uxinspect 0.2.0 → 0.11.0

package/dist/tls.js

@@ -0,0 +1,122 @@
+import tls from 'node:tls';
+import https from 'node:https';
+function buildDN(obj) {
+    if (!obj)
+        return '';
+    return ['CN', 'O', 'C'].flatMap(k => (obj[k] ? [`${k}=${obj[k]}`] : [])).join(', ');
+}
+function checkChain(cert, selfSigned) {
+    if (selfSigned)
+        return true;
+    const visited = new Set();
+    let cur = cert;
+    let depth = 0;
+    while (cur) {
+        const fp = cur.fingerprint256 ?? cur.fingerprint;
+        if (!fp || visited.has(fp))
+            break;
+        visited.add(fp);
+        depth++;
+        const next = cur.issuerCertificate;
+        if (!next || next === cur)
+            break;
+        cur = next;
+    }
+    return depth >= 2;
+}
+async function fetchHsts(host, port, timeoutMs) {
+    return new Promise(resolve => {
+        const req = https.request({ host, port, path: '/', method: 'GET', rejectUnauthorized: false, timeout: timeoutMs }, res => {
+            resolve(res.headers['strict-transport-security']);
+            res.destroy();
+        });
+        req.on('timeout', () => { req.destroy(); resolve(undefined); });
+        req.on('error', () => resolve(undefined));
+        req.end();
+    });
+}
+export async function auditTls(hostOrUrl, opts) {
+    const timeoutMs = opts?.timeoutMs ?? 5000;
+    const port = opts?.port ?? 443;
+    let host;
+    if (/^https?:\/\//i.test(hostOrUrl)) {
+        host = new URL(hostOrUrl).hostname;
+    }
+    else {
+        host = hostOrUrl;
+    }
+    const issues = [];
+    let socket = null;
+    const tlsResult = await new Promise((resolve, reject) => {
+        socket = tls.connect({ host, port, servername: host, rejectUnauthorized: false, ALPNProtocols: ['h2', 'http/1.1'], timeout: timeoutMs }, () => {
+            const s = socket;
+            resolve({
+                protocol: s.getProtocol() ?? undefined,
+                cipher: s.getCipher(),
+                cert: s.getPeerCertificate(true),
+            });
+        });
+        socket.on('timeout', () => reject(new Error('TLS connection timed out')));
+        socket.on('error', reject);
+    }).finally(() => {
+        try {
+            socket?.end();
+        }
+        catch { /* ignore */ }
+    });
+    const { protocol, cipher, cert: rawCert } = tlsResult;
+    if (protocol && !['TLSv1.2', 'TLSv1.3'].includes(protocol)) {
+        issues.push({ level: 'error', message: `Weak TLS protocol: ${protocol}` });
+    }
+    if (cipher && /(CBC|RC4|3DES|MD5|NULL|EXPORT)/i.test(cipher.name)) {
+        issues.push({ level: 'warn', message: `Weak cipher suite: ${cipher.name}` });
+    }
+    let certInfo;
+    let chainComplete = false;
+    if (rawCert && rawCert.subject) {
+        const subject = buildDN(rawCert.subject);
+        const issuer = buildDN(rawCert.issuer);
+        const validFrom = rawCert.valid_from ?? '';
+        const validTo = rawCert.valid_to ?? '';
+        const daysUntilExpiry = Math.floor((new Date(validTo).getTime() - Date.now()) / 86_400_000);
+        const selfSigned = rawCert.subject?.CN !== undefined && rawCert.subject.CN === rawCert.issuer?.CN;
+        const keyLength = rawCert.bits;
+        chainComplete = checkChain(rawCert, selfSigned);
+        certInfo = { subject, issuer, validFrom, validTo, daysUntilExpiry, selfSigned, keyLength };
+        if (daysUntilExpiry < 7) {
+            issues.push({ level: 'error', message: `Certificate expires in ${daysUntilExpiry} day(s)` });
+        }
+        else if (daysUntilExpiry < 30) {
+            issues.push({ level: 'warn', message: `Certificate expires in ${daysUntilExpiry} day(s)` });
+        }
+        if (selfSigned && port === 443) {
+            issues.push({ level: 'error', message: 'Self-signed certificate on port 443' });
+        }
+        if (keyLength !== undefined && keyLength < 2048) {
+            issues.push({ level: 'warn', message: `Weak key length: ${keyLength} bits` });
+        }
+    }
+    const hstsHeader = await fetchHsts(host, port, timeoutMs);
+    let hstsPreloadEligible = false;
+    if (hstsHeader) {
+        const maxAgeMatch = /max-age=(\d+)/i.exec(hstsHeader);
+        const maxAge = maxAgeMatch ? parseInt(maxAgeMatch[1], 10) : 0;
+        const includeSubDomains = /includeSubDomains/i.test(hstsHeader);
+        const preload = /\bpreload\b/i.test(hstsHeader);
+        hstsPreloadEligible = maxAge >= 31_536_000 && includeSubDomains && preload;
