@bacano/sdk 1.1.20 → 1.2.2

package/react.js

@@ -4093,8 +4093,8 @@ function createCatalogModule(graphqlUrl, getHeaders, getContext, storageUrl) {
   };
 }
 
-// libs/sdk/src/react/hooks.ts
-import { useCallback, useContext, useEffect, useRef, useState } from "react";
+// libs/sdk/src/react/cta-tracking.ts
+import { useCallback, useContext, useRef } from "react";
 
 // libs/sdk/src/react/context-registry.ts
 import { createContext } from "react";
@@ -4122,13 +4122,6 @@ function getOrCreateReactContext(key, defaultValue) {
   return context;
 }
 
-// libs/sdk/src/react/context.ts
-var BacanoReactContext = getOrCreateReactContext("bacano-client-v1", {
-  client: null,
-  loading: true,
-  error: null
-});
-
 // libs/sdk/src/react/marketing-context.ts
 var NOOP_MARKETING_RUNTIME = {
   enabled: false,
@@ -4142,15 +4135,44 @@ var BacanoMarketingContext = getOrCreateReactContext(
   NOOP_MARKETING_RUNTIME
 );
 
+// libs/sdk/src/react/cta-tracking.ts
+function useBacanoCta(context) {
+  const runtime = useContext(BacanoMarketingContext);
+  const lastClick = useRef({ identity: "", at: -Infinity });
+  const { ctaId, formKey, placement } = context;
+  return useCallback(() => {
+    if (!runtime.enabled) return;
+    const identity = `${ctaId}:${formKey ?? ""}:${placement ?? ""}`;
+    const at = Date.now();
+    if (identity === lastClick.current.identity && at - lastClick.current.at < 400)
+      return;
+    lastClick.current = { identity, at };
+    try {
+      runtime.track({ eventName: "cta_click", ctaId, formKey, placement });
+    } catch {
+    }
+  }, [runtime, ctaId, formKey, placement]);
+}
+
+// libs/sdk/src/react/hooks.ts
+import { useCallback as useCallback2, useContext as useContext2, useEffect, useRef as useRef2, useState } from "react";
+
+// libs/sdk/src/react/context.ts
+var BacanoReactContext = getOrCreateReactContext("bacano-client-v1", {
+  client: null,
+  loading: true,
+  error: null
+});
+
 // libs/sdk/src/react/hooks.ts
 function useClient() {
-  const { client, loading, error } = useContext(BacanoReactContext);
+  const { client, loading, error } = useContext2(BacanoReactContext);
   if (error) throw error;
   if (loading || !client) throw new NotInitializedError();
   return client;
 }
 function useSafeClient() {
-  const { client } = useContext(BacanoReactContext);
+  const { client } = useContext2(BacanoReactContext);
   return client;
 }
 function useAsync(fetcher, deps = []) {
@@ -4160,8 +4182,8 @@ function useAsync(fetcher, deps = []) {
     loading: true,
     error: null
   });
-  const mountedRef = useRef(true);
-  const fetchData = useCallback(async () => {
+  const mountedRef = useRef2(true);
+  const fetchData = useCallback2(async () => {
     if (!client) return;
     setState((prev) => ({ ...prev, loading: true, error: null }));
     try {
@@ -4192,10 +4214,10 @@ function useBacano() {
   return useClient();
 }
 function useBacanoState() {
-  return useContext(BacanoReactContext);
+  return useContext2(BacanoReactContext);
 }
 function useMarketing() {
-  return useContext(BacanoMarketingContext);
+  return useContext2(BacanoMarketingContext);
 }
 function useProducts(opts) {
   return useAsync(
@@ -4289,7 +4311,7 @@ function useCart() {
   const [cart, setCart] = useState(null);
   const [loading, setLoading] = useState(false);
   const [error, setError] = useState(null);
-  const refreshCart = useCallback(async () => {
+  const refreshCart = useCallback2(async () => {
     if (!client) return;
     setLoading(true);
     try {
@@ -4305,7 +4327,7 @@ function useCart() {
   useEffect(() => {
     refreshCart();
   }, [refreshCart]);
-  const addItem = useCallback(
+  const addItem = useCallback2(
