@shware/analytics 10.0.1 → 10.1.1

package/dist/next/index.cjs

@@ -23,7 +23,7 @@ function PageViews() {
 	require_hooks_use_web_analytics.useWebAnalytics(pathname, searchParams.toString());
 	return null;
 }
-function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, redditPixelId, linkedInPartnerId, uetTagId, uetCustomerId, facebookAppId, reportWebVitals = true }) {
+function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, redditPixelId, linkedInPartnerId, uetTagId, uetCustomerId, uetConsent = { ad_storage: "granted" }, facebookAppId, reportWebVitals = true }) {
 	require_hooks_use_outbound_click_analytics.useOutboundClickAnalytics();
 	require_hooks_use_uet_id_sync.useUETIdSync(uetCustomerId);
 	(0, next_web_vitals.useReportWebVitals)((metric) => {
@@ -134,6 +134,7 @@ function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, reddi
 			dangerouslySetInnerHTML: { __html: `
               (function (w, d, t, u, o) {
                 w[u] = w[u] || [], o.ts = (new Date).getTime();
+                ${uetConsent ? `w[u].push("consent", "default", ${JSON.stringify(uetConsent)});` : ""}
                 var n = d.createElement(t);
                 n.src = "https://bat.bing.net/bat.js?ti=" + o.ti + ("uetq" != u ? "&q=" + u : ""),
                 n.async = 1, n.onload = n.onreadystatechange = function() {

package/dist/next/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["usePathname","useSearchParams","Suspense","Script"],"sources":["../../src/next/index.tsx"],"sourcesContent":["'use client';\n\nimport { usePathname, useSearchParams } from 'next/navigation';\nimport Script from 'next/script';\nimport { useReportWebVitals } from 'next/web-vitals';\nimport { Suspense } from 'react';\nimport { useOutboundClickAnalytics } from '../hooks/use-outbound-click-analytics';\nimport { useUETIdSync } from '../hooks/use-uet-id-sync';\nimport { useWebAnalytics } from '../hooks/use-web-analytics';\nimport type { PixelId as MetaPixelId } from '../track/fbq';\nimport type { GaId, GtmId } from '../track/gtag';\nimport { track } from '../track/index';\nimport type { PixelId as RedditPixelId } from '../track/rdt';\n\ninterface Props {\n  gaId?: GaId;\n  gaSrc?: string;\n  gtmId?: GtmId;\n  hotjarId?: `${number}`;\n  metaPixelId?: MetaPixelId;\n  redditPixelId?: RedditPixelId;\n  linkedInPartnerId?: `${number}`;\n  /** Microsoft Advertising UET tag id. The tag reports page loads itself (`enableAutoSpaTracking`). */\n  uetTagId?: `${number}`;\n  /** Microsoft Advertising customer id (`cid` in the ads UI's URLs): enables the Conversions API's ID Sync pixel. */\n  uetCustomerId?: `${number}`;\n  facebookAppId?: string;\n  nonce?: string;\n  debugMode?: boolean;\n  reportWebVitals?: boolean;\n}\n\n/**\n * Its own component under a Suspense boundary: `useSearchParams` in a statically rendered route\n * bails the whole tree out to client rendering unless something above it suspends, and Next\n * fails the build for a page that lets it. The boundary is here so a host does not have to know.\n */\nfunction PageViews() {\n  const pathname = usePathname();\n  const searchParams = useSearchParams();\n  useWebAnalytics(pathname, searchParams.toString());\n  return null;\n}\n\nexport function Analytics({\n  gaId,\n  gaSrc,\n  nonce,\n  debugMode,\n  metaPixelId,\n  hotjarId,\n  redditPixelId,\n  linkedInPartnerId,\n  uetTagId,\n  uetCustomerId,\n  facebookAppId,\n  reportWebVitals = true,\n}: Props) {\n  useOutboundClickAnalytics();\n  useUETIdSync(uetCustomerId);\n\n  useReportWebVitals((metric) => {\n    if (!reportWebVitals) return;\n    const properties = {\n      value: metric.delta,\n      metric_id: metric.id,\n      metric_value: metric.value,\n      metric_delta: metric.delta,\n      metric_rating: metric.rating,\n      metric_navigation_type: metric.navigationType,\n      non_interaction: true, // avoids affecting bounce rate.\n    };\n    track(metric.name, properties);\n  });\n\n  return (\n    <>\n      <Suspense fallback={null}>\n        <PageViews />\n      </Suspense>\n      {facebookAppId && <meta property=\"fb:app_id\" content={facebookAppId} />}\n      {gaId && (\n        <>\n          <Script\n            id=\"gtag\"\n            nonce={nonce}\n            src={gaSrc ?? `https://www.googletagmanager.com/gtag/js?id=${gaId}`}\n          />\n          <Script\n            nonce={nonce}\n            id=\"gtag-init\"\n            dangerouslySetInnerHTML={{\n              __html: `\n              window.dataLayer = window.dataLayer || [];\n              function gtag(){dataLayer.push(arguments);}\n              gtag('js', new Date());\n              gtag('config', '${gaId}'${debugMode ? \" ,{ 'debug_mode': true }\" : ''});\n            `,\n            }}\n          />\n        </>\n      )}\n      {metaPixelId && (\n        <Script\n          id=\"meta-pixel\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            !(function (f, b, e, v, n, t, s) {\n              if (f.fbq) return;\n              n = f.fbq = function () {\n                n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments);\n              };\n              if (!f._fbq) f._fbq = n;\n              n.push = n;\n              n.loaded = !0;\n              n.version = '2.0';\n              n.queue = [];\n              t = b.createElement(e);\n              t.async = !0;\n              t.src = v;\n              s = b.getElementsByTagName(e)[0];\n              s.parentNode.insertBefore(t, s);\n            })(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js');\n            fbq('init', '${metaPixelId}');\n            fbq('track', 'PageView');`,\n          }}\n        />\n      )}\n      {redditPixelId && (\n        <Script\n          id=\"reddit-pixel\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            !function(w,d) {\n              if(!w.rdt) {\n                var p = w.rdt = function() {\n                  p.sendEvent ? p.sendEvent.apply(p,arguments) : p.callQueue.push(arguments)\n                };\n                p.callQueue = [];\n                var t = d.createElement(\"script\");\n                t.src = \"https://www.redditstatic.com/ads/pixel.js\";\n                t.async = !0;\n                var s = d.getElementsByTagName(\"script\")[0];\n                s.parentNode.insertBefore(t,s)\n              }\n            }(window, document);\n            rdt('init', '${redditPixelId}');\n            rdt('track', 'PageVisit');`,\n          }}\n        />\n      )}\n      {linkedInPartnerId && (\n        <Script\n          id=\"linkedin-insight-tag\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n              _linkedin_partner_id = \"${linkedInPartnerId}\";\n              window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || [];\n              window._linkedin_data_partner_ids.push(_linkedin_partner_id);\n\n              (function(l) {\n                if (!l){\n                  window.lintrk = function(a,b){ \n                    window.lintrk.q.push([a,b])\n                  };\n                  window.lintrk.q=[]\n                }\n                var s = document.getElementsByTagName(\"script\")[0];\n                var b = document.createElement(\"script\");\n                b.type = \"text/javascript\";b.async = true;\n                b.src = \"https://snap.licdn.com/li.lms-analytics/insight.min.js\";\n                s.parentNode.insertBefore(b, s);\n              })(window.lintrk);\n              `,\n          }}\n        />\n      )}\n      {uetTagId && (\n        <Script\n          strategy=\"afterInteractive\"\n          id=\"uet-tag\"\n          dangerouslySetInnerHTML={{\n            __html: `\n              (function (w, d, t, u, o) {\n                w[u] = w[u] || [], o.ts = (new Date).getTime();\n                var n = d.createElement(t);\n                n.src = \"https://bat.bing.net/bat.js?ti=\" + o.ti + (\"uetq\" != u ? \"&q=\" + u : \"\"),\n                n.async = 1, n.onload = n.onreadystatechange = function() {\n                  var s = this.readyState;\n                  s && \"loaded\" !== s && \"complete\" !== s ||\n                  (o.q = w[u], w[u] = new UET(o), w[u].push(\"pageLoad\"),\n                  n.onload = n.onreadystatechange = null)\n                };\n                var i = d.getElementsByTagName(t)[0];\n                i.parentNode.insertBefore(n, i);\n              })(window, document, \"script\", \"uetq\", {\n                ti: \"${uetTagId}\",\n                enableAutoSpaTracking: true\n              });\n            `,\n          }}\n        />\n      )}\n      {hotjarId && (\n        <Script\n          id=\"hotjar\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            (function(h,o,t,j,a,r){\n              h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)};\n              h._hjSettings={hjid:${hotjarId},hjsv:6};\n              a=o.getElementsByTagName('head')[0];\n              r=o.createElement('script');r.async=1;\n              r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv;\n              a.appendChild(r);\n            })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');\n            `,\n          }}\n        />\n      )}\n    </>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAqCA,SAAS,YAAY;CACnB,MAAM,YAAA,GAAWA,gBAAAA,YAAAA,CAAY;CAC7B,MAAM,gBAAA,GAAeC,gBAAAA,gBAAAA,CAAgB;CACrC,gCAAA,gBAAgB,UAAU,aAAa,SAAS,CAAC;CACjD,OAAO;AACT;AAEA,SAAgB,UAAU,EACxB,MACA,OACA,OACA,WACA,aACA,UACA,eACA,mBACA,UACA,eACA,eACA,kBAAkB,QACV;CACR,2CAAA,0BAA0B;CAC1B,8BAAA,aAAa,aAAa;CAE1B,CAAA,GAAA,gBAAA,mBAAA,EAAoB,WAAW;EAC7B,IAAI,CAAC,iBAAiB;EACtB,MAAM,aAAa;GACjB,OAAO,OAAO;GACd,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,cAAc,OAAO;GACrB,eAAe,OAAO;GACtB,wBAAwB,OAAO;GAC/B,iBAAiB;EACnB;EACA,oBAAA,MAAM,OAAO,MAAM,UAAU;CAC/B,CAAC;CAED,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA;EACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,MAAAA,UAAD;GAAU,UAAU;GAClB,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD,CAAY,CAAA;EACJ,CAAA;EACT,iBAAiB,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;GAAM,UAAS;GAAY,SAAS;EAAgB,CAAA;EACrE,QACC,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,YAAAA,SAAD;GACE,IAAG;GACI;GACP,KAAK,SAAS,+CAA+C;EAC9D,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACS;GACP,IAAG;GACH,yBAAyB,EACvB,QAAQ;;;;gCAIU,KAAK,GAAG,YAAY,6BAA6B,GAAG;cAExE;EACD,CAAA,CACD,EAAA,CAAA;EAEH,eACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;;;;2BAiBO,YAAY;uCAE7B;EACD,CAAA;EAEF,iBACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;2BAcO,cAAc;wCAE/B;EACD,CAAA;EAEF,qBACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;wCACoB,kBAAkB;;;;;;;;;;;;;;;;;gBAkBhD;EACD,CAAA;EAEF,YACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,UAAS;GACT,IAAG;GACH,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;uBAcG,SAAS;;;cAItB;EACD,CAAA;EAEF,YACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;oCAGgB,SAAS;;;;;;cAOnC;EACD,CAAA;CAEH,EAAA,CAAA;AAEN"}
+{"version":3,"file":"index.cjs","names":["usePathname","useSearchParams","Suspense","Script"],"sources":["../../src/next/index.tsx"],"sourcesContent":["'use client';\n\nimport { usePathname, useSearchParams } from 'next/navigation';\nimport Script from 'next/script';\nimport { useReportWebVitals } from 'next/web-vitals';\nimport { Suspense } from 'react';\nimport { useOutboundClickAnalytics } from '../hooks/use-outbound-click-analytics';\nimport { useUETIdSync } from '../hooks/use-uet-id-sync';\nimport { useWebAnalytics } from '../hooks/use-web-analytics';\nimport type { PixelId as MetaPixelId } from '../track/fbq';\nimport type { GaId, GtmId } from '../track/gtag';\nimport { track } from '../track/index';\nimport type { PixelId as RedditPixelId } from '../track/rdt';\nimport type { UETConsent } from '../track/uetq';\n\ninterface Props {\n  gaId?: GaId;\n  gaSrc?: string;\n  gtmId?: GtmId;\n  hotjarId?: `${number}`;\n  metaPixelId?: MetaPixelId;\n  redditPixelId?: RedditPixelId;\n  linkedInPartnerId?: `${number}`;\n  /** Microsoft Advertising UET tag id. The tag reports page loads itself (`enableAutoSpaTracking`). */\n  uetTagId?: `${number}`;\n  /** Microsoft Advertising customer id (`cid` in the ads UI's URLs): enables the Conversions API's ID Sync pixel. */\n  uetCustomerId?: `${number}`;\n  /**\n   * UET consent mode default, pushed inside the tag snippet so bat.js reads it before the first\n   * page load. Defaults to `ad_storage: granted`, which is how the tag behaves without a signal,\n   * so Microsoft stops flagging EEA/UK/CH events as missing consent. Sites with a consent banner\n   * pass `{ ad_storage: 'denied' }` and send `update` with `setUETConsent` when the visitor\n   * decides; `false` pushes no default.\n   * https://help.ads.microsoft.com/#apex/ads/en/60119/1\n   */\n  uetConsent?: UETConsent | false;\n  facebookAppId?: string;\n  nonce?: string;\n  debugMode?: boolean;\n  reportWebVitals?: boolean;\n}\n\n/**\n * Its own component under a Suspense boundary: `useSearchParams` in a statically rendered route\n * bails the whole tree out to client rendering unless something above it suspends, and Next\n * fails the build for a page that lets it. The boundary is here so a host does not have to know.\n */\nfunction PageViews() {\n  const pathname = usePathname();\n  const searchParams = useSearchParams();\n  useWebAnalytics(pathname, searchParams.toString());\n  return null;\n}\n\nexport function Analytics({\n  gaId,\n  gaSrc,\n  nonce,\n  debugMode,\n  metaPixelId,\n  hotjarId,\n  redditPixelId,\n  linkedInPartnerId,\n  uetTagId,\n  uetCustomerId,\n  uetConsent = { ad_storage: 'granted' },\n  facebookAppId,\n  reportWebVitals = true,\n}: Props) {\n  useOutboundClickAnalytics();\n  useUETIdSync(uetCustomerId);\n\n  useReportWebVitals((metric) => {\n    if (!reportWebVitals) return;\n    const properties = {\n      value: metric.delta,\n      metric_id: metric.id,\n      metric_value: metric.value,\n      metric_delta: metric.delta,\n      metric_rating: metric.rating,\n      metric_navigation_type: metric.navigationType,\n      non_interaction: true, // avoids affecting bounce rate.\n    };\n    track(metric.name, properties);\n  });\n\n  return (\n    <>\n      <Suspense fallback={null}>\n        <PageViews />\n      </Suspense>\n      {facebookAppId && <meta property=\"fb:app_id\" content={facebookAppId} />}\n      {gaId && (\n        <>\n          <Script\n            id=\"gtag\"\n            nonce={nonce}\n            src={gaSrc ?? `https://www.googletagmanager.com/gtag/js?id=${gaId}`}\n          />\n          <Script\n            nonce={nonce}\n            id=\"gtag-init\"\n            dangerouslySetInnerHTML={{\n              __html: `\n              window.dataLayer = window.dataLayer || [];\n              function gtag(){dataLayer.push(arguments);}\n              gtag('js', new Date());\n              gtag('config', '${gaId}'${debugMode ? \" ,{ 'debug_mode': true }\" : ''});\n            `,\n            }}\n          />\n        </>\n      )}\n      {metaPixelId && (\n        <Script\n          id=\"meta-pixel\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            !(function (f, b, e, v, n, t, s) {\n              if (f.fbq) return;\n              n = f.fbq = function () {\n                n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments);\n              };\n              if (!f._fbq) f._fbq = n;\n              n.push = n;\n              n.loaded = !0;\n              n.version = '2.0';\n              n.queue = [];\n              t = b.createElement(e);\n              t.async = !0;\n              t.src = v;\n              s = b.getElementsByTagName(e)[0];\n              s.parentNode.insertBefore(t, s);\n            })(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js');\n            fbq('init', '${metaPixelId}');\n            fbq('track', 'PageView');`,\n          }}\n        />\n      )}\n      {redditPixelId && (\n        <Script\n          id=\"reddit-pixel\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            !function(w,d) {\n              if(!w.rdt) {\n                var p = w.rdt = function() {\n                  p.sendEvent ? p.sendEvent.apply(p,arguments) : p.callQueue.push(arguments)\n                };\n                p.callQueue = [];\n                var t = d.createElement(\"script\");\n                t.src = \"https://www.redditstatic.com/ads/pixel.js\";\n                t.async = !0;\n                var s = d.getElementsByTagName(\"script\")[0];\n                s.parentNode.insertBefore(t,s)\n              }\n            }(window, document);\n            rdt('init', '${redditPixelId}');\n            rdt('track', 'PageVisit');`,\n          }}\n        />\n      )}\n      {linkedInPartnerId && (\n        <Script\n          id=\"linkedin-insight-tag\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n              _linkedin_partner_id = \"${linkedInPartnerId}\";\n              window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || [];\n              window._linkedin_data_partner_ids.push(_linkedin_partner_id);\n\n              (function(l) {\n                if (!l){\n                  window.lintrk = function(a,b){ \n                    window.lintrk.q.push([a,b])\n                  };\n                  window.lintrk.q=[]\n                }\n                var s = document.getElementsByTagName(\"script\")[0];\n                var b = document.createElement(\"script\");\n                b.type = \"text/javascript\";b.async = true;\n                b.src = \"https://snap.licdn.com/li.lms-analytics/insight.min.js\";\n                s.parentNode.insertBefore(b, s);\n              })(window.lintrk);\n              `,\n          }}\n        />\n      )}\n      {uetTagId && (\n        <Script\n          strategy=\"afterInteractive\"\n          id=\"uet-tag\"\n          dangerouslySetInnerHTML={{\n            __html: `\n              (function (w, d, t, u, o) {\n                w[u] = w[u] || [], o.ts = (new Date).getTime();\n                ${uetConsent ? `w[u].push(\"consent\", \"default\", ${JSON.stringify(uetConsent)});` : ''}\n                var n = d.createElement(t);\n                n.src = \"https://bat.bing.net/bat.js?ti=\" + o.ti + (\"uetq\" != u ? \"&q=\" + u : \"\"),\n                n.async = 1, n.onload = n.onreadystatechange = function() {\n                  var s = this.readyState;\n                  s && \"loaded\" !== s && \"complete\" !== s ||\n                  (o.q = w[u], w[u] = new UET(o), w[u].push(\"pageLoad\"),\n                  n.onload = n.onreadystatechange = null)\n                };\n                var i = d.getElementsByTagName(t)[0];\n                i.parentNode.insertBefore(n, i);\n              })(window, document, \"script\", \"uetq\", {\n                ti: \"${uetTagId}\",\n                enableAutoSpaTracking: true\n              });\n            `,\n          }}\n        />\n      )}\n      {hotjarId && (\n        <Script\n          id=\"hotjar\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            (function(h,o,t,j,a,r){\n              h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)};\n              h._hjSettings={hjid:${hotjarId},hjsv:6};\n              a=o.getElementsByTagName('head')[0];\n              r=o.createElement('script');r.async=1;\n              r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv;\n              a.appendChild(r);\n            })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');\n            `,\n          }}\n        />\n      )}\n    </>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA+CA,SAAS,YAAY;CACnB,MAAM,YAAA,GAAWA,gBAAAA,YAAAA,CAAY;CAC7B,MAAM,gBAAA,GAAeC,gBAAAA,gBAAAA,CAAgB;CACrC,gCAAA,gBAAgB,UAAU,aAAa,SAAS,CAAC;CACjD,OAAO;AACT;AAEA,SAAgB,UAAU,EACxB,MACA,OACA,OACA,WACA,aACA,UACA,eACA,mBACA,UACA,eACA,aAAa,EAAE,YAAY,UAAU,GACrC,eACA,kBAAkB,QACV;CACR,2CAAA,0BAA0B;CAC1B,8BAAA,aAAa,aAAa;CAE1B,CAAA,GAAA,gBAAA,mBAAA,EAAoB,WAAW;EAC7B,IAAI,CAAC,iBAAiB;EACtB,MAAM,aAAa;GACjB,OAAO,OAAO;GACd,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,cAAc,OAAO;GACrB,eAAe,OAAO;GACtB,wBAAwB,OAAO;GAC/B,iBAAiB;EACnB;EACA,oBAAA,MAAM,OAAO,MAAM,UAAU;CAC/B,CAAC;CAED,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA;EACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,MAAAA,UAAD;GAAU,UAAU;GAClB,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD,CAAY,CAAA;EACJ,CAAA;EACT,iBAAiB,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;GAAM,UAAS;GAAY,SAAS;EAAgB,CAAA;EACrE,QACC,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,YAAAA,SAAD;GACE,IAAG;GACI;GACP,KAAK,SAAS,+CAA+C;EAC9D,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACS;GACP,IAAG;GACH,yBAAyB,EACvB,QAAQ;;;;gCAIU,KAAK,GAAG,YAAY,6BAA6B,GAAG;cAExE;EACD,CAAA,CACD,EAAA,CAAA;EAEH,eACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;;;;2BAiBO,YAAY;uCAE7B;EACD,CAAA;EAEF,iBACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;2BAcO,cAAc;wCAE/B;EACD,CAAA;EAEF,qBACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;wCACoB,kBAAkB;;;;;;;;;;;;;;;;;gBAkBhD;EACD,CAAA;EAEF,YACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,UAAS;GACT,IAAG;GACH,yBAAyB,EACvB,QAAQ;;;kBAGF,aAAa,mCAAmC,KAAK,UAAU,UAAU,EAAE,MAAM,GAAG;;;;;;;;;;;;uBAY/E,SAAS;;;cAItB;EACD,CAAA;EAEF,YACC,iBAAA,GAAA,kBAAA,IAAA,CAACA,YAAAA,SAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;oCAGgB,SAAS;;;;;;cAOnC;EACD,CAAA;CAEH,EAAA,CAAA;AAEN"}

