@endora-commerce/mod-google-analytics 0.100.0

package/dist/backend/index.d.ts

@@ -0,0 +1,85 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { FastifyRequest } from 'fastify';
+import type { Redis } from 'ioredis';
+import type { AuditPort, ModuleContext, RequireAdminFactory, SettingsReadPort } from '@endora-commerce/platform/kernel';
+import { StorefrontRevalidator } from '@endora-commerce/platform/http';
+import { GaConfigService } from './services/ga-config.service.js';
+import { GaCustomEventsService, type GaChannelPort, type GaAuditContext } from './services/custom-events.service.js';
+import { makeEnqueuer } from './services/ss-delivery.service.js';
+import { GaCustomEvent } from './entities/ga-custom-event.entity.js';
+/**
+ * `google_analytics` — the last of the four ad modules, and the only one with
+ * something to say about *where* a seed belongs (feature 072, wave 2, T102).
+ *
+ * The off-state leak is the same one `meta_ads`, `linkedin_ads` and
+ * `google_tag_manager` carried: routes gated by `defineModuleRoutes`, but the
+ * `settings.value_changed` subscription arriving from a root as a bare
+ * `eventBus.on`, so a switched-off module kept POSTing to the storefront.
+ * `ctx.subscribe` is `subscribeForModule`; the worker moves to `ctx.worker`,
+ * which is `defineModuleWorker`. That closes the fourth and last of them.
+ *
+ * **The CMS block seed stays in `ctx.routes`, not `ctx.onBoot`.** It is the one
+ * decision here that is not mechanical. `ensureCookieConsentBlock` seeds a
+ * predefined CMS block, so it needs `cms`' tables to exist and it needs sales
+ * channels. `ctx.onBoot` would run it earlier, which buys nothing it needs and
+ * costs the ordering guarantee it currently has for free by running at plugin
+ * attach. `_i18n` taught this lesson the expensive way in wave 1: a seed moved
+ * to `onBoot` that silently found nothing.
+ *
+ * **What changed under it is who writes** (feature 075 / D-87). The seeder used
+ * to insert into `cms_blocks` and `cms_block_sales_channels` itself and was
+ * wrapped in a `try/catch` that downgraded any failure to a warning, so that a
+ * platform composed without the CMS module could still boot. It asks `cms`
+ * through `cmsBlockSeedPort` now and decides that module's presence before it
+ * calls, so the absence is an answer this body logs rather than an exception a
+ * `catch` has to be trusted to tell apart from a real one.
+ *
+ * `channels` is `salesChannelCodeIdPort` — the code⇄id lookup, which belongs to
+ * `sales_channels` and is registered by a root until that module converts
+ * (T110). `auditLog` stops being optional, as in the other three.
+ */
+interface GaServices {
+    readonly revalidator: StorefrontRevalidator;
+    readonly customEvents: GaCustomEventsService;
+    readonly configService: GaConfigService;
+    readonly invalidateConfig: () => void;
+    readonly enqueueCollect: ReturnType<typeof makeEnqueuer> | undefined;
+}
+export interface GoogleAnalyticsCradle {
+    readonly emFactory: () => EntityManager;
+    readonly auditLogService: AuditPort;
+    readonly settingsReadPort: SettingsReadPort;
+    readonly requireAdmin: RequireAdminFactory;
+    /** Owned by `sales_channels`; a root registers it until that module converts. */
+    readonly salesChannelCodeIdPort: GaChannelPort;
+    /** How this composition names the acting admin; `null` for a non-admin caller. */
+    readonly adminAuditActorResolver: (request: FastifyRequest) => GaAuditContext;
+    /** Absent in a composition that wants no BullMQ queue — see `google_tag_manager`. */
+    readonly moduleQueueRedis: Redis | undefined;
+    readonly googleAnalyticsServices: GaServices;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ *
+ * One class, and the absent named export matters here for a reason this module
+ * makes concrete: `ga_custom_events` carries a foreign key into `sales_channels`
+ * (D-169), and a foreign key needs the **table**, never the owner's entity
+ * class. There is nothing another module can legitimately do with `GaCustomEvent`
+ * — D-32 forbids an ORM relation into it, and every cross-module read of this
+ * module's data goes through the storefront config shape. With a named export,
+ * `import type { GaCustomEvent } from '@endora-commerce/mod-google-analytics/backend'`
+ * would compile in any consumer's tree and only a check whose population is this
+ * repository could object.
+ */
+export declare const entities: (typeof GaCustomEvent)[];
