;(function createBrowserMonitoring(schema, evidenceFactory=createBrowserEvidence) { const evidence=evidenceFactory(); const endpoint='/api/observability/browser', routes=new Set(schema.routes), codes=new Set(schema.failureCodes); const idPattern=/^[a-f0-9]{32}$/, methods=new Set(['GET','HEAD','POST','PUT','PATCH','DELETE','OPTIONS']); const validNumber=v=>typeof v==='number'&&Number.isFinite(v)&&v>=0&&v<=3600000; const templates=schema.routes.filter(r=>r.includes(':id')).sort((a,b)=>b.length-a.length); function route(path) { const value=path.replace(/^\/api\//,'').replace(/\/$/,''); if(routes.has(value))return value; if(/^jobs\/\d+$/.test(value))return 'jobs/detail'; return templates.find(r=>new RegExp('^'+r.replaceAll(':id','[^/]+')+'$').test(value))||'other'; } function page(path) {return route('page/'+(path.replace(/^\//,'').replace(/\/$/,'')||'home'))==='other'?'page/other':route('page/'+(path.replace(/^\//,'').replace(/\/$/,'')||'home'));} function kind(type,path='') {const extension=path.split('.').at(-1).toLowerCase();const asset={js:'script',css:'style',woff:'font',woff2:'font',ttf:'font',otf:'font',png:'image',jpg:'image',jpeg:'image',svg:'image',webp:'image',avif:'image',gif:'image',mp4:'media',mp3:'media'}[extension];if(asset)return asset;return ({script:'script',link:'style',css:'style',img:'image',image:'image',video:'media',audio:'media',iframe:'iframe',font:'font',fetch:'fetch',xmlhttprequest:'fetch',navigation:'navigation'})[type]||'other';} function target(name,origin,type='fetch') { let u;try{u=new URL(name,origin);}catch{return null;} if(!['http:','https:'].includes(u.protocol)||u.pathname.startsWith('/api/observability/')||u.pathname.startsWith('/api/health/')||u.pathname.startsWith('/api/internal/'))return null; const own=u.origin===origin, resourceType=own&&u.pathname.startsWith('/api/')?'api':kind(type,u.pathname); return {route:resourceType==='api'?route(u.pathname):resourceType==='navigation'?page(u.pathname):'resource/'+resourceType, resourceType,targetOrigin:own?'same_origin':'external',...evidence.resource(String(name),origin,!own)}; } function resourceRow(entry,origin,timeOrigin,idFactory) { const t=target(entry.name,origin,entry.entryType==='navigation'?'navigation':entry.initiatorType);if(!t||!validNumber(entry.duration))return null; const timing=entry.serverTiming||[],getId=name=>{const v=timing.find(i=>i.name===name)?.description;return t.targetOrigin==='same_origin'&&idPattern.test(v||'')?v:'';}; const row={...t,id:idFactory(),layer:'browser',requestId:getId('weishi_edge'),clientId:getId('weishi_client'),method:['fetch','xmlhttprequest'].includes(entry.initiatorType)?'other':'GET',atMs:Math.round(timeOrigin+entry.startTime),totalMs:Math.round(entry.duration),outcome:entry.responseStart>0?'complete':'unavailable',timingPhase:'complete',protocol:['h2','h3','http/1.1'].includes(entry.nextHopProtocol)?entry.nextHopProtocol:'unknown'}; // Cross-origin TAO restrictions hide phase/status data, not total duration. if(entry.requestStart>0&&entry.responseStart>0){ const diff=(key,end,start)=>{const v=end-start;if(validNumber(v))row[key]=Math.round(v);}; diff('redirectMs',entry.redirectEnd,entry.redirectStart);diff('preRequestMs',entry.requestStart,entry.startTime);diff('dnsMs',entry.domainLookupEnd,entry.domainLookupStart); const tls=entry.secureConnectionStart>0;diff('tcpMs',tls?entry.secureConnectionStart:entry.connectEnd,entry.connectStart);if(tls)diff('tlsMs',entry.connectEnd,entry.secureConnectionStart); diff('ttfbMs',entry.responseStart,entry.requestStart);diff('bodyMs',entry.responseEnd,entry.responseStart); row.connection=entry.connectEnd>entry.connectStart?'new':'reused_or_cached';row.cache=entry.transferSize===0&&entry.decodedBodySize>0?'local_or_service_worker':'network_or_unknown'; for(const [key,v] of [['transferBytes',entry.transferSize],['encodedBytes',entry.encodedBodySize],['decodedBytes',entry.decodedBodySize]])if(Number.isSafeInteger(v)&&v>=0&&v<=2**30)row[key]=v; if(entry.workerStart>0)row.serviceWorker=1; } if(entry.responseStatus===0)row.status=0; if(Number.isInteger(entry.responseStatus)&&entry.responseStatus>=100&&entry.responseStatus<=599){row.status=entry.responseStatus;if(row.status>=400){row.code='http_error';row.outcome='failed';}} return row; } function installBrowserMonitoring(win=globalThis) { if(!win.window||win.__weishiRequestMonitoring||!win.crypto?.getRandomValues||!win.fetch)return; win.__weishiRequestMonitoring=true; const uuid=()=>Array.from(win.crypto.getRandomValues(new Uint8Array(16)),x=>x.toString(16).padStart(2,'0')).join(''); const original=win.fetch.bind(win),queue=[],pending=new Map(),correlated=new Map(),seenTimings=new Set(),storageKey='weishi:pending:v2';let sending=false,dropped=0; const clock=()=>win.performance.now(),now=()=>Date.now(),elapsed=start=>Math.min(3600000,Math.max(0,Math.round(clock()-start))); // Account context is frozen at request/event start. No row is enriched by add/flush. const identityIntervals=[],identityAnchors=new Map(),identityCaptured=new WeakSet();let activeIdentity=null,identityClockFloor=null,drainPendingResources=()=>{}; function clearIdentity(at=clock()){if(activeIdentity)activeIdentity.end=at;activeIdentity=null;} function captureIdentity(at){ if(typeof at!=='number'||!Number.isFinite(at)||at<0)return {}; const interval=[...identityIntervals].reverse().find(value=>at>=value.start&&at{try{drainPendingResources();}catch{}const at=clock();try{ if(envelope===null){clearIdentity(at);return true;} const proof=envelope?.proof,issuedAtMs=envelope?.issuedAtMs,expiresAtMs=envelope?.expiresAtMs; if(!evidence.identityTransport({identityProof:proof,identityObservedAtMs:issuedAtMs}).identityProof||!Number.isSafeInteger(expiresAtMs)||expiresAtMs-issuedAtMs!