package/dist/next/index.d.cts

@@ -1,6 +1,7 @@
 import { GaId, GtmId } from "../track/gtag.cjs";
 import { PixelId } from "../track/fbq.cjs";
 import { PixelId as PixelId$1 } from "../track/rdt.cjs";
+import { UETConsent } from "../track/uetq.cjs";
 //#region src/next/index.d.ts
 interface Props {
   gaId?: GaId;
@@ -14,11 +15,20 @@ interface Props {
   uetTagId?: `${number}`;
   /** Microsoft Advertising customer id (`cid` in the ads UI's URLs): enables the Conversions API's ID Sync pixel. */
   uetCustomerId?: `${number}`;
+  /**
+   * UET consent mode default, pushed inside the tag snippet so bat.js reads it before the first
+   * page load. Defaults to `ad_storage: granted`, which is how the tag behaves without a signal,
+   * so Microsoft stops flagging EEA/UK/CH events as missing consent. Sites with a consent banner
+   * pass `{ ad_storage: 'denied' }` and send `update` with `setUETConsent` when the visitor
+   * decides; `false` pushes no default.
+   * https://help.ads.microsoft.com/#apex/ads/en/60119/1
+   */
+  uetConsent?: UETConsent | false;
   facebookAppId?: string;
   nonce?: string;
   debugMode?: boolean;
   reportWebVitals?: boolean;
 }
-export declare function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, redditPixelId, linkedInPartnerId, uetTagId, uetCustomerId, facebookAppId, reportWebVitals }: Props): import("react").JSX.Element;
+export declare function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, redditPixelId, linkedInPartnerId, uetTagId, uetCustomerId, uetConsent, facebookAppId, reportWebVitals }: Props): import("react").JSX.Element;
 //#endregion
 //# sourceMappingURL=index.d.cts.map

package/dist/next/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":["MetaPixelId","RedditPixelId"],"sources":["../../src/next/index.tsx"],"mappings":";;;;UAcU;EACR,OAAO;EACP;EACA,QAAQ;EACR;EACA,cAAcA;EACd,gBAAgBC;EAChB;;EAEA;;EAEA;EACA;EACA;EACA;EACA;;wBAec,YACd,MACA,OACA,OACA,WACA,aACA,UACA,eACA,mBACA,UACA,eACA,eACA,mBACC,wBAAK,IAAA"}
+{"version":3,"file":"index.d.cts","names":["MetaPixelId","RedditPixelId"],"sources":["../../src/next/index.tsx"],"mappings":";;;;;UAeU;EACR,OAAO;EACP;EACA,QAAQ;EACR;EACA,cAAcA;EACd,gBAAgBC;EAChB;;EAEA;;EAEA;;;;;;;;;EASA,aAAa;EACb;EACA;EACA;EACA;;wBAec,YACd,MACA,OACA,OACA,WACA,aACA,UACA,eACA,mBACA,UACA,eACA,YACA,eACA,mBACC,wBAAK,IAAA"}

package/dist/next/index.d.mts

@@ -1,6 +1,7 @@
 import { GaId, GtmId } from "../track/gtag.mjs";
 import { PixelId } from "../track/fbq.mjs";
 import { PixelId as PixelId$1 } from "../track/rdt.mjs";
+import { UETConsent } from "../track/uetq.mjs";
 //#region src/next/index.d.ts
 interface Props {
   gaId?: GaId;
@@ -14,11 +15,20 @@ interface Props {
   uetTagId?: `${number}`;
   /** Microsoft Advertising customer id (`cid` in the ads UI's URLs): enables the Conversions API's ID Sync pixel. */
   uetCustomerId?: `${number}`;
+  /**
+   * UET consent mode default, pushed inside the tag snippet so bat.js reads it before the first
+   * page load. Defaults to `ad_storage: granted`, which is how the tag behaves without a signal,
+   * so Microsoft stops flagging EEA/UK/CH events as missing consent. Sites with a consent banner
+   * pass `{ ad_storage: 'denied' }` and send `update` with `setUETConsent` when the visitor
+   * decides; `false` pushes no default.
+   * https://help.ads.microsoft.com/#apex/ads/en/60119/1
+   */
+  uetConsent?: UETConsent | false;
   facebookAppId?: string;
   nonce?: string;
   debugMode?: boolean;
   reportWebVitals?: boolean;
 }
-export declare function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, redditPixelId, linkedInPartnerId, uetTagId, uetCustomerId, facebookAppId, reportWebVitals }: Props): import("react").JSX.Element;
+export declare function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, redditPixelId, linkedInPartnerId, uetTagId, uetCustomerId, uetConsent, facebookAppId, reportWebVitals }: Props): import("react").JSX.Element;
 //#endregion
 //# sourceMappingURL=index.d.mts.map

package/dist/next/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":["MetaPixelId","RedditPixelId"],"sources":["../../src/next/index.tsx"],"mappings":";;;;UAcU;EACR,OAAO;EACP;EACA,QAAQ;EACR;EACA,cAAcA;EACd,gBAAgBC;EAChB;;EAEA;;EAEA;EACA;EACA;EACA;EACA;;wBAec,YACd,MACA,OACA,OACA,WACA,aACA,UACA,eACA,mBACA,UACA,eACA,eACA,mBACC,wBAAK,IAAA"}
+{"version":3,"file":"index.d.mts","names":["MetaPixelId","RedditPixelId"],"sources":["../../src/next/index.tsx"],"mappings":";;;;;UAeU;EACR,OAAO;EACP;EACA,QAAQ;EACR;EACA,cAAcA;EACd,gBAAgBC;EAChB;;EAEA;;EAEA;;;;;;;;;EASA,aAAa;EACb;EACA;EACA;EACA;;wBAec,YACd,MACA,OACA,OACA,WACA,aACA,UACA,eACA,mBACA,UACA,eACA,YACA,eACA,mBACC,wBAAK,IAAA"}

package/dist/next/index.mjs

@@ -20,7 +20,7 @@ function PageViews() {
 	useWebAnalytics(pathname, searchParams.toString());
 	return null;
 }
-function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, redditPixelId, linkedInPartnerId, uetTagId, uetCustomerId, facebookAppId, reportWebVitals = true }) {
+function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, redditPixelId, linkedInPartnerId, uetTagId, uetCustomerId, uetConsent = { ad_storage: "granted" }, facebookAppId, reportWebVitals = true }) {
 	useOutboundClickAnalytics();
 	useUETIdSync(uetCustomerId);
 	useReportWebVitals((metric) => {
@@ -131,6 +131,7 @@ function Analytics({ gaId, gaSrc, nonce, debugMode, metaPixelId, hotjarId, reddi
 			dangerouslySetInnerHTML: { __html: `
               (function (w, d, t, u, o) {
                 w[u] = w[u] || [], o.ts = (new Date).getTime();
+                ${uetConsent ? `w[u].push("consent", "default", ${JSON.stringify(uetConsent)});` : ""}
                 var n = d.createElement(t);
                 n.src = "https://bat.bing.net/bat.js?ti=" + o.ti + ("uetq" != u ? "&q=" + u : ""),
                 n.async = 1, n.onload = n.onreadystatechange = function() {

