@debugbundle/cli 1.15.0 → 1.16.0

package/dist/main.cjs

@@ -74592,6 +74592,136 @@ var CaptureRulesFileSchema = external_exports.object({
   rules: external_exports.array(CaptureRuleSchema)
 });
 
+// ../../packages/shared-types/src/browser-resource-providers.ts
+var PROVIDERS = [
+  {
+    name: "Google Tag Manager",
+    role: "tag_manager",
+    hosts: ["www.googletagmanager.com"],
+    paths: ["/gtm.js"]
+  },
+  {
+    name: "Google tag (Analytics / Ads)",
+    role: "analytics",
+    hosts: ["www.googletagmanager.com"],
+    paths: ["/gtag/js"]
+  },
+  {
+    name: "Google Analytics",
+    role: "analytics",
+    hosts: ["www.google-analytics.com", "ssl.google-analytics.com"],
+    paths: ["/analytics.js", "/ga.js"]
+  },
+  {
+    name: "Meta Pixel",
+    role: "advertising",
+    hosts: ["connect.facebook.net"],
+    paths: [/^\/[a-z]{2}_[A-Z]{2}\/fbevents\.js$/]
+  },
+  {
+    name: "Microsoft Clarity",
+    role: "analytics",
+    hosts: ["www.clarity.ms"],
+    paths: [/^\/tag\/[A-Za-z0-9]+$/]
+  },
+  {
+    name: "Hotjar",
+    role: "analytics",
+    hosts: ["static.hotjar.com"],
+    paths: [/^\/c\/hotjar-[0-9]+\.js$/]
+  },
+  {
+    name: "Cloudflare Web Analytics",
+    role: "analytics",
+    hosts: ["static.cloudflareinsights.com"],
+    paths: ["/beacon.min.js"]
+  },
+  {
+    name: "Yandex Metrica",
+    role: "analytics",
+    hosts: ["mc.yandex.ru", "mc.yandex.com"],
+    paths: ["/metrika/tag.js"]
+  },
+  {
+    name: "WordPress.com / Jetpack Stats",
+    role: "analytics",
+    hosts: ["stats.wp.com"],
+    paths: [/^\/e-[0-9]{6}\.js$/]
+  },
+  {
+    name: "Microsoft Advertising UET",
+    role: "advertising",
+    hosts: ["bat.bing.com"],
+    paths: ["/bat.js"]
+  },
+  {
+    name: "LinkedIn Insight",
+    role: "advertising",
+    hosts: ["snap.licdn.com"],
+    paths: ["/li.lms-analytics/insight.min.js"]
+  },
+  {
+    name: "TikTok Pixel",
+    role: "advertising",
+    hosts: ["analytics.tiktok.com"],
+    paths: ["/i18n/pixel/events.js"]
+  },
+  { name: "Pinterest Tag", role: "advertising", hosts: ["s.pinimg.com"], paths: ["/ct/core.js"] },
+  {
+    name: "X Pixel",
+    role: "advertising",
+    hosts: ["static.ads-twitter.com", "platform.twitter.com"],
+    paths: ["/uwt.js", "/oct.js"]
+  },
+  {
+    name: "Segment",
+    role: "analytics",
+    hosts: ["cdn.segment.com"],
+    paths: [/^\/analytics\.js\/v1\/[A-Za-z0-9_-]+\/analytics\.min\.js$/]
+  },
+  {
+    name: "Mixpanel",
+    role: "analytics",
+    hosts: ["cdn.mxpnl.com"],
+    paths: ["/libs/mixpanel-2-latest.min.js", "/libs/mixpanel-js/dist/mixpanel.module.js"]
+  },
+  {
+    name: "Amplitude",
+    role: "analytics",
+    hosts: ["cdn.amplitude.com"],
+    paths: [
+      /^\/libs\/analytics-browser-[0-9]+\.[0-9]+\.[0-9]+-min\.js(?:\.gz)?$/,
+      /^\/script\/[A-Za-z0-9_-]+\.js$/
+    ]
+  },
+  {
+    name: "PostHog",
+    role: "analytics",
+    hosts: ["us-assets.i.posthog.com", "eu-assets.i.posthog.com", "app.posthog.com"],
+    paths: ["/static/array.js"]
+  },
+  {
+    name: "Plausible",
+    role: "analytics",
+    hosts: ["plausible.io"],
+    paths: [/^\/js\/pa-[A-Za-z0-9_-]+\.js$/, /^\/js\/script(?:\.[a-z-]+)*\.js$/]
+  },
+  {
+    name: "Google sign-in",
+    role: "authentication",
+    hosts: ["accounts.google.com"],
+    paths: ["/gsi/client"]
+  }
+];
+function identifyBrowserResourceProvider(host, path) {
+  if (host === null) return null;
+  return PROVIDERS.find(
+    (provider) => provider.hosts.includes(host) && provider.paths.some(
+      (pattern) => typeof pattern === "string" ? path === pattern : pattern.test(path)
+    )
+  ) ?? null;
+}
+
 // ../../packages/shared-types/src/browser-resource.ts
 function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -74650,18 +74780,10 @@ function describeBrowserResource(value) {
   let role = location.first_party === true ? "application_asset" : "unknown";
   let provider = null;
   if (type === "script") {
-    if (location.host === "www.googletagmanager.com" && location.path === "/gtm.js") {
-      provider = "Google Tag Manager";
-      role = "tag_manager";
