@shware/http 2.10.4 → 2.11.0

package/dist/google-one-tap/index.cjs

@@ -20,7 +20,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/google-one-tap/index.ts
 var google_one_tap_exports = {};
 __export(google_one_tap_exports, {
-  prompt: () => prompt
+  prompt: () => prompt,
+  requestCode: () => requestCode
 });
 module.exports = __toCommonJS(google_one_tap_exports);
 var script = null;
@@ -48,6 +49,9 @@ function loadScript() {
     document.head.appendChild(script);
   });
 }
+function isFedcmSupported() {
+  return typeof window !== "undefined" && "IdentityCredential" in window;
+}
 async function prompt({
   nonce,
   client_id,
@@ -55,47 +59,86 @@ async function prompt({
   use_fedcm_for_prompt = true,
   cancel_on_tap_outside = false
 }) {
-  await loadScript();
+  if (use_fedcm_for_prompt !== false && !isFedcmSupported()) {
+    return { authorized: false, unsupported: true, reason: "fedcm_unsupported" };
+  }
+  try {
+    await loadScript();
+  } catch {
+    return { authorized: false, unsupported: true, reason: "script_load_failed" };
+  }
   return new Promise((resolve) => {
     let settled = false;
-    window.google.accounts.id.initialize({
-      ux_mode: "popup",
-      context: "signin",
-      auto_select,
-      nonce,
-      client_id,
-      use_fedcm_for_prompt,
-      cancel_on_tap_outside,
-      callback: (credential) => {
-        if (settled) return;
-        settled = true;
-        resolve({ authorized: true, credential });
-      },
-      native_callback: (credential) => {
+    const settle = (result) => {
+      if (settled) return;
+      settled = true;
+      resolve(result);
+    };
+    try {
+      window.google.accounts.id.initialize({
+        ux_mode: "popup",
+        context: "signin",
+        auto_select,
+        nonce,
+        client_id,
+        use_fedcm_for_prompt,
+        cancel_on_tap_outside,
+        callback: (credential) => settle({ authorized: true, credential }),
+        native_callback: (credential) => settle({ authorized: true, credential })
+      });
+      window.google.accounts.id.prompt((notification) => {
         if (settled) return;
-        settled = true;
-        resolve({ authorized: true, credential });
-      }
-    });
-    window.google.accounts.id.prompt((notification) => {
+        if (notification.isSkippedMoment() || notification.isDismissedMoment() && notification.getDismissedReason() !== "credential_returned") {
+          settle({
+            authorized: false,
+            moment: {
+              momentType: notification.getMomentType(),
+              skipped: notification.isSkippedMoment(),
+              dismissed: notification.isDismissedMoment(),
+              dismissedReason: notification.getDismissedReason()
+            }
+          });
+        }
+      });
+    } catch {
+      settle({ authorized: false, unsupported: true, reason: "prompt_error" });
+    }
+  });
+}
+async function requestCode({
+  client_id,
+  scope = "openid email profile",
+  ux_mode = "popup",
+  redirect_uri,
+  state,
+  login_hint,
+  hd
+}) {
+  await loadScript();
+  return new Promise((resolve) => {
+    let settled = false;
+    const settle = (result) => {
       if (settled) return;
-      if (notification.isSkippedMoment() || notification.isDismissedMoment() && notification.getDismissedReason() !== "credential_returned") {
-        settled = true;
-        resolve({
-          authorized: false,
-          moment: {
-            momentType: notification.getMomentType(),
-            skipped: notification.isSkippedMoment(),
-            dismissed: notification.isDismissedMoment(),
-            dismissedReason: notification.getDismissedReason()
-          }
-        });
-      }
+      settled = true;
+      resolve(result);
+    };
+    const client = window.google.accounts.oauth2.initCodeClient({
+      client_id,
+      scope,
+      ux_mode,
+      redirect_uri,
+      state,
+      login_hint,
+      hd,
+      callback: (response) => settle(response.code ? { ok: true, response } : { ok: false, error: response }),
+      error_callback: (error) => settle({ ok: false, error })
     });
+    client.requestCode();
   });
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  prompt
+  prompt,
+  requestCode
 });
 //# sourceMappingURL=index.cjs.map

