feat(gtm): Spec 1D — website reconciliation (analytics-foundation 1d)

.env.example

@@ -16,5 +16,14 @@ POSTHOG_PROJECT_ID=
 
 # Cockpit shell analytics (apps/cockpit)
 NEXT_PUBLIC_COCKPIT_POSTHOG_TOKEN=
-NEXT_PUBLIC_COCKPIT_POSTHOG_HOST=https://us.i.posthog.com
 NEXT_PUBLIC_COCKPIT_CAPTURE_LOCAL=false
+
+# Cockpit iframe → cockpit-shell /ingest proxy (Spec 1D).
+# Production: full absolute URL (e.g. https://cockpit.cacheplane.ai/ingest).
+# Leave empty in dev to let RunMode derive it from window.location.origin.
+NEXT_PUBLIC_COCKPIT_INGEST_HOST=
+
+# CORS origin allowed to POST to cockpit's /ingest from iframes (Spec 1D).
+# Production: https://examples.cacheplane.ai
+# Leave empty in dev — wildcard '*' is used.
+NEXT_PUBLIC_COCKPIT_IFRAME_ORIGIN=

apps/cockpit/instrumentation-client.ts

@@ -1,15 +1,16 @@
 // SPDX-License-Identifier: MIT
 import posthog from 'posthog-js';
 import { getCockpitSessionId } from './src/lib/analytics/distinct-id';
-import { shouldCaptureAnalytics } from './src/lib/analytics/properties';
+import { shouldCaptureAnalytics } from '@ngaf/telemetry/browser';
 
 const token = process.env.NEXT_PUBLIC_COCKPIT_POSTHOG_TOKEN;
 const captureLocal = process.env.NEXT_PUBLIC_COCKPIT_CAPTURE_LOCAL === 'true';
 const host = typeof window === 'undefined' ? undefined : window.location.host;
 
 if (shouldCaptureAnalytics({ token, captureLocal, host })) {
   posthog.init(token!, {
-    api_host: process.env.NEXT_PUBLIC_COCKPIT_POSTHOG_HOST ?? 'https://us.i.posthog.com',
+    api_host: '/ingest',
+    ui_host: 'https://us.posthog.com',
     persistence: 'memory',
     bootstrap: { distinctID: getCockpitSessionId() },
     autocapture: false,

apps/cockpit/next.config.spec.ts

@@ -0,0 +1,32 @@
+// SPDX-License-Identifier: MIT
+import { describe, expect, it } from 'vitest';
+import { nextConfig as config } from './next.config';
+
+describe('cockpit next.config', () => {
+  it('exposes posthog-js rewrites under /ingest', async () => {
+    expect(typeof config.rewrites).toBe('function');
+    const rewrites = await config.rewrites!();
+    const list = Array.isArray(rewrites) ? rewrites : rewrites.beforeFiles ?? [];
+    const sources = list.map((r: { source: string }) => r.source);
+    expect(sources).toContain('/ingest/static/:path*');
+    expect(sources).toContain('/ingest/:path*');
+    const staticRule = list.find((r: { source: string }) => r.source === '/ingest/static/:path*');
+    expect(staticRule.destination).toBe('https://us-assets.i.posthog.com/static/:path*');
+    const apiRule = list.find((r: { source: string }) => r.source === '/ingest/:path*');
+    expect(apiRule.destination).toBe('https://us.i.posthog.com/:path*');
+  });
+
+  it('attaches CORS headers to /ingest/* responses', async () => {
+    expect(typeof config.headers).toBe('function');
+    const rules = await config.headers!();
+    const ingestRule = rules.find((r: { source: string }) => r.source === '/ingest/:path*');
+    expect(ingestRule).toBeDefined();
+    const headerKeys = ingestRule.headers.map((h: { key: string }) => h.key);
+    expect(headerKeys).toContain('Access-Control-Allow-Origin');
+    expect(headerKeys).toContain('Access-Control-Allow-Methods');
+    expect(headerKeys).toContain('Access-Control-Allow-Headers');
+    expect(headerKeys).toContain('Access-Control-Max-Age');
+    const methods = ingestRule.headers.find((h: { key: string }) => h.key === 'Access-Control-Allow-Methods');
+    expect(methods.value).toBe('POST, OPTIONS');
+  });
+});

apps/cockpit/next.config.ts

@@ -1,8 +1,33 @@
 import { composePlugins, withNx } from '@nx/next';
 import type { WithNxOptions } from '@nx/next/plugins/with-nx';
 