+    }
+    const passed = issues.every(i => i.level !== 'error');
+    return {
+        host,
+        port,
+        protocol,
+        cipher,
+        cert: certInfo,
+        chainComplete,
+        hstsHeader,
+        hstsPreloadEligible,
+        issues,
+        passed,
+    };
+}
+//# sourceMappingURL=tls.js.map

package/dist/tls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls.js","sourceRoot":"","sources":["../src/tls.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,KAAK,MAAM,YAAY,CAAC;AA4B/B,SAAS,OAAO,CAAC,GAAuC;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,UAAU,CAAC,IAAiC,EAAE,UAAmB;IACxE,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,GAAG,GAAuC,IAAI,CAAC;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,WAAW,CAAC;QACjD,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM;QAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,GAAG,CAAC,iBAA4D,CAAC;QAC9E,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM;QACjC,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IACpE,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CACvB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EACvF,GAAG,CAAC,EAAE;YACJ,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAuB,CAAC,CAAC;YACxE,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1C,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,IAAsB;IACtE,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC;IAE/B,IAAI,IAAY,CAAC;IACjB,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,MAAM,GAAyB,IAAI,CAAC;IAExC,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAIhC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,CAAC,OAAO,CAClB,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAClH,GAAG,EAAE;YACH,MAAM,CAAC,GAAG,MAAO,CAAC;YAClB,OAAO,CAAC;gBACN,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS;gBACtC,MAAM,EAAE,CAAC,CAAC,SAAS,EAA0E;gBAC7F,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAA4C;aAC5E,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACd,IAAI,CAAC;YAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;IAEtD,IAAI,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,MAAM,IAAI,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,QAA4C,CAAC;IACjD,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAA4C,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAA2C,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC;QAC5F,MAAM,UAAU,GACd,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACjF,MAAM,SAAS,GAAI,OAAwC,CAAC,IAAI,CAAC;QAEjE,aAAa,GAAG,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEhD,QAAQ,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAE3F,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,eAAe,SAAS,EAAE,CAAC,CAAC;QAC/F,CAAC;aAAM,IAAI,eAAe,GAAG,EAAE,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,eAAe,SAAS,EAAE,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,UAAU,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,IAAI,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,SAAS,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAE1D,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,mBAAmB,GAAG,MAAM,IAAI,UAAU,IAAI,iBAAiB,IAAI,OAAO,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IAEtD,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,QAAQ;QACR,MAAM;QACN,IAAI,EAAE,QAAQ;QACd,aAAa;QACb,UAAU;QACV,mBAAmB;QACnB,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/touchtargets.d.ts

@@ -0,0 +1,22 @@
+import type { Page } from 'playwright';
+export interface TouchTargetOptions {
+    minSize?: number;
+    onlyViewport?: boolean;
+    ignoreHidden?: boolean;
+}
+export interface TouchTargetFinding {
+    selector: string;
+    html: string;
+    width: number;
+    height: number;
+    overlapsWith?: string;
+}
+export interface TouchTargetResult {
+    page: string;
+    scanned: number;
+    tooSmall: TouchTargetFinding[];
+    overlapping: TouchTargetFinding[];
+    passed: boolean;
+}
+export declare function auditTouchTargets(page: Page, opts?: TouchTargetOptions): Promise<TouchTargetResult>;
+//# sourceMappingURL=touchtargets.d.ts.map

package/dist/touchtargets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"touchtargets.d.ts","sourceRoot":"","sources":["../src/touchtargets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA+FzG"}

package/dist/touchtargets.js

@@ -0,0 +1,80 @@
+export async function auditTouchTargets(page, opts) {
+    const minSize = opts?.minSize ?? 44;
+    const onlyViewport = opts?.onlyViewport ?? false;
