@adobe/alloy 2.30.1-beta.9 → 2.31.0

package/libEs5/components/Personalization/in-app-message-actions/actions/displayIframeContent.js

@@ -279,7 +279,8 @@ exports.displayHTMLContentInIframe = displayHTMLContentInIframe;
 var _default = (settings, collect) => {
   return new Promise(resolve => {
     const {
-      meta
+      meta,
+      identityMap
     } = settings;
     displayHTMLContentInIframe(settings, (action, propositionAction) => {
       const propositionEventTypes = {};
@@ -291,7 +292,8 @@ var _default = (settings, collect) => {
         decisionsMeta: [meta],
         propositionAction,
         eventType: _eventType.INTERACT,
-        propositionEventTypes: Object.keys(propositionEventTypes)
+        propositionEventTypes: Object.keys(propositionEventTypes),
+        identityMap
       });
     });
     resolve({

package/libEs5/components/Personalization/index.js

@@ -25,7 +25,7 @@ var _injectCreateProposition = require("./handlers/injectCreateProposition.js");
 var _createAsyncArray = require("./utils/createAsyncArray.js");
 var schema = require("../../constants/schema.js");
 var _processDefaultContent = require("./handlers/processDefaultContent.js");
-var _surfaceUtils = require("./utils/surfaceUtils.js");
+var _surfaceUtils = require("../../utils/surfaceUtils.js");
 var _createProcessDomAction = require("./handlers/createProcessDomAction.js");
 var _createProcessHtmlContent = require("./handlers/createProcessHtmlContent.js");
 var _createProcessRedirect = require("./handlers/createProcessRedirect.js");
@@ -40,7 +40,7 @@ var _collectInteractions = require("./dom-actions/clicks/collectInteractions.js"
 var _propositionInteractionType = require("../../constants/propositionInteractionType.js");
 var _decisionProvider = require("../../constants/decisionProvider.js");
 /*
-Copyright 2019 Adobe. Ackll rights reserved.
+Copyright 2025 Adobe. All rights reserved.
 This file is licensed to you under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License. You may obtain a copy
 of the License at http://www.apache.org/licenses/LICENSE-2.0

package/libEs5/components/PushNotifications/types.js

@@ -1,6 +1,18 @@
 "use strict";
 
 exports.Types = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
 /** @import { Identity } from '../../utils/request/types.js' */
 
 /**

package/libEs5/components/RulesEngine/createApplyResponse.js

@@ -28,11 +28,13 @@ var _default = ({
       // We extract them and add the events to the event registry.
       const eventPayloads = (0, _extractPayloadsFromEventHistoryOperations.default)(propositions);
       eventRegistry.addEventPayloads(eventPayloads);
+      const identityMap = event?.getUserIdentityMap();
       lifecycle.onDecision({
         renderDecisions,
         propositions,
         event,
-        personalization
+        personalization,
+        identityMap
       });
     }
     return {

package/libEs5/components/RulesEngine/types.js

@@ -1,6 +1,18 @@
 "use strict";
 
 exports.Types = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
 /**
  * @typedef {Record<string, EventRecord>} EventRegistry
  */

package/libEs5/components/StreamingMedia/createMediaEventManager.js

@@ -31,7 +31,7 @@ var _default = ({
       const {
         xdm
       } = options;
-      setTimestamp(xdm);
+      setTimestamp(event);
       event.setUserXdm(xdm);
       if (xdm.eventType === _eventTypes.default.AD_START) {
         const {

package/libEs5/constants/libraryVersion.js

@@ -14,4 +14,4 @@ governing permissions and limitations under the License.
 */
 // The __VERSION__ keyword will be replace at alloy build time with the package.json version.
 // see babel-plugin-version
-var _default = exports.default = "2.30.1-beta.9";
+var _default = exports.default = "2.31.0";

package/libEs5/constants/surface.js

@@ -0,0 +1,19 @@
+"use strict";
+
+exports.WEBAPP = exports.WEB = exports.SURFACE_TYPE_DELIMITER = exports.FRAGMENT_DELIMITER = void 0;
+/*
+Copyright 2022 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
+const WEB = exports.WEB = "web";
+const WEBAPP = exports.WEBAPP = "webapp";
+const SURFACE_TYPE_DELIMITER = exports.SURFACE_TYPE_DELIMITER = "://";
+const FRAGMENT_DELIMITER = exports.FRAGMENT_DELIMITER = "#";

