@corbado/observe 1.8.0 → 1.9.1

package/dist/index.d.ts

@@ -8,7 +8,9 @@
  * derive the collection manifest of a build, so a call removed by dead-code elimination also
  * removes its item from the manifest.
  *
- * Vocabulary follows the collection manifest data model v1 (`corbado.collection/v1`).
+ * Vocabulary follows the collection manifest data model v1 (`corbado.collection/v1`). Call sites with the
+ * same `key` describe one item (the extractor merges them). `title`, `group` and `origin` are optional in
+ * the type (additive); every SDK call site declares them (`scripts/check-browser-globals.mjs` enforces it).
  *
  * @internal
  */
@@ -47,13 +49,36 @@ type ReaderField = {
     path: string;
     exposure: ReaderExposure;
     transform?: ReaderTransform;
+    /**
+     * Customer-readable label of the field: WHAT it is, in plain language (not why it is collected), e.g.
+     * `Operating system version`. Same rule as `title` (`customerTextProblem`); the panel shows it instead of
+     * the path. Every SDK field declares one (`scripts/check-browser-globals.mjs` enforces it).
+     */
+    label?: string;
 };
 /** Build-time data switch a reader item depends on (see `FixedDataConfig`). */
 type ReaderDataConfigKey = "pmd" | "privateMode";
+/**
+ * Where a collected value comes from: `observe-external` = the user's page or browser;
+ * `observe-internal` = written or generated by Observe itself (own `cbo_*` storage, loader globals,
+ * generated ids, own endpoints); `host-config` = provided by the customer's integration.
+ */
+type ReaderOrigin = "observe-external" | "observe-internal" | "host-config";
 /** Literal metadata passed to every reader call. */
 type ReaderMeta = {
     /** Stable item key `<kind>:<namespace>.<name>`, e.g. `browser-api:device.webdriver`. */
     key: string;
+    /**
+     * Customer-readable title of the item: plain language for a customer's PM or security owner, no API names,
+     * globals, config keys or code (`scripts/check-browser-globals.mjs` enforces it).
+     */
+    title?: string;
+    /** Technical detail behind the title: the browser APIs, globals, events or keys the reader touches. */
+    accessNote?: string;
+    /** Customer-facing group label (fixed per SDK reader), e.g. `Device information`. */
+    group?: string;
+    /** Where the value comes from (see {@link ReaderOrigin}). */
+    origin?: ReaderOrigin;
     /** Fields the reader makes reachable; everything else read stays inside the reader. */
     fields: readonly ReaderField[];
     /** The data switch that removes this item from builds that turn it off. */
@@ -674,7 +699,7 @@ interface SdkReliabilityConfig {
 /**
  * Data-collection switches fixed by the integration instead of the server config (opt-in, see
  * `TrackerOptions.fixedDataConfig`). Once given, these fields are no longer taken from the server's
- * config or the cached `cbo_sdk_config`; a field left out resolves as documented on the field (`pmd`:
+ * config or the cached `cbo_sdk_config_cache`; a field left out resolves as documented on the field (`pmd`:
  * off, `privateMode`: on), not from the server config.