package/dist/next/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/next/index.tsx"],"sourcesContent":["'use client';\n\nimport { usePathname, useSearchParams } from 'next/navigation';\nimport Script from 'next/script';\nimport { useReportWebVitals } from 'next/web-vitals';\nimport { Suspense } from 'react';\nimport { useOutboundClickAnalytics } from '../hooks/use-outbound-click-analytics';\nimport { useUETIdSync } from '../hooks/use-uet-id-sync';\nimport { useWebAnalytics } from '../hooks/use-web-analytics';\nimport type { PixelId as MetaPixelId } from '../track/fbq';\nimport type { GaId, GtmId } from '../track/gtag';\nimport { track } from '../track/index';\nimport type { PixelId as RedditPixelId } from '../track/rdt';\n\ninterface Props {\n  gaId?: GaId;\n  gaSrc?: string;\n  gtmId?: GtmId;\n  hotjarId?: `${number}`;\n  metaPixelId?: MetaPixelId;\n  redditPixelId?: RedditPixelId;\n  linkedInPartnerId?: `${number}`;\n  /** Microsoft Advertising UET tag id. The tag reports page loads itself (`enableAutoSpaTracking`). */\n  uetTagId?: `${number}`;\n  /** Microsoft Advertising customer id (`cid` in the ads UI's URLs): enables the Conversions API's ID Sync pixel. */\n  uetCustomerId?: `${number}`;\n  facebookAppId?: string;\n  nonce?: string;\n  debugMode?: boolean;\n  reportWebVitals?: boolean;\n}\n\n/**\n * Its own component under a Suspense boundary: `useSearchParams` in a statically rendered route\n * bails the whole tree out to client rendering unless something above it suspends, and Next\n * fails the build for a page that lets it. The boundary is here so a host does not have to know.\n */\nfunction PageViews() {\n  const pathname = usePathname();\n  const searchParams = useSearchParams();\n  useWebAnalytics(pathname, searchParams.toString());\n  return null;\n}\n\nexport function Analytics({\n  gaId,\n  gaSrc,\n  nonce,\n  debugMode,\n  metaPixelId,\n  hotjarId,\n  redditPixelId,\n  linkedInPartnerId,\n  uetTagId,\n  uetCustomerId,\n  facebookAppId,\n  reportWebVitals = true,\n}: Props) {\n  useOutboundClickAnalytics();\n  useUETIdSync(uetCustomerId);\n\n  useReportWebVitals((metric) => {\n    if (!reportWebVitals) return;\n    const properties = {\n      value: metric.delta,\n      metric_id: metric.id,\n      metric_value: metric.value,\n      metric_delta: metric.delta,\n      metric_rating: metric.rating,\n      metric_navigation_type: metric.navigationType,\n      non_interaction: true, // avoids affecting bounce rate.\n    };\n    track(metric.name, properties);\n  });\n\n  return (\n    <>\n      <Suspense fallback={null}>\n        <PageViews />\n      </Suspense>\n      {facebookAppId && <meta property=\"fb:app_id\" content={facebookAppId} />}\n      {gaId && (\n        <>\n          <Script\n            id=\"gtag\"\n            nonce={nonce}\n            src={gaSrc ?? `https://www.googletagmanager.com/gtag/js?id=${gaId}`}\n          />\n          <Script\n            nonce={nonce}\n            id=\"gtag-init\"\n            dangerouslySetInnerHTML={{\n              __html: `\n              window.dataLayer = window.dataLayer || [];\n              function gtag(){dataLayer.push(arguments);}\n              gtag('js', new Date());\n              gtag('config', '${gaId}'${debugMode ? \" ,{ 'debug_mode': true }\" : ''});\n            `,\n            }}\n          />\n        </>\n      )}\n      {metaPixelId && (\n        <Script\n          id=\"meta-pixel\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            !(function (f, b, e, v, n, t, s) {\n              if (f.fbq) return;\n              n = f.fbq = function () {\n                n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments);\n              };\n              if (!f._fbq) f._fbq = n;\n              n.push = n;\n              n.loaded = !0;\n              n.version = '2.0';\n              n.queue = [];\n              t = b.createElement(e);\n              t.async = !0;\n              t.src = v;\n              s = b.getElementsByTagName(e)[0];\n              s.parentNode.insertBefore(t, s);\n            })(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js');\n            fbq('init', '${metaPixelId}');\n            fbq('track', 'PageView');`,\n          }}\n        />\n      )}\n      {redditPixelId && (\n        <Script\n          id=\"reddit-pixel\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            !function(w,d) {\n              if(!w.rdt) {\n                var p = w.rdt = function() {\n                  p.sendEvent ? p.sendEvent.apply(p,arguments) : p.callQueue.push(arguments)\n                };\n                p.callQueue = [];\n                var t = d.createElement(\"script\");\n                t.src = \"https://www.redditstatic.com/ads/pixel.js\";\n                t.async = !0;\n                var s = d.getElementsByTagName(\"script\")[0];\n                s.parentNode.insertBefore(t,s)\n              }\n            }(window, document);\n            rdt('init', '${redditPixelId}');\n            rdt('track', 'PageVisit');`,\n          }}\n        />\n      )}\n      {linkedInPartnerId && (\n        <Script\n          id=\"linkedin-insight-tag\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n              _linkedin_partner_id = \"${linkedInPartnerId}\";\n              window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || [];\n              window._linkedin_data_partner_ids.push(_linkedin_partner_id);\n\n              (function(l) {\n                if (!l){\n                  window.lintrk = function(a,b){ \n                    window.lintrk.q.push([a,b])\n                  };\n                  window.lintrk.q=[]\n                }\n                var s = document.getElementsByTagName(\"script\")[0];\n                var b = document.createElement(\"script\");\n                b.type = \"text/javascript\";b.async = true;\n                b.src = \"https://snap.licdn.com/li.lms-analytics/insight.min.js\";\n                s.parentNode.insertBefore(b, s);\n              })(window.lintrk);\n              `,\n          }}\n        />\n      )}\n      {uetTagId && (\n        <Script\n          strategy=\"afterInteractive\"\n          id=\"uet-tag\"\n          dangerouslySetInnerHTML={{\n            __html: `\n              (function (w, d, t, u, o) {\n                w[u] = w[u] || [], o.ts = (new Date).getTime();\n                var n = d.createElement(t);\n                n.src = \"https://bat.bing.net/bat.js?ti=\" + o.ti + (\"uetq\" != u ? \"&q=\" + u : \"\"),\n                n.async = 1, n.onload = n.onreadystatechange = function() {\n                  var s = this.readyState;\n                  s && \"loaded\" !== s && \"complete\" !== s ||\n                  (o.q = w[u], w[u] = new UET(o), w[u].push(\"pageLoad\"),\n                  n.onload = n.onreadystatechange = null)\n                };\n                var i = d.getElementsByTagName(t)[0];\n                i.parentNode.insertBefore(n, i);\n              })(window, document, \"script\", \"uetq\", {\n                ti: \"${uetTagId}\",\n                enableAutoSpaTracking: true\n              });\n            `,\n          }}\n        />\n      )}\n      {hotjarId && (\n        <Script\n          id=\"hotjar\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            (function(h,o,t,j,a,r){\n              h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)};\n              h._hjSettings={hjid:${hotjarId},hjsv:6};\n              a=o.getElementsByTagName('head')[0];\n              r=o.createElement('script');r.async=1;\n              r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv;\n              a.appendChild(r);\n            })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');\n            `,\n          }}\n        />\n      )}\n    </>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAqCA,SAAS,YAAY;CACnB,MAAM,WAAW,YAAY;CAC7B,MAAM,eAAe,gBAAgB;CACrC,gBAAgB,UAAU,aAAa,SAAS,CAAC;CACjD,OAAO;AACT;AAEA,SAAgB,UAAU,EACxB,MACA,OACA,OACA,WACA,aACA,UACA,eACA,mBACA,UACA,eACA,eACA,kBAAkB,QACV;CACR,0BAA0B;CAC1B,aAAa,aAAa;CAE1B,oBAAoB,WAAW;EAC7B,IAAI,CAAC,iBAAiB;EACtB,MAAM,aAAa;GACjB,OAAO,OAAO;GACd,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,cAAc,OAAO;GACrB,eAAe,OAAO;GACtB,wBAAwB,OAAO;GAC/B,iBAAiB;EACnB;EACA,MAAM,OAAO,MAAM,UAAU;CAC/B,CAAC;CAED,OACE,qBAAA,UAAA,EAAA,UAAA;EACE,oBAAC,UAAD;GAAU,UAAU;GAClB,UAAA,oBAAC,WAAD,CAAY,CAAA;EACJ,CAAA;EACT,iBAAiB,oBAAC,QAAD;GAAM,UAAS;GAAY,SAAS;EAAgB,CAAA;EACrE,QACC,qBAAA,UAAA,EAAA,UAAA,CACE,oBAAC,QAAD;GACE,IAAG;GACI;GACP,KAAK,SAAS,+CAA+C;EAC9D,CAAA,GACD,oBAAC,QAAD;GACS;GACP,IAAG;GACH,yBAAyB,EACvB,QAAQ;;;;gCAIU,KAAK,GAAG,YAAY,6BAA6B,GAAG;cAExE;EACD,CAAA,CACD,EAAA,CAAA;EAEH,eACC,oBAAC,QAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;;;;2BAiBO,YAAY;uCAE7B;EACD,CAAA;EAEF,iBACC,oBAAC,QAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;2BAcO,cAAc;wCAE/B;EACD,CAAA;EAEF,qBACC,oBAAC,QAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;wCACoB,kBAAkB;;;;;;;;;;;;;;;;;gBAkBhD;EACD,CAAA;EAEF,YACC,oBAAC,QAAD;GACE,UAAS;GACT,IAAG;GACH,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;uBAcG,SAAS;;;cAItB;EACD,CAAA;EAEF,YACC,oBAAC,QAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;oCAGgB,SAAS;;;;;;cAOnC;EACD,CAAA;CAEH,EAAA,CAAA;AAEN"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/next/index.tsx"],"sourcesContent":["'use client';\n\nimport { usePathname, useSearchParams } from 'next/navigation';\nimport Script from 'next/script';\nimport { useReportWebVitals } from 'next/web-vitals';\nimport { Suspense } from 'react';\nimport { useOutboundClickAnalytics } from '../hooks/use-outbound-click-analytics';\nimport { useUETIdSync } from '../hooks/use-uet-id-sync';\nimport { useWebAnalytics } from '../hooks/use-web-analytics';\nimport type { PixelId as MetaPixelId } from '../track/fbq';\nimport type { GaId, GtmId } from '../track/gtag';\nimport { track } from '../track/index';\nimport type { PixelId as RedditPixelId } from '../track/rdt';\nimport type { UETConsent } from '../track/uetq';\n\ninterface Props {\n  gaId?: GaId;\n  gaSrc?: string;\n  gtmId?: GtmId;\n  hotjarId?: `${number}`;\n  metaPixelId?: MetaPixelId;\n  redditPixelId?: RedditPixelId;\n  linkedInPartnerId?: `${number}`;\n  /** Microsoft Advertising UET tag id. The tag reports page loads itself (`enableAutoSpaTracking`). */\n  uetTagId?: `${number}`;\n  /** Microsoft Advertising customer id (`cid` in the ads UI's URLs): enables the Conversions API's ID Sync pixel. */\n  uetCustomerId?: `${number}`;\n  /**\n   * UET consent mode default, pushed inside the tag snippet so bat.js reads it before the first\n   * page load. Defaults to `ad_storage: granted`, which is how the tag behaves without a signal,\n   * so Microsoft stops flagging EEA/UK/CH events as missing consent. Sites with a consent banner\n   * pass `{ ad_storage: 'denied' }` and send `update` with `setUETConsent` when the visitor\n   * decides; `false` pushes no default.\n   * https://help.ads.microsoft.com/#apex/ads/en/60119/1\n   */\n  uetConsent?: UETConsent | false;\n  facebookAppId?: string;\n  nonce?: string;\n  debugMode?: boolean;\n  reportWebVitals?: boolean;\n}\n\n/**\n * Its own component under a Suspense boundary: `useSearchParams` in a statically rendered route\n * bails the whole tree out to client rendering unless something above it suspends, and Next\n * fails the build for a page that lets it. The boundary is here so a host does not have to know.\n */\nfunction PageViews() {\n  const pathname = usePathname();\n  const searchParams = useSearchParams();\n  useWebAnalytics(pathname, searchParams.toString());\n  return null;\n}\n\nexport function Analytics({\n  gaId,\n  gaSrc,\n  nonce,\n  debugMode,\n  metaPixelId,\n  hotjarId,\n  redditPixelId,\n  linkedInPartnerId,\n  uetTagId,\n  uetCustomerId,\n  uetConsent = { ad_storage: 'granted' },\n  facebookAppId,\n  reportWebVitals = true,\n}: Props) {\n  useOutboundClickAnalytics();\n  useUETIdSync(uetCustomerId);\n\n  useReportWebVitals((metric) => {\n    if (!reportWebVitals) return;\n    const properties = {\n      value: metric.delta,\n      metric_id: metric.id,\n      metric_value: metric.value,\n      metric_delta: metric.delta,\n      metric_rating: metric.rating,\n      metric_navigation_type: metric.navigationType,\n      non_interaction: true, // avoids affecting bounce rate.\n    };\n    track(metric.name, properties);\n  });\n\n  return (\n    <>\n      <Suspense fallback={null}>\n        <PageViews />\n      </Suspense>\n      {facebookAppId && <meta property=\"fb:app_id\" content={facebookAppId} />}\n      {gaId && (\n        <>\n          <Script\n            id=\"gtag\"\n            nonce={nonce}\n            src={gaSrc ?? `https://www.googletagmanager.com/gtag/js?id=${gaId}`}\n          />\n          <Script\n            nonce={nonce}\n            id=\"gtag-init\"\n            dangerouslySetInnerHTML={{\n              __html: `\n              window.dataLayer = window.dataLayer || [];\n              function gtag(){dataLayer.push(arguments);}\n              gtag('js', new Date());\n              gtag('config', '${gaId}'${debugMode ? \" ,{ 'debug_mode': true }\" : ''});\n            `,\n            }}\n          />\n        </>\n      )}\n      {metaPixelId && (\n        <Script\n          id=\"meta-pixel\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            !(function (f, b, e, v, n, t, s) {\n              if (f.fbq) return;\n              n = f.fbq = function () {\n                n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments);\n              };\n              if (!f._fbq) f._fbq = n;\n              n.push = n;\n              n.loaded = !0;\n              n.version = '2.0';\n              n.queue = [];\n              t = b.createElement(e);\n              t.async = !0;\n              t.src = v;\n              s = b.getElementsByTagName(e)[0];\n              s.parentNode.insertBefore(t, s);\n            })(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js');\n            fbq('init', '${metaPixelId}');\n            fbq('track', 'PageView');`,\n          }}\n        />\n      )}\n      {redditPixelId && (\n        <Script\n          id=\"reddit-pixel\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            !function(w,d) {\n              if(!w.rdt) {\n                var p = w.rdt = function() {\n                  p.sendEvent ? p.sendEvent.apply(p,arguments) : p.callQueue.push(arguments)\n                };\n                p.callQueue = [];\n                var t = d.createElement(\"script\");\n                t.src = \"https://www.redditstatic.com/ads/pixel.js\";\n                t.async = !0;\n                var s = d.getElementsByTagName(\"script\")[0];\n                s.parentNode.insertBefore(t,s)\n              }\n            }(window, document);\n            rdt('init', '${redditPixelId}');\n            rdt('track', 'PageVisit');`,\n          }}\n        />\n      )}\n      {linkedInPartnerId && (\n        <Script\n          id=\"linkedin-insight-tag\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n              _linkedin_partner_id = \"${linkedInPartnerId}\";\n              window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || [];\n              window._linkedin_data_partner_ids.push(_linkedin_partner_id);\n\n              (function(l) {\n                if (!l){\n                  window.lintrk = function(a,b){ \n                    window.lintrk.q.push([a,b])\n                  };\n                  window.lintrk.q=[]\n                }\n                var s = document.getElementsByTagName(\"script\")[0];\n                var b = document.createElement(\"script\");\n                b.type = \"text/javascript\";b.async = true;\n                b.src = \"https://snap.licdn.com/li.lms-analytics/insight.min.js\";\n                s.parentNode.insertBefore(b, s);\n              })(window.lintrk);\n              `,\n          }}\n        />\n      )}\n      {uetTagId && (\n        <Script\n          strategy=\"afterInteractive\"\n          id=\"uet-tag\"\n          dangerouslySetInnerHTML={{\n            __html: `\n              (function (w, d, t, u, o) {\n                w[u] = w[u] || [], o.ts = (new Date).getTime();\n                ${uetConsent ? `w[u].push(\"consent\", \"default\", ${JSON.stringify(uetConsent)});` : ''}\n                var n = d.createElement(t);\n                n.src = \"https://bat.bing.net/bat.js?ti=\" + o.ti + (\"uetq\" != u ? \"&q=\" + u : \"\"),\n                n.async = 1, n.onload = n.onreadystatechange = function() {\n                  var s = this.readyState;\n                  s && \"loaded\" !== s && \"complete\" !== s ||\n                  (o.q = w[u], w[u] = new UET(o), w[u].push(\"pageLoad\"),\n                  n.onload = n.onreadystatechange = null)\n                };\n                var i = d.getElementsByTagName(t)[0];\n                i.parentNode.insertBefore(n, i);\n              })(window, document, \"script\", \"uetq\", {\n                ti: \"${uetTagId}\",\n                enableAutoSpaTracking: true\n              });\n            `,\n          }}\n        />\n      )}\n      {hotjarId && (\n        <Script\n          id=\"hotjar\"\n          strategy=\"afterInteractive\"\n          dangerouslySetInnerHTML={{\n            __html: `\n            (function(h,o,t,j,a,r){\n              h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)};\n              h._hjSettings={hjid:${hotjarId},hjsv:6};\n              a=o.getElementsByTagName('head')[0];\n              r=o.createElement('script');r.async=1;\n              r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv;\n              a.appendChild(r);\n            })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');\n            `,\n          }}\n        />\n      )}\n    </>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+CA,SAAS,YAAY;CACnB,MAAM,WAAW,YAAY;CAC7B,MAAM,eAAe,gBAAgB;CACrC,gBAAgB,UAAU,aAAa,SAAS,CAAC;CACjD,OAAO;AACT;AAEA,SAAgB,UAAU,EACxB,MACA,OACA,OACA,WACA,aACA,UACA,eACA,mBACA,UACA,eACA,aAAa,EAAE,YAAY,UAAU,GACrC,eACA,kBAAkB,QACV;CACR,0BAA0B;CAC1B,aAAa,aAAa;CAE1B,oBAAoB,WAAW;EAC7B,IAAI,CAAC,iBAAiB;EACtB,MAAM,aAAa;GACjB,OAAO,OAAO;GACd,WAAW,OAAO;GAClB,cAAc,OAAO;GACrB,cAAc,OAAO;GACrB,eAAe,OAAO;GACtB,wBAAwB,OAAO;GAC/B,iBAAiB;EACnB;EACA,MAAM,OAAO,MAAM,UAAU;CAC/B,CAAC;CAED,OACE,qBAAA,UAAA,EAAA,UAAA;EACE,oBAAC,UAAD;GAAU,UAAU;GAClB,UAAA,oBAAC,WAAD,CAAY,CAAA;EACJ,CAAA;EACT,iBAAiB,oBAAC,QAAD;GAAM,UAAS;GAAY,SAAS;EAAgB,CAAA;EACrE,QACC,qBAAA,UAAA,EAAA,UAAA,CACE,oBAAC,QAAD;GACE,IAAG;GACI;GACP,KAAK,SAAS,+CAA+C;EAC9D,CAAA,GACD,oBAAC,QAAD;GACS;GACP,IAAG;GACH,yBAAyB,EACvB,QAAQ;;;;gCAIU,KAAK,GAAG,YAAY,6BAA6B,GAAG;cAExE;EACD,CAAA,CACD,EAAA,CAAA;EAEH,eACC,oBAAC,QAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;;;;2BAiBO,YAAY;uCAE7B;EACD,CAAA;EAEF,iBACC,oBAAC,QAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;;;;;;;;;;;;2BAcO,cAAc;wCAE/B;EACD,CAAA;EAEF,qBACC,oBAAC,QAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;wCACoB,kBAAkB;;;;;;;;;;;;;;;;;gBAkBhD;EACD,CAAA;EAEF,YACC,oBAAC,QAAD;GACE,UAAS;GACT,IAAG;GACH,yBAAyB,EACvB,QAAQ;;;kBAGF,aAAa,mCAAmC,KAAK,UAAU,UAAU,EAAE,MAAM,GAAG;;;;;;;;;;;;uBAY/E,SAAS;;;cAItB;EACD,CAAA;EAEF,YACC,oBAAC,QAAD;GACE,IAAG;GACH,UAAS;GACT,yBAAyB,EACvB,QAAQ;;;oCAGgB,SAAS;;;;;;cAOnC;EACD,CAAA;CAEH,EAAA,CAAA;AAEN"}

package/dist/server/google-data-manager.cjs

@@ -33,10 +33,11 @@ const ENDPOINT = "https://datamanager.googleapis.com/v1/events:ingest";
 /**
 * Google's email normalization is Meta's minus one wrinkle: for @gmail.com/@googlemail.com the
 * username's dots and everything from '+' on are removed; for every other domain they are kept.
-* https://developers.google.com/data-manager/api/devguides/format-data
+* All whitespace goes — "leading, trailing and intermediate".
+* https://developers.google.com/data-manager/api/devguides/concepts/formatting
 */
 function normalizeEmail(input) {
-	const email = input.trim().toLowerCase();
+	const email = input.replace(/\s+/g, "").toLowerCase();
 	const at = email.lastIndexOf("@");
 	if (at === -1) return email;
 	let username = email.slice(0, at);
@@ -63,8 +64,10 @@ function getUserIdentifiers(data) {
 }
 /**
 * Builds one Event, or undefined when no conversion action is configured for the event's name.
-* At most one click identifier is sent, gclid first: it is the deterministic per-click id,
-* where gbraid/wbraid are the aggregate iOS ones, and Google documents preferring it. Unlike
+* The gclid goes with the gbraid when there are both — "we recommend setting both the GCLID and
+* GBRAID" — and otherwise one click id: gclid, else gbraid, else wbraid (nothing documents a
+* wbraid next to a gclid). https://developers.google.com/google-ads/api/docs/conversions/upload-clicks
+* Unlike
 * the legacy upload, an event with no click id at all is still worth sending when it carries
 * user identifiers — that is the enhanced-conversions match path.
 */
@@ -81,7 +84,10 @@ function getDataManagerEvent(event, config, data = {}, actionType = "webpage") {
 		currency: normalizeCurrency(event.properties?.currency)
 	};
 	const { gclid, gbraid, wbraid } = require_server_click_ids.googleClickIds(event.tags);
-	if (gclid) dmEvent.adIdentifiers = { gclid };
+	if (gclid) dmEvent.adIdentifiers = gbraid ? {
+		gclid,
+		gbraid
+	} : { gclid };
 	else if (gbraid) dmEvent.adIdentifiers = { gbraid };
 	else if (wbraid) dmEvent.adIdentifiers = { wbraid };
 	const userIdentifiers = getUserIdentifiers(data);

