@nuxt/scripts 1.0.0-beta.1 → 1.0.0-beta.3

package/dist/module.mjs

@@ -1,12 +1,13 @@
-import { useNuxt, extendViteConfig, useLogger, addDevServerHandler, tryUseNuxt, logger as logger$1, addTypeTemplate, defineNuxtModule, createResolver, addImports, addComponentsDir, addTemplate, addPluginTemplate, addBuildPlugin, addServerHandler, hasNuxtModule } from '@nuxt/kit';
+import { useNuxt, extendViteConfig, useLogger, addDevServerHandler, extendRouteRules, tryUseNuxt, logger as logger$1, addTypeTemplate, defineNuxtModule, createResolver, hasNuxtModule, addImports, addComponentsDir, addTemplate, addServerHandler, addPluginTemplate, addBuildPlugin } from '@nuxt/kit';
+import { existsSync, readFileSync } from 'node:fs';
 import { defu } from 'defu';
 import { resolvePackageJSON, readPackageJSON } from 'pkg-types';
-import { existsSync } from 'node:fs';
+import { addCustomTab } from '@nuxt/devtools-kit';
 import { createHash } from 'node:crypto';
 import fsp from 'node:fs/promises';
 import { createUnplugin } from 'unplugin';
 import MagicString from 'magic-string';
-import { asyncWalk, walk } from 'estree-walker';
+import { parseAndWalk } from 'oxc-walker';
 import { joinURL, parseURL, parseQuery, hasProtocol } from 'ufo';
 import { hash } from 'ohash';
 import { join, resolve, relative } from 'pathe';
@@ -15,6 +16,7 @@ import { fetch, $fetch } from 'ofetch';
 import { lazyEventHandler, eventHandler, createError } from 'h3';
 import { createStorage } from 'unstorage';
 import fsDriver from 'unstorage/drivers/fs-lite';
+import { rewriteScriptUrls } from '../dist/runtime/utils/pure.js';
 import { pathToFileURL } from 'node:url';
 import { isCI, provider } from 'std-env';
 import { registry } from './registry.mjs';
@@ -45,20 +47,18 @@ async function setupDevToolsUI(options, resolve, nuxt = useNuxt()) {
       };
     });
   }
-  nuxt.hook("devtools:customTabs", (tabs) => {
-    tabs.push({
-      // unique identifier
-      name: "nuxt-scripts",
-      // title to display in the tab
-      title: "Scripts",
-      // any icon from Iconify, or a URL to an image
-      icon: "carbon:script",
-      // iframe view
-      view: {
-        type: "iframe",
-        src: DEVTOOLS_UI_ROUTE
-      }
-    });
+  addCustomTab({
+    // unique identifier
+    name: "nuxt-scripts",
+    // title to display in the tab
+    title: "Scripts",
+    // any icon from Iconify, or a URL to an image
+    icon: "carbon:script",
+    // iframe view
+    view: {
+      type: "iframe",
+      src: DEVTOOLS_UI_ROUTE
+    }
   });
 }
 
@@ -86,6 +86,9 @@ function setupPublicAssetStrategy(options = {}) {
         const scriptDescriptor = renderedScript.get(join(assetsBaseURL, event.path.slice(1)));
         if (!scriptDescriptor || scriptDescriptor instanceof Error)
           throw createError({ statusCode: 404 });
+        if (scriptDescriptor.content) {
+          return scriptDescriptor.content;
+        }
         const key = `bundle:${filename}`;
         let res = await storage.getItemRaw(key);
         if (!res) {
@@ -97,31 +100,237 @@ function setupPublicAssetStrategy(options = {}) {
     })
   });
   if (nuxt.options.dev) {
-    nuxt.options.routeRules ||= {};
-    nuxt.options.routeRules[joinURL(assetsBaseURL, "**")] = {
+    extendRouteRules(joinURL(assetsBaseURL, "**"), {
       cache: {
         maxAge: ONE_YEAR_IN_SECONDS
       }
-    };
+    });
   }
-  nuxt.options.nitro.publicAssets ||= [];
   const cacheDir = join(nuxt.options.buildDir, "cache", "scripts");
-  nuxt.options.nitro.publicAssets.push();
-  nuxt.options.nitro = defu(nuxt.options.nitro, {
-    publicAssets: [{
+  nuxt.hook("nitro:config", (nitroConfig) => {
+    nitroConfig.publicAssets ||= [];
+    nitroConfig.publicAssets.push({
       dir: cacheDir,
       maxAge: ONE_YEAR_IN_SECONDS,
       baseURL: assetsBaseURL
-    }],
-    prerender: {
-      ignore: [assetsBaseURL]
-    }
+    });
+    nitroConfig.prerender ||= {};
+    nitroConfig.prerender.ignore ||= [];
+    nitroConfig.prerender.ignore.push(assetsBaseURL);
   });
   return {
     renderedScript
   };
 }
 
+function buildProxyConfig(collectPrefix) {
+  return {
+    googleAnalytics: {
+      // GA4: screen/timezone/UA needed for device, time, and OS reports; rest anonymized safely
+      privacy: { ip: true, userAgent: false, language: true, screen: false, timezone: false, hardware: true },
+      rewrite: [
+        // Modern gtag.js uses www.google.com/g/collect
+        { from: "www.google.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        // Older gtag.js constructs URLs dynamically: "https://"+(subdomain)+".google-analytics.com/g/collect"
+        // We need to catch the suffix pattern with leading dot
+        { from: ".google-analytics.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        { from: ".analytics.google.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        // Full domain patterns for static URLs
+        { from: "www.google-analytics.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        { from: "analytics.google.com/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        // Legacy endpoints still used by some scripts
+        { from: "www.google-analytics.com", to: `${collectPrefix}/ga` },
+        { from: "analytics.google.com", to: `${collectPrefix}/ga` },
+        // DoubleClick tracking (used by GA4 for ads/conversions)
+        { from: "stats.g.doubleclick.net/g/collect", to: `${collectPrefix}/ga/g/collect` },
+        { from: "stats.g.doubleclick.net", to: `${collectPrefix}/ga-dc` },
+        // Google Ads/Syndication tracking
+        { from: "pagead2.googlesyndication.com", to: `${collectPrefix}/ga-syn` },
+        { from: "www.googleadservices.com", to: `${collectPrefix}/ga-ads` },
+        { from: "googleads.g.doubleclick.net", to: `${collectPrefix}/ga-gads` }
+      ],
+      routes: {
+        [`${collectPrefix}/ga/**`]: { proxy: "https://www.google-analytics.com/**" },
+        [`${collectPrefix}/ga-dc/**`]: { proxy: "https://stats.g.doubleclick.net/**" },
+        [`${collectPrefix}/ga-syn/**`]: { proxy: "https://pagead2.googlesyndication.com/**" },
+        [`${collectPrefix}/ga-ads/**`]: { proxy: "https://www.googleadservices.com/**" },
+        [`${collectPrefix}/ga-gads/**`]: { proxy: "https://googleads.g.doubleclick.net/**" }
+      }
+    },
+    googleTagManager: {
+      // GTM: container only, passes data through — downstream tags have their own privacy
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "www.googletagmanager.com", to: `${collectPrefix}/gtm` }
+      ],
+      routes: {
+        [`${collectPrefix}/gtm/**`]: { proxy: "https://www.googletagmanager.com/**" }
+      }
+    },
+    metaPixel: {
+      // Meta: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        // SDK script loading
+        { from: "connect.facebook.net", to: `${collectPrefix}/meta` },
+        // Tracking pixel endpoint (www and non-www)
+        { from: "www.facebook.com/tr", to: `${collectPrefix}/meta-tr` },
+        { from: "facebook.com/tr", to: `${collectPrefix}/meta-tr` },
+        // Additional Meta tracking domains
+        { from: "pixel.facebook.com", to: `${collectPrefix}/meta-px` },
