@dreamdata_io/verify-tracking 0.1.0

package/dist/evidence/second-page.js

@@ -0,0 +1,332 @@
+import { COOKIELESS_GLOBAL_KEY, DEFAULT_SCRIPT_HOSTS, NETWORK_SETTLE_MS, SECOND_PAGE_ASSET_EXTENSIONS, SECOND_PAGE_LINK_ATTRIBUTE, SECOND_PAGE_MAX_CANDIDATES, SECOND_PAGE_MAX_RETRIES, SECOND_PAGE_PATH_DENYLIST, SEGMENT_COMPAT_GLOBAL_KEY, } from "./constants.js";
+import { nudgeVisitorInteraction } from "./consent.js";
+import { logger } from "../utils/logger.js";
+/**
+ * Runs in the page: picks one same-origin link to a DIFFERENT path and stamps
+ * it so the click can find it again after this call returns.
+ *
+ * Scored rather than first-match: a visitor clicks something visible in the
+ * primary navigation, and a probe that follows a hidden footer link to a
+ * deep, query-stringed URL tests a page the site itself may treat
+ * differently. The denylist is the important half — see
+ * SECOND_PAGE_PATH_DENYLIST for why legal and auth pages prove nothing.
+ */
+function rankInternalLinks(args) {
+    const { denyPathFragments, assetExtensions } = args;
+    const here = new URL(window.location.href);
+    const scored = Array.from(document.querySelectorAll("a[href]"))
+        .map((element) => {
+        const anchor = element;
+        const raw = anchor.getAttribute("href") ?? "";
+        if (/^(?:mailto:|tel:|javascript:|#)/i.test(raw.trim()))
+            return null;
+        if (anchor.hasAttribute("download"))
+            return null;
+        // A new tab leaves this page as-is, so nothing about the second page
+        // would be observable on it.
+        if ((anchor.getAttribute("target") ?? "").toLowerCase() === "_blank")
+            return null;
+        let target;
+        try {
+            target = new URL(anchor.href, here);
+        }
+        catch {
+            return null;
+        }
+        if (target.origin !== here.origin)
+            return null;
+        if (target.protocol !== "http:" && target.protocol !== "https:")
+            return null;
+        // Same page: a fragment or a self-link navigates nowhere.
+        if (target.pathname === here.pathname)
+            return null;
+        const lowerPath = target.pathname.toLowerCase();
+        if (assetExtensions.some((ext) => lowerPath.endsWith(ext)))
+            return null;
+        if (denyPathFragments.some((fragment) => lowerPath.includes(fragment)))
+            return null;
+        const rects = anchor.getClientRects();
+        const visible = rects.length > 0 && anchor.offsetParent !== null;
+        const depth = lowerPath.split("/").filter(Boolean).length;
+        let score = 0;
+        if (visible)
+            score += 4;
+        if (depth === 1)
+            score += 2;
+        else if (depth === 2)
+            score += 1;
+        if (target.search === "")
+            score += 1;
+        return { score, href: target.href, text: (anchor.textContent ?? "").trim().slice(0, 80) };
+    })
+        .filter((candidate) => candidate !== null);
+    // A stable sort on a pre-indexed list, so first-seen wins ties and the
+    // ranking is identical across runs of the same page rather than depending on
+    // the engine's sort. The whole ranking is returned, not just the winner: the
+    // best link can turn out to lead somewhere that was never instrumented, and
+    // the caller needs somewhere to go next.
+    return scored
+        .map((candidate, index) => ({ candidate, index }))
+        .sort((a, b) => b.candidate.score - a.candidate.score || a.index - b.index)
+        .map(({ candidate }) => ({ href: candidate.href, text: candidate.text }))
+        .slice(0, args.maxCandidates);
+}
+/**
+ * Stamps one already-ranked link so the click can find it again.
+ *
+ * Separate from ranking because a rejected candidate is left behind by going
+ * BACK to the first page, which rebuilds the DOM — every element reference
+ * from the previous ranking is gone by then, and the href is the only handle
+ * that survives.