package/dist/server/google-data-manager.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"google-data-manager.cjs","names":["createHash","resolveActionSource","googleClickIds","IGNORED_EVENTS","fetch"],"sources":["../../src/server/google-data-manager.ts"],"sourcesContent":["/**\n * Google Ads conversion sender over the Data Manager API (`events:ingest`) — Google's\n * counterpart to Meta's Conversions API, and the mandated successor to the Google Ads API's\n * `UploadClickConversions`, which stopped accepting new adopters on 2026-06-15. Same shape as\n * the other senders here: a pure per-event builder, a never-throws `sendEvents`, credentials\n * in headers and never in a URL or a log line.\n *\n * Google's recommended deployment is *hybrid* (\"boost your tag with additional data sources\"):\n * this upload attaches to the SAME conversion action the gtag tag reports to, matched by\n * `transactionId` — a matched pair collapses into one conversion with the server data winning,\n * an unmatched upload is a recovered conversion. Both channels here are fed from the same\n * `track()` call, so the ids agree by construction. `transactionId` is therefore required in\n * that mode; this sender always sends one (the event id when there is no natural order id).\n *\n * Auth is a plain OAuth2 access token with the `datamanager` scope — no Google Ads developer\n * token, no API Center approval. The caller exchanges its stored refresh token for the access\n * token (one POST to oauth2.googleapis.com) and refreshes it however it likes; this module\n * stays out of the OAuth business, exactly as it stays out of Meta's.\n *\n * https://developers.google.com/data-manager/api/reference/rest/v1/events/ingest\n * https://developers.google.com/data-manager/api/devguides/events/google-ads/offline/upgrade/field-mappings\n * https://support.google.com/google-ads/answer/16542291 (hybrid: \"boost your tag with\n * additional data sources\" — the transaction-id matching contract this sender relies on)\n */\nimport { createHash } from 'node:crypto';\nimport { fetch } from '@shware/utils';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport type { TrackEvent, UserProvidedData } from '../track/types';\nimport { resolveActionSource } from './action-source';\nimport { googleClickIds } from './click-ids';\n\nconst ENDPOINT = 'https://datamanager.googleapis.com/v1/events:ingest';\n\n/**\n * Event name → conversion action id, mirroring `LinkedinConversionConfig`: only configured\n * events upload, everything else is skipped silently. In the hybrid setup this is the id of\n * the SAME conversion action the gtag tag reports to.\n */\nexport type GoogleAdsConversionConfig = Record<Lowercase<string>, number | string>;\n\nexport interface GoogleAdsAuth {\n  /** OAuth2 access token with the `datamanager` scope. Short-lived; the caller refreshes it. */\n  accessToken: string;\n  /** The Google Ads account the conversion actions live in. Dashes are tolerated: '123-456-7890'. */\n  operatingAccountId: string;\n  /** The manager account the OAuth user accesses through, when access is delegated. */\n  loginAccountId?: string;\n}\n\n/**\n * EEA/UK/CH consent, applied request-wide. Google drops EEA conversions without granted\n * `adUserData` from bidding, so a host with consent signals should pass them.\n */\nexport interface GoogleAdsConsent {\n  adUserData?: 'CONSENT_GRANTED' | 'CONSENT_DENIED' | 'CONSENT_STATUS_UNSPECIFIED';\n  adPersonalization?: 'CONSENT_GRANTED' | 'CONSENT_DENIED' | 'CONSENT_STATUS_UNSPECIFIED';\n}\n\n/**\n * The kind of conversion action the events go to, which decides `eventSource`:\n * - `webpage` (default): the action the gtag tag reports to, as in the hybrid deployment this\n *   module is built for. Its `eventSource` is optional and, when set, \"must be WEB\" — any other\n *   value fails the request, and the request with it. Web events say `WEB`, others say nothing.\n * - `offline`: an action created for uploads (`UPLOAD_CLICKS`), where `eventSource` is required\n *   and any value goes: `WEB`, `APP` or `OTHER` from the event's platform.\n * https://developers.google.com/data-manager/api/devguides/events/google-ads/online/send-events\n */\nexport type GoogleAdsActionType = 'webpage' | 'offline';\n\nexport interface GoogleAdsConversionsOptions {\n  /** Validates the payload server-side without recording conversions. */\n  validateOnly?: boolean;\n  consent?: GoogleAdsConsent;\n  /** The kind of conversion action `config` points at; `webpage` by default. */\n  actionType?: GoogleAdsActionType;\n}\n\n/**\n * Google's email normalization is Meta's minus one wrinkle: for @gmail.com/@googlemail.com the\n * username's dots and everything from '+' on are removed; for every other domain they are kept.\n * https://developers.google.com/data-manager/api/devguides/format-data\n */\nexport function normalizeEmail(input: string): string {\n  const email = input.trim().toLowerCase();\n  const at = email.lastIndexOf('@');\n  if (at === -1) return email;\n  let username = email.slice(0, at);\n  const domain = email.slice(at + 1);\n  if (domain === 'gmail.com' || domain === 'googlemail.com') {\n    username = username.replace(/\\./g, '').split('+', 1)[0] ?? '';\n  }\n  return `${username}@${domain}`;\n}\n\nconst sha256 = (value: string) => createHash('sha256').update(value).digest('hex');\n\nfunction normalizeCurrency(input: unknown): string {\n  if (typeof input !== 'string') return 'USD';\n  const currency = input.trim().toUpperCase();\n  return /^[A-Z]{3}$/.test(currency) ? currency : 'USD';\n}\n\n/** At most 10 userIdentifiers per event, per the API's hard limit. */\nconst MAX_USER_IDENTIFIERS = 10;\n\n/** Hashes are hex strings, declared by `encoding: 'HEX'` on the request. */\nfunction getUserIdentifiers(data: UserProvidedData): Record<string, string>[] {\n  const identifiers: Record<string, string>[] = [];\n  const emails = Array.isArray(data.email) ? data.email : data.email ? [data.email] : [];\n  for (const email of emails) {\n    identifiers.push({ emailAddress: sha256(normalizeEmail(email)) });\n  }\n  const phones = Array.isArray(data.phone_number)\n    ? data.phone_number\n    : data.phone_number\n      ? [data.phone_number]\n      : [];\n  for (const phone of phones) {\n    // Phones are already E.164 by the schema ('+' then digits); hash after a defensive trim.\n    identifiers.push({ phoneNumber: sha256(phone.trim()) });\n  }\n  return identifiers.slice(0, MAX_USER_IDENTIFIERS);\n}\n\n/** One entry of the `events` array. Field names are the REST (camelCase) spellings. */\nexport interface DataManagerEvent {\n  destinationReferences: string[];\n  transactionId: string;\n  /** RFC 3339 — `created_at` as stored, unlike the legacy API's bespoke format. */\n  eventTimestamp: string;\n  /** Absent for a non-web event sent to a `webpage` action, which accepts `WEB` only. */\n  eventSource?: 'WEB' | 'APP' | 'OTHER';\n  conversionValue: number;\n  currency: string;\n  adIdentifiers?: { gclid?: string; gbraid?: string; wbraid?: string };\n  userData?: { userIdentifiers: Record<string, string>[] };\n}\n\n/**\n * Builds one Event, or undefined when no conversion action is configured for the event's name.\n * At most one click identifier is sent, gclid first: it is the deterministic per-click id,\n * where gbraid/wbraid are the aggregate iOS ones, and Google documents preferring it. Unlike\n * the legacy upload, an event with no click id at all is still worth sending when it carries\n * user identifiers — that is the enhanced-conversions match path.\n */\nexport function getDataManagerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  config: GoogleAdsConversionConfig,\n  data: UserProvidedData = {},\n  actionType: GoogleAdsActionType = 'webpage'\n): DataManagerEvent | undefined {\n  const action = config[event.name as Lowercase<string>];\n  if (!action) return undefined;\n\n  const source = resolveActionSource(event.platform);\n  const dmEvent: DataManagerEvent = {\n    destinationReferences: [String(action)],\n    // The hybrid-mode match key against the gtag tag's transaction_id: same track() call feeds\n    // both channels, so they agree by construction for purchase-shaped events. The event id\n    // covers conversions with no natural order id — but the gtag tracker only sends a\n    // transaction_id when the properties carry one, so on a HYBRID action a non-purchase event\n    // reported by both channels never matches and counts twice. Attach such events to a\n    // standalone (API-only) conversion action instead.\n    transactionId:\n      typeof event.properties?.transaction_id === 'string'\n        ? event.properties.transaction_id\n        : event.id,\n    eventTimestamp: new Date(event.created_at).toISOString(),\n    eventSource:\n      source === 'web'\n        ? 'WEB'\n        : actionType === 'webpage'\n          ? undefined\n          : source === 'app'\n            ? 'APP'\n            : 'OTHER',\n    // Both mandatory, like the LinkedIn sender's defaults: 0 USD is Google's own convention\n    // for value-less goals. The API has no partial-failure mode, so a malformed currency would\n    // cost the whole batch — anything that isn't a 3-letter code falls back instead.\n    conversionValue: typeof event.properties?.value === 'number' ? event.properties.value : 0,\n    currency: normalizeCurrency(event.properties?.currency),\n  };\n\n  const { gclid, gbraid, wbraid } = googleClickIds(event.tags);\n  if (gclid) dmEvent.adIdentifiers = { gclid };\n  else if (gbraid) dmEvent.adIdentifiers = { gbraid };\n  else if (wbraid) dmEvent.adIdentifiers = { wbraid };\n\n  const userIdentifiers = getUserIdentifiers(data);\n  if (userIdentifiers.length > 0) dmEvent.userData = { userIdentifiers };\n\n  // With neither a click id nor an identifier Google has nothing to match on; skip.\n  if (!dmEvent.adIdentifiers && !dmEvent.userData) return undefined;\n\n  return dmEvent;\n}\n\nexport interface DataManagerResponse {\n  requestId?: string;\n}\n\n/** The API takes at most 2000 events per request. */\nconst MAX_EVENTS_PER_REQUEST = 2000;\n\n/**\n * Uploads the configured conversions from a batch of events. Never throws: an unusable event\n * is skipped and a failed request is logged and swallowed, like every other sender here. The\n * Data Manager API has no partial-failure mode — a rejected request costs the whole batch, so\n * the builder is strict about only emitting events the API can accept. A batch beyond the\n * 2000-event request cap goes out as sequential requests; the first response is returned.\n */\nexport async function sendEvents(\n  auth: GoogleAdsAuth,\n  config: GoogleAdsConversionConfig,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  options: GoogleAdsConversionsOptions = {}\n): Promise<DataManagerResponse | undefined> {\n  const dmEvents = events\n    .filter((event) => !IGNORED_EVENTS.includes(event.name))\n    .map((event) => getDataManagerEvent(event, config, data, options.actionType))\n    .filter((dmEvent): dmEvent is DataManagerEvent => dmEvent !== undefined);\n  if (dmEvents.length === 0) return undefined;\n\n  const operatingAccount = {\n    accountType: 'GOOGLE_ADS',\n    accountId: auth.operatingAccountId.replace(/-/g, ''),\n  };\n  // One destination per conversion action present in the batch; each event points at its own\n  // through destinationReferences, so mixed-action batches go out as one request.\n  const loginAccount = auth.loginAccountId\n    ? { accountType: 'GOOGLE_ADS', accountId: auth.loginAccountId.replace(/-/g, '') }\n    : undefined;\n  const actions = Array.from(new Set(dmEvents.flatMap((dmEvent) => dmEvent.destinationReferences)));\n  const destinations = actions.map((action) => {\n    const destination: Record<string, unknown> = {\n      reference: action,\n      operatingAccount,\n      productDestinationId: action,\n    };\n    if (loginAccount) destination.loginAccount = loginAccount;\n    return destination;\n  });\n\n  let firstResponse: DataManagerResponse | undefined;\n  for (let offset = 0; offset < dmEvents.length; offset += MAX_EVENTS_PER_REQUEST) {\n    const chunk = dmEvents.slice(offset, offset + MAX_EVENTS_PER_REQUEST);\n    const body: Record<string, unknown> = {\n      destinations,\n      events: chunk,\n      validateOnly: options.validateOnly ?? false,\n    };\n    if (chunk.some((dmEvent) => dmEvent.userData)) {\n      body.encoding = 'HEX';\n    }\n    if (options.consent) {\n      body.consent = options.consent;\n    }\n\n    try {\n      const response = await fetch(ENDPOINT, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n          Authorization: `Bearer ${auth.accessToken}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (response.ok) {\n        firstResponse ??= (await response.json()) as DataManagerResponse;\n        continue;\n      }\n      const { status } = response;\n      const message = await response.text();\n      console.error(`Failed to send Google Ads conversions, status: ${status}, body: ${message}`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.error(`Failed to send Google Ads conversions, network error: ${message}`);\n    }\n  }\n  return firstResponse;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAM,WAAW;;;;;;AAmDjB,SAAgB,eAAe,OAAuB;CACpD,MAAM,QAAQ,MAAM,KAAK,CAAC,CAAC,YAAY;CACvC,MAAM,KAAK,MAAM,YAAY,GAAG;CAChC,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,WAAW,MAAM,MAAM,GAAG,EAAE;CAChC,MAAM,SAAS,MAAM,MAAM,KAAK,CAAC;CACjC,IAAI,WAAW,eAAe,WAAW,kBACvC,WAAW,SAAS,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM;CAE7D,OAAO,GAAG,SAAS,GAAG;AACxB;AAEA,MAAM,UAAU,WAAA,GAAkBA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AAEjF,SAAS,kBAAkB,OAAwB;CACjD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,WAAW,MAAM,KAAK,CAAC,CAAC,YAAY;CAC1C,OAAO,aAAa,KAAK,QAAQ,IAAI,WAAW;AAClD;;AAGA,MAAM,uBAAuB;;AAG7B,SAAS,mBAAmB,MAAkD;CAC5E,MAAM,cAAwC,CAAC;CAC/C,MAAM,SAAS,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC;CACrF,KAAK,MAAM,SAAS,QAClB,YAAY,KAAK,EAAE,cAAc,OAAO,eAAe,KAAK,CAAC,EAAE,CAAC;CAElE,MAAM,SAAS,MAAM,QAAQ,KAAK,YAAY,IAC1C,KAAK,eACL,KAAK,eACH,CAAC,KAAK,YAAY,IAClB,CAAC;CACP,KAAK,MAAM,SAAS,QAElB,YAAY,KAAK,EAAE,aAAa,OAAO,MAAM,KAAK,CAAC,EAAE,CAAC;CAExD,OAAO,YAAY,MAAM,GAAG,oBAAoB;AAClD;;;;;;;;AAuBA,SAAgB,oBAEd,OACA,QACA,OAAyB,CAAC,GAC1B,aAAkC,WACJ;CAC9B,MAAM,SAAS,OAAO,MAAM;CAC5B,IAAI,CAAC,QAAQ,OAAO,KAAA;CAEpB,MAAM,SAASC,6BAAAA,oBAAoB,MAAM,QAAQ;CACjD,MAAM,UAA4B;EAChC,uBAAuB,CAAC,OAAO,MAAM,CAAC;EAOtC,eACE,OAAO,MAAM,YAAY,mBAAmB,WACxC,MAAM,WAAW,iBACjB,MAAM;EACZ,gBAAgB,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,YAAY;EACvD,aACE,WAAW,QACP,QACA,eAAe,YACb,KAAA,IACA,WAAW,QACT,QACA;EAIV,iBAAiB,OAAO,MAAM,YAAY,UAAU,WAAW,MAAM,WAAW,QAAQ;EACxF,UAAU,kBAAkB,MAAM,YAAY,QAAQ;CACxD;CAEA,MAAM,EAAE,OAAO,QAAQ,WAAWC,yBAAAA,eAAe,MAAM,IAAI;CAC3D,IAAI,OAAO,QAAQ,gBAAgB,EAAE,MAAM;MACtC,IAAI,QAAQ,QAAQ,gBAAgB,EAAE,OAAO;MAC7C,IAAI,QAAQ,QAAQ,gBAAgB,EAAE,OAAO;CAElD,MAAM,kBAAkB,mBAAmB,IAAI;CAC/C,IAAI,gBAAgB,SAAS,GAAG,QAAQ,WAAW,EAAE,gBAAgB;CAGrE,IAAI,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,UAAU,OAAO,KAAA;CAExD,OAAO;AACT;;AAOA,MAAM,yBAAyB;;;;;;;;AAS/B,eAAsB,WACpB,MACA,QAEA,QACA,OAAyB,CAAC,GAC1B,UAAuC,CAAC,GACE;CAC1C,MAAM,WAAW,OACd,QAAQ,UAAU,CAACC,qCAAAA,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,KAAK,UAAU,oBAAoB,OAAO,QAAQ,MAAM,QAAQ,UAAU,CAAC,CAAC,CAC5E,QAAQ,YAAyC,YAAY,KAAA,CAAS;CACzE,IAAI,SAAS,WAAW,GAAG,OAAO,KAAA;CAElC,MAAM,mBAAmB;EACvB,aAAa;EACb,WAAW,KAAK,mBAAmB,QAAQ,MAAM,EAAE;CACrD;CAGA,MAAM,eAAe,KAAK,iBACtB;EAAE,aAAa;EAAc,WAAW,KAAK,eAAe,QAAQ,MAAM,EAAE;CAAE,IAC9E,KAAA;CAEJ,MAAM,eADU,MAAM,KAAK,IAAI,IAAI,SAAS,SAAS,YAAY,QAAQ,qBAAqB,CAAC,CACpE,CAAC,CAAC,KAAK,WAAW;EAC3C,MAAM,cAAuC;GAC3C,WAAW;GACX;GACA,sBAAsB;EACxB;EACA,IAAI,cAAc,YAAY,eAAe;EAC7C,OAAO;CACT,CAAC;CAED,IAAI;CACJ,KAAK,IAAI,SAAS,GAAG,SAAS,SAAS,QAAQ,UAAU,wBAAwB;EAC/E,MAAM,QAAQ,SAAS,MAAM,QAAQ,SAAS,sBAAsB;EACpE,MAAM,OAAgC;GACpC;GACA,QAAQ;GACR,cAAc,QAAQ,gBAAgB;EACxC;EACA,IAAI,MAAM,MAAM,YAAY,QAAQ,QAAQ,GAC1C,KAAK,WAAW;EAElB,IAAI,QAAQ,SACV,KAAK,UAAU,QAAQ;EAGzB,IAAI;GACF,MAAM,WAAW,OAAA,GAAMC,cAAAA,MAAAA,CAAM,UAAU;IACrC,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,QAAQ;KACR,eAAe,UAAU,KAAK;IAChC;IACA,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GACD,IAAI,SAAS,IAAI;IACf,kBAAmB,MAAM,SAAS,KAAK;IACvC;GACF;GACA,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,MAAM,SAAS,KAAK;GACpC,QAAQ,MAAM,kDAAkD,OAAO,UAAU,SAAS;EAC5F,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,QAAQ,MAAM,yDAAyD,SAAS;EAClF;CACF;CACA,OAAO;AACT"}
+{"version":3,"file":"google-data-manager.cjs","names":["createHash","resolveActionSource","googleClickIds","IGNORED_EVENTS","fetch"],"sources":["../../src/server/google-data-manager.ts"],"sourcesContent":["/**\n * Google Ads conversion sender over the Data Manager API (`events:ingest`) — Google's\n * counterpart to Meta's Conversions API, and the mandated successor to the Google Ads API's\n * `UploadClickConversions`, which stopped accepting new adopters on 2026-06-15. Same shape as\n * the other senders here: a pure per-event builder, a never-throws `sendEvents`, credentials\n * in headers and never in a URL or a log line.\n *\n * Google's recommended deployment is *hybrid* (\"boost your tag with additional data sources\"):\n * this upload attaches to the SAME conversion action the gtag tag reports to, matched by\n * `transactionId` — a matched pair collapses into one conversion with the server data winning,\n * an unmatched upload is a recovered conversion. Both channels here are fed from the same\n * `track()` call, so the ids agree by construction. `transactionId` is therefore required in\n * that mode; this sender always sends one (the event id when there is no natural order id).\n *\n * Auth is a plain OAuth2 access token with the `datamanager` scope — no Google Ads developer\n * token, no API Center approval. The caller exchanges its stored refresh token for the access\n * token (one POST to oauth2.googleapis.com) and refreshes it however it likes; this module\n * stays out of the OAuth business, exactly as it stays out of Meta's.\n *\n * https://developers.google.com/data-manager/api/reference/rest/v1/events/ingest\n * https://developers.google.com/data-manager/api/devguides/events/google-ads/offline/upgrade/field-mappings\n * https://support.google.com/google-ads/answer/16542291 (hybrid: \"boost your tag with\n * additional data sources\" — the transaction-id matching contract this sender relies on)\n */\nimport { createHash } from 'node:crypto';\nimport { fetch } from '@shware/utils';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport type { TrackEvent, UserProvidedData } from '../track/types';\nimport { resolveActionSource } from './action-source';\nimport { googleClickIds } from './click-ids';\n\nconst ENDPOINT = 'https://datamanager.googleapis.com/v1/events:ingest';\n\n/**\n * Event name → conversion action id, mirroring `LinkedinConversionConfig`: only configured\n * events upload, everything else is skipped silently. In the hybrid setup this is the id of\n * the SAME conversion action the gtag tag reports to.\n */\nexport type GoogleAdsConversionConfig = Record<Lowercase<string>, number | string>;\n\nexport interface GoogleAdsAuth {\n  /** OAuth2 access token with the `datamanager` scope. Short-lived; the caller refreshes it. */\n  accessToken: string;\n  /** The Google Ads account the conversion actions live in. Dashes are tolerated: '123-456-7890'. */\n  operatingAccountId: string;\n  /** The manager account the OAuth user accesses through, when access is delegated. */\n  loginAccountId?: string;\n}\n\n/**\n * EEA/UK/CH consent, applied request-wide. Google drops EEA conversions without granted\n * `adUserData` from bidding, so a host with consent signals should pass them.\n */\nexport interface GoogleAdsConsent {\n  adUserData?: 'CONSENT_GRANTED' | 'CONSENT_DENIED' | 'CONSENT_STATUS_UNSPECIFIED';\n  adPersonalization?: 'CONSENT_GRANTED' | 'CONSENT_DENIED' | 'CONSENT_STATUS_UNSPECIFIED';\n}\n\n/**\n * The kind of conversion action the events go to, which decides `eventSource`:\n * - `webpage` (default): the action the gtag tag reports to, as in the hybrid deployment this\n *   module is built for. Its `eventSource` is optional and, when set, \"must be WEB\" — any other\n *   value fails the request, and the request with it. Web events say `WEB`, others say nothing.\n * - `offline`: an action created for uploads (`UPLOAD_CLICKS`), where `eventSource` is required\n *   and any value goes: `WEB`, `APP` or `OTHER` from the event's platform.\n * https://developers.google.com/data-manager/api/devguides/events/google-ads/online/send-events\n */\nexport type GoogleAdsActionType = 'webpage' | 'offline';\n\nexport interface GoogleAdsConversionsOptions {\n  /** Validates the payload server-side without recording conversions. */\n  validateOnly?: boolean;\n  consent?: GoogleAdsConsent;\n  /** The kind of conversion action `config` points at; `webpage` by default. */\n  actionType?: GoogleAdsActionType;\n}\n\n/**\n * Google's email normalization is Meta's minus one wrinkle: for @gmail.com/@googlemail.com the\n * username's dots and everything from '+' on are removed; for every other domain they are kept.\n * All whitespace goes — \"leading, trailing and intermediate\".\n * https://developers.google.com/data-manager/api/devguides/concepts/formatting\n */\nexport function normalizeEmail(input: string): string {\n  const email = input.replace(/\\s+/g, '').toLowerCase();\n  const at = email.lastIndexOf('@');\n  if (at === -1) return email;\n  let username = email.slice(0, at);\n  const domain = email.slice(at + 1);\n  if (domain === 'gmail.com' || domain === 'googlemail.com') {\n    username = username.replace(/\\./g, '').split('+', 1)[0] ?? '';\n  }\n  return `${username}@${domain}`;\n}\n\nconst sha256 = (value: string) => createHash('sha256').update(value).digest('hex');\n\nfunction normalizeCurrency(input: unknown): string {\n  if (typeof input !== 'string') return 'USD';\n  const currency = input.trim().toUpperCase();\n  return /^[A-Z]{3}$/.test(currency) ? currency : 'USD';\n}\n\n/** At most 10 userIdentifiers per event, per the API's hard limit. */\nconst MAX_USER_IDENTIFIERS = 10;\n\n/** Hashes are hex strings, declared by `encoding: 'HEX'` on the request. */\nfunction getUserIdentifiers(data: UserProvidedData): Record<string, string>[] {\n  const identifiers: Record<string, string>[] = [];\n  const emails = Array.isArray(data.email) ? data.email : data.email ? [data.email] : [];\n  for (const email of emails) {\n    identifiers.push({ emailAddress: sha256(normalizeEmail(email)) });\n  }\n  const phones = Array.isArray(data.phone_number)\n    ? data.phone_number\n    : data.phone_number\n      ? [data.phone_number]\n      : [];\n  for (const phone of phones) {\n    // Phones are already E.164 by the schema ('+' then digits); hash after a defensive trim.\n    identifiers.push({ phoneNumber: sha256(phone.trim()) });\n  }\n  return identifiers.slice(0, MAX_USER_IDENTIFIERS);\n}\n\n/** One entry of the `events` array. Field names are the REST (camelCase) spellings. */\nexport interface DataManagerEvent {\n  destinationReferences: string[];\n  transactionId: string;\n  /** RFC 3339 — `created_at` as stored, unlike the legacy API's bespoke format. */\n  eventTimestamp: string;\n  /** Absent for a non-web event sent to a `webpage` action, which accepts `WEB` only. */\n  eventSource?: 'WEB' | 'APP' | 'OTHER';\n  conversionValue: number;\n  currency: string;\n  adIdentifiers?: { gclid?: string; gbraid?: string; wbraid?: string };\n  userData?: { userIdentifiers: Record<string, string>[] };\n}\n\n/**\n * Builds one Event, or undefined when no conversion action is configured for the event's name.\n * The gclid goes with the gbraid when there are both — \"we recommend setting both the GCLID and\n * GBRAID\" — and otherwise one click id: gclid, else gbraid, else wbraid (nothing documents a\n * wbraid next to a gclid). https://developers.google.com/google-ads/api/docs/conversions/upload-clicks\n * Unlike\n * the legacy upload, an event with no click id at all is still worth sending when it carries\n * user identifiers — that is the enhanced-conversions match path.\n */\nexport function getDataManagerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  config: GoogleAdsConversionConfig,\n  data: UserProvidedData = {},\n  actionType: GoogleAdsActionType = 'webpage'\n): DataManagerEvent | undefined {\n  const action = config[event.name as Lowercase<string>];\n  if (!action) return undefined;\n\n  const source = resolveActionSource(event.platform);\n  const dmEvent: DataManagerEvent = {\n    destinationReferences: [String(action)],\n    // The hybrid-mode match key against the gtag tag's transaction_id: same track() call feeds\n    // both channels, so they agree by construction for purchase-shaped events. The event id\n    // covers conversions with no natural order id — but the gtag tracker only sends a\n    // transaction_id when the properties carry one, so on a HYBRID action a non-purchase event\n    // reported by both channels never matches and counts twice. Attach such events to a\n    // standalone (API-only) conversion action instead.\n    transactionId:\n      typeof event.properties?.transaction_id === 'string'\n        ? event.properties.transaction_id\n        : event.id,\n    eventTimestamp: new Date(event.created_at).toISOString(),\n    eventSource:\n      source === 'web'\n        ? 'WEB'\n        : actionType === 'webpage'\n          ? undefined\n          : source === 'app'\n            ? 'APP'\n            : 'OTHER',\n    // Both mandatory, like the LinkedIn sender's defaults: 0 USD is Google's own convention\n    // for value-less goals. The API has no partial-failure mode, so a malformed currency would\n    // cost the whole batch — anything that isn't a 3-letter code falls back instead.\n    conversionValue: typeof event.properties?.value === 'number' ? event.properties.value : 0,\n    currency: normalizeCurrency(event.properties?.currency),\n  };\n\n  const { gclid, gbraid, wbraid } = googleClickIds(event.tags);\n  if (gclid) dmEvent.adIdentifiers = gbraid ? { gclid, gbraid } : { gclid };\n  else if (gbraid) dmEvent.adIdentifiers = { gbraid };\n  else if (wbraid) dmEvent.adIdentifiers = { wbraid };\n\n  const userIdentifiers = getUserIdentifiers(data);\n  if (userIdentifiers.length > 0) dmEvent.userData = { userIdentifiers };\n\n  // With neither a click id nor an identifier Google has nothing to match on; skip.\n  if (!dmEvent.adIdentifiers && !dmEvent.userData) return undefined;\n\n  return dmEvent;\n}\n\nexport interface DataManagerResponse {\n  requestId?: string;\n}\n\n/** The API takes at most 2000 events per request. */\nconst MAX_EVENTS_PER_REQUEST = 2000;\n\n/**\n * Uploads the configured conversions from a batch of events. Never throws: an unusable event\n * is skipped and a failed request is logged and swallowed, like every other sender here. The\n * Data Manager API has no partial-failure mode — a rejected request costs the whole batch, so\n * the builder is strict about only emitting events the API can accept. A batch beyond the\n * 2000-event request cap goes out as sequential requests; the first response is returned.\n */\nexport async function sendEvents(\n  auth: GoogleAdsAuth,\n  config: GoogleAdsConversionConfig,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  options: GoogleAdsConversionsOptions = {}\n): Promise<DataManagerResponse | undefined> {\n  const dmEvents = events\n    .filter((event) => !IGNORED_EVENTS.includes(event.name))\n    .map((event) => getDataManagerEvent(event, config, data, options.actionType))\n    .filter((dmEvent): dmEvent is DataManagerEvent => dmEvent !== undefined);\n  if (dmEvents.length === 0) return undefined;\n\n  const operatingAccount = {\n    accountType: 'GOOGLE_ADS',\n    accountId: auth.operatingAccountId.replace(/-/g, ''),\n  };\n  // One destination per conversion action present in the batch; each event points at its own\n  // through destinationReferences, so mixed-action batches go out as one request.\n  const loginAccount = auth.loginAccountId\n    ? { accountType: 'GOOGLE_ADS', accountId: auth.loginAccountId.replace(/-/g, '') }\n    : undefined;\n  const actions = Array.from(new Set(dmEvents.flatMap((dmEvent) => dmEvent.destinationReferences)));\n  const destinations = actions.map((action) => {\n    const destination: Record<string, unknown> = {\n      reference: action,\n      operatingAccount,\n      productDestinationId: action,\n    };\n    if (loginAccount) destination.loginAccount = loginAccount;\n    return destination;\n  });\n\n  let firstResponse: DataManagerResponse | undefined;\n  for (let offset = 0; offset < dmEvents.length; offset += MAX_EVENTS_PER_REQUEST) {\n    const chunk = dmEvents.slice(offset, offset + MAX_EVENTS_PER_REQUEST);\n    const body: Record<string, unknown> = {\n      destinations,\n      events: chunk,\n      validateOnly: options.validateOnly ?? false,\n    };\n    if (chunk.some((dmEvent) => dmEvent.userData)) {\n      body.encoding = 'HEX';\n    }\n    if (options.consent) {\n      body.consent = options.consent;\n    }\n\n    try {\n      const response = await fetch(ENDPOINT, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n          Authorization: `Bearer ${auth.accessToken}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (response.ok) {\n        firstResponse ??= (await response.json()) as DataManagerResponse;\n        continue;\n      }\n      const { status } = response;\n      const message = await response.text();\n      console.error(`Failed to send Google Ads conversions, status: ${status}, body: ${message}`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.error(`Failed to send Google Ads conversions, network error: ${message}`);\n    }\n  }\n  return firstResponse;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAM,WAAW;;;;;;;AAoDjB,SAAgB,eAAe,OAAuB;CACpD,MAAM,QAAQ,MAAM,QAAQ,QAAQ,EAAE,CAAC,CAAC,YAAY;CACpD,MAAM,KAAK,MAAM,YAAY,GAAG;CAChC,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,WAAW,MAAM,MAAM,GAAG,EAAE;CAChC,MAAM,SAAS,MAAM,MAAM,KAAK,CAAC;CACjC,IAAI,WAAW,eAAe,WAAW,kBACvC,WAAW,SAAS,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM;CAE7D,OAAO,GAAG,SAAS,GAAG;AACxB;AAEA,MAAM,UAAU,WAAA,GAAkBA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AAEjF,SAAS,kBAAkB,OAAwB;CACjD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,WAAW,MAAM,KAAK,CAAC,CAAC,YAAY;CAC1C,OAAO,aAAa,KAAK,QAAQ,IAAI,WAAW;AAClD;;AAGA,MAAM,uBAAuB;;AAG7B,SAAS,mBAAmB,MAAkD;CAC5E,MAAM,cAAwC,CAAC;CAC/C,MAAM,SAAS,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC;CACrF,KAAK,MAAM,SAAS,QAClB,YAAY,KAAK,EAAE,cAAc,OAAO,eAAe,KAAK,CAAC,EAAE,CAAC;CAElE,MAAM,SAAS,MAAM,QAAQ,KAAK,YAAY,IAC1C,KAAK,eACL,KAAK,eACH,CAAC,KAAK,YAAY,IAClB,CAAC;CACP,KAAK,MAAM,SAAS,QAElB,YAAY,KAAK,EAAE,aAAa,OAAO,MAAM,KAAK,CAAC,EAAE,CAAC;CAExD,OAAO,YAAY,MAAM,GAAG,oBAAoB;AAClD;;;;;;;;;;AAyBA,SAAgB,oBAEd,OACA,QACA,OAAyB,CAAC,GAC1B,aAAkC,WACJ;CAC9B,MAAM,SAAS,OAAO,MAAM;CAC5B,IAAI,CAAC,QAAQ,OAAO,KAAA;CAEpB,MAAM,SAASC,6BAAAA,oBAAoB,MAAM,QAAQ;CACjD,MAAM,UAA4B;EAChC,uBAAuB,CAAC,OAAO,MAAM,CAAC;EAOtC,eACE,OAAO,MAAM,YAAY,mBAAmB,WACxC,MAAM,WAAW,iBACjB,MAAM;EACZ,gBAAgB,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,YAAY;EACvD,aACE,WAAW,QACP,QACA,eAAe,YACb,KAAA,IACA,WAAW,QACT,QACA;EAIV,iBAAiB,OAAO,MAAM,YAAY,UAAU,WAAW,MAAM,WAAW,QAAQ;EACxF,UAAU,kBAAkB,MAAM,YAAY,QAAQ;CACxD;CAEA,MAAM,EAAE,OAAO,QAAQ,WAAWC,yBAAAA,eAAe,MAAM,IAAI;CAC3D,IAAI,OAAO,QAAQ,gBAAgB,SAAS;EAAE;EAAO;CAAO,IAAI,EAAE,MAAM;MACnE,IAAI,QAAQ,QAAQ,gBAAgB,EAAE,OAAO;MAC7C,IAAI,QAAQ,QAAQ,gBAAgB,EAAE,OAAO;CAElD,MAAM,kBAAkB,mBAAmB,IAAI;CAC/C,IAAI,gBAAgB,SAAS,GAAG,QAAQ,WAAW,EAAE,gBAAgB;CAGrE,IAAI,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,UAAU,OAAO,KAAA;CAExD,OAAO;AACT;;AAOA,MAAM,yBAAyB;;;;;;;;AAS/B,eAAsB,WACpB,MACA,QAEA,QACA,OAAyB,CAAC,GAC1B,UAAuC,CAAC,GACE;CAC1C,MAAM,WAAW,OACd,QAAQ,UAAU,CAACC,qCAAAA,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,KAAK,UAAU,oBAAoB,OAAO,QAAQ,MAAM,QAAQ,UAAU,CAAC,CAAC,CAC5E,QAAQ,YAAyC,YAAY,KAAA,CAAS;CACzE,IAAI,SAAS,WAAW,GAAG,OAAO,KAAA;CAElC,MAAM,mBAAmB;EACvB,aAAa;EACb,WAAW,KAAK,mBAAmB,QAAQ,MAAM,EAAE;CACrD;CAGA,MAAM,eAAe,KAAK,iBACtB;EAAE,aAAa;EAAc,WAAW,KAAK,eAAe,QAAQ,MAAM,EAAE;CAAE,IAC9E,KAAA;CAEJ,MAAM,eADU,MAAM,KAAK,IAAI,IAAI,SAAS,SAAS,YAAY,QAAQ,qBAAqB,CAAC,CACpE,CAAC,CAAC,KAAK,WAAW;EAC3C,MAAM,cAAuC;GAC3C,WAAW;GACX;GACA,sBAAsB;EACxB;EACA,IAAI,cAAc,YAAY,eAAe;EAC7C,OAAO;CACT,CAAC;CAED,IAAI;CACJ,KAAK,IAAI,SAAS,GAAG,SAAS,SAAS,QAAQ,UAAU,wBAAwB;EAC/E,MAAM,QAAQ,SAAS,MAAM,QAAQ,SAAS,sBAAsB;EACpE,MAAM,OAAgC;GACpC;GACA,QAAQ;GACR,cAAc,QAAQ,gBAAgB;EACxC;EACA,IAAI,MAAM,MAAM,YAAY,QAAQ,QAAQ,GAC1C,KAAK,WAAW;EAElB,IAAI,QAAQ,SACV,KAAK,UAAU,QAAQ;EAGzB,IAAI;GACF,MAAM,WAAW,OAAA,GAAMC,cAAAA,MAAAA,CAAM,UAAU;IACrC,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,QAAQ;KACR,eAAe,UAAU,KAAK;IAChC;IACA,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GACD,IAAI,SAAS,IAAI;IACf,kBAAmB,MAAM,SAAS,KAAK;IACvC;GACF;GACA,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,MAAM,SAAS,KAAK;GACpC,QAAQ,MAAM,kDAAkD,OAAO,UAAU,SAAS;EAC5F,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,QAAQ,MAAM,yDAAyD,SAAS;EAClF;CACF;CACA,OAAO;AACT"}

