@feelflow/ffid-sdk 5.14.0 → 5.16.2

package/README.md

@@ -46,6 +46,10 @@ export default function RootLayout({ children }) {
         baseUrl={process.env.NEXT_PUBLIC_FFID_BASE_URL!}
         serviceApiKey={process.env.FFID_SERVICE_API_KEY!}
         gaMeasurementId={process.env.NEXT_PUBLIC_GA_ID ?? null}
+        // Production-only measurement (v5.16.0+): suppress GA on
+        // preview/staging/local so non-prod traffic never pollutes the
+        // production GA4 property. Defaults to true if omitted.
+        gaEnabled={process.env.VERCEL_ENV === 'production'}
       >
         {children}
         <FFIDCookieBanner />

package/dist/{FFIDCookieLink-D1WwE_ZO.d.cts → FFIDCookieLink-BJgVcJyw.d.cts}

@@ -393,13 +393,19 @@ interface FFIDConsentSyncResult {
 /**
  * Error code literal union for consent SDK failures.
  *
- * - The first 10 codes (`cookie_consent_*`) are reserved by spec §8.2 for
- *   correlation across SDK / FFID API / ops dashboards.
+ * - The `cookie_consent_*` codes reserved by spec §8.2 correlate across
+ *   SDK / FFID API / ops dashboards.
+ * - `cookie_consent_aborted` is an SDK-only code (NOT spec §8.2 reserved):
+ *   the in-flight fetch was cancelled via an `AbortSignal` (e.g. component
+ *   unmount or page navigation). It is a benign teardown, not a backend
+ *   failure, so consumers should generally NOT surface it as an error — it is
+ *   kept distinct from `cookie_consent_api_unreachable` precisely so the
+ *   provider can swallow it instead of emitting Sentry noise (#3869).
  * - `auth_failure` is added by the SDK to cover 401 / 403 responses; it is
  *   NOT part of spec §8.2 reserved codes — the SDK shares this code with the
  *   wider FFID auth surface so consumer error handlers can branch uniformly.
  */
-declare const FFID_CONSENT_ERROR_CODES: readonly ["cookie_consent_api_unreachable", "cookie_consent_response_invalid", "cookie_consent_rate_limited", "cookie_consent_cookie_write_failed", "cookie_consent_parse_failed", "cookie_consent_sync_conflict", "cookie_consent_immutable_violation", "cookie_consent_policy_outdated", "cookie_consent_capture_failed", "cookie_consent_db_write_failed", "auth_failure"];
+declare const FFID_CONSENT_ERROR_CODES: readonly ["cookie_consent_api_unreachable", "cookie_consent_aborted", "cookie_consent_response_invalid", "cookie_consent_rate_limited", "cookie_consent_cookie_write_failed", "cookie_consent_parse_failed", "cookie_consent_sync_conflict", "cookie_consent_immutable_violation", "cookie_consent_policy_outdated", "cookie_consent_capture_failed", "cookie_consent_db_write_failed", "auth_failure"];
 type FFIDConsentErrorCode = (typeof FFID_CONSENT_ERROR_CODES)[number];
 /**
  * Error class for all consent-related failures surfaced through SDK callbacks
@@ -610,11 +616,31 @@ declare global {
     interface Window {
         dataLayer?: unknown[];
         gtag?: (...args: unknown[]) => void;
+        /**
+         * Set once `consent default` has been pushed onto THIS window's
+         * `dataLayer`. The default is page-global and only needs to land once
+         * before GA loads, so the bridge dedups on the window — the same scope
+         * that owns `dataLayer`/`gtag` — rather than per bridge instance. This
+         * survives provider remounts and multiple bridge instances, which a
+         * per-React-ref guard cannot (it never sees the shared global dataLayer),
+         * fixing the ≈142× duplicate `consent default` pushes seen in prod (#3982).
+         */
+        __ffidConsentDefaultApplied?: boolean;
     }
 }
 interface GtagBridgeOptions {
