privalint 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 JExcellence
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,195 @@
-# Temporary Holding Version
+# privalint
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![CI](https://github.com/jexcellence/privalint/actions/workflows/ci.yml/badge.svg)](https://github.com/jexcellence/privalint/actions/workflows/ci.yml)
+[![npm](https://img.shields.io/npm/v/privalint)](https://www.npmjs.com/package/privalint)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
+
+Lint your website for the GDPR mistakes that get people warning letters: trackers that fire before
+consent or keep running after "reject", Google Fonts loaded from Google, embeds and a missing
+Impressum.
+
+privalint opens your site in a real Chromium browser with no cookies or storage, like a first
+visit. It records what loads before anyone touches the consent banner, then clicks "reject" and
+checks what still loads. Run it from your terminal or as a GitHub Action on every pull request.
+
+```bash
+npx privalint https://your-site.de
+```
+
+<p align="center">
+  <img src="docs/demo.svg" alt="privalint output: Google Analytics still runs after clicking reject, Google Fonts are loaded from Google, a YouTube embed loads before consent" width="820">
+</p>
+
+<sub>Output for the demo page in <a href="test/fixtures/demo/index.html"><code>test/fixtures/demo</code></a>, long lines
+shortened. Regenerate it with <code>npm run demo</code>.</sub>
+
+> [!IMPORTANT]
+> privalint runs automated checks. A clean result means it found none of the problems it looks
+> for. It does not make your site GDPR compliant and it is not legal advice.
+
+## What it checks
+
+| Rule                                                           | Severity | What it finds                                                                                                              |
+| -------------------------------------------------------------- | -------- | -------------------------------------------------------------------------------------------------------------------------- |
+| [`pre-consent-trackers`](docs/rules/pre-consent-trackers.md)   | error    | Analytics, ads and session-replay tools that send requests or set cookies before consent. A bare tag manager is a warning. |
+| [`trackers-after-reject`](docs/rules/trackers-after-reject.md) | error    | Trackers that still load after clicking "reject" on the consent banner and reloading.                                      |
+| [`reject-option`](docs/rules/reject-option.md)                 | warning  | A banner with "accept" but no "reject" on its first layer. Pay-or-OK banners are noted as info.                            |
+| [`google-fonts`](docs/rules/google-fonts.md)                   | error    | Fonts fetched from `fonts.googleapis.com` / `fonts.gstatic.com`. Leftover preconnects are a warning.                       |
+| [`third-party-embeds`](docs/rules/third-party-embeds.md)       | warning  | YouTube, Vimeo, Google Maps, reCAPTCHA, Gravatar and social embeds loading before consent.                                 |
+| [`third-party-cdns`](docs/rules/third-party-cdns.md)           | info     | Scripts and styles from jsDelivr, unpkg, cdnjs and other public CDNs.                                                      |
+| [`impressum-link`](docs/rules/impressum-link.md)               | warning  | Pages without a link to an Impressum. A contact link alone is noted as info.                                               |
+| [`privacy-policy-link`](docs/rules/privacy-policy-link.md)     | warning  | Pages without a link to a privacy policy.                                                                                  |
+
+More rules are on the [roadmap](#roadmap). Each one is a small file with tests, see
+[CONTRIBUTING.md](CONTRIBUTING.md).
+
+## GitHub Action
+
+```yaml
+name: Privacy
+
+on:
+  pull_request:
+  schedule:
+    - cron: "0 6 * * 1"
+
+jobs:
+  privalint:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write # only needed for the SARIF upload
+    steps:
+      - uses: jexcellence/privalint@v0
+        with:
+          url: https://your-site.de
+          max-pages: 20
+
+      - uses: github/codeql-action/upload-sarif@v4
+        if: always()
+        with:
+          sarif_file: privalint.sarif
+          category: privalint
+```
+
+The report shows up in the job summary. With the SARIF upload, findings also appear under
+**Security → Code scanning**.
