@endora-commerce/mod-analytics 0.100.0

package/dist/backend/services/analytics-ingest.service.js

@@ -0,0 +1,56 @@
+import { ingestAnalyticsEventSchema } from '@endora-commerce/contracts';
+import { AnalyticsEvent } from '../entities/analytics-event.entity.js';
+export class AnalyticsIngestService {
+    emFactory;
+    forwarder;
+    constructor(emFactory, forwarder) {
+        this.emFactory = emFactory;
+        this.forwarder = forwarder;
+    }
+    async ingest(input) {
+        // command-coverage-ignore: telemetry/analytics ingestion — high-volume event
+        // recording, not an audited domain-state mutation.
+        const em = this.emFactory();
+        const accepted = [];
+        const rejected = [];
+        input.events.forEach((raw, index) => {
+            const parsed = ingestAnalyticsEventSchema.safeParse(raw);
+            if (!parsed.success) {
+                rejected.push({ index, reason: parsed.error.issues[0]?.message ?? 'invalid event' });
+                return;
+            }
+            const ev = parsed.data;
+            const row = em.create(AnalyticsEvent, {
+                type: ev.type,
+                ...(ev.occurredAt ? { occurredAt: new Date(ev.occurredAt) } : { occurredAt: new Date() }),
+                ...(ev.salesChannelId !== undefined ? { salesChannelId: ev.salesChannelId } : {}),
+                ...(ev.customerAccountId !== undefined ? { customerAccountId: ev.customerAccountId } : {}),
+                ...(ev.organizationId !== undefined ? { organizationId: ev.organizationId } : {}),
+                ...(ev.sessionId !== undefined ? { sessionId: ev.sessionId } : {}),
+                ...(ev.properties !== undefined ? { properties: ev.properties } : {}),
+                ...(input.requestId !== undefined ? { requestId: input.requestId } : {}),
+            });
+            accepted.push(row);
+        });
+        if (accepted.length > 0) {
+            await em.persistAndFlush(accepted);
+            if (this.forwarder?.enabled) {
+                // Fire-and-forget; never block ingest on the external transport.
+                void this.forwarder.forwardMany(accepted.map(toForwardPayload));
+            }
+        }
+        return { accepted: accepted.length, rejected };
+    }
+}
+function toForwardPayload(row) {
+    return {
+        type: row.type,
+        occurredAt: row.occurredAt.toISOString(),
+        ...(row.salesChannelId ? { salesChannelId: row.salesChannelId } : {}),
+        ...(row.customerAccountId ? { customerAccountId: row.customerAccountId } : {}),
+        ...(row.organizationId ? { organizationId: row.organizationId } : {}),
+        ...(row.sessionId ? { sessionId: row.sessionId } : {}),
+        ...(row.properties ? { properties: row.properties } : {}),
+    };
+}
+//# sourceMappingURL=analytics-ingest.service.js.map

package/dist/backend/services/analytics-ingest.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-ingest.service.js","sourceRoot":"","sources":["../../../src/backend/services/analytics-ingest.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAA6B,MAAM,4BAA4B,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAevE,MAAM,OAAO,sBAAsB;IAEd;IACA;IAFnB,YACmB,SAA8B,EAC9B,SAA8B;QAD9B,cAAS,GAAT,SAAS,CAAqB;QAC9B,cAAS,GAAT,SAAS,CAAqB;IAC9C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAGZ;QACC,6EAA6E;QAC7E,mDAAmD;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAE9C,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;YACvB,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE;gBACpC,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;gBACzF,GAAG,CAAC,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,EAAE,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,GAAG,CAAC,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;gBAC5B,iEAAiE;gBACjE,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,GAAmB;IAS3C,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE;QACxC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC"}

package/dist/backend/services/analytics-query.service.d.ts

@@ -0,0 +1,19 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AnalyticsSummaryQuery, AnalyticsSummaryResponse } from '@endora-commerce/contracts';
+/**
+ * AnalyticsQueryService (T237 / FR-111).
+ *
+ * Two reads serve the admin dashboard:
+ *   - `totalsByType`  — events per type in the requested window
+ *   - `daily`         — per-day, per-type counts for a stacked-area chart
+ *
+ * Both are bounded by the time window the caller passes; the dashboard
+ * never asks for "all time" so the queries always hit the
+ * `(occurred_at)` / `(type, occurred_at)` indexes.
+ */
+export declare class AnalyticsQueryService {
+    private readonly emFactory;
+    constructor(emFactory: () => EntityManager);
+    summary(query: AnalyticsSummaryQuery): Promise<AnalyticsSummaryResponse>;
+}
+//# sourceMappingURL=analytics-query.service.d.ts.map