+        { from: "www.facebook.com/plugins", to: `${collectPrefix}/meta-plugins` }
+      ],
+      routes: {
+        [`${collectPrefix}/meta/**`]: { proxy: "https://connect.facebook.net/**" },
+        [`${collectPrefix}/meta-tr/**`]: { proxy: "https://www.facebook.com/tr/**" },
+        [`${collectPrefix}/meta-px/**`]: { proxy: "https://pixel.facebook.com/**" },
+        [`${collectPrefix}/meta-plugins/**`]: { proxy: "https://www.facebook.com/plugins/**" }
+      }
+    },
+    tiktokPixel: {
+      // TikTok: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        { from: "analytics.tiktok.com", to: `${collectPrefix}/tiktok` }
+      ],
+      routes: {
+        [`${collectPrefix}/tiktok/**`]: { proxy: "https://analytics.tiktok.com/**" }
+      }
+    },
+    segment: {
+      // Segment: trusted data pipeline — needs maximum fidelity for downstream destinations
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      rewrite: [
+        { from: "api.segment.io", to: `${collectPrefix}/segment` },
+        { from: "cdn.segment.com", to: `${collectPrefix}/segment-cdn` }
+      ],
+      routes: {
+        [`${collectPrefix}/segment/**`]: { proxy: "https://api.segment.io/**" },
+        [`${collectPrefix}/segment-cdn/**`]: { proxy: "https://cdn.segment.com/**" }
+      }
+    },
+    xPixel: {
+      // X/Twitter: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        { from: "analytics.twitter.com", to: `${collectPrefix}/x` },
+        { from: "t.co", to: `${collectPrefix}/x-t` }
+      ],
+      routes: {
+        [`${collectPrefix}/x/**`]: { proxy: "https://analytics.twitter.com/**" },
+        [`${collectPrefix}/x-t/**`]: { proxy: "https://t.co/**" }
+      }
+    },
+    snapchatPixel: {
+      // Snapchat: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        { from: "tr.snapchat.com", to: `${collectPrefix}/snap` }
+      ],
+      routes: {
+        [`${collectPrefix}/snap/**`]: { proxy: "https://tr.snapchat.com/**" }
+      }
+    },
+    redditPixel: {
+      // Reddit: untrusted ad network — full anonymization
+      privacy: { ip: true, userAgent: true, language: true, screen: true, timezone: true, hardware: true },
+      rewrite: [
+        { from: "alb.reddit.com", to: `${collectPrefix}/reddit` }
+      ],
+      routes: {
+        [`${collectPrefix}/reddit/**`]: { proxy: "https://alb.reddit.com/**" }
+      }
+    },
+    clarity: {
+      // Clarity: screen/UA/timezone needed for heatmaps and device filtering; rest anonymized
+      privacy: { ip: true, userAgent: false, language: true, screen: false, timezone: false, hardware: true },
+      rewrite: [
+        // Main clarity domain
+        { from: "www.clarity.ms", to: `${collectPrefix}/clarity` },
+        // Script loader (the actual SDK is loaded from here)
+        { from: "scripts.clarity.ms", to: `${collectPrefix}/clarity-scripts` },
+        // Data collection endpoint
+        { from: "d.clarity.ms", to: `${collectPrefix}/clarity-data` },
+        // Event collection endpoint
+        { from: "e.clarity.ms", to: `${collectPrefix}/clarity-events` }
+      ],
+      routes: {
+        [`${collectPrefix}/clarity/**`]: { proxy: "https://www.clarity.ms/**" },
+        [`${collectPrefix}/clarity-scripts/**`]: { proxy: "https://scripts.clarity.ms/**" },
+        [`${collectPrefix}/clarity-data/**`]: { proxy: "https://d.clarity.ms/**" },
+        [`${collectPrefix}/clarity-events/**`]: { proxy: "https://e.clarity.ms/**" }
+      }
+    },
+    posthog: {
+      // No rewrites needed - PostHog uses NPM mode, SDK URLs are set via api_host config
+      // PostHog: needs real IP for GeoIP enrichment + feature flag targeting
+      privacy: { ip: false, userAgent: false, language: false, screen: false, timezone: false, hardware: false },
+      routes: {
+        // US region
+        [`${collectPrefix}/ph/static/**`]: { proxy: "https://us-assets.i.posthog.com/static/**" },
+        [`${collectPrefix}/ph/**`]: { proxy: "https://us.i.posthog.com/**" },
+        // EU region
+        [`${collectPrefix}/ph-eu/static/**`]: { proxy: "https://eu-assets.i.posthog.com/static/**" },
+        [`${collectPrefix}/ph-eu/**`]: { proxy: "https://eu.i.posthog.com/**" }
+      }
+    },
+    hotjar: {
+      // Hotjar: screen/UA/timezone needed for heatmaps and device segmentation; rest anonymized
+      privacy: { ip: true, userAgent: false, language: true, screen: false, timezone: false, hardware: true },
+      rewrite: [
+        // Static assets
+        { from: "static.hotjar.com", to: `${collectPrefix}/hotjar` },
+        // Script loader (bootstrap script loads the main SDK from here)
+        { from: "script.hotjar.com", to: `${collectPrefix}/hotjar-script` },
+        // Configuration/variables
+        { from: "vars.hotjar.com", to: `${collectPrefix}/hotjar-vars` },
+        // Data ingestion endpoint
+        { from: "in.hotjar.com", to: `${collectPrefix}/hotjar-in` },
+        // Video capture
+        { from: "vc.hotjar.com", to: `${collectPrefix}/hotjar-vc` },
+        // Metrics/telemetry
+        { from: "metrics.hotjar.io", to: `${collectPrefix}/hotjar-metrics` },
+        // Insights (ContentSquare integration)
+        { from: "insights.hotjar.com", to: `${collectPrefix}/hotjar-insights` }
+      ],
+      routes: {
+        [`${collectPrefix}/hotjar/**`]: { proxy: "https://static.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-script/**`]: { proxy: "https://script.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-vars/**`]: { proxy: "https://vars.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-in/**`]: { proxy: "https://in.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-vc/**`]: { proxy: "https://vc.hotjar.com/**" },
+        [`${collectPrefix}/hotjar-metrics/**`]: { proxy: "https://metrics.hotjar.io/**" },
+        [`${collectPrefix}/hotjar-insights/**`]: { proxy: "https://insights.hotjar.com/**" }
+      }
+    }
+  };
+}
+function getProxyConfig(key, collectPrefix) {
+  const configs = buildProxyConfig(collectPrefix);
+  return configs[key];
+}
+function getAllProxyConfigs(collectPrefix) {
+  return buildProxyConfig(collectPrefix);
+}
+function getSWInterceptRules(collectPrefix) {
+  const configs = buildProxyConfig(collectPrefix);
+  const rules = [];
+  for (const config of Object.values(configs)) {
+    if (!config.routes)
+      continue;
+    for (const [localPath, { proxy }] of Object.entries(config.routes)) {
+      const match = proxy.match(/^https?:\/\/([^/]+)(\/.*)?\/\*\*$/);
+      if (match?.[1]) {
+        const domain = match[1];
+        const pathPrefix = match[2] || "";
+        const target = localPath.replace(/\/\*\*$/, "");
+        rules.push({ pattern: domain, pathPrefix, target });
+      }
+    }
+  }
+  return rules;
+}
+
 function isVue(id, opts = {}) {
   const { search } = parseURL(decodeURIComponent(pathToFileURL(id).href));
   if (id.endsWith(".vue") && !search) {
@@ -178,7 +387,7 @@ function normalizeScriptData(src, assetsBaseURL = "/_scripts") {
   return { url: src };
 }
 async function downloadScript(opts, renderedScript, fetchOptions, cacheMaxAge) {
-  const { src, url, filename, forceDownload, integrity } = opts;