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EACL,qBAAqB,EACrB,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EAAE,YAAY,EAAiB,MAAM,mCAAmC,CAAC;AAGhF,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAIrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,UAAU,UAAU;IAClB,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GAAG,SAAS,CAAC;CACtE;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,iFAAiF;IACjF,QAAQ,CAAC,sBAAsB,EAAE,aAAa,CAAC;IAC/C,kFAAkF;IAClF,QAAQ,CAAC,uBAAuB,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,cAAc,CAAC;IAC9E,qFAAqF;IACrF,QAAQ,CAAC,gBAAgB,EAAE,KAAK,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,uBAAuB,EAAE,UAAU,CAAC;CAC9C;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAoGvD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,QAAQ,0BAAkB,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,102 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { StorefrontRevalidator } from '@endora-commerce/platform/http';
+import { GaConfigService } from './services/ga-config.service.js';
+import { GaCustomEventsService, } from './services/custom-events.service.js';
+import { createGaDeliveryQueue, createGaDeliveryWorker, } from './services/ss-delivery-queue.js';
+import { makeEnqueuer, makeProcessor } from './services/ss-delivery.service.js';
+import { Ga4MpClient } from './services/ga4-mp-client.js';
+import { ensureCookieConsentBlock } from './services/cookie-consent-block-seeder.js';
+import { GaCustomEvent } from './entities/ga-custom-event.entity.js';
+import { registerGoogleAnalyticsAdminRoutes } from './routes.admin.js';
+import { registerGoogleAnalyticsStorefrontRoutes } from './routes.storefront.js';
+export function registerModule(ctx) {
+    ctx.di.register({
+        googleAnalyticsServices: ctx
+            .asFunction(({ emFactory, auditLogService, moduleQueueRedis, }) => {
+            const revalidator = new StorefrontRevalidator({
+                baseUrl: process.env['STOREFRONT_BASE_URL'],
+                secret: process.env['REVALIDATE_SECRET'],
+            });
+            const invalidateConfig = () => {
+                void revalidator.revalidate(['ga:config']);
+            };
+            const customEvents = new GaCustomEventsService(emFactory, lazyPort(ctx, 'salesChannelCodeIdPort'), auditLogService, invalidateConfig);
+            const configService = new GaConfigService(lazyPort(ctx, 'settingsReadPort'), (channelId) => customEvents.loadForChannel(channelId));
+            // Producer side: the API enqueues whether or not this process also
+            // runs the consumer.
+            const deliveryQueue = moduleQueueRedis
+                ? createGaDeliveryQueue(moduleQueueRedis)
+                : undefined;
+            return {
+                revalidator,
+                customEvents,
+                configService,
+                invalidateConfig,
+                enqueueCollect: deliveryQueue ? makeEnqueuer(deliveryQueue) : undefined,
+            };
+        })
+            .singleton(),
+    });
+    // Admin config edits propagate immediately rather than after the TTL — while
+    // the module is on.
+    ctx.subscribe('settings.value_changed', (payload) => {
+        const settingCode = payload.settingCode;
+        if (typeof settingCode !== 'string' || !settingCode.startsWith('google_analytics.'))
+            return;
+        ctx.cradle().googleAnalyticsServices.invalidateConfig();
+    });
+    ctx.routes(async (app) => {
+        const { googleAnalyticsServices, settingsReadPort, requireAdmin, adminAuditActorResolver, moduleQueueRedis, } = ctx.cradle();
+        googleAnalyticsServices.revalidator.setLogger(app.log);
+        // Seed the predefined cookie-consent CMS block (idempotent; runs once
+        // channels exist). `cms` owns the write since feature 075 — the seeder asks
+        // it through `cmsBlockSeedPort` and answers `cms-absent` rather than
+        // throwing when the CMS is not there, so this no longer needs a `catch` to
+        // keep a CMS-less platform booting. `lazyPort` built here resolves nothing:
+        // it defers to the method call, which the seeder makes only after it has
+        // decided presence.
+        const seeded = await ensureCookieConsentBlock(lazyPort(ctx, 'cmsBlockSeedPort'));
+        if (seeded === 'cms-absent') {
+            app.log.info('[google_analytics] cookie-consent CMS block seed skipped — cms is not present');
+        }
+        // Queue consumer (Principle X): a separable worker entrypoint, gated on
+        // role. `ctx.worker` wraps it in `defineModuleWorker`.
+        if (process.env['BACKEND_ROLE'] !== 'api' && moduleQueueRedis) {
+            ctx.worker(createGaDeliveryWorker(moduleQueueRedis, makeProcessor({ settings: settingsReadPort, client: new Ga4MpClient() })), { logger: app.log });
+        }
+        await registerGoogleAnalyticsStorefrontRoutes(app, {
+            configService: googleAnalyticsServices.configService,
+            ...(googleAnalyticsServices.enqueueCollect
+                ? { enqueueCollect: googleAnalyticsServices.enqueueCollect }
+                : {}),
+        });
+        await registerGoogleAnalyticsAdminRoutes(app, {
