@corbado/observe 1.14.1 → 1.15.0

package/dist/index.d.mts

@@ -1225,6 +1225,8 @@ interface TrackerPlugin {
      * `explicitTimestamp ?? Date.now()`), see `eventTime()`.
      */
     readonly eventTime?: (explicitTimestamp: number | undefined) => number | undefined;
+    /** @internal Maximum age of the device handle in ms, see `deviceHandleMaxAge()`. */
+    readonly deviceHandleMaxAgeMs?: number;
 }
 /** @internal Serializer of the `rawError` option of operation step errors. */
 type RawErrorSerializer = (value: unknown, options?: SerializeRawErrorOptions) => RawErrorEnvelope | undefined;
@@ -1300,6 +1302,8 @@ declare class CorbadoTrackerCore {
     private fixedSourcePath?;
     /** Event clock of a plugin (never throws); undefined or an undefined result = `explicitTimestamp ?? Date.now()`. */
     private eventClock?;
+    /** Device-handle maximum of a plugin; undefined = no maximum. */
+    private deviceHandleMaxAgeMs?;
     /** @internal Shared passive page observation and per-operation context registration. */
     getWindowObserver(): SharedWindowObserver;
     /**
@@ -3348,6 +3352,20 @@ type EventTimeStamp = (explicitTimestamp: number | undefined) => number;
  */
 declare function eventTime(stamp: EventTimeStamp): TrackerPlugin;
 
+/**
+ * Tracker plugin: the device handle (`cbo_client_env_handle`, the browser's random id) is replaced by a new one once
+ * it is older than `maxAgeMs`. Without it the handle has no maximum (declared "persistent, no expiry" in the
+ * collection manifest). The autocapture runtime passes the value from the build's static config, so the manifest
+ * records it from `build.config`. A non-positive or non-finite value is ignored. When several plugins pass a
+ * maximum, the last one wins.
+ *
+ * @example
+ * ```ts
+ * const tracker = initCore({ projectId, apiBaseUrl, plugins: [deviceHandleMaxAge(365 * 24 * 60 * 60 * 1000)] });
+ * ```
+ */
+declare function deviceHandleMaxAge(maxAgeMs: number): TrackerPlugin;
+
 interface TransportMakeRequestResponse {
     deliveryAccepted?: boolean;
     statusCode?: number;
@@ -3432,26 +3450,6 @@ type StandaloneDeviceInfoSource = {
     /** The snapshot, marked as delivered; undefined when there is none. */
     take(): DeviceInfo | undefined;
 };
-/**
- * @remarks When `window` is defined, `visibilitychange` (when the document becomes hidden) and `pagehide`
- * trigger a synchronous unload flush (`flushSync`). Any thrown error in that path is logged as
- * "Unexpected error in queue flushSync". Sync flushes are deduplicated: once everything pending has
- * been handed to a sync transport, further lifecycle signals are no-ops until something new is
- * enqueued — otherwise a single navigation would resend the same batch several times
- * (visibilitychange + pagehide + per-input flushKeepalive), since entries are intentionally kept
- * under `durableOutbox`.
- *
- * Pending events are held as {@link OutboxEntry} records. When `config.durableOutbox` is enabled they are
- * additionally persisted to a localStorage-backed {@link EventStore} and recovered on the next load.
- * Delivery removes an entry only on a 2xx response; retryable failures back off (honoring `Retry-After`)
- * up to `config.retry.maxAttempts`. Low events have a separately bounded outbox when durableLowOutbox is enabled.
- *
- * Flushing is timer-driven only (the flush interval); `batchSize` caps the events per request, and a
- * flush drains all due work in sequential capped batches, stopping at the first failed send.
- *
- * Every flush carries a {@link FlushReason} that names its trigger; it is stamped onto the batch as
- * `meta.flushReason` so the server can see which triggers actually deliver.
- */
 declare class RequestQueue {
     private readonly logger;
     private transport;
@@ -3632,7 +3630,6 @@ declare class RequestQueue {
     private removeEntries;
     private rescheduleIfPending;
     private setupLifecycleHooks;
-    private writeLifecycleDebugOutput;
     /**
      * Synchronously flush pending events (and best-effort lows) during page unload.
