string;
+
+    try {
+      const contentWindow = (frame as HTMLIFrameElement | HTMLFrameElement).contentWindow;
+
+      if (!contentWindow) {
+        return true;
+      }
+
+      frameUrl = contentWindow.location.href;
+    } catch {
+      return true;
+    }
+
+    if (
+      !evaluateCaptureScope(policy, {
+        url: frameUrl,
+        topLevel: false,
+        frameId: 1
+      }).allowed
+    ) {
+      return true;
+    }
+  }
+
+  return false;
+}
+
 function resolveContentFrameContext(scope: LiteCaptureAgentOptions["frameScope"] = "auto"): {
   marker: string | undefined;
   isTopLevel: boolean;
@@ -2251,11 +2928,50 @@ function buildDomSnapshotSummaryHtml(options: {
 }
 
 function isEditableInteractionTarget(target: EventTarget | null): boolean {
-  if (target instanceof HTMLInputElement || target instanceof HTMLTextAreaElement) {
-    return true;
+  return resolveEditableKeydownContext(target) !== null;
+}
+
+function resolveEditableKeydownContext(target: EventTarget | null): EditableKeydownContext | null {
+  if (target instanceof HTMLInputElement) {
+    return target.type.toLowerCase() === "password" ? "protected" : "input";
+  }
+
+  if (target instanceof HTMLTextAreaElement) {
+    return "textarea";
   }
 
-  return isRichTextEditableTarget(target);
+  return isRichTextEditableTarget(target) ? "contenteditable" : null;
+}
+
+function isNonTextKeyboardKey(key: string, code: string): boolean {
+  if (NON_TEXT_KEYBOARD_KEYS.has(key)) {
+    return !isTextProducingKeyboardCode(code);
+  }
+
+  return /^F(?:[1-9]|1\d|2[0-4])$/.test(key) && /^F(?:[1-9]|1\d|2[0-4])$/.test(code);
+}
+
+function isTextProducingKeyboardCode(code: string): boolean {
+  return (
+    /^Key[A-Z]$/.test(code) ||
+    /^Digit\d$/.test(code) ||
+    /^Numpad(?:\d|Add|Comma|Decimal|Divide|Equal|Multiply|Subtract)$/.test(code) ||
+    code === "Space" ||
+    code === "Quote" ||
+    code === "Backquote" ||
+    code === "Comma" ||
+    code === "Period" ||
+    code === "Slash" ||
+    code === "Semicolon" ||
+    code === "Equal" ||
+    code === "Minus" ||
+    code === "BracketLeft" ||
+    code === "BracketRight" ||
+    code === "Backslash" ||
+    code === "IntlBackslash" ||
+    code === "IntlRo" ||
+    code === "IntlYen"
+  );
 }
 
 function resolveNavigationTarget(target: EventTarget | null): HTMLAnchorElement | null {
@@ -2633,6 +3349,21 @@ function safeCanvasToDataUrl(
   }
 }
 
+function serializeInjectedDirectEvent(event: InjectedDirectCaptureEvent): string | null {
+  try {
+    return JSON.stringify([
+      event.activationId,
+      event.seq,
+      event.rawType,
+      event.payload,
+      event.t,
+      event.mono
+    ]);
+  } catch {
+    return null;
+  }
+}
+
 function shouldBufferBeforeRecording(event: RawRecorderEvent): boolean {
   if (event.source !== "content") {
     return false;
diff --git a/packages/webblackbox/src/lite-materializer.test.ts b/packages/webblackbox/src/lite-materializer.test.ts
index 5948baf..5851203 100644
--- a/packages/webblackbox/src/lite-materializer.test.ts
+++ b/packages/webblackbox/src/lite-materializer.test.ts
@@ -34,6 +34,16 @@ function cloneConfig(): RecorderConfig {
   };
 }
 
+function enableNetworkBodyCapture(config: RecorderConfig): void {
+  config.capturePolicy = {
+    ...config.capturePolicy!,
+    categories: {
+      ...config.capturePolicy!.categories,
+      network: "body-allowlist"
+    }
+  };
+}
+
 describe("lite-materializer", () => {
   it("detects which raw events need lite materialization", () => {
     expect(
@@ -73,6 +83,14 @@ describe("lite-materializer", () => {
 
   it("materializes screenshot data-url payloads into blob references", async () => {
     const putBlobCalls: Array<{ mime: string; bytes: Uint8Array }> = [];
+    const config = cloneConfig();
+    config.capturePolicy = {
+      ...config.capturePolicy!,
+      categories: {
+        ...config.capturePolicy!.categories,
+        screenshots: "allow"
+      }
+    };
 
     const rawEvent = createRawEvent("screenshot", {
       dataUrl: `data:image/png;base64,${Buffer.from([1, 2, 3, 4]).toString("base64")}`,
@@ -82,7 +100,7 @@ describe("lite-materializer", () => {
     });
 
     const result = await materializeLiteRawEvent(rawEvent, {
-      config: cloneConfig(),
+      config,
       putBlob: async (mime, bytes) => {
         putBlobCalls.push({ mime, bytes });
         return "hash-shot";
@@ -102,8 +120,34 @@ describe("lite-materializer", () => {
     });
   });
 
+  it("does not persist screenshot bytes for masked policy", async () => {
+    const config = cloneConfig();
+    config.capturePolicy = {
+      ...config.capturePolicy!,
+      categories: {
+        ...config.capturePolicy!.categories,
+        screenshots: "masked"
+      }
+    };
+    const putBlob = vi.fn(async () => "unexpected-hash");
+
+    const result = await materializeLiteRawEvent(
+      createRawEvent("screenshot", {
+        dataUrl: `data:image/png;base64,${Buffer.from([1, 2, 3, 4]).toString("base64")}`
+      }),
+      {
+        config,
+        putBlob
+      }
+    );
+
+    expect(result).toBeNull();
+    expect(putBlob).not.toHaveBeenCalled();
+  });
+
   it("materializes network bodies with redaction and byte caps", async () => {
     const config = cloneConfig();
+    enableNetworkBodyCapture(config);
     config.sampling.bodyCaptureMaxBytes = 4 * 1024;
 
     const putBlobCalls: Array<{ mime: string; text: string; bytes: Uint8Array }> = [];
@@ -133,7 +177,8 @@ describe("lite-materializer", () => {
     expect(result).not.toBeNull();
     expect(putBlobCalls).toHaveLength(1);
     expect(putBlobCalls[0]?.mime).toBe("application/x-www-form-urlencoded");
-    expect(putBlobCalls[0]?.text).toContain("[REDACTED]");
+    expect(new URLSearchParams(putBlobCalls[0]?.text).get("token")).toBe("[REDACTED]");
+    expect(putBlobCalls[0]?.text).not.toContain("secret-token");
     expect(putBlobCalls[0]?.bytes.byteLength).toBeLessThanOrEqual(4 * 1024);
     expect(putBlobCalls[0]?.bytes.byteLength).toBeLessThan(
       new TextEncoder().encode(body).byteLength
@@ -147,8 +192,118 @@ describe("lite-materializer", () => {
     });
   });
 
+  it("decodes base64 JSON and redacts nested sensitive values before persistence", async () => {
+    const config = cloneConfig();
+    enableNetworkBodyCapture(config);
+    config.sampling.bodyCaptureMaxBytes = 64 * 1024;
+    const putBlobCalls: Array<{ mime: string; text: string }> = [];
+    const body = JSON.stringify({
+      user: {
+        password: "密碼-不可保留",
+        details: [{ api_key: "api-secret-value" }]
+      },
+      locale: "zh-CN"
+    });
+
+    const result = await materializeLiteRawEvent(
+      createRawEvent("networkBody", {
+        reqId: "R-base64-json",
+        url: "https://example.test/api/profile",
+        mimeType: "application/json; charset=utf-8",
+        encoding: "base64",
+        body: Buffer.from(body, "utf8").toString("base64"),
+        size: new TextEncoder().encode(body).byteLength
+      }),
+      {
+        config,
+        putBlob: async (mime, bytes) => {
+          putBlobCalls.push({ mime, text: new TextDecoder().decode(bytes) });
+          return "hash-base64-json";
+        }
+      }
+    );
+
+    expect(result).not.toBeNull();
+    expect(putBlobCalls).toHaveLength(1);
+    expect(putBlobCalls[0]?.mime).toBe("application/json");
+
+    const persisted = JSON.parse(putBlobCalls[0]?.text ?? "") as {
+      user: { password: string; details: Array<{ api_key: string }> };
+      locale: string;
+    };
+
+    expect(persisted.user.password).toBe("[REDACTED]");
+    expect(persisted.user.details[0]?.api_key).toBe("[REDACTED]");
+    expect(persisted.locale).toBe("zh-CN");
+    expect(putBlobCalls[0]?.text).not.toContain("不可保留");
+    expect(putBlobCalls[0]?.text).not.toContain("api-secret-value");
+    expect(result?.payload).toMatchObject({
+      contentHash: "hash-base64-json",
+      redacted: true,
+      truncated: false
+    });
+  });
+
+  it("does not persist malformed structured or undecodable textual bodies", async () => {
+    const config = cloneConfig();
+    enableNetworkBodyCapture(config);
+    config.sampling.bodyCaptureMaxBytes = 64 * 1024;
+    const putBlob = vi.fn(async () => "unexpected-hash");
+    const context = { config, putBlob };
+
+    const malformedJson = await materializeLiteRawEvent(
+      createRawEvent("networkBody", {
+        reqId: "R-malformed-json",
+        url: "https://example.test/api/profile",
+        mimeType: "application/json",
+        encoding: "utf8",
+        body: '{"password":"unterminated}'
+      }),
+      context
+    );
+    const invalidUtf8 = await materializeLiteRawEvent(
+      createRawEvent("networkBody", {
+        reqId: "R-invalid-utf8",
+        url: "https://example.test/api/profile",
+        mimeType: "application/json",
+        encoding: "base64",
+        body: Buffer.from([0xff, 0xfe, 0xfd]).toString("base64")
+      }),
+      context
+    );
+
+    expect(malformedJson).toBeNull();
+    expect(invalidUtf8).toBeNull();
+    expect(putBlob).not.toHaveBeenCalled();
+  });
+
+  it("does not persist network bodies without an allowed MIME type", async () => {
+    const config = cloneConfig();
+    enableNetworkBodyCapture(config);
+    config.sampling.bodyCaptureMaxBytes = 4 * 1024;
+    const putBlob = vi.fn(async () => "unexpected-hash");
+
+    const result = await materializeLiteRawEvent(
+      createRawEvent("networkBody", {
+        reqId: "R-missing-mime",
+        url: "https://example.test/api/binary",
+        encoding: "base64",
+        body: Buffer.from([0, 1, 2, 3]).toString("base64"),
+        size: 4
+      }),
+      {
+        config,
+        putBlob
+      }
+    );
+
+    expect(result).toBeNull();
+    expect(putBlob).not.toHaveBeenCalled();
+  });
+
   it("respects site policy deny rules for body capture", async () => {
     const config = cloneConfig();
+    enableNetworkBodyCapture(config);
     config.sitePolicies = [
       {
         originPattern: "https://example.test",
@@ -179,6 +334,39 @@ describe("lite-materializer", () => {
     expect(result).toBeNull();
   });
 
+  it("drops forged network bodies before persistence outside body-allowlist policy", async () => {
+    for (const networkPolicy of ["metadata", "headers-allowlist", undefined] as const) {
+      const config = cloneConfig();
+      config.sampling.bodyCaptureMaxBytes = 4 * 1024;
+      if (networkPolicy === undefined) {
+        delete config.capturePolicy;
+      } else {
+        config.capturePolicy = {
+          ...config.capturePolicy!,
+          categories: {
+            ...config.capturePolicy!.categories,
+            network: networkPolicy
+          }
+        };
+      }
+      const putBlob = vi.fn(async () => "unexpected-hash");
+
+      const result = await materializeLiteRawEvent(
+        createRawEvent("networkBody", {
+          reqId: `R-forged-${networkPolicy ?? "missing"}`,
+          url: "https://example.test/api/private",
+          mimeType: "application/json",
+          encoding: "utf8",
+          body: '{"secret":"must-not-be-persisted"}'
+        }),
+        { config, putBlob }
+      );
+
+      expect(result).toBeNull();
+      expect(putBlob).not.toHaveBeenCalled();
+    }
+  });
+
   it("drops localStorage entry samples during materialization", async () => {
     const putBlob = vi.fn(async () => "unused");
 
@@ -201,7 +389,7 @@ describe("lite-materializer", () => {
     expect(putBlob).not.toHaveBeenCalled();
     expect(result?.payload).toMatchObject({
       count: 1,
-      mode: "counts-only",
+      mode: "schema-only",
       redacted: true
     });
     expect(result?.payload).not.toHaveProperty("hash");
@@ -233,12 +421,12 @@ describe("lite-materializer", () => {
     expect(putBlob).not.toHaveBeenCalled();
     expect(cookieResult?.payload).toMatchObject({
       count: 2,
-      mode: "counts-only",
+      mode: "schema-only",
       redacted: true
     });
     expect(idbResult?.payload).toMatchObject({
       count: 1,
-      mode: "counts-only",
+      mode: "schema-only",
       redacted: true
     });
     expect(JSON.stringify(cookieResult)).not.toContain("sessionSecret");
@@ -247,6 +435,7 @@ describe("lite-materializer", () => {
 
   it("treats a zero body-capture budget as disabled", async () => {
     const config = cloneConfig();
+    enableNetworkBodyCapture(config);
     config.sampling.bodyCaptureMaxBytes = 0;
 
     const result = await materializeLiteRawEvent(
diff --git a/packages/webblackbox/src/lite-materializer.ts b/packages/webblackbox/src/lite-materializer.ts
index 78221dc..07f0831 100644
--- a/packages/webblackbox/src/lite-materializer.ts
+++ b/packages/webblackbox/src/lite-materializer.ts
@@ -2,6 +2,9 @@ import type { RecorderConfig } from "@webblackbox/protocol";
 import type { RawRecorderEvent } from "@webblackbox/recorder";
 
 import type { LiteMaterializerContext } from "./types.js";
+import { transformResponseBodyForCapture } from "./response-body-redaction.js";
+
+export { transformResponseBodyForCapture } from "./response-body-redaction.js";
 
 const DEFAULT_NETWORK_BODY_MAX_BYTES = 256 * 1024;
 const DEFAULT_BODY_MIME_ALLOWLIST = [
@@ -13,7 +16,6 @@ const DEFAULT_BODY_MIME_ALLOWLIST = [
   "application/javascript",
   "application/x-www-form-urlencoded"
 ];
-const REDACTED_TOKEN = "[REDACTED]";
 const DEFAULT_SCREENSHOT_MAX_DATA_URL_LENGTH = 12 * 1024 * 1024;
 const DEFAULT_SCREENSHOT_MAX_BYTES = 6 * 1024 * 1024;
 const DEFAULT_DOM_SNAPSHOT_MAX_BYTES = 1_500 * 1024;
@@ -101,6 +103,10 @@ async function materializeLiteScreenshot(
   rawEvent: RawRecorderEvent,
   context: LiteMaterializerContext
 ): Promise<RawRecorderEvent | null> {
+  if (context.config.capturePolicy?.categories.screenshots !== "allow") {
+    return null;
+  }
+
   const payload = asRecord(rawEvent.payload);
   const dataUrl = asString(payload?.dataUrl);
   const maxDataUrlLength =
@@ -195,7 +201,7 @@ async function materializeLiteStorageSnapshot(
       ...rawEvent,
       payload: {
         count,
-        mode: "counts-only",
+        mode: "schema-only",
         redacted: true,
         reason,
         truncated: payload.truncated === true
@@ -211,7 +217,7 @@ async function materializeLiteStorageSnapshot(
       ...rawEvent,
       payload: {
         count,
-        mode: "counts-only",
+        mode: "schema-only",
         redacted: true,
         reason,
         truncated: payload.truncated === true
@@ -227,7 +233,7 @@ async function materializeLiteStorageSnapshot(
       ...rawEvent,
       payload: {
         count,
-        mode: "counts-only",
+        mode: "schema-only",
         redacted: true,
         reason,
         truncated: payload.truncated === true
@@ -242,6 +248,10 @@ async function materializeLiteNetworkBody(
   rawEvent: RawRecorderEvent,
   context: LiteMaterializerContext
 ): Promise<RawRecorderEvent | null> {
+  if (context.config.capturePolicy?.categories.network !== "body-allowlist") {
+    return null;
+  }
+
   const payload = asRecord(rawEvent.payload);
 
   if (!payload) {
@@ -254,7 +264,7 @@ async function materializeLiteNetworkBody(
   const url = asString(payload.url) ?? "";
   const mimeType = normalizeMimeType(asString(payload.mimeType));
 
-  if (!reqId || !body || (encoding !== "utf8" && encoding !== "base64")) {
+  if (!reqId || !body || !mimeType || (encoding !== "utf8" && encoding !== "base64")) {
     return null;
   }
 
@@ -264,26 +274,22 @@ async function materializeLiteNetworkBody(
     return null;
   }
 
-  let bytes: Uint8Array;
-  let redacted = payload.redacted === true;
-
-  if (encoding === "utf8") {
-    const redaction = redactBodyText(body, context.config.redaction.redactBodyPatterns);
-    redacted = redacted || redaction.redacted;
-    bytes = new TextEncoder().encode(redaction.value);
-  } else {
-    bytes = decodeBase64(body);
-  }
+  const transformed = transformResponseBodyForCapture({
+    body,
+    base64Encoded: encoding === "base64",
+    mimeType,
+    redactPatterns: context.config.redaction.redactBodyPatterns,
+    maxBytes: captureRule.maxBytes,
+    decodeBase64
+  });
 
-  if (bytes.byteLength === 0) {
+  if (!transformed) {
     return null;
   }
 
-  const size = normalizeNonNegativeInt(payload.size) ?? bytes.byteLength;
+  const size = normalizeNonNegativeInt(payload.size) ?? transformed.originalBytes.byteLength;
   const truncatedByInput = payload.truncated === true;
-  const truncatedByLimit = bytes.byteLength > captureRule.maxBytes;
-  const sampledBytes = truncatedByLimit ? bytes.slice(0, captureRule.maxBytes) : bytes;
-  const contentHash = await context.putBlob(mimeType ?? "application/octet-stream", sampledBytes);
+  const contentHash = await context.putBlob(mimeType, transformed.sampledBytes);
 
   return {
     ...rawEvent,
@@ -293,9 +299,9 @@ async function materializeLiteNetworkBody(
       contentHash,
       mimeType,
       size,
-      sampledSize: sampledBytes.byteLength,
-      truncated: truncatedByInput || truncatedByLimit || sampledBytes.byteLength < size,
-      redacted
+      sampledSize: transformed.sampledBytes.byteLength,
+      truncated: truncatedByInput || transformed.truncated,
+      redacted: payload.redacted === true || transformed.redacted
     }
   };
 }
@@ -448,7 +454,7 @@ function wildcardMatch(value: string, pattern: string): boolean {
 
 function isMimeAllowed(allowlist: string[], mimeType: string | undefined): boolean {
   if (!mimeType) {
-    return true;
+    return false;
   }
 
   const normalizedMime = mimeType.toLowerCase();
@@ -477,46 +483,6 @@ function normalizeMimeType(value: string | null): string | undefined {
   return normalized && normalized.length > 0 ? normalized : undefined;
 }
 
-function redactBodyText(
-  value: string,
-  patterns: string[]
-): {
-  value: string;
-  redacted: boolean;
-} {
-  if (patterns.length === 0 || value.length === 0) {
-    return {
-      value,
-      redacted: false
-    };
-  }
-
-  let output = value;
-  let touched = false;
-
-  for (const pattern of patterns) {
-    const normalized = pattern.trim();
-
-    if (!normalized) {
-      continue;
-    }
-
-    const regex = new RegExp(normalized.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "gi");
-
-    if (!regex.test(output)) {
-      continue;
-    }
-
-    output = output.replace(regex, REDACTED_TOKEN);
-    touched = true;
-  }
-
-  return {
-    value: output,
-    redacted: touched
-  };
-}
-
 function asRecord(value: unknown): Record<string, unknown> | null {
   return value !== null && typeof value === "object" && !Array.isArray(value)
     ? (value as Record<string, unknown>)
diff --git a/packages/webblackbox/src/lite-sdk.test.ts b/packages/webblackbox/src/lite-sdk.test.ts
index 4d5e108..75c68aa 100644
--- a/packages/webblackbox/src/lite-sdk.test.ts
+++ b/packages/webblackbox/src/lite-sdk.test.ts
@@ -1,6 +1,12 @@
-import { describe, expect, it, vi, beforeEach } from "vitest";
+import "fake-indexeddb/auto";
 
-import { readWebBlackboxArchive } from "@webblackbox/pipeline";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import {
+  IndexedDbPipelineStorage,
+  MemoryPipelineStorage,
+  readWebBlackboxArchive
+} from "@webblackbox/pipeline";
 import { DEFAULT_CAPTURE_POLICY, type CapturePolicy } from "@webblackbox/protocol";
 import type { RawRecorderEvent } from "@webblackbox/recorder";
 
@@ -10,7 +16,8 @@ const mockRuntime = vi.hoisted(() => {
     statusHistory: Array<Record<string, unknown>>;
     flushCalls: number;
     disposeCalls: number;
-    emitBatch: (events: unknown[]) => void;
+    emitBatch: (events: unknown[], activationId: string) => void;
+    emitInjectedBridgeArmed: (activationId: string) => void;
   }> = [];
 
   class MockLiteCaptureAgent {
@@ -22,7 +29,8 @@ const mockRuntime = vi.hoisted(() => {
 
     public constructor(
       private readonly options: {
-        emitBatch: (events: unknown[]) => void;
+        emitBatch: (events: unknown[], activationId: string) => void;
+        onInjectedBridgeArmed?: (activationId: string) => void;
         onMarker?: (message: string) => void;
       }
     ) {
@@ -37,8 +45,12 @@ const mockRuntime = vi.hoisted(() => {
       this.options.onMarker?.(message);
     }
 
-    public emitBatch(events: unknown[]): void {
-      this.options.emitBatch(events);
+    public emitBatch(events: unknown[], activationId: string): void {
+      this.options.emitBatch(events, activationId);
+    }
+
+    public emitInjectedBridgeArmed(activationId: string): void {
+      this.options.onInjectedBridgeArmed?.(activationId);
     }
 
     public flush(): void {
@@ -76,6 +88,56 @@ vi.mock("./lite-capture-agent.js", () => {
 
 import { WebBlackboxLiteSdk } from "./lite-sdk.js";
 
+const ACTIVATION_ID_PATTERN = /^a1_[0-9a-f]{64}$/;
+
+type InjectedConfigDetail = {
+  active: boolean;
+  activationId: string;
+  bodyCaptureMaxBytes: number;
+  capturePolicy: CapturePolicy;
+};
+
+type LiteSdkActivationState = {
+  activeActivationId: string | null;
+  injectedBridgeArmedActivationId: string | null;
+};
+
+function captureInjectedConfigEvents(): InjectedConfigDetail[] {
+  const details: InjectedConfigDetail[] = [];
+
+  vi.stubGlobal("window", {
+    dispatchEvent: (event: { detail?: InjectedConfigDetail; type?: string }) => {
+      if (event.type === "webblackbox:injected-config" && event.detail) {
+        details.push(event.detail);
+      }
+
+      return true;
+    }
+  });
+  vi.stubGlobal(
+    "CustomEvent",
+    class<T> {
+      public readonly detail: T;
+
+      public constructor(
+        public readonly type: string,
+        init: { detail: T }
+      ) {
+        this.detail = init.detail;
+      }
+    }
+  );
+
+  return details;
+}
+
+function readLatestActivationId(agent: { statusHistory: Array<Record<string, unknown>> }): string {
+  const activationId = agent.statusHistory.at(-1)?.activationId;
+
+  expect(activationId).toEqual(expect.stringMatching(ACTIVATION_ID_PATTERN));
+  return activationId as string;
+}
+
 function createRawEvent(
   rawType: string,
   payload: Record<string, unknown>,
@@ -140,7 +202,12 @@ describe("WebBlackboxLiteSdk", () => {
     mockRuntime.installInjectedLiteCaptureHooksMock.mockReset();
   });
 
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
   it("starts and stops recording with injected hooks wired", async () => {
+    const injectedConfigs = captureInjectedConfigEvents();
     const sdk = new WebBlackboxLiteSdk({
       sid: "S-sdk-start-stop",
       injectHookFlag: "__WB_TEST_FLAG__",
@@ -162,24 +229,236 @@ describe("WebBlackboxLiteSdk", () => {
     await sdk.start();
     const agent = mockRuntime.instances.at(-1);
     expect(agent).toBeDefined();
+    const activationId = readLatestActivationId(agent!);
     expect(agent?.statusHistory.at(-1)).toMatchObject({
       active: true,
+      activationId,
       sid: "S-sdk-start-stop",
       mode: "lite"
     });
+    expect(injectedConfigs).toEqual([
+      expect.objectContaining({
+        active: true,
+        activationId,
+        bodyCaptureMaxBytes: 0
+      })
+    ]);
 
     await sdk.stop();
     expect(agent?.statusHistory.at(-1)).toMatchObject({
       active: false,
+      activationId,
       sid: "S-sdk-start-stop",
       mode: "lite"
     });
+    expect(injectedConfigs.at(-1)).toMatchObject({
+      active: false,
+      activationId,
+      bodyCaptureMaxBytes: 0
+    });
+    expect(sdk.isRecording).toBe(false);
+    expect((sdk as unknown as LiteSdkActivationState).activeActivationId).toBeNull();
+    expect((sdk as unknown as LiteSdkActivationState).injectedBridgeArmedActivationId).toBeNull();
     expect(agent?.flushCalls).toBeGreaterThan(0);
 
     await sdk.dispose();
     expect(agent?.disposeCalls).toBe(1);
   });
 
+  it("rotates activation identity for the same sid and rejects stale armed and batch callbacks", async () => {
+    const injectedConfigs = captureInjectedConfigEvents();
+    const sdk = new WebBlackboxLiteSdk({
+      sid: "S-sdk-same-sid-restart",
+      injectHooks: false,
+      useDefaultPlugins: false,
+      trustedPlaintextExemptionEvidenceRefs: [TRUSTED_LOCAL_DEBUG_EVIDENCE_REF],
+      config: {
+        capturePolicy: LOCAL_DEBUG_TEST_POLICY
+      }
+    });
+
+    await sdk.start();
+    const agent = mockRuntime.instances.at(-1);
+    expect(agent).toBeDefined();
+    const firstActivationId = readLatestActivationId(agent!);
+
+    agent?.emitInjectedBridgeArmed(firstActivationId);
+    expect((sdk as unknown as LiteSdkActivationState).injectedBridgeArmedActivationId).toBe(
+      firstActivationId
+    );
+
+    await sdk.stop();
+    expect((sdk as unknown as LiteSdkActivationState).activeActivationId).toBeNull();
+    expect((sdk as unknown as LiteSdkActivationState).injectedBridgeArmedActivationId).toBeNull();
+
+    agent?.emitBatch(
+      [
+        createRawEvent("marker", {
+          message: "stale-after-stop"
+        })
+      ],
+      firstActivationId
+    );
+
+    await sdk.start();
+    const secondActivationId = readLatestActivationId(agent!);
+    expect(secondActivationId).not.toBe(firstActivationId);
+    expect(sdk.sessionId).toBe("S-sdk-same-sid-restart");
+
+    agent?.emitInjectedBridgeArmed(firstActivationId);
+    expect((sdk as unknown as LiteSdkActivationState).injectedBridgeArmedActivationId).toBeNull();
+    agent?.emitBatch(
+      [
+        createRawEvent("marker", {
+          message: "stale-after-restart"
+        })
+      ],
+      firstActivationId
+    );
+
+    agent?.emitInjectedBridgeArmed(secondActivationId);
+    agent?.emitBatch(
+      [
+        createRawEvent("marker", {
+          message: "current-activation"
+        })
+      ],
+      secondActivationId
+    );
+    expect((sdk as unknown as LiteSdkActivationState).injectedBridgeArmedActivationId).toBe(
+      secondActivationId
+    );
+
+    const exported = await sdk.export({ stopCapture: false });
+    const parsed = await readWebBlackboxArchive(exported.bytes);
+    const markerMessages = parsed.events
+      .filter((event) => event.type === "user.marker")
+      .map((event) => (event.data as { message?: unknown }).message);
+
+    expect(markerMessages).toEqual(["current-activation"]);
+    expect(agent?.statusHistory).toEqual([
+      expect.objectContaining({
+        active: true,
+        activationId: firstActivationId,
+        sid: "S-sdk-same-sid-restart"
+      }),
+      expect.objectContaining({
+        active: false,
+        activationId: firstActivationId,
+        sid: "S-sdk-same-sid-restart"
+      }),
+      expect.objectContaining({
+        active: true,
+        activationId: secondActivationId,
+        sid: "S-sdk-same-sid-restart"
+      })
+    ]);
+    expect(injectedConfigs).toEqual([
+      expect.objectContaining({ active: true, activationId: firstActivationId }),
+      expect.objectContaining({ active: false, activationId: firstActivationId }),
+      expect.objectContaining({ active: true, activationId: secondActivationId })
+    ]);
+
+    await sdk.dispose();
+    expect(sdk.isRecording).toBe(false);
+    expect((sdk as unknown as LiteSdkActivationState).activeActivationId).toBeNull();
+    expect((sdk as unknown as LiteSdkActivationState).injectedBridgeArmedActivationId).toBeNull();
+    expect(agent?.statusHistory.at(-1)).toMatchObject({
+      active: false,
+      activationId: secondActivationId
+    });
+    expect(injectedConfigs.at(-1)).toMatchObject({
+      active: false,
+      activationId: secondActivationId
+    });
+  });
+
+  it("fails closed when secure activation-id randomness is unavailable", async () => {
+    const injectedConfigs = captureInjectedConfigEvents();
+    vi.stubGlobal("crypto", undefined);
+    const sdk = new WebBlackboxLiteSdk({
+      sid: "S-sdk-no-secure-randomness",
+      injectHooks: false,
+      useDefaultPlugins: false
+    });
+    const agent = mockRuntime.instances.at(-1);
+
+    await expect(sdk.start()).rejects.toThrow(/requires secure cryptographic randomness/i);
+    expect(sdk.isRecording).toBe(false);
+    expect(agent?.statusHistory).toEqual([]);
+    expect(injectedConfigs).toEqual([]);
+    expect((sdk as unknown as LiteSdkActivationState).activeActivationId).toBeNull();
+
+    await sdk.dispose();
+    expect(agent?.disposeCalls).toBe(1);
+  });
+
+  it("auto-encrypts indexeddb payloads and recovers them after an SDK restart", async () => {
+    const databaseName = `wb-lite-encrypted-${Date.now()}-${Math.random().toString(16).slice(2)}`;
+    const sid = "S-lite-indexeddb-encrypted-restart";
+    const eventSecret = "LITE_EVENT_SECRET_MUST_BE_ENCRYPTED";
+    const first = new WebBlackboxLiteSdk({
+      sid,
+      storage: "indexeddb",
+      indexedDbName: databaseName,
+      injectHooks: false,
+      useDefaultPlugins: false
+    });
+
+    await first.start();
+    first.ingestRawEvent(
+      createRawEvent("marker", {
+        message: eventSecret
+      })
+    );
+    await first.flush();
+
+    const rawStorage = new IndexedDbPipelineStorage(databaseName);
+    const persistedChunks = await rawStorage.listChunks(sid);
+    expect(persistedChunks.length).toBeGreaterThan(0);
+    expect(
+      persistedChunks.some((chunk) => new TextDecoder().decode(chunk.bytes).includes(eventSecret))
+    ).toBe(false);
+    await first.dispose();
+
+    const restarted = new WebBlackboxLiteSdk({
+      sid,
+      storage: "indexeddb",
+      indexedDbName: databaseName,
+      injectHooks: false,
+      useDefaultPlugins: false
+    });
+    const exported = await restarted.export({
+      passphrase: "restart-archive-passphrase"
+    });
+    const parsed = await readWebBlackboxArchive(exported.bytes, {
+      passphrase: "restart-archive-passphrase"
+    });
+
+    expect(parsed.events).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          type: "user.marker"
+        })
+      ])
+    );
+    await restarted.dispose();
+  });
+
+  it("rejects a raw persistent custom storage under the required at-rest policy", async () => {
+    const sdk = new WebBlackboxLiteSdk({
+      sid: "S-lite-raw-persistent-rejected",
+      pipelineStorage: new IndexedDbPipelineStorage(
+        `wb-lite-raw-${Date.now()}-${Math.random().toString(16).slice(2)}`
+      ),
+      injectHooks: false,
+      useDefaultPlugins: false
+    });
+
+    await expect(sdk.start()).rejects.toThrow(/persistent.*authenticated AES-GCM/i);
+    await sdk.dispose();
+  });
+
   it("exports normalized events and materialized screenshot payloads", async () => {
     const sdk = new WebBlackboxLiteSdk({
       sid: "S-sdk-export",
@@ -371,13 +650,17 @@ describe("WebBlackboxLiteSdk", () => {
 
     const agent = mockRuntime.instances.at(-1);
     expect(agent).toBeDefined();
+    const activationId = readLatestActivationId(agent!);
 
-    agent?.emitBatch([
-      createRawEvent("keydown", {
-        key: "Enter",
-        code: "Enter"
-      })
-    ]);
+    agent?.emitBatch(
+      [
+        createRawEvent("keydown", {
+          key: "Enter",
+          code: "Enter"
+        })
+      ],
+      activationId
+    );
 
     const exported = await sdk.export({ stopCapture: false });
     const parsed = await readWebBlackboxArchive(exported.bytes);
@@ -390,6 +673,44 @@ describe("WebBlackboxLiteSdk", () => {
     expect(() => sdk.emitMarker("after-dispose")).toThrow(/disposed/i);
   });
 
+  it("drops forged capture-agent network bodies before blob persistence", async () => {
+    const storage = new MemoryPipelineStorage();
+    const putBlob = vi.spyOn(storage, "putBlob");
+    const sdk = new WebBlackboxLiteSdk({
+      sid: "S-sdk-forged-network-body",
+      injectHooks: false,
+      useDefaultPlugins: false,
+      pipelineStorage: storage,
+      config: {
+        sampling: {
+          bodyCaptureMaxBytes: 4 * 1024
+        },
+        capturePolicy: LOCAL_DEBUG_TEST_POLICY
+      }
+    });
+
+    await sdk.start();
+    const agent = mockRuntime.instances.at(-1);
+    expect(agent).toBeDefined();
+    const activationId = readLatestActivationId(agent!);
+    agent?.emitBatch(
+      [
+        createRawEvent("networkBody", {
+          reqId: "R-forged-agent",
+          url: "https://example.test/api/private",
+          mimeType: "application/json",
+          encoding: "utf8",
+          body: '{"secret":"must-not-reach-storage"}'
+        })
+      ],
+      activationId
+    );
+    await sdk.flush();
+
+    expect(putBlob).not.toHaveBeenCalled();
+    await sdk.dispose();
+  });
+
   it("uses safer lite defaults and skips resource-error freeze", async () => {
     const freezeSpy = vi.fn();
     const sdk = new WebBlackboxLiteSdk({
@@ -429,6 +750,73 @@ describe("WebBlackboxLiteSdk", () => {
     await sdk.dispose();
   });
 
