@blotoutio/edgetag-sdk-js 1.60.0 → 1.61.1

package/index.cjs.js

@@ -1470,7 +1470,7 @@ const getStandardPayload = (destination, payload) => {
         referrer: getReferrer(destination),
         search: getSearch(destination),
         locale: getLocale(),
-        sdkVersion: "1.60.0" ,
+        sdkVersion: "1.61.1" ,
         ...(payload || {}),
     };
     let storage = {};
@@ -1662,16 +1662,26 @@ const sendTag = (destination, { eventName, eventId, data, providerData, provider
 // by the plugin's identity `${providerId}||${name}` (which is carried in the
 // plugin object's `name`). A missing scope means the plugin is global.
 //
-// Mirrors the edge getAllowedPlugins per-item logic: at instance level the
-// scripts allow-list wins, otherwise fall back to the providers allow-list.
+// Mirrors the edge getAllowedPlugins: an instance-scoped plugin runs only for
+// its exact instance (instance stage) or the channel its scripts imply (channel
+// stage); a plugin counts as global only when it has NEITHER providers NOR
+// scripts — an empty providers list alone does not make it global.
 const isPluginAllowed = (scope, providerId, instanceName) => {
     if (!scope) {
         return true;
     }
-    if (instanceName && scope.scripts.length > 0) {
+    const isInstanceScoped = scope.scripts.length > 0;
+    // Instance stage for an instance-scoped plugin: only its exact instance.
+    if (instanceName && isInstanceScoped) {
         return scope.scripts.includes(`${providerId}||${instanceName}`);
     }
-    return scope.providers.length === 0 || scope.providers.includes(providerId);
+    // Channel stage (or instance stage for a global/channel-scoped plugin).
+    // A plugin is global only when it has NEITHER providers NOR scripts; an
+    // instance-scoped plugin still runs for the channel its scripts imply — it
+    // is NOT global just because its providers list is empty.
+    const isGlobal = scope.providers.length === 0 && !isInstanceScoped;
+    const impliesChannel = scope.scripts.some((script) => script.split('||')[0] === providerId);
+    return isGlobal || scope.providers.includes(providerId) || impliesChannel;
 };
 // Mirrors the edge processPluginsRoot skip scope: a global plugin (no scope)
 // skips every browser instance (null), a scoped plugin skips only the instances
@@ -1967,30 +1977,34 @@ const processTag = async (destination, eventName, data = {}, providers, options,
                         skipped: rootSkippedInstances.has(`${providerId}||${variable.tagName}`),
                     });
                 }
-                // Channel phase (processPluginsChannel): tagChannel runs once per
-                // instance, regardless of skip/consent/geo, so its side effects and
-                // additional events still fire on skipped instances.
+                // Channel phase (processPluginsChannel): tagChannel runs ONCE per
+                // channel and the result fans out to every instance, mirroring the
+                // edge. It runs regardless of skip/consent/geo so its additional
+                // events still fire even when instances are skipped. All instances
+                // share the same channel-level input (eventName/data), so a single
+                // invocation is equivalent to running it per instance.
                 const channelPlugins = plugins.filter((plugin) => plugin.name !== pluginSource &&
                     isPluginAllowed(pluginScopes === null || pluginScopes === void 0 ? void 0 : pluginScopes[plugin.name], providerId, null));
                 if (channelPlugins.length > 0) {
+                    const channelResult = await runPluginHook(channelPlugins, 'tagChannel', pluginScopes, {
+                        payload: {
+                            eventName: currentEventName,
+                            data,
+                            eventId,
+                        },
+                        context: pluginContext,
+                        settings: pluginSettings,
+                        providerId,
+                        utilities: pluginUtilities,
+                    });
                     for (const variable of variables) {
                         const state = instanceStates.get(variable.tagName);
-                        const channelResult = await runPluginHook(channelPlugins, 'tagChannel', pluginScopes, {
-                            payload: {
-                                eventName: state.eventName,
-                                data: state.data,
-                                eventId,
-                            },
-                            context: pluginContext,
-                            settings: pluginSettings,
-                            providerId,
-                            utilities: pluginUtilities,
-                        });
                         if (channelResult.skip) {
                             state.skipped = true;
                         }
                         state.eventName = channelResult.eventName;
-                        state.data = channelResult.data;
+                        // Clone per instance so later per-instance mutation stays isolated
+                        state.data = jsonClone(channelResult.data);
                     }
                 }
                 // Instance phase (processPluginsInstance + tag send): consent/geo gate,