      *
@@ -3825,6 +3822,20 @@ declare const DEFAULT_RELIABILITY_CONFIG: SdkReliabilityConfig;
 declare function parseReliabilityConfig(raw: unknown): SdkReliabilityConfig | null;
 /** Resolve init overrides over validated server policy, then defaults, including individual retry fields. */
 declare function resolveReliabilityConfig(serverConfig: SdkReliabilityConfig | undefined, overrides?: SdkReliabilityConfigOverrides): SdkReliabilityConfig;
+/** Version reported for a static config without its own `version` (see {@link staticReliabilityConfig}). */
+declare const STATIC_CONFIG_VERSION = "static";
+/**
+ * The build's static config (`__CBO_SDK_CONFIG__`, JSON text): its fields over the built-in defaults, normalized and
+ * clamped like a server config, with `version` defaulting to {@link STATIC_CONFIG_VERSION}. `pmd` (from
+ * `fixedDataConfig`) wins over the config's `pmd` like on the server-driven path. Malformed text yields the built-in
+ * defaults (logged by the caller through the returned flag). Never throws.
+ *
+ * @internal
+ */
+declare function staticReliabilityConfig(json: string, pmd?: boolean): {
+    config: SdkReliabilityConfig;
+    valid: boolean;
+};
 /** Effective fixed data switches; every field resolved. */
 type ResolvedFixedDataConfig = Required<Omit<FixedDataConfig, "crossOriginSession">> & {
     /** Cross-origin session option as given (domain not yet checked against the page); absent when not set. */
@@ -3874,6 +3885,13 @@ declare const DEFAULT_MAX_ENTRIES = 500;
  * the HOST app: an unbounded outbox could make the host's own writes throw QuotaExceededError.
  */
 declare const DEFAULT_MAX_SERIALIZED_LENGTH: number;
+/** Retention of queued entries in builds with enforced retention (`__CBO_DATA_RETENTION__`): 7 days. */
+declare const OUTBOX_MAX_AGE_MS: number;
+/**
+ * Capture time of a queued entry: the event's `timestamp` or the low event's `ts`, else the time inside its uuidv7
+ * id. Undefined when none is known (such an entry is kept).
+ */
+declare function outboxEntryTime(entry: OutboxEntry<unknown>): number | undefined;
 /**
  * Durable, localStorage-backed outbox of pending events, mirrored in memory.
  *
@@ -3907,6 +3925,8 @@ declare class EventStore<T = Event> {
      * and a shared key guarded by scoped locks would lose the cross-tab atomicity guarantee.
      */
     lockName?: string, storageKey?: string);
+    /** Deletes entries older than {@link OUTBOX_MAX_AGE_MS} (they are never sent). Never throws. */
+    private purgeExpired;
     private read;
     private mutate;
     /** Evict oldest entries until the serialized outbox fits {@link maxSerializedLength}. */
@@ -3939,6 +3959,12 @@ type WebAuthnIdentifierProjector = (value: string) => string | null | undefined;
 type WebAuthnIdentifierProjectors = {
     /** Projects creation user.id and credential response.userHandle. Missing/null inputs are not passed to the callback. */
     userId?: WebAuthnIdentifierProjector;
+    /**
+     * Only in allowlist builds (`__CBO_DATA_CEREMONY__`): keep credential ids raw (the `ac:ceremony@1` option
+     * `passkeyReference`, passed by the autocapture runtime from the static config). The blocklist ignores it (it keeps
+     * credential ids anyway).
+     */
+    passkeyReference?: boolean;
 };
 /**
  * Serializes WebAuthn creation options, removing `user.name` and `user.displayName`.
@@ -3970,10 +3996,11 @@ declare function sanitizeCreationResponse(value: unknown, projectors?: WebAuthnI
  * challenges, credential IDs, and extension inputs remain. Binary values become base64url strings.
  *
  * @param value - Native publicKey options, a JSON object, or JSON text; not an application envelope.
+ * @param options - Only in allowlist builds: `passkeyReference` keeps the allowed credential ids raw. Ignored otherwise.
  * @returns JSON text, or undefined for malformed or unserializable input.
  * @remarks Does not mutate input or call toJSON. No tracker initialization is required.
  */
-declare function sanitizeRequestOptions(value: unknown): string | undefined;
+declare function sanitizeRequestOptions(value: unknown, options?: WebAuthnIdentifierProjectors): string | undefined;
 /**
  * Serializes an authentication credential, removing `response.signature` and `clientExtensionResults.prf.results`.
  * `response.userHandle` is omitted unless a projector is supplied. Other fields remain, including credential IDs.