package/dist/backend/services/analytics-query.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-query.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/analytics-query.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAEV,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;GAUG;AACH,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM,aAAa;IAErD,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA6C/E"}

package/dist/backend/services/analytics-query.service.js

@@ -0,0 +1,51 @@
+/**
+ * AnalyticsQueryService (T237 / FR-111).
+ *
+ * Two reads serve the admin dashboard:
+ *   - `totalsByType`  — events per type in the requested window
+ *   - `daily`         — per-day, per-type counts for a stacked-area chart
+ *
+ * Both are bounded by the time window the caller passes; the dashboard
+ * never asks for "all time" so the queries always hit the
+ * `(occurred_at)` / `(type, occurred_at)` indexes.
+ */
+export class AnalyticsQueryService {
+    emFactory;
+    constructor(emFactory) {
+        this.emFactory = emFactory;
+    }
+    async summary(query) {
+        const em = this.emFactory();
+        const conn = em.getConnection();
+        const params = [query.from, query.to];
+        let channelClause = '';
+        if (query.salesChannelId) {
+            channelClause = ' and sales_channel_id = ?';
+            params.push(query.salesChannelId);
+        }
+        const totalsRows = await conn.execute(`select type, count(*)::text as count
+         from analytics_events
+        where occurred_at >= ? and occurred_at < ?${channelClause}
+        group by type
+        order by type asc`, params);
+        const dailyRows = await conn.execute(`select to_char(date_trunc('day', occurred_at), 'YYYY-MM-DD') as day,
+              type,
+              count(*)::text as count
+         from analytics_events
+        where occurred_at >= ? and occurred_at < ?${channelClause}
+        group by 1, 2
+        order by 1 asc, 2 asc`, params);
+        return {
+            totalsByType: totalsRows.map((r) => ({
+                type: r.type,
+                count: Number(r.count),
+            })),
+            daily: dailyRows.map((r) => ({
+                day: r.day,
+                type: r.type,
+                count: Number(r.count),
+            })),
+        };
+    }
+}
+//# sourceMappingURL=analytics-query.service.js.map

package/dist/backend/services/analytics-query.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-query.service.js","sourceRoot":"","sources":["../../../src/backend/services/analytics-query.service.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,SAA8B;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;QAEhC,MAAM,MAAM,GAA8B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,aAAa,GAAG,2BAA2B,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CACnC;;oDAE8C,aAAa;;0BAEvC,EACpB,MAAM,CACP,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAGlC;;;;oDAI8C,aAAa;;8BAEnC,EACxB,MAAM,CACP,CAAC;QAEF,OAAO;YACL,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnC,IAAI,EAAE,CAAC,CAAC,IAA0B;gBAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;aACvB,CAAC,CAAC;YACH,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,IAAI,EAAE,CAAC,CAAC,IAA0B;gBAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;aACvB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/services/ga4-forwarder.d.ts

@@ -0,0 +1,49 @@
+/**
+ * GA4 Measurement Protocol forwarder (T237 / FR-111).
+ *
+ * Off by default. Activate by setting both env vars:
+ *   ANALYTICS_GA4_MEASUREMENT_ID
+ *   ANALYTICS_GA4_API_SECRET
+ *
+ * The forwarder is intentionally fire-and-forget so that ingest never
+ * blocks on the external HTTP. A failed request is logged via the supplied
+ * `onError` callback; we do not retry — the source events are already
+ * durable in `analytics_events` and an admin replay path can drain them
+ * separately if real-time GA4 fidelity is required.
+ */
+export interface ForwardableEvent {
+    type: string;
+    occurredAt: string;
+    salesChannelId?: string;
+    customerAccountId?: string;
+    organizationId?: string;
+    sessionId?: string;
+    properties?: Record<string, unknown>;
+}
+export interface AnalyticsForwarder {
+    readonly enabled: boolean;
+    forwardMany(events: ForwardableEvent[]): Promise<void>;
+}
+export interface Ga4ForwarderOptions {
+    measurementId: string;
+    apiSecret: string;
+    /** Optional `fetch` override — used by the integration test. */
+    fetchFn?: typeof fetch;
+    onError?: (err: unknown) => void;
+}
+export declare class Ga4Forwarder implements AnalyticsForwarder {
+    private readonly options;
+    readonly enabled = true;
+    constructor(options: Ga4ForwarderOptions);
+    forwardMany(events: ForwardableEvent[]): Promise<void>;
+}
+/**
+ * Off-mode forwarder — used when env vars are missing. Conforms to the same
+ * interface so the ingest service can hold a single non-null reference.
+ */
+export declare class NoopForwarder implements AnalyticsForwarder {
+    readonly enabled = false;
+    forwardMany(): Promise<void>;
+}
+export declare function buildForwarderFromEnv(env: NodeJS.ProcessEnv): AnalyticsForwarder;
+//# sourceMappingURL=ga4-forwarder.d.ts.map

