edgepress 2026.9.6 → 2026.9.8

package/src/page-blocks.js

@@ -1,6 +1,7 @@
-import { plainText } from './markdown.js';
-import { translate } from './i18n.js';
+import { renderMarkdownExcerpt } from './markdown.js';
+import { translate, translateValue } from './i18n.js';
 import { isIconName, renderIcon } from './icons.js';
+import { postsForLocale } from './content.js';
 
 const captchaProviders = new Set(['cloudflare-turnstile', 'google-recaptcha', 'hcaptcha']);
 
@@ -33,6 +34,20 @@ function list(value, label, min = 1, max = 50) {
   return value;
 }
 
+function imageCandidates(value, label) {
+  let previousWidth = 0;
+  return list(value, label, 1, 4).map((candidate, index) => {
+    if (!candidate || typeof candidate !== 'object' || Array.isArray(candidate)) throw new Error(label + '[' + index + '] must be an object');
+    const src = escapeHtml(safeUrl(candidate.src, label + '[' + index + '].src'));
+    const width = candidate.width;
+    if (!Number.isInteger(width) || width < 1 || width > 10000 || width <= previousWidth) {
+      throw new Error(label + ' widths must be increasing integers from 1 to 10000');
+    }
+    previousWidth = width;
+    return src + ' ' + width + 'w';
+  }).join(', ');
+}
+
 function enabledIntegration(config, id, category) {
   const section = config.browserPlugins[category];
   const match = section?.enabled && section.services.find((item) => item.id === id);
@@ -44,6 +59,10 @@ function dateLabel(date, locale) {
   return new Intl.DateTimeFormat(locale, { dateStyle: 'long', timeZone: 'UTC' }).format(date);
 }
 
+function dateOnlyLabel(value, locale) {
+  return new Intl.DateTimeFormat(locale, { dateStyle: 'long', timeZone: 'UTC' }).format(new Date(value + 'T00:00:00.000Z'));
+}
+
 function renderPrivacyServices(context) {
   const groups = [
     ['tracking', translate(context.config, context.locale, 'pluginTracking')],
@@ -58,25 +77,33 @@ function renderPrivacyServices(context) {
   if (!configured.length) {
     return '<p class="privacy-empty">' + escapeHtml(text(context.emptyText, 'privacy-services.emptyText', 2000)) + '</p>';
   }
-  return '<ul class="privacy-service-list">' + configured.map((service) => '<li><h3>' + escapeHtml(service.category + ' · ' + service.provider) +
-    '</h3><p><strong>' + escapeHtml(translate(context.config, context.locale, 'servicePurpose')) + ':</strong> ' + escapeHtml(service.purpose) +
-    '</p><p><strong>' + escapeHtml(translate(context.config, context.locale, 'serviceRetention')) + ':</strong> ' + escapeHtml(service.retention) + '</p></li>').join('') + '</ul>';
+  return '<ul class="privacy-service-list">' + configured.map((service) => '<li><h3>' + escapeHtml(service.category + ' · ' +
+    translateValue(context.config, context.locale, service.name || service.provider)) + '</h3><p><strong>' +
+    escapeHtml(translate(context.config, context.locale, 'servicePurpose')) + ':</strong> ' +
+    escapeHtml(translateValue(context.config, context.locale, service.purpose)) + '</p><p><strong>' +
+    escapeHtml(translate(context.config, context.locale, 'serviceDataCategories')) + ':</strong> ' +
+    escapeHtml(translateValue(context.config, context.locale, service.dataCategories)) + '</p><p><strong>' +
+    escapeHtml(translate(context.config, context.locale, 'serviceRecipient')) + ':</strong> ' +
+    escapeHtml(translateValue(context.config, context.locale, service.recipient)) + '</p><p><strong>' +
+    escapeHtml(translate(context.config, context.locale, 'serviceRetention')) + ':</strong> ' +
+    escapeHtml(translateValue(context.config, context.locale, service.retention)) + '</p></li>').join('') + '</ul>';
 }
 
-function renderLatestPosts(block, context) {
+async function renderLatestPosts(block, context) {
   const count = block.count ?? 3;
   if (!Number.isInteger(count) || count < 1 || count > 12) throw new Error('latest-posts.count must be an integer from 1 to 12');
   const paginate = block.paginate ?? false;
   if (typeof paginate !== 'boolean') throw new Error('latest-posts.paginate must be a boolean');
-  const posts = context.site.posts.filter((post) => post.locale === context.locale ||
-    (!context.site.posts.some((item) => item.locale === context.locale) && post.locale === context.config.i18n.defaultLocale))
-    .sort((a, b) => b.date - a.date);
+  const posts = postsForLocale(context.site.posts, context.locale, context.config.i18n.defaultLocale);
   const title = escapeHtml(text(block.title, 'latest-posts.title', 200));
   const authorLabel = (post) => post.author ? '<span class="post-author">' + escapeHtml(translate(context.config, context.locale, 'postAuthor')
     .replace('{author}', post.author)) + '</span>' : '';
-  const cards = posts.slice(0, count).map((post) => '<article class="post-card"><h3><a href="' + escapeHtml('/' + post.path.split('/').filter(Boolean).join('/') + (post.path.endsWith('/') ? '/' : '')) + '">' +
-    escapeHtml(post.title) + '</a></h3><p class="meta"><time datetime="' + post.date.toISOString() + '">' + escapeHtml(dateLabel(post.date, context.locale)) +
-    '</time>' + (post.author ? ' · ' + authorLabel(post) : '') + '</p><p>' + escapeHtml(post.description || plainText(post.markdown).slice(0, 220)) + '</p></article>').join('');
+  const cards = (await Promise.all(posts.slice(0, count).map(async (post) => {