==300000){clearIdentity(at);return false;} // The lower bound survives bounded anchor eviction: replaying an old proof // cannot restart its five-minute lifetime after many account refreshes. if(identityClockFloor!==null&&at+identityClockFloor>expiresAtMs){clearIdentity(at);return false;} identityClockFloor=Math.max(identityClockFloor??-Infinity,issuedAtMs-at); const known=identityAnchors.get(proof); if(known&&(known.issuedAtMs!==issuedAtMs||known.expiresAtMs!==expiresAtMs)||known&&issuedAtMs+Math.floor(Math.max(0,at-known.anchor))>expiresAtMs){clearIdentity(at);return false;} if(activeIdentity?.proof===proof)return true; clearIdentity(at); const context=known||{proof,issuedAtMs,expiresAtMs,anchor:at}; if(!known){identityAnchors.set(proof,context);if(identityAnchors.size>64)identityAnchors.delete(identityAnchors.keys().next().value);} activeIdentity={...context,start:at,end:Infinity};identityIntervals.push(activeIdentity); while(identityIntervals.length>64||identityIntervals.length>1&&identityIntervals[0].endr.code||r.status>=400||r.totalMs>3000; function persist(){try{win.sessionStorage?.setItem(storageKey,JSON.stringify({at:now(),rows:queue.filter(critical).slice(-200),dropped}));}catch{}} // One first-party browser identity shared with the product tracker. Storage // denial keeps a tab-memory identity; it never changes on every heartbeat. let memoryVisitor=''; function visitorId(){ const valid=value=>typeof value==='string'&&/^[a-z][a-z0-9_-]{7,95}$/.test(value); let value=''; try{const cookie=win.document.cookie.split(';').map(x=>x.trim()).find(x=>x.startsWith('offerseek%3Avisitor%3Aid='));value=cookie?decodeURIComponent(cookie.split('=').slice(1).join('=')):'';}catch{} if(!valid(value))try{value=win.localStorage?.getItem('offerseek:visitor:id');}catch{} if(!valid(value))value=memoryVisitor||('v_'+uuid()); const changed=memoryVisitor!==value;memoryVisitor=value; if(changed){ try{win.localStorage?.setItem('offerseek:visitor:id',value);}catch{} try{const host=win.location.hostname||new URL(win.location.origin).hostname; const domain=host==='offerseek.ai'||host.endsWith('.offerseek.ai')?'; Domain=.offerseek.ai':''; const secure=win.location.protocol==='https:'||win.location.origin.startsWith('https:')?'; Secure':''; win.document.cookie='offerseek%3Avisitor%3Aid='+value+'; Path=/; Max-Age=31536000; SameSite=Lax'+domain+secure; }catch{} } return value; } win.__weishiVisitorId=visitorId; const documentVisitor=visitorId(),documentUrl=win.location.href; function pageContext(){const a=evidence.address(win.location.href);return {pageRoute:page(win.location.pathname||'/'),pageAddressState:a.state,...(a.origin?{pageOrigin:a.origin}:{}),...(a.path?{pagePath:a.path}:{})};} function add(row){if(!row)return;if(row.visitorId===undefined)row.visitorId=visitorId();row.browserSdkVersion=schema.browserSdkVersion;if(row.pageRoute===undefined)Object.assign(row,pageContext());if(queue.length>=200){const i=queue.findIndex(r=>!critical(r));queue.splice(i<0?0:i,1);dropped++;}queue.push(row);persist();} const restoreRow=r=>({...Object.fromEntries(Object.entries(r).filter(([k])=>['visitorId','id','layer','route','code','atMs','outcome','requestId','clientId','totalMs','status','method','resourceType','targetOrigin','timingPhase','pageRoute','protocol','redirectMs','preRequestMs','dnsMs','tcpMs','tlsMs','ttfbMs','bodyMs','connection','cache','transferBytes','encodedBytes','decodedBytes','serviceWorker','authTarget','authPhase','failureReason','attempts'].includes(k))),...evidence.clean(r),...evidence.identityTransport(r)}); const restoreProof=p=>({...Object.fromEntries(Object.entries(p).filter(([k])=>['id','layer','route','resourceType','clientId','requestId','visitorId','atMs','totalMs','outcome','timingPhase','method','status','browserSdkVersion'].includes(k))),...evidence.identityTransport(p)}); const pairedProof=(r,p)=>p&&typeof p==='object'&&idPattern.test(p.id||'')&&p.id!==r.id&&p.layer==='browser'&&!('protocol'in p)&&r.protocol&&p.resourceType==='api'&&r.resourceType==='api'&&p.route===r.route&&idPattern.test(p.clientId||'')&&p.clientId===r.clientId&&idPattern.test(p.requestId||'')&&p.requestId===r.requestId&&typeof p.visitorId==='string'&&/^[a-z][a-z0-9_-]{7,95}$/.test(p.visitorId)&&p.visitorId===r.visitorId&&Number.isSafeInteger(p.atMs)&&p.atMs>0&&validNumber(p.totalMs)&&['complete','failed'].includes(p.outcome)&&p.timingPhase==='complete'&&(methods.has(p.method)||p.method==='other')&&(p.status===undefined||Number.isInteger(p.status)&&p.status>=0&&p.status<=599)&&(p.browserSdkVersion===undefined||typeof p.browserSdkVersion==='string'&&/^\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(p.browserSdkVersion)); try{const saved=JSON.parse(win.sessionStorage?.getItem(storageKey)||'null');if(saved&&now()-saved.at<1800000&&Array.isArray(saved.rows)){for(const r of saved.rows.slice(-200))if(idPattern.test(r.id||'')&&routes.has(r.route)&&r.layer==='browser'){const restored=restoreRow(r);if(pairedProof(restored,r._requestProof))restored._requestProof=restoreProof(r._requestProof);queue.push(restored);}dropped=Number.isSafeInteger(saved.dropped)?saved.dropped:0;}}catch{} const fail=(r,code,extra={})=>add({...pageContext(),...