@jwiedeman/gtm-kit-astro 1.2.1 → 1.3.0

package/dist/components/index.cjs

@@ -6,6 +6,9 @@ var gtmKit = require('@jwiedeman/gtm-kit');
 var isValidJsIdentifier = (value) => {
   return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(value);
 };
+var escapeJsString = (value) => {
+  return value.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/</g, "\\x3c").replace(/>/g, "\\x3e").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+};
 var filterNullish = (obj) => Object.fromEntries(Object.entries(obj).filter(([, v]) => v != null));
 var generateScriptTags = (config) => {
   const {
@@ -19,6 +22,11 @@ var generateScriptTags = (config) => {
   if (!normalized.length) {
     throw new Error("At least one GTM container is required.");
   }
+  if (!isValidJsIdentifier(dataLayerName)) {
+    throw new Error(
+      `Invalid dataLayerName: "${dataLayerName}". Must be a valid JavaScript identifier.`
+    );
+  }
   return normalized.map((container) => {
     if (!container.id) {
       throw new Error("Container id is required.");
@@ -29,16 +37,47 @@ var generateScriptTags = (config) => {
     };
     const src = gtmKit.buildGtmScriptUrl(host, container.id, params, dataLayerName);
     const { async: asyncAttr, defer, nonce, ...restAttributes } = scriptAttributes != null ? scriptAttributes : {};
+    escapeJsString(container.id);
+    const initScript = `window.${dataLayerName}=window.${dataLayerName}||[];window.${dataLayerName}.push({'gtm.start':new Date().getTime(),event:'gtm.js'});`;
     return {
       id: container.id,
       src,
       async: asyncAttr != null ? asyncAttr : true,
       defer,
       nonce,
-      attributes: filterNullish(restAttributes)
+      attributes: filterNullish(restAttributes),
+      initScript
     };
   });
 };
+var generateGtmScript = (config) => {
+  const {
+    containers,
+    host = gtmKit.DEFAULT_GTM_HOST,
+    defaultQueryParams,
+    dataLayerName = gtmKit.DEFAULT_DATA_LAYER_NAME
+  } = config;
+  const normalized = gtmKit.normalizeContainers(containers);
+  if (!normalized.length) {
+    throw new Error("At least one GTM container is required.");
+  }
+  if (!isValidJsIdentifier(dataLayerName)) {
+    throw new Error(
+      `Invalid dataLayerName: "${dataLayerName}". Must be a valid JavaScript identifier.`
+    );
+  }
+  return normalized.map((container) => {
+    if (!container.id) {
+      throw new Error("Container id is required.");
+    }
+    const escapedId = escapeJsString(container.id);
+    dataLayerName !== gtmKit.DEFAULT_DATA_LAYER_NAME ? `,'${escapeJsString(dataLayerName)}'` : "";
+    const mergedParams = { ...defaultQueryParams, ...container.queryParams };
+    const extraParams = Object.entries(mergedParams).filter(([, v]) => v != null).map(([k, v]) => `&${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`).join("");
+    const hostUrl = (host != null ? host : gtmKit.DEFAULT_GTM_HOST).replace(/\/+$/, "");
+    return `(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='${escapeJsString(hostUrl)}/gtm.js?id='+i+dl${extraParams ? `+'${escapeJsString(extraParams)}'` : ""};f.parentNode.insertBefore(j,f);})(window,document,'script','${escapeJsString(dataLayerName)}','${escapedId}');`;
+  }).join("\n");
+};
 var generateNoscriptTags = (config) => {
   const {
     containers,
@@ -104,6 +143,7 @@ Object.defineProperty(exports, 'normalizeContainers', {
   get: function () { return gtmKit.normalizeContainers; }
 });
 exports.generateDataLayerScript = generateDataLayerScript;
+exports.generateGtmScript = generateGtmScript;
 exports.generateNoscriptTags = generateNoscriptTags;
 exports.generateScriptTags = generateScriptTags;
 //# sourceMappingURL=out.js.map

package/dist/components/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/helpers.ts","../../src/components/index.ts"],"names":["normalizeContainers","normalizeContainer","buildGtmScriptUrl","buildGtmNoscriptUrl"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBA,IAAM,sBAAsB,CAAC,UAA2B;AAE7D,SAAO,6BAA6B,KAAK,KAAK;AAChD;AAoBA,IAAM,gBAAgB,CAAoC,QACxD,OAAO,YAAY,OAAO,QAAQ,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC;AAuB9D,IAAM,qBAAqB,CAAC,WAA6C;AAC9E,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAG,UAAU;AAAA,IACf;AAEA,UAAM,MAAM,kBAAkB,MAAM,UAAU,IAAI,QAAQ,aAAa;AACvE,UAAM,EAAE,OAAO,WAAW,OAAO,OAAO,GAAG,eAAe,IAAI,8CAAoB,CAAC;AAEnF,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd;AAAA,MACA,OAAO,gCAAa;AAAA,MACpB;AAAA,MACA;AAAA,MACA,YAAY,cAAc,cAAc;AAAA,IAC1C;AAAA,EACF,CAAC;AACH;AAYO,IAAM,uBAAuB,CAClC,WAGsB;AACtB,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAG,UAAU;AAAA,IACf;AAEA,UAAM,MAAM,oBAAoB,MAAM,UAAU,IAAI,QAAQ,aAAa;AACzE,UAAM,mBAAmB;AAAA,MACvB,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAGA,UAAM,aAAa,OAAO;AAAA,MACxB,OAAO,QAAQ,gBAAgB,EAC5B,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAAA,IACnC;AAEA,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAMO,IAAM,0BAA0B,CAAC,gBAAwB,4BAAoC;AAClG,MAAI,CAAC,oBAAoB,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,2BAA2B,aAAa;AAAA,IAC1C;AAAA,EACF;AACA,SAAO,UAAU,aAAa,WAAW,aAAa;AACxD;;;ACnLA;AAAA,EACE,uBAAAA;AAAA,EACA,sBAAAC;AAAA,EACqB,qBAArBC;AAAA,EACuB,uBAAvBC;AAAA,OACK","sourcesContent":["import {\n  DEFAULT_DATA_LAYER_NAME,\n  DEFAULT_GTM_HOST,\n  DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n  normalizeContainer,\n  normalizeContainers,\n  buildGtmScriptUrl,\n  buildGtmNoscriptUrl\n} from '@jwiedeman/gtm-kit';\nimport type { ContainerConfigInput, ScriptAttributes } from '@jwiedeman/gtm-kit';\n\n// Re-export for convenience\nexport {\n  DEFAULT_GTM_HOST,\n  DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n  normalizeContainer,\n  normalizeContainers,\n  buildGtmScriptUrl as buildScriptUrl,\n  buildGtmNoscriptUrl as buildNoscriptUrl\n};\n\n/**\n * Validate that a string is a valid JavaScript identifier.\n * This prevents XSS attacks through dataLayerName injection.\n */\nexport const isValidJsIdentifier = (value: string): boolean => {\n  // Must be a valid JS identifier: starts with letter/$/_, followed by letters/digits/$/_\n  return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(value);\n};\n\n/**\n * Escape a string for safe use in JavaScript string literals.