@nuxt/scripts 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/shared/scripts.Crpn87WB.mjs

@@ -0,0 +1,318 @@
+function buildProxyConfig(collectPrefix) {
+  return {
+    googleAnalytics: {
+      // GA4: screen/timezone/UA needed for device, time, and OS reports; rest anonymized safely
+      privacy: { ip: true, userAgent: false, language: true, screen: false, timezone: false, hardware: true },
+      rewrite: [
+        // Modern gtag.js uses www.google.com/g/collect
+        { from: "www.google.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        // Older gtag.js constructs URLs dynamically: "https://"+(subdomain)+".google-analytics.com/g/collect"
+        // We need to catch the suffix pattern with leading dot
+        { from: ".google-analytics.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        { from: ".analytics.google.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        // Full domain patterns for static URLs
+        { from: "www.google-analytics.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        { from: "analytics.google.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        // Legacy endpoints still used by some scripts
+        { from: "www.google-analytics.com", to: `${collectPrefix}/ga` },
+        { from: "analytics.google.com", to: `${collectPrefix}/ga` },
+        // DoubleClick tracking (used by GA4 for ads/conversions)
+        { from: "stats.g.doubleclick.net/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        { from: "stats.g.doubleclick.net", to: `${collectPrefix}/ga-dc` },
+        // Google Ads/Syndication tracking
+        { from: "pagead2.googlesyndication.com", to: `${collectPrefix}/ga-syn` },
+        { from: "www.googleadservices.com", to: `${collectPrefix}/ga-ads` },
+        { from: "googleads.g.doubleclick.net", to: `${collectPrefix}/ga-gads` }
+      ],
+      routes: {
+        [`${collectPrefix}/ga/**`]: { proxy: "https://www.google-analytics.com/**" },
+        [`${collectPrefix}/ga-dc/**`]: { proxy: "https://stats.g.doubleclick.net/**" },
+        [`${collectPrefix}/ga-syn/**`]: { proxy: "https://pagead2.googlesyndication.com/**" },
+        [`${collectPrefix}/ga-ads/**`]: { proxy: "https://www.googleadservices.com/**" },
+        [`${collectPrefix}/ga-gads/**`]: { proxy: "https://googleads.g.doubleclick.net/**" }
+      }
+    },
+    googleTagManager: {
+      // GTM: container only, passes data through — downstream tags have their own privacy
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "www.googletagmanager.com", to: `${collectPrefix}/gtm` }
+      ],
+      routes: {
+        [`${collectPrefix}/gtm/**`]: { proxy: "https://www.googletagmanager.com/**" }
+      }
+    },
+    metaPixel: {
+      // Meta: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        // SDK script loading
+        { from: "connect.facebook.net", to: `${collectPrefix}/meta` },
+        // Tracking pixel endpoint (www and non-www)
+        { from: "www.facebook.com/tr", to: `${collectPrefix}/meta-tr` },
+        { from: "facebook.com/tr", to: `${collectPrefix}/meta-tr` },
+        // Additional Meta tracking domains
+        { from: "pixel.facebook.com", to: `${collectPrefix}/meta-px` },
+        { from: "www.facebook.com/plugins", to: `${collectPrefix}/meta-plugins` }
+      ],
+      routes: {
+        [`${collectPrefix}/meta/**`]: { proxy: "https://connect.facebook.net/**" },
+        [`${collectPrefix}/meta-tr/**`]: { proxy: "https://www.facebook.com/tr/**" },
+        [`${collectPrefix}/meta-px/**`]: { proxy: "https://pixel.facebook.com/**" },
+        [`${collectPrefix}/meta-plugins/**`]: { proxy: "https://www.facebook.com/plugins/**" }
+      }
+    },
+    tiktokPixel: {
+      // TikTok: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        { from: "analytics.tiktok.com", to: `${collectPrefix}/tiktok` }
+      ],
+      routes: {
+        [`${collectPrefix}/tiktok/**`]: { proxy: "https://analytics.tiktok.com/**" }
+      }
+    },
+    segment: {
+      // Segment: trusted data pipeline — needs maximum fidelity for downstream destinations
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "api.segment.io", to: `${collectPrefix}/segment` },
