@endora-commerce/mod-google-tag-manager 0.100.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Endora sp. z o.o. and the Endora Commerce contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,50 @@
+<!-- Generated by `pnpm --filter backend run manifests:generate`. Delete this line to take the file over; a README without it is never regenerated. -->
+
+# @endora-commerce/mod-google-tag-manager
+
+Google Tag Manager integration: per-sales-channel container injection behind the storefront consent decision, a documented commerce dataLayer vocabulary, and an optional server-side tagging relay.
+
+## What this is
+
+An **Endora Commerce module package**. Its module id is `google_tag_manager` — the identity of record in the platform's registries, in its migrations and in its setting, permission and translation codes.
+
+A module is not imported by application code. The platform discovers the extension packages an instance has installed, reads the manifest on the root subpath and composes the module from it, so installing this package and starting the instance is the whole integration.
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@endora-commerce/mod-google-tag-manager` | the module manifest — its id, version, dependencies, settings and activation |
+| `@endora-commerce/mod-google-tag-manager/backend` | the composition root the platform calls, with the entities, services, routes and workers it registers |
+
+## Depends on
+
+Everything below is a **peer** dependency, so the application resolves exactly one copy of each — two copies of a host or of React are a runtime failure rather than a type error. An entry marked *optional* is needed only by the layers that use it.
+
+**Endora packages**
+
+- `@endora-commerce/contracts`
+- `@endora-commerce/platform`
+
+**Third-party**
+
+- `bullmq` ^5
+- `fastify` ^5
+- `ioredis` ^5
+- `zod` ^4
+
+## What the tarball carries
+
+- `dist/` — the compiled JavaScript and its type declarations
+- `i18n/` — the translation bundles this package ships (`en`, `pl`), loaded by the platform
+- `docs/` — the package’s own pages in the Endora Commerce documentation site
+
+## Install
+
+```bash
+pnpm add @endora-commerce/mod-google-tag-manager
+```
+
+## Licence
+
+MIT — the text is in `LICENSE`, beside this file.