-const nextConfig: WithNxOptions = {
+export const nextConfig: WithNxOptions = {
   nx: {},
+  skipTrailingSlashRedirect: true,
+  rewrites: async () => [
+    {
+      source: '/ingest/static/:path*',
+      destination: 'https://us-assets.i.posthog.com/static/:path*',
+    },
+    {
+      source: '/ingest/:path*',
+      destination: 'https://us.i.posthog.com/:path*',
+    },
+  ],
+  headers: async () => [
+    {
+      source: '/ingest/:path*',
+      headers: [
+        {
+          key: 'Access-Control-Allow-Origin',
+          value: process.env.NEXT_PUBLIC_COCKPIT_IFRAME_ORIGIN ?? '*',
+        },
+        { key: 'Access-Control-Allow-Methods', value: 'POST, OPTIONS' },
+        { key: 'Access-Control-Allow-Headers', value: 'Content-Type, Authorization' },
+        { key: 'Access-Control-Max-Age', value: '86400' },
+      ],
+    },
+  ],
 };
 
 const plugins = [withNx];

apps/cockpit/src/components/analytics-bootstrap.tsx

@@ -4,7 +4,7 @@
 import { useEffect } from 'react';
 import posthog from 'posthog-js';
 import { getCockpitSessionId } from '../lib/analytics/distinct-id';
-import { shouldCaptureAnalytics } from '../lib/analytics/properties';
+import { shouldCaptureAnalytics } from '@ngaf/telemetry/browser';
 
 /**
  * Client-side analytics bootstrap. Initializes posthog-js once per
@@ -25,7 +25,8 @@ export function AnalyticsBootstrap(): null {
       return;
     }
     posthog.init(token as string, {
-      api_host: process.env.NEXT_PUBLIC_COCKPIT_POSTHOG_HOST ?? 'https://us.i.posthog.com',
+      api_host: '/ingest',
+      ui_host: 'https://us.posthog.com',
       persistence: 'memory',
       bootstrap: { distinctID: getCockpitSessionId() },
       autocapture: false,

apps/cockpit/src/components/run-mode/run-mode.tsx

@@ -17,8 +17,10 @@ function buildIframeSrc(runtimeUrl: string, capabilitySlug: string): string {
   url.searchParams.set('cockpit_cap', capabilitySlug);
   const phk = process.env.NEXT_PUBLIC_COCKPIT_POSTHOG_TOKEN;
   if (phk) url.searchParams.set('cockpit_phk', phk);
-  const host = process.env.NEXT_PUBLIC_COCKPIT_POSTHOG_HOST;
-  if (host) url.searchParams.set('cockpit_host', host);
+  const ingestHost =
+    process.env.NEXT_PUBLIC_COCKPIT_INGEST_HOST
+      ?? (typeof window !== 'undefined' ? `${window.location.origin}/ingest` : undefined);
+  if (ingestHost) url.searchParams.set('cockpit_host', ingestHost);
   return url.toString();
 }
 

apps/cockpit/tsconfig.json

@@ -14,7 +14,9 @@
       "@/*": ["./src/*"],
       "@ngaf/design-tokens": ["../../libs/design-tokens/src/index.ts"],
       "@ngaf/ui-react": ["../../libs/ui-react/src/index.ts"],
-      "@ngaf/cockpit-registry": ["../../libs/cockpit-registry/src/index.ts"]
+      "@ngaf/cockpit-registry": ["../../libs/cockpit-registry/src/index.ts"],
+      "@ngaf/telemetry/shared": ["../../libs/telemetry/src/shared/public-api.ts"],
+      "@ngaf/telemetry/browser": ["../../libs/telemetry/src/browser/public-api.ts"]
     }
   },
   "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],

