track_relay 1.3.0 → 1.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4d71fbb5a7101c3f407ba9fc7c05bf032a5718447a7cacd341647b9b794c47b2
-  data.tar.gz: b36598739beda0519f71b98cf906159b3857234dd9510d7aff35d1f33ecd9808
+  metadata.gz: d7fca8b3efc2716f3ba667aecdadd66bf58f2cbbd18a76f28dd04784a521ffdf
+  data.tar.gz: 01103c51038bf8fbefd95e63b513223ea93407e6583f4925ed3756805209a670
 SHA512:
-  metadata.gz: f71946bad98b203c57850991846de8e3fb95828bc825f5d9ccb2d6b5a205d6531253087a65e77c0e4eb4981f5e95129439ecf081fc719939618daeb93b611ca0
-  data.tar.gz: 1b05f9d685e43a6c97e37f306aa6f0a970f1b7fe6ccb774a037a4a26043295d7464a22ec2d821425aad6eb9ac6e1e07461420f7fc8ce6875f3bec1919e3d95e1
+  metadata.gz: a36d9e2d83ea2215798bc5ed963b0e618aa29436c83ad6e0d72ee0f46472435300fcfe0ae4fb9eecc29e491c25ca258e5f7cc6b85110f17f959cd6e9af3c4cc1
+  data.tar.gz: 0b855b5604793c877501ee2892a1f0d374384b257391b27f5cc1f453f8064a885acb5b874b5df8de97340dab64deb4ac808c625d749ed3961f8d213db8afc68d

data/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.4.0] - 2026-07-31
+
+### Added
+- `config.manifest_path` — hosts can relocate the generated event-schema
+  manifest outside the public web root (the on-disk catalog discloses
+  internal event names/params when served world-readable). Defaults to
+  `nil`, preserving the existing `public/track_relay_catalog.json`
+  behavior. The `track_relay:manifest` rake task, the development
+  catalog hot-reload regeneration, and the `assets:precompile` chaining
+  all honor it, since every default-path write flows through
+  `TrackRelay::Manifest.write!`.
+
 ## [1.3.0] - 2026-07-31
 
 ### Added

data/lib/tasks/track_relay.rake

@@ -64,7 +64,7 @@ namespace :track_relay do
     exit(clean ? 0 : 1)
   end
 
-  desc "Generate public/track_relay_catalog.json from the loaded catalog"
+  desc "Generate the catalog manifest (config.manifest_path, default public/track_relay_catalog.json)"
   task manifest: :environment do
     # Footgun guard (RISK-04): an empty manifest tells the JS client
     # "no schema, accept everything" — silently. Abort loudly so the

data/lib/track_relay/configuration.rb

@@ -87,7 +87,8 @@ module TrackRelay
       :ga4_enrich_page_context,
       :track_gate,
       :signed_client_token_secret,
-      :signed_client_token_ttl
+      :signed_client_token_ttl,
+      :manifest_path
 
     # @return [Array] registered subscriber instances, in insertion order
     attr_reader :subscribers
@@ -116,6 +117,7 @@ module TrackRelay
       @track_gate = nil
       @signed_client_token_secret = nil
       @signed_client_token_ttl = 30.days
+      @manifest_path = nil
     end
 
     # Append a subscriber to the registry.

data/lib/track_relay/manifest.rb

@@ -74,6 +74,15 @@ module TrackRelay
       private
 
       def default_path
+        # `config.manifest_path` lets hosts keep the event schema out of
+        # the public web root; the rake task, dev reload, and
+        # assets:precompile chaining all resolve through here. The
+        # respond_to? guard keeps this file loadable standalone (the
+        # rake file require_relative's it without the umbrella require).
+        if TrackRelay.respond_to?(:config) && (configured = TrackRelay.config.manifest_path)
+          return configured
+        end
+
         unless defined?(Rails) && Rails.respond_to?(:root) && Rails.root
           raise ArgumentError,
             "TrackRelay::Manifest.write! requires a `path:` argument when Rails.root is unavailable"

data/lib/track_relay/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module TrackRelay
-  VERSION = "1.3.0"
+  VERSION = "1.4.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: track_relay
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.4.0
 platform: ruby
 authors:
 - dchuk