package/dist/google-one-tap/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/google-one-tap/index.ts"],"sourcesContent":["import type { CredentialResponse, GoogleAccounts, PromptMomentNotification } from './types';\n\ndeclare global {\n  interface Window {\n    google: {\n      accounts: GoogleAccounts;\n    };\n  }\n}\n\nexport type Props = {\n  /**\n   * Opaque nonce string forwarded as-is to Google. Google echoes it back in\n   * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible\n   * for any hashing/encoding required by its verifier.\n   */\n  nonce?: string;\n  client_id: string;\n  auto_select?: boolean;\n  cancel_on_tap_outside?: boolean;\n  use_fedcm_for_prompt?: boolean;\n};\n\nexport type PromptMoment = {\n  skipped: boolean;\n  dismissed: boolean;\n  momentType: ReturnType<PromptMomentNotification['getMomentType']>;\n  dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;\n};\n\nexport type PromptResult =\n  | { authorized: true; credential: CredentialResponse }\n  | { authorized: false; moment: PromptMoment };\n\nlet script: HTMLScriptElement | null = null;\n\nfunction loadScript(): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (script) {\n      if (window.google?.accounts?.id) {\n        resolve();\n      } else {\n        script.addEventListener('load', () => resolve());\n        script.addEventListener('error', () =>\n          reject(new Error('Failed to load Google One Tap script'))\n        );\n      }\n      return;\n    }\n\n    script = document.createElement('script');\n    script.id = 'google-one-tap';\n    script.async = true;\n    script.defer = true;\n    script.src = 'https://accounts.google.com/gsi/client';\n    script.onload = () => resolve();\n    script.onerror = () => reject(new Error('Failed to load Google One Tap script'));\n\n    document.head.appendChild(script);\n  });\n}\n\n/** debug: chrome://settings/content/federatedIdentityApi */\nexport async function prompt({\n  nonce,\n  client_id,\n  auto_select = false,\n  use_fedcm_for_prompt = true,\n  cancel_on_tap_outside = false,\n}: Props): Promise<PromptResult> {\n  await loadScript();\n\n  return new Promise<PromptResult>((resolve) => {\n    let settled = false;\n\n    window.google.accounts.id.initialize({\n      ux_mode: 'popup',\n      context: 'signin',\n      auto_select,\n      nonce,\n      client_id,\n      use_fedcm_for_prompt,\n      cancel_on_tap_outside,\n      callback: (credential) => {\n        if (settled) return;\n        settled = true;\n        resolve({ authorized: true, credential });\n      },\n      native_callback: (credential) => {\n        if (settled) return;\n        settled = true;\n        resolve({ authorized: true, credential });\n      },\n    });\n\n    window.google.accounts.id.prompt((notification) => {\n      if (settled) return;\n\n      if (\n        notification.isSkippedMoment() ||\n        (notification.isDismissedMoment() &&\n          notification.getDismissedReason() !== 'credential_returned')\n      ) {\n        settled = true;\n        resolve({\n          authorized: false,\n          moment: {\n            momentType: notification.getMomentType(),\n            skipped: notification.isSkippedMoment(),\n            dismissed: notification.isDismissedMoment(),\n            dismissedReason: notification.getDismissedReason(),\n          },\n        });\n      }\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAkCA,IAAI,SAAmC;AAEvC,SAAS,aAA4B;AACnC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,QAAQ;AACV,UAAI,OAAO,QAAQ,UAAU,IAAI;AAC/B,gBAAQ;AAAA,MACV,OAAO;AACL,eAAO,iBAAiB,QAAQ,MAAM,QAAQ,CAAC;AAC/C,eAAO;AAAA,UAAiB;AAAA,UAAS,MAC/B,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,QAC1D;AAAA,MACF;AACA;AAAA,IACF;AAEA,aAAS,SAAS,cAAc,QAAQ;AACxC,WAAO,KAAK;AACZ,WAAO,QAAQ;AACf,WAAO,QAAQ;AACf,WAAO,MAAM;AACb,WAAO,SAAS,MAAM,QAAQ;AAC9B,WAAO,UAAU,MAAM,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAE/E,aAAS,KAAK,YAAY,MAAM;AAAA,EAClC,CAAC;AACH;AAGA,eAAsB,OAAO;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,uBAAuB;AAAA,EACvB,wBAAwB;AAC1B,GAAiC;AAC/B,QAAM,WAAW;AAEjB,SAAO,IAAI,QAAsB,CAAC,YAAY;AAC5C,QAAI,UAAU;AAEd,WAAO,OAAO,SAAS,GAAG,WAAW;AAAA,MACnC,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,CAAC,eAAe;AACxB,YAAI,QAAS;AACb,kBAAU;AACV,gBAAQ,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,MAC1C;AAAA,MACA,iBAAiB,CAAC,eAAe;AAC/B,YAAI,QAAS;AACb,kBAAU;AACV,gBAAQ,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,MAC1C;AAAA,IACF,CAAC;AAED,WAAO,OAAO,SAAS,GAAG,OAAO,CAAC,iBAAiB;AACjD,UAAI,QAAS;AAEb,UACE,aAAa,gBAAgB,KAC5B,aAAa,kBAAkB,KAC9B,aAAa,mBAAmB,MAAM,uBACxC;AACA,kBAAU;AACV,gBAAQ;AAAA,UACN,YAAY;AAAA,UACZ,QAAQ;AAAA,YACN,YAAY,aAAa,cAAc;AAAA,YACvC,SAAS,aAAa,gBAAgB;AAAA,YACtC,WAAW,aAAa,kBAAkB;AAAA,YAC1C,iBAAiB,aAAa,mBAAmB;AAAA,UACnD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/google-one-tap/index.ts"],"sourcesContent":["import type {\n  ClientConfigError,\n  CodeResponse,\n  CredentialResponse,\n  GoogleAccounts,\n  PromptMomentNotification,\n} from './types';\n\ndeclare global {\n  interface Window {\n    google: {\n      accounts: GoogleAccounts;\n    };\n  }\n}\n\nexport type Props = {\n  /**\n   * Opaque nonce string forwarded as-is to Google. Google echoes it back in\n   * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible\n   * for any hashing/encoding required by its verifier.\n   */\n  nonce?: string;\n  client_id: string;\n  auto_select?: boolean;\n  cancel_on_tap_outside?: boolean;\n  use_fedcm_for_prompt?: boolean;\n};\n\nexport type PromptMoment = {\n  skipped: boolean;\n  dismissed: boolean;\n  momentType: ReturnType<PromptMomentNotification['getMomentType']>;\n  dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;\n};\n\n/**\n * Why prompt() could not run One Tap, so the caller can decide to fall back\n * to requestCode().\n * - `fedcm_unsupported`: browser has no FedCM (Safari/Firefox/pre-117 Chrome).\n * - `script_load_failed`: the GSI script failed to load (network/CSP).\n * - `prompt_error`: GIS threw synchronously while initializing/prompting.\n */\nexport type UnsupportedReason = 'fedcm_unsupported' | 'script_load_failed' | 'prompt_error';\n\nexport type PromptResult =\n  | { authorized: true; credential: CredentialResponse }\n  | { authorized: false; moment: PromptMoment }\n  | { authorized: false; unsupported: true; reason: UnsupportedReason };\n\nlet script: HTMLScriptElement | null = null;\n\nfunction loadScript(): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (script) {\n      if (window.google?.accounts?.id) {\n        resolve();\n      } else {\n        script.addEventListener('load', () => resolve());\n        script.addEventListener('error', () =>\n          reject(new Error('Failed to load Google One Tap script'))\n        );\n      }\n      return;\n    }\n\n    script = document.createElement('script');\n    script.id = 'google-one-tap';\n    script.async = true;\n    script.defer = true;\n    script.src = 'https://accounts.google.com/gsi/client';\n    script.onload = () => resolve();\n    script.onerror = () => reject(new Error('Failed to load Google One Tap script'));\n\n    document.head.appendChild(script);\n  });\n}\n\n/** FedCM feature detection — `IdentityCredential` is absent on Safari, Firefox and pre-117 Chrome. */\nfunction isFedcmSupported(): boolean {\n  return typeof window !== 'undefined' && 'IdentityCredential' in window;\n}\n\n/** debug: chrome://settings/content/federatedIdentityApi */\nexport async function prompt({\n  nonce,\n  client_id,\n  auto_select = false,\n  use_fedcm_for_prompt = true,\n  cancel_on_tap_outside = false,\n}: Props): Promise<PromptResult> {\n  // FedCM is mandatory for One Tap on capable browsers (GIS completed the\n  // migration in early 2025) and there is no viable legacy fallback anymore.\n  // When the caller wants FedCM but the browser lacks it, bail early instead\n  // of letting GIS throw an async `NotSupportedError: Missing request type`\n  // from navigator.credentials.get. Callers should fall back to requestCode().\n  if (use_fedcm_for_prompt !== false && !isFedcmSupported()) {\n    return { authorized: false, unsupported: true, reason: 'fedcm_unsupported' };\n  }\n\n  try {\n    await loadScript();\n  } catch {\n    return { authorized: false, unsupported: true, reason: 'script_load_failed' };\n  }\n\n  return new Promise<PromptResult>((resolve) => {\n    let settled = false;\n    const settle = (result: PromptResult) => {\n      if (settled) return;\n      settled = true;\n      resolve(result);\n    };\n\n    try {\n      window.google.accounts.id.initialize({\n        ux_mode: 'popup',\n        context: 'signin',\n        auto_select,\n        nonce,\n        client_id,\n        use_fedcm_for_prompt,\n        cancel_on_tap_outside,\n        callback: (credential) => settle({ authorized: true, credential }),\n        native_callback: (credential) => settle({ authorized: true, credential }),\n      });\n\n      window.google.accounts.id.prompt((notification) => {\n        if (settled) return;\n\n        if (\n          notification.isSkippedMoment() ||\n          (notification.isDismissedMoment() &&\n            notification.getDismissedReason() !== 'credential_returned')\n        ) {\n          settle({\n            authorized: false,\n            moment: {\n              momentType: notification.getMomentType(),\n              skipped: notification.isSkippedMoment(),\n              dismissed: notification.isDismissedMoment(),\n              dismissedReason: notification.getDismissedReason(),\n            },\n          });\n        }\n      });\n    } catch {\n      settle({ authorized: false, unsupported: true, reason: 'prompt_error' });\n    }\n  });\n}\n\nexport type CodeProps = {\n  client_id: string;\n  /**\n   * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the\n   * backend can exchange the code for an ID token, mirroring One Tap's intent.\n   */\n  scope?: string;\n  /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */\n  ux_mode?: 'popup' | 'redirect';\n  /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */\n  redirect_uri?: string;\n  state?: string;\n  login_hint?: string;\n  hd?: string;\n};\n\nexport type CodeResult =\n  | { ok: true; response: CodeResponse }\n  | { ok: false; error: ClientConfigError | CodeResponse };\n\n/**\n * OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM\n * is unavailable (i.e. prompt() resolved with `unsupported: true`). It reuses\n * the same GSI script, so there is no extra dependency.\n *\n * Unlike One Tap it returns an authorization `code` for the backend to\n * exchange, not an ID token, and it must be triggered by a user gesture or the\n * popup may be blocked.\n */\nexport async function requestCode({\n  client_id,\n  scope = 'openid email profile',\n  ux_mode = 'popup',\n  redirect_uri,\n  state,\n  login_hint,\n  hd,\n}: CodeProps): Promise<CodeResult> {\n  await loadScript();\n\n  return new Promise<CodeResult>((resolve) => {\n    let settled = false;\n    const settle = (result: CodeResult) => {\n      if (settled) return;\n      settled = true;\n      resolve(result);\n    };\n\n    const client = window.google.accounts.oauth2.initCodeClient({\n      client_id,\n      scope,\n      ux_mode,\n      redirect_uri,\n      state,\n      login_hint,\n      hd,\n      callback: (response) =>\n        settle(response.code ? { ok: true, response } : { ok: false, error: response }),\n      error_callback: (error) => settle({ ok: false, error }),\n    });\n\n    client.requestCode();\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkDA,IAAI,SAAmC;AAEvC,SAAS,aAA4B;AACnC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,QAAQ;AACV,UAAI,OAAO,QAAQ,UAAU,IAAI;AAC/B,gBAAQ;AAAA,MACV,OAAO;AACL,eAAO,iBAAiB,QAAQ,MAAM,QAAQ,CAAC;AAC/C,eAAO;AAAA,UAAiB;AAAA,UAAS,MAC/B,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,QAC1D;AAAA,MACF;AACA;AAAA,IACF;AAEA,aAAS,SAAS,cAAc,QAAQ;AACxC,WAAO,KAAK;AACZ,WAAO,QAAQ;AACf,WAAO,QAAQ;AACf,WAAO,MAAM;AACb,WAAO,SAAS,MAAM,QAAQ;AAC9B,WAAO,UAAU,MAAM,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAE/E,aAAS,KAAK,YAAY,MAAM;AAAA,EAClC,CAAC;AACH;AAGA,SAAS,mBAA4B;AACnC,SAAO,OAAO,WAAW,eAAe,wBAAwB;AAClE;AAGA,eAAsB,OAAO;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,uBAAuB;AAAA,EACvB,wBAAwB;AAC1B,GAAiC;AAM/B,MAAI,yBAAyB,SAAS,CAAC,iBAAiB,GAAG;AACzD,WAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,oBAAoB;AAAA,EAC7E;AAEA,MAAI;AACF,UAAM,WAAW;AAAA,EACnB,QAAQ;AACN,WAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,qBAAqB;AAAA,EAC9E;AAEA,SAAO,IAAI,QAAsB,CAAC,YAAY;AAC5C,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAAyB;AACvC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ,MAAM;AAAA,IAChB;AAEA,QAAI;AACF,aAAO,OAAO,SAAS,GAAG,WAAW;AAAA,QACnC,SAAS;AAAA,QACT,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,CAAC,eAAe,OAAO,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,QACjE,iBAAiB,CAAC,eAAe,OAAO,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,MAC1E,CAAC;AAED,aAAO,OAAO,SAAS,GAAG,OAAO,CAAC,iBAAiB;AACjD,YAAI,QAAS;AAEb,YACE,aAAa,gBAAgB,KAC5B,aAAa,kBAAkB,KAC9B,aAAa,mBAAmB,MAAM,uBACxC;AACA,iBAAO;AAAA,YACL,YAAY;AAAA,YACZ,QAAQ;AAAA,cACN,YAAY,aAAa,cAAc;AAAA,cACvC,SAAS,aAAa,gBAAgB;AAAA,cACtC,WAAW,aAAa,kBAAkB;AAAA,cAC1C,iBAAiB,aAAa,mBAAmB;AAAA,YACnD;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,aAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,eAAe,CAAC;AAAA,IACzE;AAAA,EACF,CAAC;AACH;AA+BA,eAAsB,YAAY;AAAA,EAChC;AAAA,EACA,QAAQ;AAAA,EACR,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAmC;AACjC,QAAM,WAAW;AAEjB,SAAO,IAAI,QAAoB,CAAC,YAAY;AAC1C,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAAuB;AACrC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ,MAAM;AAAA,IAChB;AAEA,UAAM,SAAS,OAAO,OAAO,SAAS,OAAO,eAAe;AAAA,MAC1D;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,CAAC,aACT,OAAO,SAAS,OAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,OAAO,SAAS,CAAC;AAAA,MAChF,gBAAgB,CAAC,UAAU,OAAO,EAAE,IAAI,OAAO,MAAM,CAAC;AAAA,IACxD,CAAC;AAED,WAAO,YAAY;AAAA,EACrB,CAAC;AACH;","names":[]}