+        { from: "cdn.segment.com", to: `${collectPrefix}/segment-cdn` }
+      ],
+      routes: {
+        [`${collectPrefix}/segment/**`]: { proxy: "https://api.segment.io/**" },
+        [`${collectPrefix}/segment-cdn/**`]: { proxy: "https://cdn.segment.com/**" }
+      }
+    },
+    xPixel: {
+      // X/Twitter: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        { from: "analytics.twitter.com", to: `${collectPrefix}/x` },
+        { from: "t.co", to: `${collectPrefix}/x-t` }
+      ],
+      routes: {
+        [`${collectPrefix}/x/**`]: { proxy: "https://analytics.twitter.com/**" },
+        [`${collectPrefix}/x-t/**`]: { proxy: "https://t.co/**" }
+      }
+    },
+    snapchatPixel: {
+      // Snapchat: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        { from: "tr.snapchat.com", to: `${collectPrefix}/snap` }
+      ],
+      routes: {
+        [`${collectPrefix}/snap/**`]: { proxy: "https://tr.snapchat.com/**" }
+      }
+    },
+    redditPixel: {
+      // Reddit: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        { from: "alb.reddit.com", to: `${collectPrefix}/reddit` },
+        { from: "pixel-config.reddit.com", to: `${collectPrefix}/reddit-cfg` }
+      ],
+      routes: {
+        [`${collectPrefix}/reddit/**`]: { proxy: "https://alb.reddit.com/**" },
+        [`${collectPrefix}/reddit-cfg/**`]: { proxy: "https://pixel-config.reddit.com/**" }
+      }
+    },
+    clarity: {
+      // Clarity: screen/UA/timezone needed for heatmaps and device filtering; rest anonymized
+      privacy: { ip: true, userAgent: false, language: true, screen: false, timezone: false, hardware: true },
+      rewrite: [
+        // Main clarity domain
+        { from: "www.clarity.ms", to: `${collectPrefix}/clarity` },
+        // Script loader (the actual SDK is loaded from here)
+        { from: "scripts.clarity.ms", to: `${collectPrefix}/clarity-scripts` },
+        // Data collection endpoint
+        { from: "d.clarity.ms", to: `${collectPrefix}/clarity-data` },
+        // Event collection endpoint
+        { from: "e.clarity.ms", to: `${collectPrefix}/clarity-events` },
+        // Collect/beacon endpoint
+        { from: "k.clarity.ms", to: `${collectPrefix}/clarity-collect` }
+      ],
+      routes: {
+        [`${collectPrefix}/clarity/**`]: { proxy: "https://www.clarity.ms/**" },
+        [`${collectPrefix}/clarity-scripts/**`]: { proxy: "https://scripts.clarity.ms/**" },
+        [`${collectPrefix}/clarity-data/**`]: { proxy: "https://d.clarity.ms/**" },
+        [`${collectPrefix}/clarity-events/**`]: { proxy: "https://e.clarity.ms/**" },
+        [`${collectPrefix}/clarity-collect/**`]: { proxy: "https://k.clarity.ms/**" }
+      }
+    },
+    posthog: {
+      // No rewrites needed - PostHog uses NPM mode, SDK URLs are set via api_host config
+      // PostHog: needs real IP for GeoIP enrichment + feature flag targeting
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      routes: {
+        // US region
+        [`${collectPrefix}/ph/static/**`]: { proxy: "https://us-assets.i.posthog.com/static/**" },
+        [`${collectPrefix}/ph/**`]: { proxy: "https://us.i.posthog.com/**" },
+        // EU region
+        [`${collectPrefix}/ph-eu/static/**`]: { proxy: "https://eu-assets.i.posthog.com/static/**" },
+        [`${collectPrefix}/ph-eu/**`]: { proxy: "https://eu.i.posthog.com/**" }
+      }
+    },
+    hotjar: {
+      // Hotjar: screen/UA/timezone needed for heatmaps and device segmentation; rest anonymized
+      privacy: { ip: true, userAgent: false, language: true, screen: false, timezone: false, hardware: true },
+      rewrite: [
+        // Static assets
+        { from: "static.hotjar.com", to: `${collectPrefix}/hotjar` },
+        // Script loader (bootstrap script loads the main SDK from here)
+        { from: "script.hotjar.com", to: `${collectPrefix}/hotjar-script` },
+        // Configuration/variables
+        { from: "vars.hotjar.com", to: `${collectPrefix}/hotjar-vars` },
+        // Data ingestion endpoint
+        { from: "in.hotjar.com", to: `${collectPrefix}/hotjar-in` },
+        // Video capture
+        { from: "vc.hotjar.com", to: `${collectPrefix}/hotjar-vc` },