     /** GA Measurement ID, e.g., `G-XXXXXXX`. Empty/null = GA not wired. */
     gaMeasurementId?: string | null;
+    /**
+     * Master switch for GA tag injection. When `false`, the bridge still manages
+     * Consent Mode dataLayer pushes (`setDefaultConsent` / `updateConsent`) but
+     * `applyGaInjection` never appends the `gtag.js` script — regardless of
+     * `gaMeasurementId` or analytics consent. Defaults to `true` (legacy
+     * behavior). Consumers gate this on their own environment so non-production
+     * builds don't pollute the production GA4 property (e.g.
+     * `gaEnabled={process.env.VERCEL_ENV === 'production'}`).
+     */
+    gaEnabled?: boolean;
     /** Override script src for testing. Default: official gtag URL. */
     gtagScriptSrc?: string;
     /** Document/window injection target (server-side stays no-op). */
@@ -641,7 +667,12 @@ declare function mapCategoriesToGtagParams(cats: FFIDConsentCategories): GtagCon
 interface GtagBridge {
     /**
      * Push `consent default` with ALL_DENIED_EXCEPT_NECESSARY. Must be called
-     * **synchronously** before any GA script tag is added. Idempotent.
+     * **synchronously** before any GA script tag is added.
+     *
+     * Idempotent at the window scope: `consent default` is pushed at most once
+     * per window's `dataLayer`, no matter how many bridge instances call it
+     * (provider remount, a second provider, strict-mode double-mount). The
+     * default is page-global and only needs to land once before GA loads (#3982).
      */
     setDefaultConsent(): void;
     /**
@@ -703,6 +734,23 @@ interface FFIDAnalyticsProviderProps {
      * avoiding the triple-state `string | null | undefined` anti-pattern.
      */
     gaMeasurementId?: string | null;
+    /**
+     * Master switch for GA tag injection. When `false`, the provider still runs
+     * Consent Mode (default/update dataLayer pushes) but never injects the
+     * `gtag.js` script — regardless of `gaMeasurementId` or analytics consent.
+     * Defaults to `true` (legacy behavior, fully backward compatible).
+     *
+     * Gate this on your own deploy environment so non-production builds don't
+     * send hits to the production GA4 property, e.g.
+     * `gaEnabled={process.env.VERCEL_ENV === 'production'}`. Read the env signal
+     * server-side where possible (it is captured once at mount, not reactive).
+     *
+     * Prefer `gaEnabled={false}` over `gaMeasurementId={null}` when gating by
+     * environment: `gaEnabled={false}` keeps a stable measurement ID wired across
+     * builds and keeps Consent Mode pushes flowing, whereas `null` means "GA was
+     * never configured for this app".
+     */
+    gaEnabled?: boolean;
     /** When true, control Sentry session replay based on `functional` consent. */
     sentryReplay?: boolean;
     /** Sentry namespace override; defaults to `(window as any).Sentry`. */
@@ -751,7 +799,7 @@ interface FFIDAnalyticsProviderProps {
     fetchImpl?: typeof fetch;
     children: ReactNode;
 }
-declare function FFIDAnalyticsProvider({ baseUrl, serviceApiKey, getAccessToken, gaMeasurementId, sentryReplay, sentry, onConsentChange, onError, autoShowBanner, dismissalCooldownMinutes, mergeWarningMessages, fetchImpl, children, }: FFIDAnalyticsProviderProps): React.JSX.Element;
+declare function FFIDAnalyticsProvider({ baseUrl, serviceApiKey, getAccessToken, gaMeasurementId, gaEnabled, sentryReplay, sentry, onConsentChange, onError, autoShowBanner, dismissalCooldownMinutes, mergeWarningMessages, fetchImpl, children, }: FFIDAnalyticsProviderProps): React.JSX.Element;
 
