@bacano/sdk 1.1.20 → 1.2.2

package/react.cjs

@@ -33,6 +33,7 @@ __export(react_exports, {
   useAttributeList: () => useAttributeList,
   useAvailability: () => useAvailability,
   useBacano: () => useBacano,
+  useBacanoCta: () => useBacanoCta,
   useBacanoState: () => useBacanoState,
   useBrands: () => useBrands,
   useCart: () => useCart,
@@ -4149,7 +4150,7 @@ function createCatalogModule(graphqlUrl, getHeaders, getContext, storageUrl) {
   };
 }
 
-// libs/sdk/src/react/hooks.ts
+// libs/sdk/src/react/cta-tracking.ts
 var import_react2 = require("react");
 
 // libs/sdk/src/react/context-registry.ts
@@ -4178,13 +4179,6 @@ function getOrCreateReactContext(key, defaultValue) {
   return context;
 }
 
-// libs/sdk/src/react/context.ts
-var BacanoReactContext = getOrCreateReactContext("bacano-client-v1", {
-  client: null,
-  loading: true,
-  error: null
-});
-
 // libs/sdk/src/react/marketing-context.ts
 var NOOP_MARKETING_RUNTIME = {
   enabled: false,
@@ -4198,26 +4192,55 @@ var BacanoMarketingContext = getOrCreateReactContext(
   NOOP_MARKETING_RUNTIME
 );
 