package/dist/backend/index.d.ts

@@ -0,0 +1,62 @@
+import type { Redis } from 'ioredis';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+import { StorefrontRevalidator } from '@endora-commerce/platform/http';
+import { GtmConfigService } from './services/gtm-config.service.js';
+import { makeEnqueuer } from './services/ss-relay.service.js';
+/**
+ * `google_tag_manager` — the third of the four ad modules whose subscription
+ * outlived its gate (feature 072, wave 2, T103).
+ *
+ * Same shape as `meta_ads` and `linkedin_ads`: routes wrapped in
+ * `defineModuleRoutes`, but `onSettingChanged` arriving from a root as a bare
+ * `eventBus.on('settings.value_changed', …)`, so a switched-off module still
+ * answered every `google_tag_manager.*` change with an outbound storefront
+ * revalidation. `ctx.subscribe` is `subscribeForModule`, so it stops with the
+ * module now.
+ *
+ * **`moduleQueueRedis` is a separate name from `redis`, on purpose.** This
+ * module builds a BullMQ producer queue when it has a Redis connection, and the
+ * harness deliberately gives it none — `test-server.ts` says why: "a BullMQ
+ * queue built per `setupBackendServer()` is never closed, and this harness is
+ * constructed once per test file inside a single fork", so `/collect` degrades
+ * to 503 there and is contract-tested against its own bare instance instead.
+ * `redis` *is* registered in the harness container, so resolving that would
+ * have silently handed this module a connection the harness spent a comment
+ * explaining it must not have. A distinct name lets a composition say "no queue
+ * here" instead of leaving it to a missing option.
+ *
+ * The worker is registered through `ctx.worker`, which is `defineModuleWorker`
+ * — so the consumer stops with the module too, not only the producer.
+ */
+interface GtmServices {
+    readonly revalidator: StorefrontRevalidator;
+    readonly configService: GtmConfigService;
+    readonly invalidateConfig: () => void;
+    readonly enqueueRelay: ReturnType<typeof makeEnqueuer> | undefined;
+}
+export interface GoogleTagManagerCradle {
+    readonly settingsReadPort: SettingsReadPort;
+    /**
+     * The connection this module may build its relay queue on. Absent in a
+     * composition that does not want a queue — which is the harness, and any
+     * deployment running without Redis.
+     */
+    readonly moduleQueueRedis: Redis | undefined;
+    readonly googleTagManagerServices: GtmServices;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module owns no persisted entity class, so the array is empty, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export declare const entities: readonly never[];
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAiB,MAAM,gCAAgC,CAAC;AAI7E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,UAAU,WAAW;IACnB,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GAAG,SAAS,CAAC;CACpE;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,KAAK,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,wBAAwB,EAAE,WAAW,CAAC;CAChD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CA6DvD;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,KAAK,EAAO,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,70 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { StorefrontRevalidator } from '@endora-commerce/platform/http';
+import { GtmConfigService } from './services/gtm-config.service.js';
+import { createGtmRelayQueue, createGtmRelayWorker } from './services/ss-relay-queue.js';
+import { makeEnqueuer, makeProcessor } from './services/ss-relay.service.js';
+import { SgtmClient } from './services/sgtm-client.js';
+import { registerGoogleTagManagerStorefrontRoutes } from './routes.storefront.js';
+export function registerModule(ctx) {
+    ctx.di.register({
+        googleTagManagerServices: ctx
+            .asFunction(({ moduleQueueRedis }) => {
+            const revalidator = new StorefrontRevalidator({
+                baseUrl: process.env['STOREFRONT_BASE_URL'],
+                secret: process.env['REVALIDATE_SECRET'],
+            });
+            const invalidateConfig = () => {
+                void revalidator.revalidate(['gtm:config']);
+            };
+            const configService = new GtmConfigService(lazyPort(ctx, 'settingsReadPort'));
+            // Producer side: the API needs it to enqueue whether or not this
+            // process also runs the consumer.
+            const relayQueue = moduleQueueRedis
+                ? createGtmRelayQueue(moduleQueueRedis)
+                : undefined;
+            return {
+                revalidator,
+                configService,
+                invalidateConfig,
+                enqueueRelay: relayQueue ? makeEnqueuer(relayQueue) : undefined,
+            };
+        })
+            .singleton(),
+    });
+    // An operator's edit propagates immediately rather than after the 300 s TTL
+    // (FR-009) — while the module is on.
+    ctx.subscribe('settings.value_changed', (payload) => {
+        const settingCode = payload.settingCode;
+        if (typeof settingCode !== 'string' || !settingCode.startsWith('google_tag_manager.'))
+            return;
+        ctx.cradle().googleTagManagerServices.invalidateConfig();
+    });
+    ctx.routes(async (app) => {
+        const { googleTagManagerServices, settingsReadPort, moduleQueueRedis } = ctx.cradle();
+        googleTagManagerServices.revalidator.setLogger(app.log);
+        // Queue consumer (Principle X): a separable worker entrypoint, gated on
+        // role. `ctx.worker` wraps it in `defineModuleWorker`.
+        if (process.env['BACKEND_ROLE'] !== 'api' && moduleQueueRedis) {
+            ctx.worker(createGtmRelayWorker(moduleQueueRedis, makeProcessor({ settings: settingsReadPort, client: new SgtmClient() })), { logger: app.log });
+        }
+        await registerGoogleTagManagerStorefrontRoutes(app, {
+            configService: googleTagManagerServices.configService,
+            ...(googleTagManagerServices.enqueueRelay
+                ? { enqueueRelay: googleTagManagerServices.enqueueRelay }
+                : {}),
+        });
+    });
+}
+/**
+ * The module owns no persisted entity class, so the array is empty, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAE5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,wCAAwC,EAAE,MAAM,wBAAwB,CAAC;AA8ClF,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,wBAAwB,EAAE,GAAG;aAC1B,UAAU,CACT,CAAC,EAAE,gBAAgB,EAA0B,EAAe,EAAE;YAC5D,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC;gBAC5C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBAC3C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;aACzC,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,GAAS,EAAE;gBAClC,KAAK,WAAW,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAmB,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAChG,iEAAiE;YACjE,kCAAkC;YAClC,MAAM,UAAU,GAAG,gBAAgB;gBACjC,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;gBACvC,CAAC,CAAC,SAAS,CAAC;YACd,OAAO;gBACL,WAAW;gBACX,aAAa;gBACb,gBAAgB;gBAChB,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;aAChE,CAAC;QACJ,CAAC,CACF;aACA,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,4EAA4E;IAC5E,qCAAqC;IACrC,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,CAAC,OAAO,EAAE,EAAE;QAClD,MAAM,WAAW,GAAI,OAAqC,CAAC,WAAW,CAAC;QACvE,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAAE,OAAO;QAC9F,GAAG,CAAC,MAAM,EAA0B,CAAC,wBAAwB,CAAC,gBAAgB,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GACpE,GAAG,CAAC,MAAM,EAA0B,CAAC;QACvC,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAExD,wEAAwE;QACxE,uDAAuD;QACvD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,IAAI,gBAAgB,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CACR,oBAAoB,CAClB,gBAAgB,EAChB,aAAa,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CACxE,EACD,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CACpB,CAAC;QACJ,CAAC;QAED,MAAM,wCAAwC,CAAC,GAAG,EAAE;YAClD,aAAa,EAAE,wBAAwB,CAAC,aAAa;YACrD,GAAG,CAAC,wBAAwB,CAAC,YAAY;gBACvC,CAAC,CAAC,EAAE,YAAY,EAAE,wBAAwB,CAAC,YAAY,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAqB,EAAE,CAAC"}