apps/cockpit/vite.config.mts

@@ -6,7 +6,7 @@ export default defineConfig({
   test: {
     environment: 'jsdom',
     globals: true,
-    include: ['src/**/*.spec.ts', 'src/**/*.spec.tsx'],
+    include: ['src/**/*.spec.ts', 'src/**/*.spec.tsx', '*.spec.ts'],
     setupFiles: ['./test-setup.ts'],
   },
 });

apps/website/instrumentation-client.ts

@@ -1,16 +1,14 @@
 import posthog from 'posthog-js';
-import {
-  normalizePostHogHost,
-  shouldCaptureAnalytics,
-} from './src/lib/analytics/properties';
+import { shouldCaptureAnalytics } from '@ngaf/telemetry/browser';
 
 const token = process.env.NEXT_PUBLIC_POSTHOG_TOKEN;
 const captureLocal = process.env.NEXT_PUBLIC_POSTHOG_CAPTURE_LOCAL === 'true';
 const browserHost = typeof window === 'undefined' ? undefined : window.location.host;
 
 if (shouldCaptureAnalytics({ token, captureLocal, host: browserHost })) {
   posthog.init(token!, {
-    api_host: normalizePostHogHost(process.env.NEXT_PUBLIC_POSTHOG_HOST),
+    api_host: '/ingest',
+    ui_host: 'https://us.posthog.com',
     defaults: '2026-01-30',
     capture_pageview: true,
     person_profiles: 'always',

apps/website/next.config.spec.ts

@@ -0,0 +1,18 @@
+// SPDX-License-Identifier: MIT
+import { describe, expect, it } from 'vitest';
+import { nextConfig as config } from './next.config';
+
+describe('website next.config rewrites', () => {
+  it('exposes posthog-js rewrites under /ingest', async () => {
+    expect(typeof config.rewrites).toBe('function');
+    const rewrites = await config.rewrites!();
+    const list = Array.isArray(rewrites) ? rewrites : rewrites.beforeFiles ?? [];
+    const sources = list.map((r: { source: string }) => r.source);
+    expect(sources).toContain('/ingest/static/:path*');
+    expect(sources).toContain('/ingest/:path*');
+    const staticRule = list.find((r: { source: string }) => r.source === '/ingest/static/:path*');
+    expect(staticRule.destination).toBe('https://us-assets.i.posthog.com/static/:path*');
+    const apiRule = list.find((r: { source: string }) => r.source === '/ingest/:path*');
+    expect(apiRule.destination).toBe('https://us.i.posthog.com/:path*');
+  });
+});

apps/website/next.config.ts

@@ -1,10 +1,21 @@
 import { composePlugins, withNx } from '@nx/next';
 import type { WithNxOptions } from '@nx/next/plugins/with-nx';
 
-const nextConfig: WithNxOptions = {
+export const nextConfig: WithNxOptions = {
   // Use this to set Nx-specific options
   // See: https://nx.dev/recipes/next/next-config-setup
   nx: {},
+  skipTrailingSlashRedirect: true,
+  rewrites: async () => [
+    {
+      source: '/ingest/static/:path*',
+      destination: 'https://us-assets.i.posthog.com/static/:path*',
+    },
+    {
+      source: '/ingest/:path*',
+      destination: 'https://us.i.posthog.com/:path*',
+    },
+  ],
 };
 
 const plugins = [

apps/website/src/app/api/ingest/route.ts

@@ -1,6 +1,6 @@
 import { PostHog } from 'posthog-node';
 import { NextRequest, NextResponse } from 'next/server';
-import { normalizePostHogHost, toSafeAnalyticsString } from '../../../lib/analytics/properties';
+import { normalizePostHogHost, toSafeAnalyticsString } from '@ngaf/telemetry/shared';
 