+
+Scanning a preview deployment instead of production catches problems before they ship. Pass the
+preview URL from your hosting provider's deployment event or action output as `url`.
+
+| Input         | Default           |                                             |
+| ------------- | ----------------- | ------------------------------------------- |
+| `url`         |                   | Page to scan. Required.                     |
+| `max-pages`   | `1`               | How many pages of the same site to crawl.   |
+| `fail-on`     | `error`           | `error`, `warning` or `never`.              |
+| `disable`     |                   | Comma-separated rule ids to skip.           |
+| `sarif-file`  | `privalint.sarif` | Where to write SARIF. Empty to skip.        |
+| `job-summary` | `true`            | Add the Markdown report to the job summary. |
+
+Outputs: `exit-code`, and `sarif-file` when a report was written.
+
+The action uses the runner's Node.js (20.12 or newer) and leaves your job's Node version alone.
+On self-hosted runners without it, add `actions/setup-node` before this step.
+
+> [!NOTE]
+> Code scanning expects each finding to point at a file in your repository, which a live page
+> doesn't have. privalint maps every page to a stable path such as `privalint/your-site.de/kontakt`.
+> Alerts show up with message, evidence and fix, but there is no source file to jump to. The
+> [demo scan](.github/workflows/demo.yml) runs this setup every week.
+
+## CLI
+
+```
+privalint <url> [options]
+
+  -p, --max-pages <n>     Crawl up to n pages of the same site (default 1)
+  -f, --format <format>   text | json | markdown | sarif (default text)
+  -o, --output <file>     Write the report to a file and print a text summary.
+                          Repeatable; .sarif, .json and .md pick their format,
+                          other extensions use --format
+      --fail-on <level>   error | warning | never (default error)
+      --disable <rules>   Comma-separated rule ids to skip
+      --settle <ms>       Wait this long after load for late tags (default 2000)
+      --timeout <ms>      Navigation timeout per page (default 30000)
+      --locale <locale>   Browser locale (default de-DE)
+      --skip-consent      Don't click "reject" on the consent banner
+      --headed            Open a visible browser window instead of running headless
+      --channel <name>    Use an installed browser: chrome or msedge
+      --list-rules        Print the available rules and exit
+```
+
+Exit codes: `0` nothing at or above `--fail-on`, `1` findings, `2` bad arguments or a failed scan.
+
+The first run needs a browser. If Playwright hasn't installed one yet:
+
+```bash
+npx playwright install chromium
+```
+
+## Use it from code
+
+```ts
+import { scan } from 'privalint';
+
+const result = await scan('https://your-site.de', { maxPages: 10 });
+for (const finding of result.findings) {
+  console.log(finding.severity, finding.ruleId, finding.pageUrl);
+}
+```
+
+## How it works
+
+1. Every page is opened in a **fresh browser context**: no cookies and no storage, the same as a
+   first visit.
+2. privalint waits for the network to go idle plus a settle delay (`--settle`), so tags that load
+   late are caught too.
+3. It records every request, the final cookie jar, all links and `<link>` resource hints.
+4. On the start page it looks for the consent banner, either by the selectors of common consent
+   managers (OneTrust, Cookiebot, Usercentrics, Borlabs, Complianz and others) or by button labels
+   in six languages. It clicks "reject", reloads and records what still loads.
+5. Each rule looks at those snapshots and reports findings with evidence and a suggested fix.
+6. With `--max-pages`, links to the same site are followed breadth-first. Query strings are
+   dropped, pages are deduplicated after redirects, and pages that fail to load (downloads,
+   timeouts) are listed but don't stop the crawl.
+
+### Limitations
+
+- Some sites don't show their consent banner to headless browsers. privalint then reports
+  "no banner found" and skips the reject check. Run it locally with `--headed` to scan in a
+  visible window; with `--channel msedge` or `--channel chrome` it uses your installed browser
+  instead of the bundled one. privalint never disguises itself as a different browser.