+            customEvents: googleAnalyticsServices.customEvents,
+            requireAdmin,
+            resolveAuditContext: adminAuditActorResolver,
+        });
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ *
+ * One class, and the absent named export matters here for a reason this module
+ * makes concrete: `ga_custom_events` carries a foreign key into `sales_channels`
+ * (D-169), and a foreign key needs the **table**, never the owner's entity
+ * class. There is nothing another module can legitimately do with `GaCustomEvent`
+ * — D-32 forbids an ORM relation into it, and every cross-module read of this
+ * module's data goes through the storefront config shape. With a named export,
+ * `import type { GaCustomEvent } from '@endora-commerce/mod-google-analytics/backend'`
+ * would compile in any consumer's tree and only a check whose population is this
+ * repository could object.
+ */
+export const entities = [GaCustomEvent];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EACL,qBAAqB,GAGtB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,wBAAwB,CAAC;AAwDjF,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,uBAAuB,EAAE,GAAG;aACzB,UAAU,CACT,CAAC,EACC,SAAS,EACT,eAAe,EACf,gBAAgB,GACM,EAAc,EAAE;YACtC,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC;gBAC5C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBAC3C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;aACzC,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,GAAS,EAAE;gBAClC,KAAK,WAAW,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC;YACF,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAC5C,SAAS,EACT,QAAQ,CAAgB,GAAG,EAAE,wBAAwB,CAAC,EACtD,eAAe,EACf,gBAAgB,CACjB,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,eAAe,CACvC,QAAQ,CAAmB,GAAG,EAAE,kBAAkB,CAAC,EACnD,CAAC,SAAS,EAAE,EAAE,CACd,YAAY,CAAC,cAAc,CAAC,SAAS,CAAC,CACvC,CAAC;YACF,mEAAmE;YACnE,qBAAqB;YACrB,MAAM,aAAa,GAAG,gBAAgB;gBACpC,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC;gBACzC,CAAC,CAAC,SAAS,CAAC;YACd,OAAO;gBACL,WAAW;gBACX,YAAY;gBACZ,aAAa;gBACb,gBAAgB;gBAChB,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;aACxE,CAAC;QACJ,CAAC,CACF;aACA,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,6EAA6E;IAC7E,oBAAoB;IACpB,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,CAAC,OAAO,EAAE,EAAE;QAClD,MAAM,WAAW,GAAI,OAAqC,CAAC,WAAW,CAAC;QACvE,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,OAAO;QAC5F,GAAG,CAAC,MAAM,EAAyB,CAAC,uBAAuB,CAAC,gBAAgB,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,EACJ,uBAAuB,EACvB,gBAAgB,EAChB,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,GACjB,GAAG,GAAG,CAAC,MAAM,EAAyB,CAAC;QACxC,uBAAuB,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvD,sEAAsE;QACtE,4EAA4E;QAC5E,qEAAqE;QACrE,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAC3C,QAAQ,CAAmB,GAAG,EAAE,kBAAkB,CAAC,CACpD,CAAC;QACF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;QAChG,CAAC;QAED,wEAAwE;QACxE,uDAAuD;QACvD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,IAAI,gBAAgB,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CACR,sBAAsB,CACpB,gBAAgB,EAChB,aAAa,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,WAAW,EAAE,EAAE,CAAC,CACzE,EACD,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CACpB,CAAC;QACJ,CAAC;QAED,MAAM,uCAAuC,CAAC,GAAG,EAAE;YACjD,aAAa,EAAE,uBAAuB,CAAC,aAAa;YACpD,GAAG,CAAC,uBAAuB,CAAC,cAAc;gBACxC,CAAC,CAAC,EAAE,cAAc,EAAE,uBAAuB,CAAC,cAAc,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,MAAM,kCAAkC,CAAC,GAAG,EAAE;YAC5C,YAAY,EAAE,uBAAuB,CAAC,YAAY;YAClD,YAAY;YACZ,mBAAmB,EAAE,uBAAuB;SAC7C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,15 @@
+import type { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify';
+import type { GaCustomEventsService, GaAuditContext } from './services/custom-events.service.js';
+export interface GoogleAnalyticsAdminDeps {
+    customEvents: GaCustomEventsService;
+    requireAdmin: (permission?: string) => (req: FastifyRequest, reply: FastifyReply) => Promise<void>;
+    resolveAuditContext: (req: FastifyRequest) => GaAuditContext;
+}
+/**
+ * Admin routes for the Google Analytics module (feature 049, US3). Custom-event
+ * CRUD + the static action-field catalogue that drives the admin field picker.
+ * Per-channel Settings (Measurement ID, Enhanced Ecommerce, server-side) are
+ * managed through the generic Settings admin surface, not here.
+ */
+export declare function registerGoogleAnalyticsAdminRoutes(app: FastifyInstance, deps: GoogleAnalyticsAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAO7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAEjG,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,qBAAqB,CAAC;IACpC,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG,mBAAmB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,cAAc,CAAC;CAC9D;AAED;;;;;GAKG;AACH,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAwDf"}

