@corbado/observe 1.10.0 → 1.10.1

package/dist/analysis/client.mjs

@@ -1628,16 +1628,6 @@ var CorbadoTracker = class _CorbadoTracker {
       this.logger.error("Failed to flush queue keepalive", error);
     }
   }
-  /**
-   * Whether input trackers run the DOM password-manager scan (`pa-1`..`pa-6` lows): only an explicitly
-   * set `fixedDataConfig.pmd` decides; without `fixedDataConfig` or with `pmd` omitted it always runs
-   * (historical behaviour).
-   *
-   * @internal
-   */
-  isPasswordManagerDomScanEnabled() {
-    return this.fixedData?.pmdExplicit ? this.fixedData.pmd : true;
-  }
   /**
    * Keepalive flush requested by a low-event tracker's `pagehide` teardown. Gated by the
    * server-controlled trigger switch `tlf` (boot-snapshot, default true = historical behavior):

package/dist/analysis/config.mjs

@@ -183,13 +183,10 @@ function resolveFixedDataConfig(raw) {
       return void 0;
     }
     const value = raw;
-    const pmd = value.pmd;
-    const pmdExplicit = typeof pmd === "boolean";
     const crossOrigin = value.crossOriginSession;
     const cookieDomain = crossOrigin && typeof crossOrigin === "object" && typeof crossOrigin.cookieDomain === "string" ? crossOrigin.cookieDomain : void 0;
     return {
-      pmd: pmdExplicit ? pmd : false,
-      pmdExplicit,
+      pmd: asBoolean(value.pmd, false),
       privateMode: asBoolean(value.privateMode, true),
       ...cookieDomain !== void 0 && { crossOriginSession: { cookieDomain } }
     };

package/dist/analysis/device.mjs

@@ -7,7 +7,6 @@ import {
   readConditionalMediationAvailable,
   readJavaScriptHighEntropy,
   readMaxTouchPoints,
-  readUserAgent,
   readUserVerifyingPlatformAuthenticatorAvailable,
   readWebdriver
 } from "./readers/device.mjs";
@@ -515,84 +514,6 @@ var DeviceCollector = class {
       this.logger.error("Failed to report device info timing", error);
     }
   }
-  /**
-   * Error situations:
-   *  - navigator is not available: user agent is treated as empty, osName and browserName are "other"
-   *  - navigator is available but userAgent is null or undefined: same as above
-   */
-  static getOsAndBrowserInfo() {
-    return {
-      osName: this.getOsName(),
-      browserName: this.getBrowserName()
-    };
-  }
-  static getUserAgent() {
-    return readUserAgent({
-      key: "browser-api:device.user-agent",
-      title: "Browser and operating system",
-      accessNote: "navigator.userAgent",
-      group: "Device information",
-      origin: "observe-external",
-      fields: [
-        {
-          path: "result",
-          label: "Browser and operating system",
-          exposure: "class",
-          transform: {
-            classes: [
-              "iOS",
-              "Android",
-              "Windows",
-              "macOS",
-              "Linux",
-              "ChromeOS",
-              "Chrome",
-              "Firefox",
-              "Safari",
-              "Edge",
-              "Opera",
-              "IE",
-              "other"
-            ]
-          }
-        }
-      ]
-    });
-  }
-  static getOsName() {
-    const ua = this.getUserAgent();
-    if (ua.includes("iOS")) {
-      return "iOS";
-    } else if (ua.includes("Android")) {
-      return "Android";
-    } else if (ua.includes("Windows")) {
-      return "Windows";
-    } else if (ua.includes("Macintosh")) {
-      return "macOS";
-    } else if (ua.includes("Linux")) {
-      return "Linux";
-    } else if (ua.includes("ChromeOS")) {
-      return "ChromeOS";
-    }
-    return "other";
-  }
-  static getBrowserName() {
-    const ua = this.getUserAgent();
-    if (ua.includes("Chrome")) {
-      return "Chrome";
-    } else if (ua.includes("Firefox")) {
-      return "Firefox";
-    } else if (ua.includes("Safari")) {
-      return "Safari";
-    } else if (ua.includes("Edge")) {
-      return "Edge";
-    } else if (ua.includes("Opera")) {
-      return "Opera";
-    } else if (ua.includes("IE")) {
-      return "IE";
-    }
-    return "other";
-  }
   getClientEnvHandle() {
     const existingClientEnvHandle = this.storage.getItem("cbo_client_env_handle");
     if (existingClientEnvHandle) {