-    } else if (location.host === "connect.facebook.net" && /^\/[a-z]{2}_[A-Z]{2}\/fbevents\.js$/.test(location.path)) {
-      provider = "Meta Pixel";
-      role = "advertising";
-    } else if (location.host === "www.clarity.ms" && /^\/tag\/[A-Za-z0-9]+$/.test(location.path)) {
-      provider = "Microsoft Clarity";
-      role = "analytics";
-    } else if (location.host === "accounts.google.com" && location.path === "/gsi/client") {
-      provider = "Google sign-in";
-      role = "authentication";
+    const recognized = identifyBrowserResourceProvider(location.host, location.path);
+    if (recognized !== null) {
+      provider = recognized.name;
+      role = recognized.role;
     }
   }
   const file = location.path.split("/").filter(Boolean).at(-1) ?? location.path;
@@ -74685,7 +74807,8 @@ function describeBrowserResourceInterruption(value) {
   const readyState = page?.["ready_state"];
   const tag2 = typeof target?.["tag_name"] === "string" ? target["tag_name"].toLowerCase() : null;
   const rel = typeof attributes?.["rel"] === "string" ? attributes["rel"].trim().toLowerCase() : null;
-  if (visibility !== "hidden" && visibility !== "prerender" && visibility !== "unloaded" || readyState !== "loading" && readyState !== "interactive" || tag2 !== "link" || rel !== "preload" && rel !== "modulepreload" && rel !== "prefetch") return null;
+  if (visibility !== "hidden" && visibility !== "prerender" && visibility !== "unloaded" || readyState !== "loading" && readyState !== "interactive" || tag2 !== "link" || rel !== "preload" && rel !== "modulepreload" && rel !== "prefetch")
+    return null;
   return {
     visibility_state: visibility,
     ready_state: readyState,
@@ -76275,7 +76398,7 @@ function buildSkill() {
     "",
     "- Inspect the primary failure and routes: one resource can span pages, route coverage may be incomplete, and historical incidents stay separate. Related tracker evidence does not explain an application exception.",
     '- If the cause is unknown, say "possibly blocked by privacy tools." Network/CSP/provider failures remain possible; provider recognition proves neither Pi-hole blocking nor optionality.',
-    "- Review exact host/path, service, environment and opaque resource-error scope; never widen to a whole host. Google sign-in, app assets and unknown dependencies have no automatic resource noise recommendation.",
+    "- Review exact resource host/path/type, service, environment and opacity, or the returned exact fingerprint when evidence is incomplete; never widen to a whole host. All resource incidents can offer explicit controls. Provider recognition does not establish that a dependency is optional; do not suppress authentication, app assets or unknown dependencies automatically.",
     "- For confirmed optional dependencies, context (demote) retains diagnostics without new incidents/alerts/automation and may remain billable. Drop discards future matches; choose it only when evidence has no diagnostic value. Explain the tradeoff; neither deletes history. Use the returned suggestion ID.",
     "- Check existing/disabled rules. Empty suggestions or pending/failed bundles do not justify broader rules. Applying requires user authorization and owner/admin access; preview is read-only. Verify subsequent matching and protected captures before claiming improvement; live tests need authorization.",
     "- The official OpenAI connection cannot suggest or apply rules. When it is the only connection, review returned evidence and hand off through a returned safe dashboard URL; never invent tools or switch credentials.",
@@ -127208,7 +127331,7 @@ async function handleCaptureRuleCommand2(parsedArgv, dependencies) {
 // package.json
 var package_default = {
   name: "@debugbundle/cli",
-  version: "1.15.0",
+  version: "1.16.0",
   private: false,
   description: "Command-line interface for DebugBundle",
   license: "Apache-2.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@debugbundle/cli",
-  "version": "1.15.0",
+  "version": "1.16.0",
   "private": false,
   "description": "Command-line interface for DebugBundle",
   "license": "Apache-2.0",