+    const ignoreHidden = opts?.ignoreHidden ?? true;
+    const url = page.url();
+    const { scanned, tooSmall, overlapping } = await page.evaluate(({ minSize, onlyViewport, ignoreHidden }) => {
+        const SELECTOR = [
+            'a[href]', 'button',
+            'input:not([type=hidden])', 'select', 'textarea',
+            '[role=button]', '[role=link]', '[role=menuitem]',
+            '[role=tab]', '[role=checkbox]', '[role=radio]',
+            '[onclick]', '[tabindex]:not([tabindex="-1"])',
+        ].join(',');
+        function buildSelector(el) {
+            const id = el.id;
+            if (id)
+                return `#${CSS.escape(id)}`;
+            const testid = el.getAttribute('data-testid');
+            if (testid)
+                return `[data-testid="${testid}"]`;
+            const tag = el.tagName.toLowerCase();
+            const classes = Array.from(el.classList).slice(0, 3);
+            return classes.length ? `${tag}.${classes.map(c => CSS.escape(c)).join('.')}` : tag;
+        }
+        function rectsOverlap(a, b) {
+            return !(a.right <= b.left || b.right <= a.left || a.bottom <= b.top || b.bottom <= a.top);
+        }
+        const nodes = Array.from(document.querySelectorAll(SELECTOR));
+        const items = [];
+        for (const el of nodes) {
+            const rect = el.getBoundingClientRect();
+            if (ignoreHidden && rect.width === 0 && rect.height === 0)
+                continue;
+            if (onlyViewport && (rect.bottom < 0 || rect.top > window.innerHeight))
+                continue;
+            items.push({
+                selector: buildSelector(el),
+                html: el.outerHTML.slice(0, 120),
+                rect,
+            });
+        }
+        const tooSmall = [];
+        const overlapping = [];
+        for (let i = 0; i < items.length; i++) {
+            const item = items[i];
+            const { rect } = item;
+            if (rect.width < minSize || rect.height < minSize) {
+                tooSmall.push({
+                    selector: item.selector,
+                    html: item.html,
+                    width: rect.width,
+                    height: rect.height,
+                });
+                for (let j = 0; j < items.length; j++) {
+                    if (i === j)
+                        continue;
+                    if (rectsOverlap(rect, items[j].rect)) {
+                        overlapping.push({
+                            selector: item.selector,
+                            html: item.html,
+                            width: rect.width,
+                            height: rect.height,
+                            overlapsWith: items[j].selector,
+                        });
+                        break;
+                    }
+                }
+            }
+        }
+        return { scanned: items.length, tooSmall, overlapping };
+    }, { minSize, onlyViewport, ignoreHidden });
+    return {
+        page: url,
+        scanned,
+        tooSmall,
+        overlapping,
+        passed: tooSmall.length === 0 && overlapping.length === 0,
+    };
+}
+//# sourceMappingURL=touchtargets.js.map

package/dist/touchtargets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"touchtargets.js","sourceRoot":"","sources":["../src/touchtargets.ts"],"names":[],"mappings":"AAwBA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAU,EAAE,IAAyB;IAC3E,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,EAAE,YAAY,IAAI,KAAK,CAAC;IACjD,MAAM,YAAY,GAAG,IAAI,EAAE,YAAY,IAAI,IAAI,CAAC;IAEhD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC5D,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAqE,EAAE,EAAE;QAC7G,MAAM,QAAQ,GAAG;YACf,SAAS,EAAE,QAAQ;YACnB,0BAA0B,EAAE,QAAQ,EAAE,UAAU;YAChD,eAAe,EAAE,aAAa,EAAE,iBAAiB;YACjD,YAAY,EAAE,iBAAiB,EAAE,cAAc;YAC/C,WAAW,EAAE,iCAAiC;SAC/C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,SAAS,aAAa,CAAC,EAAW;YAChC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YACjB,IAAI,EAAE;gBAAE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YAC9C,IAAI,MAAM;gBAAE,OAAO,iBAAiB,MAAM,IAAI,CAAC;YAC/C,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACtF,CAAC;QAED,SAAS,YAAY,CAAC,CAAU,EAAE,CAAU;YAC1C,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAQ9D,MAAM,KAAK,GAAW,EAAE,CAAC;QAEzB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,EAAE,CAAC,qBAAqB,EAAE,CAAC;YACxC,IAAI,YAAY,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACpE,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;gBAAE,SAAS;YACjF,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC3B,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAChC,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAA6E,EAAE,CAAC;QAC9F,MAAM,WAAW,GAAmG,EAAE,CAAC;QAEvH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAEtB,IAAI,IAAI,CAAC,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,IAAI,CAAC,KAAK,CAAC;wBAAE,SAAS;oBACtB,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtC,WAAW,CAAC,IAAI,CAAC;4BACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,KAAK,EAAE,IAAI,CAAC,KAAK;4BACjB,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ;yBAChC,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IAC1D,CAAC,EACD,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,CACxC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,GAAG;QACT,OAAO;QACP,QAAQ;QACR,WAAW;QACX,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;KAC1D,CAAC;AACJ,CAAC"}

package/dist/tracker-sniff.d.ts

@@ -0,0 +1,25 @@
+import type { Page } from 'playwright';
+export type TrackerCategory = 'analytics' | 'advertising' | 'tag-manager' | 'session-replay' | 'consent' | 'fingerprint' | 'chat-widget' | 'a-b-testing' | 'heatmap' | 'other';
+export interface TrackerEntry {
+    name: string;
+    category: TrackerCategory;
+    domains: string[];
+    requestCount: number;
+    bytesTransferred: number;
+    scriptSourceUrls: string[];
+    detectedVia: 'request-pattern' | 'global-variable' | 'cookie-name';
+}
+export interface TrackerSniffResult {
+    page: string;
+    trackers: TrackerEntry[];
+    stats: {
+        total: number;
+        byCategory: Record<TrackerCategory, number>;
+        totalBytes: number;
+        totalRequests: number;
+    };
+    consentRespected: boolean;
+    passed: boolean;
+}
+export declare function sniffTrackers(page: Page): Promise<TrackerSniffResult>;
+//# sourceMappingURL=tracker-sniff.d.ts.map

package/dist/tracker-sniff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker-sniff.d.ts","sourceRoot":"","sources":["../src/tracker-sniff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAA6B,MAAM,YAAY,CAAC;AAElE,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,aAAa,GACb,aAAa,GACb,gBAAgB,GAChB,SAAS,GACT,aAAa,GACb,aAAa,GACb,aAAa,GACb,SAAS,GACT,OAAO,CAAC;AAEZ,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,aAAa,CAAC;CACpE;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE;QACL,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC5C,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;CACjB;AA8RD,wBAAsB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAsH3E"}

package/dist/tracker-sniff.js

@@ -0,0 +1,355 @@
+const PATTERN_RULES = [
+    { name: 'ga', category: 'analytics', hostPatterns: ['google-analytics.com', 'analytics.google.com', 'ssl.google-analytics.com'] },
+    { name: 'gtm', category: 'tag-manager', hostPatterns: ['googletagmanager.com'] },
+    { name: 'mixpanel', category: 'analytics', hostPatterns: ['mixpanel.com', 'api.mixpanel.com', 'cdn.mxpnl.com'] },
+    { name: 'amplitude', category: 'analytics', hostPatterns: ['amplitude.com', 'api.amplitude.com', 'api2.amplitude.com', 'cdn.amplitude.com'] },
+    { name: 'segment', category: 'analytics', hostPatterns: ['segment.io', 'segment.com', 'cdn.segment.io', 'api.segment.io'] },
+    { name: 'plausible', category: 'analytics', hostPatterns: ['plausible.io'] },
+    { name: 'fathom', category: 'analytics', hostPatterns: ['usefathom.com', 'cdn.usefathom.com'] },
+    { name: 'cloudflare-insights', category: 'analytics', hostPatterns: ['cloudflareinsights.com', 'static.cloudflareinsights.com'] },
+    { name: 'simple-analytics', category: 'analytics', hostPatterns: ['simpleanalytics.com', 'scripts.simpleanalyticscdn.com', 'queue.simpleanalyticscdn.com'] },
+    { name: 'umami', category: 'analytics', hostPatterns: ['umami.is', 'cloud.umami.is'] },
+    { name: 'matomo', category: 'analytics', hostPatterns: ['matomo.cloud', 'matomo.org'], pathPatterns: ['/matomo.js', '/piwik.js'] },
+    { name: 'heap', category: 'analytics', hostPatterns: ['heap.io', 'heapanalytics.com'] },
+    { name: 'posthog', category: 'analytics', hostPatterns: ['posthog.com', 'app.posthog.com', 'eu.posthog.com'] },
+    { name: 'statcounter', category: 'analytics', hostPatterns: ['statcounter.com'] },
+    { name: 'pendo', category: 'analytics', hostPatterns: ['pendo.io', 'cdn.pendo.io'] },