+    const excerpt = await renderMarkdownExcerpt(post.description || post.markdown, context.config.markdown);
+    return '<article class="post-card" lang="' + escapeHtml(post.locale) + '"><h3><a href="' + escapeHtml('/' + post.path.split('/').filter(Boolean).join('/') + (post.path.endsWith('/') ? '/' : '')) + '">' +
+      escapeHtml(post.title) + '</a></h3><p class="meta"><time datetime="' + post.date.toISOString() + '">' + escapeHtml(dateLabel(post.date, context.locale)) +
+      '</time>' + (post.author ? ' · ' + authorLabel(post) : '') + '</p><div class="post-excerpt" lang="' + escapeHtml(post.locale) + '">' + excerpt + '</div></article>';
+  }))).join('');
   const pagination = paginate && context.latestPostsPagination?.totalPages > 1
     ? '<nav class="pagination latest-posts-pagination" aria-label="' + escapeHtml(translate(context.config, context.locale, 'pagination')) + '">' +
       '<a rel="next" href="' + escapeHtml(context.latestPostsPagination.olderUrl) + '">' + escapeHtml(translate(context.config, context.locale, 'older')) + '</a>' +
@@ -132,6 +159,19 @@ async function renderBlock(block, context, depth, index) {
       const mascotSrc = block.mascotSrc === undefined ? '' : safeUrl(block.mascotSrc, 'hero.mascotSrc');
       const mascotAlt = block.mascotAlt === undefined ? '' : text(block.mascotAlt, 'hero.mascotAlt', 500);
       if (Boolean(mascotSrc) !== Boolean(mascotAlt)) throw new Error('hero.mascotSrc and hero.mascotAlt must be provided together');
+      const mascotWebpSrcset = block.mascotWebpSrcset === undefined ? '' : imageCandidates(block.mascotWebpSrcset, 'hero.mascotWebpSrcset');
+      if (mascotWebpSrcset && !mascotSrc) throw new Error('hero.mascotWebpSrcset requires hero.mascotSrc');
+      if (block.mascotSizes !== undefined && !mascotWebpSrcset) throw new Error('hero.mascotSizes requires hero.mascotWebpSrcset');
+      const hasMascotWidth = block.mascotWidth !== undefined;
+      const hasMascotHeight = block.mascotHeight !== undefined;
+      if (hasMascotWidth !== hasMascotHeight) throw new Error('hero.mascotWidth and hero.mascotHeight must be provided together');
+      const mascotWidth = hasMascotWidth ? block.mascotWidth : 1222;
+      const mascotHeight = hasMascotHeight ? block.mascotHeight : 1287;
+      if (!Number.isInteger(mascotWidth) || mascotWidth < 1 || mascotWidth > 10000 ||
+          !Number.isInteger(mascotHeight) || mascotHeight < 1 || mascotHeight > 10000) {
+        throw new Error('hero.mascotWidth and hero.mascotHeight must be integers from 1 to 10000');
+      }
+      const mascotSizes = mascotWebpSrcset ? escapeHtml(text(block.mascotSizes ?? '230px', 'hero.mascotSizes', 200)) : '';
       let action = '';
       if (block.cta) {
         const label = escapeHtml(text(block.cta.label, 'hero.cta.label', 120));
@@ -141,8 +181,11 @@ async function renderBlock(block, context, depth, index) {
       const highlights = block.highlights === undefined ? [] : list(block.highlights, 'hero.highlights', 1, 4);
       const highlightPanel = highlights.length ? '<ul class="hero-highlights">' + highlights.map((item) => '<li>' +
         escapeHtml(text(item, 'hero highlight', 180)) + '</li>').join('') + '</ul>' : '';
-      const mascot = mascotSrc ? '<img class="hero-mascot" src="' + escapeHtml(mascotSrc) + '" alt="' +
-        escapeHtml(mascotAlt) + '" width="1222" height="1287" decoding="async">' : '';
+      const mascotImage = mascotSrc ? '<img class="hero-mascot" src="' + escapeHtml(mascotSrc) + '" alt="' +
+        escapeHtml(mascotAlt) + '" width="' + mascotWidth + '" height="' + mascotHeight + '" decoding="async">' : '';
+      const mascot = mascotWebpSrcset
+        ? '<picture class="hero-mascot-picture"><source type="image/webp" srcset="' + mascotWebpSrcset + '" sizes="' + mascotSizes + '">' + mascotImage + '</picture>'
+        : mascotImage;
       const aside = mascot || highlightPanel ? '<div class="hero-aside">' + mascot + highlightPanel + '</div>' : '';
       return '<section class="hero-block' + (aside ? ' hero-block--split' : '') + '"><div class="hero-main">' +
         (eyebrow ? '<p class="eyebrow">' + escapeHtml(eyebrow) + '</p>' : '') + '<' + level + '>' + escapeHtml(heading) + '</' + level + '>' +
@@ -258,13 +301,15 @@ async function renderBlock(block, context, depth, index) {
     case 'privacy-consent': {
       const storageLabel = escapeHtml(text(block.storageLabel, 'privacy-consent.storageLabel', 120));
       const expiryLabel = escapeHtml(text(block.expiryLabel, 'privacy-consent.expiryLabel', 120));
-      const versionLabel = escapeHtml(text(block.versionLabel, 'privacy-consent.versionLabel', 120));
+      const proposedDateLabel = escapeHtml(text(block.proposedDateLabel, 'privacy-consent.proposedDateLabel', 120));
+      const effectiveDateLabel = escapeHtml(text(block.effectiveDateLabel, 'privacy-consent.effectiveDateLabel', 120));
       const expiryText = text(block.expiryText, 'privacy-consent.expiryText', 120);
       if (!expiryText.includes('{days}')) throw new Error('privacy-consent.expiryText must include a {days} placeholder');
       const consent = context.config.browserPlugins.consent;
       return '<dl class="privacy-controller-details"><div><dt>' + storageLabel + '</dt><dd>edgepress-privacy-choice</dd></div>' +