+  const { src, url, filename, forceDownload, integrity, proxyRewrites } = opts;
   if (src === url || !filename) {
     return;
   }
@@ -186,7 +395,8 @@ async function downloadScript(opts, renderedScript, fetchOptions, cacheMaxAge) {
   const scriptContent = renderedScript.get(src);
   let res = scriptContent instanceof Error ? void 0 : scriptContent?.content;
   if (!res) {
-    const cacheKey = `bundle:${filename}`;
+    const proxyRewritesHash = proxyRewrites?.length ? `-${hash(proxyRewrites)}` : "";
+    const cacheKey = proxyRewrites?.length ? `bundle-proxy:${filename.replace(".js", `${proxyRewritesHash}.js`)}` : `bundle:${filename}`;
     const shouldUseCache = !forceDownload && await storage.hasItem(cacheKey) && !await isCacheExpired(storage, filename, cacheMaxAge);
     if (shouldUseCache) {
       const cachedContent = await storage.getItemRaw(cacheKey);
@@ -212,8 +422,15 @@ async function downloadScript(opts, renderedScript, fetchOptions, cacheMaxAge) {
       size = contentLength ? Number(contentLength) / 1024 : 0;
       return Buffer.from(r._data || await r.arrayBuffer());
     });
-    const integrityHash = integrity && res ? calculateIntegrity(res, integrity === true ? "sha384" : integrity) : void 0;
     await storage.setItemRaw(`bundle:${filename}`, res);
+    if (proxyRewrites?.length && res) {
+      const content = res.toString("utf-8");
+      const rewritten = rewriteScriptUrls(content, proxyRewrites);
+      res = Buffer.from(rewritten, "utf-8");
+      logger.debug(`Rewrote ${proxyRewrites.length} URL patterns in ${filename}`);
+    }
+    const integrityHash = integrity && res ? calculateIntegrity(res, integrity === true ? "sha384" : integrity) : void 0;
+    await storage.setItemRaw(cacheKey, res);
     await storage.setItem(`bundle-meta:${filename}`, {
       timestamp: Date.now(),
       src,
@@ -262,16 +479,21 @@ function NuxtScriptBundleTransformer(options = {
   return createUnplugin(() => {
     return {
       name: "nuxt:scripts:bundler-transformer",
-      transformInclude(id) {
-        return isVue(id, { type: ["template", "script"] }) || isJS(id);
-      },
-      async transform(code, id) {
-        if (!code.includes("useScript"))
-          return;
-        const ast = this.parse(code);
-        const s = new MagicString(code);
-        await asyncWalk(ast, {
-          async enter(_node) {
+      transform: {
+        filter: {
+          id: {
+            include: [/\.vue/, /\.[cm]?[jt]sx?$/],
+            exclude: [/\.(?:test|spec)\./]
+          }
+        },
+        async handler(code, id) {
+          if (!isVue(id, { type: ["template", "script"] }) && !isJS(id))
+            return;
+          if (!code.includes("useScript"))
+            return;
+          const s = new MagicString(code);
+          const deferredOps = [];
+          parseAndWalk(code, id, function(_node) {
             const calleeName = _node.callee?.name;
             if (!calleeName)
               return;
@@ -281,6 +503,11 @@ function NuxtScriptBundleTransformer(options = {
               const node = _node;
               let scriptSrcNode;
               let src;
+              let registryKey;
+              if (fnName !== "useScript") {
+                const baseName = fnName.replace(/^useScript/, "");
+                registryKey = baseName.length > 0 ? baseName.charAt(0).toLowerCase() + baseName.slice(1) : void 0;
+              }
               if (fnName === "useScript") {
                 if (node.arguments[0]?.type === "Literal") {
                   scriptSrcNode = node.arguments[0];
@@ -297,9 +524,7 @@ function NuxtScriptBundleTransformer(options = {
                 }
                 if (!registryNode.scriptBundling && !registryNode.src)
                   return;
-                const baseName = fnName.replace(/^useScript/, "");
-                const registryKey = baseName.length > 0 ? baseName.charAt(0).toLowerCase() + baseName.slice(1) : "";
-                const registryConfig = options.registryConfig?.[registryKey] || {};
+                const registryConfig = options.registryConfig?.[registryKey || ""] || {};
                 const fnArg0 = {};
                 if (node.arguments[0]?.type === "ObjectExpression") {
                   const optionsNode = node.arguments[0];
@@ -319,6 +544,8 @@ function NuxtScriptBundleTransformer(options = {
                   src = registryNode.scriptBundling && registryNode.scriptBundling(mergedOptions);
                   if (src === false)
                     return;
+                  if (!src && registryNode.src)
+                    src = registryNode.src;
                 }
               }
               if (!scriptSrcNode && !src) {
@@ -333,8 +560,7 @@ function NuxtScriptBundleTransformer(options = {
                   if (bundleProperty && bundleProperty.value.type === "Literal") {
                     const bundleValue = bundleProperty.value.value;
                     if (bundleValue === true || bundleValue === "force" || String(bundleValue) === "true") {
-                      const valueNode = bundleProperty.value;
-                      s.overwrite(valueNode.start, valueNode.end, `'unsupported'`);
+                      s.overwrite(bundleProperty.value.start, bundleProperty.value.end, `'unsupported'`);
                     }
                   }
                 }
@@ -351,8 +577,7 @@ function NuxtScriptBundleTransformer(options = {
                       (p) => (p.key?.name === "bundle" || p.key?.value === "bundle") && p.type === "Property"
                     );
                     if (bundleProperty && bundleProperty.value.type === "Literal") {
-                      const value = bundleProperty.value;
-                      const bundleValue = value.value;
+                      const bundleValue = bundleProperty.value.value;
                       if (bundleValue !== true && bundleValue !== "force" && String(bundleValue) !== "true") {
                         canBundle = false;
                         return;
@@ -380,81 +605,104 @@ function NuxtScriptBundleTransformer(options = {
                     canBundle = bundleValue === true || bundleValue === "force" || String(bundleValue) === "true";
                     forceDownload = bundleValue === "force";
                   }
+                  const firstPartyOption = scriptOptions?.value.properties?.find((prop) => {
+                    return prop.type === "Property" && prop.key?.name === "firstParty" && prop.value.type === "Literal";
+                  });
+                  let firstPartyOptOut = firstPartyOption?.value.value === false;
+                  if (!firstPartyOptOut && node.arguments[1]?.type === "ObjectExpression") {
+                    const secondArgFirstPartyProp = node.arguments[1].properties.find(
+                      (p) => p.type === "Property" && p.key?.name === "firstParty" && p.value.type === "Literal"
+                    );
+                    firstPartyOptOut = secondArgFirstPartyProp?.value.value === false;
+                  }
+                  if (!firstPartyOptOut && node.arguments[0]?.type === "ObjectExpression") {
