@corbado/observe 1.3.0 → 1.5.0

package/dist/index.d.mts

@@ -50,7 +50,7 @@ type SetFlowTagsOptions = {
     expandToFollowing?: boolean;
 };
 type ProvideIdentifierSpecType = "email" | "phone" | "username";
-type SocialLoginProviderType = "google" | "apple" | "facebook" | "github" | "microsoft" | "line" | "kakao" | "singpass" | "other";
+type SocialLoginProviderType = "google" | "apple" | "facebook" | "github" | "microsoft" | "line" | "kakao" | "singpass" | "naver" | "yahoo" | "other";
 declare enum AuthEventName {
     FlowStarted = "flow_started",
     FlowDecided = "flow_decided",
@@ -307,6 +307,52 @@ interface TelemetryEntry {
     /** Capture time, unix ms. */
     ts: number;
 }
+/**
+ * Context stamped on a probe item: the integration's current state / flow type / step (each ≤ 64 chars).
+ *
+ * @experimental Internal: used by Corbado autocapture bundles. Not part of the documented API.
+ */
+interface ProbeContext {
+    state?: string;
+    flowType?: string;
+    step?: string;
+}
+/**
+ * Input of {@link CorbadoTracker.probe}.
+ *
+ * @experimental Internal: used by Corbado autocapture bundles. Not part of the documented API.
+ */
+interface ProbeInput {
+    /** Item kind, `^[a-z][a-z0-9_-]{0,31}$` (e.g. `ui`, `act`, `net`, `page`, `snapshot`). */
+    kind: string;
+    /** Already redacted JSON object or array; serialized ≤ 16384 bytes, larger items are dropped. */
+    payload: Record<string, unknown> | unknown[];
+    /** `^[A-Za-z0-9_-]{1,16}$`; defaults to one random id per tracker instance (page). */
+    pageId?: string;
+    /** Probe config hash, `^[A-Za-z0-9_-]{1,16}$`. */
+    cfg?: string;
+    ctx?: ProbeContext;
+    /** Capture time, unix ms; defaults to now. */
+    ts?: number;
+}
+/**
+ * A probe item on the wire (`probes` array of the events endpoint payload).
+ *
+ * @experimental Internal: used by Corbado autocapture bundles. Not part of the documented API.
+ */
+interface ProbeEntry {
+    /** Client-generated idempotency id (uuidv7); kept across retries. */
+    id: string;
+    kind: string;
+    /** Capture time, unix ms. */
+    ts: number;
+    pageId: string;
+    /** Per `pageId`, starting at 0; gaps mean loss. */
+    seq: number;
+    cfg?: string;
+    ctx?: ProbeContext;
+    payload: Record<string, unknown> | unknown[];
+}
 /**
  * Why a delivery attempt happened. Each value maps 1:1 to one flush trigger, so server-side
  * analyses can tell which triggers actually carry the traffic and whether the trigger switches and
@@ -370,6 +416,8 @@ interface EventBatch {
     sdk: SdkInfo;
     lows?: LowEvent[];
     telemetry?: TelemetryEntry[];
+    /** Probe items (internal diagnostics captured by autocapture bundles); a batch may carry probes only. */
+    probes?: ProbeEntry[];
     meta?: EventBatchMeta;
 }
 type DeviceType = "web" | "app" | "other";
@@ -512,20 +560,17 @@ interface SdkReliabilityConfig {
      */
     flushOnFlowTypeFinished: FlowType[];
     /**
-     * Per-field timeout for device info collection, in milliseconds. A field whose browser API does
-     * not answer within this budget is recorded as a `TimeoutError` in `collectionErrors` and left
-     * undefined; the remaining fields are unaffected. Defaults to 1000ms.
-     *
-     * Read at collection time, so a config that arrives mid-load applies from the next device info
-     * refresh onward. The very first collection of a load booting on the built-in defaults (nothing
-     * cached) always runs on the default.