  *
  * Builds can fix the same switches at build time with the esbuild/tsup defines `__CBO_DATA_PMD__` and
@@ -1034,9 +1059,7 @@ declare class SharedWindowObserver {
     /** Flush all registered input batches before a high-level lifecycle boundary. */
     flushInputs(): void;
     private emit;
-    private listen;
     private extendViewport;
-    private observeNavigation;
     destroy(): void;
 }
 
@@ -1069,6 +1092,7 @@ declare class NamespacedStorage implements StorageEngine {
 }
 declare class LocalStorage implements StorageEngine {
     private logger;
+    private readonly area;
     constructor(logger: Logger);
     /**
      * Error situations:
@@ -1094,6 +1118,7 @@ declare class LocalStorage implements StorageEngine {
 declare class CookieStorage implements StorageEngine {
     private logger;
     private domain?;
+    private readonly jar;
     constructor(logger: Logger, domain?: string | undefined);
     /**
      * Error situations:
@@ -1119,6 +1144,7 @@ declare class CookieStorage implements StorageEngine {
 }
 declare class SessionStorage implements StorageEngine {
     private logger;
+    private readonly area;
     constructor(logger: Logger);
     /**
      * Error situations:
@@ -1142,6 +1168,55 @@ declare class SessionStorage implements StorageEngine {
     removeItem(key: string): void;
 }
 
+declare const INPUT_HANDOFF: unique symbol;
+declare const WEBAUTHN_PAYLOAD_HANDOFF: unique symbol;
+declare const WEBAUTHN_ERROR_HANDOFF: unique symbol;
+/**
+ * An input element released to the SDK input tracking only (e.g. by `@corbado/autocapture`'s
+ * `dom.handoff`). Opaque: it has no readable members, so project code cannot inspect the element
+ * without a cast. Pass it straight to an `inputHtmlField` / `inputHtmlFields` /
+ * `identifierInputHtmlField` option or to `setInputFields`. At runtime it is the element itself.
+ */
+type SdkInputHandoff = {
+    readonly [INPUT_HANDOFF]: "sdk:input-tracking";
+};
+/**
+ * Sanitized WebAuthn payload JSON released to the SDK passkey operation APIs only (e.g. by
+ * `@corbado/autocapture`'s `webauthnPayload`). Opaque: it has no readable members. Pass it straight to
+ * `assertionOptions`, `assertionResponse`, `attestationOptions` or `attestationResponse`. At runtime it
+ * is the JSON string itself.
+ */
+type SdkWebAuthnPayload = {
+    readonly [WEBAUTHN_PAYLOAD_HANDOFF]: "sdk:webauthn-payload";
+};
+/**
+ * The unchanged WebAuthn ceremony rejection released to the SDK ceremony error API only (e.g. by
+ * `@corbado/autocapture`'s `webauthnError`). Opaque: it has no readable members. Pass it straight to a
+ * step's `error(error)`, which accepts any value. At runtime it is the rejection itself.
+ */
+type SdkWebAuthnError = {
+    readonly [WEBAUTHN_ERROR_HANDOFF]: "sdk:webauthn-error";
+};
+type InputHandoffKey = "inputHtmlField" | "identifierInputHtmlField";
+type InputListHandoffKey = "inputHtmlFields";
+type PayloadHandoffKey = "assertionOptions" | "assertionResponse" | "attestationOptions" | "attestationResponse";
+/**
+ * `T` with its input-element and WebAuthn payload options widened to also take the opaque handoffs.
+ * Used only by the additive handoff overloads; the original option types are unchanged.
+ */
+type WithHandoffs<T> = {
+    [K in keyof T]: K extends InputHandoffKey ? T[K] | SdkInputHandoff : K extends InputListHandoffKey ? T[K] | readonly (HTMLInputElement | SdkInputHandoff)[] : K extends PayloadHandoffKey ? T[K] | SdkWebAuthnPayload : T[K];
+};
+/**
+ * A step whose `start` / `finished` also take the opaque handoffs (additive overloads). The
+ * {@link StepHelper} signatures stay as they are and come last, so `Parameters<…>` and existing
+ * assignments to `StepHelper` resolve exactly as before.