package/dist/google-one-tap/index.d.cts

@@ -1,4 +1,4 @@
-import { GoogleAccounts, PromptMomentNotification, CredentialResponse } from './types.cjs';
+import { GoogleAccounts, PromptMomentNotification, CredentialResponse, CodeResponse, ClientConfigError } from './types.cjs';
 
 declare global {
     interface Window {
@@ -25,14 +25,58 @@ type PromptMoment = {
     momentType: ReturnType<PromptMomentNotification['getMomentType']>;
     dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;
 };
+/**
+ * Why prompt() could not run One Tap, so the caller can decide to fall back
+ * to requestCode().
+ * - `fedcm_unsupported`: browser has no FedCM (Safari/Firefox/pre-117 Chrome).
+ * - `script_load_failed`: the GSI script failed to load (network/CSP).
+ * - `prompt_error`: GIS threw synchronously while initializing/prompting.
+ */
+type UnsupportedReason = 'fedcm_unsupported' | 'script_load_failed' | 'prompt_error';
 type PromptResult = {
     authorized: true;
     credential: CredentialResponse;
 } | {
     authorized: false;
     moment: PromptMoment;
+} | {
+    authorized: false;
+    unsupported: true;
+    reason: UnsupportedReason;
 };
 /** debug: chrome://settings/content/federatedIdentityApi */
 declare function prompt({ nonce, client_id, auto_select, use_fedcm_for_prompt, cancel_on_tap_outside, }: Props): Promise<PromptResult>;
+type CodeProps = {
+    client_id: string;
+    /**
+     * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the
+     * backend can exchange the code for an ID token, mirroring One Tap's intent.
+     */
+    scope?: string;
+    /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */
+    ux_mode?: 'popup' | 'redirect';
+    /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */
+    redirect_uri?: string;
+    state?: string;
+    login_hint?: string;
+    hd?: string;
+};
+type CodeResult = {
+    ok: true;
+    response: CodeResponse;
+} | {
+    ok: false;
+    error: ClientConfigError | CodeResponse;
+};
+/**
+ * OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM
+ * is unavailable (i.e. prompt() resolved with `unsupported: true`). It reuses
+ * the same GSI script, so there is no extra dependency.
+ *
+ * Unlike One Tap it returns an authorization `code` for the backend to
+ * exchange, not an ID token, and it must be triggered by a user gesture or the
+ * popup may be blocked.
+ */
+declare function requestCode({ client_id, scope, ux_mode, redirect_uri, state, login_hint, hd, }: CodeProps): Promise<CodeResult>;
 
-export { type PromptMoment, type PromptResult, type Props, prompt };
+export { type CodeProps, type CodeResult, type PromptMoment, type PromptResult, type Props, type UnsupportedReason, prompt, requestCode };

package/dist/google-one-tap/index.d.ts

@@ -1,4 +1,4 @@
-import { GoogleAccounts, PromptMomentNotification, CredentialResponse } from './types.js';
+import { GoogleAccounts, PromptMomentNotification, CredentialResponse, CodeResponse, ClientConfigError } from './types.js';
 
 declare global {
     interface Window {
@@ -25,14 +25,58 @@ type PromptMoment = {
     momentType: ReturnType<PromptMomentNotification['getMomentType']>;
     dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;
 };
+/**
+ * Why prompt() could not run One Tap, so the caller can decide to fall back
+ * to requestCode().
+ * - `fedcm_unsupported`: browser has no FedCM (Safari/Firefox/pre-117 Chrome).
+ * - `script_load_failed`: the GSI script failed to load (network/CSP).
+ * - `prompt_error`: GIS threw synchronously while initializing/prompting.
+ */
+type UnsupportedReason = 'fedcm_unsupported' | 'script_load_failed' | 'prompt_error';
 type PromptResult = {
     authorized: true;
     credential: CredentialResponse;
 } | {
     authorized: false;
     moment: PromptMoment;
+} | {
+    authorized: false;
+    unsupported: true;
+    reason: UnsupportedReason;
 };
 /** debug: chrome://settings/content/federatedIdentityApi */
 declare function prompt({ nonce, client_id, auto_select, use_fedcm_for_prompt, cancel_on_tap_outside, }: Props): Promise<PromptResult>;
+type CodeProps = {
+    client_id: string;
+    /**
+     * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the
+     * backend can exchange the code for an ID token, mirroring One Tap's intent.
+     */
+    scope?: string;
+    /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */
+    ux_mode?: 'popup' | 'redirect';
+    /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */
+    redirect_uri?: string;
+    state?: string;
+    login_hint?: string;
+    hd?: string;
+};
+type CodeResult = {
+    ok: true;
+    response: CodeResponse;
+} | {
+    ok: false;
+    error: ClientConfigError | CodeResponse;
+};
+/**
+ * OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM
+ * is unavailable (i.e. prompt() resolved with `unsupported: true`). It reuses
+ * the same GSI script, so there is no extra dependency.
+ *
+ * Unlike One Tap it returns an authorization `code` for the backend to
+ * exchange, not an ID token, and it must be triggered by a user gesture or the
+ * popup may be blocked.
+ */
+declare function requestCode({ client_id, scope, ux_mode, redirect_uri, state, login_hint, hd, }: CodeProps): Promise<CodeResult>;
 
-export { type PromptMoment, type PromptResult, type Props, prompt };
+export { type CodeProps, type CodeResult, type PromptMoment, type PromptResult, type Props, type UnsupportedReason, prompt, requestCode };

package/dist/google-one-tap/index.mjs

@@ -24,6 +24,9 @@ function loadScript() {
     document.head.appendChild(script);
   });
 }
+function isFedcmSupported() {
+  return typeof window !== "undefined" && "IdentityCredential" in window;
+}
 async function prompt({
   nonce,
   client_id,
@@ -31,46 +34,85 @@ async function prompt({
   use_fedcm_for_prompt = true,
   cancel_on_tap_outside = false
 }) {
-  await loadScript();
+  if (use_fedcm_for_prompt !== false && !isFedcmSupported()) {
+    return { authorized: false, unsupported: true, reason: "fedcm_unsupported" };
+  }
+  try {
+    await loadScript();
+  } catch {
+    return { authorized: false, unsupported: true, reason: "script_load_failed" };
+  }
   return new Promise((resolve) => {
     let settled = false;
-    window.google.accounts.id.initialize({
-      ux_mode: "popup",
-      context: "signin",
-      auto_select,
-      nonce,
-      client_id,
-      use_fedcm_for_prompt,
-      cancel_on_tap_outside,
-      callback: (credential) => {
-        if (settled) return;
-        settled = true;
-        resolve({ authorized: true, credential });
-      },
-      native_callback: (credential) => {
+    const settle = (result) => {
+      if (settled) return;
+      settled = true;
+      resolve(result);
+    };
+    try {
+      window.google.accounts.id.initialize({
+        ux_mode: "popup",
+        context: "signin",
+        auto_select,
+        nonce,
+        client_id,
+        use_fedcm_for_prompt,
+        cancel_on_tap_outside,
+        callback: (credential) => settle({ authorized: true, credential }),
+        native_callback: (credential) => settle({ authorized: true, credential })
+      });
+      window.google.accounts.id.prompt((notification) => {
         if (settled) return;
-        settled = true;
-        resolve({ authorized: true, credential });
-      }
-    });
-    window.google.accounts.id.prompt((notification) => {
+        if (notification.isSkippedMoment() || notification.isDismissedMoment() && notification.getDismissedReason() !== "credential_returned") {
+          settle({
+            authorized: false,
+            moment: {
+              momentType: notification.getMomentType(),
+              skipped: notification.isSkippedMoment(),
+              dismissed: notification.isDismissedMoment(),
+              dismissedReason: notification.getDismissedReason()
+            }
+          });
+        }
+      });
+    } catch {
+      settle({ authorized: false, unsupported: true, reason: "prompt_error" });
+    }
+  });
+}
+async function requestCode({
+  client_id,
+  scope = "openid email profile",
+  ux_mode = "popup",
+  redirect_uri,
+  state,
+  login_hint,
+  hd
+}) {
+  await loadScript();
+  return new Promise((resolve) => {
+    let settled = false;
+    const settle = (result) => {
       if (settled) return;
-      if (notification.isSkippedMoment() || notification.isDismissedMoment() && notification.getDismissedReason() !== "credential_returned") {
-        settled = true;
-        resolve({
-          authorized: false,
-          moment: {
-            momentType: notification.getMomentType(),
-            skipped: notification.isSkippedMoment(),
-            dismissed: notification.isDismissedMoment(),
-            dismissedReason: notification.getDismissedReason()
-          }
-        });
-      }
+      settled = true;
+      resolve(result);
+    };
+    const client = window.google.accounts.oauth2.initCodeClient({
+      client_id,
+      scope,
+      ux_mode,
+      redirect_uri,
+      state,
+      login_hint,
+      hd,
+      callback: (response) => settle(response.code ? { ok: true, response } : { ok: false, error: response }),
+      error_callback: (error) => settle({ ok: false, error })
     });
+    client.requestCode();
   });
 }
 export {
-  prompt
+  prompt,
+  requestCode
 };
 //# sourceMappingURL=index.mjs.map