package/dist/backend/services/ga4-forwarder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ga4-forwarder.d.ts","sourceRoot":"","sources":["../../../src/backend/services/ga4-forwarder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAClC;AAED,qBAAa,YAAa,YAAW,kBAAkB;IAGzC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,QAAQ,CAAC,OAAO,QAAQ;gBAEK,OAAO,EAAE,mBAAmB;IAEnD,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAsC7D;AAED;;;GAGG;AACH,qBAAa,aAAc,YAAW,kBAAkB;IACtD,QAAQ,CAAC,OAAO,SAAS;IACnB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,kBAAkB,CAKhF"}

package/dist/backend/services/ga4-forwarder.js

@@ -0,0 +1,86 @@
+/**
+ * GA4 Measurement Protocol forwarder (T237 / FR-111).
+ *
+ * Off by default. Activate by setting both env vars:
+ *   ANALYTICS_GA4_MEASUREMENT_ID
+ *   ANALYTICS_GA4_API_SECRET
+ *
+ * The forwarder is intentionally fire-and-forget so that ingest never
+ * blocks on the external HTTP. A failed request is logged via the supplied
+ * `onError` callback; we do not retry — the source events are already
+ * durable in `analytics_events` and an admin replay path can drain them
+ * separately if real-time GA4 fidelity is required.
+ */
+export class Ga4Forwarder {
+    options;
+    enabled = true;
+    constructor(options) {
+        this.options = options;
+    }
+    async forwardMany(events) {
+        if (events.length === 0)
+            return;
+        const fetchFn = this.options.fetchFn ?? globalThis.fetch;
+        const url = `https://www.google-analytics.com/mp/collect` +
+            `?measurement_id=${encodeURIComponent(this.options.measurementId)}` +
+            `&api_secret=${encodeURIComponent(this.options.apiSecret)}`;
+        // GA4's MP requires a non-empty client_id per request and a max of 25
+        // events per request. We batch by sessionId or customerAccountId; events
+        // with neither use a stable "anonymous" bucket per occurredAt date.
+        const batches = bucketByClient(events);
+        for (const [clientId, bucket] of batches) {
+            for (let i = 0; i < bucket.length; i += 25) {
+                const slice = bucket.slice(i, i + 25);
+                try {
+                    await fetchFn(url, {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({
+                            client_id: clientId,
+                            events: slice.map((ev) => ({
+                                name: ev.type.replace(/[.-]/g, '_'),
+                                params: {
+                                    ...ev.properties,
+                                    occurred_at: ev.occurredAt,
+                                    ...(ev.organizationId ? { organization_id: ev.organizationId } : {}),
+                                    ...(ev.salesChannelId ? { sales_channel_id: ev.salesChannelId } : {}),
+                                },
+                            })),
+                        }),
+                    });
+                }
+                catch (err) {
+                    this.options.onError?.(err);
+                }
+            }
+        }
+    }
+}
+/**
+ * Off-mode forwarder — used when env vars are missing. Conforms to the same
+ * interface so the ingest service can hold a single non-null reference.
+ */
+export class NoopForwarder {
+    enabled = false;
+    async forwardMany() {
+        // Intentionally empty.
+    }
+}
+export function buildForwarderFromEnv(env) {
+    const id = env['ANALYTICS_GA4_MEASUREMENT_ID'];
+    const secret = env['ANALYTICS_GA4_API_SECRET'];
+    if (!id || !secret)
+        return new NoopForwarder();
+    return new Ga4Forwarder({ measurementId: id, apiSecret: secret });
+}
+function bucketByClient(events) {
+    const out = new Map();
+    for (const ev of events) {
+        const key = ev.sessionId ?? ev.customerAccountId ?? ev.organizationId ?? 'anonymous';
+        const arr = out.get(key) ?? [];
+        arr.push(ev);
+        out.set(key, arr);
+    }
+    return out;
+}
+//# sourceMappingURL=ga4-forwarder.js.map

