@corbado/observe 1.7.2 → 1.9.0

package/dist/index.d.ts

@@ -1,3 +1,90 @@
+/**
+ * Reader metadata: the declaration every browser read in `src/readers/**` carries.
+ *
+ * Readers are the only SDK modules meant to touch browser globals (navigator, document, window,
+ * storage, ...). Each reader call takes a literal {@link ReaderMeta} object naming the collection
+ * item it produces, the fields it collects and their exposure. The metadata has no runtime effect;
+ * a static analysis of an (unminified) bundle reads the literals at the reachable call sites to
+ * derive the collection manifest of a build, so a call removed by dead-code elimination also
+ * removes its item from the manifest.
+ *
+ * Vocabulary follows the collection manifest data model v1 (`corbado.collection/v1`). Call sites with the
+ * same `key` describe one item (the extractor merges them). `title`, `group` and `origin` are optional in
+ * the type (additive); every SDK call site declares them (`scripts/check-browser-globals.mjs` enforces it).
+ *
+ * @internal
+ */
+/**
+ * How much of a value is collected, ordered from least to most exposed.
+ * See {@link READER_EXPOSURES} for the order.
+ */
+type ReaderExposure = "none" | "presence" | "size" | "class" | "format" | "partial" | "enum" | "computed" | "token" | "pseudonym" | "redacted" | "raw";
+/** All exposures, least to most exposed. */
+declare const READER_EXPOSURES: readonly ReaderExposure[];
+/** Parameters of an exposure (which ones apply depends on the exposure). */
+type ReaderTransform = {
+    /** `presence`, `enum`: the possible values. */
+    values?: readonly (string | number | boolean | null)[];
+    /** `size`: bucket boundaries, when bucketed. */
+    buckets?: readonly number[];
+    /** `class`: the possible classes. */
+    classes?: readonly string[];
+    /** `format`: the kept structure. */
+    format?: string;
+    /** `partial`: which part is kept. */
+    keep?: string;
+    /** `token`: the restrictive pattern a kept value must match, and its maximum length. */
+    pattern?: string;
+    max?: number;
+    /** `pseudonym`: how the value is derived. */
+    scheme?: string;
+    /** `redacted`: the removed parts. */
+    removed?: readonly string[];
+    /** Free text, e.g. for `computed`. */
+    note?: string;
+};
+/** One collected field of a reader item. */
+type ReaderField = {
+    /** Identity within the item, e.g. `result.isPrivate` or `signals[]`. */
+    path: string;
+    exposure: ReaderExposure;
+    transform?: ReaderTransform;
+    /**
+     * Customer-readable label of the field: WHAT it is, in plain language (not why it is collected), e.g.
+     * `Operating system version`. Same rule as `title` (`customerTextProblem`); the panel shows it instead of
+     * the path. Every SDK field declares one (`scripts/check-browser-globals.mjs` enforces it).
+     */
+    label?: string;
+};
+/** Build-time data switch a reader item depends on (see `FixedDataConfig`). */
+type ReaderDataConfigKey = "pmd" | "privateMode";
+/**
+ * Where a collected value comes from: `observe-external` = the user's page or browser;
+ * `observe-internal` = written or generated by Observe itself (own `cbo_*` storage, loader globals,
+ * generated ids, own endpoints); `host-config` = provided by the customer's integration.
+ */
+type ReaderOrigin = "observe-external" | "observe-internal" | "host-config";
+/** Literal metadata passed to every reader call. */
+type ReaderMeta = {
+    /** Stable item key `<kind>:<namespace>.<name>`, e.g. `browser-api:device.webdriver`. */
+    key: string;
+    /**
+     * Customer-readable title of the item: plain language for a customer's PM or security owner, no API names,
+     * globals, config keys or code (`scripts/check-browser-globals.mjs` enforces it).
