privalint 0.1.1 → 0.3.0

package/dist/rules/tracker-hits.js.map

@@ -1 +1 @@
-{"version":3,"file":"tracker-hits.js","sourceRoot":"","sources":["../../src/rules/tracker-hits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAgB,MAAM,qBAAqB,CAAC;AAG1F,MAAM,YAAY,GAAG,CAAC,CAAC;AAQvB,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAC7B,QAAoC,EACpC,OAAkC;IAElC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuD,CAAC;IAC5E,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,QAAgB,EAAE,EAAE;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;QACjF,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,EAAE,WAAW,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GACX,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;YAChC,gBAAgB,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,EAAE,UAAU,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACxD,OAAO;QACP,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;KAC/C,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"tracker-hits.js","sourceRoot":"","sources":["../../src/rules/tracker-hits.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAa,GAAG,EAAa,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,YAAY,GAAG,CAAC,CAAC;AAQvB,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAC7B,QAAoC,EACpC,OAAkC,EAClC,IAAU;IAEV,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuD,CAAC;IAC5E,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,QAAgB,EAAE,EAAE;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;QACjF,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,EAAE,GAAG,YAAY,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GACX,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;YAChC,gBAAgB,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,EAAE,UAAU,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACxD,OAAO;QACP,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;KAC/C,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,eAAe,GAAkC;IACrD,SAAS,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE;IAC7C,WAAW,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE;IACjD,gBAAgB,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,gBAAgB,EAAE;IAChE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE;IAC5C,sBAAsB,EAAE,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,2BAA2B,EAAE;IACvF,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE;CACxD,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAyB,EAAE,IAAU,EAAE,EAAE,CACrE,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC"}

package/dist/rules/trackers-after-reject.js

@@ -1,4 +1,5 @@
-import { findTrackerHits } from './tracker-hits.js';
+import { say } from '../i18n.js';
+import { categoryLabel, findTrackerHits } from './tracker-hits.js';
 const ID = 'trackers-after-reject';
 export const trackersAfterReject = {
     id: ID,
@@ -7,21 +8,32 @@ export const trackersAfterReject = {
         'page and records what still loads. Anything on the tracker list that loads or sets new ' +
         'cookies after that ignores the visitor’s explicit refusal.',
     references: ['§ 25 Abs. 1 TDDDG', 'Art. 6(1)(a) GDPR', 'Art. 7(3) GDPR'],
-    check({ page }) {
+    check({ page, lang }) {
         const after = page.consent?.afterReject;
         if (after === undefined) {
             return [];
         }
-        return findTrackerHits(after.requests, after.cookies).map(({ tracker, evidence }) => ({
-            ruleId: ID,
-            // Same reasoning as pre-consent-trackers: the container alone may be configured correctly.
-            severity: tracker.category === 'tag-manager' ? 'warning' : 'error',
-            message: `${tracker.vendor} (${tracker.category}) still runs after clicking "${page.consent?.rejectLabel ?? 'reject'}".`,
-            pageUrl: page.finalUrl,
-            subject: tracker.vendor,
-            evidence,
-            fix: `Check that ${tracker.vendor} is assigned to a consent category in your consent manager and that the category is blocked when the visitor rejects.`,
-        }));
+        const button = page.consent?.rejectLabel ?? say(lang, { en: 'reject', de: 'Ablehnen' });
+        return findTrackerHits(after.requests, after.cookies, lang).map(({ tracker, evidence }) => {
+            const { vendor } = tracker;
+            const category = categoryLabel(tracker.category, lang);
+            return {
+                ruleId: ID,
+                // Same reasoning as pre-consent-trackers: the container alone may be configured correctly.
