Skip to content

Debugging & Logging

MasterSelects includes a Logger service plus several playback and health monitors that are surfaced both in the browser console and through the AI bridge.

Runtime diagnostics and app-open analytics identify the application version, build timestamp, exact Git commit and release ID. Production builds emit the same identity in build-info.json. A release ID is assigned only to a clean Git checkout; development builds and locally modified sources are explicitly distinguishable. Older reports can lack these fields and must not be attributed to a later commit. The build timestamp remains available for comparing successive deployments.

The Logger service (src/services/logger.ts) provides:

Feature Description
Log levels DEBUG, INFO, WARN, ERROR with level filtering
Module filtering Enable debug logs for specific modules only
In-memory buffer 500 entries stored for inspection
Global access window.Logger in the browser console
AI-agent support Structured summaries for tool inspection
Timestamps Timestamp prefixes enabled by default
Stack traces Captured when an error object is logged
Log sync Development log sync through window.LogSync

Default log level: WARN. Errors are always shown and always buffered. WARN and ERROR entries are buffered even when they are not displayed.


All commands are available via window.Logger or just Logger in the browser console.

Logger.enable('WebGPU,FFmpeg,Export')
Logger.enable('*')
Logger.disable()
Logger.setLevel('DEBUG')
Logger.setLevel('INFO')
Logger.setLevel('WARN')
Logger.setLevel('ERROR')
Logger.getBuffer()
Logger.getBuffer('ERROR')
Logger.getBuffer('WARN')
Logger.search('device')
Logger.errors()
Logger.dump(50)
Logger.summary()
Logger.export()
Logger.status()
Logger.modules()
Logger.clear()
Logger.setTimestamps(false)

In development mode the browser automatically syncs redacted log summaries to the dev server every 2 seconds.

window.LogSync exposes:

LogSync.status() // 'running' or 'stopped'
LogSync.stop()
LogSync.start()
LogSync.flush()

If the dev bridge token is not present, the browser falls back to sendBeacon for the local /api/logs endpoint. The payload is still redacted before it leaves the page.


In development, the HMR-backed browser client registers the dev HTTP bridge. It dispatches through the shared AI-tool registry with the devBridge caller context:

POST /api/ai-tools

It supports the _list and _status meta-commands, plus targeted execution against a connected browser tab through the HMR bridge.

For bridge preflight, GET /api/ai-tools reports connected browser tabs without auth, while GET /api/ai-tools/auth-check validates the bearer token without dispatching a browser tool. This catches stale .ai-bridge-token files when multiple dev servers are running.

Terminal window
$token = Get-Content -Path .ai-bridge-token -Raw
$headers = @{ Authorization = "Bearer $token"; 'Content-Type' = 'application/json' }
Invoke-RestMethod -Uri 'http://localhost:5173/api/ai-tools/auth-check' -Method Get -Headers $headers

The worker-first platform-evidence helper wraps these checks:

Terminal window
npm run worker-first:platform:doctor -- --latest-per-platform
npm run worker-first:platform:status -- --latest-per-platform
npm run worker-first:platform:macos-runbook

doctor prints matrix status, platform proof summaries, bridge tab status, fresh/stale tab counts, and Bridge auth: ok or the token error. collect first waits for a fresh dev-bridge target tab to register (lastSeenAgoMs <= 10000 and not unresponsive), then waits --wait-ms again after target-tab selection before dispatching the proof tool; the default is 5000ms. If doctor reports Fresh tabs: 0/..., foreground or reload the target browser tab before collecting. Collection reports include readiness metadata (targetPollCount, targetWaitedMs, selected tab before/after settle, and actual settle wait) so a package can be audited for the required post-load wait. status, verify, and doctor read matching companion *.report.json files when present and print a non-blocking readiness audit (missing report, legacy report, or invalid). Failed collect payloads are written as *.failed.json, never *.package.json, so incomplete runs cannot displace the latest valid per-platform package. macos-runbook prints the exact real-Mac Safari/Firefox collection commands for the remaining platform packages; it is not synthetic platform evidence.

