@tokenoftrust/storefront-runner 2.0.26 → 2.0.27

package/packages/public-runtime/schemas/managed-analytics/v1/update-migration-draft-request.schema.json

@@ -154,76 +154,91 @@
                 "minProperties": 1,
                 "properties": {
                   "candidate": {
-                    "type": "string",
-                    "not": {
-                      "anyOf": [
-                        {
-                          "type": "string",
-                          "pattern": "(?:[Gg][Tt][Mm]-[A-Za-z0-9]+|[Uu][Aa]-[0-9]+-[0-9]+)"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:-----BEGIN(?: [A-Z]+)? PRIVATE KEY-----|\\bAKIA[0-9A-Z]{16}\\b|\\bsk-proj-[A-Za-z0-9_-]{8,}\\b|\\bsk-[A-Za-z0-9_-]{20,}\\b|\\b(?:sk|rk)_(?:live|test|prod)_[A-Za-z0-9_-]{8,}\\b|\\b(?:gh[pousr]_|github_pat_)[A-Za-z0-9_]{20,}\\b|\\b(?:npm_|glpat-)[A-Za-z0-9_.-]{8,}\\b|\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b|\\bAIza[A-Za-z0-9_-]{20,}\\b|\\bSG\\.[A-Za-z0-9_.-]{8,}\\b|\\b(?:[Ss]ecret|[Pp]assword|[Cc]redential)[_-][A-Za-z0-9_-]{4,}\\b|\\b[Bb]earer\\s+[A-Za-z0-9._~+/-]{12,}={0,2}\\b|\\beyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]+\\b|\\b(?:api[_ -]?[Kk]ey|client[_ -]?[Ss]ecret|[Pp]assword|[Cc]redential|private[_ -]?[Kk]ey)\\s*[:=]\\s*\\S+)"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}|\\b[0-9]{3}-[0-9]{2}-[0-9]{4}\\b|\\b(?:[0-9][ -]?){13,19}\\b|(?:^|[^0-9])(?:\\+?1[ .-]?)?(?:\\([2-9][0-9]{2}\\)|[2-9][0-9]{2})[ .-]?[0-9]{3}[ .-]?[0-9]{4}(?=$|[^0-9]))"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:</?[A-Za-z][^>]*>|[Jj][Aa][Vv][Aa][Ss][Cc][Rr][Ii][Pp][Tt]\\s*:|[Ee][Vv][Aa][Ll]\\s*\\(|(?:[Aa][Ll][Ee][Rr][Tt]|[Ff][Ee][Tt][Cc][Hh])\\s*\\(|\\{\\{|\\}\\}|\\$\\{|#[A-Za-z_][A-Za-z0-9_-]*|(?:^|[\\s,>+~])\\.[A-Za-z_-][A-Za-z0-9_-]*(?:$|[\\s,>+~.#[\\:])|\\[[A-Za-z_:][-A-Za-z0-9_:.]*(?:[~|^$*]?=[^\\]]+)?\\]|(?:[Ll][Oo][Cc][Aa][Ll]|[Ss][Ee][Ss][Ss][Ii][Oo][Nn])[Ss][Tt][Oo][Rr][Aa][Gg][Ee]|[Ii][Nn][Dd][Ee][Xx][Ee][Dd][Dd][Bb]|[Qq][Uu][Ee][Rr][Yy][Ss][Ee][Ll][Ee][Cc][Tt][Oo][Rr]|(?:[Ww][Ii][Nn][Dd][Oo][Ww]|[Dd][Oo][Cc][Uu][Mm][Ee][Nn][Tt]|[Gg][Ll][Oo][Bb][Aa][Ll][Tt][Hh][Ii][Ss]|[Cc][Oo][Nn][Ss][Oo][Ll][Ee])\\s*(?:\\.|\\[)|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\.\\s*[A-Za-z_$][A-Za-z0-9_$]*\\s*\\(|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\([^)]*\\)\\s*;|[Rr][Ee][Tt][Uu][Rr][Nn][^;{}]*;|[Ff][Uu][Nn][Cc][Tt][Ii][Oo][Nn]|=>|(?:[Vv][Aa][Rr]|[Ll][Ee][Tt]|[Cc][Oo][Nn][Ss][Tt])\\s+[A-Za-z_$])"
-                        }
-                      ]
-                    },
-                    "minLength": 1
+                    "type": "array",
+                    "minItems": 1,
+                    "uniqueItems": true,
+                    "items": {
+                      "type": "string",
+                      "not": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "pattern": "(?:[Gg][Tt][Mm]-[A-Za-z0-9]+|[Uu][Aa]-[0-9]+-[0-9]+)"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:-----BEGIN(?: [A-Z]+)? PRIVATE KEY-----|\\bAKIA[0-9A-Z]{16}\\b|\\bsk-proj-[A-Za-z0-9_-]{8,}\\b|\\bsk-[A-Za-z0-9_-]{20,}\\b|\\b(?:sk|rk)_(?:live|test|prod)_[A-Za-z0-9_-]{8,}\\b|\\b(?:gh[pousr]_|github_pat_)[A-Za-z0-9_]{20,}\\b|\\b(?:npm_|glpat-)[A-Za-z0-9_.-]{8,}\\b|\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b|\\bAIza[A-Za-z0-9_-]{20,}\\b|\\bSG\\.[A-Za-z0-9_.-]{8,}\\b|\\b(?:[Ss]ecret|[Pp]assword|[Cc]redential)[_-][A-Za-z0-9_-]{4,}\\b|\\b[Bb]earer\\s+[A-Za-z0-9._~+/-]{12,}={0,2}\\b|\\beyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]+\\b|\\b(?:api[_ -]?[Kk]ey|client[_ -]?[Ss]ecret|[Pp]assword|[Cc]redential|private[_ -]?