package/dist/server/google-data-manager.d.cts

@@ -42,7 +42,8 @@ export interface GoogleAdsConversionsOptions {
 /**
  * Google's email normalization is Meta's minus one wrinkle: for @gmail.com/@googlemail.com the
  * username's dots and everything from '+' on are removed; for every other domain they are kept.
- * https://developers.google.com/data-manager/api/devguides/format-data
+ * All whitespace goes — "leading, trailing and intermediate".
+ * https://developers.google.com/data-manager/api/devguides/concepts/formatting
  */
 export declare function normalizeEmail(input: string): string;
 /** One entry of the `events` array. Field names are the REST (camelCase) spellings. */
@@ -66,8 +67,10 @@ export interface DataManagerEvent {
 }
 /**
  * Builds one Event, or undefined when no conversion action is configured for the event's name.
- * At most one click identifier is sent, gclid first: it is the deterministic per-click id,
- * where gbraid/wbraid are the aggregate iOS ones, and Google documents preferring it. Unlike
+ * The gclid goes with the gbraid when there are both — "we recommend setting both the GCLID and
+ * GBRAID" — and otherwise one click id: gclid, else gbraid, else wbraid (nothing documents a
+ * wbraid next to a gclid). https://developers.google.com/google-ads/api/docs/conversions/upload-clicks
+ * Unlike
  * the legacy upload, an event with no click id at all is still worth sending when it carries
  * user identifiers — that is the enhanced-conversions match path.
  */

package/dist/server/google-data-manager.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"google-data-manager.d.cts","names":[],"sources":["../../src/server/google-data-manager.ts"],"mappings":";;;;;;;YAsCY,4BAA4B,OAAO;iBAE9B;;EAEf;;EAEA;;EAEA;;;;;;iBAOe;EACf;EACA;;;;;;;;;;;YAYU;iBAEK;;EAEf;EACA,UAAU;;EAEV,aAAa;;;;;;;wBAQC,eAAe;;iBA2Cd;EACf;EACA;;EAEA;;EAEA;EACA;EACA;EACA;IAAkB;IAAgB;IAAiB;;EACnD;IAAa,iBAAiB;;;;;;;;;;wBAUhB,oBAEd,OAAO,iBACP,QAAQ,2BACR,OAAM,kBACN,aAAY,sBACX;iBA+Cc;EACf;;;;;;;;;wBAaoB,WACpB,MAAM,eACN,QAAQ,2BAER,QAAQ,mBACR,OAAM,kBACN,UAAS,8BACR,QAAQ"}
+{"version":3,"file":"google-data-manager.d.cts","names":[],"sources":["../../src/server/google-data-manager.ts"],"mappings":";;;;;;;YAsCY,4BAA4B,OAAO;iBAE9B;;EAEf;;EAEA;;EAEA;;;;;;iBAOe;EACf;EACA;;;;;;;;;;;YAYU;iBAEK;;EAEf;EACA,UAAU;;EAEV,aAAa;;;;;;;;wBASC,eAAe;;iBA2Cd;EACf;EACA;;EAEA;;EAEA;EACA;EACA;EACA;IAAkB;IAAgB;IAAiB;;EACnD;IAAa,iBAAiB;;;;;;;;;;;;wBAYhB,oBAEd,OAAO,iBACP,QAAQ,2BACR,OAAM,kBACN,aAAY,sBACX;iBA+Cc;EACf;;;;;;;;;wBAaoB,WACpB,MAAM,eACN,QAAQ,2BAER,QAAQ,mBACR,OAAM,kBACN,UAAS,8BACR,QAAQ"}

package/dist/server/google-data-manager.d.mts

@@ -42,7 +42,8 @@ export interface GoogleAdsConversionsOptions {
 /**
  * Google's email normalization is Meta's minus one wrinkle: for @gmail.com/@googlemail.com the
  * username's dots and everything from '+' on are removed; for every other domain they are kept.
- * https://developers.google.com/data-manager/api/devguides/format-data
+ * All whitespace goes — "leading, trailing and intermediate".
+ * https://developers.google.com/data-manager/api/devguides/concepts/formatting
  */
 export declare function normalizeEmail(input: string): string;
 /** One entry of the `events` array. Field names are the REST (camelCase) spellings. */
@@ -66,8 +67,10 @@ export interface DataManagerEvent {
 }
 /**
  * Builds one Event, or undefined when no conversion action is configured for the event's name.
- * At most one click identifier is sent, gclid first: it is the deterministic per-click id,
- * where gbraid/wbraid are the aggregate iOS ones, and Google documents preferring it. Unlike
+ * The gclid goes with the gbraid when there are both — "we recommend setting both the GCLID and
+ * GBRAID" — and otherwise one click id: gclid, else gbraid, else wbraid (nothing documents a
+ * wbraid next to a gclid). https://developers.google.com/google-ads/api/docs/conversions/upload-clicks
+ * Unlike
  * the legacy upload, an event with no click id at all is still worth sending when it carries
  * user identifiers — that is the enhanced-conversions match path.
  */

package/dist/server/google-data-manager.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"google-data-manager.d.mts","names":[],"sources":["../../src/server/google-data-manager.ts"],"mappings":";;;;;;;YAsCY,4BAA4B,OAAO;iBAE9B;;EAEf;;EAEA;;EAEA;;;;;;iBAOe;EACf;EACA;;;;;;;;;;;YAYU;iBAEK;;EAEf;EACA,UAAU;;EAEV,aAAa;;;;;;;wBAQC,eAAe;;iBA2Cd;EACf;EACA;;EAEA;;EAEA;EACA;EACA;EACA;IAAkB;IAAgB;IAAiB;;EACnD;IAAa,iBAAiB;;;;;;;;;;wBAUhB,oBAEd,OAAO,iBACP,QAAQ,2BACR,OAAM,kBACN,aAAY,sBACX;iBA+Cc;EACf;;;;;;;;;wBAaoB,WACpB,MAAM,eACN,QAAQ,2BAER,QAAQ,mBACR,OAAM,kBACN,UAAS,8BACR,QAAQ"}
+{"version":3,"file":"google-data-manager.d.mts","names":[],"sources":["../../src/server/google-data-manager.ts"],"mappings":";;;;;;;YAsCY,4BAA4B,OAAO;iBAE9B;;EAEf;;EAEA;;EAEA;;;;;;iBAOe;EACf;EACA;;;;;;;;;;;YAYU;iBAEK;;EAEf;EACA,UAAU;;EAEV,aAAa;;;;;;;;wBASC,eAAe;;iBA2Cd;EACf;EACA;;EAEA;;EAEA;EACA;EACA;EACA;IAAkB;IAAgB;IAAiB;;EACnD;IAAa,iBAAiB;;;;;;;;;;;;wBAYhB,oBAEd,OAAO,iBACP,QAAQ,2BACR,OAAM,kBACN,aAAY,sBACX;iBA+Cc;EACf;;;;;;;;;wBAaoB,WACpB,MAAM,eACN,QAAQ,2BAER,QAAQ,mBACR,OAAM,kBACN,UAAS,8BACR,QAAQ"}

package/dist/server/google-data-manager.mjs

@@ -32,10 +32,11 @@ const ENDPOINT = "https://datamanager.googleapis.com/v1/events:ingest";
 /**
 * Google's email normalization is Meta's minus one wrinkle: for @gmail.com/@googlemail.com the
 * username's dots and everything from '+' on are removed; for every other domain they are kept.
-* https://developers.google.com/data-manager/api/devguides/format-data
+* All whitespace goes — "leading, trailing and intermediate".
+* https://developers.google.com/data-manager/api/devguides/concepts/formatting
 */
 function normalizeEmail(input) {
-	const email = input.trim().toLowerCase();
+	const email = input.replace(/\s+/g, "").toLowerCase();
 	const at = email.lastIndexOf("@");
 	if (at === -1) return email;
 	let username = email.slice(0, at);
@@ -62,8 +63,10 @@ function getUserIdentifiers(data) {
 }
 /**
 * Builds one Event, or undefined when no conversion action is configured for the event's name.
-* At most one click identifier is sent, gclid first: it is the deterministic per-click id,
-* where gbraid/wbraid are the aggregate iOS ones, and Google documents preferring it. Unlike
+* The gclid goes with the gbraid when there are both — "we recommend setting both the GCLID and
+* GBRAID" — and otherwise one click id: gclid, else gbraid, else wbraid (nothing documents a
+* wbraid next to a gclid). https://developers.google.com/google-ads/api/docs/conversions/upload-clicks
+* Unlike
 * the legacy upload, an event with no click id at all is still worth sending when it carries
 * user identifiers — that is the enhanced-conversions match path.
 */
@@ -80,7 +83,10 @@ function getDataManagerEvent(event, config, data = {}, actionType = "webpage") {
 		currency: normalizeCurrency(event.properties?.currency)
 	};
 	const { gclid, gbraid, wbraid } = googleClickIds(event.tags);
-	if (gclid) dmEvent.adIdentifiers = { gclid };
+	if (gclid) dmEvent.adIdentifiers = gbraid ? {
+		gclid,
+		gbraid
+	} : { gclid };
 	else if (gbraid) dmEvent.adIdentifiers = { gbraid };
 	else if (wbraid) dmEvent.adIdentifiers = { wbraid };
 	const userIdentifiers = getUserIdentifiers(data);