package/dist/google-one-tap/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/google-one-tap/index.ts"],"sourcesContent":["import type { CredentialResponse, GoogleAccounts, PromptMomentNotification } from './types';\n\ndeclare global {\n  interface Window {\n    google: {\n      accounts: GoogleAccounts;\n    };\n  }\n}\n\nexport type Props = {\n  /**\n   * Opaque nonce string forwarded as-is to Google. Google echoes it back in\n   * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible\n   * for any hashing/encoding required by its verifier.\n   */\n  nonce?: string;\n  client_id: string;\n  auto_select?: boolean;\n  cancel_on_tap_outside?: boolean;\n  use_fedcm_for_prompt?: boolean;\n};\n\nexport type PromptMoment = {\n  skipped: boolean;\n  dismissed: boolean;\n  momentType: ReturnType<PromptMomentNotification['getMomentType']>;\n  dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;\n};\n\nexport type PromptResult =\n  | { authorized: true; credential: CredentialResponse }\n  | { authorized: false; moment: PromptMoment };\n\nlet script: HTMLScriptElement | null = null;\n\nfunction loadScript(): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (script) {\n      if (window.google?.accounts?.id) {\n        resolve();\n      } else {\n        script.addEventListener('load', () => resolve());\n        script.addEventListener('error', () =>\n          reject(new Error('Failed to load Google One Tap script'))\n        );\n      }\n      return;\n    }\n\n    script = document.createElement('script');\n    script.id = 'google-one-tap';\n    script.async = true;\n    script.defer = true;\n    script.src = 'https://accounts.google.com/gsi/client';\n    script.onload = () => resolve();\n    script.onerror = () => reject(new Error('Failed to load Google One Tap script'));\n\n    document.head.appendChild(script);\n  });\n}\n\n/** debug: chrome://settings/content/federatedIdentityApi */\nexport async function prompt({\n  nonce,\n  client_id,\n  auto_select = false,\n  use_fedcm_for_prompt = true,\n  cancel_on_tap_outside = false,\n}: Props): Promise<PromptResult> {\n  await loadScript();\n\n  return new Promise<PromptResult>((resolve) => {\n    let settled = false;\n\n    window.google.accounts.id.initialize({\n      ux_mode: 'popup',\n      context: 'signin',\n      auto_select,\n      nonce,\n      client_id,\n      use_fedcm_for_prompt,\n      cancel_on_tap_outside,\n      callback: (credential) => {\n        if (settled) return;\n        settled = true;\n        resolve({ authorized: true, credential });\n      },\n      native_callback: (credential) => {\n        if (settled) return;\n        settled = true;\n        resolve({ authorized: true, credential });\n      },\n    });\n\n    window.google.accounts.id.prompt((notification) => {\n      if (settled) return;\n\n      if (\n        notification.isSkippedMoment() ||\n        (notification.isDismissedMoment() &&\n          notification.getDismissedReason() !== 'credential_returned')\n      ) {\n        settled = true;\n        resolve({\n          authorized: false,\n          moment: {\n            momentType: notification.getMomentType(),\n            skipped: notification.isSkippedMoment(),\n            dismissed: notification.isDismissedMoment(),\n            dismissedReason: notification.getDismissedReason(),\n          },\n        });\n      }\n    });\n  });\n}\n"],"mappings":";AAkCA,IAAI,SAAmC;AAEvC,SAAS,aAA4B;AACnC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,QAAQ;AACV,UAAI,OAAO,QAAQ,UAAU,IAAI;AAC/B,gBAAQ;AAAA,MACV,OAAO;AACL,eAAO,iBAAiB,QAAQ,MAAM,QAAQ,CAAC;AAC/C,eAAO;AAAA,UAAiB;AAAA,UAAS,MAC/B,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,QAC1D;AAAA,MACF;AACA;AAAA,IACF;AAEA,aAAS,SAAS,cAAc,QAAQ;AACxC,WAAO,KAAK;AACZ,WAAO,QAAQ;AACf,WAAO,QAAQ;AACf,WAAO,MAAM;AACb,WAAO,SAAS,MAAM,QAAQ;AAC9B,WAAO,UAAU,MAAM,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAE/E,aAAS,KAAK,YAAY,MAAM;AAAA,EAClC,CAAC;AACH;AAGA,eAAsB,OAAO;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,uBAAuB;AAAA,EACvB,wBAAwB;AAC1B,GAAiC;AAC/B,QAAM,WAAW;AAEjB,SAAO,IAAI,QAAsB,CAAC,YAAY;AAC5C,QAAI,UAAU;AAEd,WAAO,OAAO,SAAS,GAAG,WAAW;AAAA,MACnC,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,CAAC,eAAe;AACxB,YAAI,QAAS;AACb,kBAAU;AACV,gBAAQ,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,MAC1C;AAAA,MACA,iBAAiB,CAAC,eAAe;AAC/B,YAAI,QAAS;AACb,kBAAU;AACV,gBAAQ,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,MAC1C;AAAA,IACF,CAAC;AAED,WAAO,OAAO,SAAS,GAAG,OAAO,CAAC,iBAAiB;AACjD,UAAI,QAAS;AAEb,UACE,aAAa,gBAAgB,KAC5B,aAAa,kBAAkB,KAC9B,aAAa,mBAAmB,MAAM,uBACxC;AACA,kBAAU;AACV,gBAAQ;AAAA,UACN,YAAY;AAAA,UACZ,QAAQ;AAAA,YACN,YAAY,aAAa,cAAc;AAAA,YACvC,SAAS,aAAa,gBAAgB;AAAA,YACtC,WAAW,aAAa,kBAAkB;AAAA,YAC1C,iBAAiB,aAAa,mBAAmB;AAAA,UACnD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/google-one-tap/index.ts"],"sourcesContent":["import type {\n  ClientConfigError,\n  CodeResponse,\n  CredentialResponse,\n  GoogleAccounts,\n  PromptMomentNotification,\n} from './types';\n\ndeclare global {\n  interface Window {\n    google: {\n      accounts: GoogleAccounts;\n    };\n  }\n}\n\nexport type Props = {\n  /**\n   * Opaque nonce string forwarded as-is to Google. Google echoes it back in\n   * the ID Token's `nonce` claim per the OIDC spec; the caller is responsible\n   * for any hashing/encoding required by its verifier.\n   */\n  nonce?: string;\n  client_id: string;\n  auto_select?: boolean;\n  cancel_on_tap_outside?: boolean;\n  use_fedcm_for_prompt?: boolean;\n};\n\nexport type PromptMoment = {\n  skipped: boolean;\n  dismissed: boolean;\n  momentType: ReturnType<PromptMomentNotification['getMomentType']>;\n  dismissedReason: ReturnType<PromptMomentNotification['getDismissedReason']>;\n};\n\n/**\n * Why prompt() could not run One Tap, so the caller can decide to fall back\n * to requestCode().\n * - `fedcm_unsupported`: browser has no FedCM (Safari/Firefox/pre-117 Chrome).\n * - `script_load_failed`: the GSI script failed to load (network/CSP).\n * - `prompt_error`: GIS threw synchronously while initializing/prompting.\n */\nexport type UnsupportedReason = 'fedcm_unsupported' | 'script_load_failed' | 'prompt_error';\n\nexport type PromptResult =\n  | { authorized: true; credential: CredentialResponse }\n  | { authorized: false; moment: PromptMoment }\n  | { authorized: false; unsupported: true; reason: UnsupportedReason };\n\nlet script: HTMLScriptElement | null = null;\n\nfunction loadScript(): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (script) {\n      if (window.google?.accounts?.id) {\n        resolve();\n      } else {\n        script.addEventListener('load', () => resolve());\n        script.addEventListener('error', () =>\n          reject(new Error('Failed to load Google One Tap script'))\n        );\n      }\n      return;\n    }\n\n    script = document.createElement('script');\n    script.id = 'google-one-tap';\n    script.async = true;\n    script.defer = true;\n    script.src = 'https://accounts.google.com/gsi/client';\n    script.onload = () => resolve();\n    script.onerror = () => reject(new Error('Failed to load Google One Tap script'));\n\n    document.head.appendChild(script);\n  });\n}\n\n/** FedCM feature detection — `IdentityCredential` is absent on Safari, Firefox and pre-117 Chrome. */\nfunction isFedcmSupported(): boolean {\n  return typeof window !