{{--
    Per-store analytics (N2). Emits the OFFICIAL Google Analytics 4 (gtag.js) and
    Meta (fbq) snippets, each ONLY when its matching, format-valid ID is stored in
    Site Settings. The IDs are re-validated here (not just on save) so a value that
    bypassed the Filament form — e.g. a direct DB write — can never be interpolated
    into a <script> tag. The required hosts are allow-listed in the storefront CSP
    (App\Http\Middleware\SecurityHeaders).
--}}
@php
    $ga4        = $settings->ga4_measurement_id ?? null;
    $metaPixel  = $settings->meta_pixel_id ?? null;
    $ga4Valid   = \App\Models\SiteSettings::isValidGa4Id($ga4);
    $pixelValid = \App\Models\SiteSettings::isValidMetaPixelId($metaPixel);
@endphp
@if($ga4Valid)
    {{-- Google tag (gtag.js) — GA4 --}}
    <script async src="https://www.googletagmanager.com/gtag/js?id={{ $ga4 }}"></script>
    <script>
        window.dataLayer = window.dataLayer || [];
        function gtag(){dataLayer.push(arguments);}
        gtag('js', new Date());
        gtag('config', '{{ $ga4 }}');
    </script>
@endif
@if($pixelValid)
    {{-- Meta Pixel --}}
    <script>
        !function(f,b,e,v,n,t,s)
        {if(f.fbq)return;n=f.fbq=function(){n.callMethod?
        n.callMethod.apply(n,arguments):n.queue.push(arguments)};
        if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';
        n.queue=[];t=b.createElement(e);t.async=!0;
        t.src=v;s=b.getElementsByTagName(e)[0];
        s.parentNode.insertBefore(t,s)}(window, document,'script',
        'https://connect.facebook.net/en_US/fbevents.js');
        fbq('init', '{{ $metaPixel }}');
        fbq('track', 'PageView');
    </script>
    <noscript><img height="1" width="1" style="display:none"
        src="https://www.facebook.com/tr?id={{ $metaPixel }}&ev=PageView&noscript=1"/></noscript>
@endif