 interface FFIDConsentContextValue {
     /** Current consent state. Always non-null; "not yet decided" is encoded by `hasDecided=false`. */

package/dist/{FFIDCookieLink-D1WwE_ZO.d.ts → FFIDCookieLink-BJgVcJyw.d.ts}

@@ -393,13 +393,19 @@ interface FFIDConsentSyncResult {
 /**
  * Error code literal union for consent SDK failures.
  *
- * - The first 10 codes (`cookie_consent_*`) are reserved by spec §8.2 for
- *   correlation across SDK / FFID API / ops dashboards.
+ * - The `cookie_consent_*` codes reserved by spec §8.2 correlate across
+ *   SDK / FFID API / ops dashboards.
+ * - `cookie_consent_aborted` is an SDK-only code (NOT spec §8.2 reserved):
+ *   the in-flight fetch was cancelled via an `AbortSignal` (e.g. component
+ *   unmount or page navigation). It is a benign teardown, not a backend
+ *   failure, so consumers should generally NOT surface it as an error — it is
+ *   kept distinct from `cookie_consent_api_unreachable` precisely so the
+ *   provider can swallow it instead of emitting Sentry noise (#3869).
  * - `auth_failure` is added by the SDK to cover 401 / 403 responses; it is
  *   NOT part of spec §8.2 reserved codes — the SDK shares this code with the
  *   wider FFID auth surface so consumer error handlers can branch uniformly.
  */
-declare const FFID_CONSENT_ERROR_CODES: readonly ["cookie_consent_api_unreachable", "cookie_consent_response_invalid", "cookie_consent_rate_limited", "cookie_consent_cookie_write_failed", "cookie_consent_parse_failed", "cookie_consent_sync_conflict", "cookie_consent_immutable_violation", "cookie_consent_policy_outdated", "cookie_consent_capture_failed", "cookie_consent_db_write_failed", "auth_failure"];
+declare const FFID_CONSENT_ERROR_CODES: readonly ["cookie_consent_api_unreachable", "cookie_consent_aborted", "cookie_consent_response_invalid", "cookie_consent_rate_limited", "cookie_consent_cookie_write_failed", "cookie_consent_parse_failed", "cookie_consent_sync_conflict", "cookie_consent_immutable_violation", "cookie_consent_policy_outdated", "cookie_consent_capture_failed", "cookie_consent_db_write_failed", "auth_failure"];
 type FFIDConsentErrorCode = (typeof FFID_CONSENT_ERROR_CODES)[number];
 /**
  * Error class for all consent-related failures surfaced through SDK callbacks
@@ -610,11 +616,31 @@ declare global {
     interface Window {
         dataLayer?: unknown[];
         gtag?: (...args: unknown[]) => void;
+        /**
+         * Set once `consent default` has been pushed onto THIS window's
+         * `dataLayer`. The default is page-global and only needs to land once
+         * before GA loads, so the bridge dedups on the window — the same scope
+         * that owns `dataLayer`/`gtag` — rather than per bridge instance. This
+         * survives provider remounts and multiple bridge instances, which a
+         * per-React-ref guard cannot (it never sees the shared global dataLayer),
+         * fixing the ≈142× duplicate `consent default` pushes seen in prod (#3982).
+         */
+        __ffidConsentDefaultApplied?: boolean;
     }
 }
 interface GtagBridgeOptions {
     /** GA Measurement ID, e.g., `G-XXXXXXX`. Empty/null = GA not wired. */
     gaMeasurementId?: string | null;
+    /**
+     * Master switch for GA tag injection. When `false`, the bridge still manages
+     * Consent Mode dataLayer pushes (`setDefaultConsent` / `updateConsent`) but
