Gamesight impressions check documented tracking options.

Advisory checks for documented Gamesight impression options on gsght.com/imgp/{tracker}. Explicit indexed External IDs carrying only literal org scope values are expected to supply an opaque organization ID in that same row. Unindexed pairing, ID grammar, custom domains, account state and receiver acceptance remain outside this partial profile.

What this pack matches

Hosts: gsght.com
Paths: /imgp, /imgp/, Full path expression: /imgp/[^/]+
Vendor docs: docs.gamesight.io/docs/tracker-url-parameters

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`tracker_id`	recommended	Retain the opaque tracker slot from the published impression template. Presence diagnostic severity: warning. Evidence: vendor template.	`vendor.gamesight-impression.param.tracker_id.missing` `vendor.gamesight-impression.param.tracker_id.empty`	docs
`cost_model`	optional	Published cost options; no server rejection claim. Presence diagnostic severity: warning.	`vendor.gamesight-impression.param.cost_model.empty` `vendor.gamesight-impression.param.cost_model.invalid`	docs
`external_hash_mode…`	optional	Documented hashing modes, with unset values left open. Presence diagnostic severity: warning.	`vendor.gamesight-impression.param.external_hash_mode.empty` `vendor.gamesight-impression.param.external_hash_mode.invalid`	docs
`external_scope_type…`	optional	Documented identity scope options. Presence diagnostic severity: warning.	`vendor.gamesight-impression.param.external_scope_type.empty` `vendor.gamesight-impression.param.external_scope_type.invalid`	docs
`attribution_window`	forbidden	This option applies to click links. Presence diagnostic severity: warning.	`vendor.gamesight-impression.param.attribution_window.forbidden`	docs
`destination_url`	forbidden	Redirect overrides apply to click links. Presence diagnostic severity: warning.	`vendor.gamesight-impression.param.destination_url.forbidden`	docs
`scope_type`	optional	Row-local discriminator only. Existing URL-family checks retain the published scope options. Mixed, blank and macro discriminator observations do not activate the org dependency. Query group scope, starting at index 0. Presence diagnostic severity: warning.		docs
`scope_id`	recommended	The linked common External IDs guide asks for scope_type=org and the Organization ID as scope_id for cross-game sharing. This is a local advisory for explicit numeric indexed URL rows, with no identifier grammar or receiver rejection claim. Query group scope, starting at index 0. Applies when {"kind":"all_values_in","params":["scope_type"],"values":["org"]}. Presence diagnostic severity: warning. Fix: Supply the organization ID in scope_id for this same indexed External ID.	`vendor.gamesight-impression.query.scope_id.missing` `vendor.gamesight-impression.query.scope_id.empty`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/gamesight-impression

Try this failing payload in the playground. An example with a validation finding.

https://gsght.com/imgp

cargo install pixellint · npm install pixellint