+     */
+    title?: string;
+    /** Technical detail behind the title: the browser APIs, globals, events or keys the reader touches. */
+    accessNote?: string;
+    /** Customer-facing group label (fixed per SDK reader), e.g. `Device information`. */
+    group?: string;
+    /** Where the value comes from (see {@link ReaderOrigin}). */
+    origin?: ReaderOrigin;
+    /** Fields the reader makes reachable; everything else read stays inside the reader. */
+    fields: readonly ReaderField[];
+    /** The data switch that removes this item from builds that turn it off. */
+    dataConfig?: ReaderDataConfigKey;
+};
+
 type PasswordManagerExtensionName = "1password" | "bitwarden" | "dashlane" | "kaspersky" | "keeper" | "lastpass" | "nordpass" | "protonpass";
 type PasswordManagerExtension = {
     name: PasswordManagerExtensionName;
@@ -394,6 +481,12 @@ interface EventBatchMeta {
      * receives per session (last write wins), so the SDK always sends the current value.
      */
     dataPolicy?: number;
+    /**
+     * True when the tracker runs with data-collection switches fixed by the integration
+     * (`init({ fixedDataConfig })`) or by the build (`__CBO_DATA_*__` defines), so the data-relevant
+     * fields of the server config (`pmd`) are ignored. Omitted otherwise.
+     */
+    fixedData?: boolean;
 }
 interface EventMeta {
     initiator?: LowEventInitiator;
@@ -580,7 +673,7 @@ interface SdkReliabilityConfig {
     deviceInfoTiming: boolean;
     /** Serialize explicitly supplied raw error diagnostics. Defaults to true; refreshes apply to subsequent errors. Already queued events are unchanged. */
     rawErrors: boolean;
-    /** Internal: password manager detection switch. Defaults to false. */
+    /** Internal: password manager detection switch. Defaults to true. */
     pmd: boolean;
     /**
      * How far autocapture may attach when another integration already holds the surface it
@@ -603,11 +696,47 @@ interface SdkReliabilityConfig {
     /** Retry configuration for failed event flushes. */
     retry: SdkRetryConfig;
 }
+/**
+ * Data-collection switches fixed by the integration instead of the server config (opt-in, see
+ * `TrackerOptions.fixedDataConfig`). Once given, these fields are no longer taken from the server's
+ * config or the cached `cbo_sdk_config`; a field left out resolves as documented on the field (`pmd`:
+ * off, `privateMode`: on), not from the server config.
+ *
+ * Builds can fix the same switches at build time with the esbuild/tsup defines `__CBO_DATA_PMD__` and
+ * `__CBO_DATA_PRIVATE_MODE__` (booleans), which also remove the disabled code from the bundle. A define
+ * wins over this option.
+ */
+interface FixedDataConfig {
+    /**
+     * Password-manager detection.
+     *
+     * - `true`: the extension probes (reported as {@link Event.passwordManagers}) and the DOM
+     *   password-manager scan (`pa-1`..`pa-6` lows) run.
+     * - `false`: neither runs.
+     * - omitted (with `fixedDataConfig` given): the extension probes are off (`pmd` resolves to `false`,
+     *   regardless of the built-in default, `sdkConfig.pmd` and the server config); the DOM scan keeps
+     *   today's behaviour and runs.
+     *
+     * Without `fixedDataConfig` the probes follow the server's `pmd` and the DOM scan always runs.
+     */
+    pmd?: boolean;
+    /**
+     * Private-mode detection (`deviceInfo.data.privateMode`, cached in `cbo_pm`). Defaults to true (as
+     * without `fixedDataConfig`). When false, nothing is detected, read or written for it.