     async (productVariantId, quantity) => {
       if (!client) throw new NotInitializedError();
       const item = await client.cart.addItem(productVariantId, quantity);
@@ -4314,7 +4336,7 @@ function useCart() {
     },
     [client, refreshCart]
   );
-  const updateItem = useCallback(
+  const updateItem = useCallback2(
     async (cartItemId, quantity) => {
       if (!client) throw new NotInitializedError();
       const result = await client.cart.updateItem(cartItemId, quantity);
@@ -4323,7 +4345,7 @@ function useCart() {
     },
     [client, refreshCart]
   );
-  const removeItem = useCallback(
+  const removeItem = useCallback2(
     async (cartItemId) => {
       if (!client) throw new NotInitializedError();
       await client.cart.removeItem(cartItemId);
@@ -4331,7 +4353,7 @@ function useCart() {
     },
     [client, refreshCart]
   );
-  const clear = useCallback(async () => {
+  const clear = useCallback2(async () => {
     if (!client) throw new NotInitializedError();
     setLoading(true);
     try {
@@ -4346,7 +4368,7 @@ function useCart() {
       setLoading(false);
     }
   }, [client]);
-  const getOrCreate = useCallback(
+  const getOrCreate = useCallback2(
     async (contact, fulfillmentFamily) => {
       if (!client) throw new NotInitializedError();
       const c = await client.cart.getOrCreate(contact, fulfillmentFamily);
@@ -4355,7 +4377,7 @@ function useCart() {
     },
     [client]
   );
-  const startCheckout = useCallback(
+  const startCheckout = useCallback2(
     async (input) => {
       if (!client) throw new NotInitializedError();
       const c = await client.cart.startCheckout(input);
@@ -4381,7 +4403,7 @@ function useCheckout() {
   const client = useSafeClient();
   const [loading, setLoading] = useState(false);
   const [error, setError] = useState(null);
-  const checkout = useCallback(
+  const checkout = useCallback2(
     async (input) => {
       if (!client) throw new NotInitializedError();
       setLoading(true);
@@ -4421,7 +4443,7 @@ function useProfile() {
     error,
     refetch
   } = useAsync((client2) => client2.profile.get());
-  const updateProfile = useCallback(
+  const updateProfile = useCallback2(
     async (data) => {
       if (!client) throw new NotInitializedError();
       const updated = await client.profile.update(data);
@@ -4435,7 +4457,7 @@ function useProfile() {
 
 // libs/sdk/src/react/marketing-provider.tsx
 import {
-  useContext as useContext3,
+  useContext as useContext4,
   useEffect as useEffect2,
   useState as useState2
 } from "react";
@@ -4478,6 +4500,9 @@ var ALLOWED_MARKETING_PARAMETERS = /* @__PURE__ */ new Set([
 function sanitizeMarketingUrl(input, baseUrl) {
   try {
     const url = new URL(input, baseUrl);
+    if (url.protocol !== "http:" && url.protocol !== "https:") return "";
+    url.username = "";
+    url.password = "";
     const safeParameters = new URLSearchParams();
     for (const [key, value] of url.searchParams.entries()) {
       if (ALLOWED_MARKETING_PARAMETERS.has(key.toLowerCase()) && !SENSITIVE_PARAMETER_PATTERNS.some((pattern) => pattern.test(key))) {
@@ -4697,50 +4722,65 @@ function serializeWebsiteMarketingAttribution(attribution) {
   };
 }
 
-// libs/sdk/src/marketing/clarity.ts
-var initializedDestinations = /* @__PURE__ */ new Set();
-function clarityWindow() {
-  return typeof window === "undefined" ? null : window;
-}
-function prepareClarity(projectId) {
-  const target = clarityWindow();
-  if (!target || initializedDestinations.has(projectId)) return;
-  if (!target.clarity) {
-    const clarity = function() {
-      clarity.q ??= [];
-      clarity.q.push(arguments);
-    };
-    target.clarity = clarity;
+// libs/sdk/src/marketing/interactions.ts