         '<div><dt>' + expiryLabel + '</dt><dd>' + escapeHtml(expiryText.replace('{days}', String(consent.expiresDays))) + '</dd></div>' +
-        '<div><dt>' + versionLabel + '</dt><dd>' + escapeHtml(consent.version) + '</dd></div></dl>';
+        '<div><dt>' + proposedDateLabel + '</dt><dd>' + escapeHtml(dateOnlyLabel(consent.proposedDate, context.locale)) + '</dd></div>' +
+        (consent.effectiveDate ? '<div><dt>' + effectiveDateLabel + '</dt><dd>' + escapeHtml(dateOnlyLabel(consent.effectiveDate, context.locale)) + '</dd></div>' : '') + '</dl>';
     }
     case 'privacy-controller': {
       const controller = context.config.privacy.controller;

package/src/page-check.js

@@ -1,6 +1,7 @@
-import { access, lstat, mkdir, readFile, readdir, realpath, rm } from 'node:fs/promises';
+import { access, lstat, mkdir, readFile, readdir, realpath } from 'node:fs/promises';
 import { extname, isAbsolute, relative, resolve, sep } from 'node:path';
 import { addVisualEvidence } from './report-visuals.js';
+import { renderMarkdown, renderMarkdownExcerpt } from './markdown.js';
 
 async function htmlFiles(directory) {
   let entries;
@@ -60,7 +61,7 @@ async function contentDocuments(output, config) {
   return documents;
 }
 
-function markdownFeatureCoverage(root, files, sourceByFile) {
+async function markdownFeatureCoverage(root, files, sourceByFile) {
   const expected = [
     ['headings 2 through 6', /<h2\b[\s\S]*?<h3\b[\s\S]*?<h4\b[\s\S]*?<h5\b[\s\S]*?<h6\b/i],
     ['Setext heading syntax', /<h2\b[^>]*>Setext (?:heading level two|二级标题示例)<\/h2>/i],
@@ -76,6 +77,7 @@ function markdownFeatureCoverage(root, files, sourceByFile) {
     ['GFM automatic links', /href="https:\/\/www\.markdownguide\.org\//i],
     ['angle-bracket, www, and email automatic links', /href="https:\/\/commonmark\.org"[\s\S]*?href="http:\/\/www\.example\.com"[\s\S]*?href="mailto:team@example\.com"/i],
     ['images with alternative text', /<img\b[^>]*src="\/edgepress-markdown-guide\.svg"[^>]*alt="[^"]+"/i],
+    ['image-shaped video Markdown syntax documented', (html) => html.includes('field-recording.mp4')],
     ['nested lists with inline formatting', /<li>[\s\S]*?<strong\b[\s\S]*?<ol\b[\s\S]*?<li>/i],
     ['task lists with accessible status names', /markdown-task-status" role="img" aria-label="[^"]+"/i],
     ['lists nested inside block quotes', /<blockquote>[\s\S]*?<ul\b[\s\S]*?<\/blockquote>/i],
@@ -84,16 +86,32 @@ function markdownFeatureCoverage(root, files, sourceByFile) {
     ['safe semantic inline HTML', /<kbd>Ctrl<\/kbd>/i],
     ['sanitization of active script markup', (html) => !/<script\b[^>]*>alert\(/i.test(html)]
   ];
+  const videoMarkdown = '![A kite crossing a field](https://media.example.org/field-recording.mp4 "Wind test")';
+  const videoHtml = await renderMarkdown(videoMarkdown);
+  const excerptHtml = await renderMarkdownExcerpt('A **formatted** excerpt with _emphasis_ and `code`.');
+  let unsafeVideoRejected = false;
+  try { await renderMarkdown('![Unsafe video](javascript:alert(1).mp4)'); }
+  catch { unsafeVideoRejected = true; }
+  const videoChecks = [
+    ['image-shaped video syntax renders an accessible native player with deferred media',
+      /<video controls playsinline preload="none" aria-label="A kite crossing a field"><source src="https:\/\/media\.example\.org\/field-recording\.mp4" type="video\/mp4"/i.test(videoHtml)],
+    ['video title renders as a caption', /<figcaption>Wind test<\/figcaption>/i.test(videoHtml)],
+    ['unsafe video URL is rejected', unsafeVideoRejected],
+    ['post-list excerpt preserves inline Markdown formatting', /<strong>formatted<\/strong>[\s\S]*?<em>emphasis<\/em>[\s\S]*?<code>code<\/code>/i.test(excerptHtml)]
+  ];
   const guides = files.filter((file) => /markdown-syntax-guide\/index\.html$/i.test(file.replace(/\\/g, '/')));
   const documents = guides.map((file) => {
     const html = sourceByFile.get(file) || '';
     const content = html.match(/<div class="post-content">([\s\S]*?)<\/div>/i)?.[1] || '';
-    const checks = expected.map(([feature, matcher]) => ({ feature, passed: typeof matcher === 'function' ? matcher(content) : matcher.test(content) }));
+    const checks = [
+      ...expected.map(([feature, matcher]) => ({ feature, passed: typeof matcher === 'function' ? matcher(content) : matcher.test(content) })),
+      ...videoChecks.map(([feature, passed]) => ({ feature, passed }))
+    ];
     return { path: relative(root, file).replace(/\\/g, '/'), checks, passed: checks.filter((item) => item.passed).length };
   });
   return {
     status: guides.length && documents.every((document) => document.checks.every((item) => item.passed)) ? 'pass' : 'fail',
-    checks: expected.length * Math.max(1, guides.length),
+    checks: (expected.length + videoChecks.length) * Math.max(1, guides.length),
     passed: documents.reduce((total, document) => total + document.passed, 0),
     documents
   };
@@ -166,7 +184,7 @@ export async function checkPages(config) {
     pageIds.set(file, new Set([...html.matchAll(/\bid\s*=\s*["']([^"']+)["']/gi)].map((match) => match[1])));
     metrics.htmlBytes += Buffer.byteLength(html);
   }
-  const markdownRendering = markdownFeatureCoverage(output, files, sourceByFile);
+  const markdownRendering = await markdownFeatureCoverage(output, files, sourceByFile);