package/dist/server/google-data-manager.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"google-data-manager.mjs","names":[],"sources":["../../src/server/google-data-manager.ts"],"sourcesContent":["/**\n * Google Ads conversion sender over the Data Manager API (`events:ingest`) — Google's\n * counterpart to Meta's Conversions API, and the mandated successor to the Google Ads API's\n * `UploadClickConversions`, which stopped accepting new adopters on 2026-06-15. Same shape as\n * the other senders here: a pure per-event builder, a never-throws `sendEvents`, credentials\n * in headers and never in a URL or a log line.\n *\n * Google's recommended deployment is *hybrid* (\"boost your tag with additional data sources\"):\n * this upload attaches to the SAME conversion action the gtag tag reports to, matched by\n * `transactionId` — a matched pair collapses into one conversion with the server data winning,\n * an unmatched upload is a recovered conversion. Both channels here are fed from the same\n * `track()` call, so the ids agree by construction. `transactionId` is therefore required in\n * that mode; this sender always sends one (the event id when there is no natural order id).\n *\n * Auth is a plain OAuth2 access token with the `datamanager` scope — no Google Ads developer\n * token, no API Center approval. The caller exchanges its stored refresh token for the access\n * token (one POST to oauth2.googleapis.com) and refreshes it however it likes; this module\n * stays out of the OAuth business, exactly as it stays out of Meta's.\n *\n * https://developers.google.com/data-manager/api/reference/rest/v1/events/ingest\n * https://developers.google.com/data-manager/api/devguides/events/google-ads/offline/upgrade/field-mappings\n * https://support.google.com/google-ads/answer/16542291 (hybrid: \"boost your tag with\n * additional data sources\" — the transaction-id matching contract this sender relies on)\n */\nimport { createHash } from 'node:crypto';\nimport { fetch } from '@shware/utils';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport type { TrackEvent, UserProvidedData } from '../track/types';\nimport { resolveActionSource } from './action-source';\nimport { googleClickIds } from './click-ids';\n\nconst ENDPOINT = 'https://datamanager.googleapis.com/v1/events:ingest';\n\n/**\n * Event name → conversion action id, mirroring `LinkedinConversionConfig`: only configured\n * events upload, everything else is skipped silently. In the hybrid setup this is the id of\n * the SAME conversion action the gtag tag reports to.\n */\nexport type GoogleAdsConversionConfig = Record<Lowercase<string>, number | string>;\n\nexport interface GoogleAdsAuth {\n  /** OAuth2 access token with the `datamanager` scope. Short-lived; the caller refreshes it. */\n  accessToken: string;\n  /** The Google Ads account the conversion actions live in. Dashes are tolerated: '123-456-7890'. */\n  operatingAccountId: string;\n  /** The manager account the OAuth user accesses through, when access is delegated. */\n  loginAccountId?: string;\n}\n\n/**\n * EEA/UK/CH consent, applied request-wide. Google drops EEA conversions without granted\n * `adUserData` from bidding, so a host with consent signals should pass them.\n */\nexport interface GoogleAdsConsent {\n  adUserData?: 'CONSENT_GRANTED' | 'CONSENT_DENIED' | 'CONSENT_STATUS_UNSPECIFIED';\n  adPersonalization?: 'CONSENT_GRANTED' | 'CONSENT_DENIED' | 'CONSENT_STATUS_UNSPECIFIED';\n}\n\n/**\n * The kind of conversion action the events go to, which decides `eventSource`:\n * - `webpage` (default): the action the gtag tag reports to, as in the hybrid deployment this\n *   module is built for. Its `eventSource` is optional and, when set, \"must be WEB\" — any other\n *   value fails the request, and the request with it. Web events say `WEB`, others say nothing.\n * - `offline`: an action created for uploads (`UPLOAD_CLICKS`), where `eventSource` is required\n *   and any value goes: `WEB`, `APP` or `OTHER` from the event's platform.\n * https://developers.google.com/data-manager/api/devguides/events/google-ads/online/send-events\n */\nexport type GoogleAdsActionType = 'webpage' | 'offline';\n\nexport interface GoogleAdsConversionsOptions {\n  /** Validates the payload server-side without recording conversions. */\n  validateOnly?: boolean;\n  consent?: GoogleAdsConsent;\n  /** The kind of conversion action `config` points at; `webpage` by default. */\n  actionType?: GoogleAdsActionType;\n}\n\n/**\n * Google's email normalization is Meta's minus one wrinkle: for @gmail.com/@googlemail.com the\n * username's dots and everything from '+' on are removed; for every other domain they are kept.\n * https://developers.google.com/data-manager/api/devguides/format-data\n */\nexport function normalizeEmail(input: string): string {\n  const email = input.trim().toLowerCase();\n  const at = email.lastIndexOf('@');\n  if (at === -1) return email;\n  let username = email.slice(0, at);\n  const domain = email.slice(at + 1);\n  if (domain === 'gmail.com' || domain === 'googlemail.com') {\n    username = username.replace(/\\./g, '').split('+', 1)[0] ?? '';\n  }\n  return `${username}@${domain}`;\n}\n\nconst sha256 = (value: string) => createHash('sha256').update(value).digest('hex');\n\nfunction normalizeCurrency(input: unknown): string {\n  if (typeof input !== 'string') return 'USD';\n  const currency = input.trim().toUpperCase();\n  return /^[A-Z]{3}$/.test(currency) ? currency : 'USD';\n}\n\n/** At most 10 userIdentifiers per event, per the API's hard limit. */\nconst MAX_USER_IDENTIFIERS = 10;\n\n/** Hashes are hex strings, declared by `encoding: 'HEX'` on the request. */\nfunction getUserIdentifiers(data: UserProvidedData): Record<string, string>[] {\n  const identifiers: Record<string, string>[] = [];\n  const emails = Array.isArray(data.email) ? data.email : data.email ? [data.email] : [];\n  for (const email of emails) {\n    identifiers.push({ emailAddress: sha256(normalizeEmail(email)) });\n  }\n  const phones = Array.isArray(data.phone_number)\n    ? data.phone_number\n    : data.phone_number\n      ? [data.phone_number]\n      : [];\n  for (const phone of phones) {\n    // Phones are already E.164 by the schema ('+' then digits); hash after a defensive trim.\n    identifiers.push({ phoneNumber: sha256(phone.trim()) });\n  }\n  return identifiers.slice(0, MAX_USER_IDENTIFIERS);\n}\n\n/** One entry of the `events` array. Field names are the REST (camelCase) spellings. */\nexport interface DataManagerEvent {\n  destinationReferences: string[];\n  transactionId: string;\n  /** RFC 3339 — `created_at` as stored, unlike the legacy API's bespoke format. */\n  eventTimestamp: string;\n  /** Absent for a non-web event sent to a `webpage` action, which accepts `WEB` only. */\n  eventSource?: 'WEB' | 'APP' | 'OTHER';\n  conversionValue: number;\n  currency: string;\n  adIdentifiers?: { gclid?: string; gbraid?: string; wbraid?: string };\n  userData?: { userIdentifiers: Record<string, string>[] };\n}\n\n/**\n * Builds one Event, or undefined when no conversion action is configured for the event's name.\n * At most one click identifier is sent, gclid first: it is the deterministic per-click id,\n * where gbraid/wbraid are the aggregate iOS ones, and Google documents preferring it. Unlike\n * the legacy upload, an event with no click id at all is still worth sending when it carries\n * user identifiers — that is the enhanced-conversions match path.\n */\nexport function getDataManagerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  config: GoogleAdsConversionConfig,\n  data: UserProvidedData = {},\n  actionType: GoogleAdsActionType = 'webpage'\n): DataManagerEvent | undefined {\n  const action = config[event.name as Lowercase<string>];\n  if (!action) return undefined;\n\n  const source = resolveActionSource(event.platform);\n  const dmEvent: DataManagerEvent = {\n    destinationReferences: [String(action)],\n    // The hybrid-mode match key against the gtag tag's transaction_id: same track() call feeds\n    // both channels, so they agree by construction for purchase-shaped events. The event id\n    // covers conversions with no natural order id — but the gtag tracker only sends a\n    // transaction_id when the properties carry one, so on a HYBRID action a non-purchase event\n    // reported by both channels never matches and counts twice. Attach such events to a\n    // standalone (API-only) conversion action instead.\n    transactionId:\n      typeof event.properties?.transaction_id === 'string'\n        ? event.properties.transaction_id\n        : event.id,\n    eventTimestamp: new Date(event.created_at).toISOString(),\n    eventSource:\n      source === 'web'\n        ? 'WEB'\n        : actionType === 'webpage'\n          ? undefined\n          : source === 'app'\n            ? 'APP'\n            : 'OTHER',\n    // Both mandatory, like the LinkedIn sender's defaults: 0 USD is Google's own convention\n    // for value-less goals. The API has no partial-failure mode, so a malformed currency would\n    // cost the whole batch — anything that isn't a 3-letter code falls back instead.\n    conversionValue: typeof event.properties?.value === 'number' ? event.properties.value : 0,\n    currency: normalizeCurrency(event.properties?.currency),\n  };\n\n  const { gclid, gbraid, wbraid } = googleClickIds(event.tags);\n  if (gclid) dmEvent.adIdentifiers = { gclid };\n  else if (gbraid) dmEvent.adIdentifiers = { gbraid };\n  else if (wbraid) dmEvent.adIdentifiers = { wbraid };\n\n  const userIdentifiers = getUserIdentifiers(data);\n  if (userIdentifiers.length > 0) dmEvent.userData = { userIdentifiers };\n\n  // With neither a click id nor an identifier Google has nothing to match on; skip.\n  if (!dmEvent.adIdentifiers && !dmEvent.userData) return undefined;\n\n  return dmEvent;\n}\n\nexport interface DataManagerResponse {\n  requestId?: string;\n}\n\n/** The API takes at most 2000 events per request. */\nconst MAX_EVENTS_PER_REQUEST = 2000;\n\n/**\n * Uploads the configured conversions from a batch of events. Never throws: an unusable event\n * is skipped and a failed request is logged and swallowed, like every other sender here. The\n * Data Manager API has no partial-failure mode — a rejected request costs the whole batch, so\n * the builder is strict about only emitting events the API can accept. A batch beyond the\n * 2000-event request cap goes out as sequential requests; the first response is returned.\n */\nexport async function sendEvents(\n  auth: GoogleAdsAuth,\n  config: GoogleAdsConversionConfig,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  options: GoogleAdsConversionsOptions = {}\n): Promise<DataManagerResponse | undefined> {\n  const dmEvents = events\n    .filter((event) => !IGNORED_EVENTS.includes(event.name))\n    .map((event) => getDataManagerEvent(event, config, data, options.actionType))\n    .filter((dmEvent): dmEvent is DataManagerEvent => dmEvent !== undefined);\n  if (dmEvents.length === 0) return undefined;\n\n  const operatingAccount = {\n    accountType: 'GOOGLE_ADS',\n    accountId: auth.operatingAccountId.replace(/-/g, ''),\n  };\n  // One destination per conversion action present in the batch; each event points at its own\n  // through destinationReferences, so mixed-action batches go out as one request.\n  const loginAccount = auth.loginAccountId\n    ? { accountType: 'GOOGLE_ADS', accountId: auth.loginAccountId.replace(/-/g, '') }\n    : undefined;\n  const actions = Array.from(new Set(dmEvents.flatMap((dmEvent) => dmEvent.destinationReferences)));\n  const destinations = actions.map((action) => {\n    const destination: Record<string, unknown> = {\n      reference: action,\n      operatingAccount,\n      productDestinationId: action,\n    };\n    if (loginAccount) destination.loginAccount = loginAccount;\n    return destination;\n  });\n\n  let firstResponse: DataManagerResponse | undefined;\n  for (let offset = 0; offset < dmEvents.length; offset += MAX_EVENTS_PER_REQUEST) {\n    const chunk = dmEvents.slice(offset, offset + MAX_EVENTS_PER_REQUEST);\n    const body: Record<string, unknown> = {\n      destinations,\n      events: chunk,\n      validateOnly: options.validateOnly ?? false,\n    };\n    if (chunk.some((dmEvent) => dmEvent.userData)) {\n      body.encoding = 'HEX';\n    }\n    if (options.consent) {\n      body.consent = options.consent;\n    }\n\n    try {\n      const response = await fetch(ENDPOINT, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n          Authorization: `Bearer ${auth.accessToken}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (response.ok) {\n        firstResponse ??= (await response.json()) as DataManagerResponse;\n        continue;\n      }\n      const { status } = response;\n      const message = await response.text();\n      console.error(`Failed to send Google Ads conversions, status: ${status}, body: ${message}`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.error(`Failed to send Google Ads conversions, network error: ${message}`);\n    }\n  }\n  return firstResponse;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAM,WAAW;;;;;;AAmDjB,SAAgB,eAAe,OAAuB;CACpD,MAAM,QAAQ,MAAM,KAAK,CAAC,CAAC,YAAY;CACvC,MAAM,KAAK,MAAM,YAAY,GAAG;CAChC,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,WAAW,MAAM,MAAM,GAAG,EAAE;CAChC,MAAM,SAAS,MAAM,MAAM,KAAK,CAAC;CACjC,IAAI,WAAW,eAAe,WAAW,kBACvC,WAAW,SAAS,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM;CAE7D,OAAO,GAAG,SAAS,GAAG;AACxB;AAEA,MAAM,UAAU,UAAkB,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AAEjF,SAAS,kBAAkB,OAAwB;CACjD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,WAAW,MAAM,KAAK,CAAC,CAAC,YAAY;CAC1C,OAAO,aAAa,KAAK,QAAQ,IAAI,WAAW;AAClD;;AAGA,MAAM,uBAAuB;;AAG7B,SAAS,mBAAmB,MAAkD;CAC5E,MAAM,cAAwC,CAAC;CAC/C,MAAM,SAAS,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC;CACrF,KAAK,MAAM,SAAS,QAClB,YAAY,KAAK,EAAE,cAAc,OAAO,eAAe,KAAK,CAAC,EAAE,CAAC;CAElE,MAAM,SAAS,MAAM,QAAQ,KAAK,YAAY,IAC1C,KAAK,eACL,KAAK,eACH,CAAC,KAAK,YAAY,IAClB,CAAC;CACP,KAAK,MAAM,SAAS,QAElB,YAAY,KAAK,EAAE,aAAa,OAAO,MAAM,KAAK,CAAC,EAAE,CAAC;CAExD,OAAO,YAAY,MAAM,GAAG,oBAAoB;AAClD;;;;;;;;AAuBA,SAAgB,oBAEd,OACA,QACA,OAAyB,CAAC,GAC1B,aAAkC,WACJ;CAC9B,MAAM,SAAS,OAAO,MAAM;CAC5B,IAAI,CAAC,QAAQ,OAAO,KAAA;CAEpB,MAAM,SAAS,oBAAoB,MAAM,QAAQ;CACjD,MAAM,UAA4B;EAChC,uBAAuB,CAAC,OAAO,MAAM,CAAC;EAOtC,eACE,OAAO,MAAM,YAAY,mBAAmB,WACxC,MAAM,WAAW,iBACjB,MAAM;EACZ,gBAAgB,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,YAAY;EACvD,aACE,WAAW,QACP,QACA,eAAe,YACb,KAAA,IACA,WAAW,QACT,QACA;EAIV,iBAAiB,OAAO,MAAM,YAAY,UAAU,WAAW,MAAM,WAAW,QAAQ;EACxF,UAAU,kBAAkB,MAAM,YAAY,QAAQ;CACxD;CAEA,MAAM,EAAE,OAAO,QAAQ,WAAW,eAAe,MAAM,IAAI;CAC3D,IAAI,OAAO,QAAQ,gBAAgB,EAAE,MAAM;MACtC,IAAI,QAAQ,QAAQ,gBAAgB,EAAE,OAAO;MAC7C,IAAI,QAAQ,QAAQ,gBAAgB,EAAE,OAAO;CAElD,MAAM,kBAAkB,mBAAmB,IAAI;CAC/C,IAAI,gBAAgB,SAAS,GAAG,QAAQ,WAAW,EAAE,gBAAgB;CAGrE,IAAI,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,UAAU,OAAO,KAAA;CAExD,OAAO;AACT;;AAOA,MAAM,yBAAyB;;;;;;;;AAS/B,eAAsB,WACpB,MACA,QAEA,QACA,OAAyB,CAAC,GAC1B,UAAuC,CAAC,GACE;CAC1C,MAAM,WAAW,OACd,QAAQ,UAAU,CAAC,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,KAAK,UAAU,oBAAoB,OAAO,QAAQ,MAAM,QAAQ,UAAU,CAAC,CAAC,CAC5E,QAAQ,YAAyC,YAAY,KAAA,CAAS;CACzE,IAAI,SAAS,WAAW,GAAG,OAAO,KAAA;CAElC,MAAM,mBAAmB;EACvB,aAAa;EACb,WAAW,KAAK,mBAAmB,QAAQ,MAAM,EAAE;CACrD;CAGA,MAAM,eAAe,KAAK,iBACtB;EAAE,aAAa;EAAc,WAAW,KAAK,eAAe,QAAQ,MAAM,EAAE;CAAE,IAC9E,KAAA;CAEJ,MAAM,eADU,MAAM,KAAK,IAAI,IAAI,SAAS,SAAS,YAAY,QAAQ,qBAAqB,CAAC,CACpE,CAAC,CAAC,KAAK,WAAW;EAC3C,MAAM,cAAuC;GAC3C,WAAW;GACX;GACA,sBAAsB;EACxB;EACA,IAAI,cAAc,YAAY,eAAe;EAC7C,OAAO;CACT,CAAC;CAED,IAAI;CACJ,KAAK,IAAI,SAAS,GAAG,SAAS,SAAS,QAAQ,UAAU,wBAAwB;EAC/E,MAAM,QAAQ,SAAS,MAAM,QAAQ,SAAS,sBAAsB;EACpE,MAAM,OAAgC;GACpC;GACA,QAAQ;GACR,cAAc,QAAQ,gBAAgB;EACxC;EACA,IAAI,MAAM,MAAM,YAAY,QAAQ,QAAQ,GAC1C,KAAK,WAAW;EAElB,IAAI,QAAQ,SACV,KAAK,UAAU,QAAQ;EAGzB,IAAI;GACF,MAAM,WAAW,MAAM,MAAM,UAAU;IACrC,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,QAAQ;KACR,eAAe,UAAU,KAAK;IAChC;IACA,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GACD,IAAI,SAAS,IAAI;IACf,kBAAmB,MAAM,SAAS,KAAK;IACvC;GACF;GACA,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,MAAM,SAAS,KAAK;GACpC,QAAQ,MAAM,kDAAkD,OAAO,UAAU,SAAS;EAC5F,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,QAAQ,MAAM,yDAAyD,SAAS;EAClF;CACF;CACA,OAAO;AACT"}