+                    const firstArgFirstPartyProp = node.arguments[0].properties.find(
+                      (p) => p.type === "Property" && p.key?.name === "firstParty" && p.value.type === "Literal"
+                    );
+                    firstPartyOptOut = firstArgFirstPartyProp?.value.value === false;
+                  }
                   if (canBundle) {
                     const { url: _url, filename } = normalizeScriptData(src, options.assetsBaseURL);
-                    let url = _url;
-                    try {
-                      await downloadScript({ src, url, filename, forceDownload, integrity: options.integrity }, renderedScript, options.fetchOptions, options.cacheMaxAge);
-                    } catch (e) {
-                      if (options.fallbackOnSrcOnBundleFail) {
-                        logger.warn(`[Nuxt Scripts: Bundle Transformer] Failed to bundle ${src}. Fallback to remote loading.`);
-                        url = src;
-                      } else {
-                        const errorMessage = e?.message || "Unknown error";
-                        if (errorMessage.includes("timeout") || errorMessage.includes("network") || errorMessage.includes("ENOTFOUND")) {
-                          logger.error(`[Nuxt Scripts: Bundle Transformer] Network issue while bundling ${src}: ${errorMessage}`);
-                          logger.error(`[Nuxt Scripts: Bundle Transformer] Tip: Set 'fallbackOnSrcOnBundleFail: true' in module options or disable bundling in Docker environments`);
+                    const script = options.scripts?.find((s2) => s2.import.name === fnName);
+                    const proxyConfigKey = script?.proxy !== false ? script?.proxy || registryKey : void 0;
+                    const proxyRewrites = options.firstPartyEnabled && !firstPartyOptOut && proxyConfigKey && options.firstPartyCollectPrefix ? getProxyConfig(proxyConfigKey, options.firstPartyCollectPrefix)?.rewrite : void 0;
+                    deferredOps.push(async () => {
+                      let url = _url;
+                      try {
+                        await downloadScript({ src, url, filename, forceDownload, proxyRewrites, integrity: options.integrity }, renderedScript, options.fetchOptions, options.cacheMaxAge);
+                      } catch (e) {
+                        if (options.fallbackOnSrcOnBundleFail) {
+                          logger.warn(`[Nuxt Scripts: Bundle Transformer] Failed to bundle ${src}. Fallback to remote loading.`);
+                          url = src;
+                        } else {
+                          const errorMessage = e?.message || "Unknown error";
+                          if (errorMessage.includes("timeout") || errorMessage.includes("network") || errorMessage.includes("ENOTFOUND") || errorMessage.includes("certificate")) {
+                            logger.error(`[Nuxt Scripts: Bundle Transformer] Network issue while bundling ${src}: ${errorMessage}`);
+                            logger.error(`[Nuxt Scripts: Bundle Transformer] Tip: Set 'fallbackOnSrcOnBundleFail: true' in module options or disable bundling in Docker environments`);
+                          }
+                          throw e;
                         }
-                        throw e;
                       }
-                    }
-                    if (src === url) {
-                      if (src && src.startsWith("/"))
-                        logger.warn(`[Nuxt Scripts: Bundle Transformer] Relative scripts are already bundled. Skipping bundling for \`${src}\`.`);
-                      else
-                        logger.warn(`[Nuxt Scripts: Bundle Transformer] Failed to bundle ${src}.`);
-                    }
-                    const scriptMeta = renderedScript.get(url);
-                    const integrityHash = scriptMeta instanceof Error ? void 0 : scriptMeta?.integrity;
-                    if (scriptSrcNode) {
-                      if (integrityHash && fnName === "useScript" && node.arguments[0]?.type === "Literal") {
-                        s.overwrite(scriptSrcNode.start, scriptSrcNode.end, `{ src: '${url}', integrity: '${integrityHash}', crossorigin: 'anonymous' }`);
-                      } else if (integrityHash && fnName === "useScript" && node.arguments[0]?.type === "ObjectExpression") {
-                        s.overwrite(scriptSrcNode.start, scriptSrcNode.end, `'${url}'`);
-                        const objArg = node.arguments[0];
-                        s.appendLeft(objArg.end - 1, `, integrity: '${integrityHash}', crossorigin: 'anonymous'`);
-                      } else {
-                        s.overwrite(scriptSrcNode.start, scriptSrcNode.end, `'${url}'`);
+                      if (src === url) {
+                        if (src && src.startsWith("/"))
+                          logger.warn(`[Nuxt Scripts: Bundle Transformer] Relative scripts are already bundled. Skipping bundling for \`${src}\`.`);
+                        else
+                          logger.warn(`[Nuxt Scripts: Bundle Transformer] Failed to bundle ${src}.`);
                       }
-                    } else {
-                      const integrityProps = integrityHash ? `, integrity: '${integrityHash}', crossorigin: 'anonymous'` : "";
-                      if (node.arguments[0]) {
-                        const optionsNode = node.arguments[0];
-                        const scriptInputProperty = optionsNode.properties.find(
-                          (p) => p.key?.name === "scriptInput" || p.key?.value === "scriptInput"
-                        );
-                        if (scriptInputProperty) {
-                          const scriptInput = scriptInputProperty.value;
-                          if (scriptInput.type === "ObjectExpression") {
-                            const srcProperty = scriptInput.properties.find(
-                              (p) => p.key?.name === "src" || p.key?.value === "src"
-                            );
-                            if (srcProperty) {
-                              s.overwrite(srcProperty.value.start, srcProperty.value.end, `'${url}'`);
-                              if (integrityHash)
-                                s.appendLeft(scriptInput.end - 1, integrityProps);
-                            } else {
-                              s.appendRight(scriptInput.end - 1, `, src: '${url}'${integrityProps}`);
+                      const scriptMeta = renderedScript.get(url);
+                      const integrityHash = scriptMeta instanceof Error ? void 0 : scriptMeta?.integrity;
+                      if (scriptSrcNode) {
+                        if (integrityHash && fnName === "useScript" && node.arguments[0]?.type === "Literal") {
+                          s.overwrite(scriptSrcNode.start, scriptSrcNode.end, `{ src: '${url}', integrity: '${integrityHash}', crossorigin: 'anonymous' }`);
+                        } else if (integrityHash && fnName === "useScript" && node.arguments[0]?.type === "ObjectExpression") {
+                          s.overwrite(scriptSrcNode.start, scriptSrcNode.end, `'${url}'`);