   if (!markdownRendering.documents.length) {
     addFinding('error', 'markdown-rendering', 'content/posts', 'The Markdown syntax guide post was not generated.');
   }
@@ -259,13 +277,60 @@ export async function checkPages(config) {
   const hashedAssets = all.filter((file) => /\.[a-f0-9]{16}\.(?:css|js)$/i.test(file))
     .map((file) => relative(output, file).split(sep).join('/'));
   const styleFiles = all.filter((file) => extname(file).toLowerCase() === '.css');
+  let styles = '';
   if (styleFiles.length) {
-    const styles = (await Promise.all(styleFiles.map((file) => readFile(file, 'utf8')))).join('\n');
+    styles = (await Promise.all(styleFiles.map((file) => readFile(file, 'utf8')))).join('\n');
     inspect('accessibility', !/:focus(?:-visible)?\s*\{[^}]*outline/i.test(styles), 'warning', 'theme', 'No visible keyboard focus outline was found in the generated CSS.');
   } else {
     inspect('accessibility', true, 'warning', 'theme', 'No stylesheet was found to inspect for keyboard focus styles.');
   }
 
+  const consentConfig = config.browserPlugins.consent;
+  const consentUiChecks = [];
+  if (consentConfig.enabled) {
+    const consentCheck = (name, passed) => consentUiChecks.push({ name, passed });
+    let managerScript = '';
+    const managerAsset = all.find((file) => {
+      const path = relative(output, file).split(sep).join('/');
+      return /^edgepress\/plugins\/consent\/manager\.[a-f0-9]{16}\.js$/i.test(path);
+    });
+    if (managerAsset) {
+      try { managerScript = await readFile(managerAsset, 'utf8'); }
+      catch { /* The missing manager is reported below. */ }
+    }
+    const htmlWithConsent = files.filter((file) => {
+      const html = sourceByFile.get(file) || '';
+      return html.includes('edgepress-privacy-config') && /\/edgepress\/plugins\/consent\/manager\.[a-f0-9]{16}\.js/i.test(html);
+    });
+    consentCheck('privacy controls are injected on every generated page', files.length > 0 && htmlWithConsent.length === files.length);
+    consentCheck('consent manager script was generated', Boolean(managerScript));
+    consentCheck('service disclosure supports data categories, recipient, and retention',
+      managerScript.includes('serviceDataCategories') && managerScript.includes('serviceRecipient') && managerScript.includes('serviceRetention'));
+    consentCheck('stored choices are tied to proposed and effective dates',
+      managerScript.includes('proposedDate: consent.proposedDate') && managerScript.includes('effectiveDate: consent.effectiveDate'));
+    consentCheck('new visitors start with every optional service off', managerScript.includes('checkbox.checked = false'));
+    consentCheck('accept and reject controls share the same component styling',
+      /\.privacy-panel \.privacy-accept,\.privacy-manager \.privacy-panel \.privacy-reject\s*\{[^}]*background:[^}]*\}/.test(styles));
+    const componentClass = /(?:^|[\s>+~])\.privacy-(?:manager|panel|settings-button|close|intro|essential|details|service-preview|preview-item|category|service-settings|service-setting|service-toggle|service-toggle-text|service-disclosures|actions|accept|reject|manage|save|empty|policy-link|controller)(?=$|[^\w-])/;
+    let scoped = true;
+    for (const match of styles.matchAll(/([^{}]+)\{[^{}]*\}/g)) {
+      const selector = match[1].trim();
+      if (componentClass.test(selector) && !selector.includes('.privacy-manager')) scoped = false;
+    }
+    consentCheck('consent component CSS selectors stay within the manager', scoped);
+  }
+  const consentUi = consentConfig.enabled
+    ? {
+        status: consentUiChecks.every((item) => item.passed) ? 'pass' : 'fail',
+        checks: consentUiChecks.length,
+        passed: consentUiChecks.filter((item) => item.passed).length,
+        results: consentUiChecks
+      }
+    : { status: 'not enabled', checks: 0, passed: 0, results: [] };
+  for (const check of consentUiChecks.filter((item) => !item.passed)) {
+    issues.push({ severity: 'error', category: 'consent-ui', page: 'privacy manager', message: 'Consent UI requirement failed: ' + check.name + '.' });
+  }
+
   let robots = '';
   let sitemap = '';
   let llms = '';
@@ -319,6 +384,7 @@ export async function checkPages(config) {
     contentSummary,
     documents,
     markdownRendering,
+    consentUi,
     errors,
     warnings,
     accessibility,
@@ -328,6 +394,7 @@ export async function checkPages(config) {
     issues,
     scope: [
       'Accessibility checks inspect generated HTML and CSS. They do not measure color contrast, screen-reader behavior, keyboard interactions in a browser, or dynamic vendor widgets.',
+      'Page layout is measured with the consent manager hidden. The consent manager has separate component checks and screenshots, so its size does not change the page-content overflow result.',
       'Agent-friendliness checks inspect metadata, structured data, internal links, robots.txt, sitemap.xml, and llms.txt. They do not guarantee crawler indexing or answer quality.',
       'This automated report is not a legal-compliance assessment or a substitute for manual review.',
       'Screenshots capture generated local pages at desktop and mobile viewports. They do not replace manual keyboard, zoom, contrast, or assistive-technology review.'