+                severity: tracker.category === 'tag-manager' ? 'warning' : 'error',
+                message: say(lang, {
+                    en: `${vendor} (${category}) still runs after clicking "${button}".`,
+                    de: `${vendor} (${category}) läuft weiter, obwohl „${button}“ geklickt wurde.`,
+                }),
+                pageUrl: page.finalUrl,
+                subject: vendor,
+                evidence,
+                fix: say(lang, {
+                    en: `Check that ${vendor} is assigned to a consent category in your consent manager and that the category is blocked when the visitor rejects.`,
+                    de: `Prüfen, ob ${vendor} im Consent-Tool einer Kategorie zugeordnet ist und diese Kategorie beim Ablehnen blockiert wird.`,
+                }),
+            };
+        });
     },
 };
 //# sourceMappingURL=trackers-after-reject.js.map

package/dist/rules/trackers-after-reject.js.map

@@ -1 +1 @@
-{"version":3,"file":"trackers-after-reject.js","sourceRoot":"","sources":["../../src/rules/trackers-after-reject.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,EAAE,GAAG,uBAAuB,CAAC;AAEnC,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,EAAE,EAAE,EAAE;IACN,KAAK,EAAE,8CAA8C;IACrD,WAAW,EACT,0FAA0F;QAC1F,yFAAyF;QACzF,4DAA4D;IAC9D,UAAU,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,gBAAgB,CAAC;IACxE,KAAK,CAAC,EAAE,IAAI,EAAE;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CACvD,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAW,EAAE,CAAC,CAAC;YACnC,MAAM,EAAE,EAAE;YACV,2FAA2F;YAC3F,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YAClE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,gCAAgC,IAAI,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,IAAI;YACxH,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,QAAQ;YACR,GAAG,EAAE,cAAc,OAAO,CAAC,MAAM,uHAAuH;SACzJ,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAC"}
+{"version":3,"file":"trackers-after-reject.js","sourceRoot":"","sources":["../../src/rules/trackers-after-reject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEnE,MAAM,EAAE,GAAG,uBAAuB,CAAC;AAEnC,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,EAAE,EAAE,EAAE;IACN,KAAK,EAAE,8CAA8C;IACrD,WAAW,EACT,0FAA0F;QAC1F,yFAAyF;QACzF,4DAA4D;IAC9D,UAAU,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,gBAAgB,CAAC;IACxE,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACxF,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,GAAG,CAC7D,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAW,EAAE;YACjC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;YAC3B,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACvD,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,2FAA2F;gBAC3F,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBAClE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE;oBACjB,EAAE,EAAE,GAAG,MAAM,KAAK,QAAQ,gCAAgC,MAAM,IAAI;oBACpE,EAAE,EAAE,GAAG,MAAM,KAAK,QAAQ,2BAA2B,MAAM,mBAAmB;iBAC/E,CAAC;gBACF,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,OAAO,EAAE,MAAM;gBACf,QAAQ;gBACR,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;oBACb,EAAE,EAAE,cAAc,MAAM,uHAAuH;oBAC/I,EAAE,EAAE,cAAc,MAAM,mGAAmG;iBAC5H,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/scan-options.d.ts

@@ -0,0 +1,39 @@
+import type { Lang } from './i18n.js';
+import type { Region } from './legal.js';
+import type { NetworkAdapter, NetworkLimits } from './network.js';
+import type { PageSnapshot, Rule } from './types.js';
+export interface ScanOptions {
+    maxPages?: number | undefined;
+    settleMs?: number | undefined;
+    /** Navigation/network-idle timeout, distinct from transport and capture deadlines. */
+    timeoutMs?: number | undefined;
+    locale?: string | undefined;