+    { name: 'meta-pixel', category: 'advertising', hostPatterns: ['facebook.net', 'connect.facebook.net'], pathPatterns: ['/fbevents.js', '/fbds.js', '/tr'] },
+    { name: 'ad-network-doubleclick', category: 'advertising', hostPatterns: ['doubleclick.net'] },
+    { name: 'ad-network-googleads', category: 'advertising', hostPatterns: ['googleadservices.com', 'googlesyndication.com'] },
+    { name: 'ad-pagead', category: 'advertising', hostPatterns: ['google.com'], pathPatterns: ['/pagead', '/ads/'] },
+    { name: 'criteo', category: 'advertising', hostPatterns: ['criteo.com', 'criteo.net', 'static.criteo.net'] },
+    { name: 'taboola', category: 'advertising', hostPatterns: ['taboola.com', 'cdn.taboola.com', 'trc.taboola.com'] },
+    { name: 'outbrain', category: 'advertising', hostPatterns: ['outbrain.com', 'outbrainimg.com'] },
+    { name: 'pubmatic', category: 'advertising', hostPatterns: ['pubmatic.com'] },
+    { name: 'rubicon', category: 'advertising', hostPatterns: ['rubiconproject.com'] },
+    { name: 'amazon-ads', category: 'advertising', hostPatterns: ['amazon-adsystem.com'] },
+    { name: 'linkedin-insight', category: 'advertising', hostPatterns: ['ads.linkedin.com', 'snap.licdn.com', 'px.ads.linkedin.com'] },
+    { name: 'twitter-ads', category: 'advertising', hostPatterns: ['ads-twitter.com', 'analytics.twitter.com', 't.co'], pathPatterns: ['/i/adsct'] },
+    { name: 'bing-ads', category: 'advertising', hostPatterns: ['bat.bing.com'] },
+    { name: 'reddit-ads', category: 'advertising', hostPatterns: ['redditstatic.com'], pathPatterns: ['/ads/'] },
+    { name: 'snapchat-ads', category: 'advertising', hostPatterns: ['sc-static.net'], pathPatterns: ['/scevent.min.js'] },
+    { name: 'tiktok-pixel', category: 'advertising', hostPatterns: ['analytics.tiktok.com'] },
+    { name: 'pinterest-ads', category: 'advertising', hostPatterns: ['ct.pinterest.com', 's.pinimg.com'] },
+    { name: 'tealium', category: 'tag-manager', hostPatterns: ['tealiumiq.com', 'tealium.com'] },
+    { name: 'ensighten', category: 'tag-manager', hostPatterns: ['ensighten.com', 'nexus.ensighten.com'] },
+    { name: 'adobe-dtm', category: 'tag-manager', hostPatterns: ['adobedtm.com'] },
+    { name: 'hotjar', category: 'session-replay', hostPatterns: ['hotjar.com', 'static.hotjar.com', 'script.hotjar.com', 'insights.hotjar.com'] },
+    { name: 'fullstory', category: 'session-replay', hostPatterns: ['fullstory.com', 'rs.fullstory.com', 'edge.fullstory.com'] },
+    { name: 'logrocket', category: 'session-replay', hostPatterns: ['logrocket.com', 'cdn.logrocket.io', 'r.logrocket.io', 'logrocket.io'] },
+    { name: 'mouseflow', category: 'session-replay', hostPatterns: ['mouseflow.com', 'cdn.mouseflow.com', 'n1.mouseflow.com'] },
+    { name: 'smartlook', category: 'session-replay', hostPatterns: ['smartlook.com', 'rec.smartlook.com'] },
+    { name: 'clarity', category: 'session-replay', hostPatterns: ['clarity.ms', 'c.clarity.ms'] },
+    { name: 'inspectlet', category: 'session-replay', hostPatterns: ['inspectlet.com'] },
+    { name: 'consent-cookiebot', category: 'consent', hostPatterns: ['cookiebot.com', 'consent.cookiebot.com'] },
+    { name: 'consent-onetrust', category: 'consent', hostPatterns: ['onetrust.com', 'cdn.cookielaw.org', 'geolocation.onetrust.com'] },
+    { name: 'consent-quantcast', category: 'consent', hostPatterns: ['quantcast.com'], pathPatterns: ['/cmp'] },
+    { name: 'consent-osano', category: 'consent', hostPatterns: ['osano.com', 'cmp.osano.com'] },
+    { name: 'consent-iubenda', category: 'consent', hostPatterns: ['iubenda.com', 'cdn.iubenda.com'] },
+    { name: 'consent-trustarc', category: 'consent', hostPatterns: ['trustarc.com', 'consent.trustarc.com'] },
+    { name: 'consent-usercentrics', category: 'consent', hostPatterns: ['usercentrics.eu', 'app.usercentrics.eu'] },
+    { name: 'consent-didomi', category: 'consent', hostPatterns: ['didomi.io', 'sdk.privacy-center.org'] },
+    { name: 'fingerprint', category: 'fingerprint', hostPatterns: ['fingerprintjs.com', 'api.fpjs.io', 'fpjscdn.net', 'metrics.fpjs.io'] },
+    { name: 'chat-intercom', category: 'chat-widget', hostPatterns: ['intercom.io', 'intercomcdn.com', 'widget.intercom.io'] },
+    { name: 'chat-drift', category: 'chat-widget', hostPatterns: ['drift.com', 'js.driftt.com'] },
+    { name: 'chat-zendesk', category: 'chat-widget', hostPatterns: ['zendesk.com', 'zdassets.com'], pathPatterns: ['/widgets', '/embeddable_framework'] },
