@bacano/sdk 1.2.1 → 1.2.2

package/README.md

@@ -945,6 +945,10 @@ contains only browser-safe media metadata and a public Storage URL.
 
 GA4, Meta, and Microsoft Clarity are configured per website in Bacano and are
 disabled by default.
+An optional Google Tag Manager web container is also supported via
+`marketing.destinations.gtm.containerId`. It adds `bacano_*` browser events to
+the data layer without replacing native destinations or server conversions.
+See [GTM setup, limitations and duplication safeguards](./STOREFRONT_MARKETING.md#google-tag-manager-contenedor-web-opcional).
 The existing public-config request returns only active public destination IDs;
 provider secrets never reach the SDK. The runtime remains a no-op outside the
 website's canonical production domain.

package/STOREFRONT_MARKETING.md

@@ -6,9 +6,65 @@ identificadores, adaptadores ni llamadas directas a proveedores.
 
 ## Regla principal
 
+### Google Tag Manager (contenedor web opcional)
+
+En Bacano, la tarjeta Google Tag Manager permite guardar un ID `GTM-…`, validar
+que el script publicado sea accesible y activar o pausar la integración por sitio.
+Validar no comprueba propiedad del contenedor, etiquetas, consentimiento ni
+recepción de eventos: comprobar esto en Tag Assistant con el administrador del
+contenedor. No se solicitan secretos, HTML ni URLs de scripts personalizados.
+
+Requiere desplegar API/migración y actualizar `@bacano/sdk` en el storefront.
+El contrato público añade `marketing.destinations.gtm.containerId`; SDKs anteriores
+lo ignoran. Un sitio con configuración estática debe reconstruirse para incorporar
+cambios. No se modifica ni se publica automáticamente ningún contenedor de Google.
+
+El mismo `BacanoMarketingProvider` carga `gtm.js` una sola vez, conserva la cola
+`window.dataLayer` existente y respeta las barreras de dominio, preview y
+`measurementAllowed`, además de la carga diferida. No instalar otro snippet.
+Esta versión requiere JavaScript; no incorpora un iframe `noscript` ni GTM server-side.
+Pausar evita nuevas cargas con la configuración actualizada; no puede deshacer
+etiquetas de terceros ya ejecutadas en pestañas abiertas. Recargar para comprobar.
+
+Los eventos oficiales de navegador se publican con prefijo `bacano_`:
+
+```js
+{ event: "bacano_add_to_cart", bacano: {
+  schema_version: 1, event_name: "add_to_cart", event_id: "…",
+  currency: "COP", value: 50000,
+  items: [{ item_id: "product-variant-id", item_name: "Producto", quantity: 1 }]
+} }
+```
+
+Configurar activadores de evento personalizado `bacano_*` y variables de capa de
+datos como `bacano.event_name`, `bacano.value` y `bacano.items`. El objeto `bacano`
+se limpia antes de cada evento para no arrastrar artículos ni parámetros anteriores.
+Incluye URL saneada, parámetros de comercio e identificadores técnicos de
+interacciones; no copia datos de clientes, valores de formularios, atribución,
+títulos de página ni texto libre de búsqueda. Los eventos `search` no llevan el término.
+No emitir desde GTM `purchase`, `refund` u `order_placed` basándose en la página de
+gracias: siguen siendo autoritativos del servidor y no se publican en este puente.
+
+GA4, Meta y Clarity nativos permanecen sin cambios. **No repetir esos destinos o
+conversiones dentro del contenedor**. Esta fase no es un modo alternativo completo
+de medición ni realiza deduplicación entre proveedores y etiquetas configuradas
+externamente. El administrador de GTM puede ejecutar scripts con acceso a la página:
+otorgar acceso solo a personas de confianza y revisar cada publicación.
+El aviso de cookies informativo de Bacano no es un CMP y no autoriza las etiquetas;
+el responsable del contenedor debe configurar el consentimiento aplicable.
+
+CSP: permitir `https://www.googletagmanager.com` en `script-src`. Los destinos
+adicionales y Tag Assistant requieren revisar sus propios permisos de CSP; no
+habilitar comodines ni `unsafe-eval` globalmente para acomodar un contenedor.
+
+Referencias: [configuración de GTM](https://support.google.com/tagmanager/answer/14842164)
+y [contrato dataLayer](https://developers.google.com/tag-platform/tag-manager/datalayer).
+
+### Eventos comunes
+
 El storefront expresa hechos mediante `useMarketing().track()`. El SDK decide
-si la medición está activa, sanea la URL y adapta el evento a GA4, Meta y
-Microsoft Clarity. Nunca
+si la medición está activa, sanea la URL y adapta el evento a GA4, Meta,
+Microsoft Clarity y, si se configuró, GTM. Nunca
 se debe llamar directamente a `gtag`, `dataLayer`, `fbq`, Measurement Protocol
 o Conversions API.
 Clarity también se carga desde este runtime; no se instala su snippet de forma

