Track source on detected storage trackers

The cookie detector tags every detection with a source (script,
pre-existing, http) but the storage detector did not, so storage
rows always landed in detected_trackers with source NULL even though
the SDK already distinguishes wrapper writes from pre-load scans.

Plumb a "script"/"pre-existing" source from the storage detector
through the report endpoint into DetectedStorageItem, so the column
gets populated for localStorage, sessionStorage, indexedDB and
cacheStorage entries. No schema change is needed: detected_trackers
already accepts CookieSource values regardless of tracker_type, and
the existing row renders the badge as soon as it is non-null.

Signed-off-by: Émile Ré <emile@probo.com>

packages/cookie-banner/src/detectors/storage-detector.ts

@@ -15,7 +15,7 @@
 import type { Detector } from "./detector";
 import { getInitiatorURL } from "./initiator";
 import type { ReportQueue } from "./report-queue";
-import type { DetectedStorageEntry } from "./types";
+import type { DetectedStorageEntry, StorageSource } from "./types";
 
 const OWN_KEY_PREFIX = "probo_consent:";
 const EXTENSION_URL_RE = /(?:chrome|moz|safari-web)-extension:\/\//;
@@ -104,7 +104,7 @@ export class StorageDetector implements Detector {
     const self = this;
 
     caches.open = function (name: string): Promise<Cache> {
-      self.onCacheStorageOpen(name);
+      self.onCacheStorageOpen(name, "script");
       return originalOpen(name);
     };
   }
@@ -122,6 +122,7 @@ export class StorageDetector implements Detector {
       key,
       storage_type: storageType,
       value_size: value.length * 2,
+      source: "script",
     };
     if (initiatorUrl) entry.initiator_url = initiatorUrl;
     this.queue.reportStorage(entry);
@@ -132,14 +133,16 @@ export class StorageDetector implements Detector {
       key: name,
       storage_type: "indexed_db",
       value_size: null,
+      source: "script",
     });
   }
 
-  private onCacheStorageOpen(name: string): void {
+  private onCacheStorageOpen(name: string, source: StorageSource): void {
     this.queue.reportStorage({
       key: name,
       storage_type: "cache_storage",
       value_size: null,
+      source,
     });
   }
 
@@ -153,7 +156,7 @@ export class StorageDetector implements Detector {
       .keys()
       .then((names) => {
         for (const name of names) {
-          this.onCacheStorageOpen(name);
+          this.onCacheStorageOpen(name, "pre-existing");
         }
       })
       .catch(() => {
@@ -179,6 +182,7 @@ export class StorageDetector implements Detector {
         key,
         storage_type: storageType,
         value_size: value ? value.length * 2 : null,
+        source: "pre-existing",
       });
     }
   }

packages/cookie-banner/src/detectors/types.ts

@@ -19,6 +19,8 @@
 
 export type CookieSource = "script" | "pre-existing" | "http";
 
+export type StorageSource = "script" | "pre-existing";
+
 export type StorageType =
   | "local_storage"
   | "session_storage"
@@ -47,6 +49,7 @@ export interface DetectedStorageEntry {
   key: string;
   storage_type: StorageType;
   value_size: number | null;
+  source: StorageSource;
   initiator_url?: string;
 }