package/dist/backend/routes.storefront.d.ts

@@ -0,0 +1,16 @@
+import type { FastifyInstance } from 'fastify';
+import type { GtmConfigService } from './services/gtm-config.service.js';
+import type { GtmCollectEnqueuer } from './services/ss-relay-queue.js';
+export interface GoogleTagManagerStorefrontDeps {
+    configService: GtmConfigService;
+    /** Producer that enqueues server-side relay jobs (US3). Absent ⇒ 503. */
+    enqueueRelay?: GtmCollectEnqueuer;
+}
+/**
+ * Public storefront routes for the Google Tag Manager module (feature 066).
+ * Wrapped by `defineModuleRoutes` in plugin.ts so they 503 when the module is
+ * disabled. The sales channel comes from the shared resolver middleware
+ * (Principle XII) — never from the request body.
+ */
+export declare function registerGoogleTagManagerStorefrontRoutes(app: FastifyInstance, deps: GoogleTagManagerStorefrontDeps): Promise<void>;
+//# sourceMappingURL=routes.storefront.d.ts.map

package/dist/backend/routes.storefront.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.d.ts","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,WAAW,8BAA8B;IAC7C,aAAa,EAAE,gBAAgB,CAAC;IAChC,yEAAyE;IACzE,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAsB,wCAAwC,CAC5D,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/backend/routes.storefront.js

@@ -0,0 +1,40 @@
+import { gtmCollectRequestSchema } from '@endora-commerce/contracts';
+import { getResolvedChannel } from '@endora-commerce/platform/kernel';
+/**
+ * Public storefront routes for the Google Tag Manager module (feature 066).
+ * Wrapped by `defineModuleRoutes` in plugin.ts so they 503 when the module is
+ * disabled. The sales channel comes from the shared resolver middleware
+ * (Principle XII) — never from the request body.
+ */
+export async function registerGoogleTagManagerStorefrontRoutes(app, deps) {
+    app.get('/api/v1/storefront/google-tag-manager/config', async (request, reply) => {
+        const channel = getResolvedChannel(request);
+        const config = await deps.configService.getConfig(channel.id);
+        return reply.send({ data: config });
+    });
+    // Server-side relay ingest — producer only (Principle X): validate → enqueue
+    // → 202. Nothing is forwarded inside the shopper's request (FR-029).
+    app.post('/api/v1/storefront/google-tag-manager/collect', async (request, reply) => {
+        if (!deps.enqueueRelay) {
+            return reply.status(503).send({
+                error: {
+                    code: 'server_side_unavailable',
+                    message: 'Server-side tagging is not available.',
+                },
+            });
+        }
+        const channel = getResolvedChannel(request);
+        // The schema is the enforcement point for the closed event allow-list: an
+        // event name outside it is a 400 and is never enqueued (FR-024 / FR-025).
+        const body = gtmCollectRequestSchema.parse(request.body);
+        // Read from the connection and the headers, never from the body — a client
+        // must not be able to nominate someone else's IP or user agent.
+        const userAgent = request.headers['user-agent'];
+        const accepted = await deps.enqueueRelay(channel.id, body, {
+            ...(request.ip ? { ip: request.ip } : {}),
+            ...(userAgent ? { userAgent } : {}),
+        });
+        return reply.status(202).send({ data: { accepted } });
+    });
+}
+//# sourceMappingURL=routes.storefront.js.map