+     * `applyGaInjection` never appends the `gtag.js` script — regardless of
+     * `gaMeasurementId` or analytics consent. Defaults to `true` (legacy
+     * behavior). Consumers gate this on their own environment so non-production
+     * builds don't pollute the production GA4 property (e.g.
+     * `gaEnabled={process.env.VERCEL_ENV === 'production'}`).
+     */
+    gaEnabled?: boolean;
     /** Override script src for testing. Default: official gtag URL. */
     gtagScriptSrc?: string;
     /** Document/window injection target (server-side stays no-op). */
@@ -641,7 +667,12 @@ declare function mapCategoriesToGtagParams(cats: FFIDConsentCategories): GtagCon
 interface GtagBridge {
     /**
      * Push `consent default` with ALL_DENIED_EXCEPT_NECESSARY. Must be called
-     * **synchronously** before any GA script tag is added. Idempotent.
+     * **synchronously** before any GA script tag is added.
+     *
+     * Idempotent at the window scope: `consent default` is pushed at most once
+     * per window's `dataLayer`, no matter how many bridge instances call it
+     * (provider remount, a second provider, strict-mode double-mount). The
+     * default is page-global and only needs to land once before GA loads (#3982).
      */
     setDefaultConsent(): void;
     /**
@@ -703,6 +734,23 @@ interface FFIDAnalyticsProviderProps {
      * avoiding the triple-state `string | null | undefined` anti-pattern.
      */
     gaMeasurementId?: string | null;
+    /**
+     * Master switch for GA tag injection. When `false`, the provider still runs
+     * Consent Mode (default/update dataLayer pushes) but never injects the
+     * `gtag.js` script — regardless of `gaMeasurementId` or analytics consent.
+     * Defaults to `true` (legacy behavior, fully backward compatible).
+     *
+     * Gate this on your own deploy environment so non-production builds don't
+     * send hits to the production GA4 property, e.g.
+     * `gaEnabled={process.env.VERCEL_ENV === 'production'}`. Read the env signal
+     * server-side where possible (it is captured once at mount, not reactive).
+     *
+     * Prefer `gaEnabled={false}` over `gaMeasurementId={null}` when gating by
+     * environment: `gaEnabled={false}` keeps a stable measurement ID wired across
+     * builds and keeps Consent Mode pushes flowing, whereas `null` means "GA was
+     * never configured for this app".
+     */
+    gaEnabled?: boolean;
     /** When true, control Sentry session replay based on `functional` consent. */
     sentryReplay?: boolean;
     /** Sentry namespace override; defaults to `(window as any).Sentry`. */
@@ -751,7 +799,7 @@ interface FFIDAnalyticsProviderProps {
     fetchImpl?: typeof fetch;
     children: ReactNode;
 }
-declare function FFIDAnalyticsProvider({ baseUrl, serviceApiKey, getAccessToken, gaMeasurementId, sentryReplay, sentry, onConsentChange, onError, autoShowBanner, dismissalCooldownMinutes, mergeWarningMessages, fetchImpl, children, }: FFIDAnalyticsProviderProps): React.JSX.Element;
+declare function FFIDAnalyticsProvider({ baseUrl, serviceApiKey, getAccessToken, gaMeasurementId, gaEnabled, sentryReplay, sentry, onConsentChange, onError, autoShowBanner, dismissalCooldownMinutes, mergeWarningMessages, fetchImpl, children, }: FFIDAnalyticsProviderProps): React.JSX.Element;
 