+var WEBSITE_INTERACTION_EVENTS = [
+  "cta_click",
+  "form_open",
+  "form_start",
+  "form_step_complete",
+  "form_submit_attempt",
+  "form_submit_error",
+  "form_submit_success"
+];
+function isInteractionEvent(name) {
+  return WEBSITE_INTERACTION_EVENTS.some((candidate) => candidate === name);
+}
+function isInteractionIdentifier(value) {
+  return typeof value === "string" && /^[a-z][a-z0-9_-]{0,63}$/.test(value);
+}
+function isBrowserMarketingEvent(name) {
+  return isInteractionEvent(name) || [
+    "page_view",
+    "search",
+    "view_item_list",
+    "select_item",
+    "view_item",
+    "add_to_cart",
+    "remove_from_cart",
+    "view_cart",
+    "begin_checkout",
+    "add_shipping_info",
+    "add_payment_info",
+    "contact"
+  ].includes(name);
+}
+function interactionParameters(event) {
+  if (!isInteractionEvent(event.eventName)) return {};
+  if (event.eventName === "cta_click" ? !isInteractionIdentifier(event.ctaId) : !isInteractionIdentifier(event.formKey))
+    return null;
+  if (event.eventName === "form_step_complete" && !isInteractionIdentifier(event.stepKey))
+    return null;
+  if (event.eventName === "form_submit_error" && !["validation", "network", "rejected", "unavailable"].includes(
+    event.errorCategory ?? ""
+  ))
+    return null;
+  const params = {};
+  for (const [key, value] of Object.entries({
+    form_key: event.formKey,
+    cta_id: event.ctaId,
+    placement: event.placement,
+    step_key: event.stepKey
+  })) {
+    if (value === void 0) continue;
+    if (!isInteractionIdentifier(value)) return null;
+    params[key] = value;
   }
-  initializedDestinations.add(projectId);
-}
-function loadClarityScript(projectId) {
-  if (typeof document === "undefined") return;
-  const id = `bacano-clarity-${projectId}`;
-  if (document.getElementById(id)) return;
-  const script = document.createElement("script");
-  script.id = id;
-  script.async = true;
-  script.src = `https://www.clarity.ms/tag/${encodeURIComponent(projectId)}`;
-  script.referrerPolicy = "strict-origin-when-cross-origin";
-  document.head.appendChild(script);
-}
-function sendClarityEvent(eventName) {
-  clarityWindow()?.clarity?.("event", eventName);
+  if (event.eventName === "form_submit_error" && event.errorCategory)
+    params.error_category = event.errorCategory;
+  return params;
 }
-
-// libs/sdk/src/marketing/domain.ts
-function matchesCanonicalMarketingHost(canonicalDomain, currentHostname) {
-  if (canonicalDomain === void 0) return true;
-  if (!canonicalDomain?.trim()) return false;
-  try {
-    const configuredHost = new URL(
-      canonicalDomain.includes("://") ? canonicalDomain : `https://${canonicalDomain}`
-    ).hostname.toLowerCase();
-    return currentHostname.toLowerCase() === configuredHost;
-  } catch {
-    return false;
-  }
+function newMarketingEventId() {
+  return typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `evt_${Date.now()}_${Math.random().toString(16).slice(2)}`;
 }
 
 // libs/sdk/src/marketing/ga4.ts
@@ -4767,19 +4807,20 @@ var WEBSITE_MARKETING_CONTACT_PLACEMENTS = [
   "contact_page"
 ];
 
-// libs/sdk/src/marketing/runtime.ts
+// libs/sdk/src/marketing/browser-adapters.ts
 var initializedGa4Destinations = /* @__PURE__ */ new Set();
 var initializedMetaDestinations = /* @__PURE__ */ new Set();
 function marketingWindow() {
   return typeof window === "undefined" ? null : window;
 }
-function loadScriptOnce(id, source) {
+function loadScriptOnce(id, source, onError) {
   if (typeof document === "undefined" || document.getElementById(id)) return;
   const script = document.createElement("script");
   script.id = id;
   script.async = true;
   script.src = source;