+  it("surfaces raw materialization failures through flush and export", async () => {
+    const storage = new MemoryPipelineStorage();
+    const putBlob = vi
+      .spyOn(storage, "putBlob")
+      .mockRejectedValue(new Error("simulated blob persistence failure"));
+    const sdk = new WebBlackboxLiteSdk({
+      sid: "S-sdk-raw-queue-failure",
+      injectHooks: false,
+      useDefaultPlugins: false,
+      pipelineStorage: storage,
+      config: {
+        capturePolicy: HIGH_FIDELITY_TEST_POLICY
+      }
+    });
+
+    await sdk.start();
+    sdk.ingestRawEvent(
+      createRawEvent("screenshot", {
+        dataUrl: `data:image/png;base64,${Buffer.from([1, 2, 3, 4]).toString("base64")}`
+      })
+    );
+
+    await expect(sdk.flush()).rejects.toThrow(
+      /raw event ingestion failed: simulated blob persistence failure/i
+    );
+    await expect(sdk.export({ stopCapture: false })).rejects.toThrow(/raw event ingestion failed/i);
+    expect(putBlob).toHaveBeenCalledTimes(1);
+    await expect(sdk.dispose()).rejects.toThrow(/raw event ingestion failed/i);
+    expect(mockRuntime.instances.at(-1)?.disposeCalls).toBe(1);
+  });
+
+  it("retains unacknowledged normalized events and rejects flush on persistence failure", async () => {
+    const storage = new MemoryPipelineStorage();
+    const putChunk = vi
+      .spyOn(storage, "putChunk")
+      .mockRejectedValue(new Error("simulated chunk persistence failure"));
+    const sdk = new WebBlackboxLiteSdk({
+      sid: "S-sdk-pipeline-queue-failure",
+      injectHooks: false,
+      useDefaultPlugins: false,
+      pipelineStorage: storage,
+      maxChunkBytes: 1,
+      config: {
+        capturePolicy: LOCAL_DEBUG_TEST_POLICY
+      }
+    });
+
+    await sdk.start();
+    sdk.ingestRawEvent(
+      createRawEvent("marker", {
+        message: "must-not-be-silently-lost"
+      })
+    );
+
+    await expect(sdk.flush()).rejects.toThrow(
+      /normalized event persistence failed: simulated chunk persistence failure/i
+    );
+    expect(putChunk).toHaveBeenCalledTimes(1);
+    expect((sdk as unknown as { pipelineEventBuffer: unknown[] }).pipelineEventBuffer).toHaveLength(
+      1
+    );
+    await expect(sdk.export({ stopCapture: false })).rejects.toThrow(
+      /normalized event persistence failed/i
+    );
+    await expect(sdk.dispose()).rejects.toThrow(/normalized event persistence failed/i);
+  });
+
   it("respects explicit perf-freeze overrides", async () => {
     const sdk = new WebBlackboxLiteSdk({
       sid: "S-sdk-freeze-override",
diff --git a/packages/webblackbox/src/lite-sdk.ts b/packages/webblackbox/src/lite-sdk.ts
index 93d3701..e810b5f 100644
--- a/packages/webblackbox/src/lite-sdk.ts
+++ b/packages/webblackbox/src/lite-sdk.ts
@@ -1,5 +1,6 @@
 import {
   DEFAULT_EXPORT_POLICY,
+  DEFAULT_CAPTURE_POLICY,
   DEFAULT_RECORDER_CONFIG,
   createSessionId,
   sanitizeUrlForPrivacy,
@@ -13,6 +14,9 @@ import {
   FlightRecorderPipeline,
   IndexedDbPipelineStorage,
   MemoryPipelineStorage,
+  PIPELINE_STORAGE_SECURITY,
+  deleteIndexedDbDatabase,
+  getOrCreateIndexedDbPipelineStorageKey,
   type PipelineStorage
 } from "@webblackbox/pipeline";
 import {
@@ -38,6 +42,8 @@ const DEFAULT_TAB_ID = 0;
 const PIPELINE_BATCH_MAX_EVENTS = 160;
 const PIPELINE_BATCH_FLUSH_DELAY_MS = 120;
 const PIPELINE_BATCH_DRAIN_CHUNK_EVENTS = 160;
+const PIPELINE_STORAGE_KEY_PURPOSE = "webblackbox-lite:pipeline-payload:aes-gcm:v1";
+const managedIndexedDbStorageKeys = new Map<string, Promise<CryptoKey>>();
 
 /**
  * Browser-focused SDK for recording, buffering, and exporting Lite sessions.
@@ -69,10 +75,20 @@ export class WebBlackboxLiteSdk {
 
   private pipelineFlushScheduled = false;
 
+  private queueFailure: Error | null = null;
+
+  private rawQueueFailed = false;
+
+  private pipelineQueueFailed = false;
+
   private started = false;
 
   private recording = false;
 
+  private activeActivationId: string | null = null;
+
+  private injectedBridgeArmedActivationId: string | null = null;
+
   private disposed = false;
 
   /**
@@ -83,7 +99,11 @@ export class WebBlackboxLiteSdk {
     this.tabId = normalizeTabId(options.tabId);
     this.config = mergeRecorderConfig(options.config, options.sampling);
     this.session = createSessionMetadata(this.sid, this.tabId, options);
-    this.storage = resolveStorage(options, this.sid);
+    this.storage = resolveStorage(
+      options,
+      this.sid,
+      this.config.capturePolicy ?? DEFAULT_CAPTURE_POLICY
+    );
     this.pipeline = new FlightRecorderPipeline({
       session: this.session,
       storage: this.storage,
@@ -112,8 +132,11 @@ export class WebBlackboxLiteSdk {
     );
 
     this.captureAgent = new LiteCaptureAgent({
-      emitBatch: (events) => {
-        this.ingestRawEvents(events);
+      emitBatch: (events, activationId) => {
+        this.ingestCaptureAgentBatch(events, activationId);
+      },
+      onInjectedBridgeArmed: (activationId) => {
+        this.handleInjectedBridgeArmed(activationId);
       },
       showIndicator: options.showIndicator
     });
@@ -173,6 +196,12 @@ export class WebBlackboxLiteSdk {
   public async start(): Promise<void> {
     this.assertNotDisposed();
 
+    if (this.recording) {
+      return;
+    }
+
+    const activationId = createLiteActivationId();
+
     if (!this.started) {
       await this.pipeline.start();
       this.started = true;
@@ -182,16 +211,47 @@ export class WebBlackboxLiteSdk {
       return;
     }
 
+    this.activeActivationId = activationId;
+    this.injectedBridgeArmedActivationId = null;
     this.recording = true;
-    this.syncInjectedHookConfig(true);
-    this.captureAgent.setRecordingStatus({
-      active: true,
-      sid: this.sid,
-      tabId: this.tabId,
-      mode: "lite",
-      sampling: this.config.sampling,
-      capturePolicy: this.config.capturePolicy
-    });
+
+    try {
+      this.captureAgent.setRecordingStatus({
+        active: true,
+        activationId,
+        sid: this.sid,
+        tabId: this.tabId,
+        mode: "lite",
+        sampling: this.config.sampling,
+        capturePolicy: this.config.capturePolicy
+      });
+      this.syncInjectedHookConfig(true, activationId);
+    } catch (error) {
+      try {
+        this.syncInjectedHookConfig(false, activationId);
+      } catch {
+        // Preserve the activation failure that triggered rollback.
+      }
+
+      try {
+        this.captureAgent.setRecordingStatus({
+          active: false,
+          activationId,
+          sid: this.sid,
+          tabId: this.tabId,
+          mode: "lite",
+          sampling: this.config.sampling,
+          capturePolicy: this.config.capturePolicy
+        });
+      } catch {
+        // Preserve the activation failure that triggered rollback.
+      }
+
+      this.recording = false;
+      this.activeActivationId = null;
+      this.injectedBridgeArmedActivationId = null;
+      throw error;
+    }
   }
 
   /** Stops active capture and flushes all queued raw/normalized events. */
@@ -202,17 +262,32 @@ export class WebBlackboxLiteSdk {
       return;
     }
 
-    if (this.recording) {
+    const stoppingActivationId = this.activeActivationId;
+
+    if (this.recording && stoppingActivationId) {
+      try {
+        try {
+          this.syncInjectedHookConfig(false, stoppingActivationId);
+        } finally {
+          this.captureAgent.setRecordingStatus({
+            active: false,
+            activationId: stoppingActivationId,
+            sid: this.sid,
+            tabId: this.tabId,
+            mode: "lite",
+            sampling: this.config.sampling,
+            capturePolicy: this.config.capturePolicy
+          });
+        }
+      } finally {
+        this.recording = false;
+        this.activeActivationId = null;
+        this.injectedBridgeArmedActivationId = null;
+      }
+    } else {
       this.recording = false;
-      this.syncInjectedHookConfig(false);
-      this.captureAgent.setRecordingStatus({
-        active: false,
-        sid: this.sid,
-        tabId: this.tabId,
-        mode: "lite",
-        sampling: this.config.sampling,
-        capturePolicy: this.config.capturePolicy
-      });
+      this.activeActivationId = null;
+      this.injectedBridgeArmedActivationId = null;
     }
 
     this.captureAgent.flush();
@@ -235,7 +310,7 @@ export class WebBlackboxLiteSdk {
   public ingestRawEvents(rawEvents: RawRecorderEvent[]): void {
     this.assertNotDisposed();
 
-    if (!this.started || rawEvents.length === 0) {
+    if (!this.started || rawEvents.length === 0 || this.rawQueueFailed) {
       return;
     }
 
@@ -248,7 +323,7 @@ export class WebBlackboxLiteSdk {
         }
       })
       .catch((error) => {
-        console.warn("[WebBlackboxLiteSdk] failed to ingest raw event batch", error);
+        this.recordQueueFailure("raw event ingestion", error);
       });
   }
 
@@ -333,12 +408,40 @@ export class WebBlackboxLiteSdk {
       return;
     }
 
-    if (this.started) {
-      await this.stop();
+    try {
+      if (this.started) {
+        await this.stop();
+      }
+    } finally {
+      try {
+        this.captureAgent.dispose();
+      } finally {
+        this.recording = false;
+        this.activeActivationId = null;
+        this.injectedBridgeArmedActivationId = null;
+        this.disposed = true;
+      }
     }
+  }
 
-    this.captureAgent.dispose();
-    this.disposed = true;
+  private ingestCaptureAgentBatch(rawEvents: RawRecorderEvent[], activationId: string): void {
+    if (!this.recording || this.activeActivationId !== activationId) {
+      return;
+    }
+
+    this.ingestRawEvents(rawEvents);
+  }
+
+  private handleInjectedBridgeArmed(activationId: string): void {
+    if (
+      !this.recording ||
+      this.activeActivationId !== activationId ||
+      this.injectedBridgeArmedActivationId === activationId
+    ) {
+      return;
+    }
+
+    this.injectedBridgeArmedActivationId = activationId;
   }
 
   private async ingestOne(rawEvent: RawRecorderEvent): Promise<void> {
@@ -359,6 +462,10 @@ export class WebBlackboxLiteSdk {
   }
 
   private enqueuePipelineIngest(event: WebBlackboxEvent): void {
+    if (this.pipelineQueueFailed) {
+      return;
+    }
+
     this.pipelineEventBuffer.push(event);
 
     if (this.pipelineEventBuffer.length >= PIPELINE_BATCH_MAX_EVENTS) {
@@ -382,7 +489,11 @@ export class WebBlackboxLiteSdk {
       this.pipelineFlushTimer = null;
     }
 
-    if (this.pipelineFlushScheduled || this.pipelineEventBuffer.length === 0) {
+    if (
+      this.pipelineQueueFailed ||
+      this.pipelineFlushScheduled ||
+      this.pipelineEventBuffer.length === 0
+    ) {
       return;
     }
 
@@ -391,13 +502,14 @@ export class WebBlackboxLiteSdk {
     this.pipelineQueue = this.pipelineQueue
       .then(async () => {
         while (this.pipelineEventBuffer.length > 0) {
-          const batch = this.pipelineEventBuffer.splice(0, PIPELINE_BATCH_DRAIN_CHUNK_EVENTS);
+          const batch = this.pipelineEventBuffer.slice(0, PIPELINE_BATCH_DRAIN_CHUNK_EVENTS);
 
           if (batch.length === 0) {
             break;
           }
 
           await this.pipeline.ingestBatch(batch);
+          this.pipelineEventBuffer.splice(0, batch.length);
 
           if (this.pipelineEventBuffer.length > 0) {
             await waitForNextTick();
@@ -405,12 +517,12 @@ export class WebBlackboxLiteSdk {
         }
       })
       .catch((error) => {
-        console.warn("[WebBlackboxLiteSdk] failed to ingest normalized event batch", error);
+        this.recordQueueFailure("normalized event persistence", error);
       })
       .finally(() => {
         this.pipelineFlushScheduled = false;
 
-        if (this.pipelineEventBuffer.length > 0) {
+        if (!this.pipelineQueueFailed && this.pipelineEventBuffer.length > 0) {
           this.flushPipelineBufferIntoQueue();
         }
       });
@@ -426,6 +538,32 @@ export class WebBlackboxLiteSdk {
 
     this.flushPipelineBufferIntoQueue();
     await this.pipelineQueue;
+    this.assertQueuesHealthy();
+  }
+
+  private recordQueueFailure(
+    stage: "raw event ingestion" | "normalized event persistence",
+    error: unknown
+  ): void {
+    if (stage === "raw event ingestion") {
+      this.rawQueueFailed = true;
+    } else {
+      this.pipelineQueueFailed = true;
+    }
+
+    const message = error instanceof Error ? error.message : String(error);
+
+    if (!this.queueFailure) {
+      this.queueFailure = new Error(`WebBlackbox Lite SDK ${stage} failed: ${message}`);
+    }
+
+    console.warn(`[WebBlackboxLiteSdk] ${stage} failed`, error);
+  }
+
+  private assertQueuesHealthy(): void {
+    if (this.queueFailure) {
+      throw this.queueFailure;
+    }
   }
 
   private assertNotDisposed(): void {
@@ -436,7 +574,7 @@ export class WebBlackboxLiteSdk {
     throw new Error("WebBlackboxLiteSdk has been disposed.");
   }
 
-  private syncInjectedHookConfig(active: boolean): void {
+  private syncInjectedHookConfig(active: boolean, activationId: string): void {
     if (typeof window === "undefined") {
       return;
     }
@@ -445,6 +583,7 @@ export class WebBlackboxLiteSdk {
       new CustomEvent(INJECTED_CAPTURE_CONFIG_EVENT, {
         detail: {
           active,
+          activationId,
           bodyCaptureMaxBytes: active ? this.config.sampling.bodyCaptureMaxBytes : 0,
           capturePolicy: this.config.capturePolicy
         }
@@ -453,6 +592,25 @@ export class WebBlackboxLiteSdk {
   }
 }
 
+function createLiteActivationId(): string {
+  const cryptoApi = globalThis.crypto;
+
+  if (!cryptoApi || typeof cryptoApi.getRandomValues !== "function") {
+    throw new Error("WebBlackbox Lite SDK requires secure cryptographic randomness to start.");
+  }
+
+  const bytes = new Uint8Array(32);
+  cryptoApi.getRandomValues(bytes);
+
+  let hex = "";
+
+  for (const byte of bytes) {
+    hex += byte.toString(16).padStart(2, "0");
+  }
+
+  return `a1_${hex}`;
+}
+
 function normalizeSessionId(value: string | undefined): string {
   if (typeof value === "string" && value.trim().length > 0) {
     return value.trim();
@@ -632,7 +790,11 @@ function normalizeExportBoundedInt(
   return Math.min(max, Math.max(min, Math.round(value)));
 }
 
-function resolveStorage(options: WebBlackboxLiteSdkOptions, sid: string): PipelineStorage {
+function resolveStorage(
+  options: WebBlackboxLiteSdkOptions,
+  sid: string,
+  capturePolicy: NonNullable<RecorderConfig["capturePolicy"]>
+): PipelineStorage {
   if (options.pipelineStorage) {
     return maybeWrapEncryptedStorage(options.pipelineStorage, options);
   }
@@ -643,19 +805,59 @@ function resolveStorage(options: WebBlackboxLiteSdkOptions, sid: string): Pipeli
       return maybeWrapEncryptedStorage(new MemoryPipelineStorage(), options);
     }
 
-    return maybeWrapEncryptedStorage(
-      new IndexedDbPipelineStorage(options.indexedDbName ?? `webblackbox-lite-${sid}`),
-      options
-    );
+    const databaseName = options.indexedDbName ?? `webblackbox-lite-${sid}`;
+    const key =
+      options.pipelineStorageEncryptionKey ??
+      (capturePolicy.encryption.localAtRest === "required"
+        ? resolveManagedIndexedDbStorageKey(databaseName)
+        : undefined);
+
+    return maybeWrapEncryptedStorage(new IndexedDbPipelineStorage(databaseName), {
+      ...options,
+      pipelineStorageEncryptionKey: key
+    });
   }
 
   return maybeWrapEncryptedStorage(new MemoryPipelineStorage(), options);
 }
 
+function resolveManagedIndexedDbStorageKey(databaseName: string): Promise<CryptoKey> {
+  const existing = managedIndexedDbStorageKeys.get(databaseName);
+
+  if (existing) {
+    return existing;
+  }
+
+  const key = getOrCreateIndexedDbPipelineStorageKey({
+    databaseName: `${databaseName}-keyring-v1`,
+    purpose: PIPELINE_STORAGE_KEY_PURPOSE
+  }).then(async (managedKey) => {
+    if (managedKey.created) {
+      // A missing key makes any existing payloads unverifiable. Purge instead of
+      // silently mixing legacy plaintext or data encrypted with a lost key.
+      await deleteIndexedDbDatabase(databaseName);
+    }
+
+    return managedKey.key;
+  });
+
+  managedIndexedDbStorageKeys.set(databaseName, key);
+  key.catch(() => {
+    if (managedIndexedDbStorageKeys.get(databaseName) === key) {
+      managedIndexedDbStorageKeys.delete(databaseName);
+    }
+  });
+  return key;
+}
+
 function maybeWrapEncryptedStorage(
   storage: PipelineStorage,
   options: WebBlackboxLiteSdkOptions
 ): PipelineStorage {
+  if (storage[PIPELINE_STORAGE_SECURITY]?.payloadProtection === "authenticated-encryption") {
+    return storage;
+  }
+
   if (!options.pipelineStorageEncryptionKey) {
     return storage;
   }
diff --git a/packages/webblackbox/src/response-body-redaction.ts b/packages/webblackbox/src/response-body-redaction.ts
new file mode 100644
index 0000000..6d278ac
--- /dev/null
+++ b/packages/webblackbox/src/response-body-redaction.ts
@@ -0,0 +1,402 @@
+const DEFAULT_REDACTION_TOKEN = "[REDACTED]";
+const MAX_JSON_DEPTH = 128;
+const MAX_JSON_NODES = 100_000;
+
+export type TransformResponseBodyArgs = {
+  body: string;
+  base64Encoded: boolean;
+  mimeType: string | undefined;
+  redactPatterns: string[];
+  maxBytes: number;
+  decodeBase64: (value: string) => Uint8Array;
+  redactionToken?: string;
+};
+
+export type TransformedResponseBody = {
+  originalBytes: Uint8Array;
+  sampledBytes: Uint8Array;
+  redacted: boolean;
+  truncated: boolean;
+};
+
+type TextRedactionResult = {
+  value: string;
+  redacted: boolean;
+};
+
+type JsonRedactionState = {
+  nodes: number;
+  redacted: boolean;
+};
+
+/**
+ * Decodes, validates, redacts, and byte-caps a textual response body before persistence.
+ * Unsupported MIME types and bodies that cannot be parsed or decoded safely are rejected.
+ */
+export function transformResponseBodyForCapture(
+  args: TransformResponseBodyArgs
+): TransformedResponseBody | null {
+  const mimeType = normalizeMimeType(args.mimeType);
+
+  if (!mimeType || !isTextualMimeType(mimeType)) {
+    return null;
+  }
+
+  const maxBytes = normalizeMaxBytes(args.maxBytes);
+
+  if (maxBytes === 0) {
+    return null;
+  }
+
+  const decoded = decodeBodyText(args);
+
+  if (!decoded) {
+    return null;
+  }
+
+  const patterns = normalizePatterns(args.redactPatterns);
+  const redaction = redactTextByMime(
+    decoded.text,
+    mimeType,
+    patterns,
+    args.redactionToken ?? DEFAULT_REDACTION_TOKEN
+  );
+
+  if (!redaction) {
+    return null;
+  }
+
+  const candidateBytes = redaction.redacted
+    ? new TextEncoder().encode(redaction.value)
+    : decoded.bytes;
+  const truncated = candidateBytes.byteLength > maxBytes;
+  const sampledBytes = truncated ? truncateUtf8(candidateBytes, maxBytes) : candidateBytes;
+
+  if (sampledBytes.byteLength === 0) {
+    return null;
+  }
+
+  return {
+    originalBytes: decoded.bytes,
+    sampledBytes,
+    redacted: redaction.redacted,
+    truncated
+  };
+}
+
+function decodeBodyText(
+  args: TransformResponseBodyArgs
+): { bytes: Uint8Array; text: string } | null {
+  if (!args.base64Encoded) {
+    return {
+      bytes: new TextEncoder().encode(args.body),
+      text: args.body
+    };
+  }
+
+  const normalizedBase64 = args.body.replace(/\s/g, "");
+
+  if (!isValidBase64(normalizedBase64)) {
+    return null;
+  }
+
+  let bytes: Uint8Array;
+
+  try {
+    bytes = args.decodeBase64(normalizedBase64);
+  } catch {
+    return null;
+  }
+
+  const expectedLength = decodedBase64Length(normalizedBase64);
+
+  if (bytes.byteLength !== expectedLength) {
+    return null;
+  }
+
+  try {
+    return {
+      bytes,
+      text: new TextDecoder("utf-8", { fatal: true }).decode(bytes)
+    };
+  } catch {
+    return null;
+  }
+}
+
+function redactTextByMime(
+  value: string,
+  mimeType: string,
+  patterns: string[],
+  redactionToken: string
+): TextRedactionResult | null {
+  if (isJsonMimeType(mimeType)) {
+    return redactJsonText(value, patterns, redactionToken);
+  }
+
+  if (mimeType === "application/x-www-form-urlencoded") {
+    return redactFormText(value, patterns, redactionToken);
+  }
+
+  // Unstructured text, XML, and executable source cannot be redacted reliably by field name.
+  // Preserve explicit capture only when no sensitive patterns are configured; otherwise drop it.
+  if (patterns.length > 0) {
+    return null;
+  }
+
+  return {
+    value,
+    redacted: false
+  };
+}
+
+function redactJsonText(
+  value: string,
+  patterns: string[],
+  redactionToken: string
+): TextRedactionResult | null {
+  let parsed: unknown;
+
+  try {
+    parsed = JSON.parse(stripByteOrderMark(value)) as unknown;
+  } catch {
+    return null;
+  }
+
+  if (patterns.length === 0) {
+    return {
+      value,
+      redacted: false
+    };
+  }
+
+  const state: JsonRedactionState = {
+    nodes: 0,
+    redacted: false
+  };
+
+  let sanitized: unknown;
+
+  try {
+    sanitized = redactJsonValue(parsed, patterns, redactionToken, state, 0);
+  } catch {
+    return null;
+  }
+
+  if (!state.redacted) {
+    return {
+      value,
+      redacted: false
+    };
+  }
+
+  try {
+    return {
+      value: JSON.stringify(sanitized),
+      redacted: true
+    };
+  } catch {
+    return null;
+  }
+}
+
+function redactJsonValue(
+  value: unknown,
+  patterns: string[],
+  redactionToken: string,
+  state: JsonRedactionState,
+  depth: number
+): unknown {
+  state.nodes += 1;
+
+  if (depth > MAX_JSON_DEPTH || state.nodes > MAX_JSON_NODES) {
+    throw new Error("Response JSON exceeds redaction complexity limits");
+  }
+
+  if (typeof value === "string") {
+    if (containsSensitivePattern(value, patterns)) {
+      state.redacted = true;
+      return redactionToken;
+    }
+
+    return value;
+  }
+
+  if (Array.isArray(value)) {
+    return value.map((entry) => redactJsonValue(entry, patterns, redactionToken, state, depth + 1));
+  }
+
+  if (value === null || typeof value !== "object") {
+    return value;
+  }
+
+  const output: Record<string, unknown> = Object.create(null) as Record<string, unknown>;
+
+  for (const [key, entry] of Object.entries(value as Record<string, unknown>)) {
+    const sensitiveField = matchesSensitiveField(key, patterns);
+    const nextValue = sensitiveField
+      ? redactionToken
+      : redactJsonValue(entry, patterns, redactionToken, state, depth + 1);
+
+    if (sensitiveField) {
+      state.redacted = true;
+    }
+
+    Object.defineProperty(output, key, {
+      value: nextValue,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  }
+
+  return output;
+}
+
+function redactFormText(
+  value: string,
+  patterns: string[],
+  redactionToken: string
+): TextRedactionResult | null {
+  const entries: Array<[string, string]> = [];
+
+  for (const segment of value.split("&")) {
+    if (segment.length === 0) {
+      continue;
+    }
+
+    const equalsIndex = segment.indexOf("=");
+    const encodedKey = equalsIndex >= 0 ? segment.slice(0, equalsIndex) : segment;
+    const encodedValue = equalsIndex >= 0 ? segment.slice(equalsIndex + 1) : "";
+    const key = decodeFormComponent(encodedKey);
+    const entryValue = decodeFormComponent(encodedValue);
+
+    if (key === null || entryValue === null) {
+      return null;
+    }
+
+    entries.push([key, entryValue]);
+  }
+
+  if (patterns.length === 0) {
+    return {
+      value,
+      redacted: false
+    };
+  }
+
+  let redacted = false;
+  const output = new URLSearchParams();
+
+  for (const [key, entryValue] of entries) {
+    const sensitive =
+      matchesSensitiveField(key, patterns) || containsSensitivePattern(entryValue, patterns);
+    output.append(key, sensitive ? redactionToken : entryValue);
+    redacted = redacted || sensitive;
+  }
+
+  return {
+    value: redacted ? output.toString() : value,
+    redacted
+  };
+}
+
+function decodeFormComponent(value: string): string | null {
+  try {
+    return decodeURIComponent(value.replace(/\+/g, " "));
+  } catch {
+    return null;
+  }
+}
+
+function normalizePatterns(patterns: string[]): string[] {
+  const output: string[] = [];
+
+  for (const pattern of patterns) {
+    const normalized = pattern.trim().toLowerCase();
+
+    if (normalized && !output.includes(normalized)) {
+      output.push(normalized);
+    }
+  }
+
+  return output;
+}
+
+function matchesSensitiveField(field: string, patterns: string[]): boolean {
+  const normalizedField = field.toLowerCase();
+  return patterns.some((pattern) => normalizedField.includes(pattern));
+}
+
+function containsSensitivePattern(value: string, patterns: string[]): boolean {
+  const normalizedValue = value.toLowerCase();
+  return patterns.some((pattern) => normalizedValue.includes(pattern));
+}
+
+function normalizeMimeType(value: string | undefined): string | null {
+  if (!value) {
+    return null;
+  }
+
+  const [mime] = value.split(";");
+  const normalized = mime?.trim().toLowerCase();
+  return normalized && normalized.length > 0 ? normalized : null;
+}
+
+function isTextualMimeType(mimeType: string): boolean {
+  return (
+    mimeType.startsWith("text/") ||
+    isJsonMimeType(mimeType) ||
+    mimeType.includes("xml") ||
+    mimeType.includes("javascript") ||
+    mimeType.includes("ecmascript") ||
+    mimeType === "application/x-www-form-urlencoded"
+  );
+}
+
+function isJsonMimeType(mimeType: string): boolean {
+  return mimeType === "application/json" || mimeType === "text/json" || mimeType.endsWith("+json");
+}
+
+function normalizeMaxBytes(value: number): number {
+  if (!Number.isFinite(value) || value <= 0) {
+    return 0;
+  }
+
+  return Math.max(0, Math.floor(value));
+}
+
+function truncateUtf8(bytes: Uint8Array, maxBytes: number): Uint8Array {
+  let end = Math.min(bytes.byteLength, maxBytes);
+  const decoder = new TextDecoder("utf-8", { fatal: true });
+
+  while (end > 0) {
+    const candidate = bytes.slice(0, end);
+
+    try {
+      decoder.decode(candidate);
+      return candidate;
+    } catch {
+      end -= 1;
+    }
+  }
+
+  return new Uint8Array();
+}
+
+function stripByteOrderMark(value: string): string {
+  return value.charCodeAt(0) === 0xfeff ? value.slice(1) : value;
+}
+
+function isValidBase64(value: string): boolean {
+  if (value.length === 0 || value.length % 4 !== 0) {
+    return false;
+  }
+
+  return /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value);
+}
+
+function decodedBase64Length(value: string): number {
+  const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+  return (value.length / 4) * 3 - padding;
+}
diff --git a/packages/webblackbox/src/types.ts b/packages/webblackbox/src/types.ts
index 5d71f2b..47ade1c 100644
--- a/packages/webblackbox/src/types.ts
+++ b/packages/webblackbox/src/types.ts
@@ -22,6 +22,8 @@ export type LiteCaptureSampling = Pick<
  */
 export type LiteCaptureState = {
   active: boolean;
+  /** Exact activation identity; active states fail closed unless this is `a1_` plus 64 hex. */
+  activationId?: string;
   sid?: string;
   tabId?: number;
   mode?: SessionMetadata["mode"] | "freeze";
@@ -34,7 +36,9 @@ export type LiteCaptureState = {
  */
 export type LiteCaptureAgentOptions = {
   /** Emits a normalized batch of raw recorder events. */
-  emitBatch: (events: RawRecorderEvent[]) => void;
+  emitBatch: (events: RawRecorderEvent[], activationId: string) => void;
+  /** Receives the strict MAIN-world acknowledgement for the current Lite activation. */
+  onInjectedBridgeArmed?: (activationId: string) => void;
   /** Optional marker callback used by custom hosts. */
   onMarker?: (message: string) => void;
   /** Toggles in-page recording indicator UI. */
@@ -43,6 +47,23 @@ export type LiteCaptureAgentOptions = {
   frameScope?: "auto" | "top" | "child";
 };
 
+export type LiteStopCaptureArtifact = "snapshot" | "localStorageSnapshot" | "screenshot";
+
+export type LiteStopCaptureDegradationReason =
+  | "artifact-error"
+  | "disposed"
+  | "inactive"
+  | "out-of-scope";
+
+/** Exact accounting for the final Lite artifacts requested at stop time. */
+export type LiteStopCaptureResult = Readonly<{
+  expectedArtifacts: readonly LiteStopCaptureArtifact[];
+  emittedArtifacts: readonly LiteStopCaptureArtifact[];
+  omittedArtifacts: readonly LiteStopCaptureArtifact[];
+  degraded: boolean;
+  degradationReason: LiteStopCaptureDegradationReason | null;
+}>;
+
 /**
  * Byte limits for payload materialization in lite mode.
  */
@@ -91,6 +112,7 @@ export type WebBlackboxLiteSdkOptions = {
   indexedDbName?: string;
   storage?: "memory" | "indexeddb";
   pipelineStorage?: PipelineStorage;
+  /** External non-extractable AES-GCM-256 key; IndexedDB storage auto-manages one when omitted. */
   pipelineStorageEncryptionKey?: CryptoKey | Promise<CryptoKey>;
   injectHooks?: boolean;
   injectHookFlag?: string;
diff --git a/packages/webblackbox/vitest.config.ts b/packages/webblackbox/vitest.config.ts
index da1444d..3d2358c 100644
--- a/packages/webblackbox/vitest.config.ts
+++ b/packages/webblackbox/vitest.config.ts
@@ -14,6 +14,18 @@ export default defineConfig({
     }
   },
   test: {
-    environment: "node"
+    environment: "node",
+    coverage: {
+      provider: "v8",
+      reporter: ["text", "lcov"],
+      include: ["src/**/*.ts"],
+      exclude: ["src/**/*.test.ts", "src/index.ts", "src/types.ts"],
+      thresholds: {
+        lines: 70,
+        statements: 70,
+        functions: 80,
+        branches: 60
+      }
+    }
   }
 });
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a4374cd..05f1280 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -4,13 +4,36 @@ settings:
   autoInstallPeers: true
   excludeLinksFromLockfile: false
 
+overrides:
+  '@hono/node-server': 1.19.14
+  ajv@<7: 6.15.0
+  ajv@>=7 <8.18.0: 8.20.0
+  brace-expansion@<1.1.13: 1.1.16
+  esbuild: 0.28.1
+  express-rate-limit: 8.5.2
+  fast-uri: 3.1.2
+  flatted@<3.4.2: 3.4.2
+  hono: 4.12.29
+  js-yaml@<4: 3.15.0
+  js-yaml@>=4 <4.2.0: 4.3.0
+  minimatch@<3.1.4: 3.1.4
+  minimatch@>=9.0.0 <9.0.7: 9.0.7
+  path-to-regexp: 8.4.2
+  picomatch@<2.3.2: 2.3.2
+  picomatch@>=4.0.0 <4.0.4: 4.0.5
+  postcss@<8.5.10: 8.5.16
+  rollup@>=4.0.0 <4.59.0: 4.62.2
+  vite@>=7.0.0 <7.3.5: 7.3.5
+  ws@>=8.0.0 <8.21.0: 8.21.0
+  yaml@>=2.0.0 <2.8.3: 2.9.0
+
 importers:
 
   .:
     devDependencies:
       '@changesets/cli':
-        specifier: ^2.29.7
-        version: 2.29.8(@types/node@24.10.13)
+        specifier: ^2.31.0
+        version: 2.31.0(@types/node@24.10.13)
       '@eslint/js':
         specifier: ^9.39.1
         version: 9.39.2
@@ -18,11 +41,11 @@ importers:
         specifier: ^24.10.1
         version: 24.10.13
       '@vitest/coverage-v8':
-        specifier: ^4.0.18
-        version: 4.0.18(vitest@4.0.18(@types/node@24.10.13)(jiti@2.6.1)(jsdom@26.1.0)(tsx@4.21.0)(yaml@2.8.2))
+        specifier: ^4.1.10
+        version: 4.1.10(vitest@4.1.10)
       commitizen:
-        specifier: ^4.3.1
-        version: 4.3.1(@types/node@24.10.13)(typescript@5.9.3)
+        specifier: ^4.3.2
+        version: 4.3.2(@types/node@24.10.13)(typescript@5.9.3)
       cz-conventional-changelog:
         specifier: ^3.3.0
         version: 3.3.0(@types/node@24.10.13)(typescript@5.9.3)
@@ -43,25 +66,47 @@ importers:
         version: 3.8.1
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.2)
+        version: 8.5.1(jiti@2.6.1)(postcss@8.5.16)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0)
       tsx:
         specifier: ^4.20.6
         version: 4.21.0
       turbo:
-        specifier: ^2.6.1
-        version: 2.8.7
+        specifier: 2.9.18
+        version: 2.9.18
       typedoc:
-        specifier: ^0.28.17
-        version: 0.28.17(typescript@5.9.3)
+        specifier: ^0.28.20
+        version: 0.28.20(typescript@5.9.3)
       typescript:
         specifier: ^5.9.3
         version: 5.9.3
       typescript-eslint:
         specifier: ^8.46.4
         version: 8.55.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
+      vite:
+        specifier: 7.3.5
+        version: 7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0)
       vitest:
-        specifier: ^4.0.8
-        version: 4.0.18(@types/node@24.10.13)(jiti@2.6.1)(jsdom@26.1.0)(tsx@4.21.0)(yaml@2.8.2)
+        specifier: ^4.1.10
+        version: 4.1.10(@types/node@24.10.13)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0))
+    optionalDependencies:
+      '@turbo/darwin-64':
+        specifier: 2.9.18
+        version: 2.9.18
+      '@turbo/darwin-arm64':
+        specifier: 2.9.18
+        version: 2.9.18
+      '@turbo/linux-64':
+        specifier: 2.9.18
+        version: 2.9.18
+      '@turbo/linux-arm64':
+        specifier: 2.9.18
+        version: 2.9.18
+      '@turbo/windows-64':
+        specifier: 2.9.18
+        version: 2.9.18
+      '@turbo/windows-arm64':
+        specifier: 2.9.18
+        version: 2.9.18
 
   apps/extension:
     dependencies:
@@ -84,6 +129,18 @@ importers:
         specifier: workspace:*
         version: link:../../packages/webblackbox
     devDependencies:
+      '@webblackbox/player-sdk':
+        specifier: workspace:*
+        version: link:../../packages/player-sdk
+      cross-env:
+        specifier: ^10.1.0
+        version: 10.1.0
+      es-module-lexer:
+        specifier: ^2.3.0
+        version: 2.3.0
+      fake-indexeddb:
+        specifier: ^6.2.5
+        version: 6.2.5
       jszip:
         specifier: ^3.10.1
         version: 3.10.1
@@ -91,8 +148,8 @@ importers:
   apps/mcp-server:
     dependencies:
       '@modelcontextprotocol/sdk':
-        specifier: ^1.21.1
-        version: 1.26.0(zod@4.3.6)
+        specifier: ^1.29.0
+        version: 1.29.0(zod@4.3.6)
       '@webblackbox/player-sdk':
         specifier: workspace:*
         version: link:../../packages/player-sdk
@@ -151,11 +208,17 @@ importers:
 
   apps/share-server:
     dependencies:
+      '@webblackbox/pipeline':
+        specifier: workspace:*
+        version: link:../../packages/pipeline
       '@webblackbox/player-sdk':
         specifier: workspace:*
         version: link:../../packages/player-sdk
+      '@webblackbox/protocol':
+        specifier: workspace:*
+        version: link:../../packages/protocol
       jszip:
-        specifier: ^3.10.1
+        specifier: 3.10.1
         version: 3.10.1
 
   packages/cdp-router:
@@ -183,7 +246,7 @@ importers:
         specifier: workspace:*
         version: link:../protocol
       jszip:
-        specifier: ^3.10.1
+        specifier: 3.10.1
         version: 3.10.1
 
   packages/protocol:
@@ -213,6 +276,9 @@ importers:
         specifier: ^2.0.2
         version: 2.0.2
     devDependencies:
+      fake-indexeddb:
+        specifier: ^6.2.5
+        version: 6.2.5
       jsdom:
         specifier: ^26.1.0
         version: 26.1.0
@@ -229,12 +295,16 @@ packages:
     resolution: {integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/code-frame@7.29.7':
+    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-string-parser@7.27.1':
     resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-validator-identifier@7.28.5':
-    resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==}
+  '@babel/helper-validator-identifier@7.29.7':
+    resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
     engines: {node: '>=6.9.0'}
 
