@corbado/observe 0.3.0 → 0.4.0

package/dist/index.d.mts

@@ -3,7 +3,7 @@ interface SdkInfo {
     version: string;
 }
 type EventType = "predefined" | "custom" | "error" | "identify";
-type AuthMethodType = "identifier-email" | "passkey-login-known-identifier" | "passkey-login-no-identifier" | "passkey-login-cui" | "passkey-enrollment" | "password-login-known-identifier" | "password-login-with-identifier" | "password-enrollment" | "email-otp-login" | "email-otp-enrollment" | "email-link-login" | "email-link-enrollment" | "social-google" | "social-apple" | "social-facebook" | "social-other" | "reset-flow";
+type AuthMethodType = "identifier-email" | "passkey-login-known-identifier" | "passkey-login-no-identifier" | "passkey-login-cui" | "passkey-login-immediate" | "passkey-enrollment" | "password-login-known-identifier" | "password-login-with-identifier" | "password-enrollment" | "email-otp-login" | "email-otp-enrollment" | "email-link-login" | "email-link-enrollment" | "social-google" | "social-apple" | "social-facebook" | "social-other" | "reset-flow";
 type SubflowType = "passkey-enrollment" | "passkey-login" | "email-otp" | "email-link" | "social-login" | "sms-otp" | "provide-identifier" | "provide-data" | "password-login" | "password-enrollment" | "totp";
 type FlowType = "login" | "signup" | "recovery" | "enrollment" | (string & {});
 type SocialLoginProviderType = "google" | "apple" | "facebook" | "github" | "microsoft" | "other";
@@ -264,6 +264,12 @@ interface SdkReliabilityConfig {
     tph: boolean;
     /** Flush-trigger switch: flush pending events when the integrator calls `destroy()`. Defaults to true. */
     td: boolean;
+    /**
+     * Flush-trigger switch: keepalive flush requested by low-event tracker teardown on `pagehide`
+     * (delivers lows batched after the queue's own lifecycle flush already ran). Defaults to true —
+     * the historical behavior; can be disabled server-side to rely solely on the queue's triggers.
+     */
+    tlf: boolean;
     /**
      * Event names that trigger an immediate flush when enqueued (e.g. `flow_finished`,
      * `conversion`), so high-value events go out via a normal fetch while the page is still alive
@@ -276,6 +282,75 @@ interface SdkReliabilityConfig {
     retry: SdkRetryConfig;
 }
 