   script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError?.();
   document.head.appendChild(script);
 }
 function prepareGa4(measurementId) {
@@ -4794,10 +4835,11 @@ function prepareGa4(measurementId) {
   target.gtag("config", measurementId, { send_page_view: false });
   initializedGa4Destinations.add(measurementId);
 }
-function loadGa4Script(measurementId) {
+function loadGa4Script(measurementId, onError) {
   loadScriptOnce(
     `bacano-ga4-${measurementId}`,
-    `https://www.googletagmanager.com/gtag/js?id=${encodeURIComponent(measurementId)}`
+    `https://www.googletagmanager.com/gtag/js?id=${encodeURIComponent(measurementId)}`,
+    onError
   );
 }
 function captureGa4ClientId(measurementId, websiteId, diagnostic) {
@@ -4845,10 +4887,11 @@ function prepareMeta(pixelId) {
   target.fbq("init", pixelId);
   initializedMetaDestinations.add(pixelId);
 }
-function loadMetaScript() {
+function loadMetaScript(onError) {
   loadScriptOnce(
     "bacano-meta-pixel",
-    "https://connect.facebook.net/en_US/fbevents.js"
+    "https://connect.facebook.net/en_US/fbevents.js",
+    onError
   );
 }
 function scheduleScriptLoad(load, strategy) {
@@ -4912,10 +4955,12 @@ function contactPlacementFor(event) {
   }
   return placement;
 }
-function sendGa4(event, diagnosticMode) {
+function sendGa4(event, diagnosticMode, measurementId) {
   const target = marketingWindow();
   const contactPlacement = contactPlacementFor(event);
   target?.gtag?.("event", event.eventName, {
+    send_to: measurementId,
+    ...interactionParameters(event),
     currency: event.currency,
     value: event.value,
     search_term: event.searchTerm,
@@ -4932,15 +4977,17 @@ function sendGa4(event, diagnosticMode) {
     debug_mode: diagnosticMode ? true : void 0
   });
 }
-function sendMeta(event) {
+function sendMeta(event, pixelId) {
   const target = marketingWindow();
   const eventName = metaEventName(event.eventName);
   const isStandard = eventName !== event.eventName;
   const contactPlacement = contactPlacementFor(event);
   target?.fbq?.(
-    isStandard ? "track" : "trackCustom",
+    isStandard ? "trackSingle" : "trackSingleCustom",
+    pixelId,
     eventName,
     {
+      ...interactionParameters(event),
       currency: event.currency,
       value: event.value,
       search_string: event.searchTerm,
@@ -4957,40 +5004,192 @@ function sendMeta(event) {
     { eventID: event.eventId }
   );
 }
-function newEventId() {
-  return typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `evt_${Date.now()}_${Math.random().toString(16).slice(2)}`;
+
+// libs/sdk/src/marketing/clarity.ts
+var initializedDestinations = /* @__PURE__ */ new Set();
+function clarityWindow() {
+  return typeof window === "undefined" ? null : window;
+}
+function prepareClarity(projectId) {
+  const target = clarityWindow();
+  if (!target || initializedDestinations.has(projectId)) return;
+  if (!target.clarity) {
+    const clarity = function() {
+      clarity.q ??= [];
+      clarity.q.push(arguments);
+    };
+    target.clarity = clarity;
+  }
+  initializedDestinations.add(projectId);
 }
+function loadClarityScript(projectId, onError) {
+  if (typeof document === "undefined") return;
+  const id = `bacano-clarity-${projectId}`;
+  if (document.getElementById(id)) return;
+  const script = document.createElement("script");
+  script.id = id;
+  script.async = true;
+  script.src = `https://www.clarity.ms/tag/${encodeURIComponent(projectId)}`;
+  script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError?.();
+  document.head.appendChild(script);
+}
+function sendClarityEvent(eventName) {
+  clarityWindow()?.clarity?.("event", eventName);
+}
+
+// libs/sdk/src/marketing/domain.ts