Use debugExport when the UI export fails or appears stuck and the dev server plus browser tab are already running. It is a dev-bridge-only handler, not a public chat tool. With download: true the browser saves the file as <filename>.<container>: filename (without the extension) names it, otherwise the export settings’ name; the result reports the saved name. The tutorial pipeline exports episodes this way and picks the file up from the Downloads folder.

Terminal window
$token = Get-Content -Path .ai-bridge-token -Raw
$headers = @{ Authorization = "Bearer $token"; 'Content-Type' = 'application/json' }
$body = @{
tool = 'debugExport'
args = @{
startTime = 0
durationSeconds = 1.0
width = 640
height = 360
fps = 15
includeAudio = $false
exportMode = 'fast'
download = $false
maxRuntimeMs = 25000
}
} | ConvertTo-Json -Depth 6
Invoke-RestMethod -Uri 'http://localhost:5173/api/ai-tools' -Method Post -Headers $headers -Body $body

For the current timeline and export defaults:

Terminal window
$body = @{ tool = 'debugExport'; args = @{ includeAudio = $true; exportMode = 'fast'; download = $false } } | ConvertTo-Json -Depth 6
Invoke-RestMethod -Uri 'http://localhost:5173/api/ai-tools' -Method Post -Headers $headers -Body $body

The result includes blob size/type, progress samples, settings, engine state before/after export, and recent export/GPU warnings or errors. maxRuntimeMs cancels the export cleanly before the dev-bridge request appears hung. A blob with size > 0 proves the browser FrameExporter path can render and encode. If the UI still fails afterward, inspect ExportPanel, preset state, progress state, and download handling.

If logs show WebGPU device lost during export and getStats reports renderLoop.isRunning=false, renderDispatcher=null, or targetCanvasCount=0, the browser engine is in a stale device state. Use reloadApp or hard-reload the tab before retesting. Windows powerPreference warnings and NativeHelper WebSocket failures are not automatically export blockers.

For a visual UI failure, select the intended browser session explicitly and call captureAppScreenshot on the devBridge surface. The default captures the visible app viewport; fullPage: true captures the complete scrolling document. Output scaling is reduced automatically when needed to stay within bridge-safe image dimensions. Before capturing, the tool re-presents the preview on three consecutive frames, because WebKit can read a WebGPU canvas back from an older swap-chain buffer; on a slow GPU a capture taken right after a seek can still precede the new frame, so prefer captureFrame (GPU readback) to judge preview content. The result is returned as MCP image content and its base64 payload is omitted from durable traces.

Use clickAppControl to reproduce a visible button, link, disclosure, or other specific control without switching to a separate browser automation stack. Use probeSameOriginRequest to inspect a failing local /api/ call from the authenticated tab; it returns selected headers and a bounded redacted body instead of exposing cookies or unrestricted URLs. All three tools are development-only and must be called with an explicit target session when multiple tabs are present.

Native folder dialogs (Open existing, Reconnect media, granting folder access) cannot be driven by automation. scripts/local-project-harness.mjs runs these flows end to end in an isolated Google Chrome profile (default under /tmp) against a dev server (default http://localhost:5174/editor):

  • the project folder, and any --mount name=/path (optionally filtered with --mount-include name=<regex>), is served read-only on 127.0.0.1 and copied once into the harness profile’s OPFS; later runs reuse the copy;
  • showDirectoryPicker returns real directory handles from that copy, so the editor’s File System Access path and UI run unchanged; the original folders are never written;
  • steps: open (Choose-project dialog or File → Open Project…), restore (wait for the automatic reopen), pick:<dir> / pick:@<mount> (answer the next folder dialog), click:<button regex>, waitText:<regex>, wait:<ms>, eval:<expression>; confirm dialogs are accepted.