+    lang?: Lang | undefined;
+    /** Tool classification profile; does not determine which law applies. */
+    region?: Region | undefined;
+    rules?: readonly Rule[];
+    /** Legacy test helper: third-party requests receive synthetic empty responses. */
+    offline?: boolean;
+    consentCheck?: boolean | undefined;
+    headed?: boolean | undefined;
+    channel?: string | undefined;
+    /** Trusted hook receiving RAW observations. Do not log/expose without redaction. */
+    onPage?: (snapshot: PageSnapshot) => void;
+    /** Caller-owned transport; scan owns browser, fresh per-page contexts and request signals. */
+    networkAdapter?: NetworkAdapter;
+    /** Per-page budgets across initial loading and rejection. Requires networkAdapter. */
+    networkLimits?: NetworkLimits;
+    signal?: AbortSignal;
+    /** Entire capture including queue wait and consent; default 60s with an adapter. */
+    captureTimeoutMs?: number;
+    /** Stored issue details per page; counters are never truncated. Default 100. */
+    maxDiagnostics?: number;
+    /** Legacy default: throw on start-page navigation failure. Adapter default: report it. */
+    failureMode?: 'throw' | 'report';
+}
+export declare const DEFAULTS: {
+    maxPages: number;
+    settleMs: number;
+    timeoutMs: number;
+    locale: string;
+};

package/dist/scan-options.js

@@ -0,0 +1,2 @@
+export const DEFAULTS = { maxPages: 1, settleMs: 2_000, timeoutMs: 30_000, locale: 'de-DE' };
+//# sourceMappingURL=scan-options.js.map

package/dist/scan-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-options.js","sourceRoot":"","sources":["../src/scan-options.ts"],"names":[],"mappings":"AAkCA,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC"}

package/dist/scanner.d.ts

@@ -1,33 +1,5 @@
-import type { PageSnapshot, Rule, ScanResult } from './types.js';
-export interface ScanOptions {
-    /** Maximum number of pages on the same site to visit, starting with the given URL. */
-    maxPages?: number | undefined;
-    /** Extra time to wait after the network is idle, to catch delayed tags. */
-    settleMs?: number | undefined;
-    /** Navigation timeout per page. */
-    timeoutMs?: number | undefined;
-    locale?: string | undefined;
-    rules?: readonly Rule[];
-    /**
-     * Answer every third-party request with an empty response instead of fetching it.
-     * Requests are still recorded. Used by the test suite to stay off the network.
-     */
-    offline?: boolean;
-    /**
-     * Click "reject" on the start page's consent banner and record what still loads.
-     * On by default.
-     */
-    consentCheck?: boolean | undefined;
-    /**
-     * Open a visible browser window instead of running headless. Some sites only show their
-     * consent banner to regular browsers. Needs a display, so it doesn't work on CI runners.
-     */
-    headed?: boolean | undefined;
-    /**
-     * Use an installed browser instead of Playwright's bundled Chromium,
-     * e.g. `chrome` or `msedge`.
-     */
-    channel?: string | undefined;
-    onPage?: (snapshot: PageSnapshot) => void;
-}
+import { type ScanOptions } from './scan-options.js';
+import type { ScanResult } from './types.js';
+export type { ScanOptions } from './scan-options.js';
+export declare function throwIfAborted(signal?: AbortSignal): void;
 export declare function scan(target: string, options?: ScanOptions): Promise<ScanResult>;

package/dist/scanner.js

@@ -1,39 +1,67 @@
 import { chromium } from 'playwright';
-import { observeConsent } from './consent.js';
+import { assessPage } from './assessment.js';
+import { capturePage } from './capture.js';
+import { diagnosticUrl } from './diagnostics.js';
+import { applyRegion } from './legal.js';