+                          s.appendLeft(node.arguments[0].end - 1, `, integrity: '${integrityHash}', crossorigin: 'anonymous'`);
+                        } else {
+                          s.overwrite(scriptSrcNode.start, scriptSrcNode.end, `'${url}'`);
+                        }
+                      } else {
+                        const integrityProps = integrityHash ? `, integrity: '${integrityHash}', crossorigin: 'anonymous'` : "";
+                        if (node.arguments[0]) {
+                          const optionsNode = node.arguments[0];
+                          const scriptInputProperty = optionsNode.properties.find(
+                            (p) => p.key?.name === "scriptInput" || p.key?.value === "scriptInput"
+                          );
+                          if (scriptInputProperty) {
+                            const scriptInput = scriptInputProperty.value;
+                            if (scriptInput.type === "ObjectExpression") {
+                              const srcProperty = scriptInput.properties.find(
+                                (p) => p.key?.name === "src" || p.key?.value === "src"
+                              );
+                              if (srcProperty) {
+                                s.overwrite(srcProperty.value.start, srcProperty.value.end, `'${url}'`);
+                                if (integrityHash)
+                                  s.appendLeft(scriptInput.end - 1, integrityProps);
+                              } else {
+                                s.appendRight(scriptInput.end - 1, `, src: '${url}'${integrityProps}`);
+                              }
                             }
+                          } else {
+                            s.appendRight(node.arguments[0].start + 1, ` scriptInput: { src: '${url}'${integrityProps} }, `);
                           }
                         } else {
-                          s.appendRight(node.arguments[0].start + 1, ` scriptInput: { src: '${url}'${integrityProps} }, `);
+                          s.appendRight(node.callee.end, `({ scriptInput: { src: '${url}'${integrityProps} } })`);
                         }
-                      } else {
-                        s.appendRight(node.callee.end, `({ scriptInput: { src: '${url}'${integrityProps} } })`);
                       }
-                    }
+                    });
                   }
                 }
               }
             }
+          });
+          for (const op of deferredOps) {
+            await op();
+          }
+          if (s.hasChanged()) {
+            return {
+              code: s.toString(),
+              map: s.generateMap({ includeContent: true, source: id })
+            };
           }
-        });
-        if (s.hasChanged()) {
-          return {
-            code: s.toString(),
-            map: s.generateMap({ includeContent: true, source: id })
-          };
         }
       }
     };
@@ -505,17 +753,18 @@ function NuxtScriptsCheckScripts() {
   return createUnplugin(() => {
     return {
       name: "nuxt-scripts:check-scripts",
-      transformInclude(id) {
-        return isVue(id, { type: ["script"] });
-      },
-      async transform(code) {
-        if (!code.includes("useScript"))
-          return;
-        const ast = this.parse(code);
-        let nameNode;
-        let errorNode;
-        walk(ast, {
-          enter(_node) {
+      transform: {
+        filter: {
+          id: /\.vue/
+        },
+        handler(code, id) {
+          if (!isVue(id, { type: ["script"] }))
+            return;
+          if (!code.includes("useScript"))
+            return;
+          let nameNode;
+          let errorNode;
+          parseAndWalk(code, id, function(_node) {
             if (_node.type === "VariableDeclaration" && _node.declarations?.[0]?.id?.type === "ObjectPattern") {
               const objPattern = _node.declarations[0]?.id;
               for (const property of objPattern.properties) {
@@ -545,10 +794,10 @@ function NuxtScriptsCheckScripts() {
                 }
               }
             }
+          });
+          if (errorNode) {
+            return this.error(new Error("You can't use a top-level await on $script as it will never resolve."));
           }
-        });
-        if (errorNode) {
-          return this.error(new Error("You can't use a top-level await on $script as it will never resolve."));
         }
       }
     };
@@ -596,6 +845,7 @@ export {}`;
 function templateTriggerResolver(defaultScriptOptions) {
   const needsIdleTimeout = defaultScriptOptions?.trigger && typeof defaultScriptOptions.trigger === "object" && "idleTimeout" in defaultScriptOptions.trigger;
   const needsInteraction = defaultScriptOptions?.trigger && typeof defaultScriptOptions.trigger === "object" && "interaction" in defaultScriptOptions.trigger;
+  const needsServiceWorker = defaultScriptOptions?.trigger && typeof defaultScriptOptions.trigger === "object" && "serviceWorker" in defaultScriptOptions.trigger;
   const imports = [];
   if (needsIdleTimeout) {
     imports.push(`import { useScriptTriggerIdleTimeout } from '#nuxt-scripts/composables/useScriptTriggerIdleTimeout'`);
@@ -603,11 +853,15 @@ function templateTriggerResolver(defaultScriptOptions) {
   if (needsInteraction) {
     imports.push(`import { useScriptTriggerInteraction } from '#nuxt-scripts/composables/useScriptTriggerInteraction'`);
   }
+  if (needsServiceWorker) {
+    imports.push(`import { useScriptTriggerServiceWorker } from '#nuxt-scripts/composables/useScriptTriggerServiceWorker'`);
+  }
   return [
     ...imports,
     `export function resolveTrigger(trigger) {`,
     needsIdleTimeout ? `  if ('idleTimeout' in trigger) return useScriptTriggerIdleTimeout({ timeout: trigger.idleTimeout })` : "",
     needsInteraction ? `  if ('interaction' in trigger) return useScriptTriggerInteraction({ events: trigger.interaction })` : "",
+    needsServiceWorker ? `  if ('serviceWorker' in trigger) return useScriptTriggerServiceWorker()` : "",
     `  return null`,
     `}`
   ].filter(Boolean).join("\n");
@@ -624,6 +878,9 @@ function resolveTriggerForTemplate(trigger) {
     if ("interaction" in trigger) {
       return `useScriptTriggerInteraction({ events: ${JSON.stringify(trigger.interaction)} })`;
     }
+    if ("serviceWorker" in trigger) {
+      return `useScriptTriggerServiceWorker()`;
+    }
   }
   return null;
 }
@@ -634,27 +891,34 @@ function templatePlugin(config, registry) {
   }
   const imports = [];
   const inits = [];
+  const resolvedRegistryKeys = [];
   let needsIdleTimeoutImport = false;
   let needsInteractionImport = false;
+  let needsServiceWorkerImport = false;
   for (const [k, c] of Object.entries(config.registry || {})) {
-    const importDefinition = registry.find((i) => i.import.name === `useScript${k.substring(0, 1).toUpperCase() + k.substring(1)}`);
+    const importDefinition = registry.find((i) => i.proxy === k || i.import.name === `useScript${k.substring(0, 1).toUpperCase() + k.substring(1)}`);
     if (importDefinition) {
+      resolvedRegistryKeys.push(k);
       imports.unshift(`import { ${importDefinition.import.name} } from '${importDefinition.import.from}'`);