@@ -3986,6 +4013,41 @@ declare function sanitizeRequestOptions(value: unknown): string | undefined;
  */
 declare function sanitizeAssertionResponse(value: unknown, projectors?: WebAuthnIdentifierProjectors): string | undefined;
 
+/**
+ * `ac:ceremony@1` (collection manifest v2, gap G1): the WebAuthn telemetry ALLOWLIST. Only the fields listed in the
+ * rules below leave; everything else (unknown keys, future fields, the signature, PRF and large-blob contents, the
+ * user's name, the duplicate public key of `getPublicKey()`) is never read. The output keeps the format of the
+ * blocklist sanitizer (`webauthn-payloads.ts`), so the backend parses it unchanged:
+ * - the challenge is replaced by zeros of the same length, in the options and inside `clientDataJSON`;
+ * - a present user handle is replaced by a fixed placeholder (only that it exists remains), unless a projector
+ *   supplies a value;
+ * - credential ids (allow / exclude lists, `id` / `rawId`, inside the attestation's authenticator data) are replaced
+ *   by random stand-ins of the same byte length that are equal for equal ids within this page load only, unless the
+ *   project opts into `passkeyReference` (then they stay raw);
+ * - the attestation object and authenticator data stay as they are (no CBOR rewriting; only same-length credential id
+ *   bytes are swapped without `passkeyReference`).
+ *
+ * Pure, synchronous, never throws, never mutates its input, never calls `toJSON`. Binary values become base64url.
+ */
+
+/** Options of the allowlist projection. */
+type WebAuthnCeremonyOptions = WebAuthnIdentifierProjectors & {
+    /**
+     * Keep credential ids raw (the project's declaration `passkeyReference: true`): recognizes the same passkey across
+     * sign-ins. Default false: page-scoped stand-ins. The autocapture runtime passes it from the project's declaration
+     * (static config), so the manifest records it from `build.config`.
+     */
+    passkeyReference?: boolean;
+};
+/** Allowlist projection of WebAuthn creation options (see the module comment). JSON text or undefined. */
+declare function ceremonyCreationOptions(value: unknown, options?: WebAuthnCeremonyOptions): string | undefined;
+/** Allowlist projection of WebAuthn request (authentication) options. JSON text or undefined. */
+declare function ceremonyRequestOptions(value: unknown, options?: WebAuthnCeremonyOptions): string | undefined;
+/** Allowlist projection of a registration credential. JSON text or undefined. */
+declare function ceremonyCreationResponse(value: unknown, options?: WebAuthnCeremonyOptions): string | undefined;
+/** Allowlist projection of an authentication credential. JSON text or undefined. */
+declare function ceremonyAssertionResponse(value: unknown, options?: WebAuthnCeremonyOptions): string | undefined;
+
 /**
  * Create a tracker and make it the default for all package-level helpers.
  * Each call replaces the default. For multiple projects, retain the returned instances and call
@@ -4032,4 +4094,4 @@ declare function telemetry(level: TelemetryLevel, message: string): void;
 /** Destroy the default tracker (see {@link CorbadoTrackerCore.destroy}) and clear the default. */
 declare function destroy(): Promise<void>;
 
-export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_CACHE_STORAGE_KEY, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type ConfigCacheRecord, type Conversion, CookieStorage, type CookieStorageOptions, CorbadoTracker, CorbadoTrackerCore, type CreateLoggerOptions, type CrossOriginSessionConfig, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventTimeStamp, type EventType, type FixedDataConfig, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type FormOperationConfig, FormOperationFull, type HandoffStepHelper, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyDeletionDeletionTypedError, type PasskeyDeletionOperationConfig, PasskeyDeletionOperationFull, type PasskeyDeletionUserConfirmationTypedError, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, ProbeLane, type ProbePending, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, READER_CATEGORIES, READER_EXPOSURES, type RawErrorEnvelope, type RawErrorSerializer, type ReaderCategory, type ReaderDataConfigKey, type ReaderExposure, type ReaderField, type ReaderMeta, type ReaderOrigin, type ReaderStorage, type ReaderTransform, RequestQueue, type ResolvedFixedDataConfig, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkInputHandoff, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SdkWebAuthnError, type SdkWebAuthnPayload, type SerializeRawErrorOptions, type SessionBridge, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginEntry, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathPolicy, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StandaloneDeviceInfoSource, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerCoreOptions, type