@blotoutio/edgetag-sdk-js 1.57.0 → 1.57.1

package/index.cjs.js

@@ -507,6 +507,74 @@ const usStates = new Map([
     ['US-VI', 'Virgin Islands, U.S.'],
 ]);
 new Set([...isoCountries.keys(), ...usStates.keys()]);
+/**
+ * ISO 3166-1 alpha-2 codes for EU member states (as of 2024)
+ */
+const EU_COUNTRY_CODES = new Set([
+    'AT', // Austria
+    'BE', // Belgium
+    'BG', // Bulgaria
+    'CY', // Cyprus
+    'CZ', // Czech Republic
+    'DE', // Germany
+    'DK', // Denmark
+    'EE', // Estonia
+    'ES', // Spain
+    'FI', // Finland
+    'FR', // France
+    'GR', // Greece
+    'HR', // Croatia
+    'HU', // Hungary
+    'IE', // Ireland
+    'IT', // Italy
+    'LT', // Lithuania
+    'LU', // Luxembourg
+    'LV', // Latvia
+    'MT', // Malta
+    'NL', // Netherlands
+    'PL', // Poland
+    'PT', // Portugal
+    'RO', // Romania
+    'SE', // Sweden
+    'SI', // Slovenia
+    'SK', // Slovakia
+]);
+/**
+ * Returns true if the request originates from the EU or the UK (GB).
+ * Cloudflare's isEUCountry flag excludes the UK post-Brexit, so GB is
+ * checked explicitly alongside the EU member set.
+ *
+ * Fails closed: when the country cannot be resolved, the request is treated
+ * as EU/UK. This is the safe default for the compliance-sensitive Grey Switch
+ * (an unknown visitor may be in the EU/UK, so it must not slip through when
+ * the EU/UK toggle is off).
+ */
+const isEuUkRegion = (country, isEURequest) => {
+    if (isEURequest) {
+        return true;
+    }
+    if (!country) {
+        return true;
+    }
+    const upper = country.toUpperCase();
+    return upper === 'GB' || EU_COUNTRY_CODES.has(upper);
+};
+/**
+ * Grey Switch fire rule, shared by the SDK and the CDN worker so both stay in
+ * sync. When Grey Switch is on, EdgeTag fires server-side events for
+ * non-consented users. The EU/UK toggle is off by default, which keeps EU/UK
+ * visitors on normal consent unless the merchant explicitly opts those regions
+ * in. Returns whether a server-side event should fire for a non-consented user.
+ */
+const greySwitchAllowsServerEvent = ({ greySwitch, greySwitchEuUk, country, isEURequest, }) => {
+    if (!greySwitch) {
+        return false;
+    }
+    if (greySwitchEuUk) {
+        return true;
+    }
+    return !isEuUkRegion(country, isEURequest);
+};
 const parseCache = new Map();
 const parseRegions = (regionString) => {
     const include = new Set();
@@ -1224,7 +1292,7 @@ const generateEventId = (name) => {
             time = perf.toFixed(4);
         }
     }
-    return `${encodeString(name)}-${generateUUID()}-${time}`;
+    return `${encodeString(name).replace(/[^a-zA-Z0-9]/g, '')}-${generateUUID()}-${time}`;
 };
 
 const getCookieValue = (key) => {
@@ -1470,7 +1538,7 @@ const getStandardPayload = (destination, payload) => {
         referrer: getReferrer(destination),
         search: getSearch(destination),
         locale: getLocale(),
-        sdkVersion: "1.57.0" ,
+        sdkVersion: "1.57.1" ,
         ...(payload || {}),
     };
     let storage = {};
@@ -1746,6 +1814,15 @@ const processTag = async (destination, eventName, data = {}, providers, options)
     const consentCategory = getConsentCategories(destination);
     const consentSettings = getSetting(destination, 'consentSetting');
     const userConsent = { consentChannel, consentCategory, consentSettings };
+    // Grey Switch: when enabled, still send the event to the server for
+    // non-consented users. Browser pixels remain gated by hasUserConsent below,
+    // so nothing fires client-side.
+    const greySwitchAllows = greySwitchAllowsServerEvent({
+        greySwitch: getSetting(destination, 'greySwitch') || false,
+        greySwitchEuUk: getSetting(destination, 'greySwitchEuUk') || false,
+        country: requestCountry,
+        isEURequest,
+    });
     const ip = getSetting(destination, 'ip') || null;
     const userProperties = getSetting(destination, 'userProperties');
     if (skipZeroPurchaseEvent && isZeroPurchaseEvent({ eventName, data })) {
@@ -1902,7 +1979,8 @@ const processTag = async (destination, eventName, data = {}, providers, options)
         else {
             logger.log('Browser events skipped by event rules, sending tag to server only');
         }
-        if (!hasAllowedManifestTags(configuredTags, userConsent, providers)) {
+        if (!hasAllowedManifestTags(configuredTags, userConsent, providers) &&
+            !greySwitchAllows) {
             return;
         }
         sendTag(destination, {
@@ -2473,6 +2551,8 @@ const handleInit = (preferences) => {
             storageId: result.storageId,
             currency: result.currency,
             skipZeroPurchaseEvent: result.skipZeroPurchaseEvent,
+            greySwitch: result.greySwitch,
+            greySwitchEuUk: result.greySwitchEuUk,
             geoCountry: result.geoCountry,
             geoRegion: result.geoRegion,
             isEURequest: result.isEURequest,