[Kk]ey)\\s*[:=]\\s*\\S+)"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}|\\b[0-9]{3}-[0-9]{2}-[0-9]{4}\\b|\\b(?:[0-9][ -]?){13,19}\\b|(?:^|[^0-9])(?:\\+?1[ .-]?)?(?:\\([2-9][0-9]{2}\\)|[2-9][0-9]{2})[ .-]?[0-9]{3}[ .-]?[0-9]{4}(?=$|[^0-9]))"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:</?[A-Za-z][^>]*>|[Jj][Aa][Vv][Aa][Ss][Cc][Rr][Ii][Pp][Tt]\\s*:|[Ee][Vv][Aa][Ll]\\s*\\(|(?:[Aa][Ll][Ee][Rr][Tt]|[Ff][Ee][Tt][Cc][Hh])\\s*\\(|\\{\\{|\\}\\}|\\$\\{|#[A-Za-z_][A-Za-z0-9_-]*|(?:^|[\\s,>+~])\\.[A-Za-z_-][A-Za-z0-9_-]*(?:$|[\\s,>+~.#[\\:])|\\[[A-Za-z_:][-A-Za-z0-9_:.]*(?:[~|^$*]?=[^\\]]+)?\\]|(?:[Ll][Oo][Cc][Aa][Ll]|[Ss][Ee][Ss][Ss][Ii][Oo][Nn])[Ss][Tt][Oo][Rr][Aa][Gg][Ee]|[Ii][Nn][Dd][Ee][Xx][Ee][Dd][Dd][Bb]|[Qq][Uu][Ee][Rr][Yy][Ss][Ee][Ll][Ee][Cc][Tt][Oo][Rr]|(?:[Ww][Ii][Nn][Dd][Oo][Ww]|[Dd][Oo][Cc][Uu][Mm][Ee][Nn][Tt]|[Gg][Ll][Oo][Bb][Aa][Ll][Tt][Hh][Ii][Ss]|[Cc][Oo][Nn][Ss][Oo][Ll][Ee])\\s*(?:\\.|\\[)|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\.\\s*[A-Za-z_$][A-Za-z0-9_$]*\\s*\\(|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\([^)]*\\)\\s*;|[Rr][Ee][Tt][Uu][Rr][Nn][^;{}]*;|[Ff][Uu][Nn][Cc][Tt][Ii][Oo][Nn]|=>|(?:[Vv][Aa][Rr]|[Ll][Ee][Tt]|[Cc][Oo][Nn][Ss][Tt])\\s+[A-Za-z_$])"
+                          }
+                        ]
+                      },
+                      "minLength": 1
+                    }
                   },
                   "staged": {
-                    "type": "string",
-                    "not": {
-                      "anyOf": [
-                        {
-                          "type": "string",
-                          "pattern": "(?:[Gg][Tt][Mm]-[A-Za-z0-9]+|[Uu][Aa]-[0-9]+-[0-9]+)"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:-----BEGIN(?: [A-Z]+)? PRIVATE KEY-----|\\bAKIA[0-9A-Z]{16}\\b|\\bsk-proj-[A-Za-z0-9_-]{8,}\\b|\\bsk-[A-Za-z0-9_-]{20,}\\b|\\b(?:sk|rk)_(?:live|test|prod)_[A-Za-z0-9_-]{8,}\\b|\\b(?:gh[pousr]_|github_pat_)[A-Za-z0-9_]{20,}\\b|\\b(?:npm_|glpat-)[A-Za-z0-9_.-]{8,}\\b|\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b|\\bAIza[A-Za-z0-9_-]{20,}\\b|\\bSG\\.[A-Za-z0-9_.-]{8,}\\b|\\b(?:[Ss]ecret|[Pp]assword|[Cc]redential)[_-][A-Za-z0-9_-]{4,}\\b|\\b[Bb]earer\\s+[A-Za-z0-9._~+/-]{12,}={0,2}\\b|\\beyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]+\\b|\\b(?:api[_ -]?[Kk]ey|client[_ -]?[Ss]ecret|[Pp]assword|[Cc]redential|private[_ -]?[Kk]ey)\\s*[:=]\\s*\\S+)"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}|\\b[0-9]{3}-[0-9]{2}-[0-9]{4}\\b|\\b(?:[0-9][ -]?){13,19}\\b|(?:^|[^0-9])(?:\\+?1[ .-]?)?(?:\\([2-9][0-9]{2}\\)|[2-9][0-9]{2})[ .-]?[0-9]{3}[ .-]?[0-9]{4}(?=$|[^0-9]))"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:</?[A-Za-z][^>]*>|[Jj][Aa][Vv][Aa][Ss][Cc][Rr][Ii][Pp][Tt]\\s*:|[Ee][Vv][Aa][Ll]\\s*\\(|(?:[Aa][Ll][Ee][Rr][Tt]|[Ff][Ee][Tt][Cc][Hh])\\s*\\(|\\{\\{|\\}\\}|\\$\\{|#[A-Za-z_][A-Za-z0-9_-]*|(?:^|[\\s,>+~])\\.[A-Za-z_-][A-Za-z0-9_-]*(?:$|[\\s,>+~.#[\\:])|\\[[A-Za-z_:][-A-Za-z0-9_:.]*(?:[~|^$*]?=[^\\]]+)?\\]|(?:[Ll][Oo][Cc][Aa][Ll]|[Ss][Ee][Ss][Ss][Ii][Oo][Nn])[Ss][Tt][Oo][Rr][Aa][Gg][Ee]|[Ii][Nn][Dd][Ee][Xx][Ee][Dd][Dd][Bb]|[Qq][Uu][Ee][Rr][Yy][Ss][Ee][Ll][Ee][Cc][Tt][Oo][Rr]|(?:[Ww][Ii][Nn][Dd][Oo][Ww]|[Dd][Oo][Cc][Uu][Mm][Ee][Nn][Tt]|[Gg][Ll][Oo][Bb][Aa][Ll][Tt][Hh][Ii][Ss]|[Cc][Oo][Nn][Ss][Oo][Ll][Ee])\\s*(?:\\.|\\[)|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\.\\s*[A-Za-z_$][A-Za-z0-9_$]*\\s*\\(|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\([^)]*\\)\\s*;|[Rr][Ee][Tt][Uu][Rr][Nn][^;{}]*;|[Ff][Uu][Nn][Cc][Tt][Ii][Oo][Nn]|=>|(?:[Vv][Aa][Rr]|[Ll][Ee][Tt]|[Cc][Oo][Nn][Ss][Tt])\\s+[A-Za-z_$])"
-                        }
-                      ]
-                    },
-                    "minLength": 1