+     * @deprecated No effect since device info is collected with built-in deadlines (a fast snapshot
+     * within 300 ms, slower fields as a later update within 3000 ms). Still parsed so older server
+     * configs keep loading; the backend keeps serving it for older SDK versions.
      */
     deviceInfoCollectorTimeoutMs: number;
     /**
-     * When true (and `telemetry` is enabled), every device info collection emits an `info` telemetry
-     * entry with the total duration and the per-field durations in milliseconds. Defaults to false:
-     * this is a diagnostic stream to switch on while investigating slow collection, not something to
-     * run permanently.
+     * When true (and `telemetry` is enabled), device info collection emits `info` telemetry entries:
+     * the fast snapshot's total and per-field durations in milliseconds, the late fields' outcome, the
+     * `privateMode` source (cache age, detection duration or timeout) and how the update was delivered
+     * (or that it was left undelivered at pagehide / destroy). Defaults to false: this is a diagnostic
+     * stream to switch on while investigating slow collection, not something to run permanently.
      */
     deviceInfoTiming: boolean;
     /** Serialize explicitly supplied raw error diagnostics. Defaults to true; refreshes apply to subsequent errors. Already queued events are unchanged. */
@@ -1541,10 +1586,9 @@ interface TrackerOptions {
     /** Minimum time between attaching cached device info to events. */
     deviceInfoDebounceTime?: number;
     /**
-     * @deprecated The device info collection timeout is server-controlled via the SDK reliability
-     * config (`deviceInfoCollectorTimeoutMs`). This option only applies as long as no server config
-     * has been received (i.e. before the first config response is cached); once a server config is
-     * cached it wins. It will be removed in a future release.
+     * @deprecated No effect: device info is collected with built-in deadlines (a fast snapshot within
+     * 300 ms, slower fields as a later update within 3000 ms). Still accepted so existing integrations
+     * keep compiling. It will be removed in a future release.
      */
     deviceInfoCollectorTimeout?: number;
     defaultTags?: Record<string, string>;
@@ -1615,6 +1659,9 @@ declare class CorbadoTracker {
     private telemetryReady;
     private readonly reportedTelemetryKeys;
     private pendingSelfTelemetry;
+    /** Default probe page id (one per tracker instance) and the probe seq counter per page id. */
+    private probePageId?;
+    private readonly probeSeqs;
     private windowObserver?;
     private passwordManagerSampler?;
     /** @internal Shared passive page observation and per-operation context registration. */
@@ -2024,10 +2071,36 @@ declare class CorbadoTracker {
      * PII — telemetry is for diagnostics only. Like all SDK entry points, this never throws.
      */
     telemetry(level: TelemetryLevel, message: string): void;
+    /**
+     * Queue a probe item (diagnostic capture produced by a Corbado autocapture bundle).
+     *
+     * @remarks
+     * The SDK fills `id` (uuidv7), `seq` (per `pageId`), `pageId` (default: one random id per tracker
+     * instance) and `ts` (default: now). Items are held in memory only (never the durable outbox) and
+     * ride the regular batches; they are the lowest priority at page unload. Invalid input is dropped.
+     * The payload must already be redacted. Blocked user agents are skipped. Never throws.
+     *
+     * @experimental Internal: used by Corbado autocapture bundles. Not part of the documented API.
+     * @internal
+     */
+    probe(input: ProbeInput): void;
+    private defaultProbePageId;
+    private nextProbeSeq;
     /** Convenience wrapper for {@link CorbadoTracker.telemetry} at `info` level. */
     logInfo(message: string): void;
     /** Convenience wrapper for {@link CorbadoTracker.telemetry} at `error` level. */
     logError(message: string): void;
+    /**
+     * Queue hook run right before an event batch is sent: a device info snapshot that no event carried
+     * yet (typically the fast snapshot after a burst of events at page load, or the privateMode update)
+     * rides the first event of this page in the batch that has none. Events of other pages (outbox
+     * replays) are never touched, and nothing is sent just for device info. When the page goes away
+     * with a snapshot nothing could carry, that is reported (timing diagnostics only).