+ */
+type HandoffStepHelper<TStart = {}, TFinished = {}, TTypedError = never> = {
+    start(data: WithHandoffs<TStart>, options?: StepOptions): void;
+    finished(data: WithHandoffs<TFinished>, options?: StepOptions): void;
+} & StepHelper<TStart, TFinished, TTypedError>;
+
 type PasskeyOperationLoginExplicitSpecType = "passkey-cui" | "passkey-known-identifier" | "passkey-no-identifier"
 /**
  * The `-auto` variants are the same two ceremonies started by the integration rather than by a
@@ -1185,9 +1260,9 @@ type PasskeyLoginOperationConfig = {
     explicitSpecType?: PasskeyOperationLoginExplicitSpecType;
 };
 declare class PasskeyLoginOperationFull extends OperationFull {
-    readonly getOptions: StepHelper<PasskeyLoginGetOptionsStart, PasskeyLoginGetOptionsFinished>;
-    readonly ceremony: StepHelper<PasskeyLoginCeremonyStart, PasskeyLoginCeremonyFinished>;
-    readonly postResponse: StepHelper<PasskeyLoginPostResponseStart>;
+    readonly getOptions: HandoffStepHelper<PasskeyLoginGetOptionsStart, PasskeyLoginGetOptionsFinished>;
+    readonly ceremony: HandoffStepHelper<PasskeyLoginCeremonyStart, PasskeyLoginCeremonyFinished>;
+    readonly postResponse: HandoffStepHelper<PasskeyLoginPostResponseStart>;
     private lowEventTracker;
     constructor(tracker: CorbadoTracker, config?: PasskeyLoginOperationConfig);
     /**
@@ -1219,7 +1294,11 @@ declare class EmailOtpOperationFull extends OperationFull {
     readonly postResponse: StepHelper<EmailOTPOperationPostResponseStart>;
     readonly resend: StepHelper;
     constructor(tracker: CorbadoTracker, config?: EmailOTPOperationConfig);
-    /** Rebind the ordered OTP group without starting a new subflow. An empty list detaches it. */
+    /**
+     * Rebind the ordered OTP group without starting a new subflow. An empty list detaches it.
+     * Also takes opaque {@link SdkInputHandoff}s (additive overload); at runtime they are the input elements.
+     */
+    setInputFields(fields: readonly (HTMLInputElement | SdkInputHandoff)[]): void;
     setInputFields(fields: readonly HTMLInputElement[]): void;
     destroy(): void;
 }
@@ -1240,7 +1319,11 @@ declare class SmsOtpOperationFull extends OperationFull {
     readonly postResponse: StepHelper<SmsOTPOperationPostResponseStart>;
     readonly resend: StepHelper;
     constructor(tracker: CorbadoTracker, config?: SmsOTPOperationConfig);
-    /** Rebind the ordered OTP group without starting a new subflow. An empty list detaches it. */
+    /**
+     * Rebind the ordered OTP group without starting a new subflow. An empty list detaches it.
+     * Also takes opaque {@link SdkInputHandoff}s (additive overload); at runtime they are the input elements.
+     */
+    setInputFields(fields: readonly (HTMLInputElement | SdkInputHandoff)[]): void;
     setInputFields(fields: readonly HTMLInputElement[]): void;
     destroy(): void;
 }
@@ -1307,6 +1390,7 @@ declare class EmailLinkContinuationOperation extends OperationFull {
     private started;
     private deferred;
     private readonly onPageHide;
+    private removePageHide?;
     constructor(tracker: CorbadoTracker, config?: EmailLinkContinuationConfig);
     /** Transaction ID of the continued email link, when known. */
     get transactionId(): string | undefined;
@@ -1377,9 +1461,9 @@ type PasskeyEnrollmentOperationConfig = {
     ignoreAsInteraction?: boolean;
 };
 declare class PasskeyEnrollmentOperationFull extends OperationFull {
-    readonly getOptions: StepHelper<PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentGetOptionsFinished>;
-    readonly ceremony: StepHelper<PasskeyEnrollmentCeremonyStart, PasskeyEnrollmentCeremonyFinished>;
-    readonly postResponse: StepHelper<PasskeyEnrollmentPostResponseStart>;
+    readonly getOptions: HandoffStepHelper<PasskeyEnrollmentGetOptionsStart, PasskeyEnrollmentGetOptionsFinished>;
+    readonly ceremony: HandoffStepHelper<PasskeyEnrollmentCeremonyStart, PasskeyEnrollmentCeremonyFinished>;
+    readonly postResponse: HandoffStepHelper<PasskeyEnrollmentPostResponseStart>;
     private lowEventTracker;
     constructor(tracker: CorbadoTracker, config?: PasskeyEnrollmentOperationConfig);
     destroy(): void;
@@ -1447,8 +1531,8 @@ declare class PasswordLoginOperationFull extends OperationFull {
      * attributed to password-login rather than a separate subflow.