+     */
+    privateMode?: boolean;
+}
 /** Query handling for `meta.trackingSourcePath`; see {@link SdkReliabilityConfig.sourcePathQuery}. */
 type SourcePathQueryMode = "all" | "allowlist";
 /** Optional init overrides; omitted fields (including nested retry fields) inherit server policy or defaults. */
-type SdkReliabilityConfigOverrides = Partial<Omit<SdkReliabilityConfig, "retry">> & {
+type SdkReliabilityConfigOverrides = Partial<Omit<SdkReliabilityConfig, "retry" | "pmd">> & {
     retry?: Partial<SdkRetryConfig>;
+    /**
+     * @deprecated use `fixedDataConfig.pmd`. Data-collection switches set by an integration belong in
+     * {@link FixedDataConfig}. Still works as before when `fixedDataConfig` is not given; when it is
+     * given, `fixedDataConfig` decides and this field is ignored.
+     */
+    pmd?: boolean;
 };
 
 /**
@@ -625,6 +754,12 @@ interface LowEventSink {
         settle(tailMs: number): void;
         destroy(): void;
     };
+    /**
+     * Whether the DOM password-manager scan (`pa-1`..`pa-6` lows) may run. Absent or true keeps the
+     * historical behaviour (always scan); false only under `fixedDataConfig` with `pmd` explicitly
+     * `false` (an omitted `pmd` keeps the scan on).
+     */
+    passwordManagerDomScan?(): boolean;
 }
 
 /**
@@ -924,9 +1059,7 @@ declare class SharedWindowObserver {
     /** Flush all registered input batches before a high-level lifecycle boundary. */
     flushInputs(): void;
     private emit;
-    private listen;
     private extendViewport;
-    private observeNavigation;
     destroy(): void;
 }
 
@@ -959,6 +1092,7 @@ declare class NamespacedStorage implements StorageEngine {
 }
 declare class LocalStorage implements StorageEngine {
     private logger;
+    private readonly area;
     constructor(logger: Logger);
     /**
      * Error situations:
@@ -984,6 +1118,7 @@ declare class LocalStorage implements StorageEngine {
 declare class CookieStorage implements StorageEngine {
     private logger;
     private domain?;
+    private readonly jar;
     constructor(logger: Logger, domain?: string | undefined);
     /**
      * Error situations:
@@ -1009,6 +1144,7 @@ declare class CookieStorage implements StorageEngine {
 }
 declare class SessionStorage implements StorageEngine {
     private logger;
+    private readonly area;
     constructor(logger: Logger);
     /**
      * Error situations:
@@ -1032,6 +1168,55 @@ declare class SessionStorage implements StorageEngine {
     removeItem(key: string): void;
 }
 
+declare const INPUT_HANDOFF: unique symbol;
+declare const WEBAUTHN_PAYLOAD_HANDOFF: unique symbol;
+declare const WEBAUTHN_ERROR_HANDOFF: unique symbol;
+/**
+ * An input element released to the SDK input tracking only (e.g. by `@corbado/autocapture`'s
+ * `dom.handoff`). Opaque: it has no readable members, so project code cannot inspect the element
+ * without a cast. Pass it straight to an `inputHtmlField` / `inputHtmlFields` /
+ * `identifierInputHtmlField` option or to `setInputFields`. At runtime it is the element itself.
+ */
+type SdkInputHandoff = {
+    readonly [INPUT_HANDOFF]: "sdk:input-tracking";
+};
+/**
+ * Sanitized WebAuthn payload JSON released to the SDK passkey operation APIs only (e.g. by
+ * `@corbado/autocapture`'s `webauthnPayload`). Opaque: it has no readable members. Pass it straight to
+ * `assertionOptions`, `assertionResponse`, `attestationOptions` or `attestationResponse`. At runtime it
+ * is the JSON string itself.
+ */
+type SdkWebAuthnPayload = {
+    readonly [WEBAUTHN_PAYLOAD_HANDOFF]: "sdk:webauthn-payload";
+};
+/**
+ * The unchanged WebAuthn ceremony rejection released to the SDK ceremony error API only (e.g. by
+ * `@corbado/autocapture`'s `webauthnError`). Opaque: it has no readable members. Pass it straight to a
+ * step's `error(error)`, which accepts any value. At runtime it is the rejection itself.