+- Some sites block automated browsers completely and serve a block page instead. privalint scans
+  what it gets, so check the scanned URL and the page count in the report.
+- Only "reject" is tested. Whether "accept" works, and whether rejecting is as easy as accepting
+  beyond the presence of a button, is not judged.
+- Tracker detection uses a hand-maintained list ([`src/data/trackers.ts`](src/data/trackers.ts)).
+  A vendor missing from the list goes unnoticed. Additions are very welcome.
+- First-party detection compares hostnames and ignores the public suffix list, so sibling
+  subdomains on shared hosts like `*.github.io` count as first party.
+- Server-side tracking can't be seen from the browser.
+- Many consent managers decide by IP address whether to show a banner. GitHub-hosted runners
+  have US addresses, so some sites load trackers there that EU visitors never get, and the
+  result differs from what an EU visitor sees. Use a runner or proxy in the EU for results you
+  want to rely on.
+- Chromium is launched with Playwright's defaults, which turn off the Chromium sandbox. Don't
+  scan sites you don't trust on a machine that holds secrets.
+
+## Roadmap
+
+- PR comments from the Action
+- Config file (`privalint.config.ts`) for allowlists and per-rule severity
+- Check the settings layer of banners and the "accept" path
+- More trackers, embeds and consent managers (see the
+  [`good first issue`](https://github.com/jexcellence/privalint/labels/good%20first%20issue) label)
+- Larger tracker list built from the Apache-licensed
+  [Open Cookie Database](https://github.com/jkwakman/Open-Cookie-Database)
+
+## Contributing
+
+Bug reports, false positives, new trackers and new rules are all welcome. Start with
+[CONTRIBUTING.md](CONTRIBUTING.md).
+
+## License
+
+[MIT](LICENSE)

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,175 @@
+#!/usr/bin/env node
+import { writeFile } from 'node:fs/promises';
+import { extname } from 'node:path';
+import { parseArgs } from 'node:util';
+import { VERSION } from './meta.js';
+import { FORMATS, format, formatText } from './reporters/index.js';
+import { defaultRules } from './rules/index.js';
+import { scan } from './scanner.js';
+const FAIL_LEVELS = ['error', 'warning', 'never'];
+const CHANNELS = ['chrome', 'msedge'];
+const EXIT_OK = 0;
+const EXIT_FINDINGS = 1;
+const EXIT_ERROR = 2;
+const HELP = `privalint ${VERSION}
+Find GDPR problems on a live website: trackers before consent or after
+"reject", Google Fonts, missing Impressum. Runs the site in a real browser.
+
+Usage
+  privalint <url> [options]
+
+Options
+  -p, --max-pages <n>     Crawl up to n pages of the same site (default 1)
+  -f, --format <format>   ${FORMATS.join(' | ')} (default text)
+  -o, --output <file>     Write the report to a file and print a text summary.