 interface FFIDConsentContextValue {
     /** Current consent state. Always non-null; "not yet decided" is encoded by `hasDecided=false`. */

package/dist/{chunk-4II4R7NR.js → chunk-C7PURRNI.js}

@@ -1093,7 +1093,7 @@ function createNonContractMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.14.0";
+var SDK_VERSION = "5.16.2";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {

package/dist/{chunk-BVDUQQHP.cjs → chunk-FLLTPPUP.cjs}

@@ -1095,7 +1095,7 @@ function createNonContractMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.14.0";
+var SDK_VERSION = "5.16.2";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {

package/dist/{chunk-M4N2PUX6.js → chunk-G7VOX64X.js}

@@ -158,6 +158,7 @@ var ErrorBodyWireSchema = z.object({
 var FFID_CONSENT_ERROR_CODES = [
   // SDK client (network / response)
   "cookie_consent_api_unreachable",
+  "cookie_consent_aborted",
   "cookie_consent_response_invalid",
   "cookie_consent_rate_limited",
   // SDK storage
@@ -191,6 +192,7 @@ var FFIDConsentError = class extends Error {
 };
 var DEFAULT_CONSENT_ERROR_MESSAGES = {
   cookie_consent_api_unreachable: "\u901A\u4FE1\u30A8\u30E9\u30FC\u304C\u767A\u751F\u3057\u307E\u3057\u305F\u3002\u3082\u3046\u4E00\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
+  cookie_consent_aborted: "\u901A\u4FE1\u304C\u4E2D\u65AD\u3055\u308C\u307E\u3057\u305F\u3002\u3082\u3046\u4E00\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   cookie_consent_response_invalid: "\u540C\u610F\u60C5\u5831\u306E\u53D6\u5F97\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002\u6642\u9593\u3092\u7F6E\u3044\u3066\u518D\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   cookie_consent_rate_limited: "\u30B5\u30FC\u30D3\u30B9\u304C\u6DF7\u96D1\u3057\u3066\u3044\u307E\u3059\u3002\u3057\u3070\u3089\u304F\u7D4C\u3063\u3066\u304B\u3089\u518D\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   cookie_consent_cookie_write_failed: "\u30D6\u30E9\u30A6\u30B6\u306E\u8A2D\u5B9A\u306B\u3088\u308A\u540C\u610F\u60C5\u5831\u3092\u4FDD\u5B58\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F\u3002\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30D6\u30E9\u30A6\u30BA\u3084\u62E1\u5F35\u6A5F\u80FD\u3092\u3054\u78BA\u8A8D\u304F\u3060\u3055\u3044",
@@ -656,6 +658,9 @@ function jitteredDelayMs(baseSec) {
   const jitter = (Math.random() * 2 - 1) * RETRY_JITTER_RATIO;
   return Math.max(0, baseSec * MS_PER_SECOND * (1 + jitter));
 }
+function isAbortError(cause) {
+  return typeof cause === "object" && cause !== null && "name" in cause && cause.name === "AbortError";
+}
 function parseErrorBody(json, retryAfterHeader) {
   const parsed = ErrorBodyWireSchema.safeParse(json);
   const body = parsed.success ? parsed.data : {};
@@ -765,6 +770,15 @@ function createConsentClient(opts) {
       const res = await fetchImpl(url, init);
       return { res };
     } catch (cause) {
+      if (isAbortError(cause)) {
+        return {
+          err: new FFIDConsentError(
+            "cookie_consent_aborted",
+            `Request to ${url} was aborted`,
+            { cause }
+          )
+        };
+      }
       return {
         err: new FFIDConsentError(
           "cookie_consent_api_unreachable",
@@ -978,30 +992,43 @@ function mapCategoriesToGtagParams(cats) {
     ad_personalization: bool(cats.marketing)
   };
 }
-function pushDataLayer(win, args) {
-  if (!win) return;
-  win.dataLayer = win.dataLayer ?? [];
-  win.dataLayer.push(args);