+import { networkLimits } from './network.js';
 import { defaultRules } from './rules/index.js';
-import { crawlTarget, isFirstParty, withoutHash } from './url.js';
-const DEFAULTS = {
-    maxPages: 1,
-    settleMs: 2_000,
-    timeoutMs: 30_000,
-    locale: 'de-DE',
-};
+import { DEFAULTS } from './scan-options.js';
+import { crawlTarget, withoutHash } from './url.js';
+function integer(value, name, minimum) {
+    if (!Number.isSafeInteger(value) || value < minimum) {
+        throw new RangeError(`${name} must be a safe integer of at least ${minimum}`);
+    }
+}
+export function throwIfAborted(signal) {
+    if (signal?.aborted)
+        throw new DOMException('Scan aborted', 'AbortError');
+}
 export async function scan(target, options = {}) {
+    throwIfAborted(options.signal);
     const startedAt = Date.now();
     const rules = options.rules ?? defaultRules;
-    const maxPages = Math.max(1, options.maxPages ?? DEFAULTS.maxPages);
+    const maxPages = options.maxPages ?? DEFAULTS.maxPages;
+    integer(maxPages, 'maxPages', 1);
+    integer(options.settleMs ?? DEFAULTS.settleMs, 'settleMs', 0);
+    integer(options.timeoutMs ?? DEFAULTS.timeoutMs, 'timeoutMs', 1);
+    integer(options.maxDiagnostics ?? 100, 'maxDiagnostics', 0);
+    if (options.captureTimeoutMs !== undefined)
+        integer(options.captureTimeoutMs, 'captureTimeoutMs', 1);
+    if (options.networkLimits && !options.networkAdapter) {
+        throw new TypeError('networkLimits requires networkAdapter');
+    }
+    if (options.networkAdapter && options.offline) {
+        throw new TypeError('offline cannot be combined with networkAdapter');
+    }
+    if (options.networkAdapter)
+        networkLimits(options.networkLimits);
+    const lang = options.lang ?? 'en';
+    const region = options.region ?? 'de';
     let siteUrl = new URL(target);
+    if (!/^https?:$/.test(siteUrl.protocol))
+        throw new TypeError('Expected an HTTP(S) target');
     const browser = await chromium.launch({
         headless: options.headed !== true,
         ...(options.channel === undefined ? {} : { channel: options.channel }),
     });
     try {
+        throwIfAborted(options.signal);
         const snapshots = [];
         const queue = [siteUrl.href];
         const seen = new Set(queue);
         const captured = new Set();
         let url = queue.shift();
         while (url !== undefined && snapshots.length < maxPages) {
+            throwIfAborted(options.signal);
             const isStart = snapshots.length === 0;
             const snapshot = await capturePage(browser, url, siteUrl, options, isStart);
             if (isStart) {
-                if (snapshot.error !== undefined) {
-                    throw new Error(`Could not load ${url}: ${snapshot.error}`);
+                const failureMode = options.failureMode ?? (options.networkAdapter ? 'report' : 'throw');
+                if (snapshot.error !== undefined && failureMode === 'throw') {
+                    throw new Error(`Could not load ${diagnosticUrl(url)}: ${snapshot.error}`);
                 }
-                // Follow redirects like http -> https or apex -> www for the rest of the crawl.
                 siteUrl = new URL(snapshot.finalUrl);
             }
-            // Several links can redirect to the same page; only lint it once.
             const finalUrl = withoutHash(snapshot.finalUrl);
             if (!captured.has(finalUrl)) {
                 captured.add(finalUrl);
@@ -50,118 +78,73 @@ export async function scan(target, options = {}) {
             }
             url = queue.shift();
         }
-        // Pages that failed, returned an error status or redirected off-site are listed but not linted.