package/dist/backend/routes.storefront.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.js","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAUtE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,GAAoB,EACpB,IAAoC;IAEpC,GAAG,CAAC,GAAG,CAAC,8CAA8C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/E,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,qEAAqE;IACrE,GAAG,CAAC,IAAI,CAAC,+CAA+C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjF,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE;oBACL,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,uCAAuC;iBACjD;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzD,2EAA2E;QAC3E,gEAAgE;QAChE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE;YACzD,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/backend/services/gtm-config.service.d.ts

@@ -0,0 +1,27 @@
+import { type GtmStorefrontConfig } from '@endora-commerce/contracts';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+/**
+ * Resolves the per-sales-channel Google Tag Manager configuration exposed to
+ * the storefront.
+ *
+ * A blank or malformed container ID means the channel is untracked (FR-004 /
+ * FR-005): the returned config is fully disabled regardless of the master
+ * switch, so a typo can never reach a `<script src>`. `requireConsent` survives
+ * every disabled branch, because the storefront's shared consent gate reasons
+ * about the channel even when this module contributes nothing.
+ *
+ * Every setting read degrades to its documented default rather than throwing —
+ * an incomplete settings catalogue must not be able to fail a storefront
+ * render.
+ *
+ * The server container address is deliberately absent from the result: the
+ * browser only needs to know *that* it should relay, never *where* to.
+ */
+export declare class GtmConfigService {
+    private readonly settings;
+    constructor(settings: SettingsReadPort);
+    getConfig(salesChannelId: string): Promise<GtmStorefrontConfig>;
+    private readBool;
+    private readString;
+}
+//# sourceMappingURL=gtm-config.service.d.ts.map

package/dist/backend/services/gtm-config.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gtm-config.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/gtm-config.service.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,gBAAgB;IAEjD,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;YAmCvD,QAAQ;YAYR,UAAU;CAWzB"}

package/dist/backend/services/gtm-config.service.js

@@ -0,0 +1,65 @@
+import { z } from 'zod';
+import { GOOGLE_TAG_MANAGER_SETTING_CODES, GTM_DISABLED_CONFIG, gtmContainerIdSchema, } from '@endora-commerce/contracts';
+/**
+ * Resolves the per-sales-channel Google Tag Manager configuration exposed to
+ * the storefront.
+ *
+ * A blank or malformed container ID means the channel is untracked (FR-004 /
+ * FR-005): the returned config is fully disabled regardless of the master
+ * switch, so a typo can never reach a `<script src>`. `requireConsent` survives
+ * every disabled branch, because the storefront's shared consent gate reasons
+ * about the channel even when this module contributes nothing.
+ *
+ * Every setting read degrades to its documented default rather than throwing —
+ * an incomplete settings catalogue must not be able to fail a storefront
+ * render.
+ *
+ * The server container address is deliberately absent from the result: the
+ * browser only needs to know *that* it should relay, never *where* to.
+ */
+export class GtmConfigService {
+    settings;
+    constructor(settings) {
+        this.settings = settings;
+    }
+    async getConfig(salesChannelId) {
+        const [enabled, containerRaw, requireConsent] = await Promise.all([
+            this.readBool(GOOGLE_TAG_MANAGER_SETTING_CODES.ENABLED, salesChannelId, false),
+            this.readString(GOOGLE_TAG_MANAGER_SETTING_CODES.CONTAINER_ID, salesChannelId, ''),
+            this.readBool(GOOGLE_TAG_MANAGER_SETTING_CODES.REQUIRE_CONSENT, salesChannelId, true),
+        ]);
+        const containerId = gtmContainerIdSchema.safeParse(containerRaw.trim());
+        if (!enabled || !containerId.success) {
+            return { ...GTM_DISABLED_CONFIG, requireConsent };
+        }
+        const [serverSideEnabled, serverContainerUrl] = await Promise.all([
+            this.readBool(GOOGLE_TAG_MANAGER_SETTING_CODES.SERVER_SIDE_ENABLED, salesChannelId, false),
+            this.readString(GOOGLE_TAG_MANAGER_SETTING_CODES.SERVER_CONTAINER_URL, salesChannelId, ''),
+        ]);
+        return {
+            enabled: true,
+            containerId: containerId.data,
+            requireConsent,
+            // Server-side tagging with no destination is inert: the channel stays on
+            // the browser path rather than losing events (FR-031).
+            serverSide: serverSideEnabled && serverContainerUrl.trim() !== '',
+        };
+    }
+    async readBool(code, salesChannelId, fallback) {
+        try {
+            return await this.settings.get(code, salesChannelId, z.boolean());
+        }
+        catch {
+            return fallback;
+        }
+    }
+    async readString(code, salesChannelId, fallback) {
+        try {
+            return await this.settings.get(code, salesChannelId, z.string());
+        }
+        catch {
+            return fallback;
+        }
+    }
+}
+//# sourceMappingURL=gtm-config.service.js.map