+// libs/sdk/src/react/cta-tracking.ts
+function useBacanoCta(context) {
+  const runtime = (0, import_react2.useContext)(BacanoMarketingContext);
+  const lastClick = (0, import_react2.useRef)({ identity: "", at: -Infinity });
+  const { ctaId, formKey, placement } = context;
+  return (0, import_react2.useCallback)(() => {
+    if (!runtime.enabled) return;
+    const identity = `${ctaId}:${formKey ?? ""}:${placement ?? ""}`;
+    const at = Date.now();
+    if (identity === lastClick.current.identity && at - lastClick.current.at < 400)
+      return;
+    lastClick.current = { identity, at };
+    try {
+      runtime.track({ eventName: "cta_click", ctaId, formKey, placement });
+    } catch {
+    }
+  }, [runtime, ctaId, formKey, placement]);
+}
+
+// libs/sdk/src/react/hooks.ts
+var import_react3 = require("react");
+
+// libs/sdk/src/react/context.ts
+var BacanoReactContext = getOrCreateReactContext("bacano-client-v1", {
+  client: null,
+  loading: true,
+  error: null
+});
+
 // libs/sdk/src/react/hooks.ts
 function useClient() {
-  const { client, loading, error } = (0, import_react2.useContext)(BacanoReactContext);
+  const { client, loading, error } = (0, import_react3.useContext)(BacanoReactContext);
   if (error) throw error;
   if (loading || !client) throw new NotInitializedError();
   return client;
 }
 function useSafeClient() {
-  const { client } = (0, import_react2.useContext)(BacanoReactContext);
+  const { client } = (0, import_react3.useContext)(BacanoReactContext);
   return client;
 }
 function useAsync(fetcher, deps = []) {
   const client = useSafeClient();
-  const [state, setState] = (0, import_react2.useState)({
+  const [state, setState] = (0, import_react3.useState)({
     data: null,
     loading: true,
     error: null
   });
-  const mountedRef = (0, import_react2.useRef)(true);
-  const fetchData = (0, import_react2.useCallback)(async () => {
+  const mountedRef = (0, import_react3.useRef)(true);
+  const fetchData = (0, import_react3.useCallback)(async () => {
     if (!client) return;
     setState((prev) => ({ ...prev, loading: true, error: null }));
     try {
@@ -4235,7 +4258,7 @@ function useAsync(fetcher, deps = []) {
       }
     }
   }, [client, ...deps]);
-  (0, import_react2.useEffect)(() => {
+  (0, import_react3.useEffect)(() => {
     mountedRef.current = true;
     fetchData();
     return () => {
@@ -4248,10 +4271,10 @@ function useBacano() {
   return useClient();
 }
 function useBacanoState() {
-  return (0, import_react2.useContext)(BacanoReactContext);
+  return (0, import_react3.useContext)(BacanoReactContext);
 }
 function useMarketing() {
-  return (0, import_react2.useContext)(BacanoMarketingContext);
+  return (0, import_react3.useContext)(BacanoMarketingContext);
 }
 function useProducts(opts) {
   return useAsync(
@@ -4342,10 +4365,10 @@ function useContentByTag(tag, opts) {
 }
 function useCart() {
   const client = useSafeClient();
-  const [cart, setCart] = (0, import_react2.useState)(null);
-  const [loading, setLoading] = (0, import_react2.useState)(false);
-  const [error, setError] = (0, import_react2.useState)(null);
-  const refreshCart = (0, import_react2.useCallback)(async () => {
+  const [cart, setCart] = (0, import_react3.useState)(null);
+  const [loading, setLoading] = (0, import_react3.useState)(false);
+  const [error, setError] = (0, import_react3.useState)(null);
+  const refreshCart = (0, import_react3.useCallback)(async () => {
     if (!client) return;
     setLoading(true);
     try {
@@ -4358,10 +4381,10 @@ function useCart() {
       setLoading(false);
     }
   }, [client]);
-  (0, import_react2.useEffect)(() => {
+  (0, import_react3.useEffect)(() => {
     refreshCart();
   }, [refreshCart]);
-  const addItem = (0, import_react2.useCallback)(
+  const addItem = (0, import_react3.useCallback)(
     async (productVariantId, quantity) => {
       if (!client) throw new NotInitializedError();
       const item = await client.cart.addItem(productVariantId, quantity);
@@ -4370,7 +4393,7 @@ function useCart() {
     },
     [client, refreshCart]
   );
-  const updateItem = (0, import_react2.useCallback)(
+  const updateItem = (0, import_react3.useCallback)(
     async (cartItemId, quantity) => {
       if (!client) throw new NotInitializedError();
       const result = await client.cart.updateItem(cartItemId, quantity);
@@ -4379,7 +4402,7 @@ function useCart() {
     },
     [client, refreshCart]
   );
-  const removeItem = (0, import_react2.useCallback)(
+  const removeItem = (0, import_react3.useCallback)(
     async (cartItemId) => {
       if (!client) throw new NotInitializedError();
       await client.cart.removeItem(cartItemId);
@@ -4387,7 +4410,7 @@ function useCart() {
     },
     [client, refreshCart]
   );
-  const clear = (0, import_react2.useCallback)(async () => {
+  const clear = (0, import_react3.useCallback)(async () => {
     if (!client) throw new NotInitializedError();
     setLoading(true);
     try {
@@ -4402,7 +4425,7 @@ function useCart() {
       setLoading(false);
     }
   }, [client]);
-  const getOrCreate = (0, import_react2.useCallback)(
+  const getOrCreate = (0, import_react3.useCallback)(
     async (contact, fulfillmentFamily) => {
       if (!client) throw new NotInitializedError();
       const c = await client.cart.getOrCreate(contact, fulfillmentFamily);
@@ -4411,7 +4434,7 @@ function useCart() {
     },
     [client]
   );
-  const startCheckout = (0, import_react2.useCallback)(
+  const startCheckout = (0, import_react3.useCallback)(
     async (input) => {
       if (!client) throw new NotInitializedError();
       const c = await client.cart.startCheckout(input);
@@ -4435,9 +4458,9 @@ function useCart() {
 }
 function useCheckout() {
   const client = useSafeClient();
-  const [loading, setLoading] = (0, import_react2.useState)(false);
-  const [error, setError] = (0, import_react2.useState)(null);
-  const checkout = (0, import_react2.useCallback)(
+  const [loading, setLoading] = (0, import_react3.useState)(false);
+  const [error, setError] = (0, import_react3.useState)(null);
+  const checkout = (0, import_react3.useCallback)(
     async (input) => {
       if (!client) throw new NotInitializedError();
       setLoading(true);
@@ -4477,7 +4500,7 @@ function useProfile() {
     error,
     refetch
   } = useAsync((client2) => client2.profile.get());
-  const updateProfile = (0, import_react2.useCallback)(
+  const updateProfile = (0, import_react3.useCallback)(
     async (data) => {
       if (!client) throw new NotInitializedError();
       const updated = await client.profile.update(data);
@@ -4490,7 +4513,7 @@ function useProfile() {
 }
 
 // libs/sdk/src/react/marketing-provider.tsx
-var import_react4 = require("react");
+var import_react5 = require("react");
 
