@corbado/observe 1.11.0 → 1.12.1

package/dist/analysis/low-events/input-tracker.mjs

@@ -12,10 +12,11 @@ function fieldContentLength(field) {
       group: "Input interaction",
       origin: "observe-external",
       fields: [
-        { path: "value.length", label: "Length of the entered text", exposure: "size" },
+        { path: "value.length", label: "Length of the entered text", category: "behavior", exposure: "size" },
         {
           path: "checked",
           label: "Whether a checkbox or option is selected",
+          category: "behavior",
           exposure: "enum",
           transform: { values: [true, false], note: "checkbox and radio only" }
         }
@@ -46,12 +47,14 @@ var LowEventInputTracker = class {
           {
             path: "event.paste",
             label: "Paste into the field",
+            category: "behavior",
             exposure: "presence",
             transform: { note: "trusted paste events only" }
           },
           {
             path: "value",
             label: "Length of the pasted text",
+            category: "behavior",
             exposure: "size",
             transform: { note: "inserted length only; values are compared in memory and discarded" }
           }
@@ -107,21 +110,33 @@ var LowEventInputTracker = class {
         group: "Input interaction",
         origin: "observe-external",
         fields: [
-          { path: "event.focus", label: "Field selected", exposure: "presence" },
-          { path: "event.blur", label: "Field left", exposure: "presence" },
-          { path: "event.pointerdown", label: "Pointer pressed on the field", exposure: "presence" },
-          { path: "event.pointerup", label: "Pointer released on the field", exposure: "presence" },
-          { path: "event.click", label: "Click on the field", exposure: "presence" },
-          { path: "event.input", label: "Typing in the field", exposure: "presence" },
+          { path: "event.focus", label: "Field selected", category: "behavior", exposure: "presence" },
+          { path: "event.blur", label: "Field left", category: "behavior", exposure: "presence" },
+          {
+            path: "event.pointerdown",
+            label: "Pointer pressed on the field",
+            category: "behavior",
+            exposure: "presence"
+          },
+          {
+            path: "event.pointerup",
+            label: "Pointer released on the field",
+            category: "behavior",
+            exposure: "presence"
+          },
+          { path: "event.click", label: "Click on the field", category: "behavior", exposure: "presence" },
+          { path: "event.input", label: "Typing in the field", category: "behavior", exposure: "presence" },
           {
             path: "event.input.isComposing",
             label: "Whether text is being composed with an input method",
+            category: "behavior",
             exposure: "enum",
             transform: { values: [true, false] }
           },
           {
             path: "event.keyup.key",
             label: "Escape key pressed",
+            category: "behavior",
             exposure: "enum",
             transform: { values: ["Escape", "other"] }
           }
@@ -158,6 +173,7 @@ var LowEventInputTracker = class {
             {
               path: "event.pagehide",
               label: "Leaving the page",
+              category: "technical",
               exposure: "presence",
               transform: { note: "flushes pending input low events on unload" }
             }
@@ -179,6 +195,7 @@ var LowEventInputTracker = class {
             {
               path: "focused",
               label: "Whether the field is selected",
+              category: "behavior",
               exposure: "enum",
               transform: { values: [true, false] }
             }

package/dist/analysis/low-events/shared-window-observer.mjs

@@ -19,48 +19,55 @@ var SharedWindowObserver = class {
         group: "Window interaction",
         origin: "observe-external",
         fields: [
-          { path: "event.blur", label: "Window left", exposure: "presence" },
-          { path: "event.focus", label: "Window selected", exposure: "presence" },
+          { path: "event.blur", label: "Window left", category: "behavior", exposure: "presence" },
+          { path: "event.focus", label: "Window selected", category: "behavior", exposure: "presence" },
           {
             path: "event.visibilitychange",
             label: "Page hidden or shown again",
+            category: "behavior",
             exposure: "enum",
             transform: { values: ["hidden", "visible"] }
           },
           {
             path: "event.focusout",
             label: "Whether a tracked field lost focus",
+            category: "behavior",
             exposure: "computed",
             transform: { note: "only whether a handed-over input lost focus to nothing" }
           },
           {
             path: "event.focusin",
             label: "Which tracked field gained focus",
+            category: "behavior",
             exposure: "computed",
             transform: { note: "only which handed-over input gained focus" }
           },
           {
             path: "event.pointerdown",
             label: "Whether a tracked field was pressed",
+            category: "behavior",
             exposure: "computed",
             transform: { note: "only whether the pointer went to a handed-over input" }
           },
           {
             path: "event.visualviewport.resize",
             label: "Duration of zooming or resizing",
+            category: "behavior",
             exposure: "size",
             transform: { note: "batched duration only" }
           },
           {
             path: "event.visualviewport.scroll",
             label: "Duration of scrolling",
+            category: "behavior",
             exposure: "size",
             transform: { note: "batched duration only" }
           },
-          { path: "event.pagehide", label: "Leaving the page", exposure: "presence" },
+          { path: "event.pagehide", label: "Leaving the page", category: "technical", exposure: "presence" },
           {
             path: "event.navigation.back",
             label: "Going back within the page",
+            category: "behavior",
             exposure: "enum",
             transform: { values: [true, false], note: "committed same-document traverse to an earlier entry" }
           }
@@ -156,6 +163,7 @@ var SharedWindowObserver = class {
           {
             path: "activeElement",
             label: "Which tracked field is selected",
+            category: "behavior",
             exposure: "computed",
             transform: { note: "identity compared against handed-over inputs only" }
           }
@@ -222,12 +230,14 @@ var SharedWindowObserver = class {
         {
           path: "activeElement",
           label: "Which tracked field is selected",
+          category: "behavior",
           exposure: "computed",
           transform: { note: "identity compared against handed-over inputs only" }
         },
         {
           path: "activeElement.idle",
           label: "Whether nothing is selected",
+          category: "behavior",
           exposure: "enum",
           transform: { values: [true, false], note: "nothing focused (body or none)" }
         }