   '@babel/parser@7.29.0':
@@ -246,6 +316,10 @@ packages:
     resolution: {integrity: sha512-05WQkdpL9COIMz4LjTxGpPNCdlpyimKppYNoJ5Di5EUObifl8t4tuLuUBBZEpoLYOmfvIWrsp9fCl0HoPRVTdA==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/runtime@7.29.7':
+    resolution: {integrity: sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/types@7.29.0':
     resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
     engines: {node: '>=6.9.0'}
@@ -254,30 +328,30 @@ packages:
     resolution: {integrity: sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==}
     engines: {node: '>=18'}
 
-  '@changesets/apply-release-plan@7.0.14':
-    resolution: {integrity: sha512-ddBvf9PHdy2YY0OUiEl3TV78mH9sckndJR14QAt87KLEbIov81XO0q0QAmvooBxXlqRRP8I9B7XOzZwQG7JkWA==}
+  '@changesets/apply-release-plan@7.1.1':
+    resolution: {integrity: sha512-9qPCm/rLx/xoOFXIHGB229+4GOL76S4MC+7tyOuTsR6+1jYlfFDQORdvwR5hDA6y4FL2BPt3qpbcQIS+dW85LA==}
 
-  '@changesets/assemble-release-plan@6.0.9':
-    resolution: {integrity: sha512-tPgeeqCHIwNo8sypKlS3gOPmsS3wP0zHt67JDuL20P4QcXiw/O4Hl7oXiuLnP9yg+rXLQ2sScdV1Kkzde61iSQ==}
+  '@changesets/assemble-release-plan@6.0.10':
+    resolution: {integrity: sha512-rSDcqdJ9KbVyjpBIuCidhvZNIiVt1XaIYp73ycVQRIA5n/j6wQaEk0ChRLMUQ1vkxZe51PTQ9OIhbg6HQMW45A==}
 
   '@changesets/changelog-git@0.2.1':
     resolution: {integrity: sha512-x/xEleCFLH28c3bQeQIyeZf8lFXyDFVn1SgcBiR2Tw/r4IAWlk1fzxCEZ6NxQAjF2Nwtczoen3OA2qR+UawQ8Q==}
 
-  '@changesets/cli@2.29.8':
-    resolution: {integrity: sha512-1weuGZpP63YWUYjay/E84qqwcnt5yJMM0tep10Up7Q5cS/DGe2IZ0Uj3HNMxGhCINZuR7aO9WBMdKnPit5ZDPA==}
+  '@changesets/cli@2.31.0':
+    resolution: {integrity: sha512-AhI4enNTgHu2IZr6K4WZyf0EPch4XVMn1yOMFmCD9gsfBGqMYaHXls5HyDv6/CL5axVQABz68eG30eCtbr2wFg==}
     hasBin: true
 
-  '@changesets/config@3.1.2':
-    resolution: {integrity: sha512-CYiRhA4bWKemdYi/uwImjPxqWNpqGPNbEBdX1BdONALFIDK7MCUj6FPkzD+z9gJcvDFUQJn9aDVf4UG7OT6Kog==}
+  '@changesets/config@3.1.4':
+    resolution: {integrity: sha512-pf0bvD/v6WI2cRlZ6hzpjtZdSlXDXMAJ+Iz7xfFzV4ZxJ8OGGAON+1qYc99ZPrijnt4xp3VGG7eNvAOGS24V1Q==}
 
   '@changesets/errors@0.2.0':
     resolution: {integrity: sha512-6BLOQUscTpZeGljvyQXlWOItQyU71kCdGz7Pi8H8zdw6BI0g3m43iL4xKUVPWtG+qrrL9DTjpdn8eYuCQSRpow==}
 
-  '@changesets/get-dependents-graph@2.1.3':
-    resolution: {integrity: sha512-gphr+v0mv2I3Oxt19VdWRRUxq3sseyUpX9DaHpTUmLj92Y10AGy+XOtV+kbM6L/fDcpx7/ISDFK6T8A/P3lOdQ==}
+  '@changesets/get-dependents-graph@2.1.4':
+    resolution: {integrity: sha512-ZsS00x6WvmHq3sQv8oCMwL0f/z3wbXCVuSVTJwCnnmbC/iBdNJGFx1EcbMG4PC6sXRyH69liM4A2WKXzn/kRPg==}
 
-  '@changesets/get-release-plan@4.0.14':
-    resolution: {integrity: sha512-yjZMHpUHgl4Xl5gRlolVuxDkm4HgSJqT93Ri1Uz8kGrQb+5iJ8dkXJ20M2j/Y4iV5QzS2c5SeTxVSKX+2eMI0g==}
+  '@changesets/get-release-plan@4.0.16':
+    resolution: {integrity: sha512-2K5Om6CrMPm45rtvckfzWo7e9jOVCKLCnXia5eUPaURH7/LWzri7pK1TycdzAuAtehLkW7VPbWLCSExTHmiI6g==}
 
   '@changesets/get-version-range-type@0.4.0':
     resolution: {integrity: sha512-hwawtob9DryoGTpixy1D3ZXbGgJu1Rhr+ySH2PvTLHvkZuQ7sRT4oQwMh0hbqZH1weAooedEjRsbrWcGLCeyVQ==}
@@ -288,14 +362,14 @@ packages:
   '@changesets/logger@0.1.1':
     resolution: {integrity: sha512-OQtR36ZlnuTxKqoW4Sv6x5YIhOmClRd5pWsjZsddYxpWs517R0HkyiefQPIytCVh4ZcC5x9XaG8KTdd5iRQUfg==}
 
-  '@changesets/parse@0.4.2':
-    resolution: {integrity: sha512-Uo5MC5mfg4OM0jU3up66fmSn6/NE9INK+8/Vn/7sMVcdWg46zfbvvUSjD9EMonVqPi9fbrJH9SXHn48Tr1f2yA==}
+  '@changesets/parse@0.4.3':
+    resolution: {integrity: sha512-ZDmNc53+dXdWEv7fqIUSgRQOLYoUom5Z40gmLgmATmYR9NbL6FJJHwakcCpzaeCy+1D0m0n7mT4jj2B/MQPl7A==}
 
   '@changesets/pre@2.0.2':
     resolution: {integrity: sha512-HaL/gEyFVvkf9KFg6484wR9s0qjAXlZ8qWPDkTyKF6+zqjBe/I2mygg3MbpZ++hdi0ToqNUF8cjj7fBy0dg8Ug==}
 
-  '@changesets/read@0.6.6':
-    resolution: {integrity: sha512-P5QaN9hJSQQKJShzzpBT13FzOSPyHbqdoIBUd2DJdgvnECCyO6LmAOWSV+O8se2TaZJVwSXjL+v9yhb+a9JeJg==}
+  '@changesets/read@0.6.7':
+    resolution: {integrity: sha512-D1G4AUYGrBEk8vj8MGwf75k9GpN6XL3wg8i42P2jZZwFLXnlr2Pn7r9yuQNbaMCarP7ZQWNJbV6XLeysAIMhTA==}
 
   '@changesets/should-skip-package@0.1.2':
     resolution: {integrity: sha512-qAK/WrqWLNCP22UDdBTMPH5f41elVDlsNyat180A33dWxuUDyNpg6fPi/FyTZwRriVjg0L8gnjJn2F9XAoF0qw==}
@@ -357,158 +431,161 @@ packages:
     resolution: {integrity: sha512-Vd/9EVDiu6PPJt9yAh6roZP6El1xHrdvIVGjyBsHR0RYwNHgL7FJPyIIW4fANJNG6FtyZfvlRPpFI4ZM/lubvw==}
     engines: {node: '>=18'}
 
-  '@esbuild/aix-ppc64@0.27.3':
-    resolution: {integrity: sha512-9fJMTNFTWZMh5qwrBItuziu834eOCUcEqymSH7pY+zoMVEZg3gcPuBNxH1EvfVYe9h0x/Ptw8KBzv7qxb7l8dg==}
+  '@epic-web/invariant@1.0.0':
+    resolution: {integrity: sha512-lrTPqgvfFQtR/eY/qkIzp98OGdNJu0m5ji3q/nJI8v3SXkRKEnWiOxMmbvcSoAIzv/cGiuvRy57k4suKQSAdwA==}
+
+  '@esbuild/aix-ppc64@0.28.1':
+    resolution: {integrity: sha512-Svl7tq8k/08+p6CXPpRjQ1fKX+1odH/BQbb48fV6fj3CWHhsoIOoY87w1oHXm0qEpkIK3ZfVgp0hed3XBXzXMQ==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [aix]
 
-  '@esbuild/android-arm64@0.27.3':
-    resolution: {integrity: sha512-YdghPYUmj/FX2SYKJ0OZxf+iaKgMsKHVPF1MAq/P8WirnSpCStzKJFjOjzsW0QQ7oIAiccHdcqjbHmJxRb/dmg==}
+  '@esbuild/android-arm64@0.28.1':
+    resolution: {integrity: sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm@0.27.3':
-    resolution: {integrity: sha512-i5D1hPY7GIQmXlXhs2w8AWHhenb00+GxjxRncS2ZM7YNVGNfaMxgzSGuO8o8SJzRc/oZwU2bcScvVERk03QhzA==}
+  '@esbuild/android-arm@0.28.1':
+    resolution: {integrity: sha512-0k2F129Xdio1TdJfzJ8sy1Q47vUD2NnwdhiAf7drUN1EBTfPf4hsFCtmMgu/6m8JSzsBrlmVjudMBQqOfG8usQ==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-x64@0.27.3':
-    resolution: {integrity: sha512-IN/0BNTkHtk8lkOM8JWAYFg4ORxBkZQf9zXiEOfERX/CzxW3Vg1ewAhU7QSWQpVIzTW+b8Xy+lGzdYXV6UZObQ==}
+  '@esbuild/android-x64@0.28.1':
+    resolution: {integrity: sha512-dbwY7ltSMDWsRatcRpCnES4F+im88OCUgGZjy52shC7GqHRE/cYlxNbB4Z4UpJswpcc4Qxd2oE/ufM0p61IKng==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [android]
 
-  '@esbuild/darwin-arm64@0.27.3':
-    resolution: {integrity: sha512-Re491k7ByTVRy0t3EKWajdLIr0gz2kKKfzafkth4Q8A5n1xTHrkqZgLLjFEHVD+AXdUGgQMq+Godfq45mGpCKg==}
+  '@esbuild/darwin-arm64@0.28.1':
+    resolution: {integrity: sha512-TZbWkQY7kvTAXbXUT7uVACR5cMHsDiSz9z7ZKAX/RTq/WJEk3QyRr0wZpNhBDX+/0CtdqUIJlOiodQcta6tY3Q==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.27.3':
-    resolution: {integrity: sha512-vHk/hA7/1AckjGzRqi6wbo+jaShzRowYip6rt6q7VYEDX4LEy1pZfDpdxCBnGtl+A5zq8iXDcyuxwtv3hNtHFg==}
+  '@esbuild/darwin-x64@0.28.1':
+    resolution: {integrity: sha512-zfdzgK9ACBNZLI/CyHTOx81SyNbM6YXn7rxSgX97VjyiPl9W1i4Ka4fgKECEoFCKGpvBj5qArWIGgQjOwkgskQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/freebsd-arm64@0.27.3':
-    resolution: {integrity: sha512-ipTYM2fjt3kQAYOvo6vcxJx3nBYAzPjgTCk7QEgZG8AUO3ydUhvelmhrbOheMnGOlaSFUoHXB6un+A7q4ygY9w==}
+  '@esbuild/freebsd-arm64@0.28.1':
+    resolution: {integrity: sha512-wG2EA8ENdEI0qhkSZMjfqrdY+ziCYCPMmtZjjIwOmXFjmyzEHn+UUxk5of+SYsjtfs3VpnlC7QLzSI5hY/rOAw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.27.3':
-    resolution: {integrity: sha512-dDk0X87T7mI6U3K9VjWtHOXqwAMJBNN2r7bejDsc+j03SEjtD9HrOl8gVFByeM0aJksoUuUVU9TBaZa2rgj0oA==}
+  '@esbuild/freebsd-x64@0.28.1':
+    resolution: {integrity: sha512-i7dZ9vQgnvSCzi/rYCXNgtF/U+eKZNJBzu3eTQbRgHnM7tNSizLOkRFAl3qzVc/Op/u5YkHHa4pf/3DOYHthLQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/linux-arm64@0.27.3':
-    resolution: {integrity: sha512-sZOuFz/xWnZ4KH3YfFrKCf1WyPZHakVzTiqji3WDc0BCl2kBwiJLCXpzLzUBLgmp4veFZdvN5ChW4Eq/8Fc2Fg==}
+  '@esbuild/linux-arm64@0.28.1':
+    resolution: {integrity: sha512-yHs+0uc8+nvEAfAfxrWQKK5peSNzBc4PegcMO0EJ2hT71uA7vB8Ihg2e77R2P7SG5uYjPbHlLLmve4LLLRCf0g==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm@0.27.3':
-    resolution: {integrity: sha512-s6nPv2QkSupJwLYyfS+gwdirm0ukyTFNl3KTgZEAiJDd+iHZcbTPPcWCcRYH+WlNbwChgH2QkE9NSlNrMT8Gfw==}
+  '@esbuild/linux-arm@0.28.1':
+    resolution: {integrity: sha512-qVXBOHQS+d5Y722GwJzJUtOLlX7km3CraOaGormF1pDtPd2C/l1SHRPgjLunLGe51Sh5YYWKMFDyV4SxgMQYTQ==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.27.3':
-    resolution: {integrity: sha512-yGlQYjdxtLdh0a3jHjuwOrxQjOZYD/C9PfdbgJJF3TIZWnm/tMd/RcNiLngiu4iwcBAOezdnSLAwQDPqTmtTYg==}
+  '@esbuild/linux-ia32@0.28.1':
+    resolution: {integrity: sha512-d1z4ZuP0ajrfz/FhGT4vv278rX8KnPPJx8i5+AtK7TYbx9Le9F1hyzurZpkEyjkGa9dUGhQow4C1NmeGvqxN2w==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.27.3':
-    resolution: {integrity: sha512-WO60Sn8ly3gtzhyjATDgieJNet/KqsDlX5nRC5Y3oTFcS1l0KWba+SEa9Ja1GfDqSF1z6hif/SkpQJbL63cgOA==}
+  '@esbuild/linux-loong64@0.28.1':
+    resolution: {integrity: sha512-M5sRjUVZrkm1OAPR3dlOYzNmN+loZKGVi1VUQGrwuqLcbR6qeAz+famMhjASeH3YVKvZz+zT1jlh/keC3Rj/lg==}
     engines: {node: '>=18'}
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.27.3':
-    resolution: {integrity: sha512-APsymYA6sGcZ4pD6k+UxbDjOFSvPWyZhjaiPyl/f79xKxwTnrn5QUnXR5prvetuaSMsb4jgeHewIDCIWljrSxw==}
+  '@esbuild/linux-mips64el@0.28.1':
+    resolution: {integrity: sha512-mRObBZeHh2OxcBFPWE/FjylkRgZdYuiTR3vaTozquCGOH14iP9oN4x4Ge81CoIDYQrXmIxpFumJBu5MtZpnQJQ==}
     engines: {node: '>=18'}
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.27.3':
-    resolution: {integrity: sha512-eizBnTeBefojtDb9nSh4vvVQ3V9Qf9Df01PfawPcRzJH4gFSgrObw+LveUyDoKU3kxi5+9RJTCWlj4FjYXVPEA==}
+  '@esbuild/linux-ppc64@0.28.1':
+    resolution: {integrity: sha512-slScBsMAb3GFDcdrCgLwZtPYRoH2H/youv10QiZyRjmsP48fznoveWytSgCI/R0ZcUgpc0ZhIUEx6LHts8yrfQ==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.27.3':
-    resolution: {integrity: sha512-3Emwh0r5wmfm3ssTWRQSyVhbOHvqegUDRd0WhmXKX2mkHJe1SFCMJhagUleMq+Uci34wLSipf8Lagt4LlpRFWQ==}
+  '@esbuild/linux-riscv64@0.28.1':
+    resolution: {integrity: sha512-kw0owk1o0GFETUJyW0jc0G4Yzs0BHZn0JDZ8JRT088vjJYX777BAs1fDGxAC+q831qOs2DTC96mNsG2opdfyyQ==}
     engines: {node: '>=18'}
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.27.3':
-    resolution: {integrity: sha512-pBHUx9LzXWBc7MFIEEL0yD/ZVtNgLytvx60gES28GcWMqil8ElCYR4kvbV2BDqsHOvVDRrOxGySBM9Fcv744hw==}
+  '@esbuild/linux-s390x@0.28.1':
+    resolution: {integrity: sha512-/lAIjX8aYFRByhh6L5rYtPEDRqa9de/4V/juOXcta5frjvzXO4/sqEtyytse0g3zZFuWu5cDN0MkLz2qRDD2Ag==}
     engines: {node: '>=18'}
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-x64@0.27.3':
-    resolution: {integrity: sha512-Czi8yzXUWIQYAtL/2y6vogER8pvcsOsk5cpwL4Gk5nJqH5UZiVByIY8Eorm5R13gq+DQKYg0+JyQoytLQas4dA==}
+  '@esbuild/linux-x64@0.28.1':
+    resolution: {integrity: sha512-u/anNYF2mmVOEDwLtnQ1wOr3EZ9sTNGLWrsYGYwHWzGA3Si84IOkHXlbWTD1NB+9/1lcnweYKO54uhxZydNzfA==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [linux]
 
-  '@esbuild/netbsd-arm64@0.27.3':
-    resolution: {integrity: sha512-sDpk0RgmTCR/5HguIZa9n9u+HVKf40fbEUt+iTzSnCaGvY9kFP0YKBWZtJaraonFnqef5SlJ8/TiPAxzyS+UoA==}
+  '@esbuild/netbsd-arm64@0.28.1':
+    resolution: {integrity: sha512-oks0DYbLwWMmaakTsCb+zL4E+aHRVLom9IJZOAthMQEPiQmydXHkziYEsGYRx0uNV/IjEKGAV941JzH02pflqw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.27.3':
-    resolution: {integrity: sha512-P14lFKJl/DdaE00LItAukUdZO5iqNH7+PjoBm+fLQjtxfcfFE20Xf5CrLsmZdq5LFFZzb5JMZ9grUwvtVYzjiA==}
+  '@esbuild/netbsd-x64@0.28.1':
+    resolution: {integrity: sha512-aeL6lAnN89Hz43Mlh1G8ARasbuoYvSITDEx0tHh5b7jJnHcssqgjy9Yx430GDpmCa6OyrKoS0aNRjKundRizGg==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/openbsd-arm64@0.27.3':
-    resolution: {integrity: sha512-AIcMP77AvirGbRl/UZFTq5hjXK+2wC7qFRGoHSDrZ5v5b8DK/GYpXW3CPRL53NkvDqb9D+alBiC/dV0Fb7eJcw==}
+  '@esbuild/openbsd-arm64@0.28.1':
+    resolution: {integrity: sha512-MEFJe5C3R8pwXdZ5Y21oo6m7ePiS0d9pWucn99O/wvyJZChoIQKrQDxKrGeW8F5+T0okTHesAmDeiHDTIq0V/Q==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.27.3':
-    resolution: {integrity: sha512-DnW2sRrBzA+YnE70LKqnM3P+z8vehfJWHXECbwBmH/CU51z6FiqTQTHFenPlHmo3a8UgpLyH3PT+87OViOh1AQ==}
+  '@esbuild/openbsd-x64@0.28.1':
+    resolution: {integrity: sha512-i/ZLIOafE0Z8cI/XANJAixoJL/uRAoS2xOA3rb0xN+KK0K177cMAsQYkzHtBrtMXAKuAc7HGgcWiZ/sRC1Nxgw==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [openbsd]
 
-  '@esbuild/openharmony-arm64@0.27.3':
-    resolution: {integrity: sha512-NinAEgr/etERPTsZJ7aEZQvvg/A6IsZG/LgZy+81wON2huV7SrK3e63dU0XhyZP4RKGyTm7aOgmQk0bGp0fy2g==}
+  '@esbuild/openharmony-arm64@0.28.1':
+    resolution: {integrity: sha512-ge+Z7EXFNt2BO1oAMsVpiQ8EwndV9i1xXerAeTIK7AtPs3bKFXQM7nlRxDSIUIMeueR1CNXxqztLzdNeReKBJg==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openharmony]
 
-  '@esbuild/sunos-x64@0.27.3':
-    resolution: {integrity: sha512-PanZ+nEz+eWoBJ8/f8HKxTTD172SKwdXebZ0ndd953gt1HRBbhMsaNqjTyYLGLPdoWHy4zLU7bDVJztF5f3BHA==}
+  '@esbuild/sunos-x64@0.28.1':
+    resolution: {integrity: sha512-BEjgtECkL3vY+SaSQ6nzVfiALUeFxpawyp8Jmf5PtYhf1Ug40N1h/hxlhts+f1FvSvarEigdxS3BlSMI2PJLcQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/win32-arm64@0.27.3':
-    resolution: {integrity: sha512-B2t59lWWYrbRDw/tjiWOuzSsFh1Y/E95ofKz7rIVYSQkUYBjfSgf6oeYPNWHToFRr2zx52JKApIcAS/D5TUBnA==}
+  '@esbuild/win32-arm64@0.28.1':
+    resolution: {integrity: sha512-lCv9eK/H6ZJWbE7bh2nw54CZ9M2nupBxJcTsdk/QQnWkdSjKGuxmmH8/GWrlT1eMmZfn4dGcCjRte397WqfQXA==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.27.3':
-    resolution: {integrity: sha512-QLKSFeXNS8+tHW7tZpMtjlNb7HKau0QDpwm49u0vUp9y1WOF+PEzkU84y9GqYaAVW8aH8f3GcBck26jh54cX4Q==}
+  '@esbuild/win32-ia32@0.28.1':
+    resolution: {integrity: sha512-zvb/mB2bSCoJOpoCBgYKKpX6YM6mJBlBUVUtVj41DlZJVEB6/0CKlRYxP5wWl1C1ILiCoAU5wZZ4q1P3qeS6Eg==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-x64@0.27.3':
-    resolution: {integrity: sha512-4uJGhsxuptu3OcpVAzli+/gWusVGwZZHTlS63hh++ehExkVT8SgiEf7/uC/PclrPPkLhZqGgCTjd0VWLo6xMqA==}
+  '@esbuild/win32-x64@0.28.1':
+    resolution: {integrity: sha512-bm4Mowrv+GXMlpWX++EcXw/iLyd1o3+bJkC2DkWXYVvgZCqD/bSj9ctZeAMC3cIxgjRVR2Dufaiu4YPxr5gW1A==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [win32]
@@ -554,11 +631,11 @@ packages:
   '@gerrit0/mini-shiki@3.23.0':
     resolution: {integrity: sha512-bEMORlG0cqdjVyCEuU0cDQbORWX+kYCeo0kV1lbxF5bt4r7SID2l9bqsxJEM0zndaxpOUT7riCyIVEuqq/Ynxg==}
 
-  '@hono/node-server@1.19.9':
-    resolution: {integrity: sha512-vHL6w3ecZsky+8P5MD+eFfaGTyCeOHUIFYMGpQGbrBTSmNNoxv0if69rEZ5giu36weC5saFuznL411gRX7bJDw==}
+  '@hono/node-server@1.19.14':
+    resolution: {integrity: sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw==}
     engines: {node: '>=18.14.1'}
     peerDependencies:
-      hono: ^4
+      hono: 4.12.29
 
   '@humanfs/core@0.19.1':
     resolution: {integrity: sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==}
@@ -604,8 +681,8 @@ packages:
   '@manypkg/get-packages@1.1.3':
     resolution: {integrity: sha512-fo+QhuU3qE/2TQMQmbVMqaQ6EWbMhi4ABWP+O4AM1NqPBuy0OrApV5LO6BrrgnhtAHS2NH6RrVk9OL181tTi8A==}
 
-  '@modelcontextprotocol/sdk@1.26.0':
-    resolution: {integrity: sha512-Y5RmPncpiDtTXDbLKswIJzTqu2hyBKxTNsgKqKclDbhIgg1wgtf1fRuvxgTnRfcnxtvvgbIEcqUOzZrJ6iSReg==}
+  '@modelcontextprotocol/sdk@1.29.0':
+    resolution: {integrity: sha512-zo37mZA9hJWpULgkRpowewez1y6ML5GsXJPY8FI0tBBCd77HEvza4jDqRKOXgHNn867PVGCyTdzqpz0izu5ZjQ==}
     engines: {node: '>=18'}
     peerDependencies:
       '@cfworker/json-schema': ^4.1.1
@@ -626,128 +703,128 @@ packages:
     resolution: {integrity: sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==}
     engines: {node: '>= 8'}
 
-  '@rollup/rollup-android-arm-eabi@4.57.1':
-    resolution: {integrity: sha512-A6ehUVSiSaaliTxai040ZpZ2zTevHYbvu/lDoeAteHI8QnaosIzm4qwtezfRg1jOYaUmnzLX1AOD6Z+UJjtifg==}
+  '@rollup/rollup-android-arm-eabi@4.62.2':
+    resolution: {integrity: sha512-6o7ZLZK+BeenkZCFNDXqpbjw9bD6nuWonvS/lwQJp7NoVVxm6p3qE7qQ5jGuBjiFsgvqjD8mZAU5oWxTmbOeOg==}
     cpu: [arm]
     os: [android]
 
-  '@rollup/rollup-android-arm64@4.57.1':
-    resolution: {integrity: sha512-dQaAddCY9YgkFHZcFNS/606Exo8vcLHwArFZ7vxXq4rigo2bb494/xKMMwRRQW6ug7Js6yXmBZhSBRuBvCCQ3w==}
+  '@rollup/rollup-android-arm64@4.62.2':
+    resolution: {integrity: sha512-BaH7BllCACHoH1LguOU56UItGfUWjujlO65kS9LAodViaN4bwIKd7oeW/ZHJ/4ljr/7MIiENnNy3HJ0zXv8Zkw==}
     cpu: [arm64]
     os: [android]
 
-  '@rollup/rollup-darwin-arm64@4.57.1':
-    resolution: {integrity: sha512-crNPrwJOrRxagUYeMn/DZwqN88SDmwaJ8Cvi/TN1HnWBU7GwknckyosC2gd0IqYRsHDEnXf328o9/HC6OkPgOg==}
+  '@rollup/rollup-darwin-arm64@4.62.2':
+    resolution: {integrity: sha512-v39RCCvj4He82I9sFmk+M1VZ0PLM9sfsLVikjfx2hYBNALhrrOR2D3JjQA6AhlaSOgcR+RzrKY7e1+bT6SUO/A==}
     cpu: [arm64]
     os: [darwin]
 
-  '@rollup/rollup-darwin-x64@4.57.1':
-    resolution: {integrity: sha512-Ji8g8ChVbKrhFtig5QBV7iMaJrGtpHelkB3lsaKzadFBe58gmjfGXAOfI5FV0lYMH8wiqsxKQ1C9B0YTRXVy4w==}
+  '@rollup/rollup-darwin-x64@4.62.2':
+    resolution: {integrity: sha512-yl0y2vq3S3lHeuXhEdss6TWfKW8vkujImO12tn4ZkG/4oghr09LvdYm2RElVjokTQiUvDUGXLGsYeLqUMCKpGA==}
     cpu: [x64]
     os: [darwin]
 
-  '@rollup/rollup-freebsd-arm64@4.57.1':
-    resolution: {integrity: sha512-R+/WwhsjmwodAcz65guCGFRkMb4gKWTcIeLy60JJQbXrJ97BOXHxnkPFrP+YwFlaS0m+uWJTstrUA9o+UchFug==}
+  '@rollup/rollup-freebsd-arm64@4.62.2':
+    resolution: {integrity: sha512-tT4pvt4qXD+vEoezupCWi+a1F0vvDiksiHc+PxRlYTOH1I6/X4id9jPxTP+Fg+545euaFT1jJVs4CEdHZAU1vw==}
     cpu: [arm64]
     os: [freebsd]
 
-  '@rollup/rollup-freebsd-x64@4.57.1':
-    resolution: {integrity: sha512-IEQTCHeiTOnAUC3IDQdzRAGj3jOAYNr9kBguI7MQAAZK3caezRrg0GxAb6Hchg4lxdZEI5Oq3iov/w/hnFWY9Q==}
+  '@rollup/rollup-freebsd-x64@4.62.2':
+    resolution: {integrity: sha512-6nU5F2wCW+qvCBhTn1pdIU3bzsIoF7EUwsCDRxilWGprQR6yd508YnH9+OKFCwpfS8pjZqDUmnCAr7exax0XCg==}
     cpu: [x64]
     os: [freebsd]
 
-  '@rollup/rollup-linux-arm-gnueabihf@4.57.1':
-    resolution: {integrity: sha512-F8sWbhZ7tyuEfsmOxwc2giKDQzN3+kuBLPwwZGyVkLlKGdV1nvnNwYD0fKQ8+XS6hp9nY7B+ZeK01EBUE7aHaw==}
+  '@rollup/rollup-linux-arm-gnueabihf@4.62.2':
+    resolution: {integrity: sha512-n1GJHPOvpIfhi3TmrCeh6S6URt9BFCt0KQE3qvexyGCTAKpR4Lg+eWvNZEqu7epxwus/8ElT3hacYEucm49SZg==}
     cpu: [arm]
     os: [linux]
 
-  '@rollup/rollup-linux-arm-musleabihf@4.57.1':
-    resolution: {integrity: sha512-rGfNUfn0GIeXtBP1wL5MnzSj98+PZe/AXaGBCRmT0ts80lU5CATYGxXukeTX39XBKsxzFpEeK+Mrp9faXOlmrw==}
+  '@rollup/rollup-linux-arm-musleabihf@4.62.2':
+    resolution: {integrity: sha512-JqgflS8wEB+UXV/vS1RpRbifGBeN4D5lz8D8oOFbFZw4vedvdOgCFAjfBmIMdW3yL10XpQQ0Ambepw6MXrhOnA==}
     cpu: [arm]
     os: [linux]
 
-  '@rollup/rollup-linux-arm64-gnu@4.57.1':
-    resolution: {integrity: sha512-MMtej3YHWeg/0klK2Qodf3yrNzz6CGjo2UntLvk2RSPlhzgLvYEB3frRvbEF2wRKh1Z2fDIg9KRPe1fawv7C+g==}
+  '@rollup/rollup-linux-arm64-gnu@4.62.2':
+    resolution: {integrity: sha512-wnFJkogWvN4jm/hQRF2UBaeUmk20j5+DmHvoyWii2b8HJDyvz1MF2OU/6ynXt2KR63rbZLWkFpoytpdc/yBuSA==}
     cpu: [arm64]
     os: [linux]
 
-  '@rollup/rollup-linux-arm64-musl@4.57.1':
-    resolution: {integrity: sha512-1a/qhaaOXhqXGpMFMET9VqwZakkljWHLmZOX48R0I/YLbhdxr1m4gtG1Hq7++VhVUmf+L3sTAf9op4JlhQ5u1Q==}
+  '@rollup/rollup-linux-arm64-musl@4.62.2':
+    resolution: {integrity: sha512-HVu2bp0zhvJ8xHEV9+UUs7S90VadmBSY3LcIMvozbPo4AuMGDWlz3ymHLHZPX4hR67TKTt8Qp5PJ5RBg/i+RMQ==}
     cpu: [arm64]
     os: [linux]
 
-  '@rollup/rollup-linux-loong64-gnu@4.57.1':
-    resolution: {integrity: sha512-QWO6RQTZ/cqYtJMtxhkRkidoNGXc7ERPbZN7dVW5SdURuLeVU7lwKMpo18XdcmpWYd0qsP1bwKPf7DNSUinhvA==}
+  '@rollup/rollup-linux-loong64-gnu@4.62.2':
+    resolution: {integrity: sha512-mQqqAV8QaoSgr9I2fKDLY2BAVvmKjWoGiu/cSYQonsLvtqwEn1E4QYfnCOcp5zoEqNhsDYin1s6jx/VJmrxlZg==}
     cpu: [loong64]
     os: [linux]
 
-  '@rollup/rollup-linux-loong64-musl@4.57.1':
-    resolution: {integrity: sha512-xpObYIf+8gprgWaPP32xiN5RVTi/s5FCR+XMXSKmhfoJjrpRAjCuuqQXyxUa/eJTdAE6eJ+KDKaoEqjZQxh3Gw==}
+  '@rollup/rollup-linux-loong64-musl@4.62.2':
+    resolution: {integrity: sha512-IxKLoxCQ2IWi6bT2akyDUBGsOImDKB+sPp4EsTmwFQ/fMwpCKm8uLSSgP/Kx/QYUgKis6SEZ5/Nlhup0DIA0PQ==}
     cpu: [loong64]
     os: [linux]
 
-  '@rollup/rollup-linux-ppc64-gnu@4.57.1':
-    resolution: {integrity: sha512-4BrCgrpZo4hvzMDKRqEaW1zeecScDCR+2nZ86ATLhAoJ5FQ+lbHVD3ttKe74/c7tNT9c6F2viwB3ufwp01Oh2w==}
+  '@rollup/rollup-linux-ppc64-gnu@4.62.2':
+    resolution: {integrity: sha512-Mk5ha2RQSgyFfmYYLkBpPnUk8D8FriBxesO1u9O75X0mHgXL1UQcH5Itl2lurWL2tj0RxV9b9tJgipac0hRY9A==}
     cpu: [ppc64]
     os: [linux]
 
-  '@rollup/rollup-linux-ppc64-musl@4.57.1':
-    resolution: {integrity: sha512-NOlUuzesGauESAyEYFSe3QTUguL+lvrN1HtwEEsU2rOwdUDeTMJdO5dUYl/2hKf9jWydJrO9OL/XSSf65R5+Xw==}
+  '@rollup/rollup-linux-ppc64-musl@4.62.2':
+    resolution: {integrity: sha512-CjvEnqJL/0/TQ3TXX3OPIJ/kmBellrWd4heXUmHeJlTnmwjKpSJzoehLaL6Xk0ZnMHBu9dZuFADNOrtjF4v+2w==}
     cpu: [ppc64]
     os: [linux]
 
-  '@rollup/rollup-linux-riscv64-gnu@4.57.1':
-    resolution: {integrity: sha512-ptA88htVp0AwUUqhVghwDIKlvJMD/fmL/wrQj99PRHFRAG6Z5nbWoWG4o81Nt9FT+IuqUQi+L31ZKAFeJ5Is+A==}
+  '@rollup/rollup-linux-riscv64-gnu@4.62.2':
+    resolution: {integrity: sha512-1SiZbzwdkaDURsew/tSOrooKiYy7EQGT6m8ufavAi9NEyQb/6VuIxFXAL1fqa4iZe3g4NbNk4P7J32z2tw5Mgg==}
     cpu: [riscv64]
     os: [linux]
 
-  '@rollup/rollup-linux-riscv64-musl@4.57.1':
-    resolution: {integrity: sha512-S51t7aMMTNdmAMPpBg7OOsTdn4tySRQvklmL3RpDRyknk87+Sp3xaumlatU+ppQ+5raY7sSTcC2beGgvhENfuw==}
+  '@rollup/rollup-linux-riscv64-musl@4.62.2':
+    resolution: {integrity: sha512-nQts12zJ3NQRoE6uYljOH89v7szzLDvG2JD/vsX+vGXU8w/At1GowTZ5/7qeFQ8m7L55rpR8Okugnuo5bgjy2Q==}
     cpu: [riscv64]
     os: [linux]
 
-  '@rollup/rollup-linux-s390x-gnu@4.57.1':
-    resolution: {integrity: sha512-Bl00OFnVFkL82FHbEqy3k5CUCKH6OEJL54KCyx2oqsmZnFTR8IoNqBF+mjQVcRCT5sB6yOvK8A37LNm/kPJiZg==}
+  '@rollup/rollup-linux-s390x-gnu@4.62.2':
+    resolution: {integrity: sha512-E9/ll019jhPIJgpzfZoIkBGhcz+kKNgVWYRY0zr9srBdPPFVpvOKW8VaJKUbeK+eZXyQF9ltME+Kk6affeaPgg==}
     cpu: [s390x]
     os: [linux]
 
-  '@rollup/rollup-linux-x64-gnu@4.57.1':
-    resolution: {integrity: sha512-ABca4ceT4N+Tv/GtotnWAeXZUZuM/9AQyCyKYyKnpk4yoA7QIAuBt6Hkgpw8kActYlew2mvckXkvx0FfoInnLg==}
+  '@rollup/rollup-linux-x64-gnu@4.62.2':
+    resolution: {integrity: sha512-5BqxR/pshjey51iliyzTD5Xi3EN0aLmQ2lZ3lvefVV9c82BvrLo2/6OT55iifpWBufs6kdwWbuOKS841DrmK9A==}
     cpu: [x64]
     os: [linux]
 
-  '@rollup/rollup-linux-x64-musl@4.57.1':
-    resolution: {integrity: sha512-HFps0JeGtuOR2convgRRkHCekD7j+gdAuXM+/i6kGzQtFhlCtQkpwtNzkNj6QhCDp7DRJ7+qC/1Vg2jt5iSOFw==}
+  '@rollup/rollup-linux-x64-musl@4.62.2':
+    resolution: {integrity: sha512-uNN83XxQrRAh/w0/pmAfibcwyb6YWt4gP+dpnQKPVJshAloQ785ii8CT8ZCIxkGg9opVsvAlGhFitSm6D1Jjpg==}
     cpu: [x64]
     os: [linux]
 