+     *
+     * Error situations:
+     *  - Any error: log "Failed to attach device info to batch" and send the batch unchanged
+     */
+    private attachUndeliveredDeviceInfo;
     /**
      * Escalate an internal SDK diagnostic to the telemetry stream (self-instrumentation). This is the
      * sink behind {@link Logger.reportTelemetry}; chosen internal failure sites route here so faults
@@ -2270,6 +2343,23 @@ interface TransportOptions {
     headers?: Record<string, string>;
 }
 
+/** In-memory probe queue caps (oldest items are dropped beyond them). */
+declare const PROBE_QUEUE_MAX_ITEMS = 500;
+declare const PROBE_QUEUE_MAX_BYTES: number;
+/** Per-request probe caps (the server keeps at most 200 probe items per batch). */
+declare const PROBE_BATCH_MAX_ITEMS = 200;
+declare const PROBE_BATCH_MAX_BYTES: number;
+/** Serialized payload cap per probe item (server rule). */
+declare const PROBE_PAYLOAD_MAX_BYTES: number;
+/**
+ * Unload request budget shared by the event beacon and the probe beacon that follows it: unload
+ * transports share a ~64 KB in-flight budget per page (same limit as the fetch keepalive cap).
+ */
+declare const UNLOAD_BUDGET_BYTES = 60000;
+/** Absolute cap of the probe request at pagehide / destroy. */
+declare const UNLOAD_PROBE_MAX_BYTES = 32000;
+/** UTF-8 byte length of a string (no TextEncoder dependency). */
+declare function utf8Length(text: string): number;
 interface QueueOptions {
     /**
      * Maximum number of events per request (payload cap). A backlog larger than this is drained in
@@ -2299,6 +2389,14 @@ interface QueueOptions {
      * none has ever been set. Read at send time so a change applies to the next batch without a flush.
      */
     getDataPolicy?: () => number | undefined;
+    /**
+     * Called with the events of every event batch right before it is sent (async and unload flushes),
+     * before the batch's telemetry is taken. The tracker uses it to attach a device info snapshot that
+     * no event carried yet to an event of the current page. It may mutate the events; the in-memory
+     * pending entries share them, so a retry on this page keeps the change. Never called for batches
+     * without events.
+     */
+    beforeEventBatchSend?: (events: Event[], reason: FlushReason) => void;
 }
 /**
  * @remarks When `window` is defined, `visibilitychange` (when the document becomes hidden) and `pagehide`
@@ -2335,6 +2433,16 @@ declare class RequestQueue {
      * the flush timer (it piggybacks), unless `config.flushOnTelemetry` escalates to an immediate flush.
      */
     private telemetryQueue;
+    /**
+     * Probe items (`tracker.probe()`): in memory only — never the durable outbox — capped by
+     * {@link PROBE_QUEUE_MAX_ITEMS} / {@link PROBE_QUEUE_MAX_BYTES}. They arm the flush timer, ride
+     * the regular batches (probe-only batches allowed), retry under `config.retry`, and are the lowest
+     * priority at unload (a separate request after the event request, within the remaining budget).
+     */
+    private probeQueue;
+    private probeBytes;
+    /** Probe items dropped on this load (caps, permanent rejection, exhausted retries, unload budget). */
+    private probesDropped;
     private timer;
     private isFlushing;
     private flushingDone?;
@@ -2353,6 +2461,7 @@ declare class RequestQueue {
     private readonly requestConfig;
     private readonly onConfigReceived?;
     private readonly getDataPolicy?;
+    private readonly beforeEventBatchSend?;
     /** Current delivery policy, including live updates. */
     private config;
     /**
@@ -2395,6 +2504,30 @@ declare class RequestQueue {
      *  - Any error while enqueueing or triggering the flush: log "Failed to enqueue telemetry"
      */
     enqueueTelemetry(entry: TelemetryEntry): void;
+    /**
+     * Queue a probe item (in memory only). The payload is snapshotted (serialized once) so later host
+     * mutations cannot change it; items over {@link PROBE_PAYLOAD_MAX_BYTES} are dropped, and the
+     * oldest items are dropped beyond the queue caps. Arms the normal flush timer.