+interface Logger {
+    debug(message: string, ...args: unknown[]): void;
+    info(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+    error(message: string, ...args: unknown[]): void;
+    critical(message: string, ...args: unknown[]): void;
+}
+interface CreateLoggerOptions {
+    debug: boolean;
+}
+declare function createLogger(options: CreateLoggerOptions): Logger;
+
+/**
+ * Where low events go. `flushKeepalive` is requested on `pagehide` teardown so lows batched after
+ * the queue's own lifecycle flush still get out; operations wire it to the client's
+ * `lowEventFlushKeepalive()`, which is gated by the server-controlled `tlf` trigger switch
+ * (default true = historical behavior, can be disabled remotely).
+ */
+interface LowEventSink {
+    enqueueLowEvent(low: LowEvent): void;
+    flushKeepalive(): void;
+}
+
+/**
+ * Collects window-scoped "low" events around a WebAuthn ceremony: window focus/blur, document
+ * visibility changes and visualviewport resize/scroll (batched). The listener set mirrors
+ * connect-react's `installLowEventWindowListeners`; the event names match
+ * {@link LowEventInputTracker}'s vocabulary.
+ *
+ * Unlike {@link LowEventInputTracker} (anchored to an input field, active for the owning
+ * operation's lifetime), this tracker is armed only for the ceremony window: the owning operation
+ * arms it on `ceremony.start()` and schedules disarming shortly after the ceremony settles, so
+ * signals from the picker closing (focus return, dismiss animations) are still captured.
+ *
+ * Never triggers a flush — low events ride along on the queue's existing flush triggers.
+ */
+declare class LowEventWindowTracker {
+    private logger;
+    private sink;
+    private armed;
+    private destroyed;
+    private disarmTimer;
+    private resizeBatcher;
+    private scrollBatcher;
+    private boundHandlers;
+    constructor(logger: Logger, sink: LowEventSink);
+    /** Start listening. Idempotent; cancels a pending scheduled disarm (ceremony retry). */
+    arm(): void;
+    /**
+     * Disarm after `delayMs`. The tail keeps the listeners alive briefly after the ceremony settles:
+     * focus return and picker dismiss animations land after the WebAuthn promise resolves/rejects.
+     */
+    scheduleDisarm(delayMs: number): void;
+    /** Stop listening and flush the viewport batchers into the queue. Idempotent. */
+    disarm(): void;
+    /** Disarm and refuse any further arming; for the owning operation's destroy(). */
+    destroy(): void;
+    private cancelScheduledDisarm;
+    private pushLow;
+    private handleVisibilityChange;
+    private flushBatchers;
+    private wrapHandler;
+}
+
+/**
+ * How long window low-event listeners stay armed after a ceremony settles: focus return and
+ * picker dismiss animations land shortly after the WebAuthn promise resolves/rejects.
+ */
+declare const CEREMONY_LOW_EVENT_TAIL_MS = 1500;
 type StepHelper<TStart = {}, TFinished = {}, TTypedError = never> = {
     start: (data: TStart, options?: StepOptions) => void;
     finished: (data: TFinished, options?: StepOptions) => void;
@@ -293,10 +368,23 @@ declare abstract class OperationFull {
     protected subflowStepStarted(stepName: string, data: any, options?: StepOptions): void;
     protected subflowStepFinished(stepName: string, data: any, options?: StepOptions): void;
     protected subflowStepError(stepName: string, data: any, options?: StepOptions): void;
+    /**
+     * Decorate a (ceremony) step so window low-event collection follows its lifecycle: `start` arms
+     * the tracker, `finished`/`error`/`errorTyped` schedule disarming after
+     * {@link CEREMONY_LOW_EVENT_TAIL_MS}. A `start` during the tail (ceremony retry) keeps the
+     * tracker armed.
+     */
+    protected withWindowLowEvents<S extends StepHelper<never, never, never>>(step: S, windowTracker: LowEventWindowTracker): S;
     protected defineStep<TStart = {}, TFinished = {}, TTypedError = never>(stepName: string): StepHelper<TStart, TFinished, TTypedError>;
 }
 
-type PasskeyOperationLoginExplicitSpecType = "passkey-cui" | "passkey-known-identifier" | "passkey-no-identifier";
+type PasskeyOperationLoginExplicitSpecType = "passkey-cui" | "passkey-known-identifier" | "passkey-no-identifier"
+/**
+ * WebAuthn immediate mediation (`navigator.credentials.get({ uiMode: "immediate" })`, Chrome 149+):
+ * button-triggered, discoverable credentials only (empty allowList). Shows the account picker when
+ * a local credential exists, otherwise rejects instantly with NotAllowedError and shows no UI.
+ */
+ | "passkey-immediate";
 type PasskeyLoginGetOptionsStart = {
     explicitSpecType?: PasskeyOperationLoginExplicitSpecType;
 };
@@ -315,7 +403,14 @@ declare class PasskeyLoginOperationFull extends OperationFull {
     readonly getOptions: StepHelper<PasskeyLoginGetOptionsStart, PasskeyLoginGetOptionsFinished>;
     readonly ceremony: StepHelper<PasskeyLoginCeremonyStart, PasskeyLoginCeremonyFinished>;
     readonly postResponse: StepHelper;
+    private lowEventTracker;
     constructor(tracker: CorbadoTracker);
+    /**
+     * @deprecated `subflow_trigger` is not supported for passkey-login and will be removed in the
+     * next major version.
+     */
+    trigger(data: SubflowTrigger, options?: StepOptions): void;
+    destroy(): void;
 }
 
 type EmailOTPOperationSpecType = "email-otp-login" | "email-otp-enrollment";
@@ -366,21 +461,11 @@ declare class PasskeyEnrollmentOperationFull extends OperationFull {
     readonly getOptions: StepHelper<PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentGetOptionsFinished>;
     readonly ceremony: StepHelper<PasskeyEnrollmentCeremonyStart, PasskeyEnrollmentCeremonyFinished>;
     readonly postResponse: StepHelper;
+    private lowEventTracker;
     constructor(tracker: CorbadoTracker);
+    destroy(): void;
 }
 