package/dist/backend/services/gtm-config.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gtm-config.service.js","sourceRoot":"","sources":["../../../src/backend/services/gtm-config.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;IAAG,CAAC;IAE3D,KAAK,CAAC,SAAS,CAAC,cAAsB;QACpC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC;YAC9E,IAAI,CAAC,UAAU,CAAC,gCAAgC,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC;YAClF,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,eAAe,EAAE,cAAc,EAAE,IAAI,CAAC;SACtF,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,EAAE,GAAG,mBAAmB,EAAE,cAAc,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChE,IAAI,CAAC,QAAQ,CACX,gCAAgC,CAAC,mBAAmB,EACpD,cAAc,EACd,KAAK,CACN;YACD,IAAI,CAAC,UAAU,CACb,gCAAgC,CAAC,oBAAoB,EACrD,cAAc,EACd,EAAE,CACH;SACF,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,cAAc;YACd,yEAAyE;YACzE,uDAAuD;YACvD,UAAU,EAAE,iBAAiB,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE;SAClE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,IAAY,EACZ,cAAsB,EACtB,QAAiB;QAEjB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,IAAY,EACZ,cAAsB,EACtB,QAAgB;QAEhB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/dist/backend/services/sgtm-client.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Client for the operator's server-side Google Tag Manager container (feature
+ * 066, US3).
+ *
+ * Posts one event to `{server_container_url}{server_ingest_path}` as a JSON
+ * envelope the container's ingest client parses — Google's Data Client (default
+ * path `/data`) or an equivalent custom client. No credentials are sent: an
+ * sGTM ingest endpoint is a public collection endpoint by design, exactly like
+ * `google-analytics.com/g/collect`.
+ *
+ * Like `Ga4MpClient` and unlike the legacy fire-and-forget forwarder, this
+ * client THROWS on a non-2xx response or a transport error so the BullMQ worker
+ * retries (Principle X / FR-027). `fetchFn` is injectable, so no test touches
+ * the network.
+ */
+import type { GtmPageContext } from '@endora-commerce/contracts';
+export interface SgtmDestination {
+    /** Base URL of the server container, e.g. `https://sgtm.example.com`. */
+    baseUrl: string;
+    /** Request path the container's ingest client claims. Blank ⇒ `/data`. */
+    ingestPath: string;
+}
+export interface SgtmEvent {
+    eventId: string;
+    clientId: string;
+    name: string;
+    params: Record<string, string | number | boolean>;
+    consent: {
+        analyticsStorage: 'granted' | 'denied';
+    };
+    page: GtmPageContext;
+    /** Present only when the relay processor kept them (granted consent). */
+    ip?: string;
+    userAgent?: string;
+}
+export interface SgtmClientOptions {
+    fetchFn?: typeof fetch;
+    timeoutMs?: number;
+}
+export declare class SgtmClient {
+    private readonly options;
+    constructor(options?: SgtmClientOptions);
+    get timeoutMs(): number;
+    send(dest: SgtmDestination, event: SgtmEvent): Promise<void>;
+}
+//# sourceMappingURL=sgtm-client.d.ts.map

