@corbado/observe 1.9.1 → 1.10.1

package/dist/analysis/low-events/input-tracker.mjs

@@ -3,9 +3,6 @@ import { InputChangeRecorder } from "./input-change-recorder.mjs";
 import { InputPasteObserver } from "../readers/input-paste.mjs";
 import { observeInputField, readFocusedField, readInputContentLength } from "../readers/input.mjs";
 import { listenWindow } from "../readers/page.mjs";
-import { readPasswordManagerDomSignals } from "../readers/password-manager-dom.mjs";
-var MOUNT_PROBE_DELAY_MS = 500;
-var FOCUS_PROBE_DELAY_MS = 250;
 function fieldContentLength(field) {
   return readInputContentLength(
     {
@@ -85,10 +82,6 @@ var LowEventInputTracker = class {
   removePageHide;
   changes;
   pasteObserver;
-  emittedSignals = /* @__PURE__ */ new Set();
-  firstFocusHandled = false;
-  mountProbeTimer = null;
-  focusProbeTimer = null;
   destroyed = false;
   destroy() {
     if (this.destroyed) {
@@ -96,14 +89,6 @@ var LowEventInputTracker = class {
     }
     this.destroyed = true;
     try {
-      if (this.mountProbeTimer !== null) {
-        clearTimeout(this.mountProbeTimer);
-        this.mountProbeTimer = null;
-      }
-      if (this.focusProbeTimer !== null) {
-        clearTimeout(this.focusProbeTimer);
-        this.focusProbeTimer = null;
-      }
       this.changes.flush();
       this.unregisterInputs?.();
       this.pasteObserver.destroy();
@@ -204,9 +189,6 @@ var LowEventInputTracker = class {
         this.handleFocus();
       }
     }
-    if (typeof window !== "undefined") {
-      this.mountProbeTimer = setTimeout(() => this.runEnvProbe(), MOUNT_PROBE_DELAY_MS);
-    }
   }
   detach() {
     this.removeFieldListeners?.();
@@ -217,45 +199,6 @@ var LowEventInputTracker = class {
   pushLow = (low) => {
     this.sink.enqueueLowEvent(low);
   };
-  runEnvProbe() {
-    try {
-      if (typeof __CBO_DATA_PMD__ === "boolean" ? __CBO_DATA_PMD__ : this.sink.passwordManagerDomScan?.() !== false) {
-        const matches = readPasswordManagerDomSignals({
-          key: "dom:password-managers.dom-signals",
-          title: "Password manager traces in the page",
-          accessNote: "DOM markers that password manager extensions insert (attributes, elements, styles)",
-          group: "Password manager detection",
-          origin: "observe-external",
-          fields: [
-            {
-              path: "signals[]",
-              label: "Password manager traces found",
-              exposure: "enum",
-              transform: { values: ["pa-1", "pa-2", "pa-3", "pa-4", "pa-5", "pa-6"] }
-            }
-          ],
-          dataConfig: "pmd"
-        });
-        const now = Date.now();
-        for (const eventType of matches) {
-          if (this.emittedSignals.has(eventType)) {
-            continue;
-          }
-          this.emittedSignals.add(eventType);
-          this.pushLow({ lowType: eventType, ts: now });
-        }
-      }
-    } catch (error) {
-      this.logger.error("Failed to run input env probe", error);
-    }
-  }
-  scheduleFocusProbe() {
-    if (this.firstFocusHandled) {
-      return;
-    }
-    this.firstFocusHandled = true;
-    this.focusProbeTimer = setTimeout(() => this.runEnvProbe(), FOCUS_PROBE_DELAY_MS);
-  }
   capturePrefill(newCapture = false) {
     if (this.destroyed) return;
     this.flushPending();
@@ -270,7 +213,6 @@ var LowEventInputTracker = class {
     this.pushLow({ lowType: eventType, ts: Date.now() });
   }
   handleFocus() {
-    this.scheduleFocusProbe();
     this.enqueueNonInputEvent("focus");
   }
   handleBlur() {