+        // Metrics/telemetry
+        { from: "metrics.hotjar.io", to: `${collectPrefix}/hotjar-metrics` },
+        // Insights (ContentSquare integration)
+        { from: "insights.hotjar.com", to: `${collectPrefix}/hotjar-insights` }
+      ],
+      routes: {
+        [`${collectPrefix}/hotjar/**`]: { proxy: "https://static.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-script/**`]: { proxy: "https://script.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-vars/**`]: { proxy: "https://vars.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-in/**`]: { proxy: "https://in.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-vc/**`]: { proxy: "https://vc.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-metrics/**`]: { proxy: "https://metrics.hotjar.io/**" },
+        [`${collectPrefix}/hotjar-insights/**`]: { proxy: "https://insights.hotjar.com/**" }
+      }
+    },
+    plausible: {
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "plausible.io", to: `${collectPrefix}/plausible` }
+      ],
+      routes: {
+        [`${collectPrefix}/plausible/**`]: { proxy: "https://plausible.io/**" }
+      }
+    },
+    cloudflareWebAnalytics: {
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "static.cloudflareinsights.com", to: `${collectPrefix}/cfwa` },
+        { from: "cloudflareinsights.com", to: `${collectPrefix}/cfwa-beacon` }
+      ],
+      routes: {
+        [`${collectPrefix}/cfwa/**`]: { proxy: "https://static.cloudflareinsights.com/**" },
+        [`${collectPrefix}/cfwa-beacon/**`]: { proxy: "https://cloudflareinsights.com/**" }
+      }
+    },
+    rybbit: {
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "app.rybbit.io", to: `${collectPrefix}/rybbit` }
+      ],
+      routes: {
+        [`${collectPrefix}/rybbit/**`]: { proxy: "https://app.rybbit.io/**" }
+      }
+    },
+    umami: {
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "cloud.umami.is", to: `${collectPrefix}/umami` },
+        { from: "api-gateway.umami.dev", to: `${collectPrefix}/umami` }
+      ],
+      routes: {
+        [`${collectPrefix}/umami/**`]: { proxy: "https://cloud.umami.is/**" }
+      }
+    },
+    databuddy: {
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "cdn.databuddy.cc", to: `${collectPrefix}/databuddy` },
+        { from: "basket.databuddy.cc", to: `${collectPrefix}/databuddy-api` }
+      ],
+      routes: {
+        [`${collectPrefix}/databuddy/**`]: { proxy: "https://cdn.databuddy.cc/**" },
+        [`${collectPrefix}/databuddy-api/**`]: { proxy: "https://basket.databuddy.cc/**" }
+      }
+    },
+    fathom: {
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "cdn.usefathom.com", to: `${collectPrefix}/fathom` }
+      ],
+      routes: {
+        [`${collectPrefix}/fathom/**`]: { proxy: "https://cdn.usefathom.com/**" }
+      }
+    },
+    intercom: {
+      privacy: { ip: true, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "widget.intercom.io", to: `${collectPrefix}/intercom` },
+        { from: "api-iam.intercom.io", to: `${collectPrefix}/intercom-api` },
+        { from: "api-iam.eu.intercom.io", to: `${collectPrefix}/intercom-api-eu` },
+        { from: "api-iam.au.intercom.io", to: `${collectPrefix}/intercom-api-au` },
+        { from: "js.intercomcdn.com", to: `${collectPrefix}/intercom-cdn` }
+      ],
+      routes: {
+        [`${collectPrefix}/intercom/**`]: { proxy: "https://widget.intercom.io/**" },
+        [`${collectPrefix}/intercom-api/**`]: { proxy: "https://api-iam.intercom.io/**" },
+        [`${collectPrefix}/intercom-api-eu/**`]: { proxy: "https://api-iam.eu.intercom.io/**" },
+        [`${collectPrefix}/intercom-api-au/**`]: { proxy: "https://api-iam.au.intercom.io/**" },
+        [`${collectPrefix}/intercom-cdn/**`]: { proxy: "https://js.intercomcdn.com/**" }
+      }
+    },
+    crisp: {
+      privacy: { ip: true, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "client.crisp.chat", to: `${collectPrefix}/crisp` }
+      ],
+      routes: {
+        [`${collectPrefix}/crisp/**`]: { proxy: "https://client.crisp.chat/**" }
+      }
+    },
+    vercelAnalytics: {
+      // Vercel Analytics: trusted first-party analytics — minimal privacy needed