\n * Prevents XSS when interpolating user-provided values into inline scripts.\n */\nexport const escapeJsString = (value: string): string => {\n  return value\n    .replace(/\\\\/g, '\\\\\\\\')\n    .replace(/'/g, \"\\\\'\")\n    .replace(/\"/g, '\\\\\"')\n    .replace(/\\n/g, '\\\\n')\n    .replace(/\\r/g, '\\\\r')\n    .replace(/</g, '\\\\x3c')\n    .replace(/>/g, '\\\\x3e')\n    .replace(/\\u2028/g, '\\\\u2028')\n    .replace(/\\u2029/g, '\\\\u2029');\n};\n\n/** Filter out null/undefined values from an object */\nconst filterNullish = <T extends Record<string, unknown>>(obj: T): T =>\n  Object.fromEntries(Object.entries(obj).filter(([, v]) => v != null)) as T;\n\nexport interface GtmScriptConfig {\n  containers: ContainerConfigInput | ContainerConfigInput[];\n  host?: string;\n  defaultQueryParams?: Record<string, string | number | boolean>;\n  scriptAttributes?: ScriptAttributes;\n  dataLayerName?: string;\n}\n\nexport interface ScriptTagData {\n  id: string;\n  src: string;\n  async: boolean;\n  defer?: boolean;\n  nonce?: string;\n  attributes: Record<string, string | boolean>;\n}\n\n/**\n * Generate script tag data for GTM containers.\n * Used by Astro components to render script tags.\n */\nexport const generateScriptTags = (config: GtmScriptConfig): ScriptTagData[] => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    scriptAttributes,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const params = {\n      ...defaultQueryParams,\n      ...container.queryParams\n    };\n\n    const src = buildGtmScriptUrl(host, container.id, params, dataLayerName);\n    const { async: asyncAttr, defer, nonce, ...restAttributes } = scriptAttributes ?? {};\n\n    return {\n      id: container.id,\n      src,\n      async: asyncAttr ?? true,\n      defer,\n      nonce,\n      attributes: filterNullish(restAttributes) as Record<string, string | boolean>\n    };\n  });\n};\n\nexport interface NoscriptTagData {\n  id: string;\n  src: string;\n  attributes: Record<string, string>;\n}\n\n/**\n * Generate noscript iframe data for GTM containers.\n * Used by Astro components to render noscript fallbacks.\n */\nexport const generateNoscriptTags = (\n  config: Omit<GtmScriptConfig, 'scriptAttributes'> & {\n    iframeAttributes?: Record<string, string | number | boolean>;\n  }\n): NoscriptTagData[] => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    iframeAttributes,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const params = {\n      ...defaultQueryParams,\n      ...container.queryParams\n    };\n\n    const src = buildGtmNoscriptUrl(host, container.id, params, dataLayerName);\n    const mergedAttributes = {\n      ...DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n      ...iframeAttributes\n    };\n\n    // Filter nullish values and convert to strings\n    const attributes = Object.fromEntries(\n      Object.entries(mergedAttributes)\n        .filter(([, v]) => v != null)\n        .map(([k, v]) => [k, String(v)])\n    ) as Record<string, string>;\n\n    return {\n      id: container.id,\n      src,\n      attributes\n    };\n  });\n};\n\n/**\n * Generate the dataLayer initialization script.\n * @throws {Error} If dataLayerName is not a valid JavaScript identifier\n */\nexport const generateDataLayerScript = (dataLayerName: string = DEFAULT_DATA_LAYER_NAME): string => {\n  if (!isValidJsIdentifier(dataLayerName)) {\n    throw new Error(\n      `Invalid dataLayerName: \"${dataLayerName}\". Must be a valid JavaScript identifier (letters, digits, $, _ only, cannot start with a digit).`\n    );\n  }\n  return `window.${dataLayerName}=window.${dataLayerName}||[];`;\n};\n","export { generateScriptTags, generateNoscriptTags, generateDataLayerScript, DEFAULT_GTM_HOST } from './helpers';\n\n// Re-export URL utilities from core for backwards compatibility\nexport {\n  normalizeContainers,\n  normalizeContainer,\n  buildGtmScriptUrl as buildScriptUrl,\n  buildGtmNoscriptUrl as buildNoscriptUrl\n} from '@jwiedeman/gtm-kit';\n\nexport type { GtmScriptConfig, ScriptTagData, NoscriptTagData } from './helpers';\n"]}
+{"version":3,"sources":["../../src/components/helpers.ts","../../src/components/index.ts"],"names":["normalizeContainers","normalizeContainer","buildGtmScriptUrl","buildGtmNoscriptUrl"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBA,IAAM,sBAAsB,CAAC,UAA2B;AAE7D,SAAO,6BAA6B,KAAK,KAAK;AAChD;AAMO,IAAM,iBAAiB,CAAC,UAA0B;AACvD,SAAO,MACJ,QAAQ,OAAO,MAAM,EACrB,QAAQ,MAAM,KAAK,EACnB,QAAQ,MAAM,KAAK,EACnB,QAAQ,OAAO,KAAK,EACpB,QAAQ,OAAO,KAAK,EACpB,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,OAAO,EACrB,QAAQ,WAAW,SAAS,EAC5B,QAAQ,WAAW,SAAS;AACjC;AAGA,IAAM,gBAAgB,CAAoC,QACxD,OAAO,YAAY,OAAO,QAAQ,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC;AAqC9D,IAAM,qBAAqB,CAAC,WAA6C;AAC9E,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,MAAI,CAAC,oBAAoB,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,2BAA2B,aAAa;AAAA,IAC1C;AAAA,EACF;AAEA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAG,UAAU;AAAA,IACf;AAEA,UAAM,MAAM,kBAAkB,MAAM,UAAU,IAAI,QAAQ,aAAa;AACvE,UAAM,EAAE,OAAO,WAAW,OAAO,OAAO,GAAG,eAAe,IAAI,8CAAoB,CAAC;AAKnF,UAAM,YAAY,eAAe,UAAU,EAAE;AAC7C,UAAM,UAAU,kBAAkB,0BAA0B,YAAY;AACxE,UAAM,aACJ,UAAU,aAAa,WAAW,aAAa,eACrC,aAAa;AAEzB,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd;AAAA,MACA,OAAO,gCAAa;AAAA,MACpB;AAAA,MACA;AAAA,MACA,YAAY,cAAc,cAAc;AAAA,MACxC;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAiBO,IAAM,oBAAoB,CAAC,WAA8D;AAC9F,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,MAAI,CAAC,oBAAoB,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,2BAA2B,aAAa;AAAA,IAC1C;AAAA,EACF;AAGA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,YAAY,eAAe,UAAU,EAAE;AAC7C,UAAM,QAAQ,kBAAkB,0BAC5B,KAAK,eAAe,aAAa,CAAC,MAClC;AAGJ,UAAM,eAAe,EAAE,GAAG,oBAAoB,GAAG,UAAU,YAAY;AACvE,UAAM,cAAc,OAAO,QAAQ,YAAY,EAC5C,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC,IAAI,mBAAmB,OAAO,CAAC,CAAC,CAAC,EAAE,EAC5E,KAAK,EAAE;AAEV,UAAM,WAAW,sBAAQ,kBAAkB,QAAQ,QAAQ,EAAE;AAG7D,WAAO,4MAGD,eAAe,OAAO,CAAC,oBAAoB,cAAc,KAAK,eAAe,WAAW,CAAC,MAAM,EAAE,gEACrE,eAAe,aAAa,CAAC,MAAM,SAAS;AAAA,EAChF,CAAC,EAAE,KAAK,IAAI;AACd;AAYO,IAAM,uBAAuB,CAClC,WAGsB;AACtB,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAG,UAAU;AAAA,IACf;AAEA,UAAM,MAAM,oBAAoB,MAAM,UAAU,IAAI,QAAQ,aAAa;AACzE,UAAM,mBAAmB;AAAA,MACvB,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAGA,UAAM,aAAa,OAAO;AAAA,MACxB,OAAO,QAAQ,gBAAgB,EAC5B,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAAA,IACnC;AAEA,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAMO,IAAM,0BAA0B,CAAC,gBAAwB,4BAAoC;AAClG,MAAI,CAAC,oBAAoB,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,2BAA2B,aAAa;AAAA,IAC1C;AAAA,EACF;AACA,SAAO,UAAU,aAAa,WAAW,aAAa;AACxD;;;ACjRA;AAAA,EACE,uBAAAA;AAAA,EACA,sBAAAC;AAAA,EACqB,qBAArBC;AAAA,EACuB,uBAAvBC;AAAA,OACK","sourcesContent":["import {\n  DEFAULT_DATA_LAYER_NAME,\n  DEFAULT_GTM_HOST,\n  DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n  normalizeContainer,\n  normalizeContainers,\n  buildGtmScriptUrl,\n  buildGtmNoscriptUrl\n} from '@jwiedeman/gtm-kit';\nimport type { ContainerConfigInput, ScriptAttributes } from '@jwiedeman/gtm-kit';\n\n// Re-export for convenience\nexport {\n  DEFAULT_GTM_HOST,\n  DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n  normalizeContainer,\n  normalizeContainers,\n  buildGtmScriptUrl as buildScriptUrl,\n  buildGtmNoscriptUrl as buildNoscriptUrl\n};\n\n/**\n * Validate that a string is a valid JavaScript identifier.\n * This prevents XSS attacks through dataLayerName injection.\n */\nexport const isValidJsIdentifier = (value: string): boolean => {\n  // Must be a valid JS identifier: starts with letter/$/_, followed by letters/digits/$/_\n  return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(value);\n};\n\n/**\n * Escape a string for safe use in JavaScript string literals.\n * Prevents XSS when interpolating user-provided values into inline scripts.\n */\nexport const escapeJsString = (value: string): string => {\n  return value\n    .replace(/\\\\/g, '\\\\\\\\')\n    .replace(/'/g, \"\\\\'\")\n    .replace(/\"/g, '\\\\\"')\n    .replace(/\\n/g, '\\\\n')\n    .replace(/\\r/g, '\\\\r')\n    .replace(/</g, '\\\\x3c')\n    .replace(/>/g, '\\\\x3e')\n    .replace(/\\u2028/g, '\\\\u2028')\n    .replace(/\\u2029/g, '\\\\u2029');\n};\n\n/** Filter out null/undefined values from an object */\nconst filterNullish = <T extends Record<string, unknown>>(obj: T): T =>\n  Object.fromEntries(Object.entries(obj).filter(([, v]) => v != null)) as T;\n\nexport interface GtmScriptConfig {\n  containers: ContainerConfigInput | ContainerConfigInput[];\n  host?: string;\n  defaultQueryParams?: Record<string, string | number | boolean>;\n  scriptAttributes?: ScriptAttributes;\n  dataLayerName?: string;\n}\n\nexport interface ScriptTagData {\n  id: string;\n  src: string;\n  async: boolean;\n  defer?: boolean;\n  nonce?: string;\n  attributes: Record<string, string | boolean>;\n  /**\n   * Inline JavaScript that must be executed before the GTM script loads.\n   * Initializes the dataLayer and pushes the gtm.start event, which is\n   * required for GTM's built-in \"All Pages\" trigger to fire.\n   *\n   * Render this as a `<script>` tag (or `<script is:inline>` in Astro)\n   * immediately before the GTM `<script async src=\"...\">` tag.\n   */\n  initScript: string;\n}\n\n/**\n * Generate script tag data for GTM containers.\n * Used by Astro components to render script tags.\n *\n * Each tag includes an `initScript` property containing the dataLayer\n * initialization and gtm.start event push. This MUST be rendered as an\n * inline script before the GTM script tag, or GTM's \"All Pages\" trigger\n * will not fire.\n */\nexport const generateScriptTags = (config: GtmScriptConfig): ScriptTagData[] => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    scriptAttributes,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  if (!isValidJsIdentifier(dataLayerName)) {\n    throw new Error(\n      `Invalid dataLayerName: \"${dataLayerName}\". Must be a valid JavaScript identifier.`\n    );\n  }\n\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const params = {\n      ...defaultQueryParams,\n      ...container.queryParams\n    };\n\n    const src = buildGtmScriptUrl(host, container.id, params, dataLayerName);\n    const { async: asyncAttr, defer, nonce, ...restAttributes } = scriptAttributes ?? {};\n\n    // Generate the standard GTM initialization script.\n    // This pushes the gtm.start event to the dataLayer, which is required\n    // for GTM to trigger its built-in \"All Pages\" / \"Container Loaded\" trigger.\n    const escapedId = escapeJsString(container.id);\n    const dlParam = dataLayerName !== DEFAULT_DATA_LAYER_NAME ? `'&l='+l` : `''`;\n    const initScript =\n      `window.${dataLayerName}=window.${dataLayerName}||[];` +\n      `window.${dataLayerName}.push({'gtm.start':new Date().getTime(),event:'gtm.js'});`;\n\n    return {\n      id: container.id,\n      src,\n      async: asyncAttr ?? true,\n      defer,\n      nonce,\n      attributes: filterNullish(restAttributes) as Record<string, string | boolean>,\n      initScript\n    };\n  });\n};\n\n/**\n * Generate the complete standard GTM snippet as an inline script string.\n *\n * This produces the Google-recommended GTM installation code that:\n * 1. Initializes the dataLayer array\n * 2. Pushes the gtm.start event (required for \"All Pages\" trigger)\n * 3. Dynamically creates and inserts the GTM script element\n *\n * Usage in Astro:\n * ```astro\n * <script is:inline set:html={generateGtmScript({ containers: 'GTM-XXXX' })} />\n * ```\n *\n * For the noscript fallback, use `generateNoscriptTags()` separately.\n */\nexport const generateGtmScript = (config: Omit<GtmScriptConfig, 'scriptAttributes'>): string => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  if (!isValidJsIdentifier(dataLayerName)) {\n    throw new Error(\n      `Invalid dataLayerName: \"${dataLayerName}\". Must be a valid JavaScript identifier.`\n    );\n  }\n\n  // Generate one standard snippet per container\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const escapedId = escapeJsString(container.id);\n    const dlArg = dataLayerName !== DEFAULT_DATA_LAYER_NAME\n      ? `,'${escapeJsString(dataLayerName)}'`\n      : '';\n\n    // Build query params string for additional params (auth, preview, etc.)