+ */
+function stampLink(args) {
+    for (const element of Array.from(document.querySelectorAll("a[href]"))) {
+        const anchor = element;
+        if (anchor.href === args.href) {
+            anchor.setAttribute(args.markerAttribute, "1");
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Reads whether the current page carries the install. Runs in the page.
+ */
+function readInstallPresence(args) {
+    const sources = Array.from(document.querySelectorAll("script[src]")).map((script) => script.src);
+    const bag = window;
+    return {
+        dreamdataScript: sources.some((src) => args.scriptHosts.some((host) => src.includes(host))),
+        dreamdataGlobal: args.globalKeys.some((key) => bag[key] !== undefined && bag[key] !== null),
+        tagManager: Array.isArray(bag.dataLayer) || sources.some((src) => src.includes("googletagmanager.com")),
+    };
+}
+async function readEvidenceState(page) {
+    return page
+        .evaluate(() => {
+        const state = window.__ddEvidence;
+        return {
+            documentId: typeof state?.documentId === "string" ? state.documentId : null,
+            historyCount: Array.isArray(state?.historyEvents) ? state.historyEvents.length : 0,
+        };
+    })
+        .catch(() => ({ documentId: null, historyCount: 0 }));
+}
+async function readHistoryEventsSince(page, since) {
+    return page
+        .evaluate((from) => {
+        const events = window.__ddEvidence
+            ?.historyEvents;
+        return Array.isArray(events) ? events.slice(from) : [];
+    }, since)
+        .catch(() => []);
+}
+const NOT_ATTEMPTED = (skippedReason, fromUrl) => ({
+    attempted: false,
+    skippedReason,
+    fromUrl,
+    toUrl: null,
+    linkText: null,
+    kind: null,
+    urlChanged: false,
+    historyEvents: [],
+    install: null,
+    rejectedCandidates: [],
+    startedAt: Date.now(),
+});
+/** The first path segment, which is what a separately-built sub-site occupies. */
+function sectionOf(href) {
+    try {
+        return new URL(href).pathname.toLowerCase().split("/").filter(Boolean)[0] ?? "";
+    }
+    catch {
+        return "";
+    }
+}
+async function readInstall(page, trackingHosts) {
+    const raw = await page
+        .evaluate(readInstallPresence, {
+        scriptHosts: [...DEFAULT_SCRIPT_HOSTS, ...trackingHosts],
+        globalKeys: [COOKIELESS_GLOBAL_KEY, "dreamdata", SEGMENT_COMPAT_GLOBAL_KEY],
+    })
+        .catch((err) => {
+        logger.debug("Second-page install probe failed", err);
+        return null;
+    });
+    if (raw === null)
+        return null;
+    return { ...raw, present: raw.dreamdataScript || raw.dreamdataGlobal || raw.tagManager };
+}
+/** Clicks one ranked link and reports where it landed. */
+async function attemptCandidate(page, candidate, fromUrl, timeoutMs, trackingHosts) {
+    const stamped = await page
+        .evaluate(stampLink, { href: candidate.href, markerAttribute: SECOND_PAGE_LINK_ATTRIBUTE })
+        .catch(() => false);
+    const before = await readEvidenceState(page);
+    const startedAt = Date.now();
+    // dispatchEvent skips the actionability checks a real click needs — hit
+    // testing above all — so a consent overlay in front of the link cannot
+    // block the probe. A destroyed execution context here IS the navigation
+    // starting, not a failure.
+    const dispatched = stamped &&
+        (await page
+            .locator(`[${SECOND_PAGE_LINK_ATTRIBUTE}]`)
+            .first()
+            .dispatchEvent("click", {}, { timeout: timeoutMs })
+            .then(() => true)
+            .catch((err) => {
+            logger.debug("Second-page click dispatch reported an error", err);
+            return false;
+        }));
+    // Bounded rather than the full navigation timeout: a page whose router
+    // never changes the URL would otherwise spend the entire budget here,
+    // three times a run — the same reasoning the networkidle wait right below
+    // already applies to itself. toUrl/urlChanged are read from page.url()
+    // after this regardless, so a change that lands just past the bound is
+    // still detected; this only caps how long the wait can block.