 // libs/sdk/src/marketing/sanitize.ts
 var SENSITIVE_PARAMETER_PATTERNS = [
@@ -4530,6 +4553,9 @@ var ALLOWED_MARKETING_PARAMETERS = /* @__PURE__ */ new Set([
 function sanitizeMarketingUrl(input, baseUrl) {
   try {
     const url = new URL(input, baseUrl);
+    if (url.protocol !== "http:" && url.protocol !== "https:") return "";
+    url.username = "";
+    url.password = "";
     const safeParameters = new URLSearchParams();
     for (const [key, value] of url.searchParams.entries()) {
       if (ALLOWED_MARKETING_PARAMETERS.has(key.toLowerCase()) && !SENSITIVE_PARAMETER_PATTERNS.some((pattern) => pattern.test(key))) {
@@ -4749,50 +4775,65 @@ function serializeWebsiteMarketingAttribution(attribution) {
   };
 }
 
-// libs/sdk/src/marketing/clarity.ts
-var initializedDestinations = /* @__PURE__ */ new Set();
-function clarityWindow() {
-  return typeof window === "undefined" ? null : window;
-}
-function prepareClarity(projectId) {
-  const target = clarityWindow();
-  if (!target || initializedDestinations.has(projectId)) return;
-  if (!target.clarity) {
-    const clarity = function() {
-      clarity.q ??= [];
-      clarity.q.push(arguments);
-    };
-    target.clarity = clarity;
+// libs/sdk/src/marketing/interactions.ts
+var WEBSITE_INTERACTION_EVENTS = [
+  "cta_click",
+  "form_open",
+  "form_start",
+  "form_step_complete",
+  "form_submit_attempt",
+  "form_submit_error",
+  "form_submit_success"
+];
+function isInteractionEvent(name) {
+  return WEBSITE_INTERACTION_EVENTS.some((candidate) => candidate === name);
+}
+function isInteractionIdentifier(value) {
+  return typeof value === "string" && /^[a-z][a-z0-9_-]{0,63}$/.test(value);
+}
+function isBrowserMarketingEvent(name) {
+  return isInteractionEvent(name) || [
+    "page_view",
+    "search",
+    "view_item_list",
+    "select_item",
+    "view_item",
+    "add_to_cart",
+    "remove_from_cart",
+    "view_cart",
+    "begin_checkout",
+    "add_shipping_info",
+    "add_payment_info",
+    "contact"
+  ].includes(name);
+}
+function interactionParameters(event) {
+  if (!isInteractionEvent(event.eventName)) return {};
+  if (event.eventName === "cta_click" ? !isInteractionIdentifier(event.ctaId) : !isInteractionIdentifier(event.formKey))
+    return null;
+  if (event.eventName === "form_step_complete" && !isInteractionIdentifier(event.stepKey))
+    return null;
+  if (event.eventName === "form_submit_error" && !["validation", "network", "rejected", "unavailable"].includes(
+    event.errorCategory ?? ""
+  ))
+    return null;
+  const params = {};
+  for (const [key, value] of Object.entries({
+    form_key: event.formKey,
+    cta_id: event.ctaId,
+    placement: event.placement,
+    step_key: event.stepKey
+  })) {
+    if (value === void 0) continue;
+    if (!isInteractionIdentifier(value)) return null;
+    params[key] = value;
   }
-  initializedDestinations.add(projectId);
-}
-function loadClarityScript(projectId) {
-  if (typeof document === "undefined") return;
-  const id = `bacano-clarity-${projectId}`;
-  if (document.getElementById(id)) return;
-  const script = document.createElement("script");
-  script.id = id;
-  script.async = true;
-  script.src = `https://www.clarity.ms/tag/${encodeURIComponent(projectId)}`;
-  script.referrerPolicy = "strict-origin-when-cross-origin";
-  document.head.appendChild(script);
-}
-function sendClarityEvent(eventName) {
-  clarityWindow()?.clarity?.("event", eventName);
+  if (event.eventName === "form_submit_error" && event.errorCategory)
+    params.error_category = event.errorCategory;
+  return params;
 }
-
-// libs/sdk/src/marketing/domain.ts
-function matchesCanonicalMarketingHost(canonicalDomain, currentHostname) {
-  if (canonicalDomain === void 0) return true;
-  if (!canonicalDomain?.trim()) return false;
-  try {
-    const configuredHost = new URL(
-      canonicalDomain.includes("://") ? canonicalDomain : `https://${canonicalDomain}`
-    ).hostname.toLowerCase();
-    return currentHostname.toLowerCase() === configuredHost;
-  } catch {
-    return false;
-  }
+function newMarketingEventId() {
+  return typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `evt_${Date.now()}_${Math.random().toString(16).slice(2)}`;
 }
 