package/dist/analysis/queue.mjs

@@ -647,6 +647,7 @@ var RequestQueue = class {
             {
               path: "visibilityState",
               label: "Whether the page is hidden",
+              category: "technical",
               exposure: "enum",
               transform: { values: ["hidden", "other"] }
             }
@@ -679,6 +680,7 @@ var RequestQueue = class {
           {
             path: "event.visibilitychange",
             label: "Page hidden or shown again",
+            category: "technical",
             exposure: "presence",
             transform: { note: "flushes pending events when the page is hidden" }
           }
@@ -698,6 +700,7 @@ var RequestQueue = class {
           {
             path: "event.pagehide",
             label: "Leaving the page",
+            category: "technical",
             exposure: "presence",
             transform: { note: "flushes pending events on unload" }
           }
@@ -723,6 +726,7 @@ var RequestQueue = class {
           {
             path: "url",
             label: "Full page address",
+            category: "technical",
             exposure: "raw",
             transform: { note: "debug mode only; written to own localStorage, never sent" }
           }

package/dist/analysis/readers/meta.mjs

@@ -13,6 +13,16 @@ var READER_EXPOSURES = [
   "redacted",
   "raw"
 ];
+var READER_CATEGORIES = [
+  "personal-identifier",
+  "personal-data",
+  "secret",
+  "passkey",
+  "device",
+  "behavior",
+  "technical"
+];
 export {
+  READER_CATEGORIES,
   READER_EXPOSURES
 };

package/dist/analysis/storage/index.mjs

@@ -28,16 +28,13 @@ var LocalStorage = class {
     accessNote: "localStorage, Observe's own cbo_ keys",
     group: "Observe SDK state",
     origin: "observe-internal",
-    fields: [
-      {
-        path: "value",
-        label: "Observe's own saved data",
-        exposure: "none",
-        transform: {
-          note: "own cbo_* keys only (session, sequence, outbox, config cache, experiments, client env, debug); written and read back by the SDK"
-        }
-      }
-    ]
+    fields: [],
+    storage: {
+      area: "local",
+      keys: ["cbo_*"],
+      lifetime: "persistent",
+      retention: "Kept on the device; Observe replaces or removes its entries as they change"
+    }
   });
   /**
    * Error situations:
@@ -98,16 +95,13 @@ var CookieStorage = class {
     accessNote: "document.cookie, Observe's own cbo_ cookies",
     group: "Observe SDK state",
     origin: "observe-internal",
-    fields: [
-      {
-        path: "value",
-        label: "Observe's own cookies",
-        exposure: "none",
-        transform: {
-          note: "own cbo_* cookies only (cookie storage mode); the cookie string is scanned for the requested key"
-        }
-      }
-    ]
+    fields: [],
+    storage: {
+      area: "cookie",
+      keys: ["cbo_*"],
+      lifetime: "browser",
+      retention: "Removed when the browser closes"
+    }
   });
   /**
    * Error situations:
@@ -181,16 +175,13 @@ var SessionStorage = class {
     accessNote: "sessionStorage, Observe's own cbo_ keys",
     group: "Observe SDK state",
     origin: "observe-internal",
-    fields: [
-      {
-        path: "value",
-        label: "Observe's own data for this tab",
-        exposure: "none",
-        transform: {
-          note: "own cbo_* keys only (per-tab session, sequence and tab id); written and read back by the SDK"
-        }
-      }
-    ]
+    fields: [],
+    storage: {
+      area: "session",
+      keys: ["cbo_*"],
+      lifetime: "tab",
+      retention: "Removed when the tab closes"
+    }
   });
   /**
    * Error situations:

package/dist/analysis/store/event-store.mjs

@@ -49,6 +49,7 @@ var EventStore = class {
           {
             path: "result",
             label: "Coordination between open tabs",
+            category: "technical",
             exposure: "none",
             transform: { note: "own cbo_* lock names; serializes the SDK's storage updates across tabs" }
           }