TrackerOptions, type TrackerPlugin, type TrackerStorageEngine, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, type WithHandoffs, appConfirmationOperationFull, authDecisionFinished, authDecisionStarted, cacheConfigRecord, captchaOperationFull, clearExperiment, clearExperiments, continueEmailLinkOperation, conversion, cookieStorage, createLogger, crossOriginSession, destroy, detectPasswordManagerExtensions, emailLinkOperationFull, emailOtpOperationFull, eventTime, fixedSourcePath, formOperationFull, getCrossOriginContext, getExperiments, getSessionId, getTracker, getTrackerCore, init, initCore, installProbeLane, keyRegistrationOperationFull, keySigningOperationFull, loadCachedConfig, loadConfigRecord, logError, logInfo, maskedSourcePath, namespacedKey, parseReliabilityConfig, passkeyDeletionOperationFull, passkeyEnrollmentFullOperation, passkeyLoginFullOperation, passwordEnrollmentFullOperation, passwordLoginFullOperation, probe, probes, provideDataOperationFull, provideIdentifierOperationFull, rawErrors, resetSession, resolveFixedDataConfig, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setCrossOriginContext, setExperiment, setExperiments, setFlowTags, setUser, smsOtpOperationFull, socialLoginOperationFull, ssoLoginOperationFull, telemetry, totpOperationFull, trackSubflowError, trustedDeviceCheckOperationFull, trustedDeviceEnrollmentOperationFull, utf8Length };
+export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_CACHE_STORAGE_KEY, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type ConfigCacheRecord, type Conversion, CookieStorage, type CookieStorageOptions, CorbadoTracker, CorbadoTrackerCore, type CreateLoggerOptions, type CrossOriginSessionConfig, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventTimeStamp, type EventType, type FixedDataConfig, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type FormOperationConfig, FormOperationFull, type HandoffStepHelper, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_MAX_AGE_MS, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyDeletionDeletionTypedError, type PasskeyDeletionOperationConfig, PasskeyDeletionOperationFull, type PasskeyDeletionUserConfirmationTypedError, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, ProbeLane, type ProbePending, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, READER_CATEGORIES, READER_EXPOSURES, type RawErrorEnvelope, type RawErrorSerializer, type ReaderCategory, type ReaderDataConfigKey, type ReaderExposure, type ReaderField, type ReaderMeta, type ReaderOrigin, type ReaderStorage, type ReaderTransform, RequestQueue, type ResolvedFixedDataConfig, SDK_NAME, SDK_VERSION, STATIC_CONFIG_VERSION, type SdkInfo, type SdkInputHandoff, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SdkWebAuthnError, type SdkWebAuthnPayload, type SerializeRawErrorOptions, type SessionBridge, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginEntry, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathPolicy, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StandaloneDeviceInfoSource, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerCoreOptions, type TrackerOptions, type TrackerPlugin, type TrackerStorageEngine, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnCeremonyOptions, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, type WithHandoffs, appConfirmationOperationFull, authDecisionFinished, authDecisionStarted, cacheConfigRecord, captchaOperationFull, ceremonyAssertionResponse, ceremonyCreationOptions, ceremonyCreationResponse, ceremonyRequestOptions, clearExperiment, clearExperiments, continueEmailLinkOperation, conversion, cookieStorage, createLogger, crossOriginSession, destroy, detectPasswordManagerExtensions, deviceHandleMaxAge, emailLinkOperationFull, emailOtpOperationFull, eventTime, fixedSourcePath, formOperationFull, getCrossOriginContext, getExperiments, getSessionId, getTracker, getTrackerCore, init, initCore, installProbeLane, keyRegistrationOperationFull, keySigningOperationFull, loadCachedConfig, loadConfigRecord, logError, logInfo, maskedSourcePath, namespacedKey, outboxEntryTime, parseReliabilityConfig, passkeyDeletionOperationFull, passkeyEnrollmentFullOperation, passkeyLoginFullOperation, passwordEnrollmentFullOperation, passwordLoginFullOperation, probe, probes, provideDataOperationFull, provideIdentifierOperationFull, rawErrors, resetSession, resolveFixedDataConfig, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setCrossOriginContext, setExperiment, setExperiments, setFlowTags, setUser, smsOtpOperationFull, socialLoginOperationFull, ssoLoginOperationFull, staticReliabilityConfig, telemetry, totpOperationFull, trackSubflowError, trustedDeviceCheckOperationFull, trustedDeviceEnrollmentOperationFull, utf8Length };

package/dist/index.d.ts

@@ -1225,6 +1225,8 @@ interface TrackerPlugin {
      * `explicitTimestamp ?? Date.now()`), see `eventTime()`.
