@duckduckgo/autoconsent 16.43.1 → 16.44.0

package/docs/rule-syntax.md

@@ -66,7 +66,7 @@ Returns true if the given selector matches one or more elements.
   "check": "any" | "all" | "none"
 }
 ```
-Returns true if elements matched by ElementSelector are currently visible on the page. If `check` is `all` (default), every element must be visible. If `check` is `none`, no element should be visible. Visibility check is a CSS-based heuristic.
+Returns true if elements matched by ElementSelector are currently visible on the page. If `check` is `all` (default), every element must be visible. If `check` is `none`, no element should be visible. Visibility check is a CSS-based heuristic. Prehiding does not affect this check.
 
 ## Wait for element
 
@@ -87,7 +87,7 @@ Waits until `selector` exists in the page. After `timeout` ms the step fails.
   "check": "any" | "all" | "none"
 }
 ```
-Waits until element is visible in the page. After `timeout` ms the step fails.
+Waits until element is visible in the page. After `timeout` ms the step fails. To wait until an element is not visible, use `check: "none"`, not `negated`.
 
 ## Click an element
 ```javascript
@@ -183,7 +183,7 @@ The optional `stylesheetId` is a marker used to prevent duplicate inserts when t
   "cookieContains": "substring"
 }
 ```
-Checks if the substring is present in the document.cookie string.
+Checks if the substring is present in the document.cookie string. `HttpOnly` cookies are not in this string.
 
 ## Eval
 
@@ -234,7 +234,7 @@ Evaluates a list of steps in order. If any return true (success), then the step
 }
 ```
 
-If `negated` is true, the result will be inverted. For example, `{ "exists": ".my-class", "negated": true }` will return true if `.my-class` does not exist.
+If `negated` is true, the result will be inverted. For example, `{ "exists": ".my-class", "negated": true }` will return true if `.my-class` does not exist. The result is inverted after the step is complete, so `negated` does not change what a waiting step waits for.
 
 ## Optional actions
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@duckduckgo/autoconsent",
-  "version": "16.43.1",
+  "version": "16.44.0",
   "description": "",
   "types": "./dist/types/web.d.ts",
   "exports": {
@@ -45,7 +45,7 @@
     "@duckduckgo/eslint-config": "github:duckduckgo/eslint-config#v0.3.0",
     "@esm-bundle/chai": "^4.3.4-fix.0",
     "@octokit/rest": "^22.0.1",
-    "@playwright/test": "^1.17.1",
+    "@playwright/test": "^1.63.0",
     "@types/chai": "^5.0.0",
     "@types/chrome": "^0.1.0",
     "@types/mocha": "^10.0.1",

package/readme.md

@@ -88,7 +88,7 @@ For more details on rule types, see [Rule Syntax Reference](docs/rule-syntax.md)
 The agent skills in `.agents/skills/` need a few environment variables.
 
 1. Copy the contents from [`.claude/user-settings.json.TEMPLATE`](.claude/user-settings.json.TEMPLATE) to your user settings (e.g. `~/.claude/settings.json`), in addition to your existing config. If your settings already have an `env` block, merge the entries into it: a second `env` key would silently override the first.
-2. Replace the values in the template. Proxy values must be complete URLs with an `http://`, `https://`, or `socks5://` scheme, and without embedded credentials. `REGIONAL_PROXY_USERNAME` and `REGIONAL_PROXY_PASSWORD` are optional: they are only used for `https://` proxies, so remove them if your proxies don't need authentication.
+2. Replace the values in the template. Proxy values must be complete URLs with an `http://`, `https://`, or `socks5://` scheme, and without embedded credentials. `REGIONAL_PROXY_USERNAME` and `REGIONAL_PROXY_PASSWORD` are optional: they are only used for `https://` proxies, so remove them if your proxies don't need authentication. `OXYLABS_USER` and `OXYLABS_PASSWORD` are optional too: they enable the `oxylabs-testing` skill for sites that show our proxies a bot wall, so remove them if you don't have an Oxylabs account.