+     *
+     * Error situations:
+     *  - Any error while enqueueing or scheduling the flush timer: log "Failed to enqueue probe"
+     */
+    enqueueProbe(entry: ProbeEntry, capturedSessionId?: string): void;
+    /** Number of probe items dropped on this load (diagnostics / tests). */
+    droppedProbeCount(): number;
+    private dueProbes;
+    /** Oldest-first selection for one session, within an item and byte cap (at least one item when any fits the item cap). */
+    private selectProbes;
+    private removeProbes;
+    private dropProbes;
+    /** Same policy as events: 2xx delivered, non-retryable dropped, retryable backed off up to `config.retry.maxAttempts`. */
+    private handleProbeSendResult;
+    /**
+     * Unload / final teardown: one probe-only request for the current session within `budget` bytes,
+     * sent after the event request so the events' delivery is unaffected. Leftovers are dropped when
+     * `dropRest` (pagehide, destroy); otherwise they stay queued.
+     */
+    private sendUnloadProbes;
     private scheduleAfterEnqueue;
     /**
      * Whether this event completes one of the configured priority flow types. Only the two flow
@@ -2428,6 +2561,8 @@ declare class RequestQueue {
      * The transport later merges in `sent`/`transport`.
      */
     private attachBatchMeta;
+    /** Run the beforeEventBatchSend hook; a throwing hook must never break a flush. */
+    private prepareEvents;
     /** The data policy code from the tracker, or undefined; a throwing getter must never break a flush. */
     private readDataPolicy;
     private getDuePending;
@@ -2481,6 +2616,10 @@ declare class RequestQueue {
      */
     flushKeepalive(reason?: FlushReason): void;
     private flushSync;
+    /** The event part of the unload flush; returns the serialized size of what it sent (0 = nothing). */
+    private flushSyncEvents;
+    /** Serialized batch size for the unload budget; on failure assume the whole budget was used. */
+    private approximateSize;
     /**
      * Error situations:
      *  - Timer clearance or event listener removal throws: log "Failed to destroy queue lifecycle hooks"
@@ -2500,9 +2639,8 @@ declare const CONFIG_REQUEST_HEADER = "X-Corbado-Observe-Config";
 declare const DEFAULT_FLUSH_INTERVAL_MS = 500;
 declare const DEFAULT_SEQ_LOCK_TIMEOUT_MS = 50;
 /**
- * Built-in per-field device info collection timeout. Also the timeout of the very first collection
- * of a load that booted without a cached config, since collection starts before the first server
- * response can arrive — generous enough that a slow-but-working browser API still answers.
+ * Default of the deprecated `deviceInfoCollectorTimeoutMs` config field. Only parsed for config
+ * compatibility: device info collection uses its own built-in deadlines (see `device.ts`).