package/dist/analysis/low-events/grouped-input-tracker.mjs

@@ -99,7 +99,7 @@ var LowEventGroupedInputTracker = class {
               this.composing ||= composing;
               if (this.changeTimer !== null) return;
               this.changeTime = Date.now();
-              this.changeSeq = sink.reserveCaptureSeq?.();
+              this.changes.observe();
               this.changeTimer = setTimeout(() => this.safe(() => this.flushChanges()), 0);
             },
             focus: (relatedTarget) => {
@@ -174,7 +174,6 @@ var LowEventGroupedInputTracker = class {
   listeners = [];
   changeTimer = null;
   changeTime = 0;
-  changeSeq;
   composing = false;
   destroyed = false;
   contains(target) {
@@ -214,7 +213,7 @@ var LowEventGroupedInputTracker = class {
   flushChanges() {
     if (this.changeTimer === null) return;
     this.cancelChange();
-    if (!this.paste.pending) this.changes.record(this.length(), this.changeTime, this.composing, this.changeSeq);
+    if (!this.paste.pending) this.changes.record(this.length(), this.changeTime, this.composing);
     this.composing = false;
   }
   emit(lowType) {

package/dist/analysis/low-events/input-change-recorder.mjs

@@ -18,9 +18,28 @@ var InputChangeRecorder = class {
   autofillTimestamps = [];
   autofillStreak = null;
   idleTimer = null;
+  /** Order of the pending run of changes: reserved when it starts, taken by the first event it sends. */
+  runSeq;
   markInputObserved() {
     this.prefillSettled = true;
   }
+  /**
+   * Observation of a change begins: reserves the capture order of a new run of changes. One number per
+   * run, not per change: every reserved number is sent, so the gaps between sent events never count
+   * keystrokes (which would reveal the length of the typed value).
+   */
+  observe() {
+    if (this.runSeq !== void 0 || this.inputBatch || this.autofillTimestamps.length > 0 || this.autofillStreak) {
+      return;
+    }
+    this.runSeq = this.reserveCaptureSeq?.();
+  }
+  /** The run's reserved order for its first event; later events of the run reserve when they are created. */
+  takeSeq() {
+    const seq = this.runSeq;
+    this.runSeq = void 0;
+    return seq ?? this.reserveCaptureSeq?.();
+  }
   capturePrefill(length, newCapture = false) {
     if (newCapture) this.prefillSettled = false;
     if (this.prefillSettled) return;
@@ -50,17 +69,17 @@ var InputChangeRecorder = class {
       }
     }, INPUT_IDLE_MS);
   }
-  extendInputBatch(timestamp, effect = this.currentEffect, captureSeq) {
+  extendInputBatch(timestamp, effect = this.currentEffect) {
     const batch = this.inputBatch;
     if (!batch) {
-      this.inputBatch = { firstTimestamp: timestamp, lastTimestamp: timestamp, effect, captureSeq };
+      this.inputBatch = { firstTimestamp: timestamp, lastTimestamp: timestamp, effect, captureSeq: this.takeSeq() };
       return;
     }
     batch.lastTimestamp = timestamp;
   }
   drainAutofillRingToBatch() {
     for (const ts of this.autofillTimestamps) {
-      this.extendInputBatch(ts.ts, this.ringEffect, ts.captureSeq);
+      this.extendInputBatch(ts, this.ringEffect);
     }
     this.autofillTimestamps.length = 0;
