@duckduckgo/autoconsent 14.77.0 → 14.77.1

package/.cursor/skills/publicwww-search/SKILL.md

@@ -0,0 +1,54 @@
+---
+name: publicwww-search
+description: Search PublicWWW to find websites using specific HTML/JS/CSS snippets. Use this skill to check if a cookie popup is from a widespread third-party CMP, to find additional test URLs for a CMP rule, or to discover how many sites use a particular consent banner pattern.
+---
+
+# PublicWWW Source Code Search
+
+Search website source code via the [PublicWWW](https://publicwww.com) API. Requires `PUBLICWWW_KEY` env var.
+
+**Caveat:** PublicWWW indexes server-rendered HTML source only. CMPs injected purely via client-side JavaScript (e.g. tag managers, async script loaders) may not appear in results.
+
+## API
+
+Download search results as CSV:
+
+```
+https://publicwww.com/websites/SEARCH_QUERY/?export=csvsnippetsu&key=$PUBLICWWW_KEY
+```
+
+CSV format: `url;rank;snippet` (one site per line, sorted by popularity rank).
+
+Use `export=csv` instead of `csvsnippetsu` to get `domain;rank` without snippets.
+
+## Query Syntax
+
+- Exact phrase: `"onetrust-banner-sdk"`
+- Combine terms: `"cookie-banner" "reject-all"`
+- Exclude: `"cookie-banner" -wordpress`
+- TLD filter: `"sd-cmp" site:de`
+- File type: `"__cmp" filetype:js` (also `filetype:css`)
+- Page depth: `depth:all "math.min.js"` (0–5, default homepage only)
+- Escape inner quotes: `"data-testid=\"cookie-reject\""`
+
+Full syntax: https://publicwww.com/syntax.html
+
+## Examples
+
+Check if a banner ID is from a shared CMP:
+
+```bash
+curl -s "https://publicwww.com/websites/%22sd-cmp%22/?export=csv&key=$PUBLICWWW_KEY" | head -20
+```
+
+Find German sites using OneTrust:
+
+```bash
+curl -s "https://publicwww.com/websites/%22onetrust-banner-sdk%22+site%3Ade/?export=csv&key=$PUBLICWWW_KEY" | head -10
+```
+
+Search JS files for a CMP API:
+
+```bash
+curl -s "https://publicwww.com/js/%22__cmp%22+filetype%3Ajs/?export=csv&key=$PUBLICWWW_KEY" | head -10
+```

package/AGENTS.md

@@ -347,6 +347,12 @@ E2E tests hit live sites and are inherently flaky due to site changes, regional
 - Playwright is configured with retries (2 retries in CI)
 - Verify the site still has the same cookie consent popup by visiting it manually
 
+## CMP Discovery with PublicWWW
+
+Use the `/publicwww-search` skill to search website source code for CMP-specific identifiers. This helps determine if a cookie popup is from a shared third-party CMP (warranting a generic rule) or is site-specific. It also helps find additional test URLs for existing rules and region-specific test sites.
+
+Requires `PUBLICWWW_KEY` environment variable.
+
 ## Verification
 
 | Step | Command |

package/CHANGELOG.md

@@ -1,3 +1,16 @@
+# v14.77.1 (Thu May 07 2026)
+
+#### 🐛 Bug Fix
+
+- Add PublicWWW source code search agent skill for CMP discovery [#1277](https://github.com/duckduckgo/autoconsent/pull/1277) ([@cursoragent](https://github.com/cursoragent) [@muodov](https://github.com/muodov))
+
+#### Authors: 2
+
+- Cursor Agent ([@cursoragent](https://github.com/cursoragent))
+- Maxim Tsoy ([@muodov](https://github.com/muodov))
+
+---
+
 # v14.77.0 (Tue May 05 2026)
 
 #### 🚀 Enhancement

package/dist/addon-firefox/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Autoconsent",
-  "version": "2026.5.2",
+  "version": "2026.5.5",
   "background": {
     "scripts": [
       "background.bundle.js"

package/dist/addon-mv3/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Autoconsent",
-  "version": "2026.5.2",
+  "version": "2026.5.5",
   "background": {
     "service_worker": "background.bundle.js"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@duckduckgo/autoconsent",
-  "version": "14.77.0",
+  "version": "14.77.1",
   "description": "",
   "types": "./dist/types/web.d.ts",
   "exports": {