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "va.vercel-scripts.com", to: `${collectPrefix}/vercel` }
+      ],
+      routes: {
+        [`${collectPrefix}/vercel/**`]: { proxy: "https://va.vercel-scripts.com/**" }
+      }
+    },
+    gravatar: {
+      // Gravatar: avatar proxy — IP anonymized, rest not needed
+      privacy: { ip: true, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "secure.gravatar.com", to: `${collectPrefix}/gravatar` },
+        { from: "gravatar.com/avatar", to: `${collectPrefix}/gravatar-avatar` }
+      ],
+      routes: {
+        [`${collectPrefix}/gravatar/**`]: { proxy: "https://secure.gravatar.com/**" },
+        [`${collectPrefix}/gravatar-avatar/**`]: { proxy: "https://gravatar.com/avatar/**" }
+      }
+    }
+  };
+}
+function getProxyConfig(key, collectPrefix) {
+  const configs = buildProxyConfig(collectPrefix);
+  return configs[key];
+}
+function getAllProxyConfigs(collectPrefix) {
+  return buildProxyConfig(collectPrefix);
+}
+const PROXY_URL_RE = /^https?:\/\/([^/]+)(\/.*)?\/\*\*$/;
+const ROUTE_WILDCARD_RE = /\/\*\*$/;
+function routesToInterceptRules(routes) {
+  const rules = [];
+  for (const [localPath, { proxy }] of Object.entries(routes)) {
+    const match = proxy.match(PROXY_URL_RE);
+    if (match?.[1]) {
+      const domain = match[1];
+      const pathPrefix = match[2] || "";
+      const target = localPath.replace(ROUTE_WILDCARD_RE, "");
+      rules.push({ pattern: domain, pathPrefix, target });
+    }
+  }
+  return rules;
+}
+
+export { getProxyConfig as a, getAllProxyConfigs as g, routesToInterceptRules as r };

package/dist/stats.d.mts

@@ -0,0 +1,39 @@
+type TrackedDataType = 'page-views' | 'events' | 'conversions' | 'user-identity' | 'session-replay' | 'heatmaps' | 'clicks' | 'scrolls' | 'retargeting' | 'audiences' | 'form-submissions' | 'video-engagement' | 'transactions' | 'errors' | 'tag-injection' | 'ab-testing';
+
+interface ScriptPrivacy {
+    ip: boolean;
+    userAgent: boolean;
+    language: boolean;
+    screen: boolean;
+    timezone: boolean;
+    hardware: boolean;
+}
+interface ScriptSizeDetail {
+    url: string;
+    transferKb: number;
+    decodedKb: number;
+    encoding: string;
+    durationMs: number;
+    initiatorType: string;
+    protocol: string;
+}
+interface ScriptStats {
+    id: string;
+    label: string;
+    category: string;
+    scripts: ScriptSizeDetail[];
+    totalTransferKb: number;
+    totalDecodedKb: number;
+    trackedData: TrackedDataType[];
+    hasBundling: boolean;
+    hasProxy: boolean;
+    domains: string[];
+    endpoints: number;
+    privacy: ScriptPrivacy | null;
+    privacyLevel: 'full' | 'partial' | 'none' | 'unknown';
+    loadingMethod: 'cdn' | 'npm' | 'dynamic';
+}
+declare function getScriptStats(): Promise<ScriptStats[]>;
+
+export { getScriptStats };
+export type { ScriptPrivacy, ScriptSizeDetail, ScriptStats, TrackedDataType };

package/dist/stats.d.ts

@@ -0,0 +1,39 @@
+type TrackedDataType = 'page-views' | 'events' | 'conversions' | 'user-identity' | 'session-replay' | 'heatmaps' | 'clicks' | 'scrolls' | 'retargeting' | 'audiences' | 'form-submissions' | 'video-engagement' | 'transactions' | 'errors' | 'tag-injection' | 'ab-testing';
+
+interface ScriptPrivacy {
+    ip: boolean;
+    userAgent: boolean;
+    language: boolean;
+    screen: boolean;
+    timezone: boolean;
+    hardware: boolean;
+}
+interface ScriptSizeDetail {
+    url: string;
+    transferKb: number;
+    decodedKb: number;
+    encoding: string;
+    durationMs: number;
+    initiatorType: string;
+    protocol: string;
+}
+interface ScriptStats {
+    id: string;
+    label: string;
+    category: string;
+    scripts: ScriptSizeDetail[];
+    totalTransferKb: number;
+    totalDecodedKb: number;
+    trackedData: TrackedDataType[];
+    hasBundling: boolean;
+    hasProxy: boolean;
+    domains: string[];
+    endpoints: number;
+    privacy: ScriptPrivacy | null;
+    privacyLevel: 'full' | 'partial' | 'none' | 'unknown';
+    loadingMethod: 'cdn' | 'npm' | 'dynamic';
+}
+declare function getScriptStats(): Promise<ScriptStats[]>;
+
+export { getScriptStats };
+export type { ScriptPrivacy, ScriptSizeDetail, ScriptStats, TrackedDataType };