(!identityCaptured.has(r)?captureIdentity(clock()):{}),...r,...extra,id:uuid(),layer:'browser',atMs:now(),outcome:'failed',code}); // Only the identical thrown object can establish that an application catch // is reporting a failure already captured by this request wrapper. const requestErrors=new WeakMap(); function rememberError(p,error,code){if(p&&error&&typeof error==='object')requestErrors.set(error,{route:p.row.route,code});} win.__weishiReportFailure=signal=>{try{if(!routes.has(signal?.route)||!codes.has(signal?.code))return; const reported=signal.error&&requestErrors.get(signal.error); if(reported?.route===signal.route&&reported.code===signal.code)return; const clean={route:signal.route};for(const k of ['requestId','clientId'])if(idPattern.test(signal[k]||''))clean[k]=signal[k]; for(const [k,max] of [['totalMs',3600000],['status',599],['attempts',2]])if(Number.isSafeInteger(signal[k])&&signal[k]>=0&&signal[k]<=max)clean[k]=signal[k]; for(const [k,values] of Object.entries({authTarget:['main','app','local'],authPhase:['read','issue','claim'],failureReason:['timeout','transport','http','invalid_response']}))if(values.includes(signal[k]))clean[k]=signal[k]; fail(clean,signal.code,evidence.error(signal.error)); }catch{}}; function begin(name,type,method='GET'){ const t=target(name,win.location.origin,type);if(!t)return null; const started=clock(),r={...t,...pageContext(),...captureIdentity(started),visitorId:visitorId(),id:uuid(),clientId:uuid(),requestId:'',layer:'browser',method:methods.has(String(method).toUpperCase())?String(method).toUpperCase():'other',atMs:now()}; identityCaptured.add(r);const p={row:r,start:started,name:String(name),type,warned:false,reportedCodes:new Set()};if(pending.size>=500){pending.delete(pending.keys().next().value);dropped++;}pending.set(r.clientId,p);if(correlated.size>=1000)correlated.delete(correlated.keys().next().value);correlated.set(r.clientId,p);return p; } function report(p,code){if(!p||p.reportedCodes.has(code))return;p.reportedCodes.add(code);fail(p.row,code,{totalMs:p.actualElapsed??elapsed(p.start)});} function end(p,outcome='complete',code){if(!p)return;const finished=p.finished;p.finished=true;pending.delete(p.row.clientId);if(finished){if(code)report(p,code);return;}const r={...p.row,id:uuid(),totalMs:p.actualElapsed??elapsed(p.start),outcome,timingPhase:'complete'};if(code&&!p.reportedCodes.has(code)){r.code=code;p.reportedCodes.add(code);}add(r);} function bodyError(p,error,json=false){if(p)Object.assign(p.row,evidence.error(error));end(p,error?.name==='AbortError'?'aborted':'failed',error?.name==='AbortError'?undefined:json&&error?.name==='SyntaxError'?'response_parse_error':'response_body_error');} function cancellation(object,key,p){if(typeof object[key]!=='function')return;const original=object[key].bind(object);try{Object.defineProperty(object,key,{configurable:true,value:(...args)=>original(...args).then(value=>{end(p,'aborted');return value;})});}catch{}} function body(response,p){ if(!p)return response; const rid=response.headers?.get('x-request-id');if(idPattern.test(rid||''))p.row.requestId=rid; if(Number.isInteger(response.status)&&response.status>=0&&response.status<=599)p.row.status=response.status; if(response.status>=400)report(p,'http_error'); // Resolve fetch at headers as before; instrument only the body's existing consumer. for(const name of ['json','text','blob','arrayBuffer','formData','bytes'])if(typeof response[name]==='function'){ const read=response[name].bind(response); try{Object.defineProperty(response,name,{configurable:true,value:function(...args){return read(...args).then(value=>{ if(name==='json'&&value&&typeof value==='object'){ // Export only a bounded classification, never response text or codes. const businessCode=value.code||value.errorCode||value.error?.code; if((schema.expectedBusinessCodes||[]).includes(businessCode))report(p,'business_rejection'); else if(value.ok===false||value.success===false||value.status==='error')report(p,'api_business_error'); } end(p,response.status>=400?'failed':'complete',response.status>=400?'http_error':undefined);return value; },error=>{bodyError(p,error,name==='json');throw error;});}});}catch{} } if(typeof response.clone==='function'){const clone=response.clone.bind(response);try{Object.defineProperty(response,'clone',{configurable:true,value:()=>body(clone(),p)});}catch{}} // Covers streaming readers without eager reads, clones, buffering or teeing. const stream=response.body; if(stream&&typeof stream.getReader==='function'){ const getReader=stream.getReader.bind(stream); try{Object.defineProperty(stream,'getReader',{configurable:true,value:function(...args){const reader=getReader(...args),read=reader.read.bind(reader);reader.read=(...a)=>read(...a).then(v=>{if(v.done)end(p);return v;},e=>{bodyError(p,e);throw e;});cancellation(reader,'cancel',p);return reader;}});}catch{} cancellation(stream,'cancel',p); if(typeof stream.pipeTo==='function'){const pipe=stream.pipeTo.bind(stream);try{Object.defineProperty(stream,'pipeTo',{configurable:true,value:(...args)=>pipe(...args).then(v=>{end(p);return v;},e=>{bodyError(p,e);throw e;})});}catch{}} for(const key of ['values',Symbol.asyncIterator])if(typeof stream[key]==='function'){const iterate=stream[key].bind(stream);try{Object.defineProperty(stream,key,{configurable:true,value:(...args)=>{const iterator=iterate(...args),next=iterator.next.bind(iterator);iterator.next=(...a)=>next(...a).then(v=>{if(v.done)end(p);return v;},e=>{bodyError(p,e);throw e;});cancellation(iterator,'return',p);return iterator;}});}catch{}} } else end(p); return response; } win.fetch=function(input,init){ let p=null,options=init; try{const name=new URL(typeof input==='string'||input instanceof URL?input:input.url,win.location.href).href;p=begin(name,'fetch',init?.method||input?.method||'GET'); if(p?.row.resourceType==='api'){const headers=new Headers(init?.headers??input?.headers);headers.set('X-Weishi-Client-ID',p.row.clientId);options={...init,headers};p.clientSent=true;}}catch{} let result;try{result=original(input,options);}catch(e){if(p)Object.assign(p.row,evidence.error(e));rememberError(p,e,'request_failed');end(p,'failed','request_failed');throw e;} return result.then(r=>body(r,p),e=>{if(p)Object.assign(p.row,evidence.error(e));if(e?.name!