-        const findings = snapshots
-            .filter((page) => page.error === undefined &&
-            (page.status === null || page.status < 400) &&
-            isFirstParty(page.finalUrl, siteUrl))
-            .flatMap((page) => rules.flatMap((rule) => rule.check({ siteUrl, page })));
-        return {
+        throwIfAborted(options.signal);
+        const assessments = snapshots.map((page, index) => assessPage(page, rules, siteUrl, lang, index === 0, options.consentCheck !== false));
+        const partial = assessments.some((assessment) => assessment.evaluations.some((evaluation) => evaluation.partial || evaluation.reason === 'consent-disabled')) || snapshots.some((page) => !page.capture?.complete);
+        const result = {
             siteUrl: siteUrl.href,
+            lang,
+            region,
             scannedAt: new Date(startedAt).toISOString(),
             durationMs: Date.now() - startedAt,
-            pages: snapshots.map((page) => ({
+            pages: snapshots.map((page, index) => ({
                 url: page.url,
                 finalUrl: page.finalUrl,
                 status: page.status,
-                requestCount: page.requests.length,
+                requestCount: page.requestCount ?? page.requests.length,
                 cookieCount: page.cookies.length,
                 ...(page.error === undefined ? {} : { error: page.error }),
+                ...(page.capture === undefined ? {} : { capture: page.capture }),
+                ruleEvaluations: assessments[index]?.evaluations ?? [],
             })),
             ...consentSummary(snapshots[0]),
-            findings,
+            findings: applyRegion(assessments.flatMap((assessment) => assessment.findings), region),
             rules: rules.map(({ check: _check, ...meta }) => meta),
+            coverage: partial ? 'partial' : 'complete',
         };
+        return options.networkAdapter ? redactReport(result) : result;
     }
     finally {
         await browser.close();
     }
 }
 function consentSummary(start) {
-    if (start?.consent === undefined) {
+    if (start?.consent === undefined)
         return {};
-    }
     const { afterReject: _afterReject, ...summary } = start.consent;
     return { consent: summary };
 }
-async function capturePage(browser, url, siteUrl, options, checkConsent) {
-    // A fresh context per page means no cookies or storage carry over:
-    // every page is seen the way a first-time visitor sees it.
-    const context = await browser.newContext({ locale: options.locale ?? DEFAULTS.locale });
-    const requests = [];
-    try {
-        if (options.offline) {
-            await context.route('**/*', (route) => isFirstParty(route.request().url(), siteUrl)
-                ? route.continue()
-                : route.fulfill({ status: 200, body: '' }));
-        }
-        const page = await context.newPage();
-        page.on('request', (request) => {
-            requests.push({ url: request.url(), resourceType: request.resourceType() });
-        });
-        const response = await page.goto(url, {
-            waitUntil: 'load',
-            timeout: options.timeoutMs ?? DEFAULTS.timeoutMs,
-        });
-        await page
-            .waitForLoadState('networkidle', { timeout: options.timeoutMs ?? DEFAULTS.timeoutMs })
-            .catch(() => {
-            // Long-polling or streaming pages never go idle; carry on with what we have.
-        });
-        await page.waitForTimeout(options.settleMs ?? DEFAULTS.settleMs);
-        const links = await page.$$eval('a[href]', (anchors) => anchors.map((a) => ({
-            href: a.href,
-            text: [a.textContent, a.getAttribute('aria-label'), a.getAttribute('title')]
-                .filter(Boolean)
-                .join(' ')
-                .replace(/\s+/g, ' ')
-                .trim()
-                .slice(0, 200),
-        })));
-        const resourceHints = await page.$$eval('link[rel][href]', (elements) => elements.map((link) => ({
-            rel: (link.getAttribute('rel') ?? '').toLowerCase(),
-            href: link.href,
-        })));
-        const cookies = (await context.cookies()).map(({ name, domain, path, expires }) => ({
-            name,
-            domain,
-            path,
-            expires,
-        }));
-        const snapshot = {
-            url,
-            finalUrl: page.url(),
-            status: response?.status() ?? null,
-            // Copy: the listener keeps writing to `requests` during the consent check.
-            requests: [...requests],
-            cookies,
-            links,
-            resourceHints,
-        };
-        if (checkConsent && options.consentCheck !== false) {
-            snapshot.consent = await observeConsent(page, context, requests, {
-                settleMs: options.settleMs ?? DEFAULTS.settleMs,
-                timeoutMs: options.timeoutMs ?? DEFAULTS.timeoutMs,
-            });
-        }
-        return snapshot;
-    }
-    catch (error) {
-        // Downloads, timeouts and crashed pages should not end the whole crawl.