\n    const mergedParams = { ...defaultQueryParams, ...container.queryParams };\n    const extraParams = Object.entries(mergedParams)\n      .filter(([, v]) => v != null)\n      .map(([k, v]) => `&${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`)\n      .join('');\n\n    const hostUrl = (host ?? DEFAULT_GTM_HOST).replace(/\\/+$/, '');\n\n    // Standard GTM snippet — matches Google's recommended installation\n    return `(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':` +\n      `new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],` +\n      `j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=` +\n      `'${escapeJsString(hostUrl)}/gtm.js?id='+i+dl${extraParams ? `+'${escapeJsString(extraParams)}'` : ''};f.parentNode.insertBefore(j,f);` +\n      `})(window,document,'script','${escapeJsString(dataLayerName)}','${escapedId}');`;\n  }).join('\\n');\n};\n\nexport interface NoscriptTagData {\n  id: string;\n  src: string;\n  attributes: Record<string, string>;\n}\n\n/**\n * Generate noscript iframe data for GTM containers.\n * Used by Astro components to render noscript fallbacks.\n */\nexport const generateNoscriptTags = (\n  config: Omit<GtmScriptConfig, 'scriptAttributes'> & {\n    iframeAttributes?: Record<string, string | number | boolean>;\n  }\n): NoscriptTagData[] => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    iframeAttributes,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const params = {\n      ...defaultQueryParams,\n      ...container.queryParams\n    };\n\n    const src = buildGtmNoscriptUrl(host, container.id, params, dataLayerName);\n    const mergedAttributes = {\n      ...DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n      ...iframeAttributes\n    };\n\n    // Filter nullish values and convert to strings\n    const attributes = Object.fromEntries(\n      Object.entries(mergedAttributes)\n        .filter(([, v]) => v != null)\n        .map(([k, v]) => [k, String(v)])\n    ) as Record<string, string>;\n\n    return {\n      id: container.id,\n      src,\n      attributes\n    };\n  });\n};\n\n/**\n * Generate the dataLayer initialization script.\n * @throws {Error} If dataLayerName is not a valid JavaScript identifier\n */\nexport const generateDataLayerScript = (dataLayerName: string = DEFAULT_DATA_LAYER_NAME): string => {\n  if (!isValidJsIdentifier(dataLayerName)) {\n    throw new Error(\n      `Invalid dataLayerName: \"${dataLayerName}\". Must be a valid JavaScript identifier (letters, digits, $, _ only, cannot start with a digit).`\n    );\n  }\n  return `window.${dataLayerName}=window.${dataLayerName}||[];`;\n};\n","export { generateScriptTags, generateNoscriptTags, generateDataLayerScript, generateGtmScript, DEFAULT_GTM_HOST } from './helpers';\n\n// Re-export URL utilities from core for backwards compatibility\nexport {\n  normalizeContainers,\n  normalizeContainer,\n  buildGtmScriptUrl as buildScriptUrl,\n  buildGtmNoscriptUrl as buildNoscriptUrl\n} from '@jwiedeman/gtm-kit';\n\nexport type { GtmScriptConfig, ScriptTagData, NoscriptTagData } from './helpers';\n"]}

package/dist/components/index.d.cts

@@ -15,12 +15,42 @@ interface ScriptTagData {
     defer?: boolean;
     nonce?: string;
     attributes: Record<string, string | boolean>;
+    /**
+     * Inline JavaScript that must be executed before the GTM script loads.
+     * Initializes the dataLayer and pushes the gtm.start event, which is
+     * required for GTM's built-in "All Pages" trigger to fire.
+     *
+     * Render this as a `<script>` tag (or `<script is:inline>` in Astro)
+     * immediately before the GTM `<script async src="...">` tag.
+     */
+    initScript: string;
 }
 /**
  * Generate script tag data for GTM containers.
  * Used by Astro components to render script tags.
+ *
+ * Each tag includes an `initScript` property containing the dataLayer
+ * initialization and gtm.start event push. This MUST be rendered as an
+ * inline script before the GTM script tag, or GTM's "All Pages" trigger
+ * will not fire.
  */
 declare const generateScriptTags: (config: GtmScriptConfig) => ScriptTagData[];
+/**
+ * Generate the complete standard GTM snippet as an inline script string.
+ *
+ * This produces the Google-recommended GTM installation code that:
+ * 1. Initializes the dataLayer array
+ * 2. Pushes the gtm.start event (required for "All Pages" trigger)
+ * 3. Dynamically creates and inserts the GTM script element
+ *
+ * Usage in Astro:
+ * ```astro
+ * <script is:inline set:html={generateGtmScript({ containers: 'GTM-XXXX' })} />
+ * ```
+ *
+ * For the noscript fallback, use `generateNoscriptTags()` separately.
+ */
+declare const generateGtmScript: (config: Omit<GtmScriptConfig, 'scriptAttributes'>) => string;
 interface NoscriptTagData {
     id: string;
     src: string;
@@ -39,4 +69,4 @@ declare const generateNoscriptTags: (config: Omit<GtmScriptConfig, 'scriptAttrib
  */
 declare const generateDataLayerScript: (dataLayerName?: string) => string;
 
-export { GtmScriptConfig, NoscriptTagData, ScriptTagData, generateDataLayerScript, generateNoscriptTags, generateScriptTags };
+export { GtmScriptConfig, NoscriptTagData, ScriptTagData, generateDataLayerScript, generateGtmScript, generateNoscriptTags, generateScriptTags };

package/dist/components/index.d.ts

@@ -15,12 +15,42 @@ interface ScriptTagData {
     defer?: boolean;
     nonce?: string;
     attributes: Record<string, string | boolean>;
+    /**
+     * Inline JavaScript that must be executed before the GTM script loads.
+     * Initializes the dataLayer and pushes the gtm.start event, which is
+     * required for GTM's built-in "All Pages" trigger to fire.
+     *
+     * Render this as a `<script>` tag (or `<script is:inline>` in Astro)
+     * immediately before the GTM `<script async src="...">` tag.
+     */
+    initScript: string;
 }
 /**
  * Generate script tag data for GTM containers.
  * Used by Astro components to render script tags.
+ *
+ * Each tag includes an `initScript` property containing the dataLayer
+ * initialization and gtm.start event push. This MUST be rendered as an
+ * inline script before the GTM script tag, or GTM's "All Pages" trigger
+ * will not fire.
