@tokenoftrust/storefront-runner 2.0.30 → 2.0.31

package/packages/public-runtime/src/integration/platform-adapter-runtime.ts

@@ -17,11 +17,11 @@ import {
   createAmplitudeLifecycleModule,
 } from "./native-amplitude.js";
 import {
-  createNativeGa4FetchTransport,
   createNativeGa4Module,
   NATIVE_GA4_ADAPTER_VERSION,
   NATIVE_GA4_ENTRY_URL,
   NATIVE_GA4_RUNTIME_ID,
+  type NativeGa4Transport,
 } from "./native-ga4.js";
 import { AMPLITUDE_HTTP_ADAPTER, GOOGLE_MEASUREMENT_ADAPTER } from "./platform-adapters.js";
 
@@ -38,7 +38,8 @@ export interface PlatformAdapterEntryMarker {
 }
 
 export interface PlatformAdapterRuntimeHost {
-  fetch: typeof fetch;
+  fetch?: typeof fetch;
+  nativeGa4Transport?: NativeGa4Transport;
 }
 
 export interface PlatformAdapterRuntimeRegistration {
@@ -70,19 +71,23 @@ const AMPLITUDE_MARKER: PlatformAdapterEntryMarker = Object.freeze({
 export const PLATFORM_ADAPTER_RUNTIME_REGISTRY: readonly PlatformAdapterRuntimeRegistration[] = Object.freeze([
   Object.freeze({
     marker: GA4_MARKER,
-    create: ({ fetch: fetchCapability }: PlatformAdapterRuntimeHost) => createNativeGa4Module({
-      transport: createNativeGa4FetchTransport(fetchCapability),
-    }),
+    create: ({ nativeGa4Transport }: PlatformAdapterRuntimeHost) => {
+      if (!nativeGa4Transport) throw new Error("platform_adapter_ga4_sandbox_unavailable");
+      return createNativeGa4Module({ transport: nativeGa4Transport });
+    },
   }),
   Object.freeze({
     marker: AMPLITUDE_MARKER,
-    create: ({ fetch: fetchCapability }: PlatformAdapterRuntimeHost) =>
-      createAmplitudeLifecycleModule({ fetch: fetchCapability }),
+    create: ({ fetch: fetchCapability }: PlatformAdapterRuntimeHost) => {
+      if (!fetchCapability) throw new Error("platform_adapter_fetch_unavailable");
+      return createAmplitudeLifecycleModule({ fetch: fetchCapability });
+    },
   }),
 ]);
 
 export interface PlatformAdapterRuntimeLoaderOptions {
   fetchCapability?: typeof fetch;
+  nativeGa4Transport?: () => NativeGa4Transport;
   importModule?: (url: string) => Promise<unknown>;
   fallback: IntegrationModuleLoader;
 }
@@ -137,10 +142,14 @@ export function makePlatformAdapterRuntimeLoader(
     if (!platformClaim(integration)) return options.fallback(integration);
     const registration = registrationFor(integration);
     if (!registration) throw new Error("platform_adapter_entry_unreviewed");
-    if (!options.fetchCapability) throw new Error("platform_adapter_fetch_unavailable");
     const namespace = await importModule(registration.marker.entry.url);
     const marker = (namespace as { platformAdapterEntry?: unknown })?.platformAdapterEntry;
     if (!markerEquals(registration.marker, marker)) throw new Error("platform_adapter_entry_invalid");
-    return registration.create({ fetch: options.fetchCapability });
+    return registration.create({
+      fetch: options.fetchCapability,
+      nativeGa4Transport: registration.marker.appId === GOOGLE_MEASUREMENT_ADAPTER.adapterId
+        ? options.nativeGa4Transport?.()
+        : undefined,
+    });
   };
 }

package/packages/public-runtime/src/integration/platform-adapters.ts

@@ -107,6 +107,8 @@ export interface PlatformAdapterDefinition {
   supportUrl: string;
   /** The ONE platform-owned entry module every instance of this adapter points at. */
   entryAsset: string;
+  /** Vendor origins used inside the reviewed adapter, independent of parent CSP effects. */
+  collectionOrigins: readonly string[];
   /** The curated CSP profile slug this adapter's origins come from. */
   cspProfile: IntegrationCspProfile;
   /** The consent purpose the destination depends on (the broker enforces it). */
@@ -137,10 +139,10 @@ const META_PIXEL_ID = /^\d{10,20}$/;
 const AMPLITUDE_PROJECT_KEY = /^(?=[a-f0-9]{32}$)(?=.*[a-f])[a-f0-9]+$/i;
 