+{"version":3,"file":"google-data-manager.mjs","names":[],"sources":["../../src/server/google-data-manager.ts"],"sourcesContent":["/**\n * Google Ads conversion sender over the Data Manager API (`events:ingest`) — Google's\n * counterpart to Meta's Conversions API, and the mandated successor to the Google Ads API's\n * `UploadClickConversions`, which stopped accepting new adopters on 2026-06-15. Same shape as\n * the other senders here: a pure per-event builder, a never-throws `sendEvents`, credentials\n * in headers and never in a URL or a log line.\n *\n * Google's recommended deployment is *hybrid* (\"boost your tag with additional data sources\"):\n * this upload attaches to the SAME conversion action the gtag tag reports to, matched by\n * `transactionId` — a matched pair collapses into one conversion with the server data winning,\n * an unmatched upload is a recovered conversion. Both channels here are fed from the same\n * `track()` call, so the ids agree by construction. `transactionId` is therefore required in\n * that mode; this sender always sends one (the event id when there is no natural order id).\n *\n * Auth is a plain OAuth2 access token with the `datamanager` scope — no Google Ads developer\n * token, no API Center approval. The caller exchanges its stored refresh token for the access\n * token (one POST to oauth2.googleapis.com) and refreshes it however it likes; this module\n * stays out of the OAuth business, exactly as it stays out of Meta's.\n *\n * https://developers.google.com/data-manager/api/reference/rest/v1/events/ingest\n * https://developers.google.com/data-manager/api/devguides/events/google-ads/offline/upgrade/field-mappings\n * https://support.google.com/google-ads/answer/16542291 (hybrid: \"boost your tag with\n * additional data sources\" — the transaction-id matching contract this sender relies on)\n */\nimport { createHash } from 'node:crypto';\nimport { fetch } from '@shware/utils';\nimport { IGNORED_EVENTS } from '../third-parties/ignored-events';\nimport type { TrackEvent, UserProvidedData } from '../track/types';\nimport { resolveActionSource } from './action-source';\nimport { googleClickIds } from './click-ids';\n\nconst ENDPOINT = 'https://datamanager.googleapis.com/v1/events:ingest';\n\n/**\n * Event name → conversion action id, mirroring `LinkedinConversionConfig`: only configured\n * events upload, everything else is skipped silently. In the hybrid setup this is the id of\n * the SAME conversion action the gtag tag reports to.\n */\nexport type GoogleAdsConversionConfig = Record<Lowercase<string>, number | string>;\n\nexport interface GoogleAdsAuth {\n  /** OAuth2 access token with the `datamanager` scope. Short-lived; the caller refreshes it. */\n  accessToken: string;\n  /** The Google Ads account the conversion actions live in. Dashes are tolerated: '123-456-7890'. */\n  operatingAccountId: string;\n  /** The manager account the OAuth user accesses through, when access is delegated. */\n  loginAccountId?: string;\n}\n\n/**\n * EEA/UK/CH consent, applied request-wide. Google drops EEA conversions without granted\n * `adUserData` from bidding, so a host with consent signals should pass them.\n */\nexport interface GoogleAdsConsent {\n  adUserData?: 'CONSENT_GRANTED' | 'CONSENT_DENIED' | 'CONSENT_STATUS_UNSPECIFIED';\n  adPersonalization?: 'CONSENT_GRANTED' | 'CONSENT_DENIED' | 'CONSENT_STATUS_UNSPECIFIED';\n}\n\n/**\n * The kind of conversion action the events go to, which decides `eventSource`:\n * - `webpage` (default): the action the gtag tag reports to, as in the hybrid deployment this\n *   module is built for. Its `eventSource` is optional and, when set, \"must be WEB\" — any other\n *   value fails the request, and the request with it. Web events say `WEB`, others say nothing.\n * - `offline`: an action created for uploads (`UPLOAD_CLICKS`), where `eventSource` is required\n *   and any value goes: `WEB`, `APP` or `OTHER` from the event's platform.\n * https://developers.google.com/data-manager/api/devguides/events/google-ads/online/send-events\n */\nexport type GoogleAdsActionType = 'webpage' | 'offline';\n\nexport interface GoogleAdsConversionsOptions {\n  /** Validates the payload server-side without recording conversions. */\n  validateOnly?: boolean;\n  consent?: GoogleAdsConsent;\n  /** The kind of conversion action `config` points at; `webpage` by default. */\n  actionType?: GoogleAdsActionType;\n}\n\n/**\n * Google's email normalization is Meta's minus one wrinkle: for @gmail.com/@googlemail.com the\n * username's dots and everything from '+' on are removed; for every other domain they are kept.\n * All whitespace goes — \"leading, trailing and intermediate\".\n * https://developers.google.com/data-manager/api/devguides/concepts/formatting\n */\nexport function normalizeEmail(input: string): string {\n  const email = input.replace(/\\s+/g, '').toLowerCase();\n  const at = email.lastIndexOf('@');\n  if (at === -1) return email;\n  let username = email.slice(0, at);\n  const domain = email.slice(at + 1);\n  if (domain === 'gmail.com' || domain === 'googlemail.com') {\n    username = username.replace(/\\./g, '').split('+', 1)[0] ?? '';\n  }\n  return `${username}@${domain}`;\n}\n\nconst sha256 = (value: string) => createHash('sha256').update(value).digest('hex');\n\nfunction normalizeCurrency(input: unknown): string {\n  if (typeof input !== 'string') return 'USD';\n  const currency = input.trim().toUpperCase();\n  return /^[A-Z]{3}$/.test(currency) ? currency : 'USD';\n}\n\n/** At most 10 userIdentifiers per event, per the API's hard limit. */\nconst MAX_USER_IDENTIFIERS = 10;\n\n/** Hashes are hex strings, declared by `encoding: 'HEX'` on the request. */\nfunction getUserIdentifiers(data: UserProvidedData): Record<string, string>[] {\n  const identifiers: Record<string, string>[] = [];\n  const emails = Array.isArray(data.email) ? data.email : data.email ? [data.email] : [];\n  for (const email of emails) {\n    identifiers.push({ emailAddress: sha256(normalizeEmail(email)) });\n  }\n  const phones = Array.isArray(data.phone_number)\n    ? data.phone_number\n    : data.phone_number\n      ? [data.phone_number]\n      : [];\n  for (const phone of phones) {\n    // Phones are already E.164 by the schema ('+' then digits); hash after a defensive trim.\n    identifiers.push({ phoneNumber: sha256(phone.trim()) });\n  }\n  return identifiers.slice(0, MAX_USER_IDENTIFIERS);\n}\n\n/** One entry of the `events` array. Field names are the REST (camelCase) spellings. */\nexport interface DataManagerEvent {\n  destinationReferences: string[];\n  transactionId: string;\n  /** RFC 3339 — `created_at` as stored, unlike the legacy API's bespoke format. */\n  eventTimestamp: string;\n  /** Absent for a non-web event sent to a `webpage` action, which accepts `WEB` only. */\n  eventSource?: 'WEB' | 'APP' | 'OTHER';\n  conversionValue: number;\n  currency: string;\n  adIdentifiers?: { gclid?: string; gbraid?: string; wbraid?: string };\n  userData?: { userIdentifiers: Record<string, string>[] };\n}\n\n/**\n * Builds one Event, or undefined when no conversion action is configured for the event's name.\n * The gclid goes with the gbraid when there are both — \"we recommend setting both the GCLID and\n * GBRAID\" — and otherwise one click id: gclid, else gbraid, else wbraid (nothing documents a\n * wbraid next to a gclid). https://developers.google.com/google-ads/api/docs/conversions/upload-clicks\n * Unlike\n * the legacy upload, an event with no click id at all is still worth sending when it carries\n * user identifiers — that is the enhanced-conversions match path.\n */\nexport function getDataManagerEvent(\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  event: TrackEvent<any>,\n  config: GoogleAdsConversionConfig,\n  data: UserProvidedData = {},\n  actionType: GoogleAdsActionType = 'webpage'\n): DataManagerEvent | undefined {\n  const action = config[event.name as Lowercase<string>];\n  if (!action) return undefined;\n\n  const source = resolveActionSource(event.platform);\n  const dmEvent: DataManagerEvent = {\n    destinationReferences: [String(action)],\n    // The hybrid-mode match key against the gtag tag's transaction_id: same track() call feeds\n    // both channels, so they agree by construction for purchase-shaped events. The event id\n    // covers conversions with no natural order id — but the gtag tracker only sends a\n    // transaction_id when the properties carry one, so on a HYBRID action a non-purchase event\n    // reported by both channels never matches and counts twice. Attach such events to a\n    // standalone (API-only) conversion action instead.\n    transactionId:\n      typeof event.properties?.transaction_id === 'string'\n        ? event.properties.transaction_id\n        : event.id,\n    eventTimestamp: new Date(event.created_at).toISOString(),\n    eventSource:\n      source === 'web'\n        ? 'WEB'\n        : actionType === 'webpage'\n          ? undefined\n          : source === 'app'\n            ? 'APP'\n            : 'OTHER',\n    // Both mandatory, like the LinkedIn sender's defaults: 0 USD is Google's own convention\n    // for value-less goals. The API has no partial-failure mode, so a malformed currency would\n    // cost the whole batch — anything that isn't a 3-letter code falls back instead.\n    conversionValue: typeof event.properties?.value === 'number' ? event.properties.value : 0,\n    currency: normalizeCurrency(event.properties?.currency),\n  };\n\n  const { gclid, gbraid, wbraid } = googleClickIds(event.tags);\n  if (gclid) dmEvent.adIdentifiers = gbraid ? { gclid, gbraid } : { gclid };\n  else if (gbraid) dmEvent.adIdentifiers = { gbraid };\n  else if (wbraid) dmEvent.adIdentifiers = { wbraid };\n\n  const userIdentifiers = getUserIdentifiers(data);\n  if (userIdentifiers.length > 0) dmEvent.userData = { userIdentifiers };\n\n  // With neither a click id nor an identifier Google has nothing to match on; skip.\n  if (!dmEvent.adIdentifiers && !dmEvent.userData) return undefined;\n\n  return dmEvent;\n}\n\nexport interface DataManagerResponse {\n  requestId?: string;\n}\n\n/** The API takes at most 2000 events per request. */\nconst MAX_EVENTS_PER_REQUEST = 2000;\n\n/**\n * Uploads the configured conversions from a batch of events. Never throws: an unusable event\n * is skipped and a failed request is logged and swallowed, like every other sender here. The\n * Data Manager API has no partial-failure mode — a rejected request costs the whole batch, so\n * the builder is strict about only emitting events the API can accept. A batch beyond the\n * 2000-event request cap goes out as sequential requests; the first response is returned.\n */\nexport async function sendEvents(\n  auth: GoogleAdsAuth,\n  config: GoogleAdsConversionConfig,\n  // oxlint-disable-next-line @typescript-eslint/no-explicit-any\n  events: TrackEvent<any>[],\n  data: UserProvidedData = {},\n  options: GoogleAdsConversionsOptions = {}\n): Promise<DataManagerResponse | undefined> {\n  const dmEvents = events\n    .filter((event) => !IGNORED_EVENTS.includes(event.name))\n    .map((event) => getDataManagerEvent(event, config, data, options.actionType))\n    .filter((dmEvent): dmEvent is DataManagerEvent => dmEvent !== undefined);\n  if (dmEvents.length === 0) return undefined;\n\n  const operatingAccount = {\n    accountType: 'GOOGLE_ADS',\n    accountId: auth.operatingAccountId.replace(/-/g, ''),\n  };\n  // One destination per conversion action present in the batch; each event points at its own\n  // through destinationReferences, so mixed-action batches go out as one request.\n  const loginAccount = auth.loginAccountId\n    ? { accountType: 'GOOGLE_ADS', accountId: auth.loginAccountId.replace(/-/g, '') }\n    : undefined;\n  const actions = Array.from(new Set(dmEvents.flatMap((dmEvent) => dmEvent.destinationReferences)));\n  const destinations = actions.map((action) => {\n    const destination: Record<string, unknown> = {\n      reference: action,\n      operatingAccount,\n      productDestinationId: action,\n    };\n    if (loginAccount) destination.loginAccount = loginAccount;\n    return destination;\n  });\n\n  let firstResponse: DataManagerResponse | undefined;\n  for (let offset = 0; offset < dmEvents.length; offset += MAX_EVENTS_PER_REQUEST) {\n    const chunk = dmEvents.slice(offset, offset + MAX_EVENTS_PER_REQUEST);\n    const body: Record<string, unknown> = {\n      destinations,\n      events: chunk,\n      validateOnly: options.validateOnly ?? false,\n    };\n    if (chunk.some((dmEvent) => dmEvent.userData)) {\n      body.encoding = 'HEX';\n    }\n    if (options.consent) {\n      body.consent = options.consent;\n    }\n\n    try {\n      const response = await fetch(ENDPOINT, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Accept: 'application/json',\n          Authorization: `Bearer ${auth.accessToken}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (response.ok) {\n        firstResponse ??= (await response.json()) as DataManagerResponse;\n        continue;\n      }\n      const { status } = response;\n      const message = await response.text();\n      console.error(`Failed to send Google Ads conversions, status: ${status}, body: ${message}`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      console.error(`Failed to send Google Ads conversions, network error: ${message}`);\n    }\n  }\n  return firstResponse;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAM,WAAW;;;;;;;AAoDjB,SAAgB,eAAe,OAAuB;CACpD,MAAM,QAAQ,MAAM,QAAQ,QAAQ,EAAE,CAAC,CAAC,YAAY;CACpD,MAAM,KAAK,MAAM,YAAY,GAAG;CAChC,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,WAAW,MAAM,MAAM,GAAG,EAAE;CAChC,MAAM,SAAS,MAAM,MAAM,KAAK,CAAC;CACjC,IAAI,WAAW,eAAe,WAAW,kBACvC,WAAW,SAAS,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM;CAE7D,OAAO,GAAG,SAAS,GAAG;AACxB;AAEA,MAAM,UAAU,UAAkB,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AAEjF,SAAS,kBAAkB,OAAwB;CACjD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,WAAW,MAAM,KAAK,CAAC,CAAC,YAAY;CAC1C,OAAO,aAAa,KAAK,QAAQ,IAAI,WAAW;AAClD;;AAGA,MAAM,uBAAuB;;AAG7B,SAAS,mBAAmB,MAAkD;CAC5E,MAAM,cAAwC,CAAC;CAC/C,MAAM,SAAS,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC;CACrF,KAAK,MAAM,SAAS,QAClB,YAAY,KAAK,EAAE,cAAc,OAAO,eAAe,KAAK,CAAC,EAAE,CAAC;CAElE,MAAM,SAAS,MAAM,QAAQ,KAAK,YAAY,IAC1C,KAAK,eACL,KAAK,eACH,CAAC,KAAK,YAAY,IAClB,CAAC;CACP,KAAK,MAAM,SAAS,QAElB,YAAY,KAAK,EAAE,aAAa,OAAO,MAAM,KAAK,CAAC,EAAE,CAAC;CAExD,OAAO,YAAY,MAAM,GAAG,oBAAoB;AAClD;;;;;;;;;;AAyBA,SAAgB,oBAEd,OACA,QACA,OAAyB,CAAC,GAC1B,aAAkC,WACJ;CAC9B,MAAM,SAAS,OAAO,MAAM;CAC5B,IAAI,CAAC,QAAQ,OAAO,KAAA;CAEpB,MAAM,SAAS,oBAAoB,MAAM,QAAQ;CACjD,MAAM,UAA4B;EAChC,uBAAuB,CAAC,OAAO,MAAM,CAAC;EAOtC,eACE,OAAO,MAAM,YAAY,mBAAmB,WACxC,MAAM,WAAW,iBACjB,MAAM;EACZ,gBAAgB,IAAI,KAAK,MAAM,UAAU,CAAC,CAAC,YAAY;EACvD,aACE,WAAW,QACP,QACA,eAAe,YACb,KAAA,IACA,WAAW,QACT,QACA;EAIV,iBAAiB,OAAO,MAAM,YAAY,UAAU,WAAW,MAAM,WAAW,QAAQ;EACxF,UAAU,kBAAkB,MAAM,YAAY,QAAQ;CACxD;CAEA,MAAM,EAAE,OAAO,QAAQ,WAAW,eAAe,MAAM,IAAI;CAC3D,IAAI,OAAO,QAAQ,gBAAgB,SAAS;EAAE;EAAO;CAAO,IAAI,EAAE,MAAM;MACnE,IAAI,QAAQ,QAAQ,gBAAgB,EAAE,OAAO;MAC7C,IAAI,QAAQ,QAAQ,gBAAgB,EAAE,OAAO;CAElD,MAAM,kBAAkB,mBAAmB,IAAI;CAC/C,IAAI,gBAAgB,SAAS,GAAG,QAAQ,WAAW,EAAE,gBAAgB;CAGrE,IAAI,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,UAAU,OAAO,KAAA;CAExD,OAAO;AACT;;AAOA,MAAM,yBAAyB;;;;;;;;AAS/B,eAAsB,WACpB,MACA,QAEA,QACA,OAAyB,CAAC,GAC1B,UAAuC,CAAC,GACE;CAC1C,MAAM,WAAW,OACd,QAAQ,UAAU,CAAC,eAAe,SAAS,MAAM,IAAI,CAAC,CAAC,CACvD,KAAK,UAAU,oBAAoB,OAAO,QAAQ,MAAM,QAAQ,UAAU,CAAC,CAAC,CAC5E,QAAQ,YAAyC,YAAY,KAAA,CAAS;CACzE,IAAI,SAAS,WAAW,GAAG,OAAO,KAAA;CAElC,MAAM,mBAAmB;EACvB,aAAa;EACb,WAAW,KAAK,mBAAmB,QAAQ,MAAM,EAAE;CACrD;CAGA,MAAM,eAAe,KAAK,iBACtB;EAAE,aAAa;EAAc,WAAW,KAAK,eAAe,QAAQ,MAAM,EAAE;CAAE,IAC9E,KAAA;CAEJ,MAAM,eADU,MAAM,KAAK,IAAI,IAAI,SAAS,SAAS,YAAY,QAAQ,qBAAqB,CAAC,CACpE,CAAC,CAAC,KAAK,WAAW;EAC3C,MAAM,cAAuC;GAC3C,WAAW;GACX;GACA,sBAAsB;EACxB;EACA,IAAI,cAAc,YAAY,eAAe;EAC7C,OAAO;CACT,CAAC;CAED,IAAI;CACJ,KAAK,IAAI,SAAS,GAAG,SAAS,SAAS,QAAQ,UAAU,wBAAwB;EAC/E,MAAM,QAAQ,SAAS,MAAM,QAAQ,SAAS,sBAAsB;EACpE,MAAM,OAAgC;GACpC;GACA,QAAQ;GACR,cAAc,QAAQ,gBAAgB;EACxC;EACA,IAAI,MAAM,MAAM,YAAY,QAAQ,QAAQ,GAC1C,KAAK,WAAW;EAElB,IAAI,QAAQ,SACV,KAAK,UAAU,QAAQ;EAGzB,IAAI;GACF,MAAM,WAAW,MAAM,MAAM,UAAU;IACrC,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,QAAQ;KACR,eAAe,UAAU,KAAK;IAChC;IACA,MAAM,KAAK,UAAU,IAAI;GAC3B,CAAC;GACD,IAAI,SAAS,IAAI;IACf,kBAAmB,MAAM,SAAS,KAAK;IACvC;GACF;GACA,MAAM,EAAE,WAAW;GACnB,MAAM,UAAU,MAAM,SAAS,KAAK;GACpC,QAAQ,MAAM,kDAAkD,OAAO,UAAU,SAAS;EAC5F,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,QAAQ,MAAM,yDAAyD,SAAS;EAClF;CACF;CACA,OAAO;AACT"}