+function matchesCanonicalMarketingHost(canonicalDomain, currentHostname) {
+  if (canonicalDomain === void 0) return true;
+  if (!canonicalDomain?.trim()) return false;
+  try {
+    const configuredHost = new URL(
+      canonicalDomain.includes("://") ? canonicalDomain : `https://${canonicalDomain}`
+    ).hostname.toLowerCase();
+    return currentHostname.toLowerCase() === configuredHost;
+  } catch {
+    return false;
+  }
+}
+
+// libs/sdk/src/marketing/gtm.ts
+var CONTAINER_ID = /^GTM-[A-Z0-9]{4,32}$/;
+var preparedQueues = /* @__PURE__ */ new WeakMap();
+function prepareGtm(containerId) {
+  const target = marketingWindow();
+  if (!target || !CONTAINER_ID.test(containerId)) return;
+  target.dataLayer ??= [];
+  const containers = preparedQueues.get(target.dataLayer) ?? /* @__PURE__ */ new Set();
+  if (containers.has(containerId)) return;
+  target.dataLayer.push({ "gtm.start": Date.now(), event: "gtm.js" });
+  containers.add(containerId);
+  preparedQueues.set(target.dataLayer, containers);
+}
+function loadGtmScript(containerId, onError) {
+  const target = marketingWindow();
+  if (!target || typeof document === "undefined" || !CONTAINER_ID.test(containerId))
+    return;
+  const id = `bacano-gtm-${containerId}`;
+  if (document.getElementById(id)) return;
+  prepareGtm(containerId);
+  const script = document.createElement("script");
+  script.id = id;
+  script.async = true;
+  script.src = `https://www.googletagmanager.com/gtm.js?id=${encodeURIComponent(containerId)}`;
+  script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError();
+  document.head.appendChild(script);
+}
+function sendGtm(event) {
+  const target = marketingWindow();
+  if (!target?.dataLayer) return;
+  target.dataLayer.push({ bacano: null });
+  target.dataLayer.push({
+    event: `bacano_${event.eventName}`,
+    bacano: {
+      schema_version: event.schemaVersion,
+      event_name: event.eventName,
+      event_id: event.eventId,
+      ...interactionParameters(event),
+      page_location: event.pageLocation,
+      currency: event.currency,
+      value: event.value,
+      items: mapGa4Items(event.items),
+      item_list_id: event.itemListId,
+      item_list_name: event.itemListName,
+      shipping_tier: event.shippingTier,
+      payment_type: event.paymentType,
+      method: event.contactMethod,
+      contact_placement: event.eventName === "contact" && WEBSITE_MARKETING_CONTACT_PLACEMENTS.some(
+        (value) => value === event.contactPlacement
+      ) ? event.contactPlacement : void 0
+    }
+  });
+}
+
+// libs/sdk/src/marketing/runtime.ts
 function createWebsiteMarketingRuntime(options) {
   let destroyed = false;
+  const dispatched = /* @__PURE__ */ new Set();
+  const observer = options.diagnostic;
+  const diagnostic = (value) => {
+    try {
+      observer?.(value);
+    } catch {
+    }
+  };
+  options = { ...options, diagnostic };
   let cancelScheduledLoad = () => void 0;
   const target = marketingWindow();
-  const enabled = options.config.enabled && Boolean(
+  const enabled = options.config.enabled && options.measurementAllowed !== false && Boolean(
     target && matchesCanonicalMarketingHost(
       options.canonicalDomain,
       target.location.hostname
     )
   ) && Boolean(
-    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity
+    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity || options.config.destinations.gtm
   );
+  if (!enabled)
+    diagnostic({
+      level: "debug",
+      code: !options.config.enabled ? "MARKETING_DISABLED" : options.measurementAllowed === false ? "MEASUREMENT_NOT_ALLOWED" : !target ? "SERVER_RENDER" : !matchesCanonicalMarketingHost(
+        options.canonicalDomain,