 3. Start a new Claude Code session: settings are only read at startup.
 
 For other agents or plain shell use, `export` the same variables in your shell profile instead.

package/rules/autoconsent/bandcamp.json

@@ -10,20 +10,59 @@
     ],
     "detectPopup": [
         {
-            "visible": ".cookie-dialog-initial"
+            "any": [
+                {
+                    "visible": ".cookie-dialog-initial"
+                },
+                {
+                    "visible": ["menu-bar", ".cookie-dialog-initial"]
+                },
+                {
+                    "visible": ["page-footer", ".cookie-dialog-initial"]
+                }
+            ]
         }
     ],
     "optIn": [
         {
-            "waitForThenClick": ".cookie-dialog-initial button.g-button[type=\"submit\"]"
+            "any": [
+                {
+                    "waitForThenClick": ".cookie-dialog-initial button.g-button[type=\"submit\"]",
+                    "timeout": 500
+                },
+                {
+                    "waitForThenClick": ["menu-bar", ".cookie-dialog-initial button.g-button[type=\"submit\"]"],
+                    "timeout": 500
+                },
+                {
+                    "waitForThenClick": ["page-footer", ".cookie-dialog-initial button.g-button[type=\"submit\"]"],
+                    "timeout": 500
+                }
+            ]
         }
     ],
     "optOut": [
         {
-            "waitForThenClick": ".cookie-dialog-initial button.g-button.outline"
+            "any": [
+                {
+                    "waitForThenClick": ".cookie-dialog-initial button.g-button.outline",
+                    "timeout": 500
+                },
+                {
+                    "waitForThenClick": ["menu-bar", ".cookie-dialog-initial button.g-button.outline"],
+                    "timeout": 500
+                },
+                {
+                    "waitForThenClick": ["page-footer", ".cookie-dialog-initial button.g-button.outline"],
+                    "timeout": 500
+                }
+            ]
         }
     ],
     "test": [
+        {
+            "wait": 500
+        },
         {
             "cookieContains": "cookie_preferences=%7B%22allow%22%3A%5B%5D"
         }

package/rules/autoconsent/chatgpt.json

@@ -9,8 +9,8 @@
         "frame": false,
         "urlPattern": "^https?://(\\w+\\.)?chatgpt\\.com/"
     },
-    "comment": "Covers the server-rendered consent dialog. Once the app hydrates it swaps in a banner whose buttons are only distinguishable by text, which the heuristic rule handles better.",
-    "prehideSelectors": ["dialog[data-cookie-consent]:has(form[data-privacy-consent-form])"],
+    "comment": "Covers the server-rendered consent dialog. Once the app hydrates it swaps in a banner whose buttons are only distinguishable by text, which the heuristic rule handles better. Below 48rem the site reopens the dialog with showModal() and marks it aria-modal, so prehiding it would leave the page inert with nothing visible to dismiss.",
+    "prehideSelectors": ["dialog[data-cookie-consent]:not([aria-modal]):has(form[data-privacy-consent-form])"],
     "detectCmp": [
         {
             "exists": "dialog[data-cookie-consent] form[data-privacy-consent-form] input[name=\"action\"][value=\"reject\"]"

package/rules/autoconsent/elsevier.json

@@ -0,0 +1,69 @@
+{
+    "name": "elsevier",
+    "vendorUrl": "https://www.elsevier.com/",
+    "runContext": {
+        "urlPattern": "^https?://(\\w+\\.)?elsevier\\.(com|support)/"
+    },
+    "prehideSelectors": ["[data-testid=\"cookie-banner\"]"],
+    "detectCmp": [
+        {
+            "exists": "[data-testid=\"cookie-banner\"] [data-testid=\"cookie-settings-button\"]"
+        }
+    ],
+    "detectPopup": [
+        {
+            "visible": "[data-testid=\"cookie-banner\"] [data-testid=\"cookie-settings-button\"]"
+        }
+    ],
+    "optIn": [
+        {
+            "waitForThenClick": "[data-testid=\"accept-all-cookies-button\"]"
+        }
+    ],
+    "optOut": [
+        {
+            "if": {