+ */
+type SdkWebAuthnError = {
+    readonly [WEBAUTHN_ERROR_HANDOFF]: "sdk:webauthn-error";
+};
+type InputHandoffKey = "inputHtmlField" | "identifierInputHtmlField";
+type InputListHandoffKey = "inputHtmlFields";
+type PayloadHandoffKey = "assertionOptions" | "assertionResponse" | "attestationOptions" | "attestationResponse";
+/**
+ * `T` with its input-element and WebAuthn payload options widened to also take the opaque handoffs.
+ * Used only by the additive handoff overloads; the original option types are unchanged.
+ */
+type WithHandoffs<T> = {
+    [K in keyof T]: K extends InputHandoffKey ? T[K] | SdkInputHandoff : K extends InputListHandoffKey ? T[K] | readonly (HTMLInputElement | SdkInputHandoff)[] : K extends PayloadHandoffKey ? T[K] | SdkWebAuthnPayload : T[K];
+};
+/**
+ * A step whose `start` / `finished` also take the opaque handoffs (additive overloads). The
+ * {@link StepHelper} signatures stay as they are and come last, so `Parameters<…>` and existing
+ * assignments to `StepHelper` resolve exactly as before.
+ */
+type HandoffStepHelper<TStart = {}, TFinished = {}, TTypedError = never> = {
+    start(data: WithHandoffs<TStart>, options?: StepOptions): void;
+    finished(data: WithHandoffs<TFinished>, options?: StepOptions): void;
+} & StepHelper<TStart, TFinished, TTypedError>;
+
 type PasskeyOperationLoginExplicitSpecType = "passkey-cui" | "passkey-known-identifier" | "passkey-no-identifier"
 /**
  * The `-auto` variants are the same two ceremonies started by the integration rather than by a
@@ -1075,9 +1260,9 @@ type PasskeyLoginOperationConfig = {
     explicitSpecType?: PasskeyOperationLoginExplicitSpecType;
 };
 declare class PasskeyLoginOperationFull extends OperationFull {
-    readonly getOptions: StepHelper<PasskeyLoginGetOptionsStart, PasskeyLoginGetOptionsFinished>;
-    readonly ceremony: StepHelper<PasskeyLoginCeremonyStart, PasskeyLoginCeremonyFinished>;
-    readonly postResponse: StepHelper<PasskeyLoginPostResponseStart>;
+    readonly getOptions: HandoffStepHelper<PasskeyLoginGetOptionsStart, PasskeyLoginGetOptionsFinished>;
+    readonly ceremony: HandoffStepHelper<PasskeyLoginCeremonyStart, PasskeyLoginCeremonyFinished>;
+    readonly postResponse: HandoffStepHelper<PasskeyLoginPostResponseStart>;
     private lowEventTracker;
     constructor(tracker: CorbadoTracker, config?: PasskeyLoginOperationConfig);
     /**
@@ -1109,7 +1294,11 @@ declare class EmailOtpOperationFull extends OperationFull {
     readonly postResponse: StepHelper<EmailOTPOperationPostResponseStart>;
     readonly resend: StepHelper;
     constructor(tracker: CorbadoTracker, config?: EmailOTPOperationConfig);
-    /** Rebind the ordered OTP group without starting a new subflow. An empty list detaches it. */
+    /**
+     * Rebind the ordered OTP group without starting a new subflow. An empty list detaches it.
+     * Also takes opaque {@link SdkInputHandoff}s (additive overload); at runtime they are the input elements.
+     */
+    setInputFields(fields: readonly (HTMLInputElement | SdkInputHandoff)[]): void;
     setInputFields(fields: readonly HTMLInputElement[]): void;
     destroy(): void;
 }
@@ -1130,7 +1319,11 @@ declare class SmsOtpOperationFull extends OperationFull {
     readonly postResponse: StepHelper<SmsOTPOperationPostResponseStart>;
     readonly resend: StepHelper;
     constructor(tracker: CorbadoTracker, config?: SmsOTPOperationConfig);
-    /** Rebind the ordered OTP group without starting a new subflow. An empty list detaches it. */
+    /**
+     * Rebind the ordered OTP group without starting a new subflow. An empty list detaches it.