+                    "type": "array",
+                    "minItems": 1,
+                    "uniqueItems": true,
+                    "items": {
+                      "type": "string",
+                      "not": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "pattern": "(?:[Gg][Tt][Mm]-[A-Za-z0-9]+|[Uu][Aa]-[0-9]+-[0-9]+)"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:-----BEGIN(?: [A-Z]+)? PRIVATE KEY-----|\\bAKIA[0-9A-Z]{16}\\b|\\bsk-proj-[A-Za-z0-9_-]{8,}\\b|\\bsk-[A-Za-z0-9_-]{20,}\\b|\\b(?:sk|rk)_(?:live|test|prod)_[A-Za-z0-9_-]{8,}\\b|\\b(?:gh[pousr]_|github_pat_)[A-Za-z0-9_]{20,}\\b|\\b(?:npm_|glpat-)[A-Za-z0-9_.-]{8,}\\b|\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b|\\bAIza[A-Za-z0-9_-]{20,}\\b|\\bSG\\.[A-Za-z0-9_.-]{8,}\\b|\\b(?:[Ss]ecret|[Pp]assword|[Cc]redential)[_-][A-Za-z0-9_-]{4,}\\b|\\b[Bb]earer\\s+[A-Za-z0-9._~+/-]{12,}={0,2}\\b|\\beyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]+\\b|\\b(?:api[_ -]?[Kk]ey|client[_ -]?[Ss]ecret|[Pp]assword|[Cc]redential|private[_ -]?[Kk]ey)\\s*[:=]\\s*\\S+)"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}|\\b[0-9]{3}-[0-9]{2}-[0-9]{4}\\b|\\b(?:[0-9][ -]?){13,19}\\b|(?:^|[^0-9])(?:\\+?1[ .-]?)?(?:\\([2-9][0-9]{2}\\)|[2-9][0-9]{2})[ .-]?[0-9]{3}[ .-]?[0-9]{4}(?=$|[^0-9]))"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:</?[A-Za-z][^>]*>|[Jj][Aa][Vv][Aa][Ss][Cc][Rr][Ii][Pp][Tt]\\s*:|[Ee][Vv][Aa][Ll]\\s*\\(|(?:[Aa][Ll][Ee][Rr][Tt]|[Ff][Ee][Tt][Cc][Hh])\\s*\\(|\\{\\{|\\}\\}|\\$\\{|#[A-Za-z_][A-Za-z0-9_-]*|(?:^|[\\s,>+~])\\.[A-Za-z_-][A-Za-z0-9_-]*(?:$|[\\s,>+~.#[\\:])|\\[[A-Za-z_:][-A-Za-z0-9_:.]*(?:[~|^$*]?=[^\\]]+)?\\]|(?:[Ll][Oo][Cc][Aa][Ll]|[Ss][Ee][Ss][Ss][Ii][Oo][Nn])[Ss][Tt][Oo][Rr][Aa][Gg][Ee]|[Ii][Nn][Dd][Ee][Xx][Ee][Dd][Dd][Bb]|[Qq][Uu][Ee][Rr][Yy][Ss][Ee][Ll][Ee][Cc][Tt][Oo][Rr]|(?:[Ww][Ii][Nn][Dd][Oo][Ww]|[Dd][Oo][Cc][Uu][Mm][Ee][Nn][Tt]|[Gg][Ll][Oo][Bb][Aa][Ll][Tt][Hh][Ii][Ss]|[Cc][Oo][Nn][Ss][Oo][Ll][Ee])\\s*(?:\\.|\\[)|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\.\\s*[A-Za-z_$][A-Za-z0-9_$]*\\s*\\(|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\([^)]*\\)\\s*;|[Rr][Ee][Tt][Uu][Rr][Nn][^;{}]*;|[Ff][Uu][Nn][Cc][Tt][Ii][Oo][Nn]|=>|(?:[Vv][Aa][Rr]|[Ll][Ee][Tt]|[Cc][Oo][Nn][Ss][Tt])\\s+[A-Za-z_$])"
+                          }
+                        ]
+                      },
+                      "minLength": 1
+                    }
                   },
                   "live": {
-                    "type": "string",
-                    "not": {
-                      "anyOf": [
-                        {
-                          "type": "string",
-                          "pattern": "(?:[Gg][Tt][Mm]-[A-Za-z0-9]+|[Uu][Aa]-[0-9]+-[0-9]+)"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:-----BEGIN(?: [A-Z]+)? PRIVATE KEY-----|\\bAKIA[0-9A-Z]{16}\\b|\\bsk-proj-[A-Za-z0-9_-]{8,}\\b|\\bsk-[A-Za-z0-9_-]{20,}\\b|\\b(?:sk|rk)_(?:live|test|prod)_[A-Za-z0-9_-]{8,}\\b|\\b(?:gh[pousr]_|github_pat_)[A-Za-z0-9_]{20,}\\b|\\b(?:npm_|glpat-)[A-Za-z0-9_.-]{8,}\\b|\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b|\\bAIza[A-Za-z0-9_-]{20,}\\b|\\bSG\\.[A-Za-z0-9_.-]{8,}\\b|\\b(?:[Ss]ecret|[Pp]assword|[Cc]redential)[_-][A-Za-z0-9_-]{4,}\\b|\\b[Bb]earer\\s+[A-Za-z0-9._~+/-]{12,}={0,2}\\b|\\beyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]+\\b|\\b(?:api[_ -]?[Kk]ey|client[_ -]?[Ss]ecret|[Pp]assword|[Cc]redential|private[_ -]?[Kk]ey)\\s*[:=]\\s*\\S+)"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}|\\b[0-9]{3}-[0-9]{2}-[0-9]{4}\\b|\\b(?:[0-9][ -]?){13,19}\\b|(?:^|[^0-9])(?:\\+?1[ .-]?)?(?:\\([2-9][0-9]{2}\\)|[2-9][0-9]{2})[ .-]?[0-9]{3}[ .-]?[0-9]{4}(?=$|[^0-9]))"
-                        },