+        target.location.hostname
+      ) ? "DOMAIN_NOT_ALLOWED" : "PROVIDER_NOT_CONFIGURED",
+      message: "Measurement is inactive; no events are emitted"
+    });
   if (enabled) {
+    const guard = (provider, action) => {
+      try {
+        action();
+      } catch {
+        diagnostic({
+          level: "warning",
+          code: "RUNTIME_INITIALIZATION_FAILED",
+          message: `${provider}: initialization failed`
+        });
+      }
+    };
+    const scriptError = (provider) => () => diagnostic({
+      level: "warning",
+      code: "SCRIPT_LOAD_FAILED",
+      message: `${provider}: script could not load (network, CSP or blocker); external reception is unverified`
+    });
     try {
       if (options.config.destinations.ga4) {
-        prepareGa4(options.config.destinations.ga4.measurementId);
+        const { measurementId } = options.config.destinations.ga4;
+        guard("GA4", () => prepareGa4(measurementId));
       }
       if (options.config.destinations.meta) {
-        prepareMeta(options.config.destinations.meta.pixelId);
+        const { pixelId } = options.config.destinations.meta;
+        guard("Meta", () => prepareMeta(pixelId));
       }
       if (options.config.destinations.clarity) {
-        prepareClarity(options.config.destinations.clarity.projectId);
+        const { projectId } = options.config.destinations.clarity;
+        guard("Clarity", () => prepareClarity(projectId));
+      }
+      if (options.config.destinations.gtm) {
+        const { containerId } = options.config.destinations.gtm;
+        guard("GTM", () => prepareGtm(containerId));
       }
       cancelScheduledLoad = scheduleScriptLoad(() => {
         if (destroyed) return;
         if (options.config.destinations.ga4) {
-          loadGa4Script(options.config.destinations.ga4.measurementId);
+          const { measurementId } = options.config.destinations.ga4;
+          guard("GA4", () => loadGa4Script(measurementId, scriptError("GA4")));
         }
-        if (options.config.destinations.meta) loadMetaScript();
+        if (options.config.destinations.meta)
+          guard("Meta", () => loadMetaScript(scriptError("Meta")));
         if (options.config.destinations.clarity) {
-          loadClarityScript(options.config.destinations.clarity.projectId);
+          const { projectId } = options.config.destinations.clarity;
+          guard(
+            "Clarity",
+            () => loadClarityScript(projectId, scriptError("Clarity"))
+          );
+        }
+        if (options.config.destinations.gtm) {
+          const { containerId } = options.config.destinations.gtm;
+          guard("GTM", () => loadGtmScript(containerId, scriptError("GTM")));
         }
       }, options.scriptLoadStrategy);
       captureWebsiteMarketingAttribution(
@@ -5012,11 +5211,11 @@ function createWebsiteMarketingRuntime(options) {
       if (options.config.destinations.meta) {
         refreshWebsiteMarketingMetaContext(options.websiteId);
       }
-    } catch (error) {
+    } catch {
       options.diagnostic?.({
         level: "warning",
         code: "RUNTIME_INITIALIZATION_FAILED",
-        message: error instanceof Error ? error.message : "Initialization failed"
+        message: "Marketing initialization failed; external reception is unverified"
       });
     }
   }
@@ -5024,41 +5223,99 @@ function createWebsiteMarketingRuntime(options) {
     enabled,
     track(input) {
       if (!enabled || destroyed) return;
+      if (!isBrowserMarketingEvent(input.eventName)) {
+        diagnostic({
+          level: "warning",
+          code: "INVALID_EVENT",
+          message: "Unknown or server-owned event rejected"
+        });