+     * Also takes opaque {@link SdkInputHandoff}s (additive overload); at runtime they are the input elements.
+     */
+    setInputFields(fields: readonly (HTMLInputElement | SdkInputHandoff)[]): void;
     setInputFields(fields: readonly HTMLInputElement[]): void;
     destroy(): void;
 }
@@ -1197,6 +1390,7 @@ declare class EmailLinkContinuationOperation extends OperationFull {
     private started;
     private deferred;
     private readonly onPageHide;
+    private removePageHide?;
     constructor(tracker: CorbadoTracker, config?: EmailLinkContinuationConfig);
     /** Transaction ID of the continued email link, when known. */
     get transactionId(): string | undefined;
@@ -1267,9 +1461,9 @@ type PasskeyEnrollmentOperationConfig = {
     ignoreAsInteraction?: boolean;
 };
 declare class PasskeyEnrollmentOperationFull extends OperationFull {
-    readonly getOptions: StepHelper<PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentGetOptionsFinished>;
-    readonly ceremony: StepHelper<PasskeyEnrollmentCeremonyStart, PasskeyEnrollmentCeremonyFinished>;
-    readonly postResponse: StepHelper<PasskeyEnrollmentPostResponseStart>;
+    readonly getOptions: HandoffStepHelper<PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentGetOptionsFinished>;
+    readonly ceremony: HandoffStepHelper<PasskeyEnrollmentCeremonyStart, PasskeyEnrollmentCeremonyFinished>;
+    readonly postResponse: HandoffStepHelper<PasskeyEnrollmentPostResponseStart>;
     private lowEventTracker;
     constructor(tracker: CorbadoTracker, config?: PasskeyEnrollmentOperationConfig);
     destroy(): void;
@@ -1337,8 +1531,8 @@ declare class PasswordLoginOperationFull extends OperationFull {
      * attributed to password-login rather than a separate subflow.
      */
     readonly cui: {
-        getOptions: StepHelper<PasswordLoginCUIGetOptionsStart, PasswordLoginCUIGetOptionsFinished>;
-        ceremony: StepHelper<PasswordLoginCUICeremonyStart, PasskeyLoginCeremonyFinished, PasswordLoginCUITypedError>;
+        getOptions: HandoffStepHelper<PasswordLoginCUIGetOptionsStart, PasswordLoginCUIGetOptionsFinished>;
+        ceremony: HandoffStepHelper<PasswordLoginCUICeremonyStart, PasskeyLoginCeremonyFinished, PasswordLoginCUITypedError>;
         postResponse: StepHelper;
     };
     private lowEventTracker?;
@@ -1401,9 +1595,9 @@ declare class OperationFullProvideIdentifierWithCUI extends OperationFull {
          * @deprecated `subflow_trigger` will be removed in the next major version.
          */
         trigger: (data: SubflowTrigger, options?: StepOptions) => void;
-        getOptions: StepHelper<PasskeyLoginCUIGetOptionsStart, PasskeyLoginCUIGetOptionsFinished>;
-        ceremony: StepHelper<CUICeremonyStart, PasskeyLoginCeremonyFinished, PasskeyLoginCUITypedError>;
-        postResponse: StepHelper<PasskeyLoginPostResponseStart>;
+        getOptions: HandoffStepHelper<PasskeyLoginCUIGetOptionsStart, PasskeyLoginCUIGetOptionsFinished>;
+        ceremony: HandoffStepHelper<CUICeremonyStart, PasskeyLoginCeremonyFinished, PasskeyLoginCUITypedError>;
+        postResponse: HandoffStepHelper<PasskeyLoginPostResponseStart>;
     };
     readonly provideIdentifier: {
         /**
@@ -1483,7 +1677,11 @@ declare class TotpOperationFull extends OperationFull {
     private lowEventTracker?;
     readonly postResponse: StepHelper<TotpOperationPostResponseStart>;
     constructor(tracker: CorbadoTracker, config?: TotpOperationConfig);
-    /** Rebind the ordered code input group without starting a new subflow. An empty list detaches it. */
+    /**
+     * Rebind the ordered code input group without starting a new subflow. An empty list detaches it.