The JSON report has a timed progress trace (load phases, “saved items recovered”, missing-media notices), the final visible state and the editor’s warnings/errors with stacks. To read stores in eval, import the module URL the app actually loaded (Vite adds ?t= after edits), e.g. performance.getEntriesByType('resource').map(e => e.name).filter(u => u.includes('/src/stores/mediaStore/index.ts')).at(-1). Headless Chrome gets only the software WebGPU adapter, so GPU-heavy work such as simulation preparation is not representative there; folder, repository, load and relink behavior is.


The media and timeline stores keep their instance across Vite code updates (import.meta.hot.data, kept at once, not only on dispose): after an update elsewhere, Vite may load a second copy of a store module without disposing the first, and a second, empty store then took over the project repository boundary while the editor still showed the first one. Every edit was refused with Composition "Comp 1" is not part of the open project (2026-10-26). A store that registers at the repository boundary a second time logs [Repository] The "<domain>" store was created a second time (a code update?); reload the editor when edits are refused after that.

The app exposes several runtime monitors that feed the AI debug tools and the console:

Surface What it exposes
window.__WC_PIPELINE__ WebCodecs ring-buffer events, stalls, seeks, timeline views, and aggregate stats
window.__VF_PIPELINE__ HTMLVideo / VideoFrame ring-buffer events, audio timelines, stall context, and aggregate stats
window.__PLAYBACK_HEALTH__ Health snapshot, anomaly list, active video states, and recovery helpers

The playback-related AI tools read from the same sources:

  • getStats
  • getStatsHistory
  • getAudioDiagnostics
  • getLogs
  • getRuntimeDiagnostics
  • clearRuntimeDiagnostics
  • getPlaybackTrace
  • purgePlaybackPath
  • samplePlaybackFramePacing

Those tools surface:

  • Engine state and readiness
  • Timing breakdowns
  • Decoder and drop information
  • Playback health and anomaly data
  • Cache and slot-deck stats
  • Render loop and render dispatcher state
  • WebCodecs / VF pipeline event windows
  • Audio media element ready/buffer state, Web Audio context latency, routing graph state, and recent audio drift/correction events
  • Captured console output, window errors, unhandled rejections, WebGPU uncaptured errors, and device-lost events

purgePlaybackPath resets the live playback path at the current playhead without a page reload. It clears VideoSync warmups/seeks, retargets active HTMLVideo/WebCodecs providers, resets GPU-ready state, and can resume playback automatically. The health monitor can invoke the same path when vf_preview_frame telemetry shows the playhead target moving while the preview frame remains frozen.

When playback start has to wait for active HTML video readiness, TimelineState.playbackWarmup is set until the readiness gate finishes or is canceled. A settled current frame (HAVE_CURRENT_DATA, not seeking) starts immediately after a hop or scrub. A last presented frame within 350 ms of the exact mapped source target is also reusable, so playback can start while the decoder catches up behind the active layer’s frame hold. The gate and its small Preparing playback overlay remain for genuinely cold targets where no reusable frame exists; background VideoSync warmups during normal playback do not look like blocking loading states.

HTML playback stop keeps a decoded frame within 50 ms of the playhead and aligns the playhead to that presented frame instead of issuing another precision seek. Larger lag still settles exactly; the tolerance prevents rapid play/pause cycles from creating a seek queue that makes later starts cold.

getAudioDiagnostics is the focused bridge tool for audio crackle/dropout debugging. Capture it during audible playback to inspect mediaSummary, per-element buffered.bufferedAheadSeconds, routing.context.baseLatencyMs, status.drift, and events.correctionMs.

getStatsHistory is capped to 1-30 samples, getAudioDiagnostics caps the inspected event window and returned event count, getLogs caps the returned buffer to 1-500 entries, getRuntimeDiagnostics caps returned entries to 1-1000, and getPlaybackTrace caps the inspected time window and event count so the bridge stays responsive.