+                "exists": "[data-testid=\"reject-all-cookies-button\"]"
+            },
+            "then": [
+                {
+                    "comment": "the banner is rendered before React attaches its click handler, so a lost first click needs a retry",
+                    "waitForThenClick": "[data-testid=\"reject-all-cookies-button\"]",
+                    "retry": 3,
+                    "retryInterval": 1000
+                }
+            ],
+            "else": [
+                {
+                    "comment": "no reject button on the banner: open the OneTrust preference center it controls and reject there",
+                    "waitForThenClick": "[data-testid=\"cookie-settings-button\"]",
+                    "retry": 3,
+                    "retryInterval": 1000
+                },
+                {
+                    "waitForVisible": "#onetrust-pc-sdk",
+                    "timeout": 10000
+                },
+                {
+                    "waitForThenClick": "#onetrust-pc-sdk input.category-switch-handler:checked",
+                    "all": true,
+                    "optional": true
+                },
+                {
+                    "waitForThenClick": "#onetrust-pc-sdk .save-preference-btn-handler",
+                    "timeout": 5000
+                }
+            ]
+        },
+        {
+            "waitForVisible": "[data-testid=\"cookie-banner\"]",
+            "check": "none",
+            "timeout": 10000
+        }
+    ],
+    "test": [
+        {
+            "cookieContains": "OptanonAlertBoxClosed"
+        }
+    ]
+}

package/rules/autoconsent/fides.json

@@ -11,6 +11,10 @@
         {
             "visible": "#fides-overlay-wrapper #fides-banner"
         },
+        {
+            "visible": "#fides-overlay-wrapper .fides-banner-hidden",
+            "check": "none"
+        },
         {
             "eval": "EVAL_FIDES_DETECT_POPUP"
         }
@@ -30,7 +34,9 @@
             },
             "then": [
                 {
-                    "click": "#fides-banner .fides-reject-all-button"
+                    "waitForThenClick": ".fides-banner:not(.fides-banner-hidden) .fides-reject-all-button",
+                    "retry": 5,
+                    "retryInterval": 500
                 }
             ],
             "else": [
@@ -38,7 +44,9 @@
                     "click": "#fides-banner .fides-manage-preferences-button"
                 },
                 {
-                    "waitForThenClick": ".fides-reject-all-button"
+                    "waitForThenClick": ".fides-modal-content .fides-reject-all-button",
+                    "retry": 5,
+                    "retryInterval": 500
                 }
             ]
         }

package/rules/autoconsent/lacoccinelle.json

@@ -0,0 +1,97 @@
+{
+    "name": "lacoccinelle",
+    "vendorUrl": "https://www.lacoccinelle.net/",
+    "runContext": {
+        "urlPattern": "^https?://(\\w+\\.)?lacoccinelle\\.net/"
+    },
+    "prehideSelectors": ["#qc-cmp2-container"],
+    "detectCmp": [
+        {
+            "exists": "#qc-cmp2-container"
+        }
+    ],
+    "detectPopup": [
+        {
+            "visible": "#qc-cmp2-ui, #qc-cmp2-usp",
+            "check": "any"
+        }
+    ],
+    "optIn": [
+        {
+            "if": {
+                "exists": "#qc-cmp2-usp"
+            },
+            "then": [
+                {
+                    "waitForThenClick": "#qc-cmp2-usp .qc-usp-close-icon"
+                }
+            ],
+            "else": [
+                {
+                    "waitForThenClick": "#accept-btn"
+                }
+            ]
+        }
+    ],
+    "optOut": [
+        {
+            "if": {
+                "exists": "#qc-cmp2-usp"
+            },
+            "then": [
+                {
+                    "waitForThenClick": "#qc-cmp2-usp .qc-cmp2-toggle-switch > button[aria-checked=\"false\"]",
+                    "all": true,
+                    "retry": 3
+                },
+                {
+                    "waitForThenClick": "#qc-cmp2-usp .qc-usp-ui-content button[mode=\"primary\"]"
+                },
+                {