-  '@rollup/rollup-openbsd-x64@4.57.1':
-    resolution: {integrity: sha512-H+hXEv9gdVQuDTgnqD+SQffoWoc0Of59AStSzTEj/feWTBAnSfSD3+Dql1ZruJQxmykT/JVY0dE8Ka7z0DH1hw==}
+  '@rollup/rollup-openbsd-x64@4.62.2':
+    resolution: {integrity: sha512-srjEIxSH3LRnJN6THczDHWQplqEMFiAJrTab0msUryh9kwNpkICf3Ea6q6MN/2cZwRFUNx5w+h6Hpi4QuHS6Zg==}
     cpu: [x64]
     os: [openbsd]
 
-  '@rollup/rollup-openharmony-arm64@4.57.1':
-    resolution: {integrity: sha512-4wYoDpNg6o/oPximyc/NG+mYUejZrCU2q+2w6YZqrAs2UcNUChIZXjtafAiiZSUc7On8v5NyNj34Kzj/Ltk6dQ==}
+  '@rollup/rollup-openharmony-arm64@4.62.2':
+    resolution: {integrity: sha512-8hOJnxgbyObnCm5AlRA3A931xX19xq80RjVTKgJOvEKWqJruP/Uf12IbAOaDjjEXYRewwHLfmF0YRIdK3OwKWA==}
     cpu: [arm64]
     os: [openharmony]
 
-  '@rollup/rollup-win32-arm64-msvc@4.57.1':
-    resolution: {integrity: sha512-O54mtsV/6LW3P8qdTcamQmuC990HDfR71lo44oZMZlXU4tzLrbvTii87Ni9opq60ds0YzuAlEr/GNwuNluZyMQ==}
+  '@rollup/rollup-win32-arm64-msvc@4.62.2':
+    resolution: {integrity: sha512-mmF4AY1i0hG/bLWUctUq59gtmgaSIRa3cu/A3JFRp/sCNEme2bgDEiDS22P9FbnJB8NJNF4jPJiSP5RHQpUTDg==}
     cpu: [arm64]
     os: [win32]
 
-  '@rollup/rollup-win32-ia32-msvc@4.57.1':
-    resolution: {integrity: sha512-P3dLS+IerxCT/7D2q2FYcRdWRl22dNbrbBEtxdWhXrfIMPP9lQhb5h4Du04mdl5Woq05jVCDPCMF7Ub0NAjIew==}
+  '@rollup/rollup-win32-ia32-msvc@4.62.2':
+    resolution: {integrity: sha512-DZgkknc6jhHrk46V25vbAM0zZkyP0nSDkJB8/dRkLTxv470dOmWDqGoEJl/9A0dFfS7yE3REOwNDxpHwSLSt0Q==}
     cpu: [ia32]
     os: [win32]
 
-  '@rollup/rollup-win32-x64-gnu@4.57.1':
-    resolution: {integrity: sha512-VMBH2eOOaKGtIJYleXsi2B8CPVADrh+TyNxJ4mWPnKfLB/DBUmzW+5m1xUrcwWoMfSLagIRpjUFeW5CO5hyciQ==}
+  '@rollup/rollup-win32-x64-gnu@4.62.2':
+    resolution: {integrity: sha512-T6xr6ucWSFto+VGajA8YH26LdpHRuP4YLHEKAtCWvJDOlnmWcDZVCI2Jmjr+IFHDlt2zRaTAKE4tfjTaWLgJBg==}
     cpu: [x64]
     os: [win32]
 
-  '@rollup/rollup-win32-x64-msvc@4.57.1':
-    resolution: {integrity: sha512-mxRFDdHIWRxg3UfIIAwCm6NzvxG0jDX/wBN6KsQFTvKFqqg9vTrWUE68qEjHt19A5wwx5X5aUi2zuZT7YR0jrA==}
+  '@rollup/rollup-win32-x64-msvc@4.62.2':
+    resolution: {integrity: sha512-BfzEnDJOt9T8M989/lA37EcJgat01wLRnoi5dQf3QzOH7jzpqTAzdDbVfRljVr5r+jzKqpbHeyOfAaXxAd0PAA==}
     cpu: [x64]
     os: [win32]
 
@@ -802,6 +879,36 @@ packages:
     peerDependencies:
       '@testing-library/dom': '>=7.21.4'
 
+  '@turbo/darwin-64@2.9.18':
+    resolution: {integrity: sha512-9f27peFu16ur8c0v9nUFUEyBnbKuuFsUTjHFWfmwGfzySBXbHwzU44QhZon6Mznz0cHsIr3984NQj/bVrnGSRw==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@turbo/darwin-arm64@2.9.18':
+    resolution: {integrity: sha512-9A6TMRq/Ib+QnbhLlgkhOm+624wO4pzSQ/yQviQfWHOlFvaYxdnIAYmu2H6TS6y7kSVL0DvzNe04NbESTOzFVQ==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@turbo/linux-64@2.9.18':
+    resolution: {integrity: sha512-zCdIDtz69AnbYh913elJRRoF3QY5aa2HNnf+4rAkc7bQ+tWujiDkCNV7stazOUPggaDvhKIf2Z87qHftTeXSkw==}
+    cpu: [x64]
+    os: [linux]
+
+  '@turbo/linux-arm64@2.9.18':
+    resolution: {integrity: sha512-Va1kXI04naMgYwqv/5Dfa36dTDx8015U7oaQAjrXa45ua9OoFjSV4OmvkML4EmXvUclQHCiBRbY8bvd0jV7eAg==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@turbo/windows-64@2.9.18':
+    resolution: {integrity: sha512-m0kDhZANxSNz9ck1ybogFscHabriAsp4eDFNrN/1H5WrgTF7b3VlcPZnhuO3v2+E2KnCbeAc+UUT10BZZHdDKw==}
+    cpu: [x64]
+    os: [win32]
+
+  '@turbo/windows-arm64@2.9.18':
+    resolution: {integrity: sha512-nUdR8WqoomUys9iIQmG45TMiizJ+5BV8egSeLLZba/AWblyp3fVBcIH1kSE58OtK4g2YzbMJEth6Ttv9w5rqMA==}
+    cpu: [arm64]
+    os: [win32]
+
   '@types/aria-query@5.0.4':
     resolution: {integrity: sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==}
 
@@ -814,6 +921,9 @@ packages:
   '@types/estree@1.0.8':
     resolution: {integrity: sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==}
 
+  '@types/estree@1.0.9':
+    resolution: {integrity: sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==}
+
   '@types/hast@3.0.4':
     resolution: {integrity: sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==}
 
@@ -896,43 +1006,43 @@ packages:
     resolution: {integrity: sha512-AxNRwEie8Nn4eFS1FzDMJWIISMGoXMb037sgCBJ3UR6o0fQTzr2tqN9WT+DkWJPhIdQCfV7T6D387566VtnCJA==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
-  '@vitest/coverage-v8@4.0.18':
-    resolution: {integrity: sha512-7i+N2i0+ME+2JFZhfuz7Tg/FqKtilHjGyGvoHYQ6iLV0zahbsJ9sljC9OcFcPDbhYKCet+sG8SsVqlyGvPflZg==}
+  '@vitest/coverage-v8@4.1.10':
+    resolution: {integrity: sha512-IM49HmthevbgAO4anp1hwtoT9wYe59w0LR00gr+eagHE+ZJ5lK4sLPeO0ubgoJcwLk6dehU3R24N+FbEEKDc8g==}
     peerDependencies:
-      '@vitest/browser': 4.0.18
-      vitest: 4.0.18
+      '@vitest/browser': 4.1.10
+      vitest: 4.1.10
     peerDependenciesMeta:
       '@vitest/browser':
         optional: true
 
-  '@vitest/expect@4.0.18':
-    resolution: {integrity: sha512-8sCWUyckXXYvx4opfzVY03EOiYVxyNrHS5QxX3DAIi5dpJAAkyJezHCP77VMX4HKA2LDT/Jpfo8i2r5BE3GnQQ==}
+  '@vitest/expect@4.1.10':
+    resolution: {integrity: sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==}
 
-  '@vitest/mocker@4.0.18':
-    resolution: {integrity: sha512-HhVd0MDnzzsgevnOWCBj5Otnzobjy5wLBe4EdeeFGv8luMsGcYqDuFRMcttKWZA5vVO8RFjexVovXvAM4JoJDQ==}
+  '@vitest/mocker@4.1.10':
+    resolution: {integrity: sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==}
     peerDependencies:
       msw: ^2.4.9
-      vite: ^6.0.0 || ^7.0.0-0
+      vite: 7.3.5
     peerDependenciesMeta:
       msw:
         optional: true
       vite:
         optional: true
 
-  '@vitest/pretty-format@4.0.18':
-    resolution: {integrity: sha512-P24GK3GulZWC5tz87ux0m8OADrQIUVDPIjjj65vBXYG17ZeU3qD7r+MNZ1RNv4l8CGU2vtTRqixrOi9fYk/yKw==}
+  '@vitest/pretty-format@4.1.10':
+    resolution: {integrity: sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==}
 
-  '@vitest/runner@4.0.18':
-    resolution: {integrity: sha512-rpk9y12PGa22Jg6g5M3UVVnTS7+zycIGk9ZNGN+m6tZHKQb7jrP7/77WfZy13Y/EUDd52NDsLRQhYKtv7XfPQw==}
+  '@vitest/runner@4.1.10':
+    resolution: {integrity: sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==}
 
-  '@vitest/snapshot@4.0.18':
-    resolution: {integrity: sha512-PCiV0rcl7jKQjbgYqjtakly6T1uwv/5BQ9SwBLekVg/EaYeQFPiXcgrC2Y7vDMA8dM1SUEAEV82kgSQIlXNMvA==}
+  '@vitest/snapshot@4.1.10':
+    resolution: {integrity: sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==}
 
-  '@vitest/spy@4.0.18':
-    resolution: {integrity: sha512-cbQt3PTSD7P2OARdVW3qWER5EGq7PHlvE+QfzSC0lbwO+xnt7+XH06ZzFjFRgzUX//JmpxrCu92VdwvEPlWSNw==}
+  '@vitest/spy@4.1.10':
+    resolution: {integrity: sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==}
 
-  '@vitest/utils@4.0.18':
-    resolution: {integrity: sha512-msMRKLMVLWygpK3u2Hybgi4MNjcYJvwTb0Ru09+fOyCXIgT5raYP041DRRdiJiI3k/2U6SEbAETB3YtBrUkCFA==}
+  '@vitest/utils@4.1.10':
+    resolution: {integrity: sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==}
 
   '@zumer/snapdom@2.0.2':
     resolution: {integrity: sha512-W6quT4lMcPu8Q9O/Q6witSfc6/+xuY8C8yDoHug/+o7zYKCNE/e0I3//XsWDkyq9C0mDE0TAWF/8bwCR7x3gHQ==}
@@ -958,16 +1068,16 @@ packages:
   ajv-formats@3.0.1:
     resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
     peerDependencies:
-      ajv: ^8.0.0
+      ajv: 8.20.0
     peerDependenciesMeta:
       ajv:
         optional: true
 
-  ajv@6.12.6:
-    resolution: {integrity: sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==}
+  ajv@6.15.0:
+    resolution: {integrity: sha512-fgFx7Hfoq60ytK2c7DhnF8jIvzYgOMxfugjLOSMHjLIPgenqa7S7oaagATUq99mV6IYvN2tRmC0wnTYX6iPbMw==}
 
-  ajv@8.17.1:
-    resolution: {integrity: sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==}
+  ajv@8.20.0:
+    resolution: {integrity: sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==}
 
   ansi-colors@4.1.3:
     resolution: {integrity: sha512-/6w/C21Pm1A7aZitlI5Ni/2J6FFQN8i1Cvz3kHABAAbw93v/NlvKdVOqz7CCWz/3iv/JplRSEEZ83XION15ovw==}
@@ -1029,8 +1139,8 @@ packages:
     resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
     engines: {node: '>=12'}
 
-  ast-v8-to-istanbul@0.3.12:
-    resolution: {integrity: sha512-BRRC8VRZY2R4Z4lFIL35MwNXmwVqBityvOIwETtsCSwvjl0IdgFsy9NhdaA6j74nUdtJJlIypeRhpDam19Wq3g==}
+  ast-v8-to-istanbul@1.0.4:
+    resolution: {integrity: sha512-0bC0/4bTSrnwdhU3IsZDwEdojvuPrSg59OYZfKsLRtJZ0u8VBx9DebfqqG8bRdCC0I7vjgxmPi41P0lpkhJHtA==}
 
   at-least-node@1.0.0:
     resolution: {integrity: sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==}
@@ -1039,6 +1149,10 @@ packages:
   balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
 
+  balanced-match@4.0.4:
+    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
+    engines: {node: 18 || 20 || >=22}
+
   base64-js@1.5.1:
     resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
 
@@ -1049,15 +1163,16 @@ packages:
   bl@4.1.0:
     resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
 
-  body-parser@2.2.2:
-    resolution: {integrity: sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==}
+  body-parser@2.3.0:
+    resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==}
     engines: {node: '>=18'}
 
-  brace-expansion@1.1.12:
-    resolution: {integrity: sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==}
+  brace-expansion@1.1.16:
+    resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==}
 
-  brace-expansion@2.0.2:
-    resolution: {integrity: sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==}
+  brace-expansion@5.0.7:
+    resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
+    engines: {node: 18 || 20 || >=22}
 
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
@@ -1070,7 +1185,7 @@ packages:
     resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     peerDependencies:
-      esbuild: '>=0.18'
+      esbuild: 0.28.1
 
   bytes@3.1.2:
     resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
@@ -1080,8 +1195,8 @@ packages:
     resolution: {integrity: sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==}
     engines: {node: '>=8'}
 
-  cachedir@2.3.0:
-    resolution: {integrity: sha512-A+Fezp4zxnit6FanDmv9EqXNAi3vt9DWp51/71UEhXukb7QUuvtv9344h91dyAxuTLoSYJFU299qzR3tzwPAhw==}
+  cachedir@2.4.0:
+    resolution: {integrity: sha512-9EtFOZR8g22CL7BWjJ9BUx1+A/djkofnyW3aOXZORNW2kxoUpx2h+uN2cOqwPmFhnpVmxg+KW2OjOSgChTEvsQ==}
     engines: {node: '>=6'}
 
   call-bind-apply-helpers@1.0.2:
@@ -1108,9 +1223,6 @@ packages:
     resolution: {integrity: sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==}
     engines: {node: '>=10'}
 
-  chardet@0.7.0:
-    resolution: {integrity: sha512-mT8iDcrh03qDGRRmoA2hmBJnxpllMR+0/0qlzjqZES6NdiWDcZkCNAk4rPFZ9Q85r27unkiNNg8ZOiwZXBHwcA==}
-
   chardet@2.1.1:
     resolution: {integrity: sha512-PsezH1rqdV9VvyNhxxOW32/d75r01NY7TQCmOqomRo15ZSOKbpTFVsfjghxo6JloQUCGnH4k1LGu0R4yCLlWQQ==}
 
@@ -1118,10 +1230,6 @@ packages:
     resolution: {integrity: sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==}
     engines: {node: '>= 14.16.0'}
 
-  ci-info@3.9.0:
-    resolution: {integrity: sha512-NIxF55hv4nSqQswkAeiOi1r83xy8JldOFDTWiug55KBu9Jnblncd2U6ViHmYgHf01TPZS77NJBhBMKdWj9HQMQ==}
-    engines: {node: '>=8'}
-
   class-variance-authority@0.7.1:
     resolution: {integrity: sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg==}
 
@@ -1177,9 +1285,9 @@ packages:
     resolution: {integrity: sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==}
     engines: {node: '>= 6'}
 
-  commitizen@4.3.1:
-    resolution: {integrity: sha512-gwAPAVTy/j5YcOOebcCRIijn+mSjWJC+IYKivTu6aG8Ei/scoXgfsMRnuAk6b0GRste2J4NGxVdMN3ZpfNaVaw==}
-    engines: {node: '>= 12'}
+  commitizen@4.3.2:
+    resolution: {integrity: sha512-1Zs37z9JPvAcuTSSricZZwBhOPVNNxJouuY4yDEt+eD70EoxT2TU9kViG8CuB/PmVg2G4XsAGQiK4YCst97aDQ==}
+    engines: {node: '>= 18'}
     hasBin: true
 
   concat-map@0.0.1:
@@ -1192,14 +1300,18 @@ packages:
     resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
     engines: {node: ^14.18.0 || >=16.10.0}
 
-  content-disposition@1.0.1:
-    resolution: {integrity: sha512-oIXISMynqSqm241k6kcQ5UwttDILMK4BiurCfGEREw6+X9jkkpEe5T9FZaApyLGGOnFuyMWZpdolTXMtvEJ08Q==}
+  content-disposition@1.1.0:
+    resolution: {integrity: sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==}
     engines: {node: '>=18'}
 
   content-type@1.0.5:
     resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
     engines: {node: '>= 0.6'}
 
+  content-type@2.0.0:
+    resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==}
+    engines: {node: '>=18'}
+
   conventional-commit-types@3.0.0:
     resolution: {integrity: sha512-SmmCYnOniSsAa9GqWOeLqc179lfr5TRu5b4QFDkbsrJ5TZjPJx85wtOr3zn+1dbeNiXDKGPbZ72IKbPhLXh/Lg==}
 
@@ -1208,6 +1320,9 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
+  convert-source-map@2.0.0:
+    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
+
   cookie-signature@1.2.2:
     resolution: {integrity: sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==}
     engines: {node: '>=6.6.0'}
@@ -1240,6 +1355,11 @@ packages:
       typescript:
         optional: true
 
+  cross-env@10.1.0:
+    resolution: {integrity: sha512-GsYosgnACZTADcmEyJctkJIoqAhHjttw7RsFrVoJNXbsWWqaq6Ym+7kZjq6mS45O0jij6vtiReppKQEtqWy6Dw==}
+    engines: {node: '>=20'}
+    hasBin: true
+
   cross-spawn@7.0.6:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
@@ -1357,15 +1477,15 @@ packages:
     resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
     engines: {node: '>= 0.4'}
 
-  es-module-lexer@1.7.0:
-    resolution: {integrity: sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==}
+  es-module-lexer@2.3.0:
+    resolution: {integrity: sha512-KLdwQm2NvGLDkQDCGvmiQrhkd0JbMzXthwQAUgWjQuQdBLFa3eiBP5arXZyA+f8x+x7OXgud6bq2rxjGtHV2tw==}
 
-  es-object-atoms@1.1.1:
-    resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
+  es-object-atoms@1.1.2:
+    resolution: {integrity: sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==}
     engines: {node: '>= 0.4'}
 
-  esbuild@0.27.3:
-    resolution: {integrity: sha512-8VwMnyGCONIs6cWue2IdpHxHnAjzxnw2Zr7MkVxB2vjmQ2ivqGFb4LEG3SMnv0Gb2F/G/2yA8zUaiL1gywDCCg==}
+  esbuild@0.28.1:
+    resolution: {integrity: sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw==}
     engines: {node: '>=18'}
     hasBin: true
 
@@ -1437,8 +1557,8 @@ packages:
   eventemitter3@5.0.4:
     resolution: {integrity: sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==}
 
-  eventsource-parser@3.0.6:
-    resolution: {integrity: sha512-Vo1ab+QXPzZ4tCa8SwIHJFaSzy4R6SHf7BY79rFBDf0idraZWAkYrDjDj8uWaSm3S2TK+hJ7/t1CEmZ7jXw+pg==}
+  eventsource-parser@3.1.0:
+    resolution: {integrity: sha512-kJezFj9YFAMLeORyi7aCLxLbD5/qWMQnoMVlVPyHIll7lgRJCc3JVln9Vgl9nwQi0YkMnhdGTMNn7CkRRAptMg==}
     engines: {node: '>=18.0.0'}
 
   eventsource@3.0.7:
@@ -1453,8 +1573,8 @@ packages:
     resolution: {integrity: sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==}
     engines: {node: '>=12.0.0'}
 
-  express-rate-limit@8.2.1:
-    resolution: {integrity: sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g==}
+  express-rate-limit@8.5.2:
+    resolution: {integrity: sha512-5Kb34ipNX694DH48vN9irak1Qx30nb0PLYHXfJgw4YEjiC3ZEmZJhwOp+VfiCYwFzvFTdB9QkArYS5kXa2cx2A==}
     engines: {node: '>= 16'}
     peerDependencies:
       express: '>= 4.11'
@@ -1466,10 +1586,6 @@ packages:
   extendable-error@0.1.7:
     resolution: {integrity: sha512-UOiS2in6/Q0FK0R0q6UY9vYpQ21mr/Qn1KOnte7vsACuNJf514WvCCUHSRCPcgjPT2bAhNIJdlE6bVap1GKmeg==}
 
-  external-editor@3.1.0:
-    resolution: {integrity: sha512-hMQ4CX1p1izmuLYyZqLMO/qGNw10wSv9QDCPfzXfyFrOaCSSoRfqE1Kf1s5an66J5JZC62NewG+mK49jOCtQew==}
-    engines: {node: '>=4'}
-
   fake-indexeddb@6.2.5:
     resolution: {integrity: sha512-CGnyrvbhPlWYMngksqrSSUT1BAVP49dZocrHuK0SvtR0D5TMs5wP0o3j7jexDJW01KSadjBp1M/71o/KR3nD1w==}
     engines: {node: '>=18'}
@@ -1487,8 +1603,8 @@ packages:
   fast-levenshtein@2.0.6:
     resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==}
 
-  fast-uri@3.1.0:
-    resolution: {integrity: sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==}
+  fast-uri@3.1.2:
+    resolution: {integrity: sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==}
 
   fastq@1.20.1:
     resolution: {integrity: sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==}
@@ -1497,7 +1613,7 @@ packages:
     resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
-      picomatch: ^3 || ^4
+      picomatch: 4.0.5
     peerDependenciesMeta:
       picomatch:
         optional: true
@@ -1543,8 +1659,8 @@ packages:
     resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
     engines: {node: '>=16'}
 
-  flatted@3.3.3:
-    resolution: {integrity: sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==}
+  flatted@3.4.2:
+    resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
 
   forwarded@0.2.0:
     resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
@@ -1647,16 +1763,16 @@ packages:
     resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
     engines: {node: '>= 0.4'}
 
-  hasown@2.0.2:
-    resolution: {integrity: sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==}
+  hasown@2.0.4:
+    resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
     engines: {node: '>= 0.4'}
 
   homedir-polyfill@1.0.3:
     resolution: {integrity: sha512-eSmmWE5bZTK2Nou4g0AI3zZ9rswp7GRKoKXS1BLUkvPviOqs4YTN1djQIqrXy9k5gEtdLPy86JjRwsNM9tnDcA==}
     engines: {node: '>=0.10.0'}
 
-  hono@4.11.9:
-    resolution: {integrity: sha512-Eaw2YTGM6WOxA6CXbckaEvslr2Ne4NFsKrvc0v97JD5awbmeBLO5w9Ho9L9kmKonrwF9RJlW6BxT1PVv/agBHQ==}
+  hono@4.12.29:
+    resolution: {integrity: sha512-1hNiRjawYrLq/4m3DQQjPGFg0VZkk4RjQJDff/excI6Dm9BiL75qxGrd7/c6YOxPdq6AscP3LiXhQ6fKFC1Waw==}
     engines: {node: '>=16.9.0'}
 
   html-encoding-sniffer@4.0.0:
@@ -1687,16 +1803,12 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
-  iconv-lite@0.4.24:
-    resolution: {integrity: sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==}
-    engines: {node: '>=0.10.0'}
-
   iconv-lite@0.6.3:
     resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
     engines: {node: '>=0.10.0'}
 
-  iconv-lite@0.7.2:
-    resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==}
+  iconv-lite@0.7.3:
+    resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==}
     engines: {node: '>=0.10.0'}
 
   ieee754@1.2.1:
@@ -1742,12 +1854,12 @@ packages:
     resolution: {integrity: sha512-QQnnxNyfvmHFIsj7gkPcYymR8Jdw/o7mp5ZFihxn6h8Ci6fh3Dx4E1gPjpQEpIuPo9XVNY/ZUwh4BPMjGyL01g==}
     engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
 
-  inquirer@8.2.5:
-    resolution: {integrity: sha512-QAgPDQMEgrDssk1XiwwHoOGYF9BAbUcc1+j+FhEvaOt8/cKRqyLn0U5qA6F74fGhTMGxf92pOvPBeh29jQJDTQ==}
+  inquirer@8.2.7:
+    resolution: {integrity: sha512-UjOaSel/iddGZJ5xP/Eixh6dY1XghiBw4XK13rCCIJcJfyhhoul/7KhLLUGtebEj6GDYM6Vnx/mVsjx2L/mFIA==}
     engines: {node: '>=12.0.0'}
 
-  ip-address@10.0.1:
-    resolution: {integrity: sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA==}
+  ip-address@10.2.0:
+    resolution: {integrity: sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==}
     engines: {node: '>= 12'}
 
   ipaddr.js@1.9.1:
@@ -1828,8 +1940,8 @@ packages:
     resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
     hasBin: true
 
-  jose@6.1.3:
-    resolution: {integrity: sha512-0TpaTfihd4QMNwrz/ob2Bp7X04yuxJkjRGi4aKmOqwhov54i6u79oCv7T+C7lo70MKH6BesI3vscD1yb/yzKXQ==}
+  jose@6.2.3:
+    resolution: {integrity: sha512-YYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==}
 
   joycon@3.1.1:
     resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
@@ -1841,12 +1953,12 @@ packages:
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
-  js-yaml@3.14.2:
-    resolution: {integrity: sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==}
+  js-yaml@3.15.0:
+    resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==}
     hasBin: true
 
-  js-yaml@4.1.1:
-    resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
+  js-yaml@4.3.0:
+    resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
     hasBin: true
 
   jsdom@26.1.0:
@@ -1902,8 +2014,8 @@ packages:
   lines-and-columns@1.2.4:
     resolution: {integrity: sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==}
 
-  linkify-it@5.0.0:
-    resolution: {integrity: sha512-5aHCbzQRADcdP+ATqnDuhhJ/MRIqDkZX5pyjFHRRysS8vZ5AbqGEoFIb6pYHPZ+L/OC2Lc+xT8uHVVR5CAK/wQ==}
+  linkify-it@5.0.2:
+    resolution: {integrity: sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==}
 
   lint-staged@16.2.7:
     resolution: {integrity: sha512-lDIj4RnYmK7/kXMya+qJsmkRFkGolciXjrsZ6PC25GdTfWOAWetR0ZbsNXRAj1EHHImRSalc+whZFg56F5DVow==}
@@ -1938,8 +2050,8 @@ packages:
   lodash.startcase@4.4.0:
     resolution: {integrity: sha512-+WKqsK294HMSc2jEbNgpHpd0JfIBhp7rEV4aqXWqFr6AlXov+SlcgB1Fv01y2kGe3Gc8nMW7VA0SrGuSkRfIEg==}
 
-  lodash@4.17.21:
-    resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==}
+  lodash@4.18.1:
+    resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
 
   log-symbols@4.1.0:
     resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
@@ -1973,8 +2085,8 @@ packages:
     resolution: {integrity: sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==}
     engines: {node: '>=10'}
 
-  markdown-it@14.1.1:
-    resolution: {integrity: sha512-BuU2qnTti9YKgK5N+IeMubp14ZUKUUw7yeJbkjtosvHiP0AZ5c8IAgEMk79D0eC8F23r4Ac/q8cAIFdm2FtyoA==}
+  markdown-it@14.3.0:
+    resolution: {integrity: sha512-RCEsPjR+sr0x+AuYp601tKTkgFG4YEPLCzHST3cQ/fhlJkqAkz1L2/Qbp1j9qw5SBwQHFBoW8+hoN5xssOF0Tw==}
     hasBin: true
 
   math-intrinsics@1.1.0:
@@ -2027,15 +2139,19 @@ packages:
     resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
     engines: {node: '>=4'}
 
-  minimatch@3.1.2:
-    resolution: {integrity: sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==}
+  minimatch@10.2.5:
+    resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==}
+    engines: {node: 18 || 20 || >=22}
 
-  minimatch@9.0.5:
-    resolution: {integrity: sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==}
+  minimatch@3.1.4:
+    resolution: {integrity: sha512-twmL+S8+7yIsE9wsqgzU3E8/LumN3M3QELrBZ20OdmQ9jB2JvW5oZtBEmft84k/Gs5CG9mqtWc6Y9vW+JEzGxw==}
+
+  minimatch@9.0.7:
+    resolution: {integrity: sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==}
     engines: {node: '>=16 || 14 >=14.17'}
 
-  minimist@1.2.7:
-    resolution: {integrity: sha512-bzfL1YUZsP41gmu/qjrEk0Q6i2ix/cVeAhbCbqH9u3zYutS1cLg00qhrD0M2MVdCcx4Sc0UpP2eBWo9rotpq6g==}
+  minimist@1.2.8:
+    resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
 
   mlly@1.8.0:
     resolution: {integrity: sha512-l8D9ODSRWLe2KHJSifWGwBqpTZXIXTeo8mlKjY+E2HAakaTeNpqAyBZ8GSqLzHgw4XmHmC8whvpjJNMbFZN7/g==}
@@ -2057,8 +2173,8 @@ packages:
     resolution: {integrity: sha512-tacvGzUY5o2D8CBh2rrwxyNojUsZNU2zjNTzKQrkgGJQTbGAfArVWXSKMBokBeeg6C7OLRGUEyoFlYbfeWQIqw==}
     engines: {node: '>=20.17'}
 
-  nanoid@3.3.11:
-    resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==}
+  nanoid@3.3.15:
+    resolution: {integrity: sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
@@ -2106,10 +2222,6 @@ packages:
     resolution: {integrity: sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ==}
     engines: {node: '>=10'}
 
-  os-tmpdir@1.0.2:
-    resolution: {integrity: sha512-D2FR03Vir7FIu45XBY20mTb+/ZSWB00sjU9jdQXt83gDrI4Ztz5Fs7/yy74g2N5SVQY4xY1qDr4rNddwYRVX0g==}
-    engines: {node: '>=0.10.0'}
-
   outdent@0.5.0:
     resolution: {integrity: sha512-/jHxFIzoMXdqPzTaCpFzAAWhpkSjZPF4Vsn6jAfNpmbH/ymsmd7Qc6VE9BGn0L6YMj6uwpQLxCECpus4ukKS9Q==}
 
@@ -2178,8 +2290,8 @@ packages:
     resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==}
     engines: {node: '>=8'}
 
-  path-to-regexp@8.3.0:
-    resolution: {integrity: sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA==}
+  path-to-regexp@8.4.2:
+    resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
 
   path-type@4.0.0:
     resolution: {integrity: sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==}
@@ -2191,12 +2303,12 @@ packages:
   picocolors@1.1.1:
     resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
 
-  picomatch@2.3.1:
-    resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==}
+  picomatch@2.3.2:
+    resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
     engines: {node: '>=8.6'}
 
-  picomatch@4.0.3:
-    resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==}
+  picomatch@4.0.5:
+    resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==}
     engines: {node: '>=12'}
 
   pidtree@0.6.0:
@@ -2224,9 +2336,9 @@ packages:
     engines: {node: '>= 18'}
     peerDependencies:
       jiti: '>=1.21.0'
-      postcss: '>=8.0.9'
+      postcss: 8.5.16
       tsx: ^4.8.1
-      yaml: ^2.4.2
+      yaml: 2.9.0
     peerDependenciesMeta:
       jiti:
         optional: true
@@ -2237,8 +2349,8 @@ packages:
       yaml:
         optional: true
 
-  postcss@8.5.6:
-    resolution: {integrity: sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg==}
+  postcss@8.5.16:
+    resolution: {integrity: sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg==}
     engines: {node: ^10 || ^12 || >=14}
 
   prelude-ls@1.2.1:
@@ -2274,8 +2386,8 @@ packages:
     resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
     engines: {node: '>=6'}
 
-  qs@6.14.2:
-    resolution: {integrity: sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==}
+  qs@6.15.3:
+    resolution: {integrity: sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==}
     engines: {node: '>=0.6'}
 
   quansync@0.2.11:
@@ -2284,8 +2396,8 @@ packages:
   queue-microtask@1.2.3:
     resolution: {integrity: sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==}
 
-  range-parser@1.2.1:
-    resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
+  range-parser@1.3.0:
+    resolution: {integrity: sha512-hek2mFQpPuI4E1BBKrSto+BU3e3x4xuarsbiwr3+lf7p44juvFMV0XFWQAP3xUyqXA4RrXLIoaSUGbSt056ZMw==}
     engines: {node: '>= 0.6'}
 
   raw-body@3.0.2:
@@ -2357,8 +2469,8 @@ packages:
   rfdc@1.4.1:
     resolution: {integrity: sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==}
 
-  rollup@4.57.1:
-    resolution: {integrity: sha512-oQL6lgK3e2QZeQ7gcgIkS2YZPg5slw37hYufJ3edKlfQSGGm8ICoxswK15ntSzF/a8+h7ekRy7k7oWc3BQ7y8A==}
+  rollup@4.62.2:
+    resolution: {integrity: sha512-RFnrW4lhXA3s3eqHDZvN654g8OTjzRfqpIRJYczCGB6HzphckVAi/Qh4tbPUbRuDi7s1Llv8g/NspLkttY3gTA==}
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
     hasBin: true
 
@@ -2419,8 +2531,8 @@ packages:
     resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
     engines: {node: '>=8'}
 
-  side-channel-list@1.0.0:
-    resolution: {integrity: sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==}
+  side-channel-list@1.0.1:
+    resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
     engines: {node: '>= 0.4'}
 
   side-channel-map@1.0.1:
@@ -2431,8 +2543,8 @@ packages:
     resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==}
     engines: {node: '>= 0.4'}
 
-  side-channel@1.1.0:
-    resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==}
+  side-channel@1.1.1:
+    resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==}
     engines: {node: '>= 0.4'}
 
   siginfo@2.0.0:
@@ -2474,8 +2586,8 @@ packages:
     resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==}
     engines: {node: '>= 0.8'}
 
-  std-env@3.10.0:
-    resolution: {integrity: sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==}
+  std-env@4.2.0:
+    resolution: {integrity: sha512-oCUKSupKTHX53EyjDtuZQ64pjLJ6yYCtpmEw0goYxtjG9KpbRe8KAsl2tBUGU9DyMcJ0RwJ8GqJAFzMXcXW1Rw==}
 
   string-argv@0.3.2:
     resolution: {integrity: sha512-aqD2Q0144Z+/RqG52NeHEkZauTAUWJO8c6yTftGJKO3Tja5tUgIfmIl6kExvhtxSDP7fXB6DvzkfMpCd/F3G+Q==}
@@ -2567,8 +2679,8 @@ packages:
     resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==}
     engines: {node: '>=12.0.0'}
 
-  tinyrainbow@3.0.3:
-    resolution: {integrity: sha512-PSkbLUoxOFRzJYjjxHJt9xro7D+iilgMX/C9lawzVuYiIdcihh9DXmVibBe8lmcFrRi/VzlPjBxbN7rH24q8/Q==}
+  tinyrainbow@3.1.0:
+    resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==}
     engines: {node: '>=14.0.0'}
 
   tldts-core@6.1.86:
@@ -2578,10 +2690,6 @@ packages:
     resolution: {integrity: sha512-WMi/OQ2axVTf/ykqCQgXiIct+mSQDFdH2fkwhPwgEwvJ1kSzZRiinb0zF2Xb8u4+OqPChmyI6MEu4EezNJz+FQ==}
     hasBin: true
 
-  tmp@0.0.33:
-    resolution: {integrity: sha512-jRCJlojKnZ3addtTOjdIqoRuPEKBvNXcGYqzO6zWZX8KfKEpnGY5jfggJQ3EjKuu8D4bJRr0y+cYJFmYbImXGw==}
-    engines: {node: '>=0.6.0'}
-
   to-regex-range@5.0.1:
     resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==}
     engines: {node: '>=8.0'}
@@ -2621,7 +2729,7 @@ packages:
     peerDependencies:
       '@microsoft/api-extractor': ^7.36.0
       '@swc/core': ^1
-      postcss: ^8.4.12
+      postcss: 8.5.16
       typescript: '>=4.5.0'
     peerDependenciesMeta:
       '@microsoft/api-extractor':
@@ -2638,38 +2746,8 @@ packages:
     engines: {node: '>=18.0.0'}
     hasBin: true
 