   }
@@ -101,7 +120,7 @@ var InputChangeRecorder = class {
     let minInterval = Infinity;
     let maxInterval = -Infinity;
     for (let i = 1; i < ring.length; i++) {
-      const interval = ring[i].ts - ring[i - 1].ts;
+      const interval = ring[i] - ring[i - 1];
       if (interval > AUTOFILL_FAST_INTERVAL_MS) {
         return false;
       }
@@ -114,7 +133,8 @@ var InputChangeRecorder = class {
     }
     return maxInterval - minInterval <= AUTOFILL_UNIFORM_SPREAD_MS;
   }
-  record(newLength, timestamp = Date.now(), composing = false, captureSeq = this.reserveCaptureSeq?.()) {
+  record(newLength, timestamp = Date.now(), composing = false) {
+    this.observe();
     this.markInputObserved();
     this.scheduleIdle();
     const oldLength = this.previousLength;
@@ -123,6 +143,7 @@ var InputChangeRecorder = class {
     this.previousLength = newLength;
     if (newLength === 0 && oldLength > 0) {
       this.flush();
+      const captureSeq = this.takeSeq();
       this.pushLow({
         ...captureSeq === void 0 ? {} : { captureSeq },
         lowType: "input-clear",
@@ -134,12 +155,13 @@ var InputChangeRecorder = class {
     if (composing) {
       this.flushAutofillStreak();
       this.drainAutofillRingToBatch();
-      this.extendInputBatch(timestamp, this.currentEffect, captureSeq);
+      this.extendInputBatch(timestamp, this.currentEffect);
       return;
     }
     if (delta >= BIG_INPUT_DELTA_THRESHOLD) {
       this.flushInputBatch();
       this.flushAutofillStreak();
+      const captureSeq = this.takeSeq();
       this.pushLow({
         ...captureSeq === void 0 ? {} : { captureSeq },
         lowType: "big-input-add",
@@ -151,6 +173,7 @@ var InputChangeRecorder = class {
     if (delta <= -BIG_INPUT_DELTA_THRESHOLD) {
       this.flushInputBatch();
       this.flushAutofillStreak();
+      const captureSeq = this.takeSeq();
       this.pushLow({
         ...captureSeq === void 0 ? {} : { captureSeq },
         lowType: "big-input-rem",
@@ -169,15 +192,15 @@ var InputChangeRecorder = class {
     }
     if (delta !== 1) {
       this.drainAutofillRingToBatch();
-      this.extendInputBatch(timestamp, this.currentEffect, captureSeq);
+      this.extendInputBatch(timestamp, this.currentEffect);
       return;
     }
     const ring = this.autofillTimestamps;
     if (ring.length === 0) this.ringEffect = this.currentEffect;
-    ring.push({ ts: timestamp, captureSeq });
+    ring.push(timestamp);
     if (ring.length > AUTOFILL_STREAK_LENGTH) {
       const graduated = ring.shift();
-      this.extendInputBatch(graduated.ts, this.ringEffect, graduated.captureSeq);
+      this.extendInputBatch(graduated, this.ringEffect);
       this.ringEffect = "modify";
     }
     if (!this.detectAutofillStreak()) {
@@ -188,9 +211,9 @@ var InputChangeRecorder = class {
     ring.length = 0;
     this.flushInputBatch();
     this.autofillStreak = {
-      firstTimestamp: streakStart.ts,
-      captureSeq: streakStart.captureSeq,
-      lastTimestamp: streakLast.ts,
+      firstTimestamp: streakStart,
+      captureSeq: this.takeSeq(),
+      lastTimestamp: streakLast,
       effect: this.ringEffect
     };
   }