package/dist/server/linkedin-conversions-api.cjs

@@ -4,6 +4,7 @@ const require_utils_field = require("../utils/field.cjs");
 const require_server_click_ids = require("./click-ids.cjs");
 let _shware_utils = require("@shware/utils");
 let node_crypto = require("node:crypto");
+let node_net = require("node:net");
 //#region src/server/linkedin-conversions-api.ts
 /**
 * Conversions API Payload Builder: https://www.linkedin.com/developers/payload-builder
@@ -53,12 +54,22 @@ async function sendEvents(accessToken, config, events, data = {}) {
 			idValue: hashEmail(email)
 		});
 	}
-	const fatIds = (tags) => {
-		const id = require_server_click_ids.linkedinFatId(tags);
-		return id ? [{
+	if (data.ip_address && (0, node_net.isIPv4)(data.ip_address)) userIds.push({
+		idType: "PLAINTEXT_IP_ADDRESS",
+		idValue: data.ip_address
+	});
+	const eventIds = (event) => {
+		const ids = [];
+		const fatId = require_server_click_ids.linkedinFatId(event.tags);
+		if (fatId) ids.push({
 			idType: "LINKEDIN_FIRST_PARTY_ADS_TRACKING_UUID",
-			idValue: id
-		}] : [];
+			idValue: fatId
+		});
+		if (event.platform === "android" && event.tags.advertising_id) ids.push({
+			idType: "GOOGLE_AID",
+			idValue: event.tags.advertising_id
+		});
+		return ids;
 	};
 	const dto = { elements: events.filter((event) => eventNames.includes(event.name) && !require_third_parties_ignored_events.IGNORED_EVENTS.includes(event.name)).filter((event) => Date.now() - Date.parse(event.created_at) <= MAX_EVENT_AGE_MS).map((event) => ({
 		eventId: event.id,
@@ -69,7 +80,7 @@ async function sendEvents(accessToken, config, events, data = {}) {
 			amount: event.properties?.value?.toString() ?? "0"
 		},
 		user: {
-			userIds: [...fatIds(event.tags), ...userIds],
+			userIds: [...eventIds(event), ...userIds],
 			userInfo,
 			externalIds
 		}