-  turbo-darwin-64@2.8.7:
-    resolution: {integrity: sha512-Xr4TO/oDDwoozbDtBvunb66g//WK8uHRygl72vUthuwzmiw48pil4IuoG/QbMHd9RE8aBnVmzC0WZEWk/WWt3A==}
-    cpu: [x64]
-    os: [darwin]
-
-  turbo-darwin-arm64@2.8.7:
-    resolution: {integrity: sha512-p8Xbmb9kZEY/NoshQUcFmQdO80s2PCGoLYj5DbpxjZr3diknipXxzOK7pcmT7l2gNHaMCpFVWLkiFY9nO3EU5w==}
-    cpu: [arm64]
-    os: [darwin]
-
-  turbo-linux-64@2.8.7:
-    resolution: {integrity: sha512-nwfEPAH3m5y/nJeYly3j1YJNYU2EG5+2ysZUxvBNM+VBV2LjQaLxB9CsEIpIOKuWKCjnFHKIADTSDPZ3D12J5Q==}
-    cpu: [x64]
-    os: [linux]
-
-  turbo-linux-arm64@2.8.7:
-    resolution: {integrity: sha512-mgA/M6xiJzyxtXV70TtWGDPh+I6acOKmeQGtOzbFQZYEf794pu5jax26bCk5skAp1gqZu3vacPr6jhYHoHU9IQ==}
-    cpu: [arm64]
-    os: [linux]
-
-  turbo-windows-64@2.8.7:
-    resolution: {integrity: sha512-sHTYMaXuCcyHnGUQgfUUt7S8407TWoP14zc/4N2tsM0wZNK6V9h4H2t5jQPtqKEb6Fg8313kygdDgEwuM4vsHg==}
-    cpu: [x64]
-    os: [win32]
-
-  turbo-windows-arm64@2.8.7:
-    resolution: {integrity: sha512-WyGiOI2Zp3AhuzVagzQN+T+iq0fWx0oGxDfAWT3ZiLEd4U0cDUkwUZDKVGb3rKqPjDL6lWnuxKKu73ge5xtovQ==}
-    cpu: [arm64]
-    os: [win32]
-
-  turbo@2.8.7:
-    resolution: {integrity: sha512-RBLh5caMAu1kFdTK1jgH2gH/z+jFsvX5rGbhgJ9nlIAWXSvxlzwId05uDlBA1+pBd3wO/UaKYzaQZQBXDd7kcA==}
+  turbo@2.9.18:
+    resolution: {integrity: sha512-bwabv6PupzeavybzEoArBAkwq5fnzwf8OFnRtpHwnviFWuwJPFxtyH+aVp36TmIqK3aYYgtTJ3J0m2ysxxSzQg==}
     hasBin: true
 
   type-check@0.4.0:
@@ -2680,16 +2758,16 @@ packages:
     resolution: {integrity: sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==}
     engines: {node: '>=10'}
 
-  type-is@2.0.1:
-    resolution: {integrity: sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==}
-    engines: {node: '>= 0.6'}
+  type-is@2.1.0:
+    resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==}
+    engines: {node: '>= 18'}
 
-  typedoc@0.28.17:
-    resolution: {integrity: sha512-ZkJ2G7mZrbxrKxinTQMjFqsCoYY6a5Luwv2GKbTnBCEgV2ihYm5CflA9JnJAwH0pZWavqfYxmDkFHPt4yx2oDQ==}
+  typedoc@0.28.20:
+    resolution: {integrity: sha512-uSKqkh8Cr48vllnEy+jdaAgOeR6Y+QCBW7usgUsKj7gJEfR7stw9U/fE49LBnj2tPRKPY0c0EBJSWe9Appmplg==}
     engines: {node: '>= 18', pnpm: '>= 10'}
     hasBin: true
     peerDependencies:
-      typescript: 5.0.x || 5.1.x || 5.2.x || 5.3.x || 5.4.x || 5.5.x || 5.6.x || 5.7.x || 5.8.x || 5.9.x
+      typescript: 5.0.x || 5.1.x || 5.2.x || 5.3.x || 5.4.x || 5.5.x || 5.6.x || 5.7.x || 5.8.x || 5.9.x || 6.0.x
 
   typescript-eslint@8.55.0:
     resolution: {integrity: sha512-HE4wj+r5lmDVS9gdaN0/+iqNvPZwGfnJ5lZuz7s5vLlg9ODw0bIiiETaios9LvFI1U94/VBXGm3CB2Y5cNFMpw==}
@@ -2734,8 +2812,8 @@ packages:
     resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
     engines: {node: '>= 0.8'}
 
-  vite@7.3.1:
-    resolution: {integrity: sha512-w+N7Hifpc3gRjZ63vYBXA56dvvRlNWRczTdmCBBa+CotUzAPf5b7YMdMR/8CQoeYE5LX3W4wj6RYTgonm1b9DA==}
+  vite@7.3.5:
+    resolution: {integrity: sha512-KuOaNhcnGFN2zIPGA7wRmzF+lJA1sea7rHq17aiJ++9lzY1WWG6Jpwqwe1KNbRVPIqHmr8GLYx7jbrQcN/7/ww==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
     peerDependencies:
@@ -2749,7 +2827,7 @@ packages:
       sugarss: ^5.0.0
       terser: ^5.16.0
       tsx: ^4.8.1
-      yaml: ^2.4.2
+      yaml: 2.9.0
     peerDependenciesMeta:
       '@types/node':
         optional: true
@@ -2774,20 +2852,23 @@ packages:
       yaml:
         optional: true
 
-  vitest@4.0.18:
-    resolution: {integrity: sha512-hOQuK7h0FGKgBAas7v0mSAsnvrIgAvWmRFjmzpJ7SwFHH3g1k2u37JtYwOwmEKhK6ZO3v9ggDBBm0La1LCK4uQ==}
+  vitest@4.1.10:
+    resolution: {integrity: sha512-R9jUTe5S4Qb0HCd4TNqpC7oGcrMssMRGXLW80ubjWsW9VH5GF8y1Y0SFLY9AbqSk6nt0PnOx4H4WNJYZ13GUPw==}
     engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
     hasBin: true
     peerDependencies:
       '@edge-runtime/vm': '*'
       '@opentelemetry/api': ^1.9.0
       '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
-      '@vitest/browser-playwright': 4.0.18
-      '@vitest/browser-preview': 4.0.18
-      '@vitest/browser-webdriverio': 4.0.18
-      '@vitest/ui': 4.0.18
+      '@vitest/browser-playwright': 4.1.10
+      '@vitest/browser-preview': 4.1.10
+      '@vitest/browser-webdriverio': 4.1.10
+      '@vitest/coverage-istanbul': 4.1.10
+      '@vitest/coverage-v8': 4.1.10
+      '@vitest/ui': 4.1.10
       happy-dom: '*'
       jsdom: '*'
+      vite: 7.3.5
     peerDependenciesMeta:
       '@edge-runtime/vm':
         optional: true
@@ -2801,6 +2882,10 @@ packages:
         optional: true
       '@vitest/browser-webdriverio':
         optional: true
+      '@vitest/coverage-istanbul':
+        optional: true
+      '@vitest/coverage-v8':
+        optional: true
       '@vitest/ui':
         optional: true
       happy-dom:
@@ -2850,9 +2935,9 @@ packages:
     resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
     engines: {node: '>=0.10.0'}
 
-  wrap-ansi@7.0.0:
-    resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
-    engines: {node: '>=10'}
+  wrap-ansi@6.2.0:
+    resolution: {integrity: sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==}
+    engines: {node: '>=8'}
 
   wrap-ansi@9.0.2:
     resolution: {integrity: sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==}
@@ -2861,8 +2946,8 @@ packages:
   wrappy@1.0.2:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
 
-  ws@8.19.0:
-    resolution: {integrity: sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==}
+  ws@8.21.0:
+    resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
     engines: {node: '>=10.0.0'}
     peerDependencies:
       bufferutil: ^4.0.1
@@ -2880,8 +2965,8 @@ packages:
   xmlchars@2.2.0:
     resolution: {integrity: sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==}
 
-  yaml@2.8.2:
-    resolution: {integrity: sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==}
+  yaml@2.9.0:
+    resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==}
     engines: {node: '>= 14.6'}
     hasBin: true
 
@@ -2889,10 +2974,10 @@ packages:
     resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
     engines: {node: '>=10'}
 
-  zod-to-json-schema@3.25.1:
-    resolution: {integrity: sha512-pM/SU9d3YAggzi6MtR4h7ruuQlqKtad8e9S0fmxcMi+ueAK5Korys/aWcV9LIIHTVbj01NdzxcnXSN+O74ZIVA==}
+  zod-to-json-schema@3.25.2:
+    resolution: {integrity: sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA==}
     peerDependencies:
-      zod: ^3.25 || ^4
+      zod: ^3.25.28 || ^4
 
   zod@4.3.6:
     resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
@@ -2911,13 +2996,20 @@ snapshots:
 
   '@babel/code-frame@7.29.0':
     dependencies:
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-validator-identifier': 7.29.7
+      js-tokens: 4.0.0
+      picocolors: 1.1.1
+    optional: true
+
+  '@babel/code-frame@7.29.7':
+    dependencies:
+      '@babel/helper-validator-identifier': 7.29.7
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
   '@babel/helper-string-parser@7.27.1': {}
 
-  '@babel/helper-validator-identifier@7.28.5': {}
+  '@babel/helper-validator-identifier@7.29.7': {}
 
   '@babel/parser@7.29.0':
     dependencies:
@@ -2925,16 +3017,18 @@ snapshots:
 
   '@babel/runtime@7.28.6': {}
 
+  '@babel/runtime@7.29.7': {}
+
   '@babel/types@7.29.0':
     dependencies:
       '@babel/helper-string-parser': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-validator-identifier': 7.29.7
 
   '@bcoe/v8-coverage@1.0.2': {}
 
-  '@changesets/apply-release-plan@7.0.14':
+  '@changesets/apply-release-plan@7.1.1':
     dependencies:
-      '@changesets/config': 3.1.2
+      '@changesets/config': 3.1.4
       '@changesets/get-version-range-type': 0.4.0
       '@changesets/git': 3.0.4
       '@changesets/should-skip-package': 0.1.2
@@ -2948,10 +3042,10 @@ snapshots:
       resolve-from: 5.0.0
       semver: 7.7.4
 
-  '@changesets/assemble-release-plan@6.0.9':
+  '@changesets/assemble-release-plan@6.0.10':
     dependencies:
       '@changesets/errors': 0.2.0
-      '@changesets/get-dependents-graph': 2.1.3
+      '@changesets/get-dependents-graph': 2.1.4
       '@changesets/should-skip-package': 0.1.2
       '@changesets/types': 6.1.0
       '@manypkg/get-packages': 1.1.3
@@ -2961,30 +3055,28 @@ snapshots:
     dependencies:
       '@changesets/types': 6.1.0
 
-  '@changesets/cli@2.29.8(@types/node@24.10.13)':
+  '@changesets/cli@2.31.0(@types/node@24.10.13)':
     dependencies:
-      '@changesets/apply-release-plan': 7.0.14
-      '@changesets/assemble-release-plan': 6.0.9
+      '@changesets/apply-release-plan': 7.1.1
+      '@changesets/assemble-release-plan': 6.0.10
       '@changesets/changelog-git': 0.2.1
-      '@changesets/config': 3.1.2
+      '@changesets/config': 3.1.4
       '@changesets/errors': 0.2.0
-      '@changesets/get-dependents-graph': 2.1.3
-      '@changesets/get-release-plan': 4.0.14
+      '@changesets/get-dependents-graph': 2.1.4
+      '@changesets/get-release-plan': 4.0.16
       '@changesets/git': 3.0.4
       '@changesets/logger': 0.1.1
       '@changesets/pre': 2.0.2
-      '@changesets/read': 0.6.6
+      '@changesets/read': 0.6.7
       '@changesets/should-skip-package': 0.1.2
       '@changesets/types': 6.1.0
       '@changesets/write': 0.4.0
       '@inquirer/external-editor': 1.0.3(@types/node@24.10.13)
       '@manypkg/get-packages': 1.1.3
       ansi-colors: 4.1.3
-      ci-info: 3.9.0
       enquirer: 2.4.1
       fs-extra: 7.0.1
       mri: 1.2.0
-      p-limit: 2.3.0
       package-manager-detector: 0.2.11
       picocolors: 1.1.1
       resolve-from: 5.0.0
@@ -2994,11 +3086,12 @@ snapshots:
     transitivePeerDependencies:
       - '@types/node'
 
-  '@changesets/config@3.1.2':
+  '@changesets/config@3.1.4':
     dependencies:
       '@changesets/errors': 0.2.0
-      '@changesets/get-dependents-graph': 2.1.3
+      '@changesets/get-dependents-graph': 2.1.4
       '@changesets/logger': 0.1.1
+      '@changesets/should-skip-package': 0.1.2
       '@changesets/types': 6.1.0
       '@manypkg/get-packages': 1.1.3
       fs-extra: 7.0.1
@@ -3008,19 +3101,19 @@ snapshots:
     dependencies:
       extendable-error: 0.1.7
 
-  '@changesets/get-dependents-graph@2.1.3':
+  '@changesets/get-dependents-graph@2.1.4':
     dependencies:
       '@changesets/types': 6.1.0
       '@manypkg/get-packages': 1.1.3
       picocolors: 1.1.1
       semver: 7.7.4
 
-  '@changesets/get-release-plan@4.0.14':
+  '@changesets/get-release-plan@4.0.16':
     dependencies:
-      '@changesets/assemble-release-plan': 6.0.9
-      '@changesets/config': 3.1.2
+      '@changesets/assemble-release-plan': 6.0.10
+      '@changesets/config': 3.1.4
       '@changesets/pre': 2.0.2
-      '@changesets/read': 0.6.6
+      '@changesets/read': 0.6.7
       '@changesets/types': 6.1.0
       '@manypkg/get-packages': 1.1.3
 
@@ -3038,10 +3131,10 @@ snapshots:
     dependencies:
       picocolors: 1.1.1
 
-  '@changesets/parse@0.4.2':
+  '@changesets/parse@0.4.3':
     dependencies:
       '@changesets/types': 6.1.0
-      js-yaml: 4.1.1
+      js-yaml: 4.3.0
 
   '@changesets/pre@2.0.2':
     dependencies:
@@ -3050,11 +3143,11 @@ snapshots:
       '@manypkg/get-packages': 1.1.3
       fs-extra: 7.0.1
 
-  '@changesets/read@0.6.6':
+  '@changesets/read@0.6.7':
     dependencies:
       '@changesets/git': 3.0.4
       '@changesets/logger': 0.1.1
-      '@changesets/parse': 0.4.2
+      '@changesets/parse': 0.4.3
       '@changesets/types': 6.1.0
       fs-extra: 7.0.1
       p-filter: 2.1.0
@@ -3079,7 +3172,7 @@ snapshots:
   '@commitlint/config-validator@20.4.4':
     dependencies:
       '@commitlint/types': 20.4.4
-      ajv: 8.17.1
+      ajv: 8.20.0
     optional: true
 
   '@commitlint/execute-rule@20.0.0':
@@ -3137,82 +3230,84 @@ snapshots:
 
   '@csstools/css-tokenizer@3.0.4': {}
 
-  '@esbuild/aix-ppc64@0.27.3':
+  '@epic-web/invariant@1.0.0': {}
+
+  '@esbuild/aix-ppc64@0.28.1':
     optional: true
 
-  '@esbuild/android-arm64@0.27.3':
+  '@esbuild/android-arm64@0.28.1':
     optional: true
 
-  '@esbuild/android-arm@0.27.3':
+  '@esbuild/android-arm@0.28.1':
     optional: true
 
-  '@esbuild/android-x64@0.27.3':
+  '@esbuild/android-x64@0.28.1':
     optional: true
 
-  '@esbuild/darwin-arm64@0.27.3':
+  '@esbuild/darwin-arm64@0.28.1':
     optional: true
 
-  '@esbuild/darwin-x64@0.27.3':
+  '@esbuild/darwin-x64@0.28.1':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.27.3':
+  '@esbuild/freebsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/freebsd-x64@0.27.3':
+  '@esbuild/freebsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/linux-arm64@0.27.3':
+  '@esbuild/linux-arm64@0.28.1':
     optional: true
 
-  '@esbuild/linux-arm@0.27.3':
+  '@esbuild/linux-arm@0.28.1':
     optional: true
 
-  '@esbuild/linux-ia32@0.27.3':
+  '@esbuild/linux-ia32@0.28.1':
     optional: true
 
-  '@esbuild/linux-loong64@0.27.3':
+  '@esbuild/linux-loong64@0.28.1':
     optional: true
 
-  '@esbuild/linux-mips64el@0.27.3':
+  '@esbuild/linux-mips64el@0.28.1':
     optional: true
 
-  '@esbuild/linux-ppc64@0.27.3':
+  '@esbuild/linux-ppc64@0.28.1':
     optional: true
 
-  '@esbuild/linux-riscv64@0.27.3':
+  '@esbuild/linux-riscv64@0.28.1':
     optional: true
 
-  '@esbuild/linux-s390x@0.27.3':
+  '@esbuild/linux-s390x@0.28.1':
     optional: true
 
-  '@esbuild/linux-x64@0.27.3':
+  '@esbuild/linux-x64@0.28.1':
     optional: true
 
-  '@esbuild/netbsd-arm64@0.27.3':
+  '@esbuild/netbsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/netbsd-x64@0.27.3':
+  '@esbuild/netbsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/openbsd-arm64@0.27.3':
+  '@esbuild/openbsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/openbsd-x64@0.27.3':
+  '@esbuild/openbsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/openharmony-arm64@0.27.3':
+  '@esbuild/openharmony-arm64@0.28.1':
     optional: true
 
-  '@esbuild/sunos-x64@0.27.3':
+  '@esbuild/sunos-x64@0.28.1':
     optional: true
 
-  '@esbuild/win32-arm64@0.27.3':
+  '@esbuild/win32-arm64@0.28.1':
     optional: true
 
-  '@esbuild/win32-ia32@0.27.3':
+  '@esbuild/win32-ia32@0.28.1':
     optional: true
 
-  '@esbuild/win32-x64@0.27.3':
+  '@esbuild/win32-x64@0.28.1':
     optional: true
 
   '@eslint-community/eslint-utils@4.9.1(eslint@9.39.2(jiti@2.6.1))':
@@ -3226,7 +3321,7 @@ snapshots:
     dependencies:
       '@eslint/object-schema': 2.1.7
       debug: 4.4.3
-      minimatch: 3.1.2
+      minimatch: 3.1.4
     transitivePeerDependencies:
       - supports-color
 
@@ -3240,14 +3335,14 @@ snapshots:
 
   '@eslint/eslintrc@3.3.3':
     dependencies:
-      ajv: 6.12.6
+      ajv: 6.15.0
       debug: 4.4.3
       espree: 10.4.0
       globals: 14.0.0
       ignore: 5.3.2
       import-fresh: 3.3.1
-      js-yaml: 4.1.1
-      minimatch: 3.1.2
+      js-yaml: 4.3.0
+      minimatch: 3.1.4
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
       - supports-color
@@ -3269,9 +3364,9 @@ snapshots:
       '@shikijs/types': 3.23.0
       '@shikijs/vscode-textmate': 10.0.2
 
-  '@hono/node-server@1.19.9(hono@4.11.9)':
+  '@hono/node-server@1.19.14(hono@4.12.29)':
     dependencies:
-      hono: 4.11.9
+      hono: 4.12.29
 
   '@humanfs/core@0.19.1': {}
 
@@ -3287,7 +3382,7 @@ snapshots:
   '@inquirer/external-editor@1.0.3(@types/node@24.10.13)':
     dependencies:
       chardet: 2.1.1
-      iconv-lite: 0.7.2
+      iconv-lite: 0.7.3
     optionalDependencies:
       '@types/node': 24.10.13
 
@@ -3307,39 +3402,39 @@ snapshots:
 
   '@manypkg/find-root@1.1.0':
     dependencies:
-      '@babel/runtime': 7.28.6
+      '@babel/runtime': 7.29.7
       '@types/node': 12.20.55
       find-up: 4.1.0
       fs-extra: 8.1.0
 
   '@manypkg/get-packages@1.1.3':
     dependencies:
-      '@babel/runtime': 7.28.6
+      '@babel/runtime': 7.29.7
       '@changesets/types': 4.1.0
       '@manypkg/find-root': 1.1.0
       fs-extra: 8.1.0
       globby: 11.1.0
       read-yaml-file: 1.1.0
 
-  '@modelcontextprotocol/sdk@1.26.0(zod@4.3.6)':
+  '@modelcontextprotocol/sdk@1.29.0(zod@4.3.6)':
     dependencies:
-      '@hono/node-server': 1.19.9(hono@4.11.9)
-      ajv: 8.17.1
-      ajv-formats: 3.0.1(ajv@8.17.1)
+      '@hono/node-server': 1.19.14(hono@4.12.29)
+      ajv: 8.20.0
+      ajv-formats: 3.0.1(ajv@8.20.0)
       content-type: 1.0.5
       cors: 2.8.6
       cross-spawn: 7.0.6
       eventsource: 3.0.7
-      eventsource-parser: 3.0.6
+      eventsource-parser: 3.1.0
       express: 5.2.1
-      express-rate-limit: 8.2.1(express@5.2.1)
-      hono: 4.11.9
-      jose: 6.1.3
+      express-rate-limit: 8.5.2(express@5.2.1)
+      hono: 4.12.29
+      jose: 6.2.3
       json-schema-typed: 8.0.2
       pkce-challenge: 5.0.1
       raw-body: 3.0.2
       zod: 4.3.6
-      zod-to-json-schema: 3.25.1(zod@4.3.6)
+      zod-to-json-schema: 3.25.2(zod@4.3.6)
     transitivePeerDependencies:
       - supports-color
 
@@ -3355,79 +3450,79 @@ snapshots:
       '@nodelib/fs.scandir': 2.1.5
       fastq: 1.20.1
 
-  '@rollup/rollup-android-arm-eabi@4.57.1':
+  '@rollup/rollup-android-arm-eabi@4.62.2':
     optional: true
 
-  '@rollup/rollup-android-arm64@4.57.1':
+  '@rollup/rollup-android-arm64@4.62.2':
     optional: true
 
-  '@rollup/rollup-darwin-arm64@4.57.1':
+  '@rollup/rollup-darwin-arm64@4.62.2':
     optional: true
 
-  '@rollup/rollup-darwin-x64@4.57.1':
+  '@rollup/rollup-darwin-x64@4.62.2':
     optional: true
 
-  '@rollup/rollup-freebsd-arm64@4.57.1':
+  '@rollup/rollup-freebsd-arm64@4.62.2':
     optional: true
 
-  '@rollup/rollup-freebsd-x64@4.57.1':
+  '@rollup/rollup-freebsd-x64@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-arm-gnueabihf@4.57.1':
+  '@rollup/rollup-linux-arm-gnueabihf@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-arm-musleabihf@4.57.1':
+  '@rollup/rollup-linux-arm-musleabihf@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-arm64-gnu@4.57.1':
+  '@rollup/rollup-linux-arm64-gnu@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-arm64-musl@4.57.1':
+  '@rollup/rollup-linux-arm64-musl@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-loong64-gnu@4.57.1':
+  '@rollup/rollup-linux-loong64-gnu@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-loong64-musl@4.57.1':
+  '@rollup/rollup-linux-loong64-musl@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-ppc64-gnu@4.57.1':
+  '@rollup/rollup-linux-ppc64-gnu@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-ppc64-musl@4.57.1':
+  '@rollup/rollup-linux-ppc64-musl@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-riscv64-gnu@4.57.1':
+  '@rollup/rollup-linux-riscv64-gnu@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-riscv64-musl@4.57.1':
+  '@rollup/rollup-linux-riscv64-musl@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-s390x-gnu@4.57.1':
+  '@rollup/rollup-linux-s390x-gnu@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-x64-gnu@4.57.1':
+  '@rollup/rollup-linux-x64-gnu@4.62.2':
     optional: true
 
-  '@rollup/rollup-linux-x64-musl@4.57.1':
+  '@rollup/rollup-linux-x64-musl@4.62.2':
     optional: true
 
-  '@rollup/rollup-openbsd-x64@4.57.1':
+  '@rollup/rollup-openbsd-x64@4.62.2':
     optional: true
 
-  '@rollup/rollup-openharmony-arm64@4.57.1':
+  '@rollup/rollup-openharmony-arm64@4.62.2':
     optional: true
 
-  '@rollup/rollup-win32-arm64-msvc@4.57.1':
+  '@rollup/rollup-win32-arm64-msvc@4.62.2':
     optional: true
 
-  '@rollup/rollup-win32-ia32-msvc@4.57.1':
+  '@rollup/rollup-win32-ia32-msvc@4.62.2':
     optional: true
 
-  '@rollup/rollup-win32-x64-gnu@4.57.1':
+  '@rollup/rollup-win32-x64-gnu@4.62.2':
     optional: true
 
-  '@rollup/rollup-win32-x64-msvc@4.57.1':
+  '@rollup/rollup-win32-x64-msvc@4.62.2':
     optional: true
 
   '@shikijs/engine-oniguruma@3.23.0':
@@ -3457,8 +3552,8 @@ snapshots:
 
   '@testing-library/dom@10.4.1':
     dependencies:
-      '@babel/code-frame': 7.29.0
-      '@babel/runtime': 7.28.6
+      '@babel/code-frame': 7.29.7
+      '@babel/runtime': 7.29.7
       '@types/aria-query': 5.0.4
       aria-query: 5.3.0
       dom-accessibility-api: 0.5.16
@@ -3489,6 +3584,24 @@ snapshots:
     dependencies:
       '@testing-library/dom': 10.4.1
 
+  '@turbo/darwin-64@2.9.18':
+    optional: true
+
+  '@turbo/darwin-arm64@2.9.18':
+    optional: true
+
+  '@turbo/linux-64@2.9.18':
+    optional: true
+
+  '@turbo/linux-arm64@2.9.18':
+    optional: true
+
+  '@turbo/windows-64@2.9.18':
+    optional: true
+
+  '@turbo/windows-arm64@2.9.18':
+    optional: true
+
   '@types/aria-query@5.0.4': {}
 
   '@types/chai@5.2.3':
@@ -3500,6 +3613,8 @@ snapshots:
 
   '@types/estree@1.0.8': {}
 
+  '@types/estree@1.0.9': {}
+
   '@types/hast@3.0.4':
     dependencies:
       '@types/unist': 3.0.3
@@ -3589,7 +3704,7 @@ snapshots:
       '@typescript-eslint/types': 8.55.0
       '@typescript-eslint/visitor-keys': 8.55.0
       debug: 4.4.3
-      minimatch: 9.0.5
+      minimatch: 9.0.7
       semver: 7.7.4
       tinyglobby: 0.2.15
       ts-api-utils: 2.4.0(typescript@5.9.3)
@@ -3613,58 +3728,60 @@ snapshots:
       '@typescript-eslint/types': 8.55.0
       eslint-visitor-keys: 4.2.1
 
-  '@vitest/coverage-v8@4.0.18(vitest@4.0.18(@types/node@24.10.13)(jiti@2.6.1)(jsdom@26.1.0)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/coverage-v8@4.1.10(vitest@4.1.10)':
     dependencies:
       '@bcoe/v8-coverage': 1.0.2
-      '@vitest/utils': 4.0.18
-      ast-v8-to-istanbul: 0.3.12
+      '@vitest/utils': 4.1.10
+      ast-v8-to-istanbul: 1.0.4
       istanbul-lib-coverage: 3.2.2
       istanbul-lib-report: 3.0.1
       istanbul-reports: 3.2.0
       magicast: 0.5.2
       obug: 2.1.1
-      std-env: 3.10.0
-      tinyrainbow: 3.0.3
-      vitest: 4.0.18(@types/node@24.10.13)(jiti@2.6.1)(jsdom@26.1.0)(tsx@4.21.0)(yaml@2.8.2)
+      std-env: 4.2.0
+      tinyrainbow: 3.1.0
+      vitest: 4.1.10(@types/node@24.10.13)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0))
 
-  '@vitest/expect@4.0.18':
+  '@vitest/expect@4.1.10':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@vitest/spy': 4.0.18
-      '@vitest/utils': 4.0.18
+      '@vitest/spy': 4.1.10
+      '@vitest/utils': 4.1.10
       chai: 6.2.2
-      tinyrainbow: 3.0.3
+      tinyrainbow: 3.1.0
 
-  '@vitest/mocker@4.0.18(vite@7.3.1(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@4.1.10(vite@7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
-      '@vitest/spy': 4.0.18
+      '@vitest/spy': 4.1.10
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.1(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0)
 
-  '@vitest/pretty-format@4.0.18':
+  '@vitest/pretty-format@4.1.10':
     dependencies:
-      tinyrainbow: 3.0.3
+      tinyrainbow: 3.1.0
 
-  '@vitest/runner@4.0.18':
+  '@vitest/runner@4.1.10':
     dependencies:
-      '@vitest/utils': 4.0.18
+      '@vitest/utils': 4.1.10
       pathe: 2.0.3
 
-  '@vitest/snapshot@4.0.18':
+  '@vitest/snapshot@4.1.10':
     dependencies:
-      '@vitest/pretty-format': 4.0.18
+      '@vitest/pretty-format': 4.1.10
+      '@vitest/utils': 4.1.10
       magic-string: 0.30.21
       pathe: 2.0.3
 
-  '@vitest/spy@4.0.18': {}
+  '@vitest/spy@4.1.10': {}
 
-  '@vitest/utils@4.0.18':
+  '@vitest/utils@4.1.10':
     dependencies:
-      '@vitest/pretty-format': 4.0.18
-      tinyrainbow: 3.0.3
+      '@vitest/pretty-format': 4.1.10
+      convert-source-map: 2.0.0
+      tinyrainbow: 3.1.0
 
   '@zumer/snapdom@2.0.2': {}
 
@@ -3681,21 +3798,21 @@ snapshots:
 
   agent-base@7.1.4: {}
 
-  ajv-formats@3.0.1(ajv@8.17.1):
+  ajv-formats@3.0.1(ajv@8.20.0):
     optionalDependencies:
-      ajv: 8.17.1
+      ajv: 8.20.0
 
-  ajv@6.12.6:
+  ajv@6.15.0:
     dependencies:
       fast-deep-equal: 3.1.3
       fast-json-stable-stringify: 2.1.0
       json-schema-traverse: 0.4.1
       uri-js: 4.4.1
 
-  ajv@8.17.1:
+  ajv@8.20.0:
     dependencies:
       fast-deep-equal: 3.1.3
-      fast-uri: 3.1.0
+      fast-uri: 3.1.2
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
@@ -3743,7 +3860,7 @@ snapshots:
 
   assertion-error@2.0.1: {}
 
-  ast-v8-to-istanbul@0.3.12:
+  ast-v8-to-istanbul@1.0.4:
     dependencies:
       '@jridgewell/trace-mapping': 0.3.31
       estree-walker: 3.0.3
@@ -3753,6 +3870,8 @@ snapshots:
 
   balanced-match@1.0.2: {}
 
+  balanced-match@4.0.4: {}
+
   base64-js@1.5.1: {}
 
   better-path-resolve@1.0.0:
@@ -3765,28 +3884,28 @@ snapshots:
       inherits: 2.0.4
       readable-stream: 3.6.2
 
-  body-parser@2.2.2:
+  body-parser@2.3.0:
     dependencies:
       bytes: 3.1.2
-      content-type: 1.0.5
+      content-type: 2.0.0
       debug: 4.4.3
       http-errors: 2.0.1
-      iconv-lite: 0.7.2
+      iconv-lite: 0.7.3
       on-finished: 2.4.1
-      qs: 6.14.2
+      qs: 6.15.3
       raw-body: 3.0.2
-      type-is: 2.0.1
+      type-is: 2.1.0
     transitivePeerDependencies:
       - supports-color
 
-  brace-expansion@1.1.12:
+  brace-expansion@1.1.16:
     dependencies:
       balanced-match: 1.0.2
       concat-map: 0.0.1
 
-  brace-expansion@2.0.2:
+  brace-expansion@5.0.7:
     dependencies:
-      balanced-match: 1.0.2
+      balanced-match: 4.0.4
 
   braces@3.0.3:
     dependencies:
@@ -3797,16 +3916,16 @@ snapshots:
       base64-js: 1.5.1
       ieee754: 1.2.1
 
-  bundle-require@5.1.0(esbuild@0.27.3):
+  bundle-require@5.1.0(esbuild@0.28.1):
     dependencies:
-      esbuild: 0.27.3
+      esbuild: 0.28.1
       load-tsconfig: 0.2.5
 
   bytes@3.1.2: {}
 
   cac@6.7.14: {}
 
-  cachedir@2.3.0: {}
+  cachedir@2.4.0: {}
 
   call-bind-apply-helpers@1.0.2:
     dependencies:
@@ -3833,16 +3952,12 @@ snapshots:
       ansi-styles: 4.3.0
       supports-color: 7.2.0
 
-  chardet@0.7.0: {}
-
   chardet@2.1.1: {}
 
   chokidar@4.0.3:
     dependencies:
       readdirp: 4.1.2
 
-  ci-info@3.9.0: {}
-
   class-variance-authority@0.7.1:
     dependencies:
       clsx: 2.1.1
@@ -3886,9 +4001,9 @@ snapshots:
 
   commander@4.1.1: {}
 
-  commitizen@4.3.1(@types/node@24.10.13)(typescript@5.9.3):
+  commitizen@4.3.2(@types/node@24.10.13)(typescript@5.9.3):
     dependencies:
-      cachedir: 2.3.0
+      cachedir: 2.4.0
       cz-conventional-changelog: 3.3.0(@types/node@24.10.13)(typescript@5.9.3)
       dedent: 0.7.0
       detect-indent: 6.1.0
@@ -3896,10 +4011,10 @@ snapshots:
       find-root: 1.1.0
       fs-extra: 9.1.0
       glob: 7.2.3
-      inquirer: 8.2.5
+      inquirer: 8.2.7(@types/node@24.10.13)
       is-utf8: 0.2.1
-      lodash: 4.17.21
-      minimist: 1.2.7
+      lodash: 4.18.1
+      minimist: 1.2.8
       strip-bom: 4.0.0
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -3912,10 +4027,12 @@ snapshots:
 
   consola@3.4.2: {}
 
-  content-disposition@1.0.1: {}
+  content-disposition@1.1.0: {}
 
   content-type@1.0.5: {}
 
+  content-type@2.0.0: {}
+
   conventional-commit-types@3.0.0: {}
 
   conventional-commits-parser@6.3.0:
@@ -3924,6 +4041,8 @@ snapshots:
       meow: 13.2.0
     optional: true
 
+  convert-source-map@2.0.0: {}
+
   cookie-signature@1.2.2: {}
 
   cookie@0.7.2: {}
@@ -3947,12 +4066,17 @@ snapshots:
     dependencies:
       env-paths: 2.2.1
       import-fresh: 3.3.1
-      js-yaml: 4.1.1
+      js-yaml: 4.3.0
       parse-json: 5.2.0
     optionalDependencies:
       typescript: 5.9.3
     optional: true
 
+  cross-env@10.1.0:
+    dependencies:
+      '@epic-web/invariant': 1.0.0
+      cross-spawn: 7.0.6
+
   cross-spawn@7.0.6:
     dependencies:
       path-key: 3.1.1
@@ -3971,7 +4095,7 @@ snapshots:
   cz-conventional-changelog@3.3.0(@types/node@24.10.13)(typescript@5.9.3):
     dependencies:
       chalk: 2.4.2
-      commitizen: 4.3.1(@types/node@24.10.13)(typescript@5.9.3)
+      commitizen: 4.3.2(@types/node@24.10.13)(typescript@5.9.3)
       conventional-commit-types: 3.0.0
       lodash.map: 4.6.0
       longest: 2.0.1
@@ -4054,40 +4178,40 @@ snapshots:
 
   es-errors@1.3.0: {}
 
-  es-module-lexer@1.7.0: {}
+  es-module-lexer@2.3.0: {}
 
-  es-object-atoms@1.1.1:
+  es-object-atoms@1.1.2:
     dependencies:
       es-errors: 1.3.0
 