+        return;
+      }
+      try {
+        captureWebsiteMarketingAttribution(
+          options.websiteId,
+          options.config.attributionWindowDays
+        );
+      } catch {
+      }
       const event = {
         ...input,
         schemaVersion: 1,
-        eventId: input.eventId ?? newEventId(),
+        eventId: input.eventId ?? newMarketingEventId(),
         occurredAt: input.occurredAt ?? (/* @__PURE__ */ new Date()).toISOString(),
         currency: input.currency ?? options.config.currencyCode,
         pageLocation: sanitizeMarketingUrl(
           input.pageLocation ?? (typeof window === "undefined" ? "" : window.location.href)
         )
       };
-      try {
-        if (options.config.destinations.ga4) {
-          sendGa4(event, options.config.destinations.ga4.diagnosticMode);
+      if (isInteractionEvent(event.eventName)) {
+        if (!interactionParameters(event) || !/^[a-zA-Z0-9_-]{1,100}$/.test(event.eventId)) {
+          diagnostic({
+            level: "warning",
+            code: "INVALID_INTERACTION",
+            message: "Interaction rejected by the public contract",
+            eventName: event.eventName
+          });
+          return;
         }
-        if (options.config.destinations.meta) sendMeta(event);
-        if (options.config.destinations.clarity) {
-          sendClarityEvent(event.eventName);
+        for (const key of [
+          "currency",
+          "value",
+          "searchTerm",
+          "itemListId",
+          "itemListName",
+          "shippingTier",
+          "paymentType",
+          "contactMethod",
+          "contactPlacement",
+          "items",
+          "pageTitle"
+        ])
+          delete event[key];
+      }
+      const identity = `${event.eventName}:${event.eventId}`;
+      if (dispatched.has(identity)) return;
+      dispatched.add(identity);
+      const oldest = dispatched.values().next().value;
+      if (dispatched.size > 1e3 && oldest) dispatched.delete(oldest);
+      const dispatch = (provider, send) => {
+        try {
+          send();
+          diagnostic({
+            level: "debug",
+            code: "EVENT_DISPATCHED",
+            message: `${provider}: passed to adapter; external reception is unverified`,
+            eventName: event.eventName
+          });
+        } catch {
+          diagnostic({
+            level: "warning",
+            code: "EVENT_DISPATCH_FAILED",
+            message: `${provider}: adapter failed`,
+            eventName: event.eventName
+          });
         }
-        options.diagnostic?.({
-          level: "debug",
-          code: "EVENT_DISPATCHED",
-          message: "Marketing event dispatched",
-          eventName: event.eventName
-        });
-      } catch (error) {
-        options.diagnostic?.({
-          level: "warning",
-          code: "EVENT_DISPATCH_FAILED",
-          message: error instanceof Error ? error.message : "Dispatch failed",
-          eventName: event.eventName
-        });
+      };
+      if (options.config.destinations.ga4) {
+        const ga4 = options.config.destinations.ga4;
+        dispatch(
+          "GA4",
+          () => sendGa4(event, ga4.diagnosticMode, ga4.measurementId)
+        );
+      }
+      if (options.config.destinations.meta) {
+        const meta = options.config.destinations.meta;
+        dispatch("Meta", () => sendMeta(event, meta.pixelId));
+      }
+      if (options.config.destinations.clarity) {
+        dispatch("Clarity", () => sendClarityEvent(event.eventName));
+      }
+      if (options.config.destinations.gtm && /^GTM-[A-Z0-9]{4,32}$/.test(options.config.destinations.gtm.containerId)) {
+        dispatch("GTM", () => sendGtm(event));