getRuntimeDiagnostics reads the browser runtime-diagnostics buffer. Use clearRuntimeDiagnostics before a reproducible dev-bridge run; the buffer records console calls, window errors, unhandled rejections, and WebGPU errors/device-loss events.


import { Logger } from '@/services/logger';
const log = Logger.create('MyModule');
log.debug('Verbose debugging info', { data });
log.info('Important event');
log.warn('Warning message', data);
log.error('Error occurred', error);
const log = Logger.create('Export');
const done = log.time('Encoding video');
// ...
done();
const log = Logger.create('Compositor');
log.group('Rendering frame 42', () => {
log.debug('Collecting layers');
log.debug('Applying effects');
log.debug('Compositing');
});

Modules are named after their file or class:

File Module Name
WebGPUEngine.ts WebGPUEngine
FFmpegBridge.ts FFmpegBridge
AudioEncoder.ts AudioEncoder
ProjectCoreService.ts ProjectCore
Timeline.tsx Timeline
Toolbar.tsx Toolbar
PerformanceMonitor.ts PerformanceMonitor
useGlobalHistory.ts History
Logger.enable('WebGPU,Compositor,RenderLoop,TextureManager')
Logger.enable('Export,FrameExporter,VideoEncoder,AudioEncoder,FFmpeg')
Logger.enable('Audio,AudioMixer,AudioEncoder,TimeStretch')
Logger.enable('Project,ProjectCore,FileStorage')
Logger.enable('Timeline,Clip,Track,Keyframe')

The Logger is designed to help AI code assistants understand what is happening in the application.

const summary = Logger.summary();
// {
// totalLogs: 234,
// errorCount: 2,
// warnCount: 5,
// recentErrors: [...],
// activeModules: ['WebGPUEngine', 'Export', 'FFmpegBridge']
// }
Logger.search('device lost')
Logger.search('encode failed')
Logger.search('permission denied')
const logData = Logger.export();
// Includes config, registered modules, and the buffered logs

The most useful browser-console globals for playback issues are:

  • window.__WC_PIPELINE__
  • window.__VF_PIPELINE__
  • window.__PLAYBACK_HEALTH__

Useful log modules:

Logger.enable('WebCodecsPlayer,PlaybackHealth,LayerCollector')
Logger.enable('VideoSyncManager,ParallelDecode,RenderLoop')
Logger.setLevel('DEBUG')

The playback monitors feed the AI bridge stats tools, so getStats and getPlaybackTrace are the canonical way to capture a reproducible snapshot when the browser console alone is not enough.


Internal campaign tooling in scripts/windows-quality/ freezes the existing eight-case Windows beta corpus, source inputs, reference media and environment receipt before execution. Use the adapter README for provisioning and commands. A campaign requires an explicit exclusive desktop grant and keeps original reports, process records and artifact hashes after failure or interruption. A passing small campaign does not establish full editor coverage or authorize a release.

The static feature inventory and its byte-provenance checks live under tests/windows-quality/inventory/; only immutable inventory JSON descriptions belong under tests/playwright/campaigns/. Historical CRLF-archive references and exact-Git references remain separate. Validate each against its declared source bytes, rather than normalizing a changed checkout to make a check pass.

Qualification reports must record which checks actually ran and which native, deployment and recovery proofs remain missing. Internal producer/receiver adapters reside in the separate Social service; synthetic adapter reports never substitute for observed editor failures.

Complete Pages artifact checks additionally live in scripts/windows-quality/pages-artifact.mjs and qualify-pages-artifact.mjs. They bind frontend, compiled Functions, routes and private configuration inputs, reject changes during staging, and require an independently retained seal hash. Their package-byte result does not qualify browser behavior, production bindings, authenticated API behavior or deployment/recovery. See the adapter README for the explicit-path qualification command and filesystem regression controls.