-interface Logger {
-    debug(message: string, ...args: unknown[]): void;
-    info(message: string, ...args: unknown[]): void;
-    warn(message: string, ...args: unknown[]): void;
-    error(message: string, ...args: unknown[]): void;
-    critical(message: string, ...args: unknown[]): void;
-}
-interface CreateLoggerOptions {
-    debug: boolean;
-}
-declare function createLogger(options: CreateLoggerOptions): Logger;
-
 type PasswordLoginTypedError = {
     code: PasswordLoginTypedErrorCode;
 };
@@ -394,6 +479,11 @@ declare class PasswordLoginOperationFull extends OperationFull {
     readonly postResponse: StepHelper<{}, {}, PasswordLoginTypedError>;
     private lowEventTracker?;
     constructor(tracker: CorbadoTracker, autoTrackConfig?: PasswordLoginAutoTrackConfig);
+    /**
+     * @deprecated `subflow_trigger` is not supported for password-login and will be removed in the
+     * next major version.
+     */
+    trigger(data: SubflowTrigger, options?: StepOptions): void;
     destroy(): void;
 }
 
@@ -436,12 +526,20 @@ declare class OperationFullProvideIdentifierWithCUI {
     private tracker;
     private lowEventTracker?;
     readonly cui: {
+        /**
+         * @deprecated `subflow_trigger` is not supported for the CUI part of provide-identifier and
+         * will be removed in the next major version.
+         */
         trigger: (data: SubflowTrigger, options?: StepOptions) => void;
         getOptions: StepHelper<PasskeyLoginCUIGetOptionsStart, PasskeyLoginCUIGetOptionsFinished>;
         ceremony: StepHelper<CUICeremonyStart, PasskeyLoginCeremonyFinished, PasskeyLoginCUITypedError>;
         postResponse: StepHelper;
     };
     readonly provideIdentifier: {
+        /**
+         * @deprecated `subflow_trigger` is not supported for provide-identifier and will be removed
+         * in the next major version.
+         */
         trigger: (data: SubflowTrigger, options?: StepOptions) => void;
         postResponse: StepHelper<ProvideIdentifierPostResponseStart>;
     };
@@ -707,6 +805,14 @@ declare class CorbadoTracker {
      * @internal
      */
     flushKeepalive(): void;
+    /**
+     * Keepalive flush requested by a low-event tracker's `pagehide` teardown. Gated by the
+     * server-controlled trigger switch `tlf` (boot-snapshot, default true = historical behavior):
+     * disabling it server-side makes low-event delivery rely solely on the queue's own triggers.
+     *
+     * @internal
+     */
+    lowEventFlushKeepalive(): void;
     passkeyLoginFullOperation(): PasskeyLoginOperationFull;
     passkeyEnrollmentFullOperation(): PasskeyEnrollmentOperationFull;
     passwordLoginFullOperation(autoTrackConfig?: PasswordLoginAutoTrackConfig): PasswordLoginOperationFull;
@@ -881,6 +987,7 @@ declare class RequestQueue {
     private lowsQueue;
     private timer;
     private isFlushing;
+    private destroyed;
     /**
      * True when something was enqueued (or recovered) since the last sync flush. visibilitychange,
      * pagehide and per-input flushKeepalive calls all funnel into flushSync; this flag makes the
@@ -1108,4 +1215,4 @@ declare function getTracker(): CorbadoTracker | undefined;
 declare function resetSession(): string | undefined;
 declare function destroy(): Promise<void>;
 
-export { type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowReset, type FlowStarted, type FlowType, type JavaScriptHighEntropy, LocalStorage, type Logger, type LowEvent, type MultiFlowReset, type MultiFlowStarted, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, OperationFull, OperationFullProvideIdentifierWithCUI, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentOperationFull, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, PasskeyLoginOperationFull, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentAutoTrackConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginAutoTrackConfig, PasswordLoginOperationFull, type PasswordLoginTypedError, type PredefinedEvent, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkRetryConfig, SessionStorage, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type StepHelper, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type UserReference, cacheConfig, createLogger, destroy, getTracker, init, loadCachedConfig, parseReliabilityConfig, resetSession };
+export { type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowReset, type FlowStarted, type FlowType, type JavaScriptHighEntropy, LocalStorage, type Logger, type LowEvent, type MultiFlowReset, type MultiFlowStarted, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, OperationFull, OperationFullProvideIdentifierWithCUI, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentOperationFull, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, PasskeyLoginOperationFull, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentAutoTrackConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginAutoTrackConfig, PasswordLoginOperationFull, type PasswordLoginTypedError, type PredefinedEvent, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkRetryConfig, SessionStorage, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type StepHelper, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type UserReference, cacheConfig, createLogger, destroy, getTracker, init, loadCachedConfig, parseReliabilityConfig, resetSession };