@@ -342,24 +409,6 @@ export async function checkPages(config) {
   const root = await realpath(config.root);
   const directory = await realpath(requestedDirectory);
   if (!isInside(root, directory)) throw new Error('Page-check report directory must stay inside the project root');
-  for (const name of ['page-check.json', 'page-check.md', 'page-check-visual.html']) {
-    const file = resolve(directory, name);
-    try {
-      const info = await lstat(file);
-      if (info.isSymbolicLink() || !info.isFile()) throw new Error('Refusing an unsafe legacy report path: ' + file);
-      await rm(file);
-    } catch (error) {
-      if (error.code !== 'ENOENT') throw error;
-    }
-  }
-  const screenshotsDirectory = resolve(directory, 'page-check-screenshots');
-  try {
-    const info = await lstat(screenshotsDirectory);
-    if (info.isSymbolicLink() || !info.isDirectory()) throw new Error('Refusing an unsafe legacy screenshots path: ' + screenshotsDirectory);
-    await rm(screenshotsDirectory, { recursive: true });
-  } catch (error) {
-    if (error.code !== 'ENOENT') throw error;
-  }
   const pdfPath = resolve(directory, 'page-check.pdf');
   try {
     const info = await lstat(pdfPath);

package/src/report-visuals.js

@@ -127,13 +127,42 @@ async function startHeadlessBrowser(executable, profile) {
       await withTimeout(loaded, 20000, 'Screenshot page load timed out');
       await send('Runtime.evaluate', { expression: 'new Promise(resolve => requestAnimationFrame(() => setTimeout(resolve, 150)))', awaitPromise: true });
     };
-    const screenshot = async () => {
-      const result = await send('Page.captureScreenshot', { format: 'png', fromSurface: true, captureBeyondViewport: false });
-      return Buffer.from(result.data, 'base64');
+    const screenshot = async ({ hideConsent = false, clipSelector = '' } = {}) => {
+      let previousDisplay;
+      if (hideConsent) {
+        const hidden = await send('Runtime.evaluate', {
+          expression: '(() => { const node = document.querySelector("[data-consent-ui]"); if (!node) return null; const old = node.style.display; node.style.display = "none"; return old; })()',
+          returnByValue: true
+        });
+        previousDisplay = hidden.result.value;
+      }
+      try {
+        let clip;
+        if (clipSelector) {
+          const measured = await send('Runtime.evaluate', {
+            expression: '(() => { const node = document.querySelector("' + clipSelector + '"); if (!node) return null; const rect = node.getBoundingClientRect(); return JSON.stringify({x:Math.max(0,rect.left),y:Math.max(0,rect.top),width:Math.min(window.innerWidth,rect.right)-Math.max(0,rect.left),height:Math.min(window.innerHeight,rect.bottom)-Math.max(0,rect.top)}); })()',
+            returnByValue: true
+          });
+          if (!measured.result.value) return null;
+          const rect = JSON.parse(measured.result.value);
+          if (rect.width <= 0 || rect.height <= 0) return null;
+          clip = { x: rect.x, y: rect.y, width: rect.width, height: rect.height, scale: 1 };
+        }
+        const result = await send('Page.captureScreenshot', {
+          format: 'png', fromSurface: true, captureBeyondViewport: false, ...(clip ? { clip } : {})
+        });
+        return Buffer.from(result.data, 'base64');
+      } finally {
+        if (hideConsent && previousDisplay !== undefined && previousDisplay !== null) {
+          await send('Runtime.evaluate', {
+            expression: '(() => { const node = document.querySelector("[data-consent-ui]"); if (node) node.style.display = ' + JSON.stringify(previousDisplay) + '; })()'
+          });
+        }
+      }
     };
     const metrics = async () => {
       const result = await send('Runtime.evaluate', {
-        expression: 'JSON.stringify({viewportWidth:window.innerWidth,documentWidth:document.documentElement.scrollWidth})',
+        expression: '(() => { const manager = document.querySelector("[data-consent-ui]"); const oldDisplay = manager?.style.display; if (manager) manager.style.display = "none"; const pageDocumentWidth = Math.max(document.documentElement.scrollWidth,document.body?.scrollWidth || 0); if (manager) manager.style.display = oldDisplay; const panel = manager?.querySelector(".privacy-panel"); const rect = manager?.getBoundingClientRect(); const panelRect = panel?.getBoundingClientRect(); const buttons = [...(panel?.querySelectorAll("button") || [])]; const buttonsFit = !panelRect || buttons.every(button => { const r = button.getBoundingClientRect(); return r.left >= panelRect.left - 1 && r.right <= panelRect.right + 1; }); const consentInnerNoOverflow = !panel || (panel.scrollWidth <= panel.clientWidth + 1 && buttonsFit); const consentWithinViewport = !rect || (rect.left >= -1 && rect.top >= -1 && rect.right <= innerWidth + 1 && rect.bottom <= innerHeight + 1); const accept = panel?.querySelector(".privacy-accept"); const reject = panel?.querySelector(".privacy-reject"); const ar = accept?.getBoundingClientRect(); const rr = reject?.getBoundingClientRect(); const consentActionsBalanced = Boolean(accept && reject && Math.abs(ar.width-rr.width)<1 && Math.abs(ar.height-rr.height)<1 && getComputedStyle(accept).backgroundColor===getComputedStyle(reject).backgroundColor); const switches = [...(panel?.querySelectorAll(".privacy-service-toggle input") || [])]; const consentOptInDefault = switches.every(input => !input.checked); const serviceCards = [...(panel?.querySelectorAll(".privacy-service-setting") || [])]; const consentServiceDisclosures = serviceCards.length===0 || serviceCards.every(card => card.querySelectorAll(".privacy-service-disclosures dt").length>=4); const consentDetails = Boolean(panel?.querySelector(".privacy-details>summary")); return JSON.stringify({viewportWidth:innerWidth,documentWidth:document.documentElement.scrollWidth,pageDocumentWidth,consentExists:Boolean(manager),consentWithinViewport,consentInnerNoOverflow,consentActionsBalanced,consentOptInDefault,consentServiceDisclosures,consentDetails,consentWidth:rect?.width || 0,consentHeight:rect?.height || 0}); })()',