      */
     readonly cui: {
-        getOptions: StepHelper<PasswordLoginCUIGetOptionsStart, PasswordLoginCUIGetOptionsFinished>;
-        ceremony: StepHelper<PasswordLoginCUICeremonyStart, PasskeyLoginCeremonyFinished, PasswordLoginCUITypedError>;
+        getOptions: HandoffStepHelper<PasswordLoginCUIGetOptionsStart, PasswordLoginCUIGetOptionsFinished>;
+        ceremony: HandoffStepHelper<PasswordLoginCUICeremonyStart, PasskeyLoginCeremonyFinished, PasswordLoginCUITypedError>;
         postResponse: StepHelper;
     };
     private lowEventTracker?;
@@ -1511,9 +1595,9 @@ declare class OperationFullProvideIdentifierWithCUI extends OperationFull {
          * @deprecated `subflow_trigger` will be removed in the next major version.
          */
         trigger: (data: SubflowTrigger, options?: StepOptions) => void;
-        getOptions: StepHelper<PasskeyLoginCUIGetOptionsStart, PasskeyLoginCUIGetOptionsFinished>;
-        ceremony: StepHelper<CUICeremonyStart, PasskeyLoginCeremonyFinished, PasskeyLoginCUITypedError>;
-        postResponse: StepHelper<PasskeyLoginPostResponseStart>;
+        getOptions: HandoffStepHelper<PasskeyLoginCUIGetOptionsStart, PasskeyLoginCUIGetOptionsFinished>;
+        ceremony: HandoffStepHelper<CUICeremonyStart, PasskeyLoginCeremonyFinished, PasskeyLoginCUITypedError>;
+        postResponse: HandoffStepHelper<PasskeyLoginPostResponseStart>;
     };
     readonly provideIdentifier: {
         /**
@@ -1593,7 +1677,11 @@ declare class TotpOperationFull extends OperationFull {
     private lowEventTracker?;
     readonly postResponse: StepHelper<TotpOperationPostResponseStart>;
     constructor(tracker: CorbadoTracker, config?: TotpOperationConfig);
-    /** Rebind the ordered code input group without starting a new subflow. An empty list detaches it. */
+    /**
+     * Rebind the ordered code input group without starting a new subflow. An empty list detaches it.
+     * Also takes opaque {@link SdkInputHandoff}s (additive overload); at runtime they are the input elements.
+     */
+    setInputFields(fields: readonly (HTMLInputElement | SdkInputHandoff)[]): void;
     setInputFields(fields: readonly HTMLInputElement[]): void;
     destroy(): void;
 }
@@ -1670,7 +1758,11 @@ declare class FormOperationFull extends OperationFull {
     readonly skip: StepHelper;
     private readonly inputBinding?;
     constructor(tracker: CorbadoTracker, config: FormOperationConfig);
-    /** Bind the fields the form shows now, without starting a new subflow. An empty list detaches all. */
+    /**
+     * Bind the fields the form shows now, without starting a new subflow. An empty list detaches all.
+     * Also takes opaque {@link SdkInputHandoff}s (additive overload); at runtime they are the input elements.
+     */
+    setInputFields(fields: readonly (HTMLInputElement | SdkInputHandoff)[]): void;
     setInputFields(fields: readonly HTMLInputElement[]): void;
     destroy(): void;
 }
@@ -1764,7 +1856,7 @@ interface TrackerOptions {
     sdkConfig?: SdkReliabilityConfigOverrides;
     /**
      * Opt-in: fix the data-collection switches (password-manager and private-mode detection) instead of
-     * taking them from the server config or the cached `cbo_sdk_config`. Batches then carry
+     * taking them from the server config or the cached `cbo_sdk_config_cache`. Batches then carry
      * `meta.fixedData: true`. Omitted (default): unchanged, server-driven behaviour. See {@link FixedDataConfig}.
