@c15t/backend 2.0.0-rc.0 → 2.0.0-rc.10

package/dist/edge.js

@@ -0,0 +1,190 @@
+import { createLogger } from "@c15t/logger";
+import { inspectPolicies as policy_inspectPolicies, policy_resolvePolicySync, resolveInitPayload, validateMessages, checkJurisdiction } from "./583.js";
+const STRIP_REGEX = /^(?:https?:\/\/)|^(?:wss?:\/\/)|(?:\/+$)|(?::\d+$)/g;
+function matchesWildcard(hostname, wildcardPattern, logger) {
+    const wildcardDomain = wildcardPattern.slice(2);
+    const isValid = hostname !== wildcardDomain && hostname.endsWith(`.${wildcardDomain}`);
+    logger?.debug(`Wildcard match result: ${isValid} ${hostname} ends with .${wildcardDomain}`);
+    return isValid;
+}
+function isOriginTrusted(origin, trustedDomains, logger) {
+    try {
+        if (0 === trustedDomains.length) throw new Error('No trusted domains');
+        logger?.debug(`Checking if origin ${origin} is trusted in ${trustedDomains}`);
+        if (trustedDomains.includes('*')) {
+            logger?.debug('Allowing all origins');
+            return true;
+        }
+        const url = new URL(origin);
+        const originHostname = url.hostname.toLowerCase();
+        logger?.debug(`Parsed origin hostname: ${originHostname}`);
+        return trustedDomains.some((domain)=>{
+            if (!domain || '' === domain.trim()) {
+                logger?.debug('Skipping empty domain');
+                return false;
+            }
+            const strippedDomain = domain.replace(STRIP_REGEX, '').toLowerCase();
+            logger?.debug(`Checking against stripped domain: ${strippedDomain}`);
+            if (strippedDomain.startsWith('*.')) return matchesWildcard(originHostname, strippedDomain, logger);
+            const isMatch = originHostname === strippedDomain;
+            logger?.debug(`Exact match result: ${isMatch} ${originHostname} === ${strippedDomain}`);
+            return isMatch;
+        });
+    } catch (error) {
+        logger?.error('Error validating origin:', error);
+        return false;
+    }
+}
+function unstable_c15tEdgeInit(options) {
+    const logger = createLogger(options.logger);
+    const validation = validateMessages({
+        customTranslations: options.customTranslations,
+        i18n: options.i18n,
+        policies: options.policyPacks
+    });
+    if (validation.errors.length > 0) throw new Error(`Edge init validation failed: ${validation.errors.join(', ')}`);
+    for (const warning of validation.warnings)logger.warn(warning);
+    if (options.policyPacks) policy_inspectPolicies(options.policyPacks, {
+        iabEnabled: options.iab?.enabled === true
+    });
+    return async (request)=>{
+        if ('OPTIONS' === request.method) return new Response(null, {
+            status: 204,
+            headers: buildCorsHeaders(request, options.trustedOrigins, logger)
+        });
+        try {
+            const payload = await resolveInitPayload(request, options, logger);
+            const headers = new Headers({
+                'content-type': 'application/json'
+            });
+            applyCorsHeaders(headers, request, options.trustedOrigins, logger);
+            return new Response(JSON.stringify(payload), {
+                status: 200,
+                headers
+            });
+        } catch (error) {
+            logger.error('Edge init handler error', error);
+            const errorHeaders = new Headers({
+                'content-type': 'application/json'
+            });
+            applyCorsHeaders(errorHeaders, request, options.trustedOrigins, logger);
+            return new Response(JSON.stringify({
+                code: 'INTERNAL_SERVER_ERROR',
+                message: 'Internal server error',
+                status: 500
+            }), {
+                status: 500,
+                headers: errorHeaders
+            });
+        }
+    };
+}
+function buildCorsHeaders(request, trustedOrigins, logger) {
+    const origin = request.headers.get('origin');
+    const headers = {
+        'access-control-allow-methods': 'GET, OPTIONS',
+        'access-control-allow-headers': 'content-type, accept-language',
+        'access-control-max-age': '86400'