-                        {
-                          "type": "string",
-                          "pattern": "(?:</?[A-Za-z][^>]*>|[Jj][Aa][Vv][Aa][Ss][Cc][Rr][Ii][Pp][Tt]\\s*:|[Ee][Vv][Aa][Ll]\\s*\\(|(?:[Aa][Ll][Ee][Rr][Tt]|[Ff][Ee][Tt][Cc][Hh])\\s*\\(|\\{\\{|\\}\\}|\\$\\{|#[A-Za-z_][A-Za-z0-9_-]*|(?:^|[\\s,>+~])\\.[A-Za-z_-][A-Za-z0-9_-]*(?:$|[\\s,>+~.#[\\:])|\\[[A-Za-z_:][-A-Za-z0-9_:.]*(?:[~|^$*]?=[^\\]]+)?\\]|(?:[Ll][Oo][Cc][Aa][Ll]|[Ss][Ee][Ss][Ss][Ii][Oo][Nn])[Ss][Tt][Oo][Rr][Aa][Gg][Ee]|[Ii][Nn][Dd][Ee][Xx][Ee][Dd][Dd][Bb]|[Qq][Uu][Ee][Rr][Yy][Ss][Ee][Ll][Ee][Cc][Tt][Oo][Rr]|(?:[Ww][Ii][Nn][Dd][Oo][Ww]|[Dd][Oo][Cc][Uu][Mm][Ee][Nn][Tt]|[Gg][Ll][Oo][Bb][Aa][Ll][Tt][Hh][Ii][Ss]|[Cc][Oo][Nn][Ss][Oo][Ll][Ee])\\s*(?:\\.|\\[)|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\.\\s*[A-Za-z_$][A-Za-z0-9_$]*\\s*\\(|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\([^)]*\\)\\s*;|[Rr][Ee][Tt][Uu][Rr][Nn][^;{}]*;|[Ff][Uu][Nn][Cc][Tt][Ii][Oo][Nn]|=>|(?:[Vv][Aa][Rr]|[Ll][Ee][Tt]|[Cc][Oo][Nn][Ss][Tt])\\s+[A-Za-z_$])"
-                        }
-                      ]
-                    },
-                    "minLength": 1
+                    "type": "array",
+                    "minItems": 1,
+                    "uniqueItems": true,
+                    "items": {
+                      "type": "string",
+                      "not": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "pattern": "(?:[Gg][Tt][Mm]-[A-Za-z0-9]+|[Uu][Aa]-[0-9]+-[0-9]+)"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:-----BEGIN(?: [A-Z]+)? PRIVATE KEY-----|\\bAKIA[0-9A-Z]{16}\\b|\\bsk-proj-[A-Za-z0-9_-]{8,}\\b|\\bsk-[A-Za-z0-9_-]{20,}\\b|\\b(?:sk|rk)_(?:live|test|prod)_[A-Za-z0-9_-]{8,}\\b|\\b(?:gh[pousr]_|github_pat_)[A-Za-z0-9_]{20,}\\b|\\b(?:npm_|glpat-)[A-Za-z0-9_.-]{8,}\\b|\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b|\\bAIza[A-Za-z0-9_-]{20,}\\b|\\bSG\\.[A-Za-z0-9_.-]{8,}\\b|\\b(?:[Ss]ecret|[Pp]assword|[Cc]redential)[_-][A-Za-z0-9_-]{4,}\\b|\\b[Bb]earer\\s+[A-Za-z0-9._~+/-]{12,}={0,2}\\b|\\beyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]+\\b|\\b(?:api[_ -]?[Kk]ey|client[_ -]?[Ss]ecret|[Pp]assword|[Cc]redential|private[_ -]?[Kk]ey)\\s*[:=]\\s*\\S+)"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}|\\b[0-9]{3}-[0-9]{2}-[0-9]{4}\\b|\\b(?:[0-9][ -]?){13,19}\\b|(?:^|[^0-9])(?:\\+?1[ .-]?)?(?:\\([2-9][0-9]{2}\\)|[2-9][0-9]{2})[ .-]?[0-9]{3}[ .-]?[0-9]{4}(?=$|[^0-9]))"
+                          },
+                          {
+                            "type": "string",
+                            "pattern": "(?:</?[A-Za-z][^>]*>|[Jj][Aa][Vv][Aa][Ss][Cc][Rr][Ii][Pp][Tt]\\s*:|[Ee][Vv][Aa][Ll]\\s*\\(|(?:[Aa][Ll][Ee][Rr][Tt]|[Ff][Ee][Tt][Cc][Hh])\\s*\\(|\\{\\{|\\}\\}|\\$\\{|#[A-Za-z_][A-Za-z0-9_-]*|(?:^|[\\s,>+~])\\.[A-Za-z_-][A-Za-z0-9_-]*(?:$|[\\s,>+~.#[\\:])|\\[[A-Za-z_:][-A-Za-z0-9_:.]*(?:[~|^$*]?=[^\\]]+)?\\]|(?:[Ll][Oo][Cc][Aa][Ll]|[Ss][Ee][Ss][Ss][Ii][Oo][Nn])[Ss][Tt][Oo][Rr][Aa][Gg][Ee]|[Ii][Nn][Dd][Ee][Xx][Ee][Dd][Dd][Bb]|[Qq][Uu][Ee][Rr][Yy][Ss][Ee][Ll][Ee][Cc][Tt][Oo][Rr]|(?:[Ww][Ii][Nn][Dd][Oo][Ww]|[Dd][Oo][Cc][Uu][Mm][Ee][Nn][Tt]|[Gg][Ll][Oo][Bb][Aa][Ll][Tt][Hh][Ii][Ss]|[Cc][Oo][Nn][Ss][Oo][Ll][Ee])\\s*(?:\\.|\\[)|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\.\\s*[A-Za-z_$][A-Za-z0-9_$]*\\s*\\(|[A-Za-z_$][A-Za-z0-9_$]*\\s*\\([^)]*\\)\\s*;|[Rr][Ee][Tt][Uu][Rr][Nn][^;{}]*;|[Ff][Uu][Nn][Cc][Tt][Ii][Oo][Nn]|=>|(?:[Vv][Aa][Rr]|[Ll][Ee][Tt]|[Cc][Oo][Nn][Ss][Tt])\\s+[A-Za-z_$])"
+                          }
+                        ]
+                      },
+                      "minLength": 1
+                    }
                   }
                 }
               }