package/libEs5/core/componentCreators.js

@@ -18,6 +18,12 @@ Object.defineProperty(exports, "audiences", {
     return _index2.default;
   }
 });
+Object.defineProperty(exports, "brandConcierge", {
+  enumerable: true,
+  get: function () {
+    return _index1.default;
+  }
+});
 Object.defineProperty(exports, "consent", {
   enumerable: true,
   get: function () {
@@ -69,4 +75,5 @@ var _index6 = require("../components/Personalization/index.js");
 var _index7 = require("../components/RulesEngine/index.js");
 var _index8 = require("../components/StreamingMedia/index.js");
 var _index9 = require("../components/Advertising/index.js");
-var _index0 = require("../components/PushNotifications/index.js");
+var _index0 = require("../components/PushNotifications/index.js");
+var _index1 = require("../components/BrandConcierge/index.js");

package/libEs5/core/consent/types.js

@@ -1,6 +1,18 @@
 "use strict";
 
 exports.Types = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
 /**
  * @typedef {Object} ConsentStateMachine
  * @property {function(string): void} in

package/libEs5/core/createEvent.js

@@ -27,6 +27,7 @@ const getXdmPropositions = xdm => {
 };
 var _default = () => {
   const content = {};
+  const createdAt = Date.now();
   let userXdm;
   let userData;
   let documentMayUnload = false;
@@ -141,6 +142,9 @@ var _default = () => {
     getDocumentMayUnload() {
       return documentMayUnload;
     },
+    getCreatedAt() {
+      return createdAt;
+    },
     isEmpty() {
       return (0, _index.isEmptyObject)(content) && (!userXdm || (0, _index.isEmptyObject)(userXdm)) && (!userData || (0, _index.isEmptyObject)(userData));
     },
@@ -153,6 +157,9 @@ var _default = () => {
       }
       return userXdm.web.webPageDetails.viewName;
     },
+    getUserIdentityMap() {
+      return userXdm?.identityMap;
+    },
     toJSON() {
       if (!isFinalized) {
         throw new Error("toJSON called before finalize");

package/libEs5/core/edgeNetwork/injectSendEdgeNetworkRequest.js

@@ -5,6 +5,7 @@ var _domain = require("../../constants/domain.js");
 var _apiVersion = require("../../constants/apiVersion.js");
 var _index = require("../../utils/index.js");
 var _networkErrors = require("../../utils/networkErrors.js");
+var _clamp = require("../../utils/clamp.js");
 var _mergeLifecycleResponses = require("./mergeLifecycleResponses.js");
 var _handleRequestFailure = require("./handleRequestFailure.js");
 /*
@@ -22,6 +23,22 @@ governing permissions and limitations under the License.
 /** @import { EdgeRequestExecutor } from './types.js' */
 /** @import { ResponseCreator } from '../types.js' */
 
+const MAX_QUEUE_TIME_MILLIS = 300000; // 5 minutes
+
+const calculateQueueTimeMillis = payload => {
+  if (typeof payload.getEvents !== "function") {
+    return undefined;
+  }
+  const events = payload.getEvents();
+  if (events.length === 0) {
+    return undefined;
+  }
+
+  // In practice, there should only be one event in the payload, in the future if this changes we'll need to
+  // evaluate what timestamp to use (earliest, average, latest), or move the queueTime to the event meta
+  const earliestCreatedAt = Math.min(...events.map(event => event.getCreatedAt()));
+  return (0, _clamp.default)(Date.now() - earliestCreatedAt, 0, MAX_QUEUE_TIME_MILLIS);
+};
 const isDemdexBlockedError = (error, request) => {
   return request.getUseIdThirdPartyDomain() && (0, _networkErrors.isNetworkError)(error);
 };
@@ -97,6 +114,12 @@ var _default = ({
       const endpointDomain = hasDemdexFailed || !request.getUseIdThirdPartyDomain() ? edgeDomain : _domain.ID_THIRD_PARTY;
       const url = buildEndpointUrl(endpointDomain, request);
       const payload = request.getPayload();
+      const queueTimeMillis = calculateQueueTimeMillis(payload);
+      if (queueTimeMillis !== undefined) {
+        payload.mergeMeta({
+          queueTimeMillis
+        });
+      }
       cookieTransfer.cookiesToPayload(payload, endpointDomain);
       return sendNetworkRequest({
         requestId: request.getId(),

package/libEs5/core/edgeNetwork/types.js

@@ -1,6 +1,18 @@
 "use strict";
 
 exports.Types = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
 /** @import { Request } from '../../utils/request/types.js' */
 