=='AbortError')rememberError(p,e,'request_failed');end(p,e?.name==='AbortError'?'aborted':'failed',e?.name==='AbortError'?undefined:'request_failed');throw e;}); }; if(win.XMLHttpRequest){const proto=win.XMLHttpRequest.prototype,open=proto.open,send=proto.send,states=new WeakMap(); proto.open=function(method,url,...args){states.set(this,{method,url});return open.call(this,method,url,...args);}; proto.send=function(...args){const s=states.get(this),p=s?begin(new URL(s.url,win.location.href).href,'xmlhttprequest',s.method):null; if(p){if(p.row.resourceType==='api')try{this.setRequestHeader('X-Weishi-Client-ID',p.row.clientId);p.clientSent=true;}catch{} let outcome='complete',code;for(const event of ['error','timeout','abort'])this.addEventListener(event,()=>{outcome=event==='abort'?'aborted':'failed';code=event==='abort'?undefined:'request_failed';},{once:true}); const captureResponse=()=>{try{if(Number.isInteger(this.status)&&this.status>=0&&this.status<=599)p.row.status=this.status;const rid=this.getResponseHeader('x-request-id');if(idPattern.test(rid||''))p.row.requestId=rid;}catch{}}; const headersReady=()=>{if(this.readyState>=2){captureResponse();this.removeEventListener?.('readystatechange',headersReady);}}; this.addEventListener('readystatechange',headersReady); this.addEventListener('loadend',()=>{this.removeEventListener?.('readystatechange',headersReady);captureResponse();end(p,this.status>=400?'failed':outcome,this.status>=400?'http_error':code);},{once:true});} try{return send.apply(this,args);}catch(e){if(p)Object.assign(p.row,evidence.error(e));end(p,'failed','request_failed');throw e;}}; } function observe(entries){for(const e of entries)try{ const key=JSON.stringify([e.entryType,e.name,e.startTime,e.duration,e.responseEnd]);if(seenTimings.has(key))continue; const r=resourceRow(e,win.location.origin,win.performance.timeOrigin,uuid);if(!r)continue;Object.assign(r,captureIdentity(e.startTime)); // Native entries have no historical cookie snapshot. Only an exact request // match can supply its start visitor; never refill it from today's cookie. r.visitorId='';r.pageRoute=''; // This document establishes its own first-party browser identity at // bootstrap, including its initial navigation. Never borrow a later // cookie or login proof. Static document assets use the same bounded // browser-only fallback below; API request identity remains independent. if(e.entryType==='navigation'&&e.name===documentUrl){r.visitorId=documentVisitor;delete r.identityProof;delete r.identityObservedAtMs;} if(seenTimings.size>=2000)seenTimings.delete(seenTimings.values().next().value);seenTimings.add(key); let matches=[...correlated.values()].filter(p=>r.clientId&&p.row.clientId===r.clientId||r.requestId&&p.row.requestId===r.requestId);let exactIdentityMatch=matches.length>0; // A document has one initial navigation. Its final Server-Timing ID may // arrive after the watchdog, unlike fetch IDs captured from headers. // Join only that immutable navigation; URL/time guesses for API and // resource requests remain insufficient for identity or request linking. if(!matches.length&&e.entryType==='navigation'&&e.name===documentUrl&&e.startTime===0){ matches=[...correlated.values()].filter(p=>p.type==='navigation'&&p.name===documentUrl&&p.start===0&&(!r.clientId||r.clientId===p.row.clientId)&&(!r.requestId||!p.row.requestId||r.requestId===p.row.requestId)); exactIdentityMatch=matches.length===1; } if(!matches.length&&!r.clientId&&!r.requestId)matches=[...correlated.values()].filter(p=>p.name===e.name&&( p.type==='fetch'||p.type==='xmlhttprequest'?p.start<=e.startTime&&e.startTime-p.start<=1000:Math.abs(p.start-e.startTime)<10)); // A response-less native entry has no phases, status or independent IDs. // The unique instrumented fetch/XHR will report its own terminal outcome. // Keep that wrapper alive even when the observer runs before rejection; // copying its IDs here would count a single abort twice without proof. if(matches.length===1&&!exactIdentityMatch&&matches[0].clientSent&&r.resourceType==='api'&& !r.requestId&&!r.clientId&&!e.responseStart&&(!r.status))continue; // Never associate concurrent identical URLs unless the match is unique. if(matches.length===1){const p=matches[0]; // A native response can replay both Server-Timing IDs. This companion // is eligible only when this wrapper sent its freshly generated client // ID and independently read the matching response header. Never fill // the wrapper's request ID from the native entry. if(!p.requestProofQueued&&p.clientSent&&p.row.resourceType==='api'&&r.clientId===p.row.clientId&&idPattern.test(p.row.requestId||'')&&(!r.requestId||r.requestId===p.row.requestId)&&p.row.visitorId){ r._requestProof={id:uuid(),layer:'browser',route:p.row.route,resourceType:'api',clientId:p.row.clientId,requestId:p.row.requestId,visitorId:p.row.visitorId,atMs:p.row.atMs,totalMs:elapsed(p.start),outcome:p.row.status>=400?'failed':'complete',timingPhase:'complete',method:p.row.method,browserSdkVersion:schema.browserSdkVersion,...evidence.identityTransport(p.row)}; if(Number.isInteger(p.row.status))r._requestProof.status=p.row.status; p.requestProofQueued=true; } if(exactIdentityMatch){r.visitorId=p.row.visitorId??'';delete r.identityProof;delete r.identityObservedAtMs;Object.assign(r,evidence.identityTransport(p.row));}else if(!r.identityProof||r.identityProof!==p.row.identityProof){delete r.identityProof;delete r.identityObservedAtMs;}r.clientId=p.row.clientId;r.requestId=r.requestId||p.row.requestId;r.method=p.row.method;for(const k of ['pageRoute','pageOrigin','pagePath','pageAddressState'])if(p.row[k]!==undefined)r[k]=p.row[k];p.finished=true;p.actualElapsed=r.totalMs;pending.delete(p.row.clientId);correlated.delete(p.row.clientId);if(r.code){if(p.reportedCodes.has(r.code))delete r.code;else p.reportedCodes.add(r.code);}} // Native static assets belong to this document, even when they started // before bootstrap. Keep its frozen browser identity, never a completion // cookie or a guessed fetch visitor. A signed historical account remains // independent: do not pair that proof with a different document visitor. if(!exactIdentityMatch&&!r.visitorId&&!r.identityProof&&e.entryType==='resource'&&['script','link','css','img','image','video','audio','iframe','font'].includes(e.initiatorType)&&!matches.some(p=>['fetch','xmlhttprequest'].includes(p.type)))r.visitorId=documentVisitor; // Static successes need no transport; all failures/slow resources and API timings do. if(r.resourceType==='api'||critical(r))add(r); }catch{}} if(win.PerformanceObserver){for(const type of ['resource','navigation'])try{const observer=new win.PerformanceObserver(list=>observe(list.getEntries()));observer.observe({type,buffered:true});}catch{}} else {fail({route:'monitoring/coverage'},'monitoring_unavailable');win.setInterval(()=>{observe(win.performance.getEntriesByType?.('resource')||[]);},10000);} // Navigation can hang before a completed PerformanceNavigationTiming is emitted. const nav=win.document.readyState&&win.location.href?begin(win.location.href,'navigation'):null;if(nav){nav.start=0;nav.row.visitorId=documentVisitor;delete nav.row.identityProof;delete nav.row.identityObservedAtMs;if(win.document.readyState==='complete')pending.delete(nav.row.clientId);else win.addEventListener('load',()=>end(nav),{once:true});} if(nav)try{ const entries=win.performance.getEntriesByType?.('navigation')||[]; const entry=entries.find(e=>e.name===documentUrl&&e.startTime===0); const requestId=entry?.serverTiming?.find(t=>t.name==='weishi_edge')?.description; if(idPattern.test(requestId||''))nav.row.requestId=requestId; if(Number.isInteger(entry?.responseStatus)&&entry.responseStatus>=100&&entry.responseStatus<=599)nav.row.status=entry.responseStatus; }catch{} const elementPending=new WeakMap(),loadedElements=new WeakMap(),initialElements=new WeakSet(win.document.querySelectorAll?.('script,link,img,iframe,video,audio')||[]); const elementName=el=>el.currentSrc||el.src||el.href; // A parser-blocking script can finish before MutationObserver delivers its // insertion. Capture load before that microtask, and remember moved nodes. win.addEventListener('load',event=>{const el=event.target;if(el&&el!==win&&el.tagName){loadedElements.set(el,elementName(el));end(elementPending.get(el));}},true); for(const el of win.document.querySelectorAll?.('script[src]')||[])if(!el.async&&!el.defer&&el.type!=='module'&&el!==win.document.currentScript)loadedElements.set(el,elementName(el)); let supportsNoModule=false;try{supportsNoModule='noModule' in win.document.createElement('script');}catch{} function watch(el,unknownVisitor=false){const tag=el?.tagName?.toLowerCase(),name=el&&elementName(el);if(!name||!['script','link','img','iframe','video','audio'].includes(tag)||elementPending.get(el)?.name===name||loadedElements.get(el)===name||el.isConnected===false||el.loading==='lazy'||tag==='img'&&el.complete||tag==='link'&&el.sheet)return; if(tag==='script'&&el.type&&!/^(?:module|(?:text|application)\/(?:java|ecma)script)$/i.test(el.type))return; // Modern browsers skip classic nomodule scripts without a request or load // event. Keep legacy browsers, module scripts and actual native errors covered. if(tag==='script'&&supportsNoModule&&el.noModule&&String(el.type).toLowerCase()!=='module')return; if(tag==='link'&&!['stylesheet','preload','modulepreload'].includes(el.rel))return; const p=begin(name,tag);if(!p)return;if(unknownVisitor)p.row.visitorId=p.row.identityProof?'':documentVisitor;if(initialElements.has(el)){p.row.visitorId=documentVisitor;delete p.row.identityProof;delete p.row.identityObservedAtMs;}elementPending.set(el,p);el.addEventListener('load',()=>end(p),{once:true});el.addEventListener('error',()=>end(p,'failed','resource_error'),{once:true});} if(win.MutationObserver)try{const inspect=(records,unknownVisitor=false)=>{for(const r of records)for(const el of r.addedNodes||[]){watch(el,unknownVisitor);for(const child of el.querySelectorAll?.('script,link,img,iframe,video,audio')||[])watch(child,unknownVisitor);}};const mo=new win.MutationObserver(records=>inspect(records));mo.observe(win.document.documentElement,{childList:true,subtree:true});drainPendingResources=()=>inspect(mo.takeRecords?.