      */
     readonly eventTime?: (explicitTimestamp: number | undefined) => number | undefined;
+    /** @internal Maximum age of the device handle in ms, see `deviceHandleMaxAge()`. */
+    readonly deviceHandleMaxAgeMs?: number;
 }
 /** @internal Serializer of the `rawError` option of operation step errors. */
 type RawErrorSerializer = (value: unknown, options?: SerializeRawErrorOptions) => RawErrorEnvelope | undefined;
@@ -1300,6 +1302,8 @@ declare class CorbadoTrackerCore {
     private fixedSourcePath?;
     /** Event clock of a plugin (never throws); undefined or an undefined result = `explicitTimestamp ?? Date.now()`. */
     private eventClock?;
+    /** Device-handle maximum of a plugin; undefined = no maximum. */
+    private deviceHandleMaxAgeMs?;
     /** @internal Shared passive page observation and per-operation context registration. */
     getWindowObserver(): SharedWindowObserver;
     /**
@@ -3348,6 +3352,20 @@ type EventTimeStamp = (explicitTimestamp: number | undefined) => number;
  */
 declare function eventTime(stamp: EventTimeStamp): TrackerPlugin;
 
+/**
+ * Tracker plugin: the device handle (`cbo_client_env_handle`, the browser's random id) is replaced by a new one once
+ * it is older than `maxAgeMs`. Without it the handle has no maximum (declared "persistent, no expiry" in the
+ * collection manifest). The autocapture runtime passes the value from the build's static config, so the manifest
+ * records it from `build.config`. A non-positive or non-finite value is ignored. When several plugins pass a
+ * maximum, the last one wins.
+ *
+ * @example
+ * ```ts
+ * const tracker = initCore({ projectId, apiBaseUrl, plugins: [deviceHandleMaxAge(365 * 24 * 60 * 60 * 1000)] });
+ * ```
+ */
+declare function deviceHandleMaxAge(maxAgeMs: number): TrackerPlugin;
+
 interface TransportMakeRequestResponse {
     deliveryAccepted?: boolean;
     statusCode?: number;
@@ -3432,26 +3450,6 @@ type StandaloneDeviceInfoSource = {
     /** The snapshot, marked as delivered; undefined when there is none. */
     take(): DeviceInfo | undefined;
 };
-/**
- * @remarks When `window` is defined, `visibilitychange` (when the document becomes hidden) and `pagehide`
- * trigger a synchronous unload flush (`flushSync`). Any thrown error in that path is logged as
- * "Unexpected error in queue flushSync". Sync flushes are deduplicated: once everything pending has
- * been handed to a sync transport, further lifecycle signals are no-ops until something new is
- * enqueued — otherwise a single navigation would resend the same batch several times
- * (visibilitychange + pagehide + per-input flushKeepalive), since entries are intentionally kept
- * under `durableOutbox`.
- *
- * Pending events are held as {@link OutboxEntry} records. When `config.durableOutbox` is enabled they are
- * additionally persisted to a localStorage-backed {@link EventStore} and recovered on the next load.
- * Delivery removes an entry only on a 2xx response; retryable failures back off (honoring `Retry-After`)
- * up to `config.retry.maxAttempts`. Low events have a separately bounded outbox when durableLowOutbox is enabled.
- *
- * Flushing is timer-driven only (the flush interval); `batchSize` caps the events per request, and a
- * flush drains all due work in sequential capped batches, stopping at the first failed send.
- *
- * Every flush carries a {@link FlushReason} that names its trigger; it is stamped onto the batch as
- * `meta.flushReason` so the server can see which triggers actually deliver.
- */
 declare class RequestQueue {
     private readonly logger;
     private transport;
@@ -3632,7 +3630,6 @@ declare class RequestQueue {
     private removeEntries;
     private rescheduleIfPending;
     private setupLifecycleHooks;
-    private writeLifecycleDebugOutput;
     /**
      * Synchronously flush pending events (and best-effort lows) during page unload.