 /**
- * Native Google Analytics 4 measurement. A single public measurement id drives
- * the platform adapter, which sends reviewed event payloads to the curated analytics
- * endpoints in the `google-measurement` CSP profile. It does not run a merchant-owned
- * browser container. Depends on analytics consent (ADR 0023 Q3).
+ * Native Google Analytics 4 measurement. Reviewed parent code sends a closed event
+ * protocol to supported gtag.js inside a null-origin iframe. Google code and network
+ * authority stay out of the parent document. It does not run a merchant-owned browser
+ * container. Depends on analytics consent (ADR 0023 Q3).
  */
 export const GOOGLE_MEASUREMENT_ADAPTER: PlatformAdapterDefinition = Object.freeze({
   adapterId: "platform.google-measurement",
@@ -148,20 +150,24 @@ export const GOOGLE_MEASUREMENT_ADAPTER: PlatformAdapterDefinition = Object.free
   purpose: "Native Google Analytics 4 measurement.",
   publisher: "Storefront platform adapter",
   supportUrl: "https://developers.google.com/analytics/devguides/collection/ga4",
-  entryAsset: "/platform/google-measurement/v1/entry.mjs",
+  entryAsset: "/platform/google-measurement/v2/entry.mjs",
+  collectionOrigins: Object.freeze([
+    "https://www.googletagmanager.com",
+    "https://www.google-analytics.com",
+    "https://analytics.google.com",
+  ]),
   cspProfile: "google-measurement",
   consentPurpose: "analytics",
   phase: "document.deferred",
   performanceBudget: Object.freeze({
     maxTransferredBytes: 90_000,
-    maxAdditionalRequests: 4,
+    maxAdditionalRequests: 5,
     maxMainThreadMilliseconds: 120,
     mustBeAsyncOrDeferred: true,
   }),
   idLabel: "GA4 measurement id (e.g. G-XXXXXXX)",
-  // GA4 natively receives one event at several properties (a primary plus a rollup); the
-  // wire shape is one `/g/collect` request per measurement id, so the ceiling is the
-  // budget's own `maxAdditionalRequests`.
+  // One gtag.js loader plus one event request per configured property (primary + rollups).
+  // The four-destination ceiling therefore consumes the five-request budget exactly.
   maxDestinationsPerStage: 4,
   validateId: (id: string) => GOOGLE_MEASUREMENT_ID.test(id),
   eventMap: Object.freeze({
@@ -183,6 +189,7 @@ export const META_PIXEL_ADAPTER: PlatformAdapterDefinition = Object.freeze({
   publisher: "Storefront platform adapter",
   supportUrl: "https://developers.facebook.com/docs/meta-pixel",
   entryAsset: "platform/meta-pixel/v1/entry.mjs",
+  collectionOrigins: Object.freeze(["https://connect.facebook.net", "https://www.facebook.com"]),
   cspProfile: "meta-pixel",
   consentPurpose: "marketing",
   phase: "document.deferred",
@@ -217,6 +224,7 @@ export const AMPLITUDE_HTTP_ADAPTER: PlatformAdapterDefinition = Object.freeze({
   publisher: "Storefront platform adapter",
   supportUrl: "https://amplitude.com/docs/apis/analytics/http-v2",
   entryAsset: "/platform/amplitude-http/v1/entry.mjs",
+  collectionOrigins: Object.freeze(["https://api2.amplitude.com"]),
   cspProfile: "amplitude-http",
   consentPurpose: "analytics",
   phase: "document.deferred",
@@ -347,6 +355,8 @@ export interface PlatformAdapterCard {
   performanceBudget: PerformanceBudget;
   /** The exact CSP origins this adapter contributes (flattened, sorted). */
   cspOrigins: string[];
+  /** Vendor collection/loading origins, even when isolated from the parent CSP. */
+  collectionOrigins: string[];
   /** The semantic events this adapter measures. */
   eventTypes: CommerceEventType[];
   /** Which stages have a configured destination id, and whether each is conversion-live. */
@@ -415,6 +425,7 @@ export function buildPlatformAdapterCard(
     consentPurposes: [def.consentPurpose],
     performanceBudget: def.performanceBudget,
     cspOrigins: profileOrigins(def.cspProfile),
+    collectionOrigins: [...def.collectionOrigins].sort(),
     eventTypes: adapterEventTypes(def),
     destinationBehavior: stageBehavior(ids),
   };

package/apps/storefront/public/platform/google-measurement/v1/entry.mjs

@@ -1,19 +0,0 @@
-/**
- * Reviewed same-origin marker for the native GA4 platform adapter.
- *
- * The lifecycle host imports this exact-version asset, verifies every field, then
- * constructs the adapter from its bundled @tot/public-runtime implementation with
- * host-injected fetch. This file executes no vendor code and reads no browser global.
- */
-export const platformAdapterEntry = Object.freeze({
-  schemaVersion: 1,
-  origin: "platform-adapter",
-  executionTier: "platform-adapter",
-  appId: "platform.google-measurement",
-  version: "1.0.0",
-  entry: Object.freeze({
-    url: "/platform/google-measurement/v1/entry.mjs",
-    format: "module",
-  }),
-  runtime: "native-ga4-v1",
-});