@corbado/observe 0.4.0 → 0.5.0-next.37-0eb15e7

package/dist/index.d.mts

@@ -38,6 +38,13 @@ interface BaseEvent {
     user?: UserReference;
     contexts?: Record<string, unknown>;
     tags?: Record<string, string>;
+    /**
+     * Experiment assignments active for this event, as a map of experiment key → variant value (e.g.
+     * `{ button_color: "blue" }`). First-class, prefix-free representation of A/B-test exposure: the
+     * backend attaches these to the flow. Resolved per event from the tracker's persistent assignments
+     * (see `setExperiment`) merged with any per-call override.
+     */
+    experiments?: Record<string, string>;
     deviceInfo?: DeviceInfo;
     meta?: EventMeta;
 }
@@ -130,6 +137,8 @@ type AuthDecisionFinished = {
 type StepOptions = {
     userReference?: UserReference;
     explicitTimestamp?: number;
+    /** Per-call experiment override (experiment key → variant), merged over the persistent assignments. */
+    experiments?: Record<string, string>;
 };
 type SubflowTrigger = {
     actor: "system" | "user";
@@ -470,10 +479,19 @@ type PasswordLoginTypedError = {
     code: PasswordLoginTypedErrorCode;
 };
 type PasswordLoginTypedErrorCode = "invalid_password" | "user_not_found" | "account_locked";
-type PasswordLoginExplicitSpecType = "password-known-identifier" | "password-with-identifier";
 type PasswordLoginAutoTrackConfig = {
-    explicitSpecType: PasswordLoginExplicitSpecType;
+    explicitSpecType: "password-known-identifier";
+    /** The password input field. */
     inputHtmlField: HTMLInputElement;
+} | {
+    explicitSpecType: "password-with-identifier";
+    /** The password input field. */
+    inputHtmlField: HTMLInputElement;
+    /**
+     * The identifier (e.g. email) input field. Accepted but not tracked yet — low-event
+     * tracking for a second field lands together with per-field attribution.
+     */
+    identifierInputHtmlField?: HTMLInputElement;
 };
 declare class PasswordLoginOperationFull extends OperationFull {
     readonly postResponse: StepHelper<{}, {}, PasswordLoginTypedError>;
@@ -574,6 +592,11 @@ interface TrackerOptions {
     logger?: Logger;
     deviceInfoDebounceTime?: number;
     defaultTags?: Record<string, string>;
+    /**
+     * Experiment assignments to seed at init (experiment key → variant). Merged over any persisted
+     * assignments and then attached to every event the tracker produces (see {@link CorbadoTracker.setExperiment}).
+     */
+    experiments?: Record<string, string>;
     applicationId?: string;
     /**
      * @deprecated The flush interval is server-controlled via the SDK reliability config
@@ -582,6 +605,8 @@ interface TrackerOptions {
      * It will be removed in a future release.
      */
     flushInterval?: number;
+    /** Generates new Observe session ids; returned values must be UUID-compatible. Existing stored sessions are still reused. */
+    sessionIdGenerator?: () => string;
 }
 declare class CorbadoTracker {
     private options;
@@ -598,6 +623,8 @@ declare class CorbadoTracker {
     private deviceInfoDebounceTime;
     private deviceInfoTransmittedLastTime;
     private seq;
+    /** Persistent experiment assignments (experiment key → variant), attached to every produced event. */
+    private experiments;
     constructor(options: TrackerOptions);
     /**
      * Cache fresh server config as last-known. Boot-snapshot model: the config is NOT applied to this
@@ -610,7 +637,42 @@ declare class CorbadoTracker {
      */
     getLogger(): Logger;
     private applicationTag;
+    /**
+     * Register the user's variant for an experiment (e.g. `setExperiment("button_color", "blue")`).
+     *
+     * @remarks
+     * Corbado Observe does not assign variants — your app decides, and this records the assignment so
+     * Observe can attribute flows to it. The assignment persists (localStorage) across reloads and
+     * `resetSession`, and is attached to every event the tracker produces until you change or clear it.
+     * Multiple experiments can be active at once. Set it close to where the variant actually affects the
+     * user (or use the per-call `experiments` argument on a tracking method) to avoid over-attributing
+     * exposure; call {@link clearExperiment} when it no longer applies (e.g. on logout).