package/dist/backend/routes.admin.js

@@ -0,0 +1,35 @@
+import { gaCustomEventCreateSchema, gaCustomEventUpdateSchema, gaCustomEventListQuerySchema, GA_ACTION_FIELD_CATALOGUE, } from '@endora-commerce/contracts';
+/**
+ * Admin routes for the Google Analytics module (feature 049, US3). Custom-event
+ * CRUD + the static action-field catalogue that drives the admin field picker.
+ * Per-channel Settings (Measurement ID, Enhanced Ecommerce, server-side) are
+ * managed through the generic Settings admin surface, not here.
+ */
+export async function registerGoogleAnalyticsAdminRoutes(app, deps) {
+    const { customEvents, requireAdmin, resolveAuditContext } = deps;
+    app.get('/api/v1/admin/google-analytics/action-catalogue', { preHandler: requireAdmin('google_analytics:read') }, async () => ({ data: GA_ACTION_FIELD_CATALOGUE }));
+    app.get('/api/v1/admin/google-analytics/custom-events', { preHandler: requireAdmin('google_analytics:read') }, async (request) => {
+        const query = gaCustomEventListQuerySchema.parse(request.query);
+        const items = await customEvents.list(query);
+        return { data: items };
+    });
+    app.get('/api/v1/admin/google-analytics/custom-events/:id', { preHandler: requireAdmin('google_analytics:read') }, async (request) => {
+        const item = await customEvents.get(request.params.id);
+        return { data: item };
+    });
+    app.post('/api/v1/admin/google-analytics/custom-events', { preHandler: requireAdmin('google_analytics:write') }, async (request, reply) => {
+        const body = gaCustomEventCreateSchema.parse(request.body);
+        const item = await customEvents.create(body, resolveAuditContext(request));
+        return reply.status(201).send({ data: item });
+    });
+    app.patch('/api/v1/admin/google-analytics/custom-events/:id', { preHandler: requireAdmin('google_analytics:write') }, async (request) => {
+        const body = gaCustomEventUpdateSchema.parse(request.body);
+        const item = await customEvents.update(request.params.id, body, resolveAuditContext(request));
+        return { data: item };
+    });
+    app.delete('/api/v1/admin/google-analytics/custom-events/:id', { preHandler: requireAdmin('google_analytics:write') }, async (request, reply) => {
+        await customEvents.remove(request.params.id, resolveAuditContext(request));
+        return reply.status(204).send();
+    });
+}
+//# sourceMappingURL=routes.admin.js.map

package/dist/backend/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AASpC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,GAAoB,EACpB,IAA8B;IAE9B,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IAEjE,GAAG,CAAC,GAAG,CACL,iDAAiD,EACjD,EAAE,UAAU,EAAE,YAAY,CAAC,uBAAuB,CAAC,EAAE,EACrD,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAClD,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,8CAA8C,EAC9C,EAAE,UAAU,EAAE,YAAY,CAAC,uBAAuB,CAAC,EAAE,EACrD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,kDAAkD,EAClD,EAAE,UAAU,EAAE,YAAY,CAAC,uBAAuB,CAAC,EAAE,EACrD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,8CAA8C,EAC9C,EAAE,UAAU,EAAE,YAAY,CAAC,wBAAwB,CAAC,EAAE,EACtD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,kDAAkD,EAClD,EAAE,UAAU,EAAE,YAAY,CAAC,wBAAwB,CAAC,EAAE,EACtD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9F,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,kDAAkD,EAClD,EAAE,UAAU,EAAE,YAAY,CAAC,wBAAwB,CAAC,EAAE,EACtD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.storefront.d.ts