== 'undefined' && 'IdentityCredential' in window;\n}\n\n/** debug: chrome://settings/content/federatedIdentityApi */\nexport async function prompt({\n  nonce,\n  client_id,\n  auto_select = false,\n  use_fedcm_for_prompt = true,\n  cancel_on_tap_outside = false,\n}: Props): Promise<PromptResult> {\n  // FedCM is mandatory for One Tap on capable browsers (GIS completed the\n  // migration in early 2025) and there is no viable legacy fallback anymore.\n  // When the caller wants FedCM but the browser lacks it, bail early instead\n  // of letting GIS throw an async `NotSupportedError: Missing request type`\n  // from navigator.credentials.get. Callers should fall back to requestCode().\n  if (use_fedcm_for_prompt !== false && !isFedcmSupported()) {\n    return { authorized: false, unsupported: true, reason: 'fedcm_unsupported' };\n  }\n\n  try {\n    await loadScript();\n  } catch {\n    return { authorized: false, unsupported: true, reason: 'script_load_failed' };\n  }\n\n  return new Promise<PromptResult>((resolve) => {\n    let settled = false;\n    const settle = (result: PromptResult) => {\n      if (settled) return;\n      settled = true;\n      resolve(result);\n    };\n\n    try {\n      window.google.accounts.id.initialize({\n        ux_mode: 'popup',\n        context: 'signin',\n        auto_select,\n        nonce,\n        client_id,\n        use_fedcm_for_prompt,\n        cancel_on_tap_outside,\n        callback: (credential) => settle({ authorized: true, credential }),\n        native_callback: (credential) => settle({ authorized: true, credential }),\n      });\n\n      window.google.accounts.id.prompt((notification) => {\n        if (settled) return;\n\n        if (\n          notification.isSkippedMoment() ||\n          (notification.isDismissedMoment() &&\n            notification.getDismissedReason() !== 'credential_returned')\n        ) {\n          settle({\n            authorized: false,\n            moment: {\n              momentType: notification.getMomentType(),\n              skipped: notification.isSkippedMoment(),\n              dismissed: notification.isDismissedMoment(),\n              dismissedReason: notification.getDismissedReason(),\n            },\n          });\n        }\n      });\n    } catch {\n      settle({ authorized: false, unsupported: true, reason: 'prompt_error' });\n    }\n  });\n}\n\nexport type CodeProps = {\n  client_id: string;\n  /**\n   * Space-delimited OAuth scopes. Defaults to OpenID Connect scopes so the\n   * backend can exchange the code for an ID token, mirroring One Tap's intent.\n   */\n  scope?: string;\n  /** 'popup' resolves the returned promise; 'redirect' navigates away and never resolves. */\n  ux_mode?: 'popup' | 'redirect';\n  /** Required when ux_mode is 'redirect'; for 'popup' Google uses postMessage. */\n  redirect_uri?: string;\n  state?: string;\n  login_hint?: string;\n  hd?: string;\n};\n\nexport type CodeResult =\n  | { ok: true; response: CodeResponse }\n  | { ok: false; error: ClientConfigError | CodeResponse };\n\n/**\n * OAuth 2.0 authorization-code fallback for environments where One Tap / FedCM\n * is unavailable (i.e. prompt() resolved with `unsupported: true`). It reuses\n * the same GSI script, so there is no extra dependency.\n *\n * Unlike One Tap it returns an authorization `code` for the backend to\n * exchange, not an ID token, and it must be triggered by a user gesture or the\n * popup may be blocked.\n */\nexport async function requestCode({\n  client_id,\n  scope = 'openid email profile',\n  ux_mode = 'popup',\n  redirect_uri,\n  state,\n  login_hint,\n  hd,\n}: CodeProps): Promise<CodeResult> {\n  await loadScript();\n\n  return new Promise<CodeResult>((resolve) => {\n    let settled = false;\n    const settle = (result: CodeResult) => {\n      if (settled) return;\n      settled = true;\n      resolve(result);\n    };\n\n    const client = window.google.accounts.oauth2.initCodeClient({\n      client_id,\n      scope,\n      ux_mode,\n      redirect_uri,\n      state,\n      login_hint,\n      hd,\n      callback: (response) =>\n        settle(response.code ? { ok: true, response } : { ok: false, error: response }),\n      error_callback: (error) => settle({ ok: false, error }),\n    });\n\n    client.requestCode();\n  });\n}\n"],"mappings":";AAkDA,IAAI,SAAmC;AAEvC,SAAS,aAA4B;AACnC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,QAAQ;AACV,UAAI,OAAO,QAAQ,UAAU,IAAI;AAC/B,gBAAQ;AAAA,MACV,OAAO;AACL,eAAO,iBAAiB,QAAQ,MAAM,QAAQ,CAAC;AAC/C,eAAO;AAAA,UAAiB;AAAA,UAAS,MAC/B,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,QAC1D;AAAA,MACF;AACA;AAAA,IACF;AAEA,aAAS,SAAS,cAAc,QAAQ;AACxC,WAAO,KAAK;AACZ,WAAO,QAAQ;AACf,WAAO,QAAQ;AACf,WAAO,MAAM;AACb,WAAO,SAAS,MAAM,QAAQ;AAC9B,WAAO,UAAU,MAAM,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAE/E,aAAS,KAAK,YAAY,MAAM;AAAA,EAClC,CAAC;AACH;AAGA,SAAS,mBAA4B;AACnC,SAAO,OAAO,WAAW,eAAe,wBAAwB;AAClE;AAGA,eAAsB,OAAO;AAAA,EAC3B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,uBAAuB;AAAA,EACvB,wBAAwB;AAC1B,GAAiC;AAM/B,MAAI,yBAAyB,SAAS,CAAC,iBAAiB,GAAG;AACzD,WAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,oBAAoB;AAAA,EAC7E;AAEA,MAAI;AACF,UAAM,WAAW;AAAA,EACnB,QAAQ;AACN,WAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,qBAAqB;AAAA,EAC9E;AAEA,SAAO,IAAI,QAAsB,CAAC,YAAY;AAC5C,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAAyB;AACvC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ,MAAM;AAAA,IAChB;AAEA,QAAI;AACF,aAAO,OAAO,SAAS,GAAG,WAAW;AAAA,QACnC,SAAS;AAAA,QACT,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,CAAC,eAAe,OAAO,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,QACjE,iBAAiB,CAAC,eAAe,OAAO,EAAE,YAAY,MAAM,WAAW,CAAC;AAAA,MAC1E,CAAC;AAED,aAAO,OAAO,SAAS,GAAG,OAAO,CAAC,iBAAiB;AACjD,YAAI,QAAS;AAEb,YACE,aAAa,gBAAgB,KAC5B,aAAa,kBAAkB,KAC9B,aAAa,mBAAmB,MAAM,uBACxC;AACA,iBAAO;AAAA,YACL,YAAY;AAAA,YACZ,QAAQ;AAAA,cACN,YAAY,aAAa,cAAc;AAAA,cACvC,SAAS,aAAa,gBAAgB;AAAA,cACtC,WAAW,aAAa,kBAAkB;AAAA,cAC1C,iBAAiB,aAAa,mBAAmB;AAAA,YACnD;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AACN,aAAO,EAAE,YAAY,OAAO,aAAa,MAAM,QAAQ,eAAe,CAAC;AAAA,IACzE;AAAA,EACF,CAAC;AACH;AA+BA,eAAsB,YAAY;AAAA,EAChC;AAAA,EACA,QAAQ;AAAA,EACR,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAmC;AACjC,QAAM,WAAW;AAEjB,SAAO,IAAI,QAAoB,CAAC,YAAY;AAC1C,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAAuB;AACrC,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ,MAAM;AAAA,IAChB;AAEA,UAAM,SAAS,OAAO,OAAO,SAAS,OAAO,eAAe;AAAA,MAC1D;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,CAAC,aACT,OAAO,SAAS,OAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,OAAO,SAAS,CAAC;AAAA,MAChF,gBAAgB,CAAC,UAAU,OAAO,EAAE,IAAI,OAAO,MAAM,CAAC;AAAA,IACxD,CAAC;AAED,WAAO,YAAY;AAAA,EACrB,CAAC;AACH;","names":[]}