+function ensureGtag(win) {
+  const dataLayer = win.dataLayer = win.dataLayer ?? [];
+  let fn = win.gtag;
+  if (typeof fn !== "function") {
+    fn = function gtag() {
+      dataLayer.push(arguments);
+    };
+    win.gtag = fn;
+  }
+  return fn;
 }
 function createGtagBridge(opts = {}) {
   const win = opts.win ?? (typeof window !== "undefined" ? window : void 0);
   const gaId = opts.gaMeasurementId ?? null;
+  const gaEnabled = opts.gaEnabled ?? true;
   const scriptSrc = opts.gtagScriptSrc ?? DEFAULT_GTAG_SRC;
   let gaScriptInjected = false;
+  function command(...args) {
+    if (!win) return;
+    ensureGtag(win)(...args);
+  }
   return {
     setDefaultConsent() {
+      if (!win || win.__ffidConsentDefaultApplied) return;
       const denyParams = mapCategoriesToGtagParams({
         functional: false,
         analytics: false,
         marketing: false
       });
-      pushDataLayer(win, ["consent", "default", denyParams]);
+      command("consent", "default", denyParams);
+      win.__ffidConsentDefaultApplied = true;
     },
     updateConsent(cats) {
-      const params = mapCategoriesToGtagParams(cats);
-      pushDataLayer(win, ["consent", "update", params]);
+      command("consent", "update", mapCategoriesToGtagParams(cats));
     },
     applyGaInjection(cats) {
+      if (!gaEnabled) return;
       if (!win || !gaId) return;
       if (!cats.analytics) return;
       if (gaScriptInjected) return;
@@ -1011,8 +1038,8 @@ function createGtagBridge(opts = {}) {
       script.async = true;
       script.src = `${scriptSrc}?id=${encodeURIComponent(gaId)}`;
       doc.head.appendChild(script);
-      pushDataLayer(win, ["js", /* @__PURE__ */ new Date()]);
-      pushDataLayer(win, ["config", gaId]);
+      command("js", /* @__PURE__ */ new Date());
+      command("config", gaId);
       gaScriptInjected = true;
     }
   };
@@ -1070,6 +1097,7 @@ function FFIDAnalyticsProvider({
   serviceApiKey,
   getAccessToken,
   gaMeasurementId,
+  gaEnabled,
   sentryReplay,
   sentry,
   onConsentChange,
@@ -1118,9 +1146,11 @@ function FFIDAnalyticsProvider({
     clientRef.current = createConsentClient(clientOpts);
   }
   if (!bridgeRef.current) {
-    bridgeRef.current = createGtagBridge({
+    const bridgeOpts = {
       gaMeasurementId: gaMeasurementId ?? null
-    });
+    };
+    if (gaEnabled !== void 0) bridgeOpts.gaEnabled = gaEnabled;
+    bridgeRef.current = createGtagBridge(bridgeOpts);
     bridgeRef.current.setDefaultConsent();
   }
   const applyCategoriesSideEffects = useCallback(
@@ -1187,14 +1217,16 @@ function FFIDAnalyticsProvider({
   );
   useEffect(() => {
     let cancelled = false;
+    const controller = new AbortController();
     async function bootstrap() {
       const local = readConsentSessionMirror() ?? readConsentCookie();
       applyCategoriesSideEffects(local);
       setState(stateFromLocalCategories(local));
       const client = clientRef.current;
-      const result = await client.getMe();
+      const result = await client.getMe(controller.signal);
       if (cancelled) return;
       if (!result.ok) {
+        if (result.error.code === "cookie_consent_aborted") return;
         setError(result.error);
         onError?.(result.error);
         setIsLoading(false);
@@ -1218,6 +1250,7 @@ function FFIDAnalyticsProvider({
     void bootstrap();
     return () => {
       cancelled = true;
+      controller.abort();
     };
   }, []);
   useEffect(() => {