         returnByValue: true
       });
       return JSON.parse(result.result.value);
@@ -189,7 +218,11 @@ const mimeTypes = {
 function reportHtml(report, screenshots) {
   const documents = report.documents || [];
   const reportReading = report.visualEvidence?.reportAccessibility || { status: 'pending', checks: 0, passed: 0 };
-  const typeLabel = (type) => ({ post: 'Posts', page: 'Pages', homepage: 'Homepages', system: 'System routes' })[type] || type;
+  const consentChecks = report.consentUi?.checks || 0;
+  const consentPassed = report.consentUi?.passed || 0;
+  const consentErrors = Math.max(0, consentChecks - consentPassed);
+  const consentScore = consentChecks ? Math.floor(consentPassed / consentChecks * 100) + '%' : '—';
+  const typeLabel = (type) => ({ post: 'Posts', page: 'Pages', homepage: 'Homepages', system: 'System routes', consent: 'Consent interface' })[type] || type;
   const statusTable = '<table><caption>Audit results</caption><thead><tr><th scope="col">Audit</th><th scope="col">Status</th>' +
     '<th scope="col">Score</th><th scope="col">Checks</th><th scope="col">Errors</th><th scope="col">Warnings</th></tr></thead><tbody>' +
     '<tr><th scope="row">Accessibility</th><td>' + escapeHtml(report.accessibility.status) + '</td><td>' + report.accessibility.score +
@@ -198,6 +231,8 @@ function reportHtml(report, screenshots) {
     '%</td><td>' + report.agentFriendliness.checks + '</td><td>' + report.agentFriendliness.errors + '</td><td>' + report.agentFriendliness.warnings + '</td></tr>' +
     '<tr><th scope="row">Markdown rendering</th><td>' + escapeHtml(report.markdownRendering?.status || 'not run') + '</td><td>—</td><td>' +
     (report.markdownRendering?.checks || 0) + '</td><td>' + ((report.markdownRendering?.checks || 0) - (report.markdownRendering?.passed || 0)) + '</td><td>0</td></tr>' +
+    '<tr><th scope="row">Consent interface</th><td>' + escapeHtml(report.consentUi?.status || 'not checked') + '</td><td>' + consentScore +
+    '</td><td>' + consentChecks + '</td><td>' + consentErrors + '</td><td>0</td></tr>' +
     '<tr><th scope="row">Report reading structure</th><td>' + escapeHtml(reportReading.status) + '</td><td>' +
     Math.floor(reportReading.passed / Math.max(1, reportReading.checks) * 100) + '%</td><td>' + reportReading.checks +
     '</td><td>' + (reportReading.checks - reportReading.passed) + '</td><td>0</td></tr>' +
@@ -217,11 +252,13 @@ function reportHtml(report, screenshots) {
     ? '<ul>' + report.issues.map((item) => '<li><strong>' + escapeHtml(item.severity + ' · ' + item.category) +
       '</strong> ' + escapeHtml(item.page) + ' — ' + escapeHtml(item.message) + '</li>').join('') + '</ul>'
     : '<p>No findings.</p>';
-  const screenshotGroups = ['post', 'page', 'homepage', 'system'].map((type) => {
+  const screenshotGroups = ['post', 'page', 'homepage', 'system', 'consent'].map((type) => {
     const items = screenshots.filter((item) => item.type === type);
     if (!items.length) return '';
     return '<section><h3>' + typeLabel(type) + ' screenshots</h3>' + items.map((item) => {
-      const dimensions = item.viewportWidth + ' CSS pixels wide; document width ' + item.documentWidth + ' CSS pixels';
+      const dimensions = item.capture === 'consent'
+        ? 'Consent component ' + Math.round(item.consentWidth || 0) + ' by ' + Math.round(item.consentHeight || 0) + ' CSS pixels; within viewport: ' + Boolean(item.consentWithinViewport)
+        : item.viewportWidth + ' CSS pixels wide; page content width ' + item.documentWidth + ' CSS pixels with consent hidden';
       const alt = 'Screenshot of ' + (item.title || item.page) + ' at the ' + item.viewport + ' viewport, ' +
         item.width + ' by ' + item.height + ' pixels; ' + dimensions + '.';
       return '<h4>' + escapeHtml(item.title || item.page) + ' · ' + escapeHtml(item.viewport) + '</h4><figure><img src="./page-check-screenshots/' +
@@ -232,12 +269,15 @@ function reportHtml(report, screenshots) {
   }).join('');
   const markdownDetails = (report.markdownRendering?.documents || []).map((document) => '<section><h3>' + escapeHtml(document.path) +
     '</h4><ul>' + document.checks.map((item) => '<li>' + (item.passed ? 'Pass' : 'Fail') + ' — ' + escapeHtml(item.feature) + '</li>').join('') + '</ul></section>').join('');
+  const consentDetails = [...(report.consentUi?.results || []), ...(report.consentUi?.visualChecks || [])]
+    .map((item) => '<li>' + (item.passed ? 'Pass' : 'Fail') + ' — ' + escapeHtml(item.name ||
+      (item.page + ' at ' + item.viewport + ' viewport')) + '</li>').join('');
   return '<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">' +