+    };
+    if (origin && isTrusted(origin, trustedOrigins, logger)) {
+        headers['access-control-allow-origin'] = origin;
+        headers.vary = 'Origin';
+    }
+    return headers;
+}
+function applyCorsHeaders(headers, request, trustedOrigins, logger) {
+    const origin = request.headers.get('origin');
+    if (origin && isTrusted(origin, trustedOrigins, logger)) {
+        headers.set('access-control-allow-origin', origin);
+        headers.set('vary', 'Origin');
+    }
+}
+function isTrusted(origin, trustedOrigins, logger) {
+    if (0 === trustedOrigins.length) return false;
+    return isOriginTrusted(origin, trustedOrigins, logger);
+}
+function getLocationFromHeaders(headers) {
+    const countryCode = headers.get('x-c15t-country') ?? headers.get('cf-ipcountry') ?? headers.get('x-vercel-ip-country') ?? headers.get('x-amz-cf-ipcountry') ?? headers.get('x-country-code');
+    const regionCode = headers.get('x-c15t-region') ?? headers.get('x-vercel-ip-country-region') ?? headers.get('x-region-code');
+    return {
+        countryCode,
+        regionCode
+    };
+}
+function resolveNoPolicyFallback() {
+    return {
+        id: 'no_banner',
+        model: 'none',
+        ui: {
+            mode: 'none'
+        }
+    };
+}
+function resolveDefaultConsent(policy, gpc) {
+    const model = policy.model;
+    const categories = policy.consent?.categories ?? [];
+    const preselected = new Set(policy.consent?.preselectedCategories ?? []);
+    const respectsGpc = policy.consent?.gpc === true && gpc;
+    const defaults = {};
+    defaults.necessary = {
+        granted: true,
+        required: true
+    };
+    if ('none' === model) {
+        for (const category of categories)if ('*' !== category && 'necessary' !== category) defaults[category] = {
+            granted: true,
+            required: false
+        };
+        return defaults;
+    }
+    if ('opt-out' === model) {
+        for (const category of categories){
+            if ('*' === category || 'necessary' === category) continue;
+            const gpcOverride = respectsGpc && ('marketing' === category || 'measurement' === category);
+            defaults[category] = {
+                granted: !gpcOverride,
+                required: false
+            };
+        }
+        return defaults;
+    }
+    for (const category of categories)if ('*' !== category && 'necessary' !== category) defaults[category] = {
+        granted: preselected.has(category),
+        required: false
+    };
+    return defaults;
+}
+function unstable_resolveConsent(request, options, logger) {
+    const location = options.disableGeoLocation ? {
+        countryCode: null,
+        regionCode: null
+    } : getLocationFromHeaders(request.headers);
+    const jurisdiction = options.disableGeoLocation ? 'GDPR' : checkJurisdiction(location.countryCode, location.regionCode);
+    const gpc = '1' === request.headers.get('sec-gpc');
+    const hasExplicitPolicyPack = void 0 !== options.policyPacks;
+    const isExplicitEmptyPolicyPack = hasExplicitPolicyPack && (options.policyPacks?.length ?? 0) === 0;
+    const policyMatch = isExplicitEmptyPolicyPack ? void 0 : policy_resolvePolicySync({
+        policies: options.policyPacks,
+        countryCode: location.countryCode,
+        regionCode: location.regionCode,
+        jurisdiction
+    });
+    if (hasExplicitPolicyPack && !isExplicitEmptyPolicyPack && !policyMatch) logger?.warn('Policy packs configured but no policy matched', {
+        country: location.countryCode,
+        region: location.regionCode
+    });
+    const resolvedPolicy = hasExplicitPolicyPack ? policyMatch?.policy ?? resolveNoPolicyFallback() : resolveNoPolicyFallback();
+    const model = resolvedPolicy.model;
+    const showBanner = 'none' !== model && resolvedPolicy.ui?.mode !== 'none';
+    const defaults = resolveDefaultConsent(resolvedPolicy, gpc);
+    return {
+        jurisdiction,
+        location,
+        model,
+        policyId: resolvedPolicy.id,
+        defaults,
+        showBanner,
+        gpc
+    };
+}
+export { unstable_c15tEdgeInit, unstable_resolveConsent };