  */
 declare const DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS = 1000;
 /**
@@ -2741,4 +2879,4 @@ declare function logInfo(message: string): void;
 declare function logError(message: string): void;
 declare function destroy(): Promise<void>;
 
-export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, type RawErrorEnvelope, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SerializeRawErrorOptions, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, detectPasswordManagerExtensions, getExperiments, getSessionId, getTracker, init, loadCachedConfig, logError, logInfo, namespacedKey, parseReliabilityConfig, resetSession, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setExperiment, setExperiments, setFlowTags, setUser, telemetry };
+export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, type RawErrorEnvelope, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SerializeRawErrorOptions, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, detectPasswordManagerExtensions, getExperiments, getSessionId, getTracker, init, loadCachedConfig, logError, logInfo, namespacedKey, parseReliabilityConfig, resetSession, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setExperiment, setExperiments, setFlowTags, setUser, telemetry, utf8Length };

package/dist/index.d.ts

@@ -50,7 +50,7 @@ type SetFlowTagsOptions = {
     expandToFollowing?: boolean;
 };
 type ProvideIdentifierSpecType = "email" | "phone" | "username";
-type SocialLoginProviderType = "google" | "apple" | "facebook" | "github" | "microsoft" | "line" | "kakao" | "singpass" | "other";
+type SocialLoginProviderType = "google" | "apple" | "facebook" | "github" | "microsoft" | "line" | "kakao" | "singpass" | "naver" | "yahoo" | "other";
 declare enum AuthEventName {
     FlowStarted = "flow_started",
     FlowDecided = "flow_decided",
@@ -307,6 +307,52 @@ interface TelemetryEntry {
     /** Capture time, unix ms. */
     ts: number;
 }
+/**
+ * Context stamped on a probe item: the integration's current state / flow type / step (each ≤ 64 chars).
+ *
+ * @experimental Internal: used by Corbado autocapture bundles. Not part of the documented API.
+ */
+interface ProbeContext {
+    state?: string;
+    flowType?: string;
+    step?: string;
+}
+/**
+ * Input of {@link CorbadoTracker.probe}.
+ *
+ * @experimental Internal: used by Corbado autocapture bundles. Not part of the documented API.
+ */
+interface ProbeInput {
+    /** Item kind, `^[a-z][a-z0-9_-]{0,31}$` (e.g. `ui`, `act`, `net`, `page`, `snapshot`). */
+    kind: string;
+    /** Already redacted JSON object or array; serialized ≤ 16384 bytes, larger items are dropped. */
+    payload: Record<string, unknown> | unknown[];
+    /** `^[A-Za-z0-9_-]{1,16}$`; defaults to one random id per tracker instance (page). */
+    pageId?: string;
+    /** Probe config hash, `^[A-Za-z0-9_-]{1,16}$`. */
+    cfg?: string;
+    ctx?: ProbeContext;
+    /** Capture time, unix ms; defaults to now. */
+    ts?: number;
+}
+/**
+ * A probe item on the wire (`probes` array of the events endpoint payload).
+ *
+ * @experimental Internal: used by Corbado autocapture bundles. Not part of the documented API.
+ */
+interface ProbeEntry {
+    /** Client-generated idempotency id (uuidv7); kept across retries. */
+    id: string;
+    kind: string;
+    /** Capture time, unix ms. */
+    ts: number;
+    pageId: string;
+    /** Per `pageId`, starting at 0; gaps mean loss. */
+    seq: number;
+    cfg?: string;
+    ctx?: ProbeContext;
+    payload: Record<string, unknown> | unknown[];
+}
 /**
  * Why a delivery attempt happened. Each value maps 1:1 to one flush trigger, so server-side
  * analyses can tell which triggers actually carry the traffic and whether the trigger switches and
@@ -370,6 +416,8 @@ interface EventBatch {
     sdk: SdkInfo;
     lows?: LowEvent[];
     telemetry?: TelemetryEntry[];
+    /** Probe items (internal diagnostics captured by autocapture bundles); a batch may carry probes only. */
+    probes?: ProbeEntry[];
     meta?: EventBatchMeta;
 }
 type DeviceType = "web" | "app" | "other";
@@ -512,20 +560,17 @@ interface SdkReliabilityConfig {
      */
     flushOnFlowTypeFinished: FlowType[];
     /**
-     * Per-field timeout for device info collection, in milliseconds. A field whose browser API does
-     * not answer within this budget is recorded as a `TimeoutError` in `collectionErrors` and left
-     * undefined; the remaining fields are unaffected. Defaults to 1000ms.
-     *
-     * Read at collection time, so a config that arrives mid-load applies from the next device info
-     * refresh onward. The very first collection of a load booting on the built-in defaults (nothing
-     * cached) always runs on the default.