-        const message = error instanceof Error ? error.message : String(error);
-        return {
-            url,
-            finalUrl: url,
-            status: null,
-            requests,
-            cookies: [],
-            links: [],
-            resourceHints: [],
-            error: message.split('\n')[0] ?? message,
-        };
-    }
-    finally {
-        await context.close();
-    }
+/** Adapter reports omit URL credentials, paths, queries and fragments by default. */
+function redactReport(result) {
+    const redactText = (text) => text.replace(/https?:\/\/[^\s<>"']+/gi, diagnosticUrl);
+    return {
+        ...result,
+        siteUrl: diagnosticUrl(result.siteUrl),
+        ...(result.consent === undefined
+            ? {}
+            : {
+                consent: {
+                    ...result.consent,
+                    ...(result.consent.acceptLabel === undefined
+                        ? {}
+                        : { acceptLabel: redactText(result.consent.acceptLabel) }),
+                    ...(result.consent.rejectLabel === undefined
+                        ? {}
+                        : { rejectLabel: redactText(result.consent.rejectLabel) }),
+                },
+            }),
+        pages: result.pages.map((page) => ({
+            ...page,
+            url: diagnosticUrl(page.url),
+            finalUrl: diagnosticUrl(page.finalUrl),
+        })),
+        findings: result.findings.map((finding) => ({
+            ...finding,
+            pageUrl: diagnosticUrl(finding.pageUrl),
+            message: redactText(finding.message),
+            evidence: finding.evidence.map(redactText),
+            ...(finding.fix === undefined ? {} : { fix: redactText(finding.fix) }),
+        })),
+    };
 }
 //# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,QAAQ,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAkClE,MAAM,QAAQ,GAAG;IACf,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,MAAM;IACjB,MAAM,EAAE,OAAO;CACM,CAAC;AAExB,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,OAAO,GAAgB,EAAE;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAE9B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpC,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI;QACjC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACvE,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QAEnC,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5E,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,gFAAgF;gBAChF,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YAED,kEAAkE;YAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACnB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAC3B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBAClC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,gGAAgG;QAChG,MAAM,QAAQ,GAAc,SAAS;aAClC,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;YAC3C,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CACvC;aACA,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAE7E,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC9B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAClC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAChC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC/B,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;SACvD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAA+B;IACrD,IAAI,KAAK,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAgB,EAChB,GAAW,EACX,OAAY,EACZ,OAAoB,EACpB,YAAqB;IAErB,mEAAmE;IACnE,2DAA2D;IAC3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CACpC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC;gBAC1C,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAClB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAC7C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACpC,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;SACjD,CAAC,CAAC;QACH,MAAM,IAAI;aACP,gBAAgB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;aACrF,KAAK,CAAC,GAAG,EAAE;YACV,6EAA6E;QAC/E,CAAC,CAAC,CAAC;QACL,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CACrD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClB,IAAI,EAAG,CAAuB,CAAC,IAAI;YACnC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;iBACzE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,GAAG,CAAC;iBACT,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;iBACpB,IAAI,EAAE;iBACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACjB,CAAC,CAAC,CACJ,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE,CACtE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;YACnD,IAAI,EAAG,IAAwB,CAAC,IAAI;SACrC,CAAC,CAAC,CACJ,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAClF,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,OAAO;SACR,CAAC,CAAC,CAAC;QAEJ,MAAM,QAAQ,GAAiB;YAC7B,GAAG;YACH,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,IAAI;YAClC,2EAA2E;YAC3E,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;YACvB,OAAO;YACP,KAAK;YACL,aAAa;SACd,CAAC;QACF,IAAI,YAAY,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YACnD,QAAQ,CAAC,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC/D,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBAC/C