package/dist/backend/services/sgtm-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sgtm-client.d.ts","sourceRoot":"","sources":["../../../src/backend/services/sgtm-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAClD,OAAO,EAAE;QAAE,gBAAgB,EAAE,SAAS,GAAG,QAAQ,CAAA;KAAE,CAAC;IACpD,IAAI,EAAE,cAAc,CAAC;IACrB,yEAAyE;IACzE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA4BD,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,iBAAsB;IAE5D,IAAI,SAAS,IAAI,MAAM,CAEtB;IAEK,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;CA4CnE"}

package/dist/backend/services/sgtm-client.js

@@ -0,0 +1,69 @@
+/**
+ * Client for the operator's server-side Google Tag Manager container (feature
+ * 066, US3).
+ *
+ * Posts one event to `{server_container_url}{server_ingest_path}` as a JSON
+ * envelope the container's ingest client parses — Google's Data Client (default
+ * path `/data`) or an equivalent custom client. No credentials are sent: an
+ * sGTM ingest endpoint is a public collection endpoint by design, exactly like
+ * `google-analytics.com/g/collect`.
+ *
+ * Like `Ga4MpClient` and unlike the legacy fire-and-forget forwarder, this
+ * client THROWS on a non-2xx response or a transport error so the BullMQ worker
+ * retries (Principle X / FR-027). `fetchFn` is injectable, so no test touches
+ * the network.
+ */
+const DEFAULT_INGEST_PATH = '/data';
+const DEFAULT_TIMEOUT_MS = 10_000;
+export class SgtmClient {
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    get timeoutMs() {
+        return this.options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    }
+    async send(dest, event) {
+        const fetchFn = this.options.fetchFn ?? globalThis.fetch;
+        const base = dest.baseUrl.trim().replace(/\/+$/, '');
+        const rawPath = dest.ingestPath.trim() || DEFAULT_INGEST_PATH;
+        const path = rawPath.startsWith('/') ? rawPath : `/${rawPath}`;
+        const granted = event.consent.analyticsStorage === 'granted';
+        const envelope = {
+            event_name: event.name,
+            client_id: event.clientId,
+            event_id: event.eventId,
+            page_location: event.page.location,
+            ...(event.page.referrer ? { page_referrer: event.page.referrer } : {}),
+            ...(event.page.title ? { page_title: event.page.title } : {}),
+            ...(event.page.language ? { language: event.page.language } : {}),
+            consent: { analytics_storage: event.consent.analyticsStorage },
+            // Second enforcement point for FR-030: the processor already strips them
+            // on denied consent, and the last gate before the wire refuses to send
+            // them regardless of what reached it.
+            ...(granted && event.ip ? { ip_override: event.ip } : {}),
+            ...(granted && event.userAgent ? { user_agent: event.userAgent } : {}),
+        };
+        // Params are flattened at the top level, but the envelope wins on a
+        // collision — a caller-supplied `event_name` must not be able to redirect
+        // the operator's tags.
+        const body = { ...event.params, ...envelope };
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const res = await fetchFn(`${base}${path}`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                signal: controller.signal,
+                body: JSON.stringify(body),
+            });
+            if (!res.ok) {
+                throw new Error(`sGTM delivery failed with status ${res.status}`);
+            }
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+}
+//# sourceMappingURL=sgtm-client.js.map

package/dist/backend/services/sgtm-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sgtm-client.js","sourceRoot":"","sources":["../../../src/backend/services/sgtm-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA4BH,MAAM,mBAAmB,GAAG,OAAO,CAAC;AACpC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAyBlC,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,UAA6B,EAAE;QAA/B,YAAO,GAAP,OAAO,CAAwB;IAAG,CAAC;IAEhE,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAqB,EAAE,KAAgB;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC;QAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;QAE7D,MAAM,QAAQ,GAAoB;YAChC,UAAU,EAAE,KAAK,CAAC,IAAI;YACtB,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAClC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE;YAC9D,yEAAyE;YACzE,uEAAuE;YACvE,sCAAsC;YACtC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;QAEF,oEAAoE;QACpE,0EAA0E;QAC1E,uBAAuB;QACvB,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QAE9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/backend/services/ss-relay-queue.d.ts