package/dist/backend/services/ga4-forwarder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ga4-forwarder.js","sourceRoot":"","sources":["../../../src/backend/services/ga4-forwarder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAyBH,MAAM,OAAO,YAAY;IAGM;IAFpB,OAAO,GAAG,IAAI,CAAC;IAExB,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;IAAG,CAAC;IAE7D,KAAK,CAAC,WAAW,CAAC,MAA0B;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;QACzD,MAAM,GAAG,GACP,6CAA6C;YAC7C,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE;YACnE,eAAe,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAE9D,sEAAsE;QACtE,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,GAAG,EAAE;wBACjB,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;wBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,SAAS,EAAE,QAAQ;4BACnB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gCACzB,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;gCACnC,MAAM,EAAE;oCACN,GAAG,EAAE,CAAC,UAAU;oCAChB,WAAW,EAAE,EAAE,CAAC,UAAU;oCAC1B,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oCACpE,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iCACtE;6BACF,CAAC,CAAC;yBACJ,CAAC;qBACH,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,aAAa;IACf,OAAO,GAAG,KAAK,CAAC;IACzB,KAAK,CAAC,WAAW;QACf,uBAAuB;IACzB,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAsB;IAC1D,MAAM,EAAE,GAAG,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IAC/C,OAAO,IAAI,YAAY,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CACrB,MAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;IAClD,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,GAAG,GACP,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC,cAAc,IAAI,WAAW,CAAC;QAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,169 @@
+/**
+ * Analytics module — manifest backfill (Module Lifecycle, feature 018).
+ *
+ * Predates the lifecycle system; this manifest is the static record
+ * required so the module participates in the registry. No install /
+ * uninstall hook today — the module's schema is owned by earlier
+ * platform-wide migrations.
+ */
+export declare const manifest: {
+    id: string;
+    name: string;
+    version: string;
+    dependencies: string[];
+    description?: string | undefined;
+    acknowledgedDependencies?: {
+        moduleId: string;
+        port: string;
+        reason: string;
+    }[] | undefined;
+    nonBindingDependencies?: {
+        moduleId: string;
+        name: string;
+        kind: "contributes-to" | "degrades-without" | "refuses-without";
+        reason: string;
+        whenAbsent?: string | undefined;
+    }[] | undefined;
+    activation?: {
+        settingCode: string;
+        default: boolean;
+    } | {
+        nonDeactivatable: true;
+        reason: string;
+    } | undefined;
+    settings?: {
+        moduleCode: string;
+        groups: {
+            code: string;
+            name: string;
+            salesChannelCodes?: string[] | undefined;
+            isSystemProtected?: boolean | undefined;
+        }[];
+        settings: {
+            code: string;
+            name: string;
+            valueType: "string" | "number" | "boolean" | "json" | "string_list" | "secret" | "credential_ref";
+            defaultValue: unknown;
+            description?: string | undefined;
+            groupCode?: string | undefined;
+            previousDefaultValues?: unknown[] | undefined;
+            salesChannelCodes?: string[] | undefined;
+            enumOptions?: string[] | undefined;
+            configurationType?: string | undefined;
+            hidden?: boolean | undefined;
+        }[];
+    } | undefined;
+    i18n?: {
+        bundlesDir: string;
+    } | undefined;
+    docs?: false | {
+        dir: string;
+    } | undefined;
+    demo?: false | {
+        summary: string;
+        seed: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoSeedResult>;
+        reset: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoResetResult>;