+     *
+     * Never throws: invalid input is ignored with a debug log.
+     */
+    setExperiment(key: string, variant: string): void;
+    /**
+     * Register several experiment assignments at once (experiment key → variant). Additive: existing
+     * assignments for other keys are kept. See {@link setExperiment}.
+     */
+    setExperiments(assignments: Record<string, string>): void;
+    /** Remove a single experiment assignment. */
+    clearExperiment(key: string): void;
+    /** Remove all experiment assignments. */
+    clearExperiments(): void;
+    /** Returns a copy of the currently active experiment assignments. */
+    getExperiments(): Record<string, string>;
+    private static isValidExperimentKey;
+    private static isValidExperimentVariant;
+    private loadPersistedExperiments;
+    private persistExperiments;
+    /**
+     * Resolves the experiments to attach to one event: the persistent assignments with any per-call
+     * override merged on top. Returns undefined when there are none (so the field is omitted).
+     */
+    private resolveExperiments;
     private isTrackingBlocked;
+    private createSessionId;
     private getSessionId;
     /**
      * Resolve the session id from localStorage so it survives reloads and is shared across tabs of the
@@ -645,7 +707,7 @@ declare class CorbadoTracker {
      *
      * @internal
      */
-    track(name: AuthEventName, data: Record<string, any>, userReference?: UserReference, tags?: Record<string, string>, contexts?: Record<string, any>, explicitTimestamp?: number): Promise<void>;
+    track(name: AuthEventName, data: Record<string, any>, userReference?: UserReference, tags?: Record<string, string>, contexts?: Record<string, any>, explicitTimestamp?: number, experiments?: Record<string, string>): Promise<void>;
     /**
      * Track when an authentication flow (or flow selection screen) becomes visible.
      *
@@ -666,7 +728,7 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    flowStarted(data: FlowStarted | MultiFlowStarted, tags?: Record<string, string>): void;
+    flowStarted(data: FlowStarted | MultiFlowStarted, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when the user commits to a specific flow.
      *
@@ -682,7 +744,7 @@ declare class CorbadoTracker {
      * tracker.flowDecided({flowName: "signup"});
      * ```
      */
-    flowDecided(data: FlowDecided, tags?: Record<string, string>): void;
+    flowDecided(data: FlowDecided, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track a business/marketing conversion that is not part of an authentication flow.
      *
@@ -705,7 +767,7 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    conversion(data: Conversion, tags?: Record<string, string>): void;
+    conversion(data: Conversion, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when a flow successfully completes.
      *
@@ -726,7 +788,7 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    flowFinished(data: FlowFinished, tags?: Record<string, string>): void;
+    flowFinished(data: FlowFinished, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when an in-progress flow is reset and restarted.
      *
@@ -742,7 +804,7 @@ declare class CorbadoTracker {
      * tracker.flowReset({flowName: "login"});
      * ```
      */
-    flowReset(data: FlowReset | MultiFlowReset, tags?: Record<string, string>): void;
+    flowReset(data: FlowReset | MultiFlowReset, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when a flow is considered finished because another flow finished it implicitly.
      *
@@ -763,7 +825,7 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    flowAutoFinished(data: FlowAutoFinished, tags?: Record<string, string>): void;
+    flowAutoFinished(data: FlowAutoFinished, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when you present authentication method choices to the user.
      *
@@ -784,10 +846,10 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    authMethodsDecisionStarted(data: AuthMethodDecisionStarted, tags?: Record<string, string>): void;
-    authMethodsDecisionFinished(data: AuthMethodDecisionFinished, tags?: Record<string, string>): void;
-    authDecisionStarted(data: AuthDecisionStarted): void;
-    authDecisionFinished(data: AuthDecisionFinished): void;
+    authMethodsDecisionStarted(data: AuthMethodDecisionStarted, tags?: Record<string, string>, experiments?: Record<string, string>): void;
+    authMethodsDecisionFinished(data: AuthMethodDecisionFinished, tags?: Record<string, string>, experiments?: Record<string, string>): void;
+    authDecisionStarted(data: AuthDecisionStarted, tags?: Record<string, string>, experiments?: Record<string, string>): void;
+    authDecisionFinished(data: AuthDecisionFinished, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Enqueue a "low" event (granular DOM/window/visualviewport/PWM signal) for the current session.