@@ -0,0 +1,46 @@
+import { Queue, Worker, type Processor, type QueueOptions, type WorkerOptions } from 'bullmq';
+import type { Redis } from 'ioredis';
+import type { GtmCollectRequest, GtmPageContext } from '@endora-commerce/contracts';
+/**
+ * BullMQ queue for the server-side Google Tag Manager relay (feature 066, US3 /
+ * Principle X). The storefront `/collect` route is a pure producer: it
+ * validates and enqueues one job per event, and the worker forwards each to the
+ * operator's server container, throwing on failure so BullMQ retries.
+ *
+ * Nothing here is persisted in PostgreSQL — the relay is stateless, and
+ * `removeOnFail` retention is what makes an exhausted delivery observable
+ * (FR-027).
+ */
+export interface GtmRelayJobData {
+    /** Also the BullMQ `jobId` — the idempotency key across retries (FR-028). */
+    eventId: string;
+    salesChannelId: string;
+    clientId: string;
+    event: {
+        name: string;
+        params: Record<string, string | number | boolean>;
+    };
+    consent: {
+        analyticsStorage: 'granted' | 'denied';
+    };
+    page: GtmPageContext;
+    /** Captured server-side at ingest; forwarded only with granted consent (FR-030). */
+    ip?: string;
+    userAgent?: string;
+    /** Stamped by the producer, so retry latency does not distort the timing. */
+    occurredAt: string;
+}
+/** Server-observed request context the browser is never trusted to supply. */
+export interface GtmIngestContext {
+    ip?: string;
+    userAgent?: string;
+}
+/**
+ * Producer callback exposed to the storefront route. Assigns an `eventId` per
+ * event, enqueues a relay job for each, and returns how many were accepted.
+ */
+export type GtmCollectEnqueuer = (salesChannelId: string, request: GtmCollectRequest, context: GtmIngestContext) => Promise<number>;
+export declare const GTM_RELAY_QUEUE_NAME = "google_tag_manager.ss.relay";
+export declare function createGtmRelayQueue(redis: Redis, overrides?: Partial<QueueOptions>): Queue<GtmRelayJobData>;
+export declare function createGtmRelayWorker(redis: Redis, processor: Processor<GtmRelayJobData>, overrides?: Partial<WorkerOptions>): Worker<GtmRelayJobData>;
+//# sourceMappingURL=ss-relay-queue.d.ts.map

package/dist/backend/services/ss-relay-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ss-relay-queue.d.ts","sourceRoot":"","sources":["../../../src/backend/services/ss-relay-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,QAAQ,CAAC;AAE9F,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAA;KAAE,CAAC;IAC3E,OAAO,EAAE;QAAE,gBAAgB,EAAE,SAAS,GAAG,QAAQ,CAAA;KAAE,CAAC;IACpD,IAAI,EAAE,cAAc,CAAC;IACrB,oFAAoF;IACpF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAC/B,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,eAAO,MAAM,oBAAoB,gCAAgC,CAAC;AAKlE,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,KAAK,EACZ,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAChC,KAAK,CAAC,eAAe,CAAC,CAYxB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,SAAS,CAAC,eAAe,CAAC,EACrC,SAAS,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GACjC,MAAM,CAAC,eAAe,CAAC,CAazB"}