+    { name: 'chat-tawk', category: 'chat-widget', hostPatterns: ['tawk.to', 'embed.tawk.to'] },
+    { name: 'chat-livechat', category: 'chat-widget', hostPatterns: ['livechatinc.com', 'cdn.livechatinc.com'] },
+    { name: 'chat-crisp', category: 'chat-widget', hostPatterns: ['crisp.chat', 'client.crisp.chat'] },
+    { name: 'chat-helpscout', category: 'chat-widget', hostPatterns: ['helpscout.com', 'helpscout.net', 'beacon-v2.helpscout.net'] },
+    { name: 'chat-freshchat', category: 'chat-widget', hostPatterns: ['freshchat.com', 'wchat.freshchat.com'] },
+    { name: 'optimizely', category: 'a-b-testing', hostPatterns: ['optimizely.com', 'cdn.optimizely.com'] },
+    { name: 'launchdarkly', category: 'a-b-testing', hostPatterns: ['launchdarkly.com', 'app.launchdarkly.com', 'clientsdk.launchdarkly.com', 'events.launchdarkly.com'] },
+    { name: 'split-io', category: 'a-b-testing', hostPatterns: ['split.io', 'sdk.split.io', 'events.split.io'] },
+    { name: 'vwo', category: 'a-b-testing', hostPatterns: ['visualwebsiteoptimizer.com', 'dev.visualwebsiteoptimizer.com'] },
+    { name: 'ab-tasty', category: 'a-b-testing', hostPatterns: ['abtasty.com', 'try.abtasty.com'] },
+    { name: 'crazyegg', category: 'heatmap', hostPatterns: ['crazyegg.com', 'script.crazyegg.com'] },
+    { name: 'lucky-orange', category: 'heatmap', hostPatterns: ['luckyorange.com', 'luckyorange.net'] },
+];
+const GLOBAL_RULES = [
+    { name: 'gtm', category: 'tag-manager', globals: ['dataLayer', 'google_tag_manager'] },
+    { name: 'ga', category: 'analytics', globals: ['gtag', 'ga', 'GoogleAnalyticsObject'] },
+    { name: 'meta-pixel', category: 'advertising', globals: ['fbq', '_fbq'] },
+    { name: 'matomo', category: 'analytics', globals: ['_paq', 'Matomo'] },
+    { name: 'mixpanel', category: 'analytics', globals: ['mixpanel'] },
+    { name: 'amplitude', category: 'analytics', globals: ['amplitude'] },
+    { name: 'segment', category: 'analytics', globals: ['analytics'] },
+    { name: 'heap', category: 'analytics', globals: ['heap'] },
+    { name: 'posthog', category: 'analytics', globals: ['posthog'] },
+    { name: 'pendo', category: 'analytics', globals: ['pendo'] },
+    { name: 'plausible', category: 'analytics', globals: ['plausible'] },
+    { name: 'fathom', category: 'analytics', globals: ['fathom'] },
+    { name: 'chat-intercom', category: 'chat-widget', globals: ['Intercom'] },
+    { name: 'chat-drift', category: 'chat-widget', globals: ['drift'] },
+    { name: 'chat-zendesk', category: 'chat-widget', globals: ['zE', 'zESettings'] },
+    { name: 'chat-tawk', category: 'chat-widget', globals: ['Tawk_API'] },
+    { name: 'chat-livechat', category: 'chat-widget', globals: ['LiveChatWidget', 'LC_API'] },
+    { name: 'chat-crisp', category: 'chat-widget', globals: ['$crisp', 'CRISP_WEBSITE_ID'] },
+    { name: 'hotjar', category: 'session-replay', globals: ['hj', '_hjSettings'] },
+    { name: 'fullstory', category: 'session-replay', globals: ['FS', '_fs_host'] },
+    { name: 'logrocket', category: 'session-replay', globals: ['LogRocket', '_LRLogger'] },
+    { name: 'clarity', category: 'session-replay', globals: ['clarity'] },
+    { name: 'smartlook', category: 'session-replay', globals: ['smartlook'] },
+    { name: 'mouseflow', category: 'session-replay', globals: ['_mfq'] },
+    { name: 'optimizely', category: 'a-b-testing', globals: ['optimizely'] },
+    { name: 'launchdarkly', category: 'a-b-testing', globals: ['LDClient'] },
+    { name: 'split-io', category: 'a-b-testing', globals: ['splitio'] },
+    { name: 'vwo', category: 'a-b-testing', globals: ['_vwo_code', 'VWO'] },
+    { name: 'fingerprint', category: 'fingerprint', globals: ['FingerprintJS', 'Fingerprint2'] },
+    { name: 'consent-cookiebot', category: 'consent', globals: ['Cookiebot'] },
+    { name: 'consent-onetrust', category: 'consent', globals: ['OneTrust', 'OnetrustActiveGroups'] },
+    { name: 'consent-osano', category: 'consent', globals: ['Osano'] },
+    { name: 'consent-iubenda', category: 'consent', globals: ['_iub'] },
+    { name: 'consent-usercentrics', category: 'consent', globals: ['UC_UI', 'usercentrics'] },
+];
+const COOKIE_RULES = [
+    { name: 'ga', category: 'analytics', cookiePatterns: [/^_ga(_|$)/, /^_gid$/, /^_gat/] },
+    { name: 'meta-pixel', category: 'advertising', cookiePatterns: [/^_fbp$/, /^_fbc$/] },
+    { name: 'mixpanel', category: 'analytics', cookiePatterns: [/^mp_/] },