package/dist/analysis/tracker-core.mjs

@@ -479,6 +479,7 @@ var CorbadoTrackerCore = class _CorbadoTrackerCore {
           {
             path: "result",
             label: "Whether the browser looks like a bot",
+            category: "device",
             exposure: "computed",
             transform: { note: "matched against the blocked user-agent list; only the boolean is used (tracking off)" }
           }
@@ -678,6 +679,7 @@ var CorbadoTrackerCore = class _CorbadoTrackerCore {
         {
           path: "available",
           label: "Whether the browser supports tab coordination",
+          category: "device",
           exposure: "enum",
           transform: { values: [true, false] }
         }
@@ -696,6 +698,7 @@ var CorbadoTrackerCore = class _CorbadoTrackerCore {
           {
             path: "result",
             label: "Coordination between open tabs",
+            category: "technical",
             exposure: "none",
             transform: { note: "own cbo_* lock names; serializes the SDK's storage updates across tabs" }
           }
@@ -724,10 +727,11 @@ var CorbadoTrackerCore = class _CorbadoTrackerCore {
         group: "Page",
         origin: "observe-external",
         fields: [
-          { path: "url.path", label: "Page path", exposure: "raw" },
+          { path: "url.path", label: "Page path", category: "technical", exposure: "raw" },
           {
             path: "url.query",
             label: "Page address parameters (allowed ones only)",
+            category: "technical",
             exposure: "redacted",
             transform: { note: "sourcePathQuery 'allowlist': values of non-allowlisted keys become '*'; 'all': raw" }
           }

package/dist/analysis/transports/fetch.mjs

@@ -16,6 +16,7 @@ var FetchTransport = class {
         {
           path: "request.header.user-agent",
           label: "Browser and operating system identifier",
+          category: "device",
           exposure: "raw",
           transform: { note: "full User-Agent string, sent by the browser" }
         }
@@ -61,17 +62,24 @@ var FetchTransport = class {
             group: "Event delivery",
             origin: "observe-internal",
             fields: [
-              { path: "response.status", label: "Response code", exposure: "raw" },
-              { path: "response.header.retry-after", label: "Retry delay requested by the server", exposure: "raw" },
+              { path: "response.status", label: "Response code", category: "technical", exposure: "raw" },
+              {
+                path: "response.header.retry-after",
+                label: "Retry delay requested by the server",
+                category: "technical",
+                exposure: "raw"
+              },
               {
                 path: "response.header.x-corbado-observe-accepted",
                 label: "Whether Observe accepted the events",
+                category: "technical",
                 exposure: "enum",
                 transform: { values: ["1", "other"] }
               },
               {
                 path: "response.body",
                 label: "Observe settings in the response",
+                category: "technical",
                 exposure: "raw",
                 transform: { note: "SDK reliability config (HTTP 200 only)" }
               }
@@ -129,6 +137,7 @@ var FetchTransport = class {
           {
             path: "result",
             label: "Whether the browser accepted the data for sending",
+            category: "technical",
             exposure: "enum",
             transform: { values: [true, false], note: "whether the browser queued the beacon" }
           }

package/dist/analysis/utils/email-link-operation-full.mjs

@@ -78,6 +78,7 @@ var EmailLinkContinuationOperation = class extends OperationFull {
             {
               path: "event.pagehide",
               label: "Leaving the page",
+              category: "technical",
               exposure: "presence",
               transform: { note: "flushes a detached email-link continuation on unload" }
             }

package/dist/analysis/utils/password-manager-sampler.mjs

@@ -23,6 +23,7 @@ var PasswordManagerSampler = class {
         {
           path: "readyState",
           label: "Whether the page has finished loading",
+          category: "technical",
           exposure: "enum",
           transform: { values: ["complete", "other"] }
         }
@@ -46,6 +47,7 @@ var PasswordManagerSampler = class {
               {
                 path: "event.load",
                 label: "Page finished loading",
+                category: "technical",
                 exposure: "presence",
                 transform: { note: "schedules a password manager sample" }
               }
@@ -132,6 +134,7 @@ var PasswordManagerSampler = class {
           {
             path: "result[].name",
             label: "Names of known password managers found",
+            category: "device",
             exposure: "enum",
             transform: {
               values: [
@@ -147,7 +150,12 @@ var PasswordManagerSampler = class {
             }
           },
           // Read to merge samples, never reported (takeReport keeps only the name).
-          { path: "result[].signedIn", label: "Whether the password manager is signed in", exposure: "none" }
+          {
+            path: "result[].signedIn",
+            label: "Whether the password manager is signed in",
+            category: "device",
+            exposure: "none"
+          }
         ],
         dataConfig: "pmd"
       });

package/dist/analysis/version.mjs

@@ -1,6 +1,6 @@
 // src/version.ts
 var SDK_NAME = "@corbado/observe";
-var SDK_VERSION = true ? "1.11.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "1.12.1" : "0.0.0-dev";
 export {
   SDK_NAME,
   SDK_VERSION