  */
 declare const generateScriptTags: (config: GtmScriptConfig) => ScriptTagData[];
+/**
+ * Generate the complete standard GTM snippet as an inline script string.
+ *
+ * This produces the Google-recommended GTM installation code that:
+ * 1. Initializes the dataLayer array
+ * 2. Pushes the gtm.start event (required for "All Pages" trigger)
+ * 3. Dynamically creates and inserts the GTM script element
+ *
+ * Usage in Astro:
+ * ```astro
+ * <script is:inline set:html={generateGtmScript({ containers: 'GTM-XXXX' })} />
+ * ```
+ *
+ * For the noscript fallback, use `generateNoscriptTags()` separately.
+ */
+declare const generateGtmScript: (config: Omit<GtmScriptConfig, 'scriptAttributes'>) => string;
 interface NoscriptTagData {
     id: string;
     src: string;
@@ -39,4 +69,4 @@ declare const generateNoscriptTags: (config: Omit<GtmScriptConfig, 'scriptAttrib
  */
 declare const generateDataLayerScript: (dataLayerName?: string) => string;
 
-export { GtmScriptConfig, NoscriptTagData, ScriptTagData, generateDataLayerScript, generateNoscriptTags, generateScriptTags };
+export { GtmScriptConfig, NoscriptTagData, ScriptTagData, generateDataLayerScript, generateGtmScript, generateNoscriptTags, generateScriptTags };

package/dist/components/index.js

@@ -1,10 +1,13 @@
-import { normalizeContainers, buildGtmScriptUrl, buildGtmNoscriptUrl, DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES, DEFAULT_DATA_LAYER_NAME, DEFAULT_GTM_HOST } from '@jwiedeman/gtm-kit';
+import { normalizeContainers, buildGtmScriptUrl, DEFAULT_DATA_LAYER_NAME, DEFAULT_GTM_HOST, buildGtmNoscriptUrl, DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES } from '@jwiedeman/gtm-kit';
 export { DEFAULT_GTM_HOST, buildGtmNoscriptUrl as buildNoscriptUrl, buildGtmScriptUrl as buildScriptUrl, normalizeContainer, normalizeContainers } from '@jwiedeman/gtm-kit';
 
 // src/components/helpers.ts
 var isValidJsIdentifier = (value) => {
   return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(value);
 };
+var escapeJsString = (value) => {
+  return value.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/</g, "\\x3c").replace(/>/g, "\\x3e").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+};
 var filterNullish = (obj) => Object.fromEntries(Object.entries(obj).filter(([, v]) => v != null));
 var generateScriptTags = (config) => {
   const {
@@ -18,6 +21,11 @@ var generateScriptTags = (config) => {
   if (!normalized.length) {
     throw new Error("At least one GTM container is required.");
   }
+  if (!isValidJsIdentifier(dataLayerName)) {
+    throw new Error(
+      `Invalid dataLayerName: "${dataLayerName}". Must be a valid JavaScript identifier.`
+    );
+  }
   return normalized.map((container) => {
     if (!container.id) {
       throw new Error("Container id is required.");
@@ -28,16 +36,47 @@ var generateScriptTags = (config) => {
     };
     const src = buildGtmScriptUrl(host, container.id, params, dataLayerName);
     const { async: asyncAttr, defer, nonce, ...restAttributes } = scriptAttributes != null ? scriptAttributes : {};
+    escapeJsString(container.id);
+    const initScript = `window.${dataLayerName}=window.${dataLayerName}||[];window.${dataLayerName}.push({'gtm.start':new Date().getTime(),event:'gtm.js'});`;
     return {
       id: container.id,
       src,
       async: asyncAttr != null ? asyncAttr : true,
       defer,
       nonce,
-      attributes: filterNullish(restAttributes)
+      attributes: filterNullish(restAttributes),
+      initScript
     };
   });
 };
+var generateGtmScript = (config) => {
+  const {
+    containers,
+    host = DEFAULT_GTM_HOST,
+    defaultQueryParams,
+    dataLayerName = DEFAULT_DATA_LAYER_NAME
+  } = config;
+  const normalized = normalizeContainers(containers);
+  if (!normalized.length) {
+    throw new Error("At least one GTM container is required.");
+  }
+  if (!isValidJsIdentifier(dataLayerName)) {
+    throw new Error(
+      `Invalid dataLayerName: "${dataLayerName}". Must be a valid JavaScript identifier.`
+    );
+  }
+  return normalized.map((container) => {
+    if (!container.id) {
+      throw new Error("Container id is required.");
+    }
+    const escapedId = escapeJsString(container.id);
+    dataLayerName !== DEFAULT_DATA_LAYER_NAME ? `,'${escapeJsString(dataLayerName)}'` : "";
+    const mergedParams = { ...defaultQueryParams, ...container.queryParams };
+    const extraParams = Object.entries(mergedParams).filter(([, v]) => v != null).map(([k, v]) => `&${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`).join("");
+    const hostUrl = (host != null ? host : DEFAULT_GTM_HOST).replace(/\/+$/, "");
+    return `(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='${escapeJsString(hostUrl)}/gtm.js?id='+i+dl${extraParams ? `+'${escapeJsString(extraParams)}'` : ""};f.parentNode.insertBefore(j,f);})(window,document,'script','${escapeJsString(dataLayerName)}','${escapedId}');`;
+  }).join("\n");
+};
 var generateNoscriptTags = (config) => {
   const {
     containers,
@@ -82,6 +121,6 @@ var generateDataLayerScript = (dataLayerName = DEFAULT_DATA_LAYER_NAME) => {
   return `window.${dataLayerName}=window.${dataLayerName}||[];`;
 };
 
-export { generateDataLayerScript, generateNoscriptTags, generateScriptTags };
+export { generateDataLayerScript, generateGtmScript, generateNoscriptTags, generateScriptTags };
 //# sourceMappingURL=out.js.map
 //# sourceMappingURL=index.js.map