+    await page.waitForURL((url) => url.toString() !== fromUrl, { timeout: Math.min(NETWORK_SETTLE_MS, timeoutMs) }).catch(() => { });
+    await page.waitForLoadState("networkidle", { timeout: Math.min(NETWORK_SETTLE_MS, timeoutMs) }).catch(() => { });
+    const toUrl = page.url();
+    const urlChanged = toUrl !== fromUrl;
+    // The second page is another document that has seen no interaction, so
+    // anything interaction-gated needs waking here too. catonetworks' GTM tags
+    // fire on scroll: without this the walk landed on a page where no bundle had
+    // ever loaded and the run read that as "tracking stopped after the first
+    // page view", about a site that tracks every page a visitor actually reads.
+    if (urlChanged)
+        await nudgeVisitorInteraction(page);
+    const after = await readEvidenceState(page);
+    // A hard load re-runs the init script, so the id changes and the history
+    // log belongs to the new document rather than to this navigation.
+    const kind = after.documentId === null || before.documentId === null
+        ? null
+        : after.documentId === before.documentId
+            ? "soft"
+            : "hard";
+    return {
+        candidate,
+        startedAt,
+        toUrl: urlChanged ? toUrl : null,
+        urlChanged,
+        dispatched,
+        kind,
+        historyEvents: kind === "soft" ? await readHistoryEventsSince(page, before.historyCount) : [],
+        install: urlChanged ? await readInstall(page, trackingHosts) : null,
+    };
+}
+/**
+ * Follows one internal link the way a visitor would, and reports whether the
+ * site handled it as a document load or as a same-document route change.
+ *
+ * The click is dispatched on the element rather than driven through the mouse
+ * on purpose, twice over: an unanswered consent banner covers the page in the
+ * clean phase and would swallow every real click, and a router that listens
+ * for the click event reacts to a dispatched one just as it would to a real
+ * one. `page.goto` was the other option and is the wrong one — it forces a
+ * document load, which is precisely the case a single-page app never
+ * exercises, so the SPA failure this probe exists to catch would be hidden by
+ * the probe itself.
+ *
+ * A landing page with no install on it is walked past rather than judged.
+ * whereby.com serves /blog/ from a separate Gatsby build carrying no tag
+ * manager at all, and "Blog" in the primary nav is exactly what the scoring
+ * picks — so the run reported "tracking stopped after the first page view"
+ * about a site whose every other page tracks. Each rejection also bars the
+ * rest of that first path segment, because a sub-site is a whole section and
+ * the next three candidates are usually more of it.
+ */
+export async function navigateToSecondPage(page, timeoutMs, options) {
+    const fromUrl = page.url();
+    const rank = async () => page
+        .evaluate(rankInternalLinks, {
+        denyPathFragments: SECOND_PAGE_PATH_DENYLIST,
+        assetExtensions: SECOND_PAGE_ASSET_EXTENSIONS,
+        markerAttribute: SECOND_PAGE_LINK_ATTRIBUTE,
+        maxCandidates: SECOND_PAGE_MAX_CANDIDATES,
+    })
+        .catch((err) => {
+        logger.debug("Second-page link search failed", err);
+        return [];
+    });
+    let candidates = await rank();
+    if (candidates.length === 0) {
+        return NOT_ATTEMPTED("No same-origin link to another page was found, so no second page could be visited.", fromUrl);
+    }
+    const rejectedCandidates = [];
+    const barredSections = options.barredSections;
+    const tried = new Set();
+    let attempt = null;
+    for (let round = 0; round <= SECOND_PAGE_MAX_RETRIES; round += 1) {
+        const next = candidates.find((c) => !tried.has(c.href) && !barredSections.has(sectionOf(c.href)));
+        if (next === undefined)
+            break;
+        tried.add(next.href);
+        // A section barred by an earlier phase is skipped without being visited,
+        // so this costs nothing here — the navigation was paid for once.
