@blotoutio/edgetag-sdk-browser 1.57.0 → 1.58.0

package/index.js

@@ -508,6 +508,74 @@
         ['US-VI', 'Virgin Islands, U.S.'],
     ]);
     new Set([...isoCountries.keys(), ...usStates.keys()]);
+    /**
+     * ISO 3166-1 alpha-2 codes for EU member states (as of 2024)
+     */
+    const EU_COUNTRY_CODES = new Set([
+        'AT', // Austria
+        'BE', // Belgium
+        'BG', // Bulgaria
+        'CY', // Cyprus
+        'CZ', // Czech Republic
+        'DE', // Germany
+        'DK', // Denmark
+        'EE', // Estonia
+        'ES', // Spain
+        'FI', // Finland
+        'FR', // France
+        'GR', // Greece
+        'HR', // Croatia
+        'HU', // Hungary
+        'IE', // Ireland
+        'IT', // Italy
+        'LT', // Lithuania
+        'LU', // Luxembourg
+        'LV', // Latvia
+        'MT', // Malta
+        'NL', // Netherlands
+        'PL', // Poland
+        'PT', // Portugal
+        'RO', // Romania
+        'SE', // Sweden
+        'SI', // Slovenia
+        'SK', // Slovakia
+    ]);
+    /**
+     * Returns true if the request originates from the EU or the UK (GB).
+     * Cloudflare's isEUCountry flag excludes the UK post-Brexit, so GB is
+     * checked explicitly alongside the EU member set.
+     *
+     * Fails closed: when the country cannot be resolved, the request is treated
+     * as EU/UK. This is the safe default for the compliance-sensitive Grey Switch
+     * (an unknown visitor may be in the EU/UK, so it must not slip through when
+     * the EU/UK toggle is off).
+     */
+    const isEuUkRegion = (country, isEURequest) => {
+        if (isEURequest) {
+            return true;
+        }
+        if (!country) {
+            return true;
+        }
+        const upper = country.toUpperCase();
+        return upper === 'GB' || EU_COUNTRY_CODES.has(upper);
+    };
+    /**
+     * Grey Switch fire rule, shared by the SDK and the CDN worker so both stay in
+     * sync. When Grey Switch is on, EdgeTag fires server-side events for
+     * non-consented users. The EU/UK toggle is off by default, which keeps EU/UK
+     * visitors on normal consent unless the merchant explicitly opts those regions
+     * in. Returns whether a server-side event should fire for a non-consented user.
+     */
+    const greySwitchAllowsServerEvent = ({ greySwitch, greySwitchEuUk, country, isEURequest, }) => {
+        if (!greySwitch) {
+            return false;
+        }
+        if (greySwitchEuUk) {
+            return true;
+        }
+        return !isEuUkRegion(country, isEURequest);
+    };
     const parseCache = new Map();
     const parseRegions = (regionString) => {
         const include = new Set();
@@ -1225,7 +1293,7 @@
                 time = perf.toFixed(4);
             }
         }
-        return `${encodeString(name)}-${generateUUID()}-${time}`;
+        return `${encodeString(name).replace(/[^a-zA-Z0-9]/g, '')}-${generateUUID()}-${time}`;
     };
 
     const getCookieValue = (key) => {
@@ -1471,7 +1539,7 @@
             referrer: getReferrer(destination),
             search: getSearch(destination),
             locale: getLocale(),
-            sdkVersion: "1.57.0" ,
+            sdkVersion: "1.58.0" ,
             ...(payload || {}),
         };
         let storage = {};
@@ -1747,6 +1815,15 @@
         const consentCategory = getConsentCategories(destination);
         const consentSettings = getSetting(destination, 'consentSetting');
         const userConsent = { consentChannel, consentCategory, consentSettings };
+        // Grey Switch: when enabled, still send the event to the server for
+        // non-consented users. Browser pixels remain gated by hasUserConsent below,
+        // so nothing fires client-side.
+        const greySwitchAllows = greySwitchAllowsServerEvent({
+            greySwitch: getSetting(destination, 'greySwitch') || false,
+            greySwitchEuUk: getSetting(destination, 'greySwitchEuUk') || false,
+            country: requestCountry,
+            isEURequest,
+        });
         const ip = getSetting(destination, 'ip') || null;
         const userProperties = getSetting(destination, 'userProperties');
         if (skipZeroPurchaseEvent && isZeroPurchaseEvent({ eventName, data })) {
@@ -1903,7 +1980,8 @@
             else {
                 logger.log('Browser events skipped by event rules, sending tag to server only');
             }
-            if (!hasAllowedManifestTags(configuredTags, userConsent, providers)) {
+            if (!hasAllowedManifestTags(configuredTags, userConsent, providers) &&
+                !greySwitchAllows) {
                 return;
             }
             sendTag(destination, {
@@ -2474,6 +2552,8 @@
                 storageId: result.storageId,
                 currency: result.currency,
                 skipZeroPurchaseEvent: result.skipZeroPurchaseEvent,
+                greySwitch: result.greySwitch,
+                greySwitchEuUk: result.greySwitchEuUk,
                 geoCountry: result.geoCountry,
                 geoRegion: result.geoRegion,
                 isEURequest: result.isEURequest,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blotoutio/edgetag-sdk-browser",
-  "version": "1.57.0",
+  "version": "1.58.0",
   "description": "Browser SDK for EdgeTag",
   "author": "Blotout",
   "license": "MIT",