+                          Repeatable; .sarif, .json and .md pick their format,
+                          other extensions use --format
+      --fail-on <level>   error | warning | never (default error)
+      --disable <rules>   Comma-separated rule ids to skip
+      --settle <ms>       Wait this long after load for late tags (default 2000)
+      --timeout <ms>      Navigation timeout per page (default 30000)
+      --locale <locale>   Browser locale (default de-DE)
+      --skip-consent      Don't click "reject" on the consent banner
+      --headed            Open a visible browser window instead of running headless
+      --channel <name>    Use an installed browser: chrome or msedge
+      --list-rules        Print the available rules and exit
+  -h, --help              Show this help
+  -v, --version           Show the version
+
+Exit codes
+  0  no findings at or above --fail-on
+  1  findings at or above --fail-on
+  2  invalid arguments or the scan failed
+`;
+const FORMAT_BY_EXTENSION = {
+    '.sarif': 'sarif',
+    '.json': 'json',
+    '.md': 'markdown',
+};
+async function main(argv) {
+    const { values, positionals } = parseArgs({
+        args: argv,
+        allowPositionals: true,
+        options: {
+            'max-pages': { type: 'string', short: 'p' },
+            format: { type: 'string', short: 'f', default: 'text' },
+            output: { type: 'string', short: 'o', multiple: true },
+            'fail-on': { type: 'string', default: 'error' },
+            disable: { type: 'string' },
+            settle: { type: 'string' },
+            timeout: { type: 'string' },
+            locale: { type: 'string' },
+            'skip-consent': { type: 'boolean' },
+            headed: { type: 'boolean' },
+            channel: { type: 'string' },
+            'list-rules': { type: 'boolean' },
+            help: { type: 'boolean', short: 'h' },
+            version: { type: 'boolean', short: 'v' },
+        },
+    });
+    if (values.help) {
+        process.stdout.write(HELP);
+        return EXIT_OK;
+    }
+    if (values.version) {
+        process.stdout.write(`${VERSION}\n`);
+        return EXIT_OK;
+    }
+    if (values['list-rules']) {
+        for (const rule of defaultRules) {
+            process.stdout.write(`${rule.id.padEnd(22)} ${rule.title}\n`);
+        }
+        return EXIT_OK;
+    }
+    const target = parseTarget(positionals);
+    const reportFormat = oneOf(values.format, FORMATS, '--format');
+    const failOn = oneOf(values['fail-on'], FAIL_LEVELS, '--fail-on');
+    const rules = selectRules(values.disable);
+    const result = await scan(target.href, {
+        rules,
+        maxPages: wholeNumber(values['max-pages'], '--max-pages', 1),
+        settleMs: wholeNumber(values.settle, '--settle', 0),
+        timeoutMs: wholeNumber(values.timeout, '--timeout', 1),
+        locale: values.locale,
+        consentCheck: values['skip-consent'] !== true,
+        headed: values.headed === true,
+        channel: values.channel === undefined ? undefined : oneOf(values.channel, CHANNELS, '--channel'),
+        onPage: (page) => process.stderr.write(page.error === undefined
+            ? `scanned ${page.finalUrl}\n`
+            : `skipped ${page.url}: ${page.error}\n`),
+    });
+    const outputs = values.output ?? [];
+    for (const file of outputs) {
+        const kind = FORMAT_BY_EXTENSION[extname(file).toLowerCase()] ?? reportFormat;
+        await writeFile(file, format(result, kind));
+    }
+    if (outputs.length > 0) {
+        process.stdout.write(`${formatText(result, process.stdout.isTTY)}\n`);
+        process.stdout.write(`\nReport written to ${outputs.join(', ')}\n`);
+    }
+    else {
+        process.stdout.write(format(result, reportFormat, { color: process.stdout.isTTY }));
+        if (reportFormat === 'text') {
+            process.stdout.write('\n');
+        }
+    }
+    return shouldFail(result.findings, failOn) ? EXIT_FINDINGS : EXIT_OK;
+}
+function parseTarget(positionals) {
+    const [raw, ...rest] = positionals;
+    if (raw === undefined || rest.length > 0) {
+        throw new Error('Expected exactly one URL. Run privalint --help for usage.');
+    }
+    const withScheme = /^https?:\/\//i.test(raw) ? raw : `https://${raw}`;
+    try {
+        return new URL(withScheme);
+    }
+    catch {
+        throw new Error(`Not a valid URL: ${raw}`);
+    }
+}
+function oneOf(value, allowed, flag) {
+    if (value !== undefined && allowed.includes(value)) {
+        return value;
+    }
+    throw new Error(`${flag} must be one of: ${allowed.join(', ')}`);
+}
+function wholeNumber(value, flag, min) {