package/dist/components/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/helpers.ts","../../src/components/index.ts"],"names":["normalizeContainers","normalizeContainer","buildGtmScriptUrl","buildGtmNoscriptUrl"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBA,IAAM,sBAAsB,CAAC,UAA2B;AAE7D,SAAO,6BAA6B,KAAK,KAAK;AAChD;AAoBA,IAAM,gBAAgB,CAAoC,QACxD,OAAO,YAAY,OAAO,QAAQ,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC;AAuB9D,IAAM,qBAAqB,CAAC,WAA6C;AAC9E,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAG,UAAU;AAAA,IACf;AAEA,UAAM,MAAM,kBAAkB,MAAM,UAAU,IAAI,QAAQ,aAAa;AACvE,UAAM,EAAE,OAAO,WAAW,OAAO,OAAO,GAAG,eAAe,IAAI,8CAAoB,CAAC;AAEnF,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd;AAAA,MACA,OAAO,gCAAa;AAAA,MACpB;AAAA,MACA;AAAA,MACA,YAAY,cAAc,cAAc;AAAA,IAC1C;AAAA,EACF,CAAC;AACH;AAYO,IAAM,uBAAuB,CAClC,WAGsB;AACtB,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAG,UAAU;AAAA,IACf;AAEA,UAAM,MAAM,oBAAoB,MAAM,UAAU,IAAI,QAAQ,aAAa;AACzE,UAAM,mBAAmB;AAAA,MACvB,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAGA,UAAM,aAAa,OAAO;AAAA,MACxB,OAAO,QAAQ,gBAAgB,EAC5B,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAAA,IACnC;AAEA,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAMO,IAAM,0BAA0B,CAAC,gBAAwB,4BAAoC;AAClG,MAAI,CAAC,oBAAoB,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,2BAA2B,aAAa;AAAA,IAC1C;AAAA,EACF;AACA,SAAO,UAAU,aAAa,WAAW,aAAa;AACxD;;;ACnLA;AAAA,EACE,uBAAAA;AAAA,EACA,sBAAAC;AAAA,EACqB,qBAArBC;AAAA,EACuB,uBAAvBC;AAAA,OACK","sourcesContent":["import {\n  DEFAULT_DATA_LAYER_NAME,\n  DEFAULT_GTM_HOST,\n  DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n  normalizeContainer,\n  normalizeContainers,\n  buildGtmScriptUrl,\n  buildGtmNoscriptUrl\n} from '@jwiedeman/gtm-kit';\nimport type { ContainerConfigInput, ScriptAttributes } from '@jwiedeman/gtm-kit';\n\n// Re-export for convenience\nexport {\n  DEFAULT_GTM_HOST,\n  DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n  normalizeContainer,\n  normalizeContainers,\n  buildGtmScriptUrl as buildScriptUrl,\n  buildGtmNoscriptUrl as buildNoscriptUrl\n};\n\n/**\n * Validate that a string is a valid JavaScript identifier.\n * This prevents XSS attacks through dataLayerName injection.\n */\nexport const isValidJsIdentifier = (value: string): boolean => {\n  // Must be a valid JS identifier: starts with letter/$/_, followed by letters/digits/$/_\n  return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(value);\n};\n\n/**\n * Escape a string for safe use in JavaScript string literals.\n * Prevents XSS when interpolating user-provided values into inline scripts.\n */\nexport const escapeJsString = (value: string): string => {\n  return value\n    .replace(/\\\\/g, '\\\\\\\\')\n    .replace(/'/g, \"\\\\'\")\n    .replace(/\"/g, '\\\\\"')\n    .replace(/\\n/g, '\\\\n')\n    .replace(/\\r/g, '\\\\r')\n    .replace(/</g, '\\\\x3c')\n    .replace(/>/g, '\\\\x3e')\n    .replace(/\\u2028/g, '\\\\u2028')\n    .replace(/\\u2029/g, '\\\\u2029');\n};\n\n/** Filter out null/undefined values from an object */\nconst filterNullish = <T extends Record<string, unknown>>(obj: T): T =>\n  Object.fromEntries(Object.entries(obj).filter(([, v]) => v != null)) as T;\n\nexport interface GtmScriptConfig {\n  containers: ContainerConfigInput | ContainerConfigInput[];\n  host?: string;\n  defaultQueryParams?: Record<string, string | number | boolean>;\n  scriptAttributes?: ScriptAttributes;\n  dataLayerName?: string;\n}\n\nexport interface ScriptTagData {\n  id: string;\n  src: string;\n  async: boolean;\n  defer?: boolean;\n  nonce?: string;\n  attributes: Record<string, string | boolean>;\n}\n\n/**\n * Generate script tag data for GTM containers.\n * Used by Astro components to render script tags.\n */\nexport const generateScriptTags = (config: GtmScriptConfig): ScriptTagData[] => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    scriptAttributes,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const params = {\n      ...defaultQueryParams,\n      ...container.queryParams\n    };\n\n    const src = buildGtmScriptUrl(host, container.id, params, dataLayerName);\n    const { async: asyncAttr, defer, nonce, ...restAttributes } = scriptAttributes ?? {};\n\n    return {\n      id: container.id,\n      src,\n      async: asyncAttr ?? true,\n      defer,\n      nonce,\n      attributes: filterNullish(restAttributes) as Record<string, string | boolean>\n    };\n  });\n};\n\nexport interface NoscriptTagData {\n  id: string;\n  src: string;\n  attributes: Record<string, string>;\n}\n\n/**\n * Generate noscript iframe data for GTM containers.\n * Used by Astro components to render noscript fallbacks.\n */\nexport const generateNoscriptTags = (\n  config: Omit<GtmScriptConfig, 'scriptAttributes'> & {\n    iframeAttributes?: Record<string, string | number | boolean>;\n  }\n): NoscriptTagData[] => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    iframeAttributes,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const params = {\n      ...defaultQueryParams,\n      ...container.queryParams\n    };\n\n    const src = buildGtmNoscriptUrl(host, container.id, params, dataLayerName);\n    const mergedAttributes = {\n      ...DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n      ...iframeAttributes\n    };\n\n    // Filter nullish values and convert to strings\n    const attributes = Object.fromEntries(\n      Object.entries(mergedAttributes)\n        .filter(([, v]) => v != null)\n        .map(([k, v]) => [k, String(v)])\n    ) as Record<string, string>;\n\n    return {\n      id: container.id,\n      src,\n      attributes\n    };\n  });\n};\n\n/**\n * Generate the dataLayer initialization script.\n * @throws {Error} If dataLayerName is not a valid JavaScript identifier\n */\nexport const generateDataLayerScript = (dataLayerName: string = DEFAULT_DATA_LAYER_NAME): string => {\n  if (!isValidJsIdentifier(dataLayerName)) {\n    throw new Error(\n      `Invalid dataLayerName: \"${dataLayerName}\". Must be a valid JavaScript identifier (letters, digits, $, _ only, cannot start with a digit).`\n    );\n  }\n  return `window.${dataLayerName}=window.${dataLayerName}||[];`;\n};\n","export { generateScriptTags, generateNoscriptTags, generateDataLayerScript, DEFAULT_GTM_HOST } from './helpers';\n\n// Re-export URL utilities from core for backwards compatibility\nexport {\n  normalizeContainers,\n  normalizeContainer,\n  buildGtmScriptUrl as buildScriptUrl,\n  buildGtmNoscriptUrl as buildNoscriptUrl\n} from '@jwiedeman/gtm-kit';\n\nexport type { GtmScriptConfig, ScriptTagData, NoscriptTagData } from './helpers';\n"]}