package/index.cjs

@@ -394,7 +394,8 @@ async function getWebsitePublicConfig(options) {
           pixelId: marketing.destinations.meta.pixel_id,
           diagnosticMode: marketing.destinations.meta.diagnostic_mode ?? false
         } : null,
-        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null
+        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null,
+        ...marketing.destinations.gtm ? { gtm: { containerId: marketing.destinations.gtm.container_id } } : {}
       }
     },
     legal: {
@@ -6066,6 +6067,61 @@ function matchesCanonicalMarketingHost(canonicalDomain, currentHostname) {
   }
 }
 
+// libs/sdk/src/marketing/gtm.ts
+var CONTAINER_ID = /^GTM-[A-Z0-9]{4,32}$/;
+var preparedQueues = /* @__PURE__ */ new WeakMap();
+function prepareGtm(containerId) {
+  const target = marketingWindow();
+  if (!target || !CONTAINER_ID.test(containerId)) return;
+  target.dataLayer ??= [];
+  const containers = preparedQueues.get(target.dataLayer) ?? /* @__PURE__ */ new Set();
+  if (containers.has(containerId)) return;
+  target.dataLayer.push({ "gtm.start": Date.now(), event: "gtm.js" });
+  containers.add(containerId);
+  preparedQueues.set(target.dataLayer, containers);
+}
+function loadGtmScript(containerId, onError) {
+  const target = marketingWindow();
+  if (!target || typeof document === "undefined" || !CONTAINER_ID.test(containerId))
+    return;
+  const id = `bacano-gtm-${containerId}`;
+  if (document.getElementById(id)) return;
+  prepareGtm(containerId);
+  const script = document.createElement("script");
+  script.id = id;
+  script.async = true;
+  script.src = `https://www.googletagmanager.com/gtm.js?id=${encodeURIComponent(containerId)}`;
+  script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError();
+  document.head.appendChild(script);
+}
+function sendGtm(event) {
+  const target = marketingWindow();
+  if (!target?.dataLayer) return;
+  target.dataLayer.push({ bacano: null });
+  target.dataLayer.push({
+    event: `bacano_${event.eventName}`,
+    bacano: {
+      schema_version: event.schemaVersion,
+      event_name: event.eventName,
+      event_id: event.eventId,
+      ...interactionParameters(event),
+      page_location: event.pageLocation,
+      currency: event.currency,
+      value: event.value,
+      items: mapGa4Items(event.items),
+      item_list_id: event.itemListId,
+      item_list_name: event.itemListName,
+      shipping_tier: event.shippingTier,
+      payment_type: event.paymentType,
+      method: event.contactMethod,
+      contact_placement: event.eventName === "contact" && WEBSITE_MARKETING_CONTACT_PLACEMENTS.some(
+        (value) => value === event.contactPlacement
+      ) ? event.contactPlacement : void 0
+    }
+  });
+}
+
 // libs/sdk/src/marketing/runtime.ts
 function createWebsiteMarketingRuntime(options) {
   let destroyed = false;
@@ -6086,7 +6142,7 @@ function createWebsiteMarketingRuntime(options) {
       target.location.hostname
     )
   ) && Boolean(
-    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity
+    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity || options.config.destinations.gtm
   );
   if (!enabled)
     diagnostic({
@@ -6127,6 +6183,10 @@ function createWebsiteMarketingRuntime(options) {
         const { projectId } = options.config.destinations.clarity;
         guard("Clarity", () => prepareClarity(projectId));
       }
+      if (options.config.destinations.gtm) {
+        const { containerId } = options.config.destinations.gtm;
+        guard("GTM", () => prepareGtm(containerId));
+      }
       cancelScheduledLoad = scheduleScriptLoad(() => {
         if (destroyed) return;
         if (options.config.destinations.ga4) {
@@ -6142,6 +6202,10 @@ function createWebsiteMarketingRuntime(options) {
             () => loadClarityScript(projectId, scriptError("Clarity"))
           );
         }
+        if (options.config.destinations.gtm) {
+          const { containerId } = options.config.destinations.gtm;
+          guard("GTM", () => loadGtmScript(containerId, scriptError("GTM")));
+        }
       }, options.scriptLoadStrategy);
       captureWebsiteMarketingAttribution(
         options.websiteId,
@@ -6261,6 +6325,9 @@ function createWebsiteMarketingRuntime(options) {
       if (options.config.destinations.clarity) {
         dispatch("Clarity", () => sendClarityEvent(event.eventName));
       }
+      if (options.config.destinations.gtm && /^GTM-[A-Z0-9]{4,32}$/.test(options.config.destinations.gtm.containerId)) {
+        dispatch("GTM", () => sendGtm(event));
+      }
     },
     captureAttribution() {
       if (!enabled || destroyed) return null;