 /**

package/libEs5/core/identity/types.js

@@ -1,6 +1,18 @@
 "use strict";
 
 exports.Types = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
 /** @import { Logger } from '../../core/types.js' */
 /** @import { CookieJar } from '../../utils/types.js' */
 

package/libEs5/core/index.js

@@ -184,6 +184,8 @@ const createExecuteCommand = ({
       getImmediatelyAvailableTools(componentName) {
         const componentLogger = createComponentLogger(componentName);
         return {
+          loggingCookieJar,
+          instanceName,
           config,
           componentRegistry,
           consent,
@@ -199,7 +201,9 @@ const createExecuteCommand = ({
           }),
           createNamespacedStorage,
           apexDomain,
-          getBrowser
+          getBrowser,
+          cookieTransfer,
+          createResponse
         };
       }
     });

package/libEs5/core/types.js

@@ -1,6 +1,18 @@
 "use strict";
 
 exports.Types = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
 /**
  * @typedef {object} AlloyMonitor
  * @property {function(any): void} [onBeforeLog]

package/libEs5/utils/clamp.js

@@ -0,0 +1,25 @@
+"use strict";
+
+exports.default = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+/**
+ * Clamps a value between a minimum and maximum value.
+ * @param {number} value - The value to clamp.
+ * @param {number} min - The minimum value.
+ * @param {number} max - The maximum value.
+ * @returns {number} The clamped value.
+ */
+var _default = (value, min, max) => {
+  return Math.max(min, Math.min(value, max));
+};
+exports.default = _default;

package/libEs5/utils/createCollect.js

@@ -26,11 +26,13 @@ var _default = ({
     documentMayUnload = false,
     eventType = _eventType.DISPLAY,
     propositionEventTypes = [(0, _propositionEventType.getPropositionEventType)(eventType)],
-    viewName
+    viewName,
+    identityMap
   }) => {
     const event = eventManager.createEvent();
     const data = {
-      eventType
+      eventType,
+      identityMap
     };
     if (viewName) {
       data.web = {

package/libEs5/utils/deepAssign.js

@@ -15,8 +15,13 @@ OF ANY KIND, either express or implied. See the License for the specific languag
 governing permissions and limitations under the License.
 */
 
+// Keys that should never be copied to prevent prototype pollution.
+const DANGEROUS_KEYS = ["__proto__", "constructor", "prototype"];
 const deepAssignObject = (target, source) => {
   Object.keys(source).forEach(key => {
+    if (DANGEROUS_KEYS.includes(key)) {
+      return;
+    }
     if ((0, _isObject.default)(target[key]) && (0, _isObject.default)(source[key])) {
       deepAssignObject(target[key], source[key]);
       return;

package/libEs5/utils/dom/createGetPageLocation.js

@@ -0,0 +1,20 @@
+"use strict";
+
+exports.default = void 0;
+/*
+Copyright 2022 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+var _default = ({
+  window
+}) => () => {
+  return window.location;
+};
+exports.default = _default;

package/libEs5/utils/filterObject.js

@@ -45,7 +45,7 @@ const filterObject = (obj, predicate) => {
       };
     }
     // value is not an object, test predicate
-    if (predicate(value)) {
+    if (predicate(value, key)) {
       return {
         ...result,
         [key]: value

package/libEs5/utils/index.js

@@ -36,6 +36,12 @@ Object.defineProperty(exports, "createCallbackAggregator", {
     return _createCallbackAggregator.default;
   }
 });
+Object.defineProperty(exports, "createGetPageLocation", {
+  enumerable: true,
+  get: function () {
+    return _createGetPageLocation.default;
+  }
+});
 Object.defineProperty(exports, "createLoggingCookieJar", {
   enumerable: true,
   get: function () {
@@ -362,4 +368,5 @@ var _toISOStringLocal = require("./toISOStringLocal.js");
 var _uuid = require("./uuid.js");
 var _updateErrorMessage = require("./updateErrorMessage.js");
 var _validateIdentityMap = require("./validateIdentityMap.js");
-var _validateConfigOverride = require("./validateConfigOverride.js");
+var _validateConfigOverride = require("./validateConfigOverride.js");
+var _createGetPageLocation = require("./dom/createGetPageLocation.js");