-  esbuild@0.27.3:
+  esbuild@0.28.1:
     optionalDependencies:
-      '@esbuild/aix-ppc64': 0.27.3
-      '@esbuild/android-arm': 0.27.3
-      '@esbuild/android-arm64': 0.27.3
-      '@esbuild/android-x64': 0.27.3
-      '@esbuild/darwin-arm64': 0.27.3
-      '@esbuild/darwin-x64': 0.27.3
-      '@esbuild/freebsd-arm64': 0.27.3
-      '@esbuild/freebsd-x64': 0.27.3
-      '@esbuild/linux-arm': 0.27.3
-      '@esbuild/linux-arm64': 0.27.3
-      '@esbuild/linux-ia32': 0.27.3
-      '@esbuild/linux-loong64': 0.27.3
-      '@esbuild/linux-mips64el': 0.27.3
-      '@esbuild/linux-ppc64': 0.27.3
-      '@esbuild/linux-riscv64': 0.27.3
-      '@esbuild/linux-s390x': 0.27.3
-      '@esbuild/linux-x64': 0.27.3
-      '@esbuild/netbsd-arm64': 0.27.3
-      '@esbuild/netbsd-x64': 0.27.3
-      '@esbuild/openbsd-arm64': 0.27.3
-      '@esbuild/openbsd-x64': 0.27.3
-      '@esbuild/openharmony-arm64': 0.27.3
-      '@esbuild/sunos-x64': 0.27.3
-      '@esbuild/win32-arm64': 0.27.3
-      '@esbuild/win32-ia32': 0.27.3
-      '@esbuild/win32-x64': 0.27.3
+      '@esbuild/aix-ppc64': 0.28.1
+      '@esbuild/android-arm': 0.28.1
+      '@esbuild/android-arm64': 0.28.1
+      '@esbuild/android-x64': 0.28.1
+      '@esbuild/darwin-arm64': 0.28.1
+      '@esbuild/darwin-x64': 0.28.1
+      '@esbuild/freebsd-arm64': 0.28.1
+      '@esbuild/freebsd-x64': 0.28.1
+      '@esbuild/linux-arm': 0.28.1
+      '@esbuild/linux-arm64': 0.28.1
+      '@esbuild/linux-ia32': 0.28.1
+      '@esbuild/linux-loong64': 0.28.1
+      '@esbuild/linux-mips64el': 0.28.1
+      '@esbuild/linux-ppc64': 0.28.1
+      '@esbuild/linux-riscv64': 0.28.1
+      '@esbuild/linux-s390x': 0.28.1
+      '@esbuild/linux-x64': 0.28.1
+      '@esbuild/netbsd-arm64': 0.28.1
+      '@esbuild/netbsd-x64': 0.28.1
+      '@esbuild/openbsd-arm64': 0.28.1
+      '@esbuild/openbsd-x64': 0.28.1
+      '@esbuild/openharmony-arm64': 0.28.1
+      '@esbuild/sunos-x64': 0.28.1
+      '@esbuild/win32-arm64': 0.28.1
+      '@esbuild/win32-ia32': 0.28.1
+      '@esbuild/win32-x64': 0.28.1
 
   escape-html@1.0.3: {}
 
@@ -4118,7 +4242,7 @@ snapshots:
       '@humanwhocodes/module-importer': 1.0.1
       '@humanwhocodes/retry': 0.4.3
       '@types/estree': 1.0.8
-      ajv: 6.12.6
+      ajv: 6.15.0
       chalk: 4.1.2
       cross-spawn: 7.0.6
       debug: 4.4.3
@@ -4137,7 +4261,7 @@ snapshots:
       is-glob: 4.0.3
       json-stable-stringify-without-jsonify: 1.0.1
       lodash.merge: 4.6.2
-      minimatch: 3.1.2
+      minimatch: 3.1.4
       natural-compare: 1.4.0
       optionator: 0.9.4
     optionalDependencies:
@@ -4165,7 +4289,7 @@ snapshots:
 
   estree-walker@3.0.3:
     dependencies:
-      '@types/estree': 1.0.8
+      '@types/estree': 1.0.9
 
   esutils@2.0.3: {}
 
@@ -4173,11 +4297,11 @@ snapshots:
 
   eventemitter3@5.0.4: {}
 
-  eventsource-parser@3.0.6: {}
+  eventsource-parser@3.1.0: {}
 
   eventsource@3.0.7:
     dependencies:
-      eventsource-parser: 3.0.6
+      eventsource-parser: 3.1.0
 
   expand-tilde@2.0.2:
     dependencies:
@@ -4185,16 +4309,16 @@ snapshots:
 
   expect-type@1.3.0: {}
 
-  express-rate-limit@8.2.1(express@5.2.1):
+  express-rate-limit@8.5.2(express@5.2.1):
     dependencies:
       express: 5.2.1
-      ip-address: 10.0.1
+      ip-address: 10.2.0
 
   express@5.2.1:
     dependencies:
       accepts: 2.0.0
-      body-parser: 2.2.2
-      content-disposition: 1.0.1
+      body-parser: 2.3.0
+      content-disposition: 1.1.0
       content-type: 1.0.5
       cookie: 0.7.2
       cookie-signature: 1.2.2
@@ -4212,25 +4336,19 @@ snapshots:
       once: 1.4.0
       parseurl: 1.3.3
       proxy-addr: 2.0.7
-      qs: 6.14.2
-      range-parser: 1.2.1
+      qs: 6.15.3
+      range-parser: 1.3.0
       router: 2.2.0
       send: 1.2.1
       serve-static: 2.2.1
       statuses: 2.0.2
-      type-is: 2.0.1
+      type-is: 2.1.0
       vary: 1.1.2
     transitivePeerDependencies:
       - supports-color
 
   extendable-error@0.1.7: {}
 
-  external-editor@3.1.0:
-    dependencies:
-      chardet: 0.7.0
-      iconv-lite: 0.4.24
-      tmp: 0.0.33
-
   fake-indexeddb@6.2.5: {}
 
   fast-deep-equal@3.1.3: {}
@@ -4247,15 +4365,15 @@ snapshots:
 
   fast-levenshtein@2.0.6: {}
 
-  fast-uri@3.1.0: {}
+  fast-uri@3.1.2: {}
 
   fastq@1.20.1:
     dependencies:
       reusify: 1.1.0
 
-  fdir@6.5.0(picomatch@4.0.3):
+  fdir@6.5.0(picomatch@4.0.5):
     optionalDependencies:
-      picomatch: 4.0.3
+      picomatch: 4.0.5
 
   figures@3.2.0:
     dependencies:
@@ -4308,14 +4426,14 @@ snapshots:
     dependencies:
       magic-string: 0.30.21
       mlly: 1.8.0
-      rollup: 4.57.1
+      rollup: 4.62.2
 
   flat-cache@4.0.1:
     dependencies:
-      flatted: 3.3.3
+      flatted: 3.4.2
       keyv: 4.5.4
 
-  flatted@3.3.3: {}
+  flatted@3.4.2: {}
 
   forwarded@0.2.0: {}
 
@@ -4354,18 +4472,18 @@ snapshots:
       call-bind-apply-helpers: 1.0.2
       es-define-property: 1.0.1
       es-errors: 1.3.0
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
       function-bind: 1.1.2
       get-proto: 1.0.1
       gopd: 1.2.0
       has-symbols: 1.1.0
-      hasown: 2.0.2
+      hasown: 2.0.4
       math-intrinsics: 1.1.0
 
   get-proto@1.0.1:
     dependencies:
       dunder-proto: 1.0.1
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
 
   get-tsconfig@4.13.6:
     dependencies:
@@ -4384,7 +4502,7 @@ snapshots:
       fs.realpath: 1.0.0
       inflight: 1.0.6
       inherits: 2.0.4
-      minimatch: 3.1.2
+      minimatch: 3.1.4
       once: 1.4.0
       path-is-absolute: 1.0.1
 
@@ -4430,7 +4548,7 @@ snapshots:
 
   has-symbols@1.1.0: {}
 
-  hasown@2.0.2:
+  hasown@2.0.4:
     dependencies:
       function-bind: 1.1.2
 
@@ -4438,7 +4556,7 @@ snapshots:
     dependencies:
       parse-passwd: 1.0.0
 
-  hono@4.11.9: {}
+  hono@4.12.29: {}
 
   html-encoding-sniffer@4.0.0:
     dependencies:
@@ -4472,15 +4590,11 @@ snapshots:
 
   husky@9.1.7: {}
 
-  iconv-lite@0.4.24:
-    dependencies:
-      safer-buffer: 2.1.2
-
   iconv-lite@0.6.3:
     dependencies:
       safer-buffer: 2.1.2
 
-  iconv-lite@0.7.2:
+  iconv-lite@0.7.3:
     dependencies:
       safer-buffer: 2.1.2
 
@@ -4516,15 +4630,15 @@ snapshots:
   ini@4.1.1:
     optional: true
 
-  inquirer@8.2.5:
+  inquirer@8.2.7(@types/node@24.10.13):
     dependencies:
+      '@inquirer/external-editor': 1.0.3(@types/node@24.10.13)
       ansi-escapes: 4.3.2
       chalk: 4.1.2
       cli-cursor: 3.1.0
       cli-width: 3.0.0
-      external-editor: 3.1.0
       figures: 3.2.0
-      lodash: 4.17.21
+      lodash: 4.18.1
       mute-stream: 0.0.8
       ora: 5.4.1
       run-async: 2.4.1
@@ -4532,9 +4646,11 @@ snapshots:
       string-width: 4.2.3
       strip-ansi: 6.0.1
       through: 2.3.8
-      wrap-ansi: 7.0.0
+      wrap-ansi: 6.2.0
+    transitivePeerDependencies:
+      - '@types/node'
 
-  ip-address@10.0.1: {}
+  ip-address@10.2.0: {}
 
   ipaddr.js@1.9.1: {}
 
@@ -4594,7 +4710,7 @@ snapshots:
   jiti@2.6.1:
     optional: true
 
-  jose@6.1.3: {}
+  jose@6.2.3: {}
 
   joycon@3.1.1: {}
 
@@ -4602,12 +4718,12 @@ snapshots:
 
   js-tokens@4.0.0: {}
 
-  js-yaml@3.14.2:
+  js-yaml@3.15.0:
     dependencies:
       argparse: 1.0.10
       esprima: 4.0.1
 
-  js-yaml@4.1.1:
+  js-yaml@4.3.0:
     dependencies:
       argparse: 2.0.1
 
@@ -4631,7 +4747,7 @@ snapshots:
       whatwg-encoding: 3.1.1
       whatwg-mimetype: 4.0.0
       whatwg-url: 14.2.0
-      ws: 8.19.0
+      ws: 8.21.0
       xml-name-validator: 5.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -4685,7 +4801,7 @@ snapshots:
 
   lines-and-columns@1.2.4: {}
 
-  linkify-it@5.0.0:
+  linkify-it@5.0.2:
     dependencies:
       uc.micro: 2.1.0
 
@@ -4697,7 +4813,7 @@ snapshots:
       nano-spawn: 2.0.0
       pidtree: 0.6.0
       string-argv: 0.3.2
-      yaml: 2.8.2
+      yaml: 2.9.0
 
   listr2@9.0.5:
     dependencies:
@@ -4727,7 +4843,7 @@ snapshots:
 
   lodash.startcase@4.4.0: {}
 
-  lodash@4.17.21: {}
+  lodash@4.18.1: {}
 
   log-symbols@4.1.0:
     dependencies:
@@ -4764,11 +4880,11 @@ snapshots:
     dependencies:
       semver: 7.7.4
 
-  markdown-it@14.1.1:
+  markdown-it@14.3.0:
     dependencies:
       argparse: 2.0.1
       entities: 4.5.0
-      linkify-it: 5.0.0
+      linkify-it: 5.0.2
       mdurl: 2.0.0
       punycode.js: 2.3.1
       uc.micro: 2.1.0
@@ -4791,7 +4907,7 @@ snapshots:
   micromatch@4.0.8:
     dependencies:
       braces: 3.0.3
-      picomatch: 2.3.1
+      picomatch: 2.3.2
 
   mime-db@1.54.0: {}
 
@@ -4805,15 +4921,19 @@ snapshots:
 
   min-indent@1.0.1: {}
 
-  minimatch@3.1.2:
+  minimatch@10.2.5:
+    dependencies:
+      brace-expansion: 5.0.7
+
+  minimatch@3.1.4:
     dependencies:
-      brace-expansion: 1.1.12
+      brace-expansion: 1.1.16
 
-  minimatch@9.0.5:
+  minimatch@9.0.7:
     dependencies:
-      brace-expansion: 2.0.2
+      brace-expansion: 5.0.7
 
-  minimist@1.2.7: {}
+  minimist@1.2.8: {}
 
   mlly@1.8.0:
     dependencies:
@@ -4836,7 +4956,7 @@ snapshots:
 
   nano-spawn@2.0.0: {}
 
-  nanoid@3.3.11: {}
+  nanoid@3.3.15: {}
 
   natural-compare@1.4.0: {}
 
@@ -4887,8 +5007,6 @@ snapshots:
       strip-ansi: 6.0.1
       wcwidth: 1.0.1
 
-  os-tmpdir@1.0.2: {}
-
   outdent@0.5.0: {}
 
   p-filter@2.1.0:
@@ -4947,7 +5065,7 @@ snapshots:
 
   path-key@3.1.1: {}
 
-  path-to-regexp@8.3.0: {}
+  path-to-regexp@8.4.2: {}
 
   path-type@4.0.0: {}
 
@@ -4955,9 +5073,9 @@ snapshots:
 
   picocolors@1.1.1: {}
 
-  picomatch@2.3.1: {}
+  picomatch@2.3.2: {}
 
-  picomatch@4.0.3: {}
+  picomatch@4.0.5: {}
 
   pidtree@0.6.0: {}
 
@@ -4973,18 +5091,18 @@ snapshots:
       mlly: 1.8.0
       pathe: 2.0.3
 
-  postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.21.0)(yaml@2.8.2):
+  postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.16)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
       lilconfig: 3.1.3
     optionalDependencies:
       jiti: 2.6.1
-      postcss: 8.5.6
+      postcss: 8.5.16
       tsx: 4.21.0
-      yaml: 2.8.2
+      yaml: 2.9.0
 
-  postcss@8.5.6:
+  postcss@8.5.16:
     dependencies:
-      nanoid: 3.3.11
+      nanoid: 3.3.15
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
@@ -5011,21 +5129,22 @@ snapshots:
 
   punycode@2.3.1: {}
 
-  qs@6.14.2:
+  qs@6.15.3:
     dependencies:
-      side-channel: 1.1.0
+      es-define-property: 1.0.1
+      side-channel: 1.1.1
 
   quansync@0.2.11: {}
 
   queue-microtask@1.2.3: {}
 
-  range-parser@1.2.1: {}
+  range-parser@1.3.0: {}
 
   raw-body@3.0.2:
     dependencies:
       bytes: 3.1.2
       http-errors: 2.0.1
-      iconv-lite: 0.7.2
+      iconv-lite: 0.7.3
       unpipe: 1.0.0
 
   react-dom@19.2.4(react@19.2.4):
@@ -5040,7 +5159,7 @@ snapshots:
   read-yaml-file@1.1.0:
     dependencies:
       graceful-fs: 4.2.11
-      js-yaml: 3.14.2
+      js-yaml: 3.15.0
       pify: 4.0.1
       strip-bom: 3.0.0
 
@@ -5094,35 +5213,35 @@ snapshots:
 
   rfdc@1.4.1: {}
 
-  rollup@4.57.1:
+  rollup@4.62.2:
     dependencies:
-      '@types/estree': 1.0.8
+      '@types/estree': 1.0.9
     optionalDependencies:
-      '@rollup/rollup-android-arm-eabi': 4.57.1
-      '@rollup/rollup-android-arm64': 4.57.1
-      '@rollup/rollup-darwin-arm64': 4.57.1
-      '@rollup/rollup-darwin-x64': 4.57.1
-      '@rollup/rollup-freebsd-arm64': 4.57.1
-      '@rollup/rollup-freebsd-x64': 4.57.1
-      '@rollup/rollup-linux-arm-gnueabihf': 4.57.1
-      '@rollup/rollup-linux-arm-musleabihf': 4.57.1
-      '@rollup/rollup-linux-arm64-gnu': 4.57.1
-      '@rollup/rollup-linux-arm64-musl': 4.57.1
-      '@rollup/rollup-linux-loong64-gnu': 4.57.1
-      '@rollup/rollup-linux-loong64-musl': 4.57.1
-      '@rollup/rollup-linux-ppc64-gnu': 4.57.1
-      '@rollup/rollup-linux-ppc64-musl': 4.57.1
-      '@rollup/rollup-linux-riscv64-gnu': 4.57.1
-      '@rollup/rollup-linux-riscv64-musl': 4.57.1
-      '@rollup/rollup-linux-s390x-gnu': 4.57.1
-      '@rollup/rollup-linux-x64-gnu': 4.57.1
-      '@rollup/rollup-linux-x64-musl': 4.57.1
-      '@rollup/rollup-openbsd-x64': 4.57.1
-      '@rollup/rollup-openharmony-arm64': 4.57.1
-      '@rollup/rollup-win32-arm64-msvc': 4.57.1
-      '@rollup/rollup-win32-ia32-msvc': 4.57.1
-      '@rollup/rollup-win32-x64-gnu': 4.57.1
-      '@rollup/rollup-win32-x64-msvc': 4.57.1
+      '@rollup/rollup-android-arm-eabi': 4.62.2
+      '@rollup/rollup-android-arm64': 4.62.2
+      '@rollup/rollup-darwin-arm64': 4.62.2
+      '@rollup/rollup-darwin-x64': 4.62.2
+      '@rollup/rollup-freebsd-arm64': 4.62.2
+      '@rollup/rollup-freebsd-x64': 4.62.2
+      '@rollup/rollup-linux-arm-gnueabihf': 4.62.2
+      '@rollup/rollup-linux-arm-musleabihf': 4.62.2
+      '@rollup/rollup-linux-arm64-gnu': 4.62.2
+      '@rollup/rollup-linux-arm64-musl': 4.62.2
+      '@rollup/rollup-linux-loong64-gnu': 4.62.2
+      '@rollup/rollup-linux-loong64-musl': 4.62.2
+      '@rollup/rollup-linux-ppc64-gnu': 4.62.2
+      '@rollup/rollup-linux-ppc64-musl': 4.62.2
+      '@rollup/rollup-linux-riscv64-gnu': 4.62.2
+      '@rollup/rollup-linux-riscv64-musl': 4.62.2
+      '@rollup/rollup-linux-s390x-gnu': 4.62.2
+      '@rollup/rollup-linux-x64-gnu': 4.62.2
+      '@rollup/rollup-linux-x64-musl': 4.62.2
+      '@rollup/rollup-openbsd-x64': 4.62.2
+      '@rollup/rollup-openharmony-arm64': 4.62.2
+      '@rollup/rollup-win32-arm64-msvc': 4.62.2
+      '@rollup/rollup-win32-ia32-msvc': 4.62.2
+      '@rollup/rollup-win32-x64-gnu': 4.62.2
+      '@rollup/rollup-win32-x64-msvc': 4.62.2
       fsevents: 2.3.3
 
   router@2.2.0:
@@ -5131,7 +5250,7 @@ snapshots:
       depd: 2.0.0
       is-promise: 4.0.0
       parseurl: 1.3.3
-      path-to-regexp: 8.3.0
+      path-to-regexp: 8.4.2
     transitivePeerDependencies:
       - supports-color
 
@@ -5170,7 +5289,7 @@ snapshots:
       mime-types: 3.0.2
       ms: 2.1.3
       on-finished: 2.4.1
-      range-parser: 1.2.1
+      range-parser: 1.3.0
       statuses: 2.0.2
     transitivePeerDependencies:
       - supports-color
@@ -5194,7 +5313,7 @@ snapshots:
 
   shebang-regex@3.0.0: {}
 
-  side-channel-list@1.0.0:
+  side-channel-list@1.0.1:
     dependencies:
       es-errors: 1.3.0
       object-inspect: 1.13.4
@@ -5214,11 +5333,11 @@ snapshots:
       object-inspect: 1.13.4
       side-channel-map: 1.0.1
 
-  side-channel@1.1.0:
+  side-channel@1.1.1:
     dependencies:
       es-errors: 1.3.0
       object-inspect: 1.13.4
-      side-channel-list: 1.0.0
+      side-channel-list: 1.0.1
       side-channel-map: 1.0.1
       side-channel-weakmap: 1.0.2
 
@@ -5250,7 +5369,7 @@ snapshots:
 
   statuses@2.0.2: {}
 
-  std-env@3.10.0: {}
+  std-env@4.2.0: {}
 
   string-argv@0.3.2: {}
 
@@ -5335,10 +5454,10 @@ snapshots:
 
   tinyglobby@0.2.15:
     dependencies:
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
+      fdir: 6.5.0(picomatch@4.0.5)
+      picomatch: 4.0.5
 
-  tinyrainbow@3.0.3: {}
+  tinyrainbow@3.1.0: {}
 
   tldts-core@6.1.86: {}
 
@@ -5346,10 +5465,6 @@ snapshots:
     dependencies:
       tldts-core: 6.1.86
 
-  tmp@0.0.33:
-    dependencies:
-      os-tmpdir: 1.0.2
-
   to-regex-range@5.0.1:
     dependencies:
       is-number: 7.0.0
@@ -5374,27 +5489,27 @@ snapshots:
 
   tslib@2.8.1: {}
 
-  tsup@8.5.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.2):
+  tsup@8.5.1(jiti@2.6.1)(postcss@8.5.16)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0):
     dependencies:
-      bundle-require: 5.1.0(esbuild@0.27.3)
+      bundle-require: 5.1.0(esbuild@0.28.1)
       cac: 6.7.14
       chokidar: 4.0.3
       consola: 3.4.2
       debug: 4.4.3
-      esbuild: 0.27.3
+      esbuild: 0.28.1
       fix-dts-default-cjs-exports: 1.0.1
       joycon: 3.1.1
       picocolors: 1.1.1
-      postcss-load-config: 6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.21.0)(yaml@2.8.2)
+      postcss-load-config: 6.0.1(jiti@2.6.1)(postcss@8.5.16)(tsx@4.21.0)(yaml@2.9.0)
       resolve-from: 5.0.0
-      rollup: 4.57.1
+      rollup: 4.62.2
       source-map: 0.7.6
       sucrase: 3.35.1
       tinyexec: 0.3.2
       tinyglobby: 0.2.15
       tree-kill: 1.2.2
     optionalDependencies:
-      postcss: 8.5.6
+      postcss: 8.5.16
       typescript: 5.9.3
     transitivePeerDependencies:
       - jiti
@@ -5404,37 +5519,19 @@ snapshots:
 
   tsx@4.21.0:
     dependencies:
-      esbuild: 0.27.3
+      esbuild: 0.28.1
       get-tsconfig: 4.13.6
     optionalDependencies:
       fsevents: 2.3.3
 
-  turbo-darwin-64@2.8.7:
-    optional: true
-
-  turbo-darwin-arm64@2.8.7:
-    optional: true
-
-  turbo-linux-64@2.8.7:
-    optional: true
-
-  turbo-linux-arm64@2.8.7:
-    optional: true
-
-  turbo-windows-64@2.8.7:
-    optional: true
-
-  turbo-windows-arm64@2.8.7:
-    optional: true
-
-  turbo@2.8.7:
+  turbo@2.9.18:
     optionalDependencies:
-      turbo-darwin-64: 2.8.7
-      turbo-darwin-arm64: 2.8.7
-      turbo-linux-64: 2.8.7
-      turbo-linux-arm64: 2.8.7
-      turbo-windows-64: 2.8.7
-      turbo-windows-arm64: 2.8.7
+      '@turbo/darwin-64': 2.9.18
+      '@turbo/darwin-arm64': 2.9.18
+      '@turbo/linux-64': 2.9.18
+      '@turbo/linux-arm64': 2.9.18
+      '@turbo/windows-64': 2.9.18
+      '@turbo/windows-arm64': 2.9.18
 
   type-check@0.4.0:
     dependencies:
@@ -5442,20 +5539,20 @@ snapshots:
 
   type-fest@0.21.3: {}
 
-  type-is@2.0.1:
+  type-is@2.1.0:
     dependencies:
-      content-type: 1.0.5
+      content-type: 2.0.0
       media-typer: 1.1.0
       mime-types: 3.0.2
 
-  typedoc@0.28.17(typescript@5.9.3):
+  typedoc@0.28.20(typescript@5.9.3):
     dependencies:
       '@gerrit0/mini-shiki': 3.23.0
       lunr: 2.3.9
-      markdown-it: 14.1.1
-      minimatch: 9.0.5
+      markdown-it: 14.3.0
+      minimatch: 10.2.5
       typescript: 5.9.3
-      yaml: 2.8.2
+      yaml: 2.9.0
 
   typescript-eslint@8.55.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3):
     dependencies:
@@ -5490,58 +5587,49 @@ snapshots:
 
   vary@1.1.2: {}
 
-  vite@7.3.1(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite@7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
-      esbuild: 0.27.3
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
-      postcss: 8.5.6
-      rollup: 4.57.1
+      esbuild: 0.28.1
+      fdir: 6.5.0(picomatch@4.0.5)
+      picomatch: 4.0.5
+      postcss: 8.5.16
+      rollup: 4.62.2
       tinyglobby: 0.2.15
     optionalDependencies:
       '@types/node': 24.10.13
       fsevents: 2.3.3
       jiti: 2.6.1
       tsx: 4.21.0
-      yaml: 2.8.2
-
-  vitest@4.0.18(@types/node@24.10.13)(jiti@2.6.1)(jsdom@26.1.0)(tsx@4.21.0)(yaml@2.8.2):
-    dependencies:
-      '@vitest/expect': 4.0.18
-      '@vitest/mocker': 4.0.18(vite@7.3.1(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.2))
-      '@vitest/pretty-format': 4.0.18
-      '@vitest/runner': 4.0.18
-      '@vitest/snapshot': 4.0.18
-      '@vitest/spy': 4.0.18
-      '@vitest/utils': 4.0.18
-      es-module-lexer: 1.7.0
+      yaml: 2.9.0
+
+  vitest@4.1.10(@types/node@24.10.13)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0)):
+    dependencies:
+      '@vitest/expect': 4.1.10
+      '@vitest/mocker': 4.1.10(vite@7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0))
+      '@vitest/pretty-format': 4.1.10
+      '@vitest/runner': 4.1.10
+      '@vitest/snapshot': 4.1.10
+      '@vitest/spy': 4.1.10
+      '@vitest/utils': 4.1.10
+      es-module-lexer: 2.3.0
       expect-type: 1.3.0
       magic-string: 0.30.21
       obug: 2.1.1
       pathe: 2.0.3
-      picomatch: 4.0.3
-      std-env: 3.10.0
+      picomatch: 4.0.5
+      std-env: 4.2.0
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      tinyrainbow: 3.0.3
-      vite: 7.3.1(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.2)
+      tinyrainbow: 3.1.0
+      vite: 7.3.5(@types/node@24.10.13)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/node': 24.10.13
+      '@vitest/coverage-v8': 4.1.10(vitest@4.1.10)
       jsdom: 26.1.0
     transitivePeerDependencies:
-      - jiti
-      - less
-      - lightningcss
       - msw
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - terser
-      - tsx
-      - yaml
 
   w3c-xmlserializer@5.0.0:
     dependencies:
@@ -5579,7 +5667,7 @@ snapshots:
 
   word-wrap@1.2.5: {}
 
-  wrap-ansi@7.0.0:
+  wrap-ansi@6.2.0:
     dependencies:
       ansi-styles: 4.3.0
       string-width: 4.2.3
@@ -5593,17 +5681,17 @@ snapshots:
 
   wrappy@1.0.2: {}
 
-  ws@8.19.0: {}
+  ws@8.21.0: {}
 
   xml-name-validator@5.0.0: {}
 
   xmlchars@2.2.0: {}
 
-  yaml@2.8.2: {}
+  yaml@2.9.0: {}
 
   yocto-queue@0.1.0: {}
 
-  zod-to-json-schema@3.25.1(zod@4.3.6):
+  zod-to-json-schema@3.25.2(zod@4.3.6):
     dependencies:
       zod: 4.3.6
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 3ff5faa..65b619b 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,3 +1,33 @@
 packages:
   - "apps/*"
   - "packages/*"
+
+autoInstallPeers: true
+strictPeerDependencies: false
+sharedWorkspaceLockfile: true
+
+allowBuilds:
+  "esbuild@0.28.1": true
+
+overrides:
+  "@hono/node-server": "1.19.14"
+  "ajv@<7": "6.15.0"
+  "ajv@>=7 <8.18.0": "8.20.0"
+  "brace-expansion@<1.1.13": "1.1.16"
+  esbuild: "0.28.1"
+  express-rate-limit: "8.5.2"
+  fast-uri: "3.1.2"
+  "flatted@<3.4.2": "3.4.2"
+  hono: "4.12.29"
+  "js-yaml@<4": "3.15.0"
+  "js-yaml@>=4 <4.2.0": "4.3.0"
+  "minimatch@<3.1.4": "3.1.4"
+  "minimatch@>=9.0.0 <9.0.7": "9.0.7"
+  path-to-regexp: "8.4.2"
+  "picomatch@<2.3.2": "2.3.2"
+  "picomatch@>=4.0.0 <4.0.4": "4.0.5"
+  "postcss@<8.5.10": "8.5.16"
+  "rollup@>=4.0.0 <4.59.0": "4.62.2"
+  "vite@>=7.0.0 <7.3.5": "7.3.5"
+  "ws@>=8.0.0 <8.21.0": "8.21.0"
+  "yaml@>=2.0.0 <2.8.3": "2.9.0"
diff --git a/scripts/archive-evidence.test.mjs b/scripts/archive-evidence.test.mjs
new file mode 100644
index 0000000..4779e0e
--- /dev/null
+++ b/scripts/archive-evidence.test.mjs
@@ -0,0 +1,114 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import {
+  verifyRealWorldArchiveEvidence,
+  verifyScreenRecordingArchiveEvidence
+} from "../apps/extension/scripts/lib/archive-evidence.mjs";
+
+test("real-world archive evidence reports exact missing markers, URLs, and event types", () => {
+  const player = createPlayer({
+    events: [
+      {
+        type: "console.entry",
+        data: { message: "[wb-realworld] checkout ready" }
+      },
+      {
+        type: "network.request",
+        data: { url: "https://app.example/api/large-response?bytes=1024" }
+      }
+    ]
+  });
+
+  assert.deepEqual(
+    verifyRealWorldArchiveEvidence(player, {
+      markers: ["[wb-realworld] checkout ready", "[wb-realworld] upload complete"],
+      urls: ["/api/large-response", "/api/missing"],
+      eventTypes: ["console.entry", "dom.snapshot"]
+    }),
+    {
+      ok: false,
+      eventCount: 2,
+      missingMarkers: ["[wb-realworld] upload complete"],
+      missingUrls: ["/api/missing"],
+      missingEventTypes: ["dom.snapshot"]
+    }
+  );
+});
+
+test("screen recording evidence reads every referenced recording blob", async () => {
+  const chunkA = "a".repeat(64);
+  const chunkB = "b".repeat(64);
+  const reads = [];
+  const player = createPlayer({
+    events: [
+      { type: "screen.recording.start", data: {} },
+      { type: "screen.recording.chunk", data: { chunkId: chunkA } },
+      { type: "screen.recording.end", data: { chunks: [chunkA, chunkB] } }
+    ],
+    files: {
+      [`blobs/${chunkA}.webm`]: "hash-a",
+      [`blobs/${chunkB}.webm`]: "hash-b"
+    },
+    blobs: new Map([
+      [chunkA, { mime: "video/webm", bytes: new Uint8Array([1, 2]) }],
+      [chunkB, { mime: "video/webm", bytes: new Uint8Array([3]) }]
+    ]),
+    reads
+  });
+
+  const result = await verifyScreenRecordingArchiveEvidence(player, {
+    captureScreenshots: false,
+    maxBlobBytes: 1024
+  });
+
+  assert.equal(result.ok, true);
+  assert.equal(result.referencedChunks, 2);
+  assert.deepEqual(result.missingChunkBlobs, []);
+  assert.deepEqual(result.invalidChunkBlobs, []);
+  assert.deepEqual(reads, [
+    [chunkA, 1024],
+    [chunkB, 1024]
+  ]);
+});
+
+test("screen recording evidence fails on unreadable chunks and screenshot leakage", async () => {
+  const missingChunk = "c".repeat(64);
+  const invalidChunk = "d".repeat(64);
+  const player = createPlayer({
+    events: [
+      { type: "screen.recording.start", data: {} },
+      { type: "screen.recording.chunk", data: { chunkId: missingChunk } },
+      { type: "screen.recording.end", data: { chunks: [missingChunk, invalidChunk] } },
+      { type: "screen.screenshot", data: {} }
+    ],
+    files: {
+      [`blobs/${invalidChunk}.webm`]: "hash-video",
+      [`blobs/${"e".repeat(64)}.webp`]: "hash-screenshot"
+    },
+    blobs: new Map([[invalidChunk, { mime: "video/webm", bytes: new Uint8Array() }]])
+  });
+
+  const result = await verifyScreenRecordingArchiveEvidence(player, {
+    captureScreenshots: false,
+    maxBlobBytes: 1024
+  });
+
+  assert.equal(result.ok, false);
+  assert.deepEqual(result.missingChunkBlobs, [missingChunk]);
+  assert.deepEqual(result.invalidChunkBlobs, [
+    { hash: invalidChunk, mime: "video/webm", bytes: 0 }
+  ]);
+  assert.equal(result.screenshotLeak, true);
+});
+
+function createPlayer({ events = [], files = {}, blobs = new Map(), reads = [] }) {
+  return {
+    events,
+    archive: { integrity: { files } },
+    async readBlobTransient(hash, maxBytes) {
+      reads.push([hash, maxBytes]);
+      return blobs.get(hash) ?? null;
+    }
+  };
+}
diff --git a/scripts/bench-regression-check.mjs b/scripts/bench-regression-check.mjs
index 934f5f7..1806b80 100644
--- a/scripts/bench-regression-check.mjs
+++ b/scripts/bench-regression-check.mjs
@@ -157,6 +157,32 @@ function runChecks(recorder, pipeline, thresholds) {
     )
   );
 
+  checks.push(
+    assertCheck(
+      "pipeline.filteredParseDurationMs",
+      pipeline.filteredParseDurationMs <= thresholds.pipeline.filteredParseMaxMs,
+      `expected <= ${thresholds.pipeline.filteredParseMaxMs}, got ${pipeline.filteredParseDurationMs.toFixed(
+        2
+      )}`
+    )
+  );
+
+  checks.push(
+    assertCheck(
+      "pipeline.filteredExportEvents.nonEmpty",
+      pipeline.filteredExportEvents > 0,
+      `expected > 0, got ${pipeline.filteredExportEvents}`
+    )
+  );
+
+  checks.push(
+    assertCheck(
+      "pipeline.filteredExportEvents.reduced",
+      pipeline.filteredExportEvents < pipeline.fullExportEvents,
+      `expected < ${pipeline.fullExportEvents}, got ${pipeline.filteredExportEvents}`
+    )
+  );
+
   checks.push(
     assertCheck(
       "pipeline.archiveDropRatio",
@@ -165,6 +191,17 @@ function runChecks(recorder, pipeline, thresholds) {
     )
   );
 
+  checks.push(
+    assertCheck(
+      "pipeline.eventDropRatio",
+      pipeline.eventDropRatio >= thresholds.pipeline.eventDropRatioMin &&
+        pipeline.eventDropRatio <= thresholds.pipeline.eventDropRatioMax,
+      `expected ${thresholds.pipeline.eventDropRatioMin}..${thresholds.pipeline.eventDropRatioMax}, got ${pipeline.eventDropRatio.toFixed(
+        3
+      )}`
+    )
+  );
+
   return checks;
 }
 
diff --git a/scripts/check-api-docs.mjs b/scripts/check-api-docs.mjs
new file mode 100644
index 0000000..ba82482
--- /dev/null
+++ b/scripts/check-api-docs.mjs
@@ -0,0 +1,103 @@
+#!/usr/bin/env node
+
+import { spawnSync } from "node:child_process";
+import { mkdtemp, readFile, readdir, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const workspaceRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const packageRoot = join(workspaceRoot, "packages/player-sdk");
+const committedDocsRoot = join(workspaceRoot, "docs/api/player-sdk");
+
+main().catch((error) => {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exitCode = 1;
+});
+
+async function main() {
+  const temporaryRoot = await mkdtemp(join(tmpdir(), "webblackbox-api-docs-"));
+  const generatedDocsRoot = join(temporaryRoot, "player-sdk");
+
+  try {
+    const result = spawnSync(
+      "pnpm",
+      ["exec", "typedoc", "--options", "typedoc.json", "--out", generatedDocsRoot],
+      {
+        cwd: packageRoot,
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "pipe"]
+      }
+    );
+
+    if (result.status !== 0) {
+      throw new Error(
+        `TypeDoc generation failed.\n${result.stderr || result.stdout || "No output was produced."}`
+      );
+    }
+
+    const committedFiles = await collectFiles(committedDocsRoot);
+    const generatedFiles = await collectFiles(generatedDocsRoot);
+    const differences = [];
+
+    for (const path of generatedFiles) {
+      if (!committedFiles.has(path)) {
+        differences.push(`missing committed file: ${path}`);
+        continue;
+      }
+
+      const [committed, generated] = await Promise.all([
+        readFile(join(committedDocsRoot, path)),
+        readFile(join(generatedDocsRoot, path))
+      ]);
+      if (!committed.equals(generated)) {
+        differences.push(`changed file: ${path}`);
+      }
+    }
+
+    for (const path of committedFiles) {
+      if (!generatedFiles.has(path)) {
+        differences.push(`stale committed file: ${path}`);
+      }
+    }
+
+    if (differences.length > 0) {
+      const preview = differences
+        .slice(0, 30)
+        .map((entry) => `- ${entry}`)
+        .join("\n");
+      const omitted = Math.max(0, differences.length - 30);
+      throw new Error(
+        `Player SDK API documentation is stale. Run 'pnpm docs:api' and commit the result.\n${preview}${omitted > 0 ? `\n- ...and ${omitted} more` : ""}`
+      );
+    }
+
+    console.log(`Player SDK API documentation matches ${generatedFiles.size} generated files.`);
+  } finally {
+    await rm(temporaryRoot, { recursive: true, force: true });
+  }
+}
+
+async function collectFiles(root) {
+  const files = new Set();
+  const directories = [root];
+
+  while (directories.length > 0) {
+    const current = directories.pop();
+    if (!current) {
+      continue;
+    }
+
+    const entries = await readdir(current, { withFileTypes: true });
+    for (const entry of entries) {
+      const fullPath = join(current, entry.name);
+      if (entry.isDirectory()) {
+        directories.push(fullPath);
+      } else if (entry.isFile()) {
+        files.add(relative(root, fullPath));
+      }
+    }
+  }
+
+  return files;
+}
diff --git a/scripts/check-bundle-size.mjs b/scripts/check-bundle-size.mjs
index 3f60fda..4df861e 100644
--- a/scripts/check-bundle-size.mjs
+++ b/scripts/check-bundle-size.mjs
@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { gzipSync } from "node:zlib";
-import { readFile, stat, writeFile, mkdir } from "node:fs/promises";
-import { dirname, resolve } from "node:path";
+import { lstat, readFile, readdir, writeFile, mkdir } from "node:fs/promises";
+import { dirname, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const root = resolve(dirname(fileURLToPath(import.meta.url)), "..");
@@ -27,11 +27,17 @@ async function main() {
   const failures = [];
 
   for (const entry of entries) {
-    const target = resolve(root, String(entry.path));
-    const fileStats = await stat(target);
-    const bytes = fileStats.size;
-    const source = await readFile(target);
-    const gzipBytes = gzipSync(source).byteLength;
+    const files = await resolveEntryFiles(entry);
+    const label = entry.name ?? entry.path ?? entry.directory;
+    let bytes = 0;
+    let gzipBytes = 0;
+
+    for (const file of files) {
+      const source = await readFile(file);
+      bytes += source.byteLength;
+      gzipBytes += gzipSync(source).byteLength;
+    }
+
     const maxBytes = Number(entry.maxBytes);
     const maxGzipBytes = Number(entry.maxGzipBytes);
 