+        after?: readonly string[] | undefined;
+        package?: string | undefined;
+    } | undefined;
+    actions?: {
+        id: string;
+        labelKey: string;
+        icon: "Plus" | "Sparkles" | "Settings" | "Search" | "Boxes" | "Layers" | "Menu" | "PlusCircle" | "PlusSquare" | "FilePlus" | "FolderPlus" | "Upload" | "FileUp" | "CloudUpload" | "Download" | "FileDown" | "FileText" | "BookOpen" | "Rss" | "Package" | "Tag" | "ShoppingCart" | "Receipt" | "CreditCard" | "Users" | "UserPlus" | "Inbox" | "ListChecks" | "ClipboardList" | "Image" | "Video" | "LayoutDashboard" | "PanelLeft" | "KeyRound" | "ShieldCheck" | "Edit" | "Archive" | "Box" | "Truck" | "CircleDollarSign" | "Activity" | "LineChart" | "Smartphone" | "Webhook" | "Scale" | "PlugZap" | "PercentDiamond" | "Newspaper" | "Languages" | "Eraser" | "Warehouse" | "TrendingDown" | "Bell" | "PackageOpen" | "Building2" | "Store" | "ClipboardCheck";
+        targetRoute: string;
+        keywords: string[];
+        weight: number;
+        descriptionKey?: string | undefined;
+        requiredPermission?: string | undefined;
+    }[] | undefined;
+    permissions?: {
+        code: string;
+        label: string;
+        module?: string | undefined;
+        description?: string | undefined;
+        requires?: string[] | undefined;
+    }[] | undefined;
+    transactionalEmails?: {
+        code: string;
+        name: string;
+        variables: {
+            key: string;
+            label: string;
+            sampleValue?: string | undefined;
+            description?: string | undefined;
+        }[];
+        description?: string | undefined;
+        group?: string | undefined;
+    }[] | undefined;
+    capabilities?: string[] | undefined;
+    exclusiveCapabilities?: {
+        key: string;
+        errorCode: string;
+    }[] | undefined;
+    errorCodes?: {
+        code: string;
+        tokens?: string[] | undefined;
+    }[] | undefined;
+    blocks?: {
+        name: string;
+        labelKey: string;
+        category: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        fields: Record<string, {
+            type: "number" | "object" | "array" | "text" | "textarea" | "select" | "radio" | "external" | "uuid" | "richtext";
+            label?: string | undefined;
+            required?: boolean | undefined;
+            options?: {
+                label: string;
+                value: string | number;
+            }[] | undefined;
+            refKind?: string | undefined;
+        }>;
+        descriptionKey?: string | undefined;
+        defaultProps?: Record<string, unknown> | undefined;
+        responsiveFields?: string[] | undefined;
+        previewIcon?: string | undefined;
+        weight?: number | undefined;
+    }[] | undefined;
+    blockCategories?: {
+        key: string;
+        titleKey: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        weight?: number | undefined;
+        visible?: boolean | undefined;
+    }[] | undefined;
+    env?: {
+        name: string;
+        describes: {
+            en: string;
+            pl: string;
+        };
+        requirement: {
+            kind: "required";
+        } | {
+            kind: "requiredWhen";
+            input: string;
+            equals: string;
+        } | {
+            kind: "optional";
+            without: {
+                en: string;
+                pl: string;
+            };
+        };
+        secret: boolean;
+        generable: boolean;
+        owner: {
+            kind: "platform";
+        } | {
+            kind: "application";
+            application: "admin" | "backend" | "storefront";
+        } | {
+            kind: "module";
+            moduleId: string;
+        };
+        consumers: ("admin" | "backend" | "storefront")[];
+        addressOf: "admin" | "backend" | "storefront" | null;
+    }[] | undefined;
+};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDnB,CAAC"}