()||[],true);}catch{} function frontendCode(error,fallback){ if(error?.name==='AbortError')return ''; const status=Number(error?.httpStatus||error?.status||error?.response?.status||0); return (schema.expectedBusinessCodes||[]).includes(error?.code||error?.errorCode)||[400,401,402,403,409,422,429].includes(status)?'business_rejection':fallback; } win.addEventListener('error',event=>{const el=event.target;if(el&&el!==win&&el.tagName){loadedElements.set(el,elementName(el));if(!elementPending.has(el)){const t=target(elementName(el),win.location.origin,el.tagName.toLowerCase());if(t){t.visitorId=documentVisitor;identityCaptured.add(t);fail(t,'resource_error');}}}else {const code=frontendCode(event.error,'js_error');if(code)fail({route:'frontend/runtime'},code,evidence.error(event.error,event));}},true); win.addEventListener('unhandledrejection',event=>{const code=frontendCode(event.reason,'unhandled_rejection');if(code)fail({route:'frontend/promise'},code,evidence.error(event.reason,{rejection:true}));}); win.addEventListener('securitypolicyviolation',event=>{const blocked=typeof event.blockedURI==='string'&&/^https?:\/\//i.test(event.blockedURI)?event.blockedURI:undefined;fail({route:'frontend/runtime'},'csp_violation',{...evidence.resource(blocked,win.location.origin,true),...evidence.error(null,{filename:event.sourceFile,lineno:event.lineNumber,colno:event.columnNumber})});}); if(win.console?.error){const originalError=win.console.error;win.console.error=function(...args){try{const error=args.find(v=>{try{return v&&typeof v==='object'&&(typeof v.stack==='string'||v.code||v.httpStatus||v.status);}catch{return false;}}),code=frontendCode(error,'console_error');if(code)fail({route:'frontend/console'},code,evidence.error(error));}catch{}return originalError.apply(this,args);};} for(const [name,code] of [['WebSocket','websocket_error'],['EventSource','eventsource_error']])if(win[name]){const Native=win[name];try{win[name]=new Proxy(Native,{construct(target,args,newTarget){const r={route:'resource/fetch',resourceType:'fetch',visitorId:visitorId(),...evidence.resource(typeof args[0]==='string'?args[0]:undefined,win.location.origin,true),...captureIdentity(clock())};identityCaptured.add(r);const instance=Reflect.construct(target,args,newTarget);instance.addEventListener('error',()=>fail(r,code));return instance;}});}catch{}} async function flush(){if(sending||(!queue.length&&!dropped))return;sending=true; // Diagnostic stacks enlarge rows; keep each transport below ingress's 32 KiB cap. const bytes=value=>Array.from(JSON.stringify(value)).reduce((n,c)=>n+(c.codePointAt(0)<128?1:c.codePointAt(0)<2048?2:c.codePointAt(0)<65536?3:4),0); const rows=[];let size=bytes({schema:'browser-timing-v1',rows:[],dropped}); for(const source of queue.slice().sort((a,b)=>Number(critical(b))-Number(critical(a)))){ let r={...source};delete r._requestProof; if(bytes(r)>27000){ // Damaged/legacy storage must not block the queue forever. Preserve the // failure classification and identity, reducing only optional evidence. r={id:source.id,layer:'browser',route:source.route,outcome:source.outcome,atMs:now()}; if(typeof source.visitorId==='string'&&/^[a-z][a-z0-9_-]{7,95}$/.test(source.visitorId))r.visitorId=source.visitorId; if(codes.has(source.code))r.code=source.code;for(const k of ['requestId','clientId'])if(idPattern.test(source[k]||''))r[k]=source[k]; for(const [k,max] of [['totalMs',3600000],['status',599]])if(Number.isSafeInteger(source[k])&&source[k]>=0&&source[k]<=max)r[k]=source[k]; const safe=evidence.clean(source);delete safe.errorStack;Object.assign(r,safe,evidence.identityTransport(source)); } // Keep a native observation and its independent wrapper in one HTTP // batch, including retry/restore and the 20-row/byte boundaries. Both // receive the same trusted ingress time; no correlation window grows. let unit=pairedProof(r,source._requestProof)?[source._requestProof,r]:[r]; let amount=unit.reduce((n,row)=>n+bytes(row)+1,0); // A damaged restored pair must not starve every later observation. // Keep the original row; dropping proof cannot grant an association. if(unit.length===2&&amount+bytes({schema:'browser-timing-v1',rows:[],dropped})>28000){unit=[r];amount=bytes(r)+1;} if(rows.length+unit.length>20||size+amount>28000)break;rows.push(...unit);size+=amount; } const lost=dropped,controller=new win.AbortController(),timer=win.setTimeout(()=>controller.abort(),8000); try{const response=await original(endpoint,{method:'POST',credentials:'same-origin',headers:{'Content-Type':'application/json'},body:JSON.stringify({schema:'browser-timing-v1',rows,dropped:lost}),keepalive:true,signal:controller.signal});if(response.status===202){const ids=new Set(rows.map(r=>r.id));for(let i=queue.length-1;i>=0;i--)if(ids.has(queue[i].id))queue.splice(i,1);dropped=Math.max(0,dropped-lost);persist();}} catch{}finally{win.clearTimeout(timer);sending=false;} } win.setInterval(()=>{ // Read completed native entries before a timer can overtake the observer // callback after a busy main thread. A completed request is never pending. if(pending.size)observe(win.performance.getEntriesByType?.