+    if (value === undefined) {
+        return undefined;
+    }
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed < min) {
+        throw new Error(`${flag} must be a whole number of at least ${min}`);
+    }
+    return parsed;
+}
+function selectRules(disable) {
+    const disabled = new Set((disable ?? '')
+        .split(',')
+        .map((id) => id.trim())
+        .filter(Boolean));
+    const unknown = [...disabled].filter((id) => !defaultRules.some((rule) => rule.id === id));
+    if (unknown.length > 0) {
+        throw new Error(`Unknown rule: ${unknown.join(', ')}. See privalint --list-rules.`);
+    }
+    return defaultRules.filter((rule) => !disabled.has(rule.id));
+}
+function shouldFail(findings, failOn) {
+    switch (failOn) {
+        case 'never':
+            return false;
+        case 'warning':
+            return findings.some((f) => f.severity === 'error' || f.severity === 'warning');
+        default:
+            return findings.some((f) => f.severity === 'error');
+    }
+}
+main(process.argv.slice(2)).then((code) => {
+    process.exitCode = code;
+}, (error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`privalint: ${message}\n`);
+    process.exitCode = EXIT_ERROR;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAe,MAAM,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAGpC,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC;AAC3D,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAG/C,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,MAAM,IAAI,GAAG,aAAa,OAAO;;;;;;;;;4BASL,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;CAoB9C,CAAC;AAEF,MAAM,mBAAmB,GAA2B;IAClD,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,UAAU;CAClB,CAAC;AAEF,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE;YACP,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;YACvD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;YACtD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACnC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACjC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;YACrC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACzC;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QACrC,KAAK;QACL,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;QAC5D,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACnD,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI;QAC7C,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI;QAC9B,OAAO,EACL,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;QACzF,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,KAAK,KAAK,SAAS;YACtB,CAAC,CAAC,WAAW,IAAI,CAAC,QAAQ,IAAI;YAC9B,CAAC,CAAC,WAAW,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,CAC3C;KACJ,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,YAAY,CAAC;QAC9E,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpF,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,WAAqB;IACxC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC;IACnC,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CACZ,KAAyB,EACzB,OAAqB,EACrB,IAAY;IAEZ,IAAI,KAAK,KAAK,SAAS,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,KAAU,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAY,EAAE,GAAW;IACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,OAAO,IAAI,EAAE,CAAC;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,QAAmB,EAAE,MAAiB;IACxD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,KAAK,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAClF;YACE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE;IACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;IACjB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,OAAO,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC;AAChC,CAAC,CACF,CAAC"}

package/dist/consent.d.ts

@@ -0,0 +1,12 @@
+import type { BrowserContext, Page } from 'playwright';
+import type { ConsentObservation, RecordedRequest } from './types.js';
+export interface ConsentCheckOptions {
+    settleMs: number;
+    timeoutMs: number;
+}
+/**
+ * Looks for a consent banner, clicks its reject button if there is one,
+ * reloads the page and records what still gets loaded. The page must already
+ * be loaded; `requests` is the live array the page's request listener writes to.
+ */
+export declare function observeConsent(page: Page, context: BrowserContext, requests: RecordedRequest[], options: ConsentCheckOptions): Promise<ConsentObservation>;

package/dist/consent.js

@@ -0,0 +1,185 @@
+/**
+ * Button selectors of common consent managers. Best effort: vendors change
+ * their markup, so the label heuristic below is the fallback for everything
+ * that isn't listed or no longer matches.
