@corbado/observe 1.8.0 → 1.9.0

package/dist/analysis/utils/email-link-operation-full.mjs

@@ -2,6 +2,7 @@
 import { v7 as uuidv7 } from "uuid";
 import { OperationFull } from "./operation-full.mjs";
 import { findEmailLinkStart, markEmailLinkContinued, rememberEmailLinkStart } from "./email-link-continuity.mjs";
+import { listenWindow } from "../readers/page.mjs";
 var EmailLinkOperationFull = class extends OperationFull {
   send;
   postResponse;
@@ -42,6 +43,7 @@ var EmailLinkContinuationOperation = class extends OperationFull {
   started = false;
   deferred = [];
   onPageHide = () => this.flush();
+  removePageHide;
   constructor(tracker, config = {}) {
     super(tracker, "email-link");
     this.continuationTracker = tracker;
@@ -65,7 +67,25 @@ var EmailLinkContinuationOperation = class extends OperationFull {
     if (this.transaction) {
       this.startDetached(this.createdAt);
     } else if (typeof window !== "undefined") {
-      window.addEventListener("pagehide", this.onPageHide);
+      this.removePageHide = listenWindow(
+        {
+          key: "page:lifecycle.pagehide",
+          title: "Leaving the page",
+          accessNote: "pagehide event on window",
+          group: "Page lifecycle",
+          origin: "observe-external",
+          fields: [
+            {
+              path: "event.pagehide",
+              label: "Leaving the page",
+              exposure: "presence",
+              transform: { note: "flushes a detached email-link continuation on unload" }
+            }
+          ]
+        },
+        "pagehide",
+        this.onPageHide
+      );
     }
   }
   /** Transaction ID of the continued email link, when known. */
@@ -113,7 +133,7 @@ var EmailLinkContinuationOperation = class extends OperationFull {
     }
   }
   removePageHideListener() {
-    if (typeof window !== "undefined") window.removeEventListener("pagehide", this.onPageHide);
+    if (typeof window !== "undefined") this.removePageHide?.();
   }
   /** Defer step calls until the detached start is emitted; mark the continued link on completion. */
   deferrable(step, completesLink = false) {

package/dist/analysis/utils/email-otp-operation-full.mjs

@@ -26,7 +26,6 @@ var EmailOtpOperationFull = class extends OperationFull {
     }
     this.registerLowFlusher(() => this.lowEventTracker?.flushPending());
   }
-  /** Rebind the ordered OTP group without starting a new subflow. An empty list detaches it. */
   setInputFields(fields) {
     this.lowEventTracker?.setFields(fields);
   }

package/dist/analysis/utils/form-operation-full.mjs

@@ -22,7 +22,6 @@ var FormOperationFull = class extends OperationFull {
     this.registerLowFlusher(() => this.inputBinding?.flushPending());
     if (config?.inputHtmlFields?.length) this.setInputFields(config.inputHtmlFields);
   }
-  /** Bind the fields the form shows now, without starting a new subflow. An empty list detaches all. */
   setInputFields(fields) {
     this.inputBinding?.setFields(fields);
   }

package/dist/analysis/utils/operation-full-provide-identifier-with-cui.mjs

@@ -1,6 +1,7 @@
 // src/utils/operation-full-provide-identifier-with-cui.ts
 import { LowEventInputTracker } from "../low-events/input-tracker.mjs";
 import { OperationFull } from "./operation-full.mjs";
+import { acceptHandoffs } from "../handoff.mjs";
 var OperationFullProvideIdentifierWithCUI = class extends OperationFull {
   lowEventTracker;
   cui;
@@ -12,14 +13,13 @@ var OperationFullProvideIdentifierWithCUI = class extends OperationFull {
         this.trigger(data, options);
       },
       // getOptions only fetches assertion options; it is not a user interaction on its own.
-      getOptions: this.defineStep(
-        "cui-get-options",
-        true
+      getOptions: acceptHandoffs(
+        this.defineStep("cui-get-options", true)
       ),
-      ceremony: this.defineStep(
-        "cui-ceremony"
+      ceremony: acceptHandoffs(
+        this.defineStep("cui-ceremony")
       ),
-      postResponse: this.defineStep("cui-post-response")
+      postResponse: acceptHandoffs(this.defineStep("cui-post-response"))
     };
     this.provideIdentifier = {
       trigger: (data, options) => {