+                    "waitForThenClick": "#qc-cmp2-mspa-success-modal-button-footer-container button",
+                    "timeout": 5000,
+                    "optional": true
+                }
+            ],
+            "else": [
+                {
+                    "comment": "the \"more options\" button is repurposed as a paid offer, the partner list is the only free reject path",
+                    "waitForThenClick": "#qc-cmp2-container button.qc-cmp2-link-inline"
+                },
+                {
+                    "waitForThenClick": "#reject-all-btn"
+                },
+                {
+                    "comment": "outside the EEA the choice is not saved automatically",
+                    "waitForVisible": "#qc-cmp2-ui",
+                    "check": "none",
+                    "timeout": 1500,
+                    "optional": true
+                },
+                {
+                    "if": {
+                        "visible": "#save-and-exit",
+                        "check": "any"
+                    },
+                    "then": [
+                        {
+                            "click": "#save-and-exit",
+                            "all": true
+                        },
+                        {
+                            "waitForVisible": "#qc-cmp2-ui",
+                            "check": "none",
+                            "timeout": 5000
+                        }
+                    ]
+                }
+            ]
+        }
+    ],
+    "test": [
+        {
+            "visible": "#qc-cmp2-ui, #qc-cmp2-usp",
+            "check": "none"
+        }
+    ]
+}

package/rules/autoconsent/woo-commerce-com.json

@@ -1,19 +1,36 @@
 {
     "name": "woo-commerce-com",
+    "comment": "The banner renders its buttons disabled until it is ready, and clicks before that are ignored, so every click waits for :not([disabled]).",
     "prehideSelectors": [".wccom-comp-privacy-banner .wccom-privacy-banner"],
     "detectCmp": [{ "exists": ".wccom-comp-privacy-banner .wccom-privacy-banner" }],
-    "detectPopup": [{ "exists": ".wccom-comp-privacy-banner .wccom-privacy-banner" }],
-    "optIn": [{ "click": ".wccom-privacy-banner__content-buttons button.is-primary" }],
+    "detectPopup": [{ "visible": ".wccom-comp-privacy-banner .wccom-privacy-banner" }],
+    "optIn": [{ "waitForThenClick": ".wccom-privacy-banner__content-buttons button.is-style-primary:not([disabled])" }],
     "optOut": [
         {
-            "click": ".wccom-privacy-banner__content-buttons button.is-secondary"
-        },
-        {
-            "waitForThenClick": "input[type=checkbox][checked]:not([disabled])",
-            "all": true
-        },
-        {
-            "click": "div.wccom-modal__footer > button"
+            "comment": "'Reject all' is only offered in some regions: it is the secondary button followed by another secondary ('Customize')",
+            "if": { "exists": ".wccom-privacy-banner__content-buttons button.is-style-secondary:has(+ button.is-style-secondary)" },
+            "then": [
+                {
+                    "waitForThenClick": ".wccom-privacy-banner__content-buttons button.is-style-secondary:not([disabled]):has(+ button.is-style-secondary)"
+                }
+            ],
+            "else": [
+                {
+                    "waitForThenClick": ".wccom-privacy-banner__content-buttons button.is-style-secondary:not([disabled]):has(+ button.is-style-primary)"
+                },
+                {
+                    "waitForVisible": ".wccom-modal__footer button.is-style-primary"
+                },
+                {
+                    "click": ".wccom-customize-privacy-checkbox input[type=checkbox]:checked:not([disabled])",
+                    "all": true,
+                    "optional": true
+                },
+                {
+                    "waitForThenClick": ".wccom-modal__footer button.is-style-primary:not([disabled])"
+                }
+            ]
         }
-    ]
+    ],
+    "test": [{ "cookieContains": "wccom_cookie_consent_analytics=denied" }]
 }