package/libEs5/utils/prepareConfigOverridesForEdge.js

@@ -27,11 +27,13 @@ var _default = configuration => {
     return null;
   }
   // remove entries that are empty strings or arrays
-  const configOverrides = (0, _filterObject.default)(configuration, value => {
+  const configOverrides = (0, _filterObject.default)(configuration, (value, key) => {
     if ((0, _isNil.default)(value)) {
       return false;
     }
-    if ((0, _isBoolean.default)(value)) {
+    // We want to remove all the { enabled: true } values, but leave any other boolean values.
+    // Experience Edge will not accept { enabled: true } values as true is the default for "enabled".
+    if ((0, _isBoolean.default)(value) && (key !== "enabled" || value === false)) {
       return true;
     }
     if ((0, _isNumber.default)(value)) {

package/libEs5/utils/request/createDataCollectionRequestPayload.js

@@ -34,6 +34,9 @@ var _default = () => {
       content.events = content.events || [];
       content.events.push(event);
     },
+    getEvents: () => {
+      return content.events || [];
+    },
     getDocumentMayUnload: () => {
       return (content.events || []).some(event => event.getDocumentMayUnload());
     }

package/libEs5/utils/request/createRequest.js

@@ -47,7 +47,8 @@ var _default = options => {
     getAction,
     getUseSendBeacon,
     datastreamIdOverride,
-    edgeSubPath
+    edgeSubPath,
+    requestParams = {}
   } = options;
   const id = (0, _index.uuid)();
   let shouldUseThirdPartyDomain = false;
@@ -86,6 +87,9 @@ var _default = options => {
     },
     setIsIdentityEstablished() {
       isIdentityEstablished = true;
+    },
+    getRequestParams() {
+      return requestParams;
     }
   };
 };

package/libEs5/utils/request/createRequestParams.js

@@ -44,6 +44,7 @@ var _default = ({
   if (localConfigOverridesWithoutDatastreamId && !(0, _index.isEmptyObject)(localConfigOverridesWithoutDatastreamId)) {
     payload.mergeConfigOverride(localConfigOverridesWithoutDatastreamId);
   }
+  payload.finalizeConfigOverrides();
   return requestParams;
 };
 exports.default = _default;

package/libEs5/utils/request/createRequestPayload.js

@@ -90,7 +90,17 @@ var _default = options => {
     mergeMeta: (0, _index.createMerger)(content, "meta"),
     mergeState: (0, _index.createMerger)(content, "meta.state"),
     mergeQuery: (0, _index.createMerger)(content, "query"),
-    mergeConfigOverride: updates => mergeConfigOverrides((0, _index.prepareConfigOverridesForEdge)(updates)),
+    mergeConfigOverride: updates => mergeConfigOverrides(updates),
+    finalizeConfigOverrides: () => {
+      if (content.meta?.configOverrides) {
+        const prepared = (0, _index.prepareConfigOverridesForEdge)(content.meta.configOverrides);
+        if (prepared === null) {
+          delete content.meta.configOverrides;
+        } else {
+          content.meta.configOverrides = prepared;
+        }
+      }
+    },
     addIdentity,
     hasIdentity,
     toJSON() {

package/libEs5/utils/request/types.js

@@ -1,6 +1,18 @@
 "use strict";
 
 exports.Types = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
 /**
  * Request object with methods to access and modify request properties.
  *
@@ -40,6 +52,7 @@ exports.Types = void 0;
  * @property {function(string, Identity): void} options.addIdentity
  * @property {function(string): boolean} options.hasIdentity
  * @property {function(object): void} addEvent
+ * @property {function(): Array} getEvents
  * @property {function(): boolean} getDocumentMayUnload
  * @property {function(): object} toJSON
  */