Each log entry contains:

{
timestamp: string;
level: 'DEBUG' | 'INFO' | 'WARN' | 'ERROR';
module: string;
message: string;
data?: unknown;
stack?: string;
}

Source: src/services/logger.ts, src/services/runtimeDiagnostics.ts, src/services/playbackDebugSnapshot.ts, src/services/playbackDebugStats.ts, src/services/playbackHealthMonitor.ts, src/services/wcPipelineMonitor.ts, src/services/vfPipelineMonitor.ts, src/services/aiTools/bridge.ts, src/services/aiTools/handlers/stats.ts, tools/devBridge/vitePlugin.ts

Development POST /api/debug/action supports measure-keyframe-disclosure with an explicit top-level targetTabId and args: { trackId, clipId?, profile? }. Wait for project loading to finish and keep the editor visible. It optionally selects the clip, toggles the track twice, measures synchronous React commit time and the following two animation frames, and restores selection/disclosure. paintedMs: null means the paint deadline expired or the tab became hidden. The result includes selected IDs and diamond counts so empty/unloaded rows cannot be mistaken for a successful dense-row benchmark. Optional CPU sampling covers the initial selection; bridge transport and tool preview capture are excluded from reported times.

A failed dynamic import can request one reload, with a 60-second session cooldown. The vite:preloadError event must retain its default behavior: cancelling it makes Vite resolve the failed import as undefined, causing a secondary React lazy-module error. Requesting navigation is not proof that navigation completed; an unsaved-project warning may cancel it. Preserve the original rejection so diagnostics and callers retain the actual module failure.

Three more paths lead into the same recovery (src/runtime/chunkLoadRecovery.ts):

  • React render errors. A rejected React.lazy import is consumed by React and reported as an uncaught render error that unmounts the root; no window hook sees it. main.tsx passes such errors to recoverFromChunkRenderError(), so a failed App-<hash>.js no longer leaves a blank page without a reload.
  • Offline. When navigator.onLine is false the reload waits for the online event (reload_waiting_online) instead of failing again and spending the cooldown. Mobile tabs resumed from the background hit this most.
  • Failed CSS preloads (“Unable to preload CSS for …”) count as chunk failures.
  • Project storage worker that fails before answering. A worker 404 raises no chunk error, only Project storage worker failed (storage phase: startup …). StorageWorkerClient reports such a failure (src/runtime/workerLoadFailure.ts); the recovery fetches the current page with no-store and reloads only when the server now serves another build (app version or module entry differs). A real worker error on the current build stays a visible error without a reload.

When the automatic reload is not possible (cooldown, unsaved project) or waits for the connection, a plain-DOM notice (src/runtime/chunkRecoveryNotice.ts, outside React so it survives an unmounted root) explains why and offers a Reload button.

Keeping old chunks available across deploys

Section titled “Keeping old chunks available across deploys”

Cloudflare Pages serves only the files of the active deployment, so a tab opened before a deploy fails to lazy-load its old chunk names afterwards (404, unless the edge cache still holds them). npm run deploy:retain-assets lists the last eight production deployments (wrangler pages deployment list), crawls each one’s entry pages and /assets/ chunks from its own <id>.masterselects.pages.dev URL and copies missing hashed files into dist/assets. Pages deduplicates uploads by hash, so the retained files add no upload cost; about 200 files per deployment are added. Old tabs then keep working until they reload; the recovery above covers anything older.

Retention only helps when it runs before the upload, so production deploys go through npm run deploy:pages (scripts/deploy-pages.mjs, checks in scripts/deploy-pages-checks.mjs) instead of a manual wrangler pages deploy. It stops with NOT DEPLOYED and the failed check unless all of these hold: a green Security Checks run for HEAD (or HEAD only changes the version lines and release files of a green commit); a dist built by npm run build:deploy from exactly HEAD with sourceDirty: false and the package.json version; the new build’s own entry chunks and projectStorage.worker-*.js; and, after retention, the live deployment’s entry chunks and its storage worker in dist/assets. --dry-run runs every check and the retention into dist and prints the deploy command instead of running it; --skip-build checks an existing dist. The checkout must be clean before the build. build:deploy runs docs:build, whose sync rewrites the tracked docs-site pages (docs-site/src/content/docs/features/, getting-started/overview.md, docs-site/public/assets/) from docs/Features at HEAD; such changes do not stop the deploy, but the script names them so the sync can be committed afterwards. Any other file the build changes stops it. The script also runs when started on Windows, where its path is a drive path rather than a file:// string.