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;aACnD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,GAAG;YACH,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,IAAI;YACZ,QAAQ;YACR,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,EAAE;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO;SACzC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAoB,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAIpD,SAAS,OAAO,CAAC,KAAa,EAAE,IAAY,EAAE,OAAe;IAC3D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,uCAAuC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,OAAO,GAAgB,EAAE;IAClE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;IACvD,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC9D,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACxC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,CAAC,cAAc;QAAE,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;IACtC,IAAI,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpC,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI;QACjC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACvE,CAAC,CAAC;IACH,IAAI,CAAC;QACH,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5E,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACzF,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;oBAC5D,MAAM,IAAI,KAAK,CAAC,kBAAkB,aAAa,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7E,CAAC;gBACD,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACnB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAC3B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBAClC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAChD,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,CACpF,CAAC;QACF,MAAM,OAAO,GACX,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9B,UAAU,CAAC,WAAW,CAAC,IAAI,CACzB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,kBAAkB,CAC/E,CACF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,MAAM,GAAe;YACzB,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI;YACJ,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBACrC,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;gBACvD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAChC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChE,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,WAAW,IAAI,EAAE;aACvD,CAAC,CAAC;YACH,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC/B,QAAQ,EAAE,WAAW,CACnB,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EACxD,MAAM,CACP;YACD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;YACtD,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;SAC3C,CAAC;QACF,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAA+B;IACrD,IAAI,KAAK,EAAE,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,qFAAqF;AACrF,SAAS,YAAY,CAAC,MAAkB;IACtC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;IAC5F,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC;QACtC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,OAAO,EAAE;oBACP,GAAG,MAAM,CAAC,OAAO;oBACjB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;wBAC1C,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5D,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;wBAC1C,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;iBAC7D;aACF,CAAC;QACN,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjC,GAAG,IAAI;YACP,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5B,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;SACvC,CAAC,CAAC;QACH,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1C,GAAG,OAAO;YACV,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;YAC1C,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;SACvE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -1,7 +1,59 @@
+import type { Lang } from './i18n.js';
+import type { Region } from './legal.js';
 export type Severity = 'error' | 'warning' | 'info';
 export interface RecordedRequest {
     url: string;
     resourceType: string;
+    /** Absent on legacy snapshots. Only received responses count as network evidence. */
+    outcome?: 'pending' | 'response' | 'failed';
+    status?: number;
+}
+export type LoadIssueKind = 'security-blocked' | 'unsupported-method' | 'unsupported-protocol' | 'dns' | 'tls' | 'connection' | 'timeout' | 'resource-limit' | 'http-error' | 'browser-failure' | 'aborted';
+export type CapturePhase = 'before-consent' | 'after-reject';
+export interface LoadDiagnostic {
+    kind: LoadIssueKind;
+    phase: CapturePhase;
+    /** Origin only: user info, path, query and fragment are never retained. */
+    url: string;
+    status?: number;
+    limit?: 'requests' | 'response-bytes' | 'total-bytes' | 'redirects';
+}
+export interface LoadDiagnostics {
+    /** HTTP(S) browser requests, including documents and every redirect hop, across both phases. */
+    requests: number;
+    /** Requests counted but omitted from bounded in-memory rule evidence. */
+    omittedRequests: number;
+    /** Received HTTP responses, including redirects and HTTP errors; may overlap failed. */
+    responses: number;
+    /** Browser requestfinished events (including HTTP errors). */
+    finished: number;