package/dist/index.d.ts

@@ -3,7 +3,7 @@ interface SdkInfo {
     version: string;
 }
 type EventType = "predefined" | "custom" | "error" | "identify";
-type AuthMethodType = "identifier-email" | "passkey-login-known-identifier" | "passkey-login-no-identifier" | "passkey-login-cui" | "passkey-enrollment" | "password-login-known-identifier" | "password-login-with-identifier" | "password-enrollment" | "email-otp-login" | "email-otp-enrollment" | "email-link-login" | "email-link-enrollment" | "social-google" | "social-apple" | "social-facebook" | "social-other" | "reset-flow";
+type AuthMethodType = "identifier-email" | "passkey-login-known-identifier" | "passkey-login-no-identifier" | "passkey-login-cui" | "passkey-login-immediate" | "passkey-enrollment" | "password-login-known-identifier" | "password-login-with-identifier" | "password-enrollment" | "email-otp-login" | "email-otp-enrollment" | "email-link-login" | "email-link-enrollment" | "social-google" | "social-apple" | "social-facebook" | "social-other" | "reset-flow";
 type SubflowType = "passkey-enrollment" | "passkey-login" | "email-otp" | "email-link" | "social-login" | "sms-otp" | "provide-identifier" | "provide-data" | "password-login" | "password-enrollment" | "totp";
 type FlowType = "login" | "signup" | "recovery" | "enrollment" | (string & {});
 type SocialLoginProviderType = "google" | "apple" | "facebook" | "github" | "microsoft" | "other";
@@ -264,6 +264,12 @@ interface SdkReliabilityConfig {
     tph: boolean;
     /** Flush-trigger switch: flush pending events when the integrator calls `destroy()`. Defaults to true. */
     td: boolean;
+    /**
+     * Flush-trigger switch: keepalive flush requested by low-event tracker teardown on `pagehide`
+     * (delivers lows batched after the queue's own lifecycle flush already ran). Defaults to true —
+     * the historical behavior; can be disabled server-side to rely solely on the queue's triggers.
+     */
+    tlf: boolean;
     /**
      * Event names that trigger an immediate flush when enqueued (e.g. `flow_finished`,
      * `conversion`), so high-value events go out via a normal fetch while the page is still alive
@@ -276,6 +282,75 @@ interface SdkReliabilityConfig {
     retry: SdkRetryConfig;
 }
 
+interface Logger {
+    debug(message: string, ...args: unknown[]): void;
+    info(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+    error(message: string, ...args: unknown[]): void;
+    critical(message: string, ...args: unknown[]): void;
+}
+interface CreateLoggerOptions {
+    debug: boolean;
+}
+declare function createLogger(options: CreateLoggerOptions): Logger;
+
+/**
+ * Where low events go. `flushKeepalive` is requested on `pagehide` teardown so lows batched after
+ * the queue's own lifecycle flush still get out; operations wire it to the client's
+ * `lowEventFlushKeepalive()`, which is gated by the server-controlled `tlf` trigger switch
+ * (default true = historical behavior, can be disabled remotely).
+ */
+interface LowEventSink {
+    enqueueLowEvent(low: LowEvent): void;
+    flushKeepalive(): void;
+}
+
+/**
+ * Collects window-scoped "low" events around a WebAuthn ceremony: window focus/blur, document
+ * visibility changes and visualviewport resize/scroll (batched). The listener set mirrors
+ * connect-react's `installLowEventWindowListeners`; the event names match
+ * {@link LowEventInputTracker}'s vocabulary.
+ *
+ * Unlike {@link LowEventInputTracker} (anchored to an input field, active for the owning
+ * operation's lifetime), this tracker is armed only for the ceremony window: the owning operation
+ * arms it on `ceremony.start()` and schedules disarming shortly after the ceremony settles, so
+ * signals from the picker closing (focus return, dismiss animations) are still captured.
+ *
+ * Never triggers a flush — low events ride along on the queue's existing flush triggers.
+ */
+declare class LowEventWindowTracker {
+    private logger;
+    private sink;
+    private armed;
+    private destroyed;
+    private disarmTimer;
+    private resizeBatcher;
+    private scrollBatcher;
+    private boundHandlers;
+    constructor(logger: Logger, sink: LowEventSink);
+    /** Start listening. Idempotent; cancels a pending scheduled disarm (ceremony retry). */
+    arm(): void;
+    /**
+     * Disarm after `delayMs`. The tail keeps the listeners alive briefly after the ceremony settles:
+     * focus return and picker dismiss animations land after the WebAuthn promise resolves/rejects.
+     */
+    scheduleDisarm(delayMs: number): void;
+    /** Stop listening and flush the viewport batchers into the queue. Idempotent. */
+    disarm(): void;
+    /** Disarm and refuse any further arming; for the owning operation's destroy(). */
+    destroy(): void;
+    private cancelScheduledDisarm;
+    private pushLow;
+    private handleVisibilityChange;
+    private flushBatchers;
+    private wrapHandler;
+}
+
+/**
+ * How long window low-event listeners stay armed after a ceremony settles: focus return and
+ * picker dismiss animations land shortly after the WebAuthn promise resolves/rejects.
+ */
+declare const CEREMONY_LOW_EVENT_TAIL_MS = 1500;
 type StepHelper<TStart = {}, TFinished = {}, TTypedError = never> = {
     start: (data: TStart, options?: StepOptions) => void;
     finished: (data: TFinished, options?: StepOptions) => void;
@@ -293,10 +368,23 @@ declare abstract class OperationFull {
     protected subflowStepStarted(stepName: string, data: any, options?: StepOptions): void;
     protected subflowStepFinished(stepName: string, data: any, options?: StepOptions): void;
     protected subflowStepError(stepName: string, data: any, options?: StepOptions): void;
+    /**
+     * Decorate a (ceremony) step so window low-event collection follows its lifecycle: `start` arms
+     * the tracker, `finished`/`error`/`errorTyped` schedule disarming after
+     * {@link CEREMONY_LOW_EVENT_TAIL_MS}. A `start` during the tail (ceremony retry) keeps the
+     * tracker armed.
+     */
+    protected withWindowLowEvents<S extends StepHelper<never, never, never>>(step: S, windowTracker: LowEventWindowTracker): S;
     protected defineStep<TStart = {}, TFinished = {}, TTypedError = never>(stepName: string): StepHelper<TStart, TFinished, TTypedError>;
 }
 