@@ -39,7 +45,8 @@ async function main() {
     const gzipOk = Number.isFinite(maxGzipBytes) ? gzipBytes <= maxGzipBytes : true;
 
     report.push({
-      path: entry.path,
+      name: label,
+      files: files.map((file) => relative(root, file)),
       bytes,
       gzipBytes,
       maxBytes: Number.isFinite(maxBytes) ? maxBytes : null,
@@ -49,13 +56,13 @@ async function main() {
 
     if (!rawOk) {
       failures.push(
-        `${entry.path}: raw size ${bytes} exceeds budget ${maxBytes} (+${bytes - maxBytes})`
+        `${label}: raw size ${bytes} exceeds budget ${maxBytes} (+${bytes - maxBytes})`
       );
     }
 
     if (!gzipOk) {
       failures.push(
-        `${entry.path}: gzip size ${gzipBytes} exceeds budget ${maxGzipBytes} (+${gzipBytes - maxGzipBytes})`
+        `${label}: gzip size ${gzipBytes} exceeds budget ${maxGzipBytes} (+${gzipBytes - maxGzipBytes})`
       );
     }
   }
@@ -75,7 +82,7 @@ async function main() {
   );
 
   for (const row of report) {
-    console.log(`${row.path}: raw=${row.bytes} gzip=${row.gzipBytes}`);
+    console.log(`${row.name}: files=${row.files.length} raw=${row.bytes} gzip=${row.gzipBytes}`);
   }
   console.log("Bundle size report:", reportPath);
 