package/packages/public-runtime/src/gtm-migration/draft-generator.ts

@@ -346,7 +346,7 @@ export function generateDisabledMigrationDraft(
     // A container's GA4 id is the merchant's LIVE destination, so the draft proposes it
     // at that stage only. A non-live stage needs its own TEST id, which the merchant adds
     // before verifying — the contract refuses reusing the live one there.
-    if (destinationId !== null) proposedConfiguration[destinationKey] = { live: destinationId };
+    if (destinationId !== null) proposedConfiguration[destinationKey] = { live: [destinationId] };
   }
 
   // --- Redacted finding codes (no source text; stable, sorted-by-construction). -

package/packages/public-runtime/src/integration/managed-analytics-api-v1.schemas.ts

@@ -30,17 +30,29 @@ const REDACTED_PATH = { ...SAFE_CONFIG_STRING, pattern: "^(?:\\$|[A-Za-z][A-Za-z
 
 /**
  * A per-stage destination map — the one non-primitive configuration value, and closed:
- * only the declared stages, only safe strings. `local` is absent because the local dev
- * loop ships no integrations, so a value there could never fire.
+ * only the declared stages, only non-empty arrays of safe strings. `local` is absent
+ * because the local dev loop ships no integrations, so a value there could never fire.
+ *
+ * A stage holds SEVERAL ids because a vendor can natively receive one event at several
+ * properties; index 0 is the primary. The per-adapter ceiling is the catalog definition's
+ * `maxEntries`, not a number in this schema — this shape only fixes that the values are a
+ * closed, ordered, unique list of safe strings.
  */
+const stageDestinationIds = {
+  type: "array",
+  minItems: 1,
+  uniqueItems: true,
+  items: SAFE_NON_EMPTY_STRING,
+} as const;
+
 const stageDestinationMap = {
   type: "object",
   additionalProperties: false,
   minProperties: 1,
   properties: {
-    candidate: SAFE_NON_EMPTY_STRING,
-    staged: SAFE_NON_EMPTY_STRING,
-    live: SAFE_NON_EMPTY_STRING,
+    candidate: stageDestinationIds,
+    staged: stageDestinationIds,
+    live: stageDestinationIds,
   },
 } as const;
 
@@ -76,13 +88,14 @@ export const ADAPTER_DEFINITION_V1_JSON_SCHEMA = {
       items: {
         type: "object",
         additionalProperties: false,
-        required: ["key", "label", "description", "kind", "required"],
+        required: ["key", "label", "description", "kind", "required", "maxEntries"],
         properties: {
           key: SAFE_CONFIG_KEY,
           label: SAFE_NON_EMPTY_STRING,
           description: SAFE_NON_EMPTY_STRING,
           kind: { type: "string", enum: ["string", "boolean", "integer", "stageMap"] },
           required: { type: "boolean" },
+          maxEntries: { type: "integer", minimum: 1 },
         },
       },
     },

package/packages/public-runtime/src/integration/managed-analytics-api-v1.ts

@@ -43,13 +43,20 @@ export type AdapterConfigStage = (typeof ADAPTER_CONFIG_STAGES)[number];
  * A per-stage destination map — the one non-primitive configuration value.
  *
  * Its shape is CLOSED: keys come from {@link ADAPTER_CONFIG_STAGES} and every value is a
- * plain string held to the same executable-content and PII checks as any other
- * configuration value. So the property that makes this contract safe is intact — a
- * merchant still cannot supply markup, selectors, secrets, or arbitrary structure — while
- * a destination can differ per stage, which is what makes the devbook's own rule (a
- * non-live stage must not reuse the live property) satisfiable through the console at all.
+ * non-empty array of plain strings, each held to the same executable-content and PII
+ * checks as any other configuration value. So the property that makes this contract safe
+ * is intact — a merchant still cannot supply markup, selectors, secrets, or arbitrary
+ * structure — while a destination can differ per stage, which is what makes the devbook's
+ * own rule (a non-live stage must not reuse the live property) satisfiable through the
+ * console at all.
+ *
+ * A stage takes MULTIPLE ids because a vendor can natively receive one event at several
+ * properties (a GA4 primary plus a rollup). Order is significant: index 0 is the primary.
+ * How many a stage may hold is the ADAPTER's declared cap ({@link AdapterConfigField}'s
+ * `maxEntries`), never a global one — an adapter whose runtime sends to exactly one
+ * destination declares 1, so multi-id cannot leak into it silently.
  */
-export type AdapterConfigStageMap = Partial<Record<AdapterConfigStage, string>>;
+export type AdapterConfigStageMap = Partial<Record<AdapterConfigStage, string[]>>;
 