      */
     fixedDataConfig?: FixedDataConfig;
@@ -2367,7 +2459,11 @@ declare class CorbadoTracker {
      * ```
      */
     passkeyDeletionOperationFull(config?: PasskeyDeletionOperationConfig): PasskeyDeletionOperationFull;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    passwordLoginFullOperation(autoTrackConfig?: WithHandoffs<PasswordLoginConfig>): PasswordLoginOperationFull;
     passwordLoginFullOperation(autoTrackConfig?: PasswordLoginConfig): PasswordLoginOperationFull;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    passwordEnrollmentFullOperation(autoTrackConfig?: WithHandoffs<PasswordEnrollmentConfig>): PasswordEnrollmentOperationFull;
     passwordEnrollmentFullOperation(autoTrackConfig?: PasswordEnrollmentConfig): PasswordEnrollmentOperationFull;
     emailLinkOperationFull(config?: EmailLinkOperationConfig): EmailLinkOperationFull;
     /**
@@ -2376,7 +2472,11 @@ declare class CorbadoTracker {
      * the backend joins to page 1 through the transaction ID. See {@link EmailLinkContinuationOperation}.
      */
     continueEmailLinkOperation(config?: EmailLinkContinuationConfig): EmailLinkContinuationOperation;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    emailOtpOperationFull(config?: WithHandoffs<EmailOTPOperationConfig>): EmailOtpOperationFull;
     emailOtpOperationFull(config?: EmailOTPOperationConfig): EmailOtpOperationFull;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    smsOtpOperationFull(config?: WithHandoffs<SmsOTPOperationConfig>): SmsOtpOperationFull;
     smsOtpOperationFull(config?: SmsOTPOperationConfig): SmsOtpOperationFull;
     /**
      * Track a code from an authenticator app (TOTP) through its verification.
@@ -2392,9 +2492,16 @@ declare class CorbadoTracker {
      * totp.postResponse.start({});
      * totp.postResponse.finished({});
      * ```
+     *
+     * Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload).
      */
+    totpOperationFull(config?: WithHandoffs<TotpOperationConfig>): TotpOperationFull;
     totpOperationFull(config?: TotpOperationConfig): TotpOperationFull;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    provideIdentifierOperationFull(config?: WithHandoffs<OperationFullProvideIdentifierWithCUIConfig>): OperationFullProvideIdentifierWithCUI;
     provideIdentifierOperationFull(config?: OperationFullProvideIdentifierWithCUIConfig): OperationFullProvideIdentifierWithCUI;
+    /** Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload). */
+    provideDataOperationFull(config?: WithHandoffs<ProvideDataOperationConfig>): ProvideDataOperationFull;
     provideDataOperationFull(config?: ProvideDataOperationConfig): ProvideDataOperationFull;
     /**
      * Track one form: a page, step or modal where the user provides one coherent set of data and submits
@@ -2421,7 +2528,10 @@ declare class CorbadoTracker {
      *   form.submit.error(error);
      * }
      * ```
+     *
+     * Also accepts an opaque `SdkInputHandoff` wherever the config takes an input element (additive overload).
      */
+    formOperationFull(config: WithHandoffs<FormOperationConfig>): FormOperationFull;
     formOperationFull(config: FormOperationConfig): FormOperationFull;
     /**
      * Track a social login with an external provider (e.g. Google, Apple).
@@ -2758,6 +2868,8 @@ declare class RequestQueue {
     private dirtySinceSyncFlush;
     private onVisibilityChange;
     private onPageHide;
+    private removeVisibilityChange;
+    private removePageHide;
     private readonly batchSize;
     private readonly flushIntervalOverride?;
     private readonly debug;
@@ -2944,8 +3056,17 @@ declare class RequestQueue {
     destroy(): void;
 }
 
-/** Last-known server config shared by batch-based and independently fetching SDK versions. */
+/** Config cache of older SDKs: read as a stale fallback until the first {@link CONFIG_CACHE_STORAGE_KEY} write. */
 declare const CONFIG_STORAGE_KEY = "cbo_sdk_config";
+/** Last-known server config with its source endpoint and freshness, written as one record. */
+declare const CONFIG_CACHE_STORAGE_KEY = "cbo_sdk_config_cache";
+/** Full config request URL, wall-clock epoch ms of the fetch and of when the config goes stale, and the config. */
+interface ConfigCacheRecord {
+    endpoint: string;
+    fetchedAt: number;
+    expiresAt: number;
+    config: SdkReliabilityConfig;
+}
 /**
  * Opt-in request header that asks the events endpoint to return the SDK reliability config. Its value
  * is the config version the SDK is currently running, or "1" when none is cached yet. The server
@@ -3003,7 +3124,7 @@ declare const CONFIG_BOUNDS: {
 declare const DEFAULT_SESSION_INACTIVITY_MS: number;
 /**
  * Defaults used until a valid injected, cached, or fetched config is available.