-      const args = (typeof c !== "object" ? {} : c) || {};
       if (c === "mock") {
-        args.scriptOptions = { trigger: "manual", skipValidation: true };
-      } else if (Array.isArray(c) && c.length === 2 && c[1]?.trigger) {
-        const triggerResolved = resolveTriggerForTemplate(c[1].trigger);
+        inits.push(`const ${k} = ${importDefinition.import.name}({ scriptOptions: { trigger: 'manual', skipValidation: true } })`);
+      } else if (Array.isArray(c) && c.length === 2) {
+        const input = c[0] || {};
+        const scriptOptions = { ...c[1] };
+        const triggerResolved = resolveTriggerForTemplate(scriptOptions?.trigger);
         if (triggerResolved) {
-          args.scriptOptions = { ...c[1] };
-          if (args.scriptOptions) {
-            args.scriptOptions.trigger = `__TRIGGER_${triggerResolved}__`;
-          }
+          scriptOptions.trigger = "__TRIGGER_PLACEHOLDER__";
           if (triggerResolved.includes("useScriptTriggerIdleTimeout")) needsIdleTimeoutImport = true;
           if (triggerResolved.includes("useScriptTriggerInteraction")) needsInteractionImport = true;
+          if (triggerResolved.includes("useScriptTriggerServiceWorker")) needsServiceWorkerImport = true;
         }
+        const args = { ...input, scriptOptions };
+        const argsJson = triggerResolved ? JSON.stringify(args).replace(/"__TRIGGER_PLACEHOLDER__"/g, triggerResolved) : JSON.stringify(args);
+        inits.push(`const ${k} = ${importDefinition.import.name}(${argsJson})`);
+      } else {
+        const args = (typeof c !== "object" ? {} : c) || {};
+        inits.push(`const ${k} = ${importDefinition.import.name}(${JSON.stringify(args)})`);
       }
-      inits.push(`const ${k} = ${importDefinition.import.name}(${JSON.stringify(args).replace(/"__TRIGGER_(.*?)__"/g, "$1")})`);
     }
   }
   for (const [k, c] of Object.entries(config.globals || {})) {
@@ -666,8 +930,10 @@ function templatePlugin(config, registry) {
       if (triggerResolved) {
         if (triggerResolved.includes("useScriptTriggerIdleTimeout")) needsIdleTimeoutImport = true;
         if (triggerResolved.includes("useScriptTriggerInteraction")) needsInteractionImport = true;
-        const resolvedOptions = { ...options, trigger: `__TRIGGER_${triggerResolved}__` };
-        inits.push(`const ${k} = useScript(${JSON.stringify({ key: k, ...typeof c[0] === "string" ? { src: c[0] } : c[0] })}, { ...${JSON.stringify(resolvedOptions).replace(/"__TRIGGER_(.*?)__"/g, "$1")}, use: () => ({ ${k}: window.${k} }) })`);
+        if (triggerResolved.includes("useScriptTriggerServiceWorker")) needsServiceWorkerImport = true;
+        const resolvedOptions = { ...options, trigger: "__TRIGGER_PLACEHOLDER__" };
+        const optionsJson = JSON.stringify(resolvedOptions).replace(/"__TRIGGER_PLACEHOLDER__"/g, triggerResolved);
+        inits.push(`const ${k} = useScript(${JSON.stringify({ key: k, ...typeof c[0] === "string" ? { src: c[0] } : c[0] })}, { ...${optionsJson}, use: () => ({ ${k}: window.${k} }) })`);
       } else {
         inits.push(`const ${k} = useScript(${JSON.stringify({ key: k, ...typeof c[0] === "string" ? { src: c[0] } : c[0] })}, { ...${JSON.stringify(c[1])}, use: () => ({ ${k}: window.${k} }) })`);
       }
@@ -676,8 +942,10 @@ function templatePlugin(config, registry) {
       if (triggerResolved) {
         if (triggerResolved.includes("useScriptTriggerIdleTimeout")) needsIdleTimeoutImport = true;
         if (triggerResolved.includes("useScriptTriggerInteraction")) needsInteractionImport = true;
-        const resolvedOptions = { ...c, trigger: `__TRIGGER_${triggerResolved}__` };
-        inits.push(`const ${k} = useScript(${JSON.stringify({ key: k, ...resolvedOptions }).replace(/"__TRIGGER_(.*?)__"/g, "$1")}, { use: () => ({ ${k}: window.${k} }) })`);
+        if (triggerResolved.includes("useScriptTriggerServiceWorker")) needsServiceWorkerImport = true;
+        const resolvedOptions = { ...c, trigger: "__TRIGGER_PLACEHOLDER__" };
+        const argsJson = JSON.stringify({ key: k, ...resolvedOptions }).replace(/"__TRIGGER_PLACEHOLDER__"/g, triggerResolved);
+        inits.push(`const ${k} = useScript(${argsJson}, { use: () => ({ ${k}: window.${k} }) })`);
       } else {
         inits.push(`const ${k} = useScript(${JSON.stringify({ key: k, ...c })}, { use: () => ({ ${k}: window.${k} }) })`);
       }
@@ -690,6 +958,9 @@ function templatePlugin(config, registry) {
   if (needsInteractionImport) {
     triggerImports.push(`import { useScriptTriggerInteraction } from '#nuxt-scripts/composables/useScriptTriggerInteraction'`);
   }
+  if (needsServiceWorkerImport) {
+    triggerImports.push(`import { useScriptTriggerServiceWorker } from '#nuxt-scripts/composables/useScriptTriggerServiceWorker'`);
+  }
   return [
     `import { useScript } from '#nuxt-scripts/composables/useScript'`,
     `import { defineNuxtPlugin } from 'nuxt/app'`,
@@ -702,12 +973,26 @@ function templatePlugin(config, registry) {
     `  parallel: true,`,
     `  setup() {`,
     ...inits.map((i) => `    ${i}`),
-    `    return { provide: { $scripts: { ${[...Object.keys(config.globals || {}), ...Object.keys(config.registry || {})].join(", ")} } } }`,
+    `    return { provide: { $scripts: { ${[...Object.keys(config.globals || {}), ...resolvedRegistryKeys].join(", ")} } } }`,
     `  }`,
     `})`
   ].join("\n");
 }
 
+const PARTYTOWN_FORWARDS = {
+  googleAnalytics: ["dataLayer.push", "gtag"],
+  plausible: ["plausible"],
+  fathom: ["fathom", "fathom.trackEvent", "fathom.trackPageview"],
+  umami: ["umami", "umami.track"],
+  matomo: ["_paq.push"],
+  segment: ["analytics", "analytics.track", "analytics.page", "analytics.identify"],
+  metaPixel: ["fbq"],
+  xPixel: ["twq"],
+  tiktokPixel: ["ttq.track", "ttq.page", "ttq.identify"],
+  snapchatPixel: ["snaptr"],
+  redditPixel: ["rdt"],
+  cloudflareWebAnalytics: ["__cfBeacon"]
+};
 const module$1 = defineNuxtModule({
   meta: {
     name: "@nuxt/scripts",
@@ -717,6 +1002,7 @@ const module$1 = defineNuxtModule({
     }
   },
   defaults: {
+    firstParty: true,
     defaultScriptOptions: {
       trigger: "onNuxtReady"
     },
@@ -756,7 +1042,8 @@ const module$1 = defineNuxtModule({
     nuxt.options.runtimeConfig["nuxt-scripts"] = {
       version,
       // Private proxy config with API key (server-side only)
-      googleStaticMapsProxy: config.googleStaticMapsProxy?.enabled ? { apiKey: nuxt.options.runtimeConfig.public.scripts?.googleMaps?.apiKey } : void 0
+      googleStaticMapsProxy: config.googleStaticMapsProxy?.enabled ? { apiKey: nuxt.options.runtimeConfig.public.scripts?.googleMaps?.apiKey } : void 0,
+      swTemplate: readFileSync(await resolvePath("./runtime/sw/proxy-sw.template.js"), "utf-8")
     };
     nuxt.options.runtimeConfig.public["nuxt-scripts"] = {
       // expose for devtools
@@ -772,13 +1059,57 @@ const module$1 = defineNuxtModule({
         config.registry
       );
     }
+    if (config.defaultScriptOptions?.bundle !== void 0) {
+      logger.warn(
+        "`scripts.defaultScriptOptions.bundle` is deprecated. Use `scripts.firstParty: true` instead. First-party mode is now enabled by default."