 // libs/sdk/src/marketing/ga4.ts
@@ -4819,19 +4860,20 @@ var WEBSITE_MARKETING_CONTACT_PLACEMENTS = [
   "contact_page"
 ];
 
-// libs/sdk/src/marketing/runtime.ts
+// libs/sdk/src/marketing/browser-adapters.ts
 var initializedGa4Destinations = /* @__PURE__ */ new Set();
 var initializedMetaDestinations = /* @__PURE__ */ new Set();
 function marketingWindow() {
   return typeof window === "undefined" ? null : window;
 }
-function loadScriptOnce(id, source) {
+function loadScriptOnce(id, source, onError) {
   if (typeof document === "undefined" || document.getElementById(id)) return;
   const script = document.createElement("script");
   script.id = id;
   script.async = true;
   script.src = source;
   script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError?.();
   document.head.appendChild(script);
 }
 function prepareGa4(measurementId) {
@@ -4846,10 +4888,11 @@ function prepareGa4(measurementId) {
   target.gtag("config", measurementId, { send_page_view: false });
   initializedGa4Destinations.add(measurementId);
 }
-function loadGa4Script(measurementId) {
+function loadGa4Script(measurementId, onError) {
   loadScriptOnce(
     `bacano-ga4-${measurementId}`,
-    `https://www.googletagmanager.com/gtag/js?id=${encodeURIComponent(measurementId)}`
+    `https://www.googletagmanager.com/gtag/js?id=${encodeURIComponent(measurementId)}`,
+    onError
   );
 }
 function captureGa4ClientId(measurementId, websiteId, diagnostic) {
@@ -4897,10 +4940,11 @@ function prepareMeta(pixelId) {
   target.fbq("init", pixelId);
   initializedMetaDestinations.add(pixelId);
 }
-function loadMetaScript() {
+function loadMetaScript(onError) {
   loadScriptOnce(
     "bacano-meta-pixel",
-    "https://connect.facebook.net/en_US/fbevents.js"
+    "https://connect.facebook.net/en_US/fbevents.js",
+    onError
   );
 }
 function scheduleScriptLoad(load, strategy) {
@@ -4964,10 +5008,12 @@ function contactPlacementFor(event) {
   }
   return placement;
 }
-function sendGa4(event, diagnosticMode) {
+function sendGa4(event, diagnosticMode, measurementId) {
   const target = marketingWindow();
   const contactPlacement = contactPlacementFor(event);
   target?.gtag?.("event", event.eventName, {
+    send_to: measurementId,
+    ...interactionParameters(event),
     currency: event.currency,
     value: event.value,
     search_term: event.searchTerm,
@@ -4984,15 +5030,17 @@ function sendGa4(event, diagnosticMode) {
     debug_mode: diagnosticMode ? true : void 0
   });
 }
-function sendMeta(event) {
+function sendMeta(event, pixelId) {
   const target = marketingWindow();
   const eventName = metaEventName(event.eventName);
   const isStandard = eventName !== event.eventName;
   const contactPlacement = contactPlacementFor(event);
   target?.fbq?.(
-    isStandard ? "track" : "trackCustom",
+    isStandard ? "trackSingle" : "trackSingleCustom",
+    pixelId,
     eventName,
     {
+      ...interactionParameters(event),
       currency: event.currency,
       value: event.value,
       search_string: event.searchTerm,
@@ -5009,40 +5057,192 @@ function sendMeta(event) {
     { eventID: event.eventId }
   );
 }
-function newEventId() {
-  return typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `evt_${Date.now()}_${Math.random().toString(16).slice(2)}`;
+
+// libs/sdk/src/marketing/clarity.ts
+var initializedDestinations = /* @__PURE__ */ new Set();
+function clarityWindow() {
+  return typeof window === "undefined" ? null : window;
+}
+function prepareClarity(projectId) {
+  const target = clarityWindow();
+  if (!target || initializedDestinations.has(projectId)) return;
+  if (!target.clarity) {
+    const clarity = function() {
+      clarity.q ??= [];
+      clarity.q.push(arguments);
+    };
+    target.clarity = clarity;
+  }
+  initializedDestinations.add(projectId);
+}
+function loadClarityScript(projectId, onError) {
+  if (typeof document === "undefined") return;
+  const id = `bacano-clarity-${projectId}`;
+  if (document.getElementById(id)) return;
+  const script = document.createElement("script");
+  script.id = id;
+  script.async = true;
+  script.src = `https://www.clarity.ms/tag/${encodeURIComponent(projectId)}`;
+  script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError?.();
+  document.head.appendChild(script);
+}
+function sendClarityEvent(eventName) {
+  clarityWindow()?.clarity?.("event", eventName);
+}
+
+// libs/sdk/src/marketing/domain.ts
+function matchesCanonicalMarketingHost(canonicalDomain, currentHostname) {
+  if (canonicalDomain === void 0) return true;
+  if (!canonicalDomain?.trim()) return false;
+  try {
+    const configuredHost = new URL(
+      canonicalDomain.includes("://") ? canonicalDomain : `https://${canonicalDomain}`
+    ).hostname.toLowerCase();
+    return currentHostname.toLowerCase() === configuredHost;
+  } catch {
+    return false;
+  }
+}
+
+// libs/sdk/src/marketing/gtm.ts
+var CONTAINER_ID = /^GTM-[A-Z0-9]{4,32}$/;
+var preparedQueues = /* @__PURE__ */ new WeakMap();
+function prepareGtm(containerId) {
+  const target = marketingWindow();
+  if (!target || !CONTAINER_ID.test(containerId)) return;
+  target.dataLayer ??= [];
+  const containers = preparedQueues.get(target.dataLayer) ?? /* @__PURE__ */ new Set();
+  if (containers.has(containerId)) return;
+  target.dataLayer.push({ "gtm.start": Date.now(), event: "gtm.js" });
+  containers.add(containerId);