package/dist/google-one-tap/types.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/google-one-tap/types.ts"],"sourcesContent":["interface ClientConfigError extends Error {\n  message: string;\n  stack?: string;\n  type: 'unknown' | 'popup_closed' | 'popup_failed_to_open';\n}\n\ninterface OverridableTokenClientConfig {\n  scope?: string;\n  include_granted_scopes?: boolean;\n  prompt?: string;\n  enable_granular_consent?: boolean;\n  enable_serial_consent?: boolean;\n  login_hint?: string;\n  hint?: string;\n  state?: string;\n}\n\ninterface TokenClient {\n  requestAccessToken: (overrideConfig?: OverridableTokenClientConfig) => void;\n}\n\ninterface CodeClient {\n  requestCode: () => void;\n}\n\ninterface TokenResponse {\n  access_token: string;\n  expires_in: string;\n  hd: string;\n  prompt: string;\n  token_type: string;\n  scope: string;\n  state: string;\n  error: string;\n  error_description: string;\n  error_uri: string;\n}\n\ninterface CodeResponse {\n  code: string;\n  scope: string;\n  state: string;\n  error: string;\n  error_description: string;\n  error_uri: string;\n}\n\ninterface TokenClientConfig {\n  client_id: string;\n  scope: string;\n  include_granted_scopes?: boolean;\n  prompt?: '' | 'none' | 'consent' | 'select_account';\n  enable_granular_consent?: boolean;\n  enable_serial_consent?: boolean;\n  login_hint?: string;\n  hint?: string;\n  hd?: string;\n  hosted_domain?: string;\n  state?: string;\n  callback: (tokenResponse: TokenResponse) => void;\n  error_callback?: (error: ClientConfigError) => void;\n}\n\ninterface CodeClientConfig {\n  client_id: string;\n  scope: string;\n  include_granted_scopes?: boolean;\n  redirect_uri?: string;\n  state?: string;\n  enable_granular_consent?: boolean;\n  enable_serial_consent?: boolean;\n  login_hint?: string;\n  hint?: string;\n  hd?: string;\n  hosted_domain?: string;\n  ux_mode?: 'popup' | 'redirect';\n  select_account?: boolean;\n  callback?: (response: CodeResponse) => void;\n  error_callback?: (error: ClientConfigError) => void;\n}\n\ninterface RevocationResponse {\n  successful: boolean;\n  error?: string;\n}\n\ninterface Credential {\n  id: string;\n  password: string;\n}\n\nexport interface CredentialResponse {\n  credential: string;\n  select_by: string;\n}\n\nexport interface IdConfiguration {\n  client_id: string;\n  auto_select?: boolean;\n  login_uri?: string;\n  cancel_on_tap_outside?: boolean;\n  prompt_parent_id?: string;\n  nonce?: string;\n  context?: 'signin' | 'signup' | 'use';\n  state_cookie_domain?: string;\n  ux_mode?: 'popup' | 'redirect';\n  allowed_parent_origin?: string | string[];\n  itp_support?: boolean;\n  login_hint?: string;\n  hd?: string;\n  use_fedcm_for_prompt?: boolean;\n  callback?: (response: CredentialResponse) => void;\n  native_callback?: (response: CredentialResponse) => void;\n  intermediate_iframe_close_callback?: () => void;\n}\n/**\n * ref: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc&utm_source=devtools&utm_campaign=stable#display_moment\n */\nexport interface PromptMomentNotification {\n  /** @deprecated */\n  isDisplayMoment(): boolean;\n\n  /** @deprecated */\n  isDisplayed(): boolean;\n\n  /** @deprecated */\n  isNotDisplayed(): boolean;\n\n  /** @deprecated */\n  getNotDisplayedReason():\n    | 'browser_not_supported'\n    | 'invalid_client'\n    | 'missing_client_id'\n    | 'opt_out_or_no_session'\n    | 'secure_http_required'\n    | 'suppressed_by_user'\n    | 'unregistered_origin'\n    | 'unknown_reason';\n\n  /** @deprecated */\n  getSkippedReason(): 'auto_cancel' | 'user_cancel' | 'tap_outside' | 'issuing_failed';\n\n  isSkippedMoment(): boolean;\n  isDismissedMoment(): boolean;\n  getDismissedReason(): 'credential_returned' | 'cancel_called' | 'flow_restarted';\n  getMomentType(): 'display' | 'skipped' | 'dismissed';\n}\n\ninterface GsiButtonConfiguration {\n  type: 'standard' | 'icon';\n  theme?: 'outline' | 'filled_blue' | 'filled_black';\n  size?: 'small' | 'medium' | 'large';\n  text?: 'signin_with' | 'signup_with' | 'continue_with' | 'signin';\n  shape?: 'rectangular' | 'pill' | 'circle' | 'square';\n  logo_alignment?: 'left' | 'center';\n  width?: number;\n  locale?: string;\n  state?: string;\n  click_listener?: () => void;\n}\n\nexport interface GoogleAccounts {\n  oauth2: {\n    initCodeClient(config: CodeClientConfig): CodeClient;\n    initTokenClient(config: TokenClientConfig): TokenClient;\n    hasGrantedAllScopes(\n      tokenResponse: TokenResponse,\n      firstScope: string,\n      ...restScopes: string[]\n    ): boolean;\n    hasGrantedAnyScope(\n      tokenResponse: TokenResponse,\n      firstScope: string,\n      ...restScopes: string[]\n    ): boolean;\n    revoke(accessToken: string, done: () => void): void;\n  };\n  id: {\n    initialize(idConfig: IdConfiguration): void;\n    prompt(momentListener?: (promptMomentNotification: PromptMomentNotification) => void): void;\n    renderButton(parent: HTMLElement, options: GsiButtonConfiguration): void;\n    disableAutoSelect(): void;\n    storeCredential(credential: Credential, callback?: () => void): void;\n    cancel(): void;\n    revoke(hint: string, callback?: (response: RevocationResponse) => void): void;\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}
+{"version":3,"sources":["../../src/google-one-tap/types.ts"],"sourcesContent":["export interface ClientConfigError extends Error {\n  message: string;\n  stack?: string;\n  type: 'unknown' | 'popup_closed' | 'popup_failed_to_open';\n}\n\ninterface OverridableTokenClientConfig {\n  scope?: string;\n  include_granted_scopes?: boolean;\n  prompt?: string;\n  enable_granular_consent?: boolean;\n  enable_serial_consent?: boolean;\n  login_hint?: string;\n  hint?: string;\n  state?: string;\n}\n\ninterface TokenClient {\n  requestAccessToken: (overrideConfig?: OverridableTokenClientConfig) => void;\n}\n\ninterface CodeClient {\n  requestCode: () => void;\n}\n\ninterface TokenResponse {\n  access_token: string;\n  expires_in: string;\n  hd: string;\n  prompt: string;\n  token_type: string;\n  scope: string;\n  state: string;\n  error: string;\n  error_description: string;\n  error_uri: string;\n}\n\nexport interface CodeResponse {\n  code: string;\n  scope: string;\n  state: string;\n  error: string;\n  error_description: string;\n  error_uri: string;\n}\n\ninterface TokenClientConfig {\n  client_id: string;\n  scope: string;\n  include_granted_scopes?: boolean;\n  prompt?: '' | 'none' | 'consent' | 'select_account';\n  enable_granular_consent?: boolean;\n  enable_serial_consent?: boolean;\n  login_hint?: string;\n  hint?: string;\n  hd?: string;\n  hosted_domain?: string;\n  state?: string;\n  callback: (tokenResponse: TokenResponse) => void;\n  error_callback?: (error: ClientConfigError) => void;\n}\n\ninterface CodeClientConfig {\n  client_id: string;\n  scope: string;\n  include_granted_scopes?: boolean;\n  redirect_uri?: string;\n  state?: string;\n  enable_granular_consent?: boolean;\n  enable_serial_consent?: boolean;\n  login_hint?: string;\n  hint?: string;\n  hd?: string;\n  hosted_domain?: string;\n  ux_mode?: 'popup' | 'redirect';\n  select_account?: boolean;\n  callback?: (response: CodeResponse) => void;\n  error_callback?: (error: ClientConfigError) => void;\n}\n\ninterface RevocationResponse {\n  successful: boolean;\n  error?: string;\n}\n\ninterface Credential {\n  id: string;\n  password: string;\n}\n\nexport interface CredentialResponse {\n  credential: string;\n  select_by: string;\n}\n\nexport interface IdConfiguration {\n  client_id: string;\n  auto_select?: boolean;\n  login_uri?: string;\n  cancel_on_tap_outside?: boolean;\n  prompt_parent_id?: string;\n  nonce?: string;\n  context?: 'signin' | 'signup' | 'use';\n  state_cookie_domain?: string;\n  ux_mode?: 'popup' | 'redirect';\n  allowed_parent_origin?: string | string[];\n  itp_support?: boolean;\n  login_hint?: string;\n  hd?: string;\n  use_fedcm_for_prompt?: boolean;\n  callback?: (response: CredentialResponse) => void;\n  native_callback?: (response: CredentialResponse) => void;\n  intermediate_iframe_close_callback?: () => void;\n}\n/**\n * ref: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc&utm_source=devtools&utm_campaign=stable#display_moment\n */\nexport interface PromptMomentNotification {\n  /** @deprecated */\n  isDisplayMoment(): boolean;\n\n  /** @deprecated */\n  isDisplayed(): boolean;\n\n  /** @deprecated */\n  isNotDisplayed(): boolean;\n\n  /** @deprecated */\n  getNotDisplayedReason():\n    | 'browser_not_supported'\n    | 'invalid_client'\n    | 'missing_client_id'\n    | 'opt_out_or_no_session'\n    | 'secure_http_required'\n    | 'suppressed_by_user'\n    | 'unregistered_origin'\n    | 'unknown_reason';\n\n  /** @deprecated */\n  getSkippedReason(): 'auto_cancel' | 'user_cancel' | 'tap_outside' | 'issuing_failed';\n\n  isSkippedMoment(): boolean;\n  isDismissedMoment(): boolean;\n  getDismissedReason(): 'credential_returned' | 'cancel_called' | 'flow_restarted';\n  getMomentType(): 'display' | 'skipped' | 'dismissed';\n}\n\ninterface GsiButtonConfiguration {\n  type: 'standard' | 'icon';\n  theme?: 'outline' | 'filled_blue' | 'filled_black';\n  size?: 'small' | 'medium' | 'large';\n  text?: 'signin_with' | 'signup_with' | 'continue_with' | 'signin';\n  shape?: 'rectangular' | 'pill' | 'circle' | 'square';\n  logo_alignment?: 'left' | 'center';\n  width?: number;\n  locale?: string;\n  state?: string;\n  click_listener?: () => void;\n}\n\nexport interface GoogleAccounts {\n  oauth2: {\n    initCodeClient(config: CodeClientConfig): CodeClient;\n    initTokenClient(config: TokenClientConfig): TokenClient;\n    hasGrantedAllScopes(\n      tokenResponse: TokenResponse,\n      firstScope: string,\n      ...restScopes: string[]\n    ): boolean;\n    hasGrantedAnyScope(\n      tokenResponse: TokenResponse,\n      firstScope: string,\n      ...restScopes: string[]\n    ): boolean;\n    revoke(accessToken: string, done: () => void): void;\n  };\n  id: {\n    initialize(idConfig: IdConfiguration): void;\n    prompt(momentListener?: (promptMomentNotification: PromptMomentNotification) => void): void;\n    renderButton(parent: HTMLElement, options: GsiButtonConfiguration): void;\n    disableAutoSelect(): void;\n    storeCredential(credential: Credential, callback?: () => void): void;\n    cancel(): void;\n    revoke(hint: string, callback?: (response: RevocationResponse) => void): void;\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/google-one-tap/types.d.cts