 export type AdapterConfigValue = string | boolean | number | AdapterConfigStageMap;
 /** Public identifiers are opaque handles: never emails, names, or user-provided labels. */
@@ -65,6 +72,12 @@ export interface AdapterConfigField {
   description: string;
   kind: AdapterConfigValueKind;
   required: boolean;
+  /**
+   * How many values one stage of a `stageMap` may hold — the adapter's own cap, so a
+   * console knows whether to offer a second destination without reaching into the
+   * runtime. 1 means single-valued. Always 1 for a non-`stageMap` kind.
+   */
+  maxEntries: number;
 }
 
 export interface AdapterDeprecation {
@@ -567,20 +580,35 @@ function validateConfig(input: unknown, v: Violations, path: string): void {
   for (const [key, value] of Object.entries(obj)) {
     if (!/^[a-z][a-zA-Z0-9]{0,63}$/.test(key)) v.add(pathAt(path, key), "format", "Configuration keys must be lower camel-case identifiers.");
     // A per-stage map is the one permitted non-primitive, and it is CLOSED: stage keys
-    // only, string values only, each held to the same executable-content check below. So
-    // no arbitrary structure or depth can enter configuration through it.
+    // only, arrays of strings only, each element held to the same executable-content
+    // check below. So no arbitrary structure or depth can enter configuration through it.
     if (isStageMap(value)) {
       const entries = Object.entries(value as Record<string, unknown>);
       if (entries.length === 0) v.add(pathAt(path, key), "empty", "A per-stage map must name at least one stage.");
-      for (const [stage, id] of entries) {
+      for (const [stage, ids] of entries) {
         const stagePath = pathAt(pathAt(path, key), stage);
         if (!(ADAPTER_CONFIG_STAGES as readonly string[]).includes(stage)) {
           v.add(stagePath, "unknown_enum", `Stage must be one of: ${ADAPTER_CONFIG_STAGES.join(", ")}.`);
         }
-        if (typeof id !== "string") {
-          v.add(stagePath, "type", "A per-stage value must be a string.");
-        } else if (EXECUTABLE_OR_INSTRUCTION_VALUE.test(id)) {
-          v.add(stagePath, "executable_value", "Configuration cannot contain markup, JavaScript, templates, selectors, or storage instructions.");
+        if (!Array.isArray(ids)) {
+          v.add(stagePath, "type", "A per-stage value must be an array of destination identifiers.");
+          continue;
+        }
+        if (ids.length === 0) {
+          v.add(stagePath, "empty", "A configured stage must name at least one destination identifier.");
+          continue;
+        }
+        ids.forEach((id, index) => {
+          const idPath = indexAt(stagePath, index);
+          if (typeof id !== "string") {
+            v.add(idPath, "type", "A destination identifier must be a string.");
+          } else if (EXECUTABLE_OR_INSTRUCTION_VALUE.test(id)) {
+            v.add(idPath, "executable_value", "Configuration cannot contain markup, JavaScript, templates, selectors, or storage instructions.");
+          }
+        });
+        const strings = ids.filter((id): id is string => typeof id === "string");
+        if (new Set(strings).size !== strings.length) {
+          v.add(stagePath, "duplicate", "A stage cannot name the same destination identifier twice.");
         }
       }
       continue;
@@ -611,10 +639,16 @@ export function validateAdapterDefinition(input: unknown): ContractResult<Adapte
   if (!Array.isArray(fields)) v.add("configuration", "type", "Expected an array.");
   else fields.forEach((field, i) => {
     const path = `configuration[${i}]`; const f = object(field, v, path); if (!f) return;
-    rejectKeys(f, ["key", "label", "description", "kind", "required"], v, path);
+    rejectKeys(f, ["key", "label", "description", "kind", "required", "maxEntries"], v, path);
     const key = string(f, "key", v, path); if (key && (!/^[a-z][a-zA-Z0-9]{0,63}$/.test(key) || isForbiddenKeyName(key))) v.add(`${path}.key`, "forbidden_field", "Configuration field names must be safe lower camel-case identifiers.");
-    string(f, "label", v, path); string(f, "description", v, path); enumeration(f, "kind", ADAPTER_CONFIG_VALUE_KINDS, v, path);
+    string(f, "label", v, path); string(f, "description", v, path); const kind = enumeration(f, "kind", ADAPTER_CONFIG_VALUE_KINDS, v, path);
     if (typeof f.required !== "boolean") v.add(`${path}.required`, "type", "Expected a boolean.");
+    const maxEntries = integer(f, "maxEntries", v, path, 1);
+    // Only a stageMap holds several values, so any other kind declaring a cap above 1
+    // would advertise a fan-out its runtime has no way to perform.
+    if (kind !== undefined && kind !== "stageMap" && maxEntries !== undefined && maxEntries !== 1) {
+      v.add(`${path}.maxEntries`, "state", "Only a stageMap field may declare more than one entry.");
+    }
   });
   if (Array.isArray(fields)) {
     const keys = fields.flatMap((field) => isPlainObject(field) && typeof field.key === "string" ? [field.key] : []);