+  preparedQueues.set(target.dataLayer, containers);
 }
+function loadGtmScript(containerId, onError) {
+  const target = marketingWindow();
+  if (!target || typeof document === "undefined" || !CONTAINER_ID.test(containerId))
+    return;
+  const id = `bacano-gtm-${containerId}`;
+  if (document.getElementById(id)) return;
+  prepareGtm(containerId);
+  const script = document.createElement("script");
+  script.id = id;
+  script.async = true;
+  script.src = `https://www.googletagmanager.com/gtm.js?id=${encodeURIComponent(containerId)}`;
+  script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError();
+  document.head.appendChild(script);
+}
+function sendGtm(event) {
+  const target = marketingWindow();
+  if (!target?.dataLayer) return;
+  target.dataLayer.push({ bacano: null });
+  target.dataLayer.push({
+    event: `bacano_${event.eventName}`,
+    bacano: {
+      schema_version: event.schemaVersion,
+      event_name: event.eventName,
+      event_id: event.eventId,
+      ...interactionParameters(event),
+      page_location: event.pageLocation,
+      currency: event.currency,
+      value: event.value,
+      items: mapGa4Items(event.items),
+      item_list_id: event.itemListId,
+      item_list_name: event.itemListName,
+      shipping_tier: event.shippingTier,
+      payment_type: event.paymentType,
+      method: event.contactMethod,
+      contact_placement: event.eventName === "contact" && WEBSITE_MARKETING_CONTACT_PLACEMENTS.some(
+        (value) => value === event.contactPlacement
+      ) ? event.contactPlacement : void 0
+    }
+  });
+}
+
+// libs/sdk/src/marketing/runtime.ts
 function createWebsiteMarketingRuntime(options) {
   let destroyed = false;
+  const dispatched = /* @__PURE__ */ new Set();
+  const observer = options.diagnostic;
+  const diagnostic = (value) => {
+    try {
+      observer?.(value);
+    } catch {
+    }
+  };
+  options = { ...options, diagnostic };
   let cancelScheduledLoad = () => void 0;
   const target = marketingWindow();
-  const enabled = options.config.enabled && Boolean(
+  const enabled = options.config.enabled && options.measurementAllowed !== false && Boolean(
     target && matchesCanonicalMarketingHost(
       options.canonicalDomain,
       target.location.hostname
     )
   ) && Boolean(
-    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity
+    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity || options.config.destinations.gtm
   );
+  if (!enabled)
+    diagnostic({
+      level: "debug",
+      code: !options.config.enabled ? "MARKETING_DISABLED" : options.measurementAllowed === false ? "MEASUREMENT_NOT_ALLOWED" : !target ? "SERVER_RENDER" : !matchesCanonicalMarketingHost(
+        options.canonicalDomain,
+        target.location.hostname
+      ) ? "DOMAIN_NOT_ALLOWED" : "PROVIDER_NOT_CONFIGURED",
+      message: "Measurement is inactive; no events are emitted"
+    });
   if (enabled) {
+    const guard = (provider, action) => {
+      try {
+        action();
+      } catch {
+        diagnostic({
+          level: "warning",
+          code: "RUNTIME_INITIALIZATION_FAILED",
+          message: `${provider}: initialization failed`
+        });
+      }
+    };
+    const scriptError = (provider) => () => diagnostic({
+      level: "warning",
+      code: "SCRIPT_LOAD_FAILED",
+      message: `${provider}: script could not load (network, CSP or blocker); external reception is unverified`
+    });
     try {
       if (options.config.destinations.ga4) {
-        prepareGa4(options.config.destinations.ga4.measurementId);
+        const { measurementId } = options.config.destinations.ga4;
+        guard("GA4", () => prepareGa4(measurementId));
       }
       if (options.config.destinations.meta) {
-        prepareMeta(options.config.destinations.meta.pixelId);
+        const { pixelId } = options.config.destinations.meta;
+        guard("Meta", () => prepareMeta(pixelId));
       }
       if (options.config.destinations.clarity) {
-        prepareClarity(options.config.destinations.clarity.projectId);
+        const { projectId } = options.config.destinations.clarity;
+        guard("Clarity", () => prepareClarity(projectId));
+      }
+      if (options.config.destinations.gtm) {
+        const { containerId } = options.config.destinations.gtm;
+        guard("GTM", () => prepareGtm(containerId));
       }
       cancelScheduledLoad = scheduleScriptLoad(() => {
         if (destroyed) return;
         if (options.config.destinations.ga4) {
-          loadGa4Script(options.config.destinations.ga4.measurementId);
+          const { measurementId } = options.config.destinations.ga4;
+          guard("GA4", () => loadGa4Script(measurementId, scriptError("GA4")));
         }
-        if (options.config.destinations.meta) loadMetaScript();
+        if (options.config.destinations.meta)
+          guard("Meta", () => loadMetaScript(scriptError("Meta")));
         if (options.config.destinations.clarity) {
-          loadClarityScript(options.config.destinations.clarity.projectId);
+          const { projectId } = options.config.destinations.clarity;
+          guard(
+            "Clarity",
+            () => loadClarityScript(projectId, scriptError("Clarity"))
+          );
+        }
+        if (options.config.destinations.gtm) {
+          const { containerId } = options.config.destinations.gtm;
+          guard("GTM", () => loadGtmScript(containerId, scriptError("GTM")));