package/dist/manifest.js

@@ -0,0 +1,64 @@
+import { defineModuleManifest } from '@endora-commerce/contracts';
+/**
+ * Analytics module — manifest backfill (Module Lifecycle, feature 018).
+ *
+ * Predates the lifecycle system; this manifest is the static record
+ * required so the module participates in the registry. No install /
+ * uninstall hook today — the module's schema is owned by earlier
+ * platform-wide migrations.
+ */
+export const manifest = defineModuleManifest({
+    id: 'analytics',
+    name: 'Analytics',
+    description: 'Server-side analytics aggregation and dashboard data feeds.',
+    version: '1.0.0',
+    // Feature 072 (wave 1) — the admin summary route is gated by `requireAdmin`,
+    // which `auth` owns. With `auth` absent the route cannot be guarded at all,
+    // so this is a hard edge rather than a degraded mode.
+    dependencies: ['auth'],
+    permissions: [{ code: 'analytics:read', label: 'View analytics dashboards' }],
+    // Feature 091, Phase 4 — the module owns its admin surface, so it owns the
+    // strings that surface is labelled with. `nav.analytics.label` replaces the
+    // shared bundle's `appShell.nav.analytics`, and the dashboard's own copy
+    // moved here verbatim out of `_i18n`'s `analytics.*` block.
+    i18n: { bundlesDir: 'i18n' },
+    docs: { dir: 'docs' },
+    // Principle XVI. The module has had an admin screen and a sidebar entry since
+    // feature 018 and has never been reachable under ⌘K — sidebar-only, which the
+    // principle says is not enough. The gap is repaired in the merge request that
+    // makes the surface the module's, because the palette entry is the one half
+    // of that surface no admin-side test can answer for: it is resolved by the
+    // server from this declaration against the effective enabled-set, which is
+    // what makes the off-state proof in
+    // `backend/test/integration/analytics/off-state.test.ts` possible at all.
+    actions: [
+        {
+            id: 'open-analytics',
+            labelKey: 'actions.openAnalytics.label',
+            descriptionKey: 'actions.openAnalytics.description',
+            icon: 'LineChart',
+            targetRoute: '/analytics',
+            requiredPermission: 'analytics:read',
+            keywords: ['analytics', 'analityka', 'dashboard', 'events', 'zdarzenia', 'raport'],
+            weight: 230,
+        },
+    ],
+    settings: {
+        moduleCode: 'analytics',
+        groups: [{ code: 'analytics', name: 'Analytics' }],
+        settings: [
+            {
+                // Feature 073 — the operator's activation control. Platform-wide,
+                // never channel-scoped: activation is not a per-channel question.
+                code: 'analytics.enabled',
+                name: 'Analytics enabled',
+                description: 'Switches server-side analytics on or off. While off nothing is ingested, the dashboards and their API are gone, and no event is forwarded to GA4. Nothing is deleted — the events already collected are preserved and reappear when you switch it back on.',
+                groupCode: 'analytics',
+                valueType: 'boolean',
+                defaultValue: true,
+            },
+        ],
+    },
+    activation: { settingCode: 'analytics.enabled', default: true },
+});
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;IAC3C,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,6DAA6D;IAC/D,OAAO,EAAE,OAAO;IAChB,6EAA6E;IAC7E,4EAA4E;IAC5E,sDAAsD;IACtD,YAAY,EAAE,CAAC,MAAM,CAAC;IACtB,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4DAA4D;IAC5D,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;IAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;IACrB,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,oCAAoC;IACpC,0EAA0E;IAC1E,OAAO,EAAE;QACP;YACE,EAAE,EAAE,gBAAgB;YACpB,QAAQ,EAAE,6BAA6B;YACvC,cAAc,EAAE,mCAAmC;YACnD,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,YAAY;YACzB,kBAAkB,EAAE,gBAAgB;YACpC,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC;YAClF,MAAM,EAAE,GAAG;SACZ;KACF;IACD,QAAQ,EAAE;QACR,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAClD,QAAQ,EAAE;YACR;gBACE,kEAAkE;gBAClE,kEAAkE;gBAClE,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EACT,4PAA4P;gBAC9P,SAAS,EAAE,WAAW;gBACtB,SAAS,EAAE,SAAS;gBACpB,YAAY,EAAE,IAAI;aACnB;SACF;KACF;IACD,UAAU,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE;CAChE,CAAC,CAAC"}

package/dist/migrations/20260425T143139_analytics_init.d.ts

@@ -0,0 +1,13 @@
+import { Migration } from '@mikro-orm/migrations';
+/**
+ * Analytics module init (T237 / FR-110, FR-111). Single append-only event
+ * table. Indexes are tuned for the dashboard's two read patterns:
+ *
+ *   - "show me totals by type for the last 30 days"
+ *   - "show me a daily breakdown of `product.viewed` for sales channel X"
+ */
+export declare class Migration20260425T143139AnalyticsInit extends Migration {
+    up(): Promise<void>;
+    down(): Promise<void>;
+}
+//# sourceMappingURL=20260425T143139_analytics_init.d.ts.map

package/dist/migrations/20260425T143139_analytics_init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260425T143139_analytics_init.d.ts","sourceRoot":"","sources":["../../src/migrations/20260425T143139_analytics_init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;GAMG;AACH,qBAAa,qCAAsC,SAAQ,SAAS;IACnD,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;IAqBnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAGrC"}