package/packages/public-runtime/src/integration/native-amplitude.ts

@@ -14,7 +14,11 @@ import {
   validateCommerceEvent,
   type CommerceEvent,
 } from "./events.js";
-import { validateBrowserEnvironment, type BrowserEnvironment } from "./environment.js";
+import {
+  validateBrowserEnvironment,
+  type BrowserEnvironment,
+  type IntegrationEnvironment,
+} from "./environment.js";
 import { resemblesManagedAnalyticsPii } from "./managed-analytics-value-safety.js";
 import type {
   IntegrationEventSubscribe,
@@ -24,7 +28,7 @@ import type {
 import {
   AMPLITUDE_HTTP_ADAPTER,
   destinationIdConfigKey,
-  resolveAdapterDestinationId,
+  resolveAdapterDestinationIds,
 } from "./platform-adapters.js";
 
 export const AMPLITUDE_COLLECTION_ORIGIN = "https://api2.amplitude.com" as const;
@@ -49,6 +53,20 @@ export interface AmplitudeHttpEvent {
 export const AMPLITUDE_DEDUPE_CAPACITY = 512 as const;
 const MAX_AMPLITUDE_DEDUPE_CAPACITY = 2_048;
 
+/**
+ * Amplitude is single-valued: the reviewed HTTP body carries one `api_key`, so this
+ * adapter has nowhere to put a second project key. A stage that somehow names more than
+ * one resolves to nothing rather than to whichever id came first — collecting to an
+ * arbitrary subset of what a merchant configured is the failure this refuses.
+ */
+function soleDestinationId(
+  publicConfig: Record<string, unknown>,
+  environment: IntegrationEnvironment,
+): string | null {
+  const ids = resolveAdapterDestinationIds(AMPLITUDE_HTTP_ADAPTER, publicConfig, environment);
+  return ids.length === 1 ? ids[0] as string : null;
+}
+
 export type AmplitudeDiagnosticCode =
   | "collection_failed"
   | "subscription_bind_failed"
@@ -201,7 +219,7 @@ export function registerAmplitudeHttpDestination(
   try {
     environment = validateBrowserEnvironment(input.environment);
     destinationId = environment.ok
-      ? resolveAdapterDestinationId(input.publicConfig, environment.value.environment)
+      ? soleDestinationId(input.publicConfig, environment.value.environment)
       : null;
     fetcher = input.fetch;
     observer = input.onDiagnostic;
@@ -297,7 +315,7 @@ export function createAmplitudeLifecycleModule(
         ctx.consent.eligiblePurposes.includes("analytics");
       subscribe = ctx.subscribe;
       destinationId = environment.ok
-        ? resolveAdapterDestinationId(ctx.config, environment.value.environment)
+        ? soleDestinationId(ctx.config, environment.value.environment)
         : null;
       if (
         ctx.appId !== AMPLITUDE_HTTP_ADAPTER.adapterId || !eligible || !subscribe ||

package/packages/public-runtime/src/integration/native-ga4.ts

@@ -6,12 +6,21 @@
  * or persist browser identity. A reviewed direct POST sends a closed, anonymous
  * payload to one exact collection origin after the shared broker has applied consent
  * and logical-event dedupe.
+ *
+ * A stage may configure SEVERAL measurement ids (a primary plus a rollup). GA4 has no
+ * multi-property hit — `tid` names exactly one measurement id — so one logical event
+ * becomes one POST per id, identical but for `tid`. The fan-out sits below the broker's
+ * dedupe, so a logical action is still measured exactly once per property.
  */
 import type { IntegrationLifecycleContext, IntegrationLifecycleModule, LifecycleUpdateReason } from "./lifecycle.js";
 import type { CommerceEvent, CommerceEventType } from "./events.js";
 import { APPROVED_MARKETING_ACTION_NAMES, validateCommerceEvent } from "./events.js";
 import { isPurposeEligible, parseConsentSnapshot } from "./consent-broker.js";
-import { destinationIdConfigKey, GOOGLE_MEASUREMENT_ADAPTER } from "./platform-adapters.js";
+import {
+  destinationIdConfigKey,
+  GOOGLE_MEASUREMENT_ADAPTER,
+  resolveAdapterDestinationIds,
+} from "./platform-adapters.js";
 import { INTEGRATION_ENVIRONMENTS, type IntegrationEnvironment } from "./environment.js";
 import { resemblesManagedAnalyticsPii } from "./managed-analytics-value-safety.js";
 
@@ -63,7 +72,8 @@ export interface NativeGa4ModuleOptions {
 }
 
 interface ActiveGa4Config {
-  destinationId: string;
+  /** Every measurement id this stage collects to, in configured order. */
+  destinationIds: readonly string[];
   environment: IntegrationEnvironment;
   siteSurface: IntegrationLifecycleContext["environment"]["siteSurface"];
 }
@@ -84,24 +94,28 @@ function configuredFor(ctx: IntegrationLifecycleContext): ActiveGa4Config | null
     if (!CONFIG_KEYS.has(key)) return null;
   }
 
-  const liveId = ctx.config[destinationIdConfigKey("live")];
-  if (typeof liveId !== "string" || !GOOGLE_MEASUREMENT_ADAPTER.validateId(liveId)) return null;
+  // Every stage present must decode to a valid, in-cap set, and no non-live stage may
+  // reuse ANY live id — checked across the whole config, not just the active stage, so a
+  // misconfigured neighbour resolves the entire integration to nothing rather than
+  // collecting from a page whose other stages would leak.
+  const liveIds = resolveAdapterDestinationIds(GOOGLE_MEASUREMENT_ADAPTER, ctx.config, "live");
+  if (liveIds.length === 0) return null;
+  const live = new Set(liveIds);
   for (const environment of INTEGRATION_ENVIRONMENTS) {
-    const value = ctx.config[destinationIdConfigKey(environment)];
-    if (value === undefined) continue;
-    if (typeof value !== "string" || !GOOGLE_MEASUREMENT_ADAPTER.validateId(value)) return null;
-    if (environment !== "live" && value === liveId) return null;
+    if (ctx.config[destinationIdConfigKey(environment)] === undefined) continue;
+    const ids = resolveAdapterDestinationIds(GOOGLE_MEASUREMENT_ADAPTER, ctx.config, environment);
+    if (ids.length === 0) return null;
+    if (environment !== "live" && ids.some((id) => live.has(id))) return null;
   }
 