+     * @deprecated No effect since device info is collected with built-in deadlines (a fast snapshot
+     * within 300 ms, slower fields as a later update within 3000 ms). Still parsed so older server
+     * configs keep loading; the backend keeps serving it for older SDK versions.
      */
     deviceInfoCollectorTimeoutMs: number;
     /**
-     * When true (and `telemetry` is enabled), every device info collection emits an `info` telemetry
-     * entry with the total duration and the per-field durations in milliseconds. Defaults to false:
-     * this is a diagnostic stream to switch on while investigating slow collection, not something to
-     * run permanently.
+     * When true (and `telemetry` is enabled), device info collection emits `info` telemetry entries:
+     * the fast snapshot's total and per-field durations in milliseconds, the late fields' outcome, the
+     * `privateMode` source (cache age, detection duration or timeout) and how the update was delivered
+     * (or that it was left undelivered at pagehide / destroy). Defaults to false: this is a diagnostic
+     * stream to switch on while investigating slow collection, not something to run permanently.
      */
     deviceInfoTiming: boolean;
     /** Serialize explicitly supplied raw error diagnostics. Defaults to true; refreshes apply to subsequent errors. Already queued events are unchanged. */
@@ -1541,10 +1586,9 @@ interface TrackerOptions {
     /** Minimum time between attaching cached device info to events. */
     deviceInfoDebounceTime?: number;
     /**
-     * @deprecated The device info collection timeout is server-controlled via the SDK reliability
-     * config (`deviceInfoCollectorTimeoutMs`). This option only applies as long as no server config
-     * has been received (i.e. before the first config response is cached); once a server config is
-     * cached it wins. It will be removed in a future release.
+     * @deprecated No effect: device info is collected with built-in deadlines (a fast snapshot within
+     * 300 ms, slower fields as a later update within 3000 ms). Still accepted so existing integrations
+     * keep compiling. It will be removed in a future release.
      */
     deviceInfoCollectorTimeout?: number;
     defaultTags?: Record<string, string>;
@@ -1615,6 +1659,9 @@ declare class CorbadoTracker {
     private telemetryReady;
     private readonly reportedTelemetryKeys;
     private pendingSelfTelemetry;
+    /** Default probe page id (one per tracker instance) and the probe seq counter per page id. */
+    private probePageId?;
+    private readonly probeSeqs;
     private windowObserver?;
     private passwordManagerSampler?;
     /** @internal Shared passive page observation and per-operation context registration. */
@@ -2024,10 +2071,36 @@ declare class CorbadoTracker {
      * PII — telemetry is for diagnostics only. Like all SDK entry points, this never throws.
      */
     telemetry(level: TelemetryLevel, message: string): void;
+    /**
+     * Queue a probe item (diagnostic capture produced by a Corbado autocapture bundle).
+     *
+     * @remarks
+     * The SDK fills `id` (uuidv7), `seq` (per `pageId`), `pageId` (default: one random id per tracker
+     * instance) and `ts` (default: now). Items are held in memory only (never the durable outbox) and
+     * ride the regular batches; they are the lowest priority at page unload. Invalid input is dropped.
+     * The payload must already be redacted. Blocked user agents are skipped. Never throws.
+     *
+     * @experimental Internal: used by Corbado autocapture bundles. Not part of the documented API.
+     * @internal
+     */
+    probe(input: ProbeInput): void;
+    private defaultProbePageId;
+    private nextProbeSeq;
     /** Convenience wrapper for {@link CorbadoTracker.telemetry} at `info` level. */
     logInfo(message: string): void;
     /** Convenience wrapper for {@link CorbadoTracker.telemetry} at `error` level. */
     logError(message: string): void;
+    /**
+     * Queue hook run right before an event batch is sent: a device info snapshot that no event carried
+     * yet (typically the fast snapshot after a burst of events at page load, or the privateMode update)
+     * rides the first event of this page in the batch that has none. Events of other pages (outbox
+     * replays) are never touched, and nothing is sent just for device info. When the page goes away
+     * with a snapshot nothing could carry, that is reported (timing diagnostics only).