package/dist/{chunk-R5WSZMUL.cjs → chunk-H5O2CCAY.cjs}

@@ -160,6 +160,7 @@ var ErrorBodyWireSchema = zod.z.object({
 var FFID_CONSENT_ERROR_CODES = [
   // SDK client (network / response)
   "cookie_consent_api_unreachable",
+  "cookie_consent_aborted",
   "cookie_consent_response_invalid",
   "cookie_consent_rate_limited",
   // SDK storage
@@ -193,6 +194,7 @@ var FFIDConsentError = class extends Error {
 };
 var DEFAULT_CONSENT_ERROR_MESSAGES = {
   cookie_consent_api_unreachable: "\u901A\u4FE1\u30A8\u30E9\u30FC\u304C\u767A\u751F\u3057\u307E\u3057\u305F\u3002\u3082\u3046\u4E00\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
+  cookie_consent_aborted: "\u901A\u4FE1\u304C\u4E2D\u65AD\u3055\u308C\u307E\u3057\u305F\u3002\u3082\u3046\u4E00\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   cookie_consent_response_invalid: "\u540C\u610F\u60C5\u5831\u306E\u53D6\u5F97\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002\u6642\u9593\u3092\u7F6E\u3044\u3066\u518D\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   cookie_consent_rate_limited: "\u30B5\u30FC\u30D3\u30B9\u304C\u6DF7\u96D1\u3057\u3066\u3044\u307E\u3059\u3002\u3057\u3070\u3089\u304F\u7D4C\u3063\u3066\u304B\u3089\u518D\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   cookie_consent_cookie_write_failed: "\u30D6\u30E9\u30A6\u30B6\u306E\u8A2D\u5B9A\u306B\u3088\u308A\u540C\u610F\u60C5\u5831\u3092\u4FDD\u5B58\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F\u3002\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30D6\u30E9\u30A6\u30BA\u3084\u62E1\u5F35\u6A5F\u80FD\u3092\u3054\u78BA\u8A8D\u304F\u3060\u3055\u3044",
@@ -658,6 +660,9 @@ function jitteredDelayMs(baseSec) {
   const jitter = (Math.random() * 2 - 1) * RETRY_JITTER_RATIO;
   return Math.max(0, baseSec * MS_PER_SECOND * (1 + jitter));
 }
+function isAbortError(cause) {
+  return typeof cause === "object" && cause !== null && "name" in cause && cause.name === "AbortError";
+}
 function parseErrorBody(json, retryAfterHeader) {
   const parsed = ErrorBodyWireSchema.safeParse(json);
   const body = parsed.success ? parsed.data : {};
@@ -767,6 +772,15 @@ function createConsentClient(opts) {
       const res = await fetchImpl(url, init);
       return { res };
     } catch (cause) {
+      if (isAbortError(cause)) {
+        return {
+          err: new FFIDConsentError(
+            "cookie_consent_aborted",
+            `Request to ${url} was aborted`,
+            { cause }
+          )
+        };
+      }
       return {
         err: new FFIDConsentError(
           "cookie_consent_api_unreachable",
@@ -980,30 +994,43 @@ function mapCategoriesToGtagParams(cats) {
     ad_personalization: bool(cats.marketing)
   };
 }
-function pushDataLayer(win, args) {
-  if (!win) return;
-  win.dataLayer = win.dataLayer ?? [];
-  win.dataLayer.push(args);
+function ensureGtag(win) {
+  const dataLayer = win.dataLayer = win.dataLayer ?? [];
+  let fn = win.gtag;
+  if (typeof fn !== "function") {
+    fn = function gtag() {
+      dataLayer.push(arguments);
+    };
+    win.gtag = fn;
+  }
+  return fn;
 }
 function createGtagBridge(opts = {}) {
   const win = opts.win ?? (typeof window !== "undefined" ? window : void 0);
   const gaId = opts.gaMeasurementId ?? null;
+  const gaEnabled = opts.gaEnabled ?? true;
   const scriptSrc = opts.gtagScriptSrc ?? DEFAULT_GTAG_SRC;
   let gaScriptInjected = false;
+  function command(...args) {
+    if (!win) return;
+    ensureGtag(win)(...args);
+  }
   return {
     setDefaultConsent() {
+      if (!win || win.__ffidConsentDefaultApplied) return;
       const denyParams = mapCategoriesToGtagParams({
         functional: false,
         analytics: false,
         marketing: false
       });
-      pushDataLayer(win, ["consent", "default", denyParams]);