('resource')||[]); for(const p of pending.values())if(!p.warned&&elapsed(p.start)>3000){p.warned=true;add({...p.row,totalMs:elapsed(p.start),outcome:'unavailable',timingPhase:'pending'});}return flush();},1000); win.addEventListener('online',flush);win.addEventListener('pagehide',()=>{persist();void flush();});win.document.addEventListener('visibilitychange',()=>{if(win.document.visibilityState==='hidden')void flush();}); } return {route,resourceRow,installBrowserMonitoring}; })({"version":2,"routes":["auth","auth/biyewen-callback","auth/biyewen-login","auth/logout","auth/me","auth/qr","auth/session","auth/workspace-claim","auth/workspace-entry","email/visit","frontend/business","frontend/console","frontend/promise","frontend/react","frontend/runtime","frontend/server","job-sources/catalog","jobs","jobs/:id","jobs/catalog","jobs/channels","jobs/companies","jobs/company-logo","jobs/detail","jobs/filters","jobs/landing","jobs/locations","jobs/sitemap","jobs/snapshot-version","jobs/summary","me","me/application-access","me/application-payment/order","me/application-payment/orders/:id","me/application-workspace","me/application-workspace/:id","me/job-applications/:id/access","me/job-console","me/job-console/companies","me/job-console/majors","me/job-favorites","me/job-favorites/:id","me/job-radars","me/job-radars/:id","me/job-radars/:id/matches/:id","me/job-radars/:id/matches/:id/fit-feedback","me/job-views","me/jobs/:id/resume-fit","me/jobs/:id/resume-optimization","me/jobs/:id/resume-optimization/stream","me/notifications","me/notifications/:id/read","me/notifications/read-all","me/opportunity-profile","me/resume-optimizations/:id","me/resume-profile","me/resume-profile/source-file","me/resumes","monitoring/coverage","other","page/about","page/applications","page/auth/iframe-complete","page/blog","page/blog/:id","page/favorites","page/history","page/home","page/jobs","page/jobs/:id","page/jobs/:id/resume-editor","page/jobs/campus","page/jobs/campus/2027","page/jobs/internship","page/jobs/social","page/me","page/me/applications","page/me/history","page/me/opportunity-profile","page/me/radar","page/me/resumes","page/other","resource/fetch","resource/font","resource/iframe","resource/image","resource/media","resource/other","resource/script","resource/style","stats/behavior","stats/events","stats/feedback","stats/page-visit","support/group-qr"],"failureCodes":["http_error","request_failed","response_body_error","response_parse_error","api_business_error","resource_error","js_error","unhandled_rejection","console_error","react_error","server_error","business_failure","csp_violation","websocket_error","eventsource_error","monitoring_unavailable","session_unavailable","auth_callback_failed","session_verification_unavailable","session_not_confirmed","qr_init_http","qr_init_invalid","qr_init_transport","qr_init_timeout","qr_image_error","qr_image_timeout","qr_frame_error","login_bridge_timeout","business_rejection"],"enums":{"resourceType":["api","navigation","script","style","image","font","media","iframe","fetch","other"],"targetOrigin":["same_origin","external"],"timingPhase":["pending","complete"]},"browserEvidence":{"addressStates":["complete","origin_only","redacted","unavailable"],"errorNames":["AbortError","AggregateError","ConstraintError","DOMException","DataCloneError","DataError","EncodingError","Error","EvalError","HierarchyRequestError","InUseAttributeError","IndexSizeError","InternalError","InvalidAccessError","InvalidCharacterError","InvalidModificationError","InvalidNodeTypeError","InvalidStateError","NamespaceError","NetworkError","NoModificationAllowedError","NonErrorRejection","NotAllowedError","NotFoundError","NotReadableError","NotSupportedError","OperationError","OtherError","QuotaExceededError","RangeError","ReadOnlyError","ReferenceError","SecurityError","SyntaxError","TimeoutError","TransactionInactiveError","TypeError","TypeMismatchError","URIError","URLMismatchError","UnknownError","VersionError","WrongDocumentError"],"stringLimits":{"resourceOrigin":320,"resourcePath":512,"errorSource":864,"errorStack":2048},"positionMax":10000000,"stackFramesMax":8},"browserSdkVersion":"0.1.37","expectedBusinessCodes":["login_required","payment_required","radar_pro_required","job_not_found","application_record_not_found","radar_not_found","radar_match_not_found"]},(/* Diagnostic metadata only: never messages, rejection values or function arguments. */ function createBrowserEvidence() { const names=new Set(["AbortError","AggregateError","ConstraintError","DOMException","DataCloneError","DataError","EncodingError","Error","EvalError","HierarchyRequestError","InUseAttributeError","IndexSizeError","InternalError","InvalidAccessError","InvalidCharacterError","InvalidModificationError","InvalidNodeTypeError","InvalidStateError","NamespaceError","NetworkError","NoModificationAllowedError","NonErrorRejection","NotAllowedError","NotFoundError","NotReadableError","NotSupportedError","OperationError","OtherError","QuotaExceededError","RangeError","ReadOnlyError","ReferenceError","SecurityError","SyntaxError","TimeoutError","TransactionInactiveError","TypeError","TypeMismatchError","URIError","URLMismatchError","UnknownError","VersionError","WrongDocumentError"]); const position=v=>Number.isSafeInteger(v)&&v>0&&v<=10000000; const privatePath=/(?:^|\/)(?:token|secret|password|reset-password|reset|verify|callback|oauth|files?|uploads?|media)(?:\/|$)|@|[\x00-\x20\x7f\\]/i; function publicPath(value,staticOrigin=false) { if(typeof value!=='string'||value.length>512||!value.startsWith('/'))return ''; let path;try{path=decodeURIComponent(value);}catch{return '';} if(!/^\/[A-Za-z0-9_./~-]*$/.test(path)||privatePath.test(path)||path.split('/').some(s=>s==='..'||s==='.'||s.length>128||/^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(s)||/(?:token|secret|password|credential|authorization|signature|session|api_key|access_key)[=_-]/i.test(s)||(!(staticOrigin&&/^\/(?:_next\/static|fonts)\//.test(path))&&/^[A-Za-z0-9_-]{32,}$/.test(s.split('.')[0]))))return ''; return path; } function origin(value) { if(typeof value!