+     *
+     * Error situations:
+     *  - Any error: log "Failed to attach device info to batch" and send the batch unchanged
+     */
+    private attachUndeliveredDeviceInfo;
     /**
      * Escalate an internal SDK diagnostic to the telemetry stream (self-instrumentation). This is the
      * sink behind {@link Logger.reportTelemetry}; chosen internal failure sites route here so faults
@@ -2270,6 +2343,23 @@ interface TransportOptions {
     headers?: Record<string, string>;
 }
 
+/** In-memory probe queue caps (oldest items are dropped beyond them). */
+declare const PROBE_QUEUE_MAX_ITEMS = 500;
+declare const PROBE_QUEUE_MAX_BYTES: number;
+/** Per-request probe caps (the server keeps at most 200 probe items per batch). */
+declare const PROBE_BATCH_MAX_ITEMS = 200;
+declare const PROBE_BATCH_MAX_BYTES: number;
+/** Serialized payload cap per probe item (server rule). */
+declare const PROBE_PAYLOAD_MAX_BYTES: number;
+/**
+ * Unload request budget shared by the event beacon and the probe beacon that follows it: unload
+ * transports share a ~64 KB in-flight budget per page (same limit as the fetch keepalive cap).
+ */
+declare const UNLOAD_BUDGET_BYTES = 60000;
+/** Absolute cap of the probe request at pagehide / destroy. */
+declare const UNLOAD_PROBE_MAX_BYTES = 32000;
+/** UTF-8 byte length of a string (no TextEncoder dependency). */
+declare function utf8Length(text: string): number;
 interface QueueOptions {
     /**
      * Maximum number of events per request (payload cap). A backlog larger than this is drained in
@@ -2299,6 +2389,14 @@ interface QueueOptions {
      * none has ever been set. Read at send time so a change applies to the next batch without a flush.
      */
     getDataPolicy?: () => number | undefined;
+    /**
+     * Called with the events of every event batch right before it is sent (async and unload flushes),
+     * before the batch's telemetry is taken. The tracker uses it to attach a device info snapshot that
+     * no event carried yet to an event of the current page. It may mutate the events; the in-memory
+     * pending entries share them, so a retry on this page keeps the change. Never called for batches
+     * without events.
+     */
+    beforeEventBatchSend?: (events: Event[], reason: FlushReason) => void;
 }
 /**
  * @remarks When `window` is defined, `visibilitychange` (when the document becomes hidden) and `pagehide`
@@ -2335,6 +2433,16 @@ declare class RequestQueue {
      * the flush timer (it piggybacks), unless `config.flushOnTelemetry` escalates to an immediate flush.
      */
     private telemetryQueue;
+    /**
+     * Probe items (`tracker.probe()`): in memory only — never the durable outbox — capped by
+     * {@link PROBE_QUEUE_MAX_ITEMS} / {@link PROBE_QUEUE_MAX_BYTES}. They arm the flush timer, ride
+     * the regular batches (probe-only batches allowed), retry under `config.retry`, and are the lowest
+     * priority at unload (a separate request after the event request, within the remaining budget).
+     */
+    private probeQueue;
+    private probeBytes;
+    /** Probe items dropped on this load (caps, permanent rejection, exhausted retries, unload budget). */
+    private probesDropped;
     private timer;
     private isFlushing;
     private flushingDone?;
@@ -2353,6 +2461,7 @@ declare class RequestQueue {
     private readonly requestConfig;
     private readonly onConfigReceived?;
     private readonly getDataPolicy?;
+    private readonly beforeEventBatchSend?;
     /** Current delivery policy, including live updates. */
     private config;
     /**
@@ -2395,6 +2504,30 @@ declare class RequestQueue {
      *  - Any error while enqueueing or triggering the flush: log "Failed to enqueue telemetry"
      */
     enqueueTelemetry(entry: TelemetryEntry): void;
+    /**
+     * Queue a probe item (in memory only). The payload is snapshotted (serialized once) so later host
+     * mutations cannot change it; items over {@link PROBE_PAYLOAD_MAX_BYTES} are dropped, and the
+     * oldest items are dropped beyond the queue caps. Arms the normal flush timer.