-type PasskeyOperationLoginExplicitSpecType = "passkey-cui" | "passkey-known-identifier" | "passkey-no-identifier";
+type PasskeyOperationLoginExplicitSpecType = "passkey-cui" | "passkey-known-identifier" | "passkey-no-identifier"
+/**
+ * WebAuthn immediate mediation (`navigator.credentials.get({ uiMode: "immediate" })`, Chrome 149+):
+ * button-triggered, discoverable credentials only (empty allowList). Shows the account picker when
+ * a local credential exists, otherwise rejects instantly with NotAllowedError and shows no UI.
+ */
+ | "passkey-immediate";
 type PasskeyLoginGetOptionsStart = {
     explicitSpecType?: PasskeyOperationLoginExplicitSpecType;
 };
@@ -315,7 +403,14 @@ declare class PasskeyLoginOperationFull extends OperationFull {
     readonly getOptions: StepHelper<PasskeyLoginGetOptionsStart, PasskeyLoginGetOptionsFinished>;
     readonly ceremony: StepHelper<PasskeyLoginCeremonyStart, PasskeyLoginCeremonyFinished>;
     readonly postResponse: StepHelper;
+    private lowEventTracker;
     constructor(tracker: CorbadoTracker);
+    /**
+     * @deprecated `subflow_trigger` is not supported for passkey-login and will be removed in the
+     * next major version.
+     */
+    trigger(data: SubflowTrigger, options?: StepOptions): void;
+    destroy(): void;
 }
 
 type EmailOTPOperationSpecType = "email-otp-login" | "email-otp-enrollment";
@@ -366,21 +461,11 @@ declare class PasskeyEnrollmentOperationFull extends OperationFull {
     readonly getOptions: StepHelper<PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentGetOptionsFinished>;
     readonly ceremony: StepHelper<PasskeyEnrollmentCeremonyStart, PasskeyEnrollmentCeremonyFinished>;
     readonly postResponse: StepHelper;
+    private lowEventTracker;
     constructor(tracker: CorbadoTracker);
+    destroy(): void;
 }
 