package/dist/analysis/low-events/input-tracker.mjs

@@ -3,9 +3,6 @@ import { InputChangeRecorder } from "./input-change-recorder.mjs";
 import { InputPasteObserver } from "../readers/input-paste.mjs";
 import { observeInputField, readFocusedField, readInputContentLength } from "../readers/input.mjs";
 import { listenWindow } from "../readers/page.mjs";
-import { readPasswordManagerDomSignals } from "../readers/password-manager-dom.mjs";
-var MOUNT_PROBE_DELAY_MS = 500;
-var FOCUS_PROBE_DELAY_MS = 250;
 function fieldContentLength(field) {
   return readInputContentLength(
     {
@@ -85,10 +82,6 @@ var LowEventInputTracker = class {
   removePageHide;
   changes;
   pasteObserver;
-  emittedSignals = /* @__PURE__ */ new Set();
-  firstFocusHandled = false;
-  mountProbeTimer = null;
-  focusProbeTimer = null;
   destroyed = false;
   destroy() {
     if (this.destroyed) {
@@ -96,14 +89,6 @@ var LowEventInputTracker = class {
     }
     this.destroyed = true;
     try {
-      if (this.mountProbeTimer !== null) {
-        clearTimeout(this.mountProbeTimer);
-        this.mountProbeTimer = null;
-      }
-      if (this.focusProbeTimer !== null) {
-        clearTimeout(this.focusProbeTimer);
-        this.focusProbeTimer = null;
-      }
       this.changes.flush();
       this.unregisterInputs?.();
       this.pasteObserver.destroy();
@@ -204,9 +189,6 @@ var LowEventInputTracker = class {
         this.handleFocus();
       }
     }
-    if (typeof window !== "undefined") {
-      this.mountProbeTimer = setTimeout(() => this.runEnvProbe(), MOUNT_PROBE_DELAY_MS);
-    }
   }
   detach() {
     this.removeFieldListeners?.();
@@ -217,45 +199,6 @@ var LowEventInputTracker = class {
   pushLow = (low) => {
     this.sink.enqueueLowEvent(low);
   };
-  runEnvProbe() {
-    try {
-      if (typeof __CBO_DATA_PMD__ === "boolean" ? __CBO_DATA_PMD__ : this.sink.passwordManagerDomScan?.() !== false) {
-        const matches = readPasswordManagerDomSignals({
-          key: "dom:password-managers.dom-signals",
-          title: "Password manager traces in the page",
-          accessNote: "DOM markers that password manager extensions insert (attributes, elements, styles)",
-          group: "Password manager detection",
-          origin: "observe-external",
-          fields: [
-            {
-              path: "signals[]",
-              label: "Password manager traces found",
-              exposure: "enum",
-              transform: { values: ["pa-1", "pa-2", "pa-3", "pa-4", "pa-5", "pa-6"] }
-            }
-          ],
-          dataConfig: "pmd"
-        });
-        const now = Date.now();
-        for (const eventType of matches) {
-          if (this.emittedSignals.has(eventType)) {
-            continue;
-          }
-          this.emittedSignals.add(eventType);
-          this.pushLow({ lowType: eventType, ts: now });
-        }
-      }
-    } catch (error) {
-      this.logger.error("Failed to run input env probe", error);
-    }
-  }
-  scheduleFocusProbe() {
-    if (this.firstFocusHandled) {
-      return;
-    }
-    this.firstFocusHandled = true;
-    this.focusProbeTimer = setTimeout(() => this.runEnvProbe(), FOCUS_PROBE_DELAY_MS);
-  }
   capturePrefill(newCapture = false) {
     if (this.destroyed) return;
     this.flushPending();
@@ -270,7 +213,6 @@ var LowEventInputTracker = class {
     this.pushLow({ lowType: eventType, ts: Date.now() });
   }
   handleFocus() {
-    this.scheduleFocusProbe();
     this.enqueueNonInputEvent("focus");
   }
   handleBlur() {

package/dist/analysis/readers/network.mjs

@@ -1,4 +1,8 @@
 // src/readers/network.ts
+var declaredByBrowser = /* @__PURE__ */ new Set();
+function declareBrowserRequestData(meta) {
+  declaredByBrowser.add(meta);
+}
 function sendFetch(_meta, url, init) {
   return fetch(url, init);
 }
@@ -10,5 +14,6 @@ function beaconSender(_meta) {
 }
 export {
   beaconSender,
+  declareBrowserRequestData,
   sendFetch
 };

package/dist/analysis/transports/fetch.mjs

@@ -1,11 +1,26 @@
 // src/transports/fetch.ts
 import { parseReliabilityConfig } from "../config.mjs";
-import { beaconSender, sendFetch } from "../readers/network.mjs";
+import { beaconSender, declareBrowserRequestData, sendFetch } from "../readers/network.mjs";
 var MAX_KEEPALIVE_BODY_BYTES = 6e4;
 var FETCH_TIMEOUT_MS = 6e4;
 var FetchTransport = class {
   constructor(options) {
     this.options = options;
+    declareBrowserRequestData({
+      key: "browser-api:device.user-agent",
+      title: "Browser and operating system",
+      accessNote: "User-Agent header the browser sends with every request to the Observe ingestion API (the SDK does not read it); Corbado stores it and derives browser and operating system name and version",
+      group: "Device information",
+      origin: "observe-external",
+      fields: [
+        {
+          path: "request.header.user-agent",
+          label: "Browser and operating system identifier",
+          exposure: "raw",
+          transform: { note: "full User-Agent string, sent by the browser" }
+        }
+      ]
+    });
   }
   /**
    * Error situations:

package/dist/analysis/utils/operation-full.mjs

@@ -30,7 +30,6 @@ var OperationFull = class {
         this.captureSessionId
       ),
       flushKeepalive: () => this.tracker.lowEventFlushKeepalive(),
-      passwordManagerDomScan: () => this.tracker.isPasswordManagerDomScanEnabled(),
       registerInputs: (fields, flush) => this.tracker.getWindowObserver().registerInputs(
         fields,
         () => ({

package/dist/analysis/version.mjs

@@ -1,6 +1,6 @@
 // src/version.ts
 var SDK_NAME = "@corbado/observe";
-var SDK_VERSION = true ? "1.10.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "1.10.1" : "0.0.0-dev";
 export {
   SDK_NAME,
   SDK_VERSION