 const PUBLIC_INGEST_KEY = 'phc_public_cacheplane_telemetry';
 

apps/website/src/app/api/leads/route.ts

@@ -5,7 +5,7 @@ import { sendEmail, FROM, NOTIFY_TO, addToAudience } from '../../../../lib/resen
 import { loopsUpsertContact, loopsSendEvent } from '../../../../lib/loops';
 import { leadNotificationHtml } from '../../../../emails/lead-notification';
 import { captureLeadConversion } from '../../../lib/analytics/server';
-import { getSourcePage } from '../../../lib/analytics/properties';
+import { getSourcePage } from '@ngaf/telemetry/shared';
 
 const LEADS_FILE = path.join(process.cwd(), 'data', 'leads.ndjson');
 

apps/website/src/app/api/newsletter/route.ts

@@ -3,7 +3,7 @@ import { sendEmail, FROM, addToAudience } from '../../../../lib/resend';
 import { loopsUpsertContact, loopsSendEvent } from '../../../../lib/loops';
 import { newsletterWelcomeHtml } from '../../../../emails/newsletter-welcome';
 import { captureNewsletterConversion } from '../../../lib/analytics/server';
-import { getSourcePage } from '../../../lib/analytics/properties';
+import { getSourcePage } from '@ngaf/telemetry/shared';
 
 export async function POST(req: NextRequest) {
   let body: { email?: string };

apps/website/src/app/api/whitepaper-signup/route.ts

@@ -9,7 +9,7 @@ import { angularDownloadHtml } from '../../../../emails/angular-download';
 import { renderDownloadHtml } from '../../../../emails/render-download';
 import { chatDownloadHtml } from '../../../../emails/chat-download';
 import { captureWhitepaperConversion } from '../../../lib/analytics/server';
-import { getSourcePage } from '../../../lib/analytics/properties';
+import { getSourcePage } from '@ngaf/telemetry/shared';
 
 const SIGNUPS_FILE = path.join(process.cwd(), 'data', 'whitepaper-signups.ndjson');
 

apps/website/src/lib/analytics/client.ts

@@ -2,7 +2,7 @@
 
 import posthog from 'posthog-js';
 import { analyticsEvents, type AnalyticsEventName, type AnalyticsProperties } from './events';
-import { getSourcePage, toSafeAnalyticsString } from './properties';
+import { getSourcePage, toSafeAnalyticsString } from '@ngaf/telemetry/shared';
 
 function currentSourcePage(): string {
   if (typeof window === 'undefined') return '/';

apps/website/src/lib/analytics/server.ts

@@ -1,7 +1,7 @@
 import { createHash } from 'crypto';
 import { PostHog } from 'posthog-node';
 import { analyticsEvents, type AnalyticsEventName, type AnalyticsProperties, type WhitepaperId } from './events';
-import { getEmailDomain, normalizePostHogHost, toSafeAnalyticsString } from './properties';
+import { getEmailDomain, normalizePostHogHost, toSafeAnalyticsString } from '@ngaf/telemetry/shared';
 
 function getServerPostHogClient(): PostHog | null {
   const token = toSafeAnalyticsString(process.env.NEXT_PUBLIC_POSTHOG_TOKEN, 500);

apps/website/tsconfig.json

@@ -25,7 +25,9 @@
         "../../libs/cockpit-registry/src/index.ts"
       ],
       "@ngaf/cockpit-shell": ["../../libs/cockpit-shell/src/index.ts"],
-      "@ngaf/design-tokens": ["../../libs/design-tokens/src/index.ts"]
+      "@ngaf/design-tokens": ["../../libs/design-tokens/src/index.ts"],
+      "@ngaf/telemetry/shared": ["../../libs/telemetry/src/shared/public-api.ts"],
+      "@ngaf/telemetry/browser": ["../../libs/telemetry/src/browser/public-api.ts"]
     }
   },
   "include": [