+     * Also takes opaque {@link SdkInputHandoff}s (additive overload); at runtime they are the input elements.
+     */
+    setInputFields(fields: readonly (HTMLInputElement | SdkInputHandoff)[]): void;
     setInputFields(fields: readonly HTMLInputElement[]): void;
     destroy(): void;
 }
@@ -1560,7 +1758,11 @@ declare class FormOperationFull extends OperationFull {
     readonly skip: StepHelper;
     private readonly inputBinding?;
     constructor(tracker: CorbadoTracker, config: FormOperationConfig);
-    /** Bind the fields the form shows now, without starting a new subflow. An empty list detaches all. */
+    /**
+     * Bind the fields the form shows now, without starting a new subflow. An empty list detaches all.
+     * Also takes opaque {@link SdkInputHandoff}s (additive overload); at runtime they are the input elements.
+     */
+    setInputFields(fields: readonly (HTMLInputElement | SdkInputHandoff)[]): void;
     setInputFields(fields: readonly HTMLInputElement[]): void;
     destroy(): void;
 }
@@ -1647,8 +1849,17 @@ interface TrackerOptions {
     projectId: string;
     apiBaseUrl: string;
     apiEventPath?: string;
-    /** Per-field overrides over server config and defaults. A complete policy disables remote fetching. */
+    /**
+     * Per-field overrides over server config and defaults. A complete policy disables remote fetching.
+     * Data-collection switches (`pmd`) are deprecated here: use {@link TrackerOptions.fixedDataConfig}.
+     */
     sdkConfig?: SdkReliabilityConfigOverrides;
+    /**
+     * Opt-in: fix the data-collection switches (password-manager and private-mode detection) instead of
+     * taking them from the server config or the cached `cbo_sdk_config`. Batches then carry
+     * `meta.fixedData: true`. Omitted (default): unchanged, server-driven behaviour. See {@link FixedDataConfig}.
+     */
+    fixedDataConfig?: FixedDataConfig;
     /** Config endpoint override for integrations that proxy Observe under a different path. */
     apiConfigPath?: string;
     storage?: "cookie" | "local";
@@ -1705,6 +1916,8 @@ declare class CorbadoTracker {
     private config;
     private readonly configManager?;
     private readonly configOverrides;
+    /** Resolved `fixedDataConfig`; undefined when not given (server-driven data switches). */
+    private readonly fixedData?;
     private deviceInfoManager;
     private deviceCollector;
     /**
@@ -2197,6 +2410,14 @@ declare class CorbadoTracker {
      * @internal
      */
     flushKeepalive(reason?: FlushReason): void;
+    /**
+     * Whether input trackers run the DOM password-manager scan (`pa-1`..`pa-6` lows): only an explicitly
+     * set `fixedDataConfig.pmd` decides; without `fixedDataConfig` or with `pmd` omitted it always runs
+     * (historical behaviour).