package/index.mjs

@@ -505,6 +505,74 @@ const usStates = new Map([
     ['US-VI', 'Virgin Islands, U.S.'],
 ]);
 new Set([...isoCountries.keys(), ...usStates.keys()]);
+/**
+ * ISO 3166-1 alpha-2 codes for EU member states (as of 2024)
+ */
+const EU_COUNTRY_CODES = new Set([
+    'AT', // Austria
+    'BE', // Belgium
+    'BG', // Bulgaria
+    'CY', // Cyprus
+    'CZ', // Czech Republic
+    'DE', // Germany
+    'DK', // Denmark
+    'EE', // Estonia
+    'ES', // Spain
+    'FI', // Finland
+    'FR', // France
+    'GR', // Greece
+    'HR', // Croatia
+    'HU', // Hungary
+    'IE', // Ireland
+    'IT', // Italy
+    'LT', // Lithuania
+    'LU', // Luxembourg
+    'LV', // Latvia
+    'MT', // Malta
+    'NL', // Netherlands
+    'PL', // Poland
+    'PT', // Portugal
+    'RO', // Romania
+    'SE', // Sweden
+    'SI', // Slovenia
+    'SK', // Slovakia
+]);
+/**
+ * Returns true if the request originates from the EU or the UK (GB).
+ * Cloudflare's isEUCountry flag excludes the UK post-Brexit, so GB is
+ * checked explicitly alongside the EU member set.
+ *
+ * Fails closed: when the country cannot be resolved, the request is treated
+ * as EU/UK. This is the safe default for the compliance-sensitive Grey Switch
+ * (an unknown visitor may be in the EU/UK, so it must not slip through when
+ * the EU/UK toggle is off).
+ */
+const isEuUkRegion = (country, isEURequest) => {
+    if (isEURequest) {
+        return true;
+    }
+    if (!country) {
+        return true;
+    }
+    const upper = country.toUpperCase();
+    return upper === 'GB' || EU_COUNTRY_CODES.has(upper);
+};
+/**
+ * Grey Switch fire rule, shared by the SDK and the CDN worker so both stay in
+ * sync. When Grey Switch is on, EdgeTag fires server-side events for
+ * non-consented users. The EU/UK toggle is off by default, which keeps EU/UK
+ * visitors on normal consent unless the merchant explicitly opts those regions
+ * in. Returns whether a server-side event should fire for a non-consented user.
+ */
+const greySwitchAllowsServerEvent = ({ greySwitch, greySwitchEuUk, country, isEURequest, }) => {
+    if (!greySwitch) {
+        return false;
+    }
+    if (greySwitchEuUk) {
+        return true;
+    }
+    return !isEuUkRegion(country, isEURequest);
+};
 const parseCache = new Map();
 const parseRegions = (regionString) => {
     const include = new Set();
@@ -1222,7 +1290,7 @@ const generateEventId = (name) => {
             time = perf.toFixed(4);
         }
     }
-    return `${encodeString(name)}-${generateUUID()}-${time}`;
+    return `${encodeString(name).replace(/[^a-zA-Z0-9]/g, '')}-${generateUUID()}-${time}`;
 };
 
 const getCookieValue = (key) => {
@@ -1468,7 +1536,7 @@ const getStandardPayload = (destination, payload) => {
         referrer: getReferrer(destination),
         search: getSearch(destination),
         locale: getLocale(),
-        sdkVersion: "1.57.0" ,
+        sdkVersion: "1.57.1" ,
         ...(payload || {}),
     };
     let storage = {};
@@ -1744,6 +1812,15 @@ const processTag = async (destination, eventName, data = {}, providers, options)
     const consentCategory = getConsentCategories(destination);
     const consentSettings = getSetting(destination, 'consentSetting');
     const userConsent = { consentChannel, consentCategory, consentSettings };
+    // Grey Switch: when enabled, still send the event to the server for
+    // non-consented users. Browser pixels remain gated by hasUserConsent below,
+    // so nothing fires client-side.
+    const greySwitchAllows = greySwitchAllowsServerEvent({
+        greySwitch: getSetting(destination, 'greySwitch') || false,
+        greySwitchEuUk: getSetting(destination, 'greySwitchEuUk') || false,
+        country: requestCountry,
+        isEURequest,
+    });
     const ip = getSetting(destination, 'ip') || null;
     const userProperties = getSetting(destination, 'userProperties');
     if (skipZeroPurchaseEvent && isZeroPurchaseEvent({ eventName, data })) {
@@ -1900,7 +1977,8 @@ const processTag = async (destination, eventName, data = {}, providers, options)
         else {
             logger.log('Browser events skipped by event rules, sending tag to server only');
         }
-        if (!hasAllowedManifestTags(configuredTags, userConsent, providers)) {
+        if (!hasAllowedManifestTags(configuredTags, userConsent, providers) &&
+            !greySwitchAllows) {
             return;
         }
         sendTag(destination, {
@@ -2471,6 +2549,8 @@ const handleInit = (preferences) => {
             storageId: result.storageId,
             currency: result.currency,
             skipZeroPurchaseEvent: result.skipZeroPurchaseEvent,
+            greySwitch: result.greySwitch,
+            greySwitchEuUk: result.greySwitchEuUk,
             geoCountry: result.geoCountry,
             geoRegion: result.geoRegion,
             isEURequest: result.isEURequest,

package/internal.d.ts

@@ -67,6 +67,8 @@ type InitResponse = {
     rates: { from: string; to: string; value: number }[]
   }
   skipZeroPurchaseEvent?: boolean
+  greySwitch?: boolean
+  greySwitchEuUk?: boolean
   geoCountry: string | null
   geoRegion: string | null
   isEURequest: boolean

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blotoutio/edgetag-sdk-js",
-  "version": "1.57.0",
+  "version": "1.57.1",
   "description": "JS SDK for EdgeTag",
   "author": "Blotout",
   "license": "MIT",