+{"version":3,"sources":["../../src/components/helpers.ts","../../src/components/index.ts"],"names":["normalizeContainers","normalizeContainer","buildGtmScriptUrl","buildGtmNoscriptUrl"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBA,IAAM,sBAAsB,CAAC,UAA2B;AAE7D,SAAO,6BAA6B,KAAK,KAAK;AAChD;AAMO,IAAM,iBAAiB,CAAC,UAA0B;AACvD,SAAO,MACJ,QAAQ,OAAO,MAAM,EACrB,QAAQ,MAAM,KAAK,EACnB,QAAQ,MAAM,KAAK,EACnB,QAAQ,OAAO,KAAK,EACpB,QAAQ,OAAO,KAAK,EACpB,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,OAAO,EACrB,QAAQ,WAAW,SAAS,EAC5B,QAAQ,WAAW,SAAS;AACjC;AAGA,IAAM,gBAAgB,CAAoC,QACxD,OAAO,YAAY,OAAO,QAAQ,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC;AAqC9D,IAAM,qBAAqB,CAAC,WAA6C;AAC9E,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,MAAI,CAAC,oBAAoB,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,2BAA2B,aAAa;AAAA,IAC1C;AAAA,EACF;AAEA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAG,UAAU;AAAA,IACf;AAEA,UAAM,MAAM,kBAAkB,MAAM,UAAU,IAAI,QAAQ,aAAa;AACvE,UAAM,EAAE,OAAO,WAAW,OAAO,OAAO,GAAG,eAAe,IAAI,8CAAoB,CAAC;AAKnF,UAAM,YAAY,eAAe,UAAU,EAAE;AAC7C,UAAM,UAAU,kBAAkB,0BAA0B,YAAY;AACxE,UAAM,aACJ,UAAU,aAAa,WAAW,aAAa,eACrC,aAAa;AAEzB,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd;AAAA,MACA,OAAO,gCAAa;AAAA,MACpB;AAAA,MACA;AAAA,MACA,YAAY,cAAc,cAAc;AAAA,MACxC;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAiBO,IAAM,oBAAoB,CAAC,WAA8D;AAC9F,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,MAAI,CAAC,oBAAoB,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,2BAA2B,aAAa;AAAA,IAC1C;AAAA,EACF;AAGA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,YAAY,eAAe,UAAU,EAAE;AAC7C,UAAM,QAAQ,kBAAkB,0BAC5B,KAAK,eAAe,aAAa,CAAC,MAClC;AAGJ,UAAM,eAAe,EAAE,GAAG,oBAAoB,GAAG,UAAU,YAAY;AACvE,UAAM,cAAc,OAAO,QAAQ,YAAY,EAC5C,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC,IAAI,mBAAmB,OAAO,CAAC,CAAC,CAAC,EAAE,EAC5E,KAAK,EAAE;AAEV,UAAM,WAAW,sBAAQ,kBAAkB,QAAQ,QAAQ,EAAE;AAG7D,WAAO,4MAGD,eAAe,OAAO,CAAC,oBAAoB,cAAc,KAAK,eAAe,WAAW,CAAC,MAAM,EAAE,gEACrE,eAAe,aAAa,CAAC,MAAM,SAAS;AAAA,EAChF,CAAC,EAAE,KAAK,IAAI;AACd;AAYO,IAAM,uBAAuB,CAClC,WAGsB;AACtB,QAAM;AAAA,IACJ;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,EAClB,IAAI;AAEJ,QAAM,aAAa,oBAAoB,UAAU;AAEjD,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO,WAAW,IAAI,CAAC,cAAc;AACnC,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS;AAAA,MACb,GAAG;AAAA,MACH,GAAG,UAAU;AAAA,IACf;AAEA,UAAM,MAAM,oBAAoB,MAAM,UAAU,IAAI,QAAQ,aAAa;AACzE,UAAM,mBAAmB;AAAA,MACvB,GAAG;AAAA,MACH,GAAG;AAAA,IACL;AAGA,UAAM,aAAa,OAAO;AAAA,MACxB,OAAO,QAAQ,gBAAgB,EAC5B,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAAA,IACnC;AAEA,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAMO,IAAM,0BAA0B,CAAC,gBAAwB,4BAAoC;AAClG,MAAI,CAAC,oBAAoB,aAAa,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,2BAA2B,aAAa;AAAA,IAC1C;AAAA,EACF;AACA,SAAO,UAAU,aAAa,WAAW,aAAa;AACxD;;;ACjRA;AAAA,EACE,uBAAAA;AAAA,EACA,sBAAAC;AAAA,EACqB,qBAArBC;AAAA,EACuB,uBAAvBC;AAAA,OACK","sourcesContent":["import {\n  DEFAULT_DATA_LAYER_NAME,\n  DEFAULT_GTM_HOST,\n  DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n  normalizeContainer,\n  normalizeContainers,\n  buildGtmScriptUrl,\n  buildGtmNoscriptUrl\n} from '@jwiedeman/gtm-kit';\nimport type { ContainerConfigInput, ScriptAttributes } from '@jwiedeman/gtm-kit';\n\n// Re-export for convenience\nexport {\n  DEFAULT_GTM_HOST,\n  DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n  normalizeContainer,\n  normalizeContainers,\n  buildGtmScriptUrl as buildScriptUrl,\n  buildGtmNoscriptUrl as buildNoscriptUrl\n};\n\n/**\n * Validate that a string is a valid JavaScript identifier.\n * This prevents XSS attacks through dataLayerName injection.\n */\nexport const isValidJsIdentifier = (value: string): boolean => {\n  // Must be a valid JS identifier: starts with letter/$/_, followed by letters/digits/$/_\n  return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(value);\n};\n\n/**\n * Escape a string for safe use in JavaScript string literals.\n * Prevents XSS when interpolating user-provided values into inline scripts.\n */\nexport const escapeJsString = (value: string): string => {\n  return value\n    .replace(/\\\\/g, '\\\\\\\\')\n    .replace(/'/g, \"\\\\'\")\n    .replace(/\"/g, '\\\\\"')\n    .replace(/\\n/g, '\\\\n')\n    .replace(/\\r/g, '\\\\r')\n    .replace(/</g, '\\\\x3c')\n    .replace(/>/g, '\\\\x3e')\n    .replace(/\\u2028/g, '\\\\u2028')\n    .replace(/\\u2029/g, '\\\\u2029');\n};\n\n/** Filter out null/undefined values from an object */\nconst filterNullish = <T extends Record<string, unknown>>(obj: T): T =>\n  Object.fromEntries(Object.entries(obj).filter(([, v]) => v != null)) as T;\n\nexport interface GtmScriptConfig {\n  containers: ContainerConfigInput | ContainerConfigInput[];\n  host?: string;\n  defaultQueryParams?: Record<string, string | number | boolean>;\n  scriptAttributes?: ScriptAttributes;\n  dataLayerName?: string;\n}\n\nexport interface ScriptTagData {\n  id: string;\n  src: string;\n  async: boolean;\n  defer?: boolean;\n  nonce?: string;\n  attributes: Record<string, string | boolean>;\n  /**\n   * Inline JavaScript that must be executed before the GTM script loads.\n   * Initializes the dataLayer and pushes the gtm.start event, which is\n   * required for GTM's built-in \"All Pages\" trigger to fire.\n   *\n   * Render this as a `<script>` tag (or `<script is:inline>` in Astro)\n   * immediately before the GTM `<script async src=\"...\">` tag.\n   */\n  initScript: string;\n}\n\n/**\n * Generate script tag data for GTM containers.\n * Used by Astro components to render script tags.\n *\n * Each tag includes an `initScript` property containing the dataLayer\n * initialization and gtm.start event push. This MUST be rendered as an\n * inline script before the GTM script tag, or GTM's \"All Pages\" trigger\n * will not fire.\n */\nexport const generateScriptTags = (config: GtmScriptConfig): ScriptTagData[] => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    scriptAttributes,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  if (!isValidJsIdentifier(dataLayerName)) {\n    throw new Error(\n      `Invalid dataLayerName: \"${dataLayerName}\". Must be a valid JavaScript identifier.