     '<title>EdgePress accessibility and content report</title><style>@page{size:A4;margin:15mm}*{box-sizing:border-box}html{scroll-behavior:smooth}body{font:12px/1.55 Arial,sans-serif;color:#202520;background:#fff;margin:0 auto;padding:16px;max-width:1100px}header,main,footer{display:block}h1{font-size:25px;line-height:1.2}h2{font-size:19px;margin:26px 0 8px}h3{font-size:15px;margin:20px 0 8px}h4{font-size:12px;margin:16px 0 6px}p{margin:6px 0}a{color:#174c35;text-decoration:underline;text-underline-offset:2px}a:focus-visible{outline:3px solid #9a481e;outline-offset:3px}.skip-link{position:absolute;left:-10000px;top:auto}.skip-link:focus{left:16px;top:16px;padding:8px;background:#fff;border:2px solid #174c35;z-index:2}.report-nav ul{display:flex;gap:18px;flex-wrap:wrap;padding-left:20px}table{width:100%;border-collapse:collapse;margin:10px 0 20px;table-layout:fixed}caption{text-align:left;font-weight:bold;padding:0 0 6px}th,td{padding:7px;border:1px solid #879188;text-align:left;vertical-align:top;overflow-wrap:anywhere}thead th{background:#e9eee9}tbody th{background:#f5f6f3}li{margin:4px 0;overflow-wrap:anywhere}code{overflow-wrap:anywhere}.status{font-weight:bold;text-transform:uppercase}.appendix{break-before:page}figure{margin:0 0 20px;break-inside:avoid}figure img{display:block;max-width:100%;max-height:220mm;width:auto;height:auto;margin:0 auto;border:1px solid #879188;object-fit:contain}figcaption{font-size:10px;color:#39443b;margin-top:5px}section{break-inside:auto}footer{border-top:1px solid #879188;margin-top:24px;padding-top:10px}@media(max-width:600px){body{padding:12px}.report-nav ul{display:block}table{font-size:11px}th,td{padding:5px}}@media print{body{max-width:none;padding:0}.report-nav{display:none}a{color:#202520}.appendix{break-before:page}h2,h3,h4{break-after:avoid}figure{break-inside:avoid}}</style></head>' +
     '<body><a class="skip-link" href="#main">Skip to report</a><header><h1>EdgePress accessibility and content report</h1><p>Generated ' +
     escapeHtml(report.generatedAt) + ' · Overall status: <span class="status">' + escapeHtml(report.status) + '</span>.</p>' +
     '<nav class="report-nav" aria-label="Report sections"><ul><li><a href="#summary">Summary</a></li><li><a href="#content">Content reviewed</a></li>' +
-    '<li><a href="#findings">Findings</a></li><li><a href="#markdown">Markdown rendering</a></li><li><a href="#evidence">Screenshots</a></li><li><a href="#scope">Scope</a></li></ul></nav></header>' +
+    '<li><a href="#findings">Findings</a></li><li><a href="#markdown">Markdown rendering</a></li><li><a href="#consent">Consent interface</a></li><li><a href="#evidence">Screenshots</a></li><li><a href="#scope">Scope</a></li></ul></nav></header>' +
     '<main id="main"><section id="summary"><h2>Audit summary</h2>' + statusTable + summary + '<p>Generated HTML documents: ' + report.pages +
     ' · HTML bytes: ' + report.metrics.htmlBytes + ' · Stylesheet references: ' + report.metrics.stylesheets +
     ' · Script references: ' + report.metrics.scripts + '.</p></section>' +
@@ -245,7 +285,9 @@ function reportHtml(report, screenshots) {
     documentSections + '</section><section id="findings"><h2>Findings</h2>' + findings + '</section>' +
     '<section id="markdown"><h2>Markdown rendering verification</h2><p>' + escapeHtml(String(report.markdownRendering?.passed || 0)) + ' of ' +
     escapeHtml(String(report.markdownRendering?.checks || 0)) + ' syntax checks passed across the tutorial post locales.</p>' + markdownDetails + '</section>' +
-    '<section id="evidence" class="appendix"><h2>Responsive page screenshots</h2><p>Mobile screenshots use a 390 by 844 CSS pixel viewport. Each caption includes the measured document width so horizontal overflow is visible in the report.</p>' +
+    '<section id="consent"><h2>Consent interface checks</h2><p>Consent component checks run separately from page-content layout checks.</p>' +
+    (consentDetails ? '<ul>' + consentDetails + '</ul>' : '<p>No consent UI checks were run.</p>') + '</section>' +
+    '<section id="evidence" class="appendix"><h2>Responsive and consent screenshots</h2><p>Page screenshots use a 390 by 844 CSS pixel mobile viewport and hide the consent component while measuring page content. Separate consent screenshots crop the component at desktop and mobile sizes.</p>' +
     screenshotGroups + '</section><section id="scope"><h2>Scope and limits</h2><ul>' + report.scope.map((item) => '<li>' + escapeHtml(item) + '</li>').join('') +
     '</ul></section></main><footer><p>EdgePress local PDF report. Screenshot details are included as evidence and may be small when printed.</p></footer></body></html>';
 }
@@ -407,11 +449,25 @@ export async function addVisualEvidence(config, report) {
         const digest = createHash('sha256').update(relativeFile + ':' + viewport.name).digest('hex').slice(0, 10);
         const file = 'page-' + digest + '.png';
         const target = resolve(evidenceDirectory, file);
-        screenshots.push({ page: relativeFile, type: document.type, title: document.title, viewport: viewport.name, width: viewport.width,
+        screenshots.push({ page: relativeFile, type: document.type, capture: 'page', title: document.title, viewport: viewport.name, width: viewport.width,
           height: viewport.height, file, target,
           label: relativeFile + ' · ' + viewport.name + ' (' + viewport.width + '×' + viewport.height + ')' });
       }
     }
+    if (config.browserPlugins.consent.enabled) {
+      const availableSet = new Set(available);
+      for (const relativeFile of new Set([...homePaths, ...privacyPaths])) {
+        if (!availableSet.has(relativeFile)) continue;
+        for (const viewport of [desktop, mobile]) {
+          const digest = createHash('sha256').update('consent:' + relativeFile + ':' + viewport.name).digest('hex').slice(0, 10);
+          const file = 'consent-' + digest + '.png';
+          screenshots.push({ page: relativeFile, type: 'consent', capture: 'consent', title: 'Privacy choices',
+            viewport: viewport.name, width: viewport.width, height: viewport.height, file,
+            target: resolve(evidenceDirectory, file), label: 'Privacy choices · ' + relativeFile + ' · ' + viewport.name +
+              ' (' + viewport.width + '×' + viewport.height + ')' });
+        }
+      }
+    }
     reportServer = await startReportServer(config.resolvedPaths.output, evidenceDirectory, htmlPath);
     browserSession = await startHeadlessBrowser(browser, profile);
     for (const screenshot of screenshots) {
@@ -419,19 +475,57 @@ export async function addVisualEvidence(config, report) {
       await browserSession.setViewport(viewport);