@@ -83,3 +90,62 @@ async function main() {
     throw new Error(`Bundle size budgets failed:\n- ${failures.join("\n- ")}`);
   }
 }
+
+async function resolveEntryFiles(entry) {
+  const hasPath = typeof entry.path === "string" && entry.path.length > 0;
+  const hasDirectory = typeof entry.directory === "string" && entry.directory.length > 0;
+
+  if (hasPath === hasDirectory) {
+    throw new Error("Each bundle budget must define exactly one of path or directory");
+  }
+
+  if (hasPath) {
+    const target = resolveInsideRoot(entry.path);
+    const fileStats = await lstat(target);
+    if (!fileStats.isFile()) {
+      throw new Error(`Bundle budget path is not a regular file: ${entry.path}`);
+    }
+    return [target];
+  }
+
+  const extensions = Array.isArray(entry.extensions) ? entry.extensions.map(String) : [".js"];
+  if (extensions.length === 0 || extensions.some((value) => !value.startsWith("."))) {
+    throw new Error(`Invalid extensions for bundle budget: ${entry.directory}`);
+  }
+
+  const files = await collectFiles(resolveInsideRoot(entry.directory), extensions);
+  if (files.length === 0) {
+    throw new Error(`Bundle budget directory has no matching files: ${entry.directory}`);
+  }
+  return files;
+}
+
+async function collectFiles(directory, extensions) {
+  const directoryStats = await lstat(directory);
+  if (!directoryStats.isDirectory()) {
+    throw new Error(`Bundle budget directory is not a directory: ${relative(root, directory)}`);
+  }
+
+  const files = [];
+  for (const entry of await readdir(directory, { withFileTypes: true })) {
+    const target = resolve(directory, entry.name);
+    if (entry.isSymbolicLink()) {
+      throw new Error(`Bundle budget directory contains a symlink: ${relative(root, target)}`);
+    }
+    if (entry.isDirectory()) {
+      files.push(...(await collectFiles(target, extensions)));
+    } else if (entry.isFile() && extensions.some((extension) => entry.name.endsWith(extension))) {
+      files.push(target);
+    }
+  }
+  return files.sort();
+}
+
+function resolveInsideRoot(value) {
+  const target = resolve(root, String(value));
+  const fromRoot = relative(root, target);
+  if (fromRoot.startsWith("..") || fromRoot === "") {
+    throw new Error(`Bundle budget target must be inside the repository: ${value}`);
+  }
+  return target;
+}
diff --git a/scripts/e2e-runtime.mjs b/scripts/e2e-runtime.mjs
new file mode 100644
index 0000000..f8b1c0f
--- /dev/null
+++ b/scripts/e2e-runtime.mjs
@@ -0,0 +1,194 @@
+import { constants } from "node:fs";
+import { access } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { posix, win32 } from "node:path";
+
+const WINDOWS_DEFAULT_PATHEXT = ".COM;.EXE;.BAT;.CMD";
+
+export function extensionChromeLoadArgs(extensionDirectory) {
+  if (typeof extensionDirectory !== "string" || extensionDirectory.trim().length === 0) {
+    throw new TypeError("Extension E2E directory must be a non-empty path.");
+  }
+
+  return [
+    // Chrome 137+ blocks --load-extension in branded builds. Keeping the
+    // disable-extensions-except path enabled preserves unpacked E2E loading,
+    // while unbranded Chromium continues to honor --load-extension directly.
+    "--disable-features=DisableDisableExtensionsExceptCommandLineSwitch",
+    `--disable-extensions-except=${extensionDirectory}`,
+    `--load-extension=${extensionDirectory}`
+  ];
+}
+
+export function createE2eTempPath(
+  prefix,
+  extension = "",
+  {
+    temporaryDirectory = tmpdir(),
+    processId = process.pid,
+    timestamp = Date.now(),
+    platform = process.platform
+  } = {}
+) {
+  if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(prefix)) {
+    throw new TypeError(`Invalid E2E temporary-path prefix: ${prefix}`);
+  }
+  if (extension !== "" && !/^\.[A-Za-z0-9]{1,16}$/.test(extension)) {
+    throw new TypeError(`Invalid E2E temporary-path extension: ${extension}`);
+  }
+  if (!Number.isSafeInteger(processId) || processId < 0) {
+    throw new TypeError("E2E temporary-path process id must be a non-negative safe integer.");
+  }
+  if (!Number.isSafeInteger(timestamp) || timestamp < 0) {
+    throw new TypeError("E2E temporary-path timestamp must be a non-negative safe integer.");
+  }
+
+  return pathApiForPlatform(platform).join(
+    temporaryDirectory,
+    `${prefix}-${processId}-${timestamp}${extension}`
+  );
+}
+
+export function executableSearchPaths(
+  candidate,
+  {
+    platform = process.platform,
+    pathValue = process.env.PATH ?? "",
+    pathExtValue = process.env.PATHEXT ?? WINDOWS_DEFAULT_PATHEXT
+  } = {}
+) {
+  if (typeof candidate !== "string") {
+    return [];
+  }
+
+  const command = stripMatchingQuotes(candidate);
+  if (command.length === 0) {
+    return [];
+  }
+  const pathApi = pathApiForPlatform(platform);
+  if (
+    pathApi.isAbsolute(command) ||
+    command.startsWith(".") ||
+    command.includes("/") ||
+    command.includes("\\")
+  ) {
+    return [command];
+  }
+
+  const separator = platform === "win32" ? ";" : ":";
+  const directories = String(pathValue)
+    .split(separator)
+    .map(stripMatchingQuotes)
+    .filter((directory) => directory.length > 0);
+  const commandNames =
+    platform === "win32" ? windowsCommandNames(command, pathExtValue, pathApi) : [command];
+  const paths = [];
+  const seen = new Set();
+
+  for (const directory of directories) {
+    for (const commandName of commandNames) {
+      const path = pathApi.join(directory, commandName);
+      const key = platform === "win32" ? path.toLowerCase() : path;
+      if (!seen.has(key)) {
+        seen.add(key);
+        paths.push(path);
+      }
+    }
+  }
+
+  return paths;
+}
+
+export async function resolveExecutable(
+  candidate,
+  {
+    accessImplementation = access,
+    platform = process.platform,
+    pathValue = process.env.PATH ?? "",
+    pathExtValue = process.env.PATHEXT ?? WINDOWS_DEFAULT_PATHEXT
+  } = {}
+) {
+  for (const path of executableSearchPaths(candidate, { platform, pathValue, pathExtValue })) {
+    try {
+      await accessImplementation(path, constants.X_OK);
+      return path;
+    } catch {
+      // Continue searching the remaining explicit/PATH candidates.
+    }
+  }
+
+  return null;
+}
+
+export async function terminateProcess(
+  processHandle,
+  { graceMs = 5_000, forceKillWaitMs = 2_000 } = {}
+) {
+  if (!processHandle || hasProcessExited(processHandle)) {
+    return;
+  }
+
+  processHandle.kill("SIGTERM");
+
+  if (await waitForProcessExit(processHandle, graceMs)) {
+    return;
+  }
+
+  processHandle.kill("SIGKILL");
+  await waitForProcessExit(processHandle, forceKillWaitMs);
+}
+
+function hasProcessExited(processHandle) {
+  return processHandle.exitCode !== null || processHandle.signalCode !== null;
+}
+
+function waitForProcessExit(processHandle, timeoutMs) {
+  if (hasProcessExited(processHandle)) {
+    return Promise.resolve(true);
+  }
+
+  return new Promise((resolvePromise) => {
+    const onExit = () => {
+      clearTimeout(timeout);
+      resolvePromise(true);
+    };
+    const timeout = setTimeout(
+      () => {
+        processHandle.removeListener("exit", onExit);
+        resolvePromise(hasProcessExited(processHandle));
+      },
+      Math.max(0, timeoutMs)
+    );
+
+    processHandle.once("exit", onExit);
+  });
+}
+
+function windowsCommandNames(command, pathExtValue, pathApi) {
+  const extensions = String(pathExtValue)
+    .split(";")
+    .map((extension) => extension.trim())
+    .filter((extension) => /^\.[A-Za-z0-9]+$/.test(extension));
+  const normalizedExtensions = extensions.length > 0 ? extensions : [".EXE"];
+  const commandExtension = pathApi.extname(command).toLowerCase();
+
+  if (
+    commandExtension &&
+    normalizedExtensions.some((extension) => extension.toLowerCase() === commandExtension)
+  ) {
+    return [command];
+  }
+
+  return normalizedExtensions.map((extension) => `${command}${extension}`);
+}
+
+function stripMatchingQuotes(value) {
+  const trimmed = value.trim();
+  return trimmed.length >= 2 && trimmed.startsWith('"') && trimmed.endsWith('"')
+    ? trimmed.slice(1, -1)
+    : trimmed;
+}
+
+function pathApiForPlatform(platform) {
+  return platform === "win32" ? win32 : posix;
+}
diff --git a/scripts/e2e-runtime.test.mjs b/scripts/e2e-runtime.test.mjs
new file mode 100644
index 0000000..5201772
--- /dev/null
+++ b/scripts/e2e-runtime.test.mjs
@@ -0,0 +1,140 @@
+import assert from "node:assert/strict";
+import { EventEmitter } from "node:events";
+import test from "node:test";
+
+import {
+  createE2eTempPath,
+  executableSearchPaths,
+  extensionChromeLoadArgs,
+  resolveExecutable,
+  terminateProcess
+} from "./e2e-runtime.mjs";
+
+test("keeps unpacked extension loading available in branded and unbranded test browsers", () => {
+  assert.deepEqual(extensionChromeLoadArgs("/tmp/WebBlackbox Extension"), [
+    "--disable-features=DisableDisableExtensionsExceptCommandLineSwitch",
+    "--disable-extensions-except=/tmp/WebBlackbox Extension",
+    "--load-extension=/tmp/WebBlackbox Extension"
+  ]);
+  assert.throws(() => extensionChromeLoadArgs(""), /non-empty path/u);
+});
+
+test("creates platform-native E2E temporary paths", () => {
+  assert.equal(
+    createE2eTempPath("webblackbox-profile", "", {
+      temporaryDirectory: "/var/tmp",
+      processId: 42,
+      timestamp: 1_234,
+      platform: "linux"
+    }),
+    "/var/tmp/webblackbox-profile-42-1234"
+  );
+  assert.equal(
+    createE2eTempPath("webblackbox-log", ".log", {
+      temporaryDirectory: "C:\\Temp",
+      processId: 42,
+      timestamp: 1_234,
+      platform: "win32"
+    }),
+    "C:\\Temp\\webblackbox-log-42-1234.log"
+  );
+});
+
+test("builds POSIX PATH candidates without invoking which", () => {
+  assert.deepEqual(
+    executableSearchPaths("chromium", {
+      platform: "linux",
+      pathValue: "/opt/chrome/bin:/usr/local/bin:/usr/bin"
+    }),
+    ["/opt/chrome/bin/chromium", "/usr/local/bin/chromium", "/usr/bin/chromium"]
+  );
+  assert.deepEqual(
+    executableSearchPaths("/Applications/Chrome For Testing", {
+      platform: "darwin",
+      pathValue: "/unused"
+    }),
+    ["/Applications/Chrome For Testing"]
+  );
+});
+
+test("builds Windows PATH and PATHEXT candidates", () => {
+  assert.deepEqual(
+    executableSearchPaths("chrome", {
+      platform: "win32",
+      pathValue: '"C:\\Program Files\\Chrome";D:\\Tools',
+      pathExtValue: ".EXE;.CMD"
+    }),
+    [
+      "C:\\Program Files\\Chrome\\chrome.EXE",
+      "C:\\Program Files\\Chrome\\chrome.CMD",
+      "D:\\Tools\\chrome.EXE",
+      "D:\\Tools\\chrome.CMD"
+    ]
+  );
+  assert.deepEqual(
+    executableSearchPaths("chrome.exe", {
+      platform: "win32",
+      pathValue: "C:\\Chrome;D:\\Tools",
+      pathExtValue: ".EXE;.CMD"
+    }),
+    ["C:\\Chrome\\chrome.exe", "D:\\Tools\\chrome.exe"]
+  );
+  assert.deepEqual(
+    executableSearchPaths('"C:\\Program Files\\Chrome\\chrome.exe"', {
+      platform: "win32",
+      pathValue: "C:\\Unused"
+    }),
+    ["C:\\Program Files\\Chrome\\chrome.exe"]
+  );
+});
+
+test("resolves explicit paths and PATH commands with injected access checks", async () => {
+  const explicitChecks = [];
+  const explicit = await resolveExecutable("./fixtures/chrome", {
+    platform: "linux",
+    pathValue: "/unused",
+    async accessImplementation(path) {
+      explicitChecks.push(path);
+    }
+  });
+  assert.equal(explicit, "./fixtures/chrome");
+  assert.deepEqual(explicitChecks, ["./fixtures/chrome"]);
+
+  const pathChecks = [];
+  const fromPath = await resolveExecutable("chrome", {
+    platform: "win32",
+    pathValue: "C:\\Missing;D:\\Chrome",
+    pathExtValue: ".EXE",
+    async accessImplementation(path) {
+      pathChecks.push(path);
+      if (path !== "D:\\Chrome\\chrome.EXE") {
+        throw Object.assign(new Error("missing"), { code: "ENOENT" });
+      }
+    }
+  });
+  assert.equal(fromPath, "D:\\Chrome\\chrome.EXE");
+  assert.deepEqual(pathChecks, ["C:\\Missing\\chrome.EXE", "D:\\Chrome\\chrome.EXE"]);
+});
+
+test("force kills a child that ignores SIGTERM even after killed becomes true", async () => {
+  const processHandle = new EventEmitter();
+  const signals = [];
+  processHandle.exitCode = null;
+  processHandle.signalCode = null;
+  processHandle.killed = false;
+  processHandle.kill = (signal) => {
+    signals.push(signal);
+    processHandle.killed = true;
+
+    if (signal === "SIGKILL") {
+      processHandle.signalCode = signal;
+      queueMicrotask(() => processHandle.emit("exit", null, signal));
+    }
+
+    return true;
+  };
+
+  await terminateProcess(processHandle, { graceMs: 1, forceKillWaitMs: 10 });
+
+  assert.deepEqual(signals, ["SIGTERM", "SIGKILL"]);
+});
diff --git a/scripts/extension-e2e-controller.test.mjs b/scripts/extension-e2e-controller.test.mjs
new file mode 100644
index 0000000..2d2df46
--- /dev/null
+++ b/scripts/extension-e2e-controller.test.mjs
@@ -0,0 +1,212 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import vm from "node:vm";
+
+import {
+  deleteSessionFromSessionsPort,
+  exportSessionFromPopupRuntime,
+  startSessionFromPopupRuntime,
+  stopSessionFromPopupPort
+} from "../apps/extension/scripts/lib/extension-e2e-controller.mjs";
+
+const extensionBaseUrl = "chrome-extension://abcdefghijklmnopabcdefghijklmnop/";
+
+test("popup runtime helper starts and exports through authorized runtime messages", async () => {
+  const messages = [];
+  const client = createEvaluationClient({
+    page: "popup.html",
+    messages,
+    tabs: [{ id: 42, url: "http://127.0.0.1/demo/", active: true }]
+  });
+
+  const started = await startSessionFromPopupRuntime(client, {
+    mode: "full",
+    expectedUrl: "http://127.0.0.1/demo/",
+    visualCapture: "screenshots"
+  });
+  const exported = await exportSessionFromPopupRuntime(client, {
+    sid: "session-1",
+    passphrase: "secret",
+    policy: { includeScreenshots: true }
+  });
+
+  assert.equal(started.ok, true);
+  assert.equal(started.via, "popup-runtime");
+  assert.equal(exported.ok, true);
+  assert.deepEqual(messages, [
+    {
+      kind: "ui.start",
+      tabId: 42,
+      mode: "full",
+      visualCapture: "screenshots"
+    },
+    {
+      kind: "ui.export",
+      sid: "session-1",
+      passphrase: "secret",
+      saveAs: false,
+      policy: { includeScreenshots: true }
+    }
+  ]);
+});
+
+test("popup runtime helper rejects ambiguous tabs and missing acknowledgements", async () => {
+  const wrongTabClient = createEvaluationClient({
+    page: "popup.html",
+    tabs: [{ id: 7, url: "http://127.0.0.1/unrelated/", active: true }]
+  });
+  const missingTarget = await startSessionFromPopupRuntime(wrongTabClient, {
+    mode: "lite",
+    expectedUrl: "http://127.0.0.1/demo/"
+  });
+
+  assert.equal(missingTarget.ok, false);
+  assert.equal(missingTarget.reason, "target-tab-not-found");
+
+  const unacknowledgedClient = createEvaluationClient({
+    page: "popup.html",
+    runtimeResponses: [undefined, {}],
+    tabs: [{ id: 42, url: "http://127.0.0.1/demo/", active: true }]
+  });
+  const unacknowledgedStart = await startSessionFromPopupRuntime(unacknowledgedClient, {
+    mode: "lite",
+    expectedUrl: "http://127.0.0.1/demo/"
+  });
+  const unacknowledgedExport = await exportSessionFromPopupRuntime(unacknowledgedClient, {
+    sid: "session-1",
+    passphrase: "secret"
+  });
+
+  assert.equal(unacknowledgedStart.ok, false);
+  assert.equal(unacknowledgedStart.reason, "runtime-start-rejected");
+  assert.equal(unacknowledgedExport.ok, false);
+  assert.equal(unacknowledgedExport.reason, "runtime-export-rejected");
+});
+
+test("popup stop helper uses the popup port instead of runtime messaging", async () => {
+  const messages = [];
+  const ports = [];
+  const client = createEvaluationClient({ page: "popup.html", messages, ports });
+
+  const stopped = await stopSessionFromPopupPort(client, { sid: "session-1", tabId: 42 });
+
+  assert.deepEqual(stopped, {
+    ok: true,
+    sid: "session-1",
+    tabId: 42,
+    via: "popup-port"
+  });
+  assert.deepEqual(messages, []);
+  assert.deepEqual(ports, [
+    {
+      name: "webblackbox:popup",
+      messages: [{ kind: "ui.stop", tabId: 42 }],
+      disconnected: true
+    }
+  ]);
+});
+
+test("session deletion requires sessions.html and the sessions port", async () => {
+  const popupPorts = [];
+  const popupClient = createEvaluationClient({ page: "popup.html", ports: popupPorts });
+  const rejected = await deleteSessionFromSessionsPort(popupClient, { sid: "session-1" });
+
+  assert.equal(rejected.ok, false);
+  assert.equal(rejected.reason, "unexpected-controller-page");
+  assert.deepEqual(popupPorts, []);
+
+  const sessionsPorts = [];
+  const sessionsClient = createEvaluationClient({ page: "sessions.html", ports: sessionsPorts });
+  const deleted = await deleteSessionFromSessionsPort(sessionsClient, { sid: "session-1" });
+
+  assert.deepEqual(deleted, { ok: true, sid: "session-1", via: "sessions-port" });
+  assert.deepEqual(sessionsPorts, [
+    {
+      name: "webblackbox:sessions",
+      messages: [{ kind: "ui.delete", sid: "session-1" }],
+      disconnected: true
+    }
+  ]);
+});
+
+function createEvaluationClient({
+  page,
+  messages = [],
+  ports = [],
+  runtimeResponses = [],
+  tabs = []
+}) {
+  const location = { href: new URL(page, extensionBaseUrl).href };
+  let runtimeResponseIndex = 0;
+  const chrome = {
+    runtime: {
+      connect({ name }) {
+        const record = { name, messages: [], disconnected: false };
+        const listeners = new Set();
+        ports.push(record);
+        return {
+          disconnect() {
+            record.disconnected = true;
+          },
+          onMessage: {
+            addListener(listener) {
+              listeners.add(listener);
+            },
+            removeListener(listener) {
+              listeners.delete(listener);
+            }
+          },
+          postMessage(message) {
+            const cloned = structuredClone(message);
+            record.messages.push(cloned);
+            const sessions =
+              cloned.kind === "ui.stop"
+                ? [{ sid: "session-1", active: false }]
+                : cloned.kind === "ui.delete"
+                  ? []
+                  : [{ sid: "session-1", active: true }];
+            queueMicrotask(() => {
+              for (const listener of listeners) {
+                listener({ kind: "sw.session-list", sessions });
+              }
+            });
+          }
+        };
+      },
+      getURL(path) {
+        return new URL(path, extensionBaseUrl).href;
+      },
+      async sendMessage(message) {
+        messages.push(structuredClone(message));
+
+        if (runtimeResponseIndex < runtimeResponses.length) {
+          const response = runtimeResponses[runtimeResponseIndex];
+          runtimeResponseIndex += 1;
+          return response;
+        }
+
+        return { ok: true };
+      }
+    },
+    tabs: {
+      async query() {
+        return tabs;
+      }
+    }
+  };
+
+  return {
+    async evaluate(expression) {
+      return structuredClone(
+        await vm.runInNewContext(expression, {
+          chrome,
+          clearTimeout,
+          location,
+          Promise,
+          queueMicrotask,
+          setTimeout
+        })
+      );
+    }
+  };
+}
diff --git a/scripts/release-workflows.test.mjs b/scripts/release-workflows.test.mjs
new file mode 100644
index 0000000..de0758b
--- /dev/null
+++ b/scripts/release-workflows.test.mjs
@@ -0,0 +1,58 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import test from "node:test";
+
+test("serializes stable package publishing across release tags", async () => {
+  const workflow = await readFile(
+    new URL("../.github/workflows/release.yml", import.meta.url),
+    "utf8"
+  );
+
+  assert.match(
+    workflow,
+    /^concurrency:\n[ ]{2}group: release-stable-publish\n[ ]{2}queue: max\n[ ]{2}cancel-in-progress: false$/m
+  );
+  assert.doesNotMatch(workflow, /group: release-\$\{\{/);
+  assert.match(workflow, /git fetch --force --tags origin main:refs\/remotes\/origin\/main/);
+  assert.match(
+    workflow,
+    /- name: Verify publish artifacts\n[ ]{8}run: pnpm release:verify-artifacts/
+  );
+  assert.doesNotMatch(workflow, /npm pack --dry-run/);
+});
+
+test("serializes release assets and Pages deployments across tags", async () => {
+  const workflow = await readFile(
+    new URL("../.github/workflows/release-assets.yml", import.meta.url),
+    "utf8"
+  );
+  const chromeJob = workflow.slice(
+    workflow.indexOf("  chrome-extension:"),
+    workflow.indexOf("  player-pages:")
+  );
+  const playerJob = workflow.slice(workflow.indexOf("  player-pages:"));
+  const verifiedCheckout = /ref: \$\{\{ needs\.verify-release\.outputs\.verified_sha \}\}/;
+
+  assert.match(
+    workflow,
+    /^concurrency:\n[ ]{2}group: release-assets-stable\n[ ]{2}queue: max\n[ ]{2}cancel-in-progress: false$/m
+  );
+  assert.match(workflow, /git fetch --force --tags origin main:refs\/remotes\/origin\/main/);
+  assert.match(
+    workflow,
+    /outputs:\n[ ]{6}verified_sha: \$\{\{ steps\.verified_source\.outputs\.sha \}\}/
+  );
+  assert.match(
+    workflow,
+    /- name: Export verified release commit\n[ ]{8}id: verified_source\n[ ]{8}run: echo "sha=\$\(git rev-parse HEAD\)" >> "\$GITHUB_OUTPUT"/
+  );
+  assert.ok(
+    workflow.indexOf("- name: Export verified release commit") >
+      workflow.indexOf("- name: Verify successful CI for release commit")
+  );
+  assert.match(chromeJob, verifiedCheckout);
+  assert.match(playerJob, verifiedCheckout);
+  assert.equal(workflow.match(new RegExp(verifiedCheckout.source, "g"))?.length, 2);
+  assert.doesNotMatch(chromeJob, /ref: \$\{\{ github\.event_name/);
+  assert.doesNotMatch(playerJob, /ref: \$\{\{ github\.event_name/);
+});
diff --git a/scripts/verify-publish-artifacts.mjs b/scripts/verify-publish-artifacts.mjs
new file mode 100644
index 0000000..efaec07
--- /dev/null
+++ b/scripts/verify-publish-artifacts.mjs
@@ -0,0 +1,632 @@
+import { execFile } from "node:child_process";
+import { constants as fsConstants } from "node:fs";
+import { access, mkdtemp, mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { basename, dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+
+const execFileAsync = promisify(execFile);
+const MAX_COMMAND_OUTPUT_BYTES = 32 * 1024 * 1024;
+const PACKAGE_NAME_PATTERN = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/;
+const SEMVER_PATTERN =
+  /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
+const SAFE_PACKAGE_PATH_PATTERN = /^[A-Za-z0-9._@/-]+$/;
+const WINDOWS_COMMAND_SHIM_PATTERN = /\.(?:cmd|bat)$/i;
+const UNSAFE_WINDOWS_COMMAND_TOKEN_PATTERN = /["&|<>^()%!$`;*?]/u;
+
+export const PUBLIC_PACKAGE_DEFINITIONS = Object.freeze([
+  Object.freeze({ name: "@webblackbox/protocol", directory: "packages/protocol" }),
+  Object.freeze({ name: "@webblackbox/cdp-router", directory: "packages/cdp-router" }),
+  Object.freeze({ name: "@webblackbox/recorder", directory: "packages/recorder" }),
+  Object.freeze({ name: "@webblackbox/pipeline", directory: "packages/pipeline" }),
+  Object.freeze({ name: "@webblackbox/player-sdk", directory: "packages/player-sdk" }),
+  Object.freeze({ name: "webblackbox", directory: "packages/webblackbox" }),
+  Object.freeze({
+    name: "@webblackbox/mcp-server",
+    directory: "apps/mcp-server",
+    bin: Object.freeze({ "webblackbox-mcp-server": "./dist/cli.js" })
+  })
+]);
+
+export const PUBLIC_PACKAGE_NAMES = Object.freeze(
+  PUBLIC_PACKAGE_DEFINITIONS.map(({ name }) => name)
+);
+
+export function assertNoWorkspaceSpecifiers(manifest) {
+  const workspacePaths = [];
+  collectWorkspaceSpecifiers(manifest, "$", workspacePaths, new WeakSet());
+  if (workspacePaths.length > 0) {
+    throw new Error(
+      `Packed manifest contains forbidden workspace: specifiers at ${workspacePaths.join(", ")}.`
+    );
+  }
+}
+
+export function assertCompletePackageSet(manifests, expectedNames = PUBLIC_PACKAGE_NAMES) {
+  const expected = new Set(expectedNames);
+  const counts = new Map();
+  const unexpected = [];
+
+  for (const manifest of manifests) {
+    const name = manifest?.name;
+    if (typeof name !== "string") {
+      throw new Error("Packed artifact manifest is missing a string package name.");
+    }
+    counts.set(name, (counts.get(name) ?? 0) + 1);
+    if (!expected.has(name)) {
+      unexpected.push(name);
+    }
+  }
+
+  const missing = expectedNames.filter((name) => !counts.has(name));
+  const duplicates = [...counts]
+    .filter(([, count]) => count !== 1)
+    .map(([name, count]) => `${name} (${count})`);
+  if (missing.length > 0 || unexpected.length > 0 || duplicates.length > 0) {
+    throw new Error(
+      [
+        missing.length > 0 ? `missing: ${missing.join(", ")}` : null,
+        unexpected.length > 0 ? `unexpected: ${unexpected.join(", ")}` : null,
+        duplicates.length > 0 ? `duplicates: ${duplicates.join(", ")}` : null
+      ]
+        .filter(Boolean)
+        .join("; ")
+    );
+  }
+}
+
+export function validatePackedManifest({ manifest, entries, expectedPackage }) {
+  if (!manifest || typeof manifest !== "object" || Array.isArray(manifest)) {
+    throw new Error(`Packed artifact for ${expectedPackage.name} has an invalid manifest.`);
+  }
+  if (manifest.name !== expectedPackage.name || !isValidPackageName(manifest.name)) {
+    throw new Error(
+      `Packed artifact name ${JSON.stringify(manifest.name)} does not match ${expectedPackage.name}.`
+    );
+  }
+  if (typeof manifest.version !== "string" || !SEMVER_PATTERN.test(manifest.version)) {
+    throw new Error(`Packed artifact ${manifest.name} has an invalid version.`);
+  }
+  if (manifest.private === true) {
+    throw new Error(`Packed artifact ${manifest.name} is unexpectedly private.`);
+  }
+
+  assertNoWorkspaceSpecifiers(manifest);
+  validateTarEntries(entries, manifest.name);
+  validateFilesField(manifest, entries);
+  validateEntryPoint(manifest, entries, "main");
+  validateEntryPoint(manifest, entries, "types");
+  validateExportsField(manifest, entries);
+  validateBinField(manifest, entries, expectedPackage.bin);
+}
+
+export function getPublicExportSpecifiers(manifest) {
+  if (!manifest || typeof manifest !== "object" || Array.isArray(manifest)) {
+    throw new Error("Cannot derive public exports from an invalid manifest.");
+  }
+  if (!isValidPackageName(manifest.name)) {
+    throw new Error("Cannot derive public exports without a valid package name.");
+  }
+
+  const exportsField = manifest.exports;
+  if (typeof exportsField === "string" || exportsField === null || Array.isArray(exportsField)) {
+    return [manifest.name];
+  }
+  if (!exportsField || typeof exportsField !== "object") {
+    throw new Error(`Packed artifact ${manifest.name} must declare exports.`);
+  }
+
+  const keys = Object.keys(exportsField);
+  const subpathKeys = keys.filter((key) => key.startsWith("."));
+  if (subpathKeys.length === 0) {
+    return [manifest.name];
+  }
+  if (subpathKeys.length !== keys.length) {
+    throw new Error(`Packed artifact ${manifest.name} mixes export subpaths and conditions.`);
+  }
+
+  return subpathKeys.map((key) => {
+    if (key === ".") {
+      return manifest.name;
+    }
+    if (!key.startsWith("./")) {
+      throw new Error(`Packed artifact ${manifest.name} has invalid export subpath ${key}.`);
+    }
+    const subpath = normalizePackageRelativePath(key.slice(2), `exports key ${key}`);
+    return `${manifest.name}/${subpath}`;
+  });
+}
+
+export function createCommandRunner({
+  platform = process.platform,
+  commandInterpreter = process.env.ComSpec || "cmd.exe",
+  execFileRunner = execFileAsync
+} = {}) {
+  return async function runCommand(command, arguments_, options = {}, label = command) {
+    const invocation = createCommandInvocation({
+      command,
+      arguments_,
+      platform,
+      commandInterpreter
+    });
+
+    try {
+      const result = await execFileRunner(invocation.command, invocation.arguments, {
+        ...options,
+        ...invocation.options,
+        encoding: "utf8",
+        maxBuffer: MAX_COMMAND_OUTPUT_BYTES,
+        windowsHide: true
+      });
+      return {
+        stdout: String(result.stdout ?? ""),
+        stderr: String(result.stderr ?? "")
+      };
+    } catch (error) {
+      const stdout =
+        error && typeof error === "object" && "stdout" in error ? String(error.stdout) : "";
+      const stderr =
+        error && typeof error === "object" && "stderr" in error ? String(error.stderr) : "";
+      throw new Error(
+        `${label} failed.${stdout ? `\nstdout:\n${stdout}` : ""}${stderr ? `\nstderr:\n${stderr}` : ""}`,
+        { cause: error }
+      );
+    }
+  };
+}
+
+export async function verifyPublishArtifacts({
+  platform = process.platform,
+  workspaceRoot = resolve(dirname(fileURLToPath(import.meta.url)), ".."),
+  pnpmCommand = platform === "win32" ? "pnpm.cmd" : "pnpm",
+  npmCommand = platform === "win32" ? "npm.cmd" : "npm",
+  tarCommand = "tar",
+  commandRunner = createCommandRunner({ platform })
+} = {}) {
+  const temporaryRoot = await mkdtemp(join(tmpdir(), "webblackbox-publish-artifacts-"));
+  const artifactDirectory = join(temporaryRoot, "tarballs");
+  const installDirectory = join(temporaryRoot, "install-smoke");
+
+  try {
+    await mkdir(artifactDirectory, { recursive: true });
+    const artifacts = [];
+
+    for (const expectedPackage of PUBLIC_PACKAGE_DEFINITIONS) {
+      const packageDirectory = resolve(workspaceRoot, expectedPackage.directory);
+      const sourceManifest = await readJsonFile(join(packageDirectory, "package.json"));
+      if (sourceManifest.name !== expectedPackage.name) {
+        throw new Error(
+          `Source package at ${expectedPackage.directory} is ${JSON.stringify(sourceManifest.name)}, expected ${expectedPackage.name}.`
+        );
+      }
+
+      const existingTarballs = new Set(await listTarballs(artifactDirectory));
+      await commandRunner(
+        pnpmCommand,
+        ["pack", "--pack-destination", artifactDirectory],
+        { cwd: packageDirectory },
+        `packing ${expectedPackage.name}`
+      );
+      const addedTarballs = (await listTarballs(artifactDirectory)).filter(
+        (name) => !existingTarballs.has(name)
+      );
+      if (addedTarballs.length !== 1) {
+        throw new Error(
+          `Packing ${expectedPackage.name} produced ${addedTarballs.length} new tarballs instead of one.`
+        );
+      }
+
+      const tarballPath = join(artifactDirectory, addedTarballs[0]);
+      const artifact = await readPackedArtifact(tarballPath, tarCommand, commandRunner);
+      validatePackedManifest({
+        manifest: artifact.manifest,
+        entries: artifact.entries,
+        expectedPackage
+      });
+      if (artifact.manifest.version !== sourceManifest.version) {
+        throw new Error(
+          `Packed ${expectedPackage.name} version ${artifact.manifest.version} does not match source ${sourceManifest.version}.`
+        );
+      }
+      artifacts.push({ ...artifact, tarballPath, expectedPackage });
+    }
+
+    assertCompletePackageSet(artifacts.map(({ manifest }) => manifest));
+    const versions = new Set(artifacts.map(({ manifest }) => manifest.version));
+    if (versions.size !== 1) {
+      throw new Error(
+        `Public package artifacts are not versioned in lockstep: ${[...versions].join(", ")}.`
+      );
+    }
+
+    const importSpecifiers = artifacts
+      .filter(({ expectedPackage }) => expectedPackage.bin === undefined)
+      .flatMap(({ manifest }) => getPublicExportSpecifiers(manifest));
+    if (new Set(importSpecifiers).size !== importSpecifiers.length) {
+      throw new Error("Public package artifacts expose duplicate import specifiers.");
+    }
+
+    await installAndSmokeArtifacts({
+      artifacts,
+      importSpecifiers,
+      installDirectory,
+      npmCommand,
+      platform,
+      commandRunner
+    });
+    const version = artifacts[0]?.manifest.version;
+    console.log(
+      `Verified ${artifacts.length} publish artifacts at version ${version}: manifests, isolated install, ${importSpecifiers.length} public export imports, and MCP bin smoke passed.`
+    );
+  } finally {
+    await rm(temporaryRoot, { recursive: true, force: true });
+  }
+}
+
+async function readPackedArtifact(tarballPath, tarCommand, commandRunner) {
+  const listing = await commandRunner(
+    tarCommand,
+    ["-tzf", tarballPath],
+    undefined,
+    `listing ${basename(tarballPath)}`
+  );
+  const entries = listing.stdout
+    .split(/\r?\n/)
+    .map((entry) => entry.trim())
+    .filter(Boolean);
+  if (entries.filter((entry) => entry === "package/package.json").length !== 1) {
+    throw new Error(`${basename(tarballPath)} must contain exactly one package/package.json.`);
+  }
+
+  const manifestResult = await commandRunner(
+    tarCommand,
+    ["-xOzf", tarballPath, "package/package.json"],
+    undefined,
+    `reading ${basename(tarballPath)} package.json`
+  );
+  let manifest;
+  try {
+    manifest = JSON.parse(manifestResult.stdout);
+  } catch (error) {
+    throw new Error(`${basename(tarballPath)} contains invalid package.json JSON.`, {
+      cause: error
+    });
+  }
+  return { manifest, entries };
+}
+
+async function installAndSmokeArtifacts({
+  artifacts,
+  importSpecifiers,
+  installDirectory,
+  npmCommand,
+  platform,
+  commandRunner
+}) {
+  await mkdir(installDirectory, { recursive: true });
+  await writeFile(
+    join(installDirectory, "package.json"),
+    `${JSON.stringify(
+      {
+        name: "webblackbox-publish-artifact-smoke",
+        version: "0.0.0",
+        private: true,
+        type: "module"
+      },
+      null,
+      2
+    )}\n`,
+    "utf8"
+  );
+
+  await commandRunner(
+    npmCommand,
+    [
+      "install",
+      "--ignore-scripts",
+      "--no-audit",
+      "--no-fund",
+      "--no-save",
+      "--package-lock=false",
+      ...artifacts.map(({ tarballPath }) => tarballPath)
+    ],
+    {
+      cwd: installDirectory,
+      env: {
+        ...process.env,
+        npm_config_update_notifier: "false"
+      }
+    },
+    "installing packed artifacts"
+  );
+
+  for (const { manifest } of artifacts) {
+    const installedManifest = await readJsonFile(
+      join(installDirectory, "node_modules", ...manifest.name.split("/"), "package.json")
+    );
+    if (installedManifest.version !== manifest.version) {
+      throw new Error(
+        `Installed ${manifest.name} version ${installedManifest.version} does not match packed ${manifest.version}.`
+      );
+    }
+  }
+
+  const smokeScriptPath = join(installDirectory, "import-smoke.mjs");
+  await writeFile(
+    smokeScriptPath,
+    `const importSpecifiers = ${JSON.stringify(importSpecifiers)};
+for (const specifier of importSpecifiers) {
+  const namespace = await import(specifier);
+  if (!namespace || typeof namespace !== "object") {
+    throw new Error(\`Import did not return a module namespace: \${specifier}\`);
+  }
+}
+console.log(\`Imported \${importSpecifiers.length} public package exports.\`);
+`,
+    "utf8"
+  );
+  await commandRunner(
+    process.execPath,
+    [smokeScriptPath],
+    { cwd: installDirectory },
+    "import smoke"
+  );
+
+  const mcpArtifact = artifacts.find(({ manifest }) => manifest.name === "@webblackbox/mcp-server");
+  if (!mcpArtifact) {
+    throw new Error("MCP server artifact is missing from the install smoke.");
+  }
+  const binName = Object.keys(mcpArtifact.expectedPackage.bin ?? {})[0];
+  const binPath = join(
+    installDirectory,
+    "node_modules",
+    ".bin",
+    platform === "win32" ? `${binName}.cmd` : binName
+  );
+  await access(binPath, platform === "win32" ? fsConstants.F_OK : fsConstants.X_OK);
+  const binResult = await commandRunner(
+    binPath,
+    ["--version"],
+    { cwd: installDirectory },
+    "MCP bin smoke"
+  );
+  if (binResult.stdout.trim() !== mcpArtifact.manifest.version || binResult.stderr.trim() !== "") {
+    throw new Error(
+      `MCP bin --version returned ${JSON.stringify(binResult.stdout.trim())} with stderr ${JSON.stringify(binResult.stderr.trim())}.`
+    );
+  }
+}
+
+function validateTarEntries(entries, packageName) {
+  if (entries.length === 0) {
+    throw new Error(`Packed artifact ${packageName} is empty.`);
+  }
+  for (const entry of entries) {
+    const normalized = entry.endsWith("/") ? entry.slice(0, -1) : entry;
+    if (!normalized.startsWith("package/") || !isSafePackageRelativePath(normalized.slice(8))) {
+      throw new Error(`Packed artifact ${packageName} contains unsafe tar entry ${entry}.`);
+    }
+  }
+}
+
+function validateFilesField(manifest, entries) {
+  if (!Array.isArray(manifest.files) || manifest.files.length === 0) {
+    throw new Error(`Packed artifact ${manifest.name} must declare a non-empty files array.`);
+  }
+  const normalizedFiles = manifest.files.map((value) =>
+    normalizePackageRelativePath(value, "files")
+  );
+  if (new Set(normalizedFiles).size !== normalizedFiles.length) {
+    throw new Error(`Packed artifact ${manifest.name} has duplicate files entries.`);
+  }
+  for (const filePath of normalizedFiles) {
+    const archivePath = `package/${filePath}`;
+    if (
+      !entries.some(
+        (entry) => entry.replace(/\/$/, "") === archivePath || entry.startsWith(`${archivePath}/`)
+      )
+    ) {
+      throw new Error(
+        `Packed artifact ${manifest.name} files entry ${filePath} matched no content.`
+      );
+    }
+  }
+}
+
+function validateEntryPoint(manifest, entries, fieldName) {
+  const rawPath = manifest[fieldName];
+  if (typeof rawPath !== "string") {
+    throw new Error(`Packed artifact ${manifest.name} must declare a string ${fieldName}.`);
+  }
+  validateArchiveTarget(manifest, entries, rawPath, fieldName);
+}
+
+function validateExportsField(manifest, entries) {
+  if (manifest.exports === undefined) {
+    throw new Error(`Packed artifact ${manifest.name} must declare exports.`);
+  }
+
+  getPublicExportSpecifiers(manifest);
+  const localTargets = [];
+  collectExportTargets(manifest.exports, "exports", localTargets);
+  if (localTargets.length === 0) {
+    throw new Error(`Packed artifact ${manifest.name} exports no local targets.`);
+  }
+  for (const { path, target } of localTargets) {
+    validateArchiveTarget(manifest, entries, target, path);
+  }
+}
+
+function collectExportTargets(value, path, results) {
+  if (typeof value === "string") {
+    if (!value.startsWith("./")) {
+      throw new Error(
+        `Packed manifest ${path} must be a local target, received ${JSON.stringify(value)}.`
+      );
+    }
+    results.push({ path, target: value });
+    return;
+  }
+  if (value === null) {
+    return;
+  }
+  if (Array.isArray(value)) {
+    value.forEach((entry, index) => collectExportTargets(entry, `${path}[${index}]`, results));
+    return;
+  }
+  if (!value || typeof value !== "object") {
+    throw new Error(`Packed manifest ${path} has an invalid exports target.`);
+  }
+  for (const [key, entry] of Object.entries(value)) {
+    collectExportTargets(entry, `${path}.${key}`, results);
+  }
+}
+
+function validateArchiveTarget(manifest, entries, rawPath, fieldName) {
+  const filePath = normalizePackageRelativePath(rawPath, fieldName);
+  if (!entries.includes(`package/${filePath}`)) {
+    throw new Error(`Packed artifact ${manifest.name} ${fieldName} target ${filePath} is missing.`);
+  }
+}
+
+function validateBinField(manifest, entries, expectedBin) {
+  const bin = normalizeBin(manifest);
+  const expected = expectedBin ?? {};
+  if (JSON.stringify(bin) !== JSON.stringify(expected)) {
+    throw new Error(
+      `Packed artifact ${manifest.name} bin ${JSON.stringify(bin)} does not match ${JSON.stringify(expected)}.`
+    );
+  }
+  for (const [command, rawPath] of Object.entries(bin)) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(command)) {
+      throw new Error(`Packed artifact ${manifest.name} has invalid bin command ${command}.`);
+    }
+    validateArchiveTarget(manifest, entries, rawPath, `bin.${command}`);
+  }
+}
+
+function normalizeBin(manifest) {
+  if (manifest.bin === undefined) {
+    return {};
+  }
+  if (typeof manifest.bin === "string") {
+    const unscopedName = manifest.name.includes("/") ? manifest.name.split("/")[1] : manifest.name;
+    return { [unscopedName]: manifest.bin };
+  }
+  if (!manifest.bin || typeof manifest.bin !== "object" || Array.isArray(manifest.bin)) {
+    throw new Error(`Packed artifact ${manifest.name} has an invalid bin field.`);
+  }
+  return Object.fromEntries(
+    Object.entries(manifest.bin).sort(([left], [right]) => left.localeCompare(right))
+  );
+}
+
+function normalizePackageRelativePath(value, fieldName) {
+  if (typeof value !== "string") {
+    throw new Error(`Packed manifest ${fieldName} must contain strings.`);
+  }
+  const normalized = value.replace(/^\.\//, "");
+  if (!isSafePackageRelativePath(normalized)) {
+    throw new Error(`Packed manifest ${fieldName} contains unsafe path ${JSON.stringify(value)}.`);
+  }
+  return normalized;
+}
+
+function isSafePackageRelativePath(value) {
+  return (
+    typeof value === "string" &&
+    value.length > 0 &&
+    value.length <= 512 &&
+    SAFE_PACKAGE_PATH_PATTERN.test(value) &&
+    !value.startsWith("/") &&
+    !value.endsWith("/") &&
+    !value.includes("\\") &&
+    !value.split("/").some((segment) => segment === "" || segment === "." || segment === "..")
+  );
+}
+
+function isValidPackageName(value) {
+  return typeof value === "string" && value.length <= 214 && PACKAGE_NAME_PATTERN.test(value);
+}
+
+function collectWorkspaceSpecifiers(value, path, results, seen) {
+  if (typeof value === "string") {
+    if (value.trim().startsWith("workspace:")) {
+      results.push(path);
+    }
+    return;
+  }
+  if (!value || typeof value !== "object") {
+    return;
+  }
+  if (seen.has(value)) {
+    return;
+  }
+  seen.add(value);
+
+  if (Array.isArray(value)) {
+    value.forEach((entry, index) =>
+      collectWorkspaceSpecifiers(entry, `${path}[${index}]`, results, seen)
+    );
+    return;
+  }
+  for (const [key, entry] of Object.entries(value)) {
+    collectWorkspaceSpecifiers(entry, `${path}.${key}`, results, seen);
+  }
+}
+
+async function listTarballs(directory) {
+  return (await readdir(directory)).filter((name) => name.endsWith(".tgz")).sort();
+}
+
+async function readJsonFile(path) {
+  return JSON.parse(await readFile(path, "utf8"));
+}
+
+function createCommandInvocation({ command, arguments_, platform, commandInterpreter }) {
+  if (platform !== "win32" || !WINDOWS_COMMAND_SHIM_PATTERN.test(command)) {
+    return { command, arguments: arguments_, options: {} };
+  }
+  if (typeof commandInterpreter !== "string" || commandInterpreter.length === 0) {
+    throw new Error("Windows command interpreter must be a non-empty string.");
+  }
+
+  const commandLine = [command, ...arguments_].map(quoteWindowsCommandToken).join(" ");
+  return {
+    command: commandInterpreter,
+    arguments: ["/d", "/s", "/v:off", "/c", `"${commandLine}"`],
+    options: { windowsVerbatimArguments: true }
+  };
+}
+
+function quoteWindowsCommandToken(value) {
+  if (typeof value !== "string") {
+    throw new Error("Windows command shim arguments must be strings.");
+  }
+  if (
+    [...value].some((character) => {
+      const codePoint = character.codePointAt(0);
+      return codePoint !== undefined && (codePoint <= 31 || codePoint === 127);
+    }) ||
+    UNSAFE_WINDOWS_COMMAND_TOKEN_PATTERN.test(value)
+  ) {
+    throw new Error(`Unsafe Windows command shim token: ${JSON.stringify(value)}.`);
+  }
+
+  const escapedTrailingBackslashes = value.replace(/(\\+)$/, "$1$1");
+  return `"${escapedTrailingBackslashes}"`;
+}
+
+function isDirectInvocation() {
+  return (
+    process.argv[1] !== undefined && resolve(process.argv[1]) === fileURLToPath(import.meta.url)
+  );
+}
+
+if (isDirectInvocation()) {
+  verifyPublishArtifacts().catch((error) => {
+    console.error(error instanceof Error ? error.stack : error);
+    process.exitCode = 1;
+  });
+}
diff --git a/scripts/verify-publish-artifacts.test.mjs b/scripts/verify-publish-artifacts.test.mjs
new file mode 100644
index 0000000..a578dc1
--- /dev/null
+++ b/scripts/verify-publish-artifacts.test.mjs
@@ -0,0 +1,273 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import {
+  PUBLIC_PACKAGE_DEFINITIONS,
+  PUBLIC_PACKAGE_NAMES,
+  assertCompletePackageSet,
+  assertNoWorkspaceSpecifiers,
+  createCommandRunner,
+  getPublicExportSpecifiers,
+  validatePackedManifest
+} from "./verify-publish-artifacts.mjs";
+
+test("rejects workspace specifiers recursively anywhere in a packed manifest", () => {
+  assert.throws(
+    () =>
+      assertNoWorkspaceSpecifiers({
+        name: "example",
+        dependencies: {
+          nested: {
+            resolutions: ["1.0.0", { protocol: "workspace:^" }]
+          }
+        }
+      }),
+    /\$\.dependencies\.nested\.resolutions\[1\]\.protocol/
+  );
+
+  assert.doesNotThrow(() =>
+    assertNoWorkspaceSpecifiers({
+      dependencies: {
+        "@webblackbox/protocol": "0.6.0"
+      },
+      files: ["dist"]
+    })
+  );
+});
+
+test("requires the complete public package set exactly once", () => {
+  const complete = PUBLIC_PACKAGE_NAMES.map((name) => ({ name }));
+  assert.doesNotThrow(() => assertCompletePackageSet(complete));
+  assert.throws(
+    () => assertCompletePackageSet(complete.slice(1)),
+    /missing: @webblackbox\/protocol/
+  );
+  assert.throws(
+    () => assertCompletePackageSet([...complete, { name: PUBLIC_PACKAGE_NAMES[0] }]),
+    /duplicates: @webblackbox\/protocol \(2\)/
+  );
+  assert.throws(
+    () => assertCompletePackageSet([...complete, { name: "unexpected-package" }]),
+    /unexpected: unexpected-package/
+  );
+});
+
+test("validates declared files and MCP bin targets against tar contents", () => {
+  const expectedPackage = PUBLIC_PACKAGE_DEFINITIONS.find(
+    ({ name }) => name === "@webblackbox/mcp-server"
+  );
+  const manifest = {
+    name: "@webblackbox/mcp-server",
+    version: "0.6.0",
+    files: ["dist", "README.md"],
+    main: "./dist/index.js",
+    types: "./dist/index.d.ts",
+    exports: {
+      ".": {
+        types: "./dist/index.d.ts",
+        import: "./dist/index.js"
+      }
+    },
+    bin: {
+      "webblackbox-mcp-server": "./dist/cli.js"
+    },
+    dependencies: {
+      "@webblackbox/player-sdk": "0.6.0"
+    }
+  };
+  const entries = [
+    "package/package.json",
+    "package/dist/index.js",
+    "package/dist/index.d.ts",
+    "package/dist/cli.js",
+    "package/README.md"
+  ];
+
+  assert.doesNotThrow(() => validatePackedManifest({ manifest, entries, expectedPackage }));
+  assert.throws(
+    () =>
+      validatePackedManifest({
+        manifest: {
+          ...manifest,
+          bin: { "webblackbox-mcp-server": "../outside.js" }
+        },
+        entries,
+        expectedPackage
+      }),
+    /bin .* does not match/
+  );
+  assert.throws(
+    () =>
+      validatePackedManifest({
+        manifest: {
+          ...manifest,
+          exports: {
+            ...manifest.exports,
+            "./missing": {
+              import: "./dist/missing.js"
+            }
+          }
+        },
+        entries,
+        expectedPackage
+      }),
+    /exports\.\.\/missing\.import target dist\/missing\.js is missing/
+  );
+  assert.throws(
+    () =>
+      validatePackedManifest({
+        manifest: { ...manifest, main: "./dist/missing.js" },
+        entries,
+        expectedPackage
+      }),
+    /main target dist\/missing\.js is missing/
+  );
+  assert.throws(
+    () =>
+      validatePackedManifest({
+        manifest: { ...manifest, types: "./dist/missing.d.ts" },
+        entries,
+        expectedPackage
+      }),
+    /types target dist\/missing\.d\.ts is missing/
+  );
+});
+
+test("derives every public package export subpath for import smoke tests", () => {
+  assert.deepEqual(
+    getPublicExportSpecifiers({
+      name: "webblackbox",
+      exports: {
+        ".": "./dist/index.js",
+        "./injected-hooks": {
+          types: "./dist/injected-hooks.d.ts",
+          import: "./dist/injected-hooks.js"
+        },
+        "./lite-sdk": "./dist/lite-sdk.js"
+      }
+    }),
+    ["webblackbox", "webblackbox/injected-hooks", "webblackbox/lite-sdk"]
+  );
+});
+
+test("launches Windows package command shims through a safely quoted cmd adapter", async () => {
+  const calls = [];
+  const commandInterpreter = "C:\\Windows\\System32\\cmd.exe";
+  const runCommand = createCommandRunner({
+    platform: "win32",
+    commandInterpreter,
+    execFileRunner: async (command, arguments_, options) => {
+      calls.push({ command, arguments_, options });
+      return { stdout: "ok\n", stderr: "" };
+    }
+  });
+
+  await runCommand(
+    "C:\\Program Files\\pnpm\\pnpm.cmd",
+    ["pack", "--pack-destination", "C:\\Temp Folder\\tarballs"],
+    { cwd: "C:\\Repo With Spaces" }
+  );
+  await runCommand(
+    "npm.cmd",
+    ["install", "--package-lock=false", "C:\\Temp Folder\\package.tgz"],
+    {}
+  );
+  await runCommand(
+    "C:\\Temp Folder\\node_modules\\.bin\\webblackbox-mcp-server.cmd",
+    ["--version"],
+    {}
+  );
+
+  assert.deepEqual(
+    calls.map(({ command, arguments_ }) => ({ command, arguments_ })),
+    [
+      {
+        command: commandInterpreter,
+        arguments_: [
+          "/d",
+          "/s",
+          "/v:off",
+          "/c",
+          '""C:\\Program Files\\pnpm\\pnpm.cmd" "pack" "--pack-destination" "C:\\Temp Folder\\tarballs""'
+        ]
+      },
+      {
+        command: commandInterpreter,
+        arguments_: [
+          "/d",
+          "/s",
+          "/v:off",
+          "/c",
+          '""npm.cmd" "install" "--package-lock=false" "C:\\Temp Folder\\package.tgz""'
+        ]
+      },
+      {
+        command: commandInterpreter,
+        arguments_: [
+          "/d",
+          "/s",
+          "/v:off",
+          "/c",
+          '""C:\\Temp Folder\\node_modules\\.bin\\webblackbox-mcp-server.cmd" "--version""'
+        ]
+      }
+    ]
+  );
+  assert.equal(calls[0].options.cwd, "C:\\Repo With Spaces");
+  assert.ok(calls.every(({ options }) => options.windowsVerbatimArguments === true));
+});
+
+test("keeps non-Windows commands on the direct execFile path", async () => {
+  const calls = [];
+  const runCommand = createCommandRunner({
+    platform: "linux",
+    execFileRunner: async (command, arguments_, options) => {
+      calls.push({ command, arguments_, options });
+      return { stdout: "", stderr: "" };
+    }
+  });
+
+  await runCommand("pnpm", ["pack", "--pack-destination", "/tmp/path with spaces"]);
+
+  assert.equal(calls[0].command, "pnpm");
+  assert.deepEqual(calls[0].arguments_, ["pack", "--pack-destination", "/tmp/path with spaces"]);
+  assert.equal(calls[0].options.windowsVerbatimArguments, undefined);
+});
+
+test("rejects Windows shim tokens that could escape cmd quoting or expand variables", async () => {
+  let calls = 0;
+  const runCommand = createCommandRunner({
+    platform: "win32",
+    execFileRunner: async () => {
+      calls += 1;
+      return { stdout: "", stderr: "" };
+    }
+  });
+  const unsafeTokens = [
+    "line\rbreak",
+    "line\nbreak",
+    "nul\0byte",
+    "%TEMP%",
+    "!TEMP!",
+    "$(whoami)",
+    'quote"break',
+    "value&whoami",
+    "value|whoami",
+    "value<input",
+    "value>output",
+    "value^escape",
+    "value(parenthesized)"
+  ];
+
+  for (const unsafeToken of unsafeTokens) {
+    await assert.rejects(
+      runCommand("pnpm.cmd", [unsafeToken]),
+      /Unsafe Windows command shim token/
+    );
+  }
+  await assert.rejects(
+    runCommand("C:\\Unsafe&Path\\pnpm.cmd", ["pack"]),
+    /Unsafe Windows command shim token/
+  );
+  assert.equal(calls, 0);
+});
diff --git a/scripts/verify-release-ref.mjs b/scripts/verify-release-ref.mjs
new file mode 100644
index 0000000..5ff4eb4
--- /dev/null
+++ b/scripts/verify-release-ref.mjs
@@ -0,0 +1,198 @@
+#!/usr/bin/env node
+
+import { execFileSync, spawnSync } from "node:child_process";
+import { readdir, readFile } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const releaseTagPattern = /^v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+
+const privateReleaseSurfaces = new Map([
+  ["apps/extension", "@webblackbox/extension"],
+  ["apps/player", "@webblackbox/player"],
+  ["apps/share-server", "@webblackbox/share-server"]
+]);
+
+export async function verifyReleaseRef({ root, tag, mainRef = "origin/main" }) {
+  const expectedVersion = parseReleaseVersion(tag);
+  if (!expectedVersion) {
+    throw new Error(
+      `Release tag must be an exact semantic version tag (vX.Y.Z) compatible with Chrome (components 0..65535 and not all zero): ${tag}`
+    );
+  }
+
+  const tagRef = `refs/tags/${tag}^{commit}`;
+  const tagCommit = runGit(root, ["rev-parse", "--verify", tagRef]);
+  const headCommit = runGit(root, ["rev-parse", "HEAD"]);
+
+  if (tagCommit !== headCommit) {
+    throw new Error(`Checked-out commit ${headCommit} does not match ${tag} (${tagCommit})`);
+  }
+
+  const ancestor = spawnSync("git", ["merge-base", "--is-ancestor", tagCommit, mainRef], {
+    cwd: root,
+    encoding: "utf8"
+  });
+  if (ancestor.status !== 0) {
+    throw new Error(`Release commit ${tagCommit} is not contained in ${mainRef}`);
+  }
+
+  const newestRelease = findNewestStableRelease(root, mainRef);
+  if (newestRelease && compareStableVersions(newestRelease.version, expectedVersion) > 0) {
+    throw new Error(
+      `Release tag ${tag} is superseded by ${newestRelease.tag} on ${mainRef}; refusing to publish or deploy an older stable release`
+    );
+  }
+
+  const packages = await readReleasePackages(root);
+  if (!packages.some((entry) => !entry.private)) {
+    throw new Error("No public packages were found for release verification");
+  }
+
+  const mismatches = packages.filter((entry) => entry.version !== expectedVersion);
+  if (mismatches.length > 0) {
+    throw new Error(
+      `Release package versions must match ${tag}: ${mismatches
+        .map((entry) => `${entry.name}@${entry.version}`)
+        .join(", ")}`
+    );
+  }
+
+  return {
+    tag,
+    commit: tagCommit,
+    version: expectedVersion,
+    packages: packages.map((entry) => entry.name).sort()
+  };
+}
+
+function parseReleaseVersion(tag) {
+  const match = releaseTagPattern.exec(tag);
+  if (!match) {
+    return undefined;
+  }
+
+  const components = match.slice(1).map(Number);
+  if (components.some((component) => !Number.isSafeInteger(component) || component > 65_535)) {
+    return undefined;
+  }
+  if (components.every((component) => component === 0)) {
+    return undefined;
+  }
+
+  return tag.slice(1);
+}
+
+function findNewestStableRelease(root, mainRef) {
+  const output = runGit(root, ["tag", "--merged", mainRef, "--list", "v*"]);
+  let newest;
+
+  for (const tag of output.split(/\r?\n/)) {
+    const version = parseReleaseVersion(tag);
+    if (!version) {
+      continue;
+    }
+
+    if (!newest || compareStableVersions(version, newest.version) > 0) {
+      newest = { tag, version };
+    }
+  }
+
+  return newest;
+}
+
+function compareStableVersions(left, right) {
+  const leftParts = left.split(".").map(Number);
+  const rightParts = right.split(".").map(Number);
+
+  for (let index = 0; index < 3; index += 1) {
+    const delta = (leftParts[index] ?? 0) - (rightParts[index] ?? 0);
+    if (delta !== 0) {
+      return delta;
+    }
+  }
+
+  return 0;
+}
+
+async function readReleasePackages(root) {
+  const packages = [];
+  const foundPrivateReleaseSurfaces = new Set();
+  for (const parent of ["packages", "apps"]) {
+    const parentPath = resolve(root, parent);
+    const entries = await readdir(parentPath, { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.isDirectory()) {
+        continue;
+      }
+
+      const packagePath = resolve(parentPath, entry.name, "package.json");
+      let manifest;
+      try {
+        manifest = JSON.parse(await readFile(packagePath, "utf8"));
+      } catch (error) {
+        if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") {
+          continue;
+        }
+        throw error;
+      }
+
+      const packageDirectory = `${parent}/${entry.name}`;
+      const expectedPrivateReleaseName = privateReleaseSurfaces.get(packageDirectory);
+      if (manifest.private === true && !expectedPrivateReleaseName) {
+        continue;
+      }
+      if (typeof manifest.name !== "string" || typeof manifest.version !== "string") {
+        throw new Error(`Invalid release package manifest: ${packagePath}`);
+      }
+      if (expectedPrivateReleaseName && manifest.name !== expectedPrivateReleaseName) {
+        throw new Error(
+          `Invalid private release surface manifest: expected ${expectedPrivateReleaseName} at ${packagePath}`
+        );
+      }
+      if (expectedPrivateReleaseName) {
+        foundPrivateReleaseSurfaces.add(packageDirectory);
+      }
+      packages.push({
+        name: manifest.name,
+        version: manifest.version,
+        private: manifest.private === true
+      });
+    }
+  }
+
+  const missingPrivateReleaseSurfaces = [...privateReleaseSurfaces.keys()].filter(
+    (packageDirectory) => !foundPrivateReleaseSurfaces.has(packageDirectory)
+  );
+  if (missingPrivateReleaseSurfaces.length > 0) {
+    throw new Error(
+      `Missing private release surface manifests: ${missingPrivateReleaseSurfaces.join(", ")}`
+    );
+  }
+
+  return packages;
+}
+
+function runGit(root, args) {
+  return execFileSync("git", args, {
+    cwd: root,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"]
+  }).trim();
+}
+
+const scriptPath = fileURLToPath(import.meta.url);
+if (process.argv[1] && resolve(process.argv[1]) === scriptPath) {
+  const root = resolve(dirname(scriptPath), "..");
+  const tag = process.argv[2] ?? "";
+  const mainRef = process.argv[3] ?? "origin/main";
+
+  verifyReleaseRef({ root, tag, mainRef })
+    .then((result) => {
+      console.log(JSON.stringify({ ok: true, ...result }, null, 2));
+    })
+    .catch((error) => {
+      console.error(error instanceof Error ? error.message : String(error));
+      process.exitCode = 1;
+    });
+}
diff --git a/scripts/verify-release-ref.test.mjs b/scripts/verify-release-ref.test.mjs
new file mode 100644
index 0000000..f468051
--- /dev/null
+++ b/scripts/verify-release-ref.test.mjs
@@ -0,0 +1,224 @@
+import { execFileSync } from "node:child_process";
+import { mkdtemp, mkdir, readFile, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { resolve } from "node:path";
+import test from "node:test";
+import assert from "node:assert/strict";
+
+import { verifyReleaseRef } from "./verify-release-ref.mjs";
+
+test("accepts an exact release tag on the main history with matching package versions", async () => {
+  const root = await createRepository("1.2.3");
+  git(root, "tag", "v1.2.3");
+
+  const result = await verifyReleaseRef({ root, tag: "v1.2.3", mainRef: "main" });
+
+  assert.equal(result.version, "1.2.3");
+  assert.deepEqual(result.packages, [
+    "@example/library",
+    "@webblackbox/extension",
+    "@webblackbox/player",
+    "@webblackbox/share-server"
+  ]);
+});
+
+test("accepts the Chrome extension version component boundary", async () => {
+  const root = await createRepository("65535.65535.65535");
+  git(root, "tag", "v65535.65535.65535");
+
+  const result = await verifyReleaseRef({
+    root,
+    tag: "v65535.65535.65535",
+    mainRef: "main"
+  });
+
+  assert.equal(result.version, "65535.65535.65535");
+});
+
+test("rejects mutable or malformed release refs", async () => {
+  const root = await createRepository("1.2.3");
+
+  await assert.rejects(
+    verifyReleaseRef({ root, tag: "main", mainRef: "main" }),
+    /exact semantic version tag/
+  );
+});
+
+test("rejects prerelease and build-metadata tags", async () => {
+  const root = await createRepository("1.2.3");
+
+  for (const tag of ["v1.2.3-beta.1", "v1.2.3+build.7", "v1.2.3-beta.1+build.7"]) {
+    await assert.rejects(
+      verifyReleaseRef({ root, tag, mainRef: "main" }),
+      /exact semantic version tag \(vX\.Y\.Z\)/
+    );
+  }
+});
+
+test("rejects Chrome-incompatible stable versions", async () => {
+  for (const version of ["0.0.0", "65536.1.0"]) {
+    const root = await createRepository(version);
+    git(root, "tag", `v${version}`);
+
+    await assert.rejects(
+      verifyReleaseRef({ root, tag: `v${version}`, mainRef: "main" }),
+      /compatible with Chrome/
+    );
+  }
+});
+
+test("rejects a checkout that is newer than the requested tag", async () => {
+  const root = await createRepository("1.2.3");
+  git(root, "tag", "v1.2.3");
+  await writeFile(resolve(root, "after-tag.txt"), "newer\n");
+  git(root, "add", ".");
+  git(root, "commit", "-m", "after tag");
+
+  await assert.rejects(
+    verifyReleaseRef({ root, tag: "v1.2.3", mainRef: "main" }),
+    /does not match/
+  );
+});
+
+test("rejects a tagged commit outside the main branch history", async () => {
+  const root = await createRepository("1.2.3");
+  git(root, "checkout", "-b", "release-candidate");
+  await writeFile(resolve(root, "candidate.txt"), "candidate\n");
+  git(root, "add", ".");
+  git(root, "commit", "-m", "candidate");
+  git(root, "tag", "v1.2.3");
+
+  await assert.rejects(
+    verifyReleaseRef({ root, tag: "v1.2.3", mainRef: "main" }),
+    /not contained in main/
+  );
+});
+
+test("rejects a stable release tag superseded by a newer stable tag on main", async () => {
+  const root = await createRepository("1.2.3");
+  git(root, "tag", "v1.2.3");
+  await updateRepositoryVersion(root, "1.10.0");
+  git(root, "add", ".");
+  git(root, "commit", "-m", "newer stable release");
+  git(root, "tag", "v1.10.0");
+  git(root, "checkout", "--detach", "v1.2.3");
+
+  await assert.rejects(
+    verifyReleaseRef({ root, tag: "v1.2.3", mainRef: "main" }),
+    /v1\.2\.3 is superseded by v1\.10\.0/
+  );
+});
+
+test("ignores non-stable tags when checking for a superseding release", async () => {
+  const root = await createRepository("1.2.3");
+  git(root, "tag", "v1.2.3");
+  await writeFile(resolve(root, "prerelease.txt"), "candidate\n");
+  git(root, "add", ".");
+  git(root, "commit", "-m", "prerelease candidate");
+  git(root, "tag", "v1.3.0-beta.1");
+  git(root, "checkout", "--detach", "v1.2.3");
+
+  const result = await verifyReleaseRef({ root, tag: "v1.2.3", mainRef: "main" });
+
+  assert.equal(result.version, "1.2.3");
+});
+
+test("rejects tags whose public package versions do not match", async () => {
+  const root = await createRepository("1.2.4");
+  git(root, "tag", "v1.2.3");
+
+  await assert.rejects(
+    verifyReleaseRef({ root, tag: "v1.2.3", mainRef: "main" }),
+    /Release package versions must match/
+  );
+});
+
+test("rejects tags whose private release surface versions do not match", async () => {
+  const root = await createRepository("1.2.3", {
+    privateVersions: {
+      player: "1.2.2"
+    }
+  });
+  git(root, "tag", "v1.2.3");
+
+  await assert.rejects(
+    verifyReleaseRef({ root, tag: "v1.2.3", mainRef: "main" }),
+    /@webblackbox\/player@1\.2\.2/
+  );
+});
+
+async function createRepository(version, options = {}) {
+  const root = await mkdtemp(resolve(tmpdir(), "webblackbox-release-ref-"));
+  await mkdir(resolve(root, "packages", "library"), { recursive: true });
+  await mkdir(resolve(root, "apps", "extension"), { recursive: true });
+  await mkdir(resolve(root, "apps", "player"), { recursive: true });
+  await mkdir(resolve(root, "apps", "share-server"), { recursive: true });
+  await writeFile(
+    resolve(root, "packages", "library", "package.json"),
+    `${JSON.stringify({ name: "@example/library", version }, null, 2)}\n`
+  );
+  const privateVersions = options.privateVersions ?? {};
+  await writeFile(
+    resolve(root, "apps", "extension", "package.json"),
+    `${JSON.stringify(
+      {
+        name: "@webblackbox/extension",
+        version: privateVersions.extension ?? version,
+        private: true
+      },
+      null,
+      2
+    )}\n`
+  );
+  await writeFile(
+    resolve(root, "apps", "player", "package.json"),
+    `${JSON.stringify(
+      {
+        name: "@webblackbox/player",
+        version: privateVersions.player ?? version,
+        private: true
+      },
+      null,
+      2
+    )}\n`
+  );
+  await writeFile(
+    resolve(root, "apps", "share-server", "package.json"),
+    `${JSON.stringify(
+      {
+        name: "@webblackbox/share-server",
+        version: privateVersions.shareServer ?? version,
+        private: true
+      },
+      null,
+      2
+    )}\n`
+  );
+  git(root, "init", "--initial-branch=main");
+  git(root, "config", "user.name", "Release Test");
+  git(root, "config", "user.email", "release-test@example.invalid");
+  git(root, "add", ".");
+  git(root, "commit", "-m", "initial");
+  return root;
+}
+
+async function updateRepositoryVersion(root, version) {
+  for (const relativePath of [
+    "packages/library/package.json",
+    "apps/extension/package.json",
+    "apps/player/package.json",
+    "apps/share-server/package.json"
+  ]) {
+    const manifestPath = resolve(root, relativePath);
+    const manifest = JSON.parse(await readFile(manifestPath, "utf8"));
+    await writeFile(manifestPath, `${JSON.stringify({ ...manifest, version }, null, 2)}\n`);
+  }
+}
+
+function git(root, ...args) {
+  return execFileSync("git", args, {
+    cwd: root,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"]
+  }).trim();
+}
diff --git a/tsconfig.json b/tsconfig.json
index 9dd46d5..e63a440 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -18,6 +18,9 @@
     {
       "path": "./packages/player-sdk"
     },
+    {
+      "path": "./packages/webblackbox"
+    },
     {
       "path": "./apps/mcp-server"
     },
@@ -26,6 +29,9 @@
     },
     {
       "path": "./apps/player"
+    },
+    {
+      "path": "./apps/share-server"
     }
   ]
 }