      *
@@ -1213,6 +1275,11 @@ declare class EventStore {
 declare function init(options: TrackerOptions): CorbadoTracker;
 declare function getTracker(): CorbadoTracker | undefined;
 declare function resetSession(): string | undefined;
+declare function setExperiment(key: string, variant: string): void;
+declare function setExperiments(assignments: Record<string, string>): void;
+declare function clearExperiment(key: string): void;
+declare function clearExperiments(): void;
+declare function getExperiments(): Record<string, string>;
 declare function destroy(): Promise<void>;
 
-export { type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowReset, type FlowStarted, type FlowType, type JavaScriptHighEntropy, LocalStorage, type Logger, type LowEvent, type MultiFlowReset, type MultiFlowStarted, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, OperationFull, OperationFullProvideIdentifierWithCUI, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentOperationFull, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, PasskeyLoginOperationFull, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentAutoTrackConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginAutoTrackConfig, PasswordLoginOperationFull, type PasswordLoginTypedError, type PredefinedEvent, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkRetryConfig, SessionStorage, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type StepHelper, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type UserReference, cacheConfig, createLogger, destroy, getTracker, init, loadCachedConfig, parseReliabilityConfig, resetSession };
+export { type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowReset, type FlowStarted, type FlowType, type JavaScriptHighEntropy, LocalStorage, type Logger, type LowEvent, type MultiFlowReset, type MultiFlowStarted, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, OperationFull, OperationFullProvideIdentifierWithCUI, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentOperationFull, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, PasskeyLoginOperationFull, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentAutoTrackConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginAutoTrackConfig, PasswordLoginOperationFull, type PasswordLoginTypedError, type PredefinedEvent, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkRetryConfig, SessionStorage, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type StepHelper, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type UserReference, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, getExperiments, getTracker, init, loadCachedConfig, parseReliabilityConfig, resetSession, setExperiment, setExperiments };

package/dist/index.d.ts

@@ -38,6 +38,13 @@ interface BaseEvent {
     user?: UserReference;
     contexts?: Record<string, unknown>;
     tags?: Record<string, string>;
+    /**
+     * Experiment assignments active for this event, as a map of experiment key → variant value (e.g.
+     * `{ button_color: "blue" }`). First-class, prefix-free representation of A/B-test exposure: the
+     * backend attaches these to the flow. Resolved per event from the tracker's persistent assignments
+     * (see `setExperiment`) merged with any per-call override.
+     */
+    experiments?: Record<string, string>;
     deviceInfo?: DeviceInfo;
     meta?: EventMeta;
 }
@@ -130,6 +137,8 @@ type AuthDecisionFinished = {
 type StepOptions = {
     userReference?: UserReference;
     explicitTimestamp?: number;
+    /** Per-call experiment override (experiment key → variant), merged over the persistent assignments. */
+    experiments?: Record<string, string>;
 };
 type SubflowTrigger = {
     actor: "system" | "user";
@@ -470,10 +479,19 @@ type PasswordLoginTypedError = {
     code: PasswordLoginTypedErrorCode;
 };
 type PasswordLoginTypedErrorCode = "invalid_password" | "user_not_found" | "account_locked";
-type PasswordLoginExplicitSpecType = "password-known-identifier" | "password-with-identifier";
 type PasswordLoginAutoTrackConfig = {
-    explicitSpecType: PasswordLoginExplicitSpecType;
+    explicitSpecType: "password-known-identifier";
+    /** The password input field. */
     inputHtmlField: HTMLInputElement;
+} | {
+    explicitSpecType: "password-with-identifier";
+    /** The password input field. */
+    inputHtmlField: HTMLInputElement;
+    /**
+     * The identifier (e.g. email) input field. Accepted but not tracked yet — low-event
+     * tracking for a second field lands together with per-field attribution.