      *
@@ -3825,6 +3822,20 @@ declare const DEFAULT_RELIABILITY_CONFIG: SdkReliabilityConfig;
 declare function parseReliabilityConfig(raw: unknown): SdkReliabilityConfig | null;
 /** Resolve init overrides over validated server policy, then defaults, including individual retry fields. */
 declare function resolveReliabilityConfig(serverConfig: SdkReliabilityConfig | undefined, overrides?: SdkReliabilityConfigOverrides): SdkReliabilityConfig;
+/** Version reported for a static config without its own `version` (see {@link staticReliabilityConfig}). */
+declare const STATIC_CONFIG_VERSION = "static";
+/**
+ * The build's static config (`__CBO_SDK_CONFIG__`, JSON text): its fields over the built-in defaults, normalized and
+ * clamped like a server config, with `version` defaulting to {@link STATIC_CONFIG_VERSION}. `pmd` (from
+ * `fixedDataConfig`) wins over the config's `pmd` like on the server-driven path. Malformed text yields the built-in
+ * defaults (logged by the caller through the returned flag). Never throws.
+ *
+ * @internal
+ */
+declare function staticReliabilityConfig(json: string, pmd?: boolean): {
+    config: SdkReliabilityConfig;
+    valid: boolean;
+};
 /** Effective fixed data switches; every field resolved. */
 type ResolvedFixedDataConfig = Required<Omit<FixedDataConfig, "crossOriginSession">> & {
     /** Cross-origin session option as given (domain not yet checked against the page); absent when not set. */
@@ -3874,6 +3885,13 @@ declare const DEFAULT_MAX_ENTRIES = 500;
  * the HOST app: an unbounded outbox could make the host's own writes throw QuotaExceededError.
  */
 declare const DEFAULT_MAX_SERIALIZED_LENGTH: number;
+/** Retention of queued entries in builds with enforced retention (`__CBO_DATA_RETENTION__`): 7 days. */
+declare const OUTBOX_MAX_AGE_MS: number;
+/**
+ * Capture time of a queued entry: the event's `timestamp` or the low event's `ts`, else the time inside its uuidv7
+ * id. Undefined when none is known (such an entry is kept).
+ */
+declare function outboxEntryTime(entry: OutboxEntry<unknown>): number | undefined;
 /**
  * Durable, localStorage-backed outbox of pending events, mirrored in memory.
  *
@@ -3907,6 +3925,8 @@ declare class EventStore<T = Event> {
      * and a shared key guarded by scoped locks would lose the cross-tab atomicity guarantee.
      */
     lockName?: string, storageKey?: string);
+    /** Deletes entries older than {@link OUTBOX_MAX_AGE_MS} (they are never sent). Never throws. */
+    private purgeExpired;
     private read;
     private mutate;
     /** Evict oldest entries until the serialized outbox fits {@link maxSerializedLength}. */
@@ -3939,6 +3959,12 @@ type WebAuthnIdentifierProjector = (value: string) => string | null | undefined;
 type WebAuthnIdentifierProjectors = {
     /** Projects creation user.id and credential response.userHandle. Missing/null inputs are not passed to the callback. */
     userId?: WebAuthnIdentifierProjector;
+    /**
+     * Only in allowlist builds (`__CBO_DATA_CEREMONY__`): keep credential ids raw (the `ac:ceremony@1` option
+     * `passkeyReference`, passed by the autocapture runtime from the static config). The blocklist ignores it (it keeps
+     * credential ids anyway).
+     */
+    passkeyReference?: boolean;
 };
 /**
  * Serializes WebAuthn creation options, removing `user.name` and `user.displayName`.
@@ -3970,10 +3996,11 @@ declare function sanitizeCreationResponse(value: unknown, projectors?: WebAuthnI
  * challenges, credential IDs, and extension inputs remain. Binary values become base64url strings.
  *
  * @param value - Native publicKey options, a JSON object, or JSON text; not an application envelope.
+ * @param options - Only in allowlist builds: `passkeyReference` keeps the allowed credential ids raw. Ignored otherwise.
  * @returns JSON text, or undefined for malformed or unserializable input.
  * @remarks Does not mutate input or call toJSON. No tracker initialization is required.
  */
-declare function sanitizeRequestOptions(value: unknown): string | undefined;
+declare function sanitizeRequestOptions(value: unknown, options?: WebAuthnIdentifierProjectors): string | undefined;
 /**
  * Serializes an authentication credential, removing `response.signature` and `clientExtensionResults.prf.results`.
  * `response.userHandle` is omitted unless a projector is supplied. Other fields remain, including credential IDs.