=='string'||value.length>320)return ''; try{const u=new URL(value),h=u.hostname; if(!['http:','https:'].includes(u.protocol)||u.username||u.password||u.pathname!=='/'||u.search||u.hash||u.port==='0'||!h.includes('.')||h.endsWith('.')||/^(?:\d+\.){3}\d+$/.test(h)||h.includes(':')||/(?:^|\.)(?:localhost|local|internal|invalid|lan)$/.test(h)||!h.split('.').every(p=>/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(p)&&!/^[-a-z0-9]{32,}$/.test(p)))return ''; return u.origin; }catch{return '';} } function address(value,base) { if(typeof value!=='string'||!value)return {state:'unavailable'}; if(value.length>8192||/[\x00-\x20\x7f\\]/.test(value))return {state:'redacted'}; try{const u=new URL(value,base),o=origin(u.origin);if(!o)return {state:'redacted'}; // Check the unnormalised path too: URL() otherwise erases ../ and encoded dots. const raw=value.replace(/^[a-z][a-z0-9+.-]*:\/\/[^/]+/i,'').split(/[?#]/)[0]||'/'; const staticOrigin=['https://app.offerseek.ai','https://offerseek.ai'].includes(o); const p=publicPath(raw.startsWith('/')?raw:'/'+raw,staticOrigin)&&publicPath(u.pathname,staticOrigin); return p?{origin:o,path:p,state:'complete'}:{origin:o,state:'origin_only'}; }catch{return {state:'redacted'};} } function resource(value,base,external=false) { const a=address(value,base),out={resourceAddressState:a.state};if(a.origin)out.resourceOrigin=a.origin; // Keep the original same-origin static-only resourcePath contract. if(a.path&&(external||/^\/(?:_next\/static|fonts)\/[A-Za-z0-9_./-]{1,480}$/.test(a.path)))out.resourcePath=a.path; else if(a.path)out.resourceAddressState='origin_only';return out; } function stack(value) { if(typeof value!=='string')return ''; const frames=[];let size=0; for(const line of value.slice(0,16384).split('\n').slice(0,32)){ // V8 and Firefox/Safari: retain the location, never the message/function. const match=line.match(/^(?:\s*at\s+(?:[^()\n]*$)?|[^@\n]*@)?(https?:\/\/[^\s()]+):(\d{1,8}):(\d{1,8})$?\s*$/);if(!match)continue; const a=address(match[1]);if(a.state!=='complete'||!position(Number(match[2]))||!position(Number(match[3])))continue; const frame=a.origin+a.path+':'+Number(match[2])+':'+Number(match[3]);if(size+frame.length+(frames.length?1:0)>2048)break; frames.push(frame);size+=frame.length+(frames.length>1?1:0);if(frames.length===8)break; }return frames.join('\n'); } function error(value,details={}) { const out={};let name,trace;try{if(value&&(typeof value==='object'||typeof value==='function')){name=value.name;trace=value.stack;}}catch{} if(typeof name==='string')out.errorName=names.has(name)?name:'OtherError'; else if(details.rejection)out.errorName='NonErrorRejection'; let source;try{source=address(details.filename);}catch{source={state:'unavailable'};} out.errorSourceState=source.state;if(source.origin)out.errorSource=source.origin+(source.path||''); if(position(details.lineno))out.errorLine=details.lineno;if(position(details.colno))out.errorColumn=details.colno; const safeStack=stack(trace);if(safeStack){out.errorStack=safeStack;if(!out.errorSource){const frame=safeStack.split('\n')[0].match(/^(.*):(\d+):(\d+)$/);out.errorSource=frame[1];out.errorSourceState='complete';out.errorLine=Number(frame[2]);out.errorColumn=Number(frame[3]);}} return out; } function clean(row) { const out={}; const po=origin(row.pageOrigin);if(po){out.pageOrigin=po;const pp=publicPath(row.pagePath,['https://app.offerseek.ai','https://offerseek.ai'].includes(po));if(pp)out.pagePath=pp;out.pageAddressState=pp?'complete':'origin_only';} else if(['redacted','unavailable'].includes(row.pageAddressState))out.pageAddressState=row.pageAddressState; const o=origin(row.resourceOrigin);if(o){out.resourceOrigin=o;const p=publicPath(row.resourcePath,['https://app.offerseek.ai','https://offerseek.ai'].includes(o));if(p)out.resourcePath=p;out.resourceAddressState=p?'complete':'origin_only';} else if(typeof row.resourcePath==='string'&&/^\/(?:_next\/static|fonts)\/[A-Za-z0-9_./-]{1,480}$/.test(row.resourcePath)&&publicPath(row.resourcePath,true))out.resourcePath=row.resourcePath; if(!o&&['redacted','unavailable'].includes(row.resourceAddressState))out.resourceAddressState=row.resourceAddressState; if(names.has(row.errorName))out.errorName=row.errorName; if(typeof row.errorSource==='string'){const a=address(row.errorSource);out.errorSourceState=a.state;if(a.origin)out.errorSource=a.origin+(a.path||'');if(row.errorSourceState==='origin_only'&&a.origin){out.errorSource=a.origin;out.errorSourceState='origin_only';}} else if(['redacted','unavailable'].includes(row.errorSourceState))out.errorSourceState=row.errorSourceState; for(const k of ['errorLine','errorColumn'])if(position(row[k]))out[k]=row[k]; if(typeof row.browserSdkVersion==='string'&&/^\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(row.browserSdkVersion))out.browserSdkVersion=row.browserSdkVersion; const frames=stack(row.errorStack);if(frames)out.errorStack=frames;return out; } // Transport-only fields. clean() deliberately excludes these from UI/card data. function identityTransport(row) { if(typeof row?.identityProof!=='string'||row.identityProof.length>1536||!/^wbi1\.[A-Za-z0-9_-]{1,1440}\.[a-f0-9]{64}$/.test(row.identityProof)||!Number.isSafeInteger(row.identityObservedAtMs)||row.identityObservedAtMs<=0)return {}; return {identityProof:row.identityProof,identityObservedAtMs:row.identityObservedAtMs}; } return {resource,error,clean,address,publicPath,origin,stack,identityTransport}; } )).installBrowserMonitoring(window);

岗位职责

任职要求

信息来自企业官方招聘渠道