package/dist/analysis/utils/passkey-enrollment-operation-full.mjs

@@ -1,6 +1,7 @@
 // src/utils/passkey-enrollment-operation-full.ts
 import { LowEventWindowTracker } from "../low-events/window-tracker.mjs";
 import { OperationFull } from "./operation-full.mjs";
+import { acceptHandoffs } from "../handoff.mjs";
 var PasskeyEnrollmentOperationFull = class extends OperationFull {
   getOptions;
   ceremony;
@@ -10,14 +11,16 @@ var PasskeyEnrollmentOperationFull = class extends OperationFull {
     super(tracker, "passkey-enrollment");
     this.lowEventTracker = new LowEventWindowTracker(tracker.getLogger(), this.lowEventSink("ceremony"));
     this.registerLowFlusher(() => this.lowEventTracker.disarm());
-    this.getOptions = this.defineStep(
-      "get-options"
+    this.getOptions = acceptHandoffs(
+      this.defineStep("get-options")
     );
-    this.ceremony = this.withWindowLowEvents(
-      this.defineStep("ceremony"),
-      this.lowEventTracker
+    this.ceremony = acceptHandoffs(
+      this.withWindowLowEvents(
+        this.defineStep("ceremony"),
+        this.lowEventTracker
+      )
     );
-    this.postResponse = this.defineStep("post-response");
+    this.postResponse = acceptHandoffs(this.defineStep("post-response"));
     void this.subflowStart({
       explicitSpecType: config?.explicitSpecType,
       ...config?.ignoreAsInteraction ? { ignoreAsInteraction: true } : {}

package/dist/analysis/utils/passkey-login-operation-full.mjs

@@ -1,6 +1,7 @@
 // src/utils/passkey-login-operation-full.ts
 import { LowEventWindowTracker } from "../low-events/window-tracker.mjs";
 import { OperationFull } from "./operation-full.mjs";
+import { acceptHandoffs } from "../handoff.mjs";
 var PasskeyLoginOperationFull = class extends OperationFull {
   getOptions;
   ceremony;
@@ -10,12 +11,16 @@ var PasskeyLoginOperationFull = class extends OperationFull {
     super(tracker, "passkey-login");
     this.lowEventTracker = new LowEventWindowTracker(tracker.getLogger(), this.lowEventSink("ceremony"));
     this.registerLowFlusher(() => this.lowEventTracker.disarm());
-    this.getOptions = this.defineStep("get-options");
-    this.ceremony = this.withWindowLowEvents(
-      this.defineStep("ceremony"),
-      this.lowEventTracker
+    this.getOptions = acceptHandoffs(
+      this.defineStep("get-options")
     );
-    this.postResponse = this.defineStep("post-response");
+    this.ceremony = acceptHandoffs(
+      this.withWindowLowEvents(
+        this.defineStep("ceremony"),
+        this.lowEventTracker
+      )
+    );
+    this.postResponse = acceptHandoffs(this.defineStep("post-response"));
     void this.subflowStart({ explicitSpecType: config?.explicitSpecType });
   }
   /**

package/dist/analysis/utils/password-login-operation-full.mjs

@@ -1,6 +1,7 @@
 // src/utils/password-login-operation-full.ts
 import { LowEventInputTracker } from "../low-events/input-tracker.mjs";
 import { OperationFull } from "./operation-full.mjs";
+import { acceptHandoffs } from "../handoff.mjs";
 var PasswordLoginOperationFull = class extends OperationFull {
   clientValidation;
   postResponse;
@@ -18,11 +19,14 @@ var PasswordLoginOperationFull = class extends OperationFull {
     this.postResponse = this.defineStep("post-response");
     this.cui = {
       // getOptions only fetches assertion options; it is not a user interaction on its own.
-      getOptions: this.defineStep(
-        "cui-get-options",
-        true
+      getOptions: acceptHandoffs(
+        this.defineStep("cui-get-options", true)
+      ),
+      ceremony: acceptHandoffs(
+        this.defineStep(
+          "cui-ceremony"
+        )
       ),
-      ceremony: this.defineStep("cui-ceremony"),
       postResponse: this.defineStep("cui-post-response")
     };
     void this.subflowStart({ explicitSpecType: config?.explicitSpecType });