@@ -3986,6 +4013,41 @@ declare function sanitizeRequestOptions(value: unknown): string | undefined;
  */
 declare function sanitizeAssertionResponse(value: unknown, projectors?: WebAuthnIdentifierProjectors): string | undefined;
 
+/**
+ * `ac:ceremony@1` (collection manifest v2, gap G1): the WebAuthn telemetry ALLOWLIST. Only the fields listed in the
+ * rules below leave; everything else (unknown keys, future fields, the signature, PRF and large-blob contents, the
+ * user's name, the duplicate public key of `getPublicKey()`) is never read. The output keeps the format of the
+ * blocklist sanitizer (`webauthn-payloads.ts`), so the backend parses it unchanged:
+ * - the challenge is replaced by zeros of the same length, in the options and inside `clientDataJSON`;
+ * - a present user handle is replaced by a fixed placeholder (only that it exists remains), unless a projector
+ *   supplies a value;
+ * - credential ids (allow / exclude lists, `id` / `rawId`, inside the attestation's authenticator data) are replaced
+ *   by random stand-ins of the same byte length that are equal for equal ids within this page load only, unless the
+ *   project opts into `passkeyReference` (then they stay raw);
+ * - the attestation object and authenticator data stay as they are (no CBOR rewriting; only same-length credential id
+ *   bytes are swapped without `passkeyReference`).
+ *
+ * Pure, synchronous, never throws, never mutates its input, never calls `toJSON`. Binary values become base64url.
+ */
+
+/** Options of the allowlist projection. */
+type WebAuthnCeremonyOptions = WebAuthnIdentifierProjectors & {
+    /**
+     * Keep credential ids raw (the project's declaration `passkeyReference: true`): recognizes the same passkey across
+     * sign-ins. Default false: page-scoped stand-ins. The autocapture runtime passes it from the project's declaration
+     * (static config), so the manifest records it from `build.config`.
+     */
+    passkeyReference?: boolean;
+};
+/** Allowlist projection of WebAuthn creation options (see the module comment). JSON text or undefined. */
+declare function ceremonyCreationOptions(value: unknown, options?: WebAuthnCeremonyOptions): string | undefined;
+/** Allowlist projection of WebAuthn request (authentication) options. JSON text or undefined. */
+declare function ceremonyRequestOptions(value: unknown, options?: WebAuthnCeremonyOptions): string | undefined;
+/** Allowlist projection of a registration credential. JSON text or undefined. */
+declare function ceremonyCreationResponse(value: unknown, options?: WebAuthnCeremonyOptions): string | undefined;
+/** Allowlist projection of an authentication credential. JSON text or undefined. */
+declare function ceremonyAssertionResponse(value: unknown, options?: WebAuthnCeremonyOptions): string | undefined;
+
 /**
  * Create a tracker and make it the default for all package-level helpers.
  * Each call replaces the default. For multiple projects, retain the returned instances and call
@@ -4032,4 +4094,4 @@ declare function telemetry(level: TelemetryLevel, message: string): void;
 /** Destroy the default tracker (see {@link CorbadoTrackerCore.destroy}) and clear the default. */
 declare function destroy(): Promise<void>;
 
-export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_CACHE_STORAGE_KEY, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type ConfigCacheRecord, type Conversion, CookieStorage, type CookieStorageOptions, CorbadoTracker, CorbadoTrackerCore, type CreateLoggerOptions, type CrossOriginSessionConfig, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventTimeStamp, type EventType, type FixedDataConfig, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type FormOperationConfig, FormOperationFull, type HandoffStepHelper, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyDeletionDeletionTypedError, type PasskeyDeletionOperationConfig, PasskeyDeletionOperationFull, type PasskeyDeletionUserConfirmationTypedError, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, ProbeLane, type ProbePending, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, READER_CATEGORIES, READER_EXPOSURES, type RawErrorEnvelope, type RawErrorSerializer, type ReaderCategory, type ReaderDataConfigKey, type ReaderExposure, type ReaderField, type ReaderMeta, type ReaderOrigin, type ReaderStorage, type ReaderTransform, RequestQueue, type ResolvedFixedDataConfig, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkInputHandoff, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SdkWebAuthnError, type SdkWebAuthnPayload, type SerializeRawErrorOptions, type SessionBridge, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginEntry, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathPolicy, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StandaloneDeviceInfoSource, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerCoreOptions, type