package/index.js

@@ -337,7 +337,8 @@ async function getWebsitePublicConfig(options) {
           pixelId: marketing.destinations.meta.pixel_id,
           diagnosticMode: marketing.destinations.meta.diagnostic_mode ?? false
         } : null,
-        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null
+        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null,
+        ...marketing.destinations.gtm ? { gtm: { containerId: marketing.destinations.gtm.container_id } } : {}
       }
     },
     legal: {
@@ -6009,6 +6010,61 @@ function matchesCanonicalMarketingHost(canonicalDomain, currentHostname) {
   }
 }
 
+// libs/sdk/src/marketing/gtm.ts
+var CONTAINER_ID = /^GTM-[A-Z0-9]{4,32}$/;
+var preparedQueues = /* @__PURE__ */ new WeakMap();
+function prepareGtm(containerId) {
+  const target = marketingWindow();
+  if (!target || !CONTAINER_ID.test(containerId)) return;
+  target.dataLayer ??= [];
+  const containers = preparedQueues.get(target.dataLayer) ?? /* @__PURE__ */ new Set();
+  if (containers.has(containerId)) return;
+  target.dataLayer.push({ "gtm.start": Date.now(), event: "gtm.js" });
+  containers.add(containerId);
+  preparedQueues.set(target.dataLayer, containers);
+}
+function loadGtmScript(containerId, onError) {
+  const target = marketingWindow();
+  if (!target || typeof document === "undefined" || !CONTAINER_ID.test(containerId))
+    return;
+  const id = `bacano-gtm-${containerId}`;
+  if (document.getElementById(id)) return;
+  prepareGtm(containerId);
+  const script = document.createElement("script");
+  script.id = id;
+  script.async = true;
+  script.src = `https://www.googletagmanager.com/gtm.js?id=${encodeURIComponent(containerId)}`;
+  script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError();
+  document.head.appendChild(script);
+}
+function sendGtm(event) {
+  const target = marketingWindow();
+  if (!target?.dataLayer) return;
+  target.dataLayer.push({ bacano: null });
+  target.dataLayer.push({
+    event: `bacano_${event.eventName}`,
+    bacano: {
+      schema_version: event.schemaVersion,
+      event_name: event.eventName,
+      event_id: event.eventId,
+      ...interactionParameters(event),
+      page_location: event.pageLocation,
+      currency: event.currency,
+      value: event.value,
+      items: mapGa4Items(event.items),
+      item_list_id: event.itemListId,
+      item_list_name: event.itemListName,
+      shipping_tier: event.shippingTier,
+      payment_type: event.paymentType,
+      method: event.contactMethod,
+      contact_placement: event.eventName === "contact" && WEBSITE_MARKETING_CONTACT_PLACEMENTS.some(
+        (value) => value === event.contactPlacement
+      ) ? event.contactPlacement : void 0
+    }
+  });
+}
+
 // libs/sdk/src/marketing/runtime.ts
 function createWebsiteMarketingRuntime(options) {
   let destroyed = false;
@@ -6029,7 +6085,7 @@ function createWebsiteMarketingRuntime(options) {
       target.location.hostname
     )
   ) && Boolean(
-    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity
+    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity || options.config.destinations.gtm
   );
   if (!enabled)
     diagnostic({
@@ -6070,6 +6126,10 @@ function createWebsiteMarketingRuntime(options) {
         const { projectId } = options.config.destinations.clarity;
         guard("Clarity", () => prepareClarity(projectId));
       }
+      if (options.config.destinations.gtm) {
+        const { containerId } = options.config.destinations.gtm;
+        guard("GTM", () => prepareGtm(containerId));
+      }
       cancelScheduledLoad = scheduleScriptLoad(() => {
         if (destroyed) return;
         if (options.config.destinations.ga4) {
@@ -6085,6 +6145,10 @@ function createWebsiteMarketingRuntime(options) {
             () => loadClarityScript(projectId, scriptError("Clarity"))
           );
         }
+        if (options.config.destinations.gtm) {
+          const { containerId } = options.config.destinations.gtm;
+          guard("GTM", () => loadGtmScript(containerId, scriptError("GTM")));
+        }
       }, options.scriptLoadStrategy);
       captureWebsiteMarketingAttribution(
         options.websiteId,
@@ -6204,6 +6268,9 @@ function createWebsiteMarketingRuntime(options) {
       if (options.config.destinations.clarity) {
         dispatch("Clarity", () => sendClarityEvent(event.eventName));
       }
+      if (options.config.destinations.gtm && /^GTM-[A-Z0-9]{4,32}$/.test(options.config.destinations.gtm.containerId)) {
+        dispatch("GTM", () => sendGtm(event));
+      }
     },
     captureAttribution() {
       if (!enabled || destroyed) return null;

