Toolvana: production-ready media tools platform (CodeIgniter 4)

- 134-tool registry with programmatic SEO (unique titles/H1/descriptions,
  JSON-LD graphs, sitemap index, canonical 301 enforcement via required filter)
- DB-backed job queue (SKIP LOCKED) with drivers: Ffmpeg, Images (GD),
  Pdf (qpdf/gs/poppler), Youtube (thumbnails), Qr (server-side PNG)
- Security: SSRF guard, MIME validation, rate limits, API-key auth,
  bcrypt admin login, security headers
- Admin panel: dashboard, tools/categories/guides CRUD, SEO audit,
  analytics, job inspector with retry, system health, feature flags
- Docker deployment (nginx + web/api FPM pools + scalable workers),
  PHPUnit suite (19 tests / 1139 assertions), PWA manifest + service worker

app/Controllers/Api/Events.php

@@ -0,0 +1,34 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Controllers\Api;
+
+use CodeIgniter\Controller;
+
+/**
+ * Analytics beacon: POST /api/events {name, tool, format, meta}.
+ * Accepts only the whitelisted event names; everything is anonymized
+ * server-side before storage.
+ */
+final class Events extends Controller
+{
+    public function track(): \CodeIgniter\HTTP\ResponseInterface
+    {
+        $payload = $this->request->getJSON(true) ?: $this->request->getPost();
+        $name    = (string) ($payload['name'] ?? '');
+
+        if (! in_array($name, \App\Libraries\Analytics::EVENTS, true)) {
+            return response()->setStatusCode(422)->setJSON(['ok' => false]);
+        }
+
+        service('analytics')->track($name, [
+            'tool'   => mb_substr((string) ($payload['tool'] ?? ''), 0, 120),
+            'format' => isset($payload['format']) ? (string) $payload['format'] : null,
+            'value'  => (int) ($payload['value'] ?? 0),
+            'meta'   => is_array($payload['meta'] ?? null) ? array_slice($payload['meta'], 0, 5) : [],
+        ]);
+
+        return response()->setJSON(['ok' => true]);
+    }
+}