@@ -0,0 +1,17 @@
+import type { FastifyInstance } from 'fastify';
+import type { GaConfigService } from './services/ga-config.service.js';
+import type { GaCollectEnqueuer } from './services/ss-delivery-queue.js';
+export interface GoogleAnalyticsStorefrontDeps {
+    configService: GaConfigService;
+    /** Producer that enqueues server-side delivery jobs (US4). Absent ⇒ 503. */
+    enqueueCollect?: GaCollectEnqueuer;
+}
+/**
+ * Public storefront routes for the Google Analytics module (feature 049).
+ * Registered through `ctx.routes` in this package's `backend/index.ts`, which
+ * is `defineModuleRoutes`, so they 503 `MODULE_DISABLED` when the module is
+ * switched off. Channel is resolved from the `X-Sales-Channel` header by the
+ * shared sales-channel-resolver middleware.
+ */
+export declare function registerGoogleAnalyticsStorefrontRoutes(app: FastifyInstance, deps: GoogleAnalyticsStorefrontDeps): Promise<void>;
+//# sourceMappingURL=routes.storefront.d.ts.map

package/dist/backend/routes.storefront.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.d.ts","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEzE,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,eAAe,CAAC;IAC/B,4EAA4E;IAC5E,cAAc,CAAC,EAAE,iBAAiB,CAAC;CACpC;AAED;;;;;;GAMG;AACH,wBAAsB,uCAAuC,CAC3D,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/dist/backend/routes.storefront.js

@@ -0,0 +1,30 @@
+import { gaCollectRequestSchema } from '@endora-commerce/contracts';
+import { getResolvedChannel } from '@endora-commerce/platform/kernel';
+/**
+ * Public storefront routes for the Google Analytics module (feature 049).
+ * Registered through `ctx.routes` in this package's `backend/index.ts`, which
+ * is `defineModuleRoutes`, so they 503 `MODULE_DISABLED` when the module is
+ * switched off. Channel is resolved from the `X-Sales-Channel` header by the
+ * shared sales-channel-resolver middleware.
+ */
+export async function registerGoogleAnalyticsStorefrontRoutes(app, deps) {
+    // Per-channel public config for the browser. Never returns the API secret.
+    app.get('/api/v1/storefront/google-analytics/config', async (request, reply) => {
+        const channel = getResolvedChannel(request);
+        const config = await deps.configService.getConfig(channel.id);
+        return reply.send({ data: config });
+    });
+    // Server-side collect — producer only (Principle X): validate → enqueue → 202.
+    app.post('/api/v1/storefront/google-analytics/collect', async (request, reply) => {
+        if (!deps.enqueueCollect) {
+            return reply.status(503).send({
+                error: { code: 'server_side_unavailable', message: 'Server-side tagging is not available.' },
+            });
+        }
+        const channel = getResolvedChannel(request);
+        const body = gaCollectRequestSchema.parse(request.body);
+        const accepted = await deps.enqueueCollect(channel.id, body);
+        return reply.status(202).send({ data: { accepted } });
+    });
+}
+//# sourceMappingURL=routes.storefront.js.map

package/dist/backend/routes.storefront.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.js","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAUtE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,GAAoB,EACpB,IAAmC;IAEnC,2EAA2E;IAC3E,GAAG,CAAC,GAAG,CAAC,4CAA4C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7E,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,GAAG,CAAC,IAAI,CAAC,6CAA6C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/E,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,uCAAuC,EAAE;aAC7F,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/backend/services/cookie-consent-block-seeder.d.ts

@@ -0,0 +1,29 @@
+import type { CmsBlockSeedPort } from '@endora-commerce/contracts';
+/**
+ * Seeds a predefined **CMS block** `cookieconsent.message` (feature 049) that
+ * the storefront cookie-consent banner renders as its message text.
+ *
+ * CMS blocks resolve per sales channel (they require a channel binding), and
+ * the system-default channel is created at boot rather than by migration, so
+ * this runs as an idempotent boot-time seed — the block is inserted once and
+ * bound to any channel not yet bound.
+ *
+ * **The text is this module's; the storage is `cms`'.** Until feature 075 this
+ * file wrote `cms_blocks` and `cms_block_sales_channels` itself, in raw SQL —
+ * two ledgered reaches per table that named no import specifier, so the
+ * boundary they crossed compiled and returned rows (D-87). It hands `cms` a
+ * descriptor now and owns none of the writing.
+ */
+export declare const COOKIE_CONSENT_BLOCK_CODE = "cookieconsent.message";
+/**
+ * What the seed did, so `cms` being off is an **answer** rather than an
+ * exception somebody has to catch.
+ *
+ * `cms-absent` is the operator having switched the CMS off, or a deployment
+ * shipping without it. It costs nothing that is not recovered: deactivation
+ * drops no rows, so a block seeded earlier is still there, and the first boot
+ * after `cms` comes back binds it to whatever channels appeared meanwhile.
+ */
+export type CookieConsentBlockSeedOutcome = 'seeded' | 'cms-absent';
+export declare function ensureCookieConsentBlock(blocks: CmsBlockSeedPort): Promise<CookieConsentBlockSeedOutcome>;
+//# sourceMappingURL=cookie-consent-block-seeder.d.ts.map