package/libEs5/utils/surfaceUtils.js

@@ -0,0 +1,82 @@
+"use strict";
+
+exports.normalizeSurfaces = exports.isPageWideSurface = exports.buildPageSurface = void 0;
+var _surface = require("../constants/surface.js");
+var _index = require("./index.js");
+/*
+Copyright 2022 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
+const SURFACE_REGEX = /^(\w+):\/\/([^/#]+)(\/[^#]*)?(#.*)?$/;
+const AUTHORITY_REGEX = /^(?:.*@)?(?:[a-z\d\u00a1-\uffff.-]+|\[[a-f\d:]+])(?::\d+)?$/;
+const PATH_REGEX = /^\/(?:[/\w\u00a1-\uffff-.~]|%[a-fA-F\d]{2})*$/;
+const FRAGMENT_REGEX = /^#(?:[/\w\u00a1-\uffff-.~]|%[a-fA-F\d]{2})+$/;
+const normalizePath = (path = "/") => {
+  let end = path.length;
+  while (end > 0 && "/".indexOf(path.charAt(end - 1)) !== -1) {
+    end -= 1;
+  }
+  return path.substring(0, end) || "/";
+};
+const getSurfaceType = surfaceTypeMatch => (0, _index.isNonEmptyString)(surfaceTypeMatch) ? surfaceTypeMatch.toLowerCase() : "";
+const getAuthority = authorityMatch => (0, _index.isNonEmptyString)(authorityMatch) ? authorityMatch.toLowerCase() : "";
+const getPath = pathMatch => (0, _index.isNonEmptyString)(pathMatch) ? normalizePath(pathMatch) : "/";
+const parseSurface = surfaceString => {
+  const matched = surfaceString.match(SURFACE_REGEX);
+  return matched ? {
+    surfaceType: getSurfaceType(matched[1]),
+    authority: getAuthority(matched[2]),
+    path: getPath(matched[3]),
+    fragment: matched[4]
+  } : null;
+};
+const stringifySurface = surface => "" + surface.surfaceType + _surface.SURFACE_TYPE_DELIMITER + surface.authority + (surface.path || "") + (surface.fragment || "");
+const buildPageSurface = getPageLocation => {
+  const location = getPageLocation();
+  const host = location.host.toLowerCase();
+  const path = location.pathname;
+  return _surface.WEB + _surface.SURFACE_TYPE_DELIMITER + host + normalizePath(path);
+};
+exports.buildPageSurface = buildPageSurface;
+const expandFragmentSurface = (surface, getPageLocation) => surface.startsWith(_surface.FRAGMENT_DELIMITER) ? buildPageSurface(getPageLocation) + surface : surface;
+const validateSurface = (surface, getPageLocation, logger) => {
+  const invalidateSurface = validationError => {
+    logger.warn(validationError);
+    return null;
+  };
+  if (!(0, _index.isNonEmptyString)(surface)) {
+    return invalidateSurface("Invalid surface: " + surface);
+  }
+  const expanded = expandFragmentSurface(surface, getPageLocation);
+  const parsed = parseSurface(expanded);
+  if (parsed === null) {
+    return invalidateSurface("Invalid surface: " + surface);
+  }
+  if (![_surface.WEB, _surface.WEBAPP].includes(parsed.surfaceType)) {
+    return invalidateSurface("Unsupported surface type " + parsed.surfaceType + " in surface: " + surface);
+  }
+  if (!parsed.authority || !AUTHORITY_REGEX.test(parsed.authority)) {
+    return invalidateSurface("Invalid authority " + parsed.authority + " in surface: " + surface);
+  }
+  if (parsed.path && !PATH_REGEX.test(parsed.path)) {
+    return invalidateSurface("Invalid path " + parsed.path + " in surface: " + surface);
+  }
+  if (parsed.fragment && !FRAGMENT_REGEX.test(parsed.fragment)) {
+    return invalidateSurface("Invalid fragment " + parsed.fragment + " in surface: " + surface);
+  }
+  return parsed;
+};
+const isPageWideSurface = scope => !!scope && scope.indexOf(_surface.WEB + _surface.SURFACE_TYPE_DELIMITER) === 0 && scope.indexOf(_surface.FRAGMENT_DELIMITER) === -1;
+
+// eslint-disable-next-line default-param-last
+exports.isPageWideSurface = isPageWideSurface;
+const normalizeSurfaces = (surfaces = [], getPageLocation, logger) => surfaces.map(surface => validateSurface(surface, getPageLocation, logger)).filter(surface => !(0, _index.isNil)(surface)).map(stringifySurface);
+exports.normalizeSurfaces = normalizeSurfaces;

package/libEs5/utils/types.js

@@ -1,6 +1,18 @@
 "use strict";
 
 exports.Types = void 0;
+/*
+Copyright 2025 Adobe. All rights reserved.
+This file is licensed to you under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License. You may obtain a copy
+of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed under
+the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+OF ANY KIND, either express or implied. See the License for the specific language
+governing permissions and limitations under the License.
+*/
+
 /**
  * @typedef {Object} Storage
  * @property {function(string): string|null} getItem