@@ -152,4 +152,4 @@ interface GoogleAccounts {
     };
 }
 
-export type { CredentialResponse, GoogleAccounts, IdConfiguration, PromptMomentNotification };
+export type { ClientConfigError, CodeResponse, CredentialResponse, GoogleAccounts, IdConfiguration, PromptMomentNotification };

package/dist/google-one-tap/types.d.ts

@@ -152,4 +152,4 @@ interface GoogleAccounts {
     };
 }
 
-export type { CredentialResponse, GoogleAccounts, IdConfiguration, PromptMomentNotification };
+export type { ClientConfigError, CodeResponse, CredentialResponse, GoogleAccounts, IdConfiguration, PromptMomentNotification };

package/dist/utils/google-tag-gateway.cjs

@@ -41,11 +41,11 @@ async function forwardToGoogleTagGateway(request, gaId) {
     headers.set("x-forwarded-region", region);
   }
   const hasBody = request.method !== "GET" && request.method !== "HEAD";
+  const body = hasBody ? await request.arrayBuffer() : void 0;
   const response = await fetch(target, {
     method: request.method,
     headers,
-    body: hasBody ? request.body : void 0,
-    ...hasBody && { duplex: "half" }
+    body
   });
   const responseHeaders = new Headers(response.headers);
   responseHeaders.delete("content-encoding");

package/dist/utils/google-tag-gateway.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/google-tag-gateway.ts"],"sourcesContent":["import { getGeolocation } from './geolocation';\n\n/**\n * In a browser, verify the setup by navigating to: https://example.com/metrics/healthy. The page\n * should read ok. Verify that geographical information is being included by navigating to:\n * https://example.com/metrics/?validate_geo=healthy. The page should read ok.\n */\nexport async function forwardToGoogleTagGateway(request: Request, gaId: string) {\n  const GATEWAY_HOST = `${gaId}.fps.goog`;\n  const { pathname, search } = new URL(request.url);\n\n  const target = `https://${GATEWAY_HOST}${pathname}${search}`;\n\n  const headers = new Headers();\n  headers.set('host', GATEWAY_HOST);\n\n  // Forward cookies\n  const cookie = request.headers.get('cookie');\n  if (cookie) headers.set('cookie', cookie);\n\n  // Convert Vercel geo headers to Google Tag Gateway format\n  // https://developers.google.com/tag-platform/tag-manager/gateway/setup-guide\n  const { country, region } = getGeolocation(request);\n\n  if (country && region) {\n    headers.set('x-forwarded-countryregion', `${country}-${region}`);\n  } else if (country) {\n    headers.set('x-forwarded-country', country);\n  } else if (region) {\n    headers.set('x-forwarded-region', region);\n  }\n\n  const hasBody = request.method !== 'GET' && request.method !== 'HEAD';\n  const response = await fetch(target, {\n    method: request.method,\n    headers,\n    body: hasBody ? request.body : undefined,\n    ...(hasBody && { duplex: 'half' as const }),\n  });\n\n  // Strip content-encoding/content-length because fetch() auto-decompresses\n  // but keeps the original headers, causing ERR_CONTENT_DECODING_FAILED\n  const responseHeaders = new Headers(response.headers);\n  responseHeaders.delete('content-encoding');\n  responseHeaders.delete('content-length');\n\n  return new Response(response.body, { status: response.status, headers: responseHeaders });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA+B;AAO/B,eAAsB,0BAA0B,SAAkB,MAAc;AAC9E,QAAM,eAAe,GAAG,IAAI;AAC5B,QAAM,EAAE,UAAU,OAAO,IAAI,IAAI,IAAI,QAAQ,GAAG;AAEhD,QAAM,SAAS,WAAW,YAAY,GAAG,QAAQ,GAAG,MAAM;AAE1D,QAAM,UAAU,IAAI,QAAQ;AAC5B,UAAQ,IAAI,QAAQ,YAAY;AAGhC,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,MAAI,OAAQ,SAAQ,IAAI,UAAU,MAAM;AAIxC,QAAM,EAAE,SAAS,OAAO,QAAI,mCAAe,OAAO;AAElD,MAAI,WAAW,QAAQ;AACrB,YAAQ,IAAI,6BAA6B,GAAG,OAAO,IAAI,MAAM,EAAE;AAAA,EACjE,WAAW,SAAS;AAClB,YAAQ,IAAI,uBAAuB,OAAO;AAAA,EAC5C,WAAW,QAAQ;AACjB,YAAQ,IAAI,sBAAsB,MAAM;AAAA,EAC1C;AAEA,QAAM,UAAU,QAAQ,WAAW,SAAS,QAAQ,WAAW;AAC/D,QAAM,WAAW,MAAM,MAAM,QAAQ;AAAA,IACnC,QAAQ,QAAQ;AAAA,IAChB;AAAA,IACA,MAAM,UAAU,QAAQ,OAAO;AAAA,IAC/B,GAAI,WAAW,EAAE,QAAQ,OAAgB;AAAA,EAC3C,CAAC;AAID,QAAM,kBAAkB,IAAI,QAAQ,SAAS,OAAO;AACpD,kBAAgB,OAAO,kBAAkB;AACzC,kBAAgB,OAAO,gBAAgB;AAEvC,SAAO,IAAI,SAAS,SAAS,MAAM,EAAE,QAAQ,SAAS,QAAQ,SAAS,gBAAgB,CAAC;AAC1F;","names":[]}
+{"version":3,"sources":["../../src/utils/google-tag-gateway.ts"],"sourcesContent":["import { getGeolocation } from './geolocation';\n\n/**\n * In a browser, verify the setup by navigating to: https://example.com/metrics/healthy. The page\n * should read ok. Verify that geographical information is being included by navigating to:\n * https://example.com/metrics/?validate_geo=healthy. The page should read ok.\n */\nexport async function forwardToGoogleTagGateway(request: Request, gaId: string) {\n  const GATEWAY_HOST = `${gaId}.fps.goog`;\n  const { pathname, search } = new URL(request.url);\n\n  const target = `https://${GATEWAY_HOST}${pathname}${search}`;\n\n  const headers = new Headers();\n  headers.set('host', GATEWAY_HOST);\n\n  // Forward cookies\n  const cookie = request.headers.get('cookie');\n  if (cookie) headers.set('cookie', cookie);\n\n  // Convert Vercel geo headers to Google Tag Gateway format\n  // https://developers.google.com/tag-platform/tag-manager/gateway/setup-guide\n  const { country, region } = getGeolocation(request);\n\n  if (country && region) {\n    headers.set('x-forwarded-countryregion', `${country}-${region}`);\n  } else if (country) {\n    headers.set('x-forwarded-country', country);\n  } else if (region) {\n    headers.set('x-forwarded-region', region);\n  }\n\n  const hasBody = request.method !== 'GET' && request.method !== 'HEAD';\n\n  // Buffer the body instead of streaming it. The conversion endpoint\n  // (g/measurement/conversion) answers POSTs with a 302 to www.google.com, and we want\n  // to follow that hop on the server so the browser never sees a Google domain (the whole\n  // point of the first-party gateway). Following a redirect requires re-issuing the\n  // request, which undici cannot do with a one-shot `request.body` stream — it throws\n  // \"fetch failed\", surfacing as a 500. A buffered body is replayable, so the redirect\n  // is followed transparently here.\n  const body = hasBody ? await request.arrayBuffer() : undefined;\n\n  const response = await fetch(target, {\n    method: request.method,\n    headers,\n    body,\n  });\n\n  // Strip content-encoding/content-length because fetch() auto-decompresses\n  // but keeps the original headers, causing ERR_CONTENT_DECODING_FAILED\n  const responseHeaders = new Headers(response.headers);\n  responseHeaders.delete('content-encoding');\n  responseHeaders.delete('content-length');\n\n  return new Response(response.body, { status: response.status, headers: responseHeaders });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA+B;AAO/B,eAAsB,0BAA0B,SAAkB,MAAc;AAC9E,QAAM,eAAe,GAAG,IAAI;AAC5B,QAAM,EAAE,UAAU,OAAO,IAAI,IAAI,IAAI,QAAQ,GAAG;AAEhD,QAAM,SAAS,WAAW,YAAY,GAAG,QAAQ,GAAG,MAAM;AAE1D,QAAM,UAAU,IAAI,QAAQ;AAC5B,UAAQ,IAAI,QAAQ,YAAY;AAGhC,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,MAAI,OAAQ,SAAQ,IAAI,UAAU,MAAM;AAIxC,QAAM,EAAE,SAAS,OAAO,QAAI,mCAAe,OAAO;AAElD,MAAI,WAAW,QAAQ;AACrB,YAAQ,IAAI,6BAA6B,GAAG,OAAO,IAAI,MAAM,EAAE;AAAA,EACjE,WAAW,SAAS;AAClB,YAAQ,IAAI,uBAAuB,OAAO;AAAA,EAC5C,WAAW,QAAQ;AACjB,YAAQ,IAAI,sBAAsB,MAAM;AAAA,EAC1C;AAEA,QAAM,UAAU,QAAQ,WAAW,SAAS,QAAQ,WAAW;AAS/D,QAAM,OAAO,UAAU,MAAM,QAAQ,YAAY,IAAI;AAErD,QAAM,WAAW,MAAM,MAAM,QAAQ;AAAA,IACnC,QAAQ,QAAQ;AAAA,IAChB;AAAA,IACA;AAAA,EACF,CAAC;AAID,QAAM,kBAAkB,IAAI,QAAQ,SAAS,OAAO;AACpD,kBAAgB,OAAO,kBAAkB;AACzC,kBAAgB,OAAO,gBAAgB;AAEvC,SAAO,IAAI,SAAS,SAAS,MAAM,EAAE,QAAQ,SAAS,QAAQ,SAAS,gBAAgB,CAAC;AAC1F;","names":[]}