+ */
+const KNOWN_CMPS = [
+    {
+        name: 'Cookiebot',
+        accept: '#CybotCookiebotDialogBodyLevelButtonLevelOptinAllowAll, #CybotCookiebotDialogBodyButtonAccept',
+        reject: '#CybotCookiebotDialogBodyButtonDecline',
+    },
+    {
+        name: 'OneTrust',
+        accept: '#onetrust-accept-btn-handler',
+        reject: '#onetrust-reject-all-handler',
+    },
+    {
+        name: 'Usercentrics',
+        accept: '[data-testid="uc-accept-all-button"]',
+        reject: '[data-testid="uc-deny-all-button"]',
+    },
+    {
+        name: 'Borlabs Cookie',
+        accept: '#BorlabsCookieBox [data-cookie-accept-all]',
+        reject: '#BorlabsCookieBox [data-cookie-refuse]',
+    },
+    {
+        name: 'Complianz',
+        accept: '.cmplz-cookiebanner .cmplz-accept',
+        reject: '.cmplz-cookiebanner .cmplz-deny',
+    },
+    { name: 'CookieYes', accept: '.cky-btn-accept', reject: '.cky-btn-reject' },
+    {
+        name: 'Didomi',
+        accept: '#didomi-notice-agree-button',
+        reject: '#didomi-notice-disagree-button',
+    },
+    { name: 'consentmanager', accept: '.cmpboxbtnyes', reject: '.cmpboxbtnno' },
+    { name: 'iubenda', accept: '.iubenda-cs-accept-btn', reject: '.iubenda-cs-reject-btn' },
+    { name: 'Klaro', accept: '.klaro .cm-btn-success', reject: '.klaro .cm-btn-decline' },
+    {
+        name: 'CookieConsent',
+        accept: '#cc-main [data-role="all"]',
+        reject: '#cc-main [data-role="necessary"]',
+    },
+];
+// Unanchored on purpose: "Alle Cookies akzeptieren" and "Accept all cookies" must both match.
+// Labels that also match REJECT_LABEL ("Nur notwendige akzeptieren") are never treated as accept.
+const ACCEPT_LABEL = /akzeptieren|annehmen|zustimmen|einwilligen|einverstanden|alles? (cookies )?(zulassen|erlauben)|\baccept|\ballow all|\bagree\b|accepter|aceptar|accetta|accepteren|alles toestaan/i;
+const REJECT_LABEL = /ablehnen|verweigern|nur (technisch )?(notwendige|essenzielle|erforderliche)|\breject|\bdecline|\bdeny\b|\brefuse|(only|use) (strictly )?(necessary|essential|required)|refuser|continuer sans accepter|rechazar|rifiuta|weigeren|alleen noodzakelijke/i;
+/** Second option on "pay or OK" banners: accept tracking or take out a subscription. */
+const SUBSCRIBE = /abonn|\babo\b|subscri|werbefrei|ohne werbung|ad-free|without ads|\bpur\b/i;
+/** A frame without any of these words is not showing a consent banner. */
+const CONSENT_CONTEXT = /cookie|consent|einwillig|tracking|datenschutz|privacy/i;
+const CLICKABLE = 'button, [role="button"], a, input[type="button"], input[type="submit"]';
+/**
+ * Looks for a consent banner, clicks its reject button if there is one,
+ * reloads the page and records what still gets loaded. The page must already
+ * be loaded; `requests` is the live array the page's request listener writes to.
+ */
+export async function observeConsent(page, context, requests, options) {
+    const banner = await findBanner(page);
+    if (banner === undefined) {
+        return { bannerFound: false, rejected: false };
+    }
+    const observation = {
+        bannerFound: true,
+        rejected: false,
+        ...(banner.cmp === undefined ? {} : { cmp: banner.cmp }),
+        ...(banner.acceptLabel === undefined ? {} : { acceptLabel: banner.acceptLabel }),
+        ...(banner.rejectLabel === undefined ? {} : { rejectLabel: banner.rejectLabel }),
+        ...(banner.payOrOk ? { payOrOk: true } : {}),
+    };
+    if (banner.reject === undefined) {
+        return observation;
+    }
+    try {
+        const cookiesBefore = new Set((await context.cookies()).map(cookieKey));
+        const firstRequest = requests.length;
+        await banner.reject.click({ timeout: 5_000 });
+        await settle(page, options);
+        await page.reload({ waitUntil: 'load', timeout: options.timeoutMs });
+        await settle(page, options);
+        const cookies = (await context.cookies())
+            .filter((cookie) => !cookiesBefore.has(cookieKey(cookie)))
+            .map(({ name, domain, path, expires }) => ({ name, domain, path, expires }));
+        return {
+            ...observation,
+            rejected: true,
+            afterReject: { requests: requests.slice(firstRequest), cookies },
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { ...observation, error: message.split('\n')[0] ?? message };
+    }
+}
+async function findBanner(page) {
+    for (const cmp of KNOWN_CMPS) {
+        const accept = await firstVisible(page.locator(cmp.accept));
+        if (accept !== undefined) {
+            const reject = await firstVisible(page.locator(cmp.reject));
+            return describe(accept, reject, cmp.name);
+        }
+    }
+    // Unknown or self-built banners: go by button labels, in every frame.