- * Delivery-reliability features start OFF. Last-known remote config never expires.
+ * Delivery-reliability features start OFF. Last-known remote config stays active until a refresh succeeds.
  * Init overrides win per field; a complete override bypasses remote fetching and caching.
  */
 declare const DEFAULT_RELIABILITY_CONFIG: SdkReliabilityConfig;
@@ -3036,10 +3157,14 @@ type ResolvedFixedDataConfig = Required<FixedDataConfig> & {
  * @internal
  */
 declare function resolveFixedDataConfig(raw: unknown): ResolvedFixedDataConfig | undefined;
-/** Read the cached config from storage, or `null` if absent/invalid. */
+/** The cached record with a valid config, or `null`. Its endpoint and times are as stored (unvalidated). */
+declare function loadConfigRecord(storage: StorageEngine): (Partial<Omit<ConfigCacheRecord, "config">> & {
+    config: SdkReliabilityConfig;
+}) | null;
+/** The cached config: the record's, else an older SDK's, or `null` if absent/invalid. */
 declare function loadCachedConfig(storage: StorageEngine): SdkReliabilityConfig | null;
-/** Persist the config as last-known so the next page load starts with these features enabled. */
-declare function cacheConfig(storage: StorageEngine, config: SdkReliabilityConfig): void;
+/** One write: a failed write leaves the previous record intact. */
+declare function cacheConfigRecord(storage: StorageEngine, record: ConfigCacheRecord): void;
 
 /** A persisted, not-yet-acknowledged event awaiting delivery. */
 interface OutboxEntry<T = Event> {
@@ -3214,4 +3339,4 @@ declare function logInfo(message: string): void;
 declare function logError(message: string): void;
 declare function destroy(): Promise<void>;
 
-export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FixedDataConfig, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type FormOperationConfig, FormOperationFull, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyDeletionDeletionTypedError, type PasskeyDeletionOperationConfig, PasskeyDeletionOperationFull, type PasskeyDeletionUserConfirmationTypedError, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, READER_EXPOSURES, type RawErrorEnvelope, type ReaderDataConfigKey, type ReaderExposure, type ReaderField, type ReaderMeta, type ReaderTransform, RequestQueue, type ResolvedFixedDataConfig, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SerializeRawErrorOptions, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginEntry, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StandaloneDeviceInfoSource, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, cacheConfig, clearExperiment, clearExperiments, createLogger, destroy, detectPasswordManagerExtensions, getExperiments, getSessionId, getTracker, init, loadCachedConfig, logError, logInfo, namespacedKey, parseReliabilityConfig, resetSession, resolveFixedDataConfig, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setExperiment, setExperiments, setFlowTags, setUser, telemetry, utf8Length };