Both deploy scripts start their tools through scripts/run-command.mjs without a shell: git and gh run directly, npx wrangler runs the project’s own node_modules/wrangler/bin/wrangler.js with node, and only the npm/npx .cmd shims on Windows go through cmd.exe with every argument quoted and escaped (no DEP0190 warning, no unescaped arguments). A missing program is named (git was not found), and a missing or logged-out GitHub CLI stops the CI check with “GitHub CLI gh was not found / is not authenticated; run gh auth login”. --dist <dir> other than dist requires --skip-build, because build:deploy always writes dist; build there with vite build --outDir <dir> first. The build plugins in tools/buildAssetPlugins.ts write the FFmpeg core and the compressed SAM2 runtime into the resolved build.outDir/build.assetsDir, and write nothing when the dev server closes. .gitattributes keeps *.mjs, *.cjs, *.sh and other shebang scripts LF on Windows checkouts, since a CRLF after #! breaks shells and vitest imports; tests/unit/scriptLineEndings.test.ts guards that.

The pre-module bootstrap (public/app-bootstrap.js) only records the running version and logs [Version] Update detected. It no longer reloads or clears Cache Storage: the loaded page already is the deployed build, so that reload doubled every recovery reload above, could alternate between two builds while a deploy propagates, and deleted downloaded AI models (depth, roto, face, audio and landmark caches) on every deploy. Worker-failure and chunk reloads share one session cooldown and the unsaved-project guard, so a tab that fails again right after its recovery reload shows the Reload notice instead of reloading in a loop.

CompositionRenderer only prepares sources for video, image, vector-animation and generated-canvas clips (text, solid, math scene, transition overlay). Audio, 3D, MIDI and other clip types are owned by other runtimes and are neither loaded nor reported there. When visual clips still end up without any source, it logs one warning, “no sources loaded for N visual clips”, with each clip’s real sourceType and mediaFileId; it repeats only when the composition’s clip set changes, not on every re-prepare.

CompositionRenderer video-load errors include mediaErrorCode (1 aborted, 2 network, 3 decode, 4 unsupported source, or null), readyState, networkState, fileSize, and mimeType, captured before cleanup resets the media element. These fields distinguish browser-reported failure classes; code 4 alone does not prove an unsupported codec, and a decode failure does not prove a corrupt file. No source URL or raw browser error message is added. Older events without these fields cannot be classified retroactively.

An explicitly cancelled clip/face analysis restores its prior analysis state and does not emit ClipAnalyzer: Analysis failed when the pending runtime rejects. The cancellation request remains logged. A runtime failure without a cancellation request still sets the error state and produces the error diagnostic; matching an AbortError name alone does not suppress it.

Device-loss diagnostics include expected. WebGPUContext marks devices immediately before intentional destruction during teardown or a power-preference change. Only a marked device reporting reason destroyed is recorded as INFO; unmarked destruction and all other loss reasons remain ERROR. The marker is held weakly in runtime diagnostics state and survives development module reloads. Historical records without the marker cannot establish whether a device was intentionally destroyed.