package/index.mjs

@@ -1468,7 +1468,7 @@ const getStandardPayload = (destination, payload) => {
         referrer: getReferrer(destination),
         search: getSearch(destination),
         locale: getLocale(),
-        sdkVersion: "1.60.0" ,
+        sdkVersion: "1.61.1" ,
         ...(payload || {}),
     };
     let storage = {};
@@ -1660,16 +1660,26 @@ const sendTag = (destination, { eventName, eventId, data, providerData, provider
 // by the plugin's identity `${providerId}||${name}` (which is carried in the
 // plugin object's `name`). A missing scope means the plugin is global.
 //
-// Mirrors the edge getAllowedPlugins per-item logic: at instance level the
-// scripts allow-list wins, otherwise fall back to the providers allow-list.
+// Mirrors the edge getAllowedPlugins: an instance-scoped plugin runs only for
+// its exact instance (instance stage) or the channel its scripts imply (channel
+// stage); a plugin counts as global only when it has NEITHER providers NOR
+// scripts — an empty providers list alone does not make it global.
 const isPluginAllowed = (scope, providerId, instanceName) => {
     if (!scope) {
         return true;
     }
-    if (instanceName && scope.scripts.length > 0) {
+    const isInstanceScoped = scope.scripts.length > 0;
+    // Instance stage for an instance-scoped plugin: only its exact instance.
+    if (instanceName && isInstanceScoped) {
         return scope.scripts.includes(`${providerId}||${instanceName}`);
     }
-    return scope.providers.length === 0 || scope.providers.includes(providerId);
+    // Channel stage (or instance stage for a global/channel-scoped plugin).
+    // A plugin is global only when it has NEITHER providers NOR scripts; an
+    // instance-scoped plugin still runs for the channel its scripts imply — it
+    // is NOT global just because its providers list is empty.
+    const isGlobal = scope.providers.length === 0 && !isInstanceScoped;
+    const impliesChannel = scope.scripts.some((script) => script.split('||')[0] === providerId);
+    return isGlobal || scope.providers.includes(providerId) || impliesChannel;
 };
 // Mirrors the edge processPluginsRoot skip scope: a global plugin (no scope)
 // skips every browser instance (null), a scoped plugin skips only the instances
@@ -1965,30 +1975,34 @@ const processTag = async (destination, eventName, data = {}, providers, options,
                         skipped: rootSkippedInstances.has(`${providerId}||${variable.tagName}`),
                     });
                 }
-                // Channel phase (processPluginsChannel): tagChannel runs once per
-                // instance, regardless of skip/consent/geo, so its side effects and
-                // additional events still fire on skipped instances.
+                // Channel phase (processPluginsChannel): tagChannel runs ONCE per
+                // channel and the result fans out to every instance, mirroring the
+                // edge. It runs regardless of skip/consent/geo so its additional
+                // events still fire even when instances are skipped. All instances
+                // share the same channel-level input (eventName/data), so a single
+                // invocation is equivalent to running it per instance.
                 const channelPlugins = plugins.filter((plugin) => plugin.name !== pluginSource &&
                     isPluginAllowed(pluginScopes === null || pluginScopes === void 0 ? void 0 : pluginScopes[plugin.name], providerId, null));
                 if (channelPlugins.length > 0) {
+                    const channelResult = await runPluginHook(channelPlugins, 'tagChannel', pluginScopes, {
+                        payload: {
+                            eventName: currentEventName,
+                            data,
+                            eventId,
+                        },
+                        context: pluginContext,
+                        settings: pluginSettings,
+                        providerId,
+                        utilities: pluginUtilities,
+                    });
                     for (const variable of variables) {
                         const state = instanceStates.get(variable.tagName);
-                        const channelResult = await runPluginHook(channelPlugins, 'tagChannel', pluginScopes, {
-                            payload: {
-                                eventName: state.eventName,
-                                data: state.data,
-                                eventId,
-                            },
-                            context: pluginContext,
-                            settings: pluginSettings,
-                            providerId,
-                            utilities: pluginUtilities,
-                        });
                         if (channelResult.skip) {
                             state.skipped = true;
                         }
                         state.eventName = channelResult.eventName;
-                        state.data = channelResult.data;
+                        // Clone per instance so later per-instance mutation stays isolated
+                        state.data = jsonClone(channelResult.data);
                     }
                 }
                 // Instance phase (processPluginsInstance + tag send): consent/geo gate,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blotoutio/edgetag-sdk-js",
-  "version": "1.60.0",
+  "version": "1.61.1",
   "description": "JS SDK for EdgeTag",
   "author": "Blotout",
   "license": "MIT",