+export { type AppConfirmationOperationCeremonyTypedError, type AppConfirmationOperationConfig, AppConfirmationOperationFull, type AppConfirmationOperationRetryReason, type AppConfirmationOperationSpecType, type AppConfirmationOperationStart, type AuthDecisionFinished, type AuthDecisionStarted, AuthEventName, type AuthMethodDecisionFinished, type AuthMethodDecisionStarted, type AuthMethodType, type BaseEvent, CEREMONY_LOW_EVENT_TAIL_MS, CONFIG_BOUNDS, CONFIG_CACHE_STORAGE_KEY, CONFIG_REQUEST_HEADER, CONFIG_STORAGE_KEY, type CaptchaOperationConfig, CaptchaOperationFull, type CaptchaOperationSpecType, type ClientCapabilities, type ClientEnvHandleMeta, type ClientEnvHandleMetaSource, type ConfigCacheRecord, type Conversion, CookieStorage, CorbadoTracker, type CreateLoggerOptions, type CustomEvent, DEFAULT_DEVICE_INFO_COLLECTOR_TIMEOUT_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_MAX_ENTRIES, DEFAULT_MAX_SERIALIZED_LENGTH, DEFAULT_RELIABILITY_CONFIG, DEFAULT_SEQ_LOCK_TIMEOUT_MS, DEFAULT_SESSION_INACTIVITY_MS, type DeviceInfo, type DeviceInfoCollectionError, type DeviceInfoDataWeb, type DeviceType, type EmailLinkContinuationConfig, EmailLinkContinuationOperation, type EmailLinkOperationConfig, EmailLinkOperationFull, type EmailLinkOperationPostResponseStart, type EmailLinkOperationSendStart, type EmailLinkOperationSpecType, type EmailOTPOperationConfig, type EmailOTPOperationPostResponseStart, type EmailOTPOperationSendOTPStart, type EmailOTPOperationSpecType, EmailOtpOperationFull, type ErrorStepOptions, type Event, type EventBatch, type EventBatchMeta, type EventMeta, EventStore, type EventType, type FixedDataConfig, type FlowAutoFinished, type FlowDecided, type FlowFinished, type FlowHandle, type FlowReset, type FlowStarted, type FlowType, type FlushReason, type FormOperationConfig, FormOperationFull, type HandoffStepHelper, type JavaScriptHighEntropy, type KeyOperationConfig, KeyRegistrationOperationFull, KeySigningOperationFull, LocalStorage, type Logger, type LowEvent, type LowEventFieldRole, type LowEventInitiator, type LowEventInputEffect, type LowEventSourceKind, type MultiFlowReset, type MultiFlowStarted, NamespacedStorage, type NormalizedError, OUTBOX_LOCK_NAME, OUTBOX_STORAGE_KEY, type ObserveSdkConfigSnapshot, OperationFull, OperationFullProvideIdentifierWithCUI, type OperationFullProvideIdentifierWithCUIConfig, type OutboxEntry, PROBE_BATCH_MAX_BYTES, PROBE_BATCH_MAX_ITEMS, PROBE_PAYLOAD_MAX_BYTES, PROBE_QUEUE_MAX_BYTES, PROBE_QUEUE_MAX_ITEMS, type PasskeyDeletionDeletionTypedError, type PasskeyDeletionOperationConfig, PasskeyDeletionOperationFull, type PasskeyDeletionUserConfirmationTypedError, type PasskeyEnrollmentCeremonyFinished, type PasskeyEnrollmentCeremonyStart, type PasskeyEnrollmentGetOptionsFinished, type PasskeyEnrollmentGetOptionsStart, type PasskeyEnrollmentOperationConfig, PasskeyEnrollmentOperationFull, type PasskeyEnrollmentPostResponseStart, type PasskeyLoginCUIGetOptionsFinished, type PasskeyLoginCUIGetOptionsStart, type PasskeyLoginCUISpecType, type PasskeyLoginCeremonyFinished, type PasskeyLoginCeremonyStart, type PasskeyLoginClientError, type PasskeyLoginFinish, type PasskeyLoginGetOptionsFinished, type PasskeyLoginGetOptionsStart, type PasskeyLoginOperationConfig, PasskeyLoginOperationFull, type PasskeyLoginPostResponseStart, type PasskeyLoginStartable, type PasskeyLoginSubmitted, type PasskeyOperationEnrollmentExplicitSpecType, type PasskeyOperationLoginExplicitSpecType, type PasswordEnrollmentConfig, PasswordEnrollmentOperationFull, type PasswordEnrollmentTypedError, type PasswordLoginCUICeremonyStart, type PasswordLoginCUIGetOptionsFinished, type