+    for (const frame of page.frames()) {
+        const text = await frame
+            .locator('body')
+            .innerText({ timeout: 2_000 })
+            .catch(() => '');
+        if (!CONSENT_CONTEXT.test(text)) {
+            continue;
+        }
+        const clickable = frame.locator(CLICKABLE);
+        const accept = await firstVisible(clickable.filter({ hasText: ACCEPT_LABEL }).filter({ hasNotText: REJECT_LABEL }));
+        if (accept !== undefined) {
+            const reject = await firstVisible(clickable.filter({ hasText: REJECT_LABEL }));
+            return describe(accept, reject);
+        }
+    }
+    return undefined;
+}
+async function describe(accept, reject, cmp) {
+    const banner = { acceptLabel: await label(accept) };
+    if (reject === undefined && (await offersSubscription(accept))) {
+        banner.payOrOk = true;
+    }
+    if (cmp !== undefined) {
+        banner.cmp = cmp;
+    }
+    if (reject !== undefined) {
+        banner.reject = reject;
+        banner.rejectLabel = await label(reject);
+    }
+    return banner;
+}
+/**
+ * Walks up from the accept button to the banner's outermost container below
+ * <body> and looks for a subscription offer among its buttons and links. The
+ * site's own navigation lives outside that container, so its "Abo" link
+ * doesn't count.
+ */
+async function offersSubscription(accept) {
+    return accept
+        .evaluate((element, source) => {
+        const pattern = new RegExp(source, 'i');
+        const parentOf = (node) => {
+            const root = node.getRootNode();
+            return node.parentElement ?? (root instanceof ShadowRoot ? root.host : null);
+        };
+        let container = element;
+        for (let parent = parentOf(container); parent !== null; parent = parentOf(container)) {
+            if (parent === document.body || parent === document.documentElement) {
+                break;
+            }
+            container = parent;
+        }
+        return [...container.querySelectorAll('a, button, [role="button"]')].some((control) => pattern.test(control.innerText ?? ''));
+    }, SUBSCRIBE.source)
+        .catch(() => false);
+}
+async function firstVisible(locator) {
+    const count = await locator.count().catch(() => 0);
+    for (let i = 0; i < Math.min(count, 10); i++) {
+        const candidate = locator.nth(i);
+        if (await candidate.isVisible().catch(() => false)) {
+            return candidate;
+        }
+    }
+    return undefined;
+}
+async function label(locator) {
+    const text = await locator.innerText({ timeout: 1_000 }).catch(() => '');
+    const value = text.trim() || ((await locator.getAttribute('value').catch(() => null)) ?? '');
+    return value.replace(/\s+/g, ' ').trim().slice(0, 80);
+}
+async function settle(page, options) {
+    await page.waitForLoadState('networkidle', { timeout: options.timeoutMs }).catch(() => {
+        // See capturePage: some pages never go idle.