`\n    );\n  }\n\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const params = {\n      ...defaultQueryParams,\n      ...container.queryParams\n    };\n\n    const src = buildGtmScriptUrl(host, container.id, params, dataLayerName);\n    const { async: asyncAttr, defer, nonce, ...restAttributes } = scriptAttributes ?? {};\n\n    // Generate the standard GTM initialization script.\n    // This pushes the gtm.start event to the dataLayer, which is required\n    // for GTM to trigger its built-in \"All Pages\" / \"Container Loaded\" trigger.\n    const escapedId = escapeJsString(container.id);\n    const dlParam = dataLayerName !== DEFAULT_DATA_LAYER_NAME ? `'&l='+l` : `''`;\n    const initScript =\n      `window.${dataLayerName}=window.${dataLayerName}||[];` +\n      `window.${dataLayerName}.push({'gtm.start':new Date().getTime(),event:'gtm.js'});`;\n\n    return {\n      id: container.id,\n      src,\n      async: asyncAttr ?? true,\n      defer,\n      nonce,\n      attributes: filterNullish(restAttributes) as Record<string, string | boolean>,\n      initScript\n    };\n  });\n};\n\n/**\n * Generate the complete standard GTM snippet as an inline script string.\n *\n * This produces the Google-recommended GTM installation code that:\n * 1. Initializes the dataLayer array\n * 2. Pushes the gtm.start event (required for \"All Pages\" trigger)\n * 3. Dynamically creates and inserts the GTM script element\n *\n * Usage in Astro:\n * ```astro\n * <script is:inline set:html={generateGtmScript({ containers: 'GTM-XXXX' })} />\n * ```\n *\n * For the noscript fallback, use `generateNoscriptTags()` separately.\n */\nexport const generateGtmScript = (config: Omit<GtmScriptConfig, 'scriptAttributes'>): string => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  if (!isValidJsIdentifier(dataLayerName)) {\n    throw new Error(\n      `Invalid dataLayerName: \"${dataLayerName}\". Must be a valid JavaScript identifier.`\n    );\n  }\n\n  // Generate one standard snippet per container\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const escapedId = escapeJsString(container.id);\n    const dlArg = dataLayerName !== DEFAULT_DATA_LAYER_NAME\n      ? `,'${escapeJsString(dataLayerName)}'`\n      : '';\n\n    // Build query params string for additional params (auth, preview, etc.)\n    const mergedParams = { ...defaultQueryParams, ...container.queryParams };\n    const extraParams = Object.entries(mergedParams)\n      .filter(([, v]) => v != null)\n      .map(([k, v]) => `&${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`)\n      .join('');\n\n    const hostUrl = (host ?? DEFAULT_GTM_HOST).replace(/\\/+$/, '');\n\n    // Standard GTM snippet — matches Google's recommended installation\n    return `(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':` +\n      `new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],` +\n      `j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=` +\n      `'${escapeJsString(hostUrl)}/gtm.js?id='+i+dl${extraParams ? `+'${escapeJsString(extraParams)}'` : ''};f.parentNode.insertBefore(j,f);` +\n      `})(window,document,'script','${escapeJsString(dataLayerName)}','${escapedId}');`;\n  }).join('\\n');\n};\n\nexport interface NoscriptTagData {\n  id: string;\n  src: string;\n  attributes: Record<string, string>;\n}\n\n/**\n * Generate noscript iframe data for GTM containers.\n * Used by Astro components to render noscript fallbacks.\n */\nexport const generateNoscriptTags = (\n  config: Omit<GtmScriptConfig, 'scriptAttributes'> & {\n    iframeAttributes?: Record<string, string | number | boolean>;\n  }\n): NoscriptTagData[] => {\n  const {\n    containers,\n    host = DEFAULT_GTM_HOST,\n    defaultQueryParams,\n    iframeAttributes,\n    dataLayerName = DEFAULT_DATA_LAYER_NAME\n  } = config;\n\n  const normalized = normalizeContainers(containers);\n\n  if (!normalized.length) {\n    throw new Error('At least one GTM container is required.');\n  }\n\n  return normalized.map((container) => {\n    if (!container.id) {\n      throw new Error('Container id is required.');\n    }\n\n    const params = {\n      ...defaultQueryParams,\n      ...container.queryParams\n    };\n\n    const src = buildGtmNoscriptUrl(host, container.id, params, dataLayerName);\n    const mergedAttributes = {\n      ...DEFAULT_NOSCRIPT_IFRAME_ATTRIBUTES,\n      ...iframeAttributes\n    };\n\n    // Filter nullish values and convert to strings\n    const attributes = Object.fromEntries(\n      Object.entries(mergedAttributes)\n        .filter(([, v]) => v != null)\n        .map(([k, v]) => [k, String(v)])\n    ) as Record<string, string>;\n\n    return {\n      id: container.id,\n      src,\n      attributes\n    };\n  });\n};\n\n/**\n * Generate the dataLayer initialization script.\n * @throws {Error} If dataLayerName is not a valid JavaScript identifier\n */\nexport const generateDataLayerScript = (dataLayerName: string = DEFAULT_DATA_LAYER_NAME): string => {\n  if (!isValidJsIdentifier(dataLayerName)) {\n    throw new Error(\n      `Invalid dataLayerName: \"${dataLayerName}\". Must be a valid JavaScript identifier (letters, digits, $, _ only, cannot start with a digit).`\n    );\n  }\n  return `window.${dataLayerName}=window.${dataLayerName}||[];`;\n};\n","export { generateScriptTags, generateNoscriptTags, generateDataLayerScript, generateGtmScript, DEFAULT_GTM_HOST } from './helpers';\n\n// Re-export URL utilities from core for backwards compatibility\nexport {\n  normalizeContainers,\n  normalizeContainer,\n  buildGtmScriptUrl as buildScriptUrl,\n  buildGtmNoscriptUrl as buildNoscriptUrl\n} from '@jwiedeman/gtm-kit';\n\nexport type { GtmScriptConfig, ScriptTagData, NoscriptTagData } from './helpers';\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jwiedeman/gtm-kit-astro",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "Astro components and helpers for GTM Kit - Google Tag Manager integration with View Transitions support.",
   "repository": {
     "type": "git",
@@ -54,7 +54,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@jwiedeman/gtm-kit": "^1.2.1"
+    "@jwiedeman/gtm-kit": "workspace:*"
   },
   "peerDependencies": {
     "astro": "^3.0.0 || ^4.0.0 || ^5.0.0"