API Connection Guide

┌──────────────────────────────────────────────────────────────┐
│                    TagDrishti Architecture                   │
└──────────────────────────────────────────────────────────────┘

  Browser (dashboard.tagdrishti.com)
      │
      │  JWT from Clerk
      ▼
  Cloud Run API (gtm-monitor-api.run.app)
      │
      ├──► Supabase PostgreSQL  — tenants, workspaces, api_keys, alert_configs
      │
      ├──► BigQuery            — tag_events, security_events, consent_snapshots,
      │                            anomaly_alerts, web_vitals_rollups
      │
      ├──► Upstash Redis       — last 24h tag status cache (instant dashboard load)
      │
      ├──► Resend              — email alerts
      │
      └──► Stripe              — billing portal, usage metering


  GTM Monitor Script (on client website)
      │
      │  x-api-key header
      ▼
  Cloud Run API → Pub/Sub → Cloud Function → BigQuery
    

// dashboard HTML — initAuth() replacement for production
import Clerk from '@clerk/clerk-js';

const clerk = new Clerk(CONFIG.CLERK_PK);
await clerk.load();

if (!clerk.user) {
  // Not signed in — redirect to sign-in
  clerk.redirectToSignIn({ returnBackUrl: window.location.href });
  return;
}

// Get fresh JWT for API calls
STATE.authToken = await clerk.session.getToken();

// Cloud Run Fastify — auth middleware
import { createClerkClient } from '@clerk/clerk-sdk-node';
const clerkClient = createClerkClient({ secretKey: process.env.CLERK_SECRET_KEY });

app.addHook('preHandler', async (req, reply) => {
  try {
    const token = req.headers.authorization?.replace('Bearer ', '');
    if (!token) return reply.code(401).send({ error: 'Unauthorized' });
    const payload = await clerkClient.verifyToken(token);
    // Look up tenant from Supabase by Clerk org/user ID
    const { data: tenant } = await supabase
      .from('tenants').select('*')
      .eq('clerk_org_id', payload.org_id || payload.sub).single();
    req.tenant = tenant;
  } catch (e) { reply.code(401).send({ error: 'Invalid token' }); }
});

// Cache pattern in /api/dashboard/overview endpoint
const cacheKey = `overview:${tenantId}:${workspaceId}:${range}`;
const cached = await redis.get(cacheKey);
if (cached) return JSON.parse(cached);

// ... run BigQuery queries ...

await redis.set(cacheKey, JSON.stringify(result), { ex: 60 }); // 60s TTL
return result;

// ── In TagDrishti-Dashboard-Full.html ──
// Find the CONFIG block near the top of the <script> section
// Replace these 3 values:

const CONFIG = {
  CLOUD_RUN_URL: 'https://gtm-monitor-api-YOUR-HASH.run.app', // ← your Cloud Run URL
  CLERK_PK: 'pk_live_YOUR_PUBLISHABLE_KEY',                    // ← from Clerk dashboard
  SUPABASE_URL: 'https://YOUR_PROJECT_REF.supabase.co',          // ← only if direct BQ needed
  SUPABASE_ANON: 'YOUR_SUPABASE_ANON_KEY',                        // ← only if direct BQ needed
  USE_DEMO_DATA: false,                                          // ← CHANGE THIS to false
  REFRESH_INTERVAL: 30000
};