+     */
+    identifierInputHtmlField?: HTMLInputElement;
 };
 declare class PasswordLoginOperationFull extends OperationFull {
     readonly postResponse: StepHelper<{}, {}, PasswordLoginTypedError>;
@@ -574,6 +592,11 @@ interface TrackerOptions {
     logger?: Logger;
     deviceInfoDebounceTime?: number;
     defaultTags?: Record<string, string>;
+    /**
+     * Experiment assignments to seed at init (experiment key → variant). Merged over any persisted
+     * assignments and then attached to every event the tracker produces (see {@link CorbadoTracker.setExperiment}).
+     */
+    experiments?: Record<string, string>;
     applicationId?: string;
     /**
      * @deprecated The flush interval is server-controlled via the SDK reliability config
@@ -582,6 +605,8 @@ interface TrackerOptions {
      * It will be removed in a future release.
      */
     flushInterval?: number;
+    /** Generates new Observe session ids; returned values must be UUID-compatible. Existing stored sessions are still reused. */
+    sessionIdGenerator?: () => string;
 }
 declare class CorbadoTracker {
     private options;
@@ -598,6 +623,8 @@ declare class CorbadoTracker {
     private deviceInfoDebounceTime;
     private deviceInfoTransmittedLastTime;
     private seq;
+    /** Persistent experiment assignments (experiment key → variant), attached to every produced event. */
+    private experiments;
     constructor(options: TrackerOptions);
     /**
      * Cache fresh server config as last-known. Boot-snapshot model: the config is NOT applied to this
@@ -610,7 +637,42 @@ declare class CorbadoTracker {
      */
     getLogger(): Logger;
     private applicationTag;
+    /**
+     * Register the user's variant for an experiment (e.g. `setExperiment("button_color", "blue")`).
+     *
+     * @remarks
+     * Corbado Observe does not assign variants — your app decides, and this records the assignment so
+     * Observe can attribute flows to it. The assignment persists (localStorage) across reloads and
+     * `resetSession`, and is attached to every event the tracker produces until you change or clear it.
+     * Multiple experiments can be active at once. Set it close to where the variant actually affects the
+     * user (or use the per-call `experiments` argument on a tracking method) to avoid over-attributing
+     * exposure; call {@link clearExperiment} when it no longer applies (e.g. on logout).
+     *
+     * Never throws: invalid input is ignored with a debug log.
+     */
+    setExperiment(key: string, variant: string): void;
+    /**
+     * Register several experiment assignments at once (experiment key → variant). Additive: existing
+     * assignments for other keys are kept. See {@link setExperiment}.
+     */
+    setExperiments(assignments: Record<string, string>): void;
+    /** Remove a single experiment assignment. */
+    clearExperiment(key: string): void;
+    /** Remove all experiment assignments. */
+    clearExperiments(): void;
+    /** Returns a copy of the currently active experiment assignments. */
+    getExperiments(): Record<string, string>;
+    private static isValidExperimentKey;
+    private static isValidExperimentVariant;
+    private loadPersistedExperiments;
+    private persistExperiments;
+    /**
+     * Resolves the experiments to attach to one event: the persistent assignments with any per-call
+     * override merged on top. Returns undefined when there are none (so the field is omitted).
+     */
+    private resolveExperiments;
     private isTrackingBlocked;
+    private createSessionId;
     private getSessionId;
     /**
      * Resolve the session id from localStorage so it survives reloads and is shared across tabs of the
@@ -645,7 +707,7 @@ declare class CorbadoTracker {
      *
      * @internal
      */
-    track(name: AuthEventName, data: Record<string, any>, userReference?: UserReference, tags?: Record<string, string>, contexts?: Record<string, any>, explicitTimestamp?: number): Promise<void>;
+    track(name: AuthEventName, data: Record<string, any>, userReference?: UserReference, tags?: Record<string, string>, contexts?: Record<string, any>, explicitTimestamp?: number, experiments?: Record<string, string>): Promise<void>;
     /**
      * Track when an authentication flow (or flow selection screen) becomes visible.
      *
@@ -666,7 +728,7 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    flowStarted(data: FlowStarted | MultiFlowStarted, tags?: Record<string, string>): void;
+    flowStarted(data: FlowStarted | MultiFlowStarted, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when the user commits to a specific flow.