       }
     },
     captureAttribution() {
-      if (!enabled) return null;
+      if (!enabled || destroyed) return null;
       captureWebsiteMarketingAttribution(
         options.websiteId,
         options.config.attributionWindowDays
@@ -5069,7 +5326,7 @@ function createWebsiteMarketingRuntime(options) {
       return getWebsiteMarketingAttribution(options.websiteId);
     },
     getAttribution() {
-      if (!enabled) return null;
+      if (!enabled || destroyed) return null;
       if (options.config.destinations.meta) {
         refreshWebsiteMarketingMetaContext(options.websiteId);
       }
@@ -5083,7 +5340,7 @@ function createWebsiteMarketingRuntime(options) {
 }
 
 // libs/sdk/src/react/preview/context.ts
-import { useContext as useContext2 } from "react";
+import { useContext as useContext3 } from "react";
 var BacanoPreviewModeContext = getOrCreateReactContext(
   "bacano-preview-mode-v1",
   false
@@ -5099,15 +5356,24 @@ function BacanoMarketingProvider({
   publicConfig,
   children,
   scriptLoadStrategy,
-  diagnostic
+  diagnostic,
+  measurementAllowed
 }) {
-  const isPreview = useContext3(BacanoPreviewModeContext);
+  const isPreview = useContext4(BacanoPreviewModeContext);
   const [runtime, setRuntime] = useState2(
     NOOP_MARKETING_RUNTIME
   );
   useEffect2(() => {
     if (isPreview || !publicConfig) {
       setRuntime(NOOP_MARKETING_RUNTIME);
+      try {
+        diagnostic?.({
+          level: "debug",
+          code: isPreview ? "PREVIEW_DISABLED" : "PUBLIC_CONFIG_UNAVAILABLE",
+          message: "Measurement is inactive"
+        });
+      } catch {
+      }
       return;
     }
     const next = createWebsiteMarketingRuntime({
@@ -5115,22 +5381,29 @@ function BacanoMarketingProvider({
       config: publicConfig.marketing,
       canonicalDomain: publicConfig.domain,
       scriptLoadStrategy,
-      diagnostic
+      diagnostic,
+      measurementAllowed
     });
     setRuntime(next);
     return () => next.destroy();
-  }, [diagnostic, isPreview, publicConfig, scriptLoadStrategy]);
+  }, [
+    diagnostic,
+    isPreview,
+    publicConfig,
+    scriptLoadStrategy,
+    measurementAllowed
+  ]);
   return /* @__PURE__ */ jsx(
     BacanoMarketingContext.Provider,
     {
-      value: isPreview ? NOOP_MARKETING_RUNTIME : runtime,
+      value: isPreview || measurementAllowed === false ? NOOP_MARKETING_RUNTIME : runtime,
       children
     }
   );
 }
 
 // libs/sdk/src/react/provider.tsx
-import { useEffect as useEffect3, useRef as useRef2, useState as useState3 } from "react";
+import { useEffect as useEffect3, useRef as useRef3, useState as useState3 } from "react";
 
 // libs/sdk/src/modules/auth.ts
 function createAuthHeaders(accessToken) {
@@ -5314,7 +5587,8 @@ async function getWebsitePublicConfig(options) {
           pixelId: marketing.destinations.meta.pixel_id,
           diagnosticMode: marketing.destinations.meta.diagnostic_mode ?? false
         } : null,
-        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null
+        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null,
+        ...marketing.destinations.gtm ? { gtm: { containerId: marketing.destinations.gtm.container_id } } : {}
       }
     },
     legal: {
@@ -7241,7 +7515,7 @@ function BacanoProvider({
   config,
   children
 }) {
-  const getAccessTokenRef = useRef2(config.getAccessToken);
+  const getAccessTokenRef = useRef3(config.getAccessToken);
   getAccessTokenRef.current = config.getAccessToken;
   const [state, setState] = useState3({
     client: null,
@@ -7460,6 +7734,7 @@ export {
   useAttributeList,
   useAvailability,
   useBacano,
+  useBacanoCta,
   useBacanoState,
   useBrands,
   useCart,