         }
       }, options.scriptLoadStrategy);
       captureWebsiteMarketingAttribution(
@@ -5064,11 +5264,11 @@ function createWebsiteMarketingRuntime(options) {
       if (options.config.destinations.meta) {
         refreshWebsiteMarketingMetaContext(options.websiteId);
       }
-    } catch (error) {
+    } catch {
       options.diagnostic?.({
         level: "warning",
         code: "RUNTIME_INITIALIZATION_FAILED",
-        message: error instanceof Error ? error.message : "Initialization failed"
+        message: "Marketing initialization failed; external reception is unverified"
       });
     }
   }
@@ -5076,41 +5276,99 @@ function createWebsiteMarketingRuntime(options) {
     enabled,
     track(input) {
       if (!enabled || destroyed) return;
+      if (!isBrowserMarketingEvent(input.eventName)) {
+        diagnostic({
+          level: "warning",
+          code: "INVALID_EVENT",
+          message: "Unknown or server-owned event rejected"
+        });
+        return;
+      }
+      try {
+        captureWebsiteMarketingAttribution(
+          options.websiteId,
+          options.config.attributionWindowDays
+        );
+      } catch {
+      }
       const event = {
         ...input,
         schemaVersion: 1,
-        eventId: input.eventId ?? newEventId(),
+        eventId: input.eventId ?? newMarketingEventId(),
         occurredAt: input.occurredAt ?? (/* @__PURE__ */ new Date()).toISOString(),
         currency: input.currency ?? options.config.currencyCode,
         pageLocation: sanitizeMarketingUrl(
           input.pageLocation ?? (typeof window === "undefined" ? "" : window.location.href)
         )
       };
-      try {
-        if (options.config.destinations.ga4) {
-          sendGa4(event, options.config.destinations.ga4.diagnosticMode);
+      if (isInteractionEvent(event.eventName)) {
+        if (!interactionParameters(event) || !/^[a-zA-Z0-9_-]{1,100}$/.test(event.eventId)) {
+          diagnostic({
+            level: "warning",
+            code: "INVALID_INTERACTION",
+            message: "Interaction rejected by the public contract",
+            eventName: event.eventName
+          });
+          return;
         }
-        if (options.config.destinations.meta) sendMeta(event);
-        if (options.config.destinations.clarity) {
-          sendClarityEvent(event.eventName);
+        for (const key of [
+          "currency",
+          "value",
+          "searchTerm",
+          "itemListId",
+          "itemListName",
+          "shippingTier",
+          "paymentType",
+          "contactMethod",
+          "contactPlacement",
+          "items",
+          "pageTitle"
+        ])
+          delete event[key];
+      }
+      const identity = `${event.eventName}:${event.eventId}`;
+      if (dispatched.has(identity)) return;
+      dispatched.add(identity);
+      const oldest = dispatched.values().next().value;
+      if (dispatched.size > 1e3 && oldest) dispatched.delete(oldest);
+      const dispatch = (provider, send) => {
+        try {
+          send();
+          diagnostic({
+            level: "debug",
+            code: "EVENT_DISPATCHED",
+            message: `${provider}: passed to adapter; external reception is unverified`,
+            eventName: event.eventName
+          });
+        } catch {
+          diagnostic({
+            level: "warning",
+            code: "EVENT_DISPATCH_FAILED",
+            message: `${provider}: adapter failed`,
+            eventName: event.eventName
+          });
         }
-        options.diagnostic?.({
-          level: "debug",
-          code: "EVENT_DISPATCHED",
-          message: "Marketing event dispatched",
-          eventName: event.eventName
-        });
-      } catch (error) {
-        options.diagnostic?.({
-          level: "warning",
-          code: "EVENT_DISPATCH_FAILED",
-          message: error instanceof Error ? error.message : "Dispatch failed",
-          eventName: event.eventName
-        });
+      };
+      if (options.config.destinations.ga4) {
+        const ga4 = options.config.destinations.ga4;
+        dispatch(
+          "GA4",
+          () => sendGa4(event, ga4.diagnosticMode, ga4.measurementId)
+        );
+      }
+      if (options.config.destinations.meta) {
+        const meta = options.config.destinations.meta;
+        dispatch("Meta", () => sendMeta(event, meta.pixelId));
+      }
+      if (options.config.destinations.clarity) {
+        dispatch("Clarity", () => sendClarityEvent(event.eventName));
+      }
+      if (options.config.destinations.gtm && /^GTM-[A-Z0-9]{4,32}$/.test(options.config.destinations.gtm.containerId)) {
+        dispatch("GTM", () => sendGtm(event));
       }
     },
     captureAttribution() {
-      if (!enabled) return null;
+      if (!enabled || destroyed) return null;
       captureWebsiteMarketingAttribution(
         options.websiteId,
         options.config.attributionWindowDays
@@ -5121,7 +5379,7 @@ function createWebsiteMarketingRuntime(options) {
       return getWebsiteMarketingAttribution(options.websiteId);
     },
     getAttribution() {
-      if (!enabled) return null;
+      if (!enabled || destroyed) return null;
       if (options.config.destinations.meta) {
         refreshWebsiteMarketingMetaContext(options.websiteId);
       }
@@ -5135,7 +5393,7 @@ function createWebsiteMarketingRuntime(options) {
 }
 