package/marketing/gtm.d.ts

@@ -0,0 +1,6 @@
+import type { WebsiteMarketingBrowserEvent } from "./types";
+/** Preserve the shared Google queue, including an existing native gtag.js. */
+export declare function prepareGtm(containerId: string): void;
+export declare function loadGtmScript(containerId: string, onError: () => void): void;
+/** Explicit allowlist: never spread caller input, customer data or attribution. */
+export declare function sendGtm(event: WebsiteMarketingBrowserEvent): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bacano/sdk",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "description": "TypeScript SDK for building websites on the Bacano ERP",
   "main": "./index.cjs",
   "module": "./index.js",

package/react.cjs

@@ -5105,6 +5105,61 @@ function matchesCanonicalMarketingHost(canonicalDomain, currentHostname) {
   }
 }
 
+// libs/sdk/src/marketing/gtm.ts
+var CONTAINER_ID = /^GTM-[A-Z0-9]{4,32}$/;
+var preparedQueues = /* @__PURE__ */ new WeakMap();
+function prepareGtm(containerId) {
+  const target = marketingWindow();
+  if (!target || !CONTAINER_ID.test(containerId)) return;
+  target.dataLayer ??= [];
+  const containers = preparedQueues.get(target.dataLayer) ?? /* @__PURE__ */ new Set();
+  if (containers.has(containerId)) return;
+  target.dataLayer.push({ "gtm.start": Date.now(), event: "gtm.js" });
+  containers.add(containerId);
+  preparedQueues.set(target.dataLayer, containers);
+}
+function loadGtmScript(containerId, onError) {
+  const target = marketingWindow();
+  if (!target || typeof document === "undefined" || !CONTAINER_ID.test(containerId))
+    return;
+  const id = `bacano-gtm-${containerId}`;
+  if (document.getElementById(id)) return;
+  prepareGtm(containerId);
+  const script = document.createElement("script");
+  script.id = id;
+  script.async = true;
+  script.src = `https://www.googletagmanager.com/gtm.js?id=${encodeURIComponent(containerId)}`;
+  script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError();
+  document.head.appendChild(script);
+}
+function sendGtm(event) {
+  const target = marketingWindow();
+  if (!target?.dataLayer) return;
+  target.dataLayer.push({ bacano: null });
+  target.dataLayer.push({
+    event: `bacano_${event.eventName}`,
+    bacano: {
+      schema_version: event.schemaVersion,
+      event_name: event.eventName,
+      event_id: event.eventId,
+      ...interactionParameters(event),
+      page_location: event.pageLocation,
+      currency: event.currency,
+      value: event.value,
+      items: mapGa4Items(event.items),
+      item_list_id: event.itemListId,
+      item_list_name: event.itemListName,
+      shipping_tier: event.shippingTier,
+      payment_type: event.paymentType,
+      method: event.contactMethod,