-  const destinationId = ctx.config[destinationIdConfigKey(ctx.environment.environment)];
-  if (
-    typeof destinationId !== "string" ||
-    !GOOGLE_MEASUREMENT_ADAPTER.validateId(destinationId)
-  ) {
-    return null;
-  }
+  const destinationIds = resolveAdapterDestinationIds(
+    GOOGLE_MEASUREMENT_ADAPTER,
+    ctx.config,
+    ctx.environment.environment,
+  );
+  if (destinationIds.length === 0) return null;
   return {
-    destinationId,
+    destinationIds,
     environment: ctx.environment.environment,
     siteSurface: ctx.environment.siteSurface,
   };
@@ -134,28 +148,37 @@ function exactKeys(value: Record<string, unknown>, allowed: readonly string[]):
   return actual.length <= allowed.length && actual.every((key) => allowed.includes(key));
 }
 
-function mapEvent(config: ActiveGa4Config, input: unknown): NativeGa4CollectRequest | null {
+/**
+ * Build the collect requests one event becomes — ONE per configured measurement id.
+ *
+ * GA4 has no multi-property hit: `tid` names exactly one measurement id, so reaching a
+ * primary and a rollup means repeating the same closed payload with a different `tid`.
+ * Returns an empty list when the event does not map, so a caller cannot mistake "not
+ * measured" for "measured once".
+ */
+function mapEvent(config: ActiveGa4Config, input: unknown): NativeGa4CollectRequest[] {
   const validated = validateCommerceEvent(input);
-  if (!validated.ok) return null;
+  if (!validated.ok) return [];
   const event = validated.value;
-  if (!NATIVE_GA4_EVENT_SET.has(event.type)) return null;
-  if (event.storefront.emitter !== "browser") return null;
-  if (event.storefront.environment !== config.environment) return null;
-  if (event.storefront.siteSurface !== config.siteSurface) return null;
-  if (!event.consent.eligiblePurposes.includes("analytics")) return null;
-
+  if (!NATIVE_GA4_EVENT_SET.has(event.type)) return [];
+  if (event.storefront.emitter !== "browser") return [];
+  if (event.storefront.environment !== config.environment) return [];
+  if (event.storefront.siteSurface !== config.siteSurface) return [];
+  if (!event.consent.eligiblePurposes.includes("analytics")) return [];
+
+  // `tid` is the one field that differs between the fan-out requests; it is added per
+  // destination below.
   const fields: Record<string, string> = {
     v: "2",
-    tid: config.destinationId,
     cid: anonymousClientId(event),
   };
 
   if (event.type === "storefront.page.viewed.v1") {
-    if (!exactKeys(event.data, ["path"]) || typeof event.data["path"] !== "string") return null;
+    if (!exactKeys(event.data, ["path"]) || typeof event.data["path"] !== "string") return [];
     fields["en"] = "page_view";
     fields["ep.page_path"] = event.data["path"];
   } else if (event.type === "storefront.page.viewed.v2") {
-    if (!exactKeys(event.data, ["path", "attribution"]) || typeof event.data["path"] !== "string") return null;
+    if (!exactKeys(event.data, ["path", "attribution"]) || typeof event.data["path"] !== "string") return [];
     fields["en"] = "page_view";
     fields["ep.page_path"] = event.data["path"];
     const attribution = event.data["attribution"];
@@ -175,13 +198,16 @@ function mapEvent(config: ActiveGa4Config, input: unknown): NativeGa4CollectRequ
       }
     }
   } else {
-    if (!exactKeys(event.data, ["name"])) return null;
+    if (!exactKeys(event.data, ["name"])) return [];
     const name = event.data["name"];
-    if (typeof name !== "string" || !APPROVED_ACTION_SET.has(name)) return null;
+    if (typeof name !== "string" || !APPROVED_ACTION_SET.has(name)) return [];
     fields["en"] = name;
   }
 
-  return Object.freeze({ endpoint: GA4_COLLECTION_ENDPOINT, fields: Object.freeze(fields) });
+  return config.destinationIds.map((tid) => Object.freeze({
+    endpoint: GA4_COLLECTION_ENDPOINT,
+    fields: Object.freeze({ ...fields, tid }),
+  }));
 }
 
 /**
@@ -237,8 +263,8 @@ export function createNativeGa4Module(options: NativeGa4ModuleOptions): Integrat
             observeSafely(options.observe, "duplicate_suppressed");
             return;
           }
-          const request = mapEvent(current, event);
-          if (!request) {
+          const requests = mapEvent(current, event);
+          if (requests.length === 0) {
             observeSafely(options.observe, "event_rejected");
             return;
           }
@@ -248,13 +274,18 @@ export function createNativeGa4Module(options: NativeGa4ModuleOptions): Integrat
             const oldest = deliveredOrder.shift();
             if (oldest !== undefined) delivered.delete(oldest);
           }
-          try {
-            const result = options.transport(request);
-            if (result && typeof result.then === "function") {
-              void result.catch(() => observeSafely(options.observe, "transport_failed"));
+          // One logical event, one send per configured measurement id. Each send is
+          // independent: a destination whose transport fails is observed on its own and
+          // never suppresses the others.
+          for (const request of requests) {
+            try {
+              const result = options.transport(request);
+              if (result && typeof result.then === "function") {
+                void result.catch(() => observeSafely(options.observe, "transport_failed"));
+              }
+            } catch {
+              observeSafely(options.observe, "transport_failed");
             }
-          } catch {
-            observeSafely(options.observe, "transport_failed");
           }
         },
       },