 // libs/sdk/src/react/preview/context.ts
-var import_react3 = require("react");
+var import_react4 = require("react");
 var BacanoPreviewModeContext = getOrCreateReactContext(
   "bacano-preview-mode-v1",
   false
@@ -5151,15 +5409,24 @@ function BacanoMarketingProvider({
   publicConfig,
   children,
   scriptLoadStrategy,
-  diagnostic
+  diagnostic,
+  measurementAllowed
 }) {
-  const isPreview = (0, import_react4.useContext)(BacanoPreviewModeContext);
-  const [runtime, setRuntime] = (0, import_react4.useState)(
+  const isPreview = (0, import_react5.useContext)(BacanoPreviewModeContext);
+  const [runtime, setRuntime] = (0, import_react5.useState)(
     NOOP_MARKETING_RUNTIME
   );
-  (0, import_react4.useEffect)(() => {
+  (0, import_react5.useEffect)(() => {
     if (isPreview || !publicConfig) {
       setRuntime(NOOP_MARKETING_RUNTIME);
+      try {
+        diagnostic?.({
+          level: "debug",
+          code: isPreview ? "PREVIEW_DISABLED" : "PUBLIC_CONFIG_UNAVAILABLE",
+          message: "Measurement is inactive"
+        });
+      } catch {
+      }
       return;
     }
     const next = createWebsiteMarketingRuntime({
@@ -5167,22 +5434,29 @@ function BacanoMarketingProvider({
       config: publicConfig.marketing,
       canonicalDomain: publicConfig.domain,
       scriptLoadStrategy,
-      diagnostic
+      diagnostic,
+      measurementAllowed
     });
     setRuntime(next);
     return () => next.destroy();
-  }, [diagnostic, isPreview, publicConfig, scriptLoadStrategy]);
+  }, [
+    diagnostic,
+    isPreview,
+    publicConfig,
+    scriptLoadStrategy,
+    measurementAllowed
+  ]);
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
     BacanoMarketingContext.Provider,
     {
-      value: isPreview ? NOOP_MARKETING_RUNTIME : runtime,
+      value: isPreview || measurementAllowed === false ? NOOP_MARKETING_RUNTIME : runtime,
       children
     }
   );
 }
 