package/dist/analysis/utils/password-manager-sampler.mjs

@@ -1,4 +1,5 @@
 // src/utils/password-manager-sampler.ts
+import { listenWindow, readDocumentComplete } from "../readers/page.mjs";
 import {
   readPasswordManagerExtensions
 } from "../readers/password-manager-extensions.mjs";
@@ -12,15 +13,49 @@ var PasswordManagerSampler = class {
     this.isEnabled = isEnabled;
     if (typeof window === "undefined" || typeof document === "undefined") return;
     this.sample();
-    if (document.readyState === "complete") {
+    if (readDocumentComplete({
+      key: "page:lifecycle.ready-state",
+      title: "Page load state",
+      accessNote: "document.readyState",
+      group: "Page lifecycle",
+      origin: "observe-external",
+      fields: [
+        {
+          path: "readyState",
+          label: "Whether the page has finished loading",
+          exposure: "enum",
+          transform: { values: ["complete", "other"] }
+        }
+      ]
+    })) {
       this.sampleAfter(LOAD_RESAMPLE_DELAY_MS);
     } else {
       const onLoad = () => {
         this.sampleWhenIdle();
         this.sampleAfter(LOAD_RESAMPLE_DELAY_MS);
       };
-      window.addEventListener("load", onLoad, { once: true });
-      this.removers.push(() => window.removeEventListener("load", onLoad));
+      this.removers.push(
+        listenWindow(
+          {
+            key: "page:lifecycle.load",
+            title: "Page load",
+            accessNote: "load event on window",
+            group: "Page lifecycle",
+            origin: "observe-external",
+            fields: [
+              {
+                path: "event.load",
+                label: "Page finished loading",
+                exposure: "presence",
+                transform: { note: "schedules a password manager sample" }
+              }
+            ]
+          },
+          "load",
+          onLoad,
+          { once: true }
+        )
+      );
     }
     const removeFocus = windowObserver.onInputFocus((field) => {
       if (!this.isEnabled() || this.sampledFields.has(field)) return;
@@ -89,9 +124,14 @@ var PasswordManagerSampler = class {
     try {
       const found = readPasswordManagerExtensions({
         key: "browser-api:password-managers.extensions",
+        title: "Installed password manager extensions",
+        accessNote: "globals and DOM elements that known password manager extensions inject",
+        group: "Password manager detection",
+        origin: "observe-external",
         fields: [
           {
             path: "result[].name",
+            label: "Names of known password managers found",
             exposure: "enum",
             transform: {
               values: [
@@ -107,7 +147,7 @@ var PasswordManagerSampler = class {
             }
           },
           // Read to merge samples, never reported (takeReport keeps only the name).
-          { path: "result[].signedIn", exposure: "none" }
+          { path: "result[].signedIn", label: "Whether the password manager is signed in", exposure: "none" }
         ],
         dataConfig: "pmd"
       });

package/dist/analysis/utils/sms-otp-operation-full.mjs

@@ -26,7 +26,6 @@ var SmsOtpOperationFull = class extends OperationFull {
     }
     this.registerLowFlusher(() => this.lowEventTracker?.flushPending());
   }
-  /** Rebind the ordered OTP group without starting a new subflow. An empty list detaches it. */
   setInputFields(fields) {
     this.lowEventTracker?.setFields(fields);
   }

package/dist/analysis/utils/totp-operation-full.mjs

@@ -22,7 +22,6 @@ var TotpOperationFull = class extends OperationFull {
     }
     this.registerLowFlusher(() => this.lowEventTracker?.flushPending());
   }
-  /** Rebind the ordered code input group without starting a new subflow. An empty list detaches it. */
   setInputFields(fields) {
     this.lowEventTracker?.setFields(fields);
   }

package/dist/analysis/version.mjs

@@ -1,6 +1,6 @@
 // src/version.ts
 var SDK_NAME = "@corbado/observe";
-var SDK_VERSION = true ? "1.8.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "1.9.0" : "0.0.0-dev";
 export {
   SDK_NAME,
   SDK_VERSION