+     *
+     * @internal
+     */
+    isPasswordManagerDomScanEnabled(): boolean;
     /**
      * Keepalive flush requested by a low-event tracker's `pagehide` teardown. Gated by the
      * server-controlled trigger switch `tlf` (boot-snapshot, default true = historical behavior):
@@ -2238,7 +2459,11 @@ declare class CorbadoTracker {
      * ```
      */
     passkeyDeletionOperationFull(config?: PasskeyDeletionOperationConfig): PasskeyDeletionOperationFull;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    passwordLoginFullOperation(autoTrackConfig?: WithHandoffs<PasswordLoginConfig>): PasswordLoginOperationFull;
     passwordLoginFullOperation(autoTrackConfig?: PasswordLoginConfig): PasswordLoginOperationFull;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    passwordEnrollmentFullOperation(autoTrackConfig?: WithHandoffs<PasswordEnrollmentConfig>): PasswordEnrollmentOperationFull;
     passwordEnrollmentFullOperation(autoTrackConfig?: PasswordEnrollmentConfig): PasswordEnrollmentOperationFull;
     emailLinkOperationFull(config?: EmailLinkOperationConfig): EmailLinkOperationFull;
     /**
@@ -2247,7 +2472,11 @@ declare class CorbadoTracker {
      * the backend joins to page 1 through the transaction ID. See {@link EmailLinkContinuationOperation}.
      */
     continueEmailLinkOperation(config?: EmailLinkContinuationConfig): EmailLinkContinuationOperation;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    emailOtpOperationFull(config?: WithHandoffs<EmailOTPOperationConfig>): EmailOtpOperationFull;
     emailOtpOperationFull(config?: EmailOTPOperationConfig): EmailOtpOperationFull;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    smsOtpOperationFull(config?: WithHandoffs<SmsOTPOperationConfig>): SmsOtpOperationFull;
     smsOtpOperationFull(config?: SmsOTPOperationConfig): SmsOtpOperationFull;
     /**
      * Track a code from an authenticator app (TOTP) through its verification.
@@ -2263,9 +2492,16 @@ declare class CorbadoTracker {
      * totp.postResponse.start({});
      * totp.postResponse.finished({});
      * ```
+     *
+     * Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload).
      */
+    totpOperationFull(config?: WithHandoffs<TotpOperationConfig>): TotpOperationFull;
     totpOperationFull(config?: TotpOperationConfig): TotpOperationFull;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    provideIdentifierOperationFull(config?: WithHandoffs<OperationFullProvideIdentifierWithCUIConfig>): OperationFullProvideIdentifierWithCUI;
     provideIdentifierOperationFull(config?: OperationFullProvideIdentifierWithCUIConfig): OperationFullProvideIdentifierWithCUI;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    provideDataOperationFull(config?: WithHandoffs<ProvideDataOperationConfig>): ProvideDataOperationFull;
     provideDataOperationFull(config?: ProvideDataOperationConfig): ProvideDataOperationFull;
     /**
      * Track one form: a page, step or modal where the user provides one coherent set of data and submits
@@ -2292,7 +2528,10 @@ declare class CorbadoTracker {
      *   form.submit.error(error);
      * }
      * ```
+     *
+     * Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload).
      */
+    formOperationFull(config: WithHandoffs<FormOperationConfig>): FormOperationFull;
     formOperationFull(config: FormOperationConfig): FormOperationFull;
     /**
      * Track a social login with an external provider (e.g. Google, Apple).
@@ -2547,6 +2786,11 @@ interface QueueOptions {
      * none has ever been set. Read at send time so a change applies to the next batch without a flush.
      */
     getDataPolicy?: () => number | undefined;
+    /**
+     * Stamp `meta.fixedData: true` on every batch: the tracker's data switches are fixed by the
+     * integration or the build, so the server's data flags are ignored. Omitted (no meta field) when false.