+     *
+     * Error situations:
+     *  - Any error while enqueueing or scheduling the flush timer: log "Failed to enqueue probe"
+     */
+    enqueueProbe(entry: ProbeEntry, capturedSessionId?: string): void;
+    /** Number of probe items dropped on this load (diagnostics / tests). */
+    droppedProbeCount(): number;
+    private dueProbes;
+    /** Oldest-first selection for one session, within an item and byte cap (at least one item when any fits the item cap). */
+    private selectProbes;
+    private removeProbes;
+    private dropProbes;
+    /** Same policy as events: 2xx delivered, non-retryable dropped, retryable backed off up to `config.retry.maxAttempts`. */
+    private handleProbeSendResult;
+    /**
+     * Unload / final teardown: one probe-only request for the current session within `budget` bytes,
+     * sent after the event request so the events' delivery is unaffected. Leftovers are dropped when
+     * `dropRest` (pagehide, destroy); otherwise they stay queued.
+     */
+    private sendUnloadProbes;
     private scheduleAfterEnqueue;
     /**
      * Whether this event completes one of the configured priority flow types. Only the two flow
@@ -2428,6 +2561,8 @@ declare class RequestQueue {
      * The transport later merges in `sent`/`transport`.
      */
     private attachBatchMeta;
+    /** Run the beforeEventBatchSend hook; a throwing hook must never break a flush. */
+    private prepareEvents;
     /** The data policy code from the tracker, or undefined; a throwing getter must never break a flush. */
     private readDataPolicy;
     private getDuePending;
@@ -2481,6 +2616,10 @@ declare class RequestQueue {
      */
     flushKeepalive(reason?: FlushReason): void;
     private flushSync;
+    /** The event part of the unload flush; returns the serialized size of what it sent (0 = nothing). */
+    private flushSyncEvents;
+    /** Serialized batch size for the unload budget; on failure assume the whole budget was used. */
+    private approximateSize;
     /**
      * Error situations:
      *  - Timer clearance or event listener removal throws: log "Failed to destroy queue lifecycle hooks"
@@ -2500,9 +2639,8 @@ declare const CONFIG_REQUEST_HEADER = "X-Corbado-Observe-Config";
 declare const DEFAULT_FLUSH_INTERVAL_MS = 500;
 declare const DEFAULT_SEQ_LOCK_TIMEOUT_MS = 50;
 /**
- * Built-in per-field device info collection timeout. Also the timeout of the very first collection
- * of a load that booted without a cached config, since collection starts before the first server
- * response can arrive — generous enough that a slow-but-working browser API still answers.
+ * Default of the deprecated `deviceInfoCollectorTimeoutMs` config field. Only parsed for config
+ * compatibility: device info collection uses its own built-in deadlines (see `device.ts`).
  */
 declare const DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS = 1000;
 /**
@@ -2741,4 +2879,4 @@ declare function logInfo(message: string): void;
 declare function logError(message: string): void;
 declare function destroy(): Promise<void>;
 
-export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, type RawErrorEnvelope, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SerializeRawErrorOptions, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, detectPasswordManagerExtensions, getExperiments, getSessionId, getTracker, init, loadCachedConfig, logError, logInfo, namespacedKey, parseReliabilityConfig, resetSession, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setExperiment, setExperiments, setFlowTags, setUser, telemetry };
+export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, type RawErrorEnvelope, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SerializeRawErrorOptions, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, detectPasswordManagerExtensions, getExperiments, getSessionId, getTracker, init, loadCachedConfig, logError, logInfo, namespacedKey, parseReliabilityConfig, resetSession, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setExperiment, setExperiments, setFlowTags, setUser, telemetry, utf8Length };