+    /** Failed or unfinished requests at capture end; disjoint from finished. */
+    failed: number;
+    /** Subset of failed: explicitly denied by the adapter's security policy. */
+    blocked: number;
+    /** Subset of responses: status >= 400. */
+    httpErrors: number;
+    /** Adapter response-body bytes consumed, including the chunk exceeding a limit. */
+    bytes: number;
+    /** All issues, even when their details exceed the storage cap. */
+    issueCount: number;
+    dropped: number;
+    issues: LoadDiagnostic[];
+}
+export type ObservationKind = 'document' | 'network' | 'consent' | 'after-reject';
+export interface RuleEvaluation {
+    ruleId: string;
+    status: 'executed' | 'skipped' | 'not-evaluable';
+    reason?: 'disabled' | 'consent-disabled' | 'not-start-page' | 'missing-observation';
+    /** Executed against available positive evidence, without ruling out additional findings. */
+    partial: boolean;
+}
+export interface CaptureObservation {
+    complete: boolean;
+    /** Loading coverage before the consent interaction, for pre-consent rule evaluation. */
+    beforeConsentComplete?: boolean;
+    document: boolean;
+    diagnostics: LoadDiagnostics;
 }
 export interface RecordedCookie {
     name: string;
@@ -21,6 +73,7 @@ export interface ResourceHint {
 }
 /** What happened when privalint looked for a consent banner and clicked "reject". */
 export interface ConsentObservation {
+    state?: 'not-detected' | 'reject-unavailable' | 'interaction-failed' | 'reject-tested';
     bannerFound: boolean;
     /** Name of the consent manager, if it was recognised. */
     cmp?: string;
@@ -35,6 +88,8 @@ export interface ConsentObservation {
         requests: RecordedRequest[];
         cookies: RecordedCookie[];
     };
+    /** True only if the reject observation window completed without load issues. */
+    afterRejectComplete?: boolean;
     error?: string;
 }
 /**
@@ -46,6 +101,8 @@ export interface PageSnapshot {
     finalUrl: string;
     status: number | null;
     requests: RecordedRequest[];
+    /** Initial-phase request count, including records beyond the retained evidence cap. */
+    requestCount?: number;
     cookies: RecordedCookie[];
     links: PageLink[];
     resourceHints: ResourceHint[];
@@ -53,6 +110,7 @@ export interface PageSnapshot {
     consent?: ConsentObservation;
     /** Set when the page could not be loaded, e.g. a download or a timeout. */
     error?: string;
+    capture?: CaptureObservation;
 }
 export interface Finding {
     ruleId: string;
@@ -63,10 +121,14 @@ export interface Finding {
     fix?: string;
     /** What the finding is about, e.g. a vendor. Keeps fingerprints stable across runs. */
     subject?: string;
+    /** Legal basis in the country the scan was run for. */
+    references?: string[];
 }
 export interface RuleContext {
     siteUrl: URL;
     page: PageSnapshot;
+    /** Language for messages and fixes. */
+    lang: Lang;
 }
 export interface Rule {
     id: string;
@@ -74,6 +136,8 @@ export interface Rule {
     description: string;
     /** Laws, rulings or guidelines the rule is based on. */
     references: string[];
+    /** Observations needed by custom rules. Missing means a complete document is required. */
+    requires?: readonly ObservationKind[];
     check(context: RuleContext): Finding[];
 }
 export interface PageSummary {
@@ -83,10 +147,14 @@ export interface PageSummary {
     requestCount: number;
     cookieCount: number;
     error?: string;
+    capture?: CaptureObservation;
+    ruleEvaluations?: RuleEvaluation[];
 }
 export type ConsentSummary = Omit<ConsentObservation, 'afterReject'>;
 export interface ScanResult {
     siteUrl: string;
+    lang: Lang;
+    region: Region;
     scannedAt: string;
     durationMs: number;
     pages: PageSummary[];
@@ -94,4 +162,6 @@ export interface ScanResult {
     consent?: ConsentSummary;
     findings: Finding[];
     rules: Array<Omit<Rule, 'check'>>;
+    /** Observation coverage, not a legal compliance judgement. */
+    coverage?: 'complete' | 'partial';
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "privalint",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "description": "Lint your website for GDPR problems: trackers before consent and after reject, Google Fonts, embeds, missing Impressum. Real browser, CLI and GitHub Action.",
   "type": "module",
   "bin": {
@@ -15,7 +15,8 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.de.md"
   ],
   "engines": {
     "node": ">=20.12"
@@ -41,7 +42,11 @@
     "impressum",
     "lint",
     "playwright",
-    "github-action"
+    "github-action",
+    "tdddg",
+    "dsg",
+    "oesterreich",
+    "schweiz"
   ],
   "license": "MIT",
   "dependencies": {
@@ -55,8 +60,8 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/jexcellence/privalint.git"
+    "url": "git+https://github.com/JExcellence/privalint.git"
   },
-  "homepage": "https://github.com/jexcellence/privalint#readme",
-  "bugs": "https://github.com/jexcellence/privalint/issues"
+  "homepage": "https://github.com/JExcellence/privalint#readme",
+  "bugs": "https://github.com/JExcellence/privalint/issues"
 }