+      );
+    }
+    const staticPresets = ["static", "github-pages", "cloudflare-pages-static"];
+    const preset = process.env.NITRO_PRESET || "";
+    const isStaticPreset = staticPresets.includes(preset);
+    const firstPartyEnabled = !!config.firstParty;
+    const firstPartyPrefix = typeof config.firstParty === "object" ? config.firstParty.prefix : void 0;
+    const firstPartyCollectPrefix = typeof config.firstParty === "object" ? config.firstParty.collectPrefix || "/_proxy" : "/_proxy";
+    const firstPartyPrivacy = typeof config.firstParty === "object" ? config.firstParty.privacy : void 0;
+    const assetsPrefix = firstPartyPrefix || config.assets?.prefix || "/_scripts";
+    if (config.partytown?.length) {
+      config.registry = config.registry || {};
+      const requiredForwards = [];
+      for (const scriptKey of config.partytown) {
+        const forwards = PARTYTOWN_FORWARDS[scriptKey];
+        if (forwards) {
+          requiredForwards.push(...forwards);
+        } else if (import.meta.dev) {
+          logger.warn(`[partytown] "${scriptKey}" has no known Partytown forwards configured. It may not work correctly or may require manual forward configuration.`);
+        }
+        const reg = config.registry;
+        const existing = reg[scriptKey];
+        if (Array.isArray(existing)) {
+          existing[1] = { ...existing[1], partytown: true };
+        } else if (existing && typeof existing === "object" && existing !== true && existing !== "mock") {
+          reg[scriptKey] = [existing, { partytown: true }];
+        } else if (existing === true || existing === "mock") {
+          reg[scriptKey] = [{}, { partytown: true }];
+        } else {
+          reg[scriptKey] = [{}, { partytown: true }];
+        }
+      }
+      if (requiredForwards.length && hasNuxtModule("@nuxtjs/partytown")) {
+        const partytownConfig = nuxt.options.partytown || {};
+        const existingForwards = partytownConfig.forward || [];
+        const newForwards = [.../* @__PURE__ */ new Set([...existingForwards, ...requiredForwards])];
+        nuxt.options.partytown = { ...partytownConfig, forward: newForwards };
+        logger.info(`[partytown] Auto-configured forwards: ${requiredForwards.join(", ")}`);
+      }
+    }
     const composables = [
       "useScript",
       "useScriptEventPage",
       "useScriptTriggerConsent",
       "useScriptTriggerElement",
       "useScriptTriggerIdleTimeout",
-      "useScriptTriggerInteraction"
+      "useScriptTriggerInteraction",
+      "useScriptTriggerServiceWorker"
     ];
     for (const composable of composables) {
       addImports({
@@ -798,6 +1129,104 @@ const module$1 = defineNuxtModule({
         return templateTriggerResolver(config.defaultScriptOptions);
       }
     });
+    const swHandlerPath = await resolvePath("./runtime/server/sw-handler");
+    logger.debug("[nuxt-scripts] First-party config:", { firstPartyEnabled, firstPartyPrivacy, firstPartyCollectPrefix });
+    if (firstPartyEnabled && !nuxt.options.dev) {
+      const swPath = "/_nuxt-scripts-sw.js";
+      const swRules = getSWInterceptRules(firstPartyCollectPrefix);
+      addServerHandler({
+        route: swPath,
+        handler: swHandlerPath
+      });
+      addPluginTemplate({
+        filename: "nuxt-scripts-sw-register.client.mjs",
+        getContents() {
+          return `import { defineNuxtPlugin } from 'nuxt/app'
+
+export default defineNuxtPlugin({
+  name: 'nuxt-scripts:sw-register',
+  enforce: 'pre',
+  async setup() {
+    if (!('serviceWorker' in navigator)) return;
+
+    try {
+      const reg = await navigator.serviceWorker.register('${swPath}', { scope: '/' });
+
+      // Wait for SW to be active and controlling this page
+      if (!navigator.serviceWorker.controller) {
+        await new Promise((resolve) => {
+          const onControllerChange = () => {
+            navigator.serviceWorker.removeEventListener('controllerchange', onControllerChange);
+            resolve();
+          };
+          navigator.serviceWorker.addEventListener('controllerchange', onControllerChange);
+
+          // Fallback timeout
+          setTimeout(resolve, 2000);
+        });
+      }
+    } catch (err) {
+      console.warn('[nuxt-scripts] SW registration failed:', err);
+    }
+  },
+})
+`;
+        }
+      });
+      addPluginTemplate({
+        filename: "nuxt-scripts-beacon-intercept.client.mjs",
+        getContents() {
+          const rulesJson = JSON.stringify(swRules);
+          return `export default defineNuxtPlugin({
+  name: 'nuxt-scripts:beacon-intercept',
+  enforce: 'pre',
+  setup() {
+    if (typeof navigator === 'undefined' || !navigator.sendBeacon) return;
+
+    const rules = ${rulesJson};
+    const originalBeacon = navigator.sendBeacon.bind(navigator);
+
+    navigator.sendBeacon = (url, data) => {
+      try {
+        const parsed = new URL(url, window.location.origin);
+
+        // Check if this URL matches any of our proxy rules
+        for (const rule of rules) {
+          if (parsed.hostname === rule.pattern || parsed.hostname.endsWith('.' + rule.pattern)) {
+            // Check path prefix if specified
+            if (rule.pathPrefix && !parsed.pathname.startsWith(rule.pathPrefix)) {
+              continue;
+            }
+
+            // Rewrite to proxy: strip pathPrefix from original, prepend target
+            const pathWithoutPrefix = rule.pathPrefix
+              ? parsed.pathname.slice(rule.pathPrefix.length)
+              : parsed.pathname;
+            const separator = pathWithoutPrefix.startsWith('/') ? '' : '/';
+            const proxyUrl = rule.target + separator + pathWithoutPrefix + parsed.search;
+
+            return originalBeacon(proxyUrl, data);
+          }
+        }
+      } catch (e) {
+        // URL parsing failed, pass through
+      }
+
+      return originalBeacon(url, data);
+    };
+  },
+})
+`;
+        }
+      });
+      nuxt.options.runtimeConfig.public["nuxt-scripts-sw"] = { path: swPath };
+      const proxyHandlerPath = await resolvePath("./runtime/server/proxy-handler");
+      logger.debug("[nuxt-scripts] Registering proxy handler:", `${firstPartyCollectPrefix}/**`, "->", proxyHandlerPath);
+      addServerHandler({
+        route: `${firstPartyCollectPrefix}/**`,
+        handler: proxyHandlerPath
+      });
+    }