package/dist/backend/services/ss-relay-queue.js

@@ -0,0 +1,29 @@
+import { Queue, Worker } from 'bullmq';
+import { enterSystemScope } from '@endora-commerce/platform/kernel';
+export const GTM_RELAY_QUEUE_NAME = 'google_tag_manager.ss.relay';
+const DEFAULT_ATTEMPTS = 8;
+const DEFAULT_BACKOFF = { type: 'exponential', delay: 1_000 };
+export function createGtmRelayQueue(redis, overrides) {
+    const options = {
+        connection: redis,
+        defaultJobOptions: {
+            attempts: DEFAULT_ATTEMPTS,
+            backoff: DEFAULT_BACKOFF,
+            removeOnComplete: { count: 500 },
+            removeOnFail: { count: 5_000 },
+        },
+        ...overrides,
+    };
+    return new Queue(GTM_RELAY_QUEUE_NAME, options);
+}
+export function createGtmRelayWorker(redis, processor, overrides) {
+    const options = {
+        connection: redis,
+        concurrency: 8,
+        ...overrides,
+    };
+    // Feature 072 (T033) — the job establishes its own scope; it established
+    // nothing before.
+    return new Worker(GTM_RELAY_QUEUE_NAME, (job) => enterSystemScope('google_tag_manager: server-side relay', () => processor(job)), options);
+}
+//# sourceMappingURL=ss-relay-queue.js.map

package/dist/backend/services/ss-relay-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ss-relay-queue.js","sourceRoot":"","sources":["../../../src/backend/services/ss-relay-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAyD,MAAM,QAAQ,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AA6CpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAElE,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,aAAsB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAEvE,MAAM,UAAU,mBAAmB,CACjC,KAAY,EACZ,SAAiC;IAEjC,MAAM,OAAO,GAAiB;QAC5B,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE;YACjB,QAAQ,EAAE,gBAAgB;YAC1B,OAAO,EAAE,eAAe;YACxB,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;YAChC,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;SAC/B;QACD,GAAG,SAAS;KACb,CAAC;IACF,OAAO,IAAI,KAAK,CAAkB,oBAAoB,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAY,EACZ,SAAqC,EACrC,SAAkC;IAElC,MAAM,OAAO,GAAkB;QAC7B,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,CAAC;QACd,GAAG,SAAS;KACb,CAAC;IACF,yEAAyE;IACzE,kBAAkB;IAClB,OAAO,IAAI,MAAM,CACf,oBAAoB,EACpB,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,uCAAuC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EACxF,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/backend/services/ss-relay.service.d.ts

@@ -0,0 +1,24 @@
+import type { Processor, Queue } from 'bullmq';
+import { type GtmCollectRequest } from '@endora-commerce/contracts';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+import type { GtmIngestContext, GtmRelayJobData } from './ss-relay-queue.js';
+import type { SgtmClient } from './sgtm-client.js';
+/**
+ * Server-side relay orchestration (feature 066, US3).
+ *
+ * - `makeEnqueuer` returns the producer used by the `/collect` route: it
+ *   assigns one uuid `eventId` per event (the idempotency key and the BullMQ
+ *   `jobId`) and enqueues one relay job each. Pure producer — no outbound call
+ *   happens in the shopper's request (Principle X / FR-029).
+ * - `makeProcessor` returns the BullMQ processor: it resolves the channel's
+ *   server container address from Settings, drops the visitor's IP and user
+ *   agent unless consent was granted (FR-030), and forwards through the sGTM
+ *   client, letting a failure throw so BullMQ retries.
+ */
+export declare function makeEnqueuer(queue: Queue<GtmRelayJobData>): (salesChannelId: string, request: GtmCollectRequest, context: GtmIngestContext) => Promise<number>;
+export interface GtmRelayProcessorDeps {
+    settings: SettingsReadPort;
+    client: SgtmClient;
+}
+export declare function makeProcessor(deps: GtmRelayProcessorDeps): Processor<GtmRelayJobData>;
+//# sourceMappingURL=ss-relay.service.d.ts.map

package/dist/backend/services/ss-relay.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ss-relay.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/ss-relay.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAoC,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACtG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AAE9D;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,eAAe,CAAC,IAEtD,gBAAgB,MAAM,EACtB,SAAS,iBAAiB,EAC1B,SAAS,gBAAgB,KACxB,OAAO,CAAC,MAAM,CAAC,CA4BnB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,qBAAqB,GAAG,SAAS,CAAC,eAAe,CAAC,CAmCrF"}