@corbado/observe 1.15.0 → 1.15.2

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @corbado/observe
 
+## 1.15.2
+
+### Patch Changes
+
+- fe724d3: Restore detection of Kaspersky's Chrome extension after version 26.1 removed its page-global flag. Recognize its WebAuthn wrapper by reading its source without invoking it; collected data and detector side effects are unchanged.
+
+## 1.15.1
+
+### Patch Changes
+
+- a2cb17d: Collection manifest v2 descriptors (tools-only subpaths `@corbado/observe/manifest`, `@corbado/autocapture/manifest`;
+  data only, nothing changes in the bundles):
+  - Contract (additive, optional): `Conditional` (`when`, now also `"!<switch>"`; `requires` = never-ship item id) on
+    side effects, gateway fields, generated and stored entries; `SideEffect`; stored `deleteOnly`, `note` and
+    `otherwise` (`StoredVariant`: what the entry becomes when its `when` does not hold).
+  - Side effects: `ac:request@1` wraps fetch and XMLHttpRequest; `ac:ceremony@1` wraps navigator.credentials (proxy
+    with `aap`); `sdk:input@1` / `ac:element@1` watch the document for added elements.
+  - Own storage: the private-mode library's temporary test storage is no longer a stored entry (only the
+    `sdk:private-mode@1` side effect); config cache `when: "!static"` (absent from static-config builds); legacy debug keys
+    `deleteOnly` (project-scoped keys); low outbox `when: "durableLowOutbox"` with a not-written variant; cross-origin
+    session cookie and email-link starts carry `requires`.
+  - Texts: password managers ("whether the person is signed in to them", "behavior"), transport IP address and
+    client hints.
+
 ## 1.15.0
 
 ### Minor Changes

package/dist/analysis/readers/password-manager-extensions.mjs

@@ -2,6 +2,7 @@
 var ONEPASSWORD_SCRIPT = "/inline/injected/webauthn-listeners.js";
 var DASHLANE_STACK = /\/dashlane-(?:shadow-dom|top-layer)-page-script\.js/;
 var KASPERSKY_SCRIPT = /-extension:\/\/[^/]+\/content-scripts\/passkey_proxy\/index\.js$/;
+var KASPERSKY_SOURCE = /\bPromise\.all\s*\(\s*\[[\s\S]*?\.getIsPasskeyAvailable\s*\(/;
 var KEEPER_STACK = /-extension:\/\/[^/]+\/content_scripts\/shadow-dom\/shadowAttachNotifier\.js:/;
 var NORDPASS_STACK = /-extension:\/\/[^/]+\/js\/nordpass-script\.js:/;
 var NORDPASS_PASSKEYS_KEY = /-extension:\/\/[^/]+\/js\/passkeys\.js:/;
@@ -101,6 +102,14 @@ var hasKeeperOverride = () => {
   ];
   return methods.some((m) => typeof m === "function" && KEEPER_SOURCE.test(Function.prototype.toString.call(m)));
 };
+var hasKasperskyOverride = () => {
+  const credential = typeof PublicKeyCredential === "undefined" ? void 0 : PublicKeyCredential;
+  const methods = [
+    credential?.isUserVerifyingPlatformAuthenticatorAvailable,
+    credential?._isUserVerifyingPlatformAuthenticatorAvailable
+  ];
+  return methods.some((m) => typeof m === "function" && KASPERSKY_SOURCE.test(Function.prototype.toString.call(m)));
+};
 var hasLastPassRoot = () => {
   let root = document;
   while (root) {
@@ -158,7 +167,7 @@ var PROBES = [
   {
     name: "kaspersky",
     signal: "passkey proxy flag",
-    // Set in every https frame at document_start, with or without its desktop app.
+    // Older builds set this at document_start in https frames, with or without the desktop app.
     test: () => window.wasKPMKeyPassProxyInited === true
   },
   {
@@ -169,6 +178,7 @@ var PROBES = [
       document.querySelector('script[src*="/content-scripts/passkey_proxy/"]')?.src ?? ""
     )
   },
+  { name: "kaspersky", signal: "WebAuthn override source", test: hasKasperskyOverride },
   {
     name: "keeper",
     signal: "attachShadow stack",

package/dist/analysis/version.mjs

@@ -1,6 +1,6 @@
 // src/version.ts
 var SDK_NAME = "@corbado/observe";
-var SDK_VERSION = true ? "1.15.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "1.15.2" : "0.0.0-dev";
 export {
   SDK_NAME,
   SDK_VERSION