+     */
+    fixedData?: boolean;
     /**
      * Called with the events of every event batch right before it is sent (async and unload flushes),
      * before the batch's telemetry is taken. The tracker uses it to attach a device info snapshot that
@@ -2624,12 +2868,15 @@ declare class RequestQueue {
     private dirtySinceSyncFlush;
     private onVisibilityChange;
     private onPageHide;
+    private removeVisibilityChange;
+    private removePageHide;
     private readonly batchSize;
     private readonly flushIntervalOverride?;
     private readonly debug;
     private readonly requestConfig;
     private readonly onConfigReceived?;
     private readonly getDataPolicy?;
+    private readonly fixedData;
     private readonly beforeEventBatchSend?;
     private readonly standaloneDeviceInfo?;
     /** Current delivery policy, including live updates. */
@@ -2884,6 +3131,23 @@ declare const DEFAULT_RELIABILITY_CONFIG: SdkReliabilityConfig;
 declare function parseReliabilityConfig(raw: unknown): SdkReliabilityConfig | null;
 /** Resolve init overrides over validated server policy, then defaults, including individual retry fields. */
 declare function resolveReliabilityConfig(serverConfig: SdkReliabilityConfig | undefined, overrides?: SdkReliabilityConfigOverrides): SdkReliabilityConfig;
+/** Effective fixed data switches; every field resolved. */
+type ResolvedFixedDataConfig = Required<FixedDataConfig> & {
+    /**
+     * Whether `pmd` was set explicitly (a boolean). Only an explicit `pmd` gates the DOM password-manager
+     * scan (`pa-1`..`pa-6`); an omitted `pmd` turns the extension probes off but leaves the scan on.
+     */
+    pmdExplicit: boolean;
+};
+/**
+ * Resolve `init({ fixedDataConfig })`. Returns `undefined` (not fixed: server-driven, today's behaviour)
+ * unless the option is an object. A missing or non-boolean `pmd` resolves to `false` (not the built-in
+ * default and not `sdkConfig.pmd`: a fixed config collects only what it names) with `pmdExplicit: false`;
+ * a missing or non-boolean `privateMode` resolves to on. Never throws.
+ *
+ * @internal
+ */
+declare function resolveFixedDataConfig(raw: unknown): ResolvedFixedDataConfig | undefined;
 /** Read the cached config from storage, or `null` if absent/invalid. */
 declare function loadCachedConfig(storage: StorageEngine): SdkReliabilityConfig | null;
 /** Persist the config as last-known so the next page load starts with these features enabled. */
@@ -3062,4 +3326,4 @@ declare function logInfo(message: string): void;
 declare function logError(message: string): void;
 declare function destroy(): Promise<void>;
 
-export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type FormOperationConfig, FormOperationFull, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyDeletionDeletionTypedError, type PasskeyDeletionOperationConfig, PasskeyDeletionOperationFull, type PasskeyDeletionUserConfirmationTypedError, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, type RawErrorEnvelope, RequestQueue, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SerializeRawErrorOptions, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginEntry, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StandaloneDeviceInfoSource, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, detectPasswordManagerExtensions, getExperiments, getSessionId, getTracker, init, loadCachedConfig, logError, logInfo, namespacedKey, parseReliabilityConfig, resetSession, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setExperiment, setExperiments, setFlowTags, setUser, telemetry, utf8Length };
+export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FixedDataConfig, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type FormOperationConfig, FormOperationFull, type HandoffStepHelper, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyDeletionDeletionTypedError, type PasskeyDeletionOperationConfig, PasskeyDeletionOperationFull, type PasskeyDeletionUserConfirmationTypedError, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, READER_EXPOSURES, type RawErrorEnvelope, type ReaderDataConfigKey, type ReaderExposure, type ReaderField, type ReaderMeta, type ReaderOrigin, type ReaderTransform, RequestQueue, type ResolvedFixedDataConfig, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkInputHandoff, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SdkWebAuthnError, type SdkWebAuthnPayload, type SerializeRawErrorOptions, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginEntry, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StandaloneDeviceInfoSource, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, type WithHandoffs, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, detectPasswordManagerExtensions, getExperiments, getSessionId, getTracker, init, loadCachedConfig, logError, logInfo, namespacedKey, parseReliabilityConfig, resetSession, resolveFixedDataConfig, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setExperiment, setExperiments, setFlowTags, setUser, telemetry, utf8Length };