package/dist/migrations/20260425T143139_analytics_init.js

@@ -0,0 +1,34 @@
+import { Migration } from '@mikro-orm/migrations';
+/**
+ * Analytics module init (T237 / FR-110, FR-111). Single append-only event
+ * table. Indexes are tuned for the dashboard's two read patterns:
+ *
+ *   - "show me totals by type for the last 30 days"
+ *   - "show me a daily breakdown of `product.viewed` for sales channel X"
+ */
+export class Migration20260425T143139AnalyticsInit extends Migration {
+    async up() {
+        this.addSql(`
+      create table "analytics_events" (
+        "id" uuid not null,
+        "type" varchar(64) not null,
+        "occurred_at" timestamptz not null,
+        "recorded_at" timestamptz not null,
+        "sales_channel_id" uuid null,
+        "customer_account_id" uuid null,
+        "organization_id" uuid null,
+        "session_id" varchar(64) null,
+        "properties" jsonb null,
+        "request_id" varchar(64) null,
+        constraint "analytics_events_pkey" primary key ("id")
+      );
+    `);
+        this.addSql('create index "analytics_events_occurred_at_index" on "analytics_events" ("occurred_at");');
+        this.addSql('create index "analytics_events_sales_channel_id_index" on "analytics_events" ("sales_channel_id");');
+        this.addSql('create index "idx_analytics_events_type_occurred_at" on "analytics_events" ("type", "occurred_at");');
+    }
+    async down() {
+        this.addSql('drop table if exists "analytics_events" cascade;');
+    }
+}
+//# sourceMappingURL=20260425T143139_analytics_init.js.map

package/dist/migrations/20260425T143139_analytics_init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260425T143139_analytics_init.js","sourceRoot":"","sources":["../../src/migrations/20260425T143139_analytics_init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,OAAO,qCAAsC,SAAQ,SAAS;IACzD,KAAK,CAAC,EAAE;QACf,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;;KAcX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,0FAA0F,CAAC,CAAC;QACxG,IAAI,CAAC,MAAM,CAAC,oGAAoG,CAAC,CAAC;QAClH,IAAI,CAAC,MAAM,CAAC,qGAAqG,CAAC,CAAC;IACrH,CAAC;IAEQ,KAAK,CAAC,IAAI;QACjB,IAAI,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/migrations/20260912T125655_analytics_events_tenant_scope_indexes.d.ts

@@ -0,0 +1,31 @@
+import { Migration } from '@mikro-orm/migrations';
+/**
+ * The two tenant-key indexes on `analytics_events` (feature 050, research
+ * §R5 — the guard filters on `organization_id` and `customer_account_id`,
+ * and neither column was indexed).
+ *
+ * They were created by the platform's frozen
+ * `Migration20260717T134752CoreTenantScopeIndexes` until
+ * `specs/120-migration-closure-bridge-ownership/` Phase 3. Under D-226 a
+ * migration may name a table only if its own module, its transitive
+ * `dependencies` closure or the platform creates it; the platform declares
+ * no dependencies, so it could never name `analytics_events`. An instance
+ * that omits `analytics` had a frozen corpus indexing a table nothing
+ * builds. The table is this module's own, so here the closure is trivial.
+ *
+ * The statements are the frozen ones verbatim, `if not exists` and all, so
+ * the two paths reach one schema. A database that has already applied the
+ * frozen migration is offered nothing from it — the storage keys on the
+ * class name and holds no checksum — and these two are the no-ops they
+ * already read as.
+ *
+ * The frozen migration's note is worth carrying: `analytics_events` can grow
+ * large, and a plain in-transaction `CREATE INDEX` locks writes while it
+ * builds. Ops may pre-create both CONCURRENTLY out of band, which
+ * `if not exists` makes free.
+ */
+export declare class Migration20260912T125655AnalyticsEventsTenantScopeIndexes extends Migration {
+    up(): Promise<void>;
+    down(): Promise<void>;
+}
+//# sourceMappingURL=20260912T125655_analytics_events_tenant_scope_indexes.d.ts.map

package/dist/migrations/20260912T125655_analytics_events_tenant_scope_indexes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260912T125655_analytics_events_tenant_scope_indexes.d.ts","sourceRoot":"","sources":["../../src/migrations/20260912T125655_analytics_events_tenant_scope_indexes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,yDAA0D,SAAQ,SAAS;IACvE,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;IASnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAIrC"}