package/dist/analysis/queue.mjs

@@ -37,6 +37,7 @@ var RequestQueue = class {
     this.requestConfig = options.requestConfig ?? true;
     this.onConfigReceived = options.onConfigReceived;
     this.getDataPolicy = options.getDataPolicy;
+    this.getCrossOriginSession = options.getCrossOriginSession;
     this.fixedData = options.fixedData === true;
     this.beforeEventBatchSend = options.beforeEventBatchSend;
     this.standaloneDeviceInfo = options.standaloneDeviceInfo;
@@ -105,6 +106,7 @@ var RequestQueue = class {
   requestConfig;
   onConfigReceived;
   getDataPolicy;
+  getCrossOriginSession;
   fixedData;
   beforeEventBatchSend;
   standaloneDeviceInfo;
@@ -487,6 +489,13 @@ var RequestQueue = class {
     if (this.fixedData) {
       batch.meta = { ...batch.meta, fixedData: true };
     }
+    try {
+      const crossOriginSession = this.getCrossOriginSession?.(batch.sessionId);
+      if (crossOriginSession) {
+        batch.meta = { ...batch.meta, crossOriginSession };
+      }
+    } catch {
+    }
     const retryCount = entries.reduce((max, entry) => Math.max(max, entry.attempts), 0);
     if (retryCount > 0) {
       batch.meta = { ...batch.meta, retryCount };

package/dist/analysis/readers/network.mjs

@@ -1,4 +1,8 @@
 // src/readers/network.ts
+var declaredByBrowser = /* @__PURE__ */ new Set();
+function declareBrowserRequestData(meta) {
+  declaredByBrowser.add(meta);
+}
 function sendFetch(_meta, url, init) {
   return fetch(url, init);
 }
@@ -10,5 +14,6 @@ function beaconSender(_meta) {
 }
 export {
   beaconSender,
+  declareBrowserRequestData,
   sendFetch
 };

package/dist/analysis/readers/page.mjs

@@ -21,8 +21,12 @@ function readSourcePath(_meta, mode, allow) {
   const search = applySourcePathQuery(window.location.search, mode, allow);
   return `${window.location.pathname}${search}`;
 }
+function readCookieScope(_meta) {
+  return { hostname: window.location.hostname, https: window.location.protocol === "https:" };
+}
 export {
   listenWindow,
+  readCookieScope,
   readDocumentComplete,
   readDocumentHidden,
   readPageUrl,

package/dist/analysis/transports/fetch.mjs

@@ -1,11 +1,26 @@
 // src/transports/fetch.ts
 import { parseReliabilityConfig } from "../config.mjs";
-import { beaconSender, sendFetch } from "../readers/network.mjs";
+import { beaconSender, declareBrowserRequestData, sendFetch } from "../readers/network.mjs";
 var MAX_KEEPALIVE_BODY_BYTES = 6e4;
 var FETCH_TIMEOUT_MS = 6e4;
 var FetchTransport = class {
   constructor(options) {
     this.options = options;
+    declareBrowserRequestData({
+      key: "browser-api:device.user-agent",
+      title: "Browser and operating system",
+      accessNote: "User-Agent header the browser sends with every request to the Observe ingestion API (the SDK does not read it); Corbado stores it and derives browser and operating system name and version",
+      group: "Device information",
+      origin: "observe-external",
+      fields: [
+        {
+          path: "request.header.user-agent",
+          label: "Browser and operating system identifier",
+          exposure: "raw",
+          transform: { note: "full User-Agent string, sent by the browser" }
+        }
+      ]
+    });
   }
   /**
    * Error situations:

package/dist/analysis/utils/operation-full.mjs

@@ -30,7 +30,6 @@ var OperationFull = class {
         this.captureSessionId
       ),
       flushKeepalive: () => this.tracker.lowEventFlushKeepalive(),
-      passwordManagerDomScan: () => this.tracker.isPasswordManagerDomScanEnabled(),
       registerInputs: (fields, flush) => this.tracker.getWindowObserver().registerInputs(
         fields,
         () => ({

package/dist/analysis/version.mjs

@@ -1,6 +1,6 @@
 // src/version.ts
 var SDK_NAME = "@corbado/observe";
-var SDK_VERSION = true ? "1.9.1" : "0.0.0-dev";
+var SDK_VERSION = true ? "1.10.1" : "0.0.0-dev";
 export {
   SDK_NAME,
   SDK_VERSION