TrackerOptions, type TrackerPlugin, type TrackerStorageEngine, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, type WithHandoffs, appConfirmationOperationFull, authDecisionFinished, authDecisionStarted, cacheConfigRecord, captchaOperationFull, clearExperiment, clearExperiments, continueEmailLinkOperation, conversion, cookieStorage, createLogger, crossOriginSession, destroy, detectPasswordManagerExtensions, emailLinkOperationFull, emailOtpOperationFull, eventTime, fixedSourcePath, formOperationFull, getCrossOriginContext, getExperiments, getSessionId, getTracker, getTrackerCore, init, initCore, installProbeLane, keyRegistrationOperationFull, keySigningOperationFull, loadCachedConfig, loadConfigRecord, logError, logInfo, maskedSourcePath, namespacedKey, parseReliabilityConfig, passkeyDeletionOperationFull, passkeyEnrollmentFullOperation, passkeyLoginFullOperation, passwordEnrollmentFullOperation, passwordLoginFullOperation, probe, probes, provideDataOperationFull, provideIdentifierOperationFull, rawErrors, resetSession, resolveFixedDataConfig, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setCrossOriginContext, setExperiment, setExperiments, setFlowTags, setUser, smsOtpOperationFull, socialLoginOperationFull, ssoLoginOperationFull, telemetry, totpOperationFull, trackSubflowError, trustedDeviceCheckOperationFull, trustedDeviceEnrollmentOperationFull, utf8Length };
+export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_CACHE_STORAGE_KEY, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type ConfigCacheRecord, type Conversion, CookieStorage, type CookieStorageOptions, CorbadoTracker, CorbadoTrackerCore, type CreateLoggerOptions, type CrossOriginSessionConfig, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventTimeStamp, type EventType, type FixedDataConfig, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type FormOperationConfig, FormOperationFull, type HandoffStepHelper, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_MAX_AGE_MS, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyDeletionDeletionTypedError, type PasskeyDeletionOperationConfig, PasskeyDeletionOperationFull, type PasskeyDeletionUserConfirmationTypedError, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, ProbeLane, type ProbePending, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, READER_CATEGORIES, READER_EXPOSURES, type RawErrorEnvelope, type RawErrorSerializer, type ReaderCategory, type ReaderDataConfigKey, type ReaderExposure, type ReaderField, type ReaderMeta, type ReaderOrigin, type ReaderStorage, type ReaderTransform, RequestQueue, type ResolvedFixedDataConfig, SDK_NAME, SDK_VERSION, STATIC_CONFIG_VERSION, type SdkInfo, type SdkInputHandoff, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SdkWebAuthnError, type SdkWebAuthnPayload, type SerializeRawErrorOptions, type SessionBridge, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginEntry, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathPolicy, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StandaloneDeviceInfoSource, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerCoreOptions, type TrackerOptions, type TrackerPlugin, type TrackerStorageEngine, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnCeremonyOptions, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, type WithHandoffs, appConfirmationOperationFull, authDecisionFinished, authDecisionStarted, cacheConfigRecord, captchaOperationFull, ceremonyAssertionResponse, ceremonyCreationOptions, ceremonyCreationResponse, ceremonyRequestOptions, clearExperiment, clearExperiments, continueEmailLinkOperation, conversion, cookieStorage, createLogger, crossOriginSession, destroy, detectPasswordManagerExtensions, deviceHandleMaxAge, emailLinkOperationFull, emailOtpOperationFull, eventTime, fixedSourcePath, formOperationFull, getCrossOriginContext, getExperiments, getSessionId, getTracker, getTrackerCore, init, initCore, installProbeLane, keyRegistrationOperationFull, keySigningOperationFull, loadCachedConfig, loadConfigRecord, logError, logInfo, maskedSourcePath, namespacedKey, outboxEntryTime, parseReliabilityConfig, passkeyDeletionOperationFull, passkeyEnrollmentFullOperation, passkeyLoginFullOperation, passwordEnrollmentFullOperation, passwordLoginFullOperation, probe, probes, provideDataOperationFull, provideIdentifierOperationFull, rawErrors, resetSession, resolveFixedDataConfig, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setCrossOriginContext, setExperiment, setExperiments, setFlowTags, setUser, smsOtpOperationFull, socialLoginOperationFull, ssoLoginOperationFull, staticReliabilityConfig, telemetry, totpOperationFull, trackSubflowError, trustedDeviceCheckOperationFull, trustedDeviceEnrollmentOperationFull, utf8Length };