+        attempt = await attemptCandidate(page, next, fromUrl, timeoutMs, options.trackingHosts);
+        // Only an uninstrumented landing page is worth walking past. A click that
+        // went nowhere is reported as-is: retrying it would replace a real finding
+        // ("this link does not navigate") with a different page's evidence.
+        const wrongSubSite = attempt.urlChanged && options.firstPageInstalled && attempt.install?.present === false;
+        if (!wrongSubSite)
+            break;
+        rejectedCandidates.push({
+            url: attempt.toUrl ?? next.href,
+            reason: "no Dreamdata script, global or tag manager is present, so this page is not part of the instrumented site",
+        });
+        barredSections.add(sectionOf(next.href));
+        attempt = null;
+        // Back to the first page, which rebuilds the DOM — so the ranking has to
+        // be taken again before anything can be stamped.
+        const returned = await page
+            .goBack({ waitUntil: "domcontentloaded", timeout: timeoutMs })
+            .then(() => page.url() === fromUrl)
+            .catch(() => false);
+        if (!returned)
+            break;
+        await page.waitForLoadState("networkidle", { timeout: Math.min(NETWORK_SETTLE_MS, timeoutMs) }).catch(() => { });
+        candidates = await rank();
+    }
+    if (attempt === null) {
+        return {
+            ...NOT_ATTEMPTED(`Every candidate link led to a page with no Dreamdata install on it (${rejectedCandidates
+                .map((c) => c.url)
+                .join(", ")}), so tracking across a page change could not be observed on a page this install covers.`, fromUrl),
+            attempted: true,
+            rejectedCandidates,
+        };
+    }
+    const { candidate, kind, historyEvents, install, startedAt } = attempt;
+    const linkText = candidate.text.length > 0 ? candidate.text : null;
+    if (!attempt.urlChanged) {
+        return {
+            attempted: true,
+            skippedReason: attempt.dispatched
+                ? `The link to ${candidate.href} was clicked but the URL never changed, so no second page was observed.`
+                : `The link to ${candidate.href} could not be clicked, so no second page was observed.`,
+            fromUrl,
+            toUrl: null,
+            linkText,
+            kind: null,
+            urlChanged: false,
+            historyEvents,
+            install,
+            rejectedCandidates,
+            startedAt,
+        };
+    }
+    return {
+        attempted: true,
+        skippedReason: kind === null ? "The navigation happened but could not be classified as a document load or a route change." : null,
+        fromUrl,
+        toUrl: attempt.toUrl,
+        linkText,
+        kind,
+        urlChanged: true,
+        historyEvents,
+        install,
+        rejectedCandidates,
+        startedAt,
+    };
+}
+//# sourceMappingURL=second-page.js.map

package/dist/evidence/second-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"second-page.js","sourceRoot":"","sources":["../../src/evidence/second-page.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,4BAA4B,EAC5B,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAiE5C;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,IAAc;IACvC,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;SAC5D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,OAA4B,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACrE,IAAI,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACjD,qEAAqE;QACrE,6BAA6B;QAC7B,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAElF,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7E,0DAA0D;QAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACxE,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpF,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC;QACjE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAE1D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO;YAAE,KAAK,IAAI,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;aACvB,IAAI,KAAK,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;YAAE,KAAK,IAAI,CAAC,CAAC;QAErC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5F,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,SAAS,EAA8C,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;IAEzF,uEAAuE;IACvE,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,yCAAyC;IACzC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;SACjD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;SAC1E,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;SACxE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,IAA+C;IAChE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,OAA4B,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAuE;IAKlG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CACtE,CAAC,MAAM,EAAE,EAAE,CAAE,MAA4B,CAAC,GAAG,CAC9C,CAAC;IACF,MAAM,GAAG,GAAG,MAA4C,CAAC;IACzD,OAAO;QACL,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3F,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;QAC3F,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;KACxG,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAU;IACzC,OAAO,IAAI;SACR,QAAQ,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAI,MAEb,CAAC,YAAY,CAAC;QAChB,OAAO;YACL,UAAU,EAAE,OAAO,KAAK,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YAC3E,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SACnF,CAAC;IACJ,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAU,EAAE,KAAa;IAC7D,OAAO,IAAI;SACR,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE;QACjB,MAAM,MAAM,GAAI,MAA2E,CAAC,YAAY;YACtG,EAAE,aAAa,CAAC;QAClB,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC,EAAE,KAAK,CAAC;SACR,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,aAAqB,EAAE,OAAe,EAAwB,EAAE,CAAC,CAAC;IACvF,SAAS,EAAE,KAAK;IAChB,aAAa;IACb,OAAO;IACP,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,IAAI;IACV,UAAU,EAAE,KAAK;IACjB,aAAa,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,EAAE;IACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC,CAAC;AAEH,kFAAkF;AAClF,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAcD,KAAK,UAAU,WAAW,CAAC,IAAU,EAAE,aAAgC;IACrE,MAAM,GAAG,GAAG,MAAM,IAAI;SACnB,QAAQ,CAAC,mBAAmB,EAAE;QAC7B,WAAW,EAAE,CAAC,GAAG,oBAAoB,EAAE,GAAG,aAAa,CAAC;QACxD,UAAU,EAAE,CAAC,qBAAqB,EAAE,WAAW,EAAE,yBAAyB,CAAC;KAC5E,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACL,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;AAC3F,CAAC;AAED,0DAA0D;AAC1D,KAAK,UAAU,gBAAgB,CAAC,IAAU,EAAE,SAAqB,EAAE,OAAe,EAAE,SAAiB,EAAE,aAAgC;IACrI,MAAM,OAAO,GAAG,MAAM,IAAI;SACvB,QAAQ,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,eAAe,EAAE,0BAA0B,EAAE,CAAC;SAC1F,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,2BAA2B;IAC3B,MAAM,UAAU,GACd,OAAO;QACP,CAAC,MAAM,IAAI;aACR,OAAO,CAAC,IAAI,0BAA0B,GAAG,CAAC;aAC1C,KAAK,EAAE;aACP,aAAa,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;aAClD,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC,CAAC;IAER,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,uEAAuE;IACvE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChI,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEhH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,KAAK,OAAO,CAAC;IAErC,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,UAAU;QAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE5C,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,IAAI,GACR,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;QACrD,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;YACtC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC;IAEf,OAAO;QACL,SAAS;QACT,SAAS;QACT,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAChC,UAAU;QACV,UAAU;QACV,IAAI;QACJ,aAAa,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;QAC7F,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;KACpE,CAAC;AACJ,CAAC;AA8BD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAU,EACV,SAAiB,EACjB,OAA0B;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,MAAM,IAAI,GAAG,KAAK,IAA2B,EAAE,CAC7C,IAAI;SACD,QAAQ,CAAC,iBAAiB,EAAE;QAC3B,iBAAiB,EAAE,yBAAyB;QAC5C,eAAe,EAAE,4BAA4B;QAC7C,eAAe,EAAE,0BAA0B;QAC3C,aAAa,EAAE,0BAA0B;KAC1C,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,EAAkB,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEP,IAAI,UAAU,GAAG,MAAM,IAAI,EAAE,CAAC;IAC9B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,aAAa,CAClB,oFAAoF,EACpF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,kBAAkB,GAAsC,EAAE,CAAC;IACjE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,OAAO,GAAmB,IAAI,CAAC;IAEnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,uBAAuB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClG,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM;QAC9B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,yEAAyE;QACzE,iEAAiE;QAGjE,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAExF,0EAA0E;QAC1E,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,YAAY,GAChB,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK,CAAC;QACzF,IAAI,CAAC,YAAY;YAAE,MAAM;QAEzB,kBAAkB,CAAC,IAAI,CAAC;YACtB,GAAG,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI;YAC/B,MAAM,EAAE,0GAA0G;SACnH,CAAC,CAAC;QACH,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,OAAO,GAAG,IAAI,CAAC;QAEf,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI;aACxB,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;aAC7D,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,OAAO,CAAC;aAClC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ;YAAE,MAAM;QACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChH,UAAU,GAAG,MAAM,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,GAAG,aAAa,CACd,uEAAuE,kBAAkB;iBACtF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