package/dist/utils/google-tag-gateway.mjs

@@ -17,11 +17,11 @@ async function forwardToGoogleTagGateway(request, gaId) {
     headers.set("x-forwarded-region", region);
   }
   const hasBody = request.method !== "GET" && request.method !== "HEAD";
+  const body = hasBody ? await request.arrayBuffer() : void 0;
   const response = await fetch(target, {
     method: request.method,
     headers,
-    body: hasBody ? request.body : void 0,
-    ...hasBody && { duplex: "half" }
+    body
   });
   const responseHeaders = new Headers(response.headers);
   responseHeaders.delete("content-encoding");

package/dist/utils/google-tag-gateway.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/google-tag-gateway.ts"],"sourcesContent":["import { getGeolocation } from './geolocation';\n\n/**\n * In a browser, verify the setup by navigating to: https://example.com/metrics/healthy. The page\n * should read ok. Verify that geographical information is being included by navigating to:\n * https://example.com/metrics/?validate_geo=healthy. The page should read ok.\n */\nexport async function forwardToGoogleTagGateway(request: Request, gaId: string) {\n  const GATEWAY_HOST = `${gaId}.fps.goog`;\n  const { pathname, search } = new URL(request.url);\n\n  const target = `https://${GATEWAY_HOST}${pathname}${search}`;\n\n  const headers = new Headers();\n  headers.set('host', GATEWAY_HOST);\n\n  // Forward cookies\n  const cookie = request.headers.get('cookie');\n  if (cookie) headers.set('cookie', cookie);\n\n  // Convert Vercel geo headers to Google Tag Gateway format\n  // https://developers.google.com/tag-platform/tag-manager/gateway/setup-guide\n  const { country, region } = getGeolocation(request);\n\n  if (country && region) {\n    headers.set('x-forwarded-countryregion', `${country}-${region}`);\n  } else if (country) {\n    headers.set('x-forwarded-country', country);\n  } else if (region) {\n    headers.set('x-forwarded-region', region);\n  }\n\n  const hasBody = request.method !== 'GET' && request.method !== 'HEAD';\n  const response = await fetch(target, {\n    method: request.method,\n    headers,\n    body: hasBody ? request.body : undefined,\n    ...(hasBody && { duplex: 'half' as const }),\n  });\n\n  // Strip content-encoding/content-length because fetch() auto-decompresses\n  // but keeps the original headers, causing ERR_CONTENT_DECODING_FAILED\n  const responseHeaders = new Headers(response.headers);\n  responseHeaders.delete('content-encoding');\n  responseHeaders.delete('content-length');\n\n  return new Response(response.body, { status: response.status, headers: responseHeaders });\n}\n"],"mappings":";AAAA,SAAS,sBAAsB;AAO/B,eAAsB,0BAA0B,SAAkB,MAAc;AAC9E,QAAM,eAAe,GAAG,IAAI;AAC5B,QAAM,EAAE,UAAU,OAAO,IAAI,IAAI,IAAI,QAAQ,GAAG;AAEhD,QAAM,SAAS,WAAW,YAAY,GAAG,QAAQ,GAAG,MAAM;AAE1D,QAAM,UAAU,IAAI,QAAQ;AAC5B,UAAQ,IAAI,QAAQ,YAAY;AAGhC,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,MAAI,OAAQ,SAAQ,IAAI,UAAU,MAAM;AAIxC,QAAM,EAAE,SAAS,OAAO,IAAI,eAAe,OAAO;AAElD,MAAI,WAAW,QAAQ;AACrB,YAAQ,IAAI,6BAA6B,GAAG,OAAO,IAAI,MAAM,EAAE;AAAA,EACjE,WAAW,SAAS;AAClB,YAAQ,IAAI,uBAAuB,OAAO;AAAA,EAC5C,WAAW,QAAQ;AACjB,YAAQ,IAAI,sBAAsB,MAAM;AAAA,EAC1C;AAEA,QAAM,UAAU,QAAQ,WAAW,SAAS,QAAQ,WAAW;AAC/D,QAAM,WAAW,MAAM,MAAM,QAAQ;AAAA,IACnC,QAAQ,QAAQ;AAAA,IAChB;AAAA,IACA,MAAM,UAAU,QAAQ,OAAO;AAAA,IAC/B,GAAI,WAAW,EAAE,QAAQ,OAAgB;AAAA,EAC3C,CAAC;AAID,QAAM,kBAAkB,IAAI,QAAQ,SAAS,OAAO;AACpD,kBAAgB,OAAO,kBAAkB;AACzC,kBAAgB,OAAO,gBAAgB;AAEvC,SAAO,IAAI,SAAS,SAAS,MAAM,EAAE,QAAQ,SAAS,QAAQ,SAAS,gBAAgB,CAAC;AAC1F;","names":[]}
+{"version":3,"sources":["../../src/utils/google-tag-gateway.ts"],"sourcesContent":["import { getGeolocation } from './geolocation';\n\n/**\n * In a browser, verify the setup by navigating to: https://example.com/metrics/healthy. The page\n * should read ok. Verify that geographical information is being included by navigating to:\n * https://example.com/metrics/?validate_geo=healthy. The page should read ok.\n */\nexport async function forwardToGoogleTagGateway(request: Request, gaId: string) {\n  const GATEWAY_HOST = `${gaId}.fps.goog`;\n  const { pathname, search } = new URL(request.url);\n\n  const target = `https://${GATEWAY_HOST}${pathname}${search}`;\n\n  const headers = new Headers();\n  headers.set('host', GATEWAY_HOST);\n\n  // Forward cookies\n  const cookie = request.headers.get('cookie');\n  if (cookie) headers.set('cookie', cookie);\n\n  // Convert Vercel geo headers to Google Tag Gateway format\n  // https://developers.google.com/tag-platform/tag-manager/gateway/setup-guide\n  const { country, region } = getGeolocation(request);\n\n  if (country && region) {\n    headers.set('x-forwarded-countryregion', `${country}-${region}`);\n  } else if (country) {\n    headers.set('x-forwarded-country', country);\n  } else if (region) {\n    headers.set('x-forwarded-region', region);\n  }\n\n  const hasBody = request.method !== 'GET' && request.method !== 'HEAD';\n\n  // Buffer the body instead of streaming it. The conversion endpoint\n  // (g/measurement/conversion) answers POSTs with a 302 to www.google.com, and we want\n  // to follow that hop on the server so the browser never sees a Google domain (the whole\n  // point of the first-party gateway). Following a redirect requires re-issuing the\n  // request, which undici cannot do with a one-shot `request.body` stream — it throws\n  // \"fetch failed\", surfacing as a 500. A buffered body is replayable, so the redirect\n  // is followed transparently here.\n  const body = hasBody ? await request.arrayBuffer() : undefined;\n\n  const response = await fetch(target, {\n    method: request.method,\n    headers,\n    body,\n  });\n\n  // Strip content-encoding/content-length because fetch() auto-decompresses\n  // but keeps the original headers, causing ERR_CONTENT_DECODING_FAILED\n  const responseHeaders = new Headers(response.headers);\n  responseHeaders.delete('content-encoding');\n  responseHeaders.delete('content-length');\n\n  return new Response(response.body, { status: response.status, headers: responseHeaders });\n}\n"],"mappings":";AAAA,SAAS,sBAAsB;AAO/B,eAAsB,0BAA0B,SAAkB,MAAc;AAC9E,QAAM,eAAe,GAAG,IAAI;AAC5B,QAAM,EAAE,UAAU,OAAO,IAAI,IAAI,IAAI,QAAQ,GAAG;AAEhD,QAAM,SAAS,WAAW,YAAY,GAAG,QAAQ,GAAG,MAAM;AAE1D,QAAM,UAAU,IAAI,QAAQ;AAC5B,UAAQ,IAAI,QAAQ,YAAY;AAGhC,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,MAAI,OAAQ,SAAQ,IAAI,UAAU,MAAM;AAIxC,QAAM,EAAE,SAAS,OAAO,IAAI,eAAe,OAAO;AAElD,MAAI,WAAW,QAAQ;AACrB,YAAQ,IAAI,6BAA6B,GAAG,OAAO,IAAI,MAAM,EAAE;AAAA,EACjE,WAAW,SAAS;AAClB,YAAQ,IAAI,uBAAuB,OAAO;AAAA,EAC5C,WAAW,QAAQ;AACjB,YAAQ,IAAI,sBAAsB,MAAM;AAAA,EAC1C;AAEA,QAAM,UAAU,QAAQ,WAAW,SAAS,QAAQ,WAAW;AAS/D,QAAM,OAAO,UAAU,MAAM,QAAQ,YAAY,IAAI;AAErD,QAAM,WAAW,MAAM,MAAM,QAAQ;AAAA,IACnC,QAAQ,QAAQ;AAAA,IAChB;AAAA,IACA;AAAA,EACF,CAAC;AAID,QAAM,kBAAkB,IAAI,QAAQ,SAAS,OAAO;AACpD,kBAAgB,OAAO,kBAAkB;AACzC,kBAAgB,OAAO,gBAAgB;AAEvC,SAAO,IAAI,SAAS,SAAS,MAAM,EAAE,QAAQ,SAAS,QAAQ,SAAS,gBAAgB,CAAC;AAC1F;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shware/http",
-  "version": "2.10.4",
+  "version": "2.11.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -40,7 +40,7 @@
   "dependencies": {
     "vitest": "^4.1.5",
     "zod": "^4.4.3",
-    "@shware/utils": "^1.4.1"
+    "@shware/utils": "^1.4.2"
   },
   "devDependencies": {
     "@types/node": "^25",