package/dist/backend/services/cookie-consent-block-seeder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-consent-block-seeder.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cookie-consent-block-seeder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAsB,MAAM,4BAA4B,CAAC;AAGvF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AA0BjE;;;;;;;;GAQG;AACH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEpE,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,6BAA6B,CAAC,CAcxC"}

package/dist/backend/services/cookie-consent-block-seeder.js

@@ -0,0 +1,51 @@
+import { effectiveState } from '@endora-commerce/platform/kernel';
+/**
+ * Seeds a predefined **CMS block** `cookieconsent.message` (feature 049) that
+ * the storefront cookie-consent banner renders as its message text.
+ *
+ * CMS blocks resolve per sales channel (they require a channel binding), and
+ * the system-default channel is created at boot rather than by migration, so
+ * this runs as an idempotent boot-time seed — the block is inserted once and
+ * bound to any channel not yet bound.
+ *
+ * **The text is this module's; the storage is `cms`'.** Until feature 075 this
+ * file wrote `cms_blocks` and `cms_block_sales_channels` itself, in raw SQL —
+ * two ledgered reaches per table that named no import specifier, so the
+ * boundary they crossed compiled and returned rows (D-87). It hands `cms` a
+ * descriptor now and owns none of the writing.
+ */
+export const COOKIE_CONSENT_BLOCK_CODE = 'cookieconsent.message';
+const LANGUAGES = ['en-US', 'pl-PL'];
+function tree(html) {
+    return {
+        root: { props: {} },
+        content: [{ type: 'cms.Text', props: { id: 'cookieconsent', tiptapContent: null, html } }],
+        zones: {},
+    };
+}
+const CONTENT_ENVELOPE = {
+    schema_version: 1,
+    languages: {
+        'en-US': tree('<p>We use cookies for analytics (Google Analytics). You can accept or reject ' +
+            'statistics. See our <a href="/privacy-policy">Privacy Policy</a>.</p>'),
+        'pl-PL': tree('<p>Używamy plików cookie do analityki (Google Analytics). Możesz zaakceptować lub ' +
+            'odrzucić statystyki. Zobacz naszą <a href="/privacy-policy">Politykę prywatności</a>.</p>'),
+    },
+};
+export async function ensureCookieConsentBlock(blocks) {
+    // First, and outside any `try`: a closed gate throws rather than answering,
+    // so asking after the call is asking too late — and this call happens at
+    // route registration, where a `ModuleDisabledError` has nowhere to go but
+    // into a failed start. An operator switching `cms` off must not stop
+    // `google_analytics` starting (Constitution XVII).
+    if (!effectiveState.isPresent('cms'))
+        return 'cms-absent';
+    await blocks.ensureSeededBlock({
+        code: COOKIE_CONSENT_BLOCK_CODE,
+        name: 'Cookie consent message',
+        languages: LANGUAGES,
+        content: CONTENT_ENVELOPE,
+    });
+    return 'seeded';
+}
+//# sourceMappingURL=cookie-consent-block-seeder.js.map

package/dist/backend/services/cookie-consent-block-seeder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-consent-block-seeder.js","sourceRoot":"","sources":["../../../src/backend/services/cookie-consent-block-seeder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEjE,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAErC,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO;QACL,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACnB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1F,KAAK,EAAE,EAAE;KACV,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAuB;IAC3C,cAAc,EAAE,CAAC;IACjB,SAAS,EAAE;QACT,OAAO,EAAE,IAAI,CACX,+EAA+E;YAC7E,uEAAuE,CAC1E;QACD,OAAO,EAAE,IAAI,CACX,oFAAoF;YAClF,2FAA2F,CAC9F;KACF;CACF,CAAC;AAaF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAwB;IAExB,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,mDAAmD;IACnD,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC1D,MAAM,MAAM,CAAC,iBAAiB,CAAC;QAC7B,IAAI,EAAE,yBAAyB;QAC/B,IAAI,EAAE,wBAAwB;QAC9B,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,gBAAgB;KAC1B,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/backend/services/custom-events.service.d.ts