;iBACjB,IAAI,CAAC,IAAI,CAAC,0FAA0F,EACvG,OAAO,CACR;YACD,SAAS,EAAE,IAAI;YACf,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACvE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO;YACL,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,OAAO,CAAC,UAAU;gBAC/B,CAAC,CAAC,eAAe,SAAS,CAAC,IAAI,yEAAyE;gBACxG,CAAC,CAAC,eAAe,SAAS,CAAC,IAAI,wDAAwD;YACzF,OAAO;YACP,KAAK,EAAE,IAAI;YACX,QAAQ;YACR,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,KAAK;YACjB,aAAa;YACb,OAAO;YACP,kBAAkB;YAClB,SAAS;SACV,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,IAAI;QACf,aAAa,EACX,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,2FAA2F,CAAC,CAAC,CAAC,IAAI;QACpH,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ;QACR,IAAI;QACJ,UAAU,EAAE,IAAI;QAChB,aAAa;QACb,OAAO;QACP,kBAAkB;QAClB,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/evidence/selector-probe.js

@@ -0,0 +1,53 @@
+/** How long to keep re-checking the whole list for a control that has yet to render. */
+const SELECTOR_POLL_INTERVAL_MS = 250;
+/**
+ * Tries each selector in order, but only pays the click-actionability wait
+ * for one that actually exists on the page — `locator.count()` does not
+ * auto-wait, so a batched check over a whole vendor list costs milliseconds
+ * instead of `2000ms × misses` when almost none of them match.
+ *
+ * The batched check has to be POLLED, not taken once. A plain probe loop got
+ * its grace for a late-rendering control for free: the first `locator.click()`
+ * auto-waits, so a banner that builds itself a second after the page settles
+ * was still there by the time the click gave up. A single `count()` snapshot
+ * has no such wait, and dropping it would quietly turn "this CMP renders
+ * late" into "this page has no reject button" — a wrong verdict about a
+ * customer's install, which is worse than the seconds it saves. So the list is
+ * re-checked until `timeoutMs` (capped at 2000ms, the old per-click wait) has
+ * passed with nothing found. The saving is intact: that window is now paid
+ * once for the whole list instead of once per miss.
+ *
+ * Otherwise unchanged from a plain probe loop: still first-match-wins, and
+ * still falls through to the next existing selector if a click on an earlier
+ * one fails (e.g. present in the DOM but covered by another element). A
+ * selector whose click failed is not retried on a later pass — the retry is
+ * for controls that were not there yet, and re-clicking one that was there
+ * would restore the very `2000ms × misses` this exists to avoid.
+ */
+export async function clickFirstMatching(page, selectors, timeoutMs) {
+    const clickTimeout = Math.min(2000, timeoutMs);
+    const deadline = Date.now() + clickTimeout;
+    const attempted = new Set();
+    for (;;) {
+        const counts = await Promise.all(selectors.map((selector) => attempted.has(selector) ? 0 : page.locator(selector).first().count().catch(() => 0)));
+        for (let i = 0; i < selectors.length; i++) {
+            if (counts[i] === 0)
+                continue;
+            const selector = selectors[i];
+            attempted.add(selector);
+            const clicked = await page
+                .locator(selector)
+                .first()
+                .click({ timeout: clickTimeout })
+                .then(() => true)
+                .catch(() => false);
+            if (clicked)
+                return selector;
+        }
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+            return null;
+        await page.waitForTimeout(Math.min(SELECTOR_POLL_INTERVAL_MS, remaining));
+    }
+}
+//# sourceMappingURL=selector-probe.js.map

package/dist/evidence/selector-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selector-probe.js","sourceRoot":"","sources":["../../src/evidence/selector-probe.ts"],"names":[],"mappings":"AAEA,wFAAwF;AACxF,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,SAA4B,EAC5B,SAAiB;IAEjB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACzB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CACpF,CACF,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;YAC/B,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,IAAI;iBACvB,OAAO,CAAC,QAAQ,CAAC;iBACjB,KAAK,EAAE;iBACP,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;iBAChC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;iBAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,OAAO;gBAAE,OAAO,QAAQ,CAAC;QAC/B,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/dist/evidence/stealth.js

@@ -0,0 +1,21 @@
+/**
+ * Removes the most common automation tells so a page's own bot-detection or
+ * CMP logic sees something closer to a real visitor's browser. This is not
+ * a full stealth suite — just the handful of checks that actually change
+ * consent/tracking behavior in practice (navigator.webdriver, a missing
+ * window.chrome, an empty plugins list).