+    { name: 'amplitude', category: 'analytics', cookiePatterns: [/^amplitude_/, /^amp_/] },
+    { name: 'hotjar', category: 'session-replay', cookiePatterns: [/^_hjid$/, /^_hjSession/, /^_hjIncludedIn/] },
+    { name: 'chat-intercom', category: 'chat-widget', cookiePatterns: [/^intercom-/] },
+    { name: 'segment', category: 'analytics', cookiePatterns: [/^ajs_/] },
+    { name: 'bing-ads', category: 'advertising', cookiePatterns: [/^_uetsid$/, /^_uetvid$/, /^MUID$/] },
+    { name: 'ad-network-doubleclick', category: 'advertising', cookiePatterns: [/^IDE$/, /^test_cookie$/] },
+    { name: 'matomo', category: 'analytics', cookiePatterns: [/^_pk_/] },
+    { name: 'heap', category: 'analytics', cookiePatterns: [/^_hp2_/] },
+    { name: 'clarity', category: 'session-replay', cookiePatterns: [/^_clck$/, /^_clsk$/] },
+    { name: 'optimizely', category: 'a-b-testing', cookiePatterns: [/^optimizelyEndUserId$/] },
+    { name: 'crazyegg', category: 'heatmap', cookiePatterns: [/^_ceg\./] },
+];
+const CONSENT_COOKIE_NAME_RX = /(consent|gdpr|cookie_consent|cookiepolicy|cookielaw|cc_cookie|euconsent|cookiepref)/i;
+const CONSENT_ACCEPTED_VALUE_RX = /(true|accepted|yes|granted|allow|opt[_-]?in|1\b)/i;
+function parseHost(url) {
+    try {
+        const u = new URL(url);
+        if (u.protocol !== 'http:' && u.protocol !== 'https:')
+            return null;
+        return u.hostname.toLowerCase();
+    }
+    catch {
+        return null;
+    }
+}
+function matchPattern(host, url, rule) {
+    const hostHit = rule.hostPatterns.some((h) => host === h || host.endsWith(`.${h}`) || host.includes(h));
+    if (!hostHit)
+        return false;
+    if (!rule.pathPatterns || rule.pathPatterns.length === 0)
+        return true;
+    return rule.pathPatterns.some((p) => url.includes(p));
+}
+function classifyUrl(url) {
+    const host = parseHost(url);
+    if (!host)
+        return null;
+    for (const rule of PATTERN_RULES) {
+        if (matchPattern(host, url, rule)) {
+            return { name: rule.name, category: rule.category };
+        }
+    }
+    return null;
+}
+async function detectContentLength(request) {
+    let response = null;
+    try {
+        response = await request.response();
+    }
+    catch {
+        return 0;
+    }
+    if (!response)
+        return 0;
+    try {
+        const headers = await response.allHeaders();
+        const lenHeader = headers['content-length'];
+        if (typeof lenHeader === 'string') {
+            const parsed = parseInt(lenHeader, 10);
+            if (!Number.isNaN(parsed) && parsed >= 0)
+                return parsed;
+        }
+    }
+    catch {
+        return 0;
+    }
+    return 0;
+}
+function getOrCreateEntry(map, name, category, detectedVia) {
+    const existing = map.get(name);
+    if (existing)
+        return existing;
+    const created = {
+        name,
+        category,
+        domains: new Set(),
+        requestCount: 0,
+        bytesTransferred: 0,
+        scriptSourceUrls: new Set(),
+        detectedVia,
+        firstRequestTime: Number.POSITIVE_INFINITY,
+    };
+    map.set(name, created);
+    return created;
+}
+function findConsentTimestamp(cookies) {
+    let earliest = null;
+    for (const cookie of cookies) {
+        if (!CONSENT_COOKIE_NAME_RX.test(cookie.name))
+            continue;
+        if (!CONSENT_ACCEPTED_VALUE_RX.test(cookie.value))
+            continue;
+        const expires = typeof cookie.expires === 'number' && cookie.expires > 0 ? cookie.expires * 1000 : Date.now();
+        if (earliest === null || expires < earliest)
+            earliest = expires;
+    }
+    return earliest;
+}
+async function detectGlobals(page) {
+    try {
+        return await page.evaluate((rules) => {
+            const hits = [];
+            const win = window;
+            for (const rule of rules) {
+                for (const key of rule.globals) {
+                    if (typeof win[key] !== 'undefined' && win[key] !== null) {
+                        hits.push({ name: rule.name, category: rule.category });
+                        break;
+                    }
+                }
+            }
+            return hits;
+        }, GLOBAL_RULES);
+    }
+    catch {
+        return [];
+    }
+}
+function toRecord(byCategory) {
+    const base = {
+        'analytics': 0,
+        'advertising': 0,
+        'tag-manager': 0,
+        'session-replay': 0,
+        'consent': 0,