+      command("consent", "default", denyParams);
+      win.__ffidConsentDefaultApplied = true;
     },
     updateConsent(cats) {
-      const params = mapCategoriesToGtagParams(cats);
-      pushDataLayer(win, ["consent", "update", params]);
+      command("consent", "update", mapCategoriesToGtagParams(cats));
     },
     applyGaInjection(cats) {
+      if (!gaEnabled) return;
       if (!win || !gaId) return;
       if (!cats.analytics) return;
       if (gaScriptInjected) return;
@@ -1013,8 +1040,8 @@ function createGtagBridge(opts = {}) {
       script.async = true;
       script.src = `${scriptSrc}?id=${encodeURIComponent(gaId)}`;
       doc.head.appendChild(script);
-      pushDataLayer(win, ["js", /* @__PURE__ */ new Date()]);
-      pushDataLayer(win, ["config", gaId]);
+      command("js", /* @__PURE__ */ new Date());
+      command("config", gaId);
       gaScriptInjected = true;
     }
   };
@@ -1072,6 +1099,7 @@ function FFIDAnalyticsProvider({
   serviceApiKey,
   getAccessToken,
   gaMeasurementId,
+  gaEnabled,
   sentryReplay,
   sentry,
   onConsentChange,
@@ -1120,9 +1148,11 @@ function FFIDAnalyticsProvider({
     clientRef.current = createConsentClient(clientOpts);
   }
   if (!bridgeRef.current) {
-    bridgeRef.current = createGtagBridge({
+    const bridgeOpts = {
       gaMeasurementId: gaMeasurementId ?? null
-    });
+    };
+    if (gaEnabled !== void 0) bridgeOpts.gaEnabled = gaEnabled;
+    bridgeRef.current = createGtagBridge(bridgeOpts);
     bridgeRef.current.setDefaultConsent();
   }
   const applyCategoriesSideEffects = react.useCallback(
@@ -1189,14 +1219,16 @@ function FFIDAnalyticsProvider({
   );
   react.useEffect(() => {
     let cancelled = false;
+    const controller = new AbortController();
     async function bootstrap() {
       const local = readConsentSessionMirror() ?? readConsentCookie();
       applyCategoriesSideEffects(local);
       setState(stateFromLocalCategories(local));
       const client = clientRef.current;
-      const result = await client.getMe();
+      const result = await client.getMe(controller.signal);
       if (cancelled) return;
       if (!result.ok) {
+        if (result.error.code === "cookie_consent_aborted") return;
         setError(result.error);
         onError?.(result.error);
         setIsLoading(false);
@@ -1220,6 +1252,7 @@ function FFIDAnalyticsProvider({
     void bootstrap();
     return () => {
       cancelled = true;
+      controller.abort();
     };
   }, []);
   react.useEffect(() => {

package/dist/components/index.cjs

@@ -1,34 +1,34 @@
 'use strict';
 
-var chunkBVDUQQHP_cjs = require('../chunk-BVDUQQHP.cjs');
+var chunkFLLTPPUP_cjs = require('../chunk-FLLTPPUP.cjs');
 
 
 
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkBVDUQQHP_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkFLLTPPUP_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkBVDUQQHP_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkFLLTPPUP_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkBVDUQQHP_cjs.FFIDInquiryForm; }
+  get: function () { return chunkFLLTPPUP_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkBVDUQQHP_cjs.FFIDLoginButton; }
+  get: function () { return chunkFLLTPPUP_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkBVDUQQHP_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkFLLTPPUP_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkBVDUQQHP_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkFLLTPPUP_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkBVDUQQHP_cjs.FFIDUserMenu; }
+  get: function () { return chunkFLLTPPUP_cjs.FFIDUserMenu; }
 });

package/dist/components/index.js

@@ -1 +1 @@
-export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-4II4R7NR.js';
+export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-C7PURRNI.js';