-interface Logger {
-    debug(message: string, ...args: unknown[]): void;
-    info(message: string, ...args: unknown[]): void;
-    warn(message: string, ...args: unknown[]): void;
-    error(message: string, ...args: unknown[]): void;
-    critical(message: string, ...args: unknown[]): void;
-}
-interface CreateLoggerOptions {
-    debug: boolean;
-}
-declare function createLogger(options: CreateLoggerOptions): Logger;
-
 type PasswordLoginTypedError = {
     code: PasswordLoginTypedErrorCode;
 };
@@ -394,6 +479,11 @@ declare class PasswordLoginOperationFull extends OperationFull {
     readonly postResponse: StepHelper<{}, {}, PasswordLoginTypedError>;
     private lowEventTracker?;
     constructor(tracker: CorbadoTracker, autoTrackConfig?: PasswordLoginAutoTrackConfig);
+    /**
+     * @deprecated `subflow_trigger` is not supported for password-login and will be removed in the
+     * next major version.
+     */
+    trigger(data: SubflowTrigger, options?: StepOptions): void;
     destroy(): void;
 }
 
@@ -436,12 +526,20 @@ declare class OperationFullProvideIdentifierWithCUI {
     private tracker;
     private lowEventTracker?;
     readonly cui: {
+        /**
+         * @deprecated `subflow_trigger` is not supported for the CUI part of provide-identifier and
+         * will be removed in the next major version.
+         */
         trigger: (data: SubflowTrigger, options?: StepOptions) => void;
         getOptions: StepHelper<PasskeyLoginCUIGetOptionsStart, PasskeyLoginCUIGetOptionsFinished>;
         ceremony: StepHelper<CUICeremonyStart, PasskeyLoginCeremonyFinished, PasskeyLoginCUITypedError>;
         postResponse: StepHelper;
     };
     readonly provideIdentifier: {
+        /**
+         * @deprecated `subflow_trigger` is not supported for provide-identifier and will be removed
+         * in the next major version.
+         */
         trigger: (data: SubflowTrigger, options?: StepOptions) => void;
         postResponse: StepHelper<ProvideIdentifierPostResponseStart>;
     };
@@ -707,6 +805,14 @@ declare class CorbadoTracker {
      * @internal
      */
     flushKeepalive(): void;
+    /**
+     * Keepalive flush requested by a low-event tracker's `pagehide` teardown. Gated by the
+     * server-controlled trigger switch `tlf` (boot-snapshot, default true = historical behavior):
+     * disabling it server-side makes low-event delivery rely solely on the queue's own triggers.
+     *
+     * @internal
+     */
+    lowEventFlushKeepalive(): void;
     passkeyLoginFullOperation(): PasskeyLoginOperationFull;
     passkeyEnrollmentFullOperation(): PasskeyEnrollmentOperationFull;
     passwordLoginFullOperation(autoTrackConfig?: PasswordLoginAutoTrackConfig): PasswordLoginOperationFull;
@@ -881,6 +987,7 @@ declare class RequestQueue {
     private lowsQueue;
     private timer;
     private isFlushing;
+    private destroyed;
     /**
      * True when something was enqueued (or recovered) since the last sync flush. visibilitychange,
      * pagehide and per-input flushKeepalive calls all funnel into flushSync; this flag makes the
@@ -1108,4 +1215,4 @@ declare function getTracker(): CorbadoTracker | undefined;
 declare function resetSession(): string | undefined;
 declare function destroy(): Promise<void>;
 
-export { type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowReset, type FlowStarted, type FlowType, type JavaScriptHighEntropy, LocalStorage, type Logger, type LowEvent, type MultiFlowReset, type MultiFlowStarted, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, OperationFull, OperationFullProvideIdentifierWithCUI, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentOperationFull, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, PasskeyLoginOperationFull, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentAutoTrackConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginAutoTrackConfig, PasswordLoginOperationFull, type PasswordLoginTypedError, type PredefinedEvent, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkRetryConfig, SessionStorage, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type StepHelper, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type UserReference, cacheConfig, createLogger, destroy, getTracker, init, loadCachedConfig, parseReliabilityConfig, resetSession };
+export { type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowReset, type FlowStarted, type FlowType, type JavaScriptHighEntropy, LocalStorage, type Logger, type LowEvent, type MultiFlowReset, type MultiFlowStarted, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, OperationFull, OperationFullProvideIdentifierWithCUI, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentOperationFull, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, PasskeyLoginOperationFull, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentAutoTrackConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginAutoTrackConfig, PasswordLoginOperationFull, type PasswordLoginTypedError, type PredefinedEvent, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkRetryConfig, SessionStorage, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type StepHelper, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type UserReference, cacheConfig, createLogger, destroy, getTracker, init, loadCachedConfig, parseReliabilityConfig, resetSession };