+    });
+    await page.waitForTimeout(options.settleMs);
+}
+const cookieKey = (cookie) => `${cookie.name}|${cookie.domain}|${cookie.path}`;
+//# sourceMappingURL=consent.js.map

package/dist/consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,MAAM,UAAU,GAA4B;IAC1C;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EACJ,+FAA+F;QACjG,MAAM,EAAE,wCAAwC;KACjD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,8BAA8B;QACtC,MAAM,EAAE,8BAA8B;KACvC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,sCAAsC;QAC9C,MAAM,EAAE,oCAAoC;KAC7C;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,4CAA4C;QACpD,MAAM,EAAE,wCAAwC;KACjD;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,mCAAmC;QAC3C,MAAM,EAAE,iCAAiC;KAC1C;IACD,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE;IAC3E;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,6BAA6B;QACrC,MAAM,EAAE,gCAAgC;KACzC;IACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE;IAC3E,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,wBAAwB,EAAE;IACvF,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,wBAAwB,EAAE;IACrF;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,4BAA4B;QACpC,MAAM,EAAE,kCAAkC;KAC3C;CACF,CAAC;AAEF,8FAA8F;AAC9F,kGAAkG;AAClG,MAAM,YAAY,GAChB,mLAAmL,CAAC;AAEtL,MAAM,YAAY,GAChB,wPAAwP,CAAC;AAE3P,wFAAwF;AACxF,MAAM,SAAS,GAAG,2EAA2E,CAAC;AAE9F,0EAA0E;AAC1E,MAAM,eAAe,GAAG,wDAAwD,CAAC;AAEjF,MAAM,SAAS,GAAG,wEAAwE,CAAC;AAO3F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAU,EACV,OAAuB,EACvB,QAA2B,EAC3B,OAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,WAAW,GAAuB;QACtC,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,KAAK;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC;QAErC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,MAAM,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE5B,MAAM,OAAO,GAAqB,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;aACxD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;aACzD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAE/E,OAAO;YACL,GAAG,WAAW;YACd,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE;SACjE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAUD,KAAK,UAAU,UAAU,CAAC,IAAU;IAClC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,KAAK;aACrB,OAAO,CAAC,MAAM,CAAC;aACf,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;aAC7B,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CACjF,CAAC;QACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;YAC/E,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAe,EAAE,MAA2B,EAAE,GAAY;IAChF,MAAM,MAAM,GAAW,EAAE,WAAW,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5D,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,WAAW,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAAe;IAC/C,OAAO,MAAM;SACV,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5B,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAkB,EAAE;YACjD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/E,CAAC,CAAC;QACF,IAAI,SAAS,GAAY,OAAO,CAAC;QACjC,KAAK,IAAI,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACrF,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,IAAI,MAAM,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC;gBACpE,MAAM;YACR,CAAC;YACD,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,GAAG,SAAS,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACpF,OAAO,CAAC,IAAI,CAAE,OAAuB,CAAC,SAAS,IAAI,EAAE,CAAC,CACvD,CAAC;IACJ,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC;SACnB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAgB;IAC1C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,OAAgB;IACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAU,EAAE,OAA4B;IAC5D,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACpF,6CAA6C;IAC/C,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,MAAsD,EAAE,EAAE,CAC3E,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC"}

package/dist/data/third-parties.d.ts

@@ -0,0 +1,13 @@
+import { type HostPattern } from '../url.js';
+export interface ThirdParty extends HostPattern {
+    vendor: string;
+}
+/**
+ * Embedded content that transfers the visitor's IP address (and often sets
+ * cookies) as soon as it loads. Trackers are listed separately in trackers.ts.
+ */
+export declare const embeds: readonly ThirdParty[];
+/** Public CDNs for scripts, styles and icon fonts. */
+export declare const cdns: readonly ThirdParty[];
+export declare const findEmbed: (url: string) => ThirdParty | undefined;
+export declare const findCdn: (url: string) => ThirdParty | undefined;