PasswordLoginCUIGetOptionsStart, type PasswordLoginCUISpecType, type PasswordLoginCUITypedError, type PasswordLoginConfig, type PasswordLoginExplicitSpecType, PasswordLoginOperationFull, type PasswordLoginTypedError, type PasswordManagerExtension, type PasswordManagerExtensionName, type PredefinedEvent, type ProbeContext, type ProbeEntry, type ProbeInput, type ProvideDataOperationConfig, ProvideDataOperationFull, type ProvideDataOperationPostResponseStart, type ProvideDataOperationSpecType, type ProvideDataOperationStart, type ProvideIdentifierError, type ProvideIdentifierFinish, type ProvideIdentifierPostResponseStart, type ProvideIdentifierSpecType, type ProvideIdentifierStart, type QueueOptions, RAW_ERROR_BOUNDS, READER_EXPOSURES, type RawErrorEnvelope, type ReaderDataConfigKey, type ReaderExposure, type ReaderField, type ReaderMeta, type ReaderOrigin, type ReaderTransform, RequestQueue, type ResolvedFixedDataConfig, SDK_NAME, SDK_VERSION, type SdkInfo, type SdkInputHandoff, type SdkReliabilityConfig, type SdkReliabilityConfigOverrides, type SdkRetryConfig, type SdkWebAuthnError, type SdkWebAuthnPayload, type SerializeRawErrorOptions, SessionStorage, type SetFlowTagsOptions, type SmsOTPOperationConfig, type SmsOTPOperationPostResponseStart, type SmsOTPOperationSpecType, SmsOtpOperationFull, type SocialLoginEntry, type SocialLoginExchangeCodeFinished, type SocialLoginExchangeCodeStart, type SocialLoginGetRedirectUrlFinished, type SocialLoginGetRedirectUrlStart, type SocialLoginOperationConfig, SocialLoginOperationFull, type SocialLoginProviderType, type SocialLoginSpecType, type SourcePathQueryMode, type SsoLoginExchangeCodeFinished, type SsoLoginExchangeCodeStart, type SsoLoginGetRedirectUrlFinished, type SsoLoginGetRedirectUrlStart, type SsoLoginOperationConfig, SsoLoginOperationFull, type SsoLoginSpecType, type StandaloneDeviceInfoSource, type StepHelper, type StepIdentifier, type StepOptions, type StorageEngine, type SubflowTrigger, type SubflowType, type TelemetryEntry, type TelemetryLevel, type TelemetrySink, type TotpOperationConfig, TotpOperationFull, type TotpOperationPostResponseStart, type TotpOperationSpecType, type TrackerOptions, type Transport, type TransportMakeRequestResponse, type TransportOptions, type TrustedDeviceBindingMetadata, type TrustedDeviceCheckConfig, TrustedDeviceCheckOperationFull, type TrustedDeviceCheckResult, type TrustedDeviceCheckStepResult, type TrustedDeviceCheckTypedError, TrustedDeviceEnrollmentOperationFull, type TrustedDeviceEnrollmentResult, type TrustedDeviceOperationConfig, type TrustedDevicePurpose, type TrustedDeviceStorage, UNLOAD_BUDGET_BYTES, UNLOAD_PROBE_MAX_BYTES, type UserReference, type WebAuthnIdentifierProjector, type WebAuthnIdentifierProjectors, type WithHandoffs, cacheConfigRecord, clearExperiment, clearExperiments, createLogger, destroy, detectPasswordManagerExtensions, getExperiments, getSessionId, getTracker, init, loadCachedConfig, loadConfigRecord, logError, logInfo, namespacedKey, parseReliabilityConfig, resetSession, resolveFixedDataConfig, resolveRawErrorLimits, resolveReliabilityConfig, sanitizeAssertionResponse, sanitizeCreationOptions, sanitizeCreationResponse, sanitizeRequestOptions, serializeRawError, setExperiment, setExperiments, setFlowTags, setUser, telemetry, utf8Length };