@@ -0,0 +1,54 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type GaCustomEventCreate, type GaCustomEventUpdate, type GaCustomEventResponse, type GaCustomEventListQuery, type GaStorefrontCustomEvent } from '@endora-commerce/contracts';
+/**
+ * Sales-channel code ⇄ id port. Injected so the module stays isolated from the
+ * sales_channels internals (Principle I).
+ */
+export interface GaChannelPort {
+    idByCode(code: string): Promise<string | null>;
+    codeById(id: string): Promise<string | null>;
+}
+/** Audit context resolved from the request at the route layer. */
+export interface GaAuditContext {
+    actorAdminUserId: string | null;
+}
+export interface GaAuditSink {
+    record(input: {
+        action: string;
+        objectType: string;
+        objectId: string;
+        actorAdminUserId?: string | null;
+        stateBefore?: Record<string, unknown>;
+        stateAfter?: Record<string, unknown>;
+    }): Promise<unknown>;
+}
+/**
+ * CRUD + storefront resolution for GA custom events (feature 049, US3).
+ * Boundary validation (buttonId⇄action, static-field-set) is enforced by the
+ * Zod schemas at the route; this service owns channel-code resolution, the
+ * optimistic-version guard, persistence, and audit.
+ */
+export declare class GaCustomEventsService {
+    private readonly emFactory;
+    private readonly channels;
+    private readonly audit?;
+    /** Fired after a create/update/delete so callers can invalidate caches. */
+    private readonly onChange?;
+    constructor(emFactory: () => EntityManager, channels: GaChannelPort, audit?: GaAuditSink | undefined, 
+    /** Fired after a create/update/delete so callers can invalidate caches. */
+    onChange?: (() => void) | undefined);
+    list(query: GaCustomEventListQuery): Promise<GaCustomEventResponse[]>;
+    get(id: string): Promise<GaCustomEventResponse>;
+    create(input: GaCustomEventCreate, ctx: GaAuditContext): Promise<GaCustomEventResponse>;
+    update(id: string, input: GaCustomEventUpdate, ctx: GaAuditContext): Promise<GaCustomEventResponse>;
+    remove(id: string, ctx: GaAuditContext): Promise<void>;
+    /**
+     * Enabled events applicable to a channel (channel-scoped OR all-channels),
+     * mapped to the storefront shape. Used by GaConfigService.
+     */
+    loadForChannel(salesChannelId: string): Promise<GaStorefrontCustomEvent[]>;
+    private resolveChannelId;
+    private notFound;
+    private toDto;
+}
+//# sourceMappingURL=custom-events.service.d.ts.map

package/dist/backend/services/custom-events.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-events.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/custom-events.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAE7B,MAAM,4BAA4B,CAAC;AAIpC;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC9C;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,KAAK,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACtC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED;;;;;GAKG;AACH,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACvB,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAJT,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,EAAE,aAAa,EACvB,KAAK,CAAC,EAAE,WAAW,YAAA;IACpC,2EAA2E;IAC1D,QAAQ,CAAC,GAAE,MAAM,IAAI,aAAA;IAGlC,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAcrE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAO/C,MAAM,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAuBvF,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,mBAAmB,EAC1B,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,qBAAqB,CAAC;IAiC3B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5D;;;OAGG;IACG,cAAc,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;YAelE,gBAAgB;IAS9B,OAAO,CAAC,QAAQ;YAIF,KAAK;CAgBpB"}