     const scripts = await registry(resolvePath);
     for (const script of scripts) {
       if (script.import?.name) {
@@ -825,6 +1254,90 @@ const module$1 = defineNuxtModule({
         });
       }
       const { renderedScript } = setupPublicAssetStrategy(config.assets);
+      if (firstPartyEnabled) {
+        const proxyConfigs = getAllProxyConfigs(firstPartyCollectPrefix);
+        const registryKeys = Object.keys(config.registry || {});
+        const neededRoutes = {};
+        const routePrivacyOverrides = {};
+        const unsupportedScripts = [];
+        for (const key of registryKeys) {
+          const script = registryScriptsWithImport.find((s) => s.import.name.toLowerCase() === `usescript${key.toLowerCase()}`);
+          const proxyKey = script?.proxy || void 0;
+          if (proxyKey) {
+            const proxyConfig = proxyConfigs[proxyKey];
+            if (proxyConfig?.routes) {
+              Object.assign(neededRoutes, proxyConfig.routes);
+              for (const routePath of Object.keys(proxyConfig.routes)) {
+                routePrivacyOverrides[routePath] = proxyConfig.privacy;
+              }
+            } else {
+              unsupportedScripts.push(key);
+            }
+          }
+        }
+        if (config.registry?.posthog && typeof config.registry.posthog === "object") {
+          const phConfig = config.registry.posthog;
+          if (!phConfig.apiHost) {
+            const region = phConfig.region || "us";
+            phConfig.apiHost = region === "eu" ? `${firstPartyCollectPrefix}/ph-eu` : `${firstPartyCollectPrefix}/ph`;
+          }
+        }
+        if (unsupportedScripts.length && nuxt.options.dev) {
+          logger.warn(
+            `First-party mode is enabled but these scripts don't support it yet: ${unsupportedScripts.join(", ")}.
+They will load directly from third-party servers. Request support at https://github.com/nuxt/scripts/issues`
+          );
+        }
+        const flatRoutes = {};
+        for (const [path, config2] of Object.entries(neededRoutes)) {
+          flatRoutes[path] = config2.proxy;
+        }
+        const allRewrites = [];
+        for (const key of registryKeys) {
+          const script = registryScriptsWithImport.find((s) => s.import.name.toLowerCase() === `usescript${key.toLowerCase()}`);
+          const proxyKey = script?.proxy !== false ? script?.proxy || key : void 0;
+          if (proxyKey) {
+            const proxyConfig = proxyConfigs[proxyKey];
+            if (proxyConfig?.rewrite) {
+              allRewrites.push(...proxyConfig.rewrite);
+            }
+          }
+        }
+        nuxt.options.runtimeConfig["nuxt-scripts-proxy"] = {
+          routes: flatRoutes,
+          privacy: firstPartyPrivacy,
+          // undefined = use per-script defaults, set = global override
+          routePrivacy: routePrivacyOverrides,
+          // per-script privacy from registry
+          rewrites: allRewrites
+        };
+        if (Object.keys(neededRoutes).length) {
+          if (nuxt.options.dev) {
+            const routeCount = Object.keys(neededRoutes).length;
+            const scriptsCount = registryKeys.length;
+            const privacyLabel = firstPartyPrivacy === void 0 ? "per-script" : typeof firstPartyPrivacy === "boolean" ? firstPartyPrivacy ? "anonymize" : "passthrough" : "custom";
+            logger.success(`First-party mode enabled for ${scriptsCount} script(s), ${routeCount} proxy route(s) configured (privacy: ${privacyLabel})`);
+            if (logger.level >= 4) {
+              for (const [path, config2] of Object.entries(neededRoutes)) {
+                logger.debug(`  ${path} \u2192 ${config2.proxy}`);
+              }
+            }
+          }
+        }
+        if (isStaticPreset) {
+          logger.warn(
+            `First-party collection endpoints require a server runtime (detected: ${preset || "static"}).
+Scripts will be bundled, but collection requests will not be proxied.
+
+Options:
+  1. Configure platform rewrites (Vercel, Netlify, Cloudflare)
+  2. Switch to server-rendered mode (ssr: true)
+  3. Disable with firstParty: false
+
+See: https://scripts.nuxt.com/docs/guides/first-party#static-hosting`
+          );
+        }
+      }
       const moduleInstallPromises = /* @__PURE__ */ new Map();
       addBuildPlugin(NuxtScriptsCheckScripts(), {
         dev: true
@@ -832,12 +1345,14 @@ const module$1 = defineNuxtModule({
       addBuildPlugin(NuxtScriptBundleTransformer({
         scripts: registryScriptsWithImport,
         registryConfig: nuxt.options.runtimeConfig.public.scripts,
-        defaultBundle: config.defaultScriptOptions?.bundle,
+        defaultBundle: firstPartyEnabled || config.defaultScriptOptions?.bundle,
+        firstPartyEnabled,
+        firstPartyCollectPrefix,
         moduleDetected(module) {
           if (nuxt.options.dev && module !== "@nuxt/scripts" && !moduleInstallPromises.has(module) && !hasNuxtModule(module))
             moduleInstallPromises.set(module, () => installNuxtModule(module));
         },
-        assetsBaseURL: config.assets?.prefix,
+        assetsBaseURL: assetsPrefix,
         fallbackOnSrcOnBundleFail: config.assets?.fallbackOnSrcOnBundleFail,
         fetchOptions: config.assets?.fetchOptions,
         cacheMaxAge: config.assets?.cacheMaxAge,
@@ -856,8 +1371,29 @@ const module$1 = defineNuxtModule({
         handler: await resolvePath("./runtime/server/google-static-maps-proxy")
       });
     }
-    if (nuxt.options.dev)
+    addServerHandler({
+      route: "/api/_scripts/x-embed",
+      handler: await resolvePath("./runtime/server/x-embed")
+    });
+    addServerHandler({
+      route: "/api/_scripts/x-embed-image",
+      handler: await resolvePath("./runtime/server/x-embed-image")
+    });
+    addServerHandler({
+      route: "/api/_scripts/instagram-embed",
+      handler: await resolvePath("./runtime/server/instagram-embed")
+    });
+    addServerHandler({
+      route: "/api/_scripts/instagram-embed-image",
+      handler: await resolvePath("./runtime/server/instagram-embed-image")
+    });
+    addServerHandler({
+      route: "/api/_scripts/instagram-embed-asset",
+      handler: await resolvePath("./runtime/server/instagram-embed-asset")
+    });
+    if (nuxt.options.dev) {
       setupDevToolsUI(config, resolvePath);
+    }
   }
 });