       await browserSession.navigate('http://127.0.0.1:' + reportServer.port + siteAddress(screenshot.page));
       const dimensions = await browserSession.metrics();
-      await writeFile(screenshot.target, await browserSession.screenshot());
+      if (screenshot.capture === 'consent') {
+        report.consentUi.visualChecks ||= [];
+        const checks = [
+          ['component stays inside the viewport', dimensions.consentExists && dimensions.consentWithinViewport],
+          ['component content stays inside its own box', dimensions.consentExists && dimensions.consentInnerNoOverflow],
+          ['accept and reject actions have equal visual weight', dimensions.consentExists && dimensions.consentActionsBalanced],
+          ['optional services begin unchecked', dimensions.consentExists && dimensions.consentOptInDefault],
+          ['expanded service details disclose all configured fields', dimensions.consentExists && dimensions.consentServiceDisclosures && dimensions.consentDetails]
+        ];
+        report.consentUi.visualChecks.push(...checks.map(([name, passed]) => ({ page: screenshot.page, viewport: viewport.name,
+          name, passed, consentWidth: dimensions.consentWidth, consentHeight: dimensions.consentHeight })));
+        const withinViewport = dimensions.consentExists && dimensions.consentWithinViewport;
+        const noInnerOverflow = dimensions.consentExists && dimensions.consentInnerNoOverflow;
+        if (!dimensions.consentExists) {
+          report.issues.push({ severity: 'error', category: 'consent-ui', page: screenshot.page,
+            message: 'The consent manager did not appear in the browser.' });
+        } else if (!withinViewport || !noInnerOverflow) {
+          report.issues.push({ severity: 'error', category: 'consent-ui', page: screenshot.page,
+            message: 'Consent UI exceeded its viewport or its own content box at the ' + viewport.name + ' size.' });
+        }
+      }
+      const image = screenshot.capture === 'consent'
+        ? await browserSession.screenshot({ clipSelector: '[data-consent-ui]' })
+        : await browserSession.screenshot({ hideConsent: config.browserPlugins.consent.enabled });
+      if (!image) {
+        report.issues.push({ severity: 'error', category: screenshot.capture === 'consent' ? 'consent-ui' : 'visual-evidence',
+          page: screenshot.page, message: 'The requested screenshot area was not present in the browser.' });
+        continue;
+      }
+      await writeFile(screenshot.target, image);
       const imageInfo = await lstat(screenshot.target);
       if (!imageInfo.isFile() || imageInfo.size < 1000) throw new Error('Headless browser produced an empty screenshot');
       screenshot.viewportWidth = dimensions.viewportWidth;
-      screenshot.documentWidth = dimensions.documentWidth;
+      screenshot.documentWidth = dimensions.pageDocumentWidth;
+      screenshot.consentWidth = dimensions.consentWidth;
+      screenshot.consentHeight = dimensions.consentHeight;
+      screenshot.consentWithinViewport = dimensions.consentWithinViewport;
       if (viewport.name === 'mobile' && dimensions.viewportWidth !== viewport.width) {
         report.issues.push({ severity: 'error', category: 'responsive-layout', page: screenshot.page,
           message: 'Mobile viewport measured ' + dimensions.viewportWidth + ' CSS pixels instead of ' + viewport.width + '.' });
-      } else if (viewport.name === 'mobile' && dimensions.documentWidth > dimensions.viewportWidth) {
+      } else if (screenshot.capture === 'page' && viewport.name === 'mobile' && dimensions.pageDocumentWidth > dimensions.viewportWidth) {
         report.issues.push({ severity: 'error', category: 'responsive-layout', page: screenshot.page,
-          message: 'Mobile document width is ' + dimensions.documentWidth + ' CSS pixels for a ' + dimensions.viewportWidth + ' pixel viewport.' });
+          message: 'Page content width is ' + dimensions.pageDocumentWidth + ' CSS pixels for a ' + dimensions.viewportWidth + ' pixel viewport; consent UI is measured separately.' });
       }
     }
+    if (report.consentUi?.visualChecks) {
+      const visualChecks = report.consentUi.visualChecks;
+      report.consentUi.checks += visualChecks.length;
+      report.consentUi.passed += visualChecks.filter((item) => item.passed).length;
+      report.consentUi.status = report.consentUi.passed === report.consentUi.checks ? 'pass' : 'fail';
+    }
     report.errors = report.issues.filter((item) => item.severity === 'error').length;
     report.warnings = report.issues.filter((item) => item.severity === 'warning').length;
     report.status = report.errors ? 'fail' : report.warnings ? 'warning' : 'pass';
@@ -440,9 +534,10 @@ export async function addVisualEvidence(config, report) {
       if (findings.some((item) => item.severity === 'error')) document.status = 'fail';
       else if (findings.length) document.status = 'warning';
     }
-    report.visualEvidence = { status: 'complete', pdf: 'tools/page-check.pdf', screenshots: screenshots.map((item) => ({
-      page: item.page, type: item.type, title: item.title, viewport: item.viewport, width: item.width, height: item.height,
+    report.visualEvidence = { status: 'complete', pdf: 'tools/page-check.pdf', screenshots: screenshots.filter((item) => item.viewportWidth).map((item) => ({
+      page: item.page, type: item.type, capture: item.capture, title: item.title, viewport: item.viewport, width: item.width, height: item.height,
       viewportWidth: item.viewportWidth, documentWidth: item.documentWidth,
+      consentWidth: item.consentWidth, consentHeight: item.consentHeight, consentWithinViewport: item.consentWithinViewport,
       label: item.label
     })) };
     const initialHtml = reportHtml(report, screenshots);