+      contact_placement: event.eventName === "contact" && WEBSITE_MARKETING_CONTACT_PLACEMENTS.some(
+        (value) => value === event.contactPlacement
+      ) ? event.contactPlacement : void 0
+    }
+  });
+}
+
 // libs/sdk/src/marketing/runtime.ts
 function createWebsiteMarketingRuntime(options) {
   let destroyed = false;
@@ -5125,7 +5180,7 @@ function createWebsiteMarketingRuntime(options) {
       target.location.hostname
     )
   ) && Boolean(
-    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity
+    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity || options.config.destinations.gtm
   );
   if (!enabled)
     diagnostic({
@@ -5166,6 +5221,10 @@ function createWebsiteMarketingRuntime(options) {
         const { projectId } = options.config.destinations.clarity;
         guard("Clarity", () => prepareClarity(projectId));
       }
+      if (options.config.destinations.gtm) {
+        const { containerId } = options.config.destinations.gtm;
+        guard("GTM", () => prepareGtm(containerId));
+      }
       cancelScheduledLoad = scheduleScriptLoad(() => {
         if (destroyed) return;
         if (options.config.destinations.ga4) {
@@ -5181,6 +5240,10 @@ function createWebsiteMarketingRuntime(options) {
             () => loadClarityScript(projectId, scriptError("Clarity"))
           );
         }
+        if (options.config.destinations.gtm) {
+          const { containerId } = options.config.destinations.gtm;
+          guard("GTM", () => loadGtmScript(containerId, scriptError("GTM")));
+        }
       }, options.scriptLoadStrategy);
       captureWebsiteMarketingAttribution(
         options.websiteId,
@@ -5300,6 +5363,9 @@ function createWebsiteMarketingRuntime(options) {
       if (options.config.destinations.clarity) {
         dispatch("Clarity", () => sendClarityEvent(event.eventName));
       }
+      if (options.config.destinations.gtm && /^GTM-[A-Z0-9]{4,32}$/.test(options.config.destinations.gtm.containerId)) {
+        dispatch("GTM", () => sendGtm(event));
+      }
     },
     captureAttribution() {
       if (!enabled || destroyed) return null;
@@ -5574,7 +5640,8 @@ async function getWebsitePublicConfig(options) {
           pixelId: marketing.destinations.meta.pixel_id,
           diagnosticMode: marketing.destinations.meta.diagnostic_mode ?? false
         } : null,
-        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null
+        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null,
+        ...marketing.destinations.gtm ? { gtm: { containerId: marketing.destinations.gtm.container_id } } : {}
       }
     },
     legal: {

package/react.js

@@ -5052,6 +5052,61 @@ function matchesCanonicalMarketingHost(canonicalDomain, currentHostname) {
   }
 }
 