Shader compilation diagnostics in the path tracer, strands, face cables, rod solver, splat graph, terrain and flock pipelines use a shared guarded query. A rejected getCompilationInfo() call (for example, Instance dropped after GPU loss) is reported as a warning with the component, shader label and original reason instead of escaping as an unhandled rejection. Actual shader compilation errors still log their line/column; path-tracer reports also retain the source line. This prevents secondary diagnostic failures; it does not repair the underlying GPU/driver loss.

main.tsx loads runtime/arrayCopySorting.ts immediately after boot diagnostics and before the UI graph. It installs Array.prototype.toSorted only when unavailable, preserving native implementations and sorting a fresh dense array rather than mutating application state. This addresses the observed missing-method startup errors in Chrome 109 sessions; it does not supply missing GPU, storage or media APIs. The isolated-browser check removes the native method before navigation and verifies the editor shell renders without a toSorted error. Unit coverage includes frozen state, stable equal-key order, sparse arrays, array-like inputs, custom iterators/species and invalid arguments.

projectStorage.worker.ts loads the same compatibility module before its repository imports. Workers have their own JavaScript globals and do not inherit the main window’s polyfills. This prevents canonical record serialization and scratch recovery from failing with Object.keys(...).toSorted is not a function in older worker runtimes. The worker-entry regression check removes the native method and serializes a nested recovery record without loading the UI entry point.

YouTube credential database initialization retries one AbortError before returning a failure. Security/access errors are not retried, and no credential write is replayed. Persistent open failure remains visible through the settings error log; a later load can try again. This handles transient database initialization, not browser storage denial or damaged ciphertext.

Project auto-sync registers a lightweight veto for automatic chunk-error reloads while an open project is dirty or the workspace contains unsaved work before a project file exists. Projectless store edits survive repeated auto-sync setup and HMR; existing media, timeline clips and chat messages are also checked when no project is open. Hydration/save mirroring does not mark new edits. The boot module queries this without importing editor stores. A veto records reload_deferred, leaves the original import rejected, and consumes neither the reload flag nor the cooldown marker. Creating/saving a clean project allows subsequent recovery. Explicit project closure clears the transient edit marker. Teardown removes the guard. Manual navigation uses the same unsaved-work condition. No automatic save is started; this does not fix the failed network request or promise that a failed lazy component can retry without a later reload. Store changes made while the repository hydrates (withRepositoryHydration: restoring the scratch workspace at startup, projection activation, composition switches) do not count as projectless edits; before, every untouched editor vetoed chunk recovery and asked for confirmation on leave.

The exact standalone INFO: Created TensorFlow Lite XNNPACK delegate for CPU. line is retained as INFO even when received on console.error. Original console method metadata remains available. The production reporter uploads ERROR entries, so this informational line no longer counts as a runtime failure. Extra arguments, Error objects and other INFO-prefixed console errors are not downgraded.

YouTube credential reads, writes and deletion wait for their IndexedDB transaction to finish and close the operation connection in a finally block. An aborted transaction is reported as failure even after its individual request succeeded. Encryption keys are read from durable storage for each operation rather than retained after a potentially failed write. First-use key selection uses one readwrite transaction: concurrent callers adopt the key already committed by another caller instead of overwriting it. No real credentials are included in diagnostic payloads.

A rejected requestAdapter() configuration now proceeds to the remaining existing platform fallbacks, just like a null adapter result. Previously the rejection escaped the whole initialization sequence, skipping a potentially working default adapter or Android compatibility backend. Pending requests still retain the 15-second deadline; timeouts and superseded initialization do not start extra requests. Missing WebGPU support or failure of every configuration remains a reported startup failure.

On Android the adapter request order and deadline come from a per-device memory in localStorage (ms.gpu.androidAdapter, src/engine/core/androidAdapterMemory.ts), because a stalled request cannot be followed by a second one in the same start. The default order is core, then compatibility, with the 15-second deadline. After the core request stalled, the next start tries compatibility first; a device on which compatibility worked keeps that order; once both paths have stalled, the deadline drops to 6 seconds. A browser update starts fresh. The chosen order and reason are logged as a warning. On such a device the phone editor opens the project before it starts the GPU.

After an adapter request timed out, the startup probe skips the WebGL adapter hint: creating a WebGL context while the GPU process is stuck would block the page for seconds. The diagnostics then carry webglSkipped: 'adapter_timeout' instead of webgl (src/services/diagnostics/gpuStartupProbe.ts).