      *
@@ -682,7 +744,7 @@ declare class CorbadoTracker {
      * tracker.flowDecided({flowName: "signup"});
      * ```
      */
-    flowDecided(data: FlowDecided, tags?: Record<string, string>): void;
+    flowDecided(data: FlowDecided, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track a business/marketing conversion that is not part of an authentication flow.
      *
@@ -705,7 +767,7 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    conversion(data: Conversion, tags?: Record<string, string>): void;
+    conversion(data: Conversion, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when a flow successfully completes.
      *
@@ -726,7 +788,7 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    flowFinished(data: FlowFinished, tags?: Record<string, string>): void;
+    flowFinished(data: FlowFinished, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when an in-progress flow is reset and restarted.
      *
@@ -742,7 +804,7 @@ declare class CorbadoTracker {
      * tracker.flowReset({flowName: "login"});
      * ```
      */
-    flowReset(data: FlowReset | MultiFlowReset, tags?: Record<string, string>): void;
+    flowReset(data: FlowReset | MultiFlowReset, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when a flow is considered finished because another flow finished it implicitly.
      *
@@ -763,7 +825,7 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    flowAutoFinished(data: FlowAutoFinished, tags?: Record<string, string>): void;
+    flowAutoFinished(data: FlowAutoFinished, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Track when you present authentication method choices to the user.
      *
@@ -784,10 +846,10 @@ declare class CorbadoTracker {
      * });
      * ```
      */
-    authMethodsDecisionStarted(data: AuthMethodDecisionStarted, tags?: Record<string, string>): void;
-    authMethodsDecisionFinished(data: AuthMethodDecisionFinished, tags?: Record<string, string>): void;
-    authDecisionStarted(data: AuthDecisionStarted): void;
-    authDecisionFinished(data: AuthDecisionFinished): void;
+    authMethodsDecisionStarted(data: AuthMethodDecisionStarted, tags?: Record<string, string>, experiments?: Record<string, string>): void;
+    authMethodsDecisionFinished(data: AuthMethodDecisionFinished, tags?: Record<string, string>, experiments?: Record<string, string>): void;
+    authDecisionStarted(data: AuthDecisionStarted, tags?: Record<string, string>, experiments?: Record<string, string>): void;
+    authDecisionFinished(data: AuthDecisionFinished, tags?: Record<string, string>, experiments?: Record<string, string>): void;
     /**
      * Enqueue a "low" event (granular DOM/window/visualviewport/PWM signal) for the current session.
      *
@@ -1213,6 +1275,11 @@ declare class EventStore {
 declare function init(options: TrackerOptions): CorbadoTracker;
 declare function getTracker(): CorbadoTracker | undefined;
 declare function resetSession(): string | undefined;
+declare function setExperiment(key: string, variant: string): void;
+declare function setExperiments(assignments: Record<string, string>): void;
+declare function clearExperiment(key: string): void;
+declare function clearExperiments(): void;
+declare function getExperiments(): Record<string, string>;
 declare function destroy(): Promise<void>;
 
-export { type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowReset, type FlowStarted, type FlowType, type JavaScriptHighEntropy, LocalStorage, type Logger, type LowEvent, type MultiFlowReset, type MultiFlowStarted, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, OperationFull, OperationFullProvideIdentifierWithCUI, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentOperationFull, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, PasskeyLoginOperationFull, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentAutoTrackConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginAutoTrackConfig, PasswordLoginOperationFull, type PasswordLoginTypedError, type PredefinedEvent, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkRetryConfig, SessionStorage, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type StepHelper, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type UserReference, cacheConfig, createLogger, destroy, getTracker, init, loadCachedConfig, parseReliabilityConfig, resetSession };
+export { type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowReset, type FlowStarted, type FlowType, type JavaScriptHighEntropy, LocalStorage, type Logger, type LowEvent, type MultiFlowReset, type MultiFlowStarted, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, OperationFull, OperationFullProvideIdentifierWithCUI, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentOperationFull, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, PasskeyLoginOperationFull, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentAutoTrackConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginAutoTrackConfig, PasswordLoginOperationFull, type PasswordLoginTypedError, type PredefinedEvent, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkRetryConfig, SessionStorage, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type StepHelper, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type UserReference, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, getExperiments, getTracker, init, loadCachedConfig, parseReliabilityConfig, resetSession, setExperiment, setExperiments };