package/dist/backend/services/custom-events.service.js

@@ -0,0 +1,158 @@
+import { ERROR_CODES, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { GaCustomEvent } from '../entities/ga-custom-event.entity.js';
+/**
+ * CRUD + storefront resolution for GA custom events (feature 049, US3).
+ * Boundary validation (buttonId⇄action, static-field-set) is enforced by the
+ * Zod schemas at the route; this service owns channel-code resolution, the
+ * optimistic-version guard, persistence, and audit.
+ */
+export class GaCustomEventsService {
+    emFactory;
+    channels;
+    audit;
+    onChange;
+    constructor(emFactory, channels, audit, 
+    /** Fired after a create/update/delete so callers can invalidate caches. */
+    onChange) {
+        this.emFactory = emFactory;
+        this.channels = channels;
+        this.audit = audit;
+        this.onChange = onChange;
+    }
+    async list(query) {
+        const em = this.emFactory();
+        const where = {};
+        if (query.salesChannelCode !== undefined) {
+            const id = await this.channels.idByCode(query.salesChannelCode);
+            where['salesChannelId'] = id;
+        }
+        if (query.triggerAction !== undefined) {
+            where['triggerAction'] = query.triggerAction;
+        }
+        const rows = await em.find(GaCustomEvent, where, { orderBy: { createdAt: 'asc' } });
+        return Promise.all(rows.map((r) => this.toDto(r)));
+    }
+    async get(id) {
+        const em = this.emFactory();
+        const row = await em.findOne(GaCustomEvent, { id });
+        if (!row)
+            throw this.notFound(id);
+        return this.toDto(row);
+    }
+    async create(input, ctx) {
+        const em = this.emFactory();
+        const salesChannelId = await this.resolveChannelId(input.salesChannelCode);
+        const row = em.create(GaCustomEvent, {
+            salesChannelId,
+            eventName: input.eventName,
+            triggerAction: input.triggerAction,
+            buttonId: input.buttonId ?? null,
+            enabled: input.enabled,
+            fields: input.fields,
+        });
+        await em.persistAndFlush(row);
+        await this.audit?.record({
+            action: 'google_analytics.custom_event.created',
+            objectType: 'ga_custom_event',
+            objectId: row.id,
+            actorAdminUserId: ctx.actorAdminUserId,
+            stateAfter: { eventName: row.eventName, triggerAction: row.triggerAction },
+        });
+        this.onChange?.();
+        return this.toDto(row);
+    }
+    async update(id, input, ctx) {
+        const em = this.emFactory();
+        const row = await em.findOne(GaCustomEvent, { id });
+        if (!row)
+            throw this.notFound(id);
+        if (row.version !== input.version) {
+            throw new HttpError(409, ERROR_CODES.VERSION_CONFLICT, 'Custom event was modified concurrently.');
+        }
+        const before = { eventName: row.eventName, triggerAction: row.triggerAction, enabled: row.enabled };
+        if (input.salesChannelCode !== undefined) {
+            row.salesChannelId =
+                input.salesChannelCode === null ? null : await this.resolveChannelId(input.salesChannelCode);
+        }
+        if (input.eventName !== undefined)
+            row.eventName = input.eventName;
+        if (input.triggerAction !== undefined)
+            row.triggerAction = input.triggerAction;
+        if (input.buttonId !== undefined)
+            row.buttonId = input.buttonId;
+        if (input.enabled !== undefined)
+            row.enabled = input.enabled;
+        if (input.fields !== undefined)
+            row.fields = input.fields;
+        row.version += 1;
+        await em.persistAndFlush(row);
+        await this.audit?.record({
+            action: 'google_analytics.custom_event.updated',
+            objectType: 'ga_custom_event',
+            objectId: row.id,
+            actorAdminUserId: ctx.actorAdminUserId,
+            stateBefore: before,
+            stateAfter: { eventName: row.eventName, triggerAction: row.triggerAction, enabled: row.enabled },
+        });
+        this.onChange?.();
+        return this.toDto(row);
+    }
+    async remove(id, ctx) {
+        const em = this.emFactory();
+        const row = await em.findOne(GaCustomEvent, { id });
+        if (!row)
+            throw this.notFound(id);
+        await em.removeAndFlush(row);
+        await this.audit?.record({
+            action: 'google_analytics.custom_event.deleted',
+            objectType: 'ga_custom_event',
+            objectId: id,
+            actorAdminUserId: ctx.actorAdminUserId,
+            stateBefore: { eventName: row.eventName, triggerAction: row.triggerAction },
+        });
+        this.onChange?.();
+    }
+    /**
+     * Enabled events applicable to a channel (channel-scoped OR all-channels),
+     * mapped to the storefront shape. Used by GaConfigService.
+     */
+    async loadForChannel(salesChannelId) {
+        const em = this.emFactory();
+        const rows = await em.find(GaCustomEvent, { enabled: true, $or: [{ salesChannelId: null }, { salesChannelId }] }, { orderBy: { createdAt: 'asc' } });
+        return rows.map((r) => ({
+            eventName: r.eventName,
+            triggerAction: r.triggerAction,
+            buttonId: r.buttonId,
+            fields: r.fields.map((f) => ({ fieldKey: f.fieldKey, payloadKey: f.payloadKey ?? f.fieldKey })),
+        }));
+    }
+    async resolveChannelId(code) {
+        if (code === undefined)
+            return null;
+        const id = await this.channels.idByCode(code);
+        if (id === null) {
+            throw new HttpError(400, ERROR_CODES.VALIDATION_FAILED, `Unknown sales channel: ${code}`);
+        }
+        return id;
+    }
+    notFound(id) {
+        return new HttpError(404, ERROR_CODES.NOT_FOUND, `Custom event not found: ${id}`);
+    }
+    async toDto(row) {
+        const salesChannelCode = row.salesChannelId === null ? null : await this.channels.codeById(row.salesChannelId);
+        return {
+            id: row.id,
+            salesChannelCode,
+            eventName: row.eventName,
+            triggerAction: row.triggerAction,
+            buttonId: row.buttonId ?? null,
+            enabled: row.enabled,
+            fields: row.fields ?? [],
+            createdAt: row.createdAt.toISOString(),
+            updatedAt: row.updatedAt.toISOString(),
+            version: row.version,
+        };
+    }
+}
+//# sourceMappingURL=custom-events.service.js.map