+        'fingerprint': 0,
+        'chat-widget': 0,
+        'a-b-testing': 0,
+        'heatmap': 0,
+        'other': 0,
+    };
+    for (const [cat, count] of byCategory)
+        base[cat] = count;
+    return base;
+}
+export async function sniffTrackers(page) {
+    const pageUrl = page.url();
+    const records = [];
+    const pendingSizePromises = [];
+    const onRequestFinished = (request) => {
+        const url = request.url();
+        const host = parseHost(url);
+        if (!host)
+            return;
+        const sizePromise = detectContentLength(request).then((bytes) => {
+            const record = {
+                url,
+                host,
+                timestamp: Date.now(),
+                bytes,
+                resourceType: request.resourceType(),
+                initiatorScriptUrl: url,
+            };
+            records.push(record);
+        }).catch(() => {
+            /* swallow */
+        });
+        pendingSizePromises.push(sizePromise);
+    };
+    page.on('requestfinished', onRequestFinished);
+    try {
+        await page.waitForLoadState('networkidle', { timeout: 5000 });
+    }
+    catch {
+        /* ignore timeouts; still capture what we have */
+    }
+    page.off('requestfinished', onRequestFinished);
+    await Promise.all(pendingSizePromises).catch(() => {
+        /* ignore */
+    });
+    const aggregates = new Map();
+    for (const rec of records) {
+        const hit = classifyUrl(rec.url);
+        if (!hit)
+            continue;
+        const entry = getOrCreateEntry(aggregates, hit.name, hit.category, 'request-pattern');
+        entry.domains.add(rec.host);
+        entry.requestCount += 1;
+        entry.bytesTransferred += rec.bytes;
+        if (rec.resourceType === 'script' && rec.initiatorScriptUrl) {
+            entry.scriptSourceUrls.add(rec.initiatorScriptUrl);
+        }
+        if (rec.timestamp < entry.firstRequestTime)
+            entry.firstRequestTime = rec.timestamp;
+    }
+    const globalHits = await detectGlobals(page);
+    for (const hit of globalHits) {
+        if (!aggregates.has(hit.name)) {
+            getOrCreateEntry(aggregates, hit.name, hit.category, 'global-variable');
+        }
+    }
+    const cookies = await page.context().cookies();
+    for (const rule of COOKIE_RULES) {
+        const matchedCookies = cookies.filter((c) => rule.cookiePatterns.some((rx) => rx.test(c.name)));
+        if (matchedCookies.length === 0)
+            continue;
+        if (!aggregates.has(rule.name)) {
+            const entry = getOrCreateEntry(aggregates, rule.name, rule.category, 'cookie-name');
+            for (const c of matchedCookies)
+                entry.domains.add(c.domain.replace(/^\./, ''));
+        }
+    }
+    const consentTime = findConsentTimestamp(cookies);
+    let consentRespected = true;
+    if (aggregates.size > 0) {
+        if (consentTime === null) {
+            const anyFired = Array.from(aggregates.values()).some((e) => e.requestCount > 0);
+            consentRespected = !anyFired;
+        }
+        else {
+            consentRespected = Array.from(aggregates.values()).every((e) => e.requestCount === 0 || e.firstRequestTime >= consentTime);
+        }
+    }
+    const byCategory = new Map();
+    let totalBytes = 0;
+    let totalRequests = 0;
+    const trackers = [];
+    for (const entry of aggregates.values()) {
+        byCategory.set(entry.category, (byCategory.get(entry.category) || 0) + 1);
+        totalBytes += entry.bytesTransferred;
+        totalRequests += entry.requestCount;
+        trackers.push({
+            name: entry.name,
+            category: entry.category,
+            domains: Array.from(entry.domains).sort(),
+            requestCount: entry.requestCount,
+            bytesTransferred: entry.bytesTransferred,
+            scriptSourceUrls: Array.from(entry.scriptSourceUrls).sort(),
+            detectedVia: entry.detectedVia,
+        });
+    }
+    trackers.sort((a, b) => b.bytesTransferred - a.bytesTransferred || b.requestCount - a.requestCount || a.name.localeCompare(b.name));
+    const stats = {
+        total: trackers.length,
+        byCategory: toRecord(byCategory),
+        totalBytes,
+        totalRequests,
+    };
+    return {
+        page: pageUrl,
+        trackers,
+        stats,
+        consentRespected,
+        passed: stats.total === 0 || consentRespected,
+    };
+}
+//# sourceMappingURL=tracker-sniff.js.map