+ */
+export function installStealthPatches() {
+    Object.defineProperty(navigator, "webdriver", { get: () => undefined });
+    const w = window;
+    if (!w.chrome) {
+        w.chrome = { runtime: {} };
+    }
+    Object.defineProperty(navigator, "plugins", {
+        get: () => [1, 2, 3, 4, 5].map(() => ({ name: "Chrome PDF Plugin" })),
+    });
+    Object.defineProperty(navigator, "languages", {
+        get: () => ["en-US", "en"],
+    });
+}
+//# sourceMappingURL=stealth.js.map

package/dist/evidence/stealth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stealth.js","sourceRoot":"","sources":["../../src/evidence/stealth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IAExE,MAAM,CAAC,GAAG,MAAyC,CAAC;IACpD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACd,CAAC,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE;QAC1C,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;KACtE,CAAC,CAAC;IAEH,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE;QAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/dist/evidence/types.js

@@ -0,0 +1,14 @@
+export const CONSENT_SIGNAL_NAMES = [
+    "ad_storage",
+    "ad_user_data",
+    "ad_personalization",
+    "analytics_storage",
+    "functionality_storage",
+    "personalization_storage",
+    "security_storage",
+];
+/** The two signals v2 adds. Both must be present for a page to be running v2. */
+export const CONSENT_V2_ONLY_SIGNALS = ["ad_user_data", "ad_personalization"];
+/** Canonical order: what a visitor meets first, then each explicit answer. */
+export const ALL_PHASES = ["clean", "grant", "reject"];
+//# sourceMappingURL=types.js.map

package/dist/evidence/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/evidence/types.ts"],"names":[],"mappings":"AA0CA,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IAChE,YAAY;IACZ,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,yBAAyB;IACzB,kBAAkB;CACnB,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAiC,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;AAsG5G,8EAA8E;AAC9E,MAAM,CAAC,MAAM,UAAU,GAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC"}

package/dist/interactive/prompt.js

@@ -0,0 +1,31 @@
+import * as clack from "@clack/prompts";
+/** The only URL shape the harness drives: anything else is a typo, not a site. */
+export function isValidHttpUrl(value) {
+    try {
+        const parsed = new URL(value);
+        return parsed.protocol === "http:" || parsed.protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}
+export async function promptForUrl() {
+    clack.intro("Dreamdata tracking verification");
+    const url = await clack.text({
+        message: "Which URL should be checked?",
+        placeholder: "https://example.com",
+        validate: (value) => {
+            if (!value)
+                return "A URL is required.";
+            if (!isValidHttpUrl(value))
+                return "Enter a valid http(s) URL.";
+            return undefined;
+        },
+    });
+    if (clack.isCancel(url)) {
+        clack.cancel("Cancelled.");
+        process.exit(1);
+    }
+    return url;
+}
+//# sourceMappingURL=prompt.js.map

package/dist/interactive/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/interactive/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAExC,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,KAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAE/C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;QAC3B,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,qBAAqB;QAClC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK;gBAAE,OAAO,oBAAoB,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAO,4BAA4B,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}