 // libs/sdk/src/react/provider.tsx
-var import_react5 = require("react");
+var import_react6 = require("react");
 
 // libs/sdk/src/modules/auth.ts
 function createAuthHeaders(accessToken) {
@@ -5366,7 +5640,8 @@ async function getWebsitePublicConfig(options) {
           pixelId: marketing.destinations.meta.pixel_id,
           diagnosticMode: marketing.destinations.meta.diagnostic_mode ?? false
         } : null,
-        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null
+        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null,
+        ...marketing.destinations.gtm ? { gtm: { containerId: marketing.destinations.gtm.container_id } } : {}
       }
     },
     legal: {
@@ -7293,14 +7568,14 @@ function BacanoProvider({
   config,
   children
 }) {
-  const getAccessTokenRef = (0, import_react5.useRef)(config.getAccessToken);
+  const getAccessTokenRef = (0, import_react6.useRef)(config.getAccessToken);
   getAccessTokenRef.current = config.getAccessToken;
-  const [state, setState] = (0, import_react5.useState)({
+  const [state, setState] = (0, import_react6.useState)({
     client: null,
     loading: true,
     error: null
   });
-  (0, import_react5.useEffect)(() => {
+  (0, import_react6.useEffect)(() => {
     let cancelled = false;
     const client = createBacanoClient({
       ...config,
@@ -7334,7 +7609,7 @@ function BacanoProvider({
 }
 
 // libs/sdk/src/react/website-gate.tsx
-var import_react6 = require("react");
+var import_react7 = require("react");
 var import_jsx_runtime3 = require("react/jsx-runtime");
 var PREVIEW_HASH_KEY = "bacano-preview";
 function previewStorageKey(websiteSlug) {
@@ -7453,11 +7728,11 @@ function BacanoWebsiteGate({
   loadingFallback = null,
   constructionFallback
 }) {
-  const [publicConfig, setPublicConfig] = (0, import_react6.useState)(initialConfig);
-  const [isLoading, setIsLoading] = (0, import_react6.useState)(true);
-  const [failedOpen, setFailedOpen] = (0, import_react6.useState)(false);
+  const [publicConfig, setPublicConfig] = (0, import_react7.useState)(initialConfig);
+  const [isLoading, setIsLoading] = (0, import_react7.useState)(true);
+  const [failedOpen, setFailedOpen] = (0, import_react7.useState)(false);
   const isConstructionEnforced = Boolean(publicConfig?.construction.enforced);
-  (0, import_react6.useEffect)(() => {
+  (0, import_react7.useEffect)(() => {
     let active = true;
     const previewToken = readPreviewToken(config.websiteSlug);
     setIsLoading(true);
@@ -7477,7 +7752,7 @@ function BacanoWebsiteGate({
       active = false;
     };
   }, [config.apiUrl, config.origin, config.websiteSlug]);
-  (0, import_react6.useEffect)(() => {
+  (0, import_react7.useEffect)(() => {
     if (typeof document === "undefined" || !isConstructionEnforced) return;
     const robots = document.createElement("meta");
     robots.name = "robots";