+// libs/sdk/src/marketing/gtm.ts
+var CONTAINER_ID = /^GTM-[A-Z0-9]{4,32}$/;
+var preparedQueues = /* @__PURE__ */ new WeakMap();
+function prepareGtm(containerId) {
+  const target = marketingWindow();
+  if (!target || !CONTAINER_ID.test(containerId)) return;
+  target.dataLayer ??= [];
+  const containers = preparedQueues.get(target.dataLayer) ?? /* @__PURE__ */ new Set();
+  if (containers.has(containerId)) return;
+  target.dataLayer.push({ "gtm.start": Date.now(), event: "gtm.js" });
+  containers.add(containerId);
+  preparedQueues.set(target.dataLayer, containers);
+}
+function loadGtmScript(containerId, onError) {
+  const target = marketingWindow();
+  if (!target || typeof document === "undefined" || !CONTAINER_ID.test(containerId))
+    return;
+  const id = `bacano-gtm-${containerId}`;
+  if (document.getElementById(id)) return;
+  prepareGtm(containerId);
+  const script = document.createElement("script");
+  script.id = id;
+  script.async = true;
+  script.src = `https://www.googletagmanager.com/gtm.js?id=${encodeURIComponent(containerId)}`;
+  script.referrerPolicy = "strict-origin-when-cross-origin";
+  script.onerror = () => onError();
+  document.head.appendChild(script);
+}
+function sendGtm(event) {
+  const target = marketingWindow();
+  if (!target?.dataLayer) return;
+  target.dataLayer.push({ bacano: null });
+  target.dataLayer.push({
+    event: `bacano_${event.eventName}`,
+    bacano: {
+      schema_version: event.schemaVersion,
+      event_name: event.eventName,
+      event_id: event.eventId,
+      ...interactionParameters(event),
+      page_location: event.pageLocation,
+      currency: event.currency,
+      value: event.value,
+      items: mapGa4Items(event.items),
+      item_list_id: event.itemListId,
+      item_list_name: event.itemListName,
+      shipping_tier: event.shippingTier,
+      payment_type: event.paymentType,
+      method: event.contactMethod,
+      contact_placement: event.eventName === "contact" && WEBSITE_MARKETING_CONTACT_PLACEMENTS.some(
+        (value) => value === event.contactPlacement
+      ) ? event.contactPlacement : void 0
+    }
+  });
+}
+
 // libs/sdk/src/marketing/runtime.ts
 function createWebsiteMarketingRuntime(options) {
   let destroyed = false;
@@ -5072,7 +5127,7 @@ function createWebsiteMarketingRuntime(options) {
       target.location.hostname
     )
   ) && Boolean(
-    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity
+    options.config.destinations.ga4 || options.config.destinations.meta || options.config.destinations.clarity || options.config.destinations.gtm
   );
   if (!enabled)
     diagnostic({
@@ -5113,6 +5168,10 @@ function createWebsiteMarketingRuntime(options) {
         const { projectId } = options.config.destinations.clarity;
         guard("Clarity", () => prepareClarity(projectId));
       }
+      if (options.config.destinations.gtm) {
+        const { containerId } = options.config.destinations.gtm;
+        guard("GTM", () => prepareGtm(containerId));
+      }
       cancelScheduledLoad = scheduleScriptLoad(() => {
         if (destroyed) return;
         if (options.config.destinations.ga4) {
@@ -5128,6 +5187,10 @@ function createWebsiteMarketingRuntime(options) {
             () => loadClarityScript(projectId, scriptError("Clarity"))
           );
         }
+        if (options.config.destinations.gtm) {
+          const { containerId } = options.config.destinations.gtm;
+          guard("GTM", () => loadGtmScript(containerId, scriptError("GTM")));
+        }
       }, options.scriptLoadStrategy);
       captureWebsiteMarketingAttribution(
         options.websiteId,
@@ -5247,6 +5310,9 @@ function createWebsiteMarketingRuntime(options) {
       if (options.config.destinations.clarity) {
         dispatch("Clarity", () => sendClarityEvent(event.eventName));
       }
+      if (options.config.destinations.gtm && /^GTM-[A-Z0-9]{4,32}$/.test(options.config.destinations.gtm.containerId)) {
+        dispatch("GTM", () => sendGtm(event));
+      }
     },
     captureAttribution() {
       if (!enabled || destroyed) return null;
@@ -5521,7 +5587,8 @@ async function getWebsitePublicConfig(options) {
           pixelId: marketing.destinations.meta.pixel_id,
           diagnosticMode: marketing.destinations.meta.diagnostic_mode ?? false
         } : null,
-        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null
+        clarity: marketing.destinations.clarity ? { projectId: marketing.destinations.clarity.project_id } : null,
+        ...marketing.destinations.gtm ? { gtm: { containerId: marketing.destinations.gtm.container_id } } : {}
       }
     },
     legal: {

package/types.d.ts

@@ -267,6 +267,10 @@ export interface WebsiteMarketingPublicConfig {
         clarity?: {
             projectId: string;
         } | null;
+        /** Optional web container. Does not replace native GA4/Meta destinations. */
+        gtm?: {
+            containerId: string;
+        } | null;
